2010-06-10 13:42:19 +04:00
|
|
|
/*
|
|
|
|
* os-posix.c
|
|
|
|
*
|
|
|
|
* Copyright (c) 2003-2008 Fabrice Bellard
|
|
|
|
* Copyright (c) 2010 Red Hat, Inc.
|
|
|
|
*
|
|
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
|
|
* in the Software without restriction, including without limitation the rights
|
|
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
|
|
* furnished to do so, subject to the following conditions:
|
|
|
|
*
|
|
|
|
* The above copyright notice and this permission notice shall be included in
|
|
|
|
* all copies or substantial portions of the Software.
|
|
|
|
*
|
|
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
|
|
|
|
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
|
|
* THE SOFTWARE.
|
|
|
|
*/
|
|
|
|
|
2016-01-29 20:50:05 +03:00
|
|
|
#include "qemu/osdep.h"
|
2010-06-10 13:42:22 +04:00
|
|
|
#include <sys/wait.h>
|
2010-06-10 13:42:26 +04:00
|
|
|
#include <pwd.h>
|
2011-07-09 13:22:07 +04:00
|
|
|
#include <grp.h>
|
2010-06-10 13:42:23 +04:00
|
|
|
#include <libgen.h>
|
2010-06-10 13:42:19 +04:00
|
|
|
|
|
|
|
/* Needed early for CONFIG_BSD etc. */
|
2010-06-10 13:42:25 +04:00
|
|
|
#include "net/slirp.h"
|
2021-05-17 14:34:21 +03:00
|
|
|
#include "qemu/qemu-options.h"
|
2016-01-13 11:05:32 +03:00
|
|
|
#include "qemu/error-report.h"
|
2016-02-18 14:38:38 +03:00
|
|
|
#include "qemu/log.h"
|
2019-08-12 08:23:59 +03:00
|
|
|
#include "sysemu/runstate.h"
|
2016-03-20 20:16:19 +03:00
|
|
|
#include "qemu/cutils.h"
|
2010-06-10 13:42:19 +04:00
|
|
|
|
2010-06-10 13:42:31 +04:00
|
|
|
#ifdef CONFIG_LINUX
|
|
|
|
#include <sys/prctl.h>
|
2010-10-26 12:39:22 +04:00
|
|
|
#endif
|
|
|
|
|
2017-09-15 20:10:44 +03:00
|
|
|
/*
|
|
|
|
* Must set all three of these at once.
|
|
|
|
* Legal combinations are unset by name by uid
|
|
|
|
*/
|
|
|
|
static struct passwd *user_pwd; /* NULL non-NULL NULL */
|
|
|
|
static uid_t user_uid = (uid_t)-1; /* -1 -1 >=0 */
|
|
|
|
static gid_t user_gid = (gid_t)-1; /* -1 -1 >=0 */
|
|
|
|
|
2010-06-10 13:42:27 +04:00
|
|
|
static const char *chroot_dir;
|
2010-06-10 13:42:28 +04:00
|
|
|
static int daemonize;
|
2014-10-30 17:30:51 +03:00
|
|
|
static int daemon_pipe;
|
2010-06-10 13:42:26 +04:00
|
|
|
|
2010-06-10 13:42:21 +04:00
|
|
|
void os_setup_early_signal_handling(void)
|
2010-06-10 13:42:19 +04:00
|
|
|
{
|
|
|
|
struct sigaction act;
|
|
|
|
sigfillset(&act.sa_mask);
|
|
|
|
act.sa_flags = 0;
|
|
|
|
act.sa_handler = SIG_IGN;
|
|
|
|
sigaction(SIGPIPE, &act, NULL);
|
|
|
|
}
|
2010-06-10 13:42:22 +04:00
|
|
|
|
2011-03-15 14:56:04 +03:00
|
|
|
static void termsig_handler(int signal, siginfo_t *info, void *c)
|
2010-06-10 13:42:22 +04:00
|
|
|
{
|
2011-03-15 14:56:04 +03:00
|
|
|
qemu_system_killed(info->si_signo, info->si_pid);
|
2010-06-10 13:42:22 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
void os_setup_signal_handling(void)
|
|
|
|
{
|
|
|
|
struct sigaction act;
|
|
|
|
|
|
|
|
memset(&act, 0, sizeof(act));
|
2011-03-15 14:56:04 +03:00
|
|
|
act.sa_sigaction = termsig_handler;
|
|
|
|
act.sa_flags = SA_SIGINFO;
|
2010-06-10 13:42:22 +04:00
|
|
|
sigaction(SIGINT, &act, NULL);
|
|
|
|
sigaction(SIGHUP, &act, NULL);
|
|
|
|
sigaction(SIGTERM, &act, NULL);
|
|
|
|
}
|
2010-06-10 13:42:23 +04:00
|
|
|
|
2010-06-10 13:42:31 +04:00
|
|
|
void os_set_proc_name(const char *s)
|
|
|
|
{
|
|
|
|
#if defined(PR_SET_NAME)
|
|
|
|
char name[16];
|
|
|
|
if (!s)
|
|
|
|
return;
|
2012-10-04 15:09:51 +04:00
|
|
|
pstrcpy(name, sizeof(name), s);
|
2010-06-10 13:42:31 +04:00
|
|
|
/* Could rewrite argv[0] too, but that's a bit more complicated.
