To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugbasedclient.c
- browse files at revision 13
- compare with another revision
- download diff
- download tarball
- view history from revision 13
- Committer: Björn Påhlsson
- Date: 2008-07-20 02:52:20 UTC
- Revision ID: belorn@braxen-20080720025220-r5u0388uy9iu23h6
Added following support:
Pluginbased client handler
rewritten Mandos client
Avahi instead of udp server discovery
openpgp encrypted key support
Passprompt stand alone application for direct console input
Added logging for Mandos server
Pluginbased client handler
rewritten Mandos client
Avahi instead of udp server discovery
openpgp encrypted key support
Passprompt stand alone application for direct console input
Added logging for Mandos server
- files added:
- ca.pem
- files removed:
- .bzrignore
- files renamed:
- clients.conf => mandos-clients.conf
- plugin-runner.c => plugbasedclient.c
- plugins.d/mandos-client.c => plugins.d/mandosclient.c
- plugins.d/password-prompt.c => plugins.d/passprompt.c
- mandos => server.py
- files modified:
- Makefile
added
removed
plugbasedclient.c
1
/* -*- coding: utf-8 -*- */
2
/*
3
* Mandos plugin runner - Run Mandos plugins
4
*
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
6
*
7
* This program is free software: you can redistribute it and/or
8
* modify it under the terms of the GNU General Public License as
9
* published by the Free Software Foundation, either version 3 of the
10
* License, or (at your option) any later version.
11
*
12
* This program is distributed in the hope that it will be useful, but
13
* WITHOUT ANY WARRANTY; without even the implied warranty of
14
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15
* General Public License for more details.
16
*
17
* You should have received a copy of the GNU General Public License
18
* along with this program. If not, see
19
* <http://www.gnu.org/licenses/>.
20
*
21
* Contact the authors at <mandos@fukt.bsnet.se>.
22
*/
23
24
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
25
asprintf() */
26
#include <stddef.h> /* size_t, NULL */
27
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
28
EXIT_SUCCESS, realloc() */
29
#include <stdbool.h> /* bool, true, false */
30
#include <stdio.h> /* perror, popen(), fileno(),
31
fprintf(), stderr, STDOUT_FILENO */
32
#include <sys/types.h> /* DIR, opendir(), stat(), struct
33
stat, waitpid(), WIFEXITED(),
34
WEXITSTATUS(), wait(), pid_t,
35
uid_t, gid_t, getuid(), getgid(),
36
dirfd() */
37
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
38
FD_SET(), FD_ISSET(), FD_CLR */
39
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
40
WEXITSTATUS() */
41
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
42
#include <iso646.h> /* and, or, not */
43
#include <dirent.h> /* DIR, struct dirent, opendir(),
44
readdir(), closedir(), dirfd() */
45
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
46
fcntl(), setuid(), setgid(),
47
F_GETFD, F_SETFD, FD_CLOEXEC,
48
access(), pipe(), fork(), close()
49
dup2, STDOUT_FILENO, _exit(),
50
execv(), write(), read(),
51
close() */
52
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
53
FD_CLOEXEC */
54
#include <string.h> /* strsep, strlen(), asprintf() */
55
#include <errno.h> /* errno */
56
#include <argp.h> /* struct argp_option, struct
57
argp_state, struct argp,
58
argp_parse(), ARGP_ERR_UNKNOWN,
59
ARGP_KEY_END, ARGP_KEY_ARG,
60
error_t */
61
#include <signal.h> /* struct sigaction, sigemptyset(),
62
sigaddset(), sigaction(),
63
sigprocmask(), SIG_BLOCK, SIGCHLD,
64
SIG_UNBLOCK, kill() */
65
#include <errno.h> /* errno, EBADF */
66
67
#define BUFFER_SIZE 256
68
69
#define PDIR "/lib/mandos/plugins.d"
70
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
71
72
const char *argp_program_version = "plugin-runner 1.0";
73
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
74
75
struct plugin;
76
77
typedef struct plugin{
78
char *name; /* can be NULL or any plugin name */
79
char **argv;
80
int argc;
81
char **environ;
82
int envc;
83
