4 * Copyright (c) 2015 Samsung Electronics Co., Ltd. All rights reserved.
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
10 * http://www.apache.org/licenses/LICENSE-2.0
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
21 * This file contains Cynara integration code
23 * @file media-util-cynara.c
24 * @author Jacek Bukarewicz (j.bukarewicz@samsung.com)
32 #include <media-util-cynara.h>
33 #include <media-util-dbg.h>
34 #include <media-util-err.h>
35 #include <media-util-internal.h>
37 #include <cynara-client.h>
38 #include <cynara-session.h>
39 #include <cynara-error.h>
40 #include <cynara-creds-socket.h>
42 static cynara *_cynara = NULL;
43 static cynara_configuration *_p_conf = NULL;
44 G_LOCK_DEFINE_STATIC(cynara_mutex);
46 static void ms_cynara_dbg_err(const char *prefix, int error_code)
48 char error_buffer[256];
50 error_buffer[0] = '\0';
52 err = cynara_strerror(error_code, error_buffer, sizeof(error_buffer));
53 if (err == CYNARA_API_SUCCESS)
54 MSAPI_DBG_ERR("%s: %s", prefix, error_buffer);
56 MSAPI_DBG_ERR("%s: error code %i", prefix, error_code);
59 int ms_cynara_initialize(void)
63 ret = cynara_configuration_create(&_p_conf);
64 if (ret != CYNARA_API_SUCCESS) {
65 ms_cynara_dbg_err("cynara_configuration_create", ret);
66 return MS_MEDIA_ERR_INTERNAL;
68 ret = cynara_configuration_set_cache_size(_p_conf, 100);
69 if (ret != CYNARA_API_SUCCESS) {
70 ms_cynara_dbg_err("cynara_configuration_set_cache_size", ret);
71 return MS_MEDIA_ERR_INTERNAL;
73 ret = cynara_initialize(&_cynara, _p_conf);
74 if (ret != CYNARA_API_SUCCESS) {
75 ms_cynara_dbg_err("cynara_initialize", ret);
76 return MS_MEDIA_ERR_INTERNAL;
79 cynara_configuration_destroy(_p_conf);
81 return MS_MEDIA_ERR_NONE;
84 void ms_cynara_finish(void)
86 cynara_finish(_cynara);
90 int ms_cynara_receive_untrusted_message(int sockfd, ms_comm_msg_s *recv_msg, ms_peer_credentials *credentials)
93 int recv_msg_size = 0;
95 if (!recv_msg || !credentials)
96 return MS_MEDIA_ERR_INVALID_PARAMETER;
98 if ((recv_msg_size = read(sockfd, recv_msg, sizeof(ms_comm_msg_s))) < 0) {
99 MSAPI_DBG_STRERROR("recv failed");
100 return MS_MEDIA_ERR_IPC;
103 MSAPI_RETVM_IF(!ms_ipc_is_valid_msg(recv_msg->msg), MS_MEDIA_ERR_IPC, "Invalid msg");
105 MSAPI_DBG_SLOG("receive msg from P[%d] T[%d] M[%.*s] S[%.*s]", recv_msg->pid, recv_msg->msg_type, MAX_MSG_SIZE, recv_msg->msg, MS_UUID_SIZE, recv_msg->storage_id);
107 if (strlen(recv_msg->storage_id) >= MS_UUID_SIZE) {
108 MSAPI_DBG_ERR("IPC message is wrong. storage_id size is over MS_UUID_SIZE");
109 return MS_MEDIA_ERR_IPC;
112 ret = cynara_creds_socket_get_pid(sockfd, &(credentials->pid));
113 MSAPI_RETVM_IF(ret != 0, MS_MEDIA_ERR_INTERNAL, "[CYNARA]Failed to get pid");
115 ret = cynara_creds_socket_get_user(sockfd, USER_METHOD_UID, &(credentials->uid));
116 MSAPI_RETVM_IF(ret != 0, MS_MEDIA_ERR_INTERNAL, "[CYNARA]Failed to get uid");
118 ret = cynara_creds_socket_get_client(sockfd, CLIENT_METHOD_SMACK, &(credentials->smack));
120 MSAPI_DBG_ERR("[CYNARA]Failed to get smack");
121 MS_SAFE_FREE(credentials->uid);
123 return MS_MEDIA_ERR_INTERNAL;
126 return MS_MEDIA_ERR_NONE;
129 int ms_cynara_check(const ms_peer_credentials *creds, const char *privilege)
134 if (!creds || !privilege)
135 return MS_MEDIA_ERR_INVALID_PARAMETER;
137 session = cynara_session_from_pid(creds->pid);
138 MSAPI_RETVM_IF(session == NULL, MS_MEDIA_ERR_INTERNAL, "cynara_session_from_pid failed");
140 G_LOCK(cynara_mutex);
141 result = cynara_check(_cynara, creds->smack, session, creds->uid, privilege);
142 G_UNLOCK(cynara_mutex);
144 if (result != CYNARA_API_ACCESS_ALLOWED)
145 ms_cynara_dbg_err("cynara_check", result);
147 MS_SAFE_FREE(session);
148 return result == CYNARA_API_ACCESS_ALLOWED ? MS_MEDIA_ERR_NONE : MS_MEDIA_ERR_PERMISSION_DENIED;
151 int ms_cynara_enable_credentials_passing(int fd)
153 const int optval = 1;
156 err = setsockopt(fd, SOL_SOCKET, SO_PASSSEC, &optval, sizeof(optval));
157 MSAPI_RETVM_IF(err != 0, MS_MEDIA_ERR_IPC, "Failed to set SO_PASSSEC socket option");
159 err = setsockopt(fd, SOL_SOCKET, SO_PASSCRED, &optval, sizeof(optval));
160 MSAPI_RETVM_IF(err != 0, MS_MEDIA_ERR_IPC, "Failed to set SO_PASSCRED socket option");
162 return MS_MEDIA_ERR_NONE;