2014-07-11 03:15:21 +02:00
|
|
|
/***
|
|
|
|
This file is part of systemd.
|
|
|
|
|
|
|
|
Copyright 2014 Lennart Poettering
|
|
|
|
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
|
|
|
(at your option) any later version.
|
|
|
|
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
Lesser General Public License for more details.
|
|
|
|
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
***/
|
|
|
|
|
|
|
|
#include <netdb.h>
|
2015-10-24 22:58:24 +02:00
|
|
|
#include <nss.h>
|
2014-07-11 03:15:21 +02:00
|
|
|
|
|
|
|
#include "sd-bus.h"
|
|
|
|
#include "sd-login.h"
|
2015-10-24 22:58:24 +02:00
|
|
|
|
2015-10-27 03:01:06 +01:00
|
|
|
#include "alloc-util.h"
|
2015-07-09 19:46:20 +02:00
|
|
|
#include "bus-common-errors.h"
|
2015-08-23 14:30:52 +02:00
|
|
|
#include "hostname-util.h"
|
2015-10-24 22:58:24 +02:00
|
|
|
#include "in-addr-util.h"
|
|
|
|
#include "macro.h"
|
|
|
|
#include "nss-util.h"
|
2016-01-26 22:34:46 +01:00
|
|
|
#include "signal-util.h"
|
2015-10-24 22:58:24 +02:00
|
|
|
#include "string-util.h"
|
2015-10-25 22:32:30 +01:00
|
|
|
#include "user-util.h"
|
2015-10-24 22:58:24 +02:00
|
|
|
#include "util.h"
|
2014-07-11 03:15:21 +02:00
|
|
|
|
|
|
|
NSS_GETHOSTBYNAME_PROTOTYPES(mymachines);
|
2015-07-09 19:46:20 +02:00
|
|
|
NSS_GETPW_PROTOTYPES(mymachines);
|
|
|
|
NSS_GETGR_PROTOTYPES(mymachines);
|
2014-07-11 03:15:21 +02:00
|
|
|
|
2014-07-18 16:09:30 +02:00
|
|
|
static int count_addresses(sd_bus_message *m, int af, unsigned *ret) {
|
2014-07-11 03:15:21 +02:00
|
|
|
unsigned c = 0;
|
|
|
|
int r;
|
|
|
|
|
|
|
|
assert(m);
|
|
|
|
assert(ret);
|
|
|
|
|
2014-08-04 19:05:06 +02:00
|
|
|
while ((r = sd_bus_message_enter_container(m, 'r', "iay")) > 0) {
|
2014-07-18 16:09:30 +02:00
|
|
|
int family;
|
2014-07-11 03:15:21 +02:00
|
|
|
|
2014-07-18 16:09:30 +02:00
|
|
|
r = sd_bus_message_read(m, "i", &family);
|
2014-07-11 03:15:21 +02:00
|
|
|
if (r < 0)
|
|
|
|
return r;
|
|
|
|
|
|
|
|
r = sd_bus_message_skip(m, "ay");
|
|
|
|
if (r < 0)
|
|
|
|
return r;
|
|
|
|
|
|
|
|
r = sd_bus_message_exit_container(m);
|
|
|
|
if (r < 0)
|
|
|
|
return r;
|
|
|
|
|
|
|
|
if (af != AF_UNSPEC && family != af)
|
|
|
|
continue;
|
|
|
|
|
|
|
|
c ++;
|
|
|
|
}
|
|
|
|
if (r < 0)
|
|
|
|
return r;
|
|
|
|
|
|
|
|
r = sd_bus_message_rewind(m, false);
|
|
|
|
if (r < 0)
|
|
|
|
return r;
|
|
|
|
|
|
|
|
*ret = c;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
enum nss_status _nss_mymachines_gethostbyname4_r(
|
|
|
|
const char *name,
|
|
|
|
struct gaih_addrtuple **pat,
|
|
|
|
char *buffer, size_t buflen,
|
|
|
|
int *errnop, int *h_errnop,
|
|
|
|
int32_t *ttlp) {
|
|
|
|
|
|
|
|
struct gaih_addrtuple *r_tuple, *r_tuple_first = NULL;
|
tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy
GLIB has recently started to officially support the gcc cleanup
attribute in its public API, hence let's do the same for our APIs.
With this patch we'll define an xyz_unrefp() call for each public
xyz_unref() call, to make it easy to use inside a
__attribute__((cleanup())) expression. Then, all code is ported over to
make use of this.
