Denis Vlasenko | 9bff26c | 2006-10-20 19:40:44 +0000 | [diff] [blame] | 1 | /* |
| 2 | Copyright (c) 2001-2006, Gerrit Pape |
| 3 | All rights reserved. |
| 4 | |
| 5 | Redistribution and use in source and binary forms, with or without |
| 6 | modification, are permitted provided that the following conditions are met: |
| 7 | |
| 8 | 1. Redistributions of source code must retain the above copyright notice, |
| 9 | this list of conditions and the following disclaimer. |
| 10 | 2. Redistributions in binary form must reproduce the above copyright |
| 11 | notice, this list of conditions and the following disclaimer in the |
| 12 | documentation and/or other materials provided with the distribution. |
| 13 | 3. The name of the author may not be used to endorse or promote products |
| 14 | derived from this software without specific prior written permission. |
| 15 | |
| 16 | THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED |
| 17 | WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF |
| 18 | MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO |
| 19 | EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| 20 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, |
| 21 | PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; |
| 22 | OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, |
| 23 | WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR |
| 24 | OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF |
| 25 | ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 26 | */ |
| 27 | |
Denis Vlasenko | d18f52b | 2008-03-02 12:53:15 +0000 | [diff] [blame] | 28 | /* Busyboxed by Denys Vlasenko <vda.linux@googlemail.com> */ |
Denys Vlasenko | 0863e1a | 2015-10-19 00:41:28 +0200 | [diff] [blame] | 29 | |
| 30 | //config:config CHPST |
| 31 | //config: bool "chpst" |
| 32 | //config: default y |
| 33 | //config: help |
| 34 | //config: chpst changes the process state according to the given options, and |
| 35 | //config: execs specified program. |
| 36 | //config: |
| 37 | //config:config SETUIDGID |
| 38 | //config: bool "setuidgid" |
| 39 | //config: default y |
| 40 | //config: help |
| 41 | //config: Sets soft resource limits as specified by options |
| 42 | //config: |
| 43 | //config:config ENVUIDGID |
| 44 | //config: bool "envuidgid" |
| 45 | //config: default y |
| 46 | //config: help |
| 47 | //config: Sets $UID to account's uid and $GID to account's gid |
| 48 | //config: |
| 49 | //config:config ENVDIR |
| 50 | //config: bool "envdir" |
| 51 | //config: default y |
| 52 | //config: help |
| 53 | //config: Sets various environment variables as specified by files |
| 54 | //config: in the given directory |
| 55 | //config: |
| 56 | //config:config SOFTLIMIT |
| 57 | //config: bool "softlimit" |
| 58 | //config: default y |
| 59 | //config: help |
| 60 | //config: Sets soft resource limits as specified by options |
| 61 | |
| 62 | //applet:IF_CHPST(APPLET(chpst, BB_DIR_USR_BIN, BB_SUID_DROP)) |
| 63 | //applet:IF_ENVDIR(APPLET_ODDNAME(envdir, chpst, BB_DIR_USR_BIN, BB_SUID_DROP, envdir)) |
| 64 | //applet:IF_ENVUIDGID(APPLET_ODDNAME(envuidgid, chpst, BB_DIR_USR_BIN, BB_SUID_DROP, envuidgid)) |
| 65 | //applet:IF_SETUIDGID(APPLET_ODDNAME(setuidgid, chpst, BB_DIR_USR_BIN, BB_SUID_DROP, setuidgid)) |
| 66 | //applet:IF_SOFTLIMIT(APPLET_ODDNAME(softlimit, chpst, BB_DIR_USR_BIN, BB_SUID_DROP, softlimit)) |
| 67 | |
| 68 | //kbuild:lib-$(CONFIG_CHPST) += chpst.o |
| 69 | //kbuild:lib-$(CONFIG_ENVDIR) += chpst.o |
| 70 | //kbuild:lib-$(CONFIG_ENVUIDGID) += chpst.o |
| 71 | //kbuild:lib-$(CONFIG_SETUIDGID) += chpst.o |
