webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add xdpdnsctrl program for safe execution

Browse Source 
add xdpdnsctrl to start/stop/status XDP
program from xdpdns.cgi safely.

permission of xdpdnsctrl

chown root.nobody /usr/local/bin/xdpdnsctrl
chmod u+s /usr/local/bin/xdpdnsctrl

result:

-rwsr-x--- 1 root nobody 14672 Mar 19 09:58 /usr/local/bin/xdpdnsctrl
This commit is contained in:
Vincent Li
2024-10-02 18:28:58 +00:00
parent d30a7b2318
commit f9c8259050
3 changed files with 42 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/misc-progs/Makefile
View File

@@ -32,7 +32,7 @@ SUID_PROGS = squidctrl sshctrl ipfirereboot \
smartctrl clamavctrl addonctrl pakfire mpfirectrl wlanapctrl \
setaliases urlfilterctrl updxlratorctrl fireinfoctrl rebuildroutes \
getconntracktable wirelessclient torctrl ddnsctrl unboundctrl \
captivectrl ddosctrl loxilbctrl keepalivedctrl
captivectrl ddosctrl loxilbctrl keepalivedctrl xdpdnsctrl
OBJS = $(patsubst %,%.o,$(PROGS) $(SUID_PROGS))

40
src/misc-progs/xdpdnsctrl.c Normal file
View File

@@ -0,0 +1,40 @@
/* This file is part of the BPFire Firewall.
*
* This program is distributed under the terms of the GNU General Public
* Licence. See the file COPYING for details.
*
*/
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <fcntl.h>
#include "setuid.h"
int main(int argc, char *argv[]) {
if (!(initsetuid()))
exit(1);
if (argc < 2) {
fprintf(stderr, "\nNo argument given.\n\nddosctrl (start|stop|restart)\n\n");
exit(1);
}
if (strcmp(argv[1], "start") == 0) {
safe_system("/etc/rc.d/init.d/xdpdns start");
} else if (strcmp(argv[1], "stop") == 0) {
safe_system("/etc/rc.d/init.d/xdpdns stop");
} else if (strcmp(argv[1], "restart") == 0) {
safe_system("/etc/rc.d/init.d/xdpdns restart");
} else if (strcmp(argv[1], "status") == 0) {
safe_system("/etc/rc.d/init.d/xdpdns status");
} else {
fprintf(stderr, "\nBad argument given.\n\nxdpdnsctrl (start|stop|restart|status)\n\n");
exit(1);
}
return 0;
}