X-Git-Url: http://git.linux-vserver.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=util-vserver%2Fsrc%2Fvserver-info.c;h=d695fee402b477593e10b8a2d0319984fe8f6640;hb=faa778968d1a7dfeaebc9fe4b847e691dc62fd15;hp=b355b399131f9144f1985eb98eb65d1e103fca3e;hpb=7c0b80ce488ab3267782a30c94b006167e654ef5;p=util-vserver.git diff --git a/util-vserver/src/vserver-info.c b/util-vserver/src/vserver-info.c index b355b39..d695fee 100644 --- a/util-vserver/src/vserver-info.c +++ b/util-vserver/src/vserver-info.c @@ -20,6 +20,7 @@ # include #endif +#include "lib/utils-legacy.h" #include "pathconfig.h" #include "util.h" @@ -33,17 +34,25 @@ #include #include #include +#include +#include #define ENSC_WRAPPERS_FCNTL 1 #define ENSC_WRAPPERS_IO 1 #define ENSC_WRAPPERS_UNISTD 1 +#define ENSC_WRAPPERS_VSERVER 1 #include -typedef enum { tgNONE,tgCONTEXT, tgRUNNING, +#undef _POSIX_SOURCE +#include "capability-compat.h" + +typedef enum { tgNONE,tgCONTEXT, tgID, tgRUNNING, tgVDIR, tgNAME, tgCFGDIR, tgAPPDIR, - tgAPIVER, + tgAPIVER, tgPXID, tgINITPID, tgINITPID_PID, tgXID, tgUTS, tgSYSINFO, + tgFEATURE, tgCANONIFY, + tgVERIFYCAP, tgXIDTYPE, tgVERIFYPROC, } VserverTag; static struct { @@ -51,7 +60,9 @@ static struct { VserverTag const val; char const * const descr; } const TAGS[] = { - { "CONTEXT", tgCONTEXT, "the current and/or assigned context" }, + { "CONTEXT", tgCONTEXT, ("the current and/or assigned context; when an optinal argument " + "evaluates to false,only the current context will be printed") }, + { "ID", tgID, "gives out the vserver-id for the context-xid" }, { "RUNNING", tgRUNNING, "gives out '1' when vserver is running; else, it fails without output" }, { "VDIR", tgVDIR, "gives out the root-directory of the vserver" }, { "NAME", tgNAME, "gives out the name of the vserver" }, @@ -65,6 +76,12 @@ static struct { "context, sysname, nodename, release, version, " "machine and domainname") }, { "SYSINFO", tgSYSINFO, "gives out information about the systen" }, + { "FEATURE", tgFEATURE, "returns 0 iff the queried feature is supported" }, + { "PXID", tgPXID, "returns the xid of the parent context" }, + { "CANONIFY", tgCANONIFY, "canonifies the vserver-name and removes dangerous characters" }, + { "VERIFYCAP", tgVERIFYCAP, "test if the kernel supports linux capabilities" }, + { "VERIFYPROC", tgVERIFYPROC, "test if /proc can be read by contexts!=0" }, + { "XIDTYPE", tgXIDTYPE, "returns the type of the given XID" }, }; int wrapper_exit_code = 1; @@ -142,6 +159,61 @@ utsText2Tag(char const *str) } } +static bool +verifyProc() +{ + char const *errptr; + + if (!switchToWatchXid(&errptr)) { + perror(errptr); + return false; + } + + if (access("/proc/uptime", R_OK)==-1) { + if (errno!=ENOENT) + perror("access(\"/proc/uptime\")"); + + return false; + } + + return true; +} + +static bool +verifyCap() +{ + struct __user_cap_header_struct header; + struct __user_cap_data_struct user; + header.version = _LINUX_CAPABILITY_VERSION; + header.pid = 0; + + if (getuid()!