Add skeleton for PolicyKit back-end

5 files changed, 242 insertions, 1 deletions

diff --git a/server/Makefile.in b/server/Makefile.in
index f8056ea2c..656be8a6e 100644
--- a/server/Makefile.in
+++ b/server/Makefile.in
@@ -61,7 +61,7 @@ OBJS = $(SERVER_OBJ) @LIBREPLACEOBJ@ $(EXTRA_OBJ)
 
 headers =
 
-LIBEXECBINS =  sbin/sssd_nss sbin/sssd_dp sbin/sssd_be sbin/sssd_info
+LIBEXECBINS =  sbin/sssd_nss sbin/sssd_dp sbin/sssd_be sbin/sssd_info sbin/sssd_pk
 BINS = sbin/sssd $(LIBEXECBINS)
 SOLIBS = lib/libsss_proxy.$(SHLIBEXT)
 
diff --git a/server/confdb/confdb.c b/server/confdb/confdb.c
index f0290b471..945ac2b82 100644
--- a/server/confdb/confdb.c
+++ b/server/confdb/confdb.c
@@ -488,6 +488,22 @@ static int confdb_init_db(struct confdb_ctx *cdb)
     ret = confdb_add_param(cdb, false, "config/services", "activeServices", val);
     if (ret != EOK) goto done;
 
