diff options
author | Michael McVady <femtonaut@gmail.com> | 2022-03-31 20:42:48 -0500 |
---|---|---|
committer | Michael McVady <femtonaut@gmail.com> | 2022-03-31 21:13:05 -0500 |
commit | 9841c38342be0f6fa6f4f69eb62141d5fd45b78c (patch) | |
tree | c518bba0dc42c9f7b3a450f99444d693f24ba82f /conf | |
parent | 0a0b7d12dd9c8ce5d936916baaba606d1d0f0bde (diff) |
chroot
Diffstat (limited to 'conf')
-rw-r--r-- | conf/build.conf | 2 | ||||
-rw-r--r-- | conf/clog.conf | 8 |
2 files changed, 9 insertions, 1 deletions
diff --git a/conf/build.conf b/conf/build.conf index ad7518b..51707fb 100644 --- a/conf/build.conf +++ b/conf/build.conf @@ -5,7 +5,7 @@ # of a dynamic library. If you set this to yes you must also # set kore_source together with kore_flavor. # single_binary=yes -# kore_source=/home/mcvady/working/kore/ +# kore_source=/home/mcvady/working/kore-4.2.0/ # kore_flavor=NOTLS=1 PGSQL=1 INSTALL_SINGLE_BINARY=1 # The flags below are shared between flavors diff --git a/conf/clog.conf b/conf/clog.conf index 82c3df7..ca23f0a 100644 --- a/conf/clog.conf +++ b/conf/clog.conf @@ -9,6 +9,11 @@ load ./clog.so init workers 4 +privsep worker { + runas kore + root /var/chroot/kore +} + # seccomp_tracing no seccomp_tracing yes @@ -28,4 +33,7 @@ domain * { route ^/posts/[a-z0-9\-]+$ { handler post } + + # route /test_json render_posts_json + } |