Privatae
28 lines
756 B
Go
28 lines
756 B
Go
//go:build !linux
|
|
|
|
package main
|
|
|
|
import "syscall"
|
|
|
|
// Only Linux watches where a root command connects. Elsewhere every command
|
|
// reads as not watched, so the host treats its output as untrusted.
|
|
|
|
func rootExecWatchStartKernel(sessionID string) *rootExecWatch {
|
|
_ = sessionID
|
|
return &rootExecWatch{fd: -1, Err: "this machine is not Linux, where the watch runs"}
|
|
}
|
|
|
|
func rootExecWatchStopKernel(w *rootExecWatch) ([]rootExecConn, string) {
|
|
if w == nil {
|
|
return nil, "no watch was started"
|
|
}
|
|
return nil, w.Err
|
|
}
|
|
|
|
func rootExecWatchSweep() {}
|
|
|
|
// No cgroup of its own here: the process-group kill is all there is.
|
|
func rootExecWatchKillKernel(w *rootExecWatch) { _ = w }
|
|
|
|
func rootExecIntoCgroup(attr *syscall.SysProcAttr, fd int) { _, _ = attr, fd }
|