[login_manager] Prevent non-children from calling RestartJob

session_manager_service.h

 // Copyright (c) 2009-2010 The Chromium OS Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef LOGIN_MANAGER_SESSION_MANAGER_SERVICE_H_
 #define LOGIN_MANAGER_SESSION_MANAGER_SERVICE_H_
 
-#include <gtest/gtest.h>
-
+#include <dbus/dbus.h>
 #include <errno.h>
 #include <glib.h>
+#include <gtest/gtest.h>
 #include <signal.h>
 #include <unistd.h>
 
 #include <string>
 #include <vector>
 
 #include <base/basictypes.h>
 #include <base/scoped_ptr.h>
 #include <chromeos/dbus/abstract_dbus_service.h>
 #include <chromeos/dbus/dbus.h>
 #include <chromeos/dbus/service_constants.h>
 
 #include "login_manager/file_checker.h"
 #include "login_manager/owner_key.h"
 #include "login_manager/owner_key_loss_mitigator.h"
 #include "login_manager/pref_store.h"
 #include "login_manager/system_utils.h"
 #include "login_manager/upstart_signal_emitter.h"
 
-class CommandLine;
-
 namespace login_manager {
 namespace gobject {
 struct SessionManager;
 }  // namespace gobject
 
 class ChildJobInterface;
+class CommandLine;
 class NssUtil;
 
 // Provides a wrapper for exporting SessionManagerInterface to
 // D-Bus and entering the glib run loop.
 //
 // ::g_type_init() must be called before this class is used.
 //
 // All signatures used in the methods of the ownership API are
 // SHA1 with RSA encryption.
 class SessionManagerService : public chromeos::dbus::AbstractDbusService {
@@ skipping 75 matching lines @@
         : session_manager_service_(session_manager_service) {}
     SessionManagerService* session_manager_service_;
   };
 
   // TestApi exposes internal routines for testing purposes.
   TestApi test_api() { return TestApi(this); }
 
   ////////////////////////////////////////////////////////////////////////////
   // Implementing chromeos::dbus::AbstractDbusService
   virtual bool Initialize();
+  virtual bool Register(const chromeos::dbus::BusConnection &conn);
   virtual bool Reset();
 
   // Takes ownership of |file_checker|.
   void set_file_checker(FileChecker* file_checker) {
     file_checker_.reset(file_checker);
   }
 
   // Takes ownership of |mitigator|.
   void set_mitigator(OwnerKeyLossMitigator* mitigator) {
     mitigator_.reset(mitigator);
@@ skipping 34 matching lines @@
   virtual bool Shutdown();
 
   // Fork, then call child_job_->Run() in the child and set a
   // babysitter in the parent's glib default context that calls
   // HandleChildExit when the child is done.
   void RunChildren();
 
   // Run one of the children.
   int RunChild(ChildJobInterface* child_job);
 
+  bool IsKnownChild(int pid);
+
   // Tell us that, if we want, we can cause a graceful exit from g_main_loop.
   void AllowGracefulExit();
 
   ////////////////////////////////////////////////////////////////////////////
   // SessionManagerService commands
 
   // Emits the "login-prompt-ready" and "login-prompt-visible" upstart signals.
   gboolean EmitLoginPromptReady(gboolean* OUT_emitted, GError** error);
   gboolean EmitLoginPromptVisible(GError** error);
 
@@ skipping 106 matching lines @@
 
   static void do_nothing(int sig) {}
 
   // Common code between SIG{HUP, INT, TERM}Handler.
   static void GracefulShutdownHandler(int signal);
   static void SIGHUPHandler(int signal);
   static void SIGINTHandler(int signal);
   static void SIGTERMHandler(int signal);
 
   // |data| is a SessionManagerService*
+  static DBusHandlerResult FilterMessage(DBusConnection* conn,
+                                         DBusMessage* message,
+                                         void* data);
+
+  // |data| is a SessionManagerService*
   static void HandleChildExit(GPid pid,
                               gint status,
                               gpointer data);
 
   // |data| is a SessionManagerService*.  This is a wrapper around
   // ServiceShutdown() so that we can register it as the callback for
   // when |source| has data to read.
   static gboolean HandleKill(GIOChannel* source,
                              GIOCondition condition,
                              gpointer data);
@@ skipping 126 matching lines @@
   bool set_uid_;
 
   bool shutting_down_;
 
   friend class TestAPI;
   DISALLOW_COPY_AND_ASSIGN(SessionManagerService);
 };
 }  // namespace login_manager
 
 #endif  // LOGIN_MANAGER_SESSION_MANAGER_SERVICE_H_