olcxjas-softworks/PLWL
2
0
Fork 0
Code Issues Pull requests Projects Releases 16 Packages Wiki Activity Actions

[linux apps] fix hostname bind

Browse source
This commit is contained in:
olcxja 2026-10-07 16:40:26 +02:00
commit d58967237c
2 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/sandbox.js
View file

@ -146,9 +146,6 @@ function buildBwrapArgs({
...(urlOpener && urlOpener.shim ? ['--ro-bind', urlOpener.shim, urlOpener.target] : []),
// hard profile: nothing of anybody's /home is even readable
...(hideHome ? ['--tmpfs', '/home', '--tmpfs', '/root', '--tmpfs', '/mnt', '--tmpfs', '/media'] : []),
// the app's own folder stays writable (portable apps keep logs/data next
// to themselves); the rest of the read-only root does not
...(appDir ? ['--bind', appDir, appDir] : []),
// --- app data (host paths bound to a fresh HOME) ---
'--bind', path.join(dataRoot, 'home'), home,
'--bind', path.join(dataRoot, 'config'), xdgDir('.config'),
@ -158,6 +155,11 @@ function buildBwrapArgs({
// Wayland, PipeWire, PulseAudio and the session bus all live here
...(runUser ? ['--bind', runUser, runUser] : []),
...(etcRoot ? ['--bind', etcRoot, '/etc'] : []),
// the app's own folder stays writable (portable apps keep logs/data next
// to themselves). Last, because an imported app lives under the host's home
// and the home bind above would otherwise mount over and hide it - bwrap
// then fails with "execvp <app>: No such file or directory".
...(appDir ? ['--bind', appDir, appDir] : []),
// --- environment ---
'--setenv', 'HOME', home,
'--setenv', 'XDG_CONFIG_HOME', xdgDir('.config'),