sbctl export-enrolled-keys complains about output directory

[jojoob]

sbctl export-enrolled-keys always complains about the output directory on my machine:

# sbctl export-enrolled-keys --dir /tmp/foo
populating ruleset for "/tmp/foo" with access {execute,write_file,read_file}: open: no such file or directory
# mkdir /tmp/foo
# sbctl export-enrolled-keys --dir /tmp/foo
creating the output directory: directory already exists

Do I miss something or is it broken?

I'm on Arch Linux with sbclt 0.16.

[Foxboron]

Try to disable the sandbox with --disable-landlock

[jojoob]

sbctl export-enrolled-keys --disable-landlock --dir /tmp/foo works! (without creating the output directory before) Thanks @Foxboron 👍

[Foxboron]

The output dir needs filepath.Base and RWDirs for landlock to work.

https://github.com/Foxboron/sbctl/blob/master/cmd/sbctl/export-enrolled-keys.go#L34