To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 238
- compare with another revision
- download diff
- download tarball
- view history from revision 238
- Committer: Teddy Hogeborn
- Date: 2008-12-10 01:26:02 UTC
- mfrom: (237.1.2 mandos)
- Revision ID: teddy@fukt.bsnet.se-20081210012602-vhz3h75xkj24t340
First version of a somewhat complete D-Bus server interface. Also
change user/group name to "_mandos".
* debian/mandos.postinst: Rename old "mandos" user and group to
"_mandos"; create "_mandos" user and group
if none exist.
* debian/mandos-client.postinst: - '' -
* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
group name.
* mandos (_datetime_to_dbus_struct): New; was previously local.
(Client.started): Renamed to "last_started". All users changed.
(Client.started): New; boolean.
(Client.dbus_object_path): New.
(Client.check_command): Renamed to "checker_command". All users
changed.
(Client.__init__): Set and use "self.dbus_object_path". Set
"self.started".
(Client.start): Update "self.started". Emit "self.PropertyChanged"
signals for both "started" and "last_started".
(Client.stop): Update "self.started". Emit "self.PropertyChanged"
signal for "started".
(Client.checker_callback): Take additional "command" argument. All
callers changed. Emit
"self.PropertyChanged" signal.
(Client.bump_timeout): Emit "self.PropertyChanged" signal for
"last_checked_ok".
(Client.start_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.stop_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.still_valid): Bug fix: use "getattr(self, started, False)"
instead of "self.started" in case this client
object is so new that the "started" attribute
has not been created yet.
(Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
Client.GetCreated, Client.GetFingerprint, Client.GetHost,
Client.GetInterval, Client.GetName, Client.GetStarted,
Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
Removed; all callers changed.
(Client.CheckerCompleted): Add "condition" and "command" arguments.
All callers changed.
(Client.GetAllProperties, Client.PropertyChanged): New.
(Client.StillValid): Renamed to "IsStillValid".
(Client.StartChecker): Changed to its own function to avoid the
return value from "Client.start_checker()".
(Client.Stop): Changed to its own function to avoid the return value
from "Client.stop()".
(main): Try "_mandos" before "mandos" as user and group name.
Removed inner function "remove_from_clients". New inner
class "MandosServer".
change user/group name to "_mandos".
* debian/mandos.postinst: Rename old "mandos" user and group to
"_mandos"; create "_mandos" user and group
if none exist.
* debian/mandos-client.postinst: - '' -
* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
group name.
* mandos (_datetime_to_dbus_struct): New; was previously local.
(Client.started): Renamed to "last_started". All users changed.
(Client.started): New; boolean.
(Client.dbus_object_path): New.
(Client.check_command): Renamed to "checker_command". All users
changed.
(Client.__init__): Set and use "self.dbus_object_path". Set
"self.started".
(Client.start): Update "self.started". Emit "self.PropertyChanged"
signals for both "started" and "last_started".
(Client.stop): Update "self.started". Emit "self.PropertyChanged"
signal for "started".
(Client.checker_callback): Take additional "command" argument. All
callers changed. Emit
"self.PropertyChanged" signal.
(Client.bump_timeout): Emit "self.PropertyChanged" signal for
"last_checked_ok".
(Client.start_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.stop_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.still_valid): Bug fix: use "getattr(self, started, False)"
instead of "self.started" in case this client
object is so new that the "started" attribute
has not been created yet.
(Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
Client.GetCreated, Client.GetFingerprint, Client.GetHost,
Client.GetInterval, Client.GetName, Client.GetStarted,
Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
Removed; all callers changed.
(Client.CheckerCompleted): Add "condition" and "command" arguments.
All callers changed.
(Client.GetAllProperties, Client.PropertyChanged): New.
(Client.StillValid): Renamed to "IsStillValid".
(Client.StartChecker): Changed to its own function to avoid the
return value from "Client.start_checker()".
(Client.Stop): Changed to its own function to avoid the return value
from "Client.stop()".
(main): Try "_mandos" before "mandos" as user and group name.
Removed inner function "remove_from_clients". New inner
class "MandosServer".
- files added:
- debian/mandos-client.config
- files removed:
- DBUS-API
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008-2018 Teddy Hogeborn
6
* Copyright © 2008-2018 Björn Påhlsson
7
*
8
* This file is part of Mandos.
9
*
10
* Mandos is free software: you can redistribute it and/or modify it
11
* under the terms of the GNU General Public License as published by
12
* the Free Software Foundation, either version 3 of the License, or
13
* (at your option) any later version.
14
*
15
* Mandos is distributed in the hope that it will be useful, but
5
* Copyright © 2008 Teddy Hogeborn
6
* Copyright © 2008 Björn Påhlsson
7
*
8
* This program is free software: you can redistribute it and/or
9
* modify it under the terms of the GNU General Public License as
10
* published by the Free Software Foundation, either version 3 of the
11
* License, or (at your option) any later version.
12
*
13
* This program is distributed in the hope that it will be useful, but
16
14
* WITHOUT ANY WARRANTY; without even the implied warranty of
17
15
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18
16
* General Public License for more details.
19
17
*
20
18
* You should have received a copy of the GNU General Public License
21
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
19
* along with this program. If not, see
20
* <http://www.gnu.org/licenses/>.
22
21
*
23
* Contact the authors at <mandos@recompile.se>.
22
* Contact the authors at <mandos@fukt.bsnet.se>.
