1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
/*
* ld-watch.c
*
* TOMOYO Linux's utilities.
*
* Copyright (C) 2005-2009 NTT DATA CORPORATION
*
* Version: 1.7.0 2009/09/03
*
*/
#include "ccstools.h"
static struct dll_pathname_entry *entry_list = NULL;
static int entry_list_count = 0;
static void update_ld_list(int argc, char *argv[], FILE *fp_policy)
{
struct stat64 buf;
static time_t last_modified = 0;
int i;
char buffer[16384];
FILE *fp_ldconfig;
if (stat64("/etc/ld.so.cache", &buf) || buf.st_mtime == last_modified)
return;
fp_ldconfig = popen("/sbin/ldconfig -NXp", "r");
if (!fp_ldconfig)
goto out;
last_modified = buf.st_mtime;
while (memset(buffer, 0, sizeof(buffer)),
fgets(buffer, sizeof(buffer) - 1, fp_ldconfig)) {
char *cp;
char *pathname;
char *real_pathname;
cp = strchr(buffer, '\n');
if (!cp)
continue;
*cp = '\0';
cp = strrchr(buffer, ' ');
if (!cp || *++cp != '/')
continue;
/* Check for duplicated entries. */
real_pathname = realpath(cp, NULL);
if (!real_pathname)
continue;
for (i = 0; i < entry_list_count; i++) {
if (!strcmp(entry_list[i].real_pathname, real_pathname))
break;
}
if (i < entry_list_count) {
free(real_pathname);
continue;
}
/* Exclude if listed by command line. */
for (i = 1; i < argc; i++) {
if (!strcmp(argv[i], real_pathname) ||
!strcmp(argv[i], cp))
break;
}
if (i < argc) {
printf("Skipped %s : %s\n", cp, real_pathname);
free(real_pathname);
continue;
}
/* Add an entry. */
pathname = strdup(cp);
if (!pathname)
out_of_memory();
entry_list = realloc(entry_list, (entry_list_count + 1) *
sizeof(struct dll_pathname_entry));
if (!entry_list)
out_of_memory();
entry_list[entry_list_count].pathname = pathname;
entry_list[entry_list_count++].real_pathname = real_pathname;
printf("Added %s : %s\n", pathname, real_pathname);
fprintf(fp_policy, KEYWORD_ALLOW_READ);
fprintf_encoded(fp_policy, real_pathname);
fprintf(fp_policy, "\n");
fflush(fp_policy);
}
pclose(fp_ldconfig);
out:
printf("Monitoring %d files.\n", entry_list_count);
}
int ldwatch_main(int argc, char *argv[])
{
FILE *fp_policy;
if (argc > 1 && !strcmp(argv[1], "--help"))
goto usage;
{
const int fd = open(proc_policy_exception_policy, O_RDWR);
if (fd == EOF) {
fprintf(stderr, "You can't run this program "
"for this kernel.\n");
return 1;
} else if (write(fd, "", 0) != 0) {
fprintf(stderr, "You need to register this program to "
"%s to run this program.\n",
proc_policy_manager);
return 1;
}
close(fd);
}
fp_policy = fopen(proc_policy_exception_policy, "w");
if (!fp_policy) {
fprintf(stderr, "Can't open policy file.\n");
exit(1);
}
while (true) {
int i;
update_ld_list(argc, argv, fp_policy);
/* Check entries for update. */
for (i = 0; i < entry_list_count; i++) {
struct dll_pathname_entry *ptr = &entry_list[i];
char *real_pathname = realpath(ptr->pathname, NULL);
if (real_pathname &&
strcmp(ptr->real_pathname, real_pathname)) {
printf("Changed %s : %s -> %s\n",
ptr->pathname, ptr->real_pathname,
real_pathname);
fprintf(fp_policy, KEYWORD_ALLOW_READ);
fprintf_encoded(fp_policy, real_pathname);
fprintf(fp_policy, "\n");
fflush(fp_policy);
free(ptr->real_pathname);
ptr->real_pathname = real_pathname;
real_pathname = NULL;
}
free(real_pathname);
}
sleep(1);
}
fclose(fp_policy);
return 0;
usage:
printf("Usage: %s file_to_exclude1 [file_to_exclude2 [...]]\n\n",
argv[0]);
printf("This program automatically registers files shown by "
"'ldconfig -NXp' as globally readable files.\n");
printf("This program registers all files shown by 'ldconfig -NXp' "
"by default, but you can specify files that you don't want to "
"register by command line.\n");
printf("For example, if you invoke\n");
printf(" %s /lib/libcustom-1.0.0.so /lib/libcustom.so.1\n", argv[0]);
printf("then, /lib/libcustom-1.0.0.so and /lib/libcustom.so.1 will be "
"excluded from the result of 'ldconfig -NXp'.\n\n");
printf("Start this program in one window, then update packages in "
"another window.\n");
printf("After you finished updating, wait for several seconds and "
"terminate this program with 'Ctrl-C'.\n");
return 0;
}
|
