To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 1055
- compare with another revision
- download diff
- download tarball
- view history from revision 1055
- Committer: Teddy Hogeborn
- Date: 2019-03-12 20:13:34 UTC
- Revision ID: teddy@recompile.se-20190312201334-my3htrprewjosuw5
mandos-ctl: Refactor
* mandos-ctl: Reorder everything into logical order; put main() first,
and put every subsequent definition as soon as possible
after its first use, except superclasses which need to
be placed before the classes inheriting from them.
Reorder all tests to match.
* mandos-ctl: Reorder everything into logical order; put main() first,
and put every subsequent definition as soon as possible
after its first use, except superclasses which need to
be placed before the classes inheriting from them.
Reorder all tests to match.
- files added:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files renamed:
- plugins.d/password-request.c => plugins.d/mandos-client.c
- plugins.d/password-request.xml => plugins.d/mandos-client.xml
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8 -*- */
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
6
*
7
* This program is free software: you can redistribute it and/or
8
* modify it under the terms of the GNU General Public License as
9
* published by the Free Software Foundation, either version 3 of the
10
* License, or (at your option) any later version.
11
*
12
* This program is distributed in the hope that it will be useful, but
5
* Copyright © 2008-2018 Teddy Hogeborn
6
* Copyright © 2008-2018 Björn Påhlsson
7
*
8
* This file is part of Mandos.
9
*
10
* Mandos is free software: you can redistribute it and/or modify it
11
* under the terms of the GNU General Public License as published by
12
* the Free Software Foundation, either version 3 of the License, or
13
* (at your option) any later version.
14
*
15
* Mandos is distributed in the hope that it will be useful, but
13
16
* WITHOUT ANY WARRANTY; without even the implied warranty of
14
17
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15
18
* General Public License for more details.
16
19
*
17
20
* You should have received a copy of the GNU General Public License
18
* along with this program. If not, see
19
* <http://www.gnu.org/licenses/>.
21
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
20
22
*
21
* Contact the authors at <mandos@fukt.bsnet.se>.
23
* Contact the authors at <mandos@recompile.se>.
22
24
*/
23
25
24
26
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
25
asprintf() */
27
O_CLOEXEC, pipe2() */
26
28
#include <stddef.h> /* size_t, NULL */
27
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
28
EXIT_SUCCESS, realloc() */
29
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
30
realloc() */
29
31
#include <stdbool.h> /* bool, true, false */
30
#include <stdio.h> /* perror, popen(), fileno(),
31
fprintf(), stderr, STDOUT_FILENO */
32
#include <sys/types.h> /* DIR, opendir(), stat(), struct
33
stat, waitpid(), WIFEXITED(),
34
WEXITSTATUS(), wait(), pid_t,
35
uid_t, gid_t, getuid(), getgid(),
36
dirfd() */
32
#include <stdio.h> /* fileno(), fprintf(),
33
stderr, STDOUT_FILENO, fclose() */
34
#include <sys/types.h> /* fstat(), struct stat, waitpid(),
35
WIFEXITED(), WEXITSTATUS(), wait(),
36
pid_t, uid_t, gid_t, getuid(),
37
getgid() */
37
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
38
39
FD_SET(), FD_ISSET(), FD_CLR */
39
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
40
WEXITSTATUS() */
41
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
41
WEXITSTATUS(), WTERMSIG() */
42
#include <sys/stat.h> /* struct stat, fstat(), S_ISREG() */
42
43
#include <iso646.h> /* and, or, not */
43
#include <dirent.h> /* DIR, struct dirent, opendir(),
44
readdir(), closedir(), dirfd() */
45
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
46
fcntl(), setuid(), setgid(),
47
F_GETFD, F_SETFD, FD_CLOEXEC,
48
access(), pipe(), fork(), close()
49
dup2, STDOUT_FILENO, _exit(),
50
execv(), write(), read(),
51
close() */
44
#include <dirent.h> /* struct dirent, scandirat() */
45
#include <unistd.h> /* fcntl(), F_GETFD, F_SETFD,
46
FD_CLOEXEC, write(), STDOUT_FILENO,
47
struct stat, fstat(), close(),
48
setgid(), setuid(), S_ISREG(),
49
faccessat() pipe2(), fork(),
50
_exit(), dup2(), fexecve(), read()
51
*/
52
52
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
53
FD_CLOEXEC */
54
#include <string.h> /* strsep, strlen(), asprintf() */
53
FD_CLOEXEC, openat(), scandirat(),
54
pipe2() */
55
#include <string.h> /* strsep, strlen(), strsignal(),
56
strcmp(), strncmp() */
55
57
#include <errno.h> /* errno */
56
58
#include <argp.h> /* struct argp_option, struct
57
59
argp_state, struct argp,
61
63
#include <signal.h> /* struct sigaction, sigemptyset(),
62
64
sigaddset(), sigaction(),
63
65
sigprocmask(), SIG_BLOCK, SIGCHLD,
64
SIG_UNBLOCK, kill() */
66
SIG_UNBLOCK, kill(), sig_atomic_t
67
*/
65
68
#include <errno.h> /* errno, EBADF */
69
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
70
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
71
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
72
#include <errno.h> /* errno */
73
#include <error.h> /* error() */
74
#include <fnmatch.h> /* fnmatch() */
66
75
67
76
#define BUFFER_SIZE 256
68
77
69
78
#define PDIR "/lib/mandos/plugins.d"
79
#define PHDIR "/lib/mandos/plugin-helpers"
70
80
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
71
81
72
const char *argp_program_version = "plugin-runner 1.0";
73
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
74
75
struct plugin;
82
const char *argp_program_version = "plugin-runner " VERSION;
83
const char *argp_program_bug_address = "<mandos@recompile.se>";
76
84
77
85
typedef struct plugin{
78
86
char *name; /* can be NULL or any plugin name */
81
89
char **environ;
82
90
int envc;
83
91
bool disabled;
84
92
85
93
/* Variables used for running processes*/
86
94
pid_t pid;
87
95
int fd;
89
97
size_t buffer_size;
90
98
size_t buffer_length;
91
99
bool eof;
92
volatile bool completed;
93
volatile int status;
100
volatile sig_atomic_t completed;
101
int status;
94
102
struct plugin *next;
95
103
} plugin;
96
104
98
106
99
107
/* Gets an existing plugin based on name,
100
108
or if none is found, creates a new one */
109
__attribute__((warn_unused_result))
101
110
static plugin *getplugin(char *name){
102
/* Check for exiting plugin with that name */
103
for (plugin *p = plugin_list; p != NULL; p = p->next){
104
if ((p->name == name)
105
or (p->name and name and (strcmp(p->name, name) == 0))){
111
/* Check for existing plugin with that name */
112
for(plugin *p = plugin_list; p != NULL; p = p->next){
113
if((p->name == name)
114
or (p->name and name and (strcmp(p->name, name) == 0))){
106
115
return p;
107
116
}
108
117
}
109
118
/* Create a new plugin */
110