24
23
*/
25
24
26
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
27
O_CLOEXEC, pipe2() */
26
asprintf() */
28
27
#include <stddef.h> /* size_t, NULL */
29
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
30
realloc() */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
29
EXIT_SUCCESS, realloc() */
31
30
#include <stdbool.h> /* bool, true, false */
32
#include <stdio.h> /* fileno(), fprintf(),
33
stderr, STDOUT_FILENO, fclose() */
34
#include <sys/types.h> /* fstat(), struct stat, waitpid(),
35
WIFEXITED(), WEXITSTATUS(), wait(),
36
pid_t, uid_t, gid_t, getuid(),
37
getgid() */
31
#include <stdio.h> /* perror, fileno(), fprintf(),
32
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, opendir(), stat(), struct
34
stat, waitpid(), WIFEXITED(),
35
WEXITSTATUS(), wait(), pid_t,
36
uid_t, gid_t, getuid(), getgid(),
37
dirfd() */
38
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
39
FD_SET(), FD_ISSET(), FD_CLR */
40
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS(), WTERMSIG() */
42
#include <sys/stat.h> /* struct stat, fstat(), S_ISREG() */
41
WEXITSTATUS() */
42
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
43
43
#include <iso646.h> /* and, or, not */
44
#include <dirent.h> /* struct dirent, scandirat() */
45
#include <unistd.h> /* fcntl(), F_GETFD, F_SETFD,
46
FD_CLOEXEC, write(), STDOUT_FILENO,
47
struct stat, fstat(), close(),
48
setgid(), setuid(), S_ISREG(),
49
faccessat() pipe2(), fork(),
50
_exit(), dup2(), fexecve(), read()
51
*/
44
#include <dirent.h> /* DIR, struct dirent, opendir(),
45
readdir(), closedir(), dirfd() */
46
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
47
fcntl(), setuid(), setgid(),
48
F_GETFD, F_SETFD, FD_CLOEXEC,
49
access(), pipe(), fork(), close()
50
dup2(), STDOUT_FILENO, _exit(),
51
execv(), write(), read(),
52
close() */
52
53
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
53
FD_CLOEXEC, openat(), scandirat(),
54
pipe2() */
55
#include <string.h> /* strsep, strlen(), strsignal(),
56
strcmp(), strncmp() */
54
FD_CLOEXEC */
55
#include <string.h> /* strsep, strlen(), asprintf() */
57
56
#include <errno.h> /* errno */
58
57
#include <argp.h> /* struct argp_option, struct
59
58
argp_state, struct argp,
63
62
#include <signal.h> /* struct sigaction, sigemptyset(),
64
63
sigaddset(), sigaction(),
65
64
sigprocmask(), SIG_BLOCK, SIGCHLD,
66
SIG_UNBLOCK, kill(), sig_atomic_t
67
*/
65
SIG_UNBLOCK, kill() */
68
66
#include <errno.h> /* errno, EBADF */
69
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
70
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
71
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
72
#include <errno.h> /* errno */
73
#include <error.h> /* error() */
74
#include <fnmatch.h> /* fnmatch() */
75
67
76
68
#define BUFFER_SIZE 256
77
69
78
70
#define PDIR "/lib/mandos/plugins.d"
79
#define PHDIR "/lib/mandos/plugin-helpers"
80
71
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
81
72
82
73
const char *argp_program_version = "plugin-runner " VERSION;
83
const char *argp_program_bug_address = "<mandos@recompile.se>";
74
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
84
75
85
76
typedef struct plugin{
86
77
char *name; /* can be NULL or any plugin name */
89
80
char **environ;
90
81
int envc;
91
82
bool disabled;
92
83
93
84
/* Variables used for running processes*/
94
85
pid_t pid;
95
86
int fd;
97
88
size_t buffer_size;
98
89
size_t buffer_length;
99
90
bool eof;
100
volatile sig_atomic_t completed;
101
int status;
91
volatile bool completed;
92
volatile int status;
102
93
struct plugin *next;
103
94
} plugin;
104
95
106
97
107
98
/* Gets an existing plugin based on name,
108
99
or if none is found, creates a new one */
109
__attribute__((warn_unused_result))
110
100
static plugin *getplugin(char *name){
111
/* Check for existing plugin with that name */
112
for(plugin *p = plugin_list; p != NULL; p = p->next){
113
if((p->name == name)
114
or (p->name and name and (strcmp(p->name, name) == 0))){
101
/* Check for exiting plugin with that name */
102
for (plugin *p = plugin_list; p != NULL; p = p->next){
103
if ((p->name == name)
104
or (p->name and name and (strcmp(p->name, name) == 0))){
115
105
return p;
116
106
}
117
107
}
118
108
/* Create a new plugin */
119
plugin *new_plugin = NULL;
120
do {
121
new_plugin = malloc(sizeof(plugin));
122
} while(new_plugin == NULL and errno == EINTR);
123
if(new_plugin == NULL){
109
plugin *new_plugin = malloc(sizeof(plugin));
110
if (new_plugin == NULL){
124
111
return NULL;
125
112
}
126
113
char *copy_name = NULL;
127
114
if(name != NULL){
128
do {
129
copy_name = strdup(name);
130
} while(copy_name == NULL and errno == EINTR);
115
copy_name = strdup(name);
131
116
if(copy_name == NULL){
132
int e = errno;
133
free(new_plugin);
134
errno = e;
135
117
return NULL;
136
118
}
137
119
}
138
120
139
*new_plugin = (plugin){ .name = copy_name,
140
.argc = 1,
141
.disabled = false,
142
.next = plugin_list };
121
*new_plugin = (plugin) { .name = copy_name,
122
.argc = 1,
123
.disabled = false,
124
.next = plugin_list };
143
125
144
do {
145
new_plugin->argv = malloc(sizeof(char *) * 2);
146
} while(new_plugin->argv == NULL and errno == EINTR);
147
if(new_plugin->argv == NULL){
148
int e = errno;
126
new_plugin->argv = malloc(sizeof(char *) * 2);
127
if (new_plugin->argv == NULL){
149
128
free(copy_name);
150
129
free(new_plugin);
151
errno = e;
152
130
return NULL;
153
131
}
154
132
new_plugin->argv[0] = copy_name;
155
133
new_plugin->argv[1] = NULL;
156
134
157
do {
158
new_plugin->environ = malloc(sizeof(char *));
159
} while(new_plugin->environ == NULL and errno == EINTR);
135
new_plugin->environ = malloc(sizeof(char *));
160
136
if(new_plugin->environ == NULL){
161
int e = errno;
162
137
free(copy_name);
163
138
free(new_plugin->argv);
164
139
free(new_plugin);
165
errno = e;
166
140
return NULL;
167
141
}
168
142
new_plugin->environ[0] = NULL;
173
147
}
174
148
175
149
/* Helper function for add_argument and add_environment */
176
__attribute__((nonnull, warn_unused_result))
177
150
static bool add_to_char_array(const char *new, char ***array,
178
151
int *len){
179
152
/* Resize the pointed-to array to hold one more pointer */
180
char **new_array = NULL;
181
do {
182
new_array = realloc(*array, sizeof(char *)
183
* (size_t) ((*len) + 2));
184
} while(new_array == NULL and errno == EINTR);
153
*array = realloc(*array, sizeof(char *)
154
* (size_t) ((*len) + 2));
185
155
/* Malloc check */
186
if(new_array == NULL){
156
if(*array == NULL){
187
157
return false;
188
158
}
189
*array = new_array;
190
159
/* Make a copy of the new string */
191
char *copy;
192
do {
193
copy = strdup(new);
194
} while(copy == NULL and errno == EINTR);
160
char *copy = strdup(new);
195
161
if(copy == NULL){
196
162
return false;
197
163
}
204
170
}
205
171
206
172
/* Add to a plugin's argument vector */
207
__attribute__((nonnull(2), warn_unused_result))
208
173
static bool add_argument(plugin *p, const char *arg){
209
174
if(p == NULL){
210
175
return false;
213
178
}
214
179
215
180
/* Add to a plugin's environment */
216
__attribute__((nonnull(2), warn_unused_result))
217
181
static bool add_environment(plugin *p, const char *def, bool replace){
218
182
if(p == NULL){
219
183
return false;
221
185
/* namelen = length of name of environment variable */
222
186
size_t namelen = (size_t)(strchrnul(def, '=') - def);
223
187
/* Search for this environment variable */
224
for(char **envdef = p->environ; *envdef != NULL; envdef++){
225
if(strncmp(*envdef, def, namelen + 1) == 0){
188
for(char **e = p->environ; *e != NULL; e++){
189
if(strncmp(*e, def, namelen + 1) == 0){
226
190
/* It already exists */
227
191
if(replace){
228
char *new_envdef;
229
do {
230
new_envdef = realloc(*envdef, strlen(def) + 1);
231
} while(new_envdef == NULL and errno == EINTR);
232
if(new_envdef == NULL){
192
char *new = realloc(*e, strlen(def) + 1);
193
if(new == NULL){
233
194
return false;
234
195
}
235
*envdef = new_envdef;
236
strcpy(*envdef, def);
196
*e = new;
197
strcpy(*e, def);
237
198
}
238
199
return true;
239
200
}
241
202
return add_to_char_array(def, &(p->environ), &(p->envc));
242
203
}
243
204
244
#ifndef O_CLOEXEC
245
205
/*
246
206
* Based on the example in the GNU LibC manual chapter 13.13 "File
247
207
* Descriptor Flags".
