(root)/mandos/release
» Revision
237.8.9
(compared to revision 237.7.48)
: plugins.d/password-prompt.c
To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugins.d/password-prompt.c
- browse files at revision 237.8.9
- compare with another revision
- download diff
- download tarball
- view history from revision 237.8.9
- Committer: teddy at bsnet
- Date: 2011-02-15 19:53:46 UTC
- mto: (237.7.13 mandos)
- mto: This revision was merged to the branch mainline in revision 282.
- Revision ID: teddy@fukt.bsnet.se-20110215195346-6eps2j007o8xcr0e
* mandos-ctl: Use print function.
added
removed
plugins.d/password-prompt.c
24
24
25
25
#define _GNU_SOURCE /* getline(), asprintf() */
26
26
27
#include <termios.h> /* struct termios, tcsetattr(),
27
#include <termios.h> /* struct termios, tcsetattr(),
28
28
TCSAFLUSH, tcgetattr(), ECHO */
29
29
#include <unistd.h> /* struct termios, tcsetattr(),
30
30
STDIN_FILENO, TCSAFLUSH,
35
35
SIGQUIT, SIGHUP, SIGTERM,
36
36
raise() */
37
37
#include <stddef.h> /* NULL, size_t, ssize_t */
38
#include <sys/types.h> /* ssize_t, struct dirent, pid_t,
39
ssize_t, open() */
38
#include <sys/types.h> /* ssize_t, struct dirent, pid_t, ssize_t */
40
39
#include <stdlib.h> /* EXIT_SUCCESS, EXIT_FAILURE,
41
40
getenv(), free() */
42
41
#include <dirent.h> /* scandir(), alphasort() */
43
42
#include <stdio.h> /* fprintf(), stderr, getline(),
44
stdin, feof(), fputc(), vfprintf(),
45
vasprintf() */
43
stdin, feof(), fputc()
44
*/
46
45
#include <errno.h> /* errno, EBADF, ENOTTY, EINVAL,
47
46
EFAULT, EFBIG, EIO, ENOSPC, EINTR
48
47
*/
50
49
#include <iso646.h> /* or, not */
51
50
#include <stdbool.h> /* bool, false, true */
52
51
#include <inttypes.h> /* strtoumax() */
53
#include <sys/stat.h> /* struct stat, lstat(), open() */
54
#include <string.h> /* strlen, rindex, memcmp, strerror()
55
*/
52
#include <sys/stat.h> /* struct stat, lstat() */
53
#include <string.h> /* strlen, rindex, memcmp */
56
54
#include <argp.h> /* struct argp_option, struct
57
55
argp_state, struct argp,
58
56
argp_parse(), error_t,
60
58
ARGP_ERR_UNKNOWN */
61
59
#include <sysexits.h> /* EX_SOFTWARE, EX_OSERR,
62
60
EX_UNAVAILABLE, EX_IOERR, EX_OK */
63
#include <fcntl.h> /* open() */
64
#include <stdarg.h> /* va_list, va_start(), ... */
65
61
66
62
volatile sig_atomic_t quit_now = 0;
67
63
int signal_received;
69
65
const char *argp_program_version = "password-prompt " VERSION;
70
66
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
71
67
72
/* Needed for conflict resolution */
73
const char plymouth_name[] = "plymouthd";
68
/* Needed for conflic resolution */
69
const char plymouthd_path[] = "/sbin/plymouth";
74
70
75
/* Function to use when printing errors */
76
void error_plus(int status, int errnum, const char *formatstring,
77
...){
78
va_list ap;
79
char *text;
80
int ret;
81
82
va_start(ap, formatstring);
83
ret = vasprintf(&text, formatstring, ap);
84
if (ret == -1){
85
fprintf(stderr, "Mandos plugin %s: ",
86
program_invocation_short_name);
87
vfprintf(stderr, formatstring, ap);
88
fprintf(stderr, ": ");
89
fprintf(stderr, "%s\n", strerror(errnum));
90
error(status, errno, "vasprintf while printing error");
91
return;
92
}
93
fprintf(stderr, "Mandos plugin ");
94
error(status, errnum, "%s", text);
95
free(text);
96
}
97
71
98
72
static void termination_handler(int signum){
99
73
if(quit_now){
105
79
106
80
bool conflict_detection(void){
107
81
108
/* plymouth conflicts with password-prompt since both want to read
109
from the terminal. Password-prompt will exit if it detects
110
plymouth since plymouth performs the same functionality.
82
/* plymouth conflicts with password-promt since both want to control the
83
associated terminal. Password-prompt exit since plymouth perferms the same
84
functionallity.
