WRAPPER: Initial interpreter wrapper work ready for subprocess sandboxing

1 files changed, 43 insertions, 0 deletions

diff --git a/src/wrapper.c b/src/wrapper.c
new file mode 100644
index 0000000..59b8fd5
--- /dev/null
+++ b/src/wrapper.c
@@ -0,0 +1,43 @@
+/* supple/src/wrapper.c
+ *
+ * Sandbox (for) Untrusted Procedure Partitioning (in) Lua Engine - Supple
+ *
+ * Wrapper for Lua interpreter to protect and isolate the sandbox code.
+ *
+ * Copyright 2012 Daniel Silverstone <dsilvers@digital-scurf.org>
+ *
+ * For licence terms, see COPYING
+ *
+ */
+
+#include <lua.h>
+#include <unistd.h>
+#include <stdlib.h>
+#include <stdio.h>
+
+char * const sub_argv[] = {
+	LUA_INTERP_NAME,
+	"-lsupple",
+	"-esupple.sandbox.run()",
+	NULL
+};
+
+int
+main(int argc, char **argv)
+{
+	/* Perform pre-lua-interpreter initialisation */
+#ifndef TESTING_SUPPLE
+	unsetenv(LUA_PATH);
+	unsetenv(LUA_CPATH);
+#endif
+	unsetenv(LUA_INIT);
+
+	/* Now go on to run:
+	 * /path/to/lua -lsupple -esupple.sandbox.run()
+	 */
+	if (execv(LUA_INTERP_PATH, sub_argv) == -1) {
+		perror("execv(" LUA_INTERP_PATH ")");
+	}
+
+	return EXIT_FAILURE;
+}