1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
/* A lot of code from jail.c in */
/* TODO: Attribute properly */
#include <sys/types.h>
#include <sys/param.h>
#include <sys/jail.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <paths.h>
#include <stdio.h>
#include <err.h>
#include <unistd.h>
#include <limits.h>
#include "util.h"
#ifdef HAVE_CONFIG_H
#include "../config.h"
#endif
#define START_SCRIPT "/etc/rc"
static char* START_ARGS[] = { _PATH_BSHELL, START_SCRIPT };
static void usage();
int main(int argc, char* argv[])
{
int ch, jid;
struct jail j;
int printjid = 0;
int console = 0;
struct in_addr in;
while((ch = getopt(argc, argv, "ic")) != -1)
{
switch(ch)
{
case 'i':
printjid = 1;
break;
case 'c':
console = 1;
break;
case '?':
default:
usage();
}
}
argc -= optind;
argv += optind;
if(argc != 3)
usage();
if(getuid() != 0)
errx(1, "must be run as root");
if(chdir(argv[0]) != 0)
err(1, "couldn't change to jail directory: %s", argv[0]);
if(inet_aton(argv[2], &in) != 1)
errx(1, "invalid ip address: %s", argv[2]);
memset(&j, 0, sizeof(j));
j.version = 0;
j.path = argv[0];
j.hostname = argv[1];
j.ip_number = ntohl(in.s_addr);
/* Here's where we actually go into the jail */
jid = jail(&j);
if(jid == -1)
err(1, "couldn't create jail");
if(console)
{
}
if(printjid)
{
printf("%d\n", jid);
fflush(stdout);
}
if(!check_jail_command(NULL, START_SCRIPT))
exit(1);
run_jail_command(NULL, START_ARGS[0], START_ARGS, JAIL_RUN_CONSOLE | JAIL_RUN_STDOUT);
return 0;
}
static void usage()
{
fprintf(stderr, "usage: jstart [-ic] path hostname ip-number\n");
exit(2);
}
|
