Lines Matching +full:cs +full:- +full:2
1 /*-
2 * SPDX-License-Identifier: BSD-2-Clause
12 * 2. Redistributions in binary form must reproduce the above copyright
65 int paralimit = -1;
93 error = cpuset_getid(CPU_LEVEL_ROOT, CPU_WHICH_PID, -1, &setid);
109 if (j->flags & JF_FROM_RUNQ)
115 j->flags &= ~JF_FROM_RUNQ;
116 create_failed = (j->flags & (JF_STOP | JF_FAILED)) == JF_FAILED;
117 stopping = (j->flags & JF_STOP) != 0;
118 comparam = *j->comparam;
120 if (j->comstring == NULL) {
121 j->comparam += create_failed ? -1 : 1;
122 switch ((comparam = *j->comparam)) {
126 if (!bool_param(j->intparams[IP_MOUNT_DEVFS]))
128 j->comstring = &dummystring;
131 if (!bool_param(j->intparams[IP_MOUNT_FDESCFS]))
133 j->comstring = &dummystring;
136 if (!bool_param(j->intparams[IP_MOUNT_PROCFS]))
138 j->comstring = &dummystring;
142 j->comstring = &dummystring;
145 if (j->intparams[comparam] == NULL)
147 j->comstring = create_failed || (stopping &&
148 (j->intparams[comparam]->flags & PF_REV))
149 ? TAILQ_LAST(&j->intparams[comparam]->val,
151 : TAILQ_FIRST(&j->intparams[comparam]->val);
154 j->comstring = j->comstring == &dummystring ? NULL :
156 (j->intparams[comparam]->flags & PF_REV))
157 ? TAILQ_PREV(j->comstring, cfstrings, tq)
158 : TAILQ_NEXT(j->comstring, tq);
160 if (j->comstring == NULL || j->comstring->len == 0 ||
167 case -1:
185 if (!(j->flags & JF_SLEEPQ))
187 j->flags &= ~JF_SLEEPQ;
188 if (*j->comparam == IP_STOP_TIMEOUT) {
189 j->flags &= ~JF_TIMEOUT;
190 j->pstatus = 0;
196 rj->flags |= JF_FROM_RUNQ;
200 if (j->flags & JF_TIMEOUT) {
201 j->flags &= ~JF_TIMEOUT;
202 if (*j->comparam != IP_STOP_TIMEOUT) {
203 jail_warnx(j, "%s: timed out", j->comline);
205 error = -1;
208 } else if (j->pstatus != 0) {
209 if (WIFSIGNALED(j->pstatus))
211 j->comline, WTERMSIG(j->pstatus));
213 jail_warnx(j, "%s: failed", j->comline);
214 j->pstatus = 0;
216 error = -1;
218 free(j->comline);
219 j->comline = NULL;
237 if ((j = TAILQ_FIRST(&sleeping)) && j->timeout.tv_sec) {
239 ts.tv_sec = j->timeout.tv_sec - ts.tv_sec;
240 ts.tv_nsec = j->timeout.tv_nsec - ts.tv_nsec;
242 ts.tv_sec--;
247 j->flags |= JF_TIMEOUT;
259 case -1:
266 j->flags |= JF_TIMEOUT;
274 j->pstatus = ke.data;
293 char *acs, *cs, *comcs, *devpath;
307 comparam = *j->comparam;
308 down = j->flags & (JF_STOP | JF_FAILED);
315 if (jail_remove(j->jid) < 0 && errno == EPERM) {
318 return -1;
320 if (verbose > 0 || (verbose == 0 && (j->flags & JF_STOP
321 ? note_remove : j->name != NULL)))
323 j->jid = -1;
324 if (j->flags & JF_STOP)
327 j->flags &= ~JF_PERSIST;
330 return -1;
332 printf("%d\n", j->jid);
333 if (verbose >= 0 && (j->name || verbose > 0))