248
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
208
* *Note File Descriptor Flags:(libc)Descriptor Flags.
249
209
*/
250
__attribute__((warn_unused_result))
251
210
static int set_cloexec_flag(int fd){
252
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
211
int ret = fcntl(fd, F_GETFD, 0);
253
212
/* If reading the flags failed, return error indication now. */
254
213
if(ret < 0){
255
214
return ret;
256
215
}
257
216
/* Store modified flag word in the descriptor. */
258
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
259
ret | FD_CLOEXEC));
217
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
260
218
}
261
#endif /* not O_CLOEXEC */
262
219
263
220
264
221
/* Mark processes as completed when they exit, and save their exit
265
222
status. */
266
223
static void handle_sigchld(__attribute__((unused)) int sig){
267
int old_errno = errno;
268
224
while(true){
269
225
plugin *proc = plugin_list;
270
226
int status;
274
230
break;
275
231
}
276
232
if(pid == -1){
277
if(errno == ECHILD){
278
/* No child processes */
279
break;
233
if (errno != ECHILD){
234
perror("waitpid");
280
235
}
281
error(0, errno, "waitpid");
236
/* No child processes */
237
break;
282
238
}
283
239
284
240
/* A child exited, find it in process_list */
290
246
continue;
291
247
}
292
248
proc->status = status;
293
proc->completed = 1;
249
proc->completed = true;
294
250
}
295
errno = old_errno;
296
251
}
297
252
298
253
/* Prints out a password to stdout */
299
__attribute__((nonnull, warn_unused_result))
300
254
static bool print_out_password(const char *buffer, size_t length){
301
255
ssize_t ret;
302
256
for(size_t written = 0; written < length; written += (size_t)ret){
310
264
}
311
265
312
266
/* Removes and free a plugin from the plugin list */
313
__attribute__((nonnull))
314
267
static void free_plugin(plugin *plugin_node){
315
268
316
269
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
322
275
}
323
276
free(plugin_node->environ);
324
277
free(plugin_node->buffer);
325
278
326
279
/* Removes the plugin from the singly-linked list */
327
280
if(plugin_node == plugin_list){
328
281
/* First one - simple */
348
301
349
302
int main(int argc, char *argv[]){
350
303
char *plugindir = NULL;
351
char *pluginhelperdir = NULL;
352
304
char *argfile = NULL;
353
305
FILE *conffp;
354
struct dirent **direntries = NULL;
306
size_t d_name_len;
307
DIR *dir = NULL;
308
struct dirent *dirst;
355
309
struct stat st;
356
310
fd_set rfds_all;
357
311
int ret, maxfd = 0;
358
ssize_t sret;
359
312
uid_t uid = 65534;
360
313
gid_t gid = 65534;
361
314
bool debug = false;
365
318
.sa_flags = SA_NOCLDSTOP };
366
319
char **custom_argv = NULL;
367
320
int custom_argc = 0;
368
int dir_fd = -1;
369
321
370
322
/* Establish a signal handler */
371
323
sigemptyset(&sigchld_action.sa_mask);
372
324
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
373
325
if(ret == -1){
374
error(0, errno, "sigaddset");
375
exitstatus = EX_OSERR;
326
perror("sigaddset");
327
exitstatus = EXIT_FAILURE;
376
328
goto fallback;
377
329
}
378
330
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
379
331
if(ret == -1){
380
error(0, errno, "sigaction");
381
exitstatus = EX_OSERR;
332
perror("sigaction");
333
exitstatus = EXIT_FAILURE;
382
334
goto fallback;
383
335
}
384
336
416
368
.doc = "Group ID the plugins will run as", .group = 3 },
417
369
{ .name = "debug", .key = 132,
418
370
.doc = "Debug mode", .group = 4 },
419
{ .name = "plugin-helper-dir", .key = 133,
420
.arg = "DIRECTORY",
421
.doc = "Specify a different plugin helper directory",
422
.group = 2 },
423
/*
424
* These reproduce what we would get without ARGP_NO_HELP
425
*/
426
{ .name = "help", .key = '?',
427
.doc = "Give this help list", .group = -1 },
428
{ .name = "usage", .key = -3,
429
.doc = "Give a short usage message", .group = -1 },
430
{ .name = "version", .key = 'V',
431
.doc = "Print program version", .group = -1 },
432
371
{ .name = NULL }
433
372
};
434
373
435
__attribute__((nonnull(3)))
436
error_t parse_opt(int key, char *arg, struct argp_state *state){
437
errno = 0;
438
switch(key){
439
char *tmp;
440
intmax_t tmp_id;
374
error_t parse_opt (int key, char *arg, __attribute__((unused))
375
struct argp_state *state) {
376
switch (key) {
441
377
case 'g': /* --global-options */
442
{
443
char *plugin_option;
444
while((plugin_option = strsep(&arg, ",")) != NULL){
445
if(not add_argument(getplugin(NULL), plugin_option)){
446
break;
378
if (arg != NULL){
379
char *p;
380
while((p = strsep(&arg, ",")) != NULL){
381
if(p[0] == '\0'){
382
continue;
383
}
384
if(not add_argument(getplugin(NULL), p)){
385
perror("add_argument");
386
return ARGP_ERR_UNKNOWN;
447
387
}
448
388
}
449
errno = 0;
450
389
}
451
390
break;
452
391
case 'G': /* --global-env */
453
if(add_environment(getplugin(NULL), arg, true)){
454
errno = 0;
392
if(arg == NULL){
393
break;
394
}
395
if(not add_environment(getplugin(NULL), arg, true)){
396
perror("add_environment");
455
397
}
456
398
break;
457
399
case 'o': /* --options-for */
458
{
459
char *option_list = strchr(arg, ':');
460
if(option_list == NULL){
461
argp_error(state, "No colon in \"%s\"", arg);
462
errno = EINVAL;
463
break;
464
}
465
*option_list = '\0';
466
option_list++;
467
if(arg[0] == '\0'){
468
argp_error(state, "Empty plugin name");
469
errno = EINVAL;
470
break;
471
}
472
char *option;
473
while((option = strsep(&option_list, ",")) != NULL){
474
if(not add_argument(getplugin(arg), option)){
475
break;
476
}
477
}
478
errno = 0;
400
if (arg != NULL){
401
char *p_name = strsep(&arg, ":");
402
if(p_name[0] == '\0' or arg == NULL){
403
break;
404
}
405
char *opt = strsep(&arg, ":");
406
if(opt[0] == '\0' or opt == NULL){
407
break;
408
}
409
char *p;
410
while((p = strsep(&opt, ",")) != NULL){
411
if(p[0] == '\0'){
412
continue;
413
}
414
if(not add_argument(getplugin(p_name), p)){
415
perror("add_argument");
416
return ARGP_ERR_UNKNOWN;
417
}
418
}
479
419
}
480
420
break;
481
421
case 'E': /* --env-for */
