1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

8bdbb8d9cbe1d35708385573d70984ab4533812dLennart Poettering#include <assert.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <dirent.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <errno.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <fcntl.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <unistd.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <string.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <signal.h>

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering#include <sys/socket.h>

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering#include <sys/un.h>

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering#include <sys/prctl.h>

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering#include <linux/sched.h>

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering#include <sys/types.h>

eef46c372f64f40dd75415b2c504c73138719c8dLennart Poettering#include <sys/stat.h>

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen#include <grp.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <pwd.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <sys/mount.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <linux/fs.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <linux/oom.h>

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include <sys/poll.h>

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen#include <glob.h>

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen#include <sys/personality.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <libgen.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#undef basename

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#ifdef HAVE_PAM

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering#include <security/pam_appl.h>

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering#endif

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering#ifdef HAVE_SELINUX

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering#include <selinux/selinux.h>

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering#endif

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering#ifdef HAVE_SECCOMP

3d7415f43f0fe6a821d7bc4a341ba371e8a30ef3Lennart Poettering#include <seccomp.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#endif

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#ifdef HAVE_APPARMOR

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include <sys/apparmor.h>

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#endif

e56056e93d33619a3acf13e483900b4f8938228fThomas Hindoe Paaboel Andersen

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "execute.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "strv.h"

d21ed1ead18d16d35c30299a69d3366847f8a039Lennart Poettering#include "macro.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "capability.h"

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering#include "util.h"

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering#include "log.h"

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering#include "sd-messages.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "ioprio.h"

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering#include "securebits.h"

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering#include "namespace.h"

3d7415f43f0fe6a821d7bc4a341ba371e8a30ef3Lennart Poettering#include "exit-status.h"

6e18cc9fa078d2a967251017ddb5baefb104b720Lennart Poettering#include "missing.h"

3d7415f43f0fe6a821d7bc4a341ba371e8a30ef3Lennart Poettering#include "utmp-wtmp.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "def.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "path-util.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "env-util.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "fileio.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "unit.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "async.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "selinux-util.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "errno-list.h"

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering#include "af-list.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "mkdir.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "apparmor-util.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "smack-util.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "bus-endpoint.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "label.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "cap-list.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#ifdef HAVE_SECCOMP

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#include "seccomp-util.h"

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#endif

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#define IDLE_TIMEOUT_USEC (5*USEC_PER_SEC)

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering#define IDLE_TIMEOUT2_USEC (1*USEC_PER_SEC)

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering#define TTY_MODE 0620

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering#define SNDBUF_SIZE (8*1024*1024)

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poetteringstatic int shift_fds(int fds[], unsigned n_fds) {

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering int start, restart_from;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if (n_fds <= 0)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering return 0;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering /* Modifies the fds array! (sorts it) */

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering assert(fds);

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering start = 0;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering for (;;) {

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering int i;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering restart_from = -1;

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering for (i = start; i < (int) n_fds; i++) {

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering int nfd;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering /* Already at right index? */

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if (fds[i] == i+3)

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen continue;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering if ((nfd = fcntl(fds[i], F_DUPFD, i+3)) < 0)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return -errno;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering safe_close(fds[i]);

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering fds[i] = nfd;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering /* Hmm, the fd we wanted isn't free? Then

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen if (nfd != i+3 && restart_from < 0)

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen restart_from = i;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen }

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen if (restart_from < 0)

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen break;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

3d7415f43f0fe6a821d7bc4a341ba371e8a30ef3Lennart Poettering start = restart_from;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen }

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return 0;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering}

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

3d7415f43f0fe6a821d7bc4a341ba371e8a30ef3Lennart Poetteringstatic int flags_fds(const int fds[], unsigned n_fds, bool nonblock) {

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen unsigned i;

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poettering int r;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen if (n_fds <= 0)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering return 0;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering assert(fds);

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering /* Drops/Sets O_NONBLOCK and FD_CLOEXEC from the file flags */

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering for (i = 0; i < n_fds; i++) {

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if ((r = fd_nonblock(fds[i], nonblock)) < 0)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering return r;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering /* We unconditionally drop FD_CLOEXEC from the fds,

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if ((r = fd_cloexec(fds[i], false)) < 0)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering return r;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering }

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering return 0;

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering}

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering_pure_ static const char *tty_path(const ExecContext *context) {

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen assert(context);

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poettering

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen if (context->tty_path)

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen return context->tty_path;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poettering return "/dev/console";

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering}

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poetteringstatic void exec_context_tty_reset(const ExecContext *context) {

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering assert(context);

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if (context->tty_vhangup)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering terminal_vhangup(tty_path(context));

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if (context->tty_reset)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering reset_terminal(tty_path(context));

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering if (context->tty_vt_disallocate && context->tty_path)

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering vt_disallocate(context->tty_path);

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering}

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering

e56056e93d33619a3acf13e483900b4f8938228fThomas Hindoe Paaboel Andersenstatic bool is_terminal_output(ExecOutput o) {

0b63e2789f984e84f40bf6e49f5da15c87298cedLennart Poettering return

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering o == EXEC_OUTPUT_TTY ||

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering o == EXEC_OUTPUT_SYSLOG_AND_CONSOLE ||

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering o == EXEC_OUTPUT_KMSG_AND_CONSOLE ||

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering o == EXEC_OUTPUT_JOURNAL_AND_CONSOLE;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering}

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poetteringstatic int open_null_as(int flags, int nfd) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering int fd, r;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering assert(nfd >= 0);

