mirrors/VeraCrypt
1
0
Fork 0
mirror of https://github.com/veracrypt/VeraCrypt.git synced 2026-06-09 21:22:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

Unix: harden elevated service fd inheritance

Browse Source 
Set close-on-exec on elevated-service startup pipes before fork and centralize duplication onto standard descriptors.

Clear FD_CLOEXEC on descriptors intentionally kept across exec, including dup2(fd, fd) no-op cases.
This commit is contained in:
Mounir IDRASSI
2026-06-30 11:03:38 +09:00
parent 44843c47b8
commit 409d349856
1 changed files with 32 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Core/Unix/CoreService.cpp
+32 -3
View File
@@ -57,6 +57,32 @@ namespace VeraCrypt
// closing it can hang up the service controlling terminal.
static int DoasAuthTerminalFd = -1;
static void SetCloseOnExec (int fd, bool closeOnExec)
{
int flags = fcntl (fd, F_GETFD, 0);
throw_sys_if (flags == -1);
int newFlags = closeOnExec ? (flags | FD_CLOEXEC) : (flags & ~FD_CLOEXEC);
if (newFlags != flags)
throw_sys_if (fcntl (fd, F_SETFD, newFlags) == -1);
}
static void SetPipeCloseOnExec (Pipe &pipe)
{
SetCloseOnExec (pipe.PeekReadFD(), true);
SetCloseOnExec (pipe.PeekWriteFD(), true);
}
static void DupToStandardFd (int fd, int standardFd)
{
if (fd != standardFd)
throw_sys_if (dup2 (fd, standardFd) == -1);
// If fd already equals standardFd, dup2() is a no-op and does not clear
// FD_CLOEXEC. Clear it explicitly for all descriptors kept across exec.
SetCloseOnExec (standardFd, false);
}
static void RedirectStandardErrorToDevNull ()
{
int f = open ("/dev/null", O_WRONLY);
@@ -1007,6 +1033,9 @@ namespace VeraCrypt
unique_ptr <Pipe> inPipe (new Pipe());
unique_ptr <Pipe> outPipe (new Pipe());
Pipe errPipe;
SetPipeCloseOnExec (*inPipe);
SetPipeCloseOnExec (*outPipe);
SetPipeCloseOnExec (errPipe);
int forkedPid = fork();
throw_sys_if (forkedPid == -1);
@@ -1046,9 +1075,9 @@ namespace VeraCrypt
if (doasAuthTerminal != -1)
close (doasAuthTerminal);
throw_sys_if (dup2 (errPipe.GetWriteFD(), STDERR_FILENO) == -1);
throw_sys_if (dup2 (inPipe->GetReadFD(), STDIN_FILENO) == -1);
throw_sys_if (dup2 (outPipe->GetWriteFD(), STDOUT_FILENO) == -1);
DupToStandardFd (errPipe.GetWriteFD(), STDERR_FILENO);
DupToStandardFd (inPipe->GetReadFD(), STDIN_FILENO);
DupToStandardFd (outPipe->GetWriteFD(), STDOUT_FILENO);
const char *sudoArgs[] = { privilegeHelper.Path.c_str(), "-S", "-p", "", appPath.c_str(), TC_CORE_SERVICE_CMDLINE_OPTION, nullptr };
const char *doasArgs[] = { privilegeHelper.Path.c_str(), appPath.c_str(), TC_CORE_SERVICE_NO_FORK_CMDLINE_OPTION, nullptr };