From 27ee5a204b8927adcc1e340b12d2edf1c70d9ba5 Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Mon, 26 Jan 2009 11:19:42 -0500 Subject: Add skeleton for PolicyKit back-end --- server/Makefile.in | 2 +- server/confdb/confdb.c | 16 ++++ server/polkit/sssd_polkit.c | 191 ++++++++++++++++++++++++++++++++++++++++++++ server/polkit/sssd_polkit.h | 28 +++++++ server/server.mk | 6 ++ 5 files changed, 242 insertions(+), 1 deletion(-) create mode 100644 server/polkit/sssd_polkit.c create mode 100644 server/polkit/sssd_polkit.h diff --git a/server/Makefile.in b/server/Makefile.in index f8056ea2c..656be8a6e 100644 --- a/server/Makefile.in +++ b/server/Makefile.in @@ -61,7 +61,7 @@ OBJS = $(SERVER_OBJ) @LIBREPLACEOBJ@ $(EXTRA_OBJ) headers = -LIBEXECBINS = sbin/sssd_nss sbin/sssd_dp sbin/sssd_be sbin/sssd_info +LIBEXECBINS = sbin/sssd_nss sbin/sssd_dp sbin/sssd_be sbin/sssd_info sbin/sssd_pk BINS = sbin/sssd $(LIBEXECBINS) SOLIBS = lib/libsss_proxy.$(SHLIBEXT) diff --git a/server/confdb/confdb.c b/server/confdb/confdb.c index f0290b471..945ac2b82 100644 --- a/server/confdb/confdb.c +++ b/server/confdb/confdb.c @@ -488,6 +488,22 @@ static int confdb_init_db(struct confdb_ctx *cdb) ret = confdb_add_param(cdb, false, "config/services", "activeServices", val); if (ret != EOK) goto done; +/* PolicyKit */ + /* Set the sssd_pk description */ + val[0] = "PolicyKit Backend Configuration"; + ret = confdb_add_param(cdb, false, "config/services/spk", "description", val); + if (ret != EOK) goto done; + + /* Set the sssd_info command path */ + val[0] = talloc_asprintf(tmp_ctx, "%s/sssd_pk", SSSD_LIBEXEC_PATH); + ret = confdb_add_param(cdb, false, "config/services/spk", "command", val); + if (ret != EOK) goto done; + + /* Add the InfoPipe to the list of active services */ + val[0] = "spk"; + ret = confdb_add_param(cdb, false, "config/services", "activeServices", val); + if (ret != EOK) goto done; + /* Domains */ val[0] = "Domains served by SSSD"; ret = confdb_add_param(cdb, false, "config/domains", "description", val); diff --git a/server/polkit/sssd_polkit.c b/server/polkit/sssd_polkit.c new file mode 100644 index 000000000..6c7d0e1e8 --- /dev/null +++ b/server/polkit/sssd_polkit.c @@ -0,0 +1,191 @@ +/* + SSSD + + PolicyKit + + Copyright (C) Stephen Gallagher 2009 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . +*/ +#define _GNU_SOURCE +#include +#include +#include "popt.h" +#include "sssd_polkit.h" +#include "util/util.h" +#include "sbus/sbus_client.h" +#include "monitor/monitor_sbus.h" +#include "monitor/monitor_interfaces.h" + +struct spk_ctx { + struct event_context *ev; + struct confdb_ctx *cdb; + struct service_sbus_ctx *ss_ctx; + struct sbus_srv_ctx *sbus_srv; +}; + +static int service_identity(DBusMessage *message, void *data, DBusMessage **r) +{ + dbus_uint16_t version = POLKIT_VERSION; + const char *name = POLKIT_SERVICE_NAME; + DBusMessage *reply; + dbus_bool_t ret; + + DEBUG(4, ("Sending identity data [%s,%d]\n", name, version)); + + reply = dbus_message_new_method_return(message); + ret = dbus_message_append_args(reply, + DBUS_TYPE_STRING, &name, + DBUS_TYPE_UINT16, &version, + DBUS_TYPE_INVALID); + if (!ret) { + return EIO; + } + + *r = reply; + return EOK; +} + +static int service_pong(DBusMessage *message, void *data, DBusMessage **r) +{ + DBusMessage *reply; + dbus_bool_t ret; + + reply = dbus_message_new_method_return(message); + ret = dbus_message_append_args(reply, DBUS_TYPE_INVALID); + if (!ret) { + return EIO; + } + + *r = reply; + return EOK; +} + +static int service_reload(DBusMessage *message, void *data, DBusMessage **r) { + /* Monitor calls this function when we need to reload + * our configuration information. Perform whatever steps + * are needed to update the configuration