private-lib developments

1 files changed, 311 insertions, 0 deletions

diff --git a/src/firejail/fs_lib2.c b/src/firejail/fs_lib2.c
new file mode 100644
index 000000000..4c2c15ebd
--- /dev/null
+++ b/src/firejail/fs_lib2.c
@@ -0,0 +1,311 @@
+/*
+ * Copyright (C) 2017 Firejail Authors
+ *
+ * This file is part of firejail project
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+*/
+#include "firejail.h"
+#include <dirent.h>
+#include <sys/stat.h>
+
+extern void fslib_duplicate(const char *full_path);
+extern void fslib_copy_libs(const char *full_path);
+extern void fslib_copy_dir(const char *full_path);
+
+//***************************************************************
+// Standard C library
+//***************************************************************
+// standard libc libraries based on Debian's libc6 package
+// selinux seems to be linked in most command line utilities
+// locale (/usr/lib/locale) - without it, the program will default to "C" locale
+typedef struct liblist_t {
+        const char *name;
+        int len;
+} LibList;
+
+static LibList libc_list[] = {
+        { "libselinux.so.", 0 },
+        { "ld-linux-x86-64.so.", 0 },
+        { "libanl.so.", 0 },
+        { "libc.so.", 0 },
+        { "libcidn.so.", 0 },
+        { "libcrypt.so.", 0 },
+        { "libdl.so.", 0 },
+        { "libm.so.", 0 },
+        { "libmemusage.so", 0 },
+        { "libmvec.so.", 0 },
+        { "libnsl.so.", 0 },
+        { "libnss_compat.so.", 0 },
+        { "libnss_dns.so.", 0 },
+        { "libnss_files.so.", 0 },
+        { "libnss_hesiod.so.", 0 },
+        { "libnss_nisplus.so.", 0 },
+        { "libnss_nis.so.", 0 },
+        { "libpthread.so.", 0 },
+        { "libresolv.so.", 0 },
+        { "librt.so.", 0 },
+        { "libthread_db.so.", 0 },
+        { "libutil.so.", 0 },
+        { NULL, 0}
+};
+
+static int find_libc_list(const char *name) {
+        assert(name);
+
+        int i = 0;
+        while (libc_list[i].name) {
+                if (libc_list[i].len == 0)
+                        libc_list[i].len = strlen(libc_list[i].name);
+                if (strncmp(name, libc_list[i].name, libc_list[i].len) == 0)
+                        return 1;
+                i++;
+        }
+        return 0;
+}
+
+// compare the files in dirname against liblist above
+static void stdc(const char *dirname) {
+        assert(dirname);
+
+        DIR *dir = opendir(dirname);
+        if (dir) {
+                struct dirent *entry;
+                while ((entry = readdir(dir)) != NULL) {
+                        if (strcmp(entry->d_name, ".") == 0)
+                                continue;
+                        if (strcmp(entry->d_name, "..") == 0)
+                                continue;
+                        
+                        if (find_libc_list(entry->d_name)) {
+                                char *fname;
+                                if (asprintf(&fname, "%s/%s", dirname, entry->d_name) == -1)
+                                        errExit("asprintf");
+
+                                fslib_duplicate(fname);
+                        }
+                }
+                closedir(dir);
+        }
+}
+
+void fslib_install_stdc(void) {
+        // install standard C libraries
+        struct stat s;
+        char *stdclib = "/lib64";                 // CentOS, Fedora, Arch
+        
+        if (stat("/lib/x86_64-linux-gnu", &s) == 0) {   // Debian & friends
+                mkdir_attr(RUN_LIB_DIR "/x86_64-linux-gnu", 0755, 0, 0);
+                stdclib = "/lib/x86_64-linux-gnu";
+        }
+
+        timetrace_start();
+        stdc(stdclib);
+
+        // install locale
+        if (stat("/usr/lib/locale", &s) == 0)
+                fslib_copy_dir("/usr/lib/locale");
+
+        if (!arg_quiet)
+                fprintf(stderr, "Standard C library installed in %0.2f ms\n", timetrace_end());
+}
+
+void fslib_install_locale(void);
+
+
+//***************************************************************
+// various system libraries
+//***************************************************************
+
+// look for library in the new filesystem, and install one or two more directories, dir1 and dir2
+typedef struct syslib_t {
+        const char *library;    // look in the system for this library
+        int len;                        // length of library string, 0 by default
+        int found;              // library found, 0 by default
+        const char *dir1;               // directory to install
+        const char *dir2;               // directory to install
+        const char *message;    // message to print on the screen
+} SysLib;
+
+SysLib syslibs[] = {
+#if 0
+        {
+                "",     // library
+                0, 0,   // len and found flag
+                "",     // dir1
+                "",     // dir2
+                ""      // message
+        },
+#endif
+        { // pixmaps - libraries used by GTK to display application menu icons
+                "libgdk_pixbuf-2.0",    // library
+                0, 0,   // len and found flag
+                "gdk-pixbuf-2.0",       // dir1
+                "",     // dir2
+                "GdkPixbuf"     // message
+        },
+        { // GTK2
+                "libgtk-x11-2.0",       // library
+                0, 0,   // len and found flag
+                "gtk-2.0",      // dir1
+                "libgtk2.0-0",  // dir2
+                "GTK2"  // message
+        },
+        { // GTK3
+                "libgtk-3",     // library
+                0, 0,   // len and found flag
+                "gtk-3.0",      // dir1
+                "libgtk-3-0",   // dir2
