To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 24.1.81
- compare with another revision
- download diff
- download tarball
- view history from revision 24.1.81
- Committer: Björn Påhlsson
- Date: 2008-09-03 18:47:50 UTC
- mto: (237.7.1 mandos) (24.1.154 mandos)
- mto: This revision was merged to the branch mainline in revision 149.
- Revision ID: belorn@braxen-20080903184750-s0k0jrrq0lxiamwh
removed keyring pre-requirement for starting password-request.
Keys will now be imported in run-time to a run-time created keyring
Changed seckey and pubkey to be paths to private and public keys of the pgp encrypted password and gnutls authentication credentials.
Keys will now be imported in run-time to a run-time created keyring
Changed seckey and pubkey to be paths to private and public keys of the pgp encrypted password and gnutls authentication credentials.
- files added:
- initramfs-tools-hook-conf
- files removed:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files renamed:
- plugins.d/mandos-client.c => plugins.d/password-request.c
- plugins.d/mandos-client.xml => plugins.d/password-request.xml
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008-2018 Teddy Hogeborn
6
* Copyright © 2008-2018 Björn Påhlsson
7
*
8
* This file is part of Mandos.
9
*
10
* Mandos is free software: you can redistribute it and/or modify it
11
* under the terms of the GNU General Public License as published by
12
* the Free Software Foundation, either version 3 of the License, or
13
* (at your option) any later version.
14
*
15
* Mandos is distributed in the hope that it will be useful, but
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
6
*
7
* This program is free software: you can redistribute it and/or
8
* modify it under the terms of the GNU General Public License as
9
* published by the Free Software Foundation, either version 3 of the
10
* License, or (at your option) any later version.
11
*
12
* This program is distributed in the hope that it will be useful, but
16
13
* WITHOUT ANY WARRANTY; without even the implied warranty of
17
14
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18
15
* General Public License for more details.
19
16
*
20
17
* You should have received a copy of the GNU General Public License
21
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
18
* along with this program. If not, see
19
* <http://www.gnu.org/licenses/>.
22
20
*
23
* Contact the authors at <mandos@recompile.se>.
21
* Contact the authors at <mandos@fukt.bsnet.se>.
24
22
*/
25
23
26
24
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
27
O_CLOEXEC, pipe2() */
25
asprintf() */
28
26
#include <stddef.h> /* size_t, NULL */
29
#include <stdlib.h> /* malloc(), reallocarray(), realloc(),
30
EXIT_SUCCESS, exit() */
27
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
28
EXIT_SUCCESS, realloc() */
31
29
#include <stdbool.h> /* bool, true, false */
32
#include <stdio.h> /* fileno(), fprintf(),
33
stderr, STDOUT_FILENO, fclose() */
34
#include <sys/types.h> /* fstat(), struct stat, waitpid(),
35
WIFEXITED(), WEXITSTATUS(), wait(),
36
pid_t, uid_t, gid_t, getuid(),
37
getgid() */
30
#include <stdio.h> /* perror, popen(), fileno(),
31
fprintf(), stderr, STDOUT_FILENO */
32
#include <sys/types.h> /* DIR, opendir(), stat(), struct
33
stat, waitpid(), WIFEXITED(),
34
WEXITSTATUS(), wait(), pid_t,
35
uid_t, gid_t, getuid(), getgid(),
36
dirfd() */
38
37
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
38
FD_SET(), FD_ISSET(), FD_CLR */
40
39
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS(), WTERMSIG() */
42
#include <sys/stat.h> /* struct stat, fstat(), S_ISREG() */
40
WEXITSTATUS() */
41
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
43
42
#include <iso646.h> /* and, or, not */
44
#include <dirent.h> /* struct dirent, scandirat() */
45
#include <unistd.h> /* fcntl(), F_GETFD, F_SETFD,
46
FD_CLOEXEC, write(), STDOUT_FILENO,
47
struct stat, fstat(), close(),
48
setgid(), setuid(), S_ISREG(),
49
faccessat() pipe2(), fork(),
50
_exit(), dup2(), fexecve(), read()
51
*/
43
#include <dirent.h> /* DIR, struct dirent, opendir(),
44
readdir(), closedir(), dirfd() */
45
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
46
fcntl(), setuid(), setgid(),
47
F_GETFD, F_SETFD, FD_CLOEXEC,
48
access(), pipe(), fork(), close()
49
dup2, STDOUT_FILENO, _exit(),
50
execv(), write(), read(),
51
close() */
52
52
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
53
FD_CLOEXEC, openat(), scandirat(),
54
pipe2() */
55
#include <string.h> /* strsep, strlen(), strsignal(),
56
strcmp(), strncmp() */
53
FD_CLOEXEC */
54
#include <string.h> /* strsep, strlen(), asprintf() */
57
55
#include <errno.h> /* errno */
58
56
#include <argp.h> /* struct argp_option, struct
59
57
argp_state, struct argp,
63
61
#include <signal.h> /* struct sigaction, sigemptyset(),
64
62
sigaddset(), sigaction(),
65
63
sigprocmask(), SIG_BLOCK, SIGCHLD,
66
SIG_UNBLOCK, kill(), sig_atomic_t
67
*/
64
SIG_UNBLOCK, kill() */
68
65
#include <errno.h> /* errno, EBADF */
69
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
70
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
71
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
72
#include <errno.h> /* errno */
73
#include <error.h> /* error() */
74
#include <fnmatch.h> /* fnmatch() */
75
66
76
67
#define BUFFER_SIZE 256
77
68
78
69
#define PDIR "/lib/mandos/plugins.d"
79
#define PHDIR "/lib/mandos/plugin-helpers"
80
70
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
81
71
82
const char *argp_program_version = "plugin-runner " VERSION;
83
const char *argp_program_bug_address = "<mandos@recompile.se>";
72
const char *argp_program_version = "plugin-runner 1.0";
73
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
