Nulo/kawipiko
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

[server] Add initial seccomp injection points.

Browse source
This commit is contained in:
Ciprian Dorin Craciun 2022-09-11 13:40:40 +03:00
parent c841cc9127
commit edbba3ee0d
2 changed files with 65 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
sources/cmd/server/seccomp.go
View file

@ -2,8 +2,38 @@
package server
import "log"
import "github.com/volution/kawipiko/lib/seccomp"
import . "github.com/volution/kawipiko/lib/common"
func seccompApplyPhase1 () () {
log.Printf ("[ii] [d53cf86e] [seccomp.] applying Linux seccomp filter (phase 1)...\n")
if _error := seccomp.ApplyServer (); _error != nil {
AbortError (_error, "[58d1492b] failed to apply Linux seccomp filter (phase 1)!")
}
}
func seccompApplyPhase2 () () {
log.Printf ("[ii] [a338ddaf] [seccomp.] applying Linux seccomp filter (phase 2)...\n")
if _error := seccomp.ApplyServer (); _error != nil {
AbortError (_error, "[68283e68] failed to apply Linux seccomp filter (phase 2)!")
}
}
func seccompApplyPhase3 () () {
log.Printf ("[ii] [a319ff21] [seccomp.] applying Linux seccomp filter (phase 3)...\n")
if _error := seccomp.ApplyServer (); _error != nil {
AbortError (_error, "[7c5a0f44] failed to apply Linux seccomp filter (phase 3)!")
}
}

35
sources/cmd/server/server.go
View file

@ -1056,6 +1056,19 @@ func main_0 () (error) {
if _seccompEnabled {
seccompApplyPhase1 ()
}
// --------------------------------------------------------------------------------
// --------------------------------------------------------------------------------
runtime.GOMAXPROCS (int (_threads))
debug.SetGCPercent (50)
@ -1397,6 +1410,15 @@ func main_0 () (error) {
if _seccompEnabled {
seccompApplyPhase2 ()
}
// --------------------------------------------------------------------------------
// --------------------------------------------------------------------------------
@ -2077,6 +2099,19 @@ func main_0 () (error) {
if _seccompEnabled {
seccompApplyPhase3 ()
}
// --------------------------------------------------------------------------------
// --------------------------------------------------------------------------------
var _waiter sync.WaitGroup
if _server.httpPlain1Server != nil {