111
85
*/
112
86
int is_plymouth(const struct dirent *proc_entry){
113
87
int ret;
114
int cl_fd;
115
88
{
116
89
uintmax_t maxvalue;
117
90
char *tmp;
123
96
return 0;
124
97
}
125
98
}
126
127
char *cmdline_filename;
128
ret = asprintf(&cmdline_filename, "/proc/%s/cmdline",
129
proc_entry->d_name);
99
char exe_target[sizeof(plymouthd_path)];
100
char *exe_link;
101
ret = asprintf(&exe_link, "/proc/%s/exe", proc_entry->d_name);
130
102
if(ret == -1){
131
103
error(0, errno, "asprintf");
132
104
return 0;
133
105
}
134
135
/* Open /proc/<pid>/cmdline */
136
cl_fd = open(cmdline_filename, O_RDONLY);
137
free(cmdline_filename);
138
if(cl_fd == -1){
106
107
struct stat exe_stat;
108
ret = lstat(exe_link, &exe_stat);
109
if(ret == -1){
110
free(exe_link);
139
111
if(errno != ENOENT){
140
error(0, errno, "open");
141
}
142
return 0;
143
}
144
145
char *cmdline = NULL;
146
{
147
size_t cmdline_len = 0;
148
size_t cmdline_allocated = 0;
149
char *tmp;
150
const size_t blocksize = 1024;
151
ssize_t sret;
152
do {
153
/* Allocate more space? */
154
if(cmdline_len + blocksize + 1 > cmdline_allocated){
155
tmp = realloc(cmdline, cmdline_allocated + blocksize + 1);
156
if(tmp == NULL){
157
error(0, errno, "realloc");
158
free(cmdline);
159
close(cl_fd);
160
return 0;
161
}
162
cmdline = tmp;
163
cmdline_allocated += blocksize;
164
}
165
166
/* Read data */
167
sret = read(cl_fd, cmdline + cmdline_len,
168
cmdline_allocated - cmdline_len);
169
if(sret == -1){
170
error(0, errno, "read");
171
free(cmdline);
172
close(cl_fd);
173
return 0;
174
}
175
cmdline_len += (size_t)sret;
176
} while(sret != 0);
177
ret = close(cl_fd);
178
if(ret == -1){
179
error(0, errno, "close");
180
free(cmdline);
181
return 0;
182
}
183
cmdline[cmdline_len] = '\0'; /* Make sure it is terminated */
184
}
185
/* we now have cmdline */
186
187
/* get basename */
188
char *cmdline_base = strrchr(cmdline, '/');
189
if(cmdline_base != NULL){
190
cmdline_base += 1; /* skip the slash */
191
} else {
192
cmdline_base = cmdline;
193
}
194
195
if(strcmp(cmdline_base, plymouth_name) != 0){
196
if(debug){
197
fprintf(stderr, "\"%s\" is not \"%s\"\n", cmdline_base,
198
plymouth_name);
199
}
200
free(cmdline);
201
return 0;
202
}
203
if(debug){
204
fprintf(stderr, "\"%s\" equals \"%s\"\n", cmdline_base,
205
plymouth_name);
206
}
207
free(cmdline);
112
error(0, errno, "lstat");
113
}
114
return 0;
115
}
116
117
if(not S_ISLNK(exe_stat.st_mode)
118
or exe_stat.st_uid != 0
119
or exe_stat.st_gid != 0){
120
free(exe_link);
121
return 0;
122
}
123
124
ssize_t sret = readlink(exe_link, exe_target, sizeof(exe_target));
125
free(exe_link);
126
if((sret != (ssize_t)sizeof(plymouthd_path)-1) or
127
(memcmp(plymouthd_path, exe_target,
128
sizeof(plymouthd_path)-1) != 0)){
129
return 0;
130
}
208
131
return 1;
209
132
}
210
211
struct dirent **direntries = NULL;
133
134
struct dirent **direntries;
212
135
int ret;
213
136
ret = scandir("/proc", &direntries, is_plymouth, alphasort);
214
137
if (ret == -1){
215
138
error(1, errno, "scandir");
216
139
}
217
free(direntries);
218
return ret > 0;
140
if (ret < 0){
141
return 1;
142
} else {
143
return 0;
144
}
219
145
}
220
146
221
147
303
229
304
230
if (conflict_detection()){
305
231
if(debug){
306
fprintf(stderr, "Stopping %s because of conflict\n", argv[0]);
232
fprintf(stderr, "Stopping %s because of conflict", argv[0]);
307
233
}
308
234
return EXIT_FAILURE;
309
235
}
511
437
break;
512
438
}
513
439
}
514
/* if(sret == 0), then the only sensible thing to do is to retry
515
to read from stdin */
440
/* if(sret == 0), then the only sensible thing to do is to retry to
441
read from stdin */
516
442
fputc('\n', stderr);
517
443
if(debug and not quit_now){
518
444
/* If quit_now is nonzero, we were interrupted by a signal, and
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0