objects. + */ + + /* Send an empty reply to acknowledge receipt */ + return service_pong(message, data, r); +} + +struct sbus_method mon_sbus_methods[] = { + { SERVICE_METHOD_IDENTITY, service_identity }, + { SERVICE_METHOD_PING, service_pong }, + { SERVICE_METHOD_RELOAD, service_reload }, + { NULL, NULL } +}; + +static int spk_monitor_init(struct spk_ctx *spk_ctx) +{ + int ret; + char *sbus_address; + struct service_sbus_ctx *ss_ctx; + struct sbus_method_ctx *sm_ctx; + + /* Set up SBUS connection to the monitor */ + ret = monitor_get_sbus_address(spk_ctx, spk_ctx->cdb, &sbus_address); + if (ret != EOK) { + DEBUG(0, ("Could not locate monitor address.\n")); + return ret; + } + + ret = monitor_init_sbus_methods(spk_ctx, mon_sbus_methods, &sm_ctx); + if (ret != EOK) { + DEBUG(0, ("Could not initialize SBUS methods.\n")); + return ret; + } + + ret = sbus_client_init(spk_ctx, spk_ctx->ev, + sbus_address, sm_ctx, + NULL /* Private Data */, + NULL /* Destructor */, + &ss_ctx); + if (ret != EOK) { + DEBUG(0, ("Failed to connect to monitor services.\n")); + return ret; + } + + /* Set up PolicyKit-specific listeners */ + /* None currently used */ + + spk_ctx->ss_ctx = ss_ctx; + + return EOK; +} + +static int spk_process_init(TALLOC_CTX *mem_ctx, + struct event_context *ev, + struct confdb_ctx *cdb) +{ + struct spk_ctx *spk_ctx; + int ret; + + spk_ctx = talloc_zero(mem_ctx, struct spk_ctx); + if (spk_ctx == NULL) { + DEBUG(0, ("Fatal error initializing spk_ctx\n")); + return ENOMEM; + } + spk_ctx->ev = ev; + spk_ctx->cdb = cdb; + + ret = spk_monitor_init(spk_ctx); + if (ret != EOK) { + DEBUG(0, ("Fatal error setting up monitor bus\n")); + } + return ret; +} + +int main(int argc, const char *argv[]) +{ + int opt; + poptContext pc; + struct main_context *main_ctx; + int ret; + + struct poptOption long_options[] = { + POPT_AUTOHELP + SSSD_MAIN_OPTS + { NULL } + }; + + pc = poptGetContext(argv[0], argc, argv, long_options, 0); + while((opt = poptGetNextOpt(pc)) != -1) { + switch(opt) { + default: + fprintf(stderr, "\nInvalid option %s: %s\n\n", + poptBadOption(pc, 0), poptStrerror(opt)); + poptPrintUsage(pc, stderr, 0); + return 1; + } + } + + poptFreeContext(pc); + + /* set up things like debug , signals, daemonization, etc... */ + ret = server_setup("sssd[infp]", 0, &main_ctx); + if (ret != EOK) return 2; + + ret = spk_process_init(main_ctx, + main_ctx->event_ctx, + main_ctx->confdb_ctx); + if (ret != EOK) return 3; + + /* loop on main */ + server_loop(main_ctx); + + return 0; +} diff --git a/server/polkit/sssd_polkit.h b/server/polkit/sssd_polkit.h new file mode 100644 index 000000000..f9441409c --- /dev/null +++ b/server/polkit/sssd_polkit.h @@ -0,0 +1,28 @@ +/* + SSSD + + Policy Kit Helper + + Copyright (C) Stephen Gallagher 2009 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . +*/ + +#ifndef POLKIT_H_ +#define POLKIT_H_ + +#define POLKIT_VERSION 0x0001 +#define POLKIT_SERVICE_NAME "spk" + +#endif /* POLKIT_H_ */ diff --git a/server/server.mk b/server/server.mk index 66f013899..54f9629ac 100644 --- a/server/server.mk +++ b/server/server.mk @@ -34,6 +34,9 @@ NSSSRV_OBJ = \ INFOPIPE_OBJ = \ infopipe/infopipe.o +POLKIT_OBJ = \ + polkit/sssd_polkit.o + install:: all ${INSTALLCMD} -d $(DESTDIR)$(sbindir) ${INSTALLCMD} -m 700 sbin/sssd $(DESTDIR)$(sbindir) @@ -55,5 +58,8 @@ sbin/sssd_be: $(DP_BE_OBJ) $(UTIL_OBJ) sbin/sssd_info: $(INFOPIPE_OBJ) $(UTIL_OBJ) $(CC) -o sbin/sssd_info $(INFOPIPE_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS) +sbin/sssd_pk: $(POLKIT_OBJ) $(UTIL_OBJ) + $(CC) -o sbin/sssd_pk $(POLKIT_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS) + lib/libsss_proxy.$(SHLIBEXT): $(PROXY_BE_OBJ) $(SHLD) $(SHLD_FLAGS) -o $@ $(PROXY_BE_OBJ) $(LDFLAGS) $(LIBS) -- cgit