74
75
struct plugin;
84
76
85
77
typedef struct plugin{
86
78
char *name; /* can be NULL or any plugin name */
89
81
char **environ;
90
82
int envc;
91
83
bool disabled;
92
84
93
85
/* Variables used for running processes*/
94
86
pid_t pid;
95
87
int fd;
97
89
size_t buffer_size;
98
90
size_t buffer_length;
99
91
bool eof;
100
volatile sig_atomic_t completed;
101
int status;
92
volatile bool completed;
93
volatile int status;
102
94
struct plugin *next;
103
95
} plugin;
104
96
105
97
static plugin *plugin_list = NULL;
106
98
107
/* Gets an existing plugin based on name,
99
/* Gets a existing plugin based on name,
108
100
or if none is found, creates a new one */
109
__attribute__((warn_unused_result))
110
101
static plugin *getplugin(char *name){
111
/* Check for existing plugin with that name */
112
for(plugin *p = plugin_list; p != NULL; p = p->next){
113
if((p->name == name)
114
or (p->name and name and (strcmp(p->name, name) == 0))){
102
/* Check for exiting plugin with that name */
103
for (plugin *p = plugin_list; p != NULL; p = p->next){
104
if ((p->name == name)
105
or (p->name and name and (strcmp(p->name, name) == 0))){
115
106
return p;
116
107
}
117
108
}
118
109
/* Create a new plugin */
119
plugin *new_plugin = NULL;
120
do {
121
new_plugin = malloc(sizeof(plugin));
122
} while(new_plugin == NULL and errno == EINTR);
123
if(new_plugin == NULL){
110
plugin *new_plugin = malloc(sizeof(plugin));
111
if (new_plugin == NULL){
124
112
return NULL;
125
113
}
126
114
char *copy_name = NULL;
127
115
if(name != NULL){
128
do {
129
copy_name = strdup(name);
130
} while(copy_name == NULL and errno == EINTR);
116
copy_name = strdup(name);
131
117
if(copy_name == NULL){
132
int e = errno;
133
free(new_plugin);
134
errno = e;
135
118
return NULL;
136
119
}
137
120
}
138
139
*new_plugin = (plugin){ .name = copy_name,
140
.argc = 1,
141
.disabled = false,
142
.next = plugin_list };
143
144
do {
145
new_plugin->argv = malloc(sizeof(char *) * 2);
146
} while(new_plugin->argv == NULL and errno == EINTR);
147
if(new_plugin->argv == NULL){
148
int e = errno;
121
122
*new_plugin = (plugin) { .name = copy_name,
123
.argc = 1,
124
.disabled = false,
125
.next = plugin_list };
126
127
new_plugin->argv = malloc(sizeof(char *) * 2);
128
if (new_plugin->argv == NULL){
149
129
free(copy_name);
150
130
free(new_plugin);
151
errno = e;
152
131
return NULL;
153
132
}
154
133
new_plugin->argv[0] = copy_name;
155
134
new_plugin->argv[1] = NULL;
156
135
157
do {
158
new_plugin->environ = malloc(sizeof(char *));
159
} while(new_plugin->environ == NULL and errno == EINTR);
136
new_plugin->environ = malloc(sizeof(char *));
160
137
if(new_plugin->environ == NULL){
161
int e = errno;
162
138
free(copy_name);
163
139
free(new_plugin->argv);
164
140
free(new_plugin);
165
errno = e;
166
141
return NULL;
167
142
}
168
143
new_plugin->environ[0] = NULL;
173
148
}
174
149
175
150
/* Helper function for add_argument and add_environment */
176
__attribute__((nonnull, warn_unused_result))
177
151
static bool add_to_char_array(const char *new, char ***array,
178
152
int *len){
179
153
/* Resize the pointed-to array to hold one more pointer */
180
char **new_array = NULL;
181
do {
182
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 26)
183
new_array = reallocarray(*array, (size_t)((*len) + 2),
184
sizeof(char *));
185
#else
186
if(((size_t)((*len) + 2)) > (SIZE_MAX / sizeof(char *))){
187
/* overflow */
188
new_array = NULL;
189
errno = ENOMEM;
190
} else {
191
new_array = realloc(*array, (size_t)((*len) + 2)
192
* sizeof(char *));
193
}
194
#endif
195
} while(new_array == NULL and errno == EINTR);
154
*array = realloc(*array, sizeof(char *)
155
* (size_t) ((*len) + 2));
196
156
/* Malloc check */
197
if(new_array == NULL){
157
if(*array == NULL){
198
158
return false;
199
159
}
200
*array = new_array;
201
160
/* Make a copy of the new string */
202
char *copy;
203
do {
204
copy = strdup(new);
205
} while(copy == NULL and errno == EINTR);
161
char *copy = strdup(new);
206
162
if(copy == NULL){
207
163
return false;
208
164
}
215
171
}
216
172
217
173
/* Add to a plugin's argument vector */
218
__attribute__((nonnull(2), warn_unused_result))
219
174
static bool add_argument(plugin *p, const char *arg){
220
175
if(p == NULL){
221
176
return false;
224
179
}
225
180
226
181
/* Add to a plugin's environment */
227
__attribute__((nonnull(2), warn_unused_result))
228
182
static bool add_environment(plugin *p, const char *def, bool replace){
229
183
if(p == NULL){
230
184
return false;
232
186
/* namelen = length of name of environment variable */
233
187
size_t namelen = (size_t)(strchrnul(def, '=') - def);
234
188
/* Search for this environment variable */
235
for(char **envdef = p->environ; *envdef != NULL; envdef++){
236
if(strncmp(*envdef, def, namelen + 1) == 0){
189
for(char **e = p->environ; *e != NULL; e++){
190
if(strncmp(*e, def, namelen+1) == 0){
237
191
/* It already exists */
238
192
if(replace){
239
char *new_envdef;
240
do {
241
new_envdef = realloc(*envdef, strlen(def) + 1);
242
} while(new_envdef == NULL and errno == EINTR);
243
if(new_envdef == NULL){
193
char *new = realloc(*e, strlen(def));
194
if(new == NULL){
244
195
return false;
245
196
}
246
*envdef = new_envdef;
247
strcpy(*envdef, def);
197
*e = new;
198
strcpy(*e, def);
248
199
}
249
200
return true;
250
201
}
252
203
return add_to_char_array(def, &(p->environ), &(p->envc));
253
204
}
254
205
255
#ifndef O_CLOEXEC
256
206
/*
257
207
* Based on the example in the GNU LibC manual chapter 13.13 "File
258
208
* Descriptor Flags".
259
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
209
* *Note File Descriptor Flags:(libc)Descriptor Flags.
