sbox: add sandboxing wrapperth/tlv

3 files changed, 80 insertions, 0 deletions

diff --git a/Makefile.am b/Makefile.am
index f9f4f3e9a3..a5eed9ce0d 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -437,6 +437,38 @@ shared_nm_glib_aux_libnm_glib_aux_la_LIBADD = \
 
 ###############################################################################
 
+shared_nm_sbox_wrapper_cppflags = \
+	$(dflt_cppflags) \
+	-I$(srcdir)/shared \
+	$(CODE_COVERAGE_CFLAGS) \
+	$(SANITIZER_LIB_CFLAGS) \
+	$(GLIB_CFLAGS) \
+	-DG_LOG_DOMAIN=\""libnm"\" \
+	-DNETWORKMANAGER_COMPILATION='(NM_NETWORKMANAGER_COMPILATION_GLIB|NM_NETWORKMANAGER_COMPILATION_WITH_GLIB_I18N_LIB)' \
+	$(NULL)
+
+noinst_LTLIBRARIES += shared/nm-sbox-wrapper/libnm-sbox-wrapper.la
+
+shared_nm_sbox_wrapper_libnm_sbox_wrapper_la_CPPFLAGS = \
+	$(shared_nm_sbox_wrapper_cppflags) \
+	$(NULL)
+
+shared_nm_sbox_wrapper_libnm_sbox_wrapper_la_SOURCES = \
+	shared/nm-sbox-wrapper/nm-sbox-wrapper.c \
+	shared/nm-sbox-wrapper/nm-sbox-wrapper.h \
+	$(NULL)
+
+shared_nm_sbox_wrapper_libnm_sbox_wrapper_la_LDFLAGS = \
+	$(CODE_COVERAGE_LDFLAGS) \
+	$(SANITIZER_LIB_LDFLAGS) \
+	$(NULL)
+
+shared_nm_sbox_wrapper_libnm_sbox_wrapper_la_LIBADD = \
+	$(GLIB_LIBS) \
+	$(NULL)
+
+###############################################################################
+
 noinst_LTLIBRARIES += shared/nm-udev-aux/libnm-udev-aux.la
 
 shared_nm_udev_aux_libnm_udev_aux_la_CPPFLAGS = \
diff --git a/shared/nm-sbox-wrapper/nm-sbox-wrapper.c b/shared/nm-sbox-wrapper/nm-sbox-wrapper.c
new file mode 100644
index 0000000000..04ba57ccb3
--- /dev/null
+++ b/shared/nm-sbox-wrapper/nm-sbox-wrapper.c
@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: LGPL-2.1+
+
+#include "nm-default.h"
+
+#include "nm-sbox-wrapper.h"
+
+/*****************************************************************************/
+
+struct _NMSBoxWrapperHandle {
+	NMSBoxWrapperVTable vtable;
+};
+
+/*****************************************************************************/
+
+NMSBoxWrapperHandle *
+nm_sbox_wrapper_start (const NMSBoxWrapperVTable *vtable,
+                       const NMSBoxWrapperConfig *config,
+                       GError **error)
+{
+	nm_auto_close int channel_fd = -1;
+	int r;
+
+	g_return_val_if_fail (vtable, NULL);
+	g_return_val_if_fail (config, NULL);
+	g_return_val_if_fail (!error || !*error, NULL);
+
+	r = socketpair (AF_UNIX, SOCK_DGRAM, 0, s_pair);
+
+	return NULL;
+}
diff --git a/shared/nm-sbox-wrapper/nm-sbox-wrapper.h b/shared/nm-sbox-wrapper/nm-sbox-wrapper.h
new file mode 100644
index 0000000000..bd576bdc68
--- /dev/null
+++ b/shared/nm-sbox-wrapper/nm-sbox-wrapper.h
@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: LGPL-2.1+
+
+#ifndef __NM_SBOX_H__
+#define __NM_SBOX_H__
+
+typedef struct {
+} NMSBoxWrapperVTable;
+
+typedef struct {
+} NMSBoxWrapperConfig;
+
+typedef struct _NMSBoxWrapperHandle NMSBoxWrapperHandle;
+
+NMSBoxWrapperHandle *nm_sbox_wrapper_start (const NMSBoxWrapperVTable *vtable,
+                                            const NMSBoxWrapperConfig *config,
+                                            GError **error);
+
+#endif /* __NM_SBOX_H__ */