28
27
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
29
28
EXIT_SUCCESS, realloc() */
30
29
#include <stdbool.h> /* bool, true, false */
31
#include <stdio.h> /* perror, fileno(), fprintf(),
32
stderr, STDOUT_FILENO */
30
#include <stdio.h> /* perror, popen(), fileno(),
31
fprintf(), stderr, STDOUT_FILENO */
33
32
#include <sys/types.h> /* DIR, opendir(), stat(), struct
34
33
stat, waitpid(), WIFEXITED(),
35
34
WEXITSTATUS(), wait(), pid_t,
62
61
#include <signal.h> /* struct sigaction, sigemptyset(),
63
62
sigaddset(), sigaction(),
64
63
sigprocmask(), SIG_BLOCK, SIGCHLD,
65
SIG_UNBLOCK, kill(), sig_atomic_t
64
SIG_UNBLOCK, kill() */
67
65
#include <errno.h> /* errno, EBADF */
68
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
70
67
#define BUFFER_SIZE 256
72
#define PDIR "/lib/mandos/plugins.d"
73
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
75
const char *argp_program_version = "plugin-runner " VERSION;
68
#define ARGFILE "/conf/conf.d/mandos/plugin-runner.conf"
70
const char *argp_program_version = "plugin-runner 1.0";
76
71
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
75
typedef struct process{
82
volatile bool completed;
78
87
typedef struct plugin{
79
88
char *name; /* can be NULL or any plugin name */
86
/* Variables used for running processes*/
93
volatile sig_atomic_t completed;
95
94
struct plugin *next;
98
static plugin *plugin_list = NULL;
100
/* Gets an existing plugin based on name,
101
or if none is found, creates a new one */
102
static plugin *getplugin(char *name){
103
/* Check for exiting plugin with that name */
104
for(plugin *p = plugin_list; p != NULL; p = p->next){
106
or (p->name and name and (strcmp(p->name, name) == 0))){
97
static plugin *getplugin(char *name, plugin **plugin_list){
98
for (plugin *p = *plugin_list; p != NULL; p = p->next){
100
or (p->name and name and (strcmp(p->name, name) == 0))){
110
104
/* Create a new plugin */
111
105
plugin *new_plugin = malloc(sizeof(plugin));
112
if(new_plugin == NULL){
106
if (new_plugin == NULL){
115
109
char *copy_name = NULL;
116
110
if(name != NULL){
117
111
copy_name = strdup(name);
118
112
if(copy_name == NULL){
124
*new_plugin = (plugin){ .name = copy_name,
127
.next = plugin_list };
117
*new_plugin = (plugin) { .name = copy_name,
121
.next = *plugin_list };
129
123
new_plugin->argv = malloc(sizeof(char *) * 2);
130
if(new_plugin->argv == NULL){
124
if (new_plugin->argv == NULL){
132
126
free(new_plugin);
135
129
new_plugin->argv[0] = copy_name;
136
130
new_plugin->argv[1] = NULL;
138
132
new_plugin->environ = malloc(sizeof(char *));
139
133
if(new_plugin->environ == NULL){
183
176
/* Add to a plugin's environment */
184
static bool add_environment(plugin *p, const char *def, bool replace){
177
static bool add_environment(plugin *p, const char *def){
188
/* namelen = length of name of environment variable */
189
size_t namelen = (size_t)(strchrnul(def, '=') - def);
190
/* Search for this environment variable */
191
for(char **e = p->environ; *e != NULL; e++){
192
if(strncmp(*e, def, namelen + 1) == 0){
193
/* It already exists */
195
char *new = realloc(*e, strlen(def) + 1);
205
181
return add_to_char_array(def, &(p->environ), &(p->envc));
209
186
* Based on the example in the GNU LibC manual chapter 13.13 "File
210
187
* Descriptor Flags".
211
188
* *Note File Descriptor Flags:(libc)Descriptor Flags.
