[apple/launchd.git] / launchd / src / launchproxy.c

/*
 * Copyright (c) 2005 Apple Computer, Inc. All rights reserved.
 *
 * @APPLE_APACHE_LICENSE_HEADER_START@
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *     http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * 
 * @APPLE_APACHE_LICENSE_HEADER_END@
 */
#include "config.h"
#if HAVE_SECURITY
#include <Security/Authorization.h>
#include <Security/AuthorizationTags.h>
#include <Security/AuthSession.h>
#endif
#include <sys/types.h>
#include <sys/select.h>
#include <sys/event.h>
#include <sys/socket.h>
#include <sys/time.h>
#include <stdio.h>
#include <stdlib.h>
#include <stdbool.h>
#include <unistd.h>
#include <string.h>
#include <errno.h>
#include <fcntl.h>
#include <syslog.h>
#include <libgen.h>
#include <getopt.h>
#include <signal.h>
#include <netdb.h>

#include "launch.h"

#if __GNUC__ >= 4 && HAVE_SECURITY
OSStatus SessionCreate(SessionCreationFlags flags, SessionAttributeBits attributes) __attribute__((weak));
#endif

static int kq = 0;

static void find_fds(launch_data_t o, const char *key __attribute__((unused)), void *context __attribute__((unused)))
{
	struct kevent kev;
	size_t i;
	int fd;

	switch (launch_data_get_type(o)) {
	case LAUNCH_DATA_FD:
		fd = launch_data_get_fd(o);
		if (-1 == fd)
			break;
		fcntl(fd, F_SETFD, 1);
		EV_SET(&kev, fd, EVFILT_READ, EV_ADD, 0, 0, NULL);
		if (kevent(kq, &kev, 1, NULL, 0, NULL) == -1)
			syslog(LOG_DEBUG, "kevent(%d): %m", fd);
		break;
	case LAUNCH_DATA_ARRAY:
		for (i = 0; i < launch_data_array_get_count(o); i++)
			find_fds(launch_data_array_get_index(o, i), NULL, NULL);
		break;
	case LAUNCH_DATA_DICTIONARY:
		launch_data_dict_iterate(o, find_fds, NULL);
		break;
	default:
		break;
	}
}

int main(int argc __attribute__((unused)), char *argv[])
{
	struct timespec timeout = { 10, 0 };
	struct sockaddr_storage ss;
	socklen_t slen = sizeof(ss);
	struct kevent kev;
	int r, ec = EXIT_FAILURE;
	launch_data_t tmp, resp, msg = launch_data_alloc(LAUNCH_DATA_STRING);
	const char *prog = argv[1];
	bool w = false, dupstdout = true, dupstderr = true;

	launch_data_set_string(msg, LAUNCH_KEY_CHECKIN);

	openlog(getprogname(), LOG_PERROR|LOG_PID|LOG_CONS, LOG_LAUNCHD);

	kq = kqueue();

	if ((resp = launch_msg(msg)) == NULL) {
		syslog(LOG_ERR, "launch_msg(%s): %m", LAUNCH_KEY_CHECKIN);
		goto out;
	}

	launch_data_free(msg);

	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_SOCKETS);
	if (tmp) {
		find_fds(tmp, NULL, NULL);
	} else {
		syslog(LOG_ERR, "No FDs found to answer requests on!");
		goto out;
	}

	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_TIMEOUT);
	if (tmp)
		timeout.tv_sec = (int)launch_data_get_integer(tmp);

	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_PROGRAM);
	if (tmp)
		prog = launch_data_get_string(tmp);