260
210
*/
261
__attribute__((warn_unused_result))
262
static int set_cloexec_flag(int fd){
263
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
211
static int set_cloexec_flag(int fd)
212
{
213
int ret = fcntl(fd, F_GETFD, 0);
264
214
/* If reading the flags failed, return error indication now. */
265
215
if(ret < 0){
266
216
return ret;
267
217
}
268
218
/* Store modified flag word in the descriptor. */
269
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
270
ret | FD_CLOEXEC));
219
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
271
220
}
272
#endif /* not O_CLOEXEC */
273
221
274
222
275
223
/* Mark processes as completed when they exit, and save their exit
276
224
status. */
277
static void handle_sigchld(__attribute__((unused)) int sig){
278
int old_errno = errno;
225
void handle_sigchld(__attribute__((unused)) int sig){
279
226
while(true){
280
227
plugin *proc = plugin_list;
281
228
int status;
285
232
break;
286
233
}
287
234
if(pid == -1){
288
if(errno == ECHILD){
289
/* No child processes */
290
break;
235
if (errno != ECHILD){
236
perror("waitpid");
291
237
}
292
error(0, errno, "waitpid");
238
/* No child processes */
239
break;
293
240
}
294
241
295
242
/* A child exited, find it in process_list */
296
243
while(proc != NULL and proc->pid != pid){
297
244
proc = proc->next;
301
248
continue;
302
249
}
303
250
proc->status = status;
304
proc->completed = 1;
251
proc->completed = true;
305
252
}
306
errno = old_errno;
307
253
}
308
254
309
255
/* Prints out a password to stdout */
310
__attribute__((nonnull, warn_unused_result))
311
static bool print_out_password(const char *buffer, size_t length){
256
bool print_out_password(const char *buffer, size_t length){
312
257
ssize_t ret;
258
if(length>0 and buffer[length-1] == '\n'){
259
length--;
260
}
313
261
for(size_t written = 0; written < length; written += (size_t)ret){
314
262
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
315
263
length - written));
321
269
}
322
270
323
271
/* Removes and free a plugin from the plugin list */
324
__attribute__((nonnull))
325
272
static void free_plugin(plugin *plugin_node){
326
273
327
for(char **arg = (plugin_node->argv)+1; *arg != NULL; arg++){
274
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
328
275
free(*arg);
329
276
}
330
free(plugin_node->name);
331
277
free(plugin_node->argv);
332
278
for(char **env = plugin_node->environ; *env != NULL; env++){
333
279
free(*env);
334
280
}
335
281
free(plugin_node->environ);
336
282
free(plugin_node->buffer);
337
283
338
284
/* Removes the plugin from the singly-linked list */
339
285
if(plugin_node == plugin_list){
340
286
/* First one - simple */
360
306
361
307
int main(int argc, char *argv[]){
362
308
char *plugindir = NULL;
363
char *pluginhelperdir = NULL;
364
309
char *argfile = NULL;
365
310
FILE *conffp;
366
struct dirent **direntries = NULL;
311
size_t d_name_len;
312
DIR *dir = NULL;
313
struct dirent *dirst;
367
314
struct stat st;
368
315
fd_set rfds_all;
369
316
int ret, maxfd = 0;
370
ssize_t sret;
371
317
uid_t uid = 65534;
372
318
gid_t gid = 65534;
373
319
bool debug = false;
377
323
.sa_flags = SA_NOCLDSTOP };
378
324
char **custom_argv = NULL;
379
325
int custom_argc = 0;
380
int dir_fd = -1;
381
326
382
327
/* Establish a signal handler */
383
328
sigemptyset(&sigchld_action.sa_mask);
384
329
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
385
330
if(ret == -1){
386
error(0, errno, "sigaddset");
387
exitstatus = EX_OSERR;
331
perror("sigaddset");
332
exitstatus = EXIT_FAILURE;
388
333
goto fallback;
389
334
}
390
335
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
391
336
if(ret == -1){
392
error(0, errno, "sigaction");
393
exitstatus = EX_OSERR;
337
perror("sigaction");
338
exitstatus = EXIT_FAILURE;
394
339
goto fallback;
395
340
}
396
341
428
373
.doc = "Group ID the plugins will run as", .group = 3 },
429
374
{ .name = "debug", .key = 132,
430
375
.doc = "Debug mode", .group = 4 },
431
{ .name = "plugin-helper-dir", .key = 133,
432
.arg = "DIRECTORY",
433
.doc = "Specify a different plugin helper directory",
434
.group = 2 },
435
/*
436
* These reproduce what we would get without ARGP_NO_HELP
437
*/
438
{ .name = "help", .key = '?',
439
.doc = "Give this help list", .group = -1 },
440
{ .name = "usage", .key = -3,
441
.doc = "Give a short usage message", .group = -1 },
442
{ .name = "version", .key = 'V',
443
.doc = "Print program version", .group = -1 },
444
376
{ .name = NULL }
445
377
};
446
378
447
__attribute__((nonnull(3)))
448
error_t parse_opt(int key, char *arg, struct argp_state *state){
449
errno = 0;
450
switch(key){
451
char *tmp;
452
intmax_t tmp_id;
379
error_t parse_opt (int key, char *arg, __attribute__((unused))
380
struct argp_state *state) {
381
switch (key) {
453
382
case 'g': /* --global-options */
454
{
455
char *plugin_option;
456
while((plugin_option = strsep(&arg, ",")) != NULL){
457
if(not add_argument(getplugin(NULL), plugin_option)){
458
break;
383
if (arg != NULL){
384
char *p;
385
while((p = strsep(&arg, ",")) != NULL){
386
if(p[0] == '\0'){
387
continue;
388
}
389
if(not add_argument(getplugin(NULL), p)){
390
perror("add_argument");
391
return ARGP_ERR_UNKNOWN;
459
392
}
460
393
}
461
errno = 0;
462
394
}
463
395
break;
464
396
case 'G': /* --global-env */
465
if(add_environment(getplugin(NULL), arg, true)){
466
errno = 0;
397
if(arg == NULL){
398
break;
399
}
400
{
401
char *envdef = strdup(arg);
402
if(envdef == NULL){
403
break;
404
}
405
if(not add_environment(getplugin(NULL), envdef, true)){
406
perror("add_environment");
407
}
467
408
}
468
409
break;
469
410
case 'o': /* --options-for */
470
{
471
char *option_list = strchr(arg, ':');
472
if(option_list == NULL){
473
argp_error(state, "No colon in \"%s\"", arg);
474
errno = EINVAL;
475
break;
476
}
477
*option_list = '\0';
478
option_list++;
479
if(arg[0] == '\0'){
480
argp_error(state, "Empty plugin name");
481
errno = EINVAL;
482
break;
483
}
484
char *option;
485
while((option = strsep(&option_list, ",")) != NULL){
486
if(not add_argument(getplugin(arg), option)){
487
break;
411
if (arg != NULL){
412
char *p_name = strsep(&arg, ":");
413
if(p_name[0] == '\0'){
414
break;
415
}
416
char *opt = strsep(&arg, ":");
417
if(opt[0] == '\0'){
418
break;
419
}
420
if(opt != NULL){
421
char *p;
422
while((p = strsep(&opt, ",")) != NULL){
423
if(p[0] == '\0'){
424
continue;
425
}
426
