virutil.c 52.3 KB
Newer Older
1
/*
2
 * virutil.c: common, generic utility functions
3
 *
4
 * Copyright (C) 2006-2013 Red Hat, Inc.
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
 * Copyright (C) 2006 Daniel P. Berrange
 * Copyright (C) 2006, 2007 Binary Karma
 * Copyright (C) 2006 Shuveb Hussain
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
20
 * License along with this library.  If not, see
O
Osier Yang 已提交
21
 * <http://www.gnu.org/licenses/>.
22 23 24 25 26
 *
 * Author: Daniel P. Berrange <berrange@redhat.com>
 * File created Jul 18, 2007 - Shuveb Hussain <shuveb@binarykarma.com>
 */

27
#include <config.h>
28

29
#include <stdlib.h>
30
#include <dirent.h>
31 32 33 34 35
#include <stdio.h>
#include <stdarg.h>
#include <unistd.h>
#include <fcntl.h>
#include <errno.h>
C
Cole Robinson 已提交
36
#include <poll.h>
37
#include <sys/stat.h>
38
#include <sys/types.h>
39
#include <sys/ioctl.h>
40
#include <string.h>
E
Eric Blake 已提交
41
#include <termios.h>
42
#include <locale.h>
43

44 45 46
#if HAVE_LIBDEVMAPPER_H
# include <libdevmapper.h>
#endif
47

48
#ifdef HAVE_PATHS_H
49
# include <paths.h>
50
#endif
51
#include <netdb.h>
52
#ifdef HAVE_GETPWUID_R
53 54
# include <pwd.h>
# include <grp.h>
55
#endif
56
#if WITH_CAPNG
57
# include <cap-ng.h>
58
# include <sys/prctl.h>
59
#endif
60

61
#ifdef WIN32
62 63 64
# ifdef HAVE_WINSOCK2_H
#  include <winsock2.h>
# endif
65 66 67 68
# include <windows.h>
# include <shlobj.h>
#endif

69
#include "c-ctype.h"
70
#include "virerror.h"
71
#include "virlog.h"
72
#include "virbuffer.h"
73
#include "viralloc.h"
74
#include "virthread.h"
E
Eric Blake 已提交
75
#include "verify.h"
76 77 78 79 80 81
#include "virfile.h"
#include "vircommand.h"
#include "nonblocking.h"
#include "virprocess.h"
#include "virstring.h"
#include "virutil.h"
82

83 84 85
#ifndef NSIG
# define NSIG 32
#endif
86

87 88
verify(sizeof(gid_t) <= sizeof(unsigned int) &&
       sizeof(uid_t) <= sizeof(unsigned int));
89

90
#define VIR_FROM_THIS VIR_FROM_NONE
91

92
#ifndef WIN32
93

94 95 96
int virSetInherit(int fd, bool inherit) {
    int fflags;
    if ((fflags = fcntl(fd, F_GETFD)) < 0)
97
        return -1;
98 99 100 101 102
    if (inherit)
        fflags &= ~FD_CLOEXEC;
    else
        fflags |= FD_CLOEXEC;
    if ((fcntl(fd, F_SETFD, fflags)) < 0)
103
        return -1;
104 105 106
    return 0;
}

107
#else /* WIN32 */
108

109
int virSetInherit(int fd ATTRIBUTE_UNUSED, bool inherit ATTRIBUTE_UNUSED)
110
{
111 112 113 114 115
    /* FIXME: Currently creating child processes is not supported on
     * Win32, so there is no point in failing calls that are only relevant
     * when creating child processes. So just pretend that we changed the
     * inheritance property of the given fd as requested. */
    return 0;
116 117
}

118
#endif /* WIN32 */
119

120 121
int virSetBlocking(int fd, bool blocking) {
    return set_nonblocking_flag(fd, !blocking);
122 123
}

124 125
int virSetNonBlock(int fd) {
    return virSetBlocking(fd, false);
126
}
127

128
int virSetCloseExec(int fd)
129
{
130
    return virSetInherit(fd, false);
131 132
}

133 134 135
int
virPipeReadUntilEOF(int outfd, int errfd,
                    char **outbuf, char **errbuf) {
136

137 138 139
    struct pollfd fds[2];
    int i;
    int finished[2];
140

141 142 143 144 145 146 147 148
    fds[0].fd = outfd;
    fds[0].events = POLLIN;
    fds[0].revents = 0;
    finished[0] = 0;
    fds[1].fd = errfd;
    fds[1].events = POLLIN;
    fds[1].revents = 0;
    finished[1] = 0;
149

150
    while (!(finished[0] && finished[1])) {
151

152 153 154 155
        if (poll(fds, ARRAY_CARDINALITY(fds), -1) < 0) {
            if ((errno == EAGAIN) || (errno == EINTR))
                continue;
            goto pollerr;
156 157
        }

158 159 160
        for (i = 0; i < ARRAY_CARDINALITY(fds); ++i) {
            char data[1024], **buf;
            int got, size;
161

162 163 164 165
            if (!(fds[i].revents))
                continue;
            else if (fds[i].revents & POLLHUP)
                finished[i] = 1;
166

167 168 169
            if (!(fds[i].revents & POLLIN)) {
                if (fds[i].revents & POLLHUP)
                    continue;
170

171 172 173 174
                virReportError(VIR_ERR_INTERNAL_ERROR,
                               "%s", _("Unknown poll response."));
                goto error;
            }
175

176
            got = read(fds[i].fd, data, sizeof(data));
177

178 179
            if (got == sizeof(data))
                finished[i] = 0;
A
Amy Griffis 已提交
180

181 182 183 184 185 186 187 188 189 190 191
            if (got == 0) {
                finished[i] = 1;
                continue;
            }
            if (got < 0) {
                if (errno == EINTR)
                    continue;
                if (errno == EAGAIN)
                    break;
                goto pollerr;
            }
A
Amy Griffis 已提交
192

193 194 195 196 197 198 199 200
            buf = ((fds[i].fd == outfd) ? outbuf : errbuf);
            size = (*buf ? strlen(*buf) : 0);
            if (VIR_REALLOC_N(*buf, size+got+1) < 0) {
                virReportOOMError();
                goto error;
            }
            memmove(*buf+size, data, got);
            (*buf)[size+got] = '\0';
A
Amy Griffis 已提交
201
        }
202
        continue;
203

204 205 206 207
    pollerr:
        virReportSystemError(errno,
                             "%s", _("poll error"));
        goto error;
208 209
    }

210
    return 0;
211

212 213 214 215
error:
    VIR_FREE(*outbuf);
    VIR_FREE(*errbuf);
    return -1;
216 217
}

218 219 220 221 222 223 224 225 226 227 228 229 230 231 232
/* Convert C from hexadecimal character to integer.  */
int
virHexToBin(unsigned char c)
{
    switch (c) {
    default: return c - '0';
    case 'a': case 'A': return 10;
    case 'b': case 'B': return 11;
    case 'c': case 'C': return 12;
    case 'd': case 'D': return 13;
    case 'e': case 'E': return 14;
    case 'f': case 'F': return 15;
    }
}

233 234 235 236 237 238 239 240 241 242 243 244 245 246
/* Scale an integer VALUE in-place by an optional case-insensitive
 * SUFFIX, defaulting to SCALE if suffix is NULL or empty (scale is
 * typically 1 or 1024).  Recognized suffixes include 'b' or 'bytes',
 * as well as power-of-two scaling via binary abbreviations ('KiB',
 * 'MiB', ...) or their one-letter counterpart ('k', 'M', ...), and
 * power-of-ten scaling via SI abbreviations ('KB', 'MB', ...).
 * Ensure that the result does not exceed LIMIT.  Return 0 on success,
 * -1 with error message raised on failure.  */
int
virScaleInteger(unsigned long long *value, const char *suffix,
                unsigned long long scale, unsigned long long limit)
{
    if (!suffix || !*suffix) {
        if (!scale) {
247 248
            virReportError(VIR_ERR_INTERNAL_ERROR,
                           _("invalid scale %llu"), scale);
249 250 251 252 253 254 255 256 257 258 259 260 261 262
            return -1;
        }
        suffix = "";
    } else if (STRCASEEQ(suffix, "b") || STRCASEEQ(suffix, "byte") ||
               STRCASEEQ(suffix, "bytes")) {
        scale = 1;
    } else {
        int base;

        if (!suffix[1] || STRCASEEQ(suffix + 1, "iB")) {
            base = 1024;
        } else if (c_tolower(suffix[1]) == 'b' && !suffix[2]) {
            base = 1000;
        } else {
263
            virReportError(VIR_ERR_INVALID_ARG,
264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287
                         _("unknown suffix '%s'"), suffix);
            return -1;
        }
        scale = 1;
        switch (c_tolower(*suffix)) {
        case 'e':
            scale *= base;
            /* fallthrough */
        case 'p':
            scale *= base;
            /* fallthrough */
        case 't':
            scale *= base;
            /* fallthrough */
        case 'g':
            scale *= base;
            /* fallthrough */
        case 'm':
            scale *= base;
            /* fallthrough */
        case 'k':
            scale *= base;
            break;
        default:
288 289
            virReportError(VIR_ERR_INVALID_ARG,
                           _("unknown suffix '%s'"), suffix);
290 291 292 293
            return -1;
        }
    }

