fortify

Author	SHA1	Message	Date
Ophestra	e9a7cd526f	app: improve shim process management All checks were successful Test / Create distribution (push) Successful in 27s Details Test / Sandbox (push) Successful in 1m45s Details Test / Fortify (push) Successful in 2m36s Details Test / Sandbox (race detector) (push) Successful in 2m49s Details Test / Fpkg (push) Successful in 3m33s Details Test / Fortify (race detector) (push) Successful in 4m13s Details Test / Flake checks (push) Successful in 1m6s Details This ensures a signal gets delivered to the process instead of relying on parent death behaviour. SIGCONT was chosen as it is the only signal an unprivileged process is allowed to send to processes with different credentials. A custom signal handler is installed because the Go runtime does not expose signal information other than which signal was received, and shim must check pid to ensure reasonable behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-04-07 03:55:17 +09:00
Ophestra	840ceb615a	app: handle RunState errors All checks were successful Test / Create distribution (push) Successful in 25s Details Test / Fortify (push) Successful in 2m27s Details Test / Data race detector (push) Successful in 3m24s Details Test / Fpkg (push) Successful in 3m30s Details Test / Flake checks (push) Successful in 52s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:36:14 +09:00
Ophestra	d050b3de25	app: define errors in a separate file All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Fortify (push) Successful in 2m28s Details Test / Data race detector (push) Successful in 3m25s Details Test / Fpkg (push) Successful in 3m31s Details Test / Flake checks (push) Successful in 52s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:12:02 +09:00

3 Commits