bool disabled;
84
85
/* Variables used for running processes*/
1
#include <stdio.h> /* popen, fileno */
2
#include <iso646.h> /* and, or, not */
3
#include <sys/types.h> /* DIR, opendir, stat, struct stat, waitpid,
4
WIFEXITED, WEXITSTATUS, wait */
5
#include <sys/wait.h> /* wait */
6
#include <dirent.h> /* DIR, opendir */
7
#include <sys/stat.h> /* stat, struct stat */
8
#include <unistd.h> /* stat, struct stat, chdir */
9
#include <stdlib.h> /* EXIT_FAILURE */
10
#include <sys/select.h> /* fd_set, select, FD_ZERO, FD_SET, FD_ISSET */
11
#include <string.h> /* strlen, strcpy, strcat */
12
#include <stdbool.h> /* true */
13
#include <sys/wait.h> /* waitpid, WIFEXITED, WEXITSTATUS */
14
#include <errno.h> /* errno */
15
16
struct process;
17
18
typedef struct process{
86
19
pid_t pid;
87
20
int fd;
88
21
char *buffer;
89
size_t buffer_size;
90
size_t buffer_length;
91
bool eof;
92
volatile bool completed;
93
volatile int status;
94
struct plugin *next;
95
} plugin;
96
97
static plugin *plugin_list = NULL;
98
99
/* Gets an existing plugin based on name,
100
or if none is found, creates a new one */
101
static plugin *getplugin(char *name){
102
/* Check for exiting plugin with that name */
103
for (plugin *p = plugin_list; p != NULL; p = p->next){
104
if ((p->name == name)
105
or (p->name and name and (strcmp(p->name, name) == 0))){
106
return p;
107
}
108
}
109
/* Create a new plugin */
110
plugin *new_plugin = malloc(sizeof(plugin));
111
if (new_plugin == NULL){
112
return NULL;
113
}
114
char *copy_name = NULL;
115
if(name != NULL){
116
copy_name = strdup(name);
117
if(copy_name == NULL){
118
return NULL;
119
}
120
}
121
122
*new_plugin = (plugin) { .name = copy_name,
123
.argc = 1,
124
.disabled = false,
125
.next = plugin_list };
126
127
new_plugin->argv = malloc(sizeof(char *) * 2);
128
if (new_plugin->argv == NULL){
129
free(copy_name);
130
free(new_plugin);
131
return NULL;
132
}
133
new_plugin->argv[0] = copy_name;
134
new_plugin->argv[1] = NULL;
135
136
new_plugin->environ = malloc(sizeof(char *));
137
if(new_plugin->environ == NULL){
138
free(copy_name);
139
free(new_plugin->argv);
140
free(new_plugin);
141
return NULL;
142
}
143
new_plugin->environ[0] = NULL;
144
145
/* Append the new plugin to the list */
146
plugin_list = new_plugin;
147
return new_plugin;
148
}
149
150
/* Helper function for add_argument and add_environment */
151
static bool add_to_char_array(const char *new, char ***array,
152
int *len){
153
/* Resize the pointed-to array to hold one more pointer */
154
*array = realloc(*array, sizeof(char *)
155
* (size_t) ((*len) + 2));
156
/* Malloc check */
157
if(*array == NULL){
158
return false;
159
}
160
/* Make a copy of the new string */
161
char *copy = strdup(new);
162
if(copy == NULL){
163
return false;
164
}
165
/* Insert the copy */
166
(*array)[*len] = copy;
167
(*len)++;
168
/* Add a new terminating NULL pointer to the last element */
169
(*array)[*len] = NULL;
170
return true;
171
}
172
173
/* Add to a plugin's argument vector */
174
static bool add_argument(plugin *p, const char *arg){
175
if(p == NULL){
176
return false;
177
}
178
return add_to_char_array(arg, &(p->argv), &(p->argc));
179
}
180
181
/* Add to a plugin's environment */
182
static bool add_environment(plugin *p, const char *def, bool replace){
183
if(p == NULL){
184
return false;
185
}
186
/* namelen = length of name of environment variable */
187
size_t namelen = (size_t)(strchrnul(def, '=') - def);
188
/* Search for this environment variable */
189
for(char **e = p->environ; *e != NULL; e++){
190
if(strncmp(*e, def, namelen + 1) == 0){
191
/* It already exists */
192
if(replace){
193
char *new = realloc(*e, strlen(def) + 1);
194
if(new == NULL){
195
return false;
196
}
197
*e = new;
198
strcpy(*e, def);
199
}
200
return true;
201
}
202
}
203
return add_to_char_array(def, &(p->environ), &(p->envc));
204
}
205
206
/*
207
* Based on the example in the GNU LibC manual chapter 13.13 "File
208
* Descriptor Flags".
209
* *Note File Descriptor Flags:(libc)Descriptor Flags.
