Limit wireproxy's permissions with landlock (#108)

* Limit wireproxy's permissions with landlock

* Show better debug message

* Fix crash when info is null

* Fix crash when landlock ABI is outdated

* remove /dev/std{in,out,err} from landlock restriction
This commit is contained in:
pufferfish 2024-04-13 02:38:48 +01:00 committed by GitHub
parent eccf83a0cf
commit a6797166eb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 108 additions and 20 deletions

2
go.mod
View file

@ -15,6 +15,7 @@ require (
require (
github.com/google/btree v1.1.2 // indirect
github.com/landlock-lsm/go-landlock v0.0.0-20240216195629-efb66220540a // indirect
github.com/sourcegraph/conc v0.3.0 // indirect
golang.org/x/crypto v0.19.0 // indirect
golang.org/x/net v0.21.0 // indirect
@ -22,4 +23,5 @@ require (
golang.org/x/time v0.5.0 // indirect
golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 // indirect
gvisor.dev/gvisor v0.0.0-20230927004350-cbd86285d259 // indirect
kernel.org/pub/linux/libs/security/libcap/psx v1.2.69 // indirect
)