diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-03-17 02:31:46 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-03-17 02:44:07 +0900 |
| commit | 9a1f8e129fe0f9919981b8a1d345a9b455bd76de (patch) | |
| tree | e52f33a3908c256aebb30f059cabd40f371a886f /internal/app/init0/main.go | |
| parent | ee108603572101ad3c285830e04ee248916b6c5d (diff) | |
sandbox: wrap fmsg interface
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/init0/main.go')
| -rw-r--r-- | internal/app/init0/main.go | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/internal/app/init0/main.go b/internal/app/init0/main.go index fe2f9aef..83033134 100644 --- a/internal/app/init0/main.go +++ b/internal/app/init0/main.go @@ -12,6 +12,7 @@ import ( "git.gensokyo.uk/security/fortify/helper/proc" "git.gensokyo.uk/security/fortify/internal" "git.gensokyo.uk/security/fortify/internal/fmsg" + "git.gensokyo.uk/security/fortify/internal/sandbox" ) const ( @@ -28,7 +29,7 @@ func Main() { fmsg.Prepare("init0") // setting this prevents ptrace - if err := internal.SetDumpable(internal.SUID_DUMP_DISABLE); err != nil { + if err := sandbox.SetDumpable(sandbox.SUID_DUMP_DISABLE); err != nil { log.Fatalf("cannot set SUID_DUMP_DISABLE: %s", err) } @@ -64,7 +65,7 @@ func Main() { } // die with parent - if err := internal.SetPdeathsig(syscall.SIGKILL); err != nil { + if err := sandbox.SetPdeathsig(syscall.SIGKILL); err != nil { log.Fatalf("prctl(PR_SET_PDEATHSIG, SIGKILL): %v", err) } |
