summaryrefslogtreecommitdiff
path: root/Userland/Utilities/pledge.cpp
blob: a056c6cd196264b4522fe32c79bc66823d8337b0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
/*
 * Copyright (c) 2022, Andreas Kling <kling@serenityos.org>
 *
 * SPDX-License-Identifier: BSD-2-Clause
 */

#include <LibCore/ArgsParser.h>
#include <LibCore/DeprecatedFile.h>
#include <LibCore/MappedFile.h>
#include <LibCore/System.h>
#include <LibELF/Image.h>
#include <LibMain/Main.h>

static ErrorOr<bool> is_dynamically_linked_executable(StringView filename)
{
    auto maybe_executable = Core::DeprecatedFile::resolve_executable_from_environment(filename);

    if (!maybe_executable.has_value())
        return ENOENT;

    auto file = TRY(Core::MappedFile::map(maybe_executable.release_value()));
    ELF::Image elf_image(file->bytes());
    return elf_image.is_dynamic();
}

ErrorOr<int> serenity_main(Main::Arguments arguments)
{
    DeprecatedString promises;
    Vector<StringView> command;
    bool add_promises_for_dynamic_linker;

    Core::ArgsParser args_parser;
    args_parser.add_option(promises, "Space-separated list of pledge promises", "promises", 'p', "promises");
    args_parser.add_option(add_promises_for_dynamic_linker, "Add temporary promises for dynamic linker", "dynamic-linker-promises", 'd');
    args_parser.add_positional_argument(command, "Command to execute", "command");
    args_parser.parse(arguments);

    if (add_promises_for_dynamic_linker && TRY(is_dynamically_linked_executable(command[0]))) {
        auto constexpr loader_promises = "stdio rpath prot_exec"sv;
        MUST(Core::System::setenv("_LOADER_PLEDGE_PROMISES"sv, loader_promises, true));
        MUST(Core::System::setenv("_LOADER_MAIN_PROGRAM_PLEDGE_PROMISES"sv, promises, true));
        promises = DeprecatedString::formatted("{} {}", promises, loader_promises);
    }

    TRY(Core::System::pledge(StringView(), promises));
    TRY(Core::System::exec(command[0], command.span(), Core::System::SearchInPath::Yes));
    return 0;
}