aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/system.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-02-19 01:36:07 +0900
committerOphestra <cat@gensokyo.uk>2025-02-19 01:36:29 +0900
commitdfd94675236844ebcec9ea51f2547ad4fd049357 (patch)
tree16571c77c980054423a5e1a1909251cbd37f13e4 /internal/app/system.go
parent53571f030e86884bc13fe1d3760ac6bf51d2938b (diff)
app: merge seal with sys
The existence of the appSealSys struct was an implementation detail obsolete since system.I was integrated in 084cd84f36a1d608541b4aa4e1e95334395d8953. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/system.go')
-rw-r--r--internal/app/system.go48
1 files changed, 0 insertions, 48 deletions
diff --git a/internal/app/system.go b/internal/app/system.go
deleted file mode 100644
index 3a92b0fd..00000000
--- a/internal/app/system.go
+++ /dev/null
@@ -1,48 +0,0 @@
-package app
-
-import (
- "os"
-
- "git.gensokyo.uk/security/fortify/helper/bwrap"
- "git.gensokyo.uk/security/fortify/system"
-)
-
-// appSealSys encapsulates app seal behaviour with OS interactions
-type appSealSys struct {
- bwrap *bwrap.Config
- // bwrap sync fd
- sp *os.File
- // paths to override by mounting tmpfs over them
- override []string
-
- // default formatted XDG_RUNTIME_DIR of User
- runtime string
- // target user sealed from config
- user appUser
-
- // mapped uid and gid in user namespace
- mapuid *stringPair[int]
-
- needRevert bool
- saveState bool
- *system.I
-
- // protected by upstream mutex
-}
-
-type appUser struct {
- // application id
- aid *stringPair[int]
- // target uid resolved by fid:aid
- uid *stringPair[int]
-
- // supplementary group ids
- supp []string
-
- // home directory host path
- data string
- // app user home directory
- home string
- // passwd database username
- username string
-}