G
Guannan Ren 已提交
294
    if (*value && *value > (limit / scale)) {
295 296
        virReportError(VIR_ERR_OVERFLOW, _("value too large: %llu%s"),
                       *value, suffix);
297 298 299 300 301 302
        return -1;
    }
    *value *= scale;
    return 0;
}

E
Eric Blake 已提交
303

304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319
/**
 * virParseNumber:
 * @str: pointer to the char pointer used
 *
 * Parse an unsigned number
 *
 * Returns the unsigned number or -1 in case of error. @str will be
 *         updated to skip the number.
 */
int
virParseNumber(const char **str)
{
    int ret = 0;
    const char *cur = *str;

    if ((*cur < '0') || (*cur > '9'))
320
        return -1;
321

J
Jim Meyering 已提交
322
    while (c_isdigit(*cur)) {
323 324 325 326
        unsigned int c = *cur - '0';

        if ((ret > INT_MAX / 10) ||
            ((ret == INT_MAX / 10) && (c > INT_MAX % 10)))
327
            return -1;
328 329 330 331
        ret = ret * 10 + c;
        cur++;
    }
    *str = cur;
332
    return ret;
333
}
334

335 336 337 338
/**
 * virParseVersionString:
 * @str: const char pointer to the version string
 * @version: unsigned long pointer to output the version number
339 340
 * @allowMissing: true to treat 3 like 3.0.0, false to error out on
 * missing minor or micro
341 342 343 344 345 346 347 348 349 350 351
 *
 * Parse an unsigned version number from a version string. Expecting
 * 'major.minor.micro' format, ignoring an optional suffix.
 *
 * The major, minor and micro numbers are encoded into a single version number:
 *
 *   1000000 * major + 1000 * minor + micro
 *
 * Returns the 0 for success, -1 for error.
 */
int
352 353
virParseVersionString(const char *str, unsigned long *version,
                      bool allowMissing)
354
{
355
    unsigned int major, minor = 0, micro = 0;
356 357
    char *tmp;

358
    if (virStrToLong_ui(str, &tmp, 10, &major) < 0)
359 360
        return -1;

361 362 363
    if (!allowMissing && *tmp != '.')
        return -1;

364
    if ((*tmp == '.') && virStrToLong_ui(tmp + 1, &tmp, 10, &minor) < 0)
365 366
        return -1;

367 368 369
    if (!allowMissing && *tmp != '.')
        return -1;

370
    if ((*tmp == '.') && virStrToLong_ui(tmp + 1, &tmp, 10, &micro) < 0)
371 372
        return -1;

373 374 375
    if (major > UINT_MAX / 1000000 || minor > 999 || micro > 999)
        return -1;

376 377 378 379 380
    *version = 1000000 * major + 1000 * minor + micro;

    return 0;
}

381 382 383 384 385
int virEnumFromString(const char *const*types,
                      unsigned int ntypes,
                      const char *type)
{
    unsigned int i;
386 387 388
    if (!type)
        return -1;

389 390 391 392 393 394 395
    for (i = 0 ; i < ntypes ; i++)
        if (STREQ(types[i], type))
            return i;

    return -1;
}

396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440
/* In case thread-safe locales are available */
#if HAVE_NEWLOCALE

static locale_t virLocale;

static int
virLocaleOnceInit(void)
{
    virLocale = newlocale(LC_ALL_MASK, "C", (locale_t)0);
    if (!virLocale)
        return -1;
    return 0;
}

VIR_ONCE_GLOBAL_INIT(virLocale)
#endif

/**
 * virDoubleToStr
 *
 * converts double to string with C locale (thread-safe).
 *
 * Returns -1 on error, size of the string otherwise.
 */
int
virDoubleToStr(char **strp, double number)
{
    int ret = -1;

#if HAVE_NEWLOCALE

    locale_t old_loc;

    if (virLocaleInitialize() < 0)
        goto error;

    old_loc = uselocale(virLocale);
    ret = virAsprintf(strp, "%lf", number);
    uselocale(old_loc);

#else

    char *radix, *tmp;
    struct lconv *lc;

441
    if ((ret = virAsprintf(strp, "%lf", number) < 0))
442 443 444 445 446 447 448 449
        goto error;

    lc = localeconv();
    radix = lc->decimal_point;
    tmp = strstr(*strp, radix);
    if (tmp) {
        *tmp = '.';
        if (strlen(radix) > 1)
450
            memmove(tmp + 1, tmp + strlen(radix), strlen(*strp) - (tmp - *strp));
451 452 453 454 455 456 457
    }

#endif /* HAVE_NEWLOCALE */
 error:
    return ret;
}

D
Daniel P. Berrange 已提交
458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487

/**
 * Format @val as a base-10 decimal number, in the
 * buffer @buf of size @buflen. To allocate a suitable
 * sized buffer, the INT_BUFLEN(int) macro should be
 * used
 *
 * Returns pointer to start of the number in @buf
 */
char *
virFormatIntDecimal(char *buf, size_t buflen, int val)
{
    char *p = buf + buflen - 1;
    *p = '\0';
    if (val >= 0) {
        do {
            *--p = '0' + (val % 10);
            val /= 10;
        } while (val != 0);
    } else {
        do {
            *--p = '0' - (val % 10);
            val /= 10;
        } while (val != 0);
        *--p = '-';
    }
    return p;
}


488 489 490 491 492 493 494 495 496 497
const char *virEnumToString(const char *const*types,
                            unsigned int ntypes,
                            int type)
{
    if (type < 0 || type >= ntypes)
        return NULL;

    return types[type];
}

498 499 500
/* Translates a device name of the form (regex) /^[fhv]d[a-z]+[0-9]*$/
 * into the corresponding index (e.g. sda => 0, hdz => 25, vdaa => 26)
 * Note that any trailing string of digits is simply ignored.
501 502 503 504 505 506
 * @param name The name of the device
 * @return name's index, or -1 on failure
 */
int virDiskNameToIndex(const char *name) {
    const char *ptr = NULL;
    int idx = 0;
507
    static char const* const drive_prefix[] = {"fd", "hd", "vd", "sd", "xvd", "ubd"};
508
    unsigned int i;
509

510 511 512
    for (i = 0; i < ARRAY_CARDINALITY(drive_prefix); i++) {
        if (STRPREFIX(name, drive_prefix[i])) {
            ptr = name + strlen(drive_prefix[i]);
513
            break;
514
        }
515 516
    }

517
    if (!ptr)
518 519
        return -1;

D
Daniel Veillard 已提交
520
    for (i = 0; *ptr; i++) {
J
Jim Meyering 已提交
521
        if (!c_islower(*ptr))
522
            break;
523

524
        idx = (idx + (i < 1 ? 0 : 1)) * 26;
525 526 527 528
        idx += *ptr - 'a';
        ptr++;
    }

529 530 531 532 533
    /* Count the trailing digits.  */
    size_t n_digits = strspn(ptr, "0123456789");
    if (ptr[n_digits] != '\0')
        return -1;

