#include #include #include #include #include #include #include #include "mainwindow.h" #include "searchresult.h" #include "previewresultpdf.h" #include "../shared/common.h" #include "../shared/sandboxedprocessor.h" #include "../submodules/exile.h/exile.h" #include "ipcserver.h" void enableSandbox() { struct exile_policy *policy = exile_create_policy(); if(policy == NULL) { qCritical() << "Failed to init policy for sandbox"; exit(EXIT_FAILURE); } policy->namespace_options = 0; policy->no_new_privs = 1; int ret = exile_enable_policy(policy); if(ret != 0) { qDebug() << "Failed to establish sandbox"; exit(EXIT_FAILURE); } exile_free_policy(policy); } int main(int argc, char *argv[]) { QString socketPath = "/tmp/looqs-spawner"; if(argc > 1) { QString arg = argv[1]; if(arg == "ipc") { Common::setupAppInfo(); QApplication a(argc, argv); IpcServer *ipcserver = new IpcServer(); qDebug() << "Launching IPC Server"; if(!ipcserver->startSpawner(socketPath)) { qCritical() << "Error failed to spawn"; return 1; } qDebug() << "Launched IPC Server"; return a.exec(); } if(arg == "process") { Common::setupAppInfo(); QApplication a(argc, argv); QStringList args = a.arguments(); if(args.length() < 1) { qDebug() << "Filename is required"; return 1; } QString file = args.at(1); SandboxedProcessor processor(file); return processor.process(); } } QProcess process; QStringList args; args << "ipc"; if(!process.startDetached("/proc/self/exe", args)) { QString errorMsg = "Failed to start IPC server"; qDebug() << errorMsg; QMessageBox::critical(nullptr, "Error", errorMsg); } Common::setupAppInfo(); QCommandLineParser parser; parser.addOption({{"s", "no-sandbox"}, "Disable sandboxing"}); QStringList appArgs; for(int i = 0; i < argc; i++) { appArgs.append(argv[i]); } parser.parse(appArgs); try { Common::ensureConfigured(); if(!parser.isSet("no-sandbox")) { enableSandbox(); qInfo() << "Sandbox: on"; } else { qInfo() << "Sandbox: off"; } } catch(LooqsGeneralException &e) { qDebug() << e.message; QMessageBox::critical(nullptr, "Error", e.message); return 1; } // Keep this post sandbox, afterwards does not work (suspect due to threads, but unconfirmed) QApplication a(argc, argv); a.setWindowIcon(QIcon(":/icon.svg")); qRegisterMetaType>("QVector"); qRegisterMetaType>("QVector"); qRegisterMetaType("PreviewResultPdf"); qRegisterMetaType("FileScanResult"); qRegisterMetaType("RenderConfig"); qRegisterMetaType>("QVector"); qRegisterMetaType>("QSharedPointer"); MainWindow w{0, socketPath}; w.showMaximized(); return a.exec(); }