	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_INETDCOMPATIBILITY);
	if (tmp) {
		tmp = launch_data_dict_lookup(tmp, LAUNCH_JOBINETDCOMPATIBILITY_WAIT);
		if (tmp)
			w = launch_data_get_bool(tmp);
	}

	if (launch_data_dict_lookup(resp, LAUNCH_JOBKEY_STANDARDOUTPATH))
		dupstdout = false;

	if (launch_data_dict_lookup(resp, LAUNCH_JOBKEY_STANDARDERRORPATH))
		dupstderr = false;

	if (!w)
		signal(SIGCHLD, SIG_IGN);

	for (;;) {
		if ((r = kevent(kq, NULL, 0, &kev, 1, &timeout)) == -1) {
			syslog(LOG_DEBUG, "kevent(): %m");
			goto out;
		} else if (r == 0) {
			ec = EXIT_SUCCESS;
			goto out;
		}

		if (w) {
			dup2(kev.ident, STDIN_FILENO);
			if (dupstdout)
				dup2(kev.ident, STDOUT_FILENO);
			if (dupstderr)
				dup2(kev.ident, STDERR_FILENO);
			execv(prog, argv + 1);
			syslog(LOG_ERR, "execv(): %m");
			exit(EXIT_FAILURE);
		}

		if ((r = accept(kev.ident, (struct sockaddr *)&ss, &slen)) == -1) {
			if (errno == EWOULDBLOCK)
				continue;
			syslog(LOG_DEBUG, "accept(): %m");
			goto out;
		} else {
			char fromhost[NI_MAXHOST];
			char fromport[NI_MAXSERV];
			int gni_r;

			gni_r = getnameinfo((struct sockaddr *)&ss, slen,
					fromhost, sizeof(fromhost),
					fromport, sizeof(fromport),
					NI_NUMERICHOST | NI_NUMERICSERV);

			if (gni_r) {
				syslog(LOG_WARNING, "%s: getnameinfo(): %s", prog, gai_strerror(gni_r));
			} else {
				syslog(LOG_INFO, "%s: Connection from: %s on port: %s", prog, fromhost, fromport);
			}

			switch (fork()) {
			case -1:
				syslog(LOG_WARNING, "fork(): %m");
				goto out;
			case 0:
				break;
			default:
				close(r);
				continue;
			}

			setpgid(0, 0);

#if HAVE_SECURITY
			if ((tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_SESSIONCREATE)) && launch_data_get_bool(tmp)) {
				if (SessionCreate) {
					OSStatus scr = SessionCreate(0, 0);
					if (scr != noErr)
						syslog(LOG_NOTICE, "%s: SessionCreate() failed: %d", prog, scr);
				} else {
					syslog(LOG_NOTICE, "%s: SessionCreate == NULL!", prog);
				}
			}
#endif
			fcntl(r, F_SETFL, 0);
			fcntl(r, F_SETFD, 1);
			dup2(r, STDIN_FILENO);
			if (dupstdout)
				dup2(r, STDOUT_FILENO);
			if (dupstderr)
				dup2(r, STDERR_FILENO);
			signal(SIGCHLD, SIG_DFL);
			execv(prog, argv + 1);
			syslog(LOG_ERR, "execv(): %m");
			exit(EXIT_FAILURE);
		}
	}

