fix: create chromium policy mountpoint before sandboxing #26
Loading…
Reference in a new issue
No description provided.
Delete branch "dev-bot/fix-chromium-policy-mount"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Create real Chromium policy mountpoints before Bubblewrap makes the root read-only, preserve generated managed policies, and cover the setup with the focused Nix check. Verified with the student-chromium-policy build, shell syntax validation, and a runtime Bubblewrap bind-mount test.