From: David Gibson <david@gibson.dropbear.id.au>
To: Stefano Brivio <sbrivio@redhat.com>
Cc: passt-dev@passt.top, David Gibson <david@gibson.dropbear.id.au>
Subject: [PATCH v2 02/11] pasta: More general way of starting spawned shell as a login shell
Date: Fri, 14 Oct 2022 15:25:28 +1100 [thread overview]
Message-ID: <20221014042537.2466015-3-david@gibson.dropbear.id.au> (raw)
In-Reply-To: <20221014042537.2466015-1-david@gibson.dropbear.id.au>
When invoked so as to spawn a shell, pasta checks explicitly for the
shell being bash and if so, adds a "-l" option to make it a login shell.
This is not ideal, since this is a bash specific option and requires pasta
to know about specific shell variants.
There's a general convention for starting a login shell, which is to
prepend a "-" to argv[0]. Use this approach instead, so we don't need bash
specific logic.
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
---
pasta.c | 32 ++++++++++++++++++++------------
1 file changed, 20 insertions(+), 12 deletions(-)
diff --git a/pasta.c b/pasta.c
index 1dd8267..97cd318 100644
--- a/pasta.c
+++ b/pasta.c
@@ -148,10 +148,12 @@ void pasta_open_ns(struct ctx *c, const char *netns)
/**
* struct pasta_setup_ns_arg - Argument for pasta_setup_ns()
+ * @exe: Executable to run
* @argv: Command and arguments to run
*/
struct pasta_setup_ns_arg {
- char **argv;
+ const char *exe;
+ char *const *argv;
};
/**
@@ -162,12 +164,13 @@ struct pasta_setup_ns_arg {
*/
static int pasta_setup_ns(void *arg)
{
- struct pasta_setup_ns_arg *a = (struct pasta_setup_ns_arg *)arg;
+ const struct pasta_setup_ns_arg *a;
FWRITE("/proc/sys/net/ipv4/ping_group_range", "0 0",
"Cannot set ping_group_range, ICMP requests might fail");
- execvp(a->argv[0], a->argv);
+ a = (const struct pasta_setup_ns_arg *)arg;
+ execvp(a->exe, a->argv);
perror("execvp");
exit(EXIT_FAILURE);
@@ -182,26 +185,31 @@ static int pasta_setup_ns(void *arg)
void pasta_start_ns(struct ctx *c, int argc, char *argv[])
{
struct pasta_setup_ns_arg arg = {
+ .exe = argv[0],
.argv = argv,
};
- char *shell = getenv("SHELL");
- char *sh_argv[] = { shell, NULL };
- char *bash_argv[] = { shell, "-l", NULL };
char ns_fn_stack[NS_FN_STACK_SIZE];
+ char *sh_argv[] = { NULL, NULL };
+ char sh_arg0[PATH_MAX + 1];
c->foreground = 1;
if (!c->debug)
c->quiet = 1;
- if (!shell)
- shell = "/bin/sh";
if (argc == 0) {
- if (strstr(shell, "/bash")) {
- arg.argv = bash_argv;
- } else {
- arg.argv = sh_argv;
+ arg.exe = getenv("SHELL");
+ if (!arg.exe)
+ arg.exe = "/bin/sh";
+
+ if ((size_t)snprintf(sh_arg0, sizeof(sh_arg0),
+ "-%s", arg.exe) >= sizeof(sh_arg0)) {
+ err("$SHELL is too long (%u bytes)",
+ strlen(arg.exe));
+ exit(EXIT_FAILURE);
}
+ sh_argv[0] = sh_arg0;
+ arg.argv = sh_argv;
}
pasta_child_pid = clone(pasta_setup_ns,
--
@@ -148,10 +148,12 @@ void pasta_open_ns(struct ctx *c, const char *netns)
/**
* struct pasta_setup_ns_arg - Argument for pasta_setup_ns()
+ * @exe: Executable to run
* @argv: Command and arguments to run
*/
struct pasta_setup_ns_arg {
- char **argv;