210
*/
211
static int set_cloexec_flag(int fd)
212
{
213
int ret = fcntl(fd, F_GETFD, 0);
214
/* If reading the flags failed, return error indication now. */
215
if(ret < 0){
216
return ret;
217
}
218
/* Store modified flag word in the descriptor. */
219
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
220
}
221
222
223
/* Mark processes as completed when they exit, and save their exit
224
status. */
225
void handle_sigchld(__attribute__((unused)) int sig){
226
while(true){
227
plugin *proc = plugin_list;
228
int status;
229
pid_t pid = waitpid(-1, &status, WNOHANG);
230
if(pid == 0){
231
/* Only still running child processes */
232
break;
233
}
234
if(pid == -1){
235
if (errno != ECHILD){
236
perror("waitpid");
237
}
238
/* No child processes */
239
break;
240
}
241
242
/* A child exited, find it in process_list */
243
while(proc != NULL and proc->pid != pid){
244
proc = proc->next;
245
}
246
if(proc == NULL){
247
/* Process not found in process list */
248
continue;
249
}
250
proc->status = status;
251
proc->completed = true;
252
}
253
}
254
255
/* Prints out a password to stdout */
256
bool print_out_password(const char *buffer, size_t length){
257
ssize_t ret;
258
for(size_t written = 0; written < length; written += (size_t)ret){
259
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
260
length - written));
261
if(ret < 0){
262
return false;
263
}
264
}
265
return true;
266
}
267
268
/* Removes and free a plugin from the plugin list */
269
static void free_plugin(plugin *plugin_node){
270
271
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
272
free(*arg);
273
}
274
free(plugin_node->argv);
275
for(char **env = plugin_node->environ; *env != NULL; env++){
276
free(*env);
277
}
278
free(plugin_node->environ);
279
free(plugin_node->buffer);
280
281
/* Removes the plugin from the singly-linked list */
282
if(plugin_node == plugin_list){
283
/* First one - simple */
284
plugin_list = plugin_list->next;
285
} else {
286
/* Second one or later */
287
for(plugin *p = plugin_list; p != NULL; p = p->next){
288
if(p->next == plugin_node){
289
p->next = plugin_node->next;
290
break;
291
}
292
}
293
}
294
295
free(plugin_node);
296
}
297
298
static void free_plugin_list(void){
299
while(plugin_list != NULL){
300
free_plugin(plugin_list);
301
}
302
}
22
int buffer_size;
23
int buffer_length;
24
struct process *next;
25
} process;
26
27
#define BUFFER_SIZE 256
303
28
304
29
int main(int argc, char *argv[]){
305
char *plugindir = NULL;
306
char *argfile = NULL;
307
FILE *conffp;
308
size_t d_name_len;
309
DIR *dir = NULL;
30
char plugindir[] = "plugins.d";
31
size_t d_name_len, plugindir_len = sizeof(plugindir)-1;
32
DIR *dir;
310
33
struct dirent *dirst;
311
34
struct stat st;
312
fd_set rfds_all;
35
fd_set rfds_orig;
313
36
int ret, maxfd = 0;
314
uid_t uid = 65534;
315
gid_t gid = 65534;
316
bool debug = false;
317
int exitstatus = EXIT_SUCCESS;
318
struct sigaction old_sigchld_action;
319
struct sigaction sigchld_action = { .sa_handler = handle_sigchld,
320
.sa_flags = SA_NOCLDSTOP };
321
char **custom_argv = NULL;
322
int custom_argc = 0;
323
324
/* Establish a signal handler */
325
sigemptyset(&sigchld_action.sa_mask);
326
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
327
if(ret == -1){
328
perror("sigaddset");
329
exitstatus = EXIT_FAILURE;
330
goto fallback;
331
}
332
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
333
if(ret == -1){
334
perror("sigaction");
335
exitstatus = EXIT_FAILURE;
336
goto fallback;
337
}
338
339
/* The options we understand. */
340
struct argp_option options[] = {
341
{ .name = "global-options", .key = 'g',
342
.arg = "OPTION[,OPTION[,...]]",
343
.doc = "Options passed to all plugins" },
344
{ .name = "global-env", .key = 'G',
345
.arg = "VAR=value",
346
.doc = "Environment variable passed to all plugins" },
347
{ .name = "options-for", .key = 'o',
348
.arg = "PLUGIN:OPTION[,OPTION[,...]]",
349
.doc = "Options passed only to specified plugin" },
350
{ .name = "env-for", .key = 'E',
351
.arg = "PLUGIN:ENV=value",
352
.doc = "Environment variable passed to specified plugin" },
353
{ .name = "disable", .key = 'd',
354
.arg = "PLUGIN",
355
.doc = "Disable a specific plugin", .group = 1 },
356
{ .name = "enable", .key = 'e',
357
.arg = "PLUGIN",
358