The new calls are also documented in the man pages, with examples how to
use them (well, I only added docs where the _unref() call itself already
had docs, and the examples, only cover sd_bus_unrefp() and
sd_event_unrefp()).
This also renames sd_lldp_free() to sd_lldp_unref(), since that's how we
tend to call our destructors these days.
Note that this defines no public macro that wraps gcc's attribute and
makes it easier to use. While I think it's our duty in the library to
make our stuff easy to use, I figure it's not our duty to make gcc's own
features easy to use on its own. Most likely, client code which wants to
make use of this should define its own:
#define _cleanup_(function) __attribute__((cleanup(function)))
Or similar, to make the gcc feature easier to use.
Making this logic public has the benefit that we can remove three header
files whose only purpose was to define these functions internally.
See #2008.
2015-11-27 19:13:45 +01:00
|
|
|
_cleanup_(sd_bus_message_unrefp) sd_bus_message* reply = NULL;
|
|
|
|
_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
|
2014-07-17 01:48:40 +02:00
|
|
|
_cleanup_free_ int *ifindices = NULL;
|
2014-07-11 03:15:21 +02:00
|
|
|
_cleanup_free_ char *class = NULL;
|
|
|
|
size_t l, ms, idx;
|
|
|
|
unsigned i = 0, c = 0;
|
|
|
|
char *r_name;
|
2014-07-17 01:48:40 +02:00
|
|
|
int n_ifindices, r;
|
2014-07-11 03:15:21 +02:00
|
|
|
|
2016-01-26 22:34:46 +01:00
|
|
|
BLOCK_SIGNALS(NSS_SIGNALS_BLOCK);
|
|
|
|
|
2014-07-11 03:15:21 +02:00
|
|
|
assert(name);
|
|
|
|
assert(pat);
|
|
|
|
assert(buffer);
|
|
|
|
assert(errnop);
|
|
|
|
assert(h_errnop);
|
|
|
|
|
|
|
|
r = sd_machine_get_class(name, &class);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
if (!streq(class, "container")) {
|
|
|
|
r = -ENOTTY;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
2014-07-17 01:48:40 +02:00
|
|
|
n_ifindices = sd_machine_get_ifindices(name, &ifindices);
|
|
|
|
if (n_ifindices < 0) {
|
|
|
|
r = n_ifindices;
|
2014-07-11 03:15:21 +02:00
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_bus_open_system(&bus);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_call_method(bus,
|
|
|
|
"org.freedesktop.machine1",
|
|
|
|
"/org/freedesktop/machine1",
|
|
|
|
"org.freedesktop.machine1.Manager",
|
|
|
|
"GetMachineAddresses",
|
|
|
|
NULL,
|
|
|
|
&reply,
|
|
|
|
"s", name);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
2014-07-18 16:09:30 +02:00
|
|
|
r = sd_bus_message_enter_container(reply, 'a', "(iay)");
|
2014-07-11 03:15:21 +02:00
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = count_addresses(reply, AF_UNSPEC, &c);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
if (c <= 0) {
|
2014-07-16 03:30:40 +02:00
|
|
|
*errnop = ESRCH;
|
2014-07-11 03:15:21 +02:00
|
|
|
*h_errnop = HOST_NOT_FOUND;
|
|
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
}
|
|
|
|
|
|
|
|
l = strlen(name);
|
|
|
|
ms = ALIGN(l+1) + ALIGN(sizeof(struct gaih_addrtuple)) * c;
|
|
|
|
if (buflen < ms) {
|
|
|
|
*errnop = ENOMEM;
|
2014-07-16 03:30:40 +02:00
|
|
|
*h_errnop = TRY_AGAIN;
|
2014-07-11 03:15:21 +02:00
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* First, append name */
|
|
|
|
r_name = buffer;
|
|
|
|
memcpy(r_name, name, l+1);
|
|
|
|
idx = ALIGN(l+1);
|
|
|
|
|
|
|
|
/* Second, append addresses */
|
|
|
|
r_tuple_first = (struct gaih_addrtuple*) (buffer + idx);
|
2014-07-18 16:09:30 +02:00
|
|
|
while ((r = sd_bus_message_enter_container(reply, 'r', "iay")) > 0) {
|
|
|
