/* * Copyright (C) 2014-2021 Firejail Authors * * This file is part of firejail project * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License along * with this program; if not, write to the Free Software Foundation, Inc., * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "fbuilder.h" int arg_debug = 0; static void usage(void) { printf("Firejail profile builder\n"); printf("Usage: firejail [--debug] --build[=profile-file] program-and-arguments\n"); } int main(int argc, char **argv) { #if 0 { system("cat /proc/self/status"); int i; for (i = 0; i < argc; i++) printf("*%s* ", argv[i]); printf("\n"); } #endif int i; int prog_index = 0; FILE *fp = stdout; char *prof_file = NULL; // parse arguments and extract program index for (i = 1; i < argc; i++) { if (strcmp(argv[i], "-h") == 0 || strcmp(argv[i], "--help") == 0 || strcmp(argv[i], "-?") ==0) { usage(); return 0; } else if (strcmp(argv[i], "--debug") == 0) arg_debug = 1; else if (strcmp(argv[i], "--build") == 0) ; // do nothing, this is passed down from firejail else if (strncmp(argv[i], "--build=", 8) == 0) { // this option is only supported for non-root users if (getuid() == 0) { fprintf(stderr, "Error fbuild: --build=profile-name is not supported for root user.\n"); exit(1); } // don't run if the file exists if (access(argv[i] + 8, F_OK) == 0) { fprintf(stderr, "Error: the profile file already exists. Please use a different file name.\n"); exit(1); } // check file access fp = fopen(argv[i] + 8, "w"); if (!fp) { fprintf(stderr, "Error: cannot open profile file.\n"); exit(1); } prof_file = argv[i] + 8; } else { if (*argv[i] == '-') { fprintf(stderr, "Error: invalid program\n"); usage(); exit(1); } prog_index = i; break; } } if (prog_index == 0) { fprintf(stderr, "Error : program and arguments required\n"); usage(); if (prof_file) { fclose(fp); int rv = unlink(prof_file); (void) rv; } exit(1); } build_profile(argc, argv, prog_index, fp); if (prof_file) fclose(fp); return 0; }