childenv.go RawHistoryFolder

1// Package childenv builds the environment for secret-tool child processes
2// (pass, gpg, sops). execve makes a child dumpable again, so a same-user
3// process can read its /proc/<pid>/environ: Gordon's own GORDON_* values
4// (token secrets, API tokens) must never be inherited.
5package childenv
6
7import (
8	"context"
9	"os"
10	"os/exec"
11	"strings"
12)
13
14// CommandContext is exec.CommandContext with Env set to Env(). Use it for
15// every child process the daemon starts.
16func CommandContext(ctx context.Context, name string, args ...string) *exec.Cmd {
17	cmd := exec.CommandContext(ctx, name, args...) // #nosec G204 -- callers pass constant binaries with validated args
18	cmd.Env = Env()
19	return cmd
20}
21
22// Env returns the current environment without GORDON_* variables.
23func Env() []string {
24	return filter(os.Environ())
25}
26
27func filter(environ []string) []string {
28	kept := make([]string, 0, len(environ))
29	for _, entry := range environ {
30		if !strings.HasPrefix(entry, "GORDON_") {
31			kept = append(kept, entry)
32		}
33	}
34	return kept
35}