97
95
static plugin *plugin_list = NULL;
99
/* Gets a existing plugin based on name,
97
/* Gets an existing plugin based on name,
100
98
or if none is found, creates a new one */
101
99
static plugin *getplugin(char *name){
102
100
/* Check for exiting plugin with that name */
187
185
size_t namelen = (size_t)(strchrnul(def, '=') - def);
188
186
/* Search for this environment variable */
189
187
for(char **e = p->environ; *e != NULL; e++){
190
if(strncmp(*e, def, namelen+1) == 0){
188
if(strncmp(*e, def, namelen + 1) == 0){
191
189
/* It already exists */
193
char *new = realloc(*e, strlen(def));
191
char *new = realloc(*e, strlen(def) + 1);
208
206
* Descriptor Flags".
209
207
* *Note File Descriptor Flags:(libc)Descriptor Flags.
211
static int set_cloexec_flag(int fd)
209
static int set_cloexec_flag(int fd){
213
210
int ret = fcntl(fd, F_GETFD, 0);
214
211
/* If reading the flags failed, return error indication now. */
223
220
/* Mark processes as completed when they exit, and save their exit
225
void handle_sigchld(__attribute__((unused)) int sig){
222
static void handle_sigchld(__attribute__((unused)) int sig){
227
224
plugin *proc = plugin_list;
255
252
/* Prints out a password to stdout */
256
bool print_out_password(const char *buffer, size_t length){
253
static bool print_out_password(const char *buffer, size_t length){
258
if(length>0 and buffer[length-1] == '\n'){
261
255
for(size_t written = 0; written < length; written += (size_t)ret){
262
256
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
263
257
length - written));
344
338
{ .name = "global-options", .key = 'g',
345
339
.arg = "OPTION[,OPTION[,...]]",
346
340
.doc = "Options passed to all plugins" },
347
{ .name = "global-env", .key = 'e',
341
{ .name = "global-env", .key = 'G',
348
342
.arg = "VAR=value",
349
343
.doc = "Environment variable passed to all plugins" },
350
344
{ .name = "options-for", .key = 'o',
351
345
.arg = "PLUGIN:OPTION[,OPTION[,...]]",
352
346
.doc = "Options passed only to specified plugin" },
353
{ .name = "env-for", .key = 'f',
347
{ .name = "env-for", .key = 'E',
354
348
.arg = "PLUGIN:ENV=value",
355
349
.doc = "Environment variable passed to specified plugin" },
356
350
{ .name = "disable", .key = 'd',
358
352
.doc = "Disable a specific plugin", .group = 1 },
353
{ .name = "enable", .key = 'e',
355
.doc = "Enable a specific plugin", .group = 1 },
359
356
{ .name = "plugin-dir", .key = 128,
360
357
.arg = "DIRECTORY",
361
358
.doc = "Specify a different plugin directory", .group = 2 },
376
373
error_t parse_opt (int key, char *arg, __attribute__((unused))
377
374
struct argp_state *state) {
378
/* Get the INPUT argument from `argp_parse', which we know is a
379
pointer to our plugin list pointer. */
381
376
case 'g': /* --global-options */
382
377
if (arg != NULL){
395
case 'e': /* --global-env */
390
case 'G': /* --global-env */
400
char *envdef = strdup(arg);
404
if(not add_environment(getplugin(NULL), envdef, true)){
405
perror("add_environment");
394
if(not add_environment(getplugin(NULL), arg, true)){
395
perror("add_environment");
409
398
case 'o': /* --options-for */
410
399
if (arg != NULL){
411
400
char *p_name = strsep(&arg, ":");
412
if(p_name[0] == '\0'){
401
if(p_name[0] == '\0' or arg == NULL){
415
404
char *opt = strsep(&arg, ":");
405
if(opt[0] == '\0' or opt == NULL){
421
while((p = strsep(&opt, ",")) != NULL){
425
if(not add_argument(getplugin(p_name), p)){
426
perror("add_argument");
427
return ARGP_ERR_UNKNOWN;
409
while((p = strsep(&opt, ",")) != NULL){
413
if(not add_argument(getplugin(p_name), p)){
414
perror("add_argument");
415
return ARGP_ERR_UNKNOWN;
433
case 'f': /* --env-for */
420
case 'E': /* --env-for */
439
426
if(envdef == NULL){
442
char *p_name = strndup(arg, (size_t) (envdef-arg));
447
if(not add_environment(getplugin(p_name), envdef, true)){
430
if(not add_environment(getplugin(arg), envdef+1, true)){
448
431
