+++ /dev/null
-/*
- * kipc_client.h
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#ifndef KIPC_CLIENT_H
-#define KIPC_CLIENT_H
-
-#include <Kerberos/kipc_common.h>
-
-#if __cplusplus
-extern "C" {
-#endif
-
-kipc_err_t
-kipc_client_lookup_server (const char *in_service_id,
- boolean_t in_launch_if_necessary,
- mach_port_t *out_service_port);
-
-#if __cplusplus
-}
-#endif
-
-#endif /* KIPC_CLIENT_H */
+++ /dev/null
-/*
- * KerberosIPCCommon.h
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#ifndef KIPC_COMMON_H
-#define KIPC_COMMON_H
-
-//#include <Kerberos/KerberosDebug.h>
-#include <CoreFoundation/CoreFoundation.h>
-#include <mach/mach.h>
-#include <mach/boolean.h>
-#include <mach/mach_error.h>
-#include <mach/notify.h>
-#include <servers/bootstrap.h>
-#include <sys/types.h>
-#include <sys/time.h>
-#include <sys/resource.h>
-#include <sys/wait.h>
-#include <sys/param.h>
-#include <unistd.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <errno.h>
-
-
-#if __cplusplus
-extern "C" {
-#endif
-
-typedef kern_return_t kipc_err_t;
-typedef boolean_t kipc_boolean_t;
-typedef char *kipc_string;
-
-#define kkipc_max_message_size 2048 + MAX_TRAILER_SIZE
-#define kkipc_timeout 200
-
-// Debugging API used by library
-kipc_err_t __kipc_err (kipc_err_t inError, const char *function, const char *file, int line);
-#define kipc_err(err) __kipc_err(err, __FUNCTION__, __FILE__, __LINE__)
-
-const char *kipc_error_string (kipc_err_t in_error);
-
-kipc_err_t kipc_get_lookup_name (char **out_lookup_name, const char *in_service_id);
-kipc_err_t kipc_get_service_name (char **out_service_name, const char *in_service_id);
-
-void kipc_free_string (char *io_string);
-
-#if __cplusplus
-}
-#endif
-
-#endif /* KIPC_COMMON_H */
+++ /dev/null
-/*
- * kipc_server.h
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#ifndef KIPC_SERVER_H
-#define KIPC_SERVER_H
-
-#include <Kerberos/kipc_common.h>
-
-#define kKerberosIPCMaxMsgSize 2048 + MAX_TRAILER_SIZE
-#define kKerberosIPCTimeout 200
-
-#if __cplusplus
-extern "C" {
-#endif
-
-typedef kipc_boolean_t (*kipc_demux_proc) (mach_msg_header_t *, mach_msg_header_t *);
-
-
-kipc_err_t kipc_server_run_server (kipc_demux_proc in_demux_proc);
-
-mach_port_t kipc_server_get_service_port ();
-
-kipc_boolean_t kipc_server_quit (void);
-
-#if __cplusplus
-}
-#endif
-
-#endif /* KIPC_SERVER_H */
+++ /dev/null
-/*
- * kipc_session.h
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#ifndef KIPC_SESSION_H
-#define KIPC_SESSION_H
-
-#include <Kerberos/kipc_common.h>
-
-#if __cplusplus
-extern "C" {
-#endif
-
-#define kkipc_session_has_gui_access 0x00000001
-#define kkipc_session_caller_uses_gui 0x00000002
-#define kkipc_session_has_cli_access 0x00000004
-
-typedef u_int32_t kipc_session_attributes_t;
-
-
-kipc_boolean_t kipc_session_is_root_session (void);
-
-kipc_session_attributes_t kipc_session_get_attributes (void);
-
-kipc_string kipc_get_session_id_string (void);
-
-uid_t kipc_session_get_session_uid (void);
-
-uid_t kipc_session_get_server_uid (void);
-
-#if __cplusplus
-}
-#endif
-
-#endif /* KIPC_SESSION_H */
+++ /dev/null
-This is a temporary copy of the KfM KerberosIPC library sources.
-Once this gets merged onto the trunk the KfM build will use the
-KerberosIPC library instead.
