hakurei/cmd/fsu/main.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/cmd/fsu/main.go?h=develop2025-06-24T19:57:41Ztreewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fsu: allow switch from fpkg2025-02-26T10:42:28ZOphestracat@gensokyo.uk2025-02-26T10:42:28Zurn:sha1:45ad788c6d03bf368010fa8e2a39028bdf0fc078
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fsu: check parse behaviour2025-02-14T07:43:55ZOphestracat@gensokyo.uk2025-02-14T07:43:55Zurn:sha1:1fd571d5619459bd29077b84418d913a8c5462a0
Signed-off-by: Ophestra <cat@gensokyo.uk>
proc/priv/shim: merge shim into main program2025-01-17T14:43:32ZOphestracat@gensokyo.uk2025-01-17T14:43:32Zurn:sha1:ea8f228af36b2c9ae9918f7760c3af4f1e21cfa2
Signed-off-by: Ophestra <cat@gensokyo.uk>
cmd/fshim: switch to setup pipe2024-12-18T10:39:25ZOphestra Umikercat@ophivana.moe2024-12-18T10:39:25Zurn:sha1:52f21a19f3230e62387bebb88d45d51b6375ac8d
The socket-based approach is no longer necessary as fsu allows extra files and sudo compatibility is no longer relevant.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
cmd/fsu: check uid range before syscall2024-12-17T04:01:36ZOphestra Umikercat@ophivana.moe2024-12-17T04:01:36Zurn:sha1:b453f70ca2016d8ab791968a3f2bc9ba2425bd2f
This limits potential exploits to the fortify uid range.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
app: integrate fsu2024-11-16T12:19:45ZOphestra Umikercat@ophivana.moe2024-11-16T12:19:45Zurn:sha1:df33123bd7f1e0cb4e98580b7e63818c82aa7206
This removes the dependency on external user switchers like sudo/machinectl and decouples fortify user ids from the passwd database.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
cmd/fshim: set no_new_privs flag2024-11-09T02:50:56ZOphestra Umikercat@ophivana.moe2024-11-09T02:50:56Zurn:sha1:45fead18c377abcf5138f26b4908389f34d2ba60
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
cmd/fsu: remove import of internal package2024-11-04T03:32:14ZOphestra Umikercat@ophivana.moe2024-11-04T03:32:14Zurn:sha1:88abcbe0b2379b98fdf62a54432fd12aca752d3a
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
cmd: shim and init into separate binaries2024-11-01T18:13:57ZOphestra Umikercat@ophivana.moe2024-11-01T18:03:44Zurn:sha1:584732f80ab91afb349720cfb8e9979ed2ba173e
This change also fixes a deadlock when shim fails to connect and complete the setup.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>