README
¶
Package psx provides a CGo backed API for invoking system calls in a way that each system call is mirrored on all pthreads of the combined Go/CGo runtime. Since the Go runtime treats all pthreads as interchangeable, a feature like this is needed to meaningfully change process privilege (including dropping privilege) in a Go program running on Linux. This package is required by: "kernel.org/pub/linux/libs/security/libcap/cap" The functionality is implemented by a C library: libpsx, which is distributed with the libcap. The official release announcement site for libcap and libpsx is: https://sites.google.com/site/fullycapable/ Like libcap/libpsx itself, the psx package is distributed with a "you choose" License. Specifically: BSD three clause, or GPL2. See the LICENSE file. Andrew G. Morgan <morgan@kernel.org>
Documentation
¶
Overview ¶
Package psx provides support for system calls that are run simultanously on all pthreads.
This property can be used to work around a lack of native Go support for such a feature. Something that is the subject of:
https://github.com/golang/go/issues/1435
The package works via CGo wrappers for system call functions that call the C [lib]psx functions of these names. This ensures that the system calls execute simultaneously on all the pthreads of the Go (and CGo) combined runtime.
The psx support works in the following way: the pthread that is first asked to execute the syscall does so, and determines if it succeeds or fails. If it fails, it returns immediately without attempting the syscall on other pthreads. If the initial attempt succeeds, however, then the runtime is stopped in order for the same system call to be performed on all the remaining pthreads of the runtime. Once all pthreads have completed the syscall, the return codes are those obtained by the first pthread's invocation of the syscall.
Note, there is no need to use this variant of syscall where the syscalls only read state from the kernel. However, since Go's runtime freely migrates code execution between pthreads, support of this type is required for any successful attempt to fully drop or modify the privilege of a running Go program under Linux.
More info on how Linux privilege works can be found here:
https://sites.google.com/site/fullycapable
WARNING: Correct compilation of this package may require an extra step:
If your Go compiler is older than go1.15, a workaround may be required to be able to link this package. In order to do what it needs to this package employs some unusual linking flags.
The workaround is to build with the following CGO_LDFLAGS_ALLOW in effect:
export CGO_LDFLAGS_ALLOW="-Wl,-?-wrap[=,][^-.@][^,]*"
Copyright (c) 2019,20 Andrew G. Morgan <morgan@kernel.org>
The psx package is licensed with a (you choose) BSD 3-clause or GPL2. See LICENSE file for details.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Syscall3 ¶
Syscall3 performs a 3 argument syscall using the libpsx C function psx_syscall3(). Syscall3 differs from syscall.[Raw]Syscall() insofar as it is simultaneously executed on every pthread of the combined Go and CGo runtimes.
func Syscall6 ¶
func Syscall6(syscallnr, arg1, arg2, arg3, arg4, arg5, arg6 uintptr) (uintptr, uintptr, syscall.Errno)
Syscall6 performs a 6 argument syscall using the libpsx C function psx_syscall6(). Syscall6 differs from syscall.[Raw]Syscall6() insofar as it is simultaneously executed on every pthread of the combined Go and CGo runtimes.
Types ¶
This section is empty.
Source Files
¶
- psx.go