+++ /dev/null
-/*
- * kipc_client.c
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#include <Kerberos/kipc_client.h>
-
-// ---------------------------------------------------------------------------
-
-kipc_err_t
-kipc_client_lookup_server (const char *in_service_id,
- boolean_t in_launch_if_necessary,
- mach_port_t *out_service_port)
-{
- kipc_err_t err = 0;
- mach_port_t boot_port = MACH_PORT_NULL;
- char *service_name = NULL;
-
- if (in_service_id == NULL) { err = kipc_err (EINVAL); }
- if (out_service_port == NULL) { err = kipc_err (EINVAL); }
-
- if (!err) {
- // Get our bootstrap port
- err = task_get_bootstrap_port (mach_task_self (), &boot_port);
- }
-
- if (!err && !in_launch_if_necessary) {
- char *lookup_name = NULL;
- mach_port_t lookup_port = MACH_PORT_NULL;
-
- err = kipc_get_lookup_name (&lookup_name, in_service_id);
-
- if (!err) {
- // Use the lookup name because the service name will return
- // a valid port even if the server isn't running
- err = bootstrap_look_up (boot_port, lookup_name, &lookup_port);
- //dprintf ("%s(): bootstrap_look_up('%s'): port is %x (err = %d '%s')",
- // __FUNCTION__, lookup_name, lookup_port, err, mach_error_string (err));
- }
-
- if (lookup_name != NULL ) { kipc_free_string (lookup_name); }
- if (lookup_port != MACH_PORT_NULL) { mach_port_deallocate (mach_task_self (), lookup_port); }
- }
-
- if (!err) {
- err = kipc_get_service_name (&service_name, in_service_id);
- }
-
- if (!err) {
- err = bootstrap_look_up (boot_port, service_name, out_service_port);
- //dprintf ("%s(): bootstrap_look_up('%s'): port is %x (err = %d '%s')",
- // __FUNCTION__, service_name, *out_service_port, err, mach_error_string (err));
- }
-
- if (service_name != NULL ) { kipc_free_string (service_name); }
- if (boot_port != MACH_PORT_NULL) { mach_port_deallocate (mach_task_self (), boot_port); }
-
- if (err == BOOTSTRAP_UNKNOWN_SERVICE) {
- return err; // Avoid spewing to the log file
- } else {
- return kipc_err (err);
- }
-}
+++ /dev/null
-/*
- * kipc_common.c
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#include <Kerberos/kipc_common.h>
-#include <Kerberos/kipc_session.h>
-
-
-// ---------------------------------------------------------------------------
-
-kipc_err_t __kipc_err (kipc_err_t in_error, const char *in_function, const char *in_file, int in_line)
-{
- if (in_error && (ddebuglevel () > 0)) {
- dprintf ("%s() got %d ('%s') at %s: %d",
- in_function, in_error, mach_error_string (in_error), in_file, in_line);
- dprintsession ();
- //dprintbootstrap (mach_task_self ());
- }
- return in_error;
-}
-// ---------------------------------------------------------------------------
-
-
-const char *kipc_error_string (kipc_err_t in_error)
-{
- return mach_error_string (in_error);
-}
-
-// ---------------------------------------------------------------------------
-
-kipc_err_t kipc_get_service_name (char **out_service_name, const char *in_service_id)
-{
- kipc_err_t err = 0;
-
- if (out_service_name == NULL) { err = EINVAL; }
- if (in_service_id == NULL) { err = EINVAL; }
-
- if (!err) {
- int wrote = asprintf (out_service_name, "%s%s", in_service_id, ".ipcService");
- if (wrote < 0) { err = ENOMEM; }
- }
-
- return kipc_err (err);
-}
-
-// ---------------------------------------------------------------------------
-
-kipc_err_t kipc_get_lookup_name (char **out_lookup_name, const char *in_service_id)
-{
- kipc_err_t err = 0;
-
- if (out_lookup_name == NULL) { err = EINVAL; }
- if (in_service_id == NULL) { err = EINVAL; }
-
- if (!err) {
- int wrote = asprintf (out_lookup_name, "%s%s", in_service_id, ".ipcLookup");
- if (wrote < 0) { err = ENOMEM; }
- }
-
- return kipc_err (err);
-}
-
-// ---------------------------------------------------------------------------
-
-void kipc_free_string (char *io_string)
-{
- free (io_string);
-}
-
+++ /dev/null
-/*
- * kipc_server.c
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#include <Kerberos/kipc_server.h>
-#include <Kerberos/kipc_session.h>
-#include "notifyServer.h"
-
-// Global variables for servers (used by demux)
-static mach_port_t g_service_port = MACH_PORT_NULL;
-static kipc_boolean_t g_ready_to_quit = FALSE;
-static kipc_demux_proc g_demux_proc = NULL;
-
-#pragma mark -
-
-// ---------------------------------------------------------------------------
-
-mach_port_t
-kipc_server_get_service_port ()
-{
- return g_service_port;
-}
-
-#pragma mark -
-
-// ---------------------------------------------------------------------------
-
-kipc_boolean_t
-kipc_server_quit (void)
-{
- // Do not unregister our port because then we won't get automatically launched again.
