app

Documentation

Index

• Constants
• Variables
• func AsBaseError(err error, target **BaseError) bool
• func TryShim()
• type ACLUpdateError
• type App
  • func New() App
• type BaseError
  • func (e *BaseError) Error() string
  • func (e *BaseError) Message() string
  • func (e *BaseError) Unwrap() error
• type ChangeHostsError
• type CloseDBusError
• type Config
• type ConfinementConfig
• type DBusStartError
• type EnsureDirError
• type ErrDisplayEnv
• type LauncherLookupError
• type LookupDBusError
• type ProcessError
• type PulseCookieAccessError
• type PulseSocketAccessError
• type RevertCompoundError
• type SealConfigError
• type SealDBusError
• type SecurityError
• type StartDBusError
• type StateStoreError
  • func (e *StateStoreError) Error() string
  • func (e *StateStoreError) Unwrap() (errs []error)
• type TmpfileError

Constants

const (
	LaunchMethodSudo uint8 = iota
	LaunchMethodMachineCtl
)

Variables

var (
	ErrConfig = errors.New("no configuration to seal")
	ErrUser   = errors.New("unknown user")
	ErrLaunch = errors.New("invalid launch method")

	ErrSudo       = errors.New("sudo not available")
	ErrSystemd    = errors.New("systemd not available")
	ErrMachineCtl = errors.New("machinectl not available")
)

var (
	ErrWayland  = errors.New(waylandDisplay + " unset")
	ErrXDisplay = errors.New(display + " unset")
)

var (
	ErrPulseCookie = errors.New("pulse cookie not present")
	ErrPulseSocket = errors.New("pulse socket not present")
	ErrPulseMode   = errors.New("unexpected pulse socket mode")
)

var (
	ErrDBusConfig = errors.New("dbus config not supplied")
)

Functions

func AsBaseError

func AsBaseError(err error, target **BaseError) bool

func TryShim

func TryShim()

TryShim attempts the early hidden launcher shim path

Types

type ACLUpdateError

type ACLUpdateError BaseError

type App

type App interface {
	Seal(config *Config) error
	Start() error
	Wait() (int, error)
	WaitErr() error
	String() string
}

func New

func New() App

type BaseError

type BaseError struct {
	// contains filtered or unexported fields
}

BaseError implements an error container with a user-facing message

func (*BaseError) Error

func (e *BaseError) Error() string

func (*BaseError) Message

func (e *BaseError) Message() string

Message returns a user-facing error message

func (*BaseError) Unwrap

func (e *BaseError) Unwrap() error

type ChangeHostsError

type ChangeHostsError BaseError

type CloseDBusError

type CloseDBusError BaseError

type Config

type Config struct {
	// D-Bus application ID
	ID string `json:"id"`
	// username of the target user to switch to
	User string `json:"user"`
	// value passed through to the child process as its argv
	Command []string `json:"command"`
	// string representation of the child's launch method
	Method string `json:"method"`

	// child confinement configuration
	Confinement ConfinementConfig `json:"confinement"`
}

Config is used to seal an *App

type ConfinementConfig

type ConfinementConfig struct {
	// reference to a system D-Bus proxy configuration,
	// nil value disables system bus proxy
	SystemBus *dbus.Config `json:"system_bus,omitempty"`
	// reference to a session D-Bus proxy configuration,
	// nil value makes session bus proxy assume built-in defaults
	SessionBus *dbus.Config `json:"session_bus,omitempty"`

	// child capability enablements
	Enablements state.Enablements `json:"enablements"`
}

ConfinementConfig defines fortified child's confinement

type DBusStartError

type DBusStartError BaseError

type EnsureDirError

type EnsureDirError BaseError

type ErrDisplayEnv

type ErrDisplayEnv BaseError

type LauncherLookupError

type LauncherLookupError BaseError

type LookupDBusError

type LookupDBusError BaseError

type ProcessError

type ProcessError BaseError

ProcessError encapsulates errors returned by starting *exec.Cmd

type PulseCookieAccessError

type PulseCookieAccessError BaseError

type PulseSocketAccessError

type PulseSocketAccessError BaseError

type RevertCompoundError

type RevertCompoundError interface {
	Error() string
	Unwrap() []error
}

type SealConfigError

type SealConfigError BaseError

type SealDBusError

type SealDBusError BaseError

type SecurityError

type SecurityError BaseError

type StartDBusError

type StartDBusError BaseError

type StateStoreError

type StateStoreError struct {
	// whether inner function was called
	Inner bool
	// error returned by state.Store Do method
	DoErr error
	// error returned by state.Backend Save method
	InnerErr error
	// any other errors needing to be tracked
	Err error
}

StateStoreError is returned for a failed state save

func (*StateStoreError) Error

func (e *StateStoreError) Error() string

func (*StateStoreError) Unwrap

func (e *StateStoreError) Unwrap() (errs []error)

type TmpfileError

type TmpfileError BaseError