To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugbasedclient.c
- browse files at revision 35
- compare with another revision
- download diff
- download tarball
- view history from revision 35
- Committer: Teddy Hogeborn
- Date: 2008-08-02 10:48:24 UTC
- Revision ID: teddy@fukt.bsnet.se-20080802104824-fx0miwp9o4g9r31e
* plugbasedclient.c (struct process): New fields "eof", "completed",
and "status".
(handle_sigchld): New function.
(main): Initialize "dir" to NULL to only closedir() it if necessary.
Move "process_list" to be a global variable to be accessible
by "handle_sigchld". Make "handle_sigchld" handle SIGCHLD.
Remove redundant check for NULL "dir". Free "filename" when
no longer used. Block SIGCHLD around fork()/exec().
Restore normal signals in child. Only loop while running
processes exist. Print process buffer when the process is
done and it has emitted EOF, not when it only emits EOF.
Remove processes from list which exit non-cleanly. In
cleaning up, closedir() if necessary. Bug fix: set next
pointer correctly when freeing process list.
* plugins.d/passprompt.c (main): Do not ignore SIGQUIT.
and "status".
(handle_sigchld): New function.
(main): Initialize "dir" to NULL to only closedir() it if necessary.
Move "process_list" to be a global variable to be accessible
by "handle_sigchld". Make "handle_sigchld" handle SIGCHLD.
Remove redundant check for NULL "dir". Free "filename" when
no longer used. Block SIGCHLD around fork()/exec().
Restore normal signals in child. Only loop while running
processes exist. Print process buffer when the process is
done and it has emitted EOF, not when it only emits EOF.
Remove processes from list which exit non-cleanly. In
cleaning up, closedir() if necessary. Bug fix: set next
pointer correctly when freeing process list.
* plugins.d/passprompt.c (main): Do not ignore SIGQUIT.
- files added:
- ca.pem
- files removed:
- .bzr-builddeb
- debian
- debian/po
- files renamed:
- plugin-runner.c => plugbasedclient.c
- plugins.d/mandos-client.c => plugins.d/mandosclient.c
- plugins.d/password-prompt.c => plugins.d/passprompt.c
- mandos.conf => server.conf
- mandos => server.py
- files modified:
- Makefile
added
removed
plugbasedclient.c
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008,2009 Teddy Hogeborn
6
* Copyright © 2008,2009 Björn Påhlsson
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
7
6
*
8
7
* This program is free software: you can redistribute it and/or
9
8
* modify it under the terms of the GNU General Public License as
22
21
* Contact the authors at <mandos@fukt.bsnet.se>.
23
22
*/
24
23
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
26
asprintf(), O_CLOEXEC */
27
#include <stddef.h> /* size_t, NULL */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
29
realloc() */
30
#include <stdbool.h> /* bool, true, false */
31
#include <stdio.h> /* perror, fileno(), fprintf(),
24
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY() */
25
26
#include <stdio.h> /* popen(), fileno(), fprintf(),
32
27
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, fdopendir(), stat(), struct
34
stat, waitpid(), WIFEXITED(),
35
WEXITSTATUS(), wait(), pid_t,
36
uid_t, gid_t, getuid(), getgid(),
37
dirfd() */
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
FD_SET(), FD_ISSET(), FD_CLR */
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS(), WTERMSIG(),
42
WCOREDUMP() */
28
#include <iso646.h> /* and, or, not */
29
#include <sys/types.h> /* DIR, opendir(), stat(),
30
struct stat, waitpid(),
31
WIFEXITED(), WEXITSTATUS(),
32
wait() */
33
#include <sys/wait.h> /* wait() */
34
#include <dirent.h> /* DIR, struct dirent, opendir(),
35
readdir(), closedir() */
43
36
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
44
#include <iso646.h> /* and, or, not */
45
#include <dirent.h> /* DIR, struct dirent, fdopendir(),
46
readdir(), closedir(), dirfd() */
47
37
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
48
fcntl(), setuid(), setgid(),
49
F_GETFD, F_SETFD, FD_CLOEXEC,
50
access(), pipe(), fork(), close()
51
dup2(), STDOUT_FILENO, _exit(),
52
execv(), write(), read(),
53
close() */
54
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
55
FD_CLOEXEC */
56
#include <string.h> /* strsep, strlen(), asprintf(),
57
strsignal(), strcmp(), strncmp() */
38
fcntl() */
39
#include <fcntl.h> /* fcntl() */
40
#include <stddef.h> /* NULL */
41
#include <stdlib.h> /* EXIT_FAILURE */
42
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
43
FD_SET(), FD_ISSET() */
44
#include <string.h> /* strlen(), strcpy(), strcat() */
45
#include <stdbool.h> /* true */
46
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
47
WEXITSTATUS() */
58
48
#include <errno.h> /* errno */
59
#include <argp.h> /* struct argp_option, struct
60
argp_state, struct argp,
61
argp_parse(), ARGP_ERR_UNKNOWN,
62
ARGP_KEY_END, ARGP_KEY_ARG,
63
error_t */
64
#include <signal.h> /* struct sigaction, sigemptyset(),
65
sigaddset(), sigaction(),
66
sigprocmask(), SIG_BLOCK, SIGCHLD,
67
SIG_UNBLOCK, kill(), sig_atomic_t
68
*/
69
#include <errno.h> /* errno, EBADF */
70
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
71
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
72
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
73
74
#define BUFFER_SIZE 256
75
76
#define PDIR "/lib/mandos/plugins.d"
77
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
78
79
const char *argp_program_version = "plugin-runner " VERSION;
80
