Add support for setxattr and listxattr system calls

Author: celinehoang177

src/rawposix/src/fs_calls.rs

@@ -4802,4 +4802,155 @@ pub extern "C" fn symlinkat_syscall(
     }
 
     ret
+}
+            "getrandom_syscall"
+        );
+    }
+
+    let ret = unsafe { getrandom(buf as *mut c_void, buflen.try_into().unwrap(), flags) };
+    if ret < 0 {
+        let errno = get_errno();
+        return handle_errno(errno, "getrandom");
+    }
+
+    // convert isize to i32 safely, as ret shouldn't be larger than 32-bit
+    // due to buflen being u32
+    ret.try_into().unwrap()
+}
+
+/// Linux reference: https://man7.org/linux/man-pages/man2/setxattr.2.html
+///
+/// Sets the value of an extended attribute identified by `name`
+/// and associated with the given `path` in the filesystem.
+///
+/// ## Arguments:
+/// * `cageid` - Cage identifier
+/// * `path_arg` - Path to the file
+/// * `path_cageid` - Cage ID for path
+/// * `name_arg` - Name of the extended attribute
+/// * `name_cageid` - Cage ID for name
+/// * `value_arg` - Pointer to the value to set
+/// * `value_cageid` - Cage ID for value
+/// * `size_arg` - Size of the value
+/// * `size_cageid` - Cage ID for size
+/// * `flags_arg` - Flags for setxattr (e.g., XATTR_CREATE, XATTR_REPLACE)
+/// * `flags_cageid` - Cage ID for flags
+///
+/// ## Returns:
+/// On success, 0 is returned. On error, -1 is returned and errno is set appropriately.
+pub extern "C" fn setxattr_syscall(
+    cageid: u64,
+    path_arg: u64,
+    path_cageid: u64,
+    name_arg: u64,
+    name_cageid: u64,
+    value_arg: u64,
+    value_cageid: u64,
+    size_arg: u64,
+    size_cageid: u64,
+    flags_arg: u64,
+    flags_cageid: u64,
+    arg6: u64,
+    arg6_cageid: u64,
+) -> i32 {
+    // Type conversion
+    let path = match sc_convert_path_to_host(path_arg, path_cageid, cageid) {
+        Ok(path) => path,
+        Err(e) => return syscall_error(e, "setxattr", "path conversion failed"),
+    };
+
+    let name = match sc_convert_path_to_host(name_arg, name_cageid, cageid) {
+        Ok(name) => name,
+        Err(e) => return syscall_error(e, "setxattr", "name conversion failed"),
+    };
+
+    let value = value_arg as *const libc::c_void;
+    let size = sc_convert_sysarg_to_usize(size_arg, size_cageid, cageid);
+    let flags = sc_convert_sysarg_to_i32(flags_arg, flags_cageid, cageid);
+
+    // Validate unused arg
+    if !sc_unusedarg(arg6, arg6_cageid) {
+        panic!(
+            "{}: unused arguments contain unexpected values -- security violation",
+            "setxattr_syscall"
+        );
+    }
+
+    // Call to kernel setxattr
+    let ret = unsafe { libc::setxattr(path.as_ptr(), name.as_ptr(), value, size, flags) };
+
+    if ret < 0 {
+        let errno = get_errno();
+        return handle_errno(errno, "setxattr");
+    }
+
+    ret
+}
+
+/// Linux reference: https://man7.org/linux/man-pages/man2/listxattr.2.html
+///
+/// Retrieves the list of extended attribute names associated with the given `path`.
+///
+/// ## Arguments:
+/// * `cageid` - Cage identifier
+/// * `path_arg` - Path to the file
+/// * `path_cageid` - Cage ID for path
+/// * `list_arg` - Pointer to buffer to store the list of attribute names
+/// * `list_cageid` - Cage ID for list
+/// * `size_arg` - Size of the buffer
+/// * `size_cageid` - Cage ID for size
+///
+/// ## Returns:
+/// On success, returns the size of the list of attribute names. If `list` is NULL and `size` is zero,
+/// returns the size of the buffer needed to store the list.
+/// On error, -1 is returned and errno is set appropriately.
+pub extern "C" fn listxattr_syscall(
+    cageid: u64,
+    path_arg: u64,
+    path_cageid: u64,
+    list_arg: u64,
+    list_cageid: u64,
+    size_arg: u64,
+    size_cageid: u64,
+    arg4: u64,
+    arg4_cageid: u64,
+    arg5: u64,
+    arg5_cageid: u64,
+    arg6: u64,
+    arg6_cageid: u64,
+) -> i32 {
+    // Type conversion
+    let path = match sc_convert_path_to_host(path_arg, path_cageid, cageid) {
+        Ok(path) => path,
+        Err(e) => return syscall_error(e, "listxattr", "path conversion failed"),
+    };
+
+    let list = if list_arg == 0 {
+        std::ptr::null_mut()
+    } else {
+        list_arg as *mut libc::c_char
+    };
+    let size = sc_convert_sysarg_to_usize(size_arg, size_cageid, cageid);
+
+    // Validate unused args
+    if !(sc_unusedarg(arg4, arg4_cageid)
+        && sc_unusedarg(arg5, arg5_cageid)
+        && sc_unusedarg(arg6, arg6_cageid))
+    {
+        panic!(
+            "{}: unused arguments contain unexpected values -- security violation",
+            "listxattr_syscall"
+        );
+    }
+
+    // Call to kernel listxattr
+    let ret = unsafe { libc::listxattr(path.as_ptr(), list, size) };
+
+    if ret < 0 {
+        let errno = get_errno();
+        return handle_errno(errno, "listxattr");
+    }
+
+    // Convert ssize_t to i32 safely
+    ret.try_into().unwrap_or(i32::MAX)
 }