.doc = "Enable a specific plugin", .group = 1 },
359
{ .name = "plugin-dir", .key = 128,
360
.arg = "DIRECTORY",
361
.doc = "Specify a different plugin directory", .group = 2 },
362
{ .name = "config-file", .key = 129,
363
.arg = "FILE",
364
.doc = "Specify a different configuration file", .group = 2 },
365
{ .name = "userid", .key = 130,
366
.arg = "ID", .flags = 0,
367
.doc = "User ID the plugins will run as", .group = 3 },
368
{ .name = "groupid", .key = 131,
369
.arg = "ID", .flags = 0,
370
.doc = "Group ID the plugins will run as", .group = 3 },
371
{ .name = "debug", .key = 132,
372
.doc = "Debug mode", .group = 4 },
373
{ .name = NULL }
374
};
375
376
error_t parse_opt (int key, char *arg, __attribute__((unused))
377
struct argp_state *state) {
378
switch (key) {
379
case 'g': /* --global-options */
380
if (arg != NULL){
381
char *p;
382
while((p = strsep(&arg, ",")) != NULL){
383
if(p[0] == '\0'){
384
continue;
385
}
386
if(not add_argument(getplugin(NULL), p)){
387
perror("add_argument");
388
return ARGP_ERR_UNKNOWN;
389
}
390
}
391
}
392
break;
393
case 'G': /* --global-env */
394
if(arg == NULL){
395
break;
396
}
397
if(not add_environment(getplugin(NULL), arg, true)){
398
perror("add_environment");
399
}
400
break;
401
case 'o': /* --options-for */
402
if (arg != NULL){
403
char *p_name = strsep(&arg, ":");
404
if(p_name[0] == '\0' or arg == NULL){
405
break;
406
}
407
char *opt = strsep(&arg, ":");
408
if(opt[0] == '\0' or opt == NULL){
409
break;
410
}
411
char *p;
412
while((p = strsep(&opt, ",")) != NULL){
413
if(p[0] == '\0'){
414
continue;
415
}
416
if(not add_argument(getplugin(p_name), p)){
417
perror("add_argument");
418
return ARGP_ERR_UNKNOWN;
419
}
420
}
421
}
422
break;
423
case 'E': /* --env-for */
424
if(arg == NULL){
425
break;
426
}
427
{
428
char *envdef = strchr(arg, ':');
429
if(envdef == NULL){
430
break;
431
}
432
*envdef = '\0';
433
if(not add_environment(getplugin(arg), envdef+1, true)){
434
perror("add_environment");
435
}
436
}
437
break;
438
case 'd': /* --disable */
439
if (arg != NULL){
440
plugin *p = getplugin(arg);
441
if(p == NULL){
442
return ARGP_ERR_UNKNOWN;
443
}
444
p->disabled = true;
445
}
446
break;
447
case 'e': /* --enable */
448
if (arg != NULL){
449
plugin *p = getplugin(arg);
450
if(p == NULL){
451
return ARGP_ERR_UNKNOWN;
452
}
453
p->disabled = false;
454
}
455
break;
456
case 128: /* --plugin-dir */
457
free(plugindir);
458
plugindir = strdup(arg);
459
if(plugindir == NULL){
460
perror("strdup");
461
}
462
break;
463
case 129: /* --config-file */
464
/* This is already done by parse_opt_config_file() */
465
break;
466
case 130: /* --userid */
467
uid = (uid_t)strtol(arg, NULL, 10);
468
break;
469
case 131: /* --groupid */
470
gid = (gid_t)strtol(arg, NULL, 10);
471
break;
472
case 132: /* --debug */
473
debug = true;
474
break;
475
case ARGP_KEY_ARG:
476
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
477
break;
478
case ARGP_KEY_END:
479
break;
480
default:
481
return ARGP_ERR_UNKNOWN;
482
}
483
return 0;
484
}
485
486
/* This option parser is the same as parse_opt() above, except it
487
ignores everything but the --config-file option. */
488
error_t parse_opt_config_file (int key, char *arg,
489
__attribute__((unused))
490
struct argp_state *state) {
491
switch (key) {
492
case 'g': /* --global-options */
493
case 'G': /* --global-env */
494
case 'o': /* --options-for */
495
case 'E': /* --env-for */
496
case 'd': /* --disable */
497
case 'e': /* --enable */
498
case 128: /* --plugin-dir */
499
break;
500
case 129: /* --config-file */
501
free(argfile);
502
argfile = strdup(arg);
503
if(argfile == NULL){
504
perror("strdup");
505
}
506
break;
507
case 130: /* --userid */
508
case 131: /* --groupid */
509
case 132: /* --debug */
510
case ARGP_KEY_ARG:
511
case ARGP_KEY_END:
512
break;
513
default:
514
return ARGP_ERR_UNKNOWN;
515
}
516
return 0;
517
}
518
519
struct argp argp = { .options = options,
520
.parser = parse_opt_config_file,
521
.args_doc = "",
522
.doc = "Mandos plugin runner -- Run plugins" };
523
524
/* Parse using the parse_opt_config_file in order to get the custom
525
config file location, if any. */
526
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
527
if (ret == ARGP_ERR_UNKNOWN){
528
fprintf(stderr, "Unknown error while parsing arguments\n");
529