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
81
82
typedef struct plugin{
83
char *name; /* can be NULL or any plugin name */
84
char **argv;
85
int argc;
86
char **environ;
87
int envc;
88
bool disabled;
89
90
/* Variables used for running processes*/
49
#include <argp.h> /* struct argp_option,
50
struct argp_state, struct argp,
51
argp_parse() */
52
53
struct process;
54
55
typedef struct process{
91
56
pid_t pid;
92
57
int fd;
93
58
char *buffer;
94
59
size_t buffer_size;
95
60
size_t buffer_length;
96
61
bool eof;
97
volatile sig_atomic_t completed;
62
bool completed;
98
63
int status;
64
struct process *next;
65
} process;
66
67
typedef struct plugin{
68
char *name; /* can be NULL or any plugin name */
69
char **argv;
70
int argc;
71
bool disabled;
99
72
struct plugin *next;
100
73
} plugin;
101
74
102
static plugin *plugin_list = NULL;
103
104
/* Gets an existing plugin based on name,
105
or if none is found, creates a new one */
106
static plugin *getplugin(char *name){
107
/* Check for existing plugin with that name */
108
for(plugin *p = plugin_list; p != NULL; p = p->next){
109
if((p->name == name)
110
or (p->name and name and (strcmp(p->name, name) == 0))){
75
plugin *getplugin(char *name, plugin **plugin_list){
76
for (plugin *p = *plugin_list; p != NULL; p = p->next){
77
if ((p->name == name)
78
or (p->name and name and (strcmp(p->name, name) == 0))){
111
79
return p;
112
80
}
113
81
}
114
82
/* Create a new plugin */
115
plugin *new_plugin = NULL;
116
do {
117
new_plugin = malloc(sizeof(plugin));
118
} while(new_plugin == NULL and errno == EINTR);
119
if(new_plugin == NULL){
120
return NULL;
121
}
122
char *copy_name = NULL;
123
if(name != NULL){
124
do {
125
copy_name = strdup(name);
126
} while(copy_name == NULL and errno == EINTR);
127
if(copy_name == NULL){
128
int e = errno;
129
free(new_plugin);
130
errno = e;
131
return NULL;
132
}
133
}
134
135
*new_plugin = (plugin){ .name = copy_name,
136
.argc = 1,
137
.disabled = false,
138
.next = plugin_list };
139
140
do {
141
new_plugin->argv = malloc(sizeof(char *) * 2);
142
} while(new_plugin->argv == NULL and errno == EINTR);
143
if(new_plugin->argv == NULL){
144
int e = errno;
145
free(copy_name);
146
free(new_plugin);
147
errno = e;
148
return NULL;
149
}
150
new_plugin->argv[0] = copy_name;
83
plugin *new_plugin = malloc(sizeof(plugin));
84
if (new_plugin == NULL){
85
perror("malloc");
86
exit(EXIT_FAILURE);
87
}
88
new_plugin->name = name;
89
new_plugin->argv = malloc(sizeof(char *) * 2);
90
if (new_plugin->argv == NULL){
91
perror("malloc");
92
exit(EXIT_FAILURE);
93
}
94
new_plugin->argv[0] = name;
151
95
new_plugin->argv[1] = NULL;
152
153
do {
154
new_plugin->environ = malloc(sizeof(char *));
155
} while(new_plugin->environ == NULL and errno == EINTR);
156
if(new_plugin->environ == NULL){
157
int e = errno;
158
free(copy_name);
159
free(new_plugin->argv);
160
free(new_plugin);
161
errno = e;
162
return NULL;
163
}
164
new_plugin->environ[0] = NULL;
165
96
new_plugin->argc = 1;
97
new_plugin->disabled = false;
98
new_plugin->next = *plugin_list;
166
99
/* Append the new plugin to the list */
167
plugin_list = new_plugin;
100
*plugin_list = new_plugin;
168
101
return new_plugin;
169
102
}
170
103
171
/* Helper function for add_argument and add_environment */
172
static bool add_to_char_array(const char *new, char ***array,
173
int *len){
174
/* Resize the pointed-to array to hold one more pointer */
175
do {
176
*array = realloc(*array, sizeof(char *)
177
* (size_t) ((*len) + 2));
178
} while(*array == NULL and errno == EINTR);
179
/* Malloc check */
180
if(*array == NULL){
181
return false;
182
}
183
/* Make a copy of the new string */
184
char *copy;
185
do {
186
copy = strdup(new);
187
} while(copy == NULL and errno == EINTR);
188
if(copy == NULL){
189
return false;
190
}
191
/* Insert the copy */
192
(*array)[*len] = copy;
193
(*len)++;
194
/* Add a new terminating NULL pointer to the last element */
195
(*array)[*len] = NULL;
196
return true;
197
}
198
199
/* Add to a plugin's argument vector */
200
static bool add_argument(plugin *p, const char *arg){
201
if(p == NULL){
202
return false;
203
}
204
return add_to_char_array(arg, &(p->argv), &(p->argc));
205
}
206
207
/* Add to a plugin's environment */
208
static bool add_environment(plugin *p, const char *def, bool replace){
209
if(p == NULL){
210
return false;
211
}
212
/* namelen = length of name of environment variable */
213
size_t namelen = (size_t)(strchrnul(def, '=') - def);
214
/* Search for this environment variable */
215
for(char **e = p->environ; *e != NULL; e++){
216
if(strncmp(*e, def, namelen + 1) == 0){
217
/* It already exists */
218
if(replace){
219
char *new;
220
do {
221
new = realloc(*e, strlen(def) + 1);
222
} while(new == NULL and errno == EINTR);
223
if(new == NULL){
224
return false;
225
}
226
*e = new;
227
strcpy(*e, def);
228
}
229
return true;
230
}
231
}
232
return add_to_char_array(def, &(p->environ), &(p->envc));
104
void addargument(plugin *p, char *arg){
105
p->argv[p->argc] = arg;
106
p->argv = realloc(p->argv, sizeof(char *) * (size_t)(p->argc + 2));
107
if (p->argv == NULL){
108
perror("malloc");
109
exit(EXIT_FAILURE);
110
}
111
p->argc++;
112
p->argv[p->argc] = NULL;
233
113
}
234
114
235
115
/*
236
116
* Based on the example in the GNU LibC manual chapter 13.13 "File
237
117
* Descriptor Flags".
238
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
118
* *Note File Descriptor Flags:(libc)Descriptor Flags.
