platform

func Command ¶

func Command(ctx context.Context, identity *Identity, name string, args ...string) (*exec.Cmd, func(), error)

Command applies identity and process isolation before any child can execute. The caller must invoke release after Run or Start, even on error.

func Executable ¶

func Executable(name string) string

Executable adds the native executable suffix to a tool name.

func Guard ¶

func Guard() error

func Kill ¶

func Kill(p *os.Process) error

Kill terminates only a process group created by Command.

func Own ¶

func Own(path string, id *Identity) error

func ProtectExecutableWrite ¶

func ProtectExecutableWrite() func()

ProtectExecutableWrite prevents another goroutine's fork from inheriting a writable descriptor for a new executable. CLOEXEC closes it only at exec; Linux can otherwise reject our launch with ETXTBSY during that interval.

func ValidateIdentity ¶

func ValidateIdentity(id *Identity) error