|
int family;
|
2014-07-11 03:15:21 +02:00
|
|
|
const void *a;
|
|
|
|
size_t sz;
|
|
|
|
|
2014-07-18 16:09:30 +02:00
|
|
|
r = sd_bus_message_read(reply, "i", &family);
|
2014-07-11 03:15:21 +02:00
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_message_read_array(reply, 'y', &a, &sz);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_message_exit_container(reply);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
2014-07-16 03:30:40 +02:00
|
|
|
if (!IN_SET(family, AF_INET, AF_INET6)) {
|
|
|
|
r = -EAFNOSUPPORT;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
2014-07-18 02:36:10 +02:00
|
|
|
if (sz != FAMILY_ADDRESS_SIZE(family)) {
|
2014-07-11 03:15:21 +02:00
|
|
|
r = -EINVAL;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r_tuple = (struct gaih_addrtuple*) (buffer + idx);
|
|
|
|
r_tuple->next = i == c-1 ? NULL : (struct gaih_addrtuple*) ((char*) r_tuple + ALIGN(sizeof(struct gaih_addrtuple)));
|
|
|
|
r_tuple->name = r_name;
|
|
|
|
r_tuple->family = family;
|
2014-07-17 01:48:40 +02:00
|
|
|
r_tuple->scopeid = n_ifindices == 1 ? ifindices[0] : 0;
|
2014-07-11 03:15:21 +02:00
|
|
|
memcpy(r_tuple->addr, a, sz);
|
|
|
|
|
|
|
|
idx += ALIGN(sizeof(struct gaih_addrtuple));
|
|
|
|
i++;
|
|
|
|
}
|
|
|
|
|
|
|
|
assert(i == c);
|
|
|
|
|
|
|
|
r = sd_bus_message_exit_container(reply);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
assert(idx == ms);
|
|
|
|
|
|
|
|
if (*pat)
|
|
|
|
**pat = *r_tuple_first;
|
|
|
|
else
|
|
|
|
*pat = r_tuple_first;
|
|
|
|
|
|
|
|
if (ttlp)
|
|
|
|
*ttlp = 0;
|
|
|
|
|
2014-08-01 16:01:12 +02:00
|
|
|
/* Explicitly reset all error variables */
|
|
|
|
*errnop = 0;
|
|
|
|
*h_errnop = NETDB_SUCCESS;
|
|
|
|
h_errno = 0;
|
|
|
|
|
2014-07-11 03:15:21 +02:00
|
|
|
return NSS_STATUS_SUCCESS;
|
|
|
|
|
|
|
|
fail:
|
|
|
|
*errnop = -r;
|
|
|
|
*h_errnop = NO_DATA;
|
|
|
|
return NSS_STATUS_UNAVAIL;
|
|
|
|
}
|
|
|
|
|
|
|
|
enum nss_status _nss_mymachines_gethostbyname3_r(
|
|
|
|
const char *name,
|
|
|
|
int af,
|
|
|
|
struct hostent *result,
|
|
|
|
char *buffer, size_t buflen,
|
|
|
|
int *errnop, int *h_errnop,
|
|
|
|
int32_t *ttlp,
|
|
|
|
char **canonp) {
|
|
|
|
|
tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy
GLIB has recently started to officially support the gcc cleanup
attribute in its public API, hence let's do the same for our APIs.
With this patch we'll define an xyz_unrefp() call for each public
xyz_unref() call, to make it easy to use inside a
__attribute__((cleanup())) expression. Then, all code is ported over to
make use of this.
The new calls are also documented in the man pages, with examples how to
use them (well, I only added docs where the _unref() call itself already
had docs, and the examples, only cover sd_bus_unrefp() and
sd_event_unrefp()).
This also renames sd_lldp_free() to sd_lldp_unref(), since that's how we
tend to call our destructors these days.
Note that this defines no public macro that wraps gcc's attribute and
makes it easier to use. While I think it's our duty in the library to
make our stuff easy to use, I figure it's not our duty to make gcc's own
features easy to use on its own. Most likely, client code which wants to
make use of this should define its own:
#define _cleanup_(function) __attribute__((cleanup(function)))
Or similar, to make the gcc feature easier to use.
Making this logic public has the benefit that we can remove three header
files whose only purpose was to define these functions internally.
See #2008.
