| % minijail-config-file v0 | |
| # Copyright 2024 The ChromiumOS Authors | |
| # Use of this source code is governed by a BSD-style license that can be | |
| # found in the LICENSE file. | |
| i | |
| l | |
| n | |
| N | |
| p | |
| r | |
| ns-mount | |
| uts | |
| mount-dev | |
| u = saned | |
| g = scanner | |
| G | |
| P = /mnt/empty | |
| bind-mount = / | |
| bind-mount = /proc | |
| bind-mount = /sys | |
| bind-mount = /dev/log | |
| bind-mount = /dev/bus/usb | |
| mount = run,/run,tmpfs,MS_NOSUID|MS_NODEV|MS_NOEXEC | |
| bind-mount = /run/dbus | |
| bind-mount = /run/udev | |
| # Need to recursively mount DLC paths to access installed DLCs. | |
| mount = /run/imageloader,/run/imageloader,none,MS_BIND|MS_REC | |
| bind-mount = /run/ippusb,/run/ippusb,1 | |
| bind-mount = /run/lorgnette,/run/lorgnette,1 | |
| mount = var,/var,tmpfs,MS_NOSUID|MS_NODEV|MS_NOEXEC | |
| bind-mount = /var/lib/metrics,/var/lib/metrics,1 | |
| bind-mount = /var/log/lorgnette,/var/log/lorgnette,1 |