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering fd = open("/dev/null", flags|O_NOCTTY);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (fd < 0)

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return -errno;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (fd != nfd) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering r = dup2(fd, nfd) < 0 ? -errno : nfd;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering safe_close(fd);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering } else

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering r = nfd;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return r;

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering}

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poetteringstatic int connect_logger_as(const ExecContext *context, ExecOutput output, const char *ident, const char *unit_id, int nfd) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering int fd, r;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering union sockaddr_union sa = {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering .un.sun_family = AF_UNIX,

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering .un.sun_path = "/run/systemd/journal/stdout",

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering };

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering assert(context);

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering assert(output < _EXEC_OUTPUT_MAX);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering assert(ident);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering assert(nfd >= 0);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering fd = socket(AF_UNIX, SOCK_STREAM, 0);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (fd < 0)

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return -errno;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering r = connect(fd, &sa.sa, offsetof(struct sockaddr_un, sun_path) + strlen(sa.un.sun_path));

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (r < 0) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering safe_close(fd);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return -errno;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering }

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (shutdown(fd, SHUT_RD) < 0) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering safe_close(fd);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return -errno;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering }

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering fd_inc_sndbuf(fd, SNDBUF_SIZE);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering dprintf(fd,

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering "%s\n"

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering "%s\n"

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering "%i\n"

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering "%i\n"

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering "%i\n"

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering "%i\n"

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering "%i\n",

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering context->syslog_identifier ? context->syslog_identifier : ident,

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering unit_id,

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering context->syslog_priority,

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering !!context->syslog_level_prefix,

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering output == EXEC_OUTPUT_SYSLOG || output == EXEC_OUTPUT_SYSLOG_AND_CONSOLE,

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering output == EXEC_OUTPUT_KMSG || output == EXEC_OUTPUT_KMSG_AND_CONSOLE,

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering is_terminal_output(output));

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering if (fd != nfd) {

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering r = dup2(fd, nfd) < 0 ? -errno : nfd;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering safe_close(fd);

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering } else

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering r = nfd;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering return r;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering}

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poetteringstatic int open_terminal_as(const char *path, mode_t mode, int nfd) {

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering int fd, r;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering assert(path);

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering assert(nfd >= 0);

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering if ((fd = open_terminal(path, mode | O_NOCTTY)) < 0)

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering return fd;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering if (fd != nfd) {

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering r = dup2(fd, nfd) < 0 ? -errno : nfd;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering safe_close(fd);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering } else

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering r = nfd;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering return r;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering}

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poetteringstatic bool is_terminal_input(ExecInput i) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering i == EXEC_INPUT_TTY ||

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering i == EXEC_INPUT_TTY_FORCE ||

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering i == EXEC_INPUT_TTY_FAIL;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering}

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poetteringstatic int fixup_input(ExecInput std_input, int socket_fd, bool apply_tty_stdin) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (is_terminal_input(std_input) && !apply_tty_stdin)

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return EXEC_INPUT_NULL;

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (std_input == EXEC_INPUT_SOCKET && socket_fd < 0)

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering return EXEC_INPUT_NULL;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering return std_input;

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering}

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poetteringstatic int fixup_output(ExecOutput std_output, int socket_fd) {

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering if (std_output == EXEC_OUTPUT_SOCKET && socket_fd < 0)

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return EXEC_OUTPUT_INHERIT;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

10f9c75519671e7c7ab8993b54fe22da7c2d0c38Lennart Poettering return std_output;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering}

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poetteringstatic int setup_input(const ExecContext *context, int socket_fd, bool apply_tty_stdin) {

8937e7b68940d0fa0d0aab90eb7425fa7dccebc9Lennart Poettering ExecInput i;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering assert(context);

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering i = fixup_input(context->std_input, socket_fd, apply_tty_stdin);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering switch (i) {

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering case EXEC_INPUT_NULL:

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering return open_null_as(O_RDONLY, STDIN_FILENO);

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering

cd61c3bfd718fb398cc53ced906266a9297782c9Lennart Poettering case EXEC_INPUT_TTY:

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering case EXEC_INPUT_TTY_FORCE:

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen case EXEC_INPUT_TTY_FAIL: {

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen int fd, r;

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering fd = acquire_terminal(tty_path(context),

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering i == EXEC_INPUT_TTY_FAIL,

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering i == EXEC_INPUT_TTY_FORCE,

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering false,

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering USEC_INFINITY);

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering if (fd < 0)

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering return fd;

d21ed1ead18d16d35c30299a69d3366847f8a039Lennart Poettering

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering if (fd != STDIN_FILENO) {

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering r = dup2(fd, STDIN_FILENO) < 0 ? -errno : STDIN_FILENO;

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering safe_close(fd);

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering } else

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering r = STDIN_FILENO;

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering

a7893c6b28772edbc7e1fea3c209caa54d465648Lennart Poettering return r;

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering }

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering case EXEC_INPUT_SOCKET:

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering return dup2(socket_fd, STDIN_FILENO) < 0 ? -errno : STDIN_FILENO;

a7893c6b28772edbc7e1fea3c209caa54d465648Lennart Poettering

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering default:

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen assert_not_reached("Unknown input type");

a7893c6b28772edbc7e1fea3c209caa54d465648Lennart Poettering }

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering}

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poetteringstatic int setup_output(const ExecContext *context, int fileno, int socket_fd, const char *ident, const char *unit_id, bool apply_tty_stdin) {