534 535
    return idx;
}
G
Guido Günther 已提交
536

537 538 539 540 541 542
char *virIndexToDiskName(int idx, const char *prefix)
{
    char *name = NULL;
    int i, k, offset;

    if (idx < 0) {
543 544
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       _("Disk index %d is negative"), idx);
545 546 547 548 549 550 551 552
        return NULL;
    }

    for (i = 0, k = idx; k >= 0; ++i, k = k / 26 - 1) { }

    offset = strlen(prefix);

    if (VIR_ALLOC_N(name, offset + i + 1)) {
553
        virReportOOMError();
554 555 556 557 558 559 560 561 562 563 564 565 566
        return NULL;
    }

    strcpy(name, prefix);
    name[offset + i] = '\0';

    for (i = i - 1, k = idx; k >= 0; --i, k = k / 26 - 1) {
        name[offset + i] = 'a' + (k % 26);
    }

    return name;
}

567
#ifndef AI_CANONIDN
568
# define AI_CANONIDN 0
569 570
#endif

C
Chris Lalancette 已提交
571 572 573 574 575 576 577 578 579 580 581 582 583 584 585
/* Who knew getting a hostname could be so delicate.  In Linux (and Unices
 * in general), many things depend on "hostname" returning a value that will
 * resolve one way or another.  In the modern world where networks frequently
 * come and go this is often being hard-coded to resolve to "localhost".  If
 * it *doesn't* resolve to localhost, then we would prefer to have the FQDN.
 * That leads us to 3 possibilities:
 *
 * 1)  gethostname() returns an FQDN (not localhost) - we return the string
 *     as-is, it's all of the information we want
 * 2)  gethostname() returns "localhost" - we return localhost; doing further
 *     work to try to resolve it is pointless
 * 3)  gethostname() returns a shortened hostname - in this case, we want to
 *     try to resolve this to a fully-qualified name.  Therefore we pass it
 *     to getaddrinfo().  There are two possible responses:
 *     a)  getaddrinfo() resolves to a FQDN - return the FQDN
586
 *     b)  getaddrinfo() fails or resolves to localhost - in this case, the
587 588 589
 *         data we got from gethostname() is actually more useful than what
 *         we got from getaddrinfo().  Return the value from gethostname()
 *         and hope for the best.
C
Chris Lalancette 已提交
590
 */
591
char *virGetHostname(void)
592 593 594
{
    int r;
    char hostname[HOST_NAME_MAX+1], *result;
C
Chris Lalancette 已提交
595
    struct addrinfo hints, *info;
596

597
    r = gethostname(hostname, sizeof(hostname));
598
    if (r == -1) {
599 600
        virReportSystemError(errno,
                             "%s", _("failed to determine host name"));
601
        return NULL;
602
    }
603 604
    NUL_TERMINATE(hostname);

C
Chris Lalancette 已提交
605 606 607 608 609 610 611 612 613 614 615 616 617 618 619
    if (STRPREFIX(hostname, "localhost") || strchr(hostname, '.')) {
        /* in this case, gethostname returned localhost (meaning we can't
         * do any further canonicalization), or it returned an FQDN (and
         * we don't need to do any further canonicalization).  Return the
         * string as-is; it's up to callers to check whether "localhost"
         * is allowed.
         */
        result = strdup(hostname);
        goto check_and_return;
    }

    /* otherwise, it's a shortened, non-localhost, hostname.  Attempt to
     * canonicalize the hostname by running it through getaddrinfo
     */

620 621 622 623
    memset(&hints, 0, sizeof(hints));
    hints.ai_flags = AI_CANONNAME|AI_CANONIDN;
    hints.ai_family = AF_UNSPEC;
    r = getaddrinfo(hostname, NULL, &hints, &info);
624
    if (r != 0) {
625 626 627 628
        VIR_WARN("getaddrinfo failed for '%s': %s",
                 hostname, gai_strerror(r));
        result = strdup(hostname);
        goto check_and_return;
629
    }
630

631
    /* Tell static analyzers about getaddrinfo semantics.  */
632
    sa_assert(info);
633

C
Chris Lalancette 已提交
634 635 636 637 638 639 640 641 642
    if (info->ai_canonname == NULL ||
        STRPREFIX(info->ai_canonname, "localhost"))
        /* in this case, we tried to canonicalize and we ended up back with
         * localhost.  Ignore the canonicalized name and just return the
         * original hostname
         */
        result = strdup(hostname);
    else
        /* Caller frees this string. */
643
        result = strdup(info->ai_canonname);
644

C
Chris Lalancette 已提交
645
    freeaddrinfo(info);
646

C
Chris Lalancette 已提交
647 648
check_and_return:
    if (result == NULL)
649
        virReportOOMError();
650 651 652
    return result;
}

653
#ifdef HAVE_GETPWUID_R
654 655 656 657 658
enum {
    VIR_USER_ENT_DIRECTORY,
    VIR_USER_ENT_NAME,
};

659
static char *virGetUserEnt(uid_t uid,
660
                           int field)
661 662 663 664
{
    char *strbuf;
    char *ret;
    struct passwd pwbuf;
665
    struct passwd *pw = NULL;
666 667
    long val = sysconf(_SC_GETPW_R_SIZE_MAX);
    size_t strbuflen = val;
668
    int rc;
669

670 671 672
    /* sysconf is a hint; if it fails, fall back to a reasonable size */
    if (val < 0)
        strbuflen = 1024;
673 674

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
675
        virReportOOMError();
676 677 678
        return NULL;
    }

679 680 681 682 683 684 685
    /*
     * From the manpage (terrifying but true):
     *
     * ERRORS
     *  0 or ENOENT or ESRCH or EBADF or EPERM or ...
     *        The given name or uid was not found.
     */
686 687 688 689 690 691 692 693 694
    while ((rc = getpwuid_r(uid, &pwbuf, strbuf, strbuflen, &pw)) == ERANGE) {
        if (VIR_RESIZE_N(strbuf, strbuflen, strbuflen, strbuflen) < 0) {
            virReportOOMError();
            VIR_FREE(strbuf);
            return NULL;
        }
    }
    if (rc != 0 || pw == NULL) {
        virReportSystemError(rc,
E
Eric Blake 已提交
695 696
                             _("Failed to find user record for uid '%u'"),
                             (unsigned int) uid);
697 698 699 700
        VIR_FREE(strbuf);
        return NULL;
    }

701 702 703 704
    if (field == VIR_USER_ENT_DIRECTORY)
        ret = strdup(pw->pw_dir);
    else
        ret = strdup(pw->pw_name);
705 706 707

    VIR_FREE(strbuf);
    if (!ret)
708
        virReportOOMError();
709 710 711

    return ret;
}
712

713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762
static char *virGetGroupEnt(gid_t gid)
{
    char *strbuf;
    char *ret;
    struct group grbuf;
    struct group *gr = NULL;
    long val = sysconf(_SC_GETGR_R_SIZE_MAX);
    size_t strbuflen = val;
    int rc;

    /* sysconf is a hint; if it fails, fall back to a reasonable size */
    if (val < 0)
        strbuflen = 1024;

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
        virReportOOMError();
        return NULL;
    }

    /*
     * From the manpage (terrifying but true):
     *
     * ERRORS
     *  0 or ENOENT or ESRCH or EBADF or EPERM or ...
     *        The given name or gid was not found.
     */
    while ((rc = getgrgid_r(gid, &grbuf, strbuf, strbuflen, &gr)) == ERANGE) {
        if (VIR_RESIZE_N(strbuf, strbuflen, strbuflen, strbuflen) < 0) {
            virReportOOMError();
            VIR_FREE(strbuf);
            return NULL;
        }
    }
    if (rc != 0 || gr == NULL) {
        virReportSystemError(rc,
                             _("Failed to find group record for gid '%u'"),
                             (unsigned int) gid);
        VIR_FREE(strbuf);
        return NULL;
    }

    ret = strdup(gr->gr_name);

    VIR_FREE(strbuf);
    if (!ret)
        virReportOOMError();

    return ret;
}

763
char *virGetUserDirectory(void)
764
{
765
    return virGetUserEnt(geteuid(), VIR_USER_ENT_DIRECTORY);
766 767
}

768
static char *virGetXDGDirectory(const char *xdgenvname, const char *xdgdefdir)
769
{
770
    const char *path = getenv(xdgenvname);
771
    char *ret = NULL;
772
    char *home = virGetUserEnt(geteuid(), VIR_USER_ENT_DIRECTORY);
773 774

    if (path && path[0]) {
775
        if (virAsprintf(&ret, "%s/libvirt", path) < 0)
776 777
            goto no_memory;
    } else {
778
        if (virAsprintf(&ret, "%s/%s/libvirt", home, xdgdefdir) < 0)
779 780 781 782 783 784 785 786 787 788 789
            goto no_memory;
    }

 cleanup:
    VIR_FREE(home);
    return ret;
 no_memory:
    virReportOOMError();
    goto cleanup;
}

790
char *virGetUserConfigDirectory(void)
791
{
792
    return virGetXDGDirectory("XDG_CONFIG_HOME", ".config");
793 794
}

795
char *virGetUserCacheDirectory(void)
796
{
797
     return virGetXDGDirectory("XDG_CACHE_HOME", ".cache");
798 799
}

800
char *virGetUserRuntimeDirectory(void)
801
{
802
    const char *path = getenv("XDG_RUNTIME_DIR");
803 804

    if (!path || !path[0]) {
805
        return virGetUserCacheDirectory();
806 807 808
    } else {
        char *ret;

809
        if (virAsprintf(&ret, "%s/libvirt", path) < 0) {
810 811 812 813 814 815 816 817
            virReportOOMError();
            return NULL;
        }

        return ret;
    }
}

818
char *virGetUserName(uid_t uid)
819
{
820
    return virGetUserEnt(uid, VIR_USER_ENT_NAME);
821 822
}

823 824 825 826 827
char *virGetGroupName(gid_t gid)
{
    return virGetGroupEnt(gid);
}

828 829 830 831 832
/* Search in the password database for a user id that matches the user name
 * `name`. Returns 0 on success, -1 on failure or 1 if name cannot be found.
 */
static int
virGetUserIDByName(const char *name, uid_t *uid)
833
{
834
    char *strbuf = NULL;
835 836
    struct passwd pwbuf;
    struct passwd *pw = NULL;
837 838
    long val = sysconf(_SC_GETPW_R_SIZE_MAX);
    size_t strbuflen = val;
839
    int rc;
840
    int ret = -1;
841

842 843 844
    /* sysconf is a hint; if it fails, fall back to a reasonable size */
    if (val < 0)
        strbuflen = 1024;
845 846

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
847
        virReportOOMError();
848
        goto cleanup;
849 850
    }

851 852 853
    while ((rc = getpwnam_r(name, &pwbuf, strbuf, strbuflen, &pw)) == ERANGE) {
        if (VIR_RESIZE_N(strbuf, strbuflen, strbuflen, strbuflen) < 0) {
            virReportOOMError();
854
            goto cleanup;
855 856
        }
    }
857 858

    if (!pw) {
859 860 861 862 863
        if (rc != 0) {
            char buf[1024];
            /* log the possible error from getpwnam_r. Unfortunately error
             * reporting from this function is bad and we can't really
             * rely on it, so we just report that the user wasn't found */
864
            VIR_WARN("User record for user '%s' was not found: %s",
865 866 867
                     name, virStrerror(rc, buf, sizeof(buf)));
        }

868 869
        ret = 1;
        goto cleanup;
870 871 872
    }

    *uid = pw->pw_uid;
873
    ret = 0;
874

875
cleanup:
876 877
    VIR_FREE(strbuf);

878
    return ret;
879 880
}

881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910
/* Try to match a user id based on `user`. The default behavior is to parse
 * `user` first as a user name and then as a user id. However if `user`
 * contains a leading '+', the rest of the string is always parsed as a uid.
 *
 * Returns 0 on success and -1 otherwise.
 */
int
virGetUserID(const char *user, uid_t *uid)
{
    unsigned int uint_uid;

    if (*user == '+') {
        user++;
    } else {
        int rc = virGetUserIDByName(user, uid);
        if (rc <= 0)
            return rc;
    }

    if (virStrToLong_ui(user, NULL, 10, &uint_uid) < 0 ||
        ((uid_t) uint_uid) != uint_uid) {
        virReportError(VIR_ERR_INVALID_ARG, _("Failed to parse user '%s'"),
                       user);
        return -1;
    }

    *uid = uint_uid;

    return 0;
}
911

912 913 914 915 916
/* Search in the group database for a group id that matches the group name
 * `name`. Returns 0 on success, -1 on failure or 1 if name cannot be found.
 */
static int
virGetGroupIDByName(const char *name, gid_t *gid)
917
{
918
    char *strbuf = NULL;
919 920
    struct group grbuf;
    struct group *gr = NULL;
921 922
    long val = sysconf(_SC_GETGR_R_SIZE_MAX);
    size_t strbuflen = val;
923
    int rc;
924
    int ret = -1;
925

926 927 928
    /* sysconf is a hint; if it fails, fall back to a reasonable size */
    if (val < 0)
        strbuflen = 1024;
929 930

    if (VIR_ALLOC_N(strbuf, strbuflen) < 0) {
931
        virReportOOMError();
932
        goto cleanup;
933 934
    }

935 936 937
    while ((rc = getgrnam_r(name, &grbuf, strbuf, strbuflen, &gr)) == ERANGE) {
        if (VIR_RESIZE_N(strbuf, strbuflen, strbuflen, strbuflen) < 0) {
            virReportOOMError();
938
            goto cleanup;
939 940
        }
    }
941 942

    if (!gr) {
943 944 945 946 947
        if (rc != 0) {
            char buf[1024];
            /* log the possible error from getgrnam_r. Unfortunately error
             * reporting from this function is bad and we can't really
             * rely on it, so we just report that the user wasn't found */
948
            VIR_WARN("Group record for user '%s' was not found: %s",
949 950 951
                     name, virStrerror(rc, buf, sizeof(buf)));
        }

952 953
        ret = 1;
        goto cleanup;
954 955 956
    }

    *gid = gr->gr_gid;
957
    ret = 0;
958

959
cleanup:
960 961
    VIR_FREE(strbuf);

962
    return ret;
963
}
964

965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994
/* Try to match a group id based on `group`. The default behavior is to parse
 * `group` first as a group name and then as a group id. However if `group`
 * contains a leading '+', the rest of the string is always parsed as a guid.
 *
 * Returns 0 on success and -1 otherwise.
 */
int
virGetGroupID(const char *group, gid_t *gid)
{
    unsigned int uint_gid;

    if (*group == '+') {
        group++;
    } else {
        int rc = virGetGroupIDByName(group, gid);
        if (rc <= 0)
            return rc;
    }

    if (virStrToLong_ui(group, NULL, 10, &uint_gid) < 0 ||
        ((gid_t) uint_gid) != uint_gid) {
        virReportError(VIR_ERR_INVALID_ARG, _("Failed to parse group '%s'"),
                       group);
        return -1;
    }

    *gid = uint_gid;

    return 0;
}
L
Laine Stump 已提交
995 996 997

/* Set the real and effective uid and gid to the given values, and call
 * initgroups so that the process has all the assumed group membership of
998 999
 * that uid. return 0 on success, -1 on failure (the original system error
 * remains in errno).
L
Laine Stump 已提交
1000 1001 1002 1003
 */
int
virSetUIDGID(uid_t uid, gid_t gid)
{
1004
    int err;
1005
    char *buf = NULL;
1006

1007
    if (gid != (gid_t)-1) {
L
Laine Stump 已提交
1008
        if (setregid(gid, gid) < 0) {
1009
            virReportSystemError(err = errno,
1010
                                 _("cannot change to '%u' group"),
E
Eric Blake 已提交
1011
                                 (unsigned int) gid);
1012
            goto error;
L
Laine Stump 已提交
1013 1014 1015
        }
    }

1016
    if (uid != (uid_t)-1) {
L
Laine Stump 已提交
1017 1018 1019
# ifdef HAVE_INITGROUPS
        struct passwd pwd, *pwd_result;
        size_t bufsize;
1020
        int rc;
L
Laine Stump 已提交
1021 1022 1023 1024 1025 1026 1027

        bufsize = sysconf(_SC_GETPW_R_SIZE_MAX);
        if (bufsize == -1)
            bufsize = 16384;

        if (VIR_ALLOC_N(buf, bufsize) < 0) {
            virReportOOMError();
1028 1029
            err = ENOMEM;
            goto error;
L
Laine Stump 已提交
1030
        }
1031 1032 1033 1034
        while ((rc = getpwuid_r(uid, &pwd, buf, bufsize,
                                &pwd_result)) == ERANGE) {
            if (VIR_RESIZE_N(buf, bufsize, bufsize, bufsize) < 0) {
                virReportOOMError();
1035 1036
                err = ENOMEM;
                goto error;
1037 1038
            }
        }
1039 1040

        if (rc) {
1041
            virReportSystemError(err = rc, _("cannot getpwuid_r(%u)"),
E
Eric Blake 已提交
1042
                                 (unsigned int) uid);
1043
            goto error;
L
Laine Stump 已提交
1044
        }
1045 1046 1047 1048

        if (!pwd_result) {
            virReportError(VIR_ERR_INTERNAL_ERROR,
                           _("getpwuid_r failed to retrieve data "
1049
                             "for uid '%u'"),
1050 1051 1052 1053 1054
                           (unsigned int) uid);
            err = EINVAL;
            goto error;
        }

