1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
/*
* Copyright (c) 1997,2007 Andrew G. Morgan <morgan@kernel.org>
*
* This displays the capabilities of a given file.
*/
#undef _XOPEN_SOURCE
#define _XOPEN_SOURCE 500
#include <errno.h>
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <dirent.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <sys/capability.h>
#include <ftw.h>
static int verbose = 0;
static int recursive = 0;
static int namespace = 0;
static void usage(int code)
{
fprintf(stderr,
"usage: getcap [-h] [-l] [-n] [-r] [-v] <filename> [<filename> ...]\n"
"\n"
"\tdisplays the capabilities on the queried file(s).\n"
);
exit(code);
}
static int do_getcap(const char *fname, const struct stat *stbuf,
int tflag, struct FTW* ftwbuf)
{
cap_t cap_d;
char *result;
uid_t rootid;
if (tflag != FTW_F) {
if (verbose) {
printf("%s (Not a regular file)\n", fname);
}
return 0;
}
cap_d = cap_get_file(fname);
if (cap_d == NULL) {
if (errno != ENODATA && errno != ENOTSUP) {
fprintf(stderr, "Failed to get capabilities of file '%s' (%s)\n",
fname, strerror(errno));
} else if (verbose) {
printf("%s\n", fname);
}
return 0;
}
result = cap_to_text(cap_d, NULL);
if (!result) {
fprintf(stderr,
"Failed to get capabilities of human readable format at '%s' (%s)\n",
fname, strerror(errno));
cap_free(cap_d);
return 0;
}
rootid = cap_get_nsowner(cap_d);
if (namespace && (rootid+1 > 1)) {
printf("%s %s [rootid=%d]\n", fname, result, rootid);
} else {
printf("%s %s\n", fname, result);
}
cap_free(cap_d);
cap_free(result);
return 0;
}
int main(int argc, char **argv)
{
int i, c;
while ((c = getopt(argc, argv, "rvhnl")) > 0) {
switch(c) {
case 'r':
recursive = 1;
break;
case 'v':
verbose = 1;
break;
case 'n':
namespace = 1;
break;
case 'h':
usage(0);
case 'l':
printf("%s see LICENSE file for details.\n"
"Copyright (c) 1997,2007,2021 Andrew G. Morgan"
" <morgan@kernel.org>\n", argv[0]);
exit(0);
default:
usage(1);
}
}
if (!argv[optind])
usage(1);
for (i=optind; argv[i] != NULL; i++) {
struct stat stbuf;
char *arg = argv[i];
if (lstat(arg, &stbuf) != 0) {
fprintf(stderr, "%s (%s)\n", arg, strerror(errno));
} else if (recursive) {
nftw(arg, do_getcap, 20, FTW_PHYS);
} else {
int tflag = S_ISREG(stbuf.st_mode) ? FTW_F :
(S_ISLNK(stbuf.st_mode) ? FTW_SL : FTW_NS);
do_getcap(argv[i], &stbuf, tflag, 0);
}
}
return 0;
}
|