213
static int set_cloexec_flag(int fd){
190
static int set_cloexec_flag(int fd)
214
192
int ret = fcntl(fd, F_GETFD, 0);
215
193
/* If reading the flags failed, return error indication now. */
271
/* Removes and free a plugin from the plugin list */
272
static void free_plugin(plugin *plugin_node){
274
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
277
free(plugin_node->argv);
278
for(char **env = plugin_node->environ; *env != NULL; env++){
281
free(plugin_node->environ);
282
free(plugin_node->buffer);
284
/* Removes the plugin from the singly-linked list */
285
if(plugin_node == plugin_list){
286
/* First one - simple */
287
plugin_list = plugin_list->next;
289
/* Second one or later */
290
for(plugin *p = plugin_list; p != NULL; p = p->next){
291
if(p->next == plugin_node){
292
p->next = plugin_node->next;
301
static void free_plugin_list(void){
302
while(plugin_list != NULL){
303
free_plugin(plugin_list);
250
static void free_plugin_list(plugin *plugin_list){
251
for(plugin *next; plugin_list != NULL; plugin_list = next){
252
next = plugin_list->next;
253
for(char **arg = plugin_list->argv; *arg != NULL; arg++){
256
free(plugin_list->argv);
257
for(char **env = plugin_list->environ; *env != NULL; env++){
260
free(plugin_list->environ);
307
265
int main(int argc, char *argv[]){
308
char *plugindir = NULL;
309
char *argfile = NULL;
266
const char *plugindir = "/lib/mandos/plugins.d";
267
const char *argfile = ARGFILE;
311
269
size_t d_name_len;
346
302
{ .name = "global-options", .key = 'g',
347
303
.arg = "OPTION[,OPTION[,...]]",
348
304
.doc = "Options passed to all plugins" },
349
{ .name = "global-env", .key = 'G',
305
{ .name = "global-envs", .key = 'e',
350
306
.arg = "VAR=value",
351
307
.doc = "Environment variable passed to all plugins" },
352
308
{ .name = "options-for", .key = 'o',
353
309
.arg = "PLUGIN:OPTION[,OPTION[,...]]",
354
310
.doc = "Options passed only to specified plugin" },
355
{ .name = "env-for", .key = 'E',
311
{ .name = "envs-for", .key = 'f',
356
312
.arg = "PLUGIN:ENV=value",
357
313
.doc = "Environment variable passed to specified plugin" },
358
314
{ .name = "disable", .key = 'd',
360
316
.doc = "Disable a specific plugin", .group = 1 },
361
{ .name = "enable", .key = 'e',
363
.doc = "Enable a specific plugin", .group = 1 },
364
317
{ .name = "plugin-dir", .key = 128,
365
318
.arg = "DIRECTORY",
366
319
.doc = "Specify a different plugin directory", .group = 2 },
367
{ .name = "config-file", .key = 129,
369
.doc = "Specify a different configuration file", .group = 2 },
370
{ .name = "userid", .key = 130,
371
.arg = "ID", .flags = 0,
372
.doc = "User ID the plugins will run as", .group = 3 },
373
{ .name = "groupid", .key = 131,
374
.arg = "ID", .flags = 0,
375
.doc = "Group ID the plugins will run as", .group = 3 },
376
{ .name = "debug", .key = 132,
377
.doc = "Debug mode", .group = 4 },
320
{ .name = "userid", .key = 129,
321
.arg = "ID", .flags = 0,
322
.doc = "User ID the plugins will run as", .group = 2 },
323
{ .name = "groupid", .key = 130,
324
