Method ValidatePID

lib/process_validator.go:44–94

ValidatePID performs comprehensive PID validation according to security requirements

(pid int)

// ValidatePID performs comprehensive PID validation according to security requirements
func (pv *ProcessValidator) ValidatePID(pid int) error {
	// Check PID is a positive integer and within valid range
	if pid <= 0 {
		return PIDValidationError{
			PID:     pid,
			Message: "PID must be a positive integer",
		}
	}

	// Check maximum PID based on OS
	maxPID := pv.getMaxPID()
	if pid > maxPID {
		return PIDValidationError{
			PID:     pid,
			Message: fmt.Sprintf("PID exceeds maximum allowed value (%d)", maxPID),
		}
	}

	// Safety check: prevent killing critical system processes
	if pv.isCriticalSystemProcess(pid) {
		return PIDValidationError{
			PID:     pid,
			Message: "Cannot kill critical system process",
		}
	}

	// Verify process exists and is not a kernel thread
	if err := pv.verifyProcessExists(pid); err != nil {
		return PIDValidationError{
			PID:     pid,
			Message: err.Error(),
		}
	}

	// Check if process is a kernel thread (Linux-specific)
	if runtime.GOOS == "linux" {
		if isKernel, err := pv.isKernelThread(pid); err != nil {
			return PIDValidationError{
				PID:     pid,
				Message: fmt.Sprintf("Error checking process type: %v", err),
			}
		} else if isKernel {
			return PIDValidationError{
				PID:     pid,
				Message: "Cannot kill kernel thread",
			}
		}
	}

	return nil
}

// ValidatePIDWithOwnership performs comprehensive PID validation including process ownership checks
func (pv *ProcessValidator) ValidatePIDWithOwnership(pid int) error {