4 files changed, 53 insertions, 13 deletions

diff --git a/src/firejail/firejail.h b/src/firejail/firejail.h
index 824164c8a..5295393f0 100644
--- a/src/firejail/firejail.h
+++ b/src/firejail/firejail.h
@@ -660,7 +660,7 @@ void fs_tracefile(void);
 void fs_trace(void);
 
 // fs_hostname.c
-void fs_hostname(const char *hostname);
+void fs_hostname(void);
 char *fs_check_hosts_file(const char *fname);
 void fs_store_hosts_file(void);
 void fs_mount_hosts_file(void);
diff --git a/src/firejail/fs_hostname.c b/src/firejail/fs_hostname.c
index bf4435310..32b314a8b 100644
--- a/src/firejail/fs_hostname.c
+++ b/src/firejail/fs_hostname.c
@@ -24,7 +24,36 @@
 #include <dirent.h>
 #include <fcntl.h>
 
-void fs_hostname(const char *hostname) {
+// build a random host name
+static char *random_hostname(void) {
+        char vowels[] = { 'a', 'e', 'i', 'o', 'u'};
+        char consonants[] = {'b', 'c', 'c', 'c', 'g', 'h', 'h', 'h', 'h', 'h',
+                'j', 'j', 'k', 'k', 'k', 'k', 'k', 'k', 'k', 'k', 'k', 'k', 'm', 'm', 'm', 'm', 'n', 'n', 'n', 'n', 'n',
+                'r', 'r', 's', 's', 's', 's', 's', 's', 's', 's', 't', 't', 't', 't',
+                'w', 'y', 'y', 'y', 'y', 'z', 'z'};
+        char *ending[] = {"hiko", "hiko", "suke", "suke",  "suke", "shi", "shi", "ro", "ro",
+                "rou", "hito", "hito","ka"};
+
+        char *name = malloc(20);
+        if (!name)
+                errExit("malloc");
+
+        int i = 0;
+        name[i++] = consonants[rand() % sizeof(consonants)];
+        name[i++] = vowels[rand() % sizeof(vowels)];
+        name[i++] = consonants[rand() % sizeof(consonants)];
+        name[i++] = vowels[rand() % sizeof(vowels)];
+        if (rand() % 2) {
+                name[i++] = consonants[rand() % sizeof(consonants)];
+                name[i++] = vowels[rand() % sizeof(vowels)];
+        }
+        char *ptr =     ending[rand() % (sizeof(ending) / sizeof(char *))];
+        strcpy(name + i, ptr);
+        return name;
+}
+
+void fs_hostname(void) {
+        const char *hostname = (cfg.hostname)? cfg.hostname: random_hostname();
         struct stat s;
 
         // create a new /etc/hostname
@@ -33,6 +62,14 @@ void fs_hostname(const char *hostname) {
                         printf("Creating a new /etc/hostname file\n");
 
                 create_empty_file_as_root(RUN_HOSTNAME_FILE, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
+                FILE *fp = fopen(RUN_HOSTNAME_FILE, "we");
+                if (!fp) {
+                        fclose(fp);
+                        goto errexit;
+                }
+                fprintf(fp, "%s\n", hostname);
+                SET_PERMS_STREAM(fp, 0, 0, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
+                fclose(fp);
 
                 // bind-mount the file on top of /etc/hostname
                 if (mount(RUN_HOSTNAME_FILE, "/etc/hostname", NULL, MS_BIND|MS_REC, NULL) < 0)
@@ -41,12 +78,12 @@ void fs_hostname(const char *hostname) {
         }
 
         // create a new /etc/hosts
-        if (cfg.hosts_file == NULL && stat("/etc/hosts", &s) == 0) {
+        if (stat(RUN_HOSTS_FILE2, &s) == 0) {
                 if (arg_debug)
                         printf("Creating a new /etc/hosts file\n");
                 // copy /etc/host into our new file, and modify it on the fly
                 /* coverity[toctou] */
-                FILE *fp1 = fopen("/etc/hosts", "re");
+                FILE *fp1 = fopen(RUN_HOSTS_FILE2, "re");
                 if (!fp1)
                         goto errexit;
 
@@ -67,7 +104,7 @@ void fs_hostname(const char *hostname) {
                         // copy line
                         if (strstr(buf, "127.0.0.1") && done == 0) {
                                 done = 1;
-                                fprintf(fp2, "%s %s\n", buf, hostname);
+                                fprintf(fp2, "127.0.0.1 %s\n", hostname);
                         }
                         else
                                 fprintf(fp2, "%s\n", buf);
@@ -83,7 +120,7 @@ void fs_hostname(const char *hostname) {
         return;
 
 errexit:
-        fprintf(stderr, "Error: cannot create hostname file\n");
+        fprintf(stderr, "Error: cannot create /etc/hostname and /etc/hosts files\n");
         exit(1);
 }
 
@@ -103,7 +140,10 @@ errexit:
 }
 
 void fs_store_hosts_file(void) {
-        copy_file_from_user_to_root(cfg.hosts_file, RUN_HOSTS_FILE, 0, 0, 0644); // root needed
+        if (cfg.hosts_file)
+                copy_file_from_user_to_root(cfg.hosts_file, RUN_HOSTS_FILE2, 0, 0, 0644); // root needed
+        else
+                copy_file_from_user_to_root("/etc/hosts", RUN_HOSTS_FILE2, 0, 0, 0644); // root needed
 }
 
 void fs_mount_hosts_file(void) {
diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index a4109cc17..88de1fc5f 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -848,8 +848,7 @@ int sandbox(void* sandbox_arg) {
                 fs_trace_touch_or_store_preload();
 
         // store hosts file
-        if (cfg.hosts_file)
-                fs_store_hosts_file();
+        fs_store_hosts_file();
 
         //****************************
         // configure filesystem
@@ -986,11 +985,11 @@ int sandbox(void* sandbox_arg) {
         //****************************
         // hosts and hostname
         //****************************
-        if (cfg.hostname)
-                fs_hostname(cfg.hostname);
+//      if (cfg.hostname)
+        fs_hostname();
 
-        if (cfg.hosts_file)
-                fs_mount_hosts_file();
+//      if (cfg.hosts_file)
+//              fs_mount_hosts_file();
 
         //****************************
         // /etc overrides from the network namespace
diff --git a/src/include/rundefs.h b/src/include/rundefs.h
index af42b0984..7fc0f21f3 100644
--- a/src/include/rundefs.h
+++ b/src/include/rundefs.h
@@ -89,6 +89,7 @@
 #define RUN_ASOUNDRC_FILE               RUN_MNT_DIR "/.asoundrc"
 #define RUN_HOSTNAME_FILE               RUN_MNT_DIR "/hostname"
 #define RUN_HOSTS_FILE                  RUN_MNT_DIR "/hosts"
+#define RUN_HOSTS_FILE2                 RUN_MNT_DIR "/hosts2"
 #define RUN_MACHINEID                   RUN_MNT_DIR "/machine-id"
 #define RUN_LDPRELOAD_FILE              RUN_MNT_DIR "/ld.so.preload"
 #define RUN_UTMP_FILE                   RUN_MNT_DIR "/utmp"