1 /* -*- mode: C; c-file-style: "gnu"; indent-tabs-mode: nil; -*- */
2 /* dbus-sysdeps-util-unix.c Would be in dbus-sysdeps-unix.c, but not used in libdbus
4 * Copyright (C) 2002, 2003, 2004, 2005 Red Hat, Inc.
5 * Copyright (C) 2003 CodeFactory AB
7 * Licensed under the Academic Free License version 2.1
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
24 #include "dbus-sysdeps.h"
25 #include "dbus-sysdeps-unix.h"
26 #include "dbus-internals.h"
27 #include "dbus-protocol.h"
28 #include "dbus-string.h"
29 #define DBUS_USERDB_INCLUDES_PRIVATE 1
30 #include "dbus-userdb.h"
31 #include "dbus-test.h"
33 #include <sys/types.h>
43 #include <sys/socket.h>
48 #ifdef HAVE_SYS_SYSLIMITS_H
49 #include <sys/syslimits.h>
57 * @addtogroup DBusInternalsUtils
63 * Does the chdir, fork, setsid, etc. to become a daemon process.
65 * @param pidfile #NULL, or pidfile to create
66 * @param print_pid_pipe pipe to print daemon's pid to, or -1 for none
67 * @param error return location for errors
68 * @param keep_umask #TRUE to keep the original umask
69 * @returns #FALSE on failure
72 _dbus_become_daemon (const DBusString *pidfile,
73 DBusPipe *print_pid_pipe,
75 dbus_bool_t keep_umask)
81 _dbus_verbose ("Becoming a daemon...\n");
83 _dbus_verbose ("chdir to /\n");
86 dbus_set_error (error, DBUS_ERROR_FAILED,
87 "Could not chdir() to root directory");
91 _dbus_verbose ("forking...\n");
92 switch ((child_pid = fork ()))
95 _dbus_verbose ("fork failed\n");
96 dbus_set_error (error, _dbus_error_from_errno (errno),
97 "Failed to fork daemon: %s", _dbus_strerror (errno));
102 _dbus_verbose ("in child, closing std file descriptors\n");
104 /* silently ignore failures here, if someone
105 * doesn't have /dev/null we may as well try
109 dev_null_fd = open ("/dev/null", O_RDWR);
110 if (dev_null_fd >= 0)
112 dup2 (dev_null_fd, 0);
113 dup2 (dev_null_fd, 1);
115 s = _dbus_getenv ("DBUS_DEBUG_OUTPUT");
116 if (s == NULL || *s == '\0')
117 dup2 (dev_null_fd, 2);
119 _dbus_verbose ("keeping stderr open due to DBUS_DEBUG_OUTPUT\n");
124 /* Get a predictable umask */
125 _dbus_verbose ("setting umask\n");
129 _dbus_verbose ("calling setsid()\n");
131 _dbus_assert_not_reached ("setsid() failed");
136 if (!_dbus_write_pid_to_file_and_pipe (pidfile, print_pid_pipe,
139 _dbus_verbose ("pid file or pipe write failed: %s\n",
141 kill (child_pid, SIGTERM);
145 _dbus_verbose ("parent exiting\n");
155 * Creates a file containing the process ID.
157 * @param filename the filename to write to
158 * @param pid our process ID
159 * @param error return location for errors
160 * @returns #FALSE on failure
163 _dbus_write_pid_file (const DBusString *filename,
167 const char *cfilename;
171 cfilename = _dbus_string_get_const_data (filename);
173 fd = open (cfilename, O_WRONLY|O_CREAT|O_EXCL|O_BINARY, 0644);
177 dbus_set_error (error, _dbus_error_from_errno (errno),
178 "Failed to open \"%s\": %s", cfilename,
179 _dbus_strerror (errno));
183 if ((f = fdopen (fd, "w")) == NULL)
185 dbus_set_error (error, _dbus_error_from_errno (errno),
186 "Failed to fdopen fd %d: %s", fd, _dbus_strerror (errno));
187 _dbus_close (fd, NULL);
191 if (fprintf (f, "%lu\n", pid) < 0)
193 dbus_set_error (error, _dbus_error_from_errno (errno),
194 "Failed to write to \"%s\": %s", cfilename,
195 _dbus_strerror (errno));
201 if (fclose (f) == EOF)
203 dbus_set_error (error, _dbus_error_from_errno (errno),
204 "Failed to close \"%s\": %s", cfilename,
205 _dbus_strerror (errno));
213 * Writes the given pid_to_write to a pidfile (if non-NULL) and/or to a
214 * pipe (if non-NULL). Does nothing if pidfile and print_pid_pipe are both
217 * @param pidfile the file to write to or #NULL
218 * @param print_pid_pipe the pipe to write to or #NULL
219 * @param pid_to_write the pid to write out
220 * @param error error on failure
221 * @returns FALSE if error is set
224 _dbus_write_pid_to_file_and_pipe (const DBusString *pidfile,
225 DBusPipe *print_pid_pipe,
226 dbus_pid_t pid_to_write,
231 _dbus_verbose ("writing pid file %s\n", _dbus_string_get_const_data (pidfile));
232 if (!_dbus_write_pid_file (pidfile,