2015-11-27 19:13:45 +01:00
|
|
|
_cleanup_(sd_bus_message_unrefp) sd_bus_message* reply = NULL;
|
|
|
|
_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
|
2014-07-11 03:15:21 +02:00
|
|
|
_cleanup_free_ char *class = NULL;
|
|
|
|
unsigned c = 0, i = 0;
|
|
|
|
char *r_name, *r_aliases, *r_addr, *r_addr_list;
|
|
|
|
size_t l, idx, ms, alen;
|
|
|
|
int r;
|
|
|
|
|
2016-01-26 22:34:46 +01:00
|
|
|
BLOCK_SIGNALS(NSS_SIGNALS_BLOCK);
|
|
|
|
|
2014-07-11 03:15:21 +02:00
|
|
|
assert(name);
|
|
|
|
assert(result);
|
|
|
|
assert(buffer);
|
|
|
|
assert(errnop);
|
|
|
|
assert(h_errnop);
|
|
|
|
|
|
|
|
if (af == AF_UNSPEC)
|
|
|
|
af = AF_INET;
|
|
|
|
|
|
|
|
if (af != AF_INET && af != AF_INET6) {
|
|
|
|
r = -EAFNOSUPPORT;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_machine_get_class(name, &class);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
if (!streq(class, "container")) {
|
|
|
|
r = -ENOTTY;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_bus_open_system(&bus);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_call_method(bus,
|
|
|
|
"org.freedesktop.machine1",
|
|
|
|
"/org/freedesktop/machine1",
|
|
|
|
"org.freedesktop.machine1.Manager",
|
|
|
|
"GetMachineAddresses",
|
|
|
|
NULL,
|
|
|
|
&reply,
|
|
|
|
"s", name);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
2014-07-18 16:09:30 +02:00
|
|
|
r = sd_bus_message_enter_container(reply, 'a', "(iay)");
|
2014-07-11 03:15:21 +02:00
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = count_addresses(reply, af, &c);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
if (c <= 0) {
|
|
|
|
*errnop = ENOENT;
|
|
|
|
*h_errnop = HOST_NOT_FOUND;
|
|
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
}
|
|
|
|
|
2014-07-18 02:36:10 +02:00
|
|
|
alen = FAMILY_ADDRESS_SIZE(af);
|
2014-07-11 03:15:21 +02:00
|
|
|
l = strlen(name);
|
|
|
|
|
2014-09-18 23:55:46 +02:00
|
|
|
ms = ALIGN(l+1) + c * ALIGN(alen) + (c+2) * sizeof(char*);
|
2014-07-11 03:15:21 +02:00
|
|
|
|
|
|
|
if (buflen < ms) {
|
|
|
|
*errnop = ENOMEM;
|
|
|
|
*h_errnop = NO_RECOVERY;
|
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* First, append name */
|
|
|
|
r_name = buffer;
|
|
|
|
memcpy(r_name, name, l+1);
|
|
|
|
idx = ALIGN(l+1);
|
|
|
|
|
|
|
|
/* Second, create aliases array */
|
|
|
|
r_aliases = buffer + idx;
|
|
|
|
((char**) r_aliases)[0] = NULL;
|
|
|
|
idx += sizeof(char*);
|
|
|
|
|
|
|
|
/* Third, append addresses */
|
|
|
|
r_addr = buffer + idx;
|
2014-07-18 16:09:30 +02:00
|
|
|
while ((r = sd_bus_message_enter_container(reply, 'r', "iay")) > 0) {
|
|
|
|
int family;
|
2014-07-11 03:15:21 +02:00
|
|
|
const void *a;
|
|
|
|
size_t sz;
|
|
|
|
|
2014-07-18 16:09:30 +02:00
|
|
|
r = sd_bus_message_read(reply, "i", &family);
|
2014-07-11 03:15:21 +02:00
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_message_read_array(reply, 'y', &a, &sz);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_message_exit_container(reply);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
if (family != af)
|
|
|
|
continue;
|
|
|
|
|
|
|
|
if (sz != alen) {
|
|
|
|
r = -EINVAL;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
memcpy(r_addr + i*ALIGN(alen), a, alen);
|
|
|
|
i++;
|
|
|
|
}
|
|
|
|
|
|
|
|
assert(i == c);
|
|
|
|
idx += c * ALIGN(alen);
|
|
|
|
|
|
|
|
r = sd_bus_message_exit_container(reply);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
/* Third, append address pointer array */
|
|
|
|
r_addr_list = buffer + idx;
|
|
|
|
for (i = 0; i < c; i++)
|
|
|
|
((char**) r_addr_list)[i] = r_addr + i*ALIGN(alen);
|
|
|
|
|
|
|
|
((char**) r_addr_list)[i] = NULL;
|
|
|
|
idx += (c+1) * sizeof(char*);
|
|
|
|
|
|
|
|
assert(idx == ms);
|
|
|
|
|
|
|
|
result->h_name = r_name;
|
|
|
|
result->h_aliases = (char**) r_aliases;
|
|
|
|
result->h_addrtype = af;
|
|
|
|
result->h_length = alen;
|
|
|
|
result->h_addr_list = (char**) r_addr_list;
|
|
|
|
|
|
|
|
if (ttlp)
|
|
|
|
*ttlp = 0;
|
|
|
|
|
|
|
|
if (canonp)
|
|
|
|
*canonp = r_name;
|
|
|
|
|
2014-08-01 16:01:12 +02:00
