gocryptfs/internal/syscallcompat, branch aegisMirror of gocryptfs source code on Githubhttp://nuetzlich.net/cgit/gocryptfs/atom?h=aegis2025-02-26T20:38:36+00:00syscallcompat: use our own Setgroups/Setregid/Setreuid wrappers2025-02-26T20:38:36+00:00Jakob Unterwurzacher2025-02-26T20:38:36+00:00urn:sha1:6b1ba5846b17eec710a70cb6c6bf23e3f2024289
x/sys v0.1.0 (https://github.com/golang/sys/commit/d0df966e6959f00dc1c74363e537872647352d51)
breaks our usecase. Switch to our own wrappers.
Relates-to: https://github.com/rfjakob/gocryptfs/issues/892
Relates-to: https://github.com/rfjakob/gocryptfs/issues/893
syscallcompat: add docs for Setreuid/Setregid/Setgroups2025-02-26T20:33:06+00:00Jakob Unterwurzacher2025-02-26T20:32:53+00:00urn:sha1:07b1bd7ce810c83ed622885b65dbba3dab0f7fbbsyscallcompat: move getSupplementaryGroups to suser_linux.go2025-02-26T20:28:07+00:00Jakob Unterwurzacher2025-02-26T20:28:07+00:00urn:sha1:a540b0ea1bf5e9742773784600033bcb466e8a04
It's only used there, so move it.
syscallcompat: rename thread_credentials files to include "linux"2025-02-26T20:27:29+00:00Jakob Unterwurzacher2025-02-26T20:21:57+00:00urn:sha1:987ced003ec2971797e8969e0cf0a37a751ebc84
As with the other files, include "linux" because the code only
builds on linux
renamed: internal/syscallcompat/thread_credentials.go -> internal/syscallcompat/thread_credentials_linux.go
renamed: internal/syscallcompat/thread_credentials_368_arm.go -> internal/syscallcompat/thread_credentials_linux_368_arm.go
renamed: internal/syscallcompat/thread_credentials_other.go -> internal/syscallcompat/thread_credentials_linux_other.go
syscallcompat: add asUser for darwin and make OpenatUser and friends shared2025-02-26T20:27:29+00:00Jakob Unterwurzacher2025-02-26T20:12:56+00:00urn:sha1:22cd9cf174e8a93787b01f6dd7b09247f9642286syscallcompat: move asUser to its own file2025-02-26T20:11:56+00:00Jakob Unterwurzacher2025-02-26T19:55:07+00:00urn:sha1:49d797effbc0888975c51ac45371d91fc59ea2dcsyscallcompat: add SetgroupsPanic,SetregidPanic,SetreuidPanic2025-02-17T20:30:49+00:00Jakob Unterwurzacher2025-02-17T20:30:49+00:00urn:sha1:a245def340de818910acb9e3c845e0381dc313ef
Will use those later.
syscallcompat: add thread_credentials.go & friends2025-02-06T20:59:45+00:00Jakob Unterwurzacher2025-02-06T20:54:33+00:00urn:sha1:cd47ab015e5d4a7ecaee747796fb89b7597b4fc1
Private copies of per-thread Setreuid/Setegid/Setgroups.
https://github.com/rfjakob/gocryptfs/issues/893
https://github.com/rfjakob/gocryptfs/issues/892
syscallcompat: Openat: always set O_CLOEXEC2024-05-17T20:14:55+00:00Jakob Unterwurzacher2024-05-17T20:14:55+00:00urn:sha1:da873087dd7bcc54d96748a1f6e4e8ecf9e265e5
Let's not leak fds to logger.
Before:
$ lsof -p $(pgrep logger)
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
logger 146410 jakob cwd DIR 253,0 4096 2 /
logger 146410 jakob rtd DIR 253,0 4096 2 /
logger 146410 jakob txt REG 253,0 41560 6293858 /usr/bin/logger
logger 146410 jakob mem REG 253,0 229754784 6292695 /usr/lib/locale/locale-archive
logger 146410 jakob mem REG 253,0 186480 6292031 /usr/lib64/libgcc_s-14-20240508.so.1
logger 146410 jakob mem REG 253,0 787128 6294119 /usr/lib64/libzstd.so.1.5.6
logger 146410 jakob mem REG 253,0 211424 6294587 /usr/lib64/liblzma.so.5.4.6
logger 146410 jakob mem REG 253,0 131128 6302636 /usr/lib64/liblz4.so.1.9.4
logger 146410 jakob mem REG 253,0 49184 6302330 /usr/lib64/libcap.so.2.69
logger 146410 jakob mem REG 253,0 2476880 6295299 /usr/lib64/libc.so.6
logger 146410 jakob mem REG 253,0 987256 6292058 /usr/lib64/libsystemd.so.0.38.0
logger 146410 jakob mem REG 253,0 906256 6295295 /usr/lib64/ld-linux-x86-64.so.2
logger 146410 jakob 0r FIFO 0,14 0t0 607727 pipe
logger 146410 jakob 1w CHR 1,3 0t0 4 /dev/null
logger 146410 jakob 2w CHR 1,3 0t0 4 /dev/null
logger 146410 jakob 3u unix 0x0000000046d9c96b 0t0 607729 type=DGRAM (CONNECTED)
logger 146410 jakob 10u DIR 0,33 80 7758 /tmp/tmp.lbUiEw9P6W/a
After:
$ lsof -p $(pgrep logger)
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
logger 147982 jakob cwd DIR 253,0 4096 2 /
logger 147982 jakob rtd DIR 253,0 4096 2 /
logger 147982 jakob txt REG 253,0 41560 6293858 /usr/bin/logger
logger 147982 jakob mem REG 253,0 229754784 6292695 /usr/lib/locale/locale-archive
logger 147982 jakob mem REG 253,0 186480 6292031 /usr/lib64/libgcc_s-14-20240508.so.1
logger 147982 jakob mem REG 253,0 787128 6294119 /usr/lib64/libzstd.so.1.5.6
logger 147982 jakob mem REG 253,0 211424 6294587 /usr/lib64/liblzma.so.5.4.6
logger 147982 jakob mem REG 253,0 131128 6302636 /usr/lib64/liblz4.so.1.9.4
logger 147982 jakob mem REG 253,0 49184 6302330 /usr/lib64/libcap.so.2.69
logger 147982 jakob mem REG 253,0 2476880 6295299 /usr/lib64/libc.so.6
logger 147982 jakob mem REG 253,0 987256 6292058 /usr/lib64/libsystemd.so.0.38.0
logger 147982 jakob mem REG 253,0 906256 6295295 /usr/lib64/ld-linux-x86-64.so.2
logger 147982 jakob 0r FIFO 0,14 0t0 609636 pipe
logger 147982 jakob 1w CHR 1,3 0t0 4 /dev/null
logger 147982 jakob 2w CHR 1,3 0t0 4 /dev/null
logger 147982 jakob 3u unix 0x00000000bc46d033 0t0 610344 type=DGRAM (CONNECTED)
Fixes https://github.com/rfjakob/gocryptfs/issues/846
make format2022-08-28T09:11:36+00:00Jakob Unterwurzacher2022-08-28T09:11:36+00:00urn:sha1:003a7fa2e53ac15d2c94a34102ae12b69b23c586