aboutsummaryrefslogtreecommitdiff
path: root/main.c
blob: 0f4815c8a6e21948fcc2e7b27a000e0a20f19074 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
/* uroot - User's root
 *   main.c Source file with main function
 *
 * Copyright (C) 2018-2019 Karel Kočí
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 */
#define _GNU_SOURCE
#include <stdlib.h>
#include <stdio.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <sched.h>
#include <unistd.h>
#include <stdint.h>
#include <stdbool.h>
#include <argp.h>
#include <string.h>
#include "child.h"
#include "utils.h"
#include "sigpipe.h"
#include "conf.h"

const char *argp_program_version = PACKAGE_STRING;
const char *argp_program_bug_address = PACKAGE_BUGREPORT;
static const char usage_doc[] = "[CMD [ARG..]]";
static const char doc[] = "Tool using Linux namespaces to provide root like functionality for unprivileged users.";

struct opts {
	char **child_argv;
	size_t child_argc;
};

static struct argp_option options[] = {
	{"debug", 'd', NULL, 0, "Report uroot operations.", 0},
	{NULL}
};

static error_t parse_opt(int key, char *arg, struct argp_state *state) {
	struct opts *opts = state->input;
	switch (key) {
		case 'd':
			// TODO logging
			break;
		case ARGP_KEY_ARGS:
			opts->child_argc = state->argc - state->next;
			opts->child_argv = malloc((opts->child_argc + 1) * sizeof *opts->child_argv);
			memcpy(opts->child_argv, state->argv + state->next, opts->child_argc *
					sizeof *opts->child_argv);
			opts->child_argv[opts->child_argc] = NULL;
			break;
		case ARGP_KEY_INIT:
			opts->child_argv = NULL;
			opts->child_argc = 0;
			break;
		default:
			return ARGP_ERR_UNKNOWN;
	};
	return 0;
}

static const struct argp argp_parser = {
	.options = options,
	.parser = parse_opt,
	.args_doc = usage_doc,
	.doc = doc,
};


int main(int argc, char **argv) {
	struct opts opts;
	argp_parse(&argp_parser, argc, argv, ARGP_IN_ORDER, 0, &opts);

	struct child_args chargs = (struct child_args) {
		.ppid = getpid(),
		.argc = opts.child_argc,
		.argv = opts.child_argv,
		.sigpipe = sigpipe_new()
	};

	uint8_t stack[STACK_SIZE];
	pid_t chpid = clone(child_main, stack + STACK_SIZE,
			SIGCHLD | CLONE_NEWNS | CLONE_NEWUSER | CLONE_NEWPID,
			&chargs);

#define FAIL(MSG) do { fputs(MSG, stderr); kill(chpid, SIGKILL); return 1; } while (false);
	if (new_map_id("uid", chpid, getuid()))
		FAIL("Mapping of uid failed!\n");
	if (new_map_id("gid", chpid, getgid()))
		FAIL("Mapping of gid failed!\n");

	sigpipe_signal(chargs.sigpipe);

	int stat;
	waitpid(chpid, &stat, 0);
	if (WIFEXITED(stat))
		return WEXITSTATUS(stat);
	else
		return WIFSIGNALED(stat) || WCOREDUMP(stat);
}