summaryrefslogtreecommitdiff
path: root/src/tools/disclaim/disclaim.mm
blob: b8dd5548c2e839834033c71bfba7c6b627cd3fdc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
// Copyright (C) 2021 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR GPL-3.0-only WITH Qt-GPL-exception-1.0

#include <stdio.h>
#include <stdlib.h>
#include <spawn.h>
#include <signal.h>
#include <string.h>

extern "C" {
int responsibility_spawnattrs_setdisclaim(posix_spawnattr_t attrs, int disclaim)
__attribute__((availability(macos,introduced=10.14),weak_import));
}

#define CHECK(expr) \
    if (int err = (expr)) { \
        fprintf(stderr, "%s: %s", #expr, strerror(err)); \
        exit(err); \
    }

int main(int argc, char *const *argv, char *const *envp)
{
    if (argc < 2) {
        printf("Disclaims all TCC responsibilities for the launched process\n"
               "usage: disclaim <command> [arguments]\n");
        return 1;
    }

    posix_spawnattr_t attr;
    CHECK(posix_spawnattr_init(&attr));

    // Behave as exec
    short flags = POSIX_SPAWN_SETEXEC;

    // Reset signal mask
    sigset_t no_signals;
    sigemptyset(&no_signals);
    CHECK(posix_spawnattr_setsigmask(&attr, &no_signals));
    flags |= POSIX_SPAWN_SETSIGMASK;

    // Reset all signals to their default handlers
    sigset_t all_signals;
    sigfillset(&all_signals);
    CHECK(posix_spawnattr_setsigdefault(&attr, &all_signals));
    flags |= POSIX_SPAWN_SETSIGDEF;

    CHECK(posix_spawnattr_setflags(&attr, flags));

    if (@available(macOS 10.14, *)) {
        // Disclaim TCC responsibilities
        if (responsibility_spawnattrs_setdisclaim)
            CHECK(responsibility_spawnattrs_setdisclaim(&attr, 1));
    }

    pid_t pid = 0;
    int err = posix_spawnp(&pid, argv[1], nullptr, &attr, argv + 1, envp);
    fprintf(stderr, "Failed to launch %s: %s", argv[1], strerror(err));

    posix_spawnattr_destroy(&attr);
    return err;
}