githubmirror/dbus-broker

src/launch/config.h
265 строк8 KB
David Rheinsberg
dbus-broker: switch to c-stdaux
09 апр 2019, 17:01
09 апр 2019, 17:016a35f0e
#pragma once

/*
 * D-Bus XML Config Parser
 */

#include <c-list.h>
#include <c-stdaux.h>
#include <expat.h>
#include <stdlib.h>

typedef struct ConfigPath ConfigPath;
typedef struct ConfigNode ConfigNode;
typedef struct ConfigParser ConfigParser;
typedef struct ConfigRoot ConfigRoot;
typedef struct ConfigState ConfigState;
typedef struct Dirwatch Dirwatch;
typedef struct NSSCache NSSCache;

#define CONFIG_PARSER_BUFFER_MAX 4096

enum {
        _CONFIG_E_SUCCESS,

        CONFIG_E_INVALID,
};

enum {
        CONFIG_NODE_NONE,

        CONFIG_NODE_BUSCONFIG,
        CONFIG_NODE_USER,
        CONFIG_NODE_TYPE,
        CONFIG_NODE_FORK,
        CONFIG_NODE_SYSLOG,
        CONFIG_NODE_KEEP_UMASK,
        CONFIG_NODE_LISTEN,
        CONFIG_NODE_PIDFILE,
        CONFIG_NODE_INCLUDEDIR,
        CONFIG_NODE_STANDARD_SESSION_SERVICEDIRS,
        CONFIG_NODE_STANDARD_SYSTEM_SERVICEDIRS,
        CONFIG_NODE_SERVICEDIR,
        CONFIG_NODE_SERVICEHELPER,
        CONFIG_NODE_AUTH,
        CONFIG_NODE_INCLUDE,
        CONFIG_NODE_POLICY,
        CONFIG_NODE_LIMIT,
        CONFIG_NODE_SELINUX,
        CONFIG_NODE_APPARMOR,
        CONFIG_NODE_ALLOW,
        CONFIG_NODE_DENY,
        CONFIG_NODE_ASSOCIATE,

        _CONFIG_NODE_N,
};

enum {
        CONFIG_POLICY_NONE,

        CONFIG_POLICY_DEFAULT,
        CONFIG_POLICY_GROUP,
        CONFIG_POLICY_USER,
        CONFIG_POLICY_AT_CONSOLE,
        CONFIG_POLICY_NO_CONSOLE,
        CONFIG_POLICY_MANDATORY,

        _CONFIG_POLICY_N,
};

enum {
        _CONFIG_LIMIT_INVALID = 0,

        CONFIG_LIMIT_MAX_INCOMING_BYTES,
        CONFIG_LIMIT_MAX_INCOMING_UNIX_FDS,
        CONFIG_LIMIT_MAX_OUTGOING_BYTES,
        CONFIG_LIMIT_MAX_OUTGOING_UNIX_FDS,
        CONFIG_LIMIT_MAX_MESSAGE_SIZE,
        CONFIG_LIMIT_MAX_MESSAGE_UNIX_FDS,
        CONFIG_LIMIT_SERVICE_START_TIMEOUT,
        CONFIG_LIMIT_AUTH_TIMEOUT,
        CONFIG_LIMIT_PENDING_FD_TIMEOUT,
        CONFIG_LIMIT_MAX_COMPLETED_CONNECTIONS,
        CONFIG_LIMIT_MAX_INCOMPLETE_CONNECTIONS,
        CONFIG_LIMIT_MAX_CONNECTIONS_PER_USER,
        CONFIG_LIMIT_MAX_PENDING_SERVICE_STARTS,
        CONFIG_LIMIT_MAX_NAMES_PER_CONNECTION,
        CONFIG_LIMIT_MAX_MATCH_RULES_PER_CONNECTION,
        CONFIG_LIMIT_MAX_REPLIES_PER_CONNECTION,
        CONFIG_LIMIT_MAX_CONTAINERS_PER_USER,
        CONFIG_LIMIT_MAX_CONTAINERS,
        CONFIG_LIMIT_MAX_CONNECTIONS_PER_CONTAINER,
        CONFIG_LIMIT_MAX_CONTAINER_METADATA_BYTES,
        CONFIG_LIMIT_REPLY_TIMEOUT,
};

enum {
        CONFIG_APPARMOR_ENABLED,
        CONFIG_APPARMOR_DISABLED,
        CONFIG_APPARMOR_REQUIRED,
};

struct ConfigPath {
        unsigned long n_refs;
        ConfigPath *parent;
        bool is_dir;
        char path[];
};

