From 9a1f8e129fe0f9919981b8a1d345a9b455bd76de Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 17 Mar 2025 02:31:46 +0900 Subject: sandbox: wrap fmsg interface Signed-off-by: Ophestra --- internal/app/init0/main.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'internal/app/init0') diff --git a/internal/app/init0/main.go b/internal/app/init0/main.go index fe2f9aef..83033134 100644 --- a/internal/app/init0/main.go +++ b/internal/app/init0/main.go @@ -12,6 +12,7 @@ import ( "git.gensokyo.uk/security/fortify/helper/proc" "git.gensokyo.uk/security/fortify/internal" "git.gensokyo.uk/security/fortify/internal/fmsg" + "git.gensokyo.uk/security/fortify/internal/sandbox" ) const ( @@ -28,7 +29,7 @@ func Main() { fmsg.Prepare("init0") // setting this prevents ptrace - if err := internal.SetDumpable(internal.SUID_DUMP_DISABLE); err != nil { + if err := sandbox.SetDumpable(sandbox.SUID_DUMP_DISABLE); err != nil { log.Fatalf("cannot set SUID_DUMP_DISABLE: %s", err) } @@ -64,7 +65,7 @@ func Main() { } // die with parent - if err := internal.SetPdeathsig(syscall.SIGKILL); err != nil { + if err := sandbox.SetPdeathsig(syscall.SIGKILL); err != nil { log.Fatalf("prctl(PR_SET_PDEATHSIG, SIGKILL): %v", err) } -- cgit v1.3.1