bastion 0.53.2

client-go/rootexec_watch_other.go

@@ -0,0 +1,27 @@
+//go:build !linux
+
+package main
+
+import "syscall"
+
+// Only Linux watches where a root command connects. Elsewhere every command
+// reads as not watched, so the host treats its output as untrusted.
+
+func rootExecWatchStartKernel(sessionID string) *rootExecWatch {
+	_ = sessionID
+	return &rootExecWatch{fd: -1, Err: "this machine is not Linux, where the watch runs"}
+}
+
+func rootExecWatchStopKernel(w *rootExecWatch) ([]rootExecConn, string) {
+	if w == nil {
+		return nil, "no watch was started"
+	}
+	return nil, w.Err
+}
+
+func rootExecWatchSweep() {}
+
+// No cgroup of its own here: the process-group kill is all there is.
+func rootExecWatchKillKernel(w *rootExecWatch) { _ = w }
+
+func rootExecIntoCgroup(attr *syscall.SysProcAttr, fd int) { _, _ = attr, fd }