aboutsummaryrefslogtreecommitdiff
blob: 4a634135533e249f018945efef8fcb781d2ec8f3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
/*
 * open*() pre-check.
 *
 * Copyright 1999-2009 Gentoo Foundation
 * Licensed under the GPL-2
 */

bool sb_openat_pre_check(const char *func, const char *pathname, int dirfd, int flags)
{
	/* If we're not trying to create, fail normally if
	 * file does not stat
	 */
	if (flags & O_CREAT)
		return true;

	save_errno();

	/* Expand the dirfd path first */
	char dirfd_path[SB_PATH_MAX];
	switch (resolve_dirfd_path(dirfd, pathname, dirfd_path)) {
		case -1:
			if (is_env_on(ENV_SANDBOX_DEBUG))
				SB_EINFO("EARLY FAIL", "  %s(%s) @ resolve_dirfd_path: %s\n",
					func, pathname, strerror(errno));
			return false;
		case 0:
			pathname = dirfd_path;
			break;
	}

	/* Doesn't exist -> skip permission checks */
	struct stat st;
	if (-1 == stat(pathname, &st)) {
		if (is_env_on(ENV_SANDBOX_DEBUG))
			SB_EINFO("EARLY FAIL", "  %s(%s): %s\n",
				func, pathname, strerror(errno));
		return false;
	}

	restore_errno();

	return true;
}