From 503d7b66b6bd19f2b2ada1568d95037c36d450aa Mon Sep 17 00:00:00 2001 From: Ashley Hawkins Date: Wed, 17 Dec 2025 18:37:49 +0000 Subject: [PATCH] fix: allow access to /dev/null --- cmd/wireproxy/main.go | 1 + 1 file changed, 1 insertion(+) diff --git a/cmd/wireproxy/main.go b/cmd/wireproxy/main.go index 713943a..b08f768 100644 --- a/cmd/wireproxy/main.go +++ b/cmd/wireproxy/main.go @@ -80,6 +80,7 @@ func lock(stage string) { // Linux panicIfError(landlock.V1.BestEffort().RestrictPaths( landlock.RODirs("/"), + landlock.RWFiles("/dev/null").IgnoreIfMissing(), )) case "boot-daemon": case "read-config":