Merge pull request #113 from TitanSnow/root

privilege manage (escalation & degradation) when running as root

11 files changed, 499 insertions, 19 deletions

diff --git a/core/src/xmake/machine.c b/core/src/xmake/machine.c
index 753ff579d..ccfd91254 100644
--- a/core/src/xmake/machine.c
+++ b/core/src/xmake/machine.c
@@ -83,6 +83,8 @@ tb_int_t xm_os_getwinsize(lua_State* lua);
 tb_int_t xm_os_versioninfo(lua_State* lua);
 #ifndef TB_CONFIG_OS_WINDOWS
 tb_int_t xm_os_uid(lua_State* lua);
+tb_int_t xm_os_gid(lua_State* lua);
+tb_int_t xm_os_getown(lua_State* lua);
 #endif
 
 // the path functions
@@ -146,6 +148,8 @@ static luaL_Reg const g_os_functions[] =
 ,   { "versioninfo",    xm_os_versioninfo}
 #ifndef TB_CONFIG_OS_WINDOWS
 ,   { "uid",            xm_os_uid       }
+,   { "gid",            xm_os_gid       }
+,   { "getown",         xm_os_getown    }
 #endif
 ,   { tb_null,          tb_null         }
 };
diff --git a/core/src/xmake/makefile b/core/src/xmake/makefile
index b1b29ed83..c7b1ffc29 100644
--- a/core/src/xmake/makefile
+++ b/core/src/xmake/makefile
@@ -38,6 +38,8 @@ xmake_C_FILES 			+= \
 						os/getwinsize \
 						os/versioninfo \
 						os/uid \
+						os/gid \
+						os/getown \
 						path/relative \
 						path/absolute \
 						path/translate \
diff --git a/core/src/xmake/os/getown.c b/core/src/xmake/os/getown.c
new file mode 100644
index 000000000..aa4e2de66
--- /dev/null
+++ b/core/src/xmake/os/getown.c
@@ -0,0 +1,71 @@
+/*!The Make-like Build Utility based on Lua
+ *
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * Copyright (C) 2015 - 2017, TBOOX Open Source Group.
+ *
+ * @author      TitanSnow
+ * @file        getown.c
+ *
+ */
+
+/* //////////////////////////////////////////////////////////////////////////////////////
+ * trace
+ */
+#define TB_TRACE_MODULE_NAME                "getown"
+#define TB_TRACE_MODULE_DEBUG               (0)
+
+/* //////////////////////////////////////////////////////////////////////////////////////
+ * includes
+ */
+#include "prefix.h"
+#ifndef TB_CONFIG_OS_WINDOWS
+#   include <unistd.h>
+#   include <sys/stat.h>
+
+/* //////////////////////////////////////////////////////////////////////////////////////
+ * implementation
+ */
+// get owner by a given path
+tb_int_t xm_os_getown(lua_State* lua)
+{
+    // check
+    tb_assert_and_check_return_val(lua, 0);
+
+    // get the pathname
+    tb_char_t const* pathname = luaL_checkstring(lua, 1);
+    tb_check_return_val(pathname, 0);
+
+    // get stat
+    struct stat sts;
+    if(stat(pathname, &sts) != 0)
+        return 0;
+
+    // push
+    lua_newtable(lua);
+    lua_pushstring(lua, "uid");
+    lua_pushinteger(lua, sts.st_uid);
+    lua_settable(lua, -3);
+    lua_pushstring(lua, "gid");
+    lua_pushinteger(lua, sts.st_gid);
+    lua_settable(lua, -3);
+
+    // ok
+    return 1;
+}
+
+#endif
diff --git a/core/src/xmake/os/gid.c b/core/src/xmake/os/gid.c
new file mode 100644
index 000000000..7d949ebc6
--- /dev/null
+++ b/core/src/xmake/os/gid.c
@@ -0,0 +1,149 @@
+/*!The Make-like Build Utility based on Lua
+ *
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * Copyright (C) 2015 - 2017, TBOOX Open Source Group.
+ *
+ * @author      TitanSnow
+ * @file        gid.c
+ *
+ */
+
+/* //////////////////////////////////////////////////////////////////////////////////////
+ * trace
+ */
+#define TB_TRACE_MODULE_NAME                "gid"
+#define TB_TRACE_MODULE_DEBUG               (0)
+
+/* //////////////////////////////////////////////////////////////////////////////////////
+ * includes
+ */
+#include "prefix.h"
