service/src/status.cr


require "./service/service.cr"

require "./config.cr"

ServiceDefinition.load SERVICES_DIRECTORY
Environment.load ENVIRONMENTS_DIRECTORY
Service.load RC_DIRECTORY

LibC.setuid 0
LibC.setgid 0

Service.get_by_id(ARGV[0]).try do |service|
	puts service.status PID_DIRECTORY
	exit 0
end

exit 1
Project organisation for WIP separate binaries. - The idea would be to allow running specific commands from SUID binaries when unpriviledged users should be able to run them. Such commands include getting services status, which need root priviledges to be implemented but shouldn’t be required by users. - Because the repository now builds several binaries, src/main.cr is now src/service.cr and a WIP src/status.cr has been added. - The `status` binary will likely be installed in libexec in the future, with the SUID bit set. 2019-06-09 18:08:59 +02:00
			`require "./service/service.cr"`

			`require "./config.cr"`

			`ServiceDefinition.load SERVICES_DIRECTORY`
			`Environment.load ENVIRONMENTS_DIRECTORY`
			`Service.load RC_DIRECTORY`

Priviledges management. - `service status` does not require priviledges anymore… if the `status` binary is owned by root and has the setuid and setguid flags. Hopefully, that binary only checks that a service’s process exists. 2019-06-10 14:32:30 +02:00			`LibC.setuid 0`
			`LibC.setgid 0`

Project organisation for WIP separate binaries. - The idea would be to allow running specific commands from SUID binaries when unpriviledged users should be able to run them. Such commands include getting services status, which need root priviledges to be implemented but shouldn’t be required by users. - Because the repository now builds several binaries, src/main.cr is now src/service.cr and a WIP src/status.cr has been added. - The `status` binary will likely be installed in libexec in the future, with the SUID bit set. 2019-06-09 18:08:59 +02:00			`Service.get_by_id(ARGV[0]).try do \|service\|`
			`puts service.status PID_DIRECTORY`
			`exit 0`
			`end`

			`exit 1`