- some program may access to /dev/random by using random function
For that, add /dev bind mount until finding better way
- Tizen application cannot write some volatile data to /opt/var
For that, provide /tmp mount until finding better way
}
mount {
- src: "/usr"
- dst: "/usr"
+ src: "/usr/share"
+ dst: "/usr/share"
is_bind: true
nosuid: true
nodev: true
rw: false
}
+mount {
+ src: "/usr/lib"
+ dst: "/usr/lib"
+ is_bind: true
+ nosuid: true
+ nodev: true
+ rw: false
+}
+
+mount {
+ src: "/usr/bin"
+ dst: "/usr/bin"
+ is_bind: true
+ nosuid: true
+ nodev: true
+ rw: false
+}
+
+mount {
+ src: "/tmp"
+ dst: "/tmp"
+ is_bind: true
+ nosuid: true
+ nodev: true
+ rw: true
+}
+
+mount {
+ src: "/dev"
+ dst: "/dev"
+ is_bind: true
+ nosuid: true
+ nodev: false
+ rw: false
+}
+
# Seccomp settings
seccomp_string: "ALLOW {"
seccomp_string: " SYSCALL[1]," #exit