From 3725aedd02d9b24c1239610066dd62387ef4d5a9 Mon Sep 17 00:00:00 2001
From: dale_mellor <dale_mellor>
Date: Fri, 4 Jul 2003 08:09:04 +0000
Subject: Initial version. Production quality, fully complete source but
 contains known bugs (lots!)

---
 mcron.c.template | 124 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 124 insertions(+)
 create mode 100644 mcron.c.template

(limited to 'mcron.c.template')

diff --git a/mcron.c.template b/mcron.c.template
new file mode 100644
index 0000000..8277732
--- /dev/null
+++ b/mcron.c.template
@@ -0,0 +1,124 @@
+/*
+ *   Copyright (C) 2003 Dale Mellor
+ * 
+ *   This program is free software; you can redistribute it and/or modify
+ *   it under the terms of the GNU General Public License as published by
+ *   the Free Software Foundation; either version 2, or (at your option)
+ *   any later version.
+ * 
+ *   This program is distributed in the hope that it will be useful,
+ *   but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *   GNU General Public License for more details.
+ * 
+ *   You should have received a copy of the GNU General Public License
+ *   along with this program; if not, write to the Free Software
+ *   Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
+ *   USA.
+ */
+
+
+/*
+    This C code represents the thinnest possible wrapper around the Guile code
+    which constitutes all the functionality of the mcron program. There are two
+    plus one reasons why we need to do this, and one very unfortunate
+    consequence.
+
+        Firstly, SUID does not work on an executable script. In the end, it is
+        the execution of the translator, in our case guile, which determines the
+        effective user, and it is not wise to make the system guile installation
+        SUID root!
+
+        Secondly, executable scripts show up in ugly ways in listings of the
+        system process table. Guile in particular, with its multi-line
+        #! ...\ \n -s ...!#
+        idiosyncracies shows up in process listings in a way that is difficult
+        to determine what program is actually running.
+
+        A third reason for the C wrapper which might be mentioned is that a
+        security-conscious system administrator can choose to only install a
+        binary, thus removing the possibility of a user studying a guile script
+        and working out ways of hacking it to his own ends, or worse still
+        finding a way to modify it to his own ends.
+
+        Unfortunately, running the guile script from inside a C program means
+        that the sigaction function does not work. Instead, it is necessary to
+        perform the signal processing in C.
+
+    The guile code itself is substituted for the GU1LE_PROGRAM_GOES_HERE (sic)
+    token by the makefile, which processes the scheme to make it look like one
+    big string.
+*/
+
+
+
+#include <signal.h>
+#include <libguile.h>
+
+
+
+/* This is a function designed to be installed as a signal handler, for signals
+   which are supposed to initiate shutdown of this program. It calls the scheme
+   procedure (see mcron.scm for details) to do all the work, and then exits. */
+
+void react_to_terminal_signal (int sig)
+{
+    scm_eval_string (scm_take0str ("(delete-run-file)") );
+    exit (1);
+}
+
+
+
+/* This is a function designed to be installed as a signal handler. It calls the
+   scheme procedure to do all the work (see mcron.scm for details). */
+
+void react_to_hup_signal (int sig)
+{
+    scm_eval_string (scm_take0str ("(process-hup)") );
+}
+
+
+
+/* This is a function designed to be callable from scheme, and sets up all the
+   signal handlers required by the cron personality.  */
+
+SCM set_cron_signals ()
+{
+    static struct sigaction sa;
+    memset (&sa, 0, sizeof (sa));
+    sa.sa_handler = react_to_terminal_signal;
+    sigaction (SIGTERM, &sa, 0);
+    sigaction (SIGINT,  &sa, 0);
+    sigaction (SIGQUIT, &sa, 0);
+
+    static struct sigaction hup; hup = sa;
+    hup.sa_handler = react_to_hup_signal;
+    sigaction (SIGHUP, &hup, 0);
+    
+    return SCM_BOOL_T;
+}
+
+
+
+/* The effective main function (i.e. the one that actually does some work). We
+   register the function above with the guile system, and then execute the mcron
+   guile program. */
+
+void inner_main ()
+{
+    scm_c_define_gsubr ("c-set-cron-signals", 0, 0, 0, set_cron_signals);
+    
+    scm_eval_string (scm_take0str (
+                                    GUILE_PROGRAM_GOES_HERE
+                                                            ) );
+}
+
+
+
+/* The real main function. Does nothing but start up the guile subsystem. */
+
+int main (int argc, char **argv)
+{
+    scm_boot_guile (argc, argv, inner_main, 0);
+    return 0;
+}
-- 
cgit v1.2.3