mirror of
https://github.com/vhaudiquet/ecrou.git
synced 2026-11-12 22:22:44 +00:00
The SPEC bar for T6 is failure on a single hit from the denied set; the errno-based check only caught attempts the snap's seccomp allowlist had already denied, so a host mount that succeeded would have passed. Exact-name matching over the traced call also stops "mount" matching "umount2" lines.