bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
1 |
#define _GNU_SOURCE /* asprintf() */ |
2 |
#include <signal.h> /* sig_atomic_t, struct sigaction, |
|
3 |
sigemptyset(), sigaddset(), |
|
4 |
sigaction, SIGINT, SIG_IGN, SIGHUP, |
|
5 |
SIGTERM, kill(), SIGKILL */ |
|
6 |
#include <stddef.h> /* NULL */ |
|
7 |
#include <stdlib.h> /* getenv() */ |
|
8 |
#include <stdio.h> /* asprintf(), perror() */ |
|
9 |
#include <stdlib.h> /* EXIT_FAILURE, EXIT_SUCCESS, |
|
10 |
strtoul(), free() */ |
|
11 |
#include <sys/types.h> /* pid_t, DIR, struct dirent, |
|
12 |
ssize_t */ |
|
13 |
#include <dirent.h> /* opendir(), readdir(), closedir() */ |
|
14 |
#include <unistd.h> /* readlink(), fork(), execl(), |
|
15 |
_exit */ |
|
16 |
#include <string.h> /* memcmp() */ |
|
17 |
#include <iso646.h> /* and */ |
|
18 |
#include <stdbool.h> /* bool, false, true */ |
|
19 |
#include <errno.h> /* errno */ |
|
20 |
#include <sys/wait.h> /* waitpid(), WIFEXITED(), |
|
21 |
WEXITSTATUS() */ |
|
22 |
#include <fcntl.h> /* open(), O_RDONLY */ |
|
23 |
||
24 |
sig_atomic_t interrupted_by_signal = 0; |
|
25 |
||
26 |
static void termination_handler(__attribute__((unused))int signum){ |
|
27 |
interrupted_by_signal = 1; |
|
28 |
}
|
|
29 |
||
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
30 |
static bool usplash_write(const char *cmd, const char *arg){ |
31 |
/* |
|
32 |
* usplash_write("TIMEOUT", "15"); -> "TIMEOUT 15\0"
|
|
33 |
* usplash_write("PULSATE", NULL); -> "PULSATE\0"
|
|
34 |
* SEE ALSO
|
|
35 |
* usplash_write(8)
|
|
36 |
*/
|
|
37 |
int ret; |
|
38 |
int fifo_fd; |
|
39 |
do{ |
|
40 |
fifo_fd = open("/dev/.initramfs/usplash_fifo", O_WRONLY); |
|
41 |
if(fifo_fd == -1 and (errno != EINTR or interrupted_by_signal)){ |
|
42 |
return false; |
|
43 |
} |
|
44 |
}while(fifo_fd == -1); |
|
45 |
|
|
46 |
const char *cmd_line; |
|
47 |
char *cmd_line_alloc = NULL; |
|
48 |
if(arg == NULL){ |
|
49 |
cmd_line = cmd; |
|
50 |
ret = (int)strlen(cmd); |
|
51 |
}else{ |
|
52 |
do{ |
|
53 |
ret = asprintf(&cmd_line_alloc, "%s %s", cmd, arg); |
|
54 |
if(ret == -1 and (errno != EINTR or interrupted_by_signal)){ |
|
55 |
int e = errno; |
|
56 |
close(fifo_fd); |
|
57 |
errno = e; |
|
58 |
return false; |
|
59 |
} |
|
60 |
}while(ret == -1); |
|
61 |
cmd_line = cmd_line_alloc; |
|
62 |
} |
|
63 |
|
|
64 |
size_t cmd_line_len = (size_t)ret + 1; |
|
65 |
size_t written = 0; |
|
66 |
while(not interrupted_by_signal and written < cmd_line_len){ |
|
67 |
ret = write(fifo_fd, cmd_line + written, |
|
68 |
cmd_line_len - written); |
|
69 |
if(ret == -1){ |
|
70 |
if(errno != EINTR or interrupted_by_signal){ |
|
71 |
int e = errno; |
|
72 |
close(fifo_fd); |
|
73 |
free(cmd_line_alloc); |
|
74 |
errno = e; |
|
75 |
return false; |
|
76 |
} else { |
|
77 |
continue; |
|
78 |
} |
|
79 |
} |
|
80 |
written += (size_t)ret; |
|
81 |
} |
|
82 |
free(cmd_line_alloc); |
|
83 |
do{ |
|
84 |
ret = close(fifo_fd); |
|
85 |
if(ret == -1 and (errno != EINTR or interrupted_by_signal)){ |
|
86 |
return false; |
|
87 |
} |
|
88 |
}while(ret == -1); |
|
89 |
if(interrupted_by_signal){ |
|
90 |
return false; |
|
91 |
} |
|
92 |
return true; |
|
93 |
}
|
|
94 |
||
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
95 |
int main(__attribute__((unused))int argc, |