if(not add_argument(getplugin(p_name), p)){
427
perror("add_argument");
428
return ARGP_ERR_UNKNOWN;
429
}
488
430
}
489
431
}
490
errno = 0;
491
432
}
492
433
break;
493
434
case 'E': /* --env-for */
435
if(arg == NULL){
436
break;
437
}
494
438
{
495
439
char *envdef = strchr(arg, ':');
496
440
if(envdef == NULL){
497
argp_error(state, "No colon in \"%s\"", arg);
498
errno = EINVAL;
499
break;
500
}
501
*envdef = '\0';
441
break;
442
}
443
char *p_name = strndup(arg, (size_t) (envdef-arg));
444
if(p_name == NULL){
445
break;
446
}
502
447
envdef++;
503
if(arg[0] == '\0'){
504
argp_error(state, "Empty plugin name");
505
errno = EINVAL;
506
break;
507
}
508
if(add_environment(getplugin(arg), envdef, true)){
509
errno = 0;
448
if(not add_environment(getplugin(p_name), envdef, true)){
449
perror("add_environment");
510
450
}
511
451
}
512
452
break;
513
453
case 'd': /* --disable */
514
{
454
if (arg != NULL){
515
455
plugin *p = getplugin(arg);
516
if(p != NULL){
517
p->disabled = true;
518
errno = 0;
456
if(p == NULL){
457
return ARGP_ERR_UNKNOWN;
519
458
}
459
p->disabled = true;
520
460
}
521
461
break;
522
462
case 'e': /* --enable */
523
{
463
if (arg != NULL){
524
464
plugin *p = getplugin(arg);
525
if(p != NULL){
526
p->disabled = false;
527
errno = 0;
465
if(p == NULL){
466
return ARGP_ERR_UNKNOWN;
528
467
}
468
p->disabled = false;
529
469
}
530
470
break;
531
471
case 128: /* --plugin-dir */
532
free(plugindir);
533
472
plugindir = strdup(arg);
534
if(plugindir != NULL){
535
errno = 0;
536
}
473
if(plugindir == NULL){
474
perror("strdup");
475
}
537
476
break;
538
477
case 129: /* --config-file */
539
478
/* This is already done by parse_opt_config_file() */
540
479
break;
541
480
case 130: /* --userid */
542
tmp_id = strtoimax(arg, &tmp, 10);
543
if(errno != 0 or tmp == arg or *tmp != '\0'
544
or tmp_id != (uid_t)tmp_id){
545
argp_error(state, "Bad user ID number: \"%s\", using %"
546
PRIdMAX, arg, (intmax_t)uid);
547
break;
548
}
549
uid = (uid_t)tmp_id;
550
errno = 0;
481
uid = (uid_t)strtol(arg, NULL, 10);
551
482
break;
552
483
case 131: /* --groupid */
553
tmp_id = strtoimax(arg, &tmp, 10);
554
if(errno != 0 or tmp == arg or *tmp != '\0'
555
or tmp_id != (gid_t)tmp_id){
556
argp_error(state, "Bad group ID number: \"%s\", using %"
557
PRIdMAX, arg, (intmax_t)gid);
558
break;
559
}
560
gid = (gid_t)tmp_id;
561
errno = 0;
484
gid = (gid_t)strtol(arg, NULL, 10);
562
485
break;
563
486
case 132: /* --debug */
564
487
debug = true;
565
488
break;
566
case 133: /* --plugin-helper-dir */
567
free(pluginhelperdir);
568
pluginhelperdir = strdup(arg);
569
if(pluginhelperdir != NULL){
570
errno = 0;
571
}
572
break;
573
/*
574
* These reproduce what we would get without ARGP_NO_HELP
575
*/
576
case '?': /* --help */
577
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
578
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
579
__builtin_unreachable();
580
case -3: /* --usage */
581
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
582
argp_state_help(state, state->out_stream,
583
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
584
__builtin_unreachable();
585
case 'V': /* --version */
586
fprintf(state->out_stream, "%s\n", argp_program_version);
587
exit(EXIT_SUCCESS);
588
break;
589
/*
590
* When adding more options before this line, remember to also add a
591
* "case" to the "parse_opt_config_file" function below.
592
*/
593
489
case ARGP_KEY_ARG:
594
/* Cryptsetup always passes an argument, which is an empty
595
string if "none" was specified in /etc/crypttab. So if
596
argument was empty, we ignore it silently. */
597
if(arg[0] == '\0'){
598
break;
599
}
600
#if __GNUC__ >= 7
601
__attribute__((fallthrough));
602
#else
603
/* FALLTHROUGH */
604
#endif
490
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
491
break;
492
case ARGP_KEY_END:
493
break;
605
494
default:
606
495
return ARGP_ERR_UNKNOWN;
607
496
}
608
return errno; /* Set to 0 at start */
497
return 0;
609
498
}
610
499
611
500
/* This option parser is the same as parse_opt() above, except it
612
501
ignores everything but the --config-file option. */
613
error_t parse_opt_config_file(int key, char *arg,
614
__attribute__((unused))
615
struct argp_state *state){
616
errno = 0;
617
switch(key){
502
error_t parse_opt_config_file (int key, char *arg,
503
__attribute__((unused))
504
struct argp_state *state) {
505
switch (key) {
618
506
case 'g': /* --global-options */
619
507
case 'G': /* --global-env */
620
508
case 'o': /* --options-for */
624
512
case 128: /* --plugin-dir */
625
513
break;
626
514
case 129: /* --config-file */
627
free(argfile);
628
515
argfile = strdup(arg);
629
if(argfile != NULL){
630
errno = 0;
516
if(argfile == NULL){
517
perror("strdup");
631
518
}
632
break;
519
break;
633
520
case 130: /* --userid */
634
521
case 131: /* --groupid */
635
522
case 132: /* --debug */
636
case 133: /* --plugin-helper-dir */
637
case '?': /* --help */
638
case -3: /* --usage */
639
case 'V': /* --version */
640
523
case ARGP_KEY_ARG:
524
case ARGP_KEY_END:
641
525
break;
642
526
default:
643
527
return ARGP_ERR_UNKNOWN;
644
528
}
645
return errno;
529
return 0;
646
530
}
647
531
648
532
struct argp argp = { .options = options,
650
534
.args_doc = "",
651
535
.doc = "Mandos plugin runner -- Run plugins" };
652
536
653
/* Parse using parse_opt_config_file() in order to get the custom
537
/* Parse using the parse_opt_config_file in order to get the custom
654
538
config file location, if any. */
655
ret = argp_parse(&argp, argc, argv,
656
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
657
NULL, NULL);
658
switch(ret){
659
case 0:
660
break;
661
case ENOMEM:
662
default:
663
errno = ret;
664
error(0, errno, "argp_parse");
665
exitstatus = EX_OSERR;
666
goto fallback;
667
case EINVAL:
668
exitstatus = EX_USAGE;
539
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
540
if (ret == ARGP_ERR_UNKNOWN){
541
fprintf(stderr, "Unknown error while parsing arguments\n");
542
exitstatus = EXIT_FAILURE;
669
543
goto fallback;
670
544
}
671
545
673
547
argp.parser = parse_opt;
674
548
675
549
/* Open the configfile if available */
676
if(argfile == NULL){
550
if (argfile == NULL){
677
551
conffp = fopen(AFILE, "r");
678
552
} else {
679
553
conffp = fopen(argfile, "r");
680
}
554
}
681
555
if(conffp != NULL){
682
556
char *org_line = NULL;
683
557
char *p, *arg, *new_arg, *line;
684
558
size_t size = 0;
