/mandos/release : revision 169

96

97

static plugin *plugin_list = NULL;

98

99

/* Gets a existing plugin based on name,

99

/* Gets an existing plugin based on name,

100

or if none is found, creates a new one */

101

static plugin *getplugin(char *name){

102

/* Check for exiting plugin with that name */

118

return NULL;

119

}

120

}

121

122

*new_plugin = (plugin) { .name = copy_name,

123

.argc = 1,

124

.disabled = false,

187

size_t namelen = (size_t)(strchrnul(def, '=') - def);

188

/* Search for this environment variable */

189

for(char **e = p->environ; *e != NULL; e++){

190

if(strncmp(*e, def, namelen+1) == 0){

190

if(strncmp(*e, def, namelen + 1) == 0){

191

/* It already exists */

192

if(replace){

193

char *new = realloc(*e, strlen(def));

193

char *new = realloc(*e, strlen(def) + 1);

194

if(new == NULL){

195

return false;

196

}

238

/* No child processes */

239

break;

240

}

241

242

/* A child exited, find it in process_list */

243

while(proc != NULL and proc->pid != pid){

244

proc = proc->next;

255

/* Prints out a password to stdout */

256

bool print_out_password(const char *buffer, size_t length){

257

ssize_t ret;

258

if(length>0 and buffer[length-1] == '\n'){

259

length--;

260

}

261

258

for(size_t written = 0; written < length; written += (size_t)ret){

262

259

ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,

263

260

length - written));

344

341

{ .name = "global-options", .key = 'g',

345

342

.arg = "OPTION[,OPTION[,...]]",

346

343

.doc = "Options passed to all plugins" },

347

{ .name = "global-env", .key = 'e',

344

{ .name = "global-env", .key = 'G',

348

345

.arg = "VAR=value",

349

346

.doc = "Environment variable passed to all plugins" },

350

347

{ .name = "options-for", .key = 'o',

351

348

.arg = "PLUGIN:OPTION[,OPTION[,...]]",

352

349

.doc = "Options passed only to specified plugin" },

353

{ .name = "env-for", .key = 'f',

350

{ .name = "env-for", .key = 'E',

354

351

.arg = "PLUGIN:ENV=value",

355

352

.doc = "Environment variable passed to specified plugin" },

356

353

{ .name = "disable", .key = 'd',

357

354

.arg = "PLUGIN",

358

355

.doc = "Disable a specific plugin", .group = 1 },

356

{ .name = "enable", .key = 'e',

357

.arg = "PLUGIN",

358

.doc = "Enable a specific plugin", .group = 1 },

359

{ .name = "plugin-dir", .key = 128,

360

.arg = "DIRECTORY",

361

.doc = "Specify a different plugin directory", .group = 2 },

375

376

error_t parse_opt (int key, char *arg, __attribute__((unused))

377

struct argp_state *state) {

378

/* Get the INPUT argument from `argp_parse', which we know is a

379

pointer to our plugin list pointer. */

380

378

switch (key) {

381

379

case 'g': /* --global-options */

382

380

if (arg != NULL){

392

390

}

393

391

}

394

392

break;

395

case 'e': /* --global-env */

393

case 'G': /* --global-env */

396

394

if(arg == NULL){

397

395

break;

398

396

}

409

407

case 'o': /* --options-for */

410

408

if (arg != NULL){

411

409

char *p_name = strsep(&arg, ":");

412

if(p_name[0] == '\0'){

410

if(p_name[0] == '\0' or arg == NULL){

413

411

break;

414

412

}

415

413

char *opt = strsep(&arg, ":");

416

if(opt[0] == '\0'){

414

if(opt[0] == '\0' or opt == NULL){

417

415

break;

418

416

}

419

if(opt != NULL){

420

char *p;

421

while((p = strsep(&opt, ",")) != NULL){

422

if(p[0] == '\0'){

423

continue;

424

}

425

if(not add_argument(getplugin(p_name), p)){

426

perror("add_argument");

427

return ARGP_ERR_UNKNOWN;

428

}

417

char *p;

