Function private_directory_tree_open

src/daemon/ipc.c:1408–1506

}

static int private_directory_tree_open(const char *directory_path) {
    if (!directory_path || !directory_path[0] || O_DIRECTORY == 0 || O_NOFOLLOW == 0) {
        return -1;
    }
    char *path = private_log_directory_path_copy(directory_path);
    if (!path) {
        return -1;
    }
    bool absolute = path[0] == '/';
    int current_fd = open(absolute ? "/" : ".", O_RDONLY | O_DIRECTORY | O_CLOEXEC | O_NOFOLLOW);
    bool ok = current_fd >= 0 && fd_set_cloexec(current_fd);
    char *cursor = path;
    while (ok && *cursor == '/') {
        cursor++;
    }
    bool visited = false;
    while (ok && *cursor) {
        char *component = cursor;
        while (*cursor && *cursor != '/') {
            cursor++;
        }
        char saved = *cursor;
        *cursor = '\0';
        if (strcmp(component, ".") == 0) {
            /* Relative paths may contain a harmless explicit current-dir
             * component. Parent traversal is never valid for private logs. */
        } else if (strcmp(component, "..") == 0 || !component[0]) {
            ok = false;
        } else {
            ok = posix_directory_parent_secure(current_fd);
            bool created = ok && mkdirat(current_fd, component, 0700) == 0;
            if (!created && errno != EEXIST) {
                ok = false;
            }
            int next_fd =
                ok ? openat(current_fd, component, O_RDONLY | O_DIRECTORY | O_CLOEXEC | O_NOFOLLOW)
                   : -1;
            struct stat status;
            ok = next_fd >= 0 && fd_set_cloexec(next_fd) && fstat(next_fd, &status) == 0 &&
                 S_ISDIR(status.st_mode) && posix_directory_transition_secure(current_fd, next_fd);
            if (ok && created) {
                ok = status.st_uid == geteuid() && fchmod(next_fd, 0700) == 0 &&
                     cbm_macos_extended_acl_fd_clear(next_fd) &&
                     cbm_macos_extended_acl_fd_is_empty(next_fd);
            }
            if (ok) {
                (void)close(current_fd);
                current_fd = next_fd;
                visited = true;
            } else if (next_fd >= 0) {
                (void)close(next_fd);
            }
        }
        *cursor = saved;
        while (*cursor == '/') {
            cursor++;
        }
    }