plugin *new_plugin = malloc(sizeof(plugin));
111
if (new_plugin == NULL){
119
plugin *new_plugin = NULL;
120
do {
121
new_plugin = malloc(sizeof(plugin));
122
} while(new_plugin == NULL and errno == EINTR);
123
if(new_plugin == NULL){
112
124
return NULL;
113
125
}
114
126
char *copy_name = NULL;
115
127
if(name != NULL){
116
copy_name = strdup(name);
128
do {
129
copy_name = strdup(name);
130
} while(copy_name == NULL and errno == EINTR);
117
131
if(copy_name == NULL){
132
int e = errno;
133
free(new_plugin);
134
errno = e;
118
135
return NULL;
119
136
}
120
137
}
121
138
122
*new_plugin = (plugin) { .name = copy_name,
123
.argc = 1,
124
.disabled = false,
125
.next = plugin_list };
139
*new_plugin = (plugin){ .name = copy_name,
140
.argc = 1,
141
.disabled = false,
142
.next = plugin_list };
126
143
127
new_plugin->argv = malloc(sizeof(char *) * 2);
128
if (new_plugin->argv == NULL){
144
do {
145
new_plugin->argv = malloc(sizeof(char *) * 2);
146
} while(new_plugin->argv == NULL and errno == EINTR);
147
if(new_plugin->argv == NULL){
148
int e = errno;
129
149
free(copy_name);
130
150
free(new_plugin);
151
errno = e;
131
152
return NULL;
132
153
}
133
154
new_plugin->argv[0] = copy_name;
134
155
new_plugin->argv[1] = NULL;
135
156
136
new_plugin->environ = malloc(sizeof(char *));
157
do {
158
new_plugin->environ = malloc(sizeof(char *));
159
} while(new_plugin->environ == NULL and errno == EINTR);
137
160
if(new_plugin->environ == NULL){
161
int e = errno;
138
162
free(copy_name);
139
163
free(new_plugin->argv);
140
164
free(new_plugin);
165
errno = e;
141
166
return NULL;
142
167
}
143
168
new_plugin->environ[0] = NULL;
148
173
}
149
174
150
175
/* Helper function for add_argument and add_environment */
176
__attribute__((nonnull, warn_unused_result))
151
177
static bool add_to_char_array(const char *new, char ***array,
152
178
int *len){
153
179
/* Resize the pointed-to array to hold one more pointer */
154
*array = realloc(*array, sizeof(char *)
155
* (size_t) ((*len) + 2));
180
char **new_array = NULL;
181
do {
182
new_array = realloc(*array, sizeof(char *)
183
* (size_t) ((*len) + 2));
184
} while(new_array == NULL and errno == EINTR);
156
185
/* Malloc check */
157
if(*array == NULL){
186
if(new_array == NULL){
158
187
return false;
159
188
}
189
*array = new_array;
160
190
/* Make a copy of the new string */
161
char *copy = strdup(new);
191
char *copy;
192
do {
193
copy = strdup(new);
194
} while(copy == NULL and errno == EINTR);
162
195
if(copy == NULL){
163
196
return false;
164
197
}
171
204
}
172
205
173
206
/* Add to a plugin's argument vector */
207
__attribute__((nonnull(2), warn_unused_result))
174
208
static bool add_argument(plugin *p, const char *arg){
175
209
if(p == NULL){
176
210
return false;
179
213
}
180
214
181
215
/* Add to a plugin's environment */
216
__attribute__((nonnull(2), warn_unused_result))
182
217
static bool add_environment(plugin *p, const char *def, bool replace){
183
218
if(p == NULL){
184
219
return false;
186
221
/* namelen = length of name of environment variable */
187
222
size_t namelen = (size_t)(strchrnul(def, '=') - def);
188
223
/* Search for this environment variable */
189
for(char **e = p->environ; *e != NULL; e++){
190
if(strncmp(*e, def, namelen + 1) == 0){
224
for(char **envdef = p->environ; *envdef != NULL; envdef++){
225
if(strncmp(*envdef, def, namelen + 1) == 0){
191
226
/* It already exists */
192
227
if(replace){
193
char *new = realloc(*e, strlen(def) + 1);
194
if(new == NULL){
228
char *new_envdef;
229
do {
230
new_envdef = realloc(*envdef, strlen(def) + 1);
231
} while(new_envdef == NULL and errno == EINTR);
232
if(new_envdef == NULL){
195
233
return false;
196
234
}
197
*e = new;
198
strcpy(*e, def);
235
*envdef = new_envdef;
236
strcpy(*envdef, def);
199
237
}
200
238
return true;
201
239
}
203
241
return add_to_char_array(def, &(p->environ), &(p->envc));
204
242
}
205
243
244
#ifndef O_CLOEXEC
206
245
/*
207
246
* Based on the example in the GNU LibC manual chapter 13.13 "File
208
247
* Descriptor Flags".
209
* *Note File Descriptor Flags:(libc)Descriptor Flags.
248
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
210
249
*/
211
static int set_cloexec_flag(int fd)
212
{
213
int ret = fcntl(fd, F_GETFD, 0);
250
__attribute__((warn_unused_result))
251
static int set_cloexec_flag(int fd){
252
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
214
253
/* If reading the flags failed, return error indication now. */
215
254
if(ret < 0){
216
255
return ret;
217
256
}
218
257
/* Store modified flag word in the descriptor. */
219
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
258
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
259
ret | FD_CLOEXEC));
220
260
}
261
#endif /* not O_CLOEXEC */
221
262
222
263
223
264
/* Mark processes as completed when they exit, and save their exit
224
265
status. */
225
void handle_sigchld(__attribute__((unused)) int sig){
266
static void handle_sigchld(__attribute__((unused)) int sig){
267
int old_errno = errno;
226
268
while(true){
227
269
plugin *proc = plugin_list;
228
270
int status;
232
274
break;
233
275
}
234
276
if(pid == -1){
235
if (errno != ECHILD){
236
perror("waitpid");
277
if(errno == ECHILD){
278
/* No child processes */
279
break;
237
280
}
238
/* No child processes */
239
break;
281
error(0, errno, "waitpid");
240
282
}
241
283
242
284
/* A child exited, find it in process_list */
248
290
continue;
249
291
}
250
292
proc->status = status;
251
proc->completed = true;
293
proc->completed = 1;
252
294
}
295
errno = old_errno;
253
296
}
254
297
255
298
/* Prints out a password to stdout */
256
bool print_out_password(const char *buffer, size_t length){
299
__attribute__((nonnull, warn_unused_result))
300
static bool print_out_password(const char *buffer, size_t length){
257
301
ssize_t ret;
258
if(length>0 and buffer[length-1] == '\n'){
259
length--;
260
}
261
302
for(size_t written = 0; written < length; written += (size_t)ret){
262
303
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
263
304
length - written));
269
310
}
270
311
271
312
/* Removes and free a plugin from the plugin list */
313
__attribute__((nonnull))
272
314
static void free_plugin(plugin *plugin_node){
273
315
274
316
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
280
322
}
281
323
free(plugin_node->environ);
282
324
free(plugin_node->buffer);
283
325
284
326
/* Removes the plugin from the singly-linked list */
285
327
if(plugin_node == plugin_list){
286
328
/* First one - simple */
306
348
307
349
int main(int argc, char *argv[]){
308
350
char *plugindir = NULL;
351
char *pluginhelperdir = NULL;
309
352
char *argfile = NULL;
310
353
FILE *conffp;
311
size_t d_name_len;
312
DIR *dir = NULL;
313
struct dirent *dirst;
354
struct dirent **direntries = NULL;
314
355
struct stat st;
315
356
