openidec

commit f3b735a71ca44b9e9aba82cb4ce93fb228850401
parent 07051f64c82b386bae186577f94497c6939168fa
Author: vasyahacker <vasya@magicfreedom.com>
Date:   Tue, 28 Mar 2023 13:26:59 +0400

unveil testing

Diffstat:
M
cmd/ii-node/main.go
 | 
11
+++++++++++
M
go.mod
 | 
5
++++-
M
go.sum
 | 
2
++

3 files changed, 17 insertions(+), 1 deletion(-)
diff --git a/cmd/ii-node/main.go b/cmd/ii-node/main.go
@@ -9,6 +9,8 @@ import (
 	"net/http"
 	"os"
 	"strings"
+	"path/filepath"
+	"golang.org/x/sys/unix"
 )
 
 func open_db(path string) *ii.DB {
@@ -98,6 +100,15 @@ func main() {
 
 	flag.Parse()
 
+	unix.Unveil("./tpl", "r")
+	unix.Unveil("/usr/local/share/iigo/tpl", "r")
+	unix.Unveil(*echo_opt, "r")
+	unix.Unveil(*users_opt, "rwc")
+	unix.Unveil(filepath.Dir(*db_opt), "rwc")
+	unix.Unveil(*db_opt + ".idx", "rwc")
+	unix.Unveil(os.TempDir(), "rwc")
+	unix.UnveilBlock()
+
 	db := open_db(*db_opt)
 	edb := ii.LoadEcholist(*echo_opt)
 	udb := ii.OpenUsers(*users_opt)
diff --git a/go.mod b/go.mod
@@ -8,7 +8,10 @@ retract (
 
 go 1.18
 
-require golang.org/x/crypto v0.7.0
+require (
+	golang.org/x/crypto v0.7.0
+	golang.org/x/sys v0.6.0
+)
 
 require (
 	golang.org/x/net v0.8.0 // indirect
diff --git a/go.sum b/go.sum
@@ -2,5 +2,7 @@ golang.org/x/crypto v0.7.0 h1:AvwMYaRytfdeVt3u6mLaxYtErKYjxA2OXjJ1HHq6t3A=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/net v0.8.0 h1:Zrh2ngAOFYneWTAIAPethzeaQLuHwhuBkuV6ZiRnUaQ=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
+golang.org/x/sys v0.6.0 h1:MVltZSvRTcU2ljQOhs94SXPftV6DCNnZViHeQps87pQ=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/text v0.8.0 h1:57P1ETyNKtuIjB4SRd15iJxuhj8Gc416Y78H3qgMh68=
 golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=