96 |
__attribute__((unused))char **argv){ |
|
97 |
int ret = 0; |
|
98 |
ssize_t sret; |
|
99 |
bool an_error_occured = false; |
|
100 |
|
|
101 |
/* Create prompt string */ |
|
102 |
char *prompt = NULL; |
|
103 |
{ |
|
104 |
const char *const cryptsource = getenv("cryptsource"); |
|
105 |
const char *const crypttarget = getenv("crypttarget"); |
|
106 |
const char *const prompt_start = "Enter passphrase to unlock the disk"; |
|
107 |
|
|
108 |
if(cryptsource == NULL){ |
|
109 |
if(crypttarget == NULL){ |
|
110 |
ret = asprintf(&prompt, "%s: ", prompt_start); |
|
111 |
} else { |
|
112 |
ret = asprintf(&prompt, "%s (%s): ", prompt_start, |
|
113 |
crypttarget); |
|
114 |
} |
|
115 |
} else { |
|
116 |
if(crypttarget == NULL){ |
|
117 |
ret = asprintf(&prompt, "%s %s: ", prompt_start, cryptsource); |
|
118 |
} else { |
|
119 |
ret = asprintf(&prompt, "%s %s (%s): ", prompt_start, |
|
120 |
cryptsource, crypttarget); |
|
121 |
} |
|
122 |
} |
|
123 |
if(ret == -1){ |
|
124 |
return EXIT_FAILURE; |
|
125 |
} |
|
126 |
} |
|
127 |
|
|
128 |
/* Find usplash process */ |
|
129 |
pid_t usplash_pid = 0; |
|
130 |
char *cmdline = NULL; |
|
131 |
size_t cmdline_len = 0; |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
132 |
const char usplash_name[] = "/sbin/usplash"; |
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
133 |
{ |
134 |
DIR *proc_dir = opendir("/proc"); |
|
135 |
if(proc_dir == NULL){ |
|
136 |
free(prompt); |
|
137 |
perror("opendir"); |
|
138 |
return EXIT_FAILURE; |
|
139 |
} |
|
140 |
for(struct dirent *proc_ent = readdir(proc_dir); |
|
141 |
proc_ent != NULL; |
|
142 |
proc_ent = readdir(proc_dir)){ |
|
143 |
pid_t pid = (pid_t) strtoul(proc_ent->d_name, NULL, 10); |
|
144 |
if(pid == 0){ |
|
145 |
/* Not a process */ |
|
146 |
continue; |
|
147 |
} |
|
148 |
/* Find the executable name by doing readlink() on the |
|
149 |
/proc/<pid>/exe link */
|
|
150 |
char exe_target[sizeof(usplash_name)]; |
|
151 |
{ |
|
152 |
char *exe_link; |
|
153 |
ret = asprintf(&exe_link, "/proc/%s/exe", proc_ent->d_name); |
|
154 |
if(ret == -1){ |
|
155 |
perror("asprintf"); |
|
156 |
free(prompt); |
|
157 |
closedir(proc_dir); |
|
158 |
return EXIT_FAILURE; |
|
159 |
} |
|
160 |
sret = readlink(exe_link, exe_target, sizeof(exe_target)); |
|
161 |
free(exe_link); |
|
162 |
} |
|
163 |
if((sret == ((ssize_t)sizeof(exe_target)-1)) |
|
164 |
and (memcmp(usplash_name, exe_target, |
|
165 |
sizeof(exe_target)-1) == 0)){ |
|
166 |
usplash_pid = pid; |
|
167 |
/* Read and save the command line of usplash in "cmdline" */ |
|
168 |
{ |
|
169 |
/* Open /proc/<pid>/cmdline */ |
|
170 |
int cl_fd; |
|
171 |
{ |
|
172 |
char *cmdline_filename; |
|
173 |
ret = asprintf(&cmdline_filename, "/proc/%s/cmdline", |
|
174 |
proc_ent->d_name); |
|
175 |
if(ret == -1){ |
|
176 |
perror("asprintf"); |
|
177 |
free(prompt); |
|
178 |
closedir(proc_dir); |
|
179 |
return EXIT_FAILURE; |
|
180 |
} |
|
181 |
cl_fd = open(cmdline_filename, O_RDONLY); |
|
182 |
if(cl_fd == -1){ |
|
183 |
perror("open"); |
|
184 |
free(cmdline_filename); |
|
185 |
free(prompt); |
|
186 |
closedir(proc_dir); |
|
187 |
return EXIT_FAILURE; |
|
188 |
} |
|
189 |
free(cmdline_filename); |
|
190 |
} |
|
191 |
size_t cmdline_allocated = 0; |
|
192 |