fd_set rfds_all;
316
357
int ret, maxfd = 0;
358
ssize_t sret;
317
359
uid_t uid = 65534;
318
360
gid_t gid = 65534;
319
361
bool debug = false;
323
365
.sa_flags = SA_NOCLDSTOP };
324
366
char **custom_argv = NULL;
325
367
int custom_argc = 0;
368
int dir_fd = -1;
326
369
327
370
/* Establish a signal handler */
328
371
sigemptyset(&sigchld_action.sa_mask);
329
372
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
330
373
if(ret == -1){
331
perror("sigaddset");
332
exitstatus = EXIT_FAILURE;
374
error(0, errno, "sigaddset");
375
exitstatus = EX_OSERR;
333
376
goto fallback;
334
377
}
335
378
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
336
379
if(ret == -1){
337
perror("sigaction");
338
exitstatus = EXIT_FAILURE;
380
error(0, errno, "sigaction");
381
exitstatus = EX_OSERR;
339
382
goto fallback;
340
383
}
341
384
373
416
.doc = "Group ID the plugins will run as", .group = 3 },
374
417
{ .name = "debug", .key = 132,
375
418
.doc = "Debug mode", .group = 4 },
419
{ .name = "plugin-helper-dir", .key = 133,
420
.arg = "DIRECTORY",
421
.doc = "Specify a different plugin helper directory",
422
.group = 2 },
423
/*
424
* These reproduce what we would get without ARGP_NO_HELP
425
*/
426
{ .name = "help", .key = '?',
427
.doc = "Give this help list", .group = -1 },
428
{ .name = "usage", .key = -3,
429
.doc = "Give a short usage message", .group = -1 },
430
{ .name = "version", .key = 'V',
431
.doc = "Print program version", .group = -1 },
376
432
{ .name = NULL }
377
433
};
378
434
379
error_t parse_opt (int key, char *arg, __attribute__((unused))
380
struct argp_state *state) {
381
switch (key) {
435
__attribute__((nonnull(3)))
436
error_t parse_opt(int key, char *arg, struct argp_state *state){
437
errno = 0;
438
switch(key){
439
char *tmp;
440
intmax_t tmp_id;
382
441
case 'g': /* --global-options */
383
if (arg != NULL){
384
char *p;
385
while((p = strsep(&arg, ",")) != NULL){
386
if(p[0] == '\0'){
387
continue;
388
}
389
if(not add_argument(getplugin(NULL), p)){
390
perror("add_argument");
391
return ARGP_ERR_UNKNOWN;
442
{
443
char *plugin_option;
444
while((plugin_option = strsep(&arg, ",")) != NULL){
445
if(not add_argument(getplugin(NULL), plugin_option)){
446
break;
392
447
}
393
448
}
449
errno = 0;
394
450
}
395
451
break;
396
452
case 'G': /* --global-env */
397
if(arg == NULL){
398
break;
399
}
400
{
401
char *envdef = strdup(arg);
402
if(envdef == NULL){
403
break;
404
}
405
if(not add_environment(getplugin(NULL), envdef, true)){
406
perror("add_environment");
407
}
453
if(add_environment(getplugin(NULL), arg, true)){
454
errno = 0;
408
455
}
409
456
break;
410
457
case 'o': /* --options-for */
411
if (arg != NULL){
412
char *p_name = strsep(&arg, ":");
413
if(p_name[0] == '\0' or arg == NULL){
414
break;
415
}
416
char *opt = strsep(&arg, ":");
417
if(opt[0] == '\0' or opt == NULL){
418
break;
419
}
420
char *p;
421
while((p = strsep(&opt, ",")) != NULL){
422
if(p[0] == '\0'){
423
continue;
424
}
425
if(not add_argument(getplugin(p_name), p)){
426
perror("add_argument");
427
return ARGP_ERR_UNKNOWN;
428
}
429
}
458
{
459
char *option_list = strchr(arg, ':');
460
if(option_list == NULL){
461
argp_error(state, "No colon in \"%s\"", arg);
462
errno = EINVAL;
463
break;
464
}
465
*option_list = '\0';
466
option_list++;
467
if(arg[0] == '\0'){
468
argp_error(state, "Empty plugin name");
469
errno = EINVAL;
470
break;
471
}
472
char *option;
473
while((option = strsep(&option_list, ",")) != NULL){
474
if(not add_argument(getplugin(arg), option)){
475
break;
476
}
477
}
478
errno = 0;
430
479
}
431
480
break;
432
481
case 'E': /* --env-for */
433
if(arg == NULL){
434
break;
435
}
436
482
{
437
483
char *envdef = strchr(arg, ':');
438
484
if(envdef == NULL){
439
break;
440
}
441
char *p_name = strndup(arg, (size_t) (envdef-arg));
442
if(p_name == NULL){
443
break;
444
}
485
argp_error(state, "No colon in \"%s\"", arg);
486
errno = EINVAL;
487
break;
488
}
489
*envdef = '\0';
445
490
envdef++;
446
if(not add_environment(getplugin(p_name), envdef, true)){
447
perror("add_environment");
491
if(arg[0] == '\0'){
492
argp_error(state, "Empty plugin name");
493
errno = EINVAL;
494
break;
495
}
496
if(add_environment(getplugin(arg), envdef, true)){
497
errno = 0;
448
498
}
449
499
}
450
500
break;
451
501
case 'd': /* --disable */
452
if (arg != NULL){
502
{
453
503
plugin *p = getplugin(arg);
454
if(p == NULL){
455
return ARGP_ERR_UNKNOWN;
504
if(p != NULL){
505
p->disabled = true;
506
errno = 0;
456
507
}
457
p->disabled = true;
458
508
}
459
509
break;
460
510
case 'e': /* --enable */
461
if (arg != NULL){
511
{
462
512
plugin *p = getplugin(arg);
463
if(p == NULL){
464
return ARGP_ERR_UNKNOWN;
513
if(p != NULL){
514
p->disabled = false;
515
errno = 0;
465
516
}
466
p->disabled = false;
467
517
}
468
518
break;
469
519
case 128: /* --plugin-dir */
520
free(plugindir);
470
521
plugindir = strdup(arg);
471
if(plugindir == NULL){
472
perror("strdup");
473
}
522
if(plugindir != NULL){
523
errno = 0;
524
}
474
525
break;
475
526
case 129: /* --config-file */
476
527
/* This is already done by parse_opt_config_file() */
477
528
break;
478
529
case 130: /* --userid */
479
uid = (uid_t)strtol(arg, NULL, 10);
530
tmp_id = strtoimax(arg, &tmp, 10);
531
if(errno != 0 or tmp == arg or *tmp != '\0'
532
or tmp_id != (uid_t)tmp_id){
533
argp_error(state, "Bad user ID number: \"%s\", using %"
534
PRIdMAX, arg, (intmax_t)uid);
535
break;
536
}
537
uid = (uid_t)tmp_id;
538
errno = 0;
480
539
break;
481
540
case 131: /* --groupid */
482
gid = (gid_t)strtol(arg, NULL, 10);
541
tmp_id = strtoimax(arg, &tmp, 10);
542
if(errno != 0 or tmp == arg or *tmp != '\0'
543
or tmp_id != (gid_t)tmp_id){
544
argp_error(state, "Bad group ID number: \"%s\", using %"
545
PRIdMAX, arg, (intmax_t)gid);
546
break;
547
}
548
gid = (gid_t)tmp_id;
549
errno = 0;
483
550
break;
484
551
case 132: /* --debug */
485
552
debug = true;
486
553
break;
554
case 133: /* --plugin-helper-dir */
555
free(pluginhelperdir);
556
pluginhelperdir = strdup(arg);
557
if(pluginhelperdir != NULL){
558
errno = 0;
559
}
560
break;
561
/*
562
* These reproduce what we would get without ARGP_NO_HELP
563
*/
564
case '?': /* --help */
565
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
566
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
567
__builtin_unreachable();
568
case -3: /* --usage */
569
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
570
argp_state_help(state, state->out_stream,
571
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
572
__builtin_unreachable();
573
case 'V': /* --version */
574
fprintf(state->out_stream, "%s\n", argp_program_version);
575
exit(EXIT_SUCCESS);
576
break;
577
/*
578
* When adding more options before this line, remember to also add a
579
* "case" to the "parse_opt_config_file" function below.
