Assistant: Enter jail mode until calling the execve syscall

Otherwise, programs will inherit the jailing property which might lead
to undesired behavior (such as `Terminal` running jailed `Shell`, for
example).
This commit is contained in:
Liav A. 2024-09-03 11:44:44 +03:00
parent ca5680b4eb
commit 2ab2648728

View file

@ -148,7 +148,7 @@ ErrorOr<int> serenity_main(Main::Arguments arguments)
{
TRY(Core::System::pledge("stdio recvfd sendfd rpath cpath unix proc exec thread map_fixed"));
TRY(Core::System::enter_jail_mode_until_exit());
TRY(Core::System::enter_jail_mode_until_exec());
Core::LockFile lockfile("/tmp/lock/assistant.lock");