commit c6ea63a3b508e57b0b22fa7f4632aba7aab892d1
author James Kuszmaul <jabukuszmaul+collab@gmail.com> Wed Sep 06 20:36:46 2023 -0700
committer James Kuszmaul <jabukuszmaul+collab@gmail.com> Wed Sep 06 21:13:48 2023 -0700
tree cecb43e2417a1f257a525249e23ec054f8387b0e
parent edebe941c2662421013f66e3b2fb886538e14cd7

Fix ssh/scp/rsync sandboxing

Change-Id: I1e94c028fafa78d4792a50790a76ab32bc4e10b2
Signed-off-by: James Kuszmaul <jabukuszmaul+collab@gmail.com>

debian/BUILD

diff --git a/debian/BUILD b/debian/BUILD
index e2a8541..d8f1753 100644
--- a/debian/BUILD
+++ b/debian/BUILD
@@ -112,6 +112,27 @@
 )
 
 download_packages(
+    name = "download_rsync_packages",
+    excludes = [
+    ],
+    packages = [
+        "rsync",
+    ],
+)
+
+download_packages(
+    name = "download_ssh_packages",
+    excludes = [
+        "libcbor0.8",
+        "libsemanage2",
+        "libsepol2",
+    ],
+    packages = [
+        "ssh",
+    ],
+)
+
+download_packages(
     name = "download_gtk_runtime",
     excludes = [
         "libstdc++6",
@@ -425,6 +446,7 @@
 
 exports_files([
     "ssh_wrapper.sh",
+    "rsync_wrapper.sh",
     "curl.BUILD",
     "BUILD.zlib.bazel",
 ])