root/tools/bpf/bpftool/token.c
// SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause)
/* Copyright (C) 2025 Didi Technology Co., Tao Chen */

#ifndef _GNU_SOURCE
#define _GNU_SOURCE
#endif
#include <errno.h>
#include <fcntl.h>
#include <stdbool.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <mntent.h>
#include <sys/types.h>
#include <sys/stat.h>

#include "json_writer.h"
#include "main.h"

#define MOUNTS_FILE "/proc/mounts"

static struct {
        const char *header;
        const char *key;
} sets[] = {
        {"allowed_cmds", "delegate_cmds"},
        {"allowed_maps", "delegate_maps"},
        {"allowed_progs", "delegate_progs"},
        {"allowed_attachs", "delegate_attachs"},
};

static bool has_delegate_options(const char *mnt_ops)
{
        return strstr(mnt_ops, "delegate_cmds") ||
               strstr(mnt_ops, "delegate_maps") ||
               strstr(mnt_ops, "delegate_progs") ||
               strstr(mnt_ops, "delegate_attachs");
}

static char *get_delegate_value(char *opts, const char *key)
{
        char *token, *rest, *ret = NULL;

        if (!opts)
                return NULL;

        for (token = strtok_r(opts, ",", &rest); token;
                        token = strtok_r(NULL, ",", &rest)) {
                if (strncmp(token, key, strlen(key)) == 0 &&
                    token[strlen(key)] == '=') {
                        ret = token + strlen(key) + 1;
                        break;
                }
        }

        return ret;
}

static void print_items_per_line(char *input, int items_per_line)
{
        char *str, *rest;
        int cnt = 0;

        if (!input)
                return;

        for (str = strtok_r(input, ":", &rest); str;
                        str = strtok_r(NULL, ":", &rest)) {
                if (cnt % items_per_line == 0)
                        printf("\n\t  ");

                printf("%-20s", str);
                cnt++;
        }
}

#define ITEMS_PER_LINE 4
static void show_token_info_plain(struct mntent *mntent)
{
        size_t i;

        printf("token_info  %s", mntent->mnt_dir);

        for (i = 0; i < ARRAY_SIZE(sets); i++) {
                char *opts, *value;

                printf("\n\t%s:", sets[i].header);
                opts = strdup(mntent->mnt_opts);
                value = get_delegate_value(opts, sets[i].key);
                print_items_per_line(value, ITEMS_PER_LINE);
                free(opts);
        }

        printf("\n");
}

static void split_json_array_str(char *input)
{
        char *str, *rest;

        if (!input) {
                jsonw_start_array(json_wtr);
                jsonw_end_array(json_wtr);
                return;
        }

        jsonw_start_array(json_wtr);
        for (str = strtok_r(input, ":", &rest); str;
                        str = strtok_r(NULL, ":", &rest)) {
                jsonw_string(json_wtr, str);
        }
        jsonw_end_array(json_wtr);
}

static void show_token_info_json(struct mntent *mntent)
{
        size_t i;

        jsonw_start_object(json_wtr);
        jsonw_string_field(json_wtr, "token_info", mntent->mnt_dir);

        for (i = 0; i < ARRAY_SIZE(sets); i++) {
                char *opts, *value;

                jsonw_name(json_wtr, sets[i].header);
                opts = strdup(mntent->mnt_opts);
                value = get_delegate_value(opts, sets[i].key);
                split_json_array_str(value);
                free(opts);
        }

        jsonw_end_object(json_wtr);
}

static int __show_token_info(struct mntent *mntent)
{
        if (json_output)
                show_token_info_json(mntent);
        else
                show_token_info_plain(mntent);

        return 0;
}

static int show_token_info(void)
{
        FILE *fp;
        struct mntent *ent;

        fp = setmntent(MOUNTS_FILE, "r");
        if (!fp) {
                p_err("Failed to open: %s", MOUNTS_FILE);
                return -1;
        }

        if (json_output)
                jsonw_start_array(json_wtr);

        while ((ent = getmntent(fp)) != NULL) {
                if (strncmp(ent->mnt_type, "bpf", 3) == 0) {
                        if (has_delegate_options(ent->mnt_opts))
                                __show_token_info(ent);
                }
        }

        if (json_output)
                jsonw_end_array(json_wtr);

        endmntent(fp);

        return 0;
}

static int do_show(int argc, char **argv)
{
        if (argc)
                return BAD_ARG();

        return show_token_info();
}

static int do_help(int argc, char **argv)
{
        if (json_output) {
                jsonw_null(json_wtr);
                return 0;
        }

        fprintf(stderr,
                "Usage: %1$s %2$s { show | list }\n"
                "       %1$s %2$s help\n"
                "       " HELP_SPEC_OPTIONS " }\n"
                "\n"
                "",
                bin_name, argv[-2]);
        return 0;
}

static const struct cmd cmds[] = {
        { "show",       do_show },
        { "list",       do_show },
        { "help",       do_help },
        { 0 }
};

int do_token(int argc, char **argv)
{
        return cmd_select(cmds, argc, argv, do_help);
}