Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Merge branch 'jb44456' into 'master'
[udisks2] Allow whitelisting filesystem for mounting. Contributes to JB#44456

See merge request mer-core/udisks2!21
  • Loading branch information
rainemak committed Feb 22, 2019
2 parents 64e3ce2 + 12bea04 commit b76d4fe
Show file tree
Hide file tree
Showing 2 changed files with 162 additions and 0 deletions.
158 changes: 158 additions & 0 deletions rpm/0011-Allow-whitelisting-filesystems-that-can-be-mounted.patch
@@ -0,0 +1,158 @@
From 44c58573ec01df21716f1c0b5db94a51ea7caf4b Mon Sep 17 00:00:00 2001
From: Raine Makelainen <raine.makelainen@jolla.com>
Date: Fri, 15 Feb 2019 15:15:48 +0200
Subject: [PATCH 11/11] Allow whitelisting filesystems that can be mounted

If whitelist is empty when 'well-know', '/proc/filesystems/', and
'/etc/filesystems' are used like before.

Signed-off-by: Raine Makelainen <raine.makelainen@jolla.com>
---
configure.ac | 4 +++
src/Makefile.am | 3 ++
src/udiskslinuxfilesystem.c | 65 +++++++++++++++++++++++++++++++++++--
3 files changed, 70 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index 6a482e4c..40e51633 100644
--- a/configure.ac
+++ b/configure.ac
@@ -161,6 +161,10 @@ PKG_CHECK_MODULES(POLKIT_AGENT_1, [polkit-agent-1 >= 0.102])
AC_SUBST(POLKIT_AGENT_1_CFLAGS)
AC_SUBST(POLKIT_AGENT_1_LIBS)

+PKG_CHECK_MODULES(DCONF, [dconf >= 0.28.0])
+AC_SUBST(DCONF_CFLAGS)
+AC_SUBST(DCONF_LIBS)
+
PKG_CHECK_MODULES(LIBMOUNT, [mount >= 2.30],
[have_libmount=yes],
[have_libmount=no])
diff --git a/src/Makefile.am b/src/Makefile.am
index 49c7e04c..3f90270b 100644
--- a/src/Makefile.am
+++ b/src/Makefile.am
@@ -25,6 +25,7 @@ CPPFLAGS = \
$(GIO_CFLAGS) \
$(GMODULE_CFLAGS) \
$(BLOCKDEV_CFLAGS) \
+ $(DCONF_CFLAGS) \
$(WARN_CFLAGS) \
$(NULL)

@@ -130,6 +131,7 @@ libudisks_daemon_la_LIBADD = \
$(LIBELOGIND_LIBS) \
$(PART_LDFLAGS) \
$(SWAP_LIBS) \
+ $(DCONF_LIBS) \
$(top_builddir)/udisks/libudisks2.la \
$(NULL)

@@ -151,6 +153,7 @@ udisksd_LDADD = \
$(GIO_LIBS) \
$(GMODULE_LIBS) \
$(BLOCKDEV_LIBS) \
+ $(DCONF_LIBS) \
libudisks-daemon.la \
$(NULL)

diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c
index 97f1d1a4..d42deaed 100644
--- a/src/udiskslinuxfilesystem.c
+++ b/src/udiskslinuxfilesystem.c
@@ -39,6 +39,8 @@

#include <glib/gstdio.h>

+#include <dconf.h>
+
#include "udiskslogging.h"
#include "udiskslinuxfilesystem.h"
#include "udiskslinuxfilesystemhelpers.h"
@@ -306,15 +308,61 @@ is_well_known_filesystem (const gchar *fstype)
return ret;
}