- dprintf ("mach_server_quit_self(): quitting...");
- g_ready_to_quit = true;
- return g_ready_to_quit;
-}
-
-#pragma mark -
-
-// ---------------------------------------------------------------------------
-
-static kipc_boolean_t
-kipc_server_demux (mach_msg_header_t *request, mach_msg_header_t *reply)
-{
- if (mach_notify_server (request, reply) != false) {
- return true;
- } else {
- return g_demux_proc (request, reply);
- }
- return false;
-}
-
-#pragma mark -
-
-// ---------------------------------------------------------------------------
-
-static kipc_err_t
-kipc_get_server_id (char **out_server_id)
-{
- kern_return_t err = KERN_SUCCESS;
- CFBundleRef bundle = NULL;
- CFStringRef id_string = NULL;
- CFIndex id_length = 0;
- char *server_id = NULL;
-
- if (out_server_id == NULL) { err = kipc_err (EINVAL); }
-
- if (!err) {
- bundle = CFBundleGetMainBundle ();
- if (bundle == NULL) { err = ENOENT; }
- }
-
- if (!err) {
- id_string = CFBundleGetIdentifier (bundle);
- if (id_string == NULL) { err = ENOMEM; }
- }
-
- if (!err) {
- id_length = CFStringGetMaximumSizeForEncoding (CFStringGetLength (id_string),
- CFStringGetSystemEncoding ()) + 1;
- server_id = calloc (id_length, sizeof (char));
- if (server_id == NULL) { err = errno; }
- }
-
- if (!err) {
- if (!CFStringGetCString (id_string, server_id, id_length, CFStringGetSystemEncoding ())) {
- err = ENOMEM;
- }
- }
-
- if (!err) {
- *out_server_id = server_id;
- server_id = NULL;
- }
-
- if (server_id != NULL) { kipc_free_string (server_id); }
-
- return kipc_err (err);
-}
-
-// ---------------------------------------------------------------------------
-
-kipc_err_t
-kipc_server_run_server (kipc_demux_proc in_demux_proc)
-{
- kern_return_t err = KERN_SUCCESS;
- char *server_id = NULL;
- char *service_name = NULL;
- char *lookup_name = NULL;
- mach_port_t boot_port = MACH_PORT_NULL;
- mach_port_t lookup_port = MACH_PORT_NULL;
- mach_port_t notify_port = MACH_PORT_NULL;
- mach_port_t previous_notify_port = MACH_PORT_NULL;
- mach_port_t listen_port_set = MACH_PORT_NULL;
-
- if (in_demux_proc == NULL) { err = kipc_err (EINVAL); }
-
- // Shed root privileges if any
- if (!err && (geteuid () == 0)) {
- uid_t new_uid = kipc_session_get_server_uid ();
- if (setuid (new_uid) < 0) {
- dprintf ("%s(): setuid(%d) failed (euid is %d)", __FUNCTION__, new_uid, geteuid ());
- }
- }
-
- if (!err) {
- // Set up the globals so the demux can find them
- g_demux_proc = in_demux_proc;
- }
-
- if (!err) {
- err = kipc_get_server_id (&server_id);
- }
-
- if (!err) {
- err = kipc_get_service_name (&service_name, server_id);
- }
-
- if (!err) {
- err = kipc_get_lookup_name (&lookup_name, server_id);
- }
-
- if (!err) {
- // Get the bootstrap port
- err = task_get_bootstrap_port (mach_task_self (), &boot_port);
- dprintf ("%s(): task_get_bootstrap_port(): port is %x (err = %d '%s')",
- __FUNCTION__, boot_port, err, mach_error_string (err));
- }
-
- if (!err) {
- // Create the lookup port:
- err = mach_port_allocate (mach_task_self (), MACH_PORT_RIGHT_RECEIVE, &lookup_port);
- }
-
- if (!err) {
- err = mach_port_insert_right (mach_task_self (), lookup_port, lookup_port, MACH_MSG_TYPE_MAKE_SEND);
- }
-
- if (!err) {
- // Register the lookup port so others can tell whether or not we are running
