security/hakurei
security/hakurei
5
2
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases 7 Wiki Activity

container/syscall: dot-import syscall
All checks were successful
Test / Create distribution (push) Successful in 33s
Details
Test / Sandbox (push) Successful in 2m12s
Details
Test / Hakurei (push) Successful in 3m7s
Details
Test / Hpkg (push) Successful in 3m57s
Details
Test / Sandbox (race detector) (push) Successful in 4m2s
Details
Test / Hakurei (race detector) (push) Successful in 4m44s
Details
Test / Flake checks (push) Successful in 1m38s
Details

Browse Source 
This avoids having arch-specific constants for arm64.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-10-21 03:09:14 +09:00
parent 5063b774c1
commit f8189d1488
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
container/syscall.go
View File

@ -1,13 +1,13 @@
package container package container
import ( import (
"syscall" . "syscall"
"unsafe" "unsafe"
) )
// SetPtracer allows processes to ptrace(2) the calling process. // SetPtracer allows processes to ptrace(2) the calling process.
func SetPtracer(pid uintptr) error { func SetPtracer(pid uintptr) error {
_, _, errno := syscall.Syscall(syscall.SYS_PRCTL, syscall.PR_SET_PTRACER, pid, 0) _, _, errno := Syscall(SYS_PRCTL, PR_SET_PTRACER, pid, 0)
if errno == 0 { if errno == 0 {
return nil return nil
} }
@ -22,7 +22,7 @@ const (
// SetDumpable sets the "dumpable" attribute of the calling process. // SetDumpable sets the "dumpable" attribute of the calling process.
func SetDumpable(dumpable uintptr) error { func SetDumpable(dumpable uintptr) error {
// linux/sched/coredump.h // linux/sched/coredump.h
if _, _, errno := syscall.Syscall(syscall.SYS_PRCTL, syscall.PR_SET_DUMPABLE, dumpable, 0); errno != 0 { if _, _, errno := Syscall(SYS_PRCTL, PR_SET_DUMPABLE, dumpable, 0); errno != 0 {
return errno return errno
} }
@ -31,7 +31,7 @@ func SetDumpable(dumpable uintptr) error {
// SetNoNewPrivs sets the calling thread's no_new_privs attribute. // SetNoNewPrivs sets the calling thread's no_new_privs attribute.
func SetNoNewPrivs() error { func SetNoNewPrivs() error {
_, _, errno := syscall.Syscall(syscall.SYS_PRCTL, PR_SET_NO_NEW_PRIVS, 1, 0) _, _, errno := Syscall(SYS_PRCTL, PR_SET_NO_NEW_PRIVS, 1, 0)
if errno == 0 { if errno == 0 {
return nil return nil
} }
@ -41,10 +41,10 @@ func SetNoNewPrivs() error {
// Isatty tests whether a file descriptor refers to a terminal. // Isatty tests whether a file descriptor refers to a terminal.
func Isatty(fd int) bool { func Isatty(fd int) bool {
var buf [8]byte var buf [8]byte
r, _, _ := syscall.Syscall( r, _, _ := Syscall(
syscall.SYS_IOCTL, SYS_IOCTL,
uintptr(fd), uintptr(fd),
syscall.TIOCGWINSZ, TIOCGWINSZ,
uintptr(unsafe.Pointer(&buf[0])), uintptr(unsafe.Pointer(&buf[0])),
) )
return r == 0 return r == 0
@ -60,7 +60,7 @@ func Isatty(fd int) bool {
func IgnoringEINTR(fn func() error) error { func IgnoringEINTR(fn func() error) error {
for { for {
err := fn() err := fn()
if err != syscall.EINTR { if err != EINTR {
return err return err
} }
} }