Ophestra Umiker
584732f80a
All checks were successful
test / test (push) Successful in 19s
This change also fixes a deadlock when shim fails to connect and complete the setup. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
73 lines
1.4 KiB
Go
73 lines
1.4 KiB
Go
package main
|
|
|
|
import (
|
|
"flag"
|
|
"syscall"
|
|
|
|
"git.ophivana.moe/security/fortify/internal/app"
|
|
"git.ophivana.moe/security/fortify/internal/fmsg"
|
|
"git.ophivana.moe/security/fortify/internal/linux"
|
|
)
|
|
|
|
var (
|
|
flagVerbose bool
|
|
)
|
|
|
|
func init() {
|
|
flag.BoolVar(&flagVerbose, "v", false, "Verbose output")
|
|
}
|
|
|
|
var os = new(linux.Std)
|
|
|
|
func main() {
|
|
// linux/sched/coredump.h
|
|
if _, _, errno := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_DUMPABLE, 0, 0); errno != 0 {
|
|
fmsg.Printf("cannot set SUID_DUMP_DISABLE: %s", errno.Error())
|
|
}
|
|
|
|
flag.Parse()
|
|
fmsg.SetVerbose(flagVerbose)
|
|
|
|
if os.SdBooted() {
|
|
fmsg.VPrintln("system booted with systemd as init system")
|
|
}
|
|
|
|
// root check
|
|
if os.Geteuid() == 0 {
|
|
fmsg.Fatal("this program must not run as root")
|
|
panic("unreachable")
|
|
}
|
|
|
|
// version/license/template command early exit
|
|
tryVersion()
|
|
tryLicense()
|
|
tryTemplate()
|
|
|
|
// state query command early exit
|
|
tryState()
|
|
|
|
// invoke app
|
|
a, err := app.New(os)
|
|
if err != nil {
|
|
fmsg.Fatalf("cannot create app: %s\n", err)
|
|
} else if err = a.Seal(loadConfig()); err != nil {
|
|
logBaseError(err, "cannot seal app:")
|
|
fmsg.Exit(1)
|
|
} else if err = a.Start(); err != nil {
|
|
logBaseError(err, "cannot start app:")
|
|
}
|
|
|
|
var r int
|
|
// wait must be called regardless of result of start
|
|
if r, err = a.Wait(); err != nil {
|
|
if r < 1 {
|
|
r = 1
|
|
}
|
|
logWaitError(err)
|
|
}
|
|
if err = a.WaitErr(); err != nil {
|
|
fmsg.Println("inner wait failed:", err)
|
|
}
|
|
fmsg.Exit(r)
|
|
}
|