1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
//go:generate statik -src=../../helpers -include=*
// Copyright (C) 2020 LEAP
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.
package pickle
import (
"fmt"
"io/ioutil"
"log"
"os"
"os/exec"
"runtime"
_ "0xacab.org/leap/bitmask-vpn/pkg/pickle/statik"
"github.com/rakyll/statik/fs"
)
const (
bitmaskRoot = "/usr/sbin/bitmask-root"
// TODO parametrize this with config.appName
policyFile = "/usr/share/polkit-1/actions/se.leap.bitmask.riseupvpn.policy"
)
func check(e error) {
if e != nil {
panic(e)
}
}
func alreadyThere(path string) bool {
if _, err := os.Stat(path); err == nil {
return true
}
return false
}
func isRoot() bool {
uid := os.Getuid()
return uid == 0
}
func copyAsRoot(orig, dest string, isExec bool) {
if alreadyThere(dest) {
fmt.Println("> File exists: ", dest)
return
}
cmd := exec.Command("false")
if isRoot() {
cmd = exec.Command("cp", orig, dest)
} else {
var confirm string
fmt.Println("> About to write (with sudo):", dest)
fmt.Printf("> ok? [y/N] ")
fmt.Scanln(&confirm)
if confirm != "y" {
fmt.Println("aborting")
os.Exit(1)
}
cmd = exec.Command("sudo", "cp", orig, dest)
}
err := cmd.Run()
check(err)
if isExec {
if isRoot() {
cmd = exec.Command("chmod", "776", dest)
} else {
cmd = exec.Command("sudo", "chmod", "776", dest)
}
err = cmd.Run()
check(err)
}
fmt.Println("> done")
}
func dumpHelper(fname, dest string, isExec bool) {
// TODO win/mac implementation
if runtime.GOOS != "linux" {
fmt.Println("Only linux supported for now")
return
}
stFS, err := fs.New()
if err != nil {
log.Fatal(err)
}
r, err := stFS.Open("/" + fname)
if err != nil {
log.Fatal(err)
}
defer r.Close()
c, err := ioutil.ReadAll(r)
if err != nil {
log.Fatal(err)
}
tmpfile, err := ioutil.TempFile("/dev/shm", "*")
check(err)
defer os.Remove(tmpfile.Name())
_, err = tmpfile.Write(c)
check(err)
copyAsRoot(tmpfile.Name(), dest, isExec)
}
func InstallHelpers() {
dumpHelper("bitmask-root", bitmaskRoot, true)
dumpHelper("se.leap.bitmask.policy", policyFile, false)
}
|
