1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
|
/*
* sbutil.h
*
* Util defines.
*
* Copyright 1999-2008 Gentoo Foundation
* Licensed under the GPL-2
*
* Some parts might have Copyright:
* Copyright (C) 2002 Brad House <brad@mainstreetsoftworks.com>
*/
#ifndef __SBUTIL_H__
#define __SBUTIL_H__
#include <limits.h>
#include "config.h"
#include "localdecls.h"
#include "include/rcscripts/rcutil.h"
#define SANDBOX_CONF_FILE ETCDIR "/sandbox.conf"
#define SANDBOX_CONFD_DIR ETCDIR "/sandbox.d"
#define LD_PRELOAD_EQ "LD_PRELOAD="
#define LD_PRELOAD_FILE "/etc/ld.so.preload"
#define LIB_NAME "libsandbox.so"
#define BASHRC_NAME "sandbox.bashrc"
#define TMPDIR "/tmp"
#define VAR_TMPDIR "/var/tmp"
#define PORTAGE_TMPDIR "/var/tmp/portage"
#define SANDBOX_LOG_LOCATION "/var/log/sandbox"
#define LOG_FILE_PREFIX "/sandbox-"
#define DEBUG_LOG_FILE_PREFIX "/sandbox-debug-"
#define LOG_FILE_EXT ".log"
#define ENV_LD_PRELOAD "LD_PRELOAD"
#define ENV_EBUILD "EBUILD"
#define ENV_TMPDIR "TMPDIR"
#define ENV_PORTAGE_TMPDIR "PORTAGE_TMPDIR"
#define ENV_BASH_ENV "BASH_ENV"
#define ENV_NOCOLOR "NOCOLOR"
#define ENV_SANDBOX_VERBOSE "SANDBOX_VERBOSE"
#define ENV_SANDBOX_DEBUG "SANDBOX_DEBUG"
#define ENV_SANDBOX_LIB "SANDBOX_LIB"
#define ENV_SANDBOX_BASHRC "SANDBOX_BASHRC"
#define ENV_SANDBOX_LOG "SANDBOX_LOG"
#define ENV_SANDBOX_DEBUG_LOG "SANDBOX_DEBUG_LOG"
#define ENV_SANDBOX_WORKDIR "SANDBOX_WORKDIR"
#define ENV_SANDBOX_DENY "SANDBOX_DENY"
#define ENV_SANDBOX_READ "SANDBOX_READ"
#define ENV_SANDBOX_WRITE "SANDBOX_WRITE"
#define ENV_SANDBOX_PREDICT "SANDBOX_PREDICT"
#define ENV_SANDBOX_ON "SANDBOX_ON"
#define ENV_SANDBOX_BEEP "SANDBOX_BEEP"
#define ENV_SANDBOX_PID "SANDBOX_PID"
#define ENV_SANDBOX_ABORT "SANDBOX_ABORT"
#define ENV_SANDBOX_INTRACTV "SANDBOX_INTRACTV"
#define ENV_SANDBOX_ACTIVE "SANDBOX_ACTIVE"
#define SANDBOX_ACTIVE "armedandready"
#define DEFAULT_BEEP_COUNT 3
#define SB_BUF_LEN 2048
/* Gentoo style e* printing macro's */
#define SB_EINFO(_color, _hilight, _args...) \
do { \
int old_errno = errno; \
if (_color) \
fprintf(stderr, "\033[32;01m" _hilight "\033[0m" _args); \
else \
fprintf(stderr, _hilight _args); \
errno = old_errno; \
} while (0)
#define SB_EWARN(_color, _hilight, _args...) \
do { \
int old_errno = errno; \
if (_color) \
fprintf(stderr, "\033[33;01m" _hilight "\033[0m" _args); \
else \
fprintf(stderr, _hilight _args); \
errno = old_errno; \
} while (0)
#define SB_EERROR(_color, _hilight, _args...) \
do { \
int old_errno = errno; \
if (_color) \
fprintf(stderr, "\033[31;01m" _hilight "\033[0m" _args); \
else \
fprintf(stderr, _hilight _args); \
errno = old_errno; \
} while (0)
void get_sandbox_lib(char *path);
void get_sandbox_rc(char *path);
void get_sandbox_log(char *path);
void get_sandbox_debug_log(char *path);
int get_tmp_dir(char *path);
bool is_env_on (const char *);
bool is_env_off (const char *);
/* libsandbox need to use a wrapper for open */
void sb_set_open(void *new_open);
/* Convenience functions to reliably open, read and write to a file */
int sb_open(const char *path, int flags, mode_t mode);
size_t sb_read(int fd, void *buf, size_t count);
size_t sb_write(int fd, const void *buf, size_t count);
int sb_close(int fd);
/* Macro for sb_read() to goto an label on error */
#define SB_WRITE(_fd, _buf, _count, _error) \
do { \
size_t _n; \
_n = sb_write(_fd, _buf, _count); \
if (-1 == _n) \
goto _error; \
} while (0)
#endif /* __SBUTIL_H__ */
|
GitWeb