422
if(arg == NULL){
423
break;
424
}
482
425
{
483
426
char *envdef = strchr(arg, ':');
484
427
if(envdef == NULL){
485
argp_error(state, "No colon in \"%s\"", arg);
486
errno = EINVAL;
487
428
break;
488
429
}
489
430
*envdef = '\0';
490
envdef++;
491
if(arg[0] == '\0'){
492
argp_error(state, "Empty plugin name");
493
errno = EINVAL;
494
break;
495
}
496
if(add_environment(getplugin(arg), envdef, true)){
497
errno = 0;
431
if(not add_environment(getplugin(arg), envdef+1, true)){
432
perror("add_environment");
498
433
}
499
434
}
500
435
break;
501
436
case 'd': /* --disable */
502
{
437
if (arg != NULL){
503
438
plugin *p = getplugin(arg);
504
if(p != NULL){
505
p->disabled = true;
506
errno = 0;
439
if(p == NULL){
440
return ARGP_ERR_UNKNOWN;
507
441
}
442
p->disabled = true;
508
443
}
509
444
break;
510
445
case 'e': /* --enable */
511
{
446
if (arg != NULL){
512
447
plugin *p = getplugin(arg);
513
if(p != NULL){
514
p->disabled = false;
515
errno = 0;
448
if(p == NULL){
449
return ARGP_ERR_UNKNOWN;
516
450
}
451
p->disabled = false;
517
452
}
518
453
break;
519
454
case 128: /* --plugin-dir */
520
455
free(plugindir);
521
456
plugindir = strdup(arg);
522
if(plugindir != NULL){
523
errno = 0;
524
}
457
if(plugindir == NULL){
458
perror("strdup");
459
}
525
460
break;
526
461
case 129: /* --config-file */
527
462
/* This is already done by parse_opt_config_file() */
528
463
break;
529
464
case 130: /* --userid */
530
tmp_id = strtoimax(arg, &tmp, 10);
531
if(errno != 0 or tmp == arg or *tmp != '\0'
532
or tmp_id != (uid_t)tmp_id){
533
argp_error(state, "Bad user ID number: \"%s\", using %"
534
PRIdMAX, arg, (intmax_t)uid);
535
break;
536
}
537
uid = (uid_t)tmp_id;
538
errno = 0;
465
uid = (uid_t)strtol(arg, NULL, 10);
539
466
break;
540
467
case 131: /* --groupid */
541
tmp_id = strtoimax(arg, &tmp, 10);
542
if(errno != 0 or tmp == arg or *tmp != '\0'
543
or tmp_id != (gid_t)tmp_id){
544
argp_error(state, "Bad group ID number: \"%s\", using %"
545
PRIdMAX, arg, (intmax_t)gid);
546
break;
547
}
548
gid = (gid_t)tmp_id;
549
errno = 0;
468
gid = (gid_t)strtol(arg, NULL, 10);
550
469
break;
551
470
case 132: /* --debug */
552
471
debug = true;
553
472
break;
554
case 133: /* --plugin-helper-dir */
555
free(pluginhelperdir);
556
pluginhelperdir = strdup(arg);
557
if(pluginhelperdir != NULL){
558
errno = 0;
559
}
560
break;
561
/*
562
* These reproduce what we would get without ARGP_NO_HELP
563
*/
564
case '?': /* --help */
565
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
566
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
567
case -3: /* --usage */
568
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
569
argp_state_help(state, state->out_stream,
570
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
571
case 'V': /* --version */
572
fprintf(state->out_stream, "%s\n", argp_program_version);
573
exit(EXIT_SUCCESS);
574
break;
575
/*
576
* When adding more options before this line, remember to also add a
577
* "case" to the "parse_opt_config_file" function below.
578
*/
579
473
case ARGP_KEY_ARG:
580
474
/* Cryptsetup always passes an argument, which is an empty
581
475
string if "none" was specified in /etc/crypttab. So if
582
476
argument was empty, we ignore it silently. */
583
if(arg[0] == '\0'){
584
break;
477
if(arg[0] != '\0'){
478
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
585
479
}
586
/* FALLTHROUGH */
480
break;
481
case ARGP_KEY_END:
482
break;
587
483
default:
588
484
return ARGP_ERR_UNKNOWN;
589
485
}
590
return errno; /* Set to 0 at start */
486
return 0;
591
487
}
592
488
593
489
/* This option parser is the same as parse_opt() above, except it
594
490
ignores everything but the --config-file option. */
595
error_t parse_opt_config_file(int key, char *arg,
596
__attribute__((unused))
597
struct argp_state *state){
598
errno = 0;
599
switch(key){
491
error_t parse_opt_config_file (int key, char *arg,
492
__attribute__((unused))
493
struct argp_state *state) {
494
switch (key) {
600
495
case 'g': /* --global-options */
601
496
case 'G': /* --global-env */
602
497
case 'o': /* --options-for */
608
503
case 129: /* --config-file */
609
504
free(argfile);
610
505
argfile = strdup(arg);
611
if(argfile != NULL){
612
errno = 0;
506
if(argfile == NULL){
507
perror("strdup");
613
508
}
614
break;
509
break;
615
510
case 130: /* --userid */
616
511
case 131: /* --groupid */
617
512
case 132: /* --debug */
618
case 133: /* --plugin-helper-dir */
619
case '?': /* --help */
620
case -3: /* --usage */
621
case 'V': /* --version */
622
513
case ARGP_KEY_ARG:
514
case ARGP_KEY_END:
623
515
break;
624
516
default:
625
517
return ARGP_ERR_UNKNOWN;
626
518
}
627
return errno;
519
return 0;
628
520
}
629
521
630
522
struct argp argp = { .options = options,
632
524
.args_doc = "",
633
525
.doc = "Mandos plugin runner -- Run plugins" };
634
526
635
/* Parse using parse_opt_config_file() in order to get the custom
527
/* Parse using the parse_opt_config_file in order to get the custom
636
528
config file location, if any. */
637
ret = argp_parse(&argp, argc, argv,
638
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
639
NULL, NULL);
640
switch(ret){
641
case 0:
642
break;
643
case ENOMEM:
644
default:
645
errno = ret;
646
error(0, errno, "argp_parse");
647
exitstatus = EX_OSERR;
648
goto fallback;
649
case EINVAL:
650
exitstatus = EX_USAGE;
529
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
530
if (ret == ARGP_ERR_UNKNOWN){
531
fprintf(stderr, "Unknown error while parsing arguments\n");
532
exitstatus = EXIT_FAILURE;
651
533
goto fallback;
652
534
}
653
535
655
537
argp.parser = parse_opt;
656
538
657
539
/* Open the configfile if available */
658
if(argfile == NULL){
540
if (argfile == NULL){
659
541
conffp = fopen(AFILE, "r");
660
542
} else {
661
543
conffp = fopen(argfile, "r");
662
}
544
}
663
545
if(conffp != NULL){
664
546
char *org_line = NULL;
665
547
char *p, *arg, *new_arg, *line;
666
548
size_t size = 0;
549
ssize_t sret;
667
550
