Keep the host's region out of the sudo boundary sandboxes
This commit is contained in:
1 parent
6fe83bfa47
commit
dff33f16e3
3 files changed
+3
-2
No files matched your search
@@ -32,6 +32,9 @@ PY
|
||||
copy_boundary_file bin/omarchy-security-functions
|
||||
copy_boundary_file bin/omarchy-update-pacman
|
||||
copy_boundary_file default/omarchy/sudo-no-update/sudo
|
||||
# The host's own region must not leak into the sandbox.
|
||||
printf '#!/bin/bash\necho Global\n' >"$SUDO_TEST_ROOT/bin/omarchy-region"
|
||||
chmod +x "$SUDO_TEST_ROOT/bin/omarchy-region"
|
||||
|
||||
cat >"$SUDO_TEST_ROOT/mock/sudo" <<'STUB'
|
||||
#!/bin/bash
|
||||
|
||||
Reference in new issue
Block a user