239
119
*/
240
static int set_cloexec_flag(int fd){
241
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
120
int set_cloexec_flag(int fd)
121
{
122
int ret = fcntl(fd, F_GETFD, 0);
242
123
/* If reading the flags failed, return error indication now. */
243
124
if(ret < 0){
244
125
return ret;
245
126
}
246
127
/* Store modified flag word in the descriptor. */
247
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
248
ret | FD_CLOEXEC));
128
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
249
129
}
250
130
251
252
/* Mark processes as completed when they exit, and save their exit
131
#define BUFFER_SIZE 256
132
133
const char *argp_program_version = "plugbasedclient 0.9";
134
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
135
136
process *process_list = NULL;
137
138
/* Mark a process as completed when it exits, and save its exit
253
139
status. */
254
static void handle_sigchld(__attribute__((unused)) int sig){
255
int old_errno = errno;
256
while(true){
257
plugin *proc = plugin_list;
258
int status;
259
pid_t pid = waitpid(-1, &status, WNOHANG);
260
if(pid == 0){
261
/* Only still running child processes */
262
break;
263
}
264
if(pid == -1){
265
if(errno == ECHILD){
266
/* No child processes */
267
break;
268
}
269
perror("waitpid");
270
}
271
272
/* A child exited, find it in process_list */
273
while(proc != NULL and proc->pid != pid){
274
proc = proc->next;
275
}
276
if(proc == NULL){
277
/* Process not found in process list */
278
continue;
279
}
280
proc->status = status;
281
proc->completed = 1;
282
}
283
errno = old_errno;
284
}
285
286
/* Prints out a password to stdout */
287
static bool print_out_password(const char *buffer, size_t length){
288
ssize_t ret;
289
for(size_t written = 0; written < length; written += (size_t)ret){
290
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
291
length - written));
292
if(ret < 0){
293
return false;
294
}
295
}
296
return true;
297
}
298
299
/* Removes and free a plugin from the plugin list */
300
static void free_plugin(plugin *plugin_node){
301
302
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
303
free(*arg);
304
}
305
free(plugin_node->argv);
306
for(char **env = plugin_node->environ; *env != NULL; env++){
307
free(*env);
308
}
309
free(plugin_node->environ);
310
free(plugin_node->buffer);
311
312
/* Removes the plugin from the singly-linked list */
313
if(plugin_node == plugin_list){
314
/* First one - simple */
315
plugin_list = plugin_list->next;
316
} else {
317
/* Second one or later */
318
for(plugin *p = plugin_list; p != NULL; p = p->next){
319
if(p->next == plugin_node){
320
p->next = plugin_node->next;
321
break;
322
}
323
}
324
}
325
326
free(plugin_node);
327
}
328
329
static void free_plugin_list(void){
330
while(plugin_list != NULL){
331
free_plugin(plugin_list);
332
}
140
void handle_sigchld(__attribute__((unused)) int sig){
141
process *proc = process_list;
142
int status;
143
pid_t pid = wait(&status);
144
while(proc != NULL and proc->pid != pid){
145
proc = proc->next;
146
}
147
if(proc == NULL){
148
/* Process not found in process list */
149
return;
150
}
151
proc->status = status;
152
proc->completed = true;
333
153
}
334
154
335
155
int main(int argc, char *argv[]){
336
char *plugindir = NULL;
337
char *argfile = NULL;
338
FILE *conffp;
156
const char *plugindir = "/conf/conf.d/mandos/plugins.d";
339
157
size_t d_name_len;
340
158
DIR *dir = NULL;
341
159
struct dirent *dirst;
342
160
struct stat st;
343
161
fd_set rfds_all;
344
162
int ret, maxfd = 0;
345
ssize_t sret;
346
uid_t uid = 65534;
347
gid_t gid = 65534;
348
163
bool debug = false;
349
164
int exitstatus = EXIT_SUCCESS;
350
struct sigaction old_sigchld_action;
351
struct sigaction sigchld_action = { .sa_handler = handle_sigchld,
352
.sa_flags = SA_NOCLDSTOP };
353
char **custom_argv = NULL;
354
int custom_argc = 0;
355
165
356
166
/* Establish a signal handler */
167
struct sigaction old_sigchld_action,
168
sigchld_action = { .sa_handler = handle_sigchld,
169
.sa_flags = SA_NOCLDSTOP };
357
170
sigemptyset(&sigchld_action.sa_mask);
358
171
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
359
if(ret == -1){
172
if(ret < 0){
360
173
perror("sigaddset");
361
exitstatus = EX_OSERR;
362
goto fallback;
174
exit(EXIT_FAILURE);
363
175
}
364
176
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
365
if(ret == -1){
177
if(ret < 0){
366
178
perror("sigaction");
367
exitstatus = EX_OSERR;
368
goto fallback;
179
exit(EXIT_FAILURE);
369
180
}
370
181
371
182
/* The options we understand. */
373
184
{ .name = "global-options", .key = 'g',
374
185
.arg = "OPTION[,OPTION[,...]]",
375
186
.doc = "Options passed to all plugins" },
376
{ .name = "global-env", .key = 'G',
377
.arg = "VAR=value",
378
.doc = "Environment variable passed to all plugins" },
379
187
{ .name = "options-for", .key = 'o',
380
188
.arg = "PLUGIN:OPTION[,OPTION[,...]]",
381
189
.doc = "Options passed only to specified plugin" },
382
{ .name = "env-for", .key = 'E',
383
.arg = "PLUGIN:ENV=value",
384
.doc = "Environment variable passed to specified plugin" },
385
190
{ .name = "disable", .key = 'd',
386
191
.arg = "PLUGIN",
387
192
.doc = "Disable a specific plugin", .group = 1 },
388
{ .name = "enable", .key = 'e',
389
.arg = "PLUGIN",
390
.doc = "Enable a specific plugin", .group = 1 },
391
193
{ .name = "plugin-dir", .key = 128,
392
194
.arg = "DIRECTORY",
393
195
.doc = "Specify a different plugin directory", .group = 2 },
394
{ .name = "config-file", .key = 129,
395
.arg = "FILE",
396
.doc = "Specify a different configuration file", .group = 2 },
397
{ .name = "userid", .key = 130,
398
.arg = "ID", .flags = 0,
399
.doc = "User ID the plugins will run as", .group = 3 },
400