L
Laine Stump 已提交
1055
        if (initgroups(pwd.pw_name, pwd.pw_gid) < 0) {
1056
            virReportSystemError(err = errno,
L
Laine Stump 已提交
1057
                                 _("cannot initgroups(\"%s\", %d)"),
E
Eric Blake 已提交
1058
                                 pwd.pw_name, (unsigned int) pwd.pw_gid);
1059
            goto error;
L
Laine Stump 已提交
1060 1061 1062
        }
# endif
        if (setreuid(uid, uid) < 0) {
1063
            virReportSystemError(err = errno,
1064
                                 _("cannot change to uid to '%u'"),
E
Eric Blake 已提交
1065
                                 (unsigned int) uid);
1066
            goto error;
L
Laine Stump 已提交
1067 1068
        }
    }
1069 1070

    VIR_FREE(buf);
L
Laine Stump 已提交
1071
    return 0;
1072 1073

error:
1074
    VIR_FREE(buf);
1075 1076
    errno = err;
    return -1;
L
Laine Stump 已提交
1077 1078
}

1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157
#else /* ! HAVE_GETPWUID_R */

# ifdef WIN32
/* These methods are adapted from GLib2 under terms of LGPLv2+ */
static int
virGetWin32SpecialFolder(int csidl, char **path)
{
    char buf[MAX_PATH+1];
    LPITEMIDLIST pidl = NULL;
    int ret = 0;

    *path = NULL;

    if (SHGetSpecialFolderLocation(NULL, csidl, &pidl) == S_OK) {
        if (SHGetPathFromIDList(pidl, buf)) {
            if (!(*path = strdup(buf))) {
                virReportOOMError();
                ret = -1;
            }
        }
        CoTaskMemFree(pidl);
    }
    return ret;
}

static int
virGetWin32DirectoryRoot(char **path)
{
    char windowsdir[MAX_PATH];
    int ret = 0;

    *path = NULL;

    if (GetWindowsDirectory(windowsdir, ARRAY_CARDINALITY(windowsdir)))
    {
        const char *tmp;
        /* Usually X:\Windows, but in terminal server environments
         * might be an UNC path, AFAIK.
         */
        tmp = virFileSkipRoot(windowsdir);
        if (VIR_FILE_IS_DIR_SEPARATOR(tmp[-1]) &&
            tmp[-2] != ':')
            tmp--;

        windowsdir[tmp - windowsdir] = '\0';
    } else {
        strcpy(windowsdir, "C:\\");
    }

    if (!(*path = strdup(windowsdir))) {
        virReportOOMError();
        ret = -1;
    }

    return ret;
}



char *
virGetUserDirectory(void)
{
    const char *dir;
    char *ret;

    dir = getenv("HOME");

    /* Only believe HOME if it is an absolute path and exists */
    if (dir) {
        if (!virFileIsAbsPath(dir) ||
            !virFileExists(dir))
            dir = NULL;
    }

    /* In case HOME is Unix-style (it happens), convert it to
     * Windows style.
     */
    if (dir) {
        char *p;
1158
        while ((p = strchr(dir, '/')) != NULL)
1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181
            *p = '\\';
    }

    if (!dir)
        /* USERPROFILE is probably the closest equivalent to $HOME? */
        dir = getenv("USERPROFILE");

    if (dir) {
        if (!(ret = strdup(dir))) {
            virReportOOMError();
            return NULL;
        }
    }

    if (!ret &&
        virGetWin32SpecialFolder(CSIDL_PROFILE, &ret) < 0)
        return NULL;

    if (!ret &&
        virGetWin32DirectoryRoot(&ret) < 0)
        return NULL;

    if (!ret) {
1182 1183
        virReportError(VIR_ERR_INTERNAL_ERROR, "%s",
                       _("Unable to determine home directory"));
1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195
        return NULL;
    }

    return ret;
}

char *
virGetUserConfigDirectory(void)
{
    char *ret;
    if (virGetWin32SpecialFolder(CSIDL_LOCAL_APPDATA, &ret) < 0)
        return NULL;
1196

1197
    if (!ret) {
1198 1199
        virReportError(VIR_ERR_INTERNAL_ERROR, "%s",
                       _("Unable to determine config directory"));
1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212
        return NULL;
    }
    return ret;
}

char *
virGetUserCacheDirectory(void)
{
    char *ret;
    if (virGetWin32SpecialFolder(CSIDL_INTERNET_CACHE, &ret) < 0)
        return NULL;

    if (!ret) {
1213 1214
        virReportError(VIR_ERR_INTERNAL_ERROR, "%s",
                       _("Unable to determine config directory"));
1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225
        return NULL;
    }
    return ret;
}

char *
virGetUserRuntimeDirectory(void)
{
    return virGetUserCacheDirectory();
}
# else /* !HAVE_GETPWUID_R && !WIN32 */
1226
char *
1227
virGetUserDirectory(void)
1228
{
1229 1230
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetUserDirectory is not available"));
1231 1232 1233 1234

    return NULL;
}

1235 1236 1237
char *
virGetUserConfigDirectory(void)
{
1238 1239
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetUserConfigDirectory is not available"));
1240 1241 1242 1243 1244 1245 1246

    return NULL;
}

char *
virGetUserCacheDirectory(void)
{
1247 1248
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetUserCacheDirectory is not available"));
1249 1250 1251 1252 1253 1254 1255

    return NULL;
}

char *
virGetUserRuntimeDirectory(void)
{
1256 1257
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetUserRuntimeDirectory is not available"));
1258 1259 1260 1261 1262

    return NULL;
}
# endif /* ! HAVE_GETPWUID_R && ! WIN32 */

1263 1264 1265
char *
virGetUserName(uid_t uid ATTRIBUTE_UNUSED)
{
1266 1267
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetUserName is not available"));
1268 1269 1270 1271 1272 1273 1274

    return NULL;
}

int virGetUserID(const char *name ATTRIBUTE_UNUSED,
                 uid_t *uid ATTRIBUTE_UNUSED)
{
1275 1276
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetUserID is not available"));
1277 1278 1279 1280 1281 1282 1283 1284

    return 0;
}


int virGetGroupID(const char *name ATTRIBUTE_UNUSED,
                  gid_t *gid ATTRIBUTE_UNUSED)
{
1285 1286
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetGroupID is not available"));
1287 1288 1289

    return 0;
}
L
Laine Stump 已提交
1290 1291 1292 1293 1294

int
virSetUIDGID(uid_t uid ATTRIBUTE_UNUSED,
             gid_t gid ATTRIBUTE_UNUSED)
{
1295 1296
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virSetUIDGID is not available"));
L
Laine Stump 已提交
1297 1298
    return -1;
}
1299 1300 1301 1302

char *
virGetGroupName(gid_t gid ATTRIBUTE_UNUSED)
{
1303 1304
    virReportError(VIR_ERR_INTERNAL_ERROR,
                   "%s", _("virGetGroupName is not available"));
1305 1306 1307

    return NULL;
}
1308
#endif /* HAVE_GETPWUID_R */
1309

1310 1311 1312 1313 1314 1315 1316
#if WITH_CAPNG
/* Set the real and effective uid and gid to the given values, while
 * maintaining the capabilities indicated by bits in @capBits. Return
 * 0 on success, -1 on failure (the original system error remains in
 * errno).
 */
int
1317 1318
virSetUIDGIDWithCaps(uid_t uid, gid_t gid, unsigned long long capBits,
                     bool clearExistingCaps)
1319 1320 1321
{
    int ii, capng_ret, ret = -1;
    bool need_setgid = false, need_setuid = false;
1322
    bool need_setpcap = false;
1323

1324 1325 1326 1327
    /* First drop all caps (unless the requested uid is "unchanged" or
     * root and clearExistingCaps wasn't requested), then add back
     * those in capBits + the extra ones we need to change uid/gid and
     * change the capabilities bounding set.
1328 1329
     */