| 72 | //kbuild:lib-$(CONFIG_SOFTLIMIT) += chpst.o |
Denis Vlasenko | 9bff26c | 2006-10-20 19:40:44 +0000 | [diff] [blame] | 73 | |
Pere Orga | 5bc8c00 | 2011-04-11 03:29:49 +0200 | [diff] [blame] | 74 | //usage:#define chpst_trivial_usage |
| 75 | //usage: "[-vP012] [-u USER[:GRP]] [-U USER[:GRP]] [-e DIR]\n" |
| 76 | //usage: " [-/ DIR] [-n NICE] [-m BYTES] [-d BYTES] [-o N]\n" |
| 77 | //usage: " [-p N] [-f BYTES] [-c BYTES] PROG ARGS" |
| 78 | //usage:#define chpst_full_usage "\n\n" |
| 79 | //usage: "Change the process state, run PROG\n" |
Pere Orga | 5bc8c00 | 2011-04-11 03:29:49 +0200 | [diff] [blame] | 80 | //usage: "\n -u USER[:GRP] Set uid and gid" |
| 81 | //usage: "\n -U USER[:GRP] Set $UID and $GID in environment" |
| 82 | //usage: "\n -e DIR Set environment variables as specified by files" |
| 83 | //usage: "\n in DIR: file=1st_line_of_file" |
| 84 | //usage: "\n -/ DIR Chroot to DIR" |
| 85 | //usage: "\n -n NICE Add NICE to nice value" |
| 86 | //usage: "\n -m BYTES Same as -d BYTES -s BYTES -l BYTES" |
| 87 | //usage: "\n -d BYTES Limit data segment" |
| 88 | //usage: "\n -o N Limit number of open files per process" |
| 89 | //usage: "\n -p N Limit number of processes per uid" |
| 90 | //usage: "\n -f BYTES Limit output file sizes" |
| 91 | //usage: "\n -c BYTES Limit core file size" |
| 92 | //usage: "\n -v Verbose" |
| 93 | //usage: "\n -P Create new process group" |
| 94 | //usage: "\n -0 Close stdin" |
| 95 | //usage: "\n -1 Close stdout" |
| 96 | //usage: "\n -2 Close stderr" |
| 97 | //usage: |
| 98 | //usage:#define envdir_trivial_usage |
| 99 | //usage: "DIR PROG ARGS" |
| 100 | //usage:#define envdir_full_usage "\n\n" |
| 101 | //usage: "Set various environment variables as specified by files\n" |
| 102 | //usage: "in the directory DIR, run PROG" |
| 103 | //usage: |
| 104 | //usage:#define envuidgid_trivial_usage |
| 105 | //usage: "USER PROG ARGS" |
| 106 | //usage:#define envuidgid_full_usage "\n\n" |
| 107 | //usage: "Set $UID to USER's uid and $GID to USER's gid, run PROG" |
| 108 | //usage: |
| 109 | //usage:#define setuidgid_trivial_usage |
| 110 | //usage: "USER PROG ARGS" |
| 111 | //usage:#define setuidgid_full_usage "\n\n" |
| 112 | //usage: "Set uid and gid to USER's uid and gid, drop supplementary group ids,\n" |
| 113 | //usage: "run PROG" |
| 114 | //usage: |
| 115 | //usage:#define softlimit_trivial_usage |
| 116 | //usage: "[-a BYTES] [-m BYTES] [-d BYTES] [-s BYTES] [-l BYTES]\n" |
| 117 | //usage: " [-f BYTES] [-c BYTES] [-r BYTES] [-o N] [-p N] [-t N]\n" |
| 118 | //usage: " PROG ARGS" |
| 119 | //usage:#define softlimit_full_usage "\n\n" |
| 120 | //usage: "Set soft resource limits, then run PROG\n" |
Pere Orga | 5bc8c00 | 2011-04-11 03:29:49 +0200 | [diff] [blame] | 121 | //usage: "\n -a BYTES Limit total size of all segments" |
| 122 | //usage: "\n -m BYTES Same as -d BYTES -s BYTES -l BYTES -a BYTES" |
| 123 | //usage: "\n -d BYTES Limit data segment" |
| 124 | //usage: "\n -s BYTES Limit stack segment" |
| 125 | //usage: "\n -l BYTES Limit locked memory size" |
| 126 | //usage: "\n -o N Limit number of open files per process" |
| 127 | //usage: "\n -p N Limit number of processes per uid" |
| 128 | //usage: "\nOptions controlling file sizes:" |
| 129 | //usage: "\n -f BYTES Limit output file sizes" |
| 130 | //usage: "\n -c BYTES Limit core file size" |
| 131 | //usage: "\nEfficiency opts:" |
| 132 | //usage: "\n -r BYTES Limit resident set size" |
| 133 | //usage: "\n -t N Limit CPU time, process receives" |
| 134 | //usage: "\n a SIGXCPU after N seconds" |
