blob: b8098be045df501e38d14aaad188f36e628ac2ef (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
package main
import (
"log"
"tildegit.org/andinus/cetus/cache"
"tildegit.org/andinus/lynx"
)
func main() {
unveil()
app()
}
func unveil() {
paths := make(map[string]string)
paths[cache.Dir()] = "rwc"
paths["/dev/null"] = "rw" // required by feh
paths["/etc/resolv.conf"] = "r"
// ktrace output
paths["/usr/libexec/ld.so"] = "r"
paths["/var/run/ld.so.hints"] = "r"
paths["/usr/lib"] = "r"
paths["/dev/urandom"] = "r"
paths["/etc/hosts"] = "r"
paths["/etc/ssl"] = "r"
err := lynx.UnveilPaths(paths)
if err != nil {
log.Fatal(err)
}
commands := []string{"feh", "gsettings", "pcmanfm", "notify-send"}
err = lynx.UnveilCommands(commands)
if err != nil {
log.Fatal(err)
}
// Block further unveil calls
err = lynx.UnveilBlock()
if err != nil {
log.Fatal(err)
}
}
|