Commit Graph

5 Commits

Author SHA1 Message Date
s7onith
2772b66316 unix: allow to pass a NULL pointer to the pledge syscall
Added PledgePromises and PledgeExecpromises functions
Added the pledgeAvailable helper function to check for pledge(2)
availability

Change-Id: Ib40e7eb481f70e4c02219db0ad445dfaa92aba2b
Reviewed-on: https://go-review.googlesource.com/c/142898
Reviewed-by: Tobias Klauser <tobias.klauser@gmail.com>
Run-TryBot: Tobias Klauser <tobias.klauser@gmail.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>
2018-10-26 14:45:32 +00:00
Ivan Markin
8b8824e799 unix: don't use local syscall number in Pledge()
Change-Id: Ifecafeedd733d4b33ef082a8f505165de9bac20a
GitHub-Last-Rev: 44c40b0424
GitHub-Pull-Request: golang/sys#20
Reviewed-on: https://go-review.googlesource.com/c/142318
Reviewed-by: Tobias Klauser <tobias.klauser@gmail.com>
Run-TryBot: Tobias Klauser <tobias.klauser@gmail.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>
2018-10-22 07:43:55 +00:00
Gianguido Sora`
98c5dad5d1 unix: update the OpenBSD pledge interface to handle execpromises
The current Pledge function still takes into account the deprecated
"paths" argument, which has been replaced by "execpromises".
This change has been committed to OpenBSD on the 11 December 2017:
https://marc.info/?l=openbsd-tech&m=151302727506669.
This commit updates the Pledge function interface to reflect this
change.

Fixes golang/go#26824

Change-Id: Id6255b0432cf0a33e680e342dd23c7b02d0aa78f
Reviewed-on: https://go-review.googlesource.com/127762
Run-TryBot: Ian Lance Taylor <iant@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Ian Lance Taylor <iant@golang.org>
2018-08-10 17:33:57 +00:00
Filippo Valsorda
7f59abf37b unix: update openbsd/amd64 to OpenBSD 6.3
Change-Id: I0a16c77437e4ed68cc19eda41bb9b64ab4376fd0
Reviewed-on: https://go-review.googlesource.com/114075
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Tobias Klauser <tobias.klauser@gmail.com>
2018-05-22 14:59:51 +00:00
Yestin
8fd966b47d unix: add support for OpenBSD pledge
Pledge, the privilege-restricting syscall and mitigation mechanism,
was missing from syscall_openbsd.go. As of the latest release, it
is officially supported in "stable".

More information about the call itself, and hence its importance,
can be found at:

http://www.openbsd.org/papers/hackfest2015-pledge/mgp00001.html

Change-Id: I2fdac1968664668e7bea1175677efe6433e0125e
Reviewed-on: https://go-review.googlesource.com/21815
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2017-03-22 23:48:10 +00:00