@ai-ecoverse/slicc-kernel 1.34.1 → 1.35.0

package/README.md

@@ -421,6 +421,22 @@ An exec'd program takes over the pid of the process it replaces, as on Linux: `g
 - **Emscripten:** `Module.sliccKernel.execve(file, argv, env, cwd)` runs `file` as this process's new image on its fds 0, 1 and 2, waits for it, and returns its wait status, or a negative errno when it cannot start. `env` and `cwd` may be `null` for this process's own. An exec shim detects it with `typeof Module.sliccKernel.execve === 'function'` and exits with the status it returns, as `execve` never returns on success. Older shims spawn the program and then call `Module.sliccKernel.execWait(pid)`; that works the same way: a new program asks the kernel for its pid before `main`, and the kernel answers once its parent has made its next call, so an image an older shim execs also reports the pid it replaced (the wait starts once the program is loaded; should the parent make no call within 100 ms after that, the kernel answers anyway, and the image may then report its own pid; `launcher.identities` counts the programs that asked and those answered by that timeout).
 - **WASIX:** `proc_exec` does this by itself.
 
+### File modes and the umask
+
+Every process has a umask in the kernel, `022` for a process the embedder starts, inherited across fork, spawn and exec and shown in `/proc/<pid>/status` (`Umask:`). The kernel applies it when a program creates a file or directory, whatever its libc does: an Emscripten program's `open` with `O_CREAT`, `mkdir` and `mknod` (so `umask 077; touch f` gives `600` in a child too), and a WASI program's `path_open` with `O_CREAT` and `path_create_directory` (`0666` and `0777` less the umask).
+
+WASI and WASIX have no call for file modes, so the kernel adds the import module `slicc_fs`, whose functions return a preview1 errno (kernels without them answer `ENOSYS`):
+
+| Import | Does |
+| --- | --- |
+| `fd_chmod(fd, mode)` | `fchmod` on an open file or directory |
+| `path_chmod(dirfd, path, path_len, mode, flags)` | `fchmodat`; with `flags & 1` (`AT_SYMLINK_NOFOLLOW`) a symlink answers `ENOTSUP` and is never followed |
+| `umask(mask, old_out)` | sets the process's umask and writes the previous one |
+| `fd_mode(fd, mode_out)` | the permission bits of an open file or directory |
+| `path_mode(dirfd, path, path_len, flags, mode_out)` | those of a path, of the link itself with `flags & 1` |
+
+Lowering a soft resource limit (`ulimit -S -n 64`) still fails with `EPERM` in Emscripten programs: their libc's `setrlimit` is a stub compiled into the program, not a call to the kernel.
+
 ### `/proc`
 
 Every process of the kernel has `/proc/<pid>/` with `cmdline`, `comm`, `stat`, `statm` and `status`, in the formats procps reads, and `/proc/self` is a link to the `/proc/<pid>` of the process that reads it, as on Linux (`readlink /proc/self` is its pid, the one it was exec'd under included). They come from the kernel's process table when they are opened, so a terminal sees the processes of every client; an exec'd program shows under the pid its parent knows. `/proc/uptime`, `/proc/loadavg`, `/proc/stat` and `/proc/meminfo` are there too, and `/proc/mounts`. A process with no parent in the kernel (one a page, a client or the Node entry started) has parent 1, as children of init do, in `getppid()`, `/proc/<pid>/stat` and `ps` alike, and so does a process whose parent has ended, waited for or not (`getppid()` asks the kernel each time; a shell's `$PPID` keeps the value it started with, as on Linux). Pids, parents, process groups, sessions, command lines, terminals, start and boot times are real, and so is each process's memory: the size of its wasm memory (`VSZ` and `RSS` alike, as wasm has no paging), which `/proc/meminfo` counts as used. CPU times, load and `MemTotal` (from `navigator.deviceMemory`, else 4 GiB) are placeholders. Only Emscripten processes see this `/proc`.