580
*/
487
581
case ARGP_KEY_ARG:
488
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
489
break;
490
case ARGP_KEY_END:
491
break;
582
/* Cryptsetup always passes an argument, which is an empty
583
string if "none" was specified in /etc/crypttab. So if
584
argument was empty, we ignore it silently. */
585
if(arg[0] == '\0'){
586
break;
587
}
588
/* FALLTHROUGH */
492
589
default:
493
590
return ARGP_ERR_UNKNOWN;
494
591
}
495
return 0;
592
return errno; /* Set to 0 at start */
496
593
}
497
594
498
595
/* This option parser is the same as parse_opt() above, except it
499
596
ignores everything but the --config-file option. */
500
error_t parse_opt_config_file (int key, char *arg,
501
__attribute__((unused))
502
struct argp_state *state) {
503
switch (key) {
597
error_t parse_opt_config_file(int key, char *arg,
598
__attribute__((unused))
599
struct argp_state *state){
600
errno = 0;
601
switch(key){
504
602
case 'g': /* --global-options */
505
603
case 'G': /* --global-env */
506
604
case 'o': /* --options-for */
510
608
case 128: /* --plugin-dir */
511
609
break;
512
610
case 129: /* --config-file */
611
free(argfile);
513
612
argfile = strdup(arg);
514
if(argfile == NULL){
515
perror("strdup");
613
if(argfile != NULL){
614
errno = 0;
516
615
}
517
break;
616
break;
518
617
case 130: /* --userid */
519
618
case 131: /* --groupid */
520
619
case 132: /* --debug */
620
case 133: /* --plugin-helper-dir */
621
case '?': /* --help */
622
case -3: /* --usage */
623
case 'V': /* --version */
521
624
case ARGP_KEY_ARG:
522
case ARGP_KEY_END:
523
625
break;
524
626
default:
525
627
return ARGP_ERR_UNKNOWN;
526
628
}
527
return 0;
629
return errno;
528
630
}
529
631
530
632
struct argp argp = { .options = options,
532
634
.args_doc = "",
533
635
.doc = "Mandos plugin runner -- Run plugins" };
534
636
535
/* Parse using the parse_opt_config_file in order to get the custom
637
/* Parse using parse_opt_config_file() in order to get the custom
536
638
config file location, if any. */
537
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
538
if (ret == ARGP_ERR_UNKNOWN){
539
fprintf(stderr, "Unknown error while parsing arguments\n");
540
exitstatus = EXIT_FAILURE;
639
ret = argp_parse(&argp, argc, argv,
640
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
641
NULL, NULL);
642
switch(ret){
643
case 0:
644
break;
645
case ENOMEM:
646
default:
647
errno = ret;
648
error(0, errno, "argp_parse");
649
exitstatus = EX_OSERR;
650
goto fallback;
651
case EINVAL:
652
exitstatus = EX_USAGE;
541
653
goto fallback;
542
654
}
543
655
545
657
argp.parser = parse_opt;
546
658
547
659
/* Open the configfile if available */
548
if (argfile == NULL){
660
if(argfile == NULL){
549
661
conffp = fopen(AFILE, "r");
550
662
} else {
551
663
conffp = fopen(argfile, "r");
552
}
664
}
553
665
if(conffp != NULL){
554
666
char *org_line = NULL;
555
667
char *p, *arg, *new_arg, *line;
556
668
size_t size = 0;
557
ssize_t sret;
558
669
const char whitespace_delims[] = " \r\t\f\v\n";
559
670
const char comment_delim[] = "#";
560
671
561
672
custom_argc = 1;
562
673
custom_argv = malloc(sizeof(char*) * 2);
563
674
if(custom_argv == NULL){
564
perror("malloc");
565
exitstatus = EXIT_FAILURE;
675
error(0, errno, "malloc");
676
exitstatus = EX_OSERR;
566
677
goto fallback;
567
678
}
568
679
custom_argv[0] = argv[0];
569
680
custom_argv[1] = NULL;
570
681
571
682
/* for each line in the config file, strip whitespace and ignore
572
683
commented text */
573
684
while(true){
575
686
if(sret == -1){
576
687
break;
577
688
}
578
689
579
690
line = org_line;
580
691
arg = strsep(&line, comment_delim);
581
692
while((p = strsep(&arg, whitespace_delims)) != NULL){
584
695
}
585
696
new_arg = strdup(p);
586
697
if(new_arg == NULL){
587
perror("strdup");
588
exitstatus = EXIT_FAILURE;
698
error(0, errno, "strdup");
699
exitstatus = EX_OSERR;
589
700
free(org_line);
590
701
goto fallback;
591
702
}
592
703
593
704
custom_argc += 1;
594
custom_argv = realloc(custom_argv, sizeof(char *)
595
* ((unsigned int) custom_argc + 1));
596
if(custom_argv == NULL){
597
perror("realloc");
598
exitstatus = EXIT_FAILURE;
599
free(org_line);
600
goto fallback;
705
{
706
char **new_argv = realloc(custom_argv, sizeof(char *)
707
* ((size_t)custom_argc + 1));
708
if(new_argv == NULL){
709
error(0, errno, "realloc");
710
exitstatus = EX_OSERR;
711
free(new_arg);
712
free(org_line);
713
goto fallback;
714
} else {
715
custom_argv = new_argv;
716
}
601
717
}
602
718
custom_argv[custom_argc-1] = new_arg;
603
custom_argv[custom_argc] = NULL;
719
custom_argv[custom_argc] = NULL;
604
720
}
605
721
}
722
do {
723
ret = fclose(conffp);
724
} while(ret == EOF and errno == EINTR);
725
if(ret == EOF){
726
error(0, errno, "fclose");
727
exitstatus = EX_IOERR;
728
goto fallback;
729
}
606
730
free(org_line);
607
731
} else {
608
732
/* Check for harmful errors and go to fallback. Other errors might
609
733
not affect opening plugins */
610
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
611
perror("fopen");
612
exitstatus = EXIT_FAILURE;
734
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
735
error(0, errno, "fopen");
736
exitstatus = EX_OSERR;
613
737
goto fallback;
614
738
}
615
739
}
616
/* If there was any arguments from configuration file,
617
pass them to parser as command arguments */
740
/* If there were any arguments from the configuration file, pass
741
them to parser as command line arguments */
618
742
if(custom_argv != NULL){
619
ret = argp_parse (&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
620
0, NULL);
621
if (ret == ARGP_ERR_UNKNOWN){
622
fprintf(stderr, "Unknown error while parsing arguments\n");
