From 9a1f8e129fe0f9919981b8a1d345a9b455bd76de Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 17 Mar 2025 02:31:46 +0900 Subject: sandbox: wrap fmsg interface Signed-off-by: Ophestra --- internal/app/shim/main.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'internal/app/shim') diff --git a/internal/app/shim/main.go b/internal/app/shim/main.go index 64df53d0..effa6b84 100644 --- a/internal/app/shim/main.go +++ b/internal/app/shim/main.go @@ -17,6 +17,7 @@ import ( "git.gensokyo.uk/security/fortify/internal" "git.gensokyo.uk/security/fortify/internal/app/init0" "git.gensokyo.uk/security/fortify/internal/fmsg" + "git.gensokyo.uk/security/fortify/internal/sandbox" ) // everything beyond this point runs as unconstrained target user @@ -28,7 +29,7 @@ func Main() { fmsg.Prepare("shim") // setting this prevents ptrace - if err := internal.SetDumpable(internal.SUID_DUMP_DISABLE); err != nil { + if err := sandbox.SetDumpable(sandbox.SUID_DUMP_DISABLE); err != nil { log.Fatalf("cannot set SUID_DUMP_DISABLE: %s", err) } -- cgit v1.3.1