diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/config.h.in | 93 | ||||
| -rw-r--r-- | src/mock.c | 195 | ||||
| -rw-r--r-- | src/version.h.in | 9 |
3 files changed, 0 insertions, 297 deletions
diff --git a/src/config.h.in b/src/config.h.in deleted file mode 100644 index ca43a60..0000000 --- a/src/config.h.in +++ /dev/null @@ -1,93 +0,0 @@ -/* src/config.h.in. Generated from configure.ac by autoheader. */ - -/* Define to one of `_getb67', `GETB67', `getb67' for Cray-2 and Cray-YMP - systems. This function is required for `alloca.c' support on those systems. - */ -#undef CRAY_STACKSEG_END - -/* Define to 1 if using `alloca.c'. */ -#undef C_ALLOCA - -/* Define to 1 if you have `alloca', as a function or macro. */ -#undef HAVE_ALLOCA - -/* Define to 1 if you have <alloca.h> and it should be used (not on Ultrix). - */ -#undef HAVE_ALLOCA_H - -/* Define to 1 if you have the <dlfcn.h> header file. */ -#undef HAVE_DLFCN_H - -/* Define to 1 if you have the <inttypes.h> header file. */ -#undef HAVE_INTTYPES_H - -/* Define to 1 if you have the <memory.h> header file. */ -#undef HAVE_MEMORY_H - -/* Define to 1 if you have the <stdint.h> header file. */ -#undef HAVE_STDINT_H - -/* Define to 1 if you have the <stdlib.h> header file. */ -#undef HAVE_STDLIB_H - -/* Define to 1 if you have the `strerror' function. */ -#undef HAVE_STRERROR - -/* Define to 1 if you have the <strings.h> header file. */ -#undef HAVE_STRINGS_H - -/* Define to 1 if you have the <string.h> header file. */ -#undef HAVE_STRING_H - -/* Define to 1 if you have the <sys/stat.h> header file. */ -#undef HAVE_SYS_STAT_H - -/* Define to 1 if you have the <sys/types.h> header file. */ -#undef HAVE_SYS_TYPES_H - -/* Define to 1 if you have <sys/wait.h> that is POSIX.1 compatible. */ -#undef HAVE_SYS_WAIT_H - -/* Define to 1 if you have the <unistd.h> header file. */ -#undef HAVE_UNISTD_H - -/* Define to 1 if your C compiler doesn't accept -c and -o together. */ -#undef NO_MINUS_C_MINUS_O - -/* Name of package */ -#undef PACKAGE - -/* Define to the address where bug reports for this package should be sent. */ -#undef PACKAGE_BUGREPORT - -/* Define to the full name of this package. */ -#undef PACKAGE_NAME - -/* Define to the full name and version of this package. */ -#undef PACKAGE_STRING - -/* Define to the one symbol short name of this package. */ -#undef PACKAGE_TARNAME - -/* Define to the version of this package. */ -#undef PACKAGE_VERSION - -/* If using the C implementation of alloca, define if you know the - direction of stack growth for your system; otherwise it will be - automatically deduced at runtime. - STACK_DIRECTION > 0 => grows toward higher addresses - STACK_DIRECTION < 0 => grows toward lower addresses - STACK_DIRECTION = 0 => direction of growth unknown */ -#undef STACK_DIRECTION - -/* Define to 1 if you have the ANSI C header files. */ -#undef STDC_HEADERS - -/* Version number of package */ -#undef VERSION - -/* Define to empty if `const' does not conform to ANSI C. */ -#undef const - -/* Define to `int' if <sys/types.h> does not define. */ -#undef pid_t diff --git a/src/mock.c b/src/mock.c deleted file mode 100644 index 0946b5e..0000000 --- a/src/mock.c +++ /dev/null @@ -1,195 +0,0 @@ -// vim:expandtab:autoindent:tabstop=4:shiftwidth=4:filetype=c:textwidth=0: -// -// mock.c - setuid program for launching mock.py -// -// Copyright (c) 2006 - Clark Williams <williams@redhat.com> -// portions lifted from mock-helper.c by Seth Vidal -// namespace idea courtesy Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> -// -// This program is free software; you can redistribute it and/or modify -// it under the terms of the GNU General Public License as published by -// the Free Software Foundation; either version 2 of the License, or -// (at your option) any later version. -// -// This program is distributed in the hope that it will be useful, -// but WITHOUT ANY WARRANTY; without even the implied warranty of -// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -// GNU Library General Public License for more details. -// -// You should have received a copy of the GNU General Public License -// along with this program; if not, write to the Free Software -// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -// - -#define _GNU_SOURCE - -#include <stdio.h> -#include <sys/types.h> -#include <sys/stat.h> -#include <sys/wait.h> -#include <unistd.h> -#include <errno.h> -#include <stdarg.h> -#include <stdlib.h> -#include <string.h> -#include <sched.h> -#include <assert.h> -#include <asm/unistd.h> -#include <signal.h> - -#include "config.h" -#include "version.h" - -#define PYTHON_PATH "/usr/bin/python" -#define MOCK_PATH LIBEXECDIR "/mock.py" -//#define PYTHON_PATH "/usr/bin/python" -//#define MOCK_PATH "/tmp/foo.py" - -static char const * const ALLOWED_ENV[] = -{ - "dist", - "ftp_proxy", - "http_proxy", - "https_proxy", - "no_proxy", - "PS1", -}; - -#define ALLOWED_ENV_SIZE (sizeof (ALLOWED_ENV) / sizeof (ALLOWED_ENV[0])) -#define SAFE_PATH "PATH=/bin:/usr/bin:/usr/sbin" -#define SAFE_HOME "HOME=/root" -#define NSFLAG "NAMESPACE=1" - -// Note that MAX_ENV_SIZE is allowed size, plus the ones we add plus a null entry -// so, if you add more variables, increase the constant below! -#define MAX_ENV_SIZE 4 + ALLOWED_ENV_SIZE - -// -// helper functions -// - -// -// print formatted string to stderr and terminate -// -void error (const char *format, ...) -{ - va_list ap; - - va_start (ap, format); - fprintf (stderr, "mock: error: "); - vfprintf (stderr, format, ap); - va_end (ap); - fprintf (stderr, "\n"); - exit (1); -} - -// -// debug print -// -static int debugging = 0; - -void debug(const char *format, ...) -{ - - if (debugging) { - va_list ap; - - va_start (ap, format); - fprintf (stderr, "DEBUG: "); - vfprintf (stderr, format, ap); - va_end (ap); - } -} - -/////////////////////////////////////////// -// -// main logic -// -////////////////////////////////////////// - - -int main (int argc, char **argv) -{ - char **newargv; - int newargc, newargvsz; - int i; - int status; - pid_t pid; - char * env[MAX_ENV_SIZE+1] = { - [0] = SAFE_PATH, - [1] = SAFE_HOME, - [2] = NSFLAG, - }; - int idx = 3; //keep in sync with env, above - - if (getenv("MOCKDEBUG")) - debugging = 1; - - // copy in allowed environment variables to our environment - debug("copying envionment\n"); - for (i = 0; i < ALLOWED_ENV_SIZE; ++i) { - debug("try to get %s\n", ALLOWED_ENV[i]); - char *ptr = getenv (ALLOWED_ENV[i]); - if (!ptr) continue; - debug("copying var: %s\n", ptr); - ptr -= strlen (ALLOWED_ENV[i]) + 1; - env[idx++] = ptr; - } - assert(idx <= MAX_ENV_SIZE); - env[idx] = NULL; - - // set up a new argv/argc - // new argv[0] will be "/usr/bin/python" - // new argv[1] will be "/usr/libexec/mock.py" - // remainder of new argv will be old argv[1:n] - // allocate one extra for null at end - newargc = argc + 1; - newargvsz = sizeof(char *) * (newargc + 1); - newargv = alloca(newargvsz); - newargv[0] = PYTHON_PATH; - newargv[1] = MOCK_PATH; - debug("argv[%d] = %s\n", 0, newargv[0]); - debug("argv[%d] = %s\n", 1, newargv[1]); - - for (i = 1; i < argc; i++) { - newargv[i + 1] = argv[i]; - debug("argv[%d] = %s\n", i+2, newargv[i + 1]); - } - newargv[newargc] = NULL; - - debug("INFO: mock suid wrapper version " MOCK_RELEASE_VERSION " \n"); - - // clone a new process with a separate namespace - // Note: we have to use syscall here, since we want the - // raw system call 'clone', not the glibc library wrapper - // Also note: The SIGCHLD or'ed into the flags argument. If you - // don't specify an exit signal, the child is detached and waitpid - // won't work (how the heck Enrico figured it out is beyond me, since - // there are only two mentions of CSIGNAL in fork.c...) - debug("cloning new namespace\n"); - pid = syscall(__NR_clone, CLONE_VFORK|CLONE_NEWNS|SIGCHLD, 0); - - // urk! no clone? - if (pid == -1) - error("clone failed: %s\n", strerror(errno)); - - // exec python - if (pid == 0) { - debug("exec'ing python\n"); - execve(PYTHON_PATH, newargv, env); - error("execve failed: %s\n", strerror(errno)); - } - - // wait for the child to finish and exit appropriately - debug("waiting for child to finish\n"); - if (waitpid(pid, &status, 0) != pid) - error("waitpid failed: %s\n", strerror(errno)); - if (WIFEXITED(status)) { - debug("Exiting with status 0x%x (0x%x)\n", WEXITSTATUS(status), status); - exit(WEXITSTATUS(status)); - } - if (WIFSIGNALED(status)) - error("errored out with signal %d\n", WTERMSIG(status)); - - exit(-1); // WTF? how did we get here? -} diff --git a/src/version.h.in b/src/version.h.in deleted file mode 100644 index 44c5c06..0000000 --- a/src/version.h.in +++ /dev/null @@ -1,9 +0,0 @@ -#ifndef MOCK_VERSION_H -#define MOCK_VERSION_H - // This is an automatically generated file, do not edit. - // This file is generated by configure - -#define MOCK_RELEASE_VERSION "@PACKAGE_VERSION@" - -#endif - |