|
|
|
|
This simple way is enough for `top'. */
|
|
|
|
if (prctl(PR_SET_NAME, name)) {
|
2018-04-16 17:16:23 +03:00
|
|
|
error_report("unable to change process name: %s", strerror(errno));
|
2010-06-10 13:42:31 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
#else
|
2018-04-16 17:15:51 +03:00
|
|
|
error_report("Change of process name not supported by your OS");
|
2010-06-10 13:42:31 +04:00
|
|
|
exit(1);
|
|
|
|
#endif
|
|
|
|
}
|
|
|
|
|
2017-09-15 20:10:44 +03:00
|
|
|
|
|
|
|
static bool os_parse_runas_uid_gid(const char *optarg)
|
|
|
|
{
|
|
|
|
unsigned long lv;
|
|
|
|
const char *ep;
|
|
|
|
uid_t got_uid;
|
|
|
|
gid_t got_gid;
|
|
|
|
int rc;
|
|
|
|
|
|
|
|
rc = qemu_strtoul(optarg, &ep, 0, &lv);
|
|
|
|
got_uid = lv; /* overflow here is ID in C99 */
|
|
|
|
if (rc || *ep != ':' || got_uid != lv || got_uid == (uid_t)-1) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
rc = qemu_strtoul(ep + 1, 0, 0, &lv);
|
|
|
|
got_gid = lv; /* overflow here is ID in C99 */
|
|
|
|
if (rc || got_gid != lv || got_gid == (gid_t)-1) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
user_pwd = NULL;
|
|
|
|
user_uid = got_uid;
|
|
|
|
user_gid = got_gid;
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
2010-06-10 13:42:25 +04:00
|
|
|
/*
|
|
|
|
* Parse OS specific command line options.
|
|
|
|
* return 0 if option handled, -1 otherwise
|
|
|
|
*/
|
2018-05-04 20:01:07 +03:00
|
|
|
int os_parse_cmd_args(int index, const char *optarg)
|
2010-06-10 13:42:25 +04:00
|
|
|
{
|
|
|
|
switch (index) {
|
2010-06-10 13:42:26 +04:00
|
|
|
case QEMU_OPTION_runas:
|
|
|
|
user_pwd = getpwnam(optarg);
|
2017-09-15 20:10:44 +03:00
|
|
|
if (user_pwd) {
|
|
|
|
user_uid = -1;
|
|
|
|
user_gid = -1;
|
|
|
|
} else if (!os_parse_runas_uid_gid(optarg)) {
|
|
|
|
error_report("User \"%s\" doesn't exist"
|
|
|
|
" (and is not <uid>:<gid>)",
|
|
|
|
optarg);
|
2010-06-10 13:42:26 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
break;
|
2010-06-10 13:42:27 +04:00
|
|
|
case QEMU_OPTION_chroot:
|
|
|
|
chroot_dir = optarg;
|
|
|
|
break;
|
2010-06-10 13:42:28 +04:00
|
|
|
case QEMU_OPTION_daemonize:
|
|
|
|
daemonize = 1;
|
|
|
|
break;
|
2012-08-04 03:28:37 +04:00
|
|
|
#if defined(CONFIG_LINUX)
|
|
|
|
case QEMU_OPTION_enablefips:
|
2020-10-20 19:08:27 +03:00
|
|
|
warn_report("-enable-fips is deprecated, please build QEMU with "
|
|
|
|
"the `libgcrypt` library as the cryptography provider "
|
|
|
|
"to enable FIPS compliance");
|
2012-08-04 03:28:37 +04:00
|
|
|
fips_set_state(true);
|
|
|
|
break;
|
|
|
|
#endif
|
2018-05-04 20:01:07 +03:00
|
|
|
default:
|
|
|
|
return -1;
|
2010-06-10 13:42:25 +04:00
|
|
|
}
|
2018-05-04 20:01:07 +03:00
|
|
|
|
|
|
|
return 0;
|
2010-06-10 13:42:25 +04:00
|
|
|
}
|
2010-06-10 13:42:26 +04:00
|
|
|
|
2010-06-10 13:42:29 +04:00
|
|
|
static void change_process_uid(void)
|
2010-06-10 13:42:26 +04:00
|
|
|
{
|
2017-09-15 20:10:44 +03:00
