/* * Copyright (c) 2021, timmot * * SPDX-License-Identifier: BSD-2-Clause */ // FIXME: LibIPC Decoder and Encoder are sensitive to include order here // clang-format off #include // clang-format on #include #include #include #include #include #include #include namespace FileSystemAccessServer { static HashMap> s_connections; ClientConnection::ClientConnection(NonnullRefPtr socket, int client_id) : IPC::ClientConnection(*this, move(socket), client_id) { s_connections.set(client_id, *this); } ClientConnection::~ClientConnection() { } void ClientConnection::die() { s_connections.remove(client_id()); GUI::Application::the()->quit(); } RefPtr ClientConnection::create_dummy_child_window(i32 window_server_client_id, i32 parent_window_id) { auto window = GUI::Window::construct(); window->set_opacity(0); window->set_frameless(true); auto rect = GUI::WindowServerConnection::the().get_window_rect_from_client(window_server_client_id, parent_window_id); window->set_rect(rect); window->show(); GUI::WindowServerConnection::the().async_set_window_parent_from_client(window_server_client_id, parent_window_id, window->window_id()); return window; } void ClientConnection::request_file_handler(i32 window_server_client_id, i32 parent_window_id, String const& path, Core::OpenMode const& requested_access, ShouldPrompt prompt) { VERIFY(path.starts_with("/"sv)); bool approved = false; auto maybe_permissions = m_approved_files.get(path); auto relevant_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly); VERIFY(relevant_permissions != Core::OpenMode::NotOpen); if (maybe_permissions.has_value()) approved = has_flag(maybe_permissions.value(), relevant_permissions); if (!approved) { String access_string; if (has_flag(requested_access, Core::OpenMode::ReadWrite)) access_string = "read and write"; else if (has_flag(requested_access, Core::OpenMode::ReadOnly)) access_string = "read from"; else if (has_flag(requested_access, Core::OpenMode::WriteOnly)) access_string = "write to"; auto pid = this->socket().peer_pid(); auto exe_link = LexicalPath("/proc").append(String::number(pid)).append("exe").string(); auto exe_path = Core::File::real_path_for(exe_link); auto main_window = create_dummy_child_window(window_server_client_id, parent_window_id); if (prompt == ShouldPrompt::Yes) { auto exe_name = LexicalPath::basename(exe_path); auto result = GUI::MessageBox::show(main_window, String::formatted("Allow {} ({}) to {} \"{}\"?", exe_name, pid, access_string, path), "File Permissions Requested", GUI::MessageBox::Type::Warning, GUI::MessageBox::InputType::YesNo); approved = result == GUI::MessageBox::ExecYes; } else { approved = true; } if (approved) { auto new_permissions = relevant_permissions; if (maybe_permissions.has_value()) new_permissions |= maybe_permissions.value(); m_approved_files.set(path, new_permissions); } } if (approved) { auto file = Core::File::open(path, requested_access); if (file.is_error()) { dbgln("FileSystemAccessServer: Couldn't open {}, error {}", path, file.error()); async_handle_prompt_end(errno, Optional {}, path); } else { async_handle_prompt_end(0, IPC::File(file.value()->leak_fd(), IPC::File::CloseAfterSending), path); } } else { async_handle_prompt_end(-1, Optional {}, path); } } void ClientConnection::request_file_read_only_approved(i32 window_server_client_id, i32 parent_window_id, String const& path) { request_file_handler(window_server_client_id, parent_window_id, path, Core::OpenMode::ReadOnly, ShouldPrompt::No); } void ClientConnection::request_file(i32 window_server_client_id, i32 parent_window_id, String const& path, Core::OpenMode const& requested_access) { request_file_handler(window_server_client_id, parent_window_id, path, requested_access, ShouldPrompt::Yes); } void ClientConnection::prompt_open_file(i32 window_server_client_id, i32 parent_window_id, String const& window_title, String const& path_to_view, Core::OpenMode const& requested_access) { auto relevant_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly); VERIFY(relevant_permissions != Core::OpenMode::NotOpen); auto main_window = create_dummy_child_window(window_server_client_id, parent_window_id); auto user_picked_file = GUI::FilePicker::get_open_filepath(main_window, window_title, path_to_view); prompt_helper(user_picked_file, requested_access); } void ClientConnection::prompt_save_file(i32 window_server_client_id, i32 parent_window_id, String const& name, String const& ext, String const& path_to_view, Core::OpenMode const& requested_access) { auto relevant_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly); VERIFY(relevant_permissions != Core::OpenMode::NotOpen); auto main_window = create_dummy_child_window(window_server_client_id, parent_window_id); auto user_picked_file = GUI::FilePicker::get_save_filepath(main_window, name, ext, path_to_view); prompt_helper(user_picked_file, requested_access); } void ClientConnection::prompt_helper(Optional const& user_picked_file, Core::OpenMode const& requested_access) { if (user_picked_file.has_value()) { VERIFY(user_picked_file->starts_with("/"sv)); auto file = Core::File::open(user_picked_file.value(), requested_access); if (file.is_error()) { dbgln("FileSystemAccessServer: Couldn't open {}, error {}", user_picked_file.value(), file.error()); async_handle_prompt_end(errno, Optional {}, user_picked_file); } else { auto maybe_permissions = m_approved_files.get(user_picked_file.value()); auto new_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly); if (maybe_permissions.has_value()) new_permissions |= maybe_permissions.value(); m_approved_files.set(user_picked_file.value(), new_permissions); async_handle_prompt_end(0, IPC::File(file.value()->leak_fd(), IPC::File::CloseAfterSending), user_picked_file); } } else { async_handle_prompt_end(-1, Optional {}, Optional {}); } } Messages::FileSystemAccessServer::ExposeWindowServerClientIdResponse ClientConnection::expose_window_server_client_id() { return GUI::WindowServerConnection::the().expose_client_id(); } }