openpkg
/
openpkg-packages
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
84393 Commits
1 Branch
2 Tags
575 MiB
 
 
 
 
 
 
Tree: b1dc55e4ac
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'b1dc55e4ac'
${ noResults }
openpkg-packages/soapbox/soapbox.patch

379 lines
11 KiB
Raw Blame History

Index: Makefile
--- Makefile.orig 2003-04-29 06:16:07.000000000 +0200
+++ Makefile 2012-04-06 14:21:32.000000000 +0200
@@ -6,21 +6,21 @@
#CFLAGS=-g -Werror -fPIC
LD=ld
LDFLAGS=-g
+LIBS=-ldl -lm
libdir=/lib
sysconfdir=/etc
bindir=/usr/bin
SRC=libsoapbox.c
-LIB=libsoapbox.so
+LIB=soapbox.so
BIN=soapbox.sh
SPEC=soapbox.spec
all: $(LIB) $(BIN) $(SPEC)
$(LIB): $(SRC)
-# $(CC) $(CFLAGS) $(SRC) -nostartfiles -shared -Wl,-soname,$(LIB) -o $(LIB) -ldl -lm -lc
- $(CC) $(CFLAGS) $(SRC) -nostartfiles -shared -rdynamic -Wl,-soname,$(LIB) -o $(LIB) -ldl -lm
+ $(CC) $(CFLAGS) $(SRC) -nostartfiles -shared -rdynamic -Wl,-soname,$(LIB) -o $(LIB) $(LIBS)
$(BIN):
cat $(BIN).in | sed -e 's|@@VERSION@@|$(VERSION)|' > $(BIN)
Index: libsoapbox.c
--- libsoapbox.c.orig 2003-06-05 18:49:26.000000000 +0200
+++ libsoapbox.c 2012-04-06 14:21:51.000000000 +0200
@@ -31,6 +31,12 @@
#define _GNU_SOURCE
+#ifdef __FreeBSD__
+#define dirname freebsd_dirname
+#include <libgen.h>
+#undef dirname
+#endif
+
#include <stdio.h>
#include <stdlib.h>
#include <stdarg.h>
@@ -124,7 +130,7 @@
// Check of dlsym worked
static void dlcheck(const char *err) {
-// sb_log(0,"TEST: --%s--\n", err);
+// sb_log(1,"TEST: --%s--\n", err);
if (err!=NULL) sb_die(stdlog, "%s", err);
}
@@ -136,7 +142,7 @@
setvbuf(stderr, (char *) NULL, _IONBF, 0);
// Handle and unset logging environment variable
- soapboxlog=getenv("SOAPBOXLOG"); // unsetenv("SOAPBOXLOG");
+ soapboxlog=getenv("SOAPBOXLOG"); unsetenv("SOAPBOXLOG");
if (!soapboxlog || *soapboxlog=='\0') {
stdlog=stderr;
} else {
@@ -149,12 +155,12 @@
}
// Handle and unset debugging environment variable
- soapboxdbg=getenv("SOAPBOXDEBUG"); // unsetenv("SOAPBOXDEBUG");
+ soapboxdbg=getenv("SOAPBOXDEBUG"); unsetenv("SOAPBOXDEBUG");
if (soapboxdbg) soapboxdebug=atoi(soapboxdbg);
sb_log(8, "Variable SOAPBOXDEBUG is set to %i.", soapboxdebug);
// Handle and unset path environment variable
- soapboxpath=getenv("SOAPBOXPATH"); // unsetenv("SOAPBOXPATH");
+ soapboxpath=getenv("SOAPBOXPATH"); unsetenv("SOAPBOXPATH");
if (!soapboxpath) soapboxpath="";
if (!soapboxpath || *soapboxpath=='\0')
sb_log(8, "Variable SOAPBOXPATH is not set. Not allowed to write anywhere.");
@@ -162,7 +168,7 @@
sb_log(8, "Variable SOAPBOXPATH is set to \"%s\".", soapboxpath);
// Handle and unset action environment variable
- soapboxaction=getenv("SOAPBOXACTION"); // unsetenv("SOAPBOXACTION");
+ soapboxaction=getenv("SOAPBOXACTION"); unsetenv("SOAPBOXACTION");
if (!soapboxaction || *soapboxaction=='\0') {
soapboxaction=DEFAULT_ACTION;
sb_log(8, "Variable SOAPBOXACTION is not set. Using \"%s\" by default.", DEFAULT_ACTION);
@@ -191,12 +197,18 @@
_real_mkfifo=dlsym(RTLD_NEXT, "mkfifo"); dlcheck(dlerror());
_real_mknod=dlsym(RTLD_NEXT, "mknod"); dlcheck(dlerror());
+#ifdef __linux__
_real___xmknod=dlsym(RTLD_NEXT, "__xmknod"); dlcheck(dlerror());
+#endif
_real_open=dlsym(RTLD_NEXT, "open"); dlcheck(dlerror());
+#ifdef __linux__
_real_open64=dlsym(RTLD_NEXT, "open64"); dlcheck(dlerror());
+#endif
_real_creat=dlsym(RTLD_NEXT, "creat"); dlcheck(dlerror());
+#ifdef __linux__
_real_creat64=dlsym(RTLD_NEXT, "creat64"); dlcheck(dlerror());
+#endif
// _real_fopen=dlsym(RTLD_NEXT, "fopen"); dlcheck(dlerror());
@@ -212,6 +224,7 @@
devnull=_real_open("/dev/zero", O_RDWR);
if (devnull==-1) sb_die(stdlog, "/dev/null: %s", strerror(errno));
+#if 0
// Print each process execution
if (soapboxdebug & 1) {
int i;
@@ -219,6 +232,7 @@
for(i=0; i<argc; i++) fprintf(stdlog, "%s ",argv[i]);
