268
/* Removes and free a plugin from the plugin list */
269
static void free_plugin(plugin *plugin_node){
271
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
274
free(plugin_node->argv);
275
for(char **env = plugin_node->environ; *env != NULL; env++){
278
free(plugin_node->environ);
279
free(plugin_node->buffer);
281
/* Removes the plugin from the singly-linked list */
282
if(plugin_node == plugin_list){
283
/* First one - simple */
284
plugin_list = plugin_list->next;
286
/* Second one or later */
287
for(plugin *p = plugin_list; p != NULL; p = p->next){
288
if(p->next == plugin_node){
289
p->next = plugin_node->next;
250
char **add_to_argv(char **argv, int *argc, char *arg){
253
argv = malloc(sizeof(char*) * 2);
257
argv[0] = NULL; /* Will be set to argv[0] in main before parsing */
261
argv = realloc(argv, sizeof(char *)
262
* ((unsigned int) *argc + 1));
298
static void free_plugin_list(void){
299
while(plugin_list != NULL){
300
free_plugin(plugin_list);
271
static void free_plugin_list(plugin *plugin_list){
272
for(plugin *next; plugin_list != NULL; plugin_list = next){
273
next = plugin_list->next;
274
for(char **arg = plugin_list->argv; *arg != NULL; arg++){
277
free(plugin_list->argv);
278
for(char **env = plugin_list->environ; *env != NULL; env++){
281
free(plugin_list->environ);
304
286
int main(int argc, char *argv[]){
305
char *plugindir = NULL;
306
char *argfile = NULL;
287
const char *plugindir = "/lib/mandos/plugins.d";
288
const char *argfile = ARGFILE;
308
290
size_t d_name_len;
341
323
{ .name = "global-options", .key = 'g',
342
324
.arg = "OPTION[,OPTION[,...]]",
343
325
.doc = "Options passed to all plugins" },
344
{ .name = "global-env", .key = 'G',
326
{ .name = "global-envs", .key = 'e',
345
327
.arg = "VAR=value",
346
328
.doc = "Environment variable passed to all plugins" },
347
329
{ .name = "options-for", .key = 'o',
348
330
.arg = "PLUGIN:OPTION[,OPTION[,...]]",
349
331
.doc = "Options passed only to specified plugin" },
350
{ .name = "env-for", .key = 'E',
332
{ .name = "envs-for", .key = 'f',
351
333
.arg = "PLUGIN:ENV=value",
352
334
.doc = "Environment variable passed to specified plugin" },
353
335
{ .name = "disable", .key = 'd',
355
337
.doc = "Disable a specific plugin", .group = 1 },
356
{ .name = "enable", .key = 'e',
358
.doc = "Enable a specific plugin", .group = 1 },
359
338
{ .name = "plugin-dir", .key = 128,
360
339
.arg = "DIRECTORY",
361
340
.doc = "Specify a different plugin directory", .group = 2 },
362
{ .name = "config-file", .key = 129,
364
.doc = "Specify a different configuration file", .group = 2 },
365
{ .name = "userid", .key = 130,
366
.arg = "ID", .flags = 0,
367
.doc = "User ID the plugins will run as", .group = 3 },
368
{ .name = "groupid", .key = 131,
369
.arg = "ID", .flags = 0,
370
.doc = "Group ID the plugins will run as", .group = 3 },
371
{ .name = "debug", .key = 132,
372
.doc = "Debug mode", .group = 4 },
341
{ .name = "userid", .key = 129,
342
.arg = "ID", .flags = 0,
343
.doc = "User ID the plugins will run as", .group = 2 },
344
{ .name = "groupid", .key = 130,
345
.arg = "ID", .flags = 0,
346
.doc = "Group ID the plugins will run as", .group = 2 },
347
{ .name = "debug", .key = 131,
348
.doc = "Debug mode", .group = 3 },
376
error_t parse_opt (int key, char *arg, __attribute__((unused))
377
struct argp_state *state) {
352
error_t parse_opt (int key, char *arg, struct argp_state *state) {
353
