mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-15 06:42:51 +01:00
c013ca2cf7
The intended value is:
-offset indent
If there's any typo such that the value doesn't match the pre-defined
strings, then the offset is the same width as the value. So by chance,
"-offset -ident" ended up being a standard-width indent (since the
default indent is 6 chars, and "-ident" also has 6 chars), whereas
"-offset -indent" had a longer indent, and "-offset ident" had a shorter
one.
Signed-off-by: Graham Percival <gperciva@tarsnap.com>
Reviewed by: mhorne, Alexander Ziaee <concussious.bugzilla@runbox.com>
MFC after: 3 days
Sponsored by: Tarsnap Backup Inc.
Pull Request: https://github.com/freebsd/freebsd-src/pull/1436
332 lines
9.3 KiB
Groff
332 lines
9.3 KiB
Groff
.\"-
|
|
.\" Copyright (c) 2013 Stacey D. Son
|
|
.\" All rights reserved.
|
|
.\"
|
|
.\" Redistribution and use in source and binary forms, with or without
|
|
.\" modification, are permitted provided that the following conditions
|
|
.\" are met:
|
|
.\" 1. Redistributions of source code must retain the above copyright
|
|
.\" notice, this list of conditions and the following disclaimer.
|
|
.\" 2. Redistributions in binary form must reproduce the above copyright
|
|
.\" notice, this list of conditions and the following disclaimer in the
|
|
.\" documentation and/or other materials provided with the distribution.
|
|
.\"
|
|
.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
.\" SUCH DAMAGE.
|
|
.\"
|
|
.\" Support for miscellaneous binary image activators
|
|
.\"
|
|
.Dd April 30, 2020
|
|
.Dt BINMISCCTL 8
|
|
.Os
|
|
.Sh NAME
|
|
.Nm binmiscctl
|
|
.Nd manage binary image activators
|
|
.Sh SYNOPSIS
|
|
.Nm
|
|
.Cm add
|
|
.Ar name
|
|
.Fl -interpreter
|
|
.Ar path
|
|
.Fl -magic
|
|
.Ar magic
|
|
.Fl -size
|
|
.Ar size
|
|
.Op Fl -mask Ar mask
|
|
.Op Fl -offset Ar offset
|
|
.Op Fl -set-enabled
|
|
.Op Fl -pre-open
|
|
.Nm
|
|
.Cm disable
|
|
.Ar name
|
|
.Nm
|
|
.Cm enable
|
|
.Ar name
|
|
.Nm
|
|
.Cm list
|
|
.Nm
|
|
.Cm lookup
|
|
.Ar name
|
|
.Nm
|
|
.Cm remove
|
|
.Ar name
|
|
.Sh DESCRIPTION
|
|
The
|
|
.Nm
|
|
utility
|
|
is the management utility for configuring miscellaneous binaries image
|
|
activators in the kernel.
|
|
It allows adding, deleting, disabling,
|
|
enabling, and looking up interpreters.
|
|
Also, all the interpreters can
|
|
be listed.
|
|
.Pp
|
|
The first argument on the command line indicates the operation to be
|
|
performed.
|
|
Operation must be one of the following:
|
|
.Bl -tag -width indent
|
|
.It Xo
|
|
.Cm add
|
|
.Ar name
|
|
.Fl -interpreter
|
|
.Ar path
|
|
.Fl -magic
|
|
.Ar magic
|
|
.Fl -size
|
|
.Ar size
|
|
.Op Fl -mask Ar mask
|
|
.Op Fl -offset Ar offset
|
|
.Op Fl -set-enabled
|
|
.Op Fl -pre-open
|
|
.Xc
|
|
Add a new activator entry in the kernel.
|
|
You must specify a
|
|
unique
|
|
.Ar name ,
|
|
a
|
|
.Ar path
|
|
to the interpreter,
|
|
header
|
|
.Ar magic
|
|
bytes that uniquely identify a suitable binary for the activator,
|
|
and the
|
|
.Ar size
|
|
of the
|
|
.Ar magic
|
|
in bytes.
|
|
.Pp
|
|
Optionally, you may specify a
|
|
.Ar mask
|
|
to do a bitwise AND with the header bytes.
|
|
This effectively allows you to ignore fields in the binary header that
|
|
do not uniquely indentify the binary file's type.
|
|
.Pp
|
|
An
|
|
.Ar offset
|
|
may be specified for the magic bytes using the
|
|
.Fl -offset
|
|
option.
|
|
By default the
|
|
.Ar offset
|
|
is zero.
|
|
.Pp
|
|
To enable the activator entry the
|
|
.Fl -set-enabled
|
|
option is used.
|
|
The activator default state is disabled.
|
|
.Pp
|
|
To make the interpreter automatically available in jails and chroots,
|
|
use the
|
|
.Fl -pre-open
|
|
option to allow the kernel to open the binary at configuration time
|
|
rather then lazily when the interpreted program is started.
|
|
.Pp
|
|
The interpreter
|
|
.Ar path
|
|
may also contain arguments for the interpreter including
|
|
.Ar #a
|
|
which gets replaced by the old
|
|
.Dv argv0
|
|
value in the interpreter string.
|
|
.It Cm disable Ar name
|
|
Disable the activator entry identified with
|
|
.Ar name .
|
|
.It Cm enable Ar name
|
|
Enable the activator entry identified with
|
|
.Ar name .
