use bwrap --new-session to prevent tty hijacking

`man bwrap` > Create a new terminal session for the sandbox (calls setsid()). https://www.openwall.com/lists/oss-security/2017/06/03/9 ncopa/su-exec#23 tianon/gosu#37 https://ruderich.org/simon/notes/su-sudo-from-root-tty-hijacking Relates-to: #2
Piraty · Feb 17, 2023 · ed062f6 · ed062f6
1 parent 82869d3
commit ed062f6
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/bubblejail b/bubblejail
@@ -265,6 +265,7 @@ exec env -i bwrap \
 	--symlink /tmp var/tmp \
 	--dir "$HOME" \
 	--chdir "$HOME" \
+	--new-session \
 	--as-pid-1 \
 	--die-with-parent \
 	--setenv PATH /usr/bin \