unveil testing

cmd/ii-node/main.go

@@ -9,6 +9,8 @@ import (
 	"net/http"
 	"os"
 	"strings"
+	"path/filepath"
+	"golang.org/x/sys/unix"
 )
 
 func open_db(path string) *ii.DB {
@@ -98,6 +100,15 @@ func main() {
 
 	flag.Parse()
 
+	unix.Unveil("./tpl", "r")
+	unix.Unveil("/usr/local/share/iigo/tpl", "r")
+	unix.Unveil(*echo_opt, "r")
+	unix.Unveil(*users_opt, "rwc")
+	unix.Unveil(filepath.Dir(*db_opt), "rwc")
+	unix.Unveil(*db_opt + ".idx", "rwc")
+	unix.Unveil(os.TempDir(), "rwc")
+	unix.UnveilBlock()
+
 	db := open_db(*db_opt)
 	edb := ii.LoadEcholist(*echo_opt)
 	udb := ii.OpenUsers(*users_opt)

go.mod

@@ -8,7 +8,10 @@ retract (
 
 go 1.18
 
-require golang.org/x/crypto v0.7.0
+require (
+	golang.org/x/crypto v0.7.0
+	golang.org/x/sys v0.6.0
+)
 
 require (
 	golang.org/x/net v0.8.0 // indirect

go.sum

@@ -2,5 +2,7 @@ golang.org/x/crypto v0.7.0 h1:AvwMYaRytfdeVt3u6mLaxYtErKYjxA2OXjJ1HHq6t3A=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/net v0.8.0 h1:Zrh2ngAOFYneWTAIAPethzeaQLuHwhuBkuV6ZiRnUaQ=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
+golang.org/x/sys v0.6.0 h1:MVltZSvRTcU2ljQOhs94SXPftV6DCNnZViHeQps87pQ=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/text v0.8.0 h1:57P1ETyNKtuIjB4SRd15iJxuhj8Gc416Y78H3qgMh68=
 golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=