- err = bootstrap_register (boot_port, lookup_name, lookup_port);
- dprintf ("%s(): bootstrap_register('%s', %x): (err = %d '%s')",
- __FUNCTION__, lookup_name, lookup_port, err, mach_error_string (err));
- }
-
- if (!err) {
- // We are an on-demand server so our port already exists. Just ask for it.
- err = bootstrap_check_in (boot_port, (char *) service_name, &g_service_port);
- dprintf ("%s(): bootstrap_check_in('%s'): port is %d (err = %d '%s')",
- __FUNCTION__, service_name, g_service_port, err, mach_error_string (err));
- }
-
- if (!err) {
- // Create the notification port:
- err = mach_port_allocate (mach_task_self (), MACH_PORT_RIGHT_RECEIVE, ¬ify_port);
- }
-
- if (!err) {
- // Ask for notification when the server port has no more senders
- // A send-once right != a send right so our send-once right will not interfere with the notification
- err = mach_port_request_notification (mach_task_self (), g_service_port, MACH_NOTIFY_NO_SENDERS, true,
- notify_port, MACH_MSG_TYPE_MAKE_SEND_ONCE, &previous_notify_port);
- dprintf ("%s(): requesting notification for no senders of %x returned '%s', err = %d\n",
- __FUNCTION__, g_service_port, mach_error_string (err), err);
- }
-
- if (!err) {
- // Create the port set that the server will listen on
- err = mach_port_allocate (mach_task_self (), MACH_PORT_RIGHT_PORT_SET, &listen_port_set);
- }
-
- if (!err) {
- // Add the service port to the port set
- err = mach_port_move_member (mach_task_self (), g_service_port, listen_port_set);
- }
-
- if (!err) {
- // Add the notify port to the port set
- err = mach_port_move_member (mach_task_self (), notify_port, listen_port_set);
- }
-
- if (!err) {
- dprintf ("%s(): \"%s\": starting up. service port = %x, bootstrap port = %x\n",
- __FUNCTION__, service_name, g_service_port, boot_port);
- }
-
- while (!err && !g_ready_to_quit) {
- // Handle one message at a time so we can check to see if the server wants to quit
- err = mach_msg_server_once (kipc_server_demux, kkipc_max_message_size, listen_port_set, MACH_MSG_OPTION_NONE);
- }
-
- // Regardless of whether there was an error, unregister ourselves from no senders notifications
- // so we don't get launched again by the notification message when we quit
- // A send-once right != a send right so our send-once right will not interfere with the notification
- if (g_service_port != MACH_PORT_NULL) {
- err = mach_port_request_notification (mach_task_self (), g_service_port, MACH_NOTIFY_NO_SENDERS,
- true, MACH_PORT_NULL, MACH_MSG_TYPE_MAKE_SEND_ONCE,
- &previous_notify_port);
- dprintf ("%s(): removing notification for no senders of %x returned '%s', err = %d\n",
- __FUNCTION__, previous_notify_port, mach_error_string (err), err);
- }
-
- // Clean up the ports and strings
- if (lookup_port != MACH_PORT_NULL) {
- kipc_err_t terr = bootstrap_register (boot_port, lookup_name, MACH_PORT_NULL);
- dprintf ("%s(): bootstrap_register('%s', MACH_PORT_NULL): (err = %d '%s')",
- __FUNCTION__, lookup_name, terr, mach_error_string (terr));
- mach_port_deallocate (mach_task_self (), lookup_port);
- }
- if (notify_port != MACH_PORT_NULL) { mach_port_deallocate (mach_task_self (), notify_port); }
- if (listen_port_set != MACH_PORT_NULL) { mach_port_deallocate (mach_task_self (), listen_port_set); }