exitstatus = EXIT_FAILURE;
530
goto fallback;
531
}
532
533
/* Reset to the normal argument parser */
534
argp.parser = parse_opt;
535
536
/* Open the configfile if available */
537
if (argfile == NULL){
538
conffp = fopen(AFILE, "r");
539
} else {
540
conffp = fopen(argfile, "r");
541
}
542
if(conffp != NULL){
543
char *org_line = NULL;
544
char *p, *arg, *new_arg, *line;
545
size_t size = 0;
546
ssize_t sret;
547
const char whitespace_delims[] = " \r\t\f\v\n";
548
const char comment_delim[] = "#";
549
550
custom_argc = 1;
551
custom_argv = malloc(sizeof(char*) * 2);
552
if(custom_argv == NULL){
553
perror("malloc");
554
exitstatus = EXIT_FAILURE;
555
goto fallback;
556
}
557
custom_argv[0] = argv[0];
558
custom_argv[1] = NULL;
559
560
/* for each line in the config file, strip whitespace and ignore
561
commented text */
562
while(true){
563
sret = getline(&org_line, &size, conffp);
564
if(sret == -1){
565
break;
566
}
567
568
line = org_line;
569
arg = strsep(&line, comment_delim);
570
while((p = strsep(&arg, whitespace_delims)) != NULL){
571
if(p[0] == '\0'){
572
continue;
573
}
574
new_arg = strdup(p);
575
if(new_arg == NULL){
576
perror("strdup");
577
exitstatus = EXIT_FAILURE;
578
free(org_line);
579
goto fallback;
580
}
581
582
custom_argc += 1;
583
custom_argv = realloc(custom_argv, sizeof(char *)
584
* ((unsigned int) custom_argc + 1));
585
if(custom_argv == NULL){
586
perror("realloc");
587
exitstatus = EXIT_FAILURE;
588
free(org_line);
589
goto fallback;
590
}
591
custom_argv[custom_argc-1] = new_arg;
592
custom_argv[custom_argc] = NULL;
593
}
594
}
595
free(org_line);
596
} else {
597
/* Check for harmful errors and go to fallback. Other errors might
598
not affect opening plugins */
599
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
600
perror("fopen");
601
exitstatus = EXIT_FAILURE;
602
goto fallback;
603
}
604
}
605
/* If there was any arguments from configuration file,
606
pass them to parser as command arguments */
607
if(custom_argv != NULL){
608
ret = argp_parse (&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
609
0, NULL);
610
if (ret == ARGP_ERR_UNKNOWN){
611
fprintf(stderr, "Unknown error while parsing arguments\n");
612
exitstatus = EXIT_FAILURE;
613
goto fallback;
614
}
615
}
616
617
/* Parse actual command line arguments, to let them override the
618
config file */
619
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
620
if (ret == ARGP_ERR_UNKNOWN){
621
fprintf(stderr, "Unknown error while parsing arguments\n");
622
exitstatus = EXIT_FAILURE;
623
goto fallback;
624
}
625
626
if(debug){
627
for(plugin *p = plugin_list; p != NULL; p=p->next){
628
fprintf(stderr, "Plugin: %s has %d arguments\n",
629
p->name ? p->name : "Global", p->argc - 1);
630
for(char **a = p->argv; *a != NULL; a++){
631
fprintf(stderr, "\tArg: %s\n", *a);
632
}
633
fprintf(stderr, "...and %u environment variables\n", p->envc);
634
for(char **a = p->environ; *a != NULL; a++){
635
fprintf(stderr, "\t%s\n", *a);
636
}
637
}
638
}
639
640
/* Strip permissions down to nobody */
641
ret = setuid(uid);
642
if (ret == -1){
643
perror("setuid");
644
}
645
setgid(gid);
646
if (ret == -1){
647
perror("setgid");
648
}
649
650
if (plugindir == NULL){
651
dir = opendir(PDIR);
652
} else {
653
dir = opendir(plugindir);
654
}
655
37
process *process_list = NULL;
38
39
dir = opendir(plugindir);
40
656
41
if(dir == NULL){
657
perror("Could not open plugin dir");
658
exitstatus = EXIT_FAILURE;
659
goto fallback;
660
}
661
662
/* Set the FD_CLOEXEC flag on the directory, if possible */
663
{
664
int dir_fd = dirfd(dir);
665
if(dir_fd >= 0){
666
ret = set_cloexec_flag(dir_fd);
667
if(ret < 0){
668
perror("set_cloexec_flag");
669
exitstatus = EXIT_FAILURE;
670
goto fallback;
671
}
672
}
673
}
674
675
FD_ZERO(&rfds_all);
676
677
/* Read and execute any executable in the plugin directory*/
42
fprintf(stderr, "Can not open directory\n");
43
return EXIT_FAILURE;
44
}
45
46
FD_ZERO(&rfds_orig);
47
678
48
while(true){
679
49
dirst = readdir(dir);
680
50
681
/* All directory entries have been processed */
51
// All directory entries have been processed
682
52
if(dirst == NULL){
683
if (errno == EBADF){
684
perror("readdir");
685
exitstatus = EXIT_FAILURE;
686
goto fallback;
687
}
688
53
break;
689
54
}
690
55
691
56