|
|
|
assert((user_uid == (uid_t)-1) || user_pwd == NULL);
|
|
|
|
assert((user_uid == (uid_t)-1) ==
|
|
|
|
(user_gid == (gid_t)-1));
|
|
|
|
|
|
|
|
if (user_pwd || user_uid != (uid_t)-1) {
|
|
|
|
gid_t intended_gid = user_pwd ? user_pwd->pw_gid : user_gid;
|
|
|
|
uid_t intended_uid = user_pwd ? user_pwd->pw_uid : user_uid;
|
|
|
|
if (setgid(intended_gid) < 0) {
|
|
|
|
error_report("Failed to setgid(%d)", intended_gid);
|
2010-06-10 13:42:26 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
2017-09-15 20:10:44 +03:00
|
|
|
if (user_pwd) {
|
|
|
|
if (initgroups(user_pwd->pw_name, user_pwd->pw_gid) < 0) {
|
|
|
|
error_report("Failed to initgroups(\"%s\", %d)",
|
|
|
|
user_pwd->pw_name, user_pwd->pw_gid);
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
if (setgroups(1, &user_gid) < 0) {
|
|
|
|
error_report("Failed to setgroups(1, [%d])",
|
|
|
|
user_gid);
|
|
|
|
exit(1);
|
|
|
|
}
|
2011-07-09 13:22:07 +04:00
|
|
|
}
|
2017-09-15 20:10:44 +03:00
|
|
|
if (setuid(intended_uid) < 0) {
|
|
|
|
error_report("Failed to setuid(%d)", intended_uid);
|
2010-06-10 13:42:26 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
if (setuid(0) != -1) {
|
2018-04-16 17:08:03 +03:00
|
|
|
error_report("Dropping privileges failed");
|
2010-06-10 13:42:26 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2010-06-10 13:42:27 +04:00
|
|
|
|
2010-06-10 13:42:29 +04:00
|
|
|
static void change_root(void)
|
2010-06-10 13:42:27 +04:00
|
|
|
{
|
|
|
|
if (chroot_dir) {
|
|
|
|
if (chroot(chroot_dir) < 0) {
|
2018-04-16 17:15:51 +03:00
|
|
|
error_report("chroot failed");
|
2010-06-10 13:42:27 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
if (chdir("/")) {
|
2018-04-16 17:16:23 +03:00
|
|
|
error_report("not able to chdir to /: %s", strerror(errno));
|
2010-06-10 13:42:27 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|
2010-06-10 13:42:28 +04:00
|
|
|
|
|
|
|
void os_daemonize(void)
|
|
|
|
{
|
|
|
|
if (daemonize) {
|
2014-09-26 12:14:30 +04:00
|
|
|
pid_t pid;
|
2014-10-30 17:30:51 +03:00
|
|
|
int fds[2];
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-09-26 12:14:30 +04:00
|
|
|
if (pipe(fds) == -1) {
|
|
|
|
exit(1);
|
|
|
|
}
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-09-26 12:14:30 +04:00
|
|
|
pid = fork();
|
|
|
|
if (pid > 0) {
|
|
|
|
uint8_t status;
|
|
|
|
ssize_t len;
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-09-26 12:14:30 +04:00
|
|
|
close(fds[1]);
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-10-30 17:37:16 +03:00
|
|
|
do {
|
|
|
|
len = read(fds[0], &status, 1);
|
|
|
|
} while (len < 0 && errno == EINTR);
|
2014-10-30 17:40:48 +03:00
|
|
|
|
|
|
|
/* only exit successfully if our child actually wrote
|
|
|
|
* a one-byte zero to our pipe, upon successful init */
|
|
|
|
exit(len == 1 && status == 0 ? 0 : 1);
|
|
|
|
|
|
|
|
} else if (pid < 0) {
|
|
|
|
exit(1);
|
|
|
|
}
