1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
/*
* sbutil.h
*
* Util defines.
*
* Copyright 1999-2008 Gentoo Foundation
* Licensed under the GPL-2
*
* Some parts might have Copyright:
* Copyright (C) 2002 Brad House <brad@mainstreetsoftworks.com>
*/
#ifndef __SBUTIL_H__
#define __SBUTIL_H__
#include "headers.h"
#include "include/rcscripts/rcutil.h"
#define SANDBOX_CONF_FILE ETCDIR "/sandbox.conf"
#define SANDBOX_CONFD_DIR ETCDIR "/sandbox.d"
#define LD_PRELOAD_EQ "LD_PRELOAD="
#define LD_PRELOAD_FILE "/etc/ld.so.preload"
#define LIB_NAME "libsandbox.so"
#define BASHRC_NAME "sandbox.bashrc"
#define TMPDIR "/tmp"
#define VAR_TMPDIR "/var/tmp"
#define PORTAGE_TMPDIR "/var/tmp/portage"
#define SANDBOX_LOG_LOCATION "/var/log/sandbox"
#define LOG_FILE_PREFIX "/sandbox-"
#define DEBUG_LOG_FILE_PREFIX "/sandbox-debug-"
#define LOG_FILE_EXT ".log"
#define ENV_LD_PRELOAD "LD_PRELOAD"
#define ENV_EBUILD "EBUILD"
#define ENV_TMPDIR "TMPDIR"
#define ENV_PORTAGE_TMPDIR "PORTAGE_TMPDIR"
#define ENV_BASH_ENV "BASH_ENV"
#define ENV_NOCOLOR "NOCOLOR"
#define ENV_SANDBOX_VERBOSE "SANDBOX_VERBOSE"
#define ENV_SANDBOX_DEBUG "SANDBOX_DEBUG"
#define ENV_SANDBOX_LIB "SANDBOX_LIB"
#define ENV_SANDBOX_BASHRC "SANDBOX_BASHRC"
#define ENV_SANDBOX_LOG "SANDBOX_LOG"
#define ENV_SANDBOX_DEBUG_LOG "SANDBOX_DEBUG_LOG"
#define ENV_SANDBOX_WORKDIR "SANDBOX_WORKDIR"
#define ENV_SANDBOX_DENY "SANDBOX_DENY"
#define ENV_SANDBOX_READ "SANDBOX_READ"
#define ENV_SANDBOX_WRITE "SANDBOX_WRITE"
#define ENV_SANDBOX_PREDICT "SANDBOX_PREDICT"
#define ENV_SANDBOX_ON "SANDBOX_ON"
#define ENV_SANDBOX_BEEP "SANDBOX_BEEP"
#define ENV_SANDBOX_PID "SANDBOX_PID"
#define ENV_SANDBOX_ABORT "SANDBOX_ABORT"
#define ENV_SANDBOX_INTRACTV "SANDBOX_INTRACTV"
#define ENV_SANDBOX_ACTIVE "SANDBOX_ACTIVE"
#define SANDBOX_ACTIVE "armedandready"
#define DEFAULT_BEEP_COUNT 3
#define SB_BUF_LEN 2048
/* Gentoo style e* printing macro's */
#define SB_EINFO(_color, _hilight, _args...) \
do { \
int old_errno = errno; \
if (_color) \
fprintf(stderr, "\033[32;01m" _hilight "\033[0m" _args); \
else \
fprintf(stderr, _hilight _args); \
errno = old_errno; \
} while (0)
#define SB_EWARN(_color, _hilight, _args...) \
do { \
int old_errno = errno; \
if (_color) \
fprintf(stderr, "\033[33;01m" _hilight "\033[0m" _args); \
else \
fprintf(stderr, _hilight _args); \
errno = old_errno; \
} while (0)
#define SB_EERROR(_color, _hilight, _args...) \
do { \
int old_errno = errno; \
if (_color) \
fprintf(stderr, "\033[31;01m" _hilight "\033[0m" _args); \
else \
fprintf(stderr, _hilight _args); \
errno = old_errno; \
} while (0)
void get_sandbox_lib(char *path);
void get_sandbox_rc(char *path);
void get_sandbox_log(char *path);
void get_sandbox_debug_log(char *path);
int get_tmp_dir(char *path);
bool is_env_on (const char *);
bool is_env_off (const char *);
/* libsandbox need to use a wrapper for open */
void sb_set_open(void *new_open);
/* Convenience functions to reliably open, read and write to a file */
int sb_open(const char *path, int flags, mode_t mode);
size_t sb_read(int fd, void *buf, size_t count);
size_t sb_write(int fd, const void *buf, size_t count);
int sb_close(int fd);
/* Macro for sb_read() to goto an label on error */
#define SB_WRITE(_fd, _buf, _count, _error) \
do { \
size_t _n; \
_n = sb_write(_fd, _buf, _count); \
if (-1 == _n) \
goto _error; \
} while (0)
#endif /* __SBUTIL_H__ */
|