From 24618ab9a1524e8b8986a9bf67667288e642fcf1 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 17 Mar 2025 02:55:36 +0900 Subject: sandbox: move out of internal Signed-off-by: Ophestra --- sandbox/syscall.go | 41 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 sandbox/syscall.go (limited to 'sandbox/syscall.go') diff --git a/sandbox/syscall.go b/sandbox/syscall.go new file mode 100644 index 00000000..a17928f7 --- /dev/null +++ b/sandbox/syscall.go @@ -0,0 +1,41 @@ +package sandbox + +import "syscall" + +const ( + SUID_DUMP_DISABLE = iota + SUID_DUMP_USER +) + +func SetDumpable(dumpable uintptr) error { + // linux/sched/coredump.h + if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_DUMPABLE, dumpable, 0); errno != 0 { + return errno + } + + return nil +} + +func SetPdeathsig(sig syscall.Signal) error { + if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_PDEATHSIG, uintptr(sig), 0); errno != 0 { + return errno + } + + return nil +} + +// IgnoringEINTR makes a function call and repeats it if it returns an +// EINTR error. This appears to be required even though we install all +// signal handlers with SA_RESTART: see #22838, #38033, #38836, #40846. +// Also #20400 and #36644 are issues in which a signal handler is +// installed without setting SA_RESTART. None of these are the common case, +// but there are enough of them that it seems that we can't avoid +// an EINTR loop. +func IgnoringEINTR(fn func() error) error { + for { + err := fn() + if err != syscall.EINTR { + return err + } + } +} -- cgit v1.3.1