#define CONFIG_FILE_NULL(_x) {                                                  \
                .n_refs = 1,                                                    \
        }

struct ConfigNode {
        CList root_link;
        CList include_link;
        ConfigNode *parent;
        size_t n_children;

        ConfigPath *path;
        const char *file;
        unsigned long lineno;

        char *cdata;
        size_t n_cdata;

        unsigned int type;

        union {
                struct {
                        uint32_t uid;
                        uint32_t gid;
                        bool valid : 1;
                } user;

                struct {
                        ConfigPath *dir;
                } includedir;

                struct {
                        ConfigPath *file;
                        bool ignore_missing : 1;
                        bool if_selinux_enabled : 1;
                        bool selinux_root_relative : 1;
                } include;

                struct {
                        char *path;
                } servicedir;

                struct {
                        unsigned int context;
                        uint32_t id;
                } policy;

                struct {
                        unsigned int name;
                        uint64_t value;
                } limit;

                struct {
                        unsigned int mode;
                } apparmor;

                struct {
                        char *send_interface;
                        char *send_member;
                        char *send_error;
                        char *send_destination;
                        char *send_path;
                        unsigned int send_type;
                        unsigned int send_broadcast;
                        char *recv_interface;
                        char *recv_member;
                        char *recv_error;
                        char *recv_sender;
                        char *recv_path;
                        unsigned int recv_type;
                        uint64_t min_fds;
                        uint64_t max_fds;
                        char *own;
                        char *own_prefix;
                        uint32_t uid;
                        uint32_t gid;
                        unsigned int send_requested_reply : 2;
                        unsigned int recv_requested_reply : 2;
                        unsigned int eavesdrop : 2;
                        bool user : 1;
                        bool group : 1;
                        bool log : 1;
                } allow_deny;

                struct {
                        char *own;
                        char *context;
                } associate;
        };
};

#define CONFIG_NODE_NULL(_x) {                                                  \
                .root_link = C_LIST_INIT((_x).root_link),                       \
                .include_link = C_LIST_INIT((_x).include_link),                 \
                .file = "<unknown>",                                            \
                .type = CONFIG_NODE_NONE,                                       \
        }

struct ConfigRoot {
        CList node_list;
        CList include_list;
};

#define CONFIG_ROOT_NULL(_x) {                                                  \
                .node_list = C_LIST_INIT((_x).node_list),                       \
                .include_list = C_LIST_INIT((_x).include_list),                 \
        }

struct ConfigParser {
        XML_Parser xml;

        struct ConfigState {
                NSSCache *nss;
                Dirwatch *dirwatch;
                ConfigPath *file;
                ConfigRoot *root;
                ConfigNode *current;
                ConfigNode *last;
                size_t n_depth;
                size_t n_failed;
                int error;
        } state;
};

#define CONFIG_PARSER_NULL(_x) {                                                \
                .xml = NULL,                                                    \
        }

/* files */

int config_path_new(ConfigPath **filep, ConfigPath *parent, const char *prefix, const char *path);
ConfigPath *config_path_ref(ConfigPath *file);
ConfigPath *config_path_unref(ConfigPath *file);

C_DEFINE_CLEANUP(ConfigPath *, config_path_unref);

/* nodes */

int config_node_new(ConfigNode **nodep, ConfigNode *parent, unsigned int type);
ConfigNode *config_node_free(ConfigNode *node);

C_DEFINE_CLEANUP(ConfigNode *, config_node_free);

/* roots */

int config_root_new(ConfigRoot **rootp);
ConfigRoot *config_root_free(ConfigRoot *root);

C_DEFINE_CLEANUP(ConfigRoot *, config_root_free);

/* parser */

void config_parser_init(ConfigParser *parser);
void config_parser_deinit(ConfigParser *parser);

int config_parser_read(ConfigParser *parser, ConfigRoot **rootp, const char *path, NSSCache *nss_cache, Dirwatch *dirwatch);

C_DEFINE_CLEANUP(ConfigParser *, config_parser_deinit);