.arg = "ID", .flags = 0,
325
.doc = "Group ID the plugins will run as", .group = 2 },
326
{ .name = "debug", .key = 131,
327
.doc = "Debug mode", .group = 3 },
381
error_t parse_opt(int key, char *arg, __attribute__((unused))
382
struct argp_state *state){
385
case 'g': /* --global-options */
388
while((plugin_option = strsep(&arg, ",")) != NULL){
389
if(plugin_option[0] == '\0'){
331
error_t parse_opt (int key, char *arg, struct argp_state *state) {
332
/* Get the INPUT argument from `argp_parse', which we know is a
333
pointer to our plugin list pointer. */
334
plugin **plugins = state->input;
339
while((p = strsep(&arg, ",")) != NULL){
392
if(not add_argument(getplugin(NULL), plugin_option)){
343
if(not add_argument(getplugin(NULL, plugins), p)){
393
344
perror("add_argument");
394
345
return ARGP_ERR_UNKNOWN;
399
case 'G': /* --global-env */
403
if(not add_environment(getplugin(NULL), arg, true)){
404
perror("add_environment");
355
char *envdef = strdup(arg);
359
if(not add_environment(getplugin(NULL, plugins), envdef)){
360
perror("add_environment");
407
case 'o': /* --options-for */
409
char *plugin_name = strsep(&arg, ":");
410
if(plugin_name[0] == '\0'){
414
while((plugin_option = strsep(&arg, ",")) != NULL){
415
if(not add_argument(getplugin(plugin_name), plugin_option)){
416
perror("add_argument");
417
return ARGP_ERR_UNKNOWN;
366
char *p_name = strsep(&arg, ":");
367
if(p_name[0] == '\0'){
370
char *opt = strsep(&arg, ":");
376
while((p = strsep(&opt, ",")) != NULL){
380
if(not add_argument(getplugin(p_name, plugins), p)){
381
perror("add_argument");
382
return ARGP_ERR_UNKNOWN;
422
case 'E': /* --env-for */
428
394
if(envdef == NULL){
432
if(not add_environment(getplugin(arg), envdef+1, true)){
397
char *p_name = strndup(arg, (size_t) (envdef-arg));
402
if(not add_environment(getplugin(p_name, plugins), envdef)){
433
403
perror("add_environment");
437
case 'd': /* --disable */
439
plugin *p = getplugin(arg);
409
plugin *p = getplugin(arg, plugins);
441
411
return ARGP_ERR_UNKNOWN;
443
413
p->disabled = true;
446
case 'e': /* --enable */
448
plugin *p = getplugin(arg);
450
return ARGP_ERR_UNKNOWN;
455
case 128: /* --plugin-dir */
457
plugindir = strdup(arg);
458
if(plugindir == NULL){
462
case 129: /* --config-file */
463
/* This is already done by parse_opt_config_file() */
465
case 130: /* --userid */
467
tmpmax = strtoimax(arg, &tmp, 10);
468
if(errno != 0 or tmp == arg or *tmp != '\0'
469
or tmpmax != (uid_t)tmpmax){
470
fprintf(stderr, "Bad user ID number: \"%s\", using %"
471
PRIdMAX "\n", arg, (intmax_t)uid);
476
case 131: /* --groupid */
478
tmpmax = strtoimax(arg, &tmp, 10);
479
if(errno != 0 or tmp == arg or *tmp != '\0'
480
or tmpmax != (gid_t)tmpmax){
481
fprintf(stderr, "Bad group ID number: \"%s\", using %"
482
PRIdMAX "\n", arg, (intmax_t)gid);
487
case 132: /* --debug */
420
uid = (uid_t)strtol(arg, NULL, 10);
423
gid = (gid_t)strtol(arg, NULL, 10);
491
* When adding more options before this line, remember to also add a
492
* "case" to the "parse_opt_config_file" function below.
