diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-02-19 01:36:07 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-02-19 01:36:29 +0900 |
| commit | dfd94675236844ebcec9ea51f2547ad4fd049357 (patch) | |
| tree | 16571c77c980054423a5e1a1909251cbd37f13e4 /internal/app/system.go | |
| parent | 53571f030e86884bc13fe1d3760ac6bf51d2938b (diff) | |
app: merge seal with sys
The existence of the appSealSys struct was an implementation detail obsolete since system.I was integrated in 084cd84f36a1d608541b4aa4e1e95334395d8953.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/system.go')
| -rw-r--r-- | internal/app/system.go | 48 |
1 files changed, 0 insertions, 48 deletions
diff --git a/internal/app/system.go b/internal/app/system.go deleted file mode 100644 index 3a92b0fd..00000000 --- a/internal/app/system.go +++ /dev/null @@ -1,48 +0,0 @@ -package app - -import ( - "os" - - "git.gensokyo.uk/security/fortify/helper/bwrap" - "git.gensokyo.uk/security/fortify/system" -) - -// appSealSys encapsulates app seal behaviour with OS interactions -type appSealSys struct { - bwrap *bwrap.Config - // bwrap sync fd - sp *os.File - // paths to override by mounting tmpfs over them - override []string - - // default formatted XDG_RUNTIME_DIR of User - runtime string - // target user sealed from config - user appUser - - // mapped uid and gid in user namespace - mapuid *stringPair[int] - - needRevert bool - saveState bool - *system.I - - // protected by upstream mutex -} - -type appUser struct { - // application id - aid *stringPair[int] - // target uid resolved by fid:aid - uid *stringPair[int] - - // supplementary group ids - supp []string - - // home directory host path - data string - // app user home directory - home string - // passwd database username - username string -} |
