#+HTML_HEAD: #+HTML_HEAD: #+EXPORT_FILE_NAME: index #+OPTIONS: toc:nil #+TOC: headlines 2 #+TITLE: Lynx Lynx is a simple /unveil/ wrapper. It returns /nil/ on unsupported systems, currently only /OpenBSD/ supports /unveil/. | Project Home | [[https://andinus.nand.sh/lynx][Lynx]] | | Source Code | [[https://tildegit.org/andinus/lynx][Andinus / Lynx]] | | GitHub (Mirror) | [[https://github.com/andinus/lynx][Lynx - GitHub]] | * Examples ** UnveilCommands UnveilCommands takes a slice of commands & unveils them one by one, it will return an error if unveil fails at any step. "no such file or directory" error is ignored because binaries are not placed in every PATH. Default permission is "rx". #+BEGIN_SRC go package main import "tildegit.org/andinus/lynx" func main() { commands := []string{"cd", "ls", "rm"} err = lynx.UnveilCommands(commands) if err != nil { log.Fatal(err) } } #+END_SRC ** UnveilPaths / UnveilPathsStrict UnveilPaths takes a map of path, permission & unveils them one by one, it will return an error if unveil fails at any step. "no such file or directory" error is ignored, if you want to get that error too then use UnveilPathsStrict. #+BEGIN_SRC go package main import "tildegit.org/andinus/lynx" func main() { paths := make(map[string]string) paths["/home"] = "r" paths["/dev/null"] = "rw" paths["/etc/examples"] = "rwc" paths["/root"] = "rwcx" err = lynx.UnveilPaths(paths) if err != nil { log.Fatal(err) } // This will return an error if the path doesn't exist. err = lynx.UnveilPathsStrict(paths) if err != nil { log.Fatal(err) } } #+END_SRC ** UnveilPath / UnveilPathStrict UnveilPath takes a path, permission & unveils it, it will return an error if unveil fails at any step. "no such file or directory" error is ignored, if you want to get that error too then use UnveilPathStrict. #+BEGIN_SRC go package main import "tildegit.org/andinus/lynx" func main() { path := "/dev/null" flags := "rw" err = lynx.UnveilPath(path, flags) if err != nil { log.Fatal(err) } // This will return an error if the path doesn't exist. err = lynx.UnveilPathStrict(path, flags) if err != nil { log.Fatal(err) } } #+END_SRC ** UnveilBlock UnveilBlock is just a wrapper around unix.UnveilBlock, it does nothing extra. You should use unix.UnveilBlock. #+BEGIN_SRC go package main import "tildegit.org/andinus/lynx" func main() { // Block further unveil calls. err = lynx.UnveilBlock() if err != nil { log.Fatal(err) } } #+END_SRC