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering ExecOutput o;

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering ExecInput i;

a7893c6b28772edbc7e1fea3c209caa54d465648Lennart Poettering int r;

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poettering

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poettering assert(context);

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering assert(ident);

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering i = fixup_input(context->std_input, socket_fd, apply_tty_stdin);

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering o = fixup_output(context->std_output, socket_fd);

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering if (fileno == STDERR_FILENO) {

9d12709626bccc0cae677a7035f62efe6aabb4abLennart Poettering ExecOutput e;

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering e = fixup_output(context->std_error, socket_fd);

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering /* This expects the input and output are already set up */

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering /* Don't change the stderr file descriptor if we inherit all

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering if (e == EXEC_OUTPUT_INHERIT &&

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering o == EXEC_OUTPUT_INHERIT &&

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering i == EXEC_INPUT_NULL &&

aa1936ea1a89c2bb968ba33e3274898a4eeae771Lennart Poettering !is_terminal_input(context->std_input) &&

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering getppid () != 1)

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return fileno;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering /* Duplicate from stdout if possible */

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (e == o || e == EXEC_OUTPUT_INHERIT)

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return dup2(STDOUT_FILENO, fileno) < 0 ? -errno : fileno;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering o = e;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering } else if (o == EXEC_OUTPUT_INHERIT) {

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering /* If input got downgraded, inherit the original value */

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (i == EXEC_INPUT_NULL && is_terminal_input(context->std_input))

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return open_terminal_as(tty_path(context), O_WRONLY, fileno);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering /* If the input is connected to anything that's not a /dev/null, inherit that... */

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (i != EXEC_INPUT_NULL)

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return dup2(STDIN_FILENO, fileno) < 0 ? -errno : fileno;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering /* If we are not started from PID 1 we just inherit STDOUT from our parent process. */

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (getppid() != 1)

0dd25fb9f005d8ab7ac4bc10a609d00569f8c56aLennart Poettering return fileno;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering /* We need to open /dev/null here anew, to get the right access mode. */

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return open_null_as(O_WRONLY, fileno);

0dd25fb9f005d8ab7ac4bc10a609d00569f8c56aLennart Poettering }

0dd25fb9f005d8ab7ac4bc10a609d00569f8c56aLennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering switch (o) {

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering case EXEC_OUTPUT_NULL:

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return open_null_as(O_WRONLY, fileno);

0dd25fb9f005d8ab7ac4bc10a609d00569f8c56aLennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering case EXEC_OUTPUT_TTY:

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (is_terminal_input(i))

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return dup2(STDIN_FILENO, fileno) < 0 ? -errno : fileno;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering /* We don't reset the terminal if this is just about output */

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return open_terminal_as(tty_path(context), O_WRONLY, fileno);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering case EXEC_OUTPUT_SYSLOG:

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering case EXEC_OUTPUT_SYSLOG_AND_CONSOLE:

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering case EXEC_OUTPUT_KMSG:

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering case EXEC_OUTPUT_KMSG_AND_CONSOLE:

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering case EXEC_OUTPUT_JOURNAL:

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering case EXEC_OUTPUT_JOURNAL_AND_CONSOLE:

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering r = connect_logger_as(context, o, ident, unit_id, fileno);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (r < 0) {

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering log_unit_struct(unit_id,

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering LOG_CRIT,

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering LOG_MESSAGE("Failed to connect %s of %s to the journal socket: %s",

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering fileno == STDOUT_FILENO ? "stdout" : "stderr",

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering unit_id, strerror(-r)),

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering LOG_ERRNO(-r),

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering NULL);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering r = open_null_as(O_WRONLY, fileno);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering }

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return r;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering case EXEC_OUTPUT_SOCKET:

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering assert(socket_fd >= 0);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return dup2(socket_fd, fileno) < 0 ? -errno : fileno;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering default:

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering assert_not_reached("Unknown error type");

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering }

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering}

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poetteringstatic int chown_terminal(int fd, uid_t uid) {

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering struct stat st;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering assert(fd >= 0);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering /* This might fail. What matters are the results. */

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering (void) fchown(fd, uid, -1);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering (void) fchmod(fd, TTY_MODE);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering if (fstat(fd, &st) < 0)

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering return -errno;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering if (st.st_uid != uid || (st.st_mode & 0777) != TTY_MODE)

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering return -EPERM;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering return 0;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering}

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poetteringstatic int setup_confirm_stdio(int *_saved_stdin,

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering int *_saved_stdout) {

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering int fd = -1, saved_stdin, saved_stdout = -1, r;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering assert(_saved_stdin);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering assert(_saved_stdout);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering saved_stdin = fcntl(STDIN_FILENO, F_DUPFD, 3);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering if (saved_stdin < 0)

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering return -errno;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering saved_stdout = fcntl(STDOUT_FILENO, F_DUPFD, 3);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering if (saved_stdout < 0) {

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering r = errno;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering goto fail;

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering }

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering fd = acquire_terminal(

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering "/dev/console",

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering false,

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers false,

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering false,

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers DEFAULT_CONFIRM_USEC);

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers if (fd < 0) {

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering r = fd;

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers goto fail;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering }

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering r = chown_terminal(fd, getuid());

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (r < 0)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering goto fail;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen if (dup2(fd, STDIN_FILENO) < 0) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering r = -errno;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering goto fail;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering }

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering if (dup2(fd, STDOUT_FILENO) < 0) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering r = -errno;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering goto fail;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering }

