mirror of
https://github.com/openglow-org/forgefirm.git
synced 2026-10-15 17:19:55 -07:00
ScottW514
56aa164708
- forgeext e09f7b8 -> bb75b23 (0.1.3 -> 0.1.4): sandbox_test opens the machine's own files from inside the sandbox - /dev/glowforge, /data/forgefirm/forgefirm.conf, /data/forgefirm/setup.json - and requires EACCES of each (ENOENT is no pass; a file the host lacks is made for the run, readable by every account, and removed after). Test-only; nothing the image installs changes. Proof: forgeext's CI run on bb75b23 (38780750106) is green on a kernel with Landlock ABI 7; its log shows the three files made for the run and each open refused with EACCES (sandbox_test, 0 failures). bitbake -c fetch forgeext from this pin succeeds (2 tasks).
9 lines
367 B
PHP
9 lines
367 B
PHP
# SPDX-License-Identifier: MIT
|
|
|
|
# forgeext pin. Bump deliberately after pushing forgeext changes; keep
|
|
# only SRCREV and PV here - the image manifest leaves *-pin.inc out of the
|
|
# layer content hash because the component entry already identifies the
|
|
# pinned source (forgefirm-image-manifest.bbclass).
|
|
SRCREV = "bb75b23088b6ecce502ee3122bfb089b1c2641f1"
|
|
PV = "0.1.4"
|