shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-06 08:26:52 +03:00
Code

sd-bus: do not use per-datagram auxiliary information

Browse Source 
SELinux information cannot be retrieved this way, since we are
using stream unix sockets and SCM_SECURITY does not work for
them.

SCM_CREDENTIALS use dropped to be consistent. We also should
get this information at connection time.

https://bugzilla.redhat.com/show_bug.cgi?id=1224211
"SCM_SECURITY was only added for datagram sockets."
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2015-06-06 18:59:27 -04:00
parent 236f83afa9
commit d868f2a3a1
1 changed files with 12 additions and 68 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
src/libsystemd/sd-bus/bus-socket.c
View File

@ -500,9 +500,7 @@ static int bus_socket_read_auth(sd_bus *b) {
void *p; void *p;
union { union {
struct cmsghdr cmsghdr; struct cmsghdr cmsghdr;
uint8_t buf[CMSG_SPACE(sizeof(int) * BUS_FDS_MAX) + uint8_t buf[CMSG_SPACE(sizeof(int) * BUS_FDS_MAX)];
CMSG_SPACE(sizeof(struct ucred)) +
CMSG_SPACE(NAME_MAX)]; /*selinux label */
} control; } control;
struct cmsghdr *cmsg; struct cmsghdr *cmsg;
bool handle_cmsg = false; bool handle_cmsg = false;
@ -554,8 +552,8 @@ static int bus_socket_read_auth(sd_bus *b) {
b->rbuffer_size += k; b->rbuffer_size += k;
if (handle_cmsg) { if (handle_cmsg)
for (cmsg = CMSG_FIRSTHDR(&mh); cmsg; cmsg = CMSG_NXTHDR(&mh, cmsg)) { for (cmsg = CMSG_FIRSTHDR(&mh); cmsg; cmsg = CMSG_NXTHDR(&mh, cmsg))
if (cmsg->cmsg_level == SOL_SOCKET && if (cmsg->cmsg_level == SOL_SOCKET &&
cmsg->cmsg_type == SCM_RIGHTS) { cmsg->cmsg_type == SCM_RIGHTS) {
int j; int j;
@ -566,31 +564,9 @@ static int bus_socket_read_auth(sd_bus *b) {
j = (cmsg->cmsg_len - CMSG_LEN(0)) / sizeof(int); j = (cmsg->cmsg_len - CMSG_LEN(0)) / sizeof(int);
close_many((int*) CMSG_DATA(cmsg), j); close_many((int*) CMSG_DATA(cmsg), j);
return -EIO; return -EIO;
} else
} else if (cmsg->cmsg_level == SOL_SOCKET && log_debug("Got unexpected auxiliary data with level=%d and type=%d",
cmsg->cmsg_type == SCM_CREDENTIALS && cmsg->cmsg_level, cmsg->cmsg_type);
cmsg->cmsg_len == CMSG_LEN(sizeof(struct ucred))) {
/* Ignore bogus data, which we might
* get on socketpair() sockets */
if (((struct ucred*) CMSG_DATA(cmsg))->pid != 0) {
memcpy(&b->ucred, CMSG_DATA(cmsg), sizeof(struct ucred));
b->ucred_valid = true;
}
} else if (cmsg->cmsg_level == SOL_SOCKET &&
cmsg->cmsg_type == SCM_SECURITY) {
size_t l;
l = cmsg->cmsg_len - CMSG_LEN(0);
if (l > 0) {
memcpy(&b->label, CMSG_DATA(cmsg), l);
b->label[l] = 0;
}
}
}
}
r = bus_socket_auth_verify(b); r = bus_socket_auth_verify(b);
if (r != 0) if (r != 0)