|
|
|
/* Explicitly reset all error variables */
|
|
|
|
*errnop = 0;
|
|
|
|
*h_errnop = NETDB_SUCCESS;
|
|
|
|
h_errno = 0;
|
|
|
|
|
2014-07-11 03:15:21 +02:00
|
|
|
return NSS_STATUS_SUCCESS;
|
|
|
|
|
|
|
|
fail:
|
|
|
|
*errnop = -r;
|
|
|
|
*h_errnop = NO_DATA;
|
|
|
|
return NSS_STATUS_UNAVAIL;
|
|
|
|
}
|
|
|
|
|
2015-07-09 19:46:20 +02:00
|
|
|
NSS_GETHOSTBYNAME_FALLBACKS(mymachines);
|
|
|
|
|
|
|
|
enum nss_status _nss_mymachines_getpwnam_r(
|
|
|
|
const char *name,
|
|
|
|
struct passwd *pwd,
|
|
|
|
char *buffer, size_t buflen,
|
|
|
|
int *errnop) {
|
|
|
|
|
tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy
GLIB has recently started to officially support the gcc cleanup
attribute in its public API, hence let's do the same for our APIs.
With this patch we'll define an xyz_unrefp() call for each public
xyz_unref() call, to make it easy to use inside a
__attribute__((cleanup())) expression. Then, all code is ported over to
make use of this.
The new calls are also documented in the man pages, with examples how to
use them (well, I only added docs where the _unref() call itself already
had docs, and the examples, only cover sd_bus_unrefp() and
sd_event_unrefp()).
This also renames sd_lldp_free() to sd_lldp_unref(), since that's how we
tend to call our destructors these days.
Note that this defines no public macro that wraps gcc's attribute and
makes it easier to use. While I think it's our duty in the library to
make our stuff easy to use, I figure it's not our duty to make gcc's own
features easy to use on its own. Most likely, client code which wants to
make use of this should define its own:
#define _cleanup_(function) __attribute__((cleanup(function)))
Or similar, to make the gcc feature easier to use.
Making this logic public has the benefit that we can remove three header
files whose only purpose was to define these functions internally.
See #2008.
2015-11-27 19:13:45 +01:00
|
|
|
_cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
|
|
|
|
_cleanup_(sd_bus_message_unrefp) sd_bus_message* reply = NULL;
|
|
|
|
_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
|
2015-07-09 19:46:20 +02:00
|
|
|
const char *p, *e, *machine;
|
|
|
|
uint32_t mapped;
|
|
|
|
uid_t uid;
|
|
|
|
size_t l;
|
|
|
|
int r;
|
|
|
|
|
2016-01-26 22:34:46 +01:00
|
|
|
BLOCK_SIGNALS(NSS_SIGNALS_BLOCK);
|
|
|
|
|
2015-07-09 19:46:20 +02:00
|
|
|
assert(name);
|
|
|
|
assert(pwd);
|
|
|
|
|
|
|
|
p = startswith(name, "vu-");
|
|
|
|
if (!p)
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
e = strrchr(p, '-');
|
|
|
|
if (!e || e == p)
|
|
|
|
goto not_found;
|
|
|
|
|
2015-11-23 19:59:43 +01:00
|
|
|
if (e - p > HOST_NAME_MAX - 1) /* -1 for the last dash */
|
|
|
|
goto not_found;
|
|
|
|
|
2015-07-09 19:46:20 +02:00
|
|
|
r = parse_uid(e + 1, &uid);
|
|
|
|
if (r < 0)
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
machine = strndupa(p, e - p);
|
|
|
|
if (!machine_name_is_valid(machine))
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
r = sd_bus_open_system(&bus);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_call_method(bus,
|
|
|
|
"org.freedesktop.machine1",
|
|
|
|
"/org/freedesktop/machine1",
|
|
|
|
"org.freedesktop.machine1.Manager",
|
|
|
|
"MapFromMachineUser",
|
|
|
|
&error,
|
|
|
|
&reply,
|
|
|
|
"su",
|
|
|
|
machine, (uint32_t) uid);
|
|
|
|
if (r < 0) {
|
|
|
|
if (sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_USER_MAPPING))
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_bus_message_read(reply, "u", &mapped);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
l = strlen(name);
|
|
|
|
if (buflen < l+1) {
|
|
|
|
*errnop = ENOMEM;
|
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
memcpy(buffer, name, l+1);
|
|
|
|
|
|
|
|
pwd->pw_name = buffer;
|
|
|
|
pwd->pw_uid = mapped;
|
|
|
|
pwd->pw_gid = 65534; /* nobody */
|
|
|
|
pwd->pw_gecos = buffer;
|
|
|
|
pwd->pw_passwd = (char*) "*"; /* locked */
|
|
|
|
pwd->pw_dir = (char*) "/";
|
|
|
|
pwd->pw_shell = (char*) "/sbin/nologin";
|
|
|
|
