fortify/internal/app
Ophestra e9a7cd526f
All checks were successful
Test / Create distribution (push) Successful in 27s
Test / Sandbox (push) Successful in 1m45s
Test / Fortify (push) Successful in 2m36s
Test / Sandbox (race detector) (push) Successful in 2m49s
Test / Fpkg (push) Successful in 3m33s
Test / Fortify (race detector) (push) Successful in 4m13s
Test / Flake checks (push) Successful in 1m6s
app: improve shim process management
This ensures a signal gets delivered to the process instead of relying on parent death behaviour.

SIGCONT was chosen as it is the only signal an unprivileged process is allowed to send to processes with different credentials.

A custom signal handler is installed because the Go runtime does not expose signal information other than which signal was received, and shim must check pid to ensure reasonable behaviour.

Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-04-07 03:55:17 +09:00
..
app_nixos_test.go app: share path setup on demand 2025-04-01 00:47:32 +09:00
app_pd_test.go app: wayland socket in process share 2025-04-01 00:53:04 +09:00
app_stub_test.go app: run in native sandbox 2025-03-25 01:52:49 +09:00
app_test.go app: run in native sandbox 2025-03-25 01:52:49 +09:00
app.go app: run in native sandbox 2025-03-25 01:52:49 +09:00
errors.go app: improve shim process management 2025-04-07 03:55:17 +09:00
export_test.go app: run in native sandbox 2025-03-25 01:52:49 +09:00
process.go app: improve shim process management 2025-04-07 03:55:17 +09:00
seal.go app: wayland socket in process share 2025-04-01 00:53:04 +09:00
shim.go app: improve shim process management 2025-04-07 03:55:17 +09:00
strings.go app: store values with string representation 2025-02-19 00:25:00 +09:00