| 135 | |
Denis Vlasenko | b6adbf1 | 2007-05-26 19:00:18 +0000 | [diff] [blame] | 136 | #include "libbb.h" |
Mike Frysinger | c5fe9f7 | 2012-07-05 23:19:09 -0400 | [diff] [blame] | 137 | #include <sys/resource.h> /* getrlimit */ |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 138 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 139 | /* |
| 140 | Five applets here: chpst, envdir, envuidgid, setuidgid, softlimit. |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 141 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 142 | Only softlimit and chpst are taking options: |
| 143 | |
| 144 | # common |
| 145 | -o N Limit number of open files per process |
| 146 | -p N Limit number of processes per uid |
| 147 | -m BYTES Same as -d BYTES -s BYTES -l BYTES [-a BYTES] |
| 148 | -d BYTES Limit data segment |
| 149 | -f BYTES Limit output file sizes |
| 150 | -c BYTES Limit core file size |
| 151 | # softlimit |
| 152 | -a BYTES Limit total size of all segments |
| 153 | -s BYTES Limit stack segment |
| 154 | -l BYTES Limit locked memory size |
| 155 | -r BYTES Limit resident set size |
| 156 | -t N Limit CPU time |
| 157 | # chpst |
| 158 | -u USER[:GRP] Set uid and gid |
| 159 | -U USER[:GRP] Set $UID and $GID in environment |
| 160 | -e DIR Set environment variables as specified by files in DIR |
| 161 | -/ DIR Chroot to DIR |
| 162 | -n NICE Add NICE to nice value |
| 163 | -v Verbose |
| 164 | -P Create new process group |
| 165 | -0 -1 -2 Close fd 0,1,2 |
| 166 | |
| 167 | Even though we accept all these options for both softlimit and chpst, |
| 168 | they are not to be advertised on their help texts. |
| 169 | We have enough problems with feature creep in other people's |
| 170 | software, don't want to add our own. |
| 171 | |
| 172 | envdir, envuidgid, setuidgid take no options, but they reuse code which |
| 173 | handles -e, -U and -u. |
| 174 | */ |
| 175 | |
| 176 | enum { |
| 177 | OPT_a = (1 << 0) * ENABLE_SOFTLIMIT, |
| 178 | OPT_c = (1 << 1) * (ENABLE_SOFTLIMIT || ENABLE_CHPST), |
| 179 | OPT_d = (1 << 2) * (ENABLE_SOFTLIMIT || ENABLE_CHPST), |
| 180 | OPT_f = (1 << 3) * (ENABLE_SOFTLIMIT || ENABLE_CHPST), |
| 181 | OPT_l = (1 << 4) * ENABLE_SOFTLIMIT, |
| 182 | OPT_m = (1 << 5) * (ENABLE_SOFTLIMIT || ENABLE_CHPST), |
| 183 | OPT_o = (1 << 6) * (ENABLE_SOFTLIMIT || ENABLE_CHPST), |
| 184 | OPT_p = (1 << 7) * (ENABLE_SOFTLIMIT || ENABLE_CHPST), |
| 185 | OPT_r = (1 << 8) * ENABLE_SOFTLIMIT, |
| 186 | OPT_s = (1 << 9) * ENABLE_SOFTLIMIT, |
| 187 | OPT_t = (1 << 10) * ENABLE_SOFTLIMIT, |
| 188 | OPT_u = (1 << 11) * (ENABLE_CHPST || ENABLE_SETUIDGID), |
| 189 | OPT_U = (1 << 12) * (ENABLE_CHPST || ENABLE_ENVUIDGID), |
| 190 | OPT_e = (1 << 13) * (ENABLE_CHPST || ENABLE_ENVDIR), |
| 191 | OPT_root = (1 << 14) * ENABLE_CHPST, |
| 192 | OPT_n = (1 << 15) * ENABLE_CHPST, |
| 193 | OPT_v = (1 << 16) * ENABLE_CHPST, |
| 194 | OPT_P = (1 << 17) * ENABLE_CHPST, |
| 195 | OPT_0 = (1 << 18) * ENABLE_CHPST, |
| 196 | OPT_1 = (1 << 19) * ENABLE_CHPST, |
| 197 | OPT_2 = (1 << 20) * ENABLE_CHPST, |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 198 | }; |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 199 | |
Bernhard Reutner-Fischer | ca25449 | 2009-10-26 23:27:07 +0100 | [diff] [blame] | 200 | /* TODO: use recursive_action? */ |
Denys Vlasenko | adf922e | 2009-10-08 14:35:37 +0200 | [diff] [blame] | 201 | static NOINLINE void edir(const char *directory_name) |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 202 | { |
| 203 | int wdir; |
| 204 | DIR *dir; |
| 205 | struct dirent *d; |