236 _dbus_verbose ("pid file write failed\n");
237 _DBUS_ASSERT_ERROR_IS_SET(error);
243 _dbus_verbose ("No pid file requested\n");
246 if (print_pid_pipe != NULL && _dbus_pipe_is_valid (print_pid_pipe))
251 _dbus_verbose ("writing our pid to pipe %d\n", print_pid_pipe->fd_or_handle);
253 if (!_dbus_string_init (&pid))
255 _DBUS_SET_OOM (error);
259 if (!_dbus_string_append_int (&pid, pid_to_write) ||
260 !_dbus_string_append (&pid, "\n"))
262 _dbus_string_free (&pid);
263 _DBUS_SET_OOM (error);
267 bytes = _dbus_string_get_length (&pid);
268 if (_dbus_pipe_write (print_pid_pipe, &pid, 0, bytes, error) != bytes)
270 /* _dbus_pipe_write sets error only on failure, not short write */
271 if (error != NULL && !dbus_error_is_set(error))
273 dbus_set_error (error, DBUS_ERROR_FAILED,
274 "Printing message bus PID: did not write enough bytes\n");
276 _dbus_string_free (&pid);
280 _dbus_string_free (&pid);
284 _dbus_verbose ("No pid pipe to write to\n");
291 * Verify that after the fork we can successfully change to this user.
293 * @param user the username given in the daemon configuration
294 * @returns #TRUE if username is valid
297 _dbus_verify_daemon_user (const char *user)
301 _dbus_string_init_const (&u, user);
303 return _dbus_get_user_id_and_primary_group (&u, NULL, NULL);
307 _dbus_init_system_log (void)
309 openlog ("dbus", LOG_PID, LOG_DAEMON);
313 * Log an informative message. Intended for use primarily by
316 * @param msg a printf-style format string
317 * @param args arguments for the format string
320 _dbus_log_info (const char *msg, va_list args)
322 vsyslog (LOG_DAEMON|LOG_NOTICE, msg, args);
326 * Log a security-related message. Intended for use primarily by
329 * @param msg a printf-style format string
330 * @param args arguments for the format string
333 _dbus_log_security (const char *msg, va_list args)
335 vsyslog (LOG_AUTH|LOG_NOTICE, msg, args);
338 /** Installs a UNIX signal handler
340 * @param sig the signal to handle
341 * @param handler the handler
344 _dbus_set_signal_handler (int sig,
345 DBusSignalHandler handler)
347 struct sigaction act;
350 sigemptyset (&empty_mask);
351 act.sa_handler = handler;
352 act.sa_mask = empty_mask;
354 sigaction (sig, &act, NULL);
357 /** Checks if a file exists
359 * @param file full path to the file
360 * @returns #TRUE if file exists
363 _dbus_file_exists (const char *file)
365 return (access (file, F_OK) == 0);
368 /** Checks if user is at the console
370 * @param username user to check
371 * @param error return location for errors
372 * @returns #TRUE is the user is at the consolei and there are no errors
375 _dbus_user_at_console (const char *username,
383 if (!_dbus_string_init (&f))
385 _DBUS_SET_OOM (error);
389 if (!_dbus_string_append (&f, DBUS_CONSOLE_AUTH_DIR))
391 _DBUS_SET_OOM (error);
396 if (!_dbus_string_append (&f, username))
398 _DBUS_SET_OOM (error);
402 result = _dbus_file_exists (_dbus_string_get_const_data (&f));
405 _dbus_string_free (&f);
412 * Checks whether the filename is an absolute path
414 * @param filename the filename
415 * @returns #TRUE if an absolute path
418 _dbus_path_is_absolute (const DBusString *filename)
420 if (_dbus_string_get_length (filename) > 0)
421 return _dbus_string_get_byte (filename, 0) == '/';
429 * @param filename the filename to stat
430 * @param statbuf the stat info to fill in
431 * @param error return location for error
432 * @returns #FALSE if error was set
435 _dbus_stat (const DBusString *filename,
439 const char *filename_c;
442 _DBUS_ASSERT_ERROR_IS_CLEAR (error);
444 filename_c = _dbus_string_get_const_data (filename);
446 if (stat (filename_c, &sb) < 0)
448 dbus_set_error (error, _dbus_error_from_errno (errno),
449 "%s", _dbus_strerror (errno));
453 statbuf->mode = sb.st_mode;
454 statbuf->nlink = sb.st_nlink;
455 statbuf->uid = sb.st_uid;
456 statbuf->gid = sb.st_gid;
457 statbuf->size = sb.st_size;
458 statbuf->atime = sb.st_atime;
459 statbuf->mtime = sb.st_mtime;
460 statbuf->ctime = sb.st_ctime;
467 * Internals of directory iterator
471 DIR *d; /**< The DIR* from opendir() */
476 * Open a directory to iterate over.
