1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
// Copyright (C) 2021 The Qt Company Ltd.
// Copyright (C) 2019 Luxoft Sweden AB
// Copyright (C) 2018 Pelagicore AG
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR GPL-3.0-only
#pragma once
#include <QtCore/QString>
#include <QtCore/QByteArray>
#include <QtCore/QMutex>
#include <qplatformdefs.h>
#ifdef Q_OS_UNIX
# include <sys/types.h>
#else
typedef uint uid_t;
typedef uint gid_t;
//typedef uint mode_t; // already typedef'ed in qplatformdefs.h
#endif
#include <QtAppManCommon/global.h>
QT_BEGIN_NAMESPACE_AM
class Sudo
{
public:
enum DropPrivileges {
DropPrivilegesPermanently,
DropPrivilegesRegainable, // only use this for auto-tests
};
static void forkServer(DropPrivileges dropPrivileges) noexcept(false);
};
class SudoInterface
{
public:
virtual ~SudoInterface() = default;
virtual bool removeRecursive(const QString &fileOrDir) = 0;
virtual bool setOwnerAndPermissionsRecursive(const QString &fileOrDir, uid_t user, gid_t group, mode_t permissions) = 0;
virtual bool bindMountFileSystem(const QString &from, const QString &to, bool readOnly, quint64 namespacePid = 0) = 0;
protected:
enum MessageType { Request, Reply };
#ifdef Q_OS_LINUX
QByteArray receiveMessage(int socket, MessageType type, QString *errorString);
bool sendMessage(int socket, const QByteArray &msg, MessageType type, const QString &errorString = QString());
#endif
QByteArray receive(const QByteArray &packet);
protected:
SudoInterface();
private:
Q_DISABLE_COPY_MOVE(SudoInterface)
};
class SudoServer;
class SudoClient : public SudoInterface
{
public:
static SudoClient *createInstance(int socketFd, SudoServer *shortCircuit = nullptr);
static SudoClient *instance();
bool isFallbackImplementation() const;
bool removeRecursive(const QString &fileOrDir) override;
bool setOwnerAndPermissionsRecursive(const QString &fileOrDir, uid_t user, gid_t group, mode_t permissions) override;
bool bindMountFileSystem(const QString &from, const QString &to, bool readOnly, quint64 namespacePid) override;
void stopServer();
QString lastError() const { return m_errorString; }
private:
SudoClient(int socketFd);
QByteArray call(const QByteArray &msg);
int m_socket;
QString m_errorString;
QMutex m_mutex;
SudoServer *m_shortCircuit;
static SudoClient *s_instance;
};
class SudoServer : public SudoInterface
{
public:
static SudoServer *createInstance(int socketFd);
static SudoServer *instance();
bool removeRecursive(const QString &fileOrDir) override;
bool setOwnerAndPermissionsRecursive(const QString &fileOrDir, uid_t user, gid_t group, mode_t permissions) override;
bool bindMountFileSystem(const QString &from, const QString &to, bool readOnly, quint64 namespacePid) override;
QString lastError() const { return m_errorString; }
Q_NORETURN void run();
private:
SudoServer(int socketFd);
QByteArray receive(const QByteArray &msg);
friend class SudoClient;
int m_socket;
QString m_errorString;
bool m_stop = false;
static SudoServer *s_instance;
};
QT_END_NAMESPACE_AM
|
