Internal
internal/platform/processguard
import "github.com/nilstate/scafld/v2/internal/platform/processguard"
Package processguard hardens the scafld process while it handles secrets. On Linux, DisableDumpable stops same-user child processes from reading it through procfs, such as its environment.
Functions
func DisableDumpable() (func(), error)
Source: internal/platform/processguard/dumpable_linux.go:17
DisableDumpable prevents same-uid child processes from reading this process through ptrace-gated procfs files such as /proc/$PPID/environ.