fprintf(stdlog, "\"\n");
}
+#endif
}
void _fini(void) {
@@ -263,9 +277,14 @@
static char *rewrite(const char *path, const int flag) {
char *linkdir, *out;
struct stat *buf;
- char temp[PATH_MAX+1], safe[PATH_MAX+1];
+#if 0
+ char temp[PATH_MAX+1];
+#endif
+ char safe[PATH_MAX+1];
+#if 0
temp[0]='\0'; temp[PATH_MAX]='\0'; // Terminate string for safety :)
+#endif
safe[0]='\0'; safe[PATH_MAX]='\0'; // Terminate string for safety :)
// To make sure path is not empty and defined. Return empty string
@@ -300,6 +319,7 @@
} else {
sb_log(8, "File \"%s\" does not exist.", path);
realpath(path, safe); // TODO: Problem with non-existing files !!
+#if 0
/* realpath(path, temp);
// If the file doesn't exist, realpath() doesn't return its basename, so we need to add it ourselves
@@ -309,6 +329,7 @@
else
snprintf(safe, PATH_MAX, "%s", temp);
*/
+#endif
}
free(buf);
@@ -366,7 +387,9 @@
if (flags & O_NOFOLLOW) str_cmode(str, "O_NOFOLLOW");
if (flags & O_DIRECT) str_cmode(str, "O_DIRECT");
if (flags & O_ASYNC) str_cmode(str, "O_ASYNC");
+#ifdef O_LARGEFILE
if (flags & O_LARGEFILE) str_cmode(str, "O_LARGEFILE");
+#endif
if (flags & O_DIRECTORY) str_cmode(str, "O_DIRECTORY");
return strndup(str, strlen(str));
@@ -406,7 +429,7 @@
return _real_chmod(path, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to chmod(\"%s\", %04o).", rpath, mode);
+ sb_log(1, "Attempt to chmod(\"%s\", %04o).", rpath, mode);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -422,7 +445,7 @@
return _real_chown(path, owner, group);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to chown(\"%s\", %i, %i).", rpath, owner, group);
+ sb_log(1, "Attempt to chown(\"%s\", %i, %i).", rpath, owner, group);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -438,7 +461,7 @@
return _real_lchown(path, owner, group);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to lchown(\"%s\", %i, %i).", rpath, owner, group);
+ sb_log(1, "Attempt to lchown(\"%s\", %i, %i).", rpath, owner, group);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -455,7 +478,7 @@
return _real_link(oldpath, newpath);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to link(\"%s\", \"%s\").", oldrpath, newrpath);
+ sb_log(1, "Attempt to link(\"%s\", \"%s\").", oldrpath, newrpath);
free(oldrpath); free(newrpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -471,7 +494,7 @@
return _real_mkdir(path, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to mkdir(\"%s\", %04o).", rpath, mode);
+ sb_log(1, "Attempt to mkdir(\"%s\", %04o).", rpath, mode);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -487,7 +510,7 @@
return _real_mkfifo(path, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to mkfifo(\"%s\", %04o).", rpath, mode);
+ sb_log(1, "Attempt to mkfifo(\"%s\", %04o).", rpath, mode);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -503,7 +526,7 @@
return _real_mknod(path, mode, dev);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to mknod(\"%s\", %04o).", rpath, mode);
+ sb_log(1, "Attempt to mknod(\"%s\", %04o).", rpath, mode);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -519,7 +542,7 @@
return _real___xmknod(ver, path, mode, dev);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to __xmknod(%i, \"%s\", %04o).", ver, rpath, mode);
+ sb_log(1, "Attempt to __xmknod(%i, \"%s\", %04o).", ver, rpath, mode);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -535,7 +558,7 @@
// If O_CREAT then mode is not set.
if (flags & O_CREAT) {
va_start(argptr, flags);
- mode=va_arg(argptr, mode_t);
+ mode=(mode_t)va_arg(argptr, int);
va_end(argptr);
} else {
mode=0;
@@ -553,7 +576,7 @@
return _real_open(path, flags, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to open(\"%s\", %s, %04o).", rpath, strflags, mode);
+ sb_log(1, "Attempt to open(\"%s\", %s, %04o).", rpath, strflags, mode);