char *tmp; |
|
193 |
const size_t blocksize = 1024; |
|
194 |
do{ |
|
195 |
if(cmdline_len + blocksize > cmdline_allocated){ |
|
196 |
tmp = realloc(cmdline, cmdline_allocated + blocksize); |
|
197 |
if(tmp == NULL){ |
|
198 |
perror("realloc"); |
|
199 |
free(cmdline); |
|
200 |
free(prompt); |
|
201 |
closedir(proc_dir); |
|
202 |
return EXIT_FAILURE; |
|
203 |
} |
|
204 |
cmdline = tmp; |
|
205 |
cmdline_allocated += blocksize; |
|
206 |
} |
|
207 |
sret = read(cl_fd, cmdline + cmdline_len, |
|
208 |
cmdline_allocated - cmdline_len); |
|
209 |
if(sret == -1){ |
|
210 |
perror("read"); |
|
211 |
free(cmdline); |
|
212 |
free(prompt); |
|
213 |
closedir(proc_dir); |
|
214 |
return EXIT_FAILURE; |
|
215 |
} |
|
216 |
cmdline_len += (size_t)sret; |
|
217 |
} while(sret != 0); |
|
218 |
close(cl_fd); |
|
219 |
} |
|
220 |
break; |
|
221 |
} |
|
222 |
} |
|
223 |
closedir(proc_dir); |
|
224 |
} |
|
225 |
if(usplash_pid == 0){ |
|
226 |
free(prompt); |
|
227 |
return EXIT_FAILURE; |
|
228 |
} |
|
229 |
|
|
230 |
/* Set up the signal handler */ |
|
231 |
{ |
|
232 |
struct sigaction old_action, |
|
233 |
new_action = { .sa_handler = termination_handler, |
|
234 |
.sa_flags = 0 }; |
|
235 |
sigemptyset(&new_action.sa_mask); |
|
236 |
sigaddset(&new_action.sa_mask, SIGINT); |
|
237 |
sigaddset(&new_action.sa_mask, SIGHUP); |
|
238 |
sigaddset(&new_action.sa_mask, SIGTERM); |
|
239 |
ret = sigaction(SIGINT, NULL, &old_action); |
|
240 |
if(ret == -1){ |
|
241 |
perror("sigaction"); |
|
242 |
free(prompt); |
|
243 |
return EXIT_FAILURE; |
|
244 |
} |
|
245 |
if (old_action.sa_handler != SIG_IGN){ |
|
246 |
ret = sigaction(SIGINT, &new_action, NULL); |
|
247 |
if(ret == -1){ |
|
248 |
perror("sigaction"); |
|
249 |
free(prompt); |
|
250 |
return EXIT_FAILURE; |
|
251 |
} |
|
252 |
} |
|
253 |
ret = sigaction(SIGHUP, NULL, &old_action); |
|
254 |
if(ret == -1){ |
|
255 |
perror("sigaction"); |
|
256 |
free(prompt); |
|
257 |
return EXIT_FAILURE; |
|
258 |
} |
|
259 |
if (old_action.sa_handler != SIG_IGN){ |
|
260 |
ret = sigaction(SIGHUP, &new_action, NULL); |
|
261 |
if(ret == -1){ |
|
262 |
perror("sigaction"); |
|
263 |
free(prompt); |
|
264 |
return EXIT_FAILURE; |
|
265 |
} |
|
266 |
} |
|
267 |
ret = sigaction(SIGTERM, NULL, &old_action); |
|
268 |
if(ret == -1){ |
|
269 |
perror("sigaction"); |
|
270 |
free(prompt); |
|
271 |
return EXIT_FAILURE; |
|
272 |
} |
|
273 |
if (old_action.sa_handler != SIG_IGN){ |
|
274 |
ret = sigaction(SIGTERM, &new_action, NULL); |
|
275 |
if(ret == -1){ |
|
276 |
perror("sigaction"); |
|
277 |
free(prompt); |
|
278 |
return EXIT_FAILURE; |
|
279 |
} |
|
280 |
} |
|
281 |
} |
|
282 |
|
|
283 |
/* Write command to FIFO */ |
|
284 |
if(not interrupted_by_signal){ |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
285 |
if(not usplash_write("TIMEOUT", "0") |
286 |
and (errno != EINTR)){ |
|
287 |
perror("usplash_write"); |
|
288 |
an_error_occured = true; |
|
289 |
} |
|
290 |
} |
|
291 |
if(not interrupted_by_signal and not an_error_occured){ |
|
292 |
if(not usplash_write("INPUTQUIET", prompt) |
|
293 |
and (errno != EINTR)){ |
|
294 |
perror("usplash_write"); |
|
295 |
an_error_occured = true; |
|
296 |
} |
|
297 |
} |
|
298 |
free(prompt); |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
