Allan McRae pushed to branch master at Pacman / Pacman

Commits:

• f142df92
  by Remi Gacogne at 2024-08-02T00:39:45+00:00

  Restrict syscalls for the download process whenever possible
  
  Signed-off-by: Remi Gacogne <rgacogne@archlinux.org>
  

• cf473bcf
  by Remi Gacogne at 2024-08-02T00:39:45+00:00

  Ensure that the download process cannot get new privileges
  
  Signed-off-by: Remi Gacogne <rgacogne@archlinux.org>
  

8 changed files:

• lib/libalpm/alpm.h
• lib/libalpm/dload.c
• lib/libalpm/meson.build
• lib/libalpm/sandbox.c
• + lib/libalpm/sandbox_syscalls.c
• + lib/libalpm/sandbox_syscalls.h
• meson.build
• src/pacman/conf.c