623
exitstatus = EXIT_FAILURE;
743
ret = argp_parse(&argp, custom_argc, custom_argv,
744
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
745
NULL, NULL);
746
switch(ret){
747
case 0:
748
break;
749
case ENOMEM:
750
default:
751
errno = ret;
752
error(0, errno, "argp_parse");
753
exitstatus = EX_OSERR;
754
goto fallback;
755
case EINVAL:
756
exitstatus = EX_CONFIG;
624
757
goto fallback;
625
758
}
626
759
}
627
760
628
761
/* Parse actual command line arguments, to let them override the
629
762
config file */
630
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
631
if (ret == ARGP_ERR_UNKNOWN){
632
fprintf(stderr, "Unknown error while parsing arguments\n");
633
exitstatus = EXIT_FAILURE;
634
goto fallback;
763
ret = argp_parse(&argp, argc, argv,
764
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
765
NULL, NULL);
766
switch(ret){
767
case 0:
768
break;
769
case ENOMEM:
770
default:
771
errno = ret;
772
error(0, errno, "argp_parse");
773
exitstatus = EX_OSERR;
774
goto fallback;
775
case EINVAL:
776
exitstatus = EX_USAGE;
777
goto fallback;
778
}
779
780
{
781
char *pluginhelperenv;
782
bool bret = true;
783
ret = asprintf(&pluginhelperenv, "MANDOSPLUGINHELPERDIR=%s",
784
pluginhelperdir != NULL ? pluginhelperdir : PHDIR);
785
if(ret != -1){
786
bret = add_environment(getplugin(NULL), pluginhelperenv, true);
787
}
788
if(ret == -1 or not bret){
789
error(0, errno, "Failed to set MANDOSPLUGINHELPERDIR"
790
" environment variable to \"%s\" for all plugins\n",
791
pluginhelperdir != NULL ? pluginhelperdir : PHDIR);
792
}
793
if(ret != -1){
794
free(pluginhelperenv);
795
}
635
796
}
636
797
637
798
if(debug){
638
for(plugin *p = plugin_list; p != NULL; p=p->next){
799
for(plugin *p = plugin_list; p != NULL; p = p->next){
639
800
fprintf(stderr, "Plugin: %s has %d arguments\n",
640
801
p->name ? p->name : "Global", p->argc - 1);
641
802
for(char **a = p->argv; *a != NULL; a++){
642
803
fprintf(stderr, "\tArg: %s\n", *a);
643
804
}
644
fprintf(stderr, "...and %u environment variables\n", p->envc);
805
fprintf(stderr, "...and %d environment variables\n", p->envc);
645
806
for(char **a = p->environ; *a != NULL; a++){
646
807
fprintf(stderr, "\t%s\n", *a);
647
808
}
648
809
}
649
810
}
650
811
651
/* Strip permissions down to nobody */
812
if(getuid() == 0){
813
/* Work around Debian bug #633582:
814
<https://bugs.debian.org/633582> */
815
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
816
if(plugindir_fd == -1){
817
if(errno != ENOENT){
818
error(0, errno, "open(\"" PDIR "\")");
819
}
820
} else {
821
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
822
if(ret == -1){
823
error(0, errno, "fstat");
824
} else {
825
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
826
ret = fchown(plugindir_fd, uid, gid);
827
if(ret == -1){
828
error(0, errno, "fchown");
829
}
830
}
831
}
832
close(plugindir_fd);
833
}
834
}
835
836
/* Lower permissions */
837
ret = setgid(gid);
838
if(ret == -1){
839
error(0, errno, "setgid");
840
}
652
841
ret = setuid(uid);
653
if (ret == -1){
654
perror("setuid");
655
}
656
setgid(gid);
657
if (ret == -1){
658
perror("setgid");
659
}
660
661
if (plugindir == NULL){
662
dir = opendir(PDIR);
663
} else {
664
dir = opendir(plugindir);
665
}
666
667
if(dir == NULL){
668
perror("Could not open plugin dir");
669
exitstatus = EXIT_FAILURE;
670
goto fallback;
671
}
672
673
/* Set the FD_CLOEXEC flag on the directory, if possible */
842
if(ret == -1){
843
error(0, errno, "setuid");
844
}
845
846
/* Open plugin directory with close_on_exec flag */
674
847
{
675
int dir_fd = dirfd(dir);
676
if(dir_fd >= 0){
677
ret = set_cloexec_flag(dir_fd);
678
if(ret < 0){
679
perror("set_cloexec_flag");
680
exitstatus = EXIT_FAILURE;
681
goto fallback;
848
dir_fd = open(plugindir != NULL ? plugindir : PDIR, O_RDONLY |
849
#ifdef O_CLOEXEC
850
O_CLOEXEC
851
#else /* not O_CLOEXEC */
852
0
853
#endif /* not O_CLOEXEC */
854
);
855
if(dir_fd == -1){
856
error(0, errno, "Could not open plugin dir");
857
exitstatus = EX_UNAVAILABLE;
858
goto fallback;
859
}
860
861
#ifndef O_CLOEXEC
862
/* Set the FD_CLOEXEC flag on the directory */
863
ret = set_cloexec_flag(dir_fd);
864
if(ret < 0){
865
error(0, errno, "set_cloexec_flag");
866
exitstatus = EX_OSERR;
867
goto fallback;
868
}
869
#endif /* O_CLOEXEC */
870
}
871
872
int good_name(const struct dirent * const dirent){
873
const char * const patterns[] = { ".*", "#*#", "*~", "*.dpkg-new",
874
"*.dpkg-old", "*.dpkg-bak",
875
"*.dpkg-divert", NULL };
876
#ifdef __GNUC__
877
#pragma GCC diagnostic push
878
#pragma GCC diagnostic ignored "-Wcast-qual"
879
#endif
880
for(const char **pat = (const char **)patterns;
881
*pat != NULL; pat++){
882
#ifdef __GNUC__
883
#pragma GCC diagnostic pop
884
#endif
885
if(fnmatch(*pat, dirent->d_name, FNM_FILE_NAME | FNM_PERIOD)
886
!= FNM_NOMATCH){
887
if(debug){
888
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
889
" matching pattern %s\n", dirent->d_name, *pat);
890
}
891
return 0;
682
892
}
683
893
}
894
return 1;
895
}
896
897
int numplugins = scandirat(dir_fd, ".", &direntries, good_name,
898
alphasort);
899
if(numplugins == -1){
900
error(0, errno, "Could not scan plugin dir");
901
direntries = NULL;
902
exitstatus = EX_OSERR;
903
goto fallback;
684
904
}
685
905
686
906
FD_ZERO(&rfds_all);
687
907
688
908
/* Read and execute any executable in the plugin directory*/
689
while(true){
690
dirst = readdir(dir);
691
692
/* All directory entries have been processed */
693
if(dirst == NULL){
694
if (errno == EBADF){
695
perror("readdir");
696
exitstatus = EXIT_FAILURE;
697
goto fallback;
698
}
699
break;
