From ee108603572101ad3c285830e04ee248916b6c5d Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 17 Mar 2025 01:09:12 +0900 Subject: seccomp: install output atomically Signed-off-by: Ophestra --- internal/app/shim/main.go | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) (limited to 'internal/app') diff --git a/internal/app/shim/main.go b/internal/app/shim/main.go index 6cbb1474..64df53d0 100644 --- a/internal/app/shim/main.go +++ b/internal/app/shim/main.go @@ -17,7 +17,6 @@ import ( "git.gensokyo.uk/security/fortify/internal" "git.gensokyo.uk/security/fortify/internal/app/init0" "git.gensokyo.uk/security/fortify/internal/fmsg" - "git.gensokyo.uk/security/fortify/seccomp" ) // everything beyond this point runs as unconstrained target user @@ -48,7 +47,7 @@ func Main() { log.Fatalf("cannot decode shim setup payload: %v", err) } else { - fmsg.Store(payload.Verbose) + internal.InstallFmsg(payload.Verbose) closeSetup = f } @@ -121,9 +120,6 @@ func Main() { } helper.BubblewrapName = payload.Exec[0] // resolved bwrap path by parent - if fmsg.Load() { - seccomp.CPrintln = log.Println - } ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM) defer stop() // unreachable -- cgit v1.3.1