393bf674f5
NetSurf (GTK 3) now starts under X and loads pages over HTTPS. Every icon GTK draws goes gdk-pixbuf -> glycin -> a loader process -> a sealed memfd -> GMappedFile, and each hop found something missing: - mkaroot runs Alpine's package triggers in the root under bubblewrap. --no-scripts had skipped them, so there was no MIME cache, pixbuf loader list, compiled GSettings schemas, GIO module cache, font cache or busybox applet links. - /usr/bin/bwrap is a stand-in that parses bubblewrap's options and runs the program with no sandbox: glycin starts its loaders only through bwrap, and real bwrap needs namespaces. schos-base replaces bubblewrap for it. - ioctl: FIOCLEX, FIONCLEX, FIONBIO and FIOASYNC on any descriptor (Rust's std uses them; pipes and sockets answered ENOTTY). - capget/capset: root has every capability, others none. - socketpair accepts SOCK_DGRAM and SOCK_SEQPACKET, carried as a stream. - waitpid and setpgid match children against the thread group leader, so a thread can wait for the process it spawned (ECHILD before). - memfd: fstat reports the ftruncate length, not the page-rounded one; file seals (F_ADD_SEALS, F_GET_SEALS, MFD_ALLOW_SEALING) are recorded and enforced on later writes, truncation and writable mappings; MFD_CLOEXEC is honoured; read-only MAP_PRIVATE maps are allowed. - recvfrom honours O_NONBLOCK and MSG_DONTWAIT. musl's resolver reads its socket until EAGAIN and blocked for ever after the first DNS answer. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S1giNvrHTrPMPw7V6x1kQ4
60 lines
2.4 KiB
C
60 lines
2.4 KiB
C
#pragma once
|
|
|
|
// open(2) flags.
|
|
//
|
|
// These are the *Linux x86-64* values, and they have to be: every program in
|
|
// the userland is built against a libc that sends Linux flag values, and the
|
|
// kernel reads them with these constants. They disagreed for a long time, with
|
|
// results that looked like filesystem corruption rather than like a mistake --
|
|
// Linux O_APPEND (0x400) landed on SchOS's O_TRUNC, so `cmd >> file`
|
|
// truncated the file it was meant to extend, and Linux O_TRUNC (0x200) landed
|
|
// on O_CREATE, so `cmd > file` left whatever was past the new end in place.
|
|
// Neither failure pointed anywhere near a header.
|
|
//
|
|
// Do not tidy these into a neat sequence. They are an external interface.
|
|
|
|
#define O_RDONLY 0x000000
|
|
#define O_WRONLY 0x000001
|
|
#define O_RDWR 0x000002
|
|
#define O_ACCMODE 0x000003
|
|
|
|
#define O_CREATE 0x000040 /* Linux O_CREAT (0100) */
|
|
#define O_CREAT O_CREATE /* the spelling every program uses */
|
|
#define O_EXCL 0x000080 /* Linux O_EXCL (0200) */
|
|
#define O_NOCTTY 0x000100 /* Linux O_NOCTTY (0400) */
|
|
#define O_TRUNC 0x000200 /* Linux O_TRUNC (01000) */
|
|
#define O_APPEND 0x000400 /* Linux O_APPEND (02000) */
|
|
#define O_NONBLOCK 0x000800 /* Linux O_NONBLOCK (04000); no-op here */
|
|
#define O_DIRECTORY 0x010000 /* Linux O_DIRECTORY (0200000) */
|
|
#define O_NOFOLLOW 0x020000 /* Linux O_NOFOLLOW (0400000) */
|
|
#define O_CLOEXEC 0x080000 /* Linux O_CLOEXEC (02000000) */
|
|
|
|
// SchOS-only, placed above every flag Linux defines so it can never be
|
|
// mistaken for one. 0x40000 was used before and collides with Linux O_NOATIME.
|
|
#define O_EXTENT 0x8000000 /* sparse-extent hint */
|
|
|
|
#define F_DUPFD 0
|
|
#define F_GETFD 1
|
|
#define F_SETFD 2
|
|
#define F_GETFL 3
|
|
#define F_SETFL 4
|
|
#define F_DUPFD_CLOEXEC 1030 // Linux value
|
|
// Record locks; see kernel/fs/lock.c.
|
|
#define F_GETLK 5
|
|
#define F_SETLK 6
|
|
#define F_SETLKW 7
|
|
#define F_OFD_GETLK 36
|
|
#define F_OFD_SETLK 37
|
|
#define F_OFD_SETLKW 38
|
|
// memfd seals (Linux values).
|
|
#define F_ADD_SEALS 1033
|
|
#define F_GET_SEALS 1034
|
|
#define F_SEAL_SEAL 0x01
|
|
#define F_SEAL_SHRINK 0x02
|
|
#define F_SEAL_GROW 0x04
|
|
#define F_SEAL_WRITE 0x08
|
|
#define F_SEAL_FUTURE_WRITE 0x10
|
|
#define MFD_CLOEXEC 0x01
|
|
#define MFD_ALLOW_SEALING 0x02
|
|
|
|
#define FD_CLOEXEC 1
|