fix #2820 - adjustable file copy limit; export FIREJAIL_DEBUG into sbox

1 files changed, 16 insertions, 3 deletions

diff --git a/src/fcopy/main.c b/src/fcopy/main.c
index 9fca2a39b..3f507a361 100644
--- a/src/fcopy/main.c
+++ b/src/fcopy/main.c
@@ -25,9 +25,11 @@
 #include <pwd.h>
 
 int arg_quiet = 0;
+int arg_debug = 0;
 static int arg_follow_link = 0;
 
-#define COPY_LIMIT (500 * 1024 *1024)
+static int copy_limit = 500 * 1024 *1024; // 500 MB
+#define COPY_LIMIT (
 static int size_limit_reached = 0;
 static unsigned file_cnt = 0;
 static unsigned size_cnt = 0;
@@ -184,8 +186,8 @@ static int fs_copydir(const char *infname, const struct stat *st, int ftype, str
         mode_t mode = s.st_mode;
 
         // recalculate size
-        if ((s.st_size + size_cnt) > COPY_LIMIT) {
-                fprintf(stderr, "Error fcopy: size limit of %dMB reached\n", (COPY_LIMIT / 1024) / 1024);
+        if ((s.st_size + size_cnt) > copy_limit) {
+                fprintf(stderr, "Error fcopy: size limit of %dMB reached\n", (copy_limit / 1024) / 1024);
                 size_limit_reached = 1;
                 free(outfname);
                 return 0;
@@ -330,6 +332,9 @@ int main(int argc, char **argv) {
         char *quiet = getenv("FIREJAIL_QUIET");
         if (quiet && strcmp(quiet, "yes") == 0)
                 arg_quiet = 1;
+        char *debug = getenv("FIREJAIL_DEBUG");
+        if (debug && strcmp(debug, "yes") == 0)
+                arg_debug = 1;
 
         char *src;
         char *dest;
@@ -384,6 +389,14 @@ int main(int argc, char **argv) {
                 exit(1);
         }
 
+        // extract copy limit size from env variable, if any
+        char *cl = getenv("FIREJAIL_FILE_COPY_LIMIT");
+        if (cl) {
+                copy_limit = atoi(cl) * 1024 * 1024;
+                if (arg_debug)
+                        printf("file copy limit %d bytes\n", copy_limit);
+        }
+
         // copy files
         if ((arg_follow_link ? stat : lstat)(src, &s) == -1) {
                 fprintf(stderr, "Error fcopy: src %s: %s\n", src, strerror(errno));