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_SUCCESS;
|
|
|
|
|
|
|
|
not_found:
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
|
|
|
|
fail:
|
|
|
|
*errnop = -r;
|
|
|
|
return NSS_STATUS_UNAVAIL;
|
|
|
|
}
|
|
|
|
|
|
|
|
enum nss_status _nss_mymachines_getpwuid_r(
|
|
|
|
uid_t uid,
|
|
|
|
struct passwd *pwd,
|
|
|
|
char *buffer, size_t buflen,
|
|
|
|
int *errnop) {
|
|
|
|
|
tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy
GLIB has recently started to officially support the gcc cleanup
attribute in its public API, hence let's do the same for our APIs.
With this patch we'll define an xyz_unrefp() call for each public
xyz_unref() call, to make it easy to use inside a
__attribute__((cleanup())) expression. Then, all code is ported over to
make use of this.
The new calls are also documented in the man pages, with examples how to
use them (well, I only added docs where the _unref() call itself already
had docs, and the examples, only cover sd_bus_unrefp() and
sd_event_unrefp()).
This also renames sd_lldp_free() to sd_lldp_unref(), since that's how we
tend to call our destructors these days.
Note that this defines no public macro that wraps gcc's attribute and
makes it easier to use. While I think it's our duty in the library to
make our stuff easy to use, I figure it's not our duty to make gcc's own
features easy to use on its own. Most likely, client code which wants to
make use of this should define its own:
#define _cleanup_(function) __attribute__((cleanup(function)))
Or similar, to make the gcc feature easier to use.
Making this logic public has the benefit that we can remove three header
files whose only purpose was to define these functions internally.
See #2008.
2015-11-27 19:13:45 +01:00
|
|
|
_cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
|
|
|
|
_cleanup_(sd_bus_message_unrefp) sd_bus_message* reply = NULL;
|
|
|
|
_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
|
2015-07-09 19:46:20 +02:00
|
|
|
const char *machine, *object;
|
|
|
|
uint32_t mapped;
|
|
|
|
int r;
|
|
|
|
|
2016-01-26 22:34:46 +01:00
|
|
|
BLOCK_SIGNALS(NSS_SIGNALS_BLOCK);
|
|
|
|
|
2015-09-19 01:55:29 +02:00
|
|
|
if (!uid_is_valid(uid)) {
|
2015-07-09 19:46:20 +02:00
|
|
|
r = -EINVAL;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* We consider all uids < 65536 host uids */
|
|
|
|
if (uid < 0x10000)
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
r = sd_bus_open_system(&bus);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_call_method(bus,
|
|
|
|
"org.freedesktop.machine1",
|
|
|
|
"/org/freedesktop/machine1",
|
|
|
|
"org.freedesktop.machine1.Manager",
|
|
|
|
"MapToMachineUser",
|
|
|
|
&error,
|
|
|
|
&reply,
|
|
|
|
"u",
|
|
|
|
(uint32_t) uid);
|
|
|
|
if (r < 0) {
|
|
|
|
if (sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_USER_MAPPING))
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_bus_message_read(reply, "sou", &machine, &object, &mapped);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
if (snprintf(buffer, buflen, "vu-%s-" UID_FMT, machine, (uid_t) mapped) >= (int) buflen) {
|
|
|
|
*errnop = ENOMEM;
|
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
pwd->pw_name = buffer;
|
|
|
|
pwd->pw_uid = uid;
|
|
|
|
pwd->pw_gid = 65534; /* nobody */
|
|
|
|
pwd->pw_gecos = buffer;
|
|
|
|
pwd->pw_passwd = (char*) "*"; /* locked */
|
|
|
|
pwd->pw_dir = (char*) "/";
|
|
|
|
pwd->pw_shell = (char*) "/sbin/nologin";
|
|
|
|
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_SUCCESS;
|
|
|
|
|
|
|
|
not_found:
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
|
|
|
|
fail:
|
|
|
|
*errnop = -r;
|
|
|
|
return NSS_STATUS_UNAVAIL;
|
|
|
|
}
|
|
|
|
|
|
|
|
enum nss_status _nss_mymachines_getgrnam_r(
|
|
|
|
const char *name,
|
|
|
|
struct group *gr,
|
|
|
|
char *buffer, size_t buflen,
|
|
|
|
int *errnop) {
|
|
|
|
|
tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy
GLIB has recently started to officially support the gcc cleanup
attribute in its public API, hence let's do the same for our APIs.
