From d989b31c87461dc8ab2f1cac6792814e27fadea9 Mon Sep 17 00:00:00 2001 From: Ivan Markin Date: Wed, 24 Oct 2018 19:48:33 +0000 Subject: [PATCH] unix: add support for OpenBSD unveil(2) Now as `SYS_UNVEIL` has landed in `x/sys`, it's time to have a convenient handle for it too. Change-Id: I61db9cc23fa9f2e10bac601959002319ea9c854b GitHub-Last-Rev: eb9487242e1fafa06c057ef49444ea5a711382df GitHub-Pull-Request: golang/sys#19 Reviewed-on: https://go-review.googlesource.com/c/142317 Reviewed-by: Tobias Klauser Run-TryBot: Tobias Klauser TryBot-Result: Gobot Gobot --- unix/openbsd_unveil.go | 44 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 unix/openbsd_unveil.go diff --git a/unix/openbsd_unveil.go b/unix/openbsd_unveil.go new file mode 100644 index 00000000..aebc2dc5 --- /dev/null +++ b/unix/openbsd_unveil.go @@ -0,0 +1,44 @@ +// Copyright 2018 The Go Authors. All rights reserved. +// Use of this source code is governed by a BSD-style +// license that can be found in the LICENSE file. + +// +build openbsd + +package unix + +import ( + "syscall" + "unsafe" +) + +// Unveil implements the unveil syscall. +// For more information see unveil(2). +// Note that the special case of blocking further +// unveil calls is handled by UnveilBlock. +func Unveil(path string, flags string) error { + pathPtr, err := syscall.BytePtrFromString(path) + if err != nil { + return err + } + flagsPtr, err := syscall.BytePtrFromString(flags) + if err != nil { + return err + } + _, _, e := syscall.Syscall(SYS_UNVEIL, uintptr(unsafe.Pointer(pathPtr)), uintptr(unsafe.Pointer(flagsPtr)), 0) + if e != 0 { + return e + } + return nil +} + +// UnveilBlock blocks future unveil calls. +// For more information see unveil(2). +func UnveilBlock() error { + // Both pointers must be nil. + var pathUnsafe, flagsUnsafe unsafe.Pointer + _, _, e := syscall.Syscall(SYS_UNVEIL, uintptr(pathUnsafe), uintptr(flagsUnsafe), 0) + if e != 0 { + return e + } + return nil +}