package/dist/kernel-worker.js

@@ -7857,10 +7857,12 @@ var SYSCALL_OPS = /* @__PURE__ */ new Set([
   "fd-cloexec",
   "fd-list",
   "proc-alarm",
+  "proc-umask",
   "dl-log",
   "fd-renumber",
   "fd-promote",
   "fd-open-tty",
+  "fd-tty-names",
   "tty-get",
   "tty-set",
   "tty-winsz",
@@ -7894,6 +7896,7 @@ function isWasmSyscall(req) {
   return typeof op === "string" && SYSCALL_OPS.has(op);
 }
 var MAX_READ = 1024 * 1024;
+var DEFAULT_UMASK = 18;
 var DYING = { ok: false, errno: "EINTR", message: "the process is being killed" };
 var HOSTS_ONLY = new Resolver({ routes: new Routes() });
 var WasmProcess = class {
@@ -7904,6 +7907,7 @@ var WasmProcess = class {
   inherited = 0;
   interrupt = new AbortController();
   dying = false;
+  umask = DEFAULT_UMASK;
   execChild;
   execTermsig;
   stopped = 0;
@@ -7921,6 +7925,7 @@ var WasmProcess = class {
     this.fds = fds;
     this.options = options;
     this.inherited = options.ignored ?? 0;
+    this.umask = options.umask ?? DEFAULT_UMASK;
     this.children = new ChildTable(fds, options.spawner, options.forker);
     this.nodes = options.nodes ?? new VfsNodes(options.fs);
     if (!options.nodes) options.openFiles?.add(this.nodes);
@@ -7993,6 +7998,11 @@ var WasmProcess = class {
       return result;
     }
   }
+  setUmask(mask) {
+    const old = this.umask;
+    if (mask !== void 0) this.umask = mask & 511;
+    return old;
+  }
   die() {
     if (this.dying) return;
     this.dying = true;
@@ -8157,6 +8167,8 @@ var WasmProcess = class {
         if (!tty) throw new KernelError("ENXIO");
         return { ok: true, kind: "json", json: this.fds.install(tty.file(), 3) };
       }
+      case "fd-tty-names":
+        return { ok: true, kind: "json", json: this.options.jobs?.terminalNames() ?? [] };
       case "fd-select": {
         const { read, write, timeoutMs } = req;
         const signal = this.blockingSignal();
@@ -8388,6 +8400,8 @@ var WasmProcess = class {
       case "proc-alarm":
         this.setAlarm(req.sig, req.firstMs ?? req.ms, req.repeat ? req.ms : 0, req.timer);
         return { ok: true, kind: "void" };
+      case "proc-umask":
+        return { ok: true, kind: "json", json: this.setUmask(req.mask) };
       case "dl-log":
         if (req.append) this.dlLog.push(req.append);
         return { ok: true, kind: "json", json: this.dlLog.slice(req.from) };
@@ -8537,7 +8551,7 @@ var Dying = class {
     return [typeof reported === "number" ? reported : CRASHED, void 0];
   }
 };
-function processInit(opts, sab) {
+function processInit(opts, sab, umask) {
   const base = {
     type: WASM_PROCESS_INIT,
     pid: opts.shownPid ?? opts.pid,
@@ -8546,6 +8560,7 @@ function processInit(opts, sab) {
     env: opts.env,
     cwd: opts.cwd,
     sab,
+    umask,
     ...opts.ppid !== void 0 ? { ppid: opts.ppid } : {}
   };
   if (opts.program.abi === "js") {
@@ -8557,11 +8572,17 @@ function processInit(opts, sab) {
     ...opts.fork ? { fork: opts.fork } : { fds: inheritedFds(opts.fds) }
   };
 }
+function inherited(opts) {
+  return {
+    ...opts.ignored ? { ignored: opts.ignored } : {},
+    ...opts.umask !== void 0 ? { umask: opts.umask } : {}
+  };
+}
 function spawnWasmProcess(opts) {