559
ssize_t sret;
685
560
const char whitespace_delims[] = " \r\t\f\v\n";
686
561
const char comment_delim[] = "#";
687
562
688
563
custom_argc = 1;
689
564
custom_argv = malloc(sizeof(char*) * 2);
690
565
if(custom_argv == NULL){
691
error(0, errno, "malloc");
692
exitstatus = EX_OSERR;
566
perror("malloc");
567
exitstatus = EXIT_FAILURE;
693
568
goto fallback;
694
569
}
695
570
custom_argv[0] = argv[0];
696
571
custom_argv[1] = NULL;
697
572
698
573
/* for each line in the config file, strip whitespace and ignore
699
574
commented text */
700
575
while(true){
702
577
if(sret == -1){
703
578
break;
704
579
}
705
580
706
581
line = org_line;
707
582
arg = strsep(&line, comment_delim);
708
583
while((p = strsep(&arg, whitespace_delims)) != NULL){
711
586
}
712
587
new_arg = strdup(p);
713
588
if(new_arg == NULL){
714
error(0, errno, "strdup");
715
exitstatus = EX_OSERR;
589
perror("strdup");
590
exitstatus = EXIT_FAILURE;
716
591
free(org_line);
717
592
goto fallback;
718
593
}
719
594
720
595
custom_argc += 1;
721
{
722
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 26)
723
char **new_argv = reallocarray(custom_argv, (size_t)custom_argc + 1,
724
sizeof(char *));
725
#else
726
char **new_argv = NULL;
727
if(((size_t)custom_argc + 1) > (SIZE_MAX / sizeof(char *))){
728
/* overflow */
729
errno = ENOMEM;
730
} else {
731
new_argv = realloc(custom_argv, ((size_t)custom_argc + 1)
732
* sizeof(char *));
733
}
734
#endif
735
if(new_argv == NULL){
736
error(0, errno, "reallocarray");
737
exitstatus = EX_OSERR;
738
free(new_arg);
739
free(org_line);
740
goto fallback;
741
} else {
742
custom_argv = new_argv;
743
}
596
custom_argv = realloc(custom_argv, sizeof(char *)
597
* ((unsigned int) custom_argc + 1));
598
if(custom_argv == NULL){
599
perror("realloc");
600
exitstatus = EXIT_FAILURE;
601
free(org_line);
602
goto fallback;
744
603
}
745
604
custom_argv[custom_argc-1] = new_arg;
746
custom_argv[custom_argc] = NULL;
605
custom_argv[custom_argc] = NULL;
747
606
}
748
607
}
749
do {
750
ret = fclose(conffp);
751
} while(ret == EOF and errno == EINTR);
752
if(ret == EOF){
753
error(0, errno, "fclose");
754
exitstatus = EX_IOERR;
755
goto fallback;
756
}
757
608
free(org_line);
758
609
} else {
759
610
/* Check for harmful errors and go to fallback. Other errors might
760
611
not affect opening plugins */
761
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
762
error(0, errno, "fopen");
763
exitstatus = EX_OSERR;
612
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
613
perror("fopen");
614
exitstatus = EXIT_FAILURE;
764
615
goto fallback;
765
616
}
766
617
}
767
/* If there were any arguments from the configuration file, pass
768
them to parser as command line arguments */
618
/* If there was any arguments from configuration file,
619
pass them to parser as command arguments */
769
620
if(custom_argv != NULL){
770
ret = argp_parse(&argp, custom_argc, custom_argv,
771
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
772
NULL, NULL);
773
switch(ret){
774
case 0:
775
break;
776
case ENOMEM:
777
default:
778
errno = ret;
779
error(0, errno, "argp_parse");
780
exitstatus = EX_OSERR;
781
goto fallback;
782
case EINVAL:
783
exitstatus = EX_CONFIG;
621
ret = argp_parse (&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
622
0, NULL);
623
if (ret == ARGP_ERR_UNKNOWN){
624
fprintf(stderr, "Unknown error while parsing arguments\n");
625
exitstatus = EXIT_FAILURE;
784
626
goto fallback;
785
627
}
786
628
}
787
629
788
630
/* Parse actual command line arguments, to let them override the
789
631
config file */
790
ret = argp_parse(&argp, argc, argv,
791
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
792
NULL, NULL);
793
switch(ret){
794
case 0:
795
break;
796
case ENOMEM:
797
default:
798
errno = ret;
799
error(0, errno, "argp_parse");
800
exitstatus = EX_OSERR;
801
goto fallback;
802
case EINVAL:
803
exitstatus = EX_USAGE;
804
goto fallback;
805
}
806
807
{
808
char *pluginhelperenv;
809
bool bret = true;
810
ret = asprintf(&pluginhelperenv, "MANDOSPLUGINHELPERDIR=%s",
811
pluginhelperdir != NULL ? pluginhelperdir : PHDIR);
812
if(ret != -1){
813
bret = add_environment(getplugin(NULL), pluginhelperenv, true);
814
}
815
if(ret == -1 or not bret){
816
error(0, errno, "Failed to set MANDOSPLUGINHELPERDIR"
817
" environment variable to \"%s\" for all plugins\n",
818
pluginhelperdir != NULL ? pluginhelperdir : PHDIR);
819
}
820
if(ret != -1){
821
free(pluginhelperenv);
822
}
632
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
633
if (ret == ARGP_ERR_UNKNOWN){
634
fprintf(stderr, "Unknown error while parsing arguments\n");
635
exitstatus = EXIT_FAILURE;
636
goto fallback;
823
637
}
824
638
825
639
if(debug){
826
for(plugin *p = plugin_list; p != NULL; p = p->next){
640
for(plugin *p = plugin_list; p != NULL; p=p->next){
827
641
fprintf(stderr, "Plugin: %s has %d arguments\n",
828
642
p->name ? p->name : "Global", p->argc - 1);
829
643
for(char **a = p->argv; *a != NULL; a++){
830
644
fprintf(stderr, "\tArg: %s\n", *a);
831
645
}
832
fprintf(stderr, "...and %d environment variables\n", p->envc);
646
fprintf(stderr, "...and %u environment variables\n", p->envc);
833
647
for(char **a = p->environ; *a != NULL; a++){
834
648
fprintf(stderr, "\t%s\n", *a);
835
649
}
836
650
}
837
651
}
838
652
839
if(getuid() == 0){
840
/* Work around Debian bug #633582:
841
<https://bugs.debian.org/633582> */
842
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
843
if(plugindir_fd == -1){
844
if(errno != ENOENT){
845
error(0, errno, "open(\"" PDIR "\")");
846
}
847
} else {
848
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
849
if(ret == -1){
850
error(0, errno, "fstat");
851
} else {
852
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
853
ret = fchown(plugindir_fd, uid, gid);
854
if(ret == -1){
855
error(0, errno, "fchown");
856
}
857
}
858
}
859
close(plugindir_fd);
860
}
861
}
862
863
/* Lower permissions */
864
ret = setgid(gid);
865
if(ret == -1){
866
error(0, errno, "setgid");
867
}
653
/* Strip permissions down to nobody */
868
654
ret = setuid(uid);
869
if(ret == -1){
870
error(0, errno, "setuid");
871
}
872
873
/* Open plugin directory with close_on_exec flag */
655
if (ret == -1){
656
perror("setuid");
657
}
658
setgid(gid);
659
if (ret == -1){
660
perror("setgid");
661
}
662
663
if (plugindir == NULL){
664
dir = opendir(PDIR);
665
} else {
666
dir = opendir(plugindir);