- if (boot_port != MACH_PORT_NULL) { mach_port_deallocate (mach_task_self (), boot_port); }
- if (lookup_name != NULL ) { kipc_free_string (lookup_name); }
- if (service_name != NULL ) { kipc_free_string (service_name); }
- if (server_id != NULL ) { kipc_free_string (server_id); }
-
- return kipc_err (err);
-}
-
-#pragma mark -
-
-// ---------------------------------------------------------------------------
-
-kern_return_t
-do_mach_notify_port_deleted (mach_port_t notify, mach_port_name_t name)
-{
- dprintf ("Received MACH_NOTIFY_PORT_DELETED... quitting self");
- kipc_server_quit ();
- return KERN_SUCCESS;
-}
-
-// ---------------------------------------------------------------------------
-
-kern_return_t
-do_mach_notify_port_destroyed (mach_port_t notify, mach_port_t rights)
-{
- dprintf ("Received MACH_NOTIFY_PORT_DESTROYED... quitting self");
- kipc_server_quit ();
- return KERN_SUCCESS;
-}
-
-// ---------------------------------------------------------------------------
-
-kern_return_t
-do_mach_notify_no_senders (mach_port_t notify, mach_port_mscount_t mscount)
-{
- dprintf ("Received MACH_NOTIFY_NO_SENDERS... quitting self");
- kipc_server_quit ();
- return KERN_SUCCESS;
-}
-
-// ---------------------------------------------------------------------------
-
-kern_return_t
-do_mach_notify_send_once (mach_port_t notify)
-{
- dprintf ("Received MACH_NOTIFY_SEND_ONCE");
- return KERN_SUCCESS;
-}
-
-// ---------------------------------------------------------------------------
-
-kern_return_t
-do_mach_notify_dead_name (mach_port_t notify, mach_port_name_t name)
-{
- dprintf ("Received MACH_NOTIFY_DEAD_NAME... quitting self");
- kipc_server_quit ();
- return KERN_SUCCESS;
-}
-
+++ /dev/null
-/*
- * kipc_session.c
- *
- * $Header$
- *
- * Copyright 2006 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-#include <Security/AuthSession.h>
-#include <pwd.h>
-#include <Kerberos/kipc_session.h>
-
-// ---------------------------------------------------------------------------
-
-kipc_boolean_t kipc_session_is_root_session (void)
-{
- kipc_err_t err = 0;
- kipc_boolean_t is_root_session = TRUE; // safer to assume root session
- SessionAttributeBits sattrs = 0L;
-
- err = SessionGetInfo (callerSecuritySession, NULL, &sattrs);
-
- if (!err) {
- is_root_session = (sattrs & sessionIsRoot);
- dprintf ("%s(): running in %s session",
- __FUNCTION__, is_root_session ? "the root" : "a user");
- } else {
- dprintf ("%s(): SessionGetInfo() failed with %d", __FUNCTION__, err);
- }
-
- return is_root_session;
-}
-
-// ---------------------------------------------------------------------------
-
-kipc_session_attributes_t kipc_session_get_attributes (void)
-{
- kipc_session_attributes_t attributes = 0L;
- SessionAttributeBits sattrs = 0L;
- int fd_stdin = fileno (stdin);
- int fd_stdout = fileno (stdout);
- char *fd_stdin_name = ttyname (fd_stdin);
-
- if ((SessionGetInfo (callerSecuritySession, NULL, &sattrs) == noErr) && (sattrs & sessionHasGraphicAccess)) {
- dprintf ("%s(): Session has graphic access.", __FUNCTION__);
- attributes |= kkipc_session_has_gui_access;
-
- // Check for the HIToolbox (Carbon) or AppKit (Cocoa). If either is loaded, we are a GUI app!
