FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
rstudio/src/cpp/server/ServerAppArmor.cpp at master · usersbin/rstudio · GitHub
Uh oh!
There was an error while loading.
Please reload this page
.
usersbin
/
rstudio
Public
forked from
rstudio/rstudio
Notifications
You must be signed in to change notification settings
Fork
0
Star
1
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
rstudio
/
src
/
cpp
/
server
/
ServerAppArmor.cpp
Copy path
More file actions
More file actions
Latest commit
History
History
History
102 lines (83 loc) · 2.36 KB
Breadcrumbs
rstudio
/
src
/
cpp
/
server
/
ServerAppArmor.cpp
Copy path
File metadata and controls
102 lines (83 loc) · 2.36 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
/*
* ServerAppArmor.cpp
*
* Copyright (C) 2009-11 by RStudio, Inc.
*
* This program is licensed to you under the terms of version 3 of the
* GNU Affero General Public License. This program is distributed WITHOUT
* ANY EXPRESS OR IMPLIED WARRANTY, INCLUDING THOSE OF NON-INFRINGEMENT,
* MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Please refer to the
* AGPL (http://www.gnu.org/licenses/agpl-3.0.txt) for more details.
*
*/
#
include
"
ServerAppArmor.hpp
"
#
include
<
core/Error.hpp
>
#
include
<
core/Log.hpp
>
#
include
<
core/FilePath.hpp
>
#
include
<
core/Random.hpp
>
#
ifndef
__APPLE__
#
include
<
dlfcn.h
>
#
endif
using
namespace
core
;
namespace
server
{
namespace
app_armor
{
#
ifdef
__APPLE__
Error
enforceRestricted
()
{
return
systemError
(boost::system::errc::not_supported,
ERROR_LOCATION
);
}
#
else
namespace
{
void
addLastDLErrorMessage
(Error* pError)
{
const
char
* msg = ::
dlerror
();
if
(msg !=
NULL
)
pError->
addProperty
(
"
dlerror
"
,
std::string
(msg));
}
}
//
anonymous namespace
Error
enforceRestricted
()
{
//
dynamically load libapparmor
void
* pLibAA = ::
dlopen
(
"
libapparmor.so.1
"
,
RTLD_NOW
);
if
(pLibAA ==
NULL
)
{
Error error =
systemError
(boost::system::errc::no_such_file_or_directory,
ERROR_LOCATION
);
addLastDLErrorMessage
(&error);
return
error;
}
//
lookup the change hat function
typedef
int
(*PtrAAChangeHat)(
const
char
*,
unsigned
long
);
PtrAAChangeHat pChangeHat = (PtrAAChangeHat)::
dlsym
(pLibAA,
"
aa_change_hat
"
);
if
(pChangeHat ==
NULL
)
{
Error error =
systemError
(boost::system::errc::not_supported,
ERROR_LOCATION
);
addLastDLErrorMessage
(&error);
return
error;
}
//
change to restricted
if
(
pChangeHat
(
"
restricted
"
,
0
) == -
1
)
{
//
if this is operation not permitted then simply log a warning
//
(this occurs when the app armor profile is disabled)
if
(errno ==
EPERM
)
{
LOG_WARNING_MESSAGE
(
"
Unable to change rserver into app armor
"
"
restricted hat (profile may be disabled)
"
);
return
Success
();
}
else
{
return
systemError
(errno,
ERROR_LOCATION
);
}
}
else
{
return
Success
();
}
}
#
endif
}
//
namespace app_aprmor
}
//
namespace server
Back
|
FazBrowse Home
|
New Git URL