700
}
701
702
d_name_len = strlen(dirst->d_name);
703
704
/* Ignore dotfiles, backup files and other junk */
705
{
706
bool bad_name = false;
707
708
const char const *bad_prefixes[] = { ".", "#", NULL };
709
710
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
711
".dpkg-old",
712
".dpkg-divert", NULL };
713
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
714
size_t pre_len = strlen(*pre);
715
if((d_name_len >= pre_len)
716
and strncmp((dirst->d_name), *pre, pre_len) == 0){
717
if(debug){
718
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
719
" with bad prefix %s\n", dirst->d_name, *pre);
720
}
721
bad_name = true;
722
break;
723
}
724
}
725
if(bad_name){
726
continue;
727
}
728
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
729
size_t suf_len = strlen(*suf);
730
if((d_name_len >= suf_len)
731
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
732
== 0)){
733
if(debug){
734
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
735
" with bad suffix %s\n", dirst->d_name, *suf);
736
}
737
bad_name = true;
738
break;
739
}
740
}
741
742
if(bad_name){
743
continue;
744
}
745
}
746
747
char *filename;
748
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
749
if(ret < 0){
750
perror("asprintf");
751
continue;
752
}
753
754
ret = stat(filename, &st);
755
if (ret == -1){
756
perror("stat");
757
free(filename);
758
continue;
759
}
760
909
for(int i = 0; i < numplugins; i++){
910
911
int plugin_fd = openat(dir_fd, direntries[i]->d_name, O_RDONLY);
912
if(plugin_fd == -1){
913
error(0, errno, "Could not open plugin");
914
free(direntries[i]);
915
continue;
916
}
917
ret = (int)TEMP_FAILURE_RETRY(fstat(plugin_fd, &st));
918
if(ret == -1){
919
error(0, errno, "stat");
920
close(plugin_fd);
921
free(direntries[i]);
922
continue;
923
}
924
761
925
/* Ignore non-executable files */
762
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
926
if(not S_ISREG(st.st_mode)
927
or (TEMP_FAILURE_RETRY(faccessat(dir_fd, direntries[i]->d_name,
928
X_OK, 0)) != 0)){
763
929
if(debug){
764
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
765
" with bad type or mode\n", filename);
930
fprintf(stderr, "Ignoring plugin dir entry \"%s/%s\""
931
" with bad type or mode\n",
932
plugindir != NULL ? plugindir : PDIR,
933
direntries[i]->d_name);
766
934
}
767
free(filename);
935
close(plugin_fd);
936
free(direntries[i]);
768
937
continue;
769
938
}
770
939
771
plugin *p = getplugin(dirst->d_name);
940
plugin *p = getplugin(direntries[i]->d_name);
772
941
if(p == NULL){
773
perror("getplugin");
774
free(filename);
942
error(0, errno, "getplugin");
943
close(plugin_fd);
944
free(direntries[i]);
775
945
continue;
776
946
}
777
947
if(p->disabled){
778
948
if(debug){
779
949
fprintf(stderr, "Ignoring disabled plugin \"%s\"\n",
780
dirst->d_name);
950
direntries[i]->d_name);
781
951
}
782
free(filename);
952
close(plugin_fd);
953
free(direntries[i]);
783
954
continue;
784
955
}
785
956
{
788
959
if(g != NULL){
789
960
for(char **a = g->argv + 1; *a != NULL; a++){
790
961
if(not add_argument(p, *a)){
791
perror("add_argument");
962
error(0, errno, "add_argument");
792
963
}
793
964
}
794
965
/* Add global environment variables */
795
966
for(char **e = g->environ; *e != NULL; e++){
796
967
if(not add_environment(p, *e, false)){
797
perror("add_environment");
968
error(0, errno, "add_environment");
798
969
}
799
970
}
800
971
}
801
972
}
802
/* If this plugin has any environment variables, we will call
803
using execve and need to duplicate the environment from this
804
process, too. */
973
/* If this plugin has any environment variables, we need to
974
duplicate the environment from this process, too. */
805
975
if(p->environ[0] != NULL){
806
976
for(char **e = environ; *e != NULL; e++){
807
977
if(not add_environment(p, *e, false)){
808
perror("add_environment");
978
error(0, errno, "add_environment");
809
979
}
810
980
}
811
981
}
812
982
813
983
int pipefd[2];
814
ret = pipe(pipefd);
815
if (ret == -1){
816
perror("pipe");
817
exitstatus = EXIT_FAILURE;
818
goto fallback;
819
}
984
#ifndef O_CLOEXEC
985
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
986
#else /* O_CLOEXEC */
987
ret = (int)TEMP_FAILURE_RETRY(pipe2(pipefd, O_CLOEXEC));
988
#endif /* O_CLOEXEC */
989
if(ret == -1){
990
error(0, errno, "pipe");
991
exitstatus = EX_OSERR;
992
free(direntries[i]);
993
goto fallback;
994
}
995
if(pipefd[0] >= FD_SETSIZE){
996
fprintf(stderr, "pipe()[0] (%d) >= FD_SETSIZE (%d)", pipefd[0],
997
FD_SETSIZE);
998
close(pipefd[0]);
999
close(pipefd[1]);
1000
exitstatus = EX_OSERR;
1001
free(direntries[i]);
1002
goto fallback;
1003
}
1004
#ifndef O_CLOEXEC
820
1005
/* Ask OS to automatic close the pipe on exec */
821
1006
ret = set_cloexec_flag(pipefd[0]);
822
1007
if(ret < 0){
823
perror("set_cloexec_flag");
824
exitstatus = EXIT_FAILURE;
1008
error(0, errno, "set_cloexec_flag");
1009
close(pipefd[0]);
1010
close(pipefd[1]);
1011
exitstatus = EX_OSERR;
1012
free(direntries[i]);
825
1013
goto fallback;
826
1014
}
827
1015
ret = set_cloexec_flag(pipefd[1]);
828
1016
if(ret < 0){
829
perror("set_cloexec_flag");
830
exitstatus = EXIT_FAILURE;
1017
error(0, errno, "set_cloexec_flag");
1018
close(pipefd[0]);
1019
close(pipefd[1]);
1020
exitstatus = EX_OSERR;
1021
free(direntries[i]);
831
1022
goto fallback;
832
1023
}
1024
#endif /* not O_CLOEXEC */
833
1025
/* Block SIGCHLD until process is safely in process list */
834
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1026
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
1027
&sigchld_action.sa_mask,
1028
NULL));
835
1029
if(ret < 0){
836
perror("sigprocmask");
837