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (fd >= 2)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering safe_close(fd);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering *_saved_stdin = saved_stdin;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering *_saved_stdout = saved_stdout;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering return 0;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poetteringfail:

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering safe_close(saved_stdout);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering safe_close(saved_stdin);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering safe_close(fd);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return r;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering}

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering_printf_(1, 2) static int write_confirm_message(const char *format, ...) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering _cleanup_close_ int fd = -1;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering va_list ap;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering assert(format);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering fd = open_terminal("/dev/console", O_WRONLY|O_NOCTTY|O_CLOEXEC);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (fd < 0)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return fd;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering va_start(ap, format);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering vdprintf(fd, format, ap);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering va_end(ap);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return 0;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering}

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poetteringstatic int restore_confirm_stdio(int *saved_stdin,

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering int *saved_stdout) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering int r = 0;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering assert(saved_stdin);

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering assert(saved_stdout);

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering release_terminal();

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (*saved_stdin >= 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (dup2(*saved_stdin, STDIN_FILENO) < 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering r = -errno;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (*saved_stdout >= 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (dup2(*saved_stdout, STDOUT_FILENO) < 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering r = -errno;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering safe_close(*saved_stdin);

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering safe_close(*saved_stdout);

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering return r;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering}

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poetteringstatic int ask_for_confirmation(char *response, char **argv) {

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering int saved_stdout = -1, saved_stdin = -1, r;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering _cleanup_free_ char *line = NULL;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering r = setup_confirm_stdio(&saved_stdin, &saved_stdout);

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering if (r < 0)

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering return r;

878cd7e95ca303f9851d227a22d2022bd49944b0Lennart Poettering

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering line = exec_command_line(argv);

717603e391b52983ca1fd218e7333a1b9dfc5c05Lennart Poettering if (!line)

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering return -ENOMEM;

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering r = ask_char(response, "yns", "Execute %s? [Yes, No, Skip] ", line);

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering restore_confirm_stdio(&saved_stdin, &saved_stdout);

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering return r;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering}

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poetteringstatic int enforce_groups(const ExecContext *context, const char *username, gid_t gid) {

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering bool keep_groups = false;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering int r;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering assert(context);

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering /* Lookup and set GID and supplementary group list. Here too

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering if (context->group || username) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (context->group) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering const char *g = context->group;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if ((r = get_group_creds(&g, &gid)) < 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering return r;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering }

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering /* First step, initialize groups from /etc/groups */

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (username && gid != 0) {

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (initgroups(username, gid) < 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering return -errno;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

e7e9b6bb0b0bc5b1eb256a44f8afec6b634f26efZbigniew Jędrzejewski-Szmek keep_groups = true;

e7e9b6bb0b0bc5b1eb256a44f8afec6b634f26efZbigniew Jędrzejewski-Szmek }

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering /* Second step, set our gids */

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (setresgid(gid, gid, gid) < 0)

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering return -errno;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering }

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering if (context->supplementary_groups) {

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering int ngroups_max, k;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering gid_t *gids;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering char **i;

a6c616024db23fef34152c1432892824a07799ccLennart Poettering

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers /* Final step, initialize any manually set supplementary groups */

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering assert_se((ngroups_max = (int) sysconf(_SC_NGROUPS_MAX)) > 0);

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering if (!(gids = new(gid_t, ngroups_max)))

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering return -ENOMEM;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering if (keep_groups) {

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering if ((k = getgroups(ngroups_max, gids)) < 0) {

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering free(gids);

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering return -errno;

8b0cc9a36c8f92f010f2e8465942d2cd7c580d78Lennart Poettering }

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers } else

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers k = 0;

a6c616024db23fef34152c1432892824a07799ccLennart Poettering

a6c616024db23fef34152c1432892824a07799ccLennart Poettering STRV_FOREACH(i, context->supplementary_groups) {

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen const char *g;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering if (k >= ngroups_max) {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering free(gids);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return -E2BIG;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering }

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers g = *i;

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers r = get_group_creds(&g, gids+k);

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers if (r < 0) {

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers free(gids);

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers return r;

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt }

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering k++;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering }

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (setgroups(k, gids) < 0) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering free(gids);

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers return -errno;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering }

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers free(gids);

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers }

89f7c8465cd1ab37347dd0c15920bce31e8225dfLennart Poettering

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers return 0;

f48e75cb9a8112d35855c44a156934f2ee0edb2eLennart Poettering}

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sieversstatic int enforce_user(const ExecContext *context, uid_t uid) {

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers assert(context);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* Sets (but doesn't lookup) the uid and make sure we keep the

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering if (context->capabilities) {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering _cleanup_cap_free_ cap_t d = NULL;

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering static const cap_value_t bits[] = {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering CAP_SETUID, /* Necessary so that we can run setresuid() below */

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers CAP_SETPCAP /* Necessary so that we can set PR_SET_SECUREBITS later on */

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers };

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers /* First step: If we need to keep capabilities but

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen if (uid != 0) {

da927ba997d68401563b927f92e6e40e021a8e5cMichal Schmidt int sb = context->secure_bits | 1<<SECURE_KEEP_CAPS;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

a7893c6b28772edbc7e1fea3c209caa54d465648Lennart Poettering if (prctl(PR_GET_SECUREBITS) != sb)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (prctl(PR_SET_SECUREBITS, sb) < 0)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return -errno;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen /* Second step: set the capabilities. This will reduce

