# include <config.h>
#endif
+#include "lib/utils-legacy.h"
+#include "pathconfig.h"
#include "util.h"
#include "internal.h"
#include <assert.h>
#include <stdbool.h>
#include <fcntl.h>
+#include <errno.h>
+#include <sys/utsname.h>
+#include <dirent.h>
+#include <strings.h>
#define ENSC_WRAPPERS_FCNTL 1
+#define ENSC_WRAPPERS_IO 1
#define ENSC_WRAPPERS_UNISTD 1
+#define ENSC_WRAPPERS_VSERVER 1
#include <wrappers.h>
-typedef enum { tgNONE,tgCONTEXT, tgRUNNING,
+#undef _POSIX_SOURCE
+#include "capability-compat.h"
+
+typedef enum { tgNONE,tgCONTEXT, tgID, tgRUNNING,
tgVDIR, tgNAME, tgCFGDIR, tgAPPDIR,
- tgAPIVER,
+ tgAPIVER, tgPXID,
tgINITPID, tgINITPID_PID,
- tgXID, tgUTS,
+ tgXID, tgUTS, tgSYSINFO,
+ tgFEATURE, tgCANONIFY,
+ tgVERIFYCAP,
} VserverTag;
static struct {
VserverTag const val;
char const * const descr;
} const TAGS[] = {
- { "CONTEXT", tgCONTEXT, "the current and/or assigned context" },
+ { "CONTEXT", tgCONTEXT, ("the current and/or assigned context; when an optinal argument "
+ "evaluates to false,only the current context will be printed") },
+ { "ID", tgID, "gives out the vserver-id for the context-xid" },
{ "RUNNING", tgRUNNING, "gives out '1' when vserver is running; else, it fails without output" },
{ "VDIR", tgVDIR, "gives out the root-directory of the vserver" },
{ "NAME", tgNAME, "gives out the name of the vserver" },
{ "UTS", tgUTS, ("gives out an uts-entry; possible entries are "
"context, sysname, nodename, release, version, "
"machine and domainname") },
+ { "SYSINFO", tgSYSINFO, "gives out information about the systen" },
+ { "FEATURE", tgFEATURE, "returns 0 iff the queried feature is supported" },
+ { "PXID", tgPXID, "returns the xid of the parent context" },
+ { "CANONIFY", tgCANONIFY, "canonifies the vserver-name and removes dangerous characters" },
+ { "VERIFYCAP", tgVERIFYCAP, "test if the kernel supports linux capabilities" },
};
int wrapper_exit_code = 1;
}
}
+static bool
+verifyCap()
+{
+ struct __user_cap_header_struct header;
+ struct __user_cap_data_struct user;
+ header.version = _LINUX_CAPABILITY_VERSION;
+ header.pid = 0;
+
+ if (getuid()!=0) {
+ WRITE_MSG(2, "'VERIFYCAP' can be executed as root only\n");
+ return false;
+ }
+
+// if( prctl( PR_SET_KEEPCAPS, 1,0,0,0 ) < 0 ) {
+// perror( "prctl:" );
+// return false;
+// }
+
+ if (capget(&header, &user)==-1) {
+ perror("capget()");
+ return false;
+ }
+
+ user.effective = 0;
+ user.permitted = 0;
+ user.inheritable = 0;
+
+ if (capset(&header, &user)==-1) {
+ perror("capset()");
+ return false;
+ }
+
+ return chroot("/")==-1;
+}
+
+static char *
+getAPIVer(char *buf)
+{
+ int v = vc_get_version();
+ size_t l;
+
+ if (v==-1) return 0;
+
+
+ l = utilvserver_fmt_xulong(0, (unsigned int)v);