+                "GTK3"  // message
+        },
+        { // Pango - text internationalization, found on older GTK2-based systems
+                "libpango",     // library
+                0, 0,   // len and found flag
+                "pango",        // dir1
+                "",     // dir2
+                "Pango" // message
+        },
+        { // Library for handling GObject introspection data on GTK systems
+                "libgirepository-1.0",  // library
+                0, 0,   // len and found flag
+                "girepository-1.0",     // dir1
+                "",     // dir2
+                "GIRepository"  // message
+        },
+        { // Enchant speller
+                "libenchant.so.",       // library
+                0, 0,   // len and found flag
+                "enchant",      // dir1
+                "",     // dir2
+                "Enchant (speller)"     // message
+        },
+        {
+                "libQt5",       // library
+                0, 0,   // len and found flag
+                "qt5",  // dir1
+                "gdk-pixbuf-2.0",       // dir2
+                "Qt5, GdkPixbuf"        // message
+        },
+        {
+                "libQtCore",    // library
+                0, 0,   // len and found flag
+                "qt4",  // dir1
+                "gdk-pixbuf-2.0",       // dir2
+                "Qt4"   // message
+        },
+
+        { // NULL terminated list
+                NULL,   // library
+                0, 0,   // len and found flag
+                "",     // dir1
+                "",     // dir2
+                ""      // message
+        }
+};
+        
+void fslib_install_system(void) {
+        // look for installed libraries
+        DIR *dir = opendir(RUN_LIB_DIR "/x86_64-linux-gnu");
+        if (!dir)
+                dir = opendir(RUN_LIB_DIR);
+        
+        if (dir) {
+                struct dirent *entry;
+                while ((entry = readdir(dir)) != NULL) {
+                        if (strcmp(entry->d_name, ".") == 0)
+                                continue;
+                        if (strcmp(entry->d_name, "..") == 0)
+                                continue;
+
+                        SysLib *ptr = &syslibs[0];
+                        while (ptr->library) {
+                                if (ptr->len == 0)
+                                        ptr->len = strlen(ptr->library);
+                                
+                                if (strncmp(entry->d_name, ptr->library, ptr->len) == 0) {
+                                        ptr->found = 1;
+                                        break;
+                                }
+                                
+                                ptr++;
+                        }
+
+                }
+                closedir(dir);
+        }
+        else
+                assert(0);
+
+        // install required directories
+        SysLib *ptr = &syslibs[0];
+        while (ptr->library) {
+                if (ptr->found) {
+                        assert(*ptr->message != '\0');
+                        timetrace_start();
+
+                        // bring in all libraries
+                        assert(ptr->dir1);
+                        char *name;
+                        // Debian & friends
+                        if (asprintf(&name, "/usr/lib/x86_64-linux-gnu/%s", ptr->dir1) == -1)
+                                errExit("asprintf");
+                        if (access(name, R_OK) == 0) {
+                                fslib_copy_libs(name);
+                                fslib_copy_dir(name);
+                        }
+                        else {
+                                free(name);
+                                // CentOS, Fedora, Arch
+                                if (asprintf(&name, "/usr/lib64/%s", ptr->dir1) == -1)
+                                        errExit("asprintf");
+                                if (access(name, R_OK) == 0) {
+                                        fslib_copy_libs(name);
+                                        fslib_copy_dir(name);
+                                }
+                        }
+                        free(name);
+                        
+                        if (*ptr->dir2 != '\0') {
+                                // Debian & friends
+                                if (asprintf(&name, "/usr/lib/x86_64-linux-gnu/%s", ptr->dir2) == -1)
+                                        errExit("asprintf");
+                                if (access(name, R_OK) == 0) {
+                                        fslib_copy_libs(name);
+                                        fslib_copy_dir(name);
+                                }
+                                else {
+                                        free(name);
+                                        // CentOS, Fedora, Arch
+                                        if (asprintf(&name, "/usr/lib64/%s", ptr->dir2) == -1)
+                                                errExit("asprintf");
+                                        if (access(name, R_OK) == 0) {
+                                                fslib_copy_libs(name);
+                                                fslib_copy_dir(name);
+                                        }
+                                }
+                                free(name);
+                        }
+                        
+                        if (!arg_quiet)
+                                fprintf(stderr, "%s installed in %0.2f ms\n", ptr->message, timetrace_end());
+                }
+                ptr++;
+        }
+}
+
+
+
+
+