free(rpath); free(strflags);
if (action==A_WARN) return devnull;
errno=EACCES;
@@ -569,7 +592,7 @@
// If O_CREAT then mode is not set.
if (flags & O_CREAT) {
va_start(argptr, flags);
- mode=va_arg(argptr, mode_t);
+ mode=(mode_t)va_arg(argptr, int);
va_end(argptr);
} else {
mode=0;
@@ -587,7 +610,7 @@
return _real_open64(path, flags, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to open64(\"%s\", %s, %04o).", rpath, strflags, mode);
+ sb_log(1, "Attempt to open64(\"%s\", %s, %04o).", rpath, strflags, mode);
free(rpath); free(strflags);
if (action==A_WARN) return devnull;
errno=EACCES;
@@ -603,7 +626,7 @@
return _real_creat(path, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to creat(\"%s\", %04o).", rpath, mode);
+ sb_log(1, "Attempt to creat(\"%s\", %04o).", rpath, mode);
free(rpath);
if (action==A_WARN) return devnull;
errno=EACCES;
@@ -619,7 +642,7 @@
return _real_creat64(path, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to creat64(\"%s\", %04o).", rpath, mode);
+ sb_log(1, "Attempt to creat64(\"%s\", %04o).", rpath, mode);
free(rpath);
if (action==A_WARN) return devnull;
errno=EACCES;
@@ -637,7 +660,7 @@
return (FILE *) _real_fopen(path, mode);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to fopen(\"%s\", \"%s\").", rpath, mode);
+ sb_log(1, "Attempt to fopen(\"%s\", \"%s\").", rpath, mode);
free(rpath);
if (action==A_WARN) return devnull;
errno=EACCES;
@@ -654,7 +677,7 @@
return _real_remove(path);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to remove(\"%s\").", rpath);
+ sb_log(1, "Attempt to remove(\"%s\").", rpath);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -671,7 +694,7 @@
return _real_rename(oldpath, newpath);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to rename(\"%s\", \"%s\").", oldrpath, newrpath);
+ sb_log(1, "Attempt to rename(\"%s\", \"%s\").", oldrpath, newrpath);
free(oldrpath); free(newrpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -687,7 +710,7 @@
return _real_rmdir(path);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to rmdir(\"%s\").", rpath);
+ sb_log(1, "Attempt to rmdir(\"%s\").", rpath);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -705,7 +728,7 @@
return _real_symlink(oldpath, newpath);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to symlink(\"%s\", \"%s\").", oldpath, newrpath);
+ sb_log(1, "Attempt to symlink(\"%s\", \"%s\").", oldpath, newrpath);
free(newrpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -721,7 +744,7 @@
return _real_unlink(path);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to unlink(\"%s\").", rpath);
+ sb_log(1, "Attempt to unlink(\"%s\").", rpath);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -737,7 +760,7 @@
return _real_utime(path, buf);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to utime(\"%s\", %s).", rpath, str_utimbuf(buf));
+ sb_log(1, "Attempt to utime(\"%s\", %s).", rpath, str_utimbuf(buf));
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
@@ -753,7 +776,7 @@
return _real_utimes(path, tvp);
}
if (action==A_HALT) exit(0);
- sb_log(0, "Attempt to utimes(\"%s\", NULL).", rpath);
+ sb_log(1, "Attempt to utimes(\"%s\", NULL).", rpath);
free(rpath);
if (action==A_WARN) return 0;
errno=EACCES;
Index: soapbox.sh
--- soapbox.sh.orig 2003-04-29 06:10:15.000000000 +0200
+++ soapbox.sh 2012-04-06 14:21:32.000000000 +0200
@@ -1,4 +1,4 @@
-#!/bin/sh
+#!@l_prefix@/bin/bash
### This is the wrapper script for the Soapbox library
### Soapbox - A way to deny processes to write files outside some directories
@@ -90,6 +90,6 @@
export SOAPBOXACTION SOAPBOXDEBUG SOAPBOXLOG SOAPBOXPATH
### Preload Soapbox
-export LD_PRELOAD="/lib/libsoapbox.so:$LD_PRELOAD"
+export LD_PRELOAD="@l_prefix@/libexec/soapbox/soapbox.so:$LD_PRELOAD"
-exec $@
+exec "$@"