pufferffish / wireproxy

Wireguard client that exposes itself as a socks5 proxy
ISC License
4.54k stars 272 forks source link

Fix broken sandboxing resulting in SIGABRT #136

Closed tazz4843 closed 2 months ago

tazz4843 commented 2 months ago

Something in wireproxy calls landlock_create_ruleset, which triggers systemd killing the unit as that's not in the allowed syscall list. Easiest fix here is allowing it to call said fn.