diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-10-28 18:52:23 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-10-28 18:52:23 +0900 |
| commit | aa1f96eeebecaa8e4cbbccb826fe168c9270228d (patch) | |
| tree | 7bc64b31f4e5723d603f44b993427edce305626b /package.nix | |
| parent | 431dc095e53b64d33ec4c47aedf3082ec8cffe80 (diff) | |
fsu: check parent executable path
Only allow main program to launch fsu. This change and further checks in the main program reduces attack surface.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'package.nix')
| -rw-r--r-- | package.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package.nix b/package.nix index 4293f47b..b2c72f63 100644 --- a/package.nix +++ b/package.nix @@ -21,7 +21,7 @@ buildGoModule rec { "-X" "main.Version=v${version}" "-X" - "main.FortifyPath=${placeholder "out"}/bin/fortify" + "main.FortifyPath=${placeholder "out"}/bin/.fortify-wrapped" ]; buildInputs = [ |