diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-03-17 01:09:12 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-03-17 01:10:27 +0900 |
| commit | ee108603572101ad3c285830e04ee248916b6c5d (patch) | |
| tree | e3d2274301cf7f1ed39df9c510672745fbe0b08a /internal/app | |
| parent | 44277dc0f1fd1806f5ceea34246a4c805a06b61b (diff) | |
seccomp: install output atomically
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app')
| -rw-r--r-- | internal/app/shim/main.go | 6 |
1 files changed, 1 insertions, 5 deletions
diff --git a/internal/app/shim/main.go b/internal/app/shim/main.go index 6cbb1474..64df53d0 100644 --- a/internal/app/shim/main.go +++ b/internal/app/shim/main.go @@ -17,7 +17,6 @@ import ( "git.gensokyo.uk/security/fortify/internal" "git.gensokyo.uk/security/fortify/internal/app/init0" "git.gensokyo.uk/security/fortify/internal/fmsg" - "git.gensokyo.uk/security/fortify/seccomp" ) // everything beyond this point runs as unconstrained target user @@ -48,7 +47,7 @@ func Main() { log.Fatalf("cannot decode shim setup payload: %v", err) } else { - fmsg.Store(payload.Verbose) + internal.InstallFmsg(payload.Verbose) closeSetup = f } @@ -121,9 +120,6 @@ func Main() { } helper.BubblewrapName = payload.Exec[0] // resolved bwrap path by parent - if fmsg.Load() { - seccomp.CPrintln = log.Println - } ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM) defer stop() // unreachable |