dietshasta
/
Sandbox
1
2
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update

main
dietshasta 2024-06-22 10:27:57 +01:00
parent 94ac615801
commit fa802eafe1
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
daemon/Sandbox.cpp
View File

@ -60,6 +60,10 @@ namespace i2p {
SCMP_SYS(ftruncate),
SCMP_SYS(futex),
SCMP_SYS(getdents64),
SCMP_SYS(getgid),
SCMP_SYS(getegid),
SCMP_SYS(getuid),
SCMP_SYS(geteuid),
SCMP_SYS(getpeername),
SCMP_SYS(getpid),
SCMP_SYS(getrandom),
@ -73,10 +77,13 @@ namespace i2p {
SCMP_SYS(listen),
SCMP_SYS(lseek),
SCMP_SYS(madvise),
SCMP_SYS(membarrier),
SCMP_SYS(mkdir),
SCMP_SYS(mkdirat),
SCMP_SYS(mmap),
SCMP_SYS(mprotect),
SCMP_SYS(munmap),
SCMP_SYS(nanosleep),
SCMP_SYS(newfstatat),
SCMP_SYS(openat),
SCMP_SYS(poll),
@ -101,6 +108,8 @@ namespace i2p {
SCMP_SYS(setsockopt),
SCMP_SYS(shutdown),
SCMP_SYS(socket),
SCMP_SYS(stat),
SCMP_SYS(statx),
SCMP_SYS(sysinfo),
SCMP_SYS(tgkill),
SCMP_SYS(timerfd_create),
@ -149,10 +158,9 @@ namespace i2p {
}
int addrule(const char *path, unsigned long long rules, int ruleset_fd) {
struct landlock_path_beneath_attr temp = {
{rules},
{NULL},
};
struct landlock_path_beneath_attr temp;
temp.allowed_access = rules;
temp.parent_fd = 0;
/* Open path file descriptor */
temp.parent_fd = open(path, O_PATH | O_CLOEXEC);