// SPDX-License-Identifier: GPL-2.0-or-later /* seitan - Syscall Expressive Interpreter, Transformer and Notifier * * cooker/main.c - Entry point of seitan-cooker, the gluten (bytecode) generator * * Copyright 2023 Red Hat GmbH * Author: Stefano Brivio * Alice Frosi */ #define _GNU_SOURCE #include #include "parson.h" #include "cooker.h" #include "gluten.h" #include "parse.h" #include "filter.h" #include "seccomp_profile.h" /* Cooker options */ static struct option options[] = { { "input", required_argument, NULL, 'i' }, { "gluten", required_argument, NULL, 'g' }, { "filter", required_argument, NULL, 'f' }, { "scmp-out-prof", required_argument, NULL, 'p' }, { "scmp-orig-prof", required_argument, NULL, 's' }, //??? is required }; struct arguments { char *input_file; char *gluten_file; char *filter_file; char *scmp_prof_file; char *orig_scmp_prof_file; }; static void usage() { printf("seitan-cooker: generate the BPF filters or seccomp profile and the action byte code for seitan\n" "Example: setain-cooker -i -g -f \n" "Usage:\n" "\t-i, --input:\t\tJSON input file\n" "\t-g, --gluten:\t\tBytecode file for seitan action\n" "\t-f, --filter:\t\tBPF filter file (cannot be used together with scmp-profile)\n" "\t-p, --scmp-prof:\tSeccomp profile file (cannot be used together with filter)\n" "\t-s, --scmp-orig-prof:\tOriginal seccomp profile (ignored if used with filter)\n"); exit(EXIT_FAILURE); } static void parse(int argc, char **argv, struct arguments *arguments) { int option_index = 0; int oc; if (arguments == NULL) usage(); while ((oc = getopt_long(argc, argv, ":i:g:f:p:s:", options, &option_index)) != -1) { switch (oc) { case 'i': arguments->input_file = optarg; break; case 'g': arguments->gluten_file = optarg; break; case 'f': arguments->filter_file = optarg; break; case 'p': arguments->scmp_prof_file = optarg; break; case 's': arguments->orig_scmp_prof_file = optarg; break; default: usage(); } } if (arguments->input_file == NULL) { err("missing input file"); usage(); } if (arguments->filter_file != NULL && arguments->scmp_prof_file != NULL) { err("the filter and scmp-profile options cannot be used together"); usage(); } if (arguments->filter_file == NULL && arguments->scmp_prof_file == NULL) { err("select one of the options between filter and scmp-profile"); usage(); } if (arguments->gluten_file == NULL) { err("missing gluten file"); usage(); } } /** * main() - Entry point for cooker * @argc: Argument count * @argv: Options: input filename, output filename * * Return: zero on success, doesn't return on failure */ int main(int argc, char **argv) { struct arguments arguments = { 0 }; struct gluten_ctx g = { 0 }; parse(argc, argv, &arguments); if (arguments.filter_file != NULL) { g.mode = SCMP_FILTER; } else { g.mode = SCMP_PROFILE; scmp_profile_init(arguments.orig_scmp_prof_file); } gluten_init(&g); parse_file(&g, arguments.input_file); gluten_write(&g, arguments.gluten_file); if (arguments.filter_file != NULL) filter_write(arguments.filter_file); else scmp_profile_write(arguments.scmp_prof_file); return 0; }