667
}
668
669
if(dir == NULL){
670
perror("Could not open plugin dir");
671
exitstatus = EXIT_FAILURE;
672
goto fallback;
673
}
674
675
/* Set the FD_CLOEXEC flag on the directory, if possible */
874
676
{
875
dir_fd = open(plugindir != NULL ? plugindir : PDIR, O_RDONLY |
876
#ifdef O_CLOEXEC
877
O_CLOEXEC
878
#else /* not O_CLOEXEC */
879
0
880
#endif /* not O_CLOEXEC */
881
);
882
if(dir_fd == -1){
883
error(0, errno, "Could not open plugin dir");
884
exitstatus = EX_UNAVAILABLE;
885
goto fallback;
886
}
887
888
#ifndef O_CLOEXEC
889
/* Set the FD_CLOEXEC flag on the directory */
890
ret = set_cloexec_flag(dir_fd);
891
if(ret < 0){
892
error(0, errno, "set_cloexec_flag");
893
exitstatus = EX_OSERR;
894
goto fallback;
895
}
896
#endif /* O_CLOEXEC */
897
}
898
899
int good_name(const struct dirent * const dirent){
900
const char * const patterns[] = { ".*", "#*#", "*~", "*.dpkg-new",
901
"*.dpkg-old", "*.dpkg-bak",
902
"*.dpkg-divert", NULL };
903
#ifdef __GNUC__
904
#pragma GCC diagnostic push
905
#pragma GCC diagnostic ignored "-Wcast-qual"
906
#endif
907
for(const char **pat = (const char **)patterns;
908
*pat != NULL; pat++){
909
#ifdef __GNUC__
910
#pragma GCC diagnostic pop
911
#endif
912
if(fnmatch(*pat, dirent->d_name, FNM_FILE_NAME | FNM_PERIOD)
913
!= FNM_NOMATCH){
914
if(debug){
915
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
916
" matching pattern %s\n", dirent->d_name, *pat);
917
}
918
return 0;
677
int dir_fd = dirfd(dir);
678
if(dir_fd >= 0){
679
ret = set_cloexec_flag(dir_fd);
680
if(ret < 0){
681
perror("set_cloexec_flag");
682
exitstatus = EXIT_FAILURE;
683
goto fallback;
919
684
}
920
685
}
921
return 1;
922
}
923
924
int numplugins = scandirat(dir_fd, ".", &direntries, good_name,
925
alphasort);
926
if(numplugins == -1){
927
error(0, errno, "Could not scan plugin dir");
928
direntries = NULL;
929
exitstatus = EX_OSERR;
930
goto fallback;
931
686
}
932
687
933
688
FD_ZERO(&rfds_all);
934
689
935
690
/* Read and execute any executable in the plugin directory*/
936
for(int i = 0; i < numplugins; i++){
937
938
int plugin_fd = openat(dir_fd, direntries[i]->d_name, O_RDONLY);
939
if(plugin_fd == -1){
940
error(0, errno, "Could not open plugin");
941
free(direntries[i]);
942
continue;
943
}
944
ret = (int)TEMP_FAILURE_RETRY(fstat(plugin_fd, &st));
945
if(ret == -1){
946
error(0, errno, "stat");
947
close(plugin_fd);
948
free(direntries[i]);
949
continue;
950
}
951
691
while(true){
692
dirst = readdir(dir);
693
694
/* All directory entries have been processed */
695
if(dirst == NULL){
696
if (errno == EBADF){
697
perror("readdir");
698
exitstatus = EXIT_FAILURE;
699
goto fallback;
700
}
701
break;
702
}
703
704
d_name_len = strlen(dirst->d_name);
705
706
/* Ignore dotfiles, backup files and other junk */
707
{
708
bool bad_name = false;
709
710
const char const *bad_prefixes[] = { ".", "#", NULL };
711
712
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
713
".dpkg-old",
714
".dpkg-divert", NULL };
715
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
716
size_t pre_len = strlen(*pre);
717
if((d_name_len >= pre_len)
718
and strncmp((dirst->d_name), *pre, pre_len) == 0){
719
if(debug){
720
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
721
" with bad prefix %s\n", dirst->d_name, *pre);
722
}
723
bad_name = true;
724
break;
725
}
726
}
727
if(bad_name){
728
continue;
729
}
730
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
731
size_t suf_len = strlen(*suf);
732
if((d_name_len >= suf_len)
733
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
734
== 0)){
735
if(debug){
736
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
737
" with bad suffix %s\n", dirst->d_name, *suf);
738
}
739
bad_name = true;
740
break;
741
}
742
}
743
744
if(bad_name){
745
continue;
746
}
747
}
748
749
char *filename;
750
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
751
if(ret < 0){
752
perror("asprintf");
753
continue;
754
}
755
756
ret = stat(filename, &st);
757
if (ret == -1){
758
perror("stat");
759
free(filename);
760
continue;
761
}
762
952
763
/* Ignore non-executable files */
953
if(not S_ISREG(st.st_mode)
954
or (TEMP_FAILURE_RETRY(faccessat(dir_fd, direntries[i]->d_name,
955
X_OK, 0)) != 0)){
764
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
956
765
if(debug){
957
fprintf(stderr, "Ignoring plugin dir entry \"%s/%s\""
958
" with bad type or mode\n",
959
plugindir != NULL ? plugindir : PDIR,
960
direntries[i]->d_name);
766
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
767
" with bad type or mode\n", filename);
961
768
}
962
close(plugin_fd);
963
free(direntries[i]);
769
free(filename);
964
770
continue;
965
771
}
966
772
967
plugin *p = getplugin(direntries[i]->d_name);
773
plugin *p = getplugin(dirst->d_name);
968
774
if(p == NULL){
969
error(0, errno, "getplugin");
970
close(plugin_fd);
971
free(direntries[i]);
775
perror("getplugin");
776
free(filename);
972
777
continue;
973
778
}
974
779
if(p->disabled){
975
780
if(debug){
976
781
fprintf(stderr, "Ignoring disabled plugin \"%s\"\n",
977
direntries[i]->d_name);
782
dirst->d_name);
978
783
}
979
close(plugin_fd);
980
free(direntries[i]);
784
free(filename);
981
785
continue;
982
786
}
983
787
{
986
790
if(g != NULL){
987
791
for(char **a = g->argv + 1; *a != NULL; a++){
988
792
if(not add_argument(p, *a)){
989
error(0, errno, "add_argument");
793
perror("add_argument");
990
794
}
991
795
}
992
796
/* Add global environment variables */
993
797
for(char **e = g->environ; *e != NULL; e++){
994
798
if(not add_environment(p, *e, false)){
995
error(0, errno, "add_environment");
799
perror("add_environment");
996
800
}
997
801
}
998
802
}
999
803
}
1000
/* If this plugin has any environment variables, we need to
1001
duplicate the environment from this process, too. */
804
/* If this plugin has any environment variables, we will call
805
using execve and need to duplicate the environment from this
806
process, too. */
1002
807
if(p->environ[0] != NULL){
1003
808
for(char **e = environ; *e != NULL; e++){
1004
809
if(not add_environment(p, *e, false)){
1005
error(0, errno, "add_environment");
810
perror("add_environment");
1006
811
}
1007
812
}
1008
813
}
1009
814
1010
815
int pipefd[2];
1011
#ifndef O_CLOEXEC
1012
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
1013
#else /* O_CLOEXEC */
1014
ret = (int)TEMP_FAILURE_RETRY(pipe2(pipefd, O_CLOEXEC));
1015
#endif /* O_CLOEXEC */
