summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--server/Makefile.in2
-rw-r--r--server/confdb/confdb.c16
-rw-r--r--server/polkit/sssd_polkit.c191
-rw-r--r--server/polkit/sssd_polkit.h28
-rw-r--r--server/server.mk6
5 files changed, 242 insertions, 1 deletions
diff --git a/server/Makefile.in b/server/Makefile.in
index f8056ea2..656be8a6 100644
--- a/server/Makefile.in
+++ b/server/Makefile.in
@@ -61,7 +61,7 @@ OBJS = $(SERVER_OBJ) @LIBREPLACEOBJ@ $(EXTRA_OBJ)
headers =
-LIBEXECBINS = sbin/sssd_nss sbin/sssd_dp sbin/sssd_be sbin/sssd_info
+LIBEXECBINS = sbin/sssd_nss sbin/sssd_dp sbin/sssd_be sbin/sssd_info sbin/sssd_pk
BINS = sbin/sssd $(LIBEXECBINS)
SOLIBS = lib/libsss_proxy.$(SHLIBEXT)
diff --git a/server/confdb/confdb.c b/server/confdb/confdb.c
index f0290b47..945ac2b8 100644
--- a/server/confdb/confdb.c
+++ b/server/confdb/confdb.c
@@ -488,6 +488,22 @@ static int confdb_init_db(struct confdb_ctx *cdb)
ret = confdb_add_param(cdb, false, "config/services", "activeServices", val);
if (ret != EOK) goto done;
+/* PolicyKit */
+ /* Set the sssd_pk description */
+ val[0] = "PolicyKit Backend Configuration";
+ ret = confdb_add_param(cdb, false, "config/services/spk", "description", val);
+ if (ret != EOK) goto done;
+
+ /* Set the sssd_info command path */
+ val[0] = talloc_asprintf(tmp_ctx, "%s/sssd_pk", SSSD_LIBEXEC_PATH);
+ ret = confdb_add_param(cdb, false, "config/services/spk", "command", val);
+ if (ret != EOK) goto done;
+
+ /* Add the InfoPipe to the list of active services */
+ val[0] = "spk";
+ ret = confdb_add_param(cdb, false, "config/services", "activeServices", val);
+ if (ret != EOK) goto done;
+
/* Domains */
val[0] = "Domains served by SSSD";
ret = confdb_add_param(cdb, false, "config/domains", "description", val);
diff --git a/server/polkit/sssd_polkit.c b/server/polkit/sssd_polkit.c
new file mode 100644
index 00000000..6c7d0e1e
--- /dev/null
+++ b/server/polkit/sssd_polkit.c
@@ -0,0 +1,191 @@
+/*
+ SSSD
+
+ PolicyKit
+
+ Copyright (C) Stephen Gallagher <sgallagh@redhat.com> 2009
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+#define _GNU_SOURCE
+#include <stdlib.h>
+#include <stdio.h>
+#include "popt.h"
+#include "sssd_polkit.h"
+#include "util/util.h"
+#include "sbus/sbus_client.h"
+#include "monitor/monitor_sbus.h"
+#include "monitor/monitor_interfaces.h"
+
+struct spk_ctx {
+ struct event_context *ev;
+ struct confdb_ctx *cdb;
+ struct service_sbus_ctx *ss_ctx;
+ struct sbus_srv_ctx *sbus_srv;
+};
+
+static int service_identity(DBusMessage *message, void *data, DBusMessage **r)
+{
+ dbus_uint16_t version = POLKIT_VERSION;
+ const char *name = POLKIT_SERVICE_NAME;
+ DBusMessage *reply;
+ dbus_bool_t ret;
+
+ DEBUG(4, ("Sending identity data [%s,%d]\n", name, version));
+
+ reply = dbus_message_new_method_return(message);
+ ret = dbus_message_append_args(reply,
+ DBUS_TYPE_STRING, &name,
+ DBUS_TYPE_UINT16, &version,
+ DBUS_TYPE_INVALID);
+ if (!ret) {
+ return EIO;
+ }
+
+ *r = reply;
+ return EOK;
+}
+
+static int service_pong(DBusMessage *message, void *data, DBusMessage **r)
+{
+ DBusMessage *reply;
+ dbus_bool_t ret;
+
+ reply = dbus_message_new_method_return(message);
+ ret = dbus_message_append_args(reply, DBUS_TYPE_INVALID);
+ if (!ret) {
+ return EIO;
+ }
+
+ *r = reply;
+ return EOK;
+}
+
+static int service_reload(DBusMessage *message, void *data, DBusMessage **r) {
+ /* Monitor calls this function when we need to reload
+ * our configuration information. Perform whatever steps
+ * are needed to update the configuration objects.