With this patch we'll define an xyz_unrefp() call for each public
xyz_unref() call, to make it easy to use inside a
__attribute__((cleanup())) expression. Then, all code is ported over to
make use of this.
The new calls are also documented in the man pages, with examples how to
use them (well, I only added docs where the _unref() call itself already
had docs, and the examples, only cover sd_bus_unrefp() and
sd_event_unrefp()).
This also renames sd_lldp_free() to sd_lldp_unref(), since that's how we
tend to call our destructors these days.
Note that this defines no public macro that wraps gcc's attribute and
makes it easier to use. While I think it's our duty in the library to
make our stuff easy to use, I figure it's not our duty to make gcc's own
features easy to use on its own. Most likely, client code which wants to
make use of this should define its own:
#define _cleanup_(function) __attribute__((cleanup(function)))
Or similar, to make the gcc feature easier to use.
Making this logic public has the benefit that we can remove three header
files whose only purpose was to define these functions internally.
See #2008.
2015-11-27 19:13:45 +01:00
|
|
|
_cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
|
|
|
|
_cleanup_(sd_bus_message_unrefp) sd_bus_message* reply = NULL;
|
|
|
|
_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
|
2015-07-09 19:46:20 +02:00
|
|
|
const char *p, *e, *machine;
|
|
|
|
uint32_t mapped;
|
|
|
|
uid_t gid;
|
|
|
|
size_t l;
|
|
|
|
int r;
|
|
|
|
|
2016-01-26 22:34:46 +01:00
|
|
|
BLOCK_SIGNALS(NSS_SIGNALS_BLOCK);
|
|
|
|
|
2015-07-09 19:46:20 +02:00
|
|
|
assert(name);
|
|
|
|
assert(gr);
|
|
|
|
|
|
|
|
p = startswith(name, "vg-");
|
|
|
|
if (!p)
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
e = strrchr(p, '-');
|
|
|
|
if (!e || e == p)
|
|
|
|
goto not_found;
|
|
|
|
|
2015-11-23 19:59:43 +01:00
|
|
|
if (e - p > HOST_NAME_MAX - 1) /* -1 for the last dash */
|
|
|
|
goto not_found;
|
|
|
|
|
2015-07-09 19:46:20 +02:00
|
|
|
r = parse_gid(e + 1, &gid);
|
|
|
|
if (r < 0)
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
machine = strndupa(p, e - p);
|
|
|
|
if (!machine_name_is_valid(machine))
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
r = sd_bus_open_system(&bus);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_call_method(bus,
|
|
|
|
"org.freedesktop.machine1",
|
|
|
|
"/org/freedesktop/machine1",
|
|
|
|
"org.freedesktop.machine1.Manager",
|
|
|
|
"MapFromMachineGroup",
|
|
|
|
&error,
|
|
|
|
&reply,
|
|
|
|
"su",
|
|
|
|
machine, (uint32_t) gid);
|
|
|
|
if (r < 0) {
|
|
|
|
if (sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_GROUP_MAPPING))
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_bus_message_read(reply, "u", &mapped);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
l = sizeof(char*) + strlen(name) + 1;
|
|
|
|
if (buflen < l) {
|
|
|
|
*errnop = ENOMEM;
|
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
memzero(buffer, sizeof(char*));
|
|
|
|
strcpy(buffer + sizeof(char*), name);
|
|
|
|
|
|
|
|
gr->gr_name = buffer + sizeof(char*);
|
|
|
|
gr->gr_gid = gid;
|
|
|
|
gr->gr_passwd = (char*) "*"; /* locked */
|
|
|
|
gr->gr_mem = (char**) buffer;
|
|
|
|
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_SUCCESS;
|
|
|
|
|
|
|
|
not_found:
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
|
|
|
|
fail:
|
|
|
|
*errnop = -r;
|
|
|
|
return NSS_STATUS_UNAVAIL;
|
|
|
|
}
|
|
|
|
|
|
|
|
enum nss_status _nss_mymachines_getgrgid_r(
|
|
|
|
gid_t gid,
|
|
|
|
struct group *gr,
|
|
|
|
char *buffer, size_t buflen,
|
|
|
|
int *errnop) {
|
|
|
|
|
tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy
GLIB has recently started to officially support the gcc cleanup
attribute in its public API, hence let's do the same for our APIs.