+ const char *exe;
+ char *const *argv;
};
/**
@@ -162,12 +164,13 @@ struct pasta_setup_ns_arg {
*/
static int pasta_setup_ns(void *arg)
{
- struct pasta_setup_ns_arg *a = (struct pasta_setup_ns_arg *)arg;
+ const struct pasta_setup_ns_arg *a;
FWRITE("/proc/sys/net/ipv4/ping_group_range", "0 0",
"Cannot set ping_group_range, ICMP requests might fail");
- execvp(a->argv[0], a->argv);
+ a = (const struct pasta_setup_ns_arg *)arg;
+ execvp(a->exe, a->argv);
perror("execvp");
exit(EXIT_FAILURE);
@@ -182,26 +185,31 @@ static int pasta_setup_ns(void *arg)
void pasta_start_ns(struct ctx *c, int argc, char *argv[])
{
struct pasta_setup_ns_arg arg = {
+ .exe = argv[0],
.argv = argv,
};
- char *shell = getenv("SHELL");
- char *sh_argv[] = { shell, NULL };
- char *bash_argv[] = { shell, "-l", NULL };
char ns_fn_stack[NS_FN_STACK_SIZE];
+ char *sh_argv[] = { NULL, NULL };
+ char sh_arg0[PATH_MAX + 1];
c->foreground = 1;
if (!c->debug)
c->quiet = 1;
- if (!shell)
- shell = "/bin/sh";
if (argc == 0) {
- if (strstr(shell, "/bash")) {
- arg.argv = bash_argv;
- } else {
- arg.argv = sh_argv;
+ arg.exe = getenv("SHELL");
+ if (!arg.exe)
+ arg.exe = "/bin/sh";
+
+ if ((size_t)snprintf(sh_arg0, sizeof(sh_arg0),
+ "-%s", arg.exe) >= sizeof(sh_arg0)) {
+ err("$SHELL is too long (%u bytes)",
+ strlen(arg.exe));
+ exit(EXIT_FAILURE);
}
+ sh_argv[0] = sh_arg0;
+ arg.argv = sh_argv;
}
pasta_child_pid = clone(pasta_setup_ns,
--
2.37.3
next prev parent reply other threads:[~2022-10-14 4:25 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-10-14 4:25 [PATCH v2 00/11] Fixes and cleanups for capability handling David Gibson
2022-10-14 4:25 ` [PATCH v2 01/11] test: Move slower tests to end of test run David Gibson
2022-10-14 4:25 ` David Gibson [this message]
2022-10-14 4:25 ` [PATCH v2 03/11] pasta_start_ns() always ends in parent context David Gibson
2022-10-14 4:25 ` [PATCH v2 04/11] Remove unhelpful drop_caps() call in pasta_start_ns() David Gibson
2022-10-14 4:25 ` [PATCH v2 05/11] isolation: Clarify various self-isolation steps David Gibson
2022-10-14 4:25 ` [PATCH v2 06/11] Replace FWRITE with a function David Gibson
2022-10-14 4:25 ` [PATCH v2 07/11] isolation: Refactor isolate_user() to allow for a common exit path David Gibson
2022-10-14 4:25 ` [PATCH v2 08/11] isolation: Replace drop_caps() with a version that actually does something David Gibson
2022-10-14 4:25 ` [PATCH v2 09/11] isolation: Prevent any child processes gaining capabilities David Gibson
2022-10-14 4:25 ` [PATCH v2 10/11] isolation: Only configure UID/GID mappings in userns when spawning shell David Gibson
2022-10-14 4:25 ` [PATCH v2 11/11] Rename pasta_setup_ns() to pasta_spawn_cmd() David Gibson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20221014042537.2466015-3-david@gibson.dropbear.id.au \
--to=david@gibson.dropbear.id.au \
--cc=passt-dev@passt.top \
--cc=sbrivio@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://passt.top/passt
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for IMAP folder(s).