/* Get the INPUT argument from `argp_parse', which we know is a
354
pointer to our plugin list pointer. */
355
plugin **plugins = state->input;
379
case 'g': /* --global-options */
380
358
if (arg != NULL){
382
360
while((p = strsep(&arg, ",")) != NULL){
383
361
if(p[0] == '\0'){
386
if(not add_argument(getplugin(NULL), p)){
364
if(not add_argument(getplugin(NULL, plugins), p)){
387
365
perror("add_argument");
388
366
return ARGP_ERR_UNKNOWN;
393
case 'G': /* --global-env */
397
if(not add_environment(getplugin(NULL), arg, true)){
398
perror("add_environment");
376
char *envdef = strdup(arg);
380
if(not add_environment(getplugin(NULL, plugins), envdef)){
381
perror("add_environment");
401
case 'o': /* --options-for */
402
386
if (arg != NULL){
403
387
char *p_name = strsep(&arg, ":");
404
if(p_name[0] == '\0' or arg == NULL){
388
if(p_name[0] == '\0'){
407
391
char *opt = strsep(&arg, ":");
408
if(opt[0] == '\0' or opt == NULL){
412
while((p = strsep(&opt, ",")) != NULL){
416
if(not add_argument(getplugin(p_name), p)){
417
perror("add_argument");
418
return ARGP_ERR_UNKNOWN;
397
while((p = strsep(&opt, ",")) != NULL){
401
if(not add_argument(getplugin(p_name, plugins), p)){
402
perror("add_argument");
403
return ARGP_ERR_UNKNOWN;
423
case 'E': /* --env-for */
429
415
if(envdef == NULL){
433
if(not add_environment(getplugin(arg), envdef+1, true)){
418
char *p_name = strndup(arg, (size_t) (envdef-arg));
423
if(not add_environment(getplugin(p_name, plugins), envdef)){
434
424
perror("add_environment");
438
case 'd': /* --disable */
439
429
if (arg != NULL){
440
plugin *p = getplugin(arg);
430
plugin *p = getplugin(arg, plugins);
442
432
return ARGP_ERR_UNKNOWN;
444
434
p->disabled = true;
447
case 'e': /* --enable */
449
plugin *p = getplugin(arg);
451
return ARGP_ERR_UNKNOWN;
456
case 128: /* --plugin-dir */
458
plugindir = strdup(arg);
459
if(plugindir == NULL){
463
case 129: /* --config-file */
464
/* This is already done by parse_opt_config_file() */
466
case 130: /* --userid */
467
441
uid = (uid_t)strtol(arg, NULL, 10);
469
case 131: /* --groupid */
470
444
gid = (gid_t)strtol(arg, NULL, 10);
472
case 132: /* --debug */
475
449
case ARGP_KEY_ARG:
486
/* This option parser is the same as parse_opt() above, except it
487
ignores everything but the --config-file option. */
488
error_t parse_opt_config_file (int key, char *arg,
489
__attribute__((unused))
490
struct argp_state *state) {
492
case 'g': /* --global-options */
493
case 'G': /* --global-env */
494
case 'o': /* --options-for */
495
case 'E': /* --env-for */
496
case 'd': /* --disable */
497
case 'e': /* --enable */
498
case 128: /* --plugin-dir */
500
case 129: /* --config-file */
502
argfile = strdup(arg);
507
case 130: /* --userid */
508
case 131: /* --groupid */
509
case 132: /* --debug */
514
return ARGP_ERR_UNKNOWN;
460
plugin *plugin_list = NULL;
519
struct argp argp = { .options = options,
520
.parser = parse_opt_config_file,
462
struct argp argp = { .options = options, .parser = parse_opt,
463
.args_doc = "[+PLUS_SEPARATED_OPTIONS]",
522
464
.doc = "Mandos plugin runner -- Run plugins" };
524
/* Parse using the parse_opt_config_file in order to get the custom
525
config file location, if any. */
526
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
466
ret = argp_parse (&argp, argc, argv, 0, 0, &plugin_list);
527
467
if (ret == ARGP_ERR_UNKNOWN){
528
468
fprintf(stderr, "Unknown error while parsing arguments\n");
529
469
exitstