diff options
Diffstat (limited to 'src/xz/main.c')
| -rw-r--r-- | src/xz/main.c | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/src/xz/main.c b/src/xz/main.c index f0c2194c..9c902833 100644 --- a/src/xz/main.c +++ b/src/xz/main.c @@ -13,6 +13,13 @@ #include "private.h" #include <ctype.h> +// prctl(PR_SET_NO_NEW_PRIVS, ...) is required with Landlock but it can be +// activated even when conditions for strict sandboxing aren't met. +#ifdef HAVE_LINUX_LANDLOCK_H +# include <sys/prctl.h> +#endif + + /// Exit status to use. This can be changed with set_exit_status(). static enum exit_status_type exit_status = E_SUCCESS; @@ -156,6 +163,18 @@ main(int argc, char **argv) } #endif +#ifdef HAVE_LINUX_LANDLOCK_H + // Prevent the process from gaining new privileges. This must be done + // before landlock_restrict_self(2) in file_io.c but since we will + // never need new privileges, this call can be done here already. + // + // This is supported since Linux 3.5. Ignore the return value to + // keep compatibility with old kernels. landlock_restrict_self(2) + // will fail if the no_new_privs attribute isn't set, thus if prctl() + // fails here the error will still be detected when it matters. + (void)prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0); +#endif + #if defined(_WIN32) && !defined(__CYGWIN__) InitializeCriticalSection(&exit_status_cs); #endif |