dietshasta
/
Sandbox
1
2
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update

main
dietshasta 2024-06-22 10:27:57 +01:00
parent 94ac615801
commit fa802eafe1
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
daemon/Sandbox.cpp
View File

@ -60,6 +60,10 @@ namespace i2p {
SCMP_SYS(ftruncate), SCMP_SYS(ftruncate),
SCMP_SYS(futex), SCMP_SYS(futex),
SCMP_SYS(getdents64), SCMP_SYS(getdents64),
SCMP_SYS(getgid),
SCMP_SYS(getegid),
SCMP_SYS(getuid),
SCMP_SYS(geteuid),
SCMP_SYS(getpeername), SCMP_SYS(getpeername),
SCMP_SYS(getpid), SCMP_SYS(getpid),
SCMP_SYS(getrandom), SCMP_SYS(getrandom),
@ -73,10 +77,13 @@ namespace i2p {
SCMP_SYS(listen), SCMP_SYS(listen),
SCMP_SYS(lseek), SCMP_SYS(lseek),
SCMP_SYS(madvise), SCMP_SYS(madvise),
SCMP_SYS(membarrier),
SCMP_SYS(mkdir), SCMP_SYS(mkdir),
SCMP_SYS(mkdirat),
SCMP_SYS(mmap), SCMP_SYS(mmap),
SCMP_SYS(mprotect), SCMP_SYS(mprotect),
SCMP_SYS(munmap), SCMP_SYS(munmap),
SCMP_SYS(nanosleep),
SCMP_SYS(newfstatat), SCMP_SYS(newfstatat),
SCMP_SYS(openat), SCMP_SYS(openat),
SCMP_SYS(poll), SCMP_SYS(poll),
@ -101,6 +108,8 @@ namespace i2p {
SCMP_SYS(setsockopt), SCMP_SYS(setsockopt),
SCMP_SYS(shutdown), SCMP_SYS(shutdown),
SCMP_SYS(socket), SCMP_SYS(socket),
SCMP_SYS(stat),
SCMP_SYS(statx),
SCMP_SYS(sysinfo), SCMP_SYS(sysinfo),
SCMP_SYS(tgkill), SCMP_SYS(tgkill),
SCMP_SYS(timerfd_create), SCMP_SYS(timerfd_create),
@ -149,10 +158,9 @@ namespace i2p {
} }
int addrule(const char *path, unsigned long long rules, int ruleset_fd) { int addrule(const char *path, unsigned long long rules, int ruleset_fd) {
struct landlock_path_beneath_attr temp = { struct landlock_path_beneath_attr temp;
{rules}, temp.allowed_access = rules;
{NULL}, temp.parent_fd = 0;
};
/* Open path file descriptor */ /* Open path file descriptor */
temp.parent_fd = open(path, O_PATH | O_CLOEXEC); temp.parent_fd = open(path, O_PATH | O_CLOEXEC);