HostProcessHardening calls prctl(PR_SET_DUMPABLE, 0) through LibraryImport, once per process, from the ProcessSpawnPolicy constructor, and warns when DOTNET_EnableDiagnostics is not 0. Test projects consume the one-shot call with the flag off in a module initializer. A HardeningProbe helper backs a Linux-only /proc integration test.
12 lines
439 B
XML
12 lines
439 B
XML
<Project Sdk="Microsoft.NET.Sdk">
|
|
<PropertyGroup>
|
|
<OutputType>Exe</OutputType>
|
|
<IsPackable>false</IsPackable>
|
|
<IsTestProject>false</IsTestProject>
|
|
<Description>Helper for HostProcessHardeningTests: applies hardening, prints ok, waits for stdin to close.</Description>
|
|
</PropertyGroup>
|
|
<ItemGroup>
|
|
<ProjectReference Include="../../src/Volcanic.AgenticCore/Volcanic.AgenticCore.csproj" />
|
|
</ItemGroup>
|
|
</Project>
|