299 |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
300 |
/* This is not really a loop; while() is used to be able to "break" |
301 |
out of it; those breaks are marked "Big" */
|
|
302 |
while(not interrupted_by_signal and not an_error_occured){ |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
303 |
char *buf = NULL; |
304 |
size_t buf_len = 0; |
|
305 |
|
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
306 |
/* Open FIFO */ |
307 |
int fifo_fd; |
|
308 |
do{ |
|
309 |
fifo_fd = open("/dev/.initramfs/usplash_outfifo", O_RDONLY); |
|
310 |
if(fifo_fd == -1){ |
|
311 |
if(errno != EINTR){ |
|
312 |
perror("open"); |
|
313 |
an_error_occured = true; |
|
314 |
break; |
|
315 |
} |
|
316 |
if(interrupted_by_signal){ |
|
317 |
break; |
|
318 |
} |
|
319 |
} |
|
320 |
}while(fifo_fd == -1); |
|
321 |
if(interrupted_by_signal or an_error_occured){ |
|
322 |
break; /* Big */ |
|
323 |
} |
|
324 |
|
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
325 |
/* Read from FIFO */ |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
326 |
size_t buf_allocated = 0; |
327 |
const size_t blocksize = 1024; |
|
328 |
do{ |
|
329 |
if(buf_len + blocksize > buf_allocated){ |
|
330 |
char *tmp = realloc(buf, buf_allocated + blocksize); |
|
331 |
if(tmp == NULL){ |
|
332 |
perror("realloc"); |
|
333 |
an_error_occured = true; |
|
334 |
break; |
|
335 |
} |
|
336 |
buf = tmp; |
|
337 |
buf_allocated += blocksize; |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
338 |
} |
339 |
do{ |
|
340 |
sret = read(fifo_fd, buf + buf_len, buf_allocated - buf_len); |
|
341 |
if(sret == -1){ |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
342 |
if(errno != EINTR){ |
343 |
perror("read"); |
|
344 |
an_error_occured = true; |
|
345 |
break; |
|
346 |
} |
|
347 |
if(interrupted_by_signal){ |
|
348 |
break; |
|
349 |
} |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
350 |
} |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
351 |
}while(sret == -1); |
352 |
if(interrupted_by_signal or an_error_occured){ |
|
353 |
break; |
|
354 |
} |
|
355 |
|
|
356 |
buf_len += (size_t)sret; |
|
357 |
}while(sret != 0); |
|
358 |
close(fifo_fd); |
|
359 |
if(interrupted_by_signal or an_error_occured){ |
|
360 |
break; /* Big */ |
|
361 |
} |
|
362 |
|
|
363 |
if(not usplash_write("TIMEOUT", "15") |
|
364 |
and (errno != EINTR)){ |
|
365 |
perror("usplash_write"); |
|
366 |
an_error_occured = true; |
|
367 |
} |
|
368 |
if(interrupted_by_signal or an_error_occured){ |
|
369 |
break; /* Big */ |
|
370 |
} |
|
371 |
|
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
372 |
/* Print password to stdout */ |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
373 |
size_t written = 0; |
374 |
do{ |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
375 |
do{ |
376 |
sret = write(STDOUT_FILENO, buf + written, buf_len - written); |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
377 |
if(sret == -1){ |
378 |
if(errno != EINTR){ |
|
379 |
perror("write"); |
|
380 |
an_error_occured = true; |
|
381 |
break; |
|
382 |
} |
|
383 |
if(interrupted_by_signal){ |
|
384 |
break; |
|
385 |
} |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
386 |
} |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
387 |
