aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app
diff options
context:
space:
mode:
authorOphestra Umiker <cat@ophivana.moe>2024-10-16 14:38:57 +0900
committerOphestra Umiker <cat@ophivana.moe>2024-10-16 14:38:57 +0900
commitc21168a74181903535c63f49c5a6d3bd2052c883 (patch)
tree6ed272c6a4d3712624077cf39794d7d1eb22295f /internal/app
parent084cd84f36a1d608541b4aa4e1e95334395d8953 (diff)
system: move enablements from state package
This removes the unnecessary import of the state package. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/app')
-rw-r--r--internal/app/config.go6
-rw-r--r--internal/app/seal.go2
-rw-r--r--internal/app/share.dbus.go4
-rw-r--r--internal/app/share.display.go8
-rw-r--r--internal/app/share.pulse.go4
-rw-r--r--internal/app/start.go10
-rw-r--r--internal/app/system.go2
7 files changed, 18 insertions, 18 deletions
diff --git a/internal/app/config.go b/internal/app/config.go
index 72648f0c..9a6e18ea 100644
--- a/internal/app/config.go
+++ b/internal/app/config.go
@@ -6,7 +6,7 @@ import (
"git.ophivana.moe/cat/fortify/dbus"
"git.ophivana.moe/cat/fortify/helper/bwrap"
- "git.ophivana.moe/cat/fortify/internal/state"
+ "git.ophivana.moe/cat/fortify/internal/system"
)
func init() {
@@ -41,7 +41,7 @@ type ConfinementConfig struct {
SessionBus *dbus.Config `json:"session_bus,omitempty"`
// child capability enablements
- Enablements state.Enablements `json:"enablements"`
+ Enablements system.Enablements `json:"enablements"`
}
// SandboxConfig describes resources made available to the sandbox.
@@ -171,7 +171,7 @@ func Template() *Config {
Log: false,
Filter: true,
},
- Enablements: state.EnableWayland.Mask() | state.EnableDBus.Mask() | state.EnablePulse.Mask(),
+ Enablements: system.EWayland.Mask() | system.EDBus.Mask() | system.EPulse.Mask(),
},
}
}
diff --git a/internal/app/seal.go b/internal/app/seal.go
index 76ce8d39..f8031b71 100644
--- a/internal/app/seal.go
+++ b/internal/app/seal.go
@@ -167,7 +167,7 @@ func (a *app) Seal(config *Config) error {
conf.Override = append(conf.Override, nscd)
}
// bind GPU stuff
- if config.Confinement.Enablements.Has(state.EnableX) || config.Confinement.Enablements.Has(state.EnableWayland) {
+ if config.Confinement.Enablements.Has(system.EX11) || config.Confinement.Enablements.Has(system.EWayland) {
conf.Filesystem = append(conf.Filesystem, &FilesystemConfig{Src: "/dev/dri", Device: true})
}
config.Confinement.Sandbox = conf
diff --git a/internal/app/share.dbus.go b/internal/app/share.dbus.go
index 6b0ff43c..f9efc7b5 100644
--- a/internal/app/share.dbus.go
+++ b/internal/app/share.dbus.go
@@ -5,7 +5,7 @@ import (
"git.ophivana.moe/cat/fortify/acl"
"git.ophivana.moe/cat/fortify/dbus"
- "git.ophivana.moe/cat/fortify/internal/state"
+ "git.ophivana.moe/cat/fortify/internal/system"
)
const (
@@ -14,7 +14,7 @@ const (
)
func (seal *appSeal) shareDBus(config [2]*dbus.Config) error {
- if !seal.et.Has(state.EnableDBus) {
+ if !seal.et.Has(system.EDBus) {
return nil
}
diff --git a/internal/app/share.display.go b/internal/app/share.display.go
index 2675c01b..d6b28eae 100644
--- a/internal/app/share.display.go
+++ b/internal/app/share.display.go
@@ -7,7 +7,7 @@ import (