=0) { + WRITE_MSG(2, "'VERIFYCAP' can be executed as root only\n"); + return false; + } + +// if( prctl( PR_SET_KEEPCAPS, 1,0,0,0 ) < 0 ) { +// perror( "prctl:" ); +// return false; +// } + + if (capget(&header, &user)==-1) { + perror("capget()"); + return false; + } + + user.effective = 0; + user.permitted = 0; + user.inheritable = 0; + + if (capset(&header, &user)==-1) { + perror("capset()"); + return false; + } + + return chroot("/")==-1; +} + static char * getAPIVer(char *buf) { @@ -159,9 +231,9 @@ getAPIVer(char *buf) } static char * -getXid(char *buf, char const *vserver) +getXid(char *buf, char const *pid_str) { - pid_t pid = atoi(vserver); + pid_t pid = atoi(pid_str); xid_t xid = vc_get_task_xid(pid); if (xid==VC_NOCTX) perror("vc_get_task_xid()"); @@ -174,7 +246,14 @@ getXid(char *buf, char const *vserver) } static char * -getInitPid(char *buf, xid_t xid) +getPXid(char UNUSED *buf, char const UNUSED *vserver) +{ + // TODO: implement me when available + return 0; +} + +static char * +getInitPid_native(char *buf, xid_t xid) { struct vc_vx_info info; @@ -187,6 +266,78 @@ getInitPid(char *buf, xid_t xid) return 0; } +#if defined(VC_ENABLE_API_COMPAT) || defined(VC_ENABLE_API_V11) +static int +selectPid(struct dirent const *ent) +{ + return atoi(ent->d_name)!=0; +} + +static bool +getInitPid_internal(pid_t pid, xid_t xid, pid_t *res) +{ + *res = -1; + + for (;*res==-1;) { + size_t bufsize = utilvserver_getProcEntryBufsize(); + char buf[bufsize+1]; + char *pos = 0; + + pos = utilvserver_getProcEntry(pid, "\ns_context: ", buf, bufsize); + if (pos==0 && errno==EAGAIN) continue; + + if (pos==0 || (xid_t)atoi(pos)!=xid) return false; + + buf[bufsize] = '\0'; + pos = strstr(buf, "\ninitpid: "); + + if (pos!=0) { + pos += sizeof("\ninitpid: ")-1; + if (strncmp(pos, "none", 4)==0) *res = -1; + else *res = atoi(pos); + } + } + + return true; +} + +static char * +getInitPid_emulated(char *buf, xid_t xid) +{ + struct dirent **namelist; + int n; + + switchToWatchXid(0); // ignore errors silently... + n = scandir("/proc", &namelist, selectPid, alphasort); + if (n<0) perror("scandir()"); + else while (n--) { + pid_t pid; + if (!getInitPid_internal(atoi(namelist[n]->d_name), xid, &pid)) continue; + + utilvserver_fmt_long(buf, pid); + return buf; + } + + return 0; +} +#else // VC_ENABLE_API_COMPAT +static char * +getInitPid_emulated(char UNUSED *buf, xid_t UNUSED xid) +{ + WRITE_MSG(2, "tools were built without compat API, getInitPid() not available\n"); + return 0; +} +#endif // VC_ENABLE_API_COMPAT + +static char * +getInitPid(char *buf, xid_t xid) +{ + if (vc_isSupported(vcFEATURE_VINFO)) + return getInitPid_native(buf, xid); + else + return getInitPid_emulated(buf, xid); +} + static char * getInitPidPid(char *buf, char const *vserver) { @@ -280,21 +431,58 @@ printSysInfo(char *buf) } static char * -getContext(char *buf, char const *vserver) +getContext(char *buf, char const *vserver, bool allow_only_static) { - xid_t xid = vc_getVserverCtx(vserver, vcCFG_AUTO, true, 0); + xid_t xid = vc_getVserverCtx(vserver, vcCFG_AUTO, + allow_only_static, 0); if (xid==VC_NOCTX) return 0; utilvserver_fmt_long(buf, xid); return buf; } +static char const * +getXIDType(xid_t xid, int argc, char *argv[]) +{ + char const * tp; + + switch (vc_getXIDType(xid)) { + case vcTYPE_INVALID : tp = "invalid"; break; + case