sandbox: mount dev/shm

sixtyfourktec · sixtyfourktec · commit 0034bc0e0008 · 2025-02-05T11:20:29.000+01:00
Some tools use this while building. E.g. the python multiprocessing
library uses this for its locking mechanism.
diff --git a/src/namespace-sandbox/namespace-sandbox.c b/src/namespace-sandbox/namespace-sandbox.c
@@ -431,6 +431,9 @@ static void SetupDevices() {
   CHECK_CALL(mount("devpts", "dev/pts", "devpts", MS_NOSUID | MS_NOEXEC, "ptmxmode=0666"));
   CHECK_CALL(symlink("pts/ptmx", "dev/ptmx"));
 
+  CreateTarget("dev/shm", true);
+  CHECK_CALL(mount("tmpfs", "dev/shm", "tmpfs", MS_NOSUID | MS_NODEV, NULL));
+
   CHECK_CALL(symlink("/proc/self/fd", "dev/fd"));
 }
 

Original file line number	Diff line number	Diff line change
`@@ -431,6 +431,9 @@ static void SetupDevices() {`
`431`	`431`	`CHECK_CALL(mount("devpts", "dev/pts", "devpts", MS_NOSUID \| MS_NOEXEC, "ptmxmode=0666"));`
`432`	`432`	`CHECK_CALL(symlink("pts/ptmx", "dev/ptmx"));`
`433`	`433`
	`434`	`+ CreateTarget("dev/shm", true);`
	`435`	`+ CHECK_CALL(mount("tmpfs", "dev/shm", "tmpfs", MS_NOSUID \| MS_NODEV, NULL));`
	`436`	`+`
`434`	`437`	`CHECK_CALL(symlink("/proc/self/fd", "dev/fd"));`
`435`	`438`	`}`
`436`	`439`