security/hakurei
security/hakurei
5
2
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 7 Wiki Activity

internal/app/spcontainer: use checked WaitDelay
Some checks failed
Test / Create distribution (push) Successful in 34s
Details
Test / Sandbox (push) Successful in 2m7s
Details
Test / Hpkg (push) Successful in 4m1s
Details
Test / Hakurei (push) Failing after 1m42s
Details
Test / Sandbox (race detector) (push) Successful in 2m12s
Details
Test / Hakurei (race detector) (push) Failing after 2m17s
Details
Test / Flake checks (push) Has been skipped
Details

Browse Source 
This is the value used by shim. Using the unchecked value causes ForwardCancel to be populated incorrectly for values snapping up to default.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-10-10 04:50:07 +09:00
parent 109aaee659
commit 8ebfd90f33
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
internal/app/spcontainer.go
View File

@ -65,7 +65,7 @@ func (s *spParamsOp) toContainer(state *outcomeStateParams) error {
// the container is canceled when shim is requested to exit or receives an interrupt or termination signal; // the container is canceled when shim is requested to exit or receives an interrupt or termination signal;
// this behaviour is implemented in the shim // this behaviour is implemented in the shim
state.params.ForwardCancel = state.Container.WaitDelay >= 0 state.params.ForwardCancel = state.Shim.WaitDelay >= 0
if state.Container.Multiarch { if state.Container.Multiarch {
state.params.SeccompFlags |= seccomp.AllowMultiarch state.params.SeccompFlags |= seccomp.AllowMultiarch