cosmopolitan/libc/calls/pledge.internal.h

#ifndef COSMOPOLITAN_LIBC_CALLS_PLEDGE_INTERNAL_H_
#define COSMOPOLITAN_LIBC_CALLS_PLEDGE_INTERNAL_H_
#include "libc/calls/pledge.h"
#include "libc/intrin/promises.internal.h"
#if !(__ASSEMBLER__ + __LINKER__ + 0)
COSMOPOLITAN_C_START_

struct Pledges {
  const char *name;
  const uint16_t *syscalls;
  const size_t len;
};

hidden extern const struct Pledges kPledge[PROMISE_LEN_];

int sys_pledge_linux(unsigned long, int) hidden;
int ParsePromises(const char *, unsigned long *) hidden;

COSMOPOLITAN_C_END_
#endif /* !(__ASSEMBLER__ + __LINKER__ + 0) */
#endif /* COSMOPOLITAN_LIBC_CALLS_PLEDGE_INTERNAL_H_ */
Remove malloc() dependency on pledge() / unveil() This change also fixes a bug with gettid() being incorrect after fork(). We now implement the ENOENT behavior for getauxval(). The getuid() etc. system calls are now faster too. Plus issetugid() will work on BSDs. 2022-07-25 02:40:32 +00:00			`#ifndef COSMOPOLITAN_LIBC_CALLS_PLEDGE_INTERNAL_H_`
			`#define COSMOPOLITAN_LIBC_CALLS_PLEDGE_INTERNAL_H_`
Rewrite Linux pledge() code so it can be a payload It's now possible to build our pledge() polyfill as a dynamic shared object that can be injected into a glibc executable using LD_PRELOAD 2022-08-08 18:41:08 +00:00			`#include "libc/calls/pledge.h"`
			`#include "libc/intrin/promises.internal.h"`
Remove malloc() dependency on pledge() / unveil() This change also fixes a bug with gettid() being incorrect after fork(). We now implement the ENOENT behavior for getauxval(). The getuid() etc. system calls are now faster too. Plus issetugid() will work on BSDs. 2022-07-25 02:40:32 +00:00			`#if !(__ASSEMBLER__ + __LINKER__ + 0)`
			`COSMOPOLITAN_C_START_`

Rewrite Linux pledge() code so it can be a payload It's now possible to build our pledge() polyfill as a dynamic shared object that can be injected into a glibc executable using LD_PRELOAD 2022-08-08 18:41:08 +00:00			`struct Pledges {`
			`const char *name;`
			`const uint16_t *syscalls;`
			`const size_t len;`
			`};`

			`hidden extern const struct Pledges kPledge[PROMISE_LEN_];`

Refactor pledge() to be more configurable The earlier iterations did too much guesswork when it came to things like stderr logging and syscall origin verification. This change will make things more conformant to existing practices. The __pledge_mode extension now can be configured in a better way. There's also a new `-q` flag added to pledge.com, e.g. o//tool/build/pledge.com -qv. ls Is a good way to disable warnings about `tty` access attempts. 2022-08-11 18:27:25 +00:00			`int sys_pledge_linux(unsigned long, int) hidden;`
Rewrite Linux pledge() code so it can be a payload It's now possible to build our pledge() polyfill as a dynamic shared object that can be injected into a glibc executable using LD_PRELOAD 2022-08-08 18:41:08 +00:00			`int ParsePromises(const char , unsigned long ) hidden;`
Remove malloc() dependency on pledge() / unveil() This change also fixes a bug with gettid() being incorrect after fork(). We now implement the ENOENT behavior for getauxval(). The getuid() etc. system calls are now faster too. Plus issetugid() will work on BSDs. 2022-07-25 02:40:32 +00:00
			`COSMOPOLITAN_C_END_`
			`#endif /* !(__ASSEMBLER__ + __LINKER__ + 0) */`
			`#endif /* COSMOPOLITAN_LIBC_CALLS_PLEDGE_INTERNAL_H_ */`