- CFBundleRef hiToolBoxBundle = CFBundleGetBundleWithIdentifier (CFSTR ("com.apple.HIToolbox"));
- if (hiToolBoxBundle != NULL && CFBundleIsExecutableLoaded (hiToolBoxBundle)) {
- dprintf ("%s(): Carbon Toolbox is loaded.", __FUNCTION__);
- attributes |= kkipc_session_caller_uses_gui;
- }
-
- CFBundleRef appKitBundle = CFBundleGetBundleWithIdentifier (CFSTR ("com.apple.AppKit"));
- if (appKitBundle != NULL && CFBundleIsExecutableLoaded (appKitBundle)) {
- dprintf ("%s(): AppKit is loaded.", __FUNCTION__);
- attributes |= kkipc_session_caller_uses_gui;
- }
- }
-
- // Session info isn't reliable for remote sessions.
- // Check manually for terminal access with file descriptors
- if (isatty (fd_stdin) && isatty (fd_stdout) && (fd_stdin_name != NULL)) {
- dprintf ("%s(): Terminal '%s' of type '%s' exists.",
- __FUNCTION__, fd_stdin_name, getenv ("TERM"));
- attributes |= kkipc_session_has_cli_access;
- }
-
- dprintf ("%s(): Attributes are %x", __FUNCTION__, attributes);
- return attributes;
-}
-
-// ---------------------------------------------------------------------------
-
-kipc_string kipc_get_session_id_string (void)
-{
- // Session ID is a 32 bit quanitity, so the longest string is 0xFFFFFFFF
- static char s_session_name[16];
- SecuritySessionId id;
-
- s_session_name[0] = '\0';
-
- if (SessionGetInfo (callerSecuritySession, &id, NULL) == noErr) {
- snprintf (s_session_name, sizeof (s_session_name), "0x%lx", id);
- }
-
- return s_session_name;
-}
-
-// ---------------------------------------------------------------------------
-
-uid_t kipc_session_get_session_uid (void)
-{
- // Get the uid of the user that the server will be run and named for.
- uid_t uid = geteuid ();
-
- // Avoid root because the client can later go back to the real uid
- if (uid == 0 /* root */) {
- dprintf ("%s(): geteuid returned UID %d, trying getuid...\n", __FUNCTION__, uid);
- uid = getuid ();
- }
-
- return uid;
-}
-
-// ---------------------------------------------------------------------------
-
-uid_t kipc_session_get_server_uid (void)
-{
- uid_t server_uid = 92;
-
- struct passwd *pw = getpwnam ("securityagent");
- if (pw != NULL) {
- server_uid = pw->pw_uid;
- } else {
- dprintf ("%s: getpwnam(securityagent) failed, using hardcoded value.", __FUNCTION__);
- }
-
- return server_uid;
-}
+++ /dev/null
-/*
- * mach_notify.defs
- *
- * $Header$
- *
- * Copyright 2003 Massachusetts Institute of Technology.
- * All Rights Reserved.
- *
- * Export of this software from the United States of America may
- * require a specific license from the United States Government.
- * It is the responsibility of any person or organization contemplating
- * export to obtain such a license before exporting.
- *
- * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
- * distribute this software and its documentation for any purpose and
- * without fee is hereby granted, provided that the above copyright
- * notice appear in all copies and that both that copyright notice and
- * this permission notice appear in supporting documentation, and that
- * the name of M.I.T. not be used in advertising or publicity pertaining
- * to distribution of the software without specific, written prior
- * permission. Furthermore if you modify this software you must label
- * your software as modified software and not distribute it in such a
- * fashion that it might be confused with the original M.I.T. software.
- * M.I.T. makes no representations about the suitability of
- * this software for any purpose. It is provided "as is" without express
- * or implied warranty.
- */
-
-/*
- * This is totally disgusting.
- * Rename the demux function so we don't collide with other libraries using this.
- */
-
-#define notify_server mach_notify_server
-
-#include <mach/notify.defs>
projects / krb5.git / commitdiff