@ -600,18 +576,8 @@ static int bus_socket_read_auth(sd_bus *b) {
} }
void bus_socket_setup(sd_bus *b) { void bus_socket_setup(sd_bus *b) {
int enable;
assert(b); assert(b);
/* Enable SO_PASSCRED + SO_PASSEC. We try this on any
* socket, just in case. */
enable = !b->bus_client;
(void) setsockopt(b->input_fd, SOL_SOCKET, SO_PASSCRED, &enable, sizeof(enable));
enable = !b->bus_client && (b->attach_flags & KDBUS_ATTACH_SECLABEL);
(void) setsockopt(b->input_fd, SOL_SOCKET, SO_PASSSEC, &enable, sizeof(enable));
/* Increase the buffers to 8 MB */ /* Increase the buffers to 8 MB */
fd_inc_rcvbuf(b->input_fd, SNDBUF_SIZE); fd_inc_rcvbuf(b->input_fd, SNDBUF_SIZE);
fd_inc_sndbuf(b->output_fd, SNDBUF_SIZE); fd_inc_sndbuf(b->output_fd, SNDBUF_SIZE);
@ -941,9 +907,7 @@ int bus_socket_read_message(sd_bus *bus) {
void *b; void *b;
union { union {
struct cmsghdr cmsghdr; struct cmsghdr cmsghdr;
uint8_t buf[CMSG_SPACE(sizeof(int) * BUS_FDS_MAX) + uint8_t buf[CMSG_SPACE(sizeof(int) * BUS_FDS_MAX)];
CMSG_SPACE(sizeof(struct ucred)) +
CMSG_SPACE(NAME_MAX)]; /*selinux label */
} control; } control;
struct cmsghdr *cmsg; struct cmsghdr *cmsg;
bool handle_cmsg = false; bool handle_cmsg = false;
@ -990,8 +954,8 @@ int bus_socket_read_message(sd_bus *bus) {
bus->rbuffer_size += k; bus->rbuffer_size += k;
if (handle_cmsg) { if (handle_cmsg)
for (cmsg = CMSG_FIRSTHDR(&mh); cmsg; cmsg = CMSG_NXTHDR(&mh, cmsg)) { for (cmsg = CMSG_FIRSTHDR(&mh); cmsg; cmsg = CMSG_NXTHDR(&mh, cmsg))
if (cmsg->cmsg_level == SOL_SOCKET && if (cmsg->cmsg_level == SOL_SOCKET &&
cmsg->cmsg_type == SCM_RIGHTS) { cmsg->cmsg_type == SCM_RIGHTS) {
int n, *f; int n, *f;
@ -1016,29 +980,9 @@ int bus_socket_read_message(sd_bus *bus) {
memcpy(f + bus->n_fds, CMSG_DATA(cmsg), n * sizeof(int)); memcpy(f + bus->n_fds, CMSG_DATA(cmsg), n * sizeof(int));
bus->fds = f; bus->fds = f;
bus->n_fds += n; bus->n_fds += n;
} else if (cmsg->cmsg_level == SOL_SOCKET && } else
cmsg->cmsg_type == SCM_CREDENTIALS && log_debug("Got unexpected auxiliary data with level=%d and type=%d",
cmsg->cmsg_len == CMSG_LEN(sizeof(struct ucred))) { cmsg->cmsg_level, cmsg->cmsg_type);
/* Ignore bogus data, which we might
* get on socketpair() sockets */
if (((struct ucred*) CMSG_DATA(cmsg))->pid != 0) {
memcpy(&bus->ucred, CMSG_DATA(cmsg), sizeof(struct ucred));
bus->ucred_valid = true;
}
} else if (cmsg->cmsg_level == SOL_SOCKET &&
cmsg->cmsg_type == SCM_SECURITY) {
size_t l;
l = cmsg->cmsg_len - CMSG_LEN(0);
if (l > 0) {
memcpy(&bus->label, CMSG_DATA(cmsg), l);
bus->label[l] = 0;
}
}
}
}
r = bus_socket_read_message_need(bus, &need); r = bus_socket_read_message_need(bus, &need);
if (r < 0) if (r < 0)