const char whitespace_delims[] = " \r\t\f\v\n";
668
551
const char comment_delim[] = "#";
669
552
670
553
custom_argc = 1;
671
554
custom_argv = malloc(sizeof(char*) * 2);
672
555
if(custom_argv == NULL){
673
error(0, errno, "malloc");
674
exitstatus = EX_OSERR;
556
perror("malloc");
557
exitstatus = EXIT_FAILURE;
675
558
goto fallback;
676
559
}
677
560
custom_argv[0] = argv[0];
678
561
custom_argv[1] = NULL;
679
562
680
563
/* for each line in the config file, strip whitespace and ignore
681
564
commented text */
682
565
while(true){
684
567
if(sret == -1){
685
568
break;
686
569
}
687
570
688
571
line = org_line;
689
572
arg = strsep(&line, comment_delim);
690
573
while((p = strsep(&arg, whitespace_delims)) != NULL){
693
576
}
694
577
new_arg = strdup(p);
695
578
if(new_arg == NULL){
696
error(0, errno, "strdup");
697
exitstatus = EX_OSERR;
579
perror("strdup");
580
exitstatus = EXIT_FAILURE;
698
581
free(org_line);
699
582
goto fallback;
700
583
}
701
584
702
585
custom_argc += 1;
703
{
704
char **new_argv = realloc(custom_argv, sizeof(char *)
705
* ((size_t)custom_argc + 1));
706
if(new_argv == NULL){
707
error(0, errno, "realloc");
708
exitstatus = EX_OSERR;
709
free(new_arg);
710
free(org_line);
711
goto fallback;
712
} else {
713
custom_argv = new_argv;
714
}
586
custom_argv = realloc(custom_argv, sizeof(char *)
587
* ((unsigned int) custom_argc + 1));
588
if(custom_argv == NULL){
589
perror("realloc");
590
exitstatus = EXIT_FAILURE;
591
free(org_line);
592
goto fallback;
715
593
}
716
594
custom_argv[custom_argc-1] = new_arg;
717
custom_argv[custom_argc] = NULL;
595
custom_argv[custom_argc] = NULL;
718
596
}
719
597
}
720
do {
721
ret = fclose(conffp);
722
} while(ret == EOF and errno == EINTR);
723
if(ret == EOF){
724
error(0, errno, "fclose");
725
exitstatus = EX_IOERR;
726
goto fallback;
727
}
728
598
free(org_line);
729
599
} else {
730
600
/* Check for harmful errors and go to fallback. Other errors might
731
601
not affect opening plugins */
732
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
733
error(0, errno, "fopen");
734
exitstatus = EX_OSERR;
602
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
603
perror("fopen");
604
exitstatus = EXIT_FAILURE;
735
605
goto fallback;
736
606
}
737
607
}
738
/* If there were any arguments from the configuration file, pass
739
them to parser as command line arguments */
608
/* If there was any arguments from configuration file,
609
pass them to parser as command arguments */
740
610
if(custom_argv != NULL){
741
ret = argp_parse(&argp, custom_argc, custom_argv,
742
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
743
NULL, NULL);
744
switch(ret){
745
case 0:
746
break;
747
case ENOMEM:
748
default:
749
errno = ret;
750
error(0, errno, "argp_parse");
751
exitstatus = EX_OSERR;
752
goto fallback;
753
case EINVAL:
754
exitstatus = EX_CONFIG;
611
ret = argp_parse (&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
612
0, NULL);
613
if (ret == ARGP_ERR_UNKNOWN){
614
fprintf(stderr, "Unknown error while parsing arguments\n");
615
exitstatus = EXIT_FAILURE;
755
616
goto fallback;
756
617
}
757
618
}
758
619
759
620
/* Parse actual command line arguments, to let them override the
760
621
config file */
761
ret = argp_parse(&argp, argc, argv,
762
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
763
NULL, NULL);
764
switch(ret){
765
case 0:
766
break;
767
case ENOMEM:
768
default:
769
errno = ret;
770
error(0, errno, "argp_parse");
771
exitstatus = EX_OSERR;
772
goto fallback;
773
case EINVAL:
774
exitstatus = EX_USAGE;
775
goto fallback;
776
}
777
778
{
779
char *pluginhelperenv;
780
bool bret = true;
781
ret = asprintf(&pluginhelperenv, "MANDOSPLUGINHELPERDIR=%s",
782
pluginhelperdir != NULL ? pluginhelperdir : PHDIR);
783
if(ret != -1){
784
bret = add_environment(getplugin(NULL), pluginhelperenv, true);
785
}
786
if(ret == -1 or not bret){
787
error(0, errno, "Failed to set MANDOSPLUGINHELPERDIR"
788
" environment variable to \"%s\" for all plugins\n",
789
pluginhelperdir != NULL ? pluginhelperdir : PHDIR);
790
}
791
if(ret != -1){
792
free(pluginhelperenv);
793
}
622
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
623
if (ret == ARGP_ERR_UNKNOWN){
624
fprintf(stderr, "Unknown error while parsing arguments\n");
625
exitstatus = EXIT_FAILURE;
626
goto fallback;
794
627
}
795
628
796
629
if(debug){
797
for(plugin *p = plugin_list; p != NULL; p = p->next){
630
for(plugin *p = plugin_list; p != NULL; p=p->next){
798
631
fprintf(stderr, "Plugin: %s has %d arguments\n",
799
632
p->name ? p->name : "Global", p->argc - 1);
800
633
for(char **a = p->argv; *a != NULL; a++){
801
634
fprintf(stderr, "\tArg: %s\n", *a);
802
635
}
803
fprintf(stderr, "...and %d environment variables\n", p->envc);
636
fprintf(stderr, "...and %u environment variables\n", p->envc);
804
637
for(char **a = p->environ; *a != NULL; a++){
805
638
fprintf(stderr, "\t%s\n", *a);
806
639
}
807
640
}
808
641
}
809
642
810
if(getuid() == 0){
811
/* Work around Debian bug #633582:
812
<https://bugs.debian.org/633582> */
813
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
814
if(plugindir_fd == -1){
815
if(errno != ENOENT){
816
error(0, errno, "open(\"" PDIR "\")");
817
}
818
} else {
819
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
820
if(ret == -1){
821
error(0, errno, "fstat");
822
} else {
823
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
824
ret = fchown(plugindir_fd, uid, gid);
825
if(ret == -1){
826
error(0, errno, "fchown");
827
}
828
}
829
}
830
close(plugindir_fd);
831
}
832
}
833
834
/* Lower permissions */
835
ret = setgid(gid);
836
if(ret == -1){
837
error(0, errno, "setgid");
838
}
643
/* Strip permissions down to nobody */
839
644
ret = setuid(uid);
840
if(ret == -1){
841
error(0, errno, "setuid");
842
}
843
844
/* Open plugin directory with close_on_exec flag */
645
if (ret == -1){
646
perror("setuid");
647
}
648
setgid(gid);
649
if (ret == -1){
650
perror("setgid");
651
}
652
653
if (plugindir == NULL){
654
dir = opendir(PDIR);