out:
	exit(ec);
}
Commit	Line	Data
e91b9f68 A	1	/*
	2	* Copyright (c) 2005 Apple Computer, Inc. All rights reserved.
	3	*
ed34e3c3	4	* @APPLE_APACHE_LICENSE_HEADER_START@
e91b9f68	5	*
ed34e3c3 A	6	* Licensed under the Apache License, Version 2.0 (the "License");
	7	* you may not use this file except in compliance with the License.
	8	* You may obtain a copy of the License at
e91b9f68	9	*
ed34e3c3 A	10	* http://www.apache.org/licenses/LICENSE-2.0
	11	*
	12	* Unless required by applicable law or agreed to in writing, software
	13	* distributed under the License is distributed on an "AS IS" BASIS,
	14	* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	15	* See the License for the specific language governing permissions and
e91b9f68 A	16	* limitations under the License.
e91b9f68 A	17	*
ed34e3c3	18	* @APPLE_APACHE_LICENSE_HEADER_END@
e91b9f68	19	*/
f36da725 A	20	#include "config.h"
f36da725 A	21	#if HAVE_SECURITY
e91b9f68 A	22	#include <Security/Authorization.h>
	23	#include <Security/AuthorizationTags.h>
	24	#include <Security/AuthSession.h>
f36da725	25	#endif
e91b9f68 A	26	#include <sys/types.h>
	27	#include <sys/select.h>
	28	#include <sys/event.h>
	29	#include <sys/socket.h>
	30	#include <sys/time.h>
	31	#include <stdio.h>
	32	#include <stdlib.h>
	33	#include <stdbool.h>
	34	#include <unistd.h>
	35	#include <string.h>
	36	#include <errno.h>
	37	#include <fcntl.h>
	38	#include <syslog.h>
	39	#include <libgen.h>
	40	#include <getopt.h>
	41	#include <signal.h>
	42	#include <netdb.h>
	43
	44	#include "launch.h"
	45
f36da725	46	#if __GNUC__ >= 4 && HAVE_SECURITY
aa59983a A	47	OSStatus SessionCreate(SessionCreationFlags flags, SessionAttributeBits attributes) __attribute__((weak));
	48	#endif
	49
e91b9f68 A	50	static int kq = 0;
	51
	52	static void find_fds(launch_data_t o, const char key __attribute__((unused)), void context __attribute__((unused)))
	53	{
5b0a4722 A	54	struct kevent kev;
5b0a4722 A	55	size_t i;
e91b9f68 A	56	int fd;
e91b9f68 A	57
5b0a4722 A	58	switch (launch_data_get_type(o)) {
5b0a4722 A	59	case LAUNCH_DATA_FD:
e91b9f68 A	60	fd = launch_data_get_fd(o);
	61	if (-1 == fd)
	62	break;
ed34e3c3	63	fcntl(fd, F_SETFD, 1);
e91b9f68	64	EV_SET(&kev, fd, EVFILT_READ, EV_ADD, 0, 0, NULL);
ed34e3c3 A	65	if (kevent(kq, &kev, 1, NULL, 0, NULL) == -1)
ed34e3c3 A	66	syslog(LOG_DEBUG, "kevent(%d): %m", fd);
5b0a4722 A	67	break;
	68	case LAUNCH_DATA_ARRAY:
	69	for (i = 0; i < launch_data_array_get_count(o); i++)
	70	find_fds(launch_data_array_get_index(o, i), NULL, NULL);
	71	break;
	72	case LAUNCH_DATA_DICTIONARY:
	73	launch_data_dict_iterate(o, find_fds, NULL);
	74	break;
	75	default:
	76	break;
	77	}
e91b9f68 A	78	}
	79
	80	int main(int argc __attribute__((unused)), char *argv[])
	81	{
ed34e3c3	82	struct timespec timeout = { 10, 0 };
e91b9f68 A	83	struct sockaddr_storage ss;
	84	socklen_t slen = sizeof(ss);
	85	struct kevent kev;
	86	int r, ec = EXIT_FAILURE;
	87	launch_data_t tmp, resp, msg = launch_data_alloc(LAUNCH_DATA_STRING);
	88	const char *prog = argv[1];
	89	bool w = false, dupstdout = true, dupstderr = true;
	90
	91	launch_data_set_string(msg, LAUNCH_KEY_CHECKIN);
	92
	93	openlog(getprogname(), LOG_PERROR\|LOG_PID\|LOG_CONS, LOG_LAUNCHD);
	94
	95	kq = kqueue();
	96
	97	if ((resp = launch_msg(msg)) == NULL) {
	98	syslog(LOG_ERR, "launch_msg(%s): %m", LAUNCH_KEY_CHECKIN);
