colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

bunpen: TODO: calculate uid/gid at runtime

Browse Source
This commit is contained in:
Colin
2024-08-24 20:12:51 +00:00
parent 7d7abc9619
commit ccddc6f8e1
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
pkgs/additional/bunpen/restrict/namespace.ha
View File

@@ -60,6 +60,7 @@ fn check_error(op: str, c: (void | fs::error | rt::errno)) void = {
fn write_uid_map() void = { fn write_uid_map() void = {
let uid_fd = rt::open("/proc/self/uid_map", rt::O_RDWR | rt::O_CLOEXEC, 0)!; let uid_fd = rt::open("/proc/self/uid_map", rt::O_RDWR | rt::O_CLOEXEC, 0)!;
// TODO: write the actual uid/gid here -- not hardcoded 1000/100
io::write(uid_fd, &['1': u8, '0', '0', '0', ' ', '1', '0', '0', '0', ' ', '1', '\n', 0])!; io::write(uid_fd, &['1': u8, '0', '0', '0', ' ', '1', '0', '0', '0', ' ', '1', '\n', 0])!;
let setgroups_fd = rt::open("/proc/self/setgroups", rt::O_RDWR | rt::O_CLOEXEC, 0)!; let setgroups_fd = rt::open("/proc/self/setgroups", rt::O_RDWR | rt::O_CLOEXEC, 0)!;