view ie-virsh.c @ 9:ea51e779b381

error message
author Shinji KONO <kono@ie.u-ryukyu.ac.jp>
date Tue, 13 Nov 2012 16:35:34 +0900
parents bff4054ed58f
children 422041acef4c
line wrap: on
line source



#include <stdlib.h>
#include <unistd.h>

#include <stdio.h>
#include <sys/types.h>
#include <unistd.h>
#include <signal.h>
#include <string.h>

#include <sys/types.h>
#include <regex.h>

/********************************************
 * Virsh Wrapper - Secure Yourself          *
 *                                          *
 * 2007 - Mike Golvach - eggi@comcast.net   *
 * 2012 - Shinji KONO  kono@ie.u-rykyu.ac.jp *
 *                                          *
 * Usage: COMMAND [start|stop]              *
 *                                          *
 ********************************************/
 
 /* Creative Commons Attribution-Noncommercial-Share Alike 3.0 United States License */

#define command "/usr/bin/virsh"
#define list_command "/usr/bin/virsh list --all"
#define start_command "start"
#define stop_command "destroy"
#define define_command "define"
#define undefine_command "undefine"
#define dumpxml_command "dumpxml"

static char bad_name[] = "Bad vmname. Try students/e11/e115711/01 or teachers/kono/02\n";

#define VMNAME_MAX (512)

typedef struct vmlist {
    char name[VMNAME_MAX];
    struct vmlist *next;
} VMLIST, *VMLISTPTR;

#define NEW(type)  ((type*)malloc(sizeof(type)))

/* Define global variables */

VMLISTPTR
get_vmlist(regex_t *list_pattern)
{
    VMLISTPTR list = NEW(VMLIST);
    VMLISTPTR p = list ;
    p->name[0] = 0;
    p->next = 0;
    FILE *fp = popen(list_command,"r");
    while(fgets(p->name,VMNAME_MAX,fp)!=NULL) {
        if (regexec(list_pattern, p->name, (size_t) 0, NULL, 0)) continue;
        p->next = NEW(VMLIST);
        p = p->next;
    }
    p->name[0] = 0;
    pclose(fp);
    return list;
}

void 
print_vmlist(VMLISTPTR list) 
{
    for(;list && list->name[0]; list=list->next) {
        fprintf(stdout, "   %s\n",list->name);
    }
}

int
check_vmlist_name(VMLISTPTR list, char *arg)
{
    for(;list && list->name[0]; list=list->next) {
        if (strstr(list->name,arg)!=0) return 1;
    }
    return 0;
}

int
check_name(const char *p)
{
   if (!p) return  1;
   for(;*p;p++) {
      char c = *p;
      if (c<=' ') return 1;
      if (('a'<=c && c<='z') ||
          ('0'<=c && c<='9') ||
          ('/'==c ) ||
          ('-'==c )) continue;
      return 1;
   }
   return 0;
}

void 
usage()
{
  printf("Usage: COMMAND [define|list|start|destroy|xmldump|undefine] [vm-name]\n");
  printf("   vm-name should be students/e11/e115711/01 or teachers/kono/02\n");
}

/* main(int argc, char **argv) - main process loop */

int main(int argc, char **argv)
{
    int gid;
    int uid;

/* Set euid and egid to actual user */

 char *name = getlogin();
 uid = getuid();
 gid = getgid();
 printf("uid %d gid %d name %s\n", uid,gid,name);
 setegid(getgid());
 seteuid(getuid());

 regex_t *pattern = NEW(regex_t);
 if (regcomp(pattern, name, 0) != 0) {
    exit(0);
 }

/* Confirm user is in GROUP(999) group */

/*
 if ( gid != 999 ) {
  printf("User Not Authorized!  Exiting...\n");
  exit(1);
 }
 */

/* Set uid, gid, euid and egid to root */

 setegid(0);
 seteuid(0);
 setgid(0);
 setuid(0);


 if (argc>=3) {
    if ( strncmp(argv[1], "define", 6) == 0 ) {
        if (regexec(pattern, argv[2], (size_t) 0, NULL, 0)) {
           fprintf(stderr, bad_name);
           exit(0);
        }
        if (check_name(argv[2])) {
           fprintf(stderr, bad_name);
           exit(0);
        }
        char exec[1024];
        strncpy(exec, "/usr/local/bin/newvm.py -c /etc/libvirt/qemu/fedora16.xml -n ",900);
        strncat(exec, argv[2],1000);
        fprintf(stdout, "excuting %s\n",exec );
        system(exec);
    }
  }


 VMLISTPTR vmlist = get_vmlist(pattern);

 char name_xml[1024];
 name_xml[0] = 0;
 if (argc>=3) {
    if ( strncmp(argv[1], "define", 6) == 0 ) {
	 strncpy(name_xml,argv[2],900);
	 strncat(name_xml,".xml",1000);
    } else if (check_vmlist_name(vmlist, argv[2])==0) {
        fprintf(stderr, bad_name);
        print_vmlist(vmlist);
        exit(0);
    }
 } else if (argc<2) {
        print_vmlist(vmlist);
        usage();
        exit(0);
 }

/* Check argv for proper arguments and run 
 * the corresponding script, if invoked.
 */

 if ( argv[1]==0 || strncmp(argv[1], "list", 4) == 0 ) {
    print_vmlist(vmlist);
 } else if ( strncmp(argv[1], "start", 5) == 0 ) {
  if (execl(command, command, start_command, argv[2], NULL) < 0) {
   perror("Execl:");
  }
 } else if ( strncmp(argv[1], "destroy", 4) == 0 ) {
  if (execl(command, command, stop_command, argv[2], NULL) < 0) {
   perror("Execl:");
  }
 } else if ( strncmp(argv[1], "dumpxml", 7) == 0 ) {
  if (execl(command, command, dumpxml_command, argv[2], NULL) < 0) {
   perror("Execl:");
  }
 } else if ( strncmp(argv[1], "define", 6) == 0 ) {
     chdir("/etc/libvirt/qemu");
     if (execl(command, command, define_command, name_xml, NULL) < 0) {
       perror("Execl:");
     }
 } else if ( strncmp(argv[1], "undefine", 8) == 0 ) {
     chdir("/etc/libvirt/qemu");
     if (execl(command, command, undefine_command, argv[2], NULL) < 0) {
       perror("Execl:");
     }
 } else {
    usage();
    exit(1);
 }
 exit(0);
}

/* end */