1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
-- Copyright (c) 2009 Nokia Corporation.
-- Author: Lauri T. Aarnio
--
-- Licensed under MIT license
-- This script is executed after a new SB2 session has been created,
-- to create mapping rules for toolchain components:
-- For example, /usr/bin/gcc will be mapped to the toolchain. These rules
-- are used for other filesystem operations than exec*
-- (for example, when the shell is looking for a program, it must be
-- possible to stat() the destination)
--
gcc_rule_file_path = session_dir .. "/gcc-conf.lua"
default_rule = os.getenv("SBOX_ARGVMODS_USR_BIN_DEFAULT_RULE")
function argvmods_to_mapping_rules(prefix)
local n
for n in pairs(argvmods) do
local rule = argvmods[n]
-- print("-- rule ", n, " new_filename=", rule.new_filename)
local process_now = true
if prefix ~= nil then
if not sb.isprefix(prefix, n) then
process_now = false
end
end
if process_now and not rule.argvmods_processed then
rule.argvmods_processed = true
local k
for k=1,table.maxn(rule.path_prefixes) do
if rule.path_prefixes[k] == "/usr/bin/" and
rule.new_filename ~= nil then
-- this rule maps "n" from /usr/bin to
-- another file
if sb.path_exists(rule.new_filename) then
print(" {path=\"/usr/bin/"..n.."\",")
print(" replace_by=\"" ..
rule.new_filename.."\"},")
else
print(" -- WARNING: " ..
rule.new_filename ..
" does not exist")
end
end
end
end
end
end
print("-- Argvmods-to-mapping-rules converter:")
print("-- Automatically generated mapping rules. Do not modify:")
do_file(session_dir .. "/lua_scripts/argvenvp.lua")
print("argvmods_rules_for_usr_bin_"..sbox_cpu.." = {")
print(" rules = {")
argvmods_to_mapping_rules(sbox_cpu)
if (default_rule ~= nil) then
print(" -- default:")
print(" ", default_rule)
end
print(" }")
print("}")
local prefixrule1 = " {prefix=\"/usr/bin/"..sbox_cpu..
"\",chain=argvmods_rules_for_usr_bin_"..sbox_cpu.."},"
local prefixrule2 = ""
if sbox_cpu ~= sbox_uname_machine then
print("argvmods_rules_for_usr_bin_"..sbox_uname_machine.." = {")
print(" rules = {")
argvmods_to_mapping_rules(sbox_uname_machine)
if (default_rule ~= nil) then
print(" -- default:")
print(" ", default_rule)
end
print(" }")
print("}")
prefixrule2 = " {prefix=\"/usr/bin/"..sbox_uname_machine..
"\",chain=argvmods_rules_for_usr_bin_"..sbox_uname_machine.."},"
end
print("argvmods_rules_for_usr_bin = {")
print(" rules = {")
print(prefixrule1)
print(prefixrule2)
argvmods_to_mapping_rules(nil)
if (default_rule ~= nil) then
print(" -- default:")
print(" ", default_rule)
end
print(" }")
print("}")
print("-- End of rules created by argvmods-to-mapping-rules converter.")
|