478 * @param filename the directory name
479 * @param error exception return object or #NULL
480 * @returns new iterator, or #NULL on error
483 _dbus_directory_open (const DBusString *filename,
488 const char *filename_c;
490 _DBUS_ASSERT_ERROR_IS_CLEAR (error);
492 filename_c = _dbus_string_get_const_data (filename);
494 d = opendir (filename_c);
497 dbus_set_error (error, _dbus_error_from_errno (errno),
498 "Failed to read directory \"%s\": %s",
500 _dbus_strerror (errno));
503 iter = dbus_new0 (DBusDirIter, 1);
507 dbus_set_error (error, DBUS_ERROR_NO_MEMORY,
508 "Could not allocate memory for directory iterator");
517 /* Calculate the required buffer size (in bytes) for directory
518 * entries read from the given directory handle. Return -1 if this
519 * this cannot be done.
521 * If you use autoconf, include fpathconf and dirfd in your
522 * AC_CHECK_FUNCS list. Otherwise use some other method to detect
523 * and use them where available.
526 dirent_buf_size(DIR * dirp, size_t *size)
529 # if defined(HAVE_FPATHCONF) && defined(_PC_NAME_MAX)
530 # if defined(HAVE_DIRFD)
531 name_max = fpathconf(dirfd(dirp), _PC_NAME_MAX);
532 # elif defined(HAVE_DDFD)
533 name_max = fpathconf(dirp->dd_fd, _PC_NAME_MAX);
535 name_max = fpathconf(dirp->__dd_fd, _PC_NAME_MAX);
536 # endif /* HAVE_DIRFD */
538 # if defined(NAME_MAX)
543 # elif defined(MAXNAMELEN)
544 name_max = MAXNAMELEN;
546 # if defined(NAME_MAX)
549 # error "buffer size for readdir_r cannot be determined"
553 *size = (size_t)offsetof(struct dirent, d_name) + name_max + 1;
561 * Get next file in the directory. Will not return "." or ".." on
562 * UNIX. If an error occurs, the contents of "filename" are
563 * undefined. The error is never set if the function succeeds.
565 * @param iter the iterator
566 * @param filename string to be set to the next file in the dir
567 * @param error return location for error
568 * @returns #TRUE if filename was filled in with a new filename
571 _dbus_directory_get_next_file (DBusDirIter *iter,
572 DBusString *filename,
575 struct dirent *d, *ent;
579 _DBUS_ASSERT_ERROR_IS_CLEAR (error);
581 if (!dirent_buf_size (iter->d, &buf_size))
583 dbus_set_error (error, DBUS_ERROR_FAILED,
584 "Can't calculate buffer size when reading directory");
588 d = (struct dirent *)dbus_malloc (buf_size);
591 dbus_set_error (error, DBUS_ERROR_NO_MEMORY,
592 "No memory to read directory entry");
597 err = readdir_r (iter->d, d, &ent);
601 dbus_set_error (error,
602 _dbus_error_from_errno (err),
603 "%s", _dbus_strerror (err));
608 else if (ent->d_name[0] == '.' &&
609 (ent->d_name[1] == '\0' ||
610 (ent->d_name[1] == '.' && ent->d_name[2] == '\0')))
614 _dbus_string_set_length (filename, 0);
615 if (!_dbus_string_append (filename, ent->d_name))
617 dbus_set_error (error, DBUS_ERROR_NO_MEMORY,
618 "No memory to read directory entry");
631 * Closes a directory iteration.