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering d = cap_dup(context->capabilities);

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering if (!d)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return -errno;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (cap_set_flag(d, CAP_EFFECTIVE, ELEMENTSOF(bits), bits, CAP_SET) < 0 ||

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering cap_set_flag(d, CAP_PERMITTED, ELEMENTSOF(bits), bits, CAP_SET) < 0)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering return -errno;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (cap_set_proc(d) < 0)

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering return -errno;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen }

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering /* Third step: actually set the uids */

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (setresuid(uid, uid, uid) < 0)

8c841f21f5042b11acc91cc1b039cb162cbbe8f4Djalal Harouni return -errno;

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering /* At this point we should have all necessary capabilities but

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen return 0;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen}

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen#ifdef HAVE_PAM

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersenstatic int null_conv(

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen int num_msg,

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen const struct pam_message **msg,

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering struct pam_response **resp,

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen void *appdata_ptr) {

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen /* We don't support conversations */

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen return PAM_CONV_ERR;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen}

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poettering

5b30bef856e89a571df57b7b953e9a1409d9acedLennart Poetteringstatic int setup_pam(

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering const char *name,

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers const char *user,

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering uid_t uid,

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers const char *tty,

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering char ***pam_env,

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering int fds[], unsigned n_fds) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering static const struct pam_conv conv = {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering .conv = null_conv,

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering .appdata_ptr = NULL

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering };

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_handle_t *handle = NULL;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering sigset_t ss, old_ss;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering int pam_code = PAM_SUCCESS;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering int err;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering char **e = NULL;

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering bool close_session = false;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering pid_t pam_pid = 0, parent_pid;

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering int flags = 0;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering assert(name);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering assert(user);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering assert(pam_env);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* We set up PAM in the parent process, then fork. The child

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (log_get_max_level() < LOG_PRI(LOG_DEBUG))

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering flags |= PAM_SILENT;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = pam_start(name, user, &conv, &handle);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_code != PAM_SUCCESS) {

9a14fb6285bdb089d4fc195410de3362cb4f586fThomas Hindoe Paaboel Andersen handle = NULL;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto fail;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (tty) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = pam_set_item(handle, PAM_TTY, tty);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_code != PAM_SUCCESS)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto fail;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = pam_acct_mgmt(handle, flags);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_code != PAM_SUCCESS)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto fail;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = pam_open_session(handle, flags);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_code != PAM_SUCCESS)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto fail;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering close_session = true;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering e = pam_getenvlist(handle);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (!e) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = PAM_BUF_ERR;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto fail;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering }

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering /* Block SIGTERM, so that we know that it won't get lost in

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering if (sigemptyset(&ss) < 0 ||

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering sigaddset(&ss, SIGTERM) < 0 ||

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering sigprocmask(SIG_BLOCK, &ss, &old_ss) < 0)

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering goto fail;

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering parent_pid = getpid();

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering pam_pid = fork();

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering if (pam_pid < 0)

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering goto fail;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_pid == 0) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering int sig;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering int r = EXIT_PAM;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering /* The child's job is to reset the PAM session on

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering /* This string must fit in 10 chars (i.e. the length

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering rename_process("(sd-pam)");

c19de71113f956809995fc68817e055e9f61f607Lennart Poettering

b6b1849830f5e4a6065c3b0c993668e500c954d3Lennart Poettering /* Make sure we don't keep open the passed fds in this

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering close_many(fds, n_fds);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* Drop privileges - we don't need any to pam_close_session

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (setresuid(uid, uid, uid) < 0)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering log_error_errno(r, "Error: Failed to setresuid() in sd-pam: %m");

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* Wait until our parent died. This will only work if

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (prctl(PR_SET_PDEATHSIG, SIGTERM) < 0)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto child_finish;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* Check if our parent process might already have

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (getppid() == parent_pid) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering for (;;) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (sigwait(&ss, &sig) < 0) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (errno == EINTR)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering continue;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto child_finish;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering assert(sig == SIGTERM);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering break;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* If our parent died we'll end the session */

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (getppid() != parent_pid) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = pam_close_session(handle, flags);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_code != PAM_SUCCESS)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto child_finish;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering r = 0;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering child_finish:

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_end(handle, pam_code | flags);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering _exit(r);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* If the child was forked off successfully it will do all the

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering handle = NULL;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* Unblock SIGTERM again in the parent */

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (sigprocmask(SIG_SETMASK, &old_ss, NULL) < 0)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering goto fail;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* We close the log explicitly here, since the PAM modules

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering closelog();

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering *pam_env = e;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering e = NULL;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering return 0;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poetteringfail:

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (pam_code != PAM_SUCCESS) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering log_error("PAM failed: %s", pam_strerror(handle, pam_code));

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering err = -EPERM; /* PAM errors do not map to errno */

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering } else {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering log_error_errno(errno, "PAM failed: %m");

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering err = -errno;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (handle) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering if (close_session)

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_code = pam_close_session(handle, flags);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering pam_end(handle, pam_code | flags);

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering }

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering strv_free(e);

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering closelog();

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering if (pam_pid > 1) {

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering kill(pam_pid, SIGTERM);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering kill(pam_pid, SIGCONT);

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering }

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering return err;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering}

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering#endif

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poetteringstatic void rename_process_from_path(const char *path) {

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering char process_name[11];

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering const char *p;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering size_t l;

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering

fefdc04b38725457a91651218feb7000f6ccc1f4Lennart Poettering /* This resulting string must fit in 10 chars (i.e. the length