d_name_len = strlen(dirst->d_name);
692
57
693
/* Ignore dotfiles, backup files and other junk */
694
{
695
bool bad_name = false;
696
697
const char const *bad_prefixes[] = { ".", "#", NULL };
698
699
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
700
".dpkg-old",
701
".dpkg-divert", NULL };
702
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
703
size_t pre_len = strlen(*pre);
704
if((d_name_len >= pre_len)
705
and strncmp((dirst->d_name), *pre, pre_len) == 0){
706
if(debug){
707
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
708
" with bad prefix %s\n", dirst->d_name, *pre);
709
}
710
bad_name = true;
711
break;
712
}
713
}
714
if(bad_name){
715
continue;
716
}
717
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
718
size_t suf_len = strlen(*suf);
719
if((d_name_len >= suf_len)
720
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
721
== 0)){
722
if(debug){
723
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
724
" with bad suffix %s\n", dirst->d_name, *suf);
725
}
726
bad_name = true;
727
break;
728
}
729
}
730
731
if(bad_name){
732
continue;
733
}
734
}
735
736
char *filename;
737
if(plugindir == NULL){
738
ret = asprintf(&filename, PDIR "/%s", dirst->d_name);
739
} else {
740
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
741
}
742
if(ret < 0){
743
perror("asprintf");
744
continue;
745
}
746
747
ret = stat(filename, &st);
748
if (ret == -1){
749
perror("stat");
750
free(filename);
751
continue;
752
}
753
754
/* Ignore non-executable files */
755
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
756
if(debug){
757
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
758
" with bad type or mode\n", filename);
759
}
760
free(filename);
761
continue;
762
}
763
764
plugin *p = getplugin(dirst->d_name);
765
if(p == NULL){
766
perror("getplugin");
767
free(filename);
768
continue;
769
}
770
if(p->disabled){
771
if(debug){
772
fprintf(stderr, "Ignoring disabled plugin \"%s\"\n",
773
dirst->d_name);
774
}
775
free(filename);
776
continue;
777
}
778
{
779
/* Add global arguments to argument list for this plugin */
780
plugin *g = getplugin(NULL);
781
if(g != NULL){
782
for(char **a = g->argv + 1; *a != NULL; a++){
783
if(not add_argument(p, *a)){
784
perror("add_argument");
785
}
786
}
787
/* Add global environment variables */
788
for(char **e = g->environ; *e != NULL; e++){
789
if(not add_environment(p, *e, false)){
790
perror("add_environment");
791
}
792
}
793
}
794
}
795
/* If this plugin has any environment variables, we will call
796
using execve and need to duplicate the environment from this
797
process, too. */
798
if(p->environ[0] != NULL){
799
for(char **e = environ; *e != NULL; e++){
800
if(not add_environment(p, *e, false)){
801
perror("add_environment");
802
}
803
}
804
}
805
806
int pipefd[2];
807
ret = pipe(pipefd);
808
if (ret == -1){
809
perror("pipe");
810
exitstatus = EXIT_FAILURE;
811
goto fallback;
812
}
813
/* Ask OS to automatic close the pipe on exec */
814
ret = set_cloexec_flag(pipefd[0]);
815
if(ret < 0){
816
perror("set_cloexec_flag");
817
exitstatus = EXIT_FAILURE;
818
goto fallback;
819
}
820
ret = set_cloexec_flag(pipefd[1]);
821
if(ret < 0){
822
perror("set_cloexec_flag");
823
exitstatus = EXIT_FAILURE;
824
goto fallback;
825
}
826
/* Block SIGCHLD until process is safely in process list */
827
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
828
if(ret < 0){
829
perror("sigprocmask");
830
exitstatus = EXIT_FAILURE;
831
goto fallback;
832
}
833
/* Starting a new process to be watched */
834
pid_t pid = fork();
835
if(pid == -1){
836
perror("fork");
837
exitstatus = EXIT_FAILURE;
838
goto fallback;
839
}
840
if(pid == 0){
841
/* this is the child process */
842
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
843
if(ret < 0){
844
perror("sigaction");
845
_exit(EXIT_FAILURE);
846
}
847
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
848
if(ret < 0){
849
perror("sigprocmask");
850
_exit(EXIT_FAILURE);
851
}
852
853
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
854
if(ret == -1){
855
perror("dup2");
856
_exit(EXIT_FAILURE);
857
}
858
859
if(dirfd(dir) < 0){
860
/* If dir has no file descriptor, we could not set FD_CLOEXEC
861
above and must now close it manually here. */
58
// Ignore dotfiles and backup files
59
if (dirst->d_name[0] == '.'