634 _dbus_directory_close (DBusDirIter *iter)
641 fill_user_info_from_group (struct group *g,
645 _dbus_assert (g->gr_name != NULL);
647 info->gid = g->gr_gid;
648 info->groupname = _dbus_strdup (g->gr_name);
650 /* info->members = dbus_strdupv (g->gr_mem) */
652 if (info->groupname == NULL)
654 dbus_set_error (error, DBUS_ERROR_NO_MEMORY, NULL);
662 fill_group_info (DBusGroupInfo *info,
664 const DBusString *groupname,
667 const char *group_c_str;
669 _dbus_assert (groupname != NULL || gid != DBUS_GID_UNSET);
670 _dbus_assert (groupname == NULL || gid == DBUS_GID_UNSET);
673 group_c_str = _dbus_string_get_const_data (groupname);
677 /* For now assuming that the getgrnam() and getgrgid() flavors
678 * always correspond to the pwnam flavors, if not we have
679 * to add more configure checks.
682 #if defined (HAVE_POSIX_GETPWNAM_R) || defined (HAVE_NONPOSIX_GETPWNAM_R)
691 /* retrieve maximum needed size for buf */
692 buflen = sysconf (_SC_GETGR_R_SIZE_MAX);
694 /* sysconf actually returns a long, but everything else expects size_t,
695 * so just recast here.
696 * https://bugs.freedesktop.org/show_bug.cgi?id=17061
698 if ((long) buflen <= 0)
704 buf = dbus_malloc (buflen);
707 dbus_set_error (error, DBUS_ERROR_NO_MEMORY, NULL);
712 #ifdef HAVE_POSIX_GETPWNAM_R
714 result = getgrnam_r (group_c_str, &g_str, buf, buflen,
717 result = getgrgid_r (gid, &g_str, buf, buflen,
720 g = getgrnam_r (group_c_str, &g_str, buf, buflen);
722 #endif /* !HAVE_POSIX_GETPWNAM_R */
723 /* Try a bigger buffer if ERANGE was returned:
724 https://bugs.freedesktop.org/show_bug.cgi?id=16727
726 if (result == ERANGE && buflen < 512 * 1024)
737 if (result == 0 && g == &g_str)
739 b = fill_user_info_from_group (g, info, error);
745 dbus_set_error (error, _dbus_error_from_errno (errno),
746 "Group %s unknown or failed to look it up\n",
747 group_c_str ? group_c_str : "???");
752 #else /* ! HAVE_GETPWNAM_R */
754 /* I guess we're screwed on thread safety here */
757 g = getgrnam (group_c_str);
761 return fill_user_info_from_group (g, info, error);
765 dbus_set_error (error, _dbus_error_from_errno (errno),
766 "Group %s unknown or failed to look it up\n",
767 group_c_str ? group_c_str : "???");
771 #endif /* ! HAVE_GETPWNAM_R */
775 * Initializes the given DBusGroupInfo struct
776 * with information about the given group name.
778 * @param info the group info struct
779 * @param groupname name of group
780 * @param error the error return
781 * @returns #FALSE if error is set
784 _dbus_group_info_fill (DBusGroupInfo *info,
785 const DBusString *groupname,
788 return fill_group_info (info, DBUS_GID_UNSET,
794 * Initializes the given DBusGroupInfo struct
795 * with information about the given group ID.
797 * @param info the group info struct
798 * @param gid group ID
799 * @param error the error return
800 * @returns #FALSE if error is set
803 _dbus_group_info_fill_gid (DBusGroupInfo *info,
807 return fill_group_info (info, gid, NULL, error);
811 * Parse a UNIX user from the bus config file. On Windows, this should
812 * simply always fail (just return #FALSE).
814 * @param username the username text
815 * @param uid_p place to return the uid
816 * @returns #TRUE on success
819 _dbus_parse_unix_user_from_config (const DBusString *username,
822 return _dbus_get_user_id (username, uid_p);
827 * Parse a UNIX group from the bus config file. On Windows, this should
828 * simply always fail (just return #FALSE).
830 * @param groupname the groupname text
831 * @param gid_p place to return the gid
832 * @returns #TRUE on success
835 _dbus_parse_unix_group_from_config (const DBusString *groupname,
838 return _dbus_get_group_id (groupname, gid_p);
842 * Gets all groups corresponding to the given UNIX user ID. On UNIX,
843 * just calls _dbus_groups_from_uid(). On Windows, should always
844 * fail since we don't know any UNIX groups.
847 * @param group_ids return location for array of group IDs
848 * @param n_group_ids return location for length of returned array
849 * @returns #TRUE if the UID existed and we got some credentials
852 _dbus_unix_groups_from_uid (dbus_uid_t uid,
853 dbus_gid_t **group_ids,
856 return _dbus_groups_from_uid (uid, group_ids, n_group_ids);
860 * Checks to see if the UNIX user ID is at the console.