+ memcpy(buf, "0x00000000", 10);
+ utilvserver_fmt_xulong(buf+2+8-l, (unsigned int)v);
+
+ return buf;
+}
+
+static char *
+getXid(char *buf, char const *vserver)
+{
+ pid_t pid = atoi(vserver);
+ xid_t xid = vc_get_task_xid(pid);
+
+ if (xid==VC_NOCTX) perror("vc_get_task_xid()");
+ else {
+ utilvserver_fmt_long(buf, xid);
+ return buf;
+ }
+
+ return 0;
+}
+
+static char *
+getPXid(char UNUSED *buf, char const UNUSED *vserver)
+{
+ // TODO: implement me when available
+ return 0;
+}
+
+static char *
+getInitPid_native(char *buf, xid_t xid)
+{
+ struct vc_vx_info info;
+
+ if (vc_get_vx_info(xid, &info)==-1) perror("vc_get_vx_info()");
+ else {
+ utilvserver_fmt_long(buf, info.initpid);
+ return buf;
+ }
+
+ return 0;
+}
+
+#if defined(VC_ENABLE_API_COMPAT) || defined(VC_ENABLE_API_V11)
+static int
+selectPid(struct dirent const *ent)
+{
+ return atoi(ent->d_name)!=0;
+}
+
+static bool
+getInitPid_internal(pid_t pid, xid_t xid, pid_t *res)
+{
+ *res = -1;
+
+ for (;*res==-1;) {
+ size_t bufsize = utilvserver_getProcEntryBufsize();
+ char buf[bufsize+1];
+ char *pos = 0;
+
+ pos = utilvserver_getProcEntry(pid, "\ns_context: ", buf, bufsize);
+ if (pos==0 && errno==EAGAIN) continue;
+
+ if (pos==0 || (xid_t)atoi(pos)!=xid) return false;
+
+ buf[bufsize] = '\0';
+ pos = strstr(buf, "\ninitpid: ");
+
+ if (pos!=0) {
+ pos += sizeof("\ninitpid: ")-1;
+ if (strncmp(pos, "none", 4)==0) *res = -1;
+ else *res = atoi(pos);
+ }
+ }
+
+ return true;
+}
+
+static char *
+getInitPid_emulated(char *buf, xid_t xid)
+{
+ struct dirent **namelist;
+ int n;
+
+ switchToWatchXid(0); // ignore errors silently...
+ n = scandir("/proc", &namelist, selectPid, alphasort);
+ if (n<0) perror("scandir()");
+ else while (n--) {
+ pid_t pid;
+ if (!getInitPid_internal(atoi(namelist[n]->d_name), xid, &pid)) continue;
+
+ utilvserver_fmt_long(buf, pid);
+ return buf;
+ }
+
+ return 0;
+}
+#endif // VC_ENABLE_API_COMPAT
+
+static char *
+getInitPid(char *buf, xid_t xid)
+{
+ if (vc_isSupported(vcFEATURE_VINFO))
+ return getInitPid_native(buf, xid);
+ else
+ return getInitPid_emulated(buf, xid);
+}
+
+static char *
+getInitPidPid(char *buf, char const *vserver)
+{
+ struct vc_vx_info info;
+ pid_t pid = atoi(vserver);
+ xid_t xid = vc_get_task_xid(pid);
+
+ if (xid==VC_NOCTX) perror("vc_get_task_xid()");
+ else if (vc_get_vx_info(xid, &info)==-1) perror("vc_get_vx_info()");
+ else {
+ utilvserver_fmt_long(buf, info.initpid);
+ return buf;
+ }
+
+ return 0;
+}
+
+static char *
+getUTS(char *buf, xid_t xid, size_t argc, char * argv[])
+{
+ if (argc>0) {
+ vc_uts_type type = utsText2Tag(argv[0]);
+ if (vc_get_vhi_name(xid, type, buf, sizeof(buf)-1)==-1)
+ perror("vc_get_vhi_name()");
+ else