655
} else {
656
dir = opendir(plugindir);
657
}
658
659
if(dir == NULL){
660
perror("Could not open plugin dir");
661
exitstatus = EXIT_FAILURE;
662
goto fallback;
663
}
664
665
/* Set the FD_CLOEXEC flag on the directory, if possible */
845
666
{
846
dir_fd = open(plugindir != NULL ? plugindir : PDIR, O_RDONLY |
847
#ifdef O_CLOEXEC
848
O_CLOEXEC
849
#else /* not O_CLOEXEC */
850
0
851
#endif /* not O_CLOEXEC */
852
);
853
if(dir_fd == -1){
854
error(0, errno, "Could not open plugin dir");
855
exitstatus = EX_UNAVAILABLE;
856
goto fallback;
857
}
858
859
#ifndef O_CLOEXEC
860
/* Set the FD_CLOEXEC flag on the directory */
861
ret = set_cloexec_flag(dir_fd);
862
if(ret < 0){
863
error(0, errno, "set_cloexec_flag");
864
exitstatus = EX_OSERR;
865
goto fallback;
866
}
867
#endif /* O_CLOEXEC */
868
}
869
870
int good_name(const struct dirent * const dirent){
871
const char * const patterns[] = { ".*", "#*#", "*~", "*.dpkg-new",
872
"*.dpkg-old", "*.dpkg-bak",
873
"*.dpkg-divert", NULL };
874
#ifdef __GNUC__
875
#pragma GCC diagnostic push
876
#pragma GCC diagnostic ignored "-Wcast-qual"
877
#endif
878
for(const char **pat = (const char **)patterns;
879
*pat != NULL; pat++){
880
#ifdef __GNUC__
881
#pragma GCC diagnostic pop
882
#endif
883
if(fnmatch(*pat, dirent->d_name, FNM_FILE_NAME | FNM_PERIOD)
884
!= FNM_NOMATCH){
885
if(debug){
886
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
887
" matching pattern %s\n", dirent->d_name, *pat);
888
}
889
return 0;
667
int dir_fd = dirfd(dir);
668
if(dir_fd >= 0){
669
ret = set_cloexec_flag(dir_fd);
670
if(ret < 0){
671
perror("set_cloexec_flag");
672
exitstatus = EXIT_FAILURE;
673
goto fallback;
890
674
}
891
675
}
892
return 1;
893
}
894
895
int numplugins = scandirat(dir_fd, ".", &direntries, good_name,
896
alphasort);
897
if(numplugins == -1){
898
error(0, errno, "Could not scan plugin dir");
899
direntries = NULL;
900
exitstatus = EX_OSERR;
901
goto fallback;
902
676
}
903
677
904
678
FD_ZERO(&rfds_all);
905
679
906
680
/* Read and execute any executable in the plugin directory*/
907
for(int i = 0; i < numplugins; i++){
908
909
int plugin_fd = openat(dir_fd, direntries[i]->d_name, O_RDONLY);
910
if(plugin_fd == -1){
911
error(0, errno, "Could not open plugin");
912
free(direntries[i]);
913
continue;
914
}
915
ret = (int)TEMP_FAILURE_RETRY(fstat(plugin_fd, &st));
916
if(ret == -1){
917
error(0, errno, "stat");
918
close(plugin_fd);
919
free(direntries[i]);
920
continue;
921
}
922
681
while(true){
682
dirst = readdir(dir);
683
684
/* All directory entries have been processed */
685
if(dirst == NULL){
686
if (errno == EBADF){
687
perror("readdir");
688
exitstatus = EXIT_FAILURE;
689
goto fallback;
690
}
691
break;
692
}
693
694
d_name_len = strlen(dirst->d_name);
695
696
/* Ignore dotfiles, backup files and other junk */
697
{
698
bool bad_name = false;
699
700
const char const *bad_prefixes[] = { ".", "#", NULL };
701
702
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
703
".dpkg-old",
704
".dpkg-bak",
705
".dpkg-divert", NULL };
706
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
707
size_t pre_len = strlen(*pre);
708
if((d_name_len >= pre_len)
709
and strncmp((dirst->d_name), *pre, pre_len) == 0){
710
if(debug){
711
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
712
" with bad prefix %s\n", dirst->d_name, *pre);
713
}
714
bad_name = true;
715
break;
716
}
717
}
718
if(bad_name){
719
continue;
720
}
721
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
722
size_t suf_len = strlen(*suf);
723
if((d_name_len >= suf_len)
724
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
725
== 0)){
726
if(debug){
727
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
728
" with bad suffix %s\n", dirst->d_name, *suf);
729
}
730
bad_name = true;
731
break;
732
}
733
}
734
735
if(bad_name){
736
continue;
737
}
738
}
739
740
char *filename;
741
if(plugindir == NULL){
742
ret = asprintf(&filename, PDIR "/%s", dirst->d_name);
743
} else {
744
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
745
}
746
if(ret < 0){
747
perror("asprintf");
748
continue;
749
}
750
751
ret = stat(filename, &st);
752
if (ret == -1){
753
perror("stat");
754
free(filename);
755
continue;
756
}
757
923
758
/* Ignore non-executable files */
924
if(not S_ISREG(st.st_mode)
925
or (TEMP_FAILURE_RETRY(faccessat(dir_fd, direntries[i]->d_name,
926
X_OK, 0)) != 0)){
759
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
927
760
if(debug){
928
fprintf(stderr, "Ignoring plugin dir entry \"%s/%s\""
929
" with bad type or mode\n",
930
plugindir != NULL ? plugindir : PDIR,
931
direntries[i]->d_name);
761
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
762
" with bad type or mode\n", filename);
932
763
}
933
close(plugin_fd);
934
free(direntries[i]);
764
free(filename);
935
765
continue;
936
766
}
937
767
938
plugin *p = getplugin(direntries[i]->d_name);
768
plugin *p = getplugin(dirst->d_name);
939
769
if(p == NULL){
940
error(0, errno, "getplugin");
941
close(plugin_fd);
942
free(direntries[i]);
770
perror("getplugin");
771
free(filename);
943
772
continue;
944
773
}
945
774
if(p->disabled){
946
775
if(debug){
947
776
fprintf(stderr, "Ignoring disabled plugin \"%s\"\n",
948
direntries[i]->d_name);
777
dirst->d_name);
949
778
}
950
close(plugin_fd);
951
free(direntries[i]);
779
free(filename);
952
780
continue;
953
781
}
954
782
{
957
785
if(g != NULL){
958
786
for(char **a = g->argv + 1; *a != NULL; a++){
959
787
if(not add_argument(p, *a)){
960
error(0, errno, "add_argument");
788
perror("add_argument");
961
789
}
962
790
}
963
791
/* Add global environment variables */
964
792
for(char **e = g->environ; *e != NULL; e++){
965
793
if(not add_environment(p, *e, false)){
966
error(0, errno, "add_environment");
794
perror("add_environment");
967
795
}
968
796
}
969
797
}
970
798
}
971
/* If this plugin has any environment variables, we need to
972
duplicate the environment from this process, too. */
799
/* If this plugin has any environment variables, we will call