{ .name = "groupid", .key = 131,
401
.arg = "ID", .flags = 0,
402
.doc = "Group ID the plugins will run as", .group = 3 },
403
{ .name = "debug", .key = 132,
404
.doc = "Debug mode", .group = 4 },
405
/*
406
* These reproduce what we would get without ARGP_NO_HELP
407
*/
408
{ .name = "help", .key = '?',
409
.doc = "Give this help list", .group = -1 },
410
{ .name = "usage", .key = -3,
411
.doc = "Give a short usage message", .group = -1 },
412
{ .name = "version", .key = 'V',
413
.doc = "Print program version", .group = -1 },
196
{ .name = "debug", .key = 129,
197
.doc = "Debug mode", .group = 3 },
414
198
{ .name = NULL }
415
199
};
416
200
417
error_t parse_opt(int key, char *arg, struct argp_state *state){
418
errno = 0;
419
switch(key){
420
char *tmp;
421
intmax_t tmpmax;
422
case 'g': /* --global-options */
423
{
424
char *plugin_option;
425
while((plugin_option = strsep(&arg, ",")) != NULL){
426
if(not add_argument(getplugin(NULL), plugin_option)){
427
break;
428
}
429
}
430
}
431
break;
432
case 'G': /* --global-env */
433
add_environment(getplugin(NULL), arg, true);
434
break;
435
case 'o': /* --options-for */
436
{
437
char *option_list = strchr(arg, ':');
438
if(option_list == NULL){
439
argp_error(state, "No colon in \"%s\"", arg);
440
errno = EINVAL;
441
break;
442
}
443
*option_list = '\0';
444
option_list++;
445
if(arg[0] == '\0'){
446
argp_error(state, "Empty plugin name");
447
errno = EINVAL;
448
break;
449
}
450
char *option;
451
while((option = strsep(&option_list, ",")) != NULL){
452
if(not add_argument(getplugin(arg), option)){
453
break;
454
}
455
}
456
}
457
break;
458
case 'E': /* --env-for */
459
{
460
char *envdef = strchr(arg, ':');
461
if(envdef == NULL){
462
argp_error(state, "No colon in \"%s\"", arg);
463
errno = EINVAL;
464
break;
465
}
466
*envdef = '\0';
467
envdef++;
468
if(arg[0] == '\0'){
469
argp_error(state, "Empty plugin name");
470
errno = EINVAL;
471
break;
472
}
473
add_environment(getplugin(arg), envdef, true);
474
}
475
break;
476
case 'd': /* --disable */
477
{
478
plugin *p = getplugin(arg);
479
if(p != NULL){
480
p->disabled = true;
481
}
482
}
483
break;
484
case 'e': /* --enable */
485
{
486
plugin *p = getplugin(arg);
487
if(p != NULL){
488
p->disabled = false;
489
}
490
}
491
break;
492
case 128: /* --plugin-dir */
493
free(plugindir);
494
plugindir = strdup(arg);
495
break;
496
case 129: /* --config-file */
497
/* This is already done by parse_opt_config_file() */
498
break;
499
case 130: /* --userid */
500
tmpmax = strtoimax(arg, &tmp, 10);
501
if(errno != 0 or tmp == arg or *tmp != '\0'
502
or tmpmax != (uid_t)tmpmax){
503
argp_error(state, "Bad user ID number: \"%s\", using %"
504
PRIdMAX, arg, (intmax_t)uid);
505
break;
506
}
507
uid = (uid_t)tmpmax;
508
break;
509
case 131: /* --groupid */
510
tmpmax = strtoimax(arg, &tmp, 10);
511
if(errno != 0 or tmp == arg or *tmp != '\0'
512
or tmpmax != (gid_t)tmpmax){
513
argp_error(state, "Bad group ID number: \"%s\", using %"
514
PRIdMAX, arg, (intmax_t)gid);
515
break;
516
}
517
gid = (gid_t)tmpmax;
518
break;
519
case 132: /* --debug */
201
error_t parse_opt (int key, char *arg, struct argp_state *state) {
202
/* Get the INPUT argument from `argp_parse', which we know is a
203
pointer to our plugin list pointer. */
204
plugin **plugins = state->input;
205
switch (key) {
206
case 'g':
207
if (arg != NULL){
208
char *p = strtok(arg, ",");
209
do{
210
addargument(getplugin(NULL, plugins), p);
211
p = strtok(NULL, ",");
212
} while (p);
213
}
214
break;
215
case 'o':
216
if (arg != NULL){
217
char *name = strtok(arg, ":");
218
char *p = strtok(NULL, ":");
219
if(p){
220
p = strtok(p, ",");
221
do{
222
addargument(getplugin(name, plugins), p);
223
p = strtok(NULL, ",");
224
} while (p);
225
}
226
}
227
break;
228
case 'd':
229
if (arg != NULL){
230
getplugin(arg, plugins)->disabled = true;
231
}
232
break;
233
case 128:
234
plugindir = arg;
235
break;
236
case 129:
520
237
debug = true;
521
238
break;
522
/*
523
* These reproduce what we would get without ARGP_NO_HELP
524
*/
525
case '?': /* --help */
526
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
527
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
528
case -3: /* --usage */
529
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
530
argp_state_help(state, state->out_stream,
531
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
532
case 'V': /* --version */
533
fprintf(state->out_stream, "%s\n", argp_program_version);
534
exit(EXIT_SUCCESS);
535
break;
536
/*
537
* When adding more options before this line, remember to also add a
538
* "case" to the "parse_opt_config_file" function below.
539
*/
540
case ARGP_KEY_ARG:
541
/* Cryptsetup always passes an argument, which is an empty
542
string if "none" was specified in /etc/crypttab. So if
543
argument was empty, we ignore it silently. */
544
if(arg[0] == '\0'){
545
break;
546
}
547
default:
548
return ARGP_ERR_UNKNOWN;
549
}
550
return errno; /* Set to 0 at start */
551
}
552
553
/* This option parser is the same as parse_opt() above, except it
554
ignores everything but the --config-file option. */
555
error_t parse_opt_config_file(int key, char *arg,
556
__attribute__((unused))
557
struct argp_state *state){
558
errno = 0;
559
switch(key){
560
case 'g': /* --global-options */
561
case 'G': /* --global-env */
562
case 'o': /* --options-for */
563
case 'E': /* --env-for */
564
case 'd': /* --disable */
565
case 'e': /* --enable */
566
case 128: /* --plugin-dir */
567
break;
568
case 129: /* --config-file */
569
free(argfile);
570
argfile = strdup(arg);
571
break;
572
case 130: /* --userid */
573
case 131: /* --groupid */
574
case 132: /* --debug */
575
case '?': /* --help */
576
case -3: /* --usage */
577
case 'V': /* --version */