495
/* Cryptsetup always passes an argument, which is an empty
496
string if "none" was specified in /etc/crypttab. So if
497
argument was empty, we ignore it silently. */
499
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
505
return ARGP_ERR_UNKNOWN;
510
/* This option parser is the same as parse_opt() above, except it
511
ignores everything but the --config-file option. */
512
error_t parse_opt_config_file(int key, char *arg,
513
__attribute__((unused))
514
struct argp_state *state){
516
case 'g': /* --global-options */
517
case 'G': /* --global-env */
518
case 'o': /* --options-for */
519
case 'E': /* --env-for */
520
case 'd': /* --disable */
521
case 'e': /* --enable */
522
case 128: /* --plugin-dir */
524
case 129: /* --config-file */
526
argfile = strdup(arg);
531
case 130: /* --userid */
532
case 131: /* --groupid */
533
case 132: /* --debug */
538
return ARGP_ERR_UNKNOWN;
543
struct argp argp = { .options = options,
544
.parser = parse_opt_config_file,
429
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
434
return ARGP_ERR_UNKNOWN;
439
plugin *plugin_list = NULL;
441
struct argp argp = { .options = options, .parser = parse_opt,
442
.args_doc = "[+PLUS_SEPARATED_OPTIONS]",
546
443
.doc = "Mandos plugin runner -- Run plugins" };
548
/* Parse using parse_opt_config_file() in order to get the custom
549
config file location, if any. */
550
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
551
if(ret == ARGP_ERR_UNKNOWN){
445
ret = argp_parse (&argp, argc, argv, 0, 0, &plugin_list);
446
if (ret == ARGP_ERR_UNKNOWN){
552
447
fprintf(stderr, "Unknown error while parsing arguments\n");
553
448
exitstatus = EXIT_FAILURE;
557
/* Reset to the normal argument parser */
558
argp.parser = parse_opt;
560
/* Open the configfile if available */
562
conffp = fopen(AFILE, "r");
564
conffp = fopen(argfile, "r");
452
conffp = fopen(argfile, "r");
566
453
if(conffp != NULL){
567
454
char *org_line = NULL;
568
455
char *p, *arg, *new_arg, *line;
570
458
const char whitespace_delims[] = " \r\t\f\v\n";
571
459
const char comment_delim[] = "#";
574
462
custom_argv = malloc(sizeof(char*) * 2);
575
463
if(custom_argv == NULL){
620
500
/* Check for harmful errors and go to fallback. Other errors might
621
501
not affect opening plugins */
622
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
502
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
624
504
exitstatus = EXIT_FAILURE;
628
/* If there was any arguments from configuration file,
629
pass them to parser as command arguments */
630
509
if(custom_argv != NULL){
631
ret = argp_parse(&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
633
if(ret == ARGP_ERR_UNKNOWN){
510
ret = argp_parse (&argp, custom_argc, custom_argv, 0, 0, &plugin_list);
511
if (ret == ARGP_ERR_UNKNOWN){
634
512
fprintf(stderr, "Unknown error while parsing arguments\n");
635
513
exitstatus = EXIT_FAILURE;
640
/* Parse actual command line arguments, to let them override the
642
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
643
if(ret == ARGP_ERR_UNKNOWN){
644
fprintf(stderr, "Unknown error while parsing arguments\n");
645
exitstatus = EXIT_FAILURE;
650
519
for(plugin *p = plugin_list; p != NULL; p=p->next){
651
520
fprintf(stderr, "Plugin: %s has %d arguments\n",
902
close(pipefd[1]); /* Close unused write end of pipe */
904
plugin *new_plugin = getplugin(dirst->d_name);
905
if(new_plugin == NULL){
907
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
765
close(pipefd[1]); /* close unused write end of pipe */
766
process *new_process = malloc(sizeof(process));
767
if (new_process == NULL){
769
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
909
perror("sigprocmask");
771
perror("sigprocmask");
911
773
exitstatus = EXIT_FAILURE;
915
new_plugin->pid = pid;
916
new_plugin->fd = pipefd[0];
777
*new_process = (struct process){ .pid = pid,
779
.next = process_list };
781
process_list = new_process;
918
782
/* Unblock SIGCHLD so signal handler can be run if this process
919
783
has already completed */
920
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
784
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
922
786
perror("sigprocmask");
923
787
exitstatus = EXIT_FAILURE;
927
