bandsocks 0.2.1

Experimental embeddable container sandbox
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

use crate::{
    filesystem::vfs::{Filesystem, VFile},
    process::Process,
    sand::protocol::{Errno, FileStat, SysFd, VString},
};
use std::path::Path;

fn user_string(process: &mut Process, s: VString) -> Result<String, Errno> {
    process.read_string(s).map_err(|_| Errno(-libc::EFAULT))
}

pub async fn change_working_dir(
    process: &mut Process,
    _filesystem: &Filesystem,
    path: VString,
) -> Result<(), Errno> {
    let path = user_string(process, path)?;
    log::debug!("change_working_dir({:?})", path);
    Ok(())
}

pub async fn get_working_dir(
    _process: &mut Process,
    _filesystem: &Filesystem,
    buffer: VString,
    buffer_size: usize,
) -> Result<usize, Errno> {
    log::debug!("get_working_dir({:x?}, {:x?})", buffer, buffer_size);
    Ok(0)
}

pub async fn file_access(
    process: &mut Process,
    _filesystem: &Filesystem,
    dir: Option<SysFd>,
    path: VString,
    mode: i32,
) -> Result<(), Errno> {
    let path = user_string(process, path)?;
    log::debug!("file_access({:?}, {:?}, {:?})", dir, path, mode);
    Err(Errno(-libc::ENOENT))
}

pub async fn file_open(
    process: &mut Process,
    filesystem: &Filesystem,
    dir: Option<SysFd>,
    path: VString,
    flags: i32,
    mode: i32,
) -> Result<VFile, Errno> {
    let path_str = user_string(process, path)?;
    let path = Path::new(&path_str);
    log::debug!("file_open({:?}, {:?}, {:?}, {:?})", dir, path, flags, mode,);
    match filesystem.open(&path) {
        Err(e) => Err(Errno(-e.to_errno())),
        Ok(vfile) => {
            // to do: permissions
            Ok(vfile)
        }
    }
}

pub async fn file_stat(
    process: &mut Process,
    _filesystem: &Filesystem,
    fd: Option<SysFd>,
    path: Option<VString>,
    nofollow: bool,
) -> Result<FileStat, Errno> {
    let path = match path {
        Some(path) => {
            let path_str = user_string(process, path)?;
            let path = Path::new(&path_str);
            format!("{:?}", path)
        }
        None => format!("None"),
    };
    log::debug!("file_stat({:?}, {}, {:?})", fd, path, nofollow);
    Ok(FileStat {})
}