| 206 | int fd; |
| 207 | |
| 208 | wdir = xopen(".", O_RDONLY | O_NDELAY); |
| 209 | xchdir(directory_name); |
Bernhard Reutner-Fischer | ca25449 | 2009-10-26 23:27:07 +0100 | [diff] [blame] | 210 | dir = xopendir("."); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 211 | for (;;) { |
Denys Vlasenko | 695fa51 | 2010-01-06 18:16:39 +0100 | [diff] [blame] | 212 | char buf[256]; |
Denis Vlasenko | 9895dfd | 2008-04-01 16:13:14 +0000 | [diff] [blame] | 213 | char *tail; |
| 214 | int size; |
| 215 | |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 216 | errno = 0; |
| 217 | d = readdir(dir); |
| 218 | if (!d) { |
Denis Vlasenko | 83ea643 | 2006-11-16 02:27:24 +0000 | [diff] [blame] | 219 | if (errno) |
| 220 | bb_perror_msg_and_die("readdir %s", |
| 221 | directory_name); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 222 | break; |
| 223 | } |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 224 | if (d->d_name[0] == '.') |
| 225 | continue; |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 226 | fd = open(d->d_name, O_RDONLY | O_NDELAY); |
| 227 | if (fd < 0) { |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 228 | if ((errno == EISDIR) && directory_name) { |
| 229 | if (option_mask32 & OPT_v) |
Denis Vlasenko | 83ea643 | 2006-11-16 02:27:24 +0000 | [diff] [blame] | 230 | bb_perror_msg("warning: %s/%s is a directory", |
Denys Vlasenko | e4dcba1 | 2010-10-28 18:57:19 +0200 | [diff] [blame] | 231 | directory_name, d->d_name); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 232 | continue; |
Denys Vlasenko | e4dcba1 | 2010-10-28 18:57:19 +0200 | [diff] [blame] | 233 | } |
| 234 | bb_perror_msg_and_die("open %s/%s", |
Denis Vlasenko | 83ea643 | 2006-11-16 02:27:24 +0000 | [diff] [blame] | 235 | directory_name, d->d_name); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 236 | } |
Denis Vlasenko | 9895dfd | 2008-04-01 16:13:14 +0000 | [diff] [blame] | 237 | size = full_read(fd, buf, sizeof(buf)-1); |
| 238 | close(fd); |
| 239 | if (size < 0) |
| 240 | bb_perror_msg_and_die("read %s/%s", |
| 241 | directory_name, d->d_name); |
| 242 | if (size == 0) { |
| 243 | unsetenv(d->d_name); |
| 244 | continue; |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 245 | } |
Denis Vlasenko | 9895dfd | 2008-04-01 16:13:14 +0000 | [diff] [blame] | 246 | buf[size] = '\n'; |
| 247 | tail = strchr(buf, '\n'); |
| 248 | /* skip trailing whitespace */ |
| 249 | while (1) { |
| 250 | *tail = '\0'; |
| 251 | tail--; |
| 252 | if (tail < buf || !isspace(*tail)) |
| 253 | break; |
| 254 | } |
| 255 | xsetenv(d->d_name, buf); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 256 | } |
| 257 | closedir(dir); |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 258 | if (fchdir(wdir) == -1) |
| 259 | bb_perror_msg_and_die("fchdir"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 260 | close(wdir); |
| 261 | } |
| 262 | |
| 263 | static void limit(int what, long l) |
| 264 | { |
| 265 | struct rlimit r; |
| 266 | |
Denis Vlasenko | 4e6d511 | 2008-03-12 22:14:34 +0000 | [diff] [blame] | 267 | /* Never fails under Linux (except if you pass it bad arguments) */ |
| 268 | getrlimit(what, &r); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 269 | if ((l < 0) || (l > r.rlim_max)) |
| 270 | r.rlim_cur = r.rlim_max; |
| 271 | else |
| 272 | r.rlim_cur = l; |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 273 | if (setrlimit(what, &r) == -1) |
| 274 | bb_perror_msg_and_die("setrlimit"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 275 | } |