+ */
+
+ /* Send an empty reply to acknowledge receipt */
+ return service_pong(message, data, r);
+}
+
+struct sbus_method mon_sbus_methods[] = {
+ { SERVICE_METHOD_IDENTITY, service_identity },
+ { SERVICE_METHOD_PING, service_pong },
+ { SERVICE_METHOD_RELOAD, service_reload },
+ { NULL, NULL }
+};
+
+static int spk_monitor_init(struct spk_ctx *spk_ctx)
+{
+ int ret;
+ char *sbus_address;
+ struct service_sbus_ctx *ss_ctx;
+ struct sbus_method_ctx *sm_ctx;
+
+ /* Set up SBUS connection to the monitor */
+ ret = monitor_get_sbus_address(spk_ctx, spk_ctx->cdb, &sbus_address);
+ if (ret != EOK) {
+ DEBUG(0, ("Could not locate monitor address.\n"));
+ return ret;
+ }
+
+ ret = monitor_init_sbus_methods(spk_ctx, mon_sbus_methods, &sm_ctx);
+ if (ret != EOK) {
+ DEBUG(0, ("Could not initialize SBUS methods.\n"));
+ return ret;
+ }
+
+ ret = sbus_client_init(spk_ctx, spk_ctx->ev,
+ sbus_address, sm_ctx,
+ NULL /* Private Data */,
+ NULL /* Destructor */,
+ &ss_ctx);
+ if (ret != EOK) {
+ DEBUG(0, ("Failed to connect to monitor services.\n"));
+ return ret;
+ }
+
+ /* Set up PolicyKit-specific listeners */
+ /* None currently used */
+
+ spk_ctx->ss_ctx = ss_ctx;
+
+ return EOK;
+}
+
+static int spk_process_init(TALLOC_CTX *mem_ctx,
+ struct event_context *ev,
+ struct confdb_ctx *cdb)
+{
+ struct spk_ctx *spk_ctx;
+ int ret;
+
+ spk_ctx = talloc_zero(mem_ctx, struct spk_ctx);
+ if (spk_ctx == NULL) {
+ DEBUG(0, ("Fatal error initializing spk_ctx\n"));
+ return ENOMEM;
+ }
+ spk_ctx->ev = ev;
+ spk_ctx->cdb = cdb;
+
+ ret = spk_monitor_init(spk_ctx);
+ if (ret != EOK) {
+ DEBUG(0, ("Fatal error setting up monitor bus\n"));
+ }
+ return ret;
+}
+
+int main(int argc, const char *argv[])
+{
+ int opt;
+ poptContext pc;
+ struct main_context *main_ctx;
+ int ret;
+
+ struct poptOption long_options[] = {
+ POPT_AUTOHELP
+ SSSD_MAIN_OPTS
+ { NULL }
+ };
+
+ pc = poptGetContext(argv[0], argc, argv, long_options, 0);
+ while((opt = poptGetNextOpt(pc)) != -1) {
+ switch(opt) {
+ default:
+ fprintf(stderr, "\nInvalid option %s: %s\n\n",
+ poptBadOption(pc, 0), poptStrerror(opt));
+ poptPrintUsage(pc, stderr, 0);
+ return 1;
+ }
+ }
+
+ poptFreeContext(pc);
+
+ /* set up things like debug , signals, daemonization, etc... */
+ ret = server_setup("sssd[infp]", 0, &main_ctx);
+ if (ret != EOK) return 2;
+
+ ret = spk_process_init(main_ctx,
+ main_ctx->event_ctx,
+ main_ctx->confdb_ctx);
+ if (ret != EOK) return 3;
+
+ /* loop on main */
+ server_loop(main_ctx);
+
+ return 0;
+}
diff --git a/server/polkit/sssd_polkit.h b/server/polkit/sssd_polkit.h
new file mode 100644
index 00000000..f9441409
--- /dev/null
+++ b/server/polkit/sssd_polkit.h
@@ -0,0 +1,28 @@
+/*
+ SSSD
+
+ Policy Kit Helper
+
+ Copyright (C) Stephen Gallagher <sgallagh@redhat.com> 2009
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#ifndef POLKIT_H_
+#define POLKIT_H_
+
+#define POLKIT_VERSION 0x0001
+#define POLKIT_SERVICE_NAME "spk"
+
+#endif /* POLKIT_H_ */
diff --git a/server/server.mk b/server/server.mk
index 66f01389..54f9629a 100644
--- a/server/server.mk
+++ b/server/server.mk
@@ -34,6 +34,9 @@ NSSSRV_OBJ = \
INFOPIPE_OBJ = \
infopipe/infopipe.o
+POLKIT_OBJ = \
+ polkit/sssd_polkit.o
+
install:: all
${INSTALLCMD} -d $(DESTDIR)$(sbindir)
${INSTALLCMD} -m 700 sbin/sssd $(DESTDIR)$(sbindir)
@@ -55,5 +58,8 @@ sbin/sssd_be: $(DP_BE_OBJ) $(UTIL_OBJ)
sbin/sssd_info: $(INFOPIPE_OBJ) $(UTIL_OBJ)
$(CC) -o sbin/sssd_info $(INFOPIPE_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
+sbin/sssd_pk: $(POLKIT_OBJ) $(UTIL_OBJ)
+ $(CC) -o sbin/sssd_pk $(POLKIT_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
+
lib/libsss_proxy.$(SHLIBEXT): $(PROXY_BE_OBJ)
$(SHLD) $(SHLD_FLAGS) -o $@ $(PROXY_BE_OBJ) $(LDFLAGS) $(LIBS)
generated by cgit (git 2.34.1) at 2024-12-19 00:49:38 +0000