exitstatus = EXIT_FAILURE;
1030
error(0, errno, "sigprocmask");
1031
exitstatus = EX_OSERR;
1032
free(direntries[i]);
838
1033
goto fallback;
839
1034
}
840
1035
/* Starting a new process to be watched */
841
pid_t pid = fork();
1036
pid_t pid;
1037
do {
1038
pid = fork();
1039
} while(pid == -1 and errno == EINTR);
842
1040
if(pid == -1){
843
perror("fork");
844
exitstatus = EXIT_FAILURE;
1041
error(0, errno, "fork");
1042
TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1043
&sigchld_action.sa_mask, NULL));
1044
close(pipefd[0]);
1045
close(pipefd[1]);
1046
exitstatus = EX_OSERR;
1047
free(direntries[i]);
845
1048
goto fallback;
846
1049
}
847
1050
if(pid == 0){
848
1051
/* this is the child process */
849
1052
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
850
1053
if(ret < 0){
851
perror("sigaction");
852
_exit(EXIT_FAILURE);
1054
error(0, errno, "sigaction");
1055
_exit(EX_OSERR);
853
1056
}
854
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1057
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
855
1058
if(ret < 0){
856
perror("sigprocmask");
857
_exit(EXIT_FAILURE);
1059
error(0, errno, "sigprocmask");
1060
_exit(EX_OSERR);
858
1061
}
859
1062
860
1063
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
861
1064
if(ret == -1){
862
perror("dup2");
863
_exit(EXIT_FAILURE);
1065
error(0, errno, "dup2");
1066
_exit(EX_OSERR);
864
1067
}
865
1068
866
if(dirfd(dir) < 0){
867
/* If dir has no file descriptor, we could not set FD_CLOEXEC
868
above and must now close it manually here. */
869
closedir(dir);
870
}
871
if(p->environ[0] == NULL){
872
if(execv(filename, p->argv) < 0){
873
perror("execv");
874
_exit(EXIT_FAILURE);
875
}
876
} else {
877
if(execve(filename, p->argv, p->environ) < 0){
878
perror("execve");
879
_exit(EXIT_FAILURE);
880
}
1069
if(fexecve(plugin_fd, p->argv,
1070
(p->environ[0] != NULL) ? p->environ : environ) < 0){
1071
error(0, errno, "fexecve for %s/%s",
1072
plugindir != NULL ? plugindir : PDIR,
1073
direntries[i]->d_name);
1074
_exit(EX_OSERR);
881
1075
}
882
1076
/* no return */
883
1077
}
884
1078
/* Parent process */
885
1079
close(pipefd[1]); /* Close unused write end of pipe */
886
free(filename);
887
plugin *new_plugin = getplugin(dirst->d_name);
888
if (new_plugin == NULL){
889
perror("getplugin");
890
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1080
close(plugin_fd);
1081
plugin *new_plugin = getplugin(direntries[i]->d_name);
1082
if(new_plugin == NULL){
1083
error(0, errno, "getplugin");
1084
ret = (int)(TEMP_FAILURE_RETRY
1085
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1086
NULL)));
891
1087
if(ret < 0){
892
perror("sigprocmask");
1088
error(0, errno, "sigprocmask");
893
1089
}
894
exitstatus = EXIT_FAILURE;
1090
exitstatus = EX_OSERR;
1091
free(direntries[i]);
895
1092
goto fallback;
896
1093
}
1094
free(direntries[i]);
897
1095
898
1096
new_plugin->pid = pid;
899
1097
new_plugin->fd = pipefd[0];
900
1098
1099
if(debug){
1100
fprintf(stderr, "Plugin %s started (PID %" PRIdMAX ")\n",
1101
new_plugin->name, (intmax_t) (new_plugin->pid));
1102
}
1103
901
1104
/* Unblock SIGCHLD so signal handler can be run if this process
902
1105
has already completed */
903
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1106
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1107
&sigchld_action.sa_mask,
1108
NULL));
904
1109
if(ret < 0){
905
perror("sigprocmask");
906
exitstatus = EXIT_FAILURE;
1110
error(0, errno, "sigprocmask");
1111
exitstatus = EX_OSERR;
907
1112
goto fallback;
908
1113
}
909
1114
910
1115
FD_SET(new_plugin->fd, &rfds_all);
911
1116
912
if (maxfd < new_plugin->fd){
1117
if(maxfd < new_plugin->fd){
913
1118
maxfd = new_plugin->fd;
914
1119
}
915
916
1120
}
917
1121
918
closedir(dir);
919
dir = NULL;
920
1122
free(direntries);
1123
direntries = NULL;
1124
close(dir_fd);
1125
dir_fd = -1;
1126
free_plugin(getplugin(NULL));
1127
921
1128
for(plugin *p = plugin_list; p != NULL; p = p->next){
922
1129
if(p->pid != 0){
923
1130
break;
928
1135
free_plugin_list();
929
1136
}
930
1137
}
931
1138
932
1139
/* Main loop while running plugins exist */
933
1140
while(plugin_list){
934
1141
fd_set rfds = rfds_all;
935
1142
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
936
if (select_ret == -1){
937
perror("select");
938
exitstatus = EXIT_FAILURE;
1143
if(select_ret == -1 and errno != EINTR){
1144
error(0, errno, "select");
1145
exitstatus = EX_OSERR;
939
1146
goto fallback;
940
1147
}
941
1148
/* OK, now either a process completed, or something can be read
942
1149
from one of them */
943
for(plugin *proc = plugin_list; proc != NULL; proc = proc->next){
1150
for(plugin *proc = plugin_list; proc != NULL;){
944
1151
/* Is this process completely done? */
945
if(proc->eof and proc->completed){
1152
if(proc->completed and proc->eof){
946
1153
/* Only accept the plugin output if it exited cleanly */
947
1154
if(not WIFEXITED(proc->status)
948
1155
or WEXITSTATUS(proc->status) != 0){
949
1156
/* Bad exit by plugin */
950
1157
951
1158
if(debug){
952
1159
if(WIFEXITED(proc->status)){
953
fprintf(stderr, "Plugin %u exited with status %d\n",
954
(unsigned int) (proc->pid),
1160
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1161
" status %d\n", proc->name,
1162
(intmax_t) (proc->pid),
955
1163
WEXITSTATUS(proc->status));
956
} else if(WIFSIGNALED(proc->status)) {
957
fprintf(stderr, "Plugin %u killed by signal %d\n",
958
(unsigned int) (proc->pid),
959
WTERMSIG(proc->status));
960
} else if(WCOREDUMP(proc->status)){
961
fprintf(stderr, "Plugin %d dumped core\n",
962
(unsigned int) (proc->pid));
1164
} else if(WIFSIGNALED(proc->status)){
1165
