Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Consider nosound and novideo when keeping groups & misc refactors #4632

Merged
merged 4 commits into from
Nov 20, 2021
Merged

Consider nosound and novideo when keeping groups & misc refactors #4632

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
cc0a113
main.c: [ref] fix indentation and whitespace around group handling
kmk3 Oct 16, 2021
25f7c7e
util.c: [ref] move group find/copy into new functions
kmk3 Oct 22, 2021
615ce15
util.c: check array size on copy_group_ifcont
kmk3 Oct 22, 2021
ea564eb
Consider nosound and novideo when keeping groups
kmk3 Oct 16, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
main.c: [ref] fix indentation and whitespace around group handling
  • Loading branch information
@kmk3
kmk3 committed Oct 22, 2021
commit cc0a113e982d2db70f42c15629d52c0149737d13
156 changes: 78 additions & 78 deletions src/firejail/main.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3088,94 +3088,94 @@ int main(int argc, char **argv, char **envp) {
}
EUID_ASSERT();

// close each end of the unused pipes
close(parent_to_child_fds[0]);
close(child_to_parent_fds[1]);
// close each end of the unused pipes
close(parent_to_child_fds[0]);
close(child_to_parent_fds[1]);

// notify child that base setup is complete
notify_other(parent_to_child_fds[1]);
notify_other(parent_to_child_fds[1]);

// wait for child to create new user namespace with CLONE_NEWUSER
wait_for_other(child_to_parent_fds[0]);
close(child_to_parent_fds[0]);
// wait for child to create new user namespace with CLONE_NEWUSER
wait_for_other(child_to_parent_fds[0]);
close(child_to_parent_fds[0]);

if (arg_noroot) {
// update the UID and GID maps in the new child user namespace
if (arg_noroot) {
// update the UID and GID maps in the new child user namespace
// uid
char *map_path;
if (asprintf(&map_path, "/proc/%d/uid_map", child) == -1)
errExit("asprintf");

char *map;
uid_t uid = getuid();
if (asprintf(&map, "%d %d 1", uid, uid) == -1)
errExit("asprintf");
EUID_ROOT();
update_map(map, map_path);
EUID_USER();
free(map);
free(map_path);

// gid file
char *map_path;
if (asprintf(&map_path, "/proc/%d/uid_map", child) == -1)
errExit("asprintf");

char *map;
uid_t uid = getuid();
if (asprintf(&map, "%d %d 1", uid, uid) == -1)
errExit("asprintf");
EUID_ROOT();
update_map(map, map_path);
EUID_USER();
free(map);
free(map_path);

// gid file
if (asprintf(&map_path, "/proc/%d/gid_map", child) == -1)
errExit("asprintf");
char gidmap[1024];
char *ptr = gidmap;
*ptr = '\0';

// add user group
gid_t gid = getgid();
sprintf(ptr, "%d %d 1\n", gid, gid);
ptr += strlen(ptr);

if (!arg_nogroups) {
// add firejail group
gid_t g = get_group_id("firejail");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add tty group
g = get_group_id("tty");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add audio group
g = get_group_id("audio");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add video group
g = get_group_id("video");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add games group
g = get_group_id("games");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
}
}

EUID_ROOT();
update_map(gidmap, map_path);
EUID_USER();
free(map_path);
}
char gidmap[1024];
char *ptr = gidmap;
*ptr = '\0';

// add user group
gid_t gid = getgid();
sprintf(ptr, "%d %d 1\n", gid, gid);
ptr += strlen(ptr);

if (!arg_nogroups) {
// add firejail group
gid_t g = get_group_id("firejail");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add tty group
g = get_group_id("tty");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add audio group
g = get_group_id("audio");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add video group
g = get_group_id("video");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
ptr += strlen(ptr);
}

// add games group
g = get_group_id("games");
if (g) {
sprintf(ptr, "%d %d 1\n", g, g);
}
}

EUID_ROOT();
update_map(gidmap, map_path);
EUID_USER();
free(map_path);
}
EUID_ASSERT();

// notify child that UID/GID mapping is complete
notify_other(parent_to_child_fds[1]);
close(parent_to_child_fds[1]);
// notify child that UID/GID mapping is complete
notify_other(parent_to_child_fds[1]);
close(parent_to_child_fds[1]);

EUID_ROOT();
EUID_ROOT();
if (lockfd_network != -1) {
flock(lockfd_network, LOCK_UN);
close(lockfd_network);
Expand Down