578
case ARGP_KEY_ARG:
579
break;
580
default:
581
return ARGP_ERR_UNKNOWN;
582
}
583
return errno;
584
}
585
586
struct argp argp = { .options = options,
587
.parser = parse_opt_config_file,
239
case ARGP_KEY_ARG:
240
argp_usage (state);
241
break;
242
case ARGP_KEY_END:
243
break;
244
default:
245
return ARGP_ERR_UNKNOWN;
246
}
247
return 0;
248
}
249
250
plugin *plugin_list = NULL;
251
252
struct argp argp = { .options = options, .parser = parse_opt,
588
253
.args_doc = "",
589
254
.doc = "Mandos plugin runner -- Run plugins" };
590
255
591
/* Parse using parse_opt_config_file() in order to get the custom
592
config file location, if any. */
593
ret = argp_parse(&argp, argc, argv,
594
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
595
NULL, NULL);
596
switch(ret){
597
case 0:
598
break;
599
case ENOMEM:
600
default:
601
errno = ret;
602
perror("argp_parse");
603
exitstatus = EX_OSERR;
604
goto fallback;
605
case EINVAL:
606
exitstatus = EX_USAGE;
607
goto fallback;
608
}
609
610
/* Reset to the normal argument parser */
611
argp.parser = parse_opt;
612
613
/* Open the configfile if available */
614
if(argfile == NULL){
615
conffp = fopen(AFILE, "r");
616
} else {
617
conffp = fopen(argfile, "r");
618
}
619
if(conffp != NULL){
620
char *org_line = NULL;
621
char *p, *arg, *new_arg, *line;
622
size_t size = 0;
623
const char whitespace_delims[] = " \r\t\f\v\n";
624
const char comment_delim[] = "#";
625
626
custom_argc = 1;
627
custom_argv = malloc(sizeof(char*) * 2);
628
if(custom_argv == NULL){
629
perror("malloc");
630
exitstatus = EX_OSERR;
631
goto fallback;
632
}
633
custom_argv[0] = argv[0];
634
custom_argv[1] = NULL;
635
636
/* for each line in the config file, strip whitespace and ignore
637
commented text */
638
while(true){
639
sret = getline(&org_line, &size, conffp);
640
if(sret == -1){
641
break;
642
}
643
644
line = org_line;
645
arg = strsep(&line, comment_delim);
646
while((p = strsep(&arg, whitespace_delims)) != NULL){
647
if(p[0] == '\0'){
648
continue;
649
}
650
new_arg = strdup(p);
651
if(new_arg == NULL){
652
perror("strdup");
653
exitstatus = EX_OSERR;
654
free(org_line);
655
goto fallback;
656
}
657
658
custom_argc += 1;
659
custom_argv = realloc(custom_argv, sizeof(char *)
660
* ((unsigned int) custom_argc + 1));
661
if(custom_argv == NULL){
662
perror("realloc");
663
exitstatus = EX_OSERR;
664
free(org_line);
665
goto fallback;
666
}
667
custom_argv[custom_argc-1] = new_arg;
668
custom_argv[custom_argc] = NULL;
669
}
670
}
671
do {
672
ret = fclose(conffp);
673
} while(ret == EOF and errno == EINTR);
674
if(ret == EOF){
675
perror("fclose");
676
exitstatus = EX_IOERR;
677
goto fallback;
678
}
679
free(org_line);
680
} else {
681
/* Check for harmful errors and go to fallback. Other errors might
682
not affect opening plugins */
683
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
684
perror("fopen");
685
exitstatus = EX_OSERR;
686
goto fallback;
687
}
688
}
689
/* If there were any arguments from the configuration file, pass
690
them to parser as command line arguments */
691
if(custom_argv != NULL){
692
ret = argp_parse(&argp, custom_argc, custom_argv,
693
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
694
NULL, NULL);
695
switch(ret){
696
case 0:
697
break;
698
case ENOMEM:
699
default:
700
errno = ret;
701
perror("argp_parse");
702
exitstatus = EX_OSERR;
703
goto fallback;
704
case EINVAL:
705
exitstatus = EX_CONFIG;
706
goto fallback;
707
}
708
}
709
710
/* Parse actual command line arguments, to let them override the
711
config file */
712
ret = argp_parse(&argp, argc, argv,
713
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
714
NULL, NULL);
715
switch(ret){
716
case 0:
717
break;
718
case ENOMEM:
719
default:
720
errno = ret;
721
perror("argp_parse");
722
exitstatus = EX_OSERR;
723
goto fallback;
724
case EINVAL:
725
exitstatus = EX_USAGE;
726
goto fallback;
727
}
256
argp_parse (&argp, argc, argv, 0, 0, &plugin_list);
728
257
729
258
if(debug){
730
259
for(plugin *p = plugin_list; p != NULL; p=p->next){
733
262
for(char **a = p->argv; *a != NULL; a++){
734
263
fprintf(stderr, "\tArg: %s\n", *a);
735
264
}
736
fprintf(stderr, "...and %d environment variables\n", p->envc);
737
for(char **a = p->environ; *a != NULL; a++){
738
fprintf(stderr, "\t%s\n", *a);
739
}
740
265
}
741
266
}
742
267
743
/* Strip permissions down to nobody */
744
setgid(gid);
745
if(ret == -1){
746
perror("setgid");
747
}
748
ret = setuid(uid);
749
if(ret == -1){
750
perror("setuid");
268
dir = opendir(plugindir);
269
if(dir == NULL){
270
perror("Could not open plugin dir");
271
exitstatus = EXIT_FAILURE;
272
goto end;
751
273
}
752
274
753
/* Open plugin directory with close_on_exec flag */
275
/* Set the FD_CLOEXEC flag on the directory, if possible */
754
276
{
755
int dir_fd = -1;
756
if(plugindir == NULL){
757
dir_fd = open(PDIR, O_RDONLY |
758
#ifdef O_CLOEXEC
759
O_CLOEXEC
760
#else /* not O_CLOEXEC */
761
0
762
#endif /* not O_CLOEXEC */
763
);
764
} else {
765
dir_fd = open(plugindir, O_RDONLY |
766
#ifdef O_CLOEXEC
767
O_CLOEXEC
768
#else /* not O_CLOEXEC */
769
0
770
#endif /* not O_CLOEXEC */
771
);
772
}
773
if(dir_fd == -1){
774
perror("Could not open plugin dir");
775
exitstatus = EX_UNAVAILABLE;
776
goto fallback;
777
}
778
779
#ifndef O_CLOEXEC
780
/* Set the FD_CLOEXEC flag on the directory */
781
ret = set_cloexec_flag(dir_fd);
782
if(ret < 0){
783
perror("set_cloexec_flag");
784
TEMP_FAILURE_RETRY(close(dir_fd));
785
exitstatus = EX_OSERR;
786
goto fallback;
787
}
788
#endif /* O_CLOEXEC */
789
790
dir = fdopendir(dir_fd);
791
if(dir == NULL){
792
perror("Could not open plugin dir");
793
TEMP_FAILURE_RETRY(close(dir_fd));
794
exitstatus = EX_OSERR;
795
goto fallback;