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

9f6eb1cd58f2ddf2eb6ba0e4de056e13d938af75Kay Sievers p = basename(path);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (isempty(p)) {

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering rename_process("(...)");

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering return;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen }

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering l = strlen(p);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (l > 8) {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering /* The end of the process name is usually more

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering p = p + l - 8;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering l = 8;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering }

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering process_name[0] = '(';

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen memcpy(process_name+1, p, l);

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering process_name[1+l] = ')';

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering process_name[1+l+1] = 0;

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering rename_process(process_name);

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering}

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering#ifdef HAVE_SECCOMP

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersenstatic int apply_seccomp(const ExecContext *c) {

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen uint32_t negative_action, action;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering scmp_filter_ctx *seccomp;

a1da85830bfaa77b9eb9c54693e5573559c97e50Tom Gundersen Iterator i;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering void *id;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering int r;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering assert(c);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering negative_action = c->syscall_errno == 0 ? SCMP_ACT_KILL : SCMP_ACT_ERRNO(c->syscall_errno);

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering seccomp = seccomp_init(c->syscall_whitelist ? negative_action : SCMP_ACT_ALLOW);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (!seccomp)

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering return -ENOMEM;

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (c->syscall_archs) {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering SET_FOREACH(id, c->syscall_archs, i) {

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering r = seccomp_arch_add(seccomp, PTR_TO_UINT32(id) - 1);

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (r == -EEXIST)

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering continue;

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering if (r < 0)

1ee306e1248866617c96ed9f4263f375588ad838Lennart Poettering goto finish;

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering }

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering } else {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering r = seccomp_add_secondary_archs(seccomp);

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering if (r < 0)

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering goto finish;

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering }

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering action = c->syscall_whitelist ? SCMP_ACT_ALLOW : negative_action;

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering SET_FOREACH(id, c->syscall_filter, i) {

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering r = seccomp_rule_add(seccomp, action, PTR_TO_INT(id) - 1, 0);

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering if (r < 0)

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering goto finish;

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering }

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering r = seccomp_attr_set(seccomp, SCMP_FLTATR_CTL_NNP, 0);

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering if (r < 0)

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering goto finish;

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering r = seccomp_load(seccomp);

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poetteringfinish:

1dba654b27918c22e413ac5b3c19301f1ff86ad2Lennart Poettering seccomp_release(seccomp);

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering return r;

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering}

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poetteringstatic int apply_address_families(const ExecContext *c) {

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering scmp_filter_ctx *seccomp;

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering Iterator i;

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering int r;

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering assert(c);

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering seccomp = seccomp_init(SCMP_ACT_ALLOW);

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering if (!seccomp)

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering return -ENOMEM;

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering r = seccomp_add_secondary_archs(seccomp);

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering if (r < 0)

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering goto finish;

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering if (c->address_families_whitelist) {

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering int af, first = 0, last = 0;

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering void *afp;

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering /* If this is a whitelist, we first block the address

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering SET_FOREACH(afp, c->address_families, i) {

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering af = PTR_TO_INT(afp);

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering

0370612e0522191f929e3feb7d4937fff3d421e2Lennart Poettering if (af <= 0 || af >= af_max())

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering continue;

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering if (first == 0 || af < first)

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering first = af;

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering

f2cbe59e113f08549949a76ac5b9b3972df4cc30Lennart Poettering if (last == 0 || af > last)

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering last = af;

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering }

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering assert((first == 0) == (last == 0));

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering if (first == 0) {

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering /* No entries in the valid range, block everything */

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering r = seccomp_rule_add(

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering seccomp,

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering SCMP_ACT_ERRNO(EPROTONOSUPPORT),

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering SCMP_SYS(socket),

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering 0);

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering if (r < 0)

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering goto finish;

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering } else {

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering /* Block everything below the first entry */

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering r = seccomp_rule_add(

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering seccomp,

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering SCMP_ACT_ERRNO(EPROTONOSUPPORT),

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering SCMP_SYS(socket),

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering 1,

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering SCMP_A0(SCMP_CMP_LT, first));

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering if (r < 0)

90adaa25e894a580930ef2c3e65ab8db8295515aLennart Poettering goto finish;

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering /* Block everything above the last entry */

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering r = seccomp_rule_add(

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering seccomp,

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering SCMP_ACT_ERRNO(EPROTONOSUPPORT),

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering SCMP_SYS(socket),

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering 1,

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering SCMP_A0(SCMP_CMP_GT, last));

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering if (r < 0)

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering goto finish;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering /* Block everything between the first and last

da054c3782f25b3b18243f6c76dcfcf90ba70274Lennart Poettering for (af = 1; af < af_max(); af++) {

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

da054c3782f25b3b18243f6c76dcfcf90ba70274Lennart Poettering if (set_contains(c->address_families, INT_TO_PTR(af)))

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering continue;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering r = seccomp_rule_add(

da054c3782f25b3b18243f6c76dcfcf90ba70274Lennart Poettering seccomp,

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering SCMP_ACT_ERRNO(EPROTONOSUPPORT),

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering SCMP_SYS(socket),

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering 1,

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering SCMP_A0(SCMP_CMP_EQ, af));

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering if (r < 0)

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering goto finish;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering }

56159e0d918e9a9be07988133bb2847779325de0Lennart Poettering }

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering } else {

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering void *af;