800
using execve and need to duplicate the environment from this
801
process, too. */
973
802
if(p->environ[0] != NULL){
974
803
for(char **e = environ; *e != NULL; e++){
975
804
if(not add_environment(p, *e, false)){
976
error(0, errno, "add_environment");
805
perror("add_environment");
977
806
}
978
807
}
979
808
}
980
809
981
810
int pipefd[2];
982
#ifndef O_CLOEXEC
983
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
984
#else /* O_CLOEXEC */
985
ret = (int)TEMP_FAILURE_RETRY(pipe2(pipefd, O_CLOEXEC));
986
#endif /* O_CLOEXEC */
987
if(ret == -1){
988
error(0, errno, "pipe");
989
exitstatus = EX_OSERR;
990
free(direntries[i]);
991
goto fallback;
992
}
993
if(pipefd[0] >= FD_SETSIZE){
994
fprintf(stderr, "pipe()[0] (%d) >= FD_SETSIZE (%d)", pipefd[0],
995
FD_SETSIZE);
996
close(pipefd[0]);
997
close(pipefd[1]);
998
exitstatus = EX_OSERR;
999
free(direntries[i]);
1000
goto fallback;
1001
}
1002
#ifndef O_CLOEXEC
811
ret = pipe(pipefd);
812
if (ret == -1){
813
perror("pipe");
814
exitstatus = EXIT_FAILURE;
815
goto fallback;
816
}
1003
817
/* Ask OS to automatic close the pipe on exec */
1004
818
ret = set_cloexec_flag(pipefd[0]);
1005
819
if(ret < 0){
1006
error(0, errno, "set_cloexec_flag");
1007
close(pipefd[0]);
1008
close(pipefd[1]);
1009
exitstatus = EX_OSERR;
1010
free(direntries[i]);
820
perror("set_cloexec_flag");
821
exitstatus = EXIT_FAILURE;
1011
822
goto fallback;
1012
823
}
1013
824
ret = set_cloexec_flag(pipefd[1]);
1014
825
if(ret < 0){
1015
error(0, errno, "set_cloexec_flag");
1016
close(pipefd[0]);
1017
close(pipefd[1]);
1018
exitstatus = EX_OSERR;
1019
free(direntries[i]);
826
perror("set_cloexec_flag");
827
exitstatus = EXIT_FAILURE;
1020
828
goto fallback;
1021
829
}
1022
#endif /* not O_CLOEXEC */
1023
830
/* Block SIGCHLD until process is safely in process list */
1024
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
1025
&sigchld_action.sa_mask,
1026
NULL));
831
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1027
832
if(ret < 0){
1028
error(0, errno, "sigprocmask");
1029
exitstatus = EX_OSERR;
1030
free(direntries[i]);
833
perror("sigprocmask");
834
exitstatus = EXIT_FAILURE;
1031
835
goto fallback;
1032
836
}
1033
837
/* Starting a new process to be watched */
1034
pid_t pid;
1035
do {
1036
pid = fork();
1037
} while(pid == -1 and errno == EINTR);
838
pid_t pid = fork();
1038
839
if(pid == -1){
1039
error(0, errno, "fork");
1040
TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1041
&sigchld_action.sa_mask, NULL));
1042
close(pipefd[0]);
1043
close(pipefd[1]);
1044
exitstatus = EX_OSERR;
1045
free(direntries[i]);
840
perror("fork");
841
exitstatus = EXIT_FAILURE;
1046
842
goto fallback;
1047
843
}
1048
844
if(pid == 0){
1049
845
/* this is the child process */
1050
846
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1051
847
if(ret < 0){
1052
error(0, errno, "sigaction");
1053
_exit(EX_OSERR);
848
perror("sigaction");
849
_exit(EXIT_FAILURE);
1054
850
}
1055
851
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1056
852
if(ret < 0){
1057
error(0, errno, "sigprocmask");
1058
_exit(EX_OSERR);
853
perror("sigprocmask");
854
_exit(EXIT_FAILURE);
1059
855
}
1060
856
1061
857
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
1062
858
if(ret == -1){
1063
error(0, errno, "dup2");
1064
_exit(EX_OSERR);
859
perror("dup2");
860
_exit(EXIT_FAILURE);
1065
861
}
1066
862
1067
if(fexecve(plugin_fd, p->argv,
1068
(p->environ[0] != NULL) ? p->environ : environ) < 0){
1069
error(0, errno, "fexecve for %s/%s",
1070
plugindir != NULL ? plugindir : PDIR,
1071
direntries[i]->d_name);
1072
_exit(EX_OSERR);
863
if(dirfd(dir) < 0){
864
/* If dir has no file descriptor, we could not set FD_CLOEXEC
865
above and must now close it manually here. */
866
closedir(dir);
867
}
868
if(p->environ[0] == NULL){
869
if(execv(filename, p->argv) < 0){
870
perror("execv");
871
_exit(EXIT_FAILURE);
872
}
873
} else {
874
if(execve(filename, p->argv, p->environ) < 0){
875
perror("execve");
876
_exit(EXIT_FAILURE);
877
}
1073
878
}
1074
879
/* no return */
1075
880
}
1076
881
/* Parent process */
1077
882
close(pipefd[1]); /* Close unused write end of pipe */
1078
close(plugin_fd);
1079
plugin *new_plugin = getplugin(direntries[i]->d_name);
1080
if(new_plugin == NULL){
1081
error(0, errno, "getplugin");
1082
ret = (int)(TEMP_FAILURE_RETRY
1083
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1084
NULL)));
883
free(filename);
884
plugin *new_plugin = getplugin(dirst->d_name);
885
if (new_plugin == NULL){
886
perror("getplugin");
887
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1085
888
if(ret < 0){
1086
error(0, errno, "sigprocmask");
889
perror("sigprocmask");
1087
890
}
1088
exitstatus = EX_OSERR;
1089
free(direntries[i]);
891
exitstatus = EXIT_FAILURE;
1090
892
goto fallback;
1091
893
}
1092
free(direntries[i]);
1093
894
1094
895
new_plugin->pid = pid;
1095
896
new_plugin->fd = pipefd[0];
1096
1097
if(debug){
1098
fprintf(stderr, "Plugin %s started (PID %" PRIdMAX ")\n",
1099
new_plugin->name, (intmax_t) (new_plugin->pid));
1100
}
1101
897
1102
898
/* Unblock SIGCHLD so signal handler can be run if this process
1103
899
has already completed */
1104
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1105
&sigchld_action.sa_mask,
1106
NULL));
900
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1107
901
if(ret < 0){
1108
error(0, errno, "sigprocmask");
1109
exitstatus = EX_OSERR;
902
perror("sigprocmask");
903
exitstatus = EXIT_FAILURE;
1110
904
goto fallback;
1111
905
}
1112
906
1113
907
FD_SET(new_plugin->fd, &rfds_all);
1114
908
1115
if(maxfd < new_plugin->fd){
909
if (maxfd < new_plugin->fd){
1116
910
maxfd = new_plugin->fd;
1117
911
}
1118
912
}
1119
913
1120
free(direntries);
1121
direntries = NULL;
1122
close(dir_fd);
1123
dir_fd = -1;
1124
free_plugin(getplugin(NULL));
914
closedir(dir);
915
dir = NULL;
1125
916
1126
917
for(plugin *p = plugin_list; p != NULL; p = p->next){
1127
918
if(p->pid != 0){
1138
929
while(plugin_list){