1330
    if (clearExistingCaps || (uid != (uid_t)-1 && uid != 0))
1331
       capng_clear(CAPNG_SELECT_BOTH);
1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362

    for (ii = 0; ii <= CAP_LAST_CAP; ii++) {
        if (capBits & (1ULL << ii)) {
            capng_update(CAPNG_ADD,
                         CAPNG_EFFECTIVE|CAPNG_INHERITABLE|
                         CAPNG_PERMITTED|CAPNG_BOUNDING_SET,
                         ii);
        }
    }

    if (gid != (gid_t)-1 &&
        !capng_have_capability(CAPNG_EFFECTIVE, CAP_SETGID)) {
        need_setgid = true;
        capng_update(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED, CAP_SETGID);
    }
    if (uid != (uid_t)-1 &&
        !capng_have_capability(CAPNG_EFFECTIVE, CAP_SETUID)) {
        need_setuid = true;
        capng_update(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED, CAP_SETUID);
    }
# ifdef PR_CAPBSET_DROP
    /* If newer kernel, we need also need setpcap to change the bounding set */
    if ((capBits || need_setgid || need_setuid) &&
        !capng_have_capability(CAPNG_EFFECTIVE, CAP_SETPCAP)) {
        need_setpcap = true;
    }
    if (need_setpcap)
        capng_update(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED, CAP_SETPCAP);
# endif

    /* Tell system we want to keep caps across uid change */
1363
    if (prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0)) {
1364 1365 1366 1367 1368 1369
        virReportSystemError(errno, "%s",
                             _("prctl failed to set KEEPCAPS"));
        goto cleanup;
    }

    /* Change to the temp capabilities */
1370
    if ((capng_ret = capng_apply(CAPNG_SELECT_CAPS)) < 0) {
1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385
        /* Failed.  If we are running unprivileged, and the arguments make sense
         * for this scenario, assume we're starting some kind of setuid helper:
         * do not set any of capBits in the permitted or effective sets, and let
         * the program get them on its own.
         *
         * (Too bad we cannot restrict the bounding set to the capabilities we
         * would like the helper to have!).
         */
        if (getuid() > 0 && clearExistingCaps && !need_setuid && !need_setgid) {
            capng_clear(CAPNG_SELECT_CAPS);
        } else {
            virReportError(VIR_ERR_INTERNAL_ERROR,
                           _("cannot apply process capabilities %d"), capng_ret);
            goto cleanup;
        }
1386 1387 1388 1389 1390 1391
    }

    if (virSetUIDGID(uid, gid) < 0)
        goto cleanup;

    /* Tell it we are done keeping capabilities */
1392
    if (prctl(PR_SET_KEEPCAPS, 0, 0, 0, 0)) {
1393 1394 1395 1396 1397
        virReportSystemError(errno, "%s",
                             _("prctl failed to reset KEEPCAPS"));
        goto cleanup;
    }

1398 1399 1400 1401 1402 1403
    /* Set bounding set while we have CAP_SETPCAP.  Unfortunately we cannot
     * do this if we failed to get the capability above, so ignore the
     * return value.
     */
    capng_apply(CAPNG_SELECT_BOUNDS);

1404 1405 1406 1407 1408 1409 1410 1411 1412
    /* Drop the caps that allow setuid/gid (unless they were requested) */
    if (need_setgid)
        capng_update(CAPNG_DROP, CAPNG_EFFECTIVE|CAPNG_PERMITTED, CAP_SETGID);
    if (need_setuid)
        capng_update(CAPNG_DROP, CAPNG_EFFECTIVE|CAPNG_PERMITTED, CAP_SETUID);
    /* Throw away CAP_SETPCAP so no more changes */
    if (need_setpcap)
        capng_update(CAPNG_DROP, CAPNG_EFFECTIVE|CAPNG_PERMITTED, CAP_SETPCAP);

1413
    if (((capng_ret = capng_apply(CAPNG_SELECT_CAPS)) < 0)) {
1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       _("cannot apply process capabilities %d"), capng_ret);
        ret = -1;
        goto cleanup;
    }

    ret = 0;
cleanup:
    return ret;
}

#else
/*
 * On platforms without libcapng, the capabilities setting is treated
 * as a NOP.
 */

int
virSetUIDGIDWithCaps(uid_t uid, gid_t gid,
1433 1434
                     unsigned long long capBits ATTRIBUTE_UNUSED,
                     bool clearExistingCaps ATTRIBUTE_UNUSED)
1435 1436 1437 1438 1439
{
    return virSetUIDGID(uid, gid);
}
#endif

1440

1441
#if defined(UDEVADM) || defined(UDEVSETTLE)
1442
void virFileWaitForDevices(void)
D
Daniel P. Berrange 已提交
1443
{
1444
# ifdef UDEVADM
D
Daniel P. Berrange 已提交
1445
    const char *const settleprog[] = { UDEVADM, "settle", NULL };
1446
# else
D
Daniel P. Berrange 已提交
1447
    const char *const settleprog[] = { UDEVSETTLE, NULL };
1448
# endif
D
Daniel P. Berrange 已提交
1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459
    int exitstatus;

    if (access(settleprog[0], X_OK) != 0)
        return;

    /*
     * NOTE: we ignore errors here; this is just to make sure that any device
     * nodes that are being created finish before we try to scan them.
     * If this fails for any reason, we still have the backup of polling for
     * 5 seconds for device nodes.
     */
1460
    if (virRun(settleprog, &exitstatus) < 0)
1461
    {}
D
Daniel P. Berrange 已提交
1462
}
1463
#else
1464
void virFileWaitForDevices(void) {}
D
Daniel P. Berrange 已提交
1465
#endif
1466

1467
#if HAVE_LIBDEVMAPPER_H
1468
bool
1469
virIsDevMapperDevice(const char *dev_name)
1470 1471 1472
{
    struct stat buf;

1473
    if (!stat(dev_name, &buf) &&
1474 1475 1476 1477 1478 1479
        S_ISBLK(buf.st_mode) &&
        dm_is_dm_major(major(buf.st_rdev)))
            return true;

    return false;
}
1480
#else
1481
bool virIsDevMapperDevice(const char *dev_name ATTRIBUTE_UNUSED)
1482 1483 1484 1485
{
    return false;
}
#endif
O
Osier Yang 已提交
1486 1487 1488 1489

bool
virValidateWWN(const char *wwn) {
    int i;
1490
    const char *p = wwn;
O
Osier Yang 已提交
1491

1492 1493 1494 1495 1496 1497
    if (STRPREFIX(wwn, "0x")) {
        p += 2;
    }

    for (i = 0; p[i]; i++) {
        if (!c_isxdigit(p[i]))
O
Osier Yang 已提交
1498
            break;
1499
    }
O
Osier Yang 已提交
1500

1501
    if (i != 16 || p[i]) {
O
Osier Yang 已提交
1502 1503 1504 1505 1506 1507 1508
        virReportError(VIR_ERR_INTERNAL_ERROR, "%s",
                       _("Malformed wwn: %s"));
        return false;
    }

    return true;
}
1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520

bool
virStrIsPrint(const char *str)
{
    int i;

    for (i = 0; str[i]; i++)
        if (!c_isprint(str[i]))
            return false;

    return true;
}
1521 1522 1523 1524 1525 1526 1527

#if defined(major) && defined(minor)
int
virGetDeviceID(const char *path, int *maj, int *min)
{
    struct stat sb;

1528
    if (stat(path, &sb) < 0)
1529 1530
        return -errno;

1531
    if (!S_ISBLK(sb.st_mode))
1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542
        return -EINVAL;

    if (maj)
        *maj = major(sb.st_rdev);
    if (min)
        *min = minor(sb.st_rdev);

    return 0;
}
#else
int
E
Eric Blake 已提交
1543 1544 1545
virGetDeviceID(const char *path ATTRIBUTE_UNUSED,
               int *maj ATTRIBUTE_UNUSED,
               int *min ATTRIBUTE_UNUSED)
1546 1547 1548 1549 1550 1551 1552 1553
{

    return -ENOSYS;
}
#endif

#define SYSFS_DEV_BLOCK_PATH "/sys/dev/block"