With this patch we'll define an xyz_unrefp() call for each public
xyz_unref() call, to make it easy to use inside a
__attribute__((cleanup())) expression. Then, all code is ported over to
make use of this.
The new calls are also documented in the man pages, with examples how to
use them (well, I only added docs where the _unref() call itself already
had docs, and the examples, only cover sd_bus_unrefp() and
sd_event_unrefp()).
This also renames sd_lldp_free() to sd_lldp_unref(), since that's how we
tend to call our destructors these days.
Note that this defines no public macro that wraps gcc's attribute and
makes it easier to use. While I think it's our duty in the library to
make our stuff easy to use, I figure it's not our duty to make gcc's own
features easy to use on its own. Most likely, client code which wants to
make use of this should define its own:
#define _cleanup_(function) __attribute__((cleanup(function)))
Or similar, to make the gcc feature easier to use.
Making this logic public has the benefit that we can remove three header
files whose only purpose was to define these functions internally.
See #2008.
2015-11-27 19:13:45 +01:00
|
|
|
_cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
|
|
|
|
_cleanup_(sd_bus_message_unrefp) sd_bus_message* reply = NULL;
|
|
|
|
_cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
|
2015-07-09 19:46:20 +02:00
|
|
|
const char *machine, *object;
|
|
|
|
uint32_t mapped;
|
|
|
|
int r;
|
|
|
|
|
2016-01-26 22:34:46 +01:00
|
|
|
BLOCK_SIGNALS(NSS_SIGNALS_BLOCK);
|
|
|
|
|
2015-09-19 01:55:29 +02:00
|
|
|
if (!gid_is_valid(gid)) {
|
2015-07-09 19:46:20 +02:00
|
|
|
r = -EINVAL;
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* We consider all gids < 65536 host gids */
|
|
|
|
if (gid < 0x10000)
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
r = sd_bus_open_system(&bus);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
r = sd_bus_call_method(bus,
|
|
|
|
"org.freedesktop.machine1",
|
|
|
|
"/org/freedesktop/machine1",
|
|
|
|
"org.freedesktop.machine1.Manager",
|
|
|
|
"MapToMachineGroup",
|
|
|
|
&error,
|
|
|
|
&reply,
|
|
|
|
"u",
|
|
|
|
(uint32_t) gid);
|
|
|
|
if (r < 0) {
|
|
|
|
if (sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_GROUP_MAPPING))
|
|
|
|
goto not_found;
|
|
|
|
|
|
|
|
goto fail;
|
|
|
|
}
|
|
|
|
|
|
|
|
r = sd_bus_message_read(reply, "sou", &machine, &object, &mapped);
|
|
|
|
if (r < 0)
|
|
|
|
goto fail;
|
|
|
|
|
|
|
|
if (buflen < sizeof(char*) + 1) {
|
|
|
|
*errnop = ENOMEM;
|
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
memzero(buffer, sizeof(char*));
|
|
|
|
if (snprintf(buffer + sizeof(char*), buflen - sizeof(char*), "vg-%s-" GID_FMT, machine, (gid_t) mapped) >= (int) buflen) {
|
|
|
|
*errnop = ENOMEM;
|
|
|
|
return NSS_STATUS_TRYAGAIN;
|
|
|
|
}
|
|
|
|
|
|
|
|
gr->gr_name = buffer + sizeof(char*);
|
|
|
|
gr->gr_gid = gid;
|
|
|
|
gr->gr_passwd = (char*) "*"; /* locked */
|
|
|
|
gr->gr_mem = (char**) buffer;
|
|
|
|
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_SUCCESS;
|
|
|
|
|
|
|
|
not_found:
|
|
|
|
*errnop = 0;
|
|
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
|
|
|
|
fail:
|
|
|
|
*errnop = -r;
|
|
|
|
return NSS_STATUS_UNAVAIL;
|
|
|
|
}
|