   const sab = new SharedArrayBuffer(SAB_HEADER_BYTES + SAB_DEFAULT_WINDOW_BYTES);
   const header2 = new Int32Array(sab, 0, SAB_HEADER_I32);
   const process = new WasmProcess(opts.pid, opts.fds, {
-    ...opts.ignored ? { ignored: opts.ignored } : {},
+    ...inherited(opts),
     ...opts.identity ? { identity: opts.identity } : {},
     ...opts.onSyscall ? { onSyscall: opts.onSyscall } : {},
     spawner: opts.spawner,
@@ -8695,7 +8716,7 @@ function spawnWasmProcess(opts) {
     };
     tw.postMessage(tinit);
   };
-  const init = processInit(opts, sab);
+  const init = processInit(opts, sab, process.umask);
   worker.postMessage(init, opts.fork ? [opts.fork.memory.buffer] : []);
   const signal = (sig) => {
     if (process.signal(sig) !== "terminate") return;
@@ -8713,6 +8734,7 @@ function spawnWasmProcess(opts) {
     onState: (listener) => process.onState(listener),
     memory: () => Atomics.load(header2, SAB_I_MEMORY) * 65536,
     ignoredSignals: (fork) => process.inheritable(fork),
+    umask: () => process.umask,
     writesBack: () => opts.program.abi === "wasi" && !done4
   };
 }
@@ -8818,8 +8840,13 @@ var JobTable = class {
     return id;
   }
   terminalNamed(name2) {
-    const known = /* @__PURE__ */ new Set([...this.terminals.values(), ...this.foreground.keys()]);
-    return [...known].find((tty) => tty.name === name2);
+    return this.knownTerminals().find((tty) => tty.name === name2);
+  }
+  terminalNames() {
+    return this.knownTerminals().flatMap((tty) => tty.name ? [tty.name] : []);
+  }
+  knownTerminals() {
+    return [.../* @__PURE__ */ new Set([...this.terminals.values(), ...this.foreground.keys()])];
   }
   controllingTerminal(pid) {
     const member = this.members.get(pid);
@@ -10453,6 +10480,7 @@ var Launcher = class {
         this.settling.syscall(pid, call.op);
       },
       ...req.ignored ? { ignored: req.ignored } : {},
+      ...req.umask !== void 0 ? { umask: req.umask } : {},
       program: req.program,
       argv0: req.argv0,
       args: req.args,
@@ -10544,7 +10572,8 @@ var Launcher = class {
         ...described,
         started: (this.described.get(root.pid) ?? described).started,
         state: this.processes.has(member.pid) ? "S" : "Z",
-        memory: this.processes.get(member.pid)?.memory() ?? 0
+        memory: this.processes.get(member.pid)?.memory() ?? 0,
+        umask: this.umaskOf(member.pid)
       });
     }
     return listed;
@@ -10566,6 +10595,7 @@ var Launcher = class {
         report,
         ppid,
         ignored: this.ignoredBy(ppid),
+        umask: this.umaskOf(ppid),
         ...exec
       });
       deciding?.attach();
@@ -10610,7 +10640,8 @@ var Launcher = class {
         fds,
         ppid,
         fork: state,
-        ignored: this.ignoredBy(ppid, true)
+        ignored: this.ignoredBy(ppid, true),
+        umask: this.umaskOf(ppid)
       })
     );
   }
@@ -10619,6 +10650,9 @@ var Launcher = class {
     const foreground = () => this.jobs.tcgetpgrp(tty, fallback);
     this.settling.deliver(sig, pgid, send, tty.reading ? void 0 : foreground);
   }
+  umaskOf(pid) {
+    return this.processes.get(pid)?.umask?.() ?? DEFAULT_UMASK;
+  }
   ignoredBy(pid, fork = false) {
     return this.processes.get(pid)?.ignoredSignals(fork) ?? 0;
   }