mirror of
https://github.com/RGBCube/serenity
synced 2025-10-31 17:12:43 +00:00
62 lines
2 KiB
C++
62 lines
2 KiB
C++
/*
|
|
* Copyright (c) 2021, Jesse Buhagiar <jooster669@gmail.com>
|
|
* Copyright (c) 2021, Andreas Kling <kling@serenityos.org>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <LibCore/Account.h>
|
|
#include <LibCore/ArgsParser.h>
|
|
#include <LibCore/GetPassword.h>
|
|
#include <LibCore/System.h>
|
|
#include <LibMain/Main.h>
|
|
#include <unistd.h>
|
|
|
|
ErrorOr<int> serenity_main(Main::Arguments arguments)
|
|
{
|
|
Vector<StringView> command;
|
|
Core::ArgsParser args_parser;
|
|
uid_t as_user_uid = 0;
|
|
args_parser.set_stop_on_first_non_option(true);
|
|
args_parser.add_option(as_user_uid, "User to execute as", nullptr, 'u', "UID");
|
|
args_parser.add_positional_argument(command, "Command to run at elevated privilege level", "command");
|
|
args_parser.parse(arguments);
|
|
|
|
TRY(Core::System::pledge("stdio rpath exec id tty"));
|
|
|
|
TRY(Core::System::seteuid(0));
|
|
|
|
auto as_user = TRY(Core::Account::from_uid(as_user_uid));
|
|
|
|
// If the current user is not a superuser, make them authenticate themselves.
|
|
if (auto uid = getuid()) {
|
|
auto account = TRY(Core::Account::from_uid(uid));
|
|
if (account.has_password()) {
|
|
auto password = TRY(Core::get_password());
|
|
if (!account.authenticate(password))
|
|
return Error::from_string_literal("Incorrect or disabled password."sv);
|
|
}
|
|
}
|
|
|
|
TRY(Core::System::pledge("stdio rpath exec id"));
|
|
|
|
TRY(Core::System::setgid(0));
|
|
TRY(Core::System::setuid(as_user_uid));
|
|
|
|
TRY(Core::System::pledge("stdio rpath exec"));
|
|
|
|
Vector<String> exec_environment_strings;
|
|
Vector<StringView> exec_environment;
|
|
if (auto* term = getenv("TERM")) {
|
|
exec_environment_strings.append(String::formatted("TERM={}", term));
|
|
exec_environment.append(exec_environment_strings.last());
|
|
}
|
|
|
|
Vector<String> exec_arguments;
|
|
exec_arguments.ensure_capacity(command.size());
|
|
for (auto const& it : command)
|
|
exec_arguments.append(it.to_string());
|
|
|
|
TRY(Core::System::exec(command.at(0), command, Core::System::SearchInPath::Yes, exec_environment));
|
|
return 0;
|
|
}
|