1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
|
#include <algorithm>
#include <cerrno>
#include <charconv>
#include <cstdint>
#include <cstring>
#include <expected>
#include <filesystem>
#include <iostream>
#include <optional>
#include <ostream>
#include <security-context-v1-client-protocol.h>
#include <string_view>
#include <sys/socket.h>
#include <sys/un.h>
#include <system_error>
#include <wayland-client-core.h>
#include <wayland-client-protocol.h>
#include <wayland-client.h>
struct App {
std::optional<wl_display *> display;
std::optional<wl_registry *> registry;
std::optional<wp_security_context_v1 *> security_context;
std::optional<wp_security_context_manager_v1 *> security_context_manager;
};
void register_global(void *data, wl_registry *registry, std::uint32_t name,
const char *interface, std::uint32_t version) {
std::println(std::cerr, "global advertised: {}", interface);
App *app = static_cast<App *>(data);
if (std::strcmp(interface, wp_security_context_manager_v1_interface.name) ==
0) {
app->security_context_manager =
static_cast<wp_security_context_manager_v1 *>(wl_registry_bind(
registry, name, &wp_security_context_manager_v1_interface,
version));
}
}
void unregister_global([[gnu::unused]] void *data,
[[gnu::unused]] wl_registry *registry,
[[gnu::unused]] std::uint32_t name) {}
struct wl_registry_listener listener = {.global = register_global,
.global_remove = unregister_global};
std::optional<int> parse_int(std::string_view string) {
int number;
auto [ptr, err] =
std::from_chars(string.data(), string.data() + string.size(), number);
if (!(err == std::errc{})) {
return std::nullopt;
}
return number;
}
std::expected<int, int> open_socket(const std::filesystem::path &socket_path) {
int fd = socket(AF_UNIX, SOCK_STREAM, 0);
sockaddr_un address = {.sun_family = AF_UNIX, .sun_path = "\0"};
auto len =
std::min(sizeof(address.sun_path), std::strlen(socket_path.c_str()));
std::copy_n(socket_path.c_str(), len, address.sun_path);
if (bind(fd, reinterpret_cast<sockaddr *>(&address),
sizeof(address.sun_path)) == -1) {
return std::unexpected{errno};
}
if (listen(fd, 20) == -1) {
return std::unexpected{errno};
}
return fd;
}
int main(int argc, char **argv) {
if (argc < 2) {
std::println(
std::cerr,
"usage: wayland-sandbox <path to unix socket> <file descriptor>");
return 1;
}
std::filesystem::path socket_path(argv[1]);
if (std::filesystem::exists(socket_path)) {
std::println(std::cerr, "socket already exists: {}", argv[1]);
return 1;
}
auto parse_fd_result = parse_int(argv[2]);
if (!parse_fd_result) {
std::println(std::cerr, "failed to parse fd: {}", argv[2]);
return 1;
}
int close_fd = parse_fd_result.value();
App app;
app.display = wl_display_connect(NULL);
std::println(std::cerr, "connected to compositor");
if (!app.display.value()) {
std::println(std::cerr, "failed to connect to compositor");
return 1;
}
app.registry = wl_display_get_registry(app.display.value());
wl_registry_add_listener(app.registry.value(), &listener, &app);
wl_display_roundtrip(app.display.value());
if (!app.security_context_manager.has_value()) {
std::println(std::cerr, "failed to bind security context manager");
}
auto open_socket_result = open_socket(socket_path);
if (!open_socket_result) {
std::println(std::cerr, "failed to open socket: {}",
std::strerror(open_socket_result.error()));
return 1;
}
auto sockfd = open_socket_result.value();
std::println(std::cerr, "opened socket: {}", socket_path.c_str());
app.security_context = wp_security_context_manager_v1_create_listener(
app.security_context_manager.value(), sockfd, close_fd);
wp_security_context_v1_set_sandbox_engine(app.security_context.value(),
"wayland-sandbox");
wp_security_context_v1_commit(app.security_context.value());
wl_display_roundtrip(app.display.value());
return 0;
}
|