277
int dir_fd = dirfd(dir);
278
if(dir_fd >= 0){
279
ret = set_cloexec_flag(dir_fd);
280
if(ret < 0){
281
perror("set_cloexec_flag");
282
exitstatus = EXIT_FAILURE;
283
goto end;
284
}
796
285
}
797
286
}
798
287
799
288
FD_ZERO(&rfds_all);
800
289
801
/* Read and execute any executable in the plugin directory*/
802
290
while(true){
803
do {
804
dirst = readdir(dir);
805
} while(dirst == NULL and errno == EINTR);
291
dirst = readdir(dir);
806
292
807
/* All directory entries have been processed */
293
// All directory entries have been processed
808
294
if(dirst == NULL){
809
if(errno == EBADF){
810
perror("readdir");
811
exitstatus = EX_IOERR;
812
goto fallback;
813
}
814
295
break;
815
296
}
816
297
817
298
d_name_len = strlen(dirst->d_name);
818
299
819
/* Ignore dotfiles, backup files and other junk */
300
// Ignore dotfiles, backup files and other junk
820
301
{
821
302
bool bad_name = false;
822
303
824
305
825
306
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
826
307
".dpkg-old",
827
".dpkg-bak",
828
308
".dpkg-divert", NULL };
829
309
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
830
310
size_t pre_len = strlen(*pre);
838
318
break;
839
319
}
840
320
}
321
841
322
if(bad_name){
842
323
continue;
843
324
}
325
844
326
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
845
327
size_t suf_len = strlen(*suf);
846
328
if((d_name_len >= suf_len)
847
and (strcmp((dirst->d_name) + d_name_len-suf_len, *suf)
329
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
848
330
== 0)){
849
331
if(debug){
850
332
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
860
342
}
861
343
}
862
344
863
char *filename;
864
if(plugindir == NULL){
865
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, PDIR "/%s",
866
dirst->d_name));
867
} else {
868
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, "%s/%s",
869
plugindir,
870
dirst->d_name));
871
}
872
if(ret < 0){
873
perror("asprintf");
874
continue;
875
}
876
877
ret = (int)TEMP_FAILURE_RETRY(stat(filename, &st));
878
if(ret == -1){
879
perror("stat");
880
free(filename);
881
continue;
882
}
883
884
/* Ignore non-executable files */
885
if(not S_ISREG(st.st_mode)
886
or (TEMP_FAILURE_RETRY(access(filename, X_OK)) != 0)){
345
char *filename = malloc(d_name_len + strlen(plugindir) + 2);
346
if (filename == NULL){
347
perror("malloc");
348
exitstatus = EXIT_FAILURE;
349
goto end;
350
}
351
strcpy(filename, plugindir); /* Spurious warning */
352
strcat(filename, "/"); /* Spurious warning */
353
strcat(filename, dirst->d_name); /* Spurious warning */
354
355
stat(filename, &st);
356
357
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
887
358
if(debug){
888
359
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
889
360
" with bad type or mode\n", filename);
891
362
free(filename);
892
363
continue;
893
364
}
894
895
plugin *p = getplugin(dirst->d_name);
896
if(p == NULL){
897
perror("getplugin");
898
free(filename);
899
continue;
900
}
901
if(p->disabled){
365
if(getplugin(dirst->d_name, &plugin_list)->disabled){
902
366
if(debug){
903
367
fprintf(stderr, "Ignoring disabled plugin \"%s\"\n",
904
368
dirst->d_name);
906
370
free(filename);
907
371
continue;
908
372
}
373
plugin *p = getplugin(dirst->d_name, &plugin_list);
909
374
{
910
375
/* Add global arguments to argument list for this plugin */
911
plugin *g = getplugin(NULL);
912
if(g != NULL){
913
for(char **a = g->argv + 1; *a != NULL; a++){
914
if(not add_argument(p, *a)){
915
perror("add_argument");
916
}
917
}
918
/* Add global environment variables */
919
for(char **e = g->environ; *e != NULL; e++){
920
if(not add_environment(p, *e, false)){
921
perror("add_environment");
922
}
923
}
924
}
925
}
926
/* If this plugin has any environment variables, we will call
927
using execve and need to duplicate the environment from this
928
process, too. */
929
if(p->environ[0] != NULL){
930
for(char **e = environ; *e != NULL; e++){
931
if(not add_environment(p, *e, false)){
932
perror("add_environment");
933
}
934
}
935
}
936
937
int pipefd[2];
938
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
939
if(ret == -1){
376
plugin *g = getplugin(NULL, &plugin_list);
377
for(char **a = g->argv + 1; *a != NULL; a++){
378
addargument(p, *a);
379
}
380
}
381
int pipefd[2];
382
ret = pipe(pipefd);
383
if (ret == -1){
940
384
perror("pipe");
941
exitstatus = EX_OSERR;
942
goto fallback;
385
exitstatus = EXIT_FAILURE;
386
goto end;
943
387
}
944
/* Ask OS to automatic close the pipe on exec */
945
388
ret = set_cloexec_flag(pipefd[0]);
946
389
if(ret < 0){
947
390
perror("set_cloexec_flag");
948
exitstatus = EX_OSERR;
949
goto fallback;
391
exitstatus = EXIT_FAILURE;
392
goto end;
950
393
}
951
394
ret = set_cloexec_flag(pipefd[1]);
952
395
if(ret < 0){
953
396
perror("set_cloexec_flag");
954
exitstatus = EX_OSERR;
955
goto fallback;
397
exitstatus = EXIT_FAILURE;
398
goto end;
956
399
}
957
400
/* Block SIGCHLD until process is safely in process list */
958
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
959
&sigchld_action.sa_mask,
960
NULL));
401
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
961
402
if(ret < 0){
962
403
perror("sigprocmask");
963
exitstatus = EX_OSERR;
964
goto fallback;
965
}
966
/* Starting a new process to be watched */
967
pid_t pid;
968
do {
969
pid = fork();
970
} while(pid == -1 and errno == EINTR);
971
if(pid == -1){
972
perror("fork");
973
exitstatus = EX_OSERR;
974
goto fallback;
975
}
404
exitstatus = EXIT_FAILURE;
405
goto end;
406
}
407
// Starting a new process to be watched
408
pid_t pid = fork();
976
409
if(pid == 0){
977
410
/* this is the child process */
978
411
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
979
412
if(ret < 0){
980
413
perror("sigaction");
