1
#define _GNU_SOURCE /* asprintf() */
1
/* -*- coding: utf-8 -*- */
3
* Splashy - Read a password from splashy and output it
5
* Copyright © 2008,2009 Teddy Hogeborn
6
* Copyright © 2008,2009 Björn Påhlsson
8
* This program is free software: you can redistribute it and/or
9
* modify it under the terms of the GNU General Public License as
10
* published by the Free Software Foundation, either version 3 of the
11
* License, or (at your option) any later version.
13
* This program is distributed in the hope that it will be useful, but
14
* WITHOUT ANY WARRANTY; without even the implied warranty of
15
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16
* General Public License for more details.
18
* You should have received a copy of the GNU General Public License
19
* along with this program. If not, see
20
* <http://www.gnu.org/licenses/>.
22
* Contact the authors at <mandos@fukt.bsnet.se>.
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
2
26
#include <signal.h> /* sig_atomic_t, struct sigaction,
3
27
sigemptyset(), sigaddset(), SIGINT,
4
28
SIGHUP, SIGTERM, sigaction,
6
30
#include <stddef.h> /* NULL */
7
31
#include <stdlib.h> /* getenv() */
8
32
#include <stdio.h> /* asprintf(), perror() */
9
#include <stdlib.h> /* EXIT_FAILURE, free(), strtoul(),
33
#include <stdlib.h> /* EXIT_FAILURE, free(),
11
35
#include <sys/types.h> /* pid_t, DIR, struct dirent,
13
37
#include <dirent.h> /* opendir(), readdir(), closedir() */
38
#include <inttypes.h> /* intmax_t, strtoimax() */
14
39
#include <sys/stat.h> /* struct stat, lstat(), S_ISLNK */
15
40
#include <iso646.h> /* not, or, and */
16
41
#include <unistd.h> /* readlink(), fork(), execl(),
17
42
sleep(), dup2() STDERR_FILENO,
18
STDOUT_FILENO, _exit() */
43
STDOUT_FILENO, _exit(),
19
45
#include <string.h> /* memcmp() */
20
46
#include <errno.h> /* errno */
21
47
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
50
#include <sysexits.h> /* EX_OSERR, EX_OSFILE,
24
53
sig_atomic_t interrupted_by_signal = 0;
26
static void termination_handler(__attribute__((unused))int signum){
56
static void termination_handler(int signum){
57
if(interrupted_by_signal){
27
60
interrupted_by_signal = 1;
61
signal_received = signum;
30
64
int main(__attribute__((unused))int argc,
31
65
__attribute__((unused))char **argv){
69
pid_t splashy_pid = 0;
70
pid_t splashy_command_pid = 0;
71
int exitstatus = EXIT_FAILURE;
34
73
/* Create prompt string */
37
75
const char *const cryptsource = getenv("cryptsource");
38
76
const char *const crypttarget = getenv("crypttarget");
131
207
new_action = { .sa_handler = termination_handler,
133
209
sigemptyset(&new_action.sa_mask);
134
sigaddset(&new_action.sa_mask, SIGINT);
135
sigaddset(&new_action.sa_mask, SIGHUP);
136
sigaddset(&new_action.sa_mask, SIGTERM);
210
ret = sigaddset(&new_action.sa_mask, SIGINT);
213
exitstatus = EX_OSERR;
216
ret = sigaddset(&new_action.sa_mask, SIGHUP);
219
exitstatus = EX_OSERR;
222
ret = sigaddset(&new_action.sa_mask, SIGTERM);
225
exitstatus = EX_OSERR;
137
228
ret = sigaction(SIGINT, NULL, &old_action);
139
230
perror("sigaction");
231
exitstatus = EX_OSERR;
143
234
if(old_action.sa_handler != SIG_IGN){
144
235
ret = sigaction(SIGINT, &new_action, NULL);
146
237
perror("sigaction");
238
exitstatus = EX_OSERR;
151
242
ret = sigaction(SIGHUP, NULL, &old_action);
153
244
perror("sigaction");
245
exitstatus = EX_OSERR;
157
248
if(old_action.sa_handler != SIG_IGN){
158
249
ret = sigaction(SIGHUP, &new_action, NULL);
160
251
perror("sigaction");
252
exitstatus = EX_OSERR;