vcTYPE_MAIN : tp = "main"; break; + case vcTYPE_WATCH : tp = "watch"; break; + case vcTYPE_STATIC : tp = "static"; break; + case vcTYPE_DYNAMIC : tp = "dynamic"; break; + default : tp = 0; break; + } + + if (argc==0 || tp==0) + return tp; + + while (argc>0) { + --argc; + if (strcasecmp(argv[argc], tp)==0) return tp; + } + + return 0; +} + +static int +testFeature(int argc, char *argv[]) +{ + return (argc>0 && vc_isSupportedString(argv[0])) ? EXIT_SUCCESS : EXIT_FAILURE; +} + +static bool +str2bool(char const *str) +{ + return atoi(str)!=0 || strchr("yYtT", str[0])!=0 || strcasecmp("true", str)==0; +} + static int execQuery(char const *vserver, VserverTag tag, int argc, char *argv[]) { char const * res = 0; - char buf[sizeof(xid_t)*4 + 1024]; - xid_t xid = *vserver!='\0' ? (xid_t)(atoi(vserver)) : VC_SAMECTX; + char buf[sizeof(xid_t)*4 + 1024 + strlen(vserver)]; memset(buf, 0, sizeof buf); switch (tag) { @@ -307,19 +495,47 @@ execQuery(char const *vserver, VserverTag tag, int argc, char *argv[]) res = vc_getVserverAppDir(vserver, vcCFG_AUTO, argc==0 ? "" : argv[0]); break; - case tgRUNNING : - res = (vc_getVserverCtx(vserver, vcCFG_AUTO, false, 0)==VC_NOCTX) ? 0 : "1"; + case tgRUNNING : { + signed long xid; // type is a small hack, but should be ok... + struct vc_vx_info info; + + if (isNumber(vserver, &xid, true) && xid>=0) + res = (vc_get_vx_info(xid, &info)==-1) ? 0 : "1"; + else + res = (vc_getVserverCtx(vserver, vcCFG_AUTO, false, 0)==VC_NOCTX) ? 0 : "1"; + break; + } - case tgCONTEXT : res = getContext(buf, vserver); break; - case tgXID : res = getXid(buf, vserver); break; - case tgINITPID : res = getInitPid(buf, xid); break; + case tgCANONIFY : + strcpy(buf, vserver); + if (canonifyVserverName(buf)>0) res = buf; + break; + + case tgCONTEXT : res = getContext(buf, vserver, + argc==0 || str2bool(argv[0])); break; case tgINITPID_PID : res = getInitPidPid(buf, vserver); break; case tgAPIVER : res = getAPIVer(buf); break; - case tgUTS : res = getUTS(buf, xid, argc, argv); break; + case tgXID : res = getXid(buf, vserver); break; + case tgPXID : res = getPXid(buf, vserver); break; case tgSYSINFO : return printSysInfo(buf); break; + case tgFEATURE : return testFeature(argc,argv); break; + case tgVERIFYCAP : return verifyCap() ? 0 : 1; break; + case tgVERIFYPROC : return verifyProc() ? 0 : 1; break; + + + default : { + xid_t xid = *vserver!='\0' ? vc_xidopt2xid(vserver,true,0) : VC_SAMECTX; + + switch (tag) { + case tgID : res = vc_getVserverByCtx(xid,0,0); break; + case tgINITPID : res = getInitPid(buf, xid); break; + case tgUTS : res = getUTS(buf, xid, argc, argv); break; + case tgXIDTYPE : res = getXIDType(xid, argc, argv); break; - default : assert(false); abort(); // TODO + default : assert(false); abort(); // TODO + } + } } if (res==0) return EXIT_FAILURE; @@ -353,8 +569,9 @@ int main(int argc, char *argv[]) } if (optind+2>argc) { - WRITE_MSG(2, "No vserver or tag give; please try '--help' for more information.\n"); - exit(1); + execQuery("-", tgSYSINFO, 0, 0); + WRITE_MSG(2, "\nAssumed 'SYSINFO' as no other option given; try '--help' for more information.\n"); + exit(0); } vserver = argv[optind];