981
_exit(EX_OSERR);
414
_exit(EXIT_FAILURE);
982
415
}
983
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
416
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
984
417
if(ret < 0){
985
418
perror("sigprocmask");
986
_exit(EX_OSERR);
987
}
988
989
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
990
if(ret == -1){
991
perror("dup2");
992
_exit(EX_OSERR);
993
}
419
_exit(EXIT_FAILURE);
420
}
421
dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
994
422
995
423
if(dirfd(dir) < 0){
996
424
/* If dir has no file descriptor, we could not set FD_CLOEXEC
997
425
above and must now close it manually here. */
998
426
closedir(dir);
999
427
}
1000
if(p->environ[0] == NULL){
1001
if(execv(filename, p->argv) < 0){
1002
perror("execv");
1003
_exit(EX_OSERR);
1004
}
1005
} else {
1006
if(execve(filename, p->argv, p->environ) < 0){
1007
perror("execve");
1008
_exit(EX_OSERR);
1009
}
428
if(execv(filename, p->argv) < 0){
429
perror("execv");
430
_exit(EXIT_FAILURE);
1010
431
}
1011
432
/* no return */
1012
433
}
1013
/* Parent process */
1014
TEMP_FAILURE_RETRY(close(pipefd[1])); /* Close unused write end of
1015
pipe */
434
/* parent process */
1016
435
free(filename);
1017
plugin *new_plugin = getplugin(dirst->d_name);
1018
if(new_plugin == NULL){
1019
perror("getplugin");
1020
ret = (int)(TEMP_FAILURE_RETRY
1021
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1022
NULL)));
436
close(pipefd[1]); /* close unused write end of pipe */
437
process *new_process = malloc(sizeof(process));
438
if (new_process == NULL){
439
perror("malloc");
440
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1023
441
if(ret < 0){
1024
perror("sigprocmask");
442
perror("sigprocmask");
1025
443
}
1026
exitstatus = EX_OSERR;
1027
goto fallback;
444
exitstatus = EXIT_FAILURE;
445
goto end;
1028
446
}
1029
447
1030
new_plugin->pid = pid;
1031
new_plugin->fd = pipefd[0];
1032
448
*new_process = (struct process){ .pid = pid,
449
.fd = pipefd[0],
450
.next = process_list };
451
// List handling
452
process_list = new_process;
1033
453
/* Unblock SIGCHLD so signal handler can be run if this process
1034
454
has already completed */
1035
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1036
&sigchld_action.sa_mask,
1037
NULL));
455
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1038
456
if(ret < 0){
1039
457
perror("sigprocmask");
1040
exitstatus = EX_OSERR;
1041
goto fallback;
1042
}
1043
1044
FD_SET(new_plugin->fd, &rfds_all); /* Spurious warning from
1045
-Wconversion */
1046
1047
if(maxfd < new_plugin->fd){
1048
maxfd = new_plugin->fd;
1049
}
1050
}
1051
1052
TEMP_FAILURE_RETRY(closedir(dir));
458
exitstatus = EXIT_FAILURE;
459
goto end;
460
}
461
462
FD_SET(new_process->fd, &rfds_all);
463
464
if (maxfd < new_process->fd){
465
maxfd = new_process->fd;
466
}
467
468
}
469
470
/* Free the plugin list */
471
for(plugin *next; plugin_list != NULL; plugin_list = next){
472
next = plugin_list->next;
473
free(plugin_list->argv);
474
free(plugin_list);
475
}
476
477
closedir(dir);
1053
478
dir = NULL;
1054
free_plugin(getplugin(NULL));
1055
479
1056
for(plugin *p = plugin_list; p != NULL; p = p->next){
1057
if(p->pid != 0){
1058
break;
1059
}
1060
if(p->next == NULL){
1061
fprintf(stderr, "No plugin processes started. Incorrect plugin"
1062
" directory?\n");
1063
free_plugin_list();
1064
}
480
if (process_list == NULL){
481
fprintf(stderr, "No plugin processes started, exiting\n");
482
exitstatus = EXIT_FAILURE;
483
goto end;
1065
484
}
1066
1067
/* Main loop while running plugins exist */
1068
while(plugin_list){
485
while(process_list){
1069
486
fd_set rfds = rfds_all;
1070
487
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
1071
if(select_ret == -1 and errno != EINTR){
488
if (select_ret == -1){
1072
489
perror("select");
1073
exitstatus = EX_OSERR;
1074
goto fallback;
490
exitstatus = EXIT_FAILURE;
491
goto end;
1075
492
}
1076
493
/* OK, now either a process completed, or something can be read
1077
494
from one of them */
1078
for(plugin *proc = plugin_list; proc != NULL;){
495
for(process *proc = process_list; proc ; proc = proc->next){
1079
496
/* Is this process completely done? */
1080
if(proc->completed and proc->eof){
497
if(proc->eof and proc->completed){
1081
498
/* Only accept the plugin output if it exited cleanly */
1082
499
if(not WIFEXITED(proc->status)
1083
500
or WEXITSTATUS(proc->status) != 0){
1084
501
/* Bad exit by plugin */
1085
1086
502
if(debug){
1087
503
if(WIFEXITED(proc->status)){
1088
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1089
" status %d\n", proc->name,
1090
(intmax_t) (proc->pid),
1091
WEXITSTATUS(proc->status));
1092
} else if(WIFSIGNALED(proc->status)){
1093
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1094
" signal %d: %s\n", proc->name,
1095
(intmax_t) (proc->pid),
1096
WTERMSIG(proc->status),
1097
strsignal(WTERMSIG(proc->status)));
504
fprintf(stderr, "Plugin %d exited with status %d\n",
505
proc->pid, WEXITSTATUS(proc->status));
506
} else if(WIFSIGNALED(proc->status)) {
507
fprintf(stderr, "Plugin %d killed by signal %d\n",
508
proc->pid, WTERMSIG(proc->status));
1098
509
} else if(WCOREDUMP(proc->status)){
1099
fprintf(stderr, "Plugin %s [%" PRIdMAX "] dumped"
1100
" core\n", proc->name, (intmax_t) (proc->pid));
510
fprintf(stderr, "Plugin %d dumped core\n", proc->pid);
1101
511
}
1102
512
}
1103
1104
513
/* Remove the plugin */
1105
FD_CLR(proc->fd, &rfds_all); /* Spurious warning from
1106
-Wconversion */
1107
514
FD_CLR(proc->fd, &rfds_all);
1108
515
/* Block signal while modifying process_list */
1109
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1110
(SIG_BLOCK,
1111
&sigchld_action.sa_mask,
1112
NULL));
516
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1113