+#ifndef TB_CONFIG_OS_WINDOWS
+#   include <unistd.h>
+#   include <errno.h>
+
+/* //////////////////////////////////////////////////////////////////////////////////////
+ * implementation
+ */
+
+// get & set gid
+tb_int_t xm_os_gid(lua_State* lua)
+{
+    // check
+    tb_assert_and_check_return_val(lua, 0);
+
+    tb_int_t rgidset = -1, egidset = -1;
+
+    tb_int_t argc = lua_gettop(lua);
+
+    if (argc == 1)
+    {
+        if (lua_istable(lua, 1))
+        {
+            // os.gid({["rgid"] = rgid, ["egid"] = egid})
+            lua_getfield(lua, 1, "rgid");
+            lua_getfield(lua, 1, "egid");
+            if (!lua_isnil(lua, -1))
+            {
+                if (!lua_isnumber(lua, -1))
+                {
+                    lua_pushfstring(lua, "invalid field type(%s) in `egid` for os.gid", luaL_typename(lua, -1));
+                    lua_error(lua);
+                    return 0;
+                }
+                egidset = (tb_int_t)lua_tonumber(lua, -1);
+            }
+            lua_pop(lua, 1);
+            if (!lua_isnil(lua, -1))
+            {
+                if (!lua_isnumber(lua, -1))
+                {
+                    lua_pushfstring(lua, "invalid field type(%s) in `rgid` for os.gid", luaL_typename(lua, -1));
+                    lua_error(lua);
+                    return 0;
+                }
+                rgidset = (tb_int_t)lua_tonumber(lua, -1);
+            }
+            lua_pop(lua, 1);
+        } else if (lua_isnumber(lua, 1))
+        {
+            // os.gid(gid)
+            rgidset = egidset = (tb_int_t)lua_tonumber(lua, 1);
+        } else
+        {
+            lua_pushfstring(lua, "invalid argument type(%s) for os.gid", luaL_typename(lua, 1));
+            lua_error(lua);
+            return 0;
+        }
+    } else if (argc == 2)
+    {
+        // os.gid(rgid, egid)
+        if (!lua_isnil(lua, 1))
+        {
+            if (!lua_isnumber(lua, 1))
+            {
+                lua_pushfstring(lua, "invalid argument type(%s) for os.gid", luaL_typename(lua, 1));
+                lua_error(lua);
+                return 0;
+            }
+            rgidset = (tb_int_t)lua_tonumber(lua, 1);
+        }
+        if (!lua_isnil(lua, 2))
+        {
+            if (!lua_isnumber(lua, 2))
+            {
+                lua_pushfstring(lua, "invalid argument type(%s) for os.gid", luaL_typename(lua, 2));
+                lua_error(lua);
+                return 0;
+            }
+            egidset = (tb_int_t)lua_tonumber(lua, 2);
+        }
+    } else if (argc != 0)
+    {
+        lua_pushstring(lua, "invalid argument count for os.gid");
+        lua_error(lua);
+        return 0;
+    }
+
+    // store return value
+    lua_newtable(lua);
+
+    if (rgidset != -1 || egidset != -1)
+    {
+        // set rgid & egid
+        lua_pushstring(lua, "errno");
+        lua_pushinteger(lua, setregid(rgidset, egidset) != 0 ? errno : 0);
+        lua_settable(lua, -3);
+    }
+
+    // get gid & egid
+    gid_t gid = getgid(), egid = getegid();
+
+    // push
+    lua_pushstring(lua, "rgid");
+    lua_pushinteger(lua, gid);
+    lua_settable(lua, -3);
+    lua_pushstring(lua, "egid");
+    lua_pushinteger(lua, egid);
+    lua_settable(lua, -3);
+
+    // ok
+    return 1;
+}
+
+#endif
diff --git a/core/src/xmake/os/uid.c b/core/src/xmake/os/uid.c
index d19bbd88e..4bcc9d122 100644
--- a/core/src/xmake/os/uid.c
+++ b/core/src/xmake/os/uid.c
@@ -35,23 +35,107 @@
 #include "prefix.h"
 #ifndef TB_CONFIG_OS_WINDOWS
 #   include <unistd.h>
+#   include <errno.h>
 