| 276 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 277 | int chpst_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE; |
| 278 | int chpst_main(int argc UNUSED_PARAM, char **argv) |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 279 | { |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 280 | struct bb_uidgid_t ugid; |
Denis Vlasenko | ec73d30 | 2008-08-05 17:43:29 +0000 | [diff] [blame] | 281 | char *set_user = set_user; /* for compiler */ |
Denis Vlasenko | ec73d30 | 2008-08-05 17:43:29 +0000 | [diff] [blame] | 282 | char *env_dir = env_dir; |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 283 | char *root; |
| 284 | char *nicestr; |
| 285 | unsigned limita; |
| 286 | unsigned limitc; |
| 287 | unsigned limitd; |
| 288 | unsigned limitf; |
| 289 | unsigned limitl; |
| 290 | unsigned limitm; |
| 291 | unsigned limito; |
| 292 | unsigned limitp; |
| 293 | unsigned limitr; |
| 294 | unsigned limits; |
| 295 | unsigned limitt; |
| 296 | unsigned opt; |
| 297 | |
| 298 | if ((ENABLE_CHPST && applet_name[0] == 'c') |
| 299 | || (ENABLE_SOFTLIMIT && applet_name[1] == 'o') |
| 300 | ) { |
| 301 | // FIXME: can we live with int-sized limits? |
| 302 | // can we live with 40000 days? |
| 303 | // if yes -> getopt converts strings to numbers for us |
| 304 | opt_complementary = "-1:a+:c+:d+:f+:l+:m+:o+:p+:r+:s+:t+"; |
| 305 | opt = getopt32(argv, "+a:c:d:f:l:m:o:p:r:s:t:u:U:e:" |
Denis Vlasenko | 5e34ff2 | 2009-04-21 11:09:40 +0000 | [diff] [blame] | 306 | IF_CHPST("/:n:vP012"), |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 307 | &limita, &limitc, &limitd, &limitf, &limitl, |
| 308 | &limitm, &limito, &limitp, &limitr, &limits, &limitt, |
Denys Vlasenko | 1a7256a | 2013-11-29 16:39:28 +0100 | [diff] [blame] | 309 | &set_user, &set_user, &env_dir |
Denis Vlasenko | 5e34ff2 | 2009-04-21 11:09:40 +0000 | [diff] [blame] | 310 | IF_CHPST(, &root, &nicestr)); |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 311 | argv += optind; |
| 312 | if (opt & OPT_m) { // -m means -asld |
| 313 | limita = limits = limitl = limitd = limitm; |
| 314 | opt |= (OPT_s | OPT_l | OPT_a | OPT_d); |
| 315 | } |
| 316 | } else { |
| 317 | option_mask32 = opt = 0; |
| 318 | argv++; |
Denis Vlasenko | b9c262b | 2008-08-20 22:19:27 +0000 | [diff] [blame] | 319 | if (!*argv) |
| 320 | bb_show_usage(); |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 321 | } |
| 322 | |
| 323 | // envdir? |
| 324 | if (ENABLE_ENVDIR && applet_name[3] == 'd') { |
| 325 | env_dir = *argv++; |
| 326 | opt |= OPT_e; |
| 327 | } |
| 328 | |
| 329 | // setuidgid? |
Denis Vlasenko | b9c262b | 2008-08-20 22:19:27 +0000 | [diff] [blame] | 330 | if (ENABLE_SETUIDGID && applet_name[1] == 'e') { |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 331 | set_user = *argv++; |
| 332 | opt |= OPT_u; |
| 333 | } |
| 334 | |
| 335 | // envuidgid? |
Denis Vlasenko | 69ed309 | 2008-08-15 21:03:17 +0000 | [diff] [blame] | 336 | if (ENABLE_ENVUIDGID && applet_name[0] == 'e' && applet_name[3] == 'u') { |
Denys Vlasenko | 1a7256a | 2013-11-29 16:39:28 +0100 | [diff] [blame] | 337 | set_user = *argv++; |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 338 | opt |= OPT_U; |
| 339 | } |
| 340 | |
| 341 | // we must have PROG [ARGS] |
| 342 | if (!*argv) |
| 343 | bb_show_usage(); |
| 344 | |
| 345 | // set limits |
| 346 | if (opt & OPT_d) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 347 | #ifdef RLIMIT_DATA |
| 348 | limit(RLIMIT_DATA, limitd); |
| 349 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 350 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 351 | bb_error_msg("system does not support RLIMIT_%s", |