345 comstring = j->comstring;
351 val = alloca(strlen(comstring->s) + 1);
352 strcpy(val, comstring->s);
353 cs = val;
355 while ((p = strchr(cs, ' ')) != NULL && strlen(p) > 1) {
360 cs = p + 1;
366 if ((cs = strchr(val, '|'))) {
367 argv[1] = acs = alloca(cs - val + 1);
368 strlcpy(acs, val, cs - val + 1);
369 addr = cs + 1;
371 argv[1] = string_param(j->intparams[IP_INTERFACE]);
374 argv[2] = "inet";
375 if (!(cs = strchr(addr, '/'))) {
380 } else if (strchr(cs + 1, '.')) {
381 argv[3] = acs = alloca(cs - addr + 1);
382 strlcpy(acs, addr, cs - addr + 1);
384 argv[5] = cs + 1;
392 for (cs = strtok(extrap, " "); cs;
393 cs = strtok(NULL, " ")) {
394 size_t len = strlen(cs) + 1;
396 strlcpy(acs, cs, len);
400 argv[argc] = down ? "-alias" : "alias";
408 val = alloca(strlen(comstring->s) + 1);
409 strcpy(val, comstring->s);
410 cs = val;
412 while ((p = strchr(cs, ' ')) != NULL && strlen(p) > 1) {
417 cs = p + 1;
423 if ((cs = strchr(val, '|'))) {
424 argv[1] = acs = alloca(cs - val + 1);
425 strlcpy(acs, val, cs - val + 1);
426 addr = cs + 1;
428 argv[1] = string_param(j->intparams[IP_INTERFACE]);
431 argv[2] = "inet6";
433 if (!(cs = strchr(addr, '/'))) {
441 for (cs = strtok(extrap, " "); cs;
442 cs = strtok(NULL, " ")) {
443 size_t len = strlen(cs) + 1;
445 strlcpy(acs, cs, len);
449 argv[argc] = down ? "-alias" : "alias";
457 argv[1] = comstring->s;
458 argv[2] = down ? "-vnet" : "vnet";
459 jidstr = string_param(j->intparams[KP_JID]);
460 argv[3] = jidstr ? jidstr : string_param(j->intparams[KP_NAME]);
467 comcs = alloca(comstring->len + 1);
468 strcpy(comcs, comstring->s);
470 for (cs = strtok(comcs, " \t\f\v\r\n"); cs && argc < 4;
471 cs = strtok(NULL, " \t\f\v\r\n")) {
472 if (argc <= 1 && strunvis(cs, cs) < 0) {
474 j->intparams[comparam]->name, comstring->s);
475 return -1;
477 argv[argc++] = cs;
483 j->intparams[comparam]->name, comstring->s);
484 return -1;
486 if (check_path(j, j->intparams[comparam]->name, argv[1], 0,
487 down ? argv[2] : NULL) < 0)
488 return -1;
499 argv[3] = "-o";
507 argv[1] = "-t";
512 path = string_param(j->intparams[KP_PATH]);
515 return -1;
521 return -1;
525 argv[2] = NULL;
528 argv[1] = "-t";
529 argv[2] = "devfs";
530 ruleset = string_param(j->intparams[KP_DEVFS_RULESET]);
534 sprintf(acs, "-oruleset=%s", ruleset);
543 path = string_param(j->intparams[KP_PATH]);
546 return -1;
552 return -1;
556 argv[2] = NULL;
559 argv[1] = "-t";
560 argv[2] = "fdescfs";
569 path = string_param(j->intparams[KP_PATH]);
572 return -1;
578 return -1;
582 argv[2] = NULL;
585 argv[1] = "-t";
586 argv[2] = "procfs";
595 jidstr = string_param(j->intparams[KP_JID]) ?
