projects / thirdparty / cups.git / blame
| Commit | Line | Data |
|---|---|---|
| 0268488e MS |
1 | /* |
| 2 | * "$Id$" | |
| 3 | * | |
| 4 | * Sandbox helper for CUPS. | |
| 5 | * | |
| 990c79d2 | 6 | * Copyright 2007-2013 by Apple Inc. |
| 0268488e MS |
7 | * |
| 8 | * These coded instructions, statements, and computer programs are the | |
| 9 | * property of Apple Inc. and are protected by Federal copyright | |
| 10 | * law. Distribution and use rights are outlined in the file "LICENSE.txt" | |
| 11 | * which should have been included with this file. If this file is | |
| 12 | * file is missing or damaged, see the license at "http://www.cups.org/". | |
| 13 | * | |
| 14 | * Usage: | |
| 15 | * | |
| 16 | * cups-exec /path/to/profile /path/to/program argv0 argv1 ... argvN | |
| 17 | * | |
| 18 | * Contents: | |
| 19 | * | |
| 20 | * main() - Apply sandbox profile and execute program. | |
| 21 | */ | |
| 22 | ||
| 23 | /* | |
| 24 | * Include necessary headers... | |
| 25 | */ | |
| 26 | ||
| 27 | #include <cups/string-private.h> | |
| 28 | #include <unistd.h> | |
| 29 | #ifdef HAVE_SANDBOX_H | |
| 0268488e | 30 | # include <sandbox.h> |
| a4845881 MS |
31 | # ifndef SANDBOX_NAMED_EXTERNAL |
| 32 | # define SANDBOX_NAMED_EXTERNAL 0x0003 | |
| 33 | # endif /* !SANDBOX_NAMED_EXTERNAL */ | |
| 6961465f | 34 | # pragma GCC diagnostic ignored "-Wdeprecated-declarations" |
| 0268488e MS |
35 | #endif /* HAVE_SANDBOX_H */ |
| 36 | ||
| 37 | ||
| 38 | /* | |
| 39 | * 'main()' - Apply sandbox profile and execute program. | |
| 40 | */ | |
| 41 | ||
| 42 | int /* O - Exit status */ | |
| 43 | main(int argc, /* I - Number of command-line args */ | |
| 44 | char *argv[]) /* I - Command-line arguments */ | |
| 45 | { | |
| 46 | #ifdef HAVE_SANDBOX_H | |
| 47 | char *sandbox_error = NULL; /* Sandbox error, if any */ | |
| 48 | #endif /* HAVE_SANDBOX_H */ | |
| 49 | ||
| 50 | ||
| 51 | /* | |
| 52 | * Check that we have enough arguments... | |
| 53 | */ | |
| 54 | ||
| 55 | if (argc < 4) | |
| 56 | { | |
| 57 | puts("Usage: cups-exec /path/to/profile /path/to/program argv0 argv1 ... " | |
| 58 | "argvN"); | |
| 59 | return (1); | |
| 60 | } | |
| 61 | ||
| 62 | #ifdef HAVE_SANDBOX_H | |
| 63 | /* | |
| 64 | * Run in a separate security profile... | |
| 65 | */ | |
| 66 | ||
| 22c9029b MS |
67 | if (strcmp(argv[1], "none") && |
| 68 | sandbox_init(argv[1], SANDBOX_NAMED_EXTERNAL, &sandbox_error)) | |
| 0268488e MS |
69 | { |
| 70 | fprintf(stderr, "DEBUG: sandbox_init failed: %s (%s)\n", sandbox_error, | |
| 71 | strerror(errno)); | |
| 72 | sandbox_free_error(sandbox_error); | |
| 73 | return (1); | |
| 74 | } | |
| 75 | #endif /* HAVE_SANDBOX_H */ | |
| 76 | ||
| 77 | /* | |
| 78 | * Execute the program... | |
| 79 | */ | |
| 80 | ||
| 81 | execv(argv[2], argv + 3); | |
| 82 | ||
| 83 | /* | |
| 84 | * If we get here, execv() failed... | |
| 85 | */ | |
| 86 | ||
| 87 | fprintf(stderr, "DEBUG: execv failed: %s\n", strerror(errno)); | |
| 88 | return (1); | |
| 89 | } | |
| 90 | ||
| 91 | ||
| 92 | /* | |
| 93 | * End of "$Id$". | |
| 94 | */ |