| 352 | "DATA"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 353 | #endif |
| 354 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 355 | if (opt & OPT_s) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 356 | #ifdef RLIMIT_STACK |
| 357 | limit(RLIMIT_STACK, limits); |
| 358 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 359 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 360 | bb_error_msg("system does not support RLIMIT_%s", |
| 361 | "STACK"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 362 | #endif |
| 363 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 364 | if (opt & OPT_l) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 365 | #ifdef RLIMIT_MEMLOCK |
| 366 | limit(RLIMIT_MEMLOCK, limitl); |
| 367 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 368 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 369 | bb_error_msg("system does not support RLIMIT_%s", |
| 370 | "MEMLOCK"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 371 | #endif |
| 372 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 373 | if (opt & OPT_a) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 374 | #ifdef RLIMIT_VMEM |
| 375 | limit(RLIMIT_VMEM, limita); |
| 376 | #else |
| 377 | #ifdef RLIMIT_AS |
| 378 | limit(RLIMIT_AS, limita); |
| 379 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 380 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 381 | bb_error_msg("system does not support RLIMIT_%s", |
| 382 | "VMEM"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 383 | #endif |
| 384 | #endif |
| 385 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 386 | if (opt & OPT_o) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 387 | #ifdef RLIMIT_NOFILE |
| 388 | limit(RLIMIT_NOFILE, limito); |
| 389 | #else |
| 390 | #ifdef RLIMIT_OFILE |
| 391 | limit(RLIMIT_OFILE, limito); |
| 392 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 393 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 394 | bb_error_msg("system does not support RLIMIT_%s", |
| 395 | "NOFILE"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 396 | #endif |
| 397 | #endif |
| 398 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 399 | if (opt & OPT_p) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 400 | #ifdef RLIMIT_NPROC |
| 401 | limit(RLIMIT_NPROC, limitp); |
| 402 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 403 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 404 | bb_error_msg("system does not support RLIMIT_%s", |
| 405 | "NPROC"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 406 | #endif |
| 407 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 408 | if (opt & OPT_f) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 409 | #ifdef RLIMIT_FSIZE |
| 410 | limit(RLIMIT_FSIZE, limitf); |
| 411 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 412 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 413 | bb_error_msg("system does not support RLIMIT_%s", |
| 414 | "FSIZE"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 415 | #endif |
| 416 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 417 | if (opt & OPT_c) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 418 | #ifdef RLIMIT_CORE |
| 419 | limit(RLIMIT_CORE, limitc); |
| 420 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 421 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 422 | bb_error_msg("system does not support RLIMIT_%s", |
| 423 | "CORE"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 424 | #endif |