418

while((p = strsep(&opt, ",")) != NULL){

419

if(p[0] == '\0'){

420

continue;

421

}

422

if(not add_argument(getplugin(p_name), p)){

423

perror("add_argument");

424

return ARGP_ERR_UNKNOWN;

429

425

}

430

426

}

431

427

}

432

428

break;

433

case 'f': /* --env-for */

429

case 'E': /* --env-for */

434

430

if(arg == NULL){

435

431

break;

436

432

}

458

454

p->disabled = true;

459

455

}

460

456

break;

457

case 'e': /* --enable */

458

if (arg != NULL){

459

plugin *p = getplugin(arg);

460

if(p == NULL){

461

return ARGP_ERR_UNKNOWN;

462

}

463

p->disabled = false;

464

}

465

break;

461

466

case 128: /* --plugin-dir */

462

467

plugindir = strdup(arg);

463

468

if(plugindir == NULL){

465

470

}

466

471

break;

467

472

case 129: /* --config-file */

468

argfile = strdup(arg);

469

if(argfile == NULL){

470

perror("strdup");

471

}

472

break;

473

/* This is already done by parse_opt_config_file() */

474

break;

473

475

case 130: /* --userid */

474

476

uid = (uid_t)strtol(arg, NULL, 10);

475

477

break;

490

492

return 0;

491

493

}

492

494

493

struct argp argp = { .options = options, .parser = parse_opt,

495

/* This option parser is the same as parse_opt() above, except it

496

ignores everything but the --config-file option. */

497

error_t parse_opt_config_file (int key, char *arg,

498

__attribute__((unused))

499

struct argp_state *state) {

500

switch (key) {

501

case 'g': /* --global-options */

502

case 'G': /* --global-env */

503

case 'o': /* --options-for */

504

case 'E': /* --env-for */

505

case 'd': /* --disable */

506

case 'e': /* --enable */

507

case 128: /* --plugin-dir */

508

break;

509

case 129: /* --config-file */

510

argfile = strdup(arg);

511

if(argfile == NULL){

512

perror("strdup");

513

}

514

break;

515

case 130: /* --userid */

516

case 131: /* --groupid */

517

case 132: /* --debug */

518

case ARGP_KEY_ARG:

519

case ARGP_KEY_END:

520

break;

521

default:

522

return ARGP_ERR_UNKNOWN;

523

}

524

return 0;

525

}

526

527

struct argp argp = { .options = options,

528

.parser = parse_opt_config_file,

494

529

.args_doc = "",

495

530

.doc = "Mandos plugin runner -- Run plugins" };

496

531

532

/* Parse using the parse_opt_config_file in order to get the custom

533

config file location, if any. */

534

ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);

535

if (ret == ARGP_ERR_UNKNOWN){

536

fprintf(stderr, "Unknown error while parsing arguments\n");

537

exitstatus = EXIT_FAILURE;

538

goto fallback;

539

}

540

541

/* Reset to the normal argument parser */

542

argp.parser = parse_opt;

543

497

544

/* Open the configfile if available */

498

545

if (argfile == NULL){

499

546

conffp = fopen(AFILE, "r");

695

742

}

696

743

697

744

char *filename;

698

ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);

745

if(plugindir == NULL){

746

ret = asprintf(&filename, PDIR "/%s", dirst->d_name);

747

} else {

748

ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);

749

}

699

750

if(ret < 0){

700

751

perror("asprintf");

701

752

continue;

991

1042

bool bret;

992

1043

fprintf(stderr, "Going to fallback mode using getpass(3)\n");

993

1044

char *passwordbuffer = getpass("Password: ");

994

bret = print_out_password(passwordbuffer, strlen(passwordbuffer));

1045

size_t len = strlen(passwordbuffer);

1046

/* Strip trailing newline */

1047

if(len > 0 and passwordbuffer[len-1] == '\n'){

1048

passwordbuffer[len-1] = '\0'; /* not strictly necessary */

1049

len--;

1050

}

1051

bret = print_out_password(passwordbuffer, len);

995

1052

if(not bret){

996

1053

perror("print_out_password");

997

1054

exitstatus = EXIT_FAILURE;