1139
930
fd_set rfds = rfds_all;
1140
931
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
1141
if(select_ret == -1 and errno != EINTR){
1142
error(0, errno, "select");
1143
exitstatus = EX_OSERR;
932
if (select_ret == -1){
933
perror("select");
934
exitstatus = EXIT_FAILURE;
1144
935
goto fallback;
1145
936
}
1146
937
/* OK, now either a process completed, or something can be read
1147
938
from one of them */
1148
939
for(plugin *proc = plugin_list; proc != NULL;){
1149
940
/* Is this process completely done? */
1150
if(proc->completed and proc->eof){
941
if(proc->eof and proc->completed){
1151
942
/* Only accept the plugin output if it exited cleanly */
1152
943
if(not WIFEXITED(proc->status)
1153
944
or WEXITSTATUS(proc->status) != 0){
1154
945
/* Bad exit by plugin */
1155
946
1156
947
if(debug){
1157
948
if(WIFEXITED(proc->status)){
1158
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1159
" status %d\n", proc->name,
1160
(intmax_t) (proc->pid),
949
fprintf(stderr, "Plugin %u exited with status %d\n",
950
(unsigned int) (proc->pid),
1161
951
WEXITSTATUS(proc->status));
1162
} else if(WIFSIGNALED(proc->status)){
1163
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1164
" signal %d: %s\n", proc->name,
1165
(intmax_t) (proc->pid),
1166
WTERMSIG(proc->status),
1167
strsignal(WTERMSIG(proc->status)));
952
} else if(WIFSIGNALED(proc->status)) {
953
fprintf(stderr, "Plugin %u killed by signal %d\n",
954
(unsigned int) (proc->pid),
955
WTERMSIG(proc->status));
956
} else if(WCOREDUMP(proc->status)){
957
fprintf(stderr, "Plugin %d dumped core\n",
958
(unsigned int) (proc->pid));
1168
959
}
1169
960
}
1170
961
1171
962
/* Remove the plugin */
1172
963
FD_CLR(proc->fd, &rfds_all);
1173
964
1174
965
/* Block signal while modifying process_list */
1175
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1176
(SIG_BLOCK,
1177
&sigchld_action.sa_mask,
1178
NULL));
966
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1179
967
if(ret < 0){
1180
error(0, errno, "sigprocmask");
1181
exitstatus = EX_OSERR;
968
perror("sigprocmask");
969
exitstatus = EXIT_FAILURE;
1182
970
goto fallback;
1183
971
}
1184
972
1187
975
proc = next_plugin;
1188
976
1189
977
/* We are done modifying process list, so unblock signal */
1190
ret = (int)(TEMP_FAILURE_RETRY
1191
(sigprocmask(SIG_UNBLOCK,
1192
&sigchld_action.sa_mask, NULL)));
978
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
979
NULL);
1193
980
if(ret < 0){
1194
error(0, errno, "sigprocmask");
1195
exitstatus = EX_OSERR;
981
perror("sigprocmask");
982
exitstatus = EXIT_FAILURE;
1196
983
goto fallback;
1197
984
}
1198
985
1208
995
bool bret = print_out_password(proc->buffer,
1209
996
proc->buffer_length);
1210
997
if(not bret){
1211
error(0, errno, "print_out_password");
1212
exitstatus = EX_IOERR;
998
perror("print_out_password");
999
exitstatus = EXIT_FAILURE;
1213
1000
}
1214
1001
goto fallback;
1215
1002
}
1222
1009
}
1223
1010
/* Before reading, make the process' data buffer large enough */
1224
1011
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1225
char *new_buffer = realloc(proc->buffer, proc->buffer_size
1226
+ (size_t) BUFFER_SIZE);
1227
if(new_buffer == NULL){
1228
error(0, errno, "malloc");
1229
exitstatus = EX_OSERR;
1012
proc->buffer = realloc(proc->buffer, proc->buffer_size
1013
+ (size_t) BUFFER_SIZE);
1014
if (proc->buffer == NULL){
1015
perror("malloc");
1016
exitstatus = EXIT_FAILURE;
1230
1017
goto fallback;
1231
1018
}
1232
proc->buffer = new_buffer;
1233
1019
proc->buffer_size += BUFFER_SIZE;
1234
1020
}
1235
1021
/* Read from the process */
1236
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1237
proc->buffer
1238
+ proc->buffer_length,
1239
BUFFER_SIZE));
1240
if(sret < 0){
1022
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1023
BUFFER_SIZE);
1024
if(ret < 0){
1241
1025
/* Read error from this process; ignore the error */
1242
1026
proc = proc->next;
1243
1027
continue;
1244
1028
}
1245
if(sret == 0){
1029
if(ret == 0){
1246
1030
/* got EOF */
1247
1031
proc->eof = true;
1248
1032
} else {
1249
proc->buffer_length += (size_t) sret;
1033
proc->buffer_length += (size_t) ret;
1250
1034
}
1251
1035
}
1252
1036
}
1253
1254
1037
1038
1255
1039
fallback:
1256
1040
1257
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1258
and exitstatus != EX_OK)){
1041
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1259
1042
/* Fallback if all plugins failed, none are found or an error
1260
1043
occured */
1261
1044
bool bret;
1269
1052
}
1270
1053
bret = print_out_password(passwordbuffer, len);
1271
1054
if(not bret){
1272
error(0, errno, "print_out_password");
1273
exitstatus = EX_IOERR;
1055
perror("print_out_password");
1056
exitstatus = EXIT_FAILURE;
1274
1057
}
1275
1058
}
1276
1059
1277
1060
/* Restore old signal handler */
1278
1061
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1279
1062
if(ret == -1){
1280
error(0, errno, "sigaction");
1281
exitstatus = EX_OSERR;
1063
perror("sigaction");
1064
exitstatus = EXIT_FAILURE;
1282
1065
}
1283
1066
1284
1067
if(custom_argv != NULL){
1288
1071
free(custom_argv);
1289
1072
}
1290
1073
1291
free(direntries);
1292
1293
if(dir_fd != -1){
1294
close(dir_fd);
1074
if(dir != NULL){
1075
closedir(dir);
1295
1076
}
1296
1077
1297
1078
/* Kill the processes */
1301
1082
ret = kill(p->pid, SIGTERM);
1302
1083
if(ret == -1 and errno != ESRCH){
1303
1084
/* Set-uid proccesses might not get closed */
1304
error(0, errno, "kill");
1085
perror("kill");
1305
1086
}
1306
1087
}
1307
1088
}
1308
1089
1309
1090
/* Wait for any remaining child processes to terminate */
1310
do {
1091
do{
1311
1092
ret = wait(NULL);
1312
1093
} while(ret >= 0);
1313
1094
if(errno != ECHILD){
1314
error(0, errno, "wait");
1095
perror("wait");
1315
1096
}
1316
1097
1317
1098
free_plugin_list();
1318
1099
1319
1100
free(plugindir);
1320
free(pluginhelperdir);
1321
1101
free(argfile);
1322
1102
1323
1103
return exitstatus;
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0