diff options
author | David Gibson <david@gibson.dropbear.id.au> | 2022-09-12 22:24:03 +1000 |
---|---|---|
committer | Stefano Brivio <sbrivio@redhat.com> | 2022-09-13 05:31:51 +0200 |
commit | d72a1e7bb96b461eb47d921436f7fe344e7b268a (patch) | |
tree | 907c832672c6f241aac406b6b3dc72ebaa879f64 /util.h | |
parent | 5d3b50c1006590c4b5aab7339203880caa8f2525 (diff) | |
download | passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.tar passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.tar.gz passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.tar.bz2 passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.tar.lz passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.tar.xz passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.tar.zst passt-d72a1e7bb96b461eb47d921436f7fe344e7b268a.zip |
Move self-isolation code into a separate file
passt/pasta contains a number of routines designed to isolate passt from
the rest of the system for security. These are spread through util.c and
passt.c. Move them together into a new isolation.c file.
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Diffstat (limited to 'util.h')
-rw-r--r-- | util.h | 2 |
1 files changed, 0 insertions, 2 deletions
@@ -233,8 +233,6 @@ int bitmap_isset(const uint8_t *map, int bit); char *line_read(char *buf, size_t len, int fd); void procfs_scan_listen(struct ctx *c, uint8_t proto, int ip_version, int ns, uint8_t *map, uint8_t *exclude); -void drop_caps(void); -void drop_root(uid_t uid, gid_t gid); int ns_enter(const struct ctx *c); void write_pidfile(int fd, pid_t pid); int __daemon(int pidfile_fd, int devnull_fd); |