From 9841c38342be0f6fa6f4f69eb62141d5fd45b78c Mon Sep 17 00:00:00 2001
From: Michael McVady <femtonaut@gmail.com>
Date: Thu, 31 Mar 2022 20:42:48 -0500
Subject: chroot

---
 conf/build.conf | 2 +-
 conf/clog.conf  | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

(limited to 'conf')

diff --git a/conf/build.conf b/conf/build.conf
index ad7518b..51707fb 100644
--- a/conf/build.conf
+++ b/conf/build.conf
@@ -5,7 +5,7 @@
 # of a dynamic library. If you set this to yes you must also
 # set kore_source together with kore_flavor.
 # single_binary=yes
-# kore_source=/home/mcvady/working/kore/
+# kore_source=/home/mcvady/working/kore-4.2.0/
 # kore_flavor=NOTLS=1 PGSQL=1 INSTALL_SINGLE_BINARY=1
 
 # The flags below are shared between flavors
diff --git a/conf/clog.conf b/conf/clog.conf
index 82c3df7..ca23f0a 100644
--- a/conf/clog.conf
+++ b/conf/clog.conf
@@ -9,6 +9,11 @@ load ./clog.so init
 
 workers 4
 
+privsep worker {
+	runas        kore
+	root        /var/chroot/kore
+}
+
 # seccomp_tracing no
 seccomp_tracing yes
 
@@ -28,4 +33,7 @@ domain * {
 	route ^/posts/[a-z0-9\-]+$ {
 		handler post
 	}
+
+	# route /test_json render_posts_json
+
 }
-- 
cgit v1.2.3