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1166
" signal %d: %s\n", proc->name,
1167
(intmax_t) (proc->pid),
1168
WTERMSIG(proc->status),
1169
strsignal(WTERMSIG(proc->status)));
963
1170
}
964
1171
}
965
1172
966
1173
/* Remove the plugin */
967
1174
FD_CLR(proc->fd, &rfds_all);
968
1175
969
1176
/* Block signal while modifying process_list */
970
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1177
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1178
(SIG_BLOCK,
1179
&sigchld_action.sa_mask,
1180
NULL));
971
1181
if(ret < 0){
972
perror("sigprocmask");
973
exitstatus = EXIT_FAILURE;
1182
error(0, errno, "sigprocmask");
1183
exitstatus = EX_OSERR;
974
1184
goto fallback;
975
1185
}
1186
1187
plugin *next_plugin = proc->next;
976
1188
free_plugin(proc);
1189
proc = next_plugin;
1190
977
1191
/* We are done modifying process list, so unblock signal */
978
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
979
NULL);
1192
ret = (int)(TEMP_FAILURE_RETRY
1193
(sigprocmask(SIG_UNBLOCK,
1194
&sigchld_action.sa_mask, NULL)));
980
1195
if(ret < 0){
981
perror("sigprocmask");
982
exitstatus = EXIT_FAILURE;
1196
error(0, errno, "sigprocmask");
1197
exitstatus = EX_OSERR;
983
1198
goto fallback;
984
1199
}
985
1200
986
1201
if(plugin_list == NULL){
987
1202
break;
988
1203
}
1204
989
1205
continue;
990
1206
}
991
1207
992
1208
/* This process exited nicely, so print its buffer */
993
1209
994
1210
bool bret = print_out_password(proc->buffer,
995
1211
proc->buffer_length);
996
1212
if(not bret){
997
perror("print_out_password");
998
exitstatus = EXIT_FAILURE;
1213
error(0, errno, "print_out_password");
1214
exitstatus = EX_IOERR;
999
1215
}
1000
1216
goto fallback;
1001
1217
}
1003
1219
/* This process has not completed. Does it have any output? */
1004
1220
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1005
1221
/* This process had nothing to say at this time */
1222
proc = proc->next;
1006
1223
continue;
1007
1224
}
1008
1225
/* Before reading, make the process' data buffer large enough */
1009
1226
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1010
proc->buffer = realloc(proc->buffer, proc->buffer_size
1011
+ (size_t) BUFFER_SIZE);
1012
if (proc->buffer == NULL){
1013
perror("malloc");
1014
exitstatus = EXIT_FAILURE;
1227
char *new_buffer = realloc(proc->buffer, proc->buffer_size
1228
+ (size_t) BUFFER_SIZE);
1229
if(new_buffer == NULL){
1230
error(0, errno, "malloc");
1231
exitstatus = EX_OSERR;
1015
1232
goto fallback;
1016
1233
}
1234
proc->buffer = new_buffer;
1017
1235
proc->buffer_size += BUFFER_SIZE;
1018
1236
}
1019
1237
/* Read from the process */
1020
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1021
BUFFER_SIZE);
1022
if(ret < 0){
1238
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1239
proc->buffer
1240
+ proc->buffer_length,
1241
BUFFER_SIZE));
1242
if(sret < 0){
1023
1243
/* Read error from this process; ignore the error */
1244
proc = proc->next;
1024
1245
continue;
1025
1246
}
1026
if(ret == 0){
1247
if(sret == 0){
1027
1248
/* got EOF */
1028
1249
proc->eof = true;
1029
1250
} else {
1030
proc->buffer_length += (size_t) ret;
1251
proc->buffer_length += (size_t) sret;
1031
1252
}
1032
1253
}
1033
1254
}
1034
1035
1255
1256
1036
1257
fallback:
1037
1258
1038
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1259
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1260
and exitstatus != EX_OK)){
1039
1261
/* Fallback if all plugins failed, none are found or an error
1040
1262
occured */
1041
1263
bool bret;
1042
1264
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1043
1265
char *passwordbuffer = getpass("Password: ");
1044
bret = print_out_password(passwordbuffer, strlen(passwordbuffer));
1266
size_t len = strlen(passwordbuffer);
1267
/* Strip trailing newline */
1268
if(len > 0 and passwordbuffer[len-1] == '\n'){
1269
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1270
len--;
1271
}
1272
bret = print_out_password(passwordbuffer, len);
1045
1273
if(not bret){
1046
perror("print_out_password");
1047
exitstatus = EXIT_FAILURE;
1274
error(0, errno, "print_out_password");
1275
exitstatus = EX_IOERR;
1048
1276
}
1049
1277
}
1050
1278
1051
1279
/* Restore old signal handler */
1052
1280
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1053
1281
if(ret == -1){
1054
perror("sigaction");
1055
exitstatus = EXIT_FAILURE;
1282
error(0, errno, "sigaction");
1283
exitstatus = EX_OSERR;
1056
1284
}
1057
1285
1058
1286
if(custom_argv != NULL){
1059
1287
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1060
1288
free(*arg);
1062
1290
free(custom_argv);
1063
1291
}
1064
1292
1065
if(dir != NULL){
1066
closedir(dir);
1293
free(direntries);
1294
1295
if(dir_fd != -1){
1296
close(dir_fd);
1067
1297
}
1068
1298
1069
/* Free the process list and kill the processes */
1299
/* Kill the processes */
1070
1300
for(plugin *p = plugin_list; p != NULL; p = p->next){
1071
1301
if(p->pid != 0){
1072
1302
close(p->fd);
1073
1303
ret = kill(p->pid, SIGTERM);
1074
1304
if(ret == -1 and errno != ESRCH){
1075
1305
/* Set-uid proccesses might not get closed */
1076
perror("kill");
1306
error(0, errno, "kill");
1077
1307
}
1078
1308
}
1079
1309
}
1080
1310
1081
1311
/* Wait for any remaining child processes to terminate */
1082
do{
1312
do {
1083
1313
ret = wait(NULL);
1084
1314
} while(ret >= 0);
1085
1315
if(errno != ECHILD){
1086
perror("wait");
1316
error(0, errno, "wait");
1087
1317
}
1088
1318
1089
1319
free_plugin_list();
1090
1320
1091
1321
free(plugindir);
1322
free(pluginhelperdir);
1092
1323
free(argfile);
1093
1324
1094
1325
return exitstatus;
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0