rustd-resolved 0.2.2

Native DNS resolver and name-service daemon for RustD
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

#!/usr/bin/python3
"""Deterministic PolicyKit authority for isolated resolver authorization tests."""

from __future__ import annotations

import argparse
from pathlib import Path

import dbus
import dbus.service
from dbus.mainloop.glib import DBusGMainLoop
from gi.repository import GLib

BUS_NAME = "org.freedesktop.PolicyKit1"
OBJECT_PATH = "/org/freedesktop/PolicyKit1/Authority"
INTERFACE = "org.freedesktop.PolicyKit1.Authority"


class Authority(dbus.service.Object):
    def __init__(self, bus: object, calls_file: Path | None) -> None:
        super().__init__(bus, OBJECT_PATH)
        self.calls_file = calls_file

    @dbus.service.method(
        INTERFACE,
        in_signature="(sa{sv})sa{ss}us",
        out_signature="bba{ss}",
    )
    def CheckAuthorization(
        self,
        subject: object,
        action: str,
        _details: object,
        flags: int,
        _cancellation: str,
    ) -> tuple[bool, bool, dict[str, str]]:
        if self.calls_file is not None:
            with self.calls_file.open("a", encoding="ascii") as stream:
                stream.write(f"{action}\n")
        if action == "org.freedesktop.resolve1.dump-cache":
            kind, values = subject
            valid = str(kind) == "unix-process" and "pidfd" in values and "uid" in values
            return valid, False, {}
        if action == "org.freedesktop.resolve1.reset-statistics":
            if flags & 1:
                kind, values = subject
                valid = (
                    str(kind) == "unix-process"
                    and "pidfd" in values
                    and "uid" in values
                )
                return valid, False, {}
            return False, True, {}
        if action == "org.freedesktop.resolve1.reset-server-features":
            return False, False, {}
        if action == "org.freedesktop.resolve1.unregister-service":
            return False, False, {}
        return True, False, {}


def main() -> int:
    parser = argparse.ArgumentParser()
    parser.add_argument("--ready-file", required=True, type=Path)
    parser.add_argument("--calls-file", type=Path)
    options = parser.parse_args()

    DBusGMainLoop(set_as_default=True)
    bus = dbus.SystemBus()
    name = dbus.service.BusName(BUS_NAME, bus=bus, do_not_queue=True)
    authority = Authority(bus, options.calls_file)
    options.ready_file.write_text("ready\n", encoding="ascii")
    loop = GLib.MainLoop()
    try:
        loop.run()
    finally:
        authority.remove_from_connection()
        del name
    return 0


if __name__ == "__main__":
    raise SystemExit(main())