1554
char *
1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651
virGetUnprivSGIOSysfsPath(const char *path,
                          const char *sysfs_dir)
{
    int maj, min;
    char *sysfs_path = NULL;
    int rc;

    if ((rc = virGetDeviceID(path, &maj, &min)) < 0) {
        virReportSystemError(-rc,
                             _("Unable to get device ID '%s'"),
                             path);
        return NULL;
    }

    if (virAsprintf(&sysfs_path, "%s/%d:%d/queue/unpriv_sgio",
                    sysfs_dir ? sysfs_dir : SYSFS_DEV_BLOCK_PATH,
                    maj, min) < 0) {
        virReportOOMError();
        return NULL;
    }

    return sysfs_path;
}

int
virSetDeviceUnprivSGIO(const char *path,
                       const char *sysfs_dir,
                       int unpriv_sgio)
{
    char *sysfs_path = NULL;
    char *val = NULL;
    int ret = -1;
    int rc;

    if (!(sysfs_path = virGetUnprivSGIOSysfsPath(path, sysfs_dir)))
        return -1;

    if (!virFileExists(sysfs_path)) {
        virReportError(VIR_ERR_OPERATION_INVALID, "%s",
                       _("unpriv_sgio is not supported by this kernel"));
        goto cleanup;
    }

    if (virAsprintf(&val, "%d", unpriv_sgio) < 0) {
        virReportOOMError();
        goto cleanup;
    }

    if ((rc = virFileWriteStr(sysfs_path, val, 0)) < 0) {
        virReportSystemError(-rc, _("failed to set %s"), sysfs_path);
        goto cleanup;
    }

    ret = 0;
cleanup:
    VIR_FREE(sysfs_path);
    VIR_FREE(val);
    return ret;
}

int
virGetDeviceUnprivSGIO(const char *path,
                       const char *sysfs_dir,
                       int *unpriv_sgio)
{
    char *sysfs_path = NULL;
    char *buf = NULL;
    char *tmp = NULL;
    int ret = -1;

    if (!(sysfs_path = virGetUnprivSGIOSysfsPath(path, sysfs_dir)))
        return -1;

    if (!virFileExists(sysfs_path)) {
        virReportError(VIR_ERR_OPERATION_INVALID, "%s",
                       _("unpriv_sgio is not supported by this kernel"));
        goto cleanup;
    }

    if (virFileReadAll(sysfs_path, 1024, &buf) < 0)
        goto cleanup;

    if ((tmp = strchr(buf, '\n')))
        *tmp = '\0';

    if (virStrToLong_i(buf, NULL, 10, unpriv_sgio) < 0) {
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       _("failed to parse value of %s"), sysfs_path);
        goto cleanup;
    }

    ret = 0;
cleanup:
    VIR_FREE(sysfs_path);
    VIR_FREE(buf);
    return ret;
}
1652 1653 1654

#ifdef __linux__
# define SYSFS_FC_HOST_PATH "/sys/class/fc_host/"
O
Osier Yang 已提交
1655
# define SYSFS_SCSI_HOST_PATH "/sys/class/scsi_host/"
1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697

/* virReadFCHost:
 * @sysfs_prefix: "fc_host" sysfs path, defaults to SYSFS_FC_HOST_PATH
 * @host: Host number, E.g. 5 of "fc_host/host5"
 * @entry: Name of the sysfs entry to read
 * @result: Return the entry value as string
 *
 * Read the value of sysfs "fc_host" entry.
 *
 * Returns 0 on success, and @result is filled with the entry value.
 * as string, Otherwise returns -1. Caller must free @result after
 * use.
 */
int
virReadFCHost(const char *sysfs_prefix,
              int host,
              const char *entry,
              char **result)
{
    char *sysfs_path = NULL;
    char *p = NULL;
    int ret = -1;
    char *buf = NULL;

    if (virAsprintf(&sysfs_path, "%s/host%d/%s",
                    sysfs_prefix ? sysfs_prefix : SYSFS_FC_HOST_PATH,
                    host, entry) < 0) {
        virReportOOMError();
        goto cleanup;
    }

    if (virFileReadAll(sysfs_path, 1024, &buf) < 0)
        goto cleanup;

    if ((p = strchr(buf, '\n')))
        *p = '\0';

    if ((p = strstr(buf, "0x")))
        p += strlen("0x");
    else
        p = buf;

O
Osier Yang 已提交
1698
    if (VIR_STRDUP(*result, p) < 0)
1699 1700 1701 1702 1703 1704 1705 1706
        goto cleanup;

    ret = 0;
cleanup:
    VIR_FREE(sysfs_path);
    VIR_FREE(buf);
    return ret;
}
O
Osier Yang 已提交
1707

1708
bool
O
Osier Yang 已提交
1709 1710 1711 1712
virIsCapableFCHost(const char *sysfs_prefix,
                   int host)
{
    char *sysfs_path = NULL;
1713
    bool ret = false;
O
Osier Yang 已提交
1714

1715
    if (virAsprintf(&sysfs_path, "%s/host%d",
O
Osier Yang 已提交
1716 1717 1718
                    sysfs_prefix ? sysfs_prefix : SYSFS_FC_HOST_PATH,
                    host) < 0) {
        virReportOOMError();
1719
        return false;
O
Osier Yang 已提交
1720 1721 1722
    }

    if (access(sysfs_path, F_OK) == 0)
1723
        ret = true;
O
Osier Yang 已提交
1724 1725 1726 1727 1728

    VIR_FREE(sysfs_path);
    return ret;
}

1729
bool
O
Osier Yang 已提交
1730 1731 1732 1733 1734
virIsCapableVport(const char *sysfs_prefix,
                  int host)
{
    char *scsi_host_path = NULL;
    char *fc_host_path = NULL;
1735
    int ret = false;
O
Osier Yang 已提交
1736 1737

    if (virAsprintf(&fc_host_path,
1738
                    "%s/host%d/%s",
O
Osier Yang 已提交
1739 1740 1741 1742
                    sysfs_prefix ? sysfs_prefix : SYSFS_FC_HOST_PATH,
                    host,
                    "vport_create") < 0) {
        virReportOOMError();
1743
        return false;
O
Osier Yang 已提交
1744 1745 1746
    }

    if (virAsprintf(&scsi_host_path,
1747
                    "%s/host%d/%s",
O
Osier Yang 已提交
1748 1749 1750 1751 1752 1753 1754 1755 1756
                    sysfs_prefix ? sysfs_prefix : SYSFS_SCSI_HOST_PATH,
                    host,
                    "vport_create") < 0) {
        virReportOOMError();
        goto cleanup;
    }

    if ((access(fc_host_path, F_OK) == 0) ||
        (access(scsi_host_path, F_OK) == 0))
1757
        ret = true;
O
Osier Yang 已提交
1758 1759 1760 1761 1762 1763

cleanup:
    VIR_FREE(fc_host_path);
    VIR_FREE(scsi_host_path);
    return ret;
}
1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788

int
virManageVport(const int parent_host,
               const char *wwpn,
               const char *wwnn,
               int operation)
{
    int ret = -1;
    char *operation_path = NULL, *vport_name = NULL;
    const char *operation_file = NULL;

    switch (operation) {
    case VPORT_CREATE:
        operation_file = "vport_create";
        break;
    case VPORT_DELETE:
        operation_file = "vport_delete";
        break;
    default:
        virReportError(VIR_ERR_OPERATION_INVALID,
                       _("Invalid vport operation (%d)"), operation);
        goto cleanup;
    }

    if (virAsprintf(&operation_path,
1789
                    "%s/host%d/%s",
1790 1791 1792 1793 1794 1795 1796 1797 1798 1799
                    SYSFS_FC_HOST_PATH,
                    parent_host,
                    operation_file) < 0) {
        virReportOOMError();
        goto cleanup;
    }

    if (!virFileExists(operation_path)) {
        VIR_FREE(operation_path);
        if (virAsprintf(&operation_path,
1800
                        "%s/host%d/%s",
1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817
                        SYSFS_SCSI_HOST_PATH,
                        parent_host,
                        operation_file) < 0) {
            virReportOOMError();
            goto cleanup;
        }

        if (!virFileExists(operation_path)) {
            virReportError(VIR_ERR_OPERATION_INVALID,
                           _("vport operation '%s' is not supported for host%d"),
                           operation_file, parent_host);
            goto cleanup;
        }
    }

    if (virAsprintf(&vport_name,
                    "%s:%s",
O
Osier Yang 已提交
1818 1819
                    wwnn,
                    wwpn) < 0) {
1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836
        virReportOOMError();
        goto cleanup;
    }

    if (virFileWriteStr(operation_path, vport_name, 0) == 0)
        ret = 0;
    else
        virReportSystemError(errno,
                             _("Write of '%s' to '%s' during "
                               "vport create/delete failed"),
                             vport_name, operation_path);

cleanup:
    VIR_FREE(vport_name);
    VIR_FREE(operation_path);
    return ret;
}
1837 1838 1839