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering /* If this is a blacklist, then generate one rule for

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

c7b7d4493aa03e9ef5fb1e670b8969a48aa494ddLennart Poettering SET_FOREACH(af, c->address_families, i) {

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering r = seccomp_rule_add(

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering seccomp,

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering SCMP_ACT_ERRNO(EPROTONOSUPPORT),

bf441e3d9371a7e5aa1def66cfc40f0118884644Lennart Poettering SCMP_SYS(socket),

de33fc625725d199629ed074d6278504deb23debLennart Poettering 1,

923d8fd381bced1c2d90ca53d18629d61a0f454aLennart Poettering SCMP_A0(SCMP_CMP_EQ, PTR_TO_INT(af)));

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering if (r < 0)

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering goto finish;

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering }

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering }

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering r = seccomp_attr_set(seccomp, SCMP_FLTATR_CTL_NNP, 0);

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt if (r < 0)

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt goto finish;

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering r = seccomp_load(seccomp);

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidtfinish:

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering seccomp_release(seccomp);

63c372cb9df3bee01e3bf8cd7f96f336bddda846Lennart Poettering return r;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering}

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering#endif

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poetteringstatic void do_idle_pipe_dance(int idle_pipe[4]) {

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering assert(idle_pipe);

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering safe_close(idle_pipe[1]);

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering safe_close(idle_pipe[2]);

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering if (idle_pipe[0] >= 0) {

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering int r;

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering r = fd_wait_for_event(idle_pipe[0], POLLHUP, IDLE_TIMEOUT_USEC);

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering if (idle_pipe[3] >= 0 && r == 0 /* timeout */) {

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering /* Signal systemd that we are bored and want to continue. */

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering write(idle_pipe[3], "x", 1);

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering /* Wait for systemd to react to the signal above. */

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering fd_wait_for_event(idle_pipe[0], POLLHUP, IDLE_TIMEOUT2_USEC);

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering }

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering safe_close(idle_pipe[0]);

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering }

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering safe_close(idle_pipe[3]);

d04c1fb8e215600b4950c6778c6c16ddafc14024Lennart Poettering}

40205d706e1210763ff4c98a317556375bd04bcdLennart Poettering

40205d706e1210763ff4c98a317556375bd04bcdLennart Poetteringstatic int build_environment(

785890acf6d629ff881a1f065f431df1b7fc8c7aLennart Poettering const ExecContext *c,

40205d706e1210763ff4c98a317556375bd04bcdLennart Poettering unsigned n_fds,

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering usec_t watchdog_usec,

40205d706e1210763ff4c98a317556375bd04bcdLennart Poettering const char *home,

40205d706e1210763ff4c98a317556375bd04bcdLennart Poettering const char *username,

ee451d766a64117a41ec36dd71e61683c9d9b83cLennart Poettering const char *shell,

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering char ***ret) {

813c65c34beae2eed1f93d9317f97d7e806389f5Lennart Poettering

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering _cleanup_strv_free_ char **our_env = NULL;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering unsigned n_env = 0;

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering char *x;

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering assert(c);

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering assert(ret);

9b15b7846d4de01bb5d9700a24077787e984e8abLennart Poettering

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt our_env = new0(char*, 10);

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt if (!our_env)

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering return -ENOMEM;

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt if (n_fds > 0) {

f647962d64e844689f3e2acfce6102fc47e76df2Michal Schmidt if (asprintf(&x, "LISTEN_PID="PID_FMT, getpid()) < 0)

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering return -ENOMEM;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering our_env[n_env++] = x;

da054c3782f25b3b18243f6c76dcfcf90ba70274Lennart Poettering

c7b7d4493aa03e9ef5fb1e670b8969a48aa494ddLennart Poettering if (asprintf(&x, "LISTEN_FDS=%u", n_fds) < 0)

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering return -ENOMEM;

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering our_env[n_env++] = x;

c7b7d4493aa03e9ef5fb1e670b8969a48aa494ddLennart Poettering }

c7b7d4493aa03e9ef5fb1e670b8969a48aa494ddLennart Poettering

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering if (watchdog_usec > 0) {

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering if (asprintf(&x, "WATCHDOG_PID="PID_FMT, getpid()) < 0)

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering return -ENOMEM;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering our_env[n_env++] = x;

0ec5543c4c0318552a4dcdd83210793347b93081Lennart Poettering

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering if (asprintf(&x, "WATCHDOG_USEC="USEC_FMT, watchdog_usec) < 0)

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering return -ENOMEM;

023fb90b83871a15ef7f57e8cd126e3426f99b9eLennart Poettering our_env[n_env++] = x;

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering }

04d39279245834494baccfdb9349db8bf80abd13Lennart Poettering

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (home) {

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering x = strappend("HOME=", home);

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (!x)

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering return -ENOMEM;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering our_env[n_env++] = x;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering }

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering if (username) {

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering x = strappend("LOGNAME=", username);

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (!x)

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering return -ENOMEM;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering our_env[n_env++] = x;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering x = strappend("USER=", username);

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (!x)

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering return -ENOMEM;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering our_env[n_env++] = x;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering }

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (shell) {

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering x = strappend("SHELL=", shell);

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (!x)

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering return -ENOMEM;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering our_env[n_env++] = x;

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering }

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering if (is_terminal_input(c->std_input) ||

086821244b5113f00a0ef993b78dc56aae2a8f6cLennart Poettering c->std_output == EXEC_OUTPUT_TTY ||