|
|
.It Cm list
|
|
Take a snapshot and print all the activator entries currently configured.
|
|
.It Cm lookup Ar name
|
|
Look up and print out the activator entry identified with
|
|
.Ar name .
|
|
.It Cm remove Ar name
|
|
Remove the activator entry identified with
|
|
.Ar name .
|
|
.El
|
|
.Sh EXAMPLES
|
|
Add an image activator to run the LLVM interpreter
|
|
.Po
|
|
.Xr lli 1
|
|
.Pc
|
|
on bitcode
|
|
compiled files and set its state to enabled.
|
|
In this example
|
|
.Ar #a
|
|
is replaced with the old
|
|
.Dv argv0
|
|
value so that
|
|
.Xr lli 1
|
|
can fake its
|
|
.Dv argv0 :
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add llvmbc --interpreter ''/usr/bin/lli \e
|
|
--fake-argv0=#a'' --magic ''BC\\xc0\\xde'' --size 4 \e
|
|
--set-enabled
|
|
.Ed
|
|
.Pp
|
|
Set the state of the
|
|
.Ar llvmbc
|
|
image activator to disabled:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl disable llvmbc
|
|
.Ed
|
|
.Pp
|
|
Set the state of the
|
|
.Ar llvmbc
|
|
image activator to enabled:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl enable llvmbc
|
|
.Ed
|
|
.Pp
|
|
Delete the
|
|
.Ar llvmbc
|
|
image activator:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl remove llvmbc
|
|
.Ed
|
|
.Pp
|
|
Look up and list the record for the
|
|
.Ar llvmbc
|
|
image activator:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl lookup llvmbc
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for ARM AARCH64 binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add arm64 \e
|
|
--interpreter "/usr/local/bin/qemu-aarch64-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex02\ex01\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\exb7\ex00" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exfe\exff\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for ARM little-endian binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add armelf \e
|
|
--interpreter "/usr/local/bin/qemu-arm-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex01\ex01\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\ex28\ex00" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exfe\exff\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for ARM big-endian binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add armebelf \e
|
|
--interpreter "/usr/local/bin/qemu-arm-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex01\ex02\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\ex28" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exff\exfe\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for MIPS32 binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add mips32 \e
|
|
--interpreter "/usr/local/bin/qemu-mips-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex01\ex02\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\ex08" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exff\exfe\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for MIPS64 binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add mips64 \e
|
|
--interpreter "/usr/local/bin/qemu-mips64-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex02\ex02\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\ex08" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exff\exfe\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for PowerPC binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add powerpc \e
|
|
--interpreter "/usr/local/bin/qemu-ppc-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex01\ex02\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\ex14" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exff\exfe\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for PowerPC64 binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add powerpc64 \e
|
|
--interpreter "/usr/local/bin/qemu-ppc64-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex02\ex02\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\ex15" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exff\exfe\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Pp
|
|
Add QEMU bsd-user program as an image activator for 64-bit RISC-V binaries:
|
|
.Bd -literal -offset indent
|
|
# binmiscctl add riscv64 \e
|
|
--interpreter "/usr/local/bin/qemu-riscv64-static" \e
|
|
--magic "\ex7f\ex45\ex4c\ex46\ex02\ex01\ex01\ex00\ex00\ex00\e
|
|
\ex00\ex00\ex00\ex00\ex00\ex00\ex02\ex00\exf3\ex00" \e
|
|
--mask "\exff\exff\exff\exff\exff\exff\exff\ex00\exff\exff\e
|
|
\exff\exff\exff\exff\exff\exff\exfe\exff\exff\exff" \e
|
|
--size 20 --set-enabled
|
|
.Ed
|
|
.Ss "Create and use an ARMv7 chroot on an AMD64 host"
|
|
Use an existing source tree to build a chroot host with architecture
|
|
overrides:
|
|
.Bd -literal -offset ident
|
|
D=/path/to/chroot
|
|
cd /usr/src
|
|
mkdir -p $D
|
|
make world TARGET=arm TARGET_ARCH=armv7 DESTDIR=$D
|
|
make distribution TARGET=arm TARGET_ARCH=armv7 DESTDIR=$D
|
|
.Ed
|
|
.Pp
|
|
With
|
|
.Pa emulators/qemu-user-static
|
|
from the
|
|
.Fx
|
|
Ports Collection, the emulator must be copied into the jail path
|
|
specified in the
|
|
.Nm
|
|
command.
|
|
Using the example above:
|
|
.Bd -literal -offset indent
|
|
mkdir $D/usr/local/bin
|
|
cp /usr/local/bin/qemu-arm-static $D/usr/local/bin
|
|
.Ed
|
|
.Pp
|
|
Now the user can chroot into the environment normally, as root:
|
|
.Bd -literal -offset indent
|
|
chroot $D
|
|
.Ed
|
|
.Sh SEE ALSO
|
|
.Xr lli 1 ,
|
|
.Xr execve 2 ,
|
|
.Xr jail 8
|
|
.Sh HISTORY
|
|
The
|
|
.Nm
|
|
command was added in
|
|
.Fx 10.1 .
|
|
It was developed to support the imgact_binmisc kernel module.
|
|
.Sh AUTHORS
|
|
.An Stacey D Son Aq Mt sson@FreeBSD.org
|