1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
// Copyright 2017 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "sandbox/mac/seatbelt_exec.h"
#include <sys/socket.h>
#include <sys/uio.h>
#include <unistd.h>
#include <vector>
#include "base/logging.h"
#include "base/macros.h"
#include "base/posix/eintr_wrapper.h"
#include "base/strings/stringprintf.h"
#include "sandbox/mac/seatbelt.h"
namespace sandbox {
SeatbeltExecClient::SeatbeltExecClient() {
PCHECK(pipe(pipe_) == 0) << "pipe";
}
SeatbeltExecClient::~SeatbeltExecClient() {
if (pipe_[1] != -1)
IGNORE_EINTR(close(pipe_[1]));
// If pipe() fails, PCHECK() will be hit in the constructor, so this file
// descriptor should always be closed if the proess is alive at this point.
IGNORE_EINTR(close(pipe_[0]));
}
bool SeatbeltExecClient::SetBooleanParameter(const base::StringPiece key,
bool value) {
google::protobuf::MapPair<std::string, std::string> pair(
key.as_string(), value ? "TRUE" : "FALSE");
return policy_.mutable_params()->insert(pair).second;
}
bool SeatbeltExecClient::SetParameter(const base::StringPiece key,
const base::StringPiece value) {
google::protobuf::MapPair<std::string, std::string> pair(key.as_string(),
value.as_string());
return policy_.mutable_params()->insert(pair).second;
}
void SeatbeltExecClient::SetProfile(const base::StringPiece policy) {
policy_.set_profile(policy.as_string());
}
int SeatbeltExecClient::SendProfileAndGetFD() {
std::string serialized_protobuf;
if (!policy_.SerializeToString(&serialized_protobuf))
return -1;
if (!WriteString(&serialized_protobuf))
return -1;
IGNORE_EINTR(close(pipe_[1]));
pipe_[1] = -1;
return pipe_[0];
}
bool SeatbeltExecClient::WriteString(std::string* str) {
struct iovec iov[1];
iov[0].iov_base = &(*str)[0];
iov[0].iov_len = str->size();
ssize_t written = HANDLE_EINTR(writev(pipe_[1], iov, arraysize(iov)));
if (written < 0) {
PLOG(ERROR) << "writev";
return false;
}
return static_cast<uint64_t>(written) == str->size();
}
SeatbeltExecServer::SeatbeltExecServer(int fd) : fd_(fd) {}
SeatbeltExecServer::~SeatbeltExecServer() {}
bool SeatbeltExecServer::InitializeSandbox() {
std::string policy_string;
if (!ReadString(&policy_string))
return false;
mac::SandboxPolicy policy;
if (!policy.ParseFromString(policy_string)) {
LOG(ERROR) << "ParseFromString failed";
return false;
}
return ApplySandboxProfile(policy);
}
bool SeatbeltExecServer::ApplySandboxProfile(const mac::SandboxPolicy& policy) {
std::vector<const char*> weak_params;
for (const auto& pair : policy.params()) {
weak_params.push_back(pair.first.c_str());
weak_params.push_back(pair.second.c_str());
}
weak_params.push_back(nullptr);
char* error = nullptr;
int rv = Seatbelt::InitWithParams(policy.profile().c_str(), 0,
weak_params.data(), &error);
if (error) {
LOG(ERROR) << "Failed to initialize sandbox: " << rv << " " << error;
Seatbelt::FreeError(error);
return false;
}
return rv == 0;
}
bool SeatbeltExecServer::ReadString(std::string* str) {
// 4 pages of memory is enough to hold the sandbox profiles.
std::vector<char> buffer(4096 * 4, '\0');
struct iovec iov[1];
iov[0].iov_base = buffer.data();
iov[0].iov_len = buffer.size();
ssize_t read_length = HANDLE_EINTR(readv(fd_.get(), iov, arraysize(iov)));
if (read_length < 0) {
PLOG(ERROR) << "readv";
return false;
}
str->assign(buffer.data());
return true;
}
} // namespace sandbox
|
