From 9e15898c8f87f3c9eaf9e607fc5c860d91d48912 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Fri, 7 Mar 2025 22:56:35 +0900 Subject: internal/prctl: rename prctl wrappers Signed-off-by: Ophestra --- internal/app/init/main.go | 4 ++-- internal/app/shim/main.go | 2 +- internal/prctl.go | 13 +++++++++---- 3 files changed, 12 insertions(+), 7 deletions(-) (limited to 'internal') diff --git a/internal/app/init/main.go b/internal/app/init/main.go index bf9ecbae..33678c4e 100644 --- a/internal/app/init/main.go +++ b/internal/app/init/main.go @@ -28,7 +28,7 @@ func Main() { fmsg.Prepare("init") // setting this prevents ptrace - if err := internal.PR_SET_DUMPABLE__SUID_DUMP_DISABLE(); err != nil { + if err := internal.SetDumpable(internal.SUID_DUMP_DISABLE); err != nil { log.Fatalf("cannot set SUID_DUMP_DISABLE: %s", err) } @@ -64,7 +64,7 @@ func Main() { } // die with parent - if err := internal.PR_SET_PDEATHSIG__SIGKILL(); err != nil { + if err := internal.SetPdeathsig(syscall.SIGKILL); err != nil { log.Fatalf("prctl(PR_SET_PDEATHSIG, SIGKILL): %v", err) } diff --git a/internal/app/shim/main.go b/internal/app/shim/main.go index 5e32a9fa..d1bd8198 100644 --- a/internal/app/shim/main.go +++ b/internal/app/shim/main.go @@ -29,7 +29,7 @@ func Main() { fmsg.Prepare("shim") // setting this prevents ptrace - if err := internal.PR_SET_DUMPABLE__SUID_DUMP_DISABLE(); err != nil { + if err := internal.SetDumpable(internal.SUID_DUMP_DISABLE); err != nil { log.Fatalf("cannot set SUID_DUMP_DISABLE: %s", err) } diff --git a/internal/prctl.go b/internal/prctl.go index 857371b5..ae8392a6 100644 --- a/internal/prctl.go +++ b/internal/prctl.go @@ -2,17 +2,22 @@ package internal import "syscall" -func PR_SET_DUMPABLE__SUID_DUMP_DISABLE() error { +const ( + SUID_DUMP_DISABLE = iota + SUID_DUMP_USER +) + +func SetDumpable(dumpable uintptr) error { // linux/sched/coredump.h - if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_DUMPABLE, 0, 0); errno != 0 { + if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_DUMPABLE, dumpable, 0); errno != 0 { return errno } return nil } -func PR_SET_PDEATHSIG__SIGKILL() error { - if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_PDEATHSIG, uintptr(syscall.SIGKILL), 0); errno != 0 { +func SetPdeathsig(sig syscall.Signal) error { + if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_PDEATHSIG, uintptr(sig), 0); errno != 0 { return errno } -- cgit v1.3.1