 /* //////////////////////////////////////////////////////////////////////////////////////
  * implementation
  */
 
-// get uid & euid
+// get & set uid
 tb_int_t xm_os_uid(lua_State* lua)
 {
     // check
     tb_assert_and_check_return_val(lua, 0);
 
+    tb_int_t ruidset = -1, euidset = -1;
+
+    tb_int_t argc = lua_gettop(lua);
+
+    if (argc == 1)
+    {
+        if (lua_istable(lua, 1))
+        {
+            // os.uid({["ruid"] = ruid, ["euid"] = euid})
+            lua_getfield(lua, 1, "ruid");
+            lua_getfield(lua, 1, "euid");
+            if (!lua_isnil(lua, -1))
+            {
+                if (!lua_isnumber(lua, -1))
+                {
+                    lua_pushfstring(lua, "invalid field type(%s) in `euid` for os.uid", luaL_typename(lua, -1));
+                    lua_error(lua);
+                    return 0;
+                }
+                euidset = (tb_int_t)lua_tonumber(lua, -1);
+            }
+            lua_pop(lua, 1);
+            if (!lua_isnil(lua, -1))
+            {
+                if (!lua_isnumber(lua, -1))
+                {
+                    lua_pushfstring(lua, "invalid field type(%s) in `ruid` for os.uid", luaL_typename(lua, -1));
+                    lua_error(lua);
+                    return 0;
+                }
+                ruidset = (tb_int_t)lua_tonumber(lua, -1);
+            }
+            lua_pop(lua, 1);
+        } else if (lua_isnumber(lua, 1))
+        {
+            // os.uid(uid)
+            ruidset = euidset = (tb_int_t)lua_tonumber(lua, 1);
+        } else
+        {
+            lua_pushfstring(lua, "invalid argument type(%s) for os.uid", luaL_typename(lua, 1));
+            lua_error(lua);
+            return 0;
+        }
+    } else if (argc == 2)
+    {
+        // os.uid(ruid, euid)
+        if (!lua_isnil(lua, 1))
+        {
+            if (!lua_isnumber(lua, 1))
+            {
+                lua_pushfstring(lua, "invalid argument type(%s) for os.uid", luaL_typename(lua, 1));
+                lua_error(lua);
+                return 0;
+            }
+            ruidset = (tb_int_t)lua_tonumber(lua, 1);
+        }
+        if (!lua_isnil(lua, 2))
+        {
+            if (!lua_isnumber(lua, 2))
+            {
+                lua_pushfstring(lua, "invalid argument type(%s) for os.uid", luaL_typename(lua, 2));
+                lua_error(lua);
+                return 0;
+            }
+            euidset = (tb_int_t)lua_tonumber(lua, 2);
+        }
+    } else if (argc != 0)
+    {
+        lua_pushstring(lua, "invalid argument count for os.uid");
+        lua_error(lua);
+        return 0;
+    }
+
+    // store return value
+    lua_newtable(lua);
+
+    if (ruidset != -1 || euidset != -1)
+    {
+        // set ruid & euid
+        lua_pushstring(lua, "errno");
+        lua_pushinteger(lua, setreuid(ruidset, euidset) != 0 ? errno : 0);
+        lua_settable(lua, -3);
+    }
+
     // get uid & euid
     uid_t uid = getuid(), euid = geteuid();
 
     // push
-    lua_newtable(lua);
-    lua_pushstring(lua, "uid");
+    lua_pushstring(lua, "ruid");
     lua_pushinteger(lua, uid);
     lua_settable(lua, -3);
     lua_pushstring(lua, "euid");
diff --git a/xmake/actions/install/main.lua b/xmake/actions/install/main.lua
index 3ca155789..f9bca9419 100644
--- a/xmake/actions/install/main.lua
+++ b/xmake/actions/install/main.lua
@@ -26,6 +26,7 @@
 import("core.base.option")
 import("core.project.task")
 import("core.platform.platform")
+import("core.base.privilege")
 import("install")
 