+/* PolicyKit */
+    /* Set the sssd_pk description */
+    val[0] = "PolicyKit Backend Configuration";
+    ret = confdb_add_param(cdb, false, "config/services/spk", "description", val);
+    if (ret != EOK) goto done;
+
+    /* Set the sssd_info command path */
+    val[0] = talloc_asprintf(tmp_ctx, "%s/sssd_pk", SSSD_LIBEXEC_PATH);
+    ret = confdb_add_param(cdb, false, "config/services/spk", "command", val);
+    if (ret != EOK) goto done;
+
+    /* Add the InfoPipe to the list of active services */
+    val[0] = "spk";
+    ret = confdb_add_param(cdb, false, "config/services", "activeServices", val);
+    if (ret != EOK) goto done;
+
 /* Domains */
     val[0] = "Domains served by SSSD";
     ret = confdb_add_param(cdb, false, "config/domains", "description", val);
diff --git a/server/polkit/sssd_polkit.c b/server/polkit/sssd_polkit.c
new file mode 100644
index 000000000..6c7d0e1e8
--- /dev/null
+++ b/server/polkit/sssd_polkit.c
@@ -0,0 +1,191 @@
+/*
+   SSSD
+
+   PolicyKit
+
+   Copyright (C) Stephen Gallagher <sgallagh@redhat.com>	2009
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 3 of the License, or
+   (at your option) any later version.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+#define _GNU_SOURCE
+#include <stdlib.h>
+#include <stdio.h>
+#include "popt.h"
+#include "sssd_polkit.h"
+#include "util/util.h"
+#include "sbus/sbus_client.h"
+#include "monitor/monitor_sbus.h"
+#include "monitor/monitor_interfaces.h"
+
+struct spk_ctx {
+    struct event_context *ev;
+    struct confdb_ctx *cdb;
+    struct service_sbus_ctx *ss_ctx;
+    struct sbus_srv_ctx *sbus_srv;
+};
+
+static int service_identity(DBusMessage *message, void *data, DBusMessage **r)
+{
+    dbus_uint16_t version = POLKIT_VERSION;
+    const char *name = POLKIT_SERVICE_NAME;
+    DBusMessage *reply;
+    dbus_bool_t ret;
+
+    DEBUG(4, ("Sending identity data [%s,%d]\n", name, version));
+
+    reply = dbus_message_new_method_return(message);
+    ret = dbus_message_append_args(reply,
+                                   DBUS_TYPE_STRING, &name,
+                                   DBUS_TYPE_UINT16, &version,
+                                   DBUS_TYPE_INVALID);
+    if (!ret) {
+        return EIO;
+    }
+
+    *r = reply;
+    return EOK;
+}
+
+static int service_pong(DBusMessage *message, void *data, DBusMessage **r)
+{
+    DBusMessage *reply;
+    dbus_bool_t ret;
+
+    reply = dbus_message_new_method_return(message);
+    ret = dbus_message_append_args(reply, DBUS_TYPE_INVALID);
+    if (!ret) {
+        return EIO;
+    }
+
+    *r = reply;
+    return EOK;
+}
+
+static int service_reload(DBusMessage *message, void *data, DBusMessage **r) {
+    /* Monitor calls this function when we need to reload
+     * our configuration information. Perform whatever steps
+     * are needed to update the configuration objects.
+     */
+
+    /* Send an empty reply to acknowledge receipt */
+    return service_pong(message, data, r);
+}
+
+struct sbus_method mon_sbus_methods[] = {
+    { SERVICE_METHOD_IDENTITY, service_identity },
+    { SERVICE_METHOD_PING, service_pong },
+    { SERVICE_METHOD_RELOAD, service_reload },
+    { NULL, NULL }
+};
+
+static int spk_monitor_init(struct spk_ctx *spk_ctx)
+{
+    int ret;
+    char *sbus_address;
+    struct service_sbus_ctx *ss_ctx;
+    struct sbus_method_ctx *sm_ctx;
+
+    /* Set up SBUS connection to the monitor */
+    ret = monitor_get_sbus_address(spk_ctx, spk_ctx->cdb, &sbus_address);
+    if (ret != EOK) {
+        DEBUG(0, ("Could not locate monitor address.\n"));
+        return ret;
+    }
+
+    ret = monitor_init_sbus_methods(spk_ctx, mon_sbus_methods, &sm_ctx);
+    if (ret != EOK) {
+        DEBUG(0, ("Could not initialize SBUS methods.\n"));
+        return ret;
+    }
+
+    ret = sbus_client_init(spk_ctx, spk_ctx->ev,
+                           sbus_address, sm_ctx,
+                           NULL /* Private Data */,
+                           NULL /* Destructor */,
+                           &ss_ctx);
+    if (ret != EOK) {
+        DEBUG(0, ("Failed to connect to monitor services.\n"));
+        return ret;
+    }
+
+    /* Set up PolicyKit-specific listeners */
+    /* None currently used */
+
+    spk_ctx->ss_ctx = ss_ctx;
+
+    return EOK;
+}
+
+static int spk_process_init(TALLOC_CTX *mem_ctx,
+                            struct event_context *ev,
+                            struct confdb_ctx *cdb)
+{
+    struct spk_ctx *spk_ctx;
+    int ret;
+
+    spk_ctx = talloc_zero(mem_ctx, struct spk_ctx);
+    if (spk_ctx == NULL) {
+        DEBUG(0, ("Fatal error initializing spk_ctx\n"));
+        return ENOMEM;
+    }
+    spk_ctx->ev = ev;
+    spk_ctx->cdb = cdb;
+
+    ret = spk_monitor_init(spk_ctx);
+    if (ret != EOK) {
+        DEBUG(0, ("Fatal error setting up monitor bus\n"));
+    }
+    return ret;
+}
+
+int main(int argc, const char *argv[])
+{
+    int opt;
+    poptContext pc;
+    struct main_context *main_ctx;
+    int ret;
+
+    struct poptOption long_options[] = {
+        POPT_AUTOHELP
+        SSSD_MAIN_OPTS
+        { NULL }
+    };
+
+    pc = poptGetContext(argv[0], argc, argv, long_options, 0);
+    while((opt = poptGetNextOpt(pc)) != -1) {
+        switch(opt) {
+        default:
+            fprintf(stderr, "\nInvalid option %s: %s\n\n",
+                  poptBadOption(pc, 0), poptStrerror(opt));
+            poptPrintUsage(pc, stderr, 0);
+            return 1;
+        }
+    }
+
+    poptFreeContext(pc);
+
+    /* set up things like debug , signals, daemonization, etc... */
+    ret = server_setup("sssd[infp]", 0, &main_ctx);
+    if (ret != EOK) return 2;
+
+    ret = spk_process_init(main_ctx,
+                           main_ctx->event_ctx,
+                           main_ctx->confdb_ctx);
+    if (ret != EOK) return 3;
+
+    /* loop on main */
+    server_loop(main_ctx);
+
+    return 0;
+}
diff --git a/server/polkit/sssd_polkit.h b/server/polkit/sssd_polkit.h
new file mode 100644
index 000000000..f9441409c
--- /dev/null
+++ b/server/polkit/sssd_polkit.h
@@ -0,0 +1,28 @@
+/*
+   SSSD
+
+   Policy Kit Helper
+
+   Copyright (C) Stephen Gallagher <sgallagh@redhat.com>	2009
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 3 of the License, or
+   (at your option) any later version.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#ifndef POLKIT_H_
+#define POLKIT_H_
+
+#define POLKIT_VERSION 0x0001
+#define POLKIT_SERVICE_NAME "spk"
+
+#endif /* POLKIT_H_ */
diff --git a/server/server.mk b/server/server.mk
index 66f013899..54f9629ac 100644
--- a/server/server.mk
+++ b/server/server.mk
@@ -34,6 +34,9 @@ NSSSRV_OBJ = \
 INFOPIPE_OBJ = \
     infopipe/infopipe.o
 
+POLKIT_OBJ = \
+    polkit/sssd_polkit.o
+
 install:: all
 	${INSTALLCMD} -d $(DESTDIR)$(sbindir)
 	${INSTALLCMD} -m 700 sbin/sssd $(DESTDIR)$(sbindir)
@@ -55,5 +58,8 @@ sbin/sssd_be: $(DP_BE_OBJ) $(UTIL_OBJ)
 sbin/sssd_info: $(INFOPIPE_OBJ) $(UTIL_OBJ)
 	$(CC) -o sbin/sssd_info $(INFOPIPE_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
 
+sbin/sssd_pk: $(POLKIT_OBJ) $(UTIL_OBJ)
+	$(CC) -o sbin/sssd_pk $(POLKIT_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
+
 lib/libsss_proxy.$(SHLIBEXT): $(PROXY_BE_OBJ)
 	$(SHLD) $(SHLD_FLAGS) -o $@ $(PROXY_BE_OBJ) $(LDFLAGS) $(LIBS)