596 string_param(j->intparams[KP_JID]) :
597 string_param(j->intparams[KP_NAME]);
598 fmt = "if [ $(/sbin/zfs get -H -o value jailed %s) = on ]; then /sbin/zfs jail %s %s || echo error, attaching %s to jail %s failed; else echo error, you need to set jailed=on for dataset %s; fi";
600 + 2 * strlen(jidstr)
601 + 4 * comstring->len
602 - 6 * 2 /* 6 * "%s" */
605 ret = snprintf(comcs, comlen, fmt, comstring->s,
606 jidstr, comstring->s, comstring->s, jidstr,
607 comstring->s);
613 argv[1] = "-c";
614 argv[2] = comcs;
619 if (j->name != NULL)
622 TAILQ_FOREACH(s, &j->intparams[IP_COMMAND]->val, tq)
626 TAILQ_FOREACH(s, &j->intparams[IP_COMMAND]->val, tq)
627 argv[argc++] = s->s;
629 j->comstring = &dummystring;
634 if ((cs = strpbrk(comstring->s, "!\"$&'()*;<>?[\\]`{|}~")) &&
635 !(cs[0] == '&' && cs[1] == '\0')) {
638 argv[1] = "-c";
639 argv[2] = comstring->s;
642 if (cs) {
643 *cs = 0;
646 comcs = alloca(comstring->len + 1);
647 strcpy(comcs, comstring->s);
649 for (cs = strtok(comcs, " \t\f\v\r\n"); cs;
650 cs = strtok(NULL, " \t\f\v\r\n"))
653 strcpy(comcs, comstring->s);
655 for (cs = strtok(comcs, " \t\f\v\r\n"); cs;
656 cs = strtok(NULL, " \t\f\v\r\n"))
657 argv[argc++] = cs;
664 if (int_param(j->intparams[IP_EXEC_TIMEOUT], &timeout) &&
666 clock_gettime(CLOCK_REALTIME, &j->timeout);
667 j->timeout.tv_sec += timeout;
669 j->timeout.tv_sec = 0;
677 clean = bool_param(j->intparams[IP_EXEC_CLEAN]);
678 username = string_param(j->intparams[injail
680 sjuser = bool_param(j->intparams[IP_EXEC_SYSTEM_JAIL_USER]);
684 (conslog = string_param(j->intparams[IP_EXEC_CONSOLELOG]))) {
686 return -1;
691 return -1;
698 j->comline = cs = emalloc(comlen);
700 strcpy(cs, argv[i]);
702 cs += strlen(argv[i]) + 1;
703 cs[-1] = ' ';
709 username ? username : "", j->comline);
716 free(j->comline);
717 j->comline = NULL;
720 paralimit--;
735 path = string_param(j->intparams[KP_PATH]);
740 if (int_param(j->intparams[IP_EXEC_FIB], &fib) &&
752 * This is just a best-effort to use as wide of mask as
756 (void)cpuset_setid(CPU_WHICH_PID, -1, setid);
758 if (jail_attach(j->jid) < 0) {
774 if (setgid(pwd->pw_gid) < 0) {
775 jail_warnx(j, "setgid %d: %s", pwd->pw_gid,
779 if (setusercontext(lcap, pwd, pwd->pw_uid, username
782 jail_warnx(j, "setusercontext %s: %s", pwd->pw_name,
787 setenv("USER", pwd->pw_name, 1);
788 setenv("HOME", pwd->pw_dir, 1);
790 *pwd->pw_shell ? pwd->pw_shell : _PATH_BSHELL, 1);
791 if (clean && username && chdir(pwd->pw_dir) < 0) {
793 pwd->pw_dir, strerror(errno));
799 if (consfd != 0 && (dup2(consfd, 1) < 0 || dup2(consfd, 2) < 0)) {
828 ph->j = j;
829 ph->pid = pid;
831 j->nprocs++;
832 j->flags |= JF_SLEEPQ;
833 if (j->timeout.tv_sec == 0)
837 TAILQ_REMOVE(j->queue, j, tq);
839 if (!tj->timeout.tv_sec ||
840 j->timeout.tv_sec < tj->timeout.tv_sec ||
841 (j->timeout.tv_sec == tj->timeout.tv_sec &&
842 j->timeout.tv_nsec <= tj->timeout.tv_nsec)) {
849 j->queue = &sleeping;
864 j->nprocs = 0;
867 if (ph->j == j) {
868 EV_SET(&ke, ph->pid, EVFILT_PROC, EV_DELETE,
886 if (ph->pid == pid) {
887 j = ph->j;
890 return --j->nprocs ? NULL : j;
906 if (!int_param(j->intparams[IP_STOP_TIMEOUT], &timeout))
922 if (ki[i].ki_jid == j->jid &&
935 if (j->nprocs > 0) {
936 clock_gettime(CLOCK_REALTIME, &j->timeout);
937 j->timeout.tv_sec += timeout;
962 return -1;
966 jail_warnx(j, "getpwclass %s: %s", pwd->pw_name,
968 return -1;
971 if (initgroups(pwd->pw_name, pwd->pw_gid) < 0) {
972 jail_warnx(j, "initgroups %s: %s", pwd->pw_name,
974 return -1;
996 return -1;
1002 jailpath = string_param(j->intparams[KP_PATH]);
1018 return -1;
1023 return -1;
1033 return -1;
1038 return -1;
1043 return -1;
1048 return -1;