| 425 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 426 | if (opt & OPT_r) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 427 | #ifdef RLIMIT_RSS |
| 428 | limit(RLIMIT_RSS, limitr); |
| 429 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 430 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 431 | bb_error_msg("system does not support RLIMIT_%s", |
| 432 | "RSS"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 433 | #endif |
| 434 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 435 | if (opt & OPT_t) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 436 | #ifdef RLIMIT_CPU |
| 437 | limit(RLIMIT_CPU, limitt); |
| 438 | #else |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 439 | if (opt & OPT_v) |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 440 | bb_error_msg("system does not support RLIMIT_%s", |
| 441 | "CPU"); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 442 | #endif |
| 443 | } |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 444 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 445 | if (opt & OPT_P) |
| 446 | setsid(); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 447 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 448 | if (opt & OPT_e) |
| 449 | edir(env_dir); |
Denis Vlasenko | 23e3e25 | 2007-10-05 21:23:49 +0000 | [diff] [blame] | 450 | |
Denys Vlasenko | c74a79f | 2011-09-16 11:54:13 +0200 | [diff] [blame] | 451 | if (opt & (OPT_u|OPT_U)) |
Denys Vlasenko | d18ef6c | 2011-09-16 11:52:43 +0200 | [diff] [blame] | 452 | xget_uidgid(&ugid, set_user); |
Denys Vlasenko | d18ef6c | 2011-09-16 11:52:43 +0200 | [diff] [blame] | 453 | |
Denys Vlasenko | c74a79f | 2011-09-16 11:54:13 +0200 | [diff] [blame] | 454 | // chrooted jail must have /etc/passwd if we move this after chroot. |
| 455 | // OTOH chroot fails for non-roots. |
| 456 | // Solution: cache uid/gid before chroot, apply uid/gid after. |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 457 | if (opt & OPT_U) { |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 458 | xsetenv("GID", utoa(ugid.gid)); |
| 459 | xsetenv("UID", utoa(ugid.uid)); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 460 | } |
Denis Vlasenko | f7996f3 | 2007-01-11 17:20:00 +0000 | [diff] [blame] | 461 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 462 | if (opt & OPT_root) { |
Denys Vlasenko | 0687a5b | 2012-03-08 00:28:24 +0100 | [diff] [blame] | 463 | xchroot(root); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 464 | } |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 465 | |
| 466 | if (opt & OPT_u) { |
| 467 | if (setgroups(1, &ugid.gid) == -1) |
| 468 | bb_perror_msg_and_die("setgroups"); |
| 469 | xsetgid(ugid.gid); |
| 470 | xsetuid(ugid.uid); |
| 471 | } |
| 472 | |
| 473 | if (opt & OPT_n) { |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 474 | errno = 0; |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 475 | if (nice(xatoi(nicestr)) == -1) |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 476 | bb_perror_msg_and_die("nice"); |
| 477 | } |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 478 | |
Denis Vlasenko | b357149 | 2008-07-30 21:23:26 +0000 | [diff] [blame] | 479 | if (opt & OPT_0) |
| 480 | close(STDIN_FILENO); |
| 481 | if (opt & OPT_1) |
| 482 | close(STDOUT_FILENO); |
| 483 | if (opt & OPT_2) |
| 484 | close(STDERR_FILENO); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 485 | |
Pascal Bellard | 21e8e8d | 2010-07-04 00:57:03 +0200 | [diff] [blame] | 486 | BB_EXECVP_or_die(argv); |
Denis Vlasenko | f0a97fb | 2006-10-03 17:52:24 +0000 | [diff] [blame] | 487 | } |