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering c->std_error == EXEC_OUTPUT_TTY ||

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering c->tty_path) {

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering x = strdup(default_term_for_tty(tty_path(c)));

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (!x)

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering return -ENOMEM;

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering our_env[n_env++] = x;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering }

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering our_env[n_env++] = NULL;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering assert(n_env <= 10);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering *ret = our_env;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering our_env = NULL;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering return 0;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering}

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poetteringstatic int exec_child(ExecCommand *command,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering const ExecContext *context,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering const ExecParameters *params,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering ExecRuntime *runtime,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering char **argv,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering int socket_fd,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering int *fds, unsigned n_fds,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering char **files_env,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering int *error) {

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering _cleanup_strv_free_ char **our_env = NULL, **pam_env = NULL, **final_env = NULL, **final_argv = NULL;

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering _cleanup_free_ char *mac_selinux_context_net = NULL;

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering const char *username = NULL, *home = NULL, *shell = NULL;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering unsigned n_dont_close = 0;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering int dont_close[n_fds + 4];

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering uid_t uid = UID_INVALID;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering gid_t gid = GID_INVALID;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering int i, err;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering assert(command);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering assert(context);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering assert(params);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering assert(error);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering rename_process_from_path(command->path);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering /* We reset exactly these signals, since they are the

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering default_signals(SIGNALS_CRASH_HANDLER,

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering SIGNALS_IGNORE, -1);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (context->ignore_sigpipe)

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering ignore_signals(SIGPIPE, -1);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering err = reset_signal_mask();

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (err < 0) {

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering *error = EXIT_SIGNAL_MASK;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering return err;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering }

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering if (params->idle_pipe)

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering do_idle_pipe_dance(params->idle_pipe);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering /* Close sockets very early to make sure we don't

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering log_forget_fds();

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (socket_fd >= 0)

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering dont_close[n_dont_close++] = socket_fd;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (n_fds > 0) {

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering memcpy(dont_close + n_dont_close, fds, sizeof(int) * n_fds);

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering n_dont_close += n_fds;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering }

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (params->bus_endpoint_fd >= 0)

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering dont_close[n_dont_close++] = params->bus_endpoint_fd;

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (runtime) {

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering if (runtime->netns_storage_socket[0] >= 0)

ebd93cb684806ac0f352139e69ac8f53eb49f5e4Lennart Poettering dont_close[n_dont_close++] = runtime->netns_storage_socket[0];

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (runtime->netns_storage_socket[1] >= 0)

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering dont_close[n_dont_close++] = runtime->netns_storage_socket[1];

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering err = close_all_fds(dont_close, n_dont_close);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (err < 0) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_FDS;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return err;

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering }

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (!context->same_pgrp)

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (setsid() < 0) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_SETSID;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return -errno;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering exec_context_tty_reset(context);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (params->confirm_spawn) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering char response;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering err = ask_for_confirmation(&response, argv);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (err == -ETIMEDOUT)

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering write_confirm_message("Confirmation question timed out, assuming positive response.\n");

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering else if (err < 0)

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering write_confirm_message("Couldn't ask confirmation question, assuming positive response: %s\n", strerror(-err));

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering else if (response == 's') {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering write_confirm_message("Skipping execution.\n");

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_CONFIRM;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return -ECANCELED;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering } else if (response == 'n') {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering write_confirm_message("Failing execution.\n");

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = 0;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return 0;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering /* If a socket is connected to STDIN/STDOUT/STDERR, we

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (socket_fd >= 0)

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering fd_nonblock(socket_fd, false);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering err = setup_input(context, socket_fd, params->apply_tty_stdin);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (err < 0) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_STDIN;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return err;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering err = setup_output(context, STDOUT_FILENO, socket_fd, basename(command->path), params->unit_id, params->apply_tty_stdin);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (err < 0) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_STDOUT;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return err;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering err = setup_output(context, STDERR_FILENO, socket_fd, basename(command->path), params->unit_id, params->apply_tty_stdin);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (err < 0) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_STDERR;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return err;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (params->cgroup_path) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering err = cg_attach_everywhere(params->cgroup_supported, params->cgroup_path, 0, NULL, NULL);

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (err < 0) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering *error = EXIT_CGROUP;

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering return err;

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering }

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering if (context->oom_score_adjust_set) {

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering char t[16];

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering

ebd011d95b61a86258dece9864f65b7c4af721c0Lennart Poettering snprintf(t, sizeof(t), "%i", context->oom_score_adjust);

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering char_array_0(t);

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering if (write_string_file("/proc/self/oom_score_adj", t) < 0) {

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering *error = EXIT_OOM_ADJUST;

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering return -errno;

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering }

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering }

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering if (context->nice_set)

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering if (setpriority(PRIO_PROCESS, 0, context->nice) < 0) {

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering *error = EXIT_NICE;

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering return -errno;

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering }

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering if (context->cpu_sched_set) {

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering struct sched_param param = {

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering .sched_priority = context->cpu_sched_priority,

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering };

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering err = sched_setscheduler(0,

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering context->cpu_sched_policy |

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering (context->cpu_sched_reset_on_fork ?

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering SCHED_RESET_ON_FORK : 0),

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering &param);

acf97e213e69a97e63ab8f7fad7ecd53608c757aLennart Poettering if (err < 0) {

d8f52ed25a9edce75fda5251c977b7898e33887eLennart Poettering *error = EXIT_SETSCHEDULER;