perror("add_environment");
458
441
p->disabled = true;
444
case 'e': /* --enable */
446
plugin *p = getplugin(arg);
448
return ARGP_ERR_UNKNOWN;
461
453
case 128: /* --plugin-dir */
462
455
plugindir = strdup(arg);
463
456
if(plugindir == NULL){
464
457
perror("strdup");
467
460
case 129: /* --config-file */
461
/* This is already done by parse_opt_config_file() */
463
case 130: /* --userid */
464
uid = (uid_t)strtol(arg, NULL, 10);
466
case 131: /* --groupid */
467
gid = (gid_t)strtol(arg, NULL, 10);
469
case 132: /* --debug */
473
/* Cryptsetup always passes an argument, which is an empty
474
string if "none" was specified in /etc/crypttab. So if
475
argument was empty, we ignore it silently. */
477
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
483
return ARGP_ERR_UNKNOWN;
488
/* This option parser is the same as parse_opt() above, except it
489
ignores everything but the --config-file option. */
490
error_t parse_opt_config_file (int key, char *arg,
491
__attribute__((unused))
492
struct argp_state *state) {
494
case 'g': /* --global-options */
495
case 'G': /* --global-env */
496
case 'o': /* --options-for */
497
case 'E': /* --env-for */
498
case 'd': /* --disable */
499
case 'e': /* --enable */
500
case 128: /* --plugin-dir */
502
case 129: /* --config-file */
468
504
argfile = strdup(arg);
469
505
if(argfile == NULL){
470
506
perror("strdup");
473
509
case 130: /* --userid */
474
uid = (uid_t)strtol(arg, NULL, 10);
476
510
case 131: /* --groupid */
477
gid = (gid_t)strtol(arg, NULL, 10);
479
511
case 132: /* --debug */
482
512
case ARGP_KEY_ARG:
483
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
485
513
case ARGP_KEY_END:
493
struct argp argp = { .options = options, .parser = parse_opt,
521
struct argp argp = { .options = options,
522
.parser = parse_opt_config_file,
495
524
.doc = "Mandos plugin runner -- Run plugins" };
526
/* Parse using the parse_opt_config_file in order to get the custom
527
config file location, if any. */
528
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
529
if (ret == ARGP_ERR_UNKNOWN){
530
fprintf(stderr, "Unknown error while parsing arguments\n");
531
exitstatus = EXIT_FAILURE;
535
/* Reset to the normal argument parser */
536
argp.parser = parse_opt;
497
538
/* Open the configfile if available */
498
539
if (argfile == NULL){
499
540
conffp = fopen(AFILE, "r");
698
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
739
if(plugindir == NULL){
740
ret = asprintf(&filename, PDIR "/%s", dirst->d_name);
742
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
700
745
perror("asprintf");
891
936
/* OK, now either a process completed, or something can be read
892
937
from one of them */
893
for(plugin *proc = plugin_list; proc != NULL; proc = proc->next){
938
for(plugin *proc = plugin_list; proc != NULL;){
894
939
/* Is this process completely done? */
895
940
if(proc->eof and proc->completed){
896
941
/* Only accept the plugin output if it exited cleanly */
923
968
exitstatus = EXIT_FAILURE;
927
972
/* We are done modifying process list, so unblock signal */
928
973
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
953
1002
/* This process has not completed. Does it have any output? */
954
1003
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
955
1004
/* This process had nothing to say at this time */
958
1008
/* Before reading, make the process' data buffer large enough */
992
1043
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
993
1044
char *passwordbuffer = getpass("Password: ");
994
bret = print_out_password(passwordbuffer, strlen(passwordbuffer));
1045
size_t len = strlen(passwordbuffer);
1046
/* Strip trailing newline */
1047
if(len > 0 and passwordbuffer[len-1] == '\n'){
1048
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1051
bret = print_out_password(passwordbuffer, len);
996
1053
perror("print_out_password");
997
1054
exitstatus = EXIT_FAILURE;
added
removed
plugin-runner.c