+ return buf;
+ }
+ else {
+ bool is_passed = false;
+ char tmp[128];
+#define APPEND_UTS(TYPE) \
+ (((vc_get_vhi_name(xid, TYPE, tmp, sizeof(tmp)-1)!=-1) && (strcat(buf, tmp), strcat(buf, " "), is_passed=true)) || \
+ (strcat(buf, "??? ")))
+
+ if (APPEND_UTS(vcVHI_CONTEXT) &&
+ APPEND_UTS(vcVHI_SYSNAME) &&
+ APPEND_UTS(vcVHI_NODENAME) &&
+ APPEND_UTS(vcVHI_RELEASE) &&
+ APPEND_UTS(vcVHI_VERSION) &&
+ APPEND_UTS(vcVHI_MACHINE) &&
+ APPEND_UTS(vcVHI_DOMAINNAME) &&
+ is_passed)
+ return buf;
+
+ perror("vc_get_vhi_name()");
+#undef APPEND_UTS
+ }
+
+ return 0;
+}
+
+static int
+printSysInfo(char *buf)
+{
+ int fd = open(PKGLIBDIR "/FEATURES.txt", O_RDONLY);
+ struct utsname uts;
+
+ if (uname(&uts)==-1)
+ perror("uname()");
+ else {
+ WRITE_MSG(1,
+ "Versions:\n"
+ " Kernel: ");
+ WRITE_STR(1, uts.release);
+ WRITE_MSG(1, "\n"
+ " VS-API: ");
+
+ memset(buf, 0, 128);
+ if (getAPIVer(buf)) WRITE_STR(1, buf);
+ else WRITE_MSG(1, "???");
+
+ WRITE_MSG(1, "\n"
+ " util-vserver: " PACKAGE_VERSION "; " __DATE__ ", " __TIME__"\n"
+ "\n");
+ }
+
+ if (fd==-1)
+ WRITE_MSG(1, "FEATURES.txt not found\n");
+ else {
+ off_t l = Elseek(fd, 0, SEEK_END);
+ Elseek(fd, 0, SEEK_SET);
+ {
+ char buf[l];
+ EreadAll(fd, buf, l);
+ EwriteAll(1, buf, l);
+ }
+ Eclose(fd);
+ }
+
+ return EXIT_SUCCESS;
+}
+
+static char *
+getContext(char *buf, char const *vserver, bool allow_only_static)
+{
+ xid_t xid = vc_getVserverCtx(vserver, vcCFG_AUTO,
+ allow_only_static, 0);
+ if (xid==VC_NOCTX) return 0;
+
+ utilvserver_fmt_long(buf, xid);
+ return buf;
+}
+
+static int
+testFeature(int argc, char *argv[])
+{
+ return (argc>0 && vc_isSupportedString(argv[0])) ? EXIT_SUCCESS : EXIT_FAILURE;
+}
+
+static bool
+str2bool(char const *str)
+{
+ return atoi(str)!=0 || strchr("yYtY", str[0])!=0 || strcasecmp("true", str)==0;
+}
+
static int
execQuery(char const *vserver, VserverTag tag, int argc, char *argv[])
{
char const * res = 0;
- char buf[sizeof(xid_t)*4 + 1024];
- xid_t xid = *vserver!='\0' ? (xid_t)(atoi(vserver)) : VC_SAMECTX;
+ char buf[sizeof(xid_t)*4 + 1024 + strlen(vserver)];
memset(buf, 0, sizeof buf);
switch (tag) {
res = vc_getVserverAppDir(vserver, vcCFG_AUTO, argc==0 ? "" : argv[0]);
break;
- case tgCONTEXT :
- xid = vc_getVserverCtx(vserver, vcCFG_AUTO, true, 0);
- if (xid!=VC_NOCTX) {
- utilvserver_fmt_long(buf, xid);
- res = buf;
- }
- break;
-
case tgRUNNING :
res = (vc_getVserverCtx(vserver, vcCFG_AUTO, false, 0)==VC_NOCTX) ? 0 : "1";
break;
- case tgXID :
- {
- pid_t pid = atoi(vserver);
-
- xid = vc_get_task_xid(pid);
- if (xid==VC_NOCTX) perror("vc_get_task_xid()");
- else {
- utilvserver_fmt_long(buf, xid);
- res = buf;
- }
- break;
- }
-
- case tgINITPID :
- {
- struct vc_vx_info info;