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-09-26 12:14:30 +04:00
|
|
|
close(fds[0]);
|
2014-10-30 17:30:51 +03:00
|
|
|
daemon_pipe = fds[1];
|
|
|
|
qemu_set_cloexec(daemon_pipe);
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-09-26 12:14:30 +04:00
|
|
|
setsid();
|
2010-06-10 13:42:28 +04:00
|
|
|
|
2014-09-26 12:14:30 +04:00
|
|
|
pid = fork();
|
|
|
|
if (pid > 0) {
|
|
|
|
exit(0);
|
|
|
|
} else if (pid < 0) {
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
umask(027);
|
2010-06-10 13:42:28 +04:00
|
|
|
|
|
|
|
signal(SIGTSTP, SIG_IGN);
|
|
|
|
signal(SIGTTOU, SIG_IGN);
|
|
|
|
signal(SIGTTIN, SIG_IGN);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
void os_setup_post(void)
|
|
|
|
{
|
|
|
|
int fd = 0;
|
|
|
|
|
|
|
|
if (daemonize) {
|
|
|
|
if (chdir("/")) {
|
2018-04-16 17:16:23 +03:00
|
|
|
error_report("not able to chdir to /: %s", strerror(errno));
|
2010-06-10 13:42:28 +04:00
|
|
|
exit(1);
|
|
|
|
}
|
2020-07-21 15:25:21 +03:00
|
|
|
TFR(fd = qemu_open_old("/dev/null", O_RDWR));
|
2014-09-26 12:14:30 +04:00
|
|
|
if (fd == -1) {
|
|
|
|
exit(1);
|
|
|
|
}
|
2010-06-10 13:42:28 +04:00
|
|
|
}
|
|
|
|
|
2010-06-10 13:42:29 +04:00
|
|
|
change_root();
|
|
|
|
change_process_uid();
|
2010-06-10 13:42:28 +04:00
|
|
|
|
|
|
|
if (daemonize) {
|
2014-10-30 17:47:46 +03:00
|
|
|
uint8_t status = 0;
|
|
|
|
ssize_t len;
|
|
|
|
|
2010-06-10 13:42:28 +04:00
|
|
|
dup2(fd, 0);
|
|
|
|
dup2(fd, 1);
|
2016-02-18 14:38:38 +03:00
|
|
|
/* In case -D is given do not redirect stderr to /dev/null */
|
|
|
|
if (!qemu_logfile) {
|
|
|
|
dup2(fd, 2);
|
|
|
|
}
|
2010-06-10 13:42:28 +04:00
|
|
|
|
|
|
|
close(fd);
|
2014-10-30 17:47:46 +03:00
|
|
|
|
|
|
|
do {
|
|
|
|
len = write(daemon_pipe, &status, 1);
|
|
|
|
} while (len < 0 && errno == EINTR);
|
|
|
|
if (len != 1) {
|
|
|
|
exit(1);
|
|
|
|
}
|
2010-06-10 13:42:28 +04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-06-10 13:42:30 +04:00
|
|
|
void os_set_line_buffering(void)
|
|
|
|
{
|
|
|
|
setvbuf(stdout, NULL, _IOLBF, 0);
|
|
|
|
}
|
2010-10-26 12:39:22 +04:00
|
|
|
|
2012-09-14 20:15:41 +04:00
|
|
|
bool is_daemonized(void)
|
|
|
|
{
|
|
|
|
return daemonize;
|
|
|
|
}
|
2013-04-19 18:42:06 +04:00
|
|
|
|
2022-03-03 19:48:11 +03:00
|
|
|
int os_set_daemonize(bool d)
|
|
|
|
{
|
|
|
|
daemonize = d;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2013-04-19 18:42:06 +04:00
|
|
|
int os_mlock(void)
|
|
|
|
{
|
2020-07-13 16:36:09 +03:00
|
|
|
#ifdef HAVE_MLOCKALL
|
2013-04-19 18:42:06 +04:00
|
|
|
int ret = 0;
|
|
|
|
|
|
|
|
ret = mlockall(MCL_CURRENT | MCL_FUTURE);
|
|
|
|
if (ret < 0) {
|
2018-04-16 17:16:23 +03:00
|
|
|
error_report("mlockall: %s", strerror(errno));
|
2013-04-19 18:42:06 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
return ret;
|
2020-07-13 16:36:09 +03:00
|
|
|
#else
|
|
|
|
return -ENOSYS;
|
|
|
|
#endif
|
2013-04-19 18:42:06 +04:00
|
|
|
}
|