}while(sret == -1); |
388 |
if(interrupted_by_signal or an_error_occured){ |
|
389 |
break; |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
390 |
} |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
391 |
|
392 |
written += (size_t)sret; |
|
393 |
}while(written < buf_len); |
|
394 |
if(not interrupted_by_signal and not an_error_occured){ |
|
395 |
return EXIT_SUCCESS; |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
396 |
} |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
397 |
break; /* Big */ |
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
398 |
} |
399 |
|
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
400 |
/* If we got here, an error or interrupt must have happened */ |
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
401 |
|
402 |
int cmdline_argc = 0; |
|
403 |
char **cmdline_argv = malloc(sizeof(char *)); |
|
404 |
/* Create argv and argc for new usplash*/ |
|
405 |
{ |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
406 |
size_t position = 0; |
407 |
while(position < cmdline_len){ |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
408 |
char **tmp = realloc(cmdline_argv, |
409 |
(sizeof(char *) * (size_t)(cmdline_argc + 2))); |
|
410 |
if(tmp == NULL){ |
|
411 |
perror("realloc"); |
|
412 |
free(cmdline_argv); |
|
413 |
return EXIT_FAILURE; |
|
414 |
} |
|
415 |
cmdline_argv = tmp; |
|
416 |
cmdline_argv[cmdline_argc] = cmdline + position; |
|
417 |
cmdline_argc++; |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
418 |
position += strlen(cmdline + position) + 1; |
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
419 |
} |
420 |
cmdline_argv[cmdline_argc] = NULL; |
|
421 |
} |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
422 |
/* Kill old usplash */ |
423 |
kill(usplash_pid, SIGTERM); |
|
424 |
sleep(2); |
|
425 |
while(kill(usplash_pid, 0) == 0){ |
|
426 |
kill(usplash_pid, SIGKILL); |
|
427 |
sleep(1); |
|
428 |
} |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
429 |
pid_t new_usplash_pid = fork(); |
430 |
if(new_usplash_pid == 0){ |
|
431 |
/* Child; will become new usplash process */ |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
432 |
|
433 |
/* Make the effective user ID (root) the only user ID instead of |
|
434 |
the real user ID (mandos) */
|
|
435 |
ret = setuid(geteuid()); |
|
436 |
if (ret == -1){ |
|
437 |
perror("setuid"); |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
438 |
} |
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
439 |
|
440 |
setsid(); |
|
441 |
ret = chdir("/"); |
|
442 |
/* if(fork() != 0){ */
|
|
443 |
/* _exit(EXIT_SUCCESS); */
|
|
444 |
/* } */
|
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
445 |
ret = dup2(STDERR_FILENO, STDOUT_FILENO); /* replace our stdout */ |
446 |
if(ret == -1){ |
|
447 |
perror("dup2"); |
|
448 |
_exit(EXIT_FAILURE); |
|
449 |
} |
|
210
by Teddy Hogeborn
* debian/mandos-client.postinst: Change home directory to |
450 |
|
451 |
execv(usplash_name, cmdline_argv); |
|
452 |
} |
|
453 |
sleep(2); |
|
454 |
if(not usplash_write("PULSATE", NULL) |
|
455 |
and (errno != EINTR)){ |
|
456 |
perror("usplash_write"); |
|
208
by Teddy Hogeborn
* Makefile (PLUGINS): Added "plugins.d/usplash". |
457 |
} |
458 |
|
|
459 |
return EXIT_FAILURE; |
|
460 |
}
|