src/rawposix/src/syscall_table.rs

@@ -8,13 +8,14 @@ use super::fs_calls::{
     close_syscall, dup2_syscall, dup3_syscall, dup_syscall, fchdir_syscall, fchmod_syscall,
     fcntl_syscall, fdatasync_syscall, flock_syscall, fstat_syscall, fstatfs_syscall, fsync_syscall,
     ftruncate_syscall, futex_syscall, getcwd_syscall, getdents_syscall, getrandom_syscall,
-    ioctl_syscall, link_syscall, lseek_syscall, lstat_syscall, mkdir_syscall, mknod_syscall,
-    mmap_syscall, mprotect_syscall, munmap_syscall, nanosleep_time64_syscall, open_syscall,
-    openat_syscall, pipe2_syscall, pipe_syscall, pread_syscall, preadv_syscall, pwrite_syscall,
-    pwritev_syscall, read_syscall, readlink_syscall, readlinkat_syscall, readv_syscall,
-    rename_syscall, rmdir_syscall, shmat_syscall, shmctl_syscall, shmdt_syscall, shmget_syscall,
-    stat_syscall, statfs_syscall, symlink_syscall, symlinkat_syscall, sync_file_range_syscall,
-    truncate_syscall, unlink_syscall, unlinkat_syscall, write_syscall, writev_syscall,
+    ioctl_syscall, link_syscall, listxattr_syscall, lseek_syscall, lstat_syscall, mkdir_syscall,
+    mknod_syscall, mmap_syscall, mprotect_syscall, munmap_syscall, nanosleep_time64_syscall,
+    open_syscall, openat_syscall, pipe2_syscall, pipe_syscall, pread_syscall, preadv_syscall,
+    pwrite_syscall, pwritev_syscall, read_syscall, readlink_syscall, readlinkat_syscall,
+    readv_syscall, rename_syscall, rmdir_syscall, setxattr_syscall, shmat_syscall,
+    shmctl_syscall, shmdt_syscall, shmget_syscall, stat_syscall, statfs_syscall,
+    symlink_syscall, symlinkat_syscall, sync_file_range_syscall, truncate_syscall,
+    unlink_syscall, unlinkat_syscall, write_syscall, writev_syscall,
 };
 use super::init::RawCallFunc;
 use super::net_calls::{
@@ -133,6 +134,8 @@ pub const SYSCALL_TABLE: &[(u64, RawCallFunc)] = &[
         syscall_const::GETHOSTNAME_SYSCALL as u64,
         gethostname_syscall,
     ),
+    (188 as u64, setxattr_syscall),
+    (194 as u64, listxattr_syscall),
     (syscall_const::FUTEX_SYSCALL as u64, futex_syscall),
     (
         syscall_const::EPOLL_CREATE_SYSCALL as u64,