only rwc /dev/shm when WITHOUT_SHM is undefined

1 files changed, 2 insertions, 0 deletions

diff --git a/sandbox.c b/sandbox.c
index 07a3094..c45587a 100644
--- a/sandbox.c
+++ b/sandbox.c
@@ -149,7 +149,9 @@ void sbox_enter(const char *basedir)
 
     LANDLOCK_PATH(basedir,                LL_RWCD);
     LANDLOCK_PATH("/tmp",                 LL_RWCD);
+#ifndef WITHOUT_SHM
     LANDLOCK_PATH("/dev/shm",             LL_RWCF);
+#endif
     LANDLOCK_PATH("/etc/resolv.conf",     LL_R  );
     LANDLOCK_PATH("/etc/hosts",           LL_R  );
     LANDLOCK_PATH("/etc/ssl/openssl.cnf", LL_R  );