File festival-1.96-chroot.patch of Package festival

Overview Repositories Revisions Requests Users Attributes Meta

File festival-1.96-chroot.patch of Package festival (Revision 50074071cb3c1ff95fae0e854eee1842)

Currently displaying revision 50074071cb3c1ff95fae0e854eee1842 , Show latest

--- src/main/festival_main.cc
+++ src/main/festival_main.cc
@@ -39,6 +39,10 @@
 /*                                                                       */
 /*=======================================================================*/
 #include <cstdio>
+#include <sys/types.h>
+#include <unistd.h>
+#include <pwd.h>
+#include <grp.h>
 
 using namespace std;
 
@@ -75,6 +79,9 @@
     EST_StrList files;
     int real_number_of_files = 0;
     int heap_size = FESTIVAL_HEAP_SIZE;
+	unsigned int uid = -1;
+	unsigned int gid = -1;
+	struct passwd *pw;
 
     if (festival_check_script_mode(argc,argv) == TRUE)
     {   // Need to check this directly as in script mode args are 
@@ -106,6 +113,9 @@
 	"              english, spanish and welsh are available\n"+
 	"--server      Run in server mode waiting for clients\n"+
 	"              of server_port (1314)\n"+
+	"--chroot <string> Run server in chroot\n"+
+	"--uid <string> Run server as given user\n"+
+	"--gid <int> Run server with this group\n"+
 	"--script <ifile>\n"+
         "              Used in #! scripts, runs in batch mode on\n"+
 	"              file and passes all other args to Scheme\n"+
@@ -123,6 +133,77 @@
 	exit(0);
     }
 
+	if( al.present( "--uid" ) )
+	{
+		EST_String b = al.sval( "--uid" );
+
+		pw = getpwnam( b.str() );
+		if( pw != NULL )
+		{
+			uid = pw->pw_uid;
+			gid = pw->pw_gid;
+		}
+		else
+		{
+			printf("unknow user\n");
+			festival_error();
+		}
+	}
+
+	if( al.present( "--gid" ) )
+	{
+		gid = al.ival( "--gid" );
+		if( al.present( "--uid" ) )
+		{
+			printf( "useless without --uid\n" );
+			festival_error();
+		}
+	}
+
+	if( al.present( "--chroot" ) )
+	{
+		if( !al.present( "--uid" ) )
+		{
+			printf( "chroot only makes sense in combination with uid switching\n" );
+			festival_error();
+		}
+
+		EST_String a = al.sval( "--chroot" );
+		printf( "chroot to %s\n", a.str() );
+		if( chdir( a.str() ) )
+		{
+			festival_error();
+		}
+		if( chroot( a.str() ) )
+		{
+        	festival_error();
+		}
+		if( chdir( "/" ) )
+		{
+			festival_error();
+		}
+	}
+
+	if( al.present( "--uid" ) )
+	{
+		if( setgroups( 1, &gid ) < 0 )
+		{
+			festival_error();
+		}
+
+		if( setgid( gid ) != 0 )
+		{
+			printf( "can't setgid\n" );
+			festival_error();
+		}
+
+		if( setuid( uid ) != 0 )
+		{
+			printf( "can't setuid\n" );
+			festival_error();
+		}
+	}
+
     if (al.present("--libdir"))
 	festival_libdir = wstrdup(al.val("--libdir"));
     else if (getenv("FESTLIBDIR") != 0)

Places

File festival-1.96-chroot.patch of Package festival (Revision 50074071cb3c1ff95fae0e854eee1842)

Places