package bansuid

import "gopkg.in/hlandau/service.v2/daemon/bansuid"

Package bansuid provides a function to prevent processes from reacquiring privileges.

Index ¶

• Variables
• func BanSuid() error

Variables ¶

var ErrNotSupported = errors.New("bansuid not supported")

Returned by BanSuid if it is not supported on the current platform.

Functions ¶

func BanSuid ¶

func BanSuid() error

On Linux, uses prctl() SECUREBITS and NO_NEW_PRIVS to prevent the process or its descendants from ever obtaining privileges by execing a suid/sgid/cap xattr binary. Returns ErrNotSupported if platform is not supported. May return other errors.

Source Files ¶

prctl.go prctl_linux.go