executablepin

Documentation

Index

• func SealedCopy(source *os.File, size int64, name string) (_ *os.File, returnErr error)
• func Validate(file *os.File, size int64) error

Functions

func SealedCopy

func SealedCopy(source *os.File, size int64, name string) (_ *os.File, returnErr error)

SealedCopy copies exactly size bytes into an anonymous, kernel-sealed executable object. It does not depend on TMPDIR or any executable filesystem mount, and the returned content cannot be written, grown, or truncated.

func Validate

func Validate(file *os.File, size int64) error

Validate performs bounded metadata/seal validation suitable for the final exec barrier; it never re-reads the executable content.