openbsd_pledge.go 2.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495
  1. // Copyright 2016 The Go Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style
  3. // license that can be found in the LICENSE file.
  4. // +build openbsd
  5. // +build 386 amd64 arm
  6. package unix
  7. import (
  8. "errors"
  9. "fmt"
  10. "strconv"
  11. "syscall"
  12. "unsafe"
  13. )
  14. const (
  15. _SYS_PLEDGE = 108
  16. )
  17. // Pledge implements the pledge syscall.
  18. //
  19. // The pledge syscall does not accept execpromises on OpenBSD releases
  20. // before 6.3.
  21. //
  22. // execpromises must be empty when Pledge is called on OpenBSD
  23. // releases predating 6.3, otherwise an error will be returned.
  24. //
  25. // For more information see pledge(2).
  26. func Pledge(promises, execpromises string) error {
  27. maj, min, err := majmin()
  28. if err != nil {
  29. return err
  30. }
  31. // If OpenBSD <= 5.9, pledge is not available.
  32. if (maj == 5 && min != 9) || maj < 5 {
  33. return fmt.Errorf("pledge syscall is not available on OpenBSD %d.%d", maj, min)
  34. }
  35. // If OpenBSD <= 6.2 and execpromises is not empty
  36. // return an error - execpromises is not available before 6.3
  37. if (maj < 6 || (maj == 6 && min <= 2)) && execpromises != "" {
  38. return fmt.Errorf("cannot use execpromises on OpenBSD %d.%d", maj, min)
  39. }
  40. pptr, err := syscall.BytePtrFromString(promises)
  41. if err != nil {
  42. return err
  43. }
  44. // This variable will hold either a nil unsafe.Pointer or
  45. // an unsafe.Pointer to a string (execpromises).
  46. var expr unsafe.Pointer
  47. // If we're running on OpenBSD > 6.2, pass execpromises to the syscall.
  48. if maj > 6 || (maj == 6 && min > 2) {
  49. exptr, err := syscall.BytePtrFromString(execpromises)
  50. if err != nil {
  51. return err
  52. }
  53. expr = unsafe.Pointer(exptr)
  54. }
  55. _, _, e := syscall.Syscall(_SYS_PLEDGE, uintptr(unsafe.Pointer(pptr)), uintptr(expr), 0)
  56. if e != 0 {
  57. return e
  58. }
  59. return nil
  60. }
  61. // majmin returns major and minor version number for an OpenBSD system.
  62. func majmin() (major int, minor int, err error) {
  63. var v Utsname
  64. err = Uname(&v)
  65. if err != nil {
  66. return
  67. }
  68. major, err = strconv.Atoi(string(v.Release[0]))
  69. if err != nil {
  70. err = errors.New("cannot parse major version number returned by uname")
  71. return
  72. }
  73. minor, err = strconv.Atoi(string(v.Release[2]))
  74. if err != nil {
  75. err = errors.New("cannot parse minor version number returned by uname")
  76. return
  77. }
  78. return
  79. }