"git.ophivana.moe/cat/fortify/acl"
"git.ophivana.moe/cat/fortify/internal/fmsg"
- "git.ophivana.moe/cat/fortify/internal/state"
+ "git.ophivana.moe/cat/fortify/internal/system"
)
const (
@@ -30,7 +30,7 @@ func (seal *appSeal) shareDisplay() error {
}
// set up wayland
- if seal.et.Has(state.EnableWayland) {
+ if seal.et.Has(system.EWayland) {
if wd, ok := os.LookupEnv(waylandDisplay); !ok {
return fmsg.WrapError(ErrWayland,
"WAYLAND_DISPLAY is not set")
@@ -44,7 +44,7 @@ func (seal *appSeal) shareDisplay() error {
seal.sys.bwrap.Bind(wpi, w)
// ensure Wayland socket ACL (e.g. `/run/user/%d/wayland-%d`)
- seal.sys.UpdatePermType(state.EnableWayland, wp, acl.Read, acl.Write, acl.Execute)
+ seal.sys.UpdatePermType(system.EWayland, wp, acl.Read, acl.Write, acl.Execute)
} else {
// set wayland socket path (e.g. `/run/user/%d/wayland-%d`)
seal.wl = path.Join(seal.RuntimePath, wd)
@@ -52,7 +52,7 @@ func (seal *appSeal) shareDisplay() error {
}
// set up X11
- if seal.et.Has(state.EnableX) {
+ if seal.et.Has(system.EX11) {
// discover X11 and grant user permission via the `ChangeHosts` command
if d, ok := os.LookupEnv(display); !ok {
return fmsg.WrapError(ErrXDisplay,
diff --git a/internal/app/share.pulse.go b/internal/app/share.pulse.go
index 0103b895..4076c511 100644
--- a/internal/app/share.pulse.go
+++ b/internal/app/share.pulse.go
@@ -8,7 +8,7 @@ import (
"path"
"git.ophivana.moe/cat/fortify/internal/fmsg"
- "git.ophivana.moe/cat/fortify/internal/state"
+ "git.ophivana.moe/cat/fortify/internal/system"
)
const (
@@ -26,7 +26,7 @@ var (
)
func (seal *appSeal) sharePulse() error {
- if !seal.et.Has(state.EnablePulse) {
+ if !seal.et.Has(system.EPulse) {
return nil
}
diff --git a/internal/app/start.go b/internal/app/start.go
index 9e54063a..ff65c0df 100644
--- a/internal/app/start.go
+++ b/internal/app/start.go
@@ -202,8 +202,8 @@ func (a *app) Wait() (int, error) {
}
// enablements of remaining launchers
- rt, ec := new(state.Enablements), new(system.Criteria)
- ec.Enablements = new(state.Enablements)
+ rt, ec := new(system.Enablements), new(system.Criteria)
+ ec.Enablements = new(system.Enablements)
ec.Set(system.Process)
if states, err := b.Load(); err != nil {
return err
@@ -222,14 +222,14 @@ func (a *app) Wait() (int, error) {
}
}
// invert accumulated enablements for cleanup
- for i := state.Enablement(0); i < state.EnableLength; i++ {
+ for i := system.Enablement(0); i < system.Enablement(system.ELen); i++ {
if !rt.Has(i) {
ec.Set(i)
}
}
if verbose.Get() {
- labels := make([]string, 0, state.EnableLength+1)
- for i := state.Enablement(0); i < state.EnableLength+2; i++ {
+ labels := make([]string, 0, system.ELen+1)
+ for i := system.Enablement(0); i < system.Enablement(system.ELen+2); i++ {
if ec.Has(i) {
labels = append(labels, system.TypeString(i))
}
diff --git a/internal/app/system.go b/internal/app/system.go
index 56966479..4aeaec2d 100644
--- a/internal/app/system.go
+++ b/internal/app/system.go
@@ -38,7 +38,7 @@ type appSeal struct {
// path to launcher program
toolPath string
// pass-through enablement tracking from config
- et state.Enablements
+ et system.Enablements
// prevents sharing from happening twice
shared bool