165
256
ret = sigaction(SIGTERM, NULL, &old_action);
167
258
perror("sigaction");
259
exitstatus = EX_OSERR;
171
262
if(old_action.sa_handler != SIG_IGN){
172
263
ret = sigaction(SIGTERM, &new_action, NULL);
174
265
perror("sigaction");
266
exitstatus = EX_OSERR;
272
if(interrupted_by_signal){
181
276
/* Fork off the splashy command to prompt for password */
182
pid_t splashy_command_pid = 0;
183
if(not interrupted_by_signal){
184
splashy_command_pid = fork();
185
if(splashy_command_pid == -1){
186
if(not interrupted_by_signal){
192
if(splashy_command_pid == 0){
277
splashy_command_pid = fork();
278
if(splashy_command_pid != 0 and interrupted_by_signal){
281
if(splashy_command_pid == -1){
283
exitstatus = EX_OSERR;
287
if(splashy_command_pid == 0){
288
if(not interrupted_by_signal){
193
289
const char splashy_command[] = "/sbin/splashy_update";
194
ret = execl(splashy_command, splashy_command, prompt,
196
if(not interrupted_by_signal){
290
execl(splashy_command, splashy_command, prompt, (char *)NULL);
301
if(interrupted_by_signal){
207
305
/* Wait for command to complete */
208
if(not interrupted_by_signal and splashy_command_pid != 0){
210
ret = waitpid(splashy_command_pid, &status, 0);
309
ret = waitpid(splashy_command_pid, &status, 0);
310
} while(ret == -1 and errno == EINTR
311
and not interrupted_by_signal);
312
if(interrupted_by_signal){
215
317
if(errno == ECHILD){
216
318
splashy_command_pid = 0;
219
321
/* The child process has exited */
220
322
splashy_command_pid = 0;
221
if(not interrupted_by_signal and WIFEXITED(status)
222
and WEXITSTATUS(status)==0){
323
if(WIFEXITED(status) and WEXITSTATUS(status) == 0){
223
324
return EXIT_SUCCESS;
227
kill(splashy_pid, SIGTERM);
228
if(interrupted_by_signal and splashy_command_pid != 0){
229
kill(splashy_command_pid, SIGTERM);
232
while(kill(splashy_pid, 0) == 0){
233
kill(splashy_pid, SIGKILL);
236
pid_t new_splashy_pid = fork();
237
if(new_splashy_pid == 0){
238
/* Child; will become new splashy process */
240
/* Make the effective user ID (root) the only user ID instead of
241
the real user ID (mandos) */
242
ret = setuid(geteuid());
249
/* if(fork() != 0){ */
250
/* _exit(EXIT_SUCCESS); */
252
ret = dup2(STDERR_FILENO, STDOUT_FILENO); /* replace our stdout */
258
execl("/sbin/splashy", "/sbin/splashy", "boot", (char *)NULL);
259
if(not interrupted_by_signal){
333
if(proc_dir != NULL){
334
TEMP_FAILURE_RETRY(closedir(proc_dir));
337
if(splashy_command_pid != 0){
338
TEMP_FAILURE_RETRY(kill(splashy_command_pid, SIGTERM));
340
TEMP_FAILURE_RETRY(kill(splashy_pid, SIGTERM));
342
while(TEMP_FAILURE_RETRY(kill(splashy_pid, 0)) == 0){
343
TEMP_FAILURE_RETRY(kill(splashy_pid, SIGKILL));
346
pid_t new_splashy_pid = (pid_t)TEMP_FAILURE_RETRY(fork());
347
if(new_splashy_pid == 0){
348
/* Child; will become new splashy process */
350
/* Make the effective user ID (root) the only user ID instead of
351
the real user ID (_mandos) */
352
ret = setuid(geteuid());
362
/* if(fork() != 0){ */
363
/* _exit(EXIT_SUCCESS); */
365
ret = dup2(STDERR_FILENO, STDOUT_FILENO); /* replace stdout */
371
execl("/sbin/splashy", "/sbin/splashy", "boot", (char *)NULL);
380
_exit(EX_UNAVAILABLE);
393
if(interrupted_by_signal){
394
struct sigaction signal_action;
395
sigemptyset(&signal_action.sa_mask);
396
signal_action.sa_handler = SIG_DFL;
397
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
398
&signal_action, NULL));
403
ret = raise(signal_received);
404
} while(ret != 0 and errno == EINTR);
409
TEMP_FAILURE_RETRY(pause());