	99	goto out;
	100	}
	101
	102	launch_data_free(msg);
	103
	104	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_SOCKETS);
	105	if (tmp) {
	106	find_fds(tmp, NULL, NULL);
	107	} else {
	108	syslog(LOG_ERR, "No FDs found to answer requests on!");
	109	goto out;
	110	}
	111
	112	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_TIMEOUT);
	113	if (tmp)
5b0a4722	114	timeout.tv_sec = (int)launch_data_get_integer(tmp);
e91b9f68 A	115
	116	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_PROGRAM);
	117	if (tmp)
	118	prog = launch_data_get_string(tmp);
	119
	120	tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_INETDCOMPATIBILITY);
	121	if (tmp) {
	122	tmp = launch_data_dict_lookup(tmp, LAUNCH_JOBINETDCOMPATIBILITY_WAIT);
	123	if (tmp)
	124	w = launch_data_get_bool(tmp);
	125	}
	126
	127	if (launch_data_dict_lookup(resp, LAUNCH_JOBKEY_STANDARDOUTPATH))
	128	dupstdout = false;
	129
	130	if (launch_data_dict_lookup(resp, LAUNCH_JOBKEY_STANDARDERRORPATH))
	131	dupstderr = false;
	132
	133	if (!w)
	134	signal(SIGCHLD, SIG_IGN);
	135
	136	for (;;) {
	137	if ((r = kevent(kq, NULL, 0, &kev, 1, &timeout)) == -1) {
	138	syslog(LOG_DEBUG, "kevent(): %m");
	139	goto out;
	140	} else if (r == 0) {
	141	ec = EXIT_SUCCESS;
	142	goto out;
	143	}
	144
	145	if (w) {
ed34e3c3	146	dup2(kev.ident, STDIN_FILENO);
e91b9f68	147	if (dupstdout)
ed34e3c3	148	dup2(kev.ident, STDOUT_FILENO);
e91b9f68	149	if (dupstderr)
ed34e3c3	150	dup2(kev.ident, STDERR_FILENO);
e91b9f68 A	151	execv(prog, argv + 1);
	152	syslog(LOG_ERR, "execv(): %m");
	153	exit(EXIT_FAILURE);
	154	}
	155
	156	if ((r = accept(kev.ident, (struct sockaddr *)&ss, &slen)) == -1) {
	157	if (errno == EWOULDBLOCK)
	158	continue;
	159	syslog(LOG_DEBUG, "accept(): %m");
	160	goto out;
	161	} else {
	162	char fromhost[NI_MAXHOST];
	163	char fromport[NI_MAXSERV];
	164	int gni_r;
	165
	166	gni_r = getnameinfo((struct sockaddr *)&ss, slen,
	167	fromhost, sizeof(fromhost),
	168	fromport, sizeof(fromport),
	169	NI_NUMERICHOST \| NI_NUMERICSERV);
	170
	171	if (gni_r) {
	172	syslog(LOG_WARNING, "%s: getnameinfo(): %s", prog, gai_strerror(gni_r));
	173	} else {
	174	syslog(LOG_INFO, "%s: Connection from: %s on port: %s", prog, fromhost, fromport);
	175	}
	176
	177	switch (fork()) {
	178	case -1:
	179	syslog(LOG_WARNING, "fork(): %m");
	180	goto out;
	181	case 0:
	182	break;
	183	default:
	184	close(r);
	185	continue;
	186	}
	187
5b0a4722 A	188	setpgid(0, 0);
5b0a4722 A	189
f36da725	190	#if HAVE_SECURITY
e91b9f68 A	191	if ((tmp = launch_data_dict_lookup(resp, LAUNCH_JOBKEY_SESSIONCREATE)) && launch_data_get_bool(tmp)) {
	192	if (SessionCreate) {
	193	OSStatus scr = SessionCreate(0, 0);
	194	if (scr != noErr)
	195	syslog(LOG_NOTICE, "%s: SessionCreate() failed: %d", prog, scr);
	196	} else {
	197	syslog(LOG_NOTICE, "%s: SessionCreate == NULL!", prog);
	198	}
	199	}
f36da725	200	#endif
ed34e3c3	201	fcntl(r, F_SETFL, 0);
fe044cc9	202	fcntl(r, F_SETFD, 1);
ed34e3c3	203	dup2(r, STDIN_FILENO);
e91b9f68	204	if (dupstdout)
ed34e3c3	205	dup2(r, STDOUT_FILENO);
e91b9f68	206	if (dupstderr)
ed34e3c3	207	dup2(r, STDERR_FILENO);
e91b9f68 A	208	signal(SIGCHLD, SIG_DFL);
	209	execv(prog, argv + 1);
	210	syslog(LOG_ERR, "execv(): %m");
ed34e3c3	211	exit(EXIT_FAILURE);
e91b9f68 A	212	}
	213	}
	214
	215	out:
	216	exit(ec);
	217	}