setcap 다시 제거 -> iptables로 정리

This commit is contained in:
2023-11-24 17:19:26 +09:00
parent d4cd792950
commit 2ae42d0b08
3 changed files with 1 additions and 33 deletions

View File

@ -153,11 +153,7 @@ func prepareProcessLaunch(storageRoot string, req *shared.StartProcessRequest) *
if err == nil && fi.IsDir() {
exefile := "./" + path.Clean(strings.TrimPrefix(req.Args[0], "/"))
err = set_permission(path.Join(verpath, exefile))
if err != nil {
logger.Println("set_permission failed :", err)
return nil
}
os.Chmod(path.Join(verpath, exefile), 0777)
exef, _ := os.Executable()
cmd := exec.Command(path.Join(path.Dir(exef), verpath, exefile), req.Args[1:]...)

View File

@ -1,7 +0,0 @@
//go:build client && windows
package client
func set_permission(path string) error {
return nil
}

View File

@ -1,21 +0,0 @@
//go:build client && linux
package client
import (
"os"
"os/exec"
)
func init() {
file, _ := os.OpenFile("setcap.sh", os.O_CREATE|os.O_TRUNC|os.O_RDWR, 0777)
file.Write([]byte("sudo setcap 'cap_net_bind_service=+ep' $1"))
file.Sync()
file.Close()
}
func set_permission(path string) error {
os.Chmod(path, 0777)
cmd := exec.Command("/bin/bash", "./setcap.sh", path)
return cmd.Run()
}