861 * Should always fail on Windows (set the error to
862 * #DBUS_ERROR_NOT_SUPPORTED).
864 * @param uid UID of person to check
865 * @param error return location for errors
866 * @returns #TRUE if the UID is the same as the console user and there are no errors
869 _dbus_unix_user_is_at_console (dbus_uid_t uid,
872 return _dbus_is_console_user (uid, error);
877 * Checks to see if the UNIX user ID matches the UID of
878 * the process. Should always return #FALSE on Windows.
880 * @param uid the UNIX user ID
881 * @returns #TRUE if this uid owns the process.
884 _dbus_unix_user_is_process_owner (dbus_uid_t uid)
886 return uid == _dbus_geteuid ();
890 * Checks to see if the Windows user SID matches the owner of
891 * the process. Should always return #FALSE on UNIX.
893 * @param windows_sid the Windows user SID
894 * @returns #TRUE if this user owns the process.
897 _dbus_windows_user_is_process_owner (const char *windows_sid)
902 /** @} */ /* End of DBusInternalsUtils functions */
905 * @addtogroup DBusString
910 * Get the directory name from a complete filename
911 * @param filename the filename
912 * @param dirname string to append directory name to
913 * @returns #FALSE if no memory
916 _dbus_string_get_dirname (const DBusString *filename,
921 _dbus_assert (filename != dirname);
922 _dbus_assert (filename != NULL);
923 _dbus_assert (dirname != NULL);
925 /* Ignore any separators on the end */
926 sep = _dbus_string_get_length (filename);
928 return _dbus_string_append (dirname, "."); /* empty string passed in */
930 while (sep > 0 && _dbus_string_get_byte (filename, sep - 1) == '/')
933 _dbus_assert (sep >= 0);
936 return _dbus_string_append (dirname, "/");
938 /* Now find the previous separator */
939 _dbus_string_find_byte_backward (filename, sep, '/', &sep);
941 return _dbus_string_append (dirname, ".");
943 /* skip multiple separators */
944 while (sep > 0 && _dbus_string_get_byte (filename, sep - 1) == '/')
947 _dbus_assert (sep >= 0);
950 _dbus_string_get_byte (filename, 0) == '/')
951 return _dbus_string_append (dirname, "/");
953 return _dbus_string_copy_len (filename, 0, sep - 0,
954 dirname, _dbus_string_get_length (dirname));
956 /** @} */ /* DBusString stuff */
959 string_squash_nonprintable (DBusString *str)
964 buf = _dbus_string_get_data (str);
965 len = _dbus_string_get_length (str);
967 for (i = 0; i < len; i++)
969 unsigned char c = (unsigned char) buf[i];
972 else if (c < 0x20 || c > 127)
978 * Get a printable string describing the command used to execute
979 * the process with pid. This string should only be used for
980 * informative purposes such as logging; it may not be trusted.
982 * The command is guaranteed to be printable ASCII and no longer
985 * @param pid Process id
986 * @param str Append command to this string
987 * @param max_len Maximum length of returned command
988 * @param error return location for errors
989 * @returns #FALSE on error
992 _dbus_command_for_pid (unsigned long pid,
997 /* This is all Linux-specific for now */
1002 if (!_dbus_string_init (&path))
1004 _DBUS_SET_OOM (error);
1008 if (!_dbus_string_init (&cmdline))
1010 _DBUS_SET_OOM (error);
1011 _dbus_string_free (&path);
1015 if (!_dbus_string_append_printf (&path, "/proc/%ld/cmdline", pid))
1018 fd = open (_dbus_string_get_const_data (&path), O_RDONLY);
1021 dbus_set_error (error,
1022 _dbus_error_from_errno (errno),
1023 "Failed to open \"%s\": %s",
1024 _dbus_string_get_const_data (&path),
1025 _dbus_strerror (errno));
1029 if (!_dbus_read (fd, &cmdline, max_len))
1031 dbus_set_error (error,
1032 _dbus_error_from_errno (errno),
1033 "Failed to read from \"%s\": %s",
1034 _dbus_string_get_const_data (&path),
1035 _dbus_strerror (errno));
1039 if (!_dbus_close (fd, error))
1042 string_squash_nonprintable (&cmdline);
1044 if (!_dbus_string_copy (&cmdline, 0, str, _dbus_string_get_length (str)))
1047 _dbus_string_free (&cmdline);
1048 _dbus_string_free (&path);
1051 _DBUS_SET_OOM (error);
1053 _dbus_string_free (&cmdline);
1054 _dbus_string_free (&path);