Keep the host's region out of the sudo boundary sandboxes

This commit is contained in:
ZacharyZhang-NY committed 2026-10-06 02:23:31 -04:00
1 parent 6fe83bfa47
commit dff33f16e3
3 files changed
+3 -2

No files matched your search

@@ -32,6 +32,9 @@ PY
copy_boundary_file bin/omarchy-security-functions
copy_boundary_file bin/omarchy-update-pacman
copy_boundary_file default/omarchy/sudo-no-update/sudo
# The host's own region must not leak into the sandbox.
printf '#!/bin/bash\necho Global\n' >"$SUDO_TEST_ROOT/bin/omarchy-region"
chmod +x "$SUDO_TEST_ROOT/bin/omarchy-region"
cat >"$SUDO_TEST_ROOT/mock/sudo" <<'STUB'
#!/bin/bash