Commit 4dabc764 authored by Kevin Lyda's avatar Kevin Lyda
Browse files

/dev/tty needs to be read-write

parent 00bb5a5d

security/sandbox_linux.go

+2 −1
Original line number Diff line number Diff line
@@ -51,7 +51,8 @@ func InitSandbox() error { 
		// The bulletin binary itself (needed for os.Executable()).

		landlock.ROFiles("/proc/self/exe"),

		// Device files needed by Go runtime and terminal libraries.

		landlock.ROFiles("/dev/null", "/dev/urandom", "/dev/tty"),

		landlock.ROFiles("/dev/null", "/dev/urandom"),

		landlock.RWFiles("/dev/tty"),

		// Terminfo databases for tcell/readline.

		landlock.RODirs(roDirs...),

		// Allow outbound HTTPS for SSH FETCH from forges.