aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/init0/main.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-03-17 02:31:46 +0900
committerOphestra <cat@gensokyo.uk>2025-03-17 02:44:07 +0900
commit9a1f8e129fe0f9919981b8a1d345a9b455bd76de (patch)
treee52f33a3908c256aebb30f059cabd40f371a886f /internal/app/init0/main.go
parentee108603572101ad3c285830e04ee248916b6c5d (diff)
sandbox: wrap fmsg interface
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/init0/main.go')
-rw-r--r--internal/app/init0/main.go5
1 files changed, 3 insertions, 2 deletions
diff --git a/internal/app/init0/main.go b/internal/app/init0/main.go
index fe2f9aef..83033134 100644
--- a/internal/app/init0/main.go
+++ b/internal/app/init0/main.go
@@ -12,6 +12,7 @@ import (
"git.gensokyo.uk/security/fortify/helper/proc"
"git.gensokyo.uk/security/fortify/internal"
"git.gensokyo.uk/security/fortify/internal/fmsg"
+ "git.gensokyo.uk/security/fortify/internal/sandbox"
)
const (
@@ -28,7 +29,7 @@ func Main() {
fmsg.Prepare("init0")
// setting this prevents ptrace
- if err := internal.SetDumpable(internal.SUID_DUMP_DISABLE); err != nil {
+ if err := sandbox.SetDumpable(sandbox.SUID_DUMP_DISABLE); err != nil {
log.Fatalf("cannot set SUID_DUMP_DISABLE: %s", err)
}
@@ -64,7 +65,7 @@ func Main() {
}
// die with parent
- if err := internal.SetPdeathsig(syscall.SIGKILL); err != nil {
+ if err := sandbox.SetPdeathsig(syscall.SIGKILL); err != nil {
log.Fatalf("prctl(PR_SET_PDEATHSIG, SIGKILL): %v", err)
}