+static gboolean read_whitelist = FALSE;
+static gsize num_whitelite_fs = 0;
+static gchar **whitelisted_filesystems = NULL;
+
+static void
+build_filesystem_whitelist (void)
+{
+ if (!read_whitelist)
+ {
+ DConfClient *client = dconf_client_new();
+ GVariant *value = dconf_client_read(client, "/org/freedesktop/udisks2/filesystem/whitelist");
+ if (value)
+ {
+ const GVariantType *type = g_variant_get_type(value);
+ if (g_variant_type_equal(type, G_VARIANT_TYPE_STRING_ARRAY))
+ {
+ whitelisted_filesystems = g_variant_dup_strv(value, &num_whitelite_fs);
+ }
+ g_variant_unref(value);
+ }
+
+ if (client)
+ {
+ g_object_unref(client);
+ }
+ read_whitelist = TRUE;
+ }
+};
+
/* this is not a very efficient implementation but it's very rarely
* called so no real point in optimizing it...
*/
static gboolean
is_allowed_filesystem (const gchar *fstype)
{
- return is_well_known_filesystem (fstype) ||
+ gboolean allowed = FALSE;
+ gsize i = 0;
+
+ // Builds fs whitelist only once.
+ build_filesystem_whitelist();
+
+ allowed = (num_whitelite_fs == 0);
+
+ for (i = 0; i < num_whitelite_fs; ++i)
+ {
+ if (g_strcmp0 (whitelisted_filesystems[i], fstype) == 0)
+ {
+ allowed = TRUE;
+ break;
+ }
+ }
+
+ return allowed && (is_well_known_filesystem (fstype) ||
is_in_filesystem_file ("/proc/filesystems", fstype) ||
- is_in_filesystem_file ("/etc/filesystems", fstype);
+ is_in_filesystem_file ("/etc/filesystems", fstype));
}

/* ---------------------------------------------------------------------------------------------------- */
@@ -732,6 +780,19 @@ calculate_fs_type (UDisksBlock *block,
out:
g_assert (fs_type_to_use == NULL || g_utf8_validate (fs_type_to_use, -1, NULL));

+ // If we have whitelist in use test that fs_type_to_use is part of allowed types.
+ if ((*error == NULL) && !is_allowed_filesystem (fs_type_to_use))
+ {
+ g_set_error (error,
+ UDISKS_ERROR,
+ UDISKS_ERROR_OPTION_NOT_PERMITTED,
+ "Requested filesystem type `%s' is neither well-known nor "
+ "in /proc/filesystems nor in /etc/filesystems",
+ fs_type_to_use);
+ g_free(fs_type_to_use);
+ fs_type_to_use = NULL;
+ }
+
return fs_type_to_use;
}

--
2.20.1

4 changes: 4 additions & 0 deletions rpm/udisks2.spec
Expand Up @@ -24,6 +24,7 @@ Patch7: 0007-Create-mount-path-with-755-rights.patch
Patch8: 0008-Make-it-possible-to-encrypt-mmcblk-format-with-encry.patch
Patch9: 0009-Reduce-reserved-blocks-percentage-to-zero-for-ext2-e.patch
Patch10: 0010-Allow-rescan-for-inactive.patch
Patch11: 0011-Allow-whitelisting-filesystems-that-can-be-mounted.patch

BuildRequires: pkgconfig(glib-2.0) >= %{glib2_version}
BuildRequires: pkgconfig(gobject-introspection-1.0)
Expand All @@ -32,6 +33,8 @@ BuildRequires: pkgconfig(polkit-gobject-1) >= %{polkit_version}
BuildRequires: pkgconfig(systemd) >= %{systemd_version}
BuildRequires: pkgconfig(openssl)
BuildRequires: pkgconfig(mount) >= 2.30
BuildRequires: pkgconfig(dconf) >= 0.28.0

BuildRequires: gettext-devel
BuildRequires: autoconf
BuildRequires: automake
Expand Down Expand Up @@ -117,6 +120,7 @@ dynamic library, which provides access to the udisksd daemon.
%patch8 -p1 -b .mmcblk-encryption
%patch9 -p1 -b .mkfs-reserved-blocks-percentage
%patch10 -p1 -b .allow-rescan
%patch11 -p1 -b .fs-whitelist

%build
# Disable gtk-doc
Expand Down

0 comments on commit b76d4fe

Please sign in to comment.