security/hakurei
security/hakurei
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

treewide: reapply clang-format
All checks were successful
Test / Create distribution (push) Successful in 32s
Details
Test / Sandbox (push) Successful in 1m51s
Details
Test / Hakurei (push) Successful in 2m49s
Details
Test / Sandbox (race detector) (push) Successful in 2m58s
Details
Test / Planterette (push) Successful in 3m37s
Details
Test / Hakurei (race detector) (push) Successful in 4m15s
Details
Test / Flake checks (push) Successful in 1m8s
Details

Browse Source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-06-25 23:43:42 +09:00
parent 0e957cc9c1
commit 863bf69ad3
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
6 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
acl/acl-update.c
View File

@ -4,8 +4,8 @@
#include <stdlib.h> #include <stdlib.h>
#include <sys/acl.h> #include <sys/acl.h>
int hakurei_acl_update_file_by_uid(const char *path_p, uid_t uid, acl_perm_t *perms, int hakurei_acl_update_file_by_uid(const char *path_p, uid_t uid,
size_t plen) { acl_perm_t *perms, size_t plen) {
int ret = -1; int ret = -1;
bool v; bool v;
int i; int i;

4
acl/acl-update.h
View File

@ -1,4 +1,4 @@
#include <sys/acl.h> #include <sys/acl.h>
int hakurei_acl_update_file_by_uid(const char *path_p, uid_t uid, acl_perm_t *perms, int hakurei_acl_update_file_by_uid(const char *path_p, uid_t uid,
size_t plen); acl_perm_t *perms, size_t plen);

8
sandbox/seccomp/seccomp-build.c
View File

@ -28,8 +28,8 @@ struct hakurei_syscall_act {
#define SECCOMP_RULESET_ADD(ruleset) \ #define SECCOMP_RULESET_ADD(ruleset) \
do { \ do { \
if (opts & HAKUREI_VERBOSE) \ if (opts & HAKUREI_VERBOSE) \
hakurei_println("adding seccomp ruleset \"" #ruleset "\""); \ hakurei_println("adding seccomp ruleset \"" #ruleset "\""); \
for (int i = 0; i < LEN(ruleset); i++) { \ for (int i = 0; i < LEN(ruleset); i++) { \
assert(ruleset[i].m_errno == EPERM || ruleset[i].m_errno == ENOSYS); \ assert(ruleset[i].m_errno == EPERM || ruleset[i].m_errno == ENOSYS); \
\ \
@ -50,8 +50,8 @@ struct hakurei_syscall_act {
} \ } \
} while (0) } while (0)
int32_t hakurei_build_filter(int *ret_p, int fd, uint32_t arch, uint32_t multiarch, int32_t hakurei_build_filter(int *ret_p, int fd, uint32_t arch,
hakurei_filter_opts opts) { uint32_t multiarch, hakurei_filter_opts opts) {
int32_t res = 0; /* refer to resPrefix for message */ int32_t res = 0; /* refer to resPrefix for message */
int allow_multiarch = opts & HAKUREI_MULTIARCH; int allow_multiarch = opts & HAKUREI_MULTIARCH;
int allowed_personality = PER_LINUX; int allowed_personality = PER_LINUX;

4
sandbox/seccomp/seccomp-build.h
View File

@ -19,5 +19,5 @@ typedef enum {
} hakurei_filter_opts; } hakurei_filter_opts;
extern void hakurei_println(char *v); extern void hakurei_println(char *v);
int32_t hakurei_build_filter(int *ret_p, int fd, uint32_t arch, uint32_t multiarch, int32_t hakurei_build_filter(int *ret_p, int fd, uint32_t arch,
hakurei_filter_opts opts); uint32_t multiarch, hakurei_filter_opts opts);

2
sandbox/wl/wayland-bind.c
View File

@ -29,7 +29,7 @@ static const struct wl_registry_listener registry_listener = {
}; };
int32_t hakurei_bind_wayland_fd(char *socket_path, int fd, const char *app_id, int32_t hakurei_bind_wayland_fd(char *socket_path, int fd, const char *app_id,
const char *instance_id, int sync_fd) { const char *instance_id, int sync_fd) {
int32_t res = 0; /* refer to resErr for corresponding Go error */ int32_t res = 0; /* refer to resErr for corresponding Go error */
struct wl_display *display; struct wl_display *display;

2
sandbox/wl/wayland-bind.h
View File

@ -1,4 +1,4 @@
#include <stdint.h> #include <stdint.h>
int32_t hakurei_bind_wayland_fd(char *socket_path, int fd, const char *app_id, int32_t hakurei_bind_wayland_fd(char *socket_path, int fd, const char *app_id,
const char *instance_id, int sync_fd); const char *instance_id, int sync_fd);