mirrors/wireproxy
1
0
Fork 0
mirror of https://github.com/whyvl/wireproxy.git synced 2025-04-29 19:01:42 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

add pledge call on OpenBSD

Browse source
This commit is contained in:
octeep 2022-03-31 19:46:59 +01:00 • committed by octeep
parent 4e0369eb4c
commit 50ba66c898
3 changed files with 24 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
cmd/wireproxy/main.go
View file

@ -8,18 +8,29 @@ import (
"github.com/akamensky/argparse"
"github.com/octeep/wireproxy"
"suah.dev/protect"
)
const daemonProcess = "daemon-process"
func pledgeOrPanic(promises string) {
err := protect.Pledge(promises)
if err != nil {
log.Panic(err)
}
}
func main() {
pledgeOrPanic("stdio rpath inet dns proc exec")
isDaemonProcess := len(os.Args) > 1 && os.Args[1] == daemonProcess
args := os.Args
if isDaemonProcess {
// remove proc and exec if they are not needed
pledgeOrPanic("stdio rpath inet dns")
args = []string{args[0]}
args = append(args, os.Args[2:]...)
}
parser := argparse.NewParser("wireproxy", "Userspace wireguard client for proxying")
config := parser.String("c", "config", &argparse.Options{Required: true, Help: "Path of configuration file"})
@ -32,6 +43,11 @@ func main() {
return
}
if !*daemon {
// remove proc and exec if they are not needed
pledgeOrPanic("stdio rpath inet dns")
}
conf, err := wireproxy.ParseConfig(*config)
if err != nil {
log.Panic(err)
@ -64,6 +80,9 @@ func main() {
return
}
// no file access is allowed from now on
pledgeOrPanic("stdio inet dns")
tnet, err := wireproxy.StartWireguard(conf.Device)
if err != nil {
log.Panic(err)