mirror of
https://github.com/freedomofpress/dangerzone.git
synced 2025-04-29 02:12:36 +02:00
73b0f8b7d4
DirectFS is enabled by default in gVisor to improve I/O performance, but comes at the cost of enabling the `openat(2)` syscall (with severe restrictions, but still). As Dangerzone is not performance-sensitive, and that it is desirable to guarantee for the document conversion process to not open any files (to mimic some of what SELinux provides), might as well disable it by default. See #226. |
||
|---|---|---|
| .. | ||
| conversion | ||
| gui | ||
| gvisor_wrapper | ||
| isolation_provider | ||
| __init__.py | ||
| args.py | ||
| cli.py | ||
| document.py | ||
| errors.py | ||
| logic.py | ||
| settings.py | ||
| util.py | ||