60
or dirst->d_name[d_name_len - 1] == '~'){
61
continue;
62
}
63
64
char *filename = malloc(d_name_len + plugindir_len + 1);
65
strcpy(filename, plugindir);
66
strcat(filename, "/");
67
strcat(filename, dirst->d_name);
68
69
stat(filename, &st);
70
71
if (S_ISREG(st.st_mode) and (access(filename, X_OK) == 0)){
72
// Starting a new process to be watched
73
process *new_process = malloc(sizeof(process));
74
int pipefd[2];
75
pipe(pipefd);
76
new_process->pid = fork();
77
if(new_process->pid == 0){
78
/* this is the child process */
862
79
closedir(dir);
863
}
864
if(p->environ[0] == NULL){
865
if(execv(filename, p->argv) < 0){
866
perror("execv");
867
_exit(EXIT_FAILURE);
868
}
869
} else {
870
if(execve(filename, p->argv, p->environ) < 0){
871
perror("execve");
872
_exit(EXIT_FAILURE);
873
}
874
}
875
/* no return */
876
}
877
/* Parent process */
878
close(pipefd[1]); /* Close unused write end of pipe */
879
free(filename);
880
plugin *new_plugin = getplugin(dirst->d_name);
881
if (new_plugin == NULL){
882
perror("getplugin");
883
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
884
if(ret < 0){
885
perror("sigprocmask");
886
}
887
exitstatus = EXIT_FAILURE;
888
goto fallback;
889
}
890
891
new_plugin->pid = pid;
892
new_plugin->fd = pipefd[0];
893
894
/* Unblock SIGCHLD so signal handler can be run if this process
895
has already completed */
896
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
897
if(ret < 0){
898
perror("sigprocmask");
899
exitstatus = EXIT_FAILURE;
900
goto fallback;
901
}
902
903
FD_SET(new_plugin->fd, &rfds_all);
904
905
if (maxfd < new_plugin->fd){
906
maxfd = new_plugin->fd;
907
}
908
80
close(pipefd[0]); /* close unused read end of pipe */
81
dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
82
/* create a new modified argument list */
83
char **new_argv = malloc(sizeof(char *) * argc + 1);
84
new_argv[0] = filename;
85
for(int i = 1; i < argc; i++){
86
new_argv[i] = argv[i];
87
}
88
new_argv[argc] = NULL;
89
if(execv(filename, new_argv) < 0){
90
perror(argv[0]);
91
close(pipefd[1]);
92
exit(EXIT_FAILURE);
93
}
94
/* no return */
95
}
96
close(pipefd[1]); /* close unused write end of pipe */
97
new_process->fd = pipefd[0];
98
new_process->buffer = malloc(BUFFER_SIZE);
99
if (new_process->buffer == NULL){
100
perror(argv[0]);
101
goto end;
102
}
103
new_process->buffer_size = BUFFER_SIZE;
104
new_process->buffer_length = 0;
105
FD_SET(new_process->fd, &rfds_orig);
106
107
if (maxfd < new_process->fd){
108
maxfd = new_process->fd;
109
}
110
111
//List handling
112
new_process->next = process_list;
113
process_list = new_process;
114
}
909
115
}
910
116
911
117
closedir(dir);
912
dir = NULL;
913
914
for(plugin *p = plugin_list; p != NULL; p = p->next){
915
if(p->pid != 0){
118
119
if (process_list != NULL){
120
while(true){
121
fd_set rfds = rfds_orig;
122
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
123
if (select_ret == -1){
124
perror(argv[0]);
125
goto end;
126
}else{
127
for(process *process_itr = process_list; process_itr != NULL;
128
process_itr = process_itr->next){
129
if(FD_ISSET(process_itr->fd, &rfds)){
130
if(process_itr->buffer_length + BUFFER_SIZE
131
> process_itr->buffer_size){
132
process_itr->buffer = realloc(process_itr->buffer,
133
process_itr->buffer_size
134
+ BUFFER_SIZE);
135
if (process_itr->buffer == NULL){
136
perror(argv[0]);
137
goto end;
138
}
139
process_itr->buffer_size += BUFFER_SIZE;
140
}
141
ret = read(process_itr->fd, process_itr->buffer
142
+ process_itr->buffer_length, BUFFER_SIZE);
143
process_itr->buffer_length+=ret;
144
if(ret == 0){
145
/* got EOF */
146
/* wait for process exit */
147
int status;
148
waitpid(process_itr->pid, &status, 0);
149
if(WIFEXITED(status) and WEXITSTATUS(status) == 0){
150
write(STDOUT_FILENO, process_itr->buffer,
151
process_itr->buffer_length);
152
goto end;
153
} else {
154
FD_CLR(process_itr->fd, &rfds_orig);
155
}
156
}
157
}
158
}
159
}
160
}
161
}
162
163
end:
164
for(process *process_itr = process_list; process_itr != NULL;
165
process_itr = process_itr->next){
166
close(process_itr->fd);
167
kill(process_itr->pid, SIGTERM);
168
free(process_itr->buffer);
169
}
170
171
while(true){
172
int status;
173
ret = wait(&status);
174
if (ret == -1){
175
if(errno != ECHILD){
176
perror("wait");
177
}
916
178
break;
917
179
}
918
if(p->next == NULL){
919
fprintf(stderr, "No plugin processes started. Incorrect plugin"
920
" directory?\n");
921
free_plugin_list();
922
}
923
}
924
925
/* Main loop while running plugins exist */
926
while(plugin_list){
927
fd_set rfds = rfds_all;
928
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
