privilege_utils.cpp

Go to the documentation of this file.

#include "privilege_utils.hpp"
 
#include <cerrno>
#include <cstring>
#include <cstdlib>
#include <string>
#include <unistd.h>
 
bool PrivilegeUtils::is_running_as_root() {
    return ::geteuid() == 0;
}
 
bool PrivilegeUtils::can_read_source(const std::string& path) {
    return !path.empty() && ::access(path.c_str(), R_OK) == 0;
}
 
std::string PrivilegeUtils::self_executable_path() {
#ifdef __linux__
    char buf[4096] = {0};
    const ssize_t n = ::readlink("/proc/self/exe", buf, sizeof(buf) - 1);
    if (n > 0) {
        buf[n] = '\0';
        return std::string(buf);
    }
#endif
    return "bastionguard-recovery-data";
}
 
std::string PrivilegeUtils::shell_quote(const std::string& s) {
    std::string out = "'";
    for (char c : s) {
        if (c == '\'') out += "'\\''";
        else out.push_back(c);
    }
    out += "'";
    return out;
}
 
std::string PrivilegeUtils::build_pkexec_relaunch_command(const std::string& extra_args) {
    const std::string exe = shell_quote(self_executable_path());
    std::string cmd = "pkexec ";
    cmd += exe;
    if (!extra_args.empty()) {
        cmd += " ";
        cmd += extra_args;
    }
    return cmd;
}
 
bool PrivilegeUtils::launch_pkexec_relaunch(std::string& error, const std::string& extra_args) {
    const std::string cmd = build_pkexec_relaunch_command(extra_args) + " >/dev/null 2>&1 &";
    const int rc = std::system(cmd.c_str());
    if (rc != 0) {
        error = std::string("pkexec launch failed: ") + std::strerror(errno);
        return false;
    }
    return true;
}