- if (vc_get_vx_info(xid, &info)==-1) perror("vc_get_vx_info()");
- else {
- utilvserver_fmt_long(buf, info.xid);
- res = buf;
- }
- break;
- }
-
- case tgINITPID_PID :
- {
- pid_t pid = atoi(vserver);
- struct vc_vx_info info;
-
- xid = vc_get_task_xid(pid);
- if (xid==VC_NOCTX) perror("vc_get_task_xid()");
- else if (vc_get_vx_info(xid, &info)==-1) perror("vc_get_vx_info()");
- else {
- utilvserver_fmt_long(buf, info.xid);
- res = buf;
- }
+ case tgCANONIFY :
+ strcpy(buf, vserver);
+ if (canonifyVserverName(buf)>0) res = buf;
break;
- }
-
- case tgAPIVER :
- {
- int v = vc_get_version();
- if (v!=-1) {
- size_t l = utilvserver_fmt_xulong(0, (unsigned int)v);
- memcpy(buf, "0x00000000", 10);
- utilvserver_fmt_xulong(buf+2+8-l, (unsigned int)v);
- res = buf;
- }
- break;
- }
-
- case tgUTS :
- {
- if (argc>0) {
- vc_uts_type type = utsText2Tag(argv[0]);
- if (vc_get_vhi_name(xid, type, buf, sizeof(buf)-1)==-1)
- perror("vc_get_vhi_name()");
- else
- res=buf;
- }
- else {
- bool is_passed = false;
- char tmp[128];
-#define APPEND_UTS(TYPE) \
- (((vc_get_vhi_name(xid, TYPE, tmp, sizeof(tmp)-1)!=-1) && (strcat(buf, tmp), strcat(buf, " "), is_passed=true)) || \
- (strcat(buf, "??? ")))
-
- APPEND_UTS(vcVHI_CONTEXT) &&
- APPEND_UTS(vcVHI_SYSNAME) &&
- APPEND_UTS(vcVHI_NODENAME) &&
- APPEND_UTS(vcVHI_RELEASE) &&
- APPEND_UTS(vcVHI_VERSION) &&
- APPEND_UTS(vcVHI_MACHINE) &&
- APPEND_UTS(vcVHI_DOMAINNAME) &&
- is_passed &&
- (res = buf);
-
- if (!is_passed)
- perror("vc_get_vhi_name()");
-
-#undef APPEND_UTS
+
+ case tgCONTEXT : res = getContext(buf, vserver,
+ argc==0 || str2bool(argv[0])); break;
+ case tgINITPID_PID : res = getInitPidPid(buf, vserver); break;
+ case tgAPIVER : res = getAPIVer(buf); break;
+ case tgXID : res = getXid(buf, vserver); break;
+ case tgPXID : res = getPXid(buf, vserver); break;
+ case tgSYSINFO : return printSysInfo(buf); break;
+ case tgFEATURE : return testFeature(argc,argv); break;
+ case tgVERIFYCAP : return verifyCap() ? 0 : 1; break;
+
+
+ default : {
+ xid_t xid = *vserver!='\0' ? vc_xidopt2xid(vserver,true,0) : VC_SAMECTX;
+
+ switch (tag) {
+ case tgID : res = vc_getVserverByCtx(xid,0,0); break;
+ case tgINITPID : res = getInitPid(buf, xid); break;
+ case tgUTS : res = getUTS(buf, xid, argc, argv); break;
+
+ default : assert(false); abort(); // TODO
}
- break;
}
-
- default : assert(false); abort(); // TODO
}
if (res==0) return EXIT_FAILURE;
}
if (optind+2>argc) {
- WRITE_MSG(2, "No vserver or tag give; please try '--help' for more information.\n");
- exit(1);
+ execQuery("-", tgSYSINFO, 0, 0);
+ WRITE_MSG(2, "\nAssumed 'SYSINFO' as no other option given; try '--help' for more information.\n");
+ exit(0);
}
vserver = argv[optind];