929
if (select_ret == -1){
930
perror("select");
931
exitstatus = EXIT_FAILURE;
932
goto fallback;
933
}
934
/* OK, now either a process completed, or something can be read
935
from one of them */
936
for(plugin *proc = plugin_list; proc != NULL;){
937
/* Is this process completely done? */
938
if(proc->eof and proc->completed){
939
/* Only accept the plugin output if it exited cleanly */
940
if(not WIFEXITED(proc->status)
941
or WEXITSTATUS(proc->status) != 0){
942
/* Bad exit by plugin */
943
944
if(debug){
945
if(WIFEXITED(proc->status)){
946
fprintf(stderr, "Plugin %u exited with status %d\n",
947
(unsigned int) (proc->pid),
948
WEXITSTATUS(proc->status));
949
} else if(WIFSIGNALED(proc->status)) {
950
fprintf(stderr, "Plugin %u killed by signal %d\n",
951
(unsigned int) (proc->pid),
952
WTERMSIG(proc->status));
953
} else if(WCOREDUMP(proc->status)){
954
fprintf(stderr, "Plugin %d dumped core\n",
955
(unsigned int) (proc->pid));
956
}
957
}
958
959
/* Remove the plugin */
960
FD_CLR(proc->fd, &rfds_all);
961
962
/* Block signal while modifying process_list */
963
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
964
if(ret < 0){
965
perror("sigprocmask");
966
exitstatus = EXIT_FAILURE;
967
goto fallback;
968
}
969
970
/* We are done modifying process list, so unblock signal */
971
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
972
NULL);
973
if(ret < 0){
974
perror("sigprocmask");
975
exitstatus = EXIT_FAILURE;
976
goto fallback;
977
}
978
979
if(plugin_list == NULL){
980
break;
981
}
982
983
plugin *next_plugin = proc->next;
984
free_plugin(proc);
985
proc = next_plugin;
986
continue;
987
}
988
989
/* This process exited nicely, so print its buffer */
990
991
bool bret = print_out_password(proc->buffer,
992
proc->buffer_length);
993
if(not bret){
994
perror("print_out_password");
995
exitstatus = EXIT_FAILURE;
996
}
997
goto fallback;
998
}
999
1000
/* This process has not completed. Does it have any output? */
1001
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1002
/* This process had nothing to say at this time */
1003
proc = proc->next;
1004
continue;
1005
}
1006
/* Before reading, make the process' data buffer large enough */
1007
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1008
proc->buffer = realloc(proc->buffer, proc->buffer_size
1009
+ (size_t) BUFFER_SIZE);
1010
if (proc->buffer == NULL){
1011
perror("malloc");
1012
exitstatus = EXIT_FAILURE;
1013
goto fallback;
1014
}
1015
proc->buffer_size += BUFFER_SIZE;
1016
}
1017
/* Read from the process */
1018
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1019
BUFFER_SIZE);
1020
if(ret < 0){
1021
/* Read error from this process; ignore the error */
1022
proc = proc->next;
1023
continue;
1024
}
1025
if(ret == 0){
1026
/* got EOF */
1027
proc->eof = true;
1028
} else {
1029
proc->buffer_length += (size_t) ret;
1030
}
1031
}
1032
}
1033
1034
1035
fallback:
1036
1037
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1038
/* Fallback if all plugins failed, none are found or an error
1039
occured */
1040
bool bret;
1041
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1042
char *passwordbuffer = getpass("Password: ");
1043
size_t len = strlen(passwordbuffer);
1044
/* Strip trailing newline */
1045
if(len > 0 and passwordbuffer[len-1] == '\n'){
1046
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1047
len--;
1048
}
1049
bret = print_out_password(passwordbuffer, len);
1050
if(not bret){
1051
perror("print_out_password");
1052
exitstatus = EXIT_FAILURE;
1053
}
1054
}
1055
1056
/* Restore old signal handler */
1057
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1058
if(ret == -1){
1059
perror("sigaction");
1060
exitstatus = EXIT_FAILURE;
1061
}
1062
1063
if(custom_argv != NULL){
1064
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1065
free(*arg);
1066
}
1067
free(custom_argv);
1068
}
1069
1070
if(dir != NULL){
1071
closedir(dir);
1072
}
1073
1074
/* Free the process list and kill the processes */
1075
for(plugin *p = plugin_list; p != NULL; p = p->next){
1076
if(p->pid != 0){
1077
close(p->fd);
1078
ret = kill(p->pid, SIGTERM);
1079
if(ret == -1 and errno != ESRCH){
1080
/* Set-uid proccesses might not get closed */
1081
perror("kill");
1082
}
1083
}
1084
}
1085
1086
/* Wait for any remaining child processes to terminate */
1087
do{
1088
ret = wait(NULL);
1089
} while(ret >= 0);
1090
if(errno != ECHILD){
1091
perror("wait");
1092
}
1093
1094
free_plugin_list();
1095
1096
free(plugindir);
1097
free(argfile);
1098
1099
return exitstatus;
180
}
181
return EXIT_SUCCESS;
1100
182
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0