1016
if(ret == -1){
1017
error(0, errno, "pipe");
1018
exitstatus = EX_OSERR;
1019
free(direntries[i]);
1020
goto fallback;
1021
}
1022
if(pipefd[0] >= FD_SETSIZE){
1023
fprintf(stderr, "pipe()[0] (%d) >= FD_SETSIZE (%d)", pipefd[0],
1024
FD_SETSIZE);
1025
close(pipefd[0]);
1026
close(pipefd[1]);
1027
exitstatus = EX_OSERR;
1028
free(direntries[i]);
1029
goto fallback;
1030
}
1031
#ifndef O_CLOEXEC
816
ret = pipe(pipefd);
817
if (ret == -1){
818
perror("pipe");
819
exitstatus = EXIT_FAILURE;
820
goto fallback;
821
}
1032
822
/* Ask OS to automatic close the pipe on exec */
1033
823
ret = set_cloexec_flag(pipefd[0]);
1034
824
if(ret < 0){
1035
error(0, errno, "set_cloexec_flag");
1036
close(pipefd[0]);
1037
close(pipefd[1]);
1038
exitstatus = EX_OSERR;
1039
free(direntries[i]);
825
perror("set_cloexec_flag");
826
exitstatus = EXIT_FAILURE;
1040
827
goto fallback;
1041
828
}
1042
829
ret = set_cloexec_flag(pipefd[1]);
1043
830
if(ret < 0){
1044
error(0, errno, "set_cloexec_flag");
1045
close(pipefd[0]);
1046
close(pipefd[1]);
1047
exitstatus = EX_OSERR;
1048
free(direntries[i]);
831
perror("set_cloexec_flag");
832
exitstatus = EXIT_FAILURE;
1049
833
goto fallback;
1050
834
}
1051
#endif /* not O_CLOEXEC */
1052
835
/* Block SIGCHLD until process is safely in process list */
1053
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
1054
&sigchld_action.sa_mask,
1055
NULL));
836
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1056
837
if(ret < 0){
1057
error(0, errno, "sigprocmask");
1058
exitstatus = EX_OSERR;
1059
free(direntries[i]);
838
perror("sigprocmask");
839
exitstatus = EXIT_FAILURE;
1060
840
goto fallback;
1061
841
}
1062
842
/* Starting a new process to be watched */
1063
pid_t pid;
1064
do {
1065
pid = fork();
1066
} while(pid == -1 and errno == EINTR);
843
pid_t pid = fork();
1067
844
if(pid == -1){
1068
error(0, errno, "fork");
1069
TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1070
&sigchld_action.sa_mask, NULL));
1071
close(pipefd[0]);
1072
close(pipefd[1]);
1073
exitstatus = EX_OSERR;
1074
free(direntries[i]);
845
perror("fork");
846
exitstatus = EXIT_FAILURE;
1075
847
goto fallback;
1076
848
}
1077
849
if(pid == 0){
1078
850
/* this is the child process */
1079
851
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1080
852
if(ret < 0){
1081
error(0, errno, "sigaction");
1082
_exit(EX_OSERR);
853
perror("sigaction");
854
_exit(EXIT_FAILURE);
1083
855
}
1084
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
856
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1085
857
if(ret < 0){
1086
error(0, errno, "sigprocmask");
1087
_exit(EX_OSERR);
858
perror("sigprocmask");
859
_exit(EXIT_FAILURE);
1088
860
}
1089
861
1090
862
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
1091
863
if(ret == -1){
1092
error(0, errno, "dup2");
1093
_exit(EX_OSERR);
864
perror("dup2");
865
_exit(EXIT_FAILURE);
1094
866
}
1095
867
1096
if(fexecve(plugin_fd, p->argv,
1097
(p->environ[0] != NULL) ? p->environ : environ) < 0){
1098
error(0, errno, "fexecve for %s/%s",
1099
plugindir != NULL ? plugindir : PDIR,
1100
direntries[i]->d_name);
1101
_exit(EX_OSERR);
868
if(dirfd(dir) < 0){
869
/* If dir has no file descriptor, we could not set FD_CLOEXEC
870
above and must now close it manually here. */
871
closedir(dir);
872
}
873
if(p->environ[0] == NULL){
874
if(execv(filename, p->argv) < 0){
875
perror("execv");
876
_exit(EXIT_FAILURE);
877
}
878
} else {
879
if(execve(filename, p->argv, p->environ) < 0){
880
perror("execve");
881
_exit(EXIT_FAILURE);
882
}
1102
883
}
1103
884
/* no return */
1104
885
}
1105
886
/* Parent process */
1106
887
close(pipefd[1]); /* Close unused write end of pipe */
1107
close(plugin_fd);
1108
plugin *new_plugin = getplugin(direntries[i]->d_name);
1109
if(new_plugin == NULL){
1110
error(0, errno, "getplugin");
1111
ret = (int)(TEMP_FAILURE_RETRY
1112
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1113
NULL)));
888
free(filename);
889
plugin *new_plugin = getplugin(dirst->d_name);
890
if (new_plugin == NULL){
891
perror("getplugin");
892
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1114
893
if(ret < 0){
1115
error(0, errno, "sigprocmask");
894
perror("sigprocmask");
1116
895
}
1117
exitstatus = EX_OSERR;
1118
free(direntries[i]);
896
exitstatus = EXIT_FAILURE;
1119
897
goto fallback;
1120
898
}
1121
free(direntries[i]);
1122
899
1123
900
new_plugin->pid = pid;
1124
901
new_plugin->fd = pipefd[0];
1125
1126
if(debug){
1127
fprintf(stderr, "Plugin %s started (PID %" PRIdMAX ")\n",
1128
new_plugin->name, (intmax_t) (new_plugin->pid));
1129
}
1130
902
1131
903
/* Unblock SIGCHLD so signal handler can be run if this process
1132
904
has already completed */
1133
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1134
&sigchld_action.sa_mask,
1135
NULL));
905
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1136
906
if(ret < 0){
1137
error(0, errno, "sigprocmask");
1138
exitstatus = EX_OSERR;
907
perror("sigprocmask");
908
exitstatus = EXIT_FAILURE;
1139
909
goto fallback;
1140
910
}
1141
911
1142
912
FD_SET(new_plugin->fd, &rfds_all);
1143
913
1144
if(maxfd < new_plugin->fd){
914
if (maxfd < new_plugin->fd){
1145
915
maxfd = new_plugin->fd;
1146
916
}
917
1147
918
}
1148
919
1149
free(direntries);
1150
direntries = NULL;
1151
close(dir_fd);
1152
dir_fd = -1;
1153
free_plugin(getplugin(NULL));
1154
920
closedir(dir);
921
dir = NULL;
922
1155
923
for(plugin *p = plugin_list; p != NULL; p = p->next){
1156
924
if(p->pid != 0){
1157
925
break;
1162
930
free_plugin_list();
1163
931
}
1164
932
}
1165
933
1166
934
/* Main loop while running plugins exist */
1167
935
while(plugin_list){
1168
936
fd_set rfds = rfds_all;
1169
937
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
1170
if(select_ret == -1 and errno != EINTR){
1171
error(0, errno, "select");
1172
exitstatus = EX_OSERR;
938
if (select_ret == -1){
939
perror("select");
940
exitstatus = EXIT_FAILURE;
1173
941
goto fallback;
1174
942
}
1175
943
/* OK, now either a process completed, or something can be read
1176
944
from one of them */
1177
for(plugin *proc = plugin_list; proc != NULL;){
945
for(plugin *proc = plugin_list; proc != NULL; proc = proc->next){
1178
946
/* Is this process completely done? */
1179
if(proc->completed and proc->eof){
947
if(proc->eof and proc->completed){
1180
948
/* Only accept the plugin output if it exited cleanly */
1181
949
