]>
git.proxmox.com Git - mirror_lxc.git/blob - src/lxc/af_unix.c
2 * lxc: linux Container library
4 * (C) Copyright IBM Corp. 2007, 2008
7 * Daniel Lezcano <daniel.lezcano at free.fr>
9 * This library is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU Lesser General Public
11 * License as published by the Free Software Foundation; either
12 * version 2.1 of the License, or (at your option) any later version.
14 * This library is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * Lesser General Public License for more details.
19 * You should have received a copy of the GNU Lesser General Public
20 * License along with this library; if not, write to the Free Software
21 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
32 #include <sys/socket.h>
33 #include <sys/syscall.h>
40 #include "include/strlcpy.h"
43 lxc_log_define(af_unix
, lxc
);
45 static ssize_t
lxc_abstract_unix_set_sockaddr(struct sockaddr_un
*addr
,
55 /* Clear address structure */
56 memset(addr
, 0, sizeof(*addr
));
58 addr
->sun_family
= AF_UNIX
;
60 len
= strlen(&path
[1]);
62 /* do not enforce \0-termination */
63 if (len
>= INT_MAX
|| len
>= sizeof(addr
->sun_path
)) {
68 /* do not enforce \0-termination */
69 memcpy(&addr
->sun_path
[1], &path
[1], len
);
73 int lxc_abstract_unix_open(const char *path
, int type
, int flags
)
77 struct sockaddr_un addr
;
79 fd
= socket(PF_UNIX
, type
, 0);
86 len
= lxc_abstract_unix_set_sockaddr(&addr
, path
);
88 int saved_errno
= errno
;
94 ret
= bind(fd
, (struct sockaddr
*)&addr
,
95 offsetof(struct sockaddr_un
, sun_path
) + len
+ 1);
97 int saved_errno
= errno
;
103 if (type
== SOCK_STREAM
) {
104 ret
= listen(fd
, 100);
106 int saved_errno
= errno
;
116 void lxc_abstract_unix_close(int fd
)
121 int lxc_abstract_unix_connect(const char *path
)
125 struct sockaddr_un addr
;
127 fd
= socket(PF_UNIX
, SOCK_STREAM
, 0);
131 len
= lxc_abstract_unix_set_sockaddr(&addr
, path
);
133 int saved_errno
= errno
;
139 ret
= connect(fd
, (struct sockaddr
*)&addr
,
140 offsetof(struct sockaddr_un
, sun_path
) + len
+ 1);
142 int saved_errno
= errno
;
151 int lxc_abstract_unix_send_fds(int fd
, int *sendfds
, int num_sendfds
,
152 void *data
, size_t size
)
157 struct cmsghdr
*cmsg
= NULL
;
160 size_t cmsgbufsize
= CMSG_SPACE(num_sendfds
* sizeof(int));
162 memset(&msg
, 0, sizeof(msg
));
163 memset(&iov
, 0, sizeof(iov
));
165 cmsgbuf
= malloc(cmsgbufsize
);
171 msg
.msg_control
= cmsgbuf
;
172 msg
.msg_controllen
= cmsgbufsize
;
174 cmsg
= CMSG_FIRSTHDR(&msg
);
175 cmsg
->cmsg_level
= SOL_SOCKET
;
176 cmsg
->cmsg_type
= SCM_RIGHTS
;
177 cmsg
->cmsg_len
= CMSG_LEN(num_sendfds
* sizeof(int));
179 msg
.msg_controllen
= cmsg
->cmsg_len
;
181 memcpy(CMSG_DATA(cmsg
), sendfds
, num_sendfds
* sizeof(int));
183 iov
.iov_base
= data
? data
: buf
;
184 iov
.iov_len
= data
? size
: sizeof(buf
);
188 ret
= sendmsg(fd
, &msg
, MSG_NOSIGNAL
);
193 int lxc_abstract_unix_recv_fds(int fd
, int *recvfds
, int num_recvfds
,
194 void *data
, size_t size
)
199 struct cmsghdr
*cmsg
= NULL
;
202 size_t cmsgbufsize
= CMSG_SPACE(num_recvfds
* sizeof(int));
204 memset(&msg
, 0, sizeof(msg
));
205 memset(&iov
, 0, sizeof(iov
));
207 cmsgbuf
= malloc(cmsgbufsize
);
213 msg
.msg_control
= cmsgbuf
;
214 msg
.msg_controllen
= cmsgbufsize
;
216 iov
.iov_base
= data
? data
: buf
;
217 iov
.iov_len
= data
? size
: sizeof(buf
);
221 ret
= recvmsg(fd
, &msg
, 0);
225 cmsg
= CMSG_FIRSTHDR(&msg
);
227 memset(recvfds
, -1, num_recvfds
* sizeof(int));
228 if (cmsg
&& cmsg
->cmsg_len
== CMSG_LEN(num_recvfds
* sizeof(int)) &&
229 cmsg
->cmsg_level
== SOL_SOCKET
&& cmsg
->cmsg_type
== SCM_RIGHTS
)
230 memcpy(recvfds
, CMSG_DATA(cmsg
), num_recvfds
* sizeof(int));
237 int lxc_abstract_unix_send_credential(int fd
, void *data
, size_t size
)
239 struct msghdr msg
= {0};
241 struct cmsghdr
*cmsg
;
242 struct ucred cred
= {
243 .pid
= lxc_raw_getpid(), .uid
= getuid(), .gid
= getgid(),
245 char cmsgbuf
[CMSG_SPACE(sizeof(cred
))] = {0};
248 msg
.msg_control
= cmsgbuf
;
249 msg
.msg_controllen
= sizeof(cmsgbuf
);
251 cmsg
= CMSG_FIRSTHDR(&msg
);
252 cmsg
->cmsg_len
= CMSG_LEN(sizeof(struct ucred
));
253 cmsg
->cmsg_level
= SOL_SOCKET
;
254 cmsg
->cmsg_type
= SCM_CREDENTIALS
;
255 memcpy(CMSG_DATA(cmsg
), &cred
, sizeof(cred
));
260 iov
.iov_base
= data
? data
: buf
;
261 iov
.iov_len
= data
? size
: sizeof(buf
);
265 return sendmsg(fd
, &msg
, MSG_NOSIGNAL
);
268 int lxc_abstract_unix_rcv_credential(int fd
, void *data
, size_t size
)
270 struct msghdr msg
= {0};
272 struct cmsghdr
*cmsg
;
275 char cmsgbuf
[CMSG_SPACE(sizeof(cred
))] = {0};
280 msg
.msg_control
= cmsgbuf
;
281 msg
.msg_controllen
= sizeof(cmsgbuf
);
283 iov
.iov_base
= data
? data
: buf
;
284 iov
.iov_len
= data
? size
: sizeof(buf
);
288 ret
= recvmsg(fd
, &msg
, 0);
292 cmsg
= CMSG_FIRSTHDR(&msg
);
294 if (cmsg
&& cmsg
->cmsg_len
== CMSG_LEN(sizeof(struct ucred
)) &&
295 cmsg
->cmsg_level
== SOL_SOCKET
&&
296 cmsg
->cmsg_type
== SCM_CREDENTIALS
) {
297 memcpy(&cred
, CMSG_DATA(cmsg
), sizeof(cred
));
299 (cred
.uid
!= getuid() || cred
.gid
!= getgid())) {
300 INFO("Message denied for '%d/%d'", cred
.uid
, cred
.gid
);