 -- main
@@ -57,6 +58,28 @@ function main()
             -- failed or not permission? request administrator permission and install it again
             function (errors)
 
+                -- try get privilege
+                if privilege.get() then
+                    local ok = try
+                    {
+                        function ()
+                            -- install target
+                            install.install(targetname or ifelse(option.get("all"), "__all", "__def"))
+
+                            -- trace
+                            cprint("${bright}install ok!${clear}${ok_hand}")
+
+                            -- ok
+                            return true
+                        end
+                    }
+
+                    -- release privilege
+                    privilege.store()
+
+                    if ok then return end
+                end
+
                 -- show tips
                 cprint("${bright red}error: ${default red}installation failed, may permission denied!")
 
diff --git a/xmake/actions/uninstall/main.lua b/xmake/actions/uninstall/main.lua
index a7cfec3db..2b25a058d 100644
--- a/xmake/actions/uninstall/main.lua
+++ b/xmake/actions/uninstall/main.lua
@@ -26,6 +26,7 @@
 import("core.base.option")
 import("core.project.task")
 import("core.platform.platform")
+import("core.base.privilege")
 import("uninstall")
 
 -- main
@@ -57,6 +58,28 @@ function main()
             -- failed or not permission? request administrator permission and uninstall it again
             function (errors)
 
+                -- try get privilege
+                if privilege.get() then
+                    local ok = try
+                    {
+                        function ()
+                            -- uninstall target
+                            uninstall.uninstall(targetname)
+
+                            -- trace
+                            cprint("${bright}uninstall ok!${clear}${ok_hand}")
+
+                            -- ok
+                            return true
+                        end
+                    }
+
+                    -- release privilege
+                    privilege.store()
+
+                    if ok then return end
+                end
+
                 -- show tips
                 cprint("${bright red}error: ${default red}failed to uninstall, may permission denied!")
 
diff --git a/xmake/core/base/os.lua b/xmake/core/base/os.lua
index 02d96ad7e..ea6d3a9b0 100644
--- a/xmake/core/base/os.lua
+++ b/xmake/core/base/os.lua
@@ -34,6 +34,7 @@ local string    = require("base/string")
 
 -- save original interfaces
 os._uid         = os._uid or os.uid
+os._gid         = os._gid or os.gid
 os._mkdir       = os._mkdir or os.mkdir
 os._rmdir       = os._rmdir or os.rmdir
 os._tmpdir      = os._tmpdir or os.tmpdir
@@ -627,30 +628,32 @@ function os.nuldev()
 end
 
 -- get uid
-function os.uid()
-
-    -- get it from cache first
-    if os._UID then
-        return os._UID
-    end
-
+function os.uid(...)
     -- get uid
     os._UID = {}
     if os._uid then
-        os._UID = os._uid() or {}
+        os._UID = os._uid(...) or {}
     end
 
     -- ok?
     return os._UID
 end
 
+-- get gid
+function os.gid(...)
+    -- get gid
+    os._GID = {}
+    if os._gid then
+        os._GID = os._gid(...) or {}
+    end
+
+    -- ok?
+    return os._GID
+end
+
 -- check run command as root
 function os.isroot()
-
-    -- get it from cache
-    if os._ISROOT ~= nil then
-        return os._ISROOT
-    end
+    os._ISROOT = nil
 