FD_SET(new_plugin->fd, &rfds_all);
791
FD_SET(new_process->fd, &rfds_all);
929
if(maxfd < new_plugin->fd){
930
maxfd = new_plugin->fd;
793
if (maxfd < new_process->fd){
794
maxfd = new_process->fd;
799
free_plugin_list(plugin_list);
936
free_plugin(getplugin(NULL));
938
for(plugin *p = plugin_list; p != NULL; p = p->next){
943
fprintf(stderr, "No plugin processes started. Incorrect plugin"
805
if (process_list == NULL){
806
fprintf(stderr, "No plugin processes started. Incorrect plugin"
949
/* Main loop while running plugins exist */
951
811
fd_set rfds = rfds_all;
952
812
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
953
if(select_ret == -1){
813
if (select_ret == -1){
954
814
perror("select");
955
815
exitstatus = EXIT_FAILURE;
958
818
/* OK, now either a process completed, or something can be read
959
819
from one of them */
960
for(plugin *proc = plugin_list; proc != NULL;){
820
for(process *proc = process_list; proc ; proc = proc->next){
961
821
/* Is this process completely done? */
962
if(proc->completed and proc->eof){
822
if(proc->eof and proc->completed){
963
823
/* Only accept the plugin output if it exited cleanly */
964
824
if(not WIFEXITED(proc->status)
965
825
or WEXITSTATUS(proc->status) != 0){
966
826
/* Bad exit by plugin */
969
828
if(WIFEXITED(proc->status)){
970
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
971
" status %d\n", proc->name,
972
(intmax_t) (proc->pid),
829
fprintf(stderr, "Plugin %u exited with status %d\n",
830
(unsigned int) (proc->pid),
973
831
WEXITSTATUS(proc->status));
974
} else if(WIFSIGNALED(proc->status)){
975
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
976
" signal %d\n", proc->name,
977
(intmax_t) (proc->pid),
832
} else if(WIFSIGNALED(proc->status)) {
833
fprintf(stderr, "Plugin %u killed by signal %d\n",
834
(unsigned int) (proc->pid),
978
835
WTERMSIG(proc->status));
979
836
} else if(WCOREDUMP(proc->status)){
980
fprintf(stderr, "Plugin %s [%" PRIdMAX "] dumped"
981
" core\n", proc->name, (intmax_t) (proc->pid));
837
fprintf(stderr, "Plugin %d dumped core\n",
838
(unsigned int) (proc->pid));
985
841
/* Remove the plugin */
986
842
FD_CLR(proc->fd, &rfds_all);
988
843
/* Block signal while modifying process_list */
989
844
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
992
847
exitstatus = EXIT_FAILURE;
996
plugin *next_plugin = proc->next;
850
/* Delete this process entry from the list */
851
if(process_list == proc){
852
/* First one - simple */
853
process_list = proc->next;
855
/* Second one or later */
856
for(process *p = process_list; p != NULL; p = p->next){
858
p->next = proc->next;
1000
863
/* We are done modifying process list, so unblock signal */
1001
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
864
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
1004
867
perror("sigprocmask");
1005
exitstatus = EXIT_FAILURE;
1009
if(plugin_list == NULL){
871
/* We deleted this process from the list, so we can't go
872
proc->next. Therefore, start over from the beginning of
1016
876
/* This process exited nicely, so print its buffer */
1018
878
bool bret = print_out_password(proc->buffer,
1019
879
proc->buffer_length);
1042
900
proc->buffer_size += BUFFER_SIZE;
1044
902
/* Read from the process */
1045
sret = read(proc->fd, proc->buffer + proc->buffer_length,
903
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1048
906
/* Read error from this process; ignore the error */
1054
911
proc->eof = true;
1056
proc->buffer_length += (size_t) sret;
913
proc->buffer_length += (size_t) ret;
1064
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
921
if(process_list == NULL or exitstatus != EXIT_SUCCESS){
1065
922
/* Fallback if all plugins failed, none are found or an error
1068
925
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1069
926
char *passwordbuffer = getpass("Password: ");
1070
size_t len = strlen(passwordbuffer);
1071
/* Strip trailing newline */
1072
if(len > 0 and passwordbuffer[len-1] == '\n'){
1073
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1076
bret = print_out_password(passwordbuffer, len);
927
bret = print_out_password(passwordbuffer, strlen(passwordbuffer));
1078
929
perror("print_out_password");
1079
930
exitstatus = EXIT_FAILURE;