517
if(ret < 0){
1114
518
perror("sigprocmask");
1115
exitstatus = EX_OSERR;
1116
goto fallback;
1117
}
1118
1119
plugin *next_plugin = proc->next;
1120
free_plugin(proc);
1121
proc = next_plugin;
1122
519
exitstatus = EXIT_FAILURE;
520
goto end;
521
}
522
/* Delete this process entry from the list */
523
if(process_list == proc){
524
/* First one - simple */
525
process_list = proc->next;
526
} else {
527
/* Second one or later */
528
for(process *p = process_list; p != NULL; p = p->next){
529
if(p->next == proc){
530
p->next = proc->next;
531
break;
532
}
533
}
534
}
1123
535
/* We are done modifying process list, so unblock signal */
1124
ret = (int)(TEMP_FAILURE_RETRY
1125
(sigprocmask(SIG_UNBLOCK,
1126
&sigchld_action.sa_mask, NULL)));
536
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
537
NULL);
1127
538
if(ret < 0){
1128
539
perror("sigprocmask");
1129
exitstatus = EX_OSERR;
1130
goto fallback;
1131
}
1132
1133
if(plugin_list == NULL){
1134
break;
1135
}
1136
1137
continue;
540
}
541
free(proc->buffer);
542
free(proc);
543
/* We deleted this process from the list, so we can't go
544
proc->next. Therefore, start over from the beginning of
545
the process list */
546
break;
1138
547
}
1139
1140
548
/* This process exited nicely, so print its buffer */
1141
1142
bool bret = print_out_password(proc->buffer,
1143
proc->buffer_length);
1144
if(not bret){
1145
perror("print_out_password");
1146
exitstatus = EX_IOERR;
549
for(size_t written = 0; written < proc->buffer_length;
550
written += (size_t)ret){
551
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO,
552
proc->buffer + written,
553
proc->buffer_length
554
- written));
555
if(ret < 0){
556
perror("write");
557
exitstatus = EXIT_FAILURE;
558
goto end;
559
}
1147
560
}
1148
goto fallback;
561
goto end;
1149
562
}
1150
1151
563
/* This process has not completed. Does it have any output? */
1152
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){ /* Spurious
1153
warning from
1154
-Wconversion */
564
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1155
565
/* This process had nothing to say at this time */
1156
proc = proc->next;
1157
566
continue;
1158
567
}
1159
568
/* Before reading, make the process' data buffer large enough */
1160
569
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1161
570
proc->buffer = realloc(proc->buffer, proc->buffer_size
1162
571
+ (size_t) BUFFER_SIZE);
1163
if(proc->buffer == NULL){
572
if (proc->buffer == NULL){
1164
573
perror("malloc");
1165
exitstatus = EX_OSERR;
1166
goto fallback;
574
exitstatus = EXIT_FAILURE;
575
goto end;
1167
576
}
1168
577
proc->buffer_size += BUFFER_SIZE;
1169
578
}
1170
579
/* Read from the process */
1171
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1172
proc->buffer
1173
+ proc->buffer_length,
1174
BUFFER_SIZE));
1175
if(sret < 0){
580
ret = read(proc->fd, proc->buffer + proc->buffer_length,
581
BUFFER_SIZE);
582
if(ret < 0){
1176
583
/* Read error from this process; ignore the error */
1177
proc = proc->next;
1178
584
continue;
1179
585
}
1180
if(sret == 0){
586
if(ret == 0){
1181
587
/* got EOF */
1182
588
proc->eof = true;
1183
589
} else {
1184
proc->buffer_length += (size_t) sret;
590
proc->buffer_length += (size_t) ret;
1185
591
}
1186
592
}
1187
593
}
1188
1189
1190
fallback:
1191
1192
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1193
and exitstatus != EX_OK)){
1194
/* Fallback if all plugins failed, none are found or an error
1195
occured */
1196
bool bret;
1197
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1198
char *passwordbuffer = getpass("Password: ");
1199
size_t len = strlen(passwordbuffer);
1200
/* Strip trailing newline */
1201
if(len > 0 and passwordbuffer[len-1] == '\n'){
1202
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1203
len--;
1204
}
1205
bret = print_out_password(passwordbuffer, len);
1206
if(not bret){
1207
perror("print_out_password");
1208
exitstatus = EX_IOERR;
1209
}
594
if(process_list == NULL){
595
fprintf(stderr, "All plugin processes failed, exiting\n");
596
exitstatus = EXIT_FAILURE;
1210
597
}
1211
598
599
end:
1212
600
/* Restore old signal handler */
1213
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1214
if(ret == -1){
1215
perror("sigaction");
1216
exitstatus = EX_OSERR;
1217
}
601
sigaction(SIGCHLD, &old_sigchld_action, NULL);
1218
602
1219
if(custom_argv != NULL){
1220
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1221
free(*arg);
1222
}
1223
free(custom_argv);
603
/* Free the plugin list */
604
for(plugin *next; plugin_list != NULL; plugin_list = next){
605
next = plugin_list->next;
606
free(plugin_list->argv);
607
free(plugin_list);
1224
608
}
1225
609
1226
610
if(dir != NULL){
1227
611
closedir(dir);
1228
612
}
1229
613
1230
/* Kill the processes */
1231
for(plugin *p = plugin_list; p != NULL; p = p->next){
1232
if(p->pid != 0){
1233
close(p->fd);
1234
ret = kill(p->pid, SIGTERM);
1235
if(ret == -1 and errno != ESRCH){
1236
/* Set-uid proccesses might not get closed */
1237
perror("kill");
1238
}
1239
}
614
/* Free the process list and kill the processes */
615
for(process *next; process_list != NULL; process_list = next){
616
next = process_list->next;
617
close(process_list->fd);
618
kill(process_list->pid, SIGTERM);
619
free(process_list->buffer);
620
free(process_list);
1240
621
}
1241
622
1242
623
/* Wait for any remaining child processes to terminate */
1243
do {
624
do{
1244
625
ret = wait(NULL);
1245
626
} while(ret >= 0);
1246
627
if(errno != ECHILD){
1247
628
perror("wait");
1248
629
}
1249
630
1250
free_plugin_list();
1251
1252
free(plugindir);
1253
free(argfile);
1254
1255
631
return exitstatus;
1256
632
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0