/* virGetHostNameByWWN:
 *
1840
 * Iterate over the sysfs tree to get FC host name (e.g. host5)
1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880
 * by wwnn,wwpn pair.
 */
char *
virGetFCHostNameByWWN(const char *sysfs_prefix,
                      const char *wwnn,
                      const char *wwpn)
{
    const char *prefix = sysfs_prefix ? sysfs_prefix : SYSFS_FC_HOST_PATH;
    struct dirent *entry = NULL;
    DIR *dir = NULL;
    char *wwnn_path = NULL;
    char *wwpn_path = NULL;
    char *wwnn_buf = NULL;
    char *wwpn_buf = NULL;
    char *p;
    char *ret = NULL;

    if (!(dir = opendir(prefix))) {
        virReportSystemError(errno,
                             _("Failed to opendir path '%s'"),
                             prefix);
        return NULL;
    }

# define READ_WWN(wwn_path, buf)                      \
    do {                                              \
        if (virFileReadAll(wwn_path, 1024, &buf) < 0) \
            goto cleanup;                             \
        if ((p = strchr(buf, '\n')))                  \
            *p = '\0';                                \
        if (STRPREFIX(buf, "0x"))                     \
            p = buf + strlen("0x");                   \
        else                                          \
            p = buf;                                  \
    } while (0)

    while ((entry = readdir(dir))) {
        if (entry->d_name[0] == '.')
            continue;

1881
        if (virAsprintf(&wwnn_path, "%s/%s/node_name", prefix,
1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899
                        entry->d_name) < 0) {
            virReportOOMError();
            goto cleanup;
        }

        if (!virFileExists(wwnn_path)) {
            VIR_FREE(wwnn_path);
            continue;
        }

        READ_WWN(wwnn_path, wwnn_buf);

        if (STRNEQ(wwnn, p)) {
            VIR_FREE(wwnn_buf);
            VIR_FREE(wwnn_path);
            continue;
        }

1900
        if (virAsprintf(&wwpn_path, "%s/%s/port_name", prefix,
1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935
                        entry->d_name) < 0) {
            virReportOOMError();
            goto cleanup;
        }

        if (!virFileExists(wwpn_path)) {
            VIR_FREE(wwnn_buf);
            VIR_FREE(wwnn_path);
            VIR_FREE(wwpn_path);
            continue;
        }

        READ_WWN(wwpn_path, wwpn_buf);

        if (STRNEQ(wwpn, p)) {
            VIR_FREE(wwnn_path);
            VIR_FREE(wwpn_path);
            VIR_FREE(wwnn_buf);
            VIR_FREE(wwpn_buf);
            continue;
        }

        ret = strdup(entry->d_name);
        break;
    }

cleanup:
# undef READ_WWN
    closedir(dir);
    VIR_FREE(wwnn_path);
    VIR_FREE(wwpn_path);
    VIR_FREE(wwnn_buf);
    VIR_FREE(wwpn_buf);
    return ret;
}
1936 1937 1938 1939 1940 1941

# define PORT_STATE_ONLINE "Online"

/* virFindFCHostCapableVport:
 *
 * Iterate over the sysfs and find out the first online HBA which
O
Osier Yang 已提交
1942 1943
 * supports vport, and not saturated. Returns the host name (e.g.
 * host5) on success, or NULL on failure.
1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976
 */
char *
virFindFCHostCapableVport(const char *sysfs_prefix)
{
    const char *prefix = sysfs_prefix ? sysfs_prefix : SYSFS_FC_HOST_PATH;
    DIR *dir = NULL;
    struct dirent *entry = NULL;
    char *max_vports = NULL;
    char *vports = NULL;
    char *state = NULL;
    char *ret = NULL;

    if (!(dir = opendir(prefix))) {
        virReportSystemError(errno,
                             _("Failed to opendir path '%s'"),
                             prefix);
        return NULL;
    }

    while ((entry = readdir(dir))) {
        unsigned int host;
        char *p = NULL;

        if (entry->d_name[0] == '.')
            continue;

        p = entry->d_name + strlen("host");
        if (virStrToLong_ui(p, NULL, 10, &host) == -1) {
            VIR_DEBUG("Failed to parse host number from '%s'",
                      entry->d_name);
            continue;
        }

O
Osier Yang 已提交
1977
        if (!virIsCapableVport(prefix, host))
1978 1979
            continue;

O
Osier Yang 已提交
1980
        if (virReadFCHost(prefix, host, "port_state", &state) < 0) {
1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991
             VIR_DEBUG("Failed to read port_state for host%d", host);
             continue;
        }

        /* Skip the not online FC host */
        if (STRNEQ(state, PORT_STATE_ONLINE)) {
            VIR_FREE(state);
            continue;
        }
        VIR_FREE(state);

O
Osier Yang 已提交
1992
        if (virReadFCHost(prefix, host, "max_npiv_vports", &max_vports) < 0) {
1993 1994 1995 1996
             VIR_DEBUG("Failed to read max_npiv_vports for host%d", host);
             continue;
        }

O
Osier Yang 已提交
1997
        if (virReadFCHost(prefix, host, "npiv_vports_inuse", &vports) < 0) {
1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022
             VIR_DEBUG("Failed to read npiv_vports_inuse for host%d", host);
             VIR_FREE(max_vports);
             continue;
        }

        /* Compare from the strings directly, instead of converting
         * the strings to integers first
         */
        if ((strlen(max_vports) >= strlen(vports)) ||
            ((strlen(max_vports) == strlen(vports)) &&
             strcmp(max_vports, vports) > 0)) {
            ret = strdup(entry->d_name);
            goto cleanup;
        }

        VIR_FREE(max_vports);
        VIR_FREE(vports);
    }

cleanup:
    closedir(dir);
    VIR_FREE(max_vports);
    VIR_FREE(vports);
    return ret;
}
2023 2024 2025 2026 2027 2028 2029 2030 2031 2032
#else
int
virReadFCHost(const char *sysfs_prefix ATTRIBUTE_UNUSED,
              int host ATTRIBUTE_UNUSED,
              const char *entry ATTRIBUTE_UNUSED,
              char **result ATTRIBUTE_UNUSED)
{
    virReportSystemError(ENOSYS, "%s", _("Not supported on this platform"));
    return -1;
}
O
Osier Yang 已提交
2033

2034
bool
2035 2036
virIsCapableFCHost(const char *sysfs_prefix ATTRIBUTE_UNUSED,
                   int host ATTRIBUTE_UNUSED)
O
Osier Yang 已提交
2037 2038
{
    virReportSystemError(ENOSYS, "%s", _("Not supported on this platform"));
2039
    return false;
O
Osier Yang 已提交
2040 2041
}

2042
bool
2043 2044
virIsCapableVport(const char *sysfs_prefix ATTRIBUTE_UNUSED,
                  int host ATTRIBUTE_UNUSED)
O
Osier Yang 已提交
2045 2046
{
    virReportSystemError(ENOSYS, "%s", _("Not supported on this platform"));
2047
    return false;
O
Osier Yang 已提交
2048
}
2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059

int
virManageVport(const int parent_host ATTRIBUTE_UNUSED,
               const char *wwpn ATTRIBUTE_UNUSED,
               const char *wwnn ATTRIBUTE_UNUSED,
               int operation ATTRIBUTE_UNUSED)
{
    virReportSystemError(ENOSYS, "%s", _("Not supported on this platform"));
    return -1;
}

2060 2061 2062 2063 2064 2065 2066 2067 2068
char *
virGetFCHostNameByWWN(const char *sysfs_prefix ATTRIBUTE_UNUSED,
                      const char *wwnn ATTRIBUTE_UNUSED,
                      const char *wwpn ATTRIBUTE_UNUSED)
{
    virReportSystemError(ENOSYS, "%s", _("Not supported on this platform"));
    return NULL;
}

2069 2070 2071 2072 2073 2074 2075
char *
virFindFCHostCapableVport(const char *sysfs_prefix ATTRIBUTE_UNUSED)
{
    virReportSystemError(ENOSYS, "%s", _("Not supported on this platform"));
    return NULL;
}

2076
#endif /* __linux__ */
2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096

/**
 * virCompareLimitUlong:
 *
 * Compare two unsigned long long numbers. Value '0' of the arguments has a
 * special meaning of 'unlimited' and thus greater than any other value.
 *
 * Returns 0 if the numbers are equal, -1 if b is greater, 1 if a is greater.
 */
int
virCompareLimitUlong(unsigned long long a, unsigned long b)
{
    if (a == b)
        return 0;

    if (a == 0 || a > b)
        return 1;

    return -1;
}