     -- check it
     if os.uid().euid == 0 then
diff --git a/xmake/core/base/privilege.lua b/xmake/core/base/privilege.lua
new file mode 100644
index 000000000..275a7e7b5
--- /dev/null
+++ b/xmake/core/base/privilege.lua
@@ -0,0 +1,92 @@
+--!The Make-like Build Utility based on Lua
+--
+-- Licensed to the Apache Software Foundation (ASF) under one
+-- or more contributor license agreements.  See the NOTICE file
+-- distributed with this work for additional information
+-- regarding copyright ownership.  The ASF licenses this file
+-- to you under the Apache License, Version 2.0 (the
+-- "License"); you may not use this file except in compliance
+-- with the License.  You may obtain a copy of the License at
+--
+--     http://www.apache.org/licenses/LICENSE-2.0
+--
+-- Unless required by applicable law or agreed to in writing, software
+-- distributed under the License is distributed on an "AS IS" BASIS,
+-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+-- See the License for the specific language governing permissions and
+-- limitations under the License.
+--
+-- Copyright (C) 2015 - 2017, TBOOX Open Source Group.
+--
+-- @author      TitanSnow
+-- @file        privilege.lua
+--
+
+-- define module
+local privilege = privilege or {}
+
+-- load modules
+local os = require("base/os")
+
+-- store privilege
+function privilege.store()
+    -- check if root
+    if not os.isroot() then
+        return false
+    end
+
+    -- find projectdir's owner
+    local projectdir = xmake._PROJECT_DIR
+    assert(projectdir)
+    local owner = os.getown(projectdir)
+    if not owner then
+        -- fallback to current dir
+        owner = os.getown(".")
+        if not owner then
+            return false
+        end
+    end
+
+    -- set gid
+    if os.gid(owner.gid).errno ~= 0 then
+        return false
+    end
+
+    -- set uid
+    if os.uid({["ruid"] = owner.uid}).errno ~= 0 or os.uid({["euid"] = owner.uid}).errno ~= 0 then
+        return false
+    end
+
+    -- set flag
+    privilege._HAS_PRIVILEGE = true
+
+    -- ok
+    return true
+end
+
+-- check if has stored privilege
+function privilege.has()
+    return privilege._HAS_PRIVILEGE or false
+end
+
+function privilege.get()
+    -- has?
+    if privilege._HAS_PRIVILEGE ~= true then
+        return false
+    end
+
+    -- set uid
+    if os.uid({["euid"] = 0}).errno ~= 0 or os.uid({["ruid"] = 0}).errno ~= 0 then
+        return false
+    end
+
+    -- set gid
+    if os.gid(0).errno ~= 0 then
+        return false
+    end
+
+    return true
+end
+
+-- return module
+return privilege
diff --git a/xmake/core/main.lua b/xmake/core/main.lua
index b4ca6afab..cda338294 100644
--- a/xmake/core/main.lua
+++ b/xmake/core/main.lua
@@ -32,6 +32,7 @@ local utils         = require("base/utils")
 local option        = require("base/option")
 local profiler      = require("base/profiler")
 local deprecated    = require("base/deprecated")
+local privilege     = require("base/privilege")
 local task          = require("project/task")
 local history       = require("project/history")
 
@@ -143,12 +144,14 @@ function main.done()
     -- check run command as root
     if not option.get("root") then
         if os.isroot() then
-            utils.error([[Running xmake as root is extremely dangerous and no longer supported.
+            if not privilege.store() or os.isroot() then
+                utils.error([[Running xmake as root is extremely dangerous and no longer supported.
 As xmake does not drop privileges on installation you would be giving all
 build scripts full access to your system. 
 Or you can add `--root` option to allow run as root temporarily.
-            ]])
-            return -1
+                ]])
+                return -1
+            end
         end
     end
 
diff --git a/xmake/core/sandbox/modules/import/core/base/privilege.lua b/xmake/core/sandbox/modules/import/core/base/privilege.lua
new file mode 100644
index 000000000..8f94cdb79
--- /dev/null
+++ b/xmake/core/sandbox/modules/import/core/base/privilege.lua
@@ -0,0 +1,26 @@
+--!The Make-like Build Utility based on Lua
+--
+-- Licensed to the Apache Software Foundation (ASF) under one
+-- or more contributor license agreements.  See the NOTICE file
+-- distributed with this work for additional information
+-- regarding copyright ownership.  The ASF licenses this file
+-- to you under the Apache License, Version 2.0 (the
+-- "License"); you may not use this file except in compliance
+-- with the License.  You may obtain a copy of the License at
+--
+--     http://www.apache.org/licenses/LICENSE-2.0
+--
+-- Unless required by applicable law or agreed to in writing, software
+-- distributed under the License is distributed on an "AS IS" BASIS,
+-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+-- See the License for the specific language governing permissions and
+-- limitations under the License.
+--
+-- Copyright (C) 2015 - 2017, TBOOX Open Source Group.
+--
+-- @author      TitanSnow
+-- @file        privilege.lua
+--
+
+-- return module
+return require("base/privilege")