Merge pull request #170 from rancherlabs/mirrored

pjbgf · web-flow · commit 3cf520cf69c7 · 2025-10-28T21:25:40.000Z
landlock: Grant permission for artefact handling
diff --git a/internal/landlock/landlock.go b/internal/landlock/landlock.go
@@ -38,7 +38,8 @@ func EnforceOrDie() {
 	}
 
 	rwDirs := []string{
-		filepath.Join(home, ".sigstore"), // Sigstore TUF DB.
+		filepath.Join(home, ".sigstore"),         // Sigstore TUF DB.
+		filepath.Join(home, ".docker", "buildx"), // Image artefacts handling.
 	}
 
 	cwd, err := os.Getwd()

Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,8 @@ func EnforceOrDie() {`
`38`	`38`	`}`
`39`	`39`
`40`	`40`	`rwDirs := []string{`
`41`		`- filepath.Join(home, ".sigstore"), // Sigstore TUF DB.`
	`41`	`+ filepath.Join(home, ".sigstore"), // Sigstore TUF DB.`
	`42`	`+ filepath.Join(home, ".docker", "buildx"), // Image artefacts handling.`
`42`	`43`	`}`
`43`	`44`
`44`	`45`	`cwd, err := os.Getwd()`