/* -*- Mode: C; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4; fill-column: 100 -*- */
/*
 * Copyright the Collabora Online contributors.
 *
 * SPDX-License-Identifier: MPL-2.0
 *
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
 */
/*
 * Place for simple security-related code.
 */

#pragma once

#include <config.h>

#if HAVE_LIBCAP
#include <sys/capability.h>
#endif
#include <sys/types.h>

#include <pwd.h>
#include <unistd.h>
#include <string.h>
#include <string>
#include <stdio.h>

#ifndef COOL_USER_ID
#  error "include config.h for user id";
#endif

/*WARNING: PRIVILEGED CODE CHECKING START */

inline int hasUID(const char *userId)
{
    struct passwd *pw = getpwuid(getuid());
    if (pw && pw->pw_name && !strcmp(pw->pw_name, userId))
        return 1;

    return 0;
}

inline int isInContainer()
{
#ifdef __linux__
    /* Docker creates /.dockerenv */
    if (access("/.dockerenv", F_OK) == 0)
        return 1;

    /* Podman creates /run/.containerenv */
    if (access("/run/.containerenv", F_OK) == 0)
        return 1;

    /* Legacy cgroups v1 check */
    FILE *cgroup;
    char line[80];
    const char * const docker = ":/docker/";
    cgroup = fopen("/proc/self/cgroup", "r");
    if(!cgroup)
    {
        fprintf(stderr, "Error: cannot open /proc/self/cgroup\n");
        return 0;
    }
    while (fgets(line, sizeof(line), cgroup) != nullptr)
    {
        if (strstr(line, docker) != nullptr)
        {
            fclose(cgroup);
            return 1;
        }
    }
    fclose(cgroup);
#endif
    return 0;
}

inline int hasCorrectUID([[maybe_unused]] const char* appName)
{
#if ENABLE_DEBUG
    return 1; // insecure but easy to use.
#else
    if (hasUID(COOL_USER_ID))
        return 1;
    else {
        fprintf(stderr, "Security: %s incorrect user-name, other than '" COOL_USER_ID "'.\n"
                 "Hint: If you are trying to run Collabora Online locally, you need to be using --enable-debug.\n", appName);
        return 0;
    }
#endif
}

/** Return 0 if no capability is set on the current binary. Positive number gives the bitfield of caps that are set, negative an error. */
inline int hasAnyCapability()
{
#if HAVE_LIBCAP
    cap_t caps = cap_get_proc();
    if (caps == nullptr)
    {
        fprintf(stderr, "Error: cap_get_proc() failed.\n");
        return -1;
    }

    cap_t caps_none = cap_init();
    if (caps_none == nullptr)
    {
        fprintf(stderr, "Error: cap_init() failed.\n");
        cap_free(caps);
        return -1;
    }

    // 0 = caps of this process equal to no caps
    int result = cap_compare(caps, caps_none);

    cap_free(caps_none);
    cap_free(caps);

    return result;
#else
    return 0;
#endif
}

/** Drop all capabilities. return zero on success, negative on error. */
inline int dropAllCapabilities()
{
#if HAVE_LIBCAP
    cap_t caps = cap_init();
    if (caps == nullptr)
    {
        fprintf(stderr, "Error: cap_init() failed.\n");
        return -1;
    }

    if (cap_set_proc(caps) == -1)
    {
        fprintf(stderr, "Error: cap_set_proc() failed.\n");
        return -1;
    }

    cap_free(caps);
#endif
    return 0;
}

/*WARNING: PRIVILEGED CODE CHECKING END */

/* vim:set shiftwidth=4 softtabstop=4 expandtab: */