if(not WIFEXITED(proc->status)
1182
950
or WEXITSTATUS(proc->status) != 0){
1183
951
/* Bad exit by plugin */
1184
952
1185
953
if(debug){
1186
954
if(WIFEXITED(proc->status)){
1187
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1188
" status %d\n", proc->name,
1189
(intmax_t) (proc->pid),
955
fprintf(stderr, "Plugin %u exited with status %d\n",
956
(unsigned int) (proc->pid),
1190
957
WEXITSTATUS(proc->status));
1191
} else if(WIFSIGNALED(proc->status)){
1192
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1193
" signal %d: %s\n", proc->name,
1194
(intmax_t) (proc->pid),
1195
WTERMSIG(proc->status),
1196
strsignal(WTERMSIG(proc->status)));
958
} else if(WIFSIGNALED(proc->status)) {
959
fprintf(stderr, "Plugin %u killed by signal %d\n",
960
(unsigned int) (proc->pid),
961
WTERMSIG(proc->status));
962
} else if(WCOREDUMP(proc->status)){
963
fprintf(stderr, "Plugin %d dumped core\n",
964
(unsigned int) (proc->pid));
1197
965
}
1198
966
}
1199
967
1200
968
/* Remove the plugin */
1201
969
FD_CLR(proc->fd, &rfds_all);
1202
970
1203
971
/* Block signal while modifying process_list */
1204
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1205
(SIG_BLOCK,
1206
&sigchld_action.sa_mask,
1207
NULL));
972
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1208
973
if(ret < 0){
1209
error(0, errno, "sigprocmask");
1210
exitstatus = EX_OSERR;
974
perror("sigprocmask");
975
exitstatus = EXIT_FAILURE;
1211
976
goto fallback;
1212
977
}
1213
1214
plugin *next_plugin = proc->next;
1215
978
free_plugin(proc);
1216
proc = next_plugin;
1217
1218
979
/* We are done modifying process list, so unblock signal */
1219
ret = (int)(TEMP_FAILURE_RETRY
1220
(sigprocmask(SIG_UNBLOCK,
1221
&sigchld_action.sa_mask, NULL)));
980
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
981
NULL);
1222
982
if(ret < 0){
1223
error(0, errno, "sigprocmask");
1224
exitstatus = EX_OSERR;
983
perror("sigprocmask");
984
exitstatus = EXIT_FAILURE;
1225
985
goto fallback;
1226
986
}
1227
987
1228
988
if(plugin_list == NULL){
1229
989
break;
1230
990
}
1231
1232
991
continue;
1233
992
}
1234
993
1235
994
/* This process exited nicely, so print its buffer */
1236
995
1237
996
bool bret = print_out_password(proc->buffer,
1238
997
proc->buffer_length);
1239
998
if(not bret){
1240
error(0, errno, "print_out_password");
1241
exitstatus = EX_IOERR;
999
perror("print_out_password");
1000
exitstatus = EXIT_FAILURE;
1242
1001
}
1243
1002
goto fallback;
1244
1003
}
1246
1005
/* This process has not completed. Does it have any output? */
1247
1006
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1248
1007
/* This process had nothing to say at this time */
1249
proc = proc->next;
1250
1008
continue;
1251
1009
}
1252
1010
/* Before reading, make the process' data buffer large enough */
1253
1011
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1254
char *new_buffer = realloc(proc->buffer, proc->buffer_size
1255
+ (size_t) BUFFER_SIZE);
1256
if(new_buffer == NULL){
1257
error(0, errno, "malloc");
1258
exitstatus = EX_OSERR;
1012
proc->buffer = realloc(proc->buffer, proc->buffer_size
1013
+ (size_t) BUFFER_SIZE);
1014
if (proc->buffer == NULL){
1015
perror("malloc");
1016
exitstatus = EXIT_FAILURE;
1259
1017
goto fallback;
1260
1018
}
1261
proc->buffer = new_buffer;
1262
1019
proc->buffer_size += BUFFER_SIZE;
1263
1020
}
1264
1021
/* Read from the process */
1265
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1266
proc->buffer
1267
+ proc->buffer_length,
1268
BUFFER_SIZE));
1269
if(sret < 0){
1022
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1023
BUFFER_SIZE);
1024
if(ret < 0){
1270
1025
/* Read error from this process; ignore the error */
1271
proc = proc->next;
1272
1026
continue;
1273
1027
}
1274
if(sret == 0){
1028
if(ret == 0){
1275
1029
/* got EOF */
1276
1030
proc->eof = true;
1277
1031
} else {
1278
proc->buffer_length += (size_t) sret;
1032
proc->buffer_length += (size_t) ret;
1279
1033
}
1280
1034
}
1281
1035
}
1282
1283
1036
1037
1284
1038
fallback:
1285
1039
1286
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1287
and exitstatus != EX_OK)){
1040
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1288
1041
/* Fallback if all plugins failed, none are found or an error
1289
1042
occured */
1290
1043
bool bret;
1291
1044
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1292
1045
char *passwordbuffer = getpass("Password: ");
1293
size_t len = strlen(passwordbuffer);
1294
/* Strip trailing newline */
1295
if(len > 0 and passwordbuffer[len-1] == '\n'){
1296
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1297
len--;
1298
}
1299
bret = print_out_password(passwordbuffer, len);
1046
bret = print_out_password(passwordbuffer, strlen(passwordbuffer));
1300
1047
if(not bret){
1301
error(0, errno, "print_out_password");
1302
exitstatus = EX_IOERR;
1048
perror("print_out_password");
1049
exitstatus = EXIT_FAILURE;
1303
1050
}
1304
1051
}
1305
1052
1306
1053
/* Restore old signal handler */
1307
1054
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1308
1055
if(ret == -1){
1309
error(0, errno, "sigaction");
1310
exitstatus = EX_OSERR;
1056
perror("sigaction");
1057
exitstatus = EXIT_FAILURE;
1311
1058
}
1312
1059
1313
1060
if(custom_argv != NULL){
1314
1061
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1315
1062
free(*arg);
1317
1064
free(custom_argv);
1318
1065
}
1319
1066
1320
free(direntries);
1321
1322
if(dir_fd != -1){
1323
close(dir_fd);
1067
if(dir != NULL){
1068
closedir(dir);
1324
1069
}
1325
1070
1326
/* Kill the processes */
1071
/* Free the process list and kill the processes */
1327
1072
for(plugin *p = plugin_list; p != NULL; p = p->next){
1328
1073
if(p->pid != 0){
1329
1074
close(p->fd);
1330
1075
ret = kill(p->pid, SIGTERM);
1331
1076
if(ret == -1 and errno != ESRCH){
1332
1077
/* Set-uid proccesses might not get closed */
1333
error(0, errno, "kill");
1078
perror("kill");
1334
1079
}
1335
1080
}
1336
1081
}
1337
1082
1338
1083
/* Wait for any remaining child processes to terminate */
1339
do {
1084
do{
1340
1085
ret = wait(NULL);
1341
1086
} while(ret >= 0);
1342
1087
if(errno != ECHILD){
1343
error(0, errno, "wait");
1088
perror("wait");
1344
1089
}
1345
1090
1346
1091
free_plugin_list();
1347
1092
1348
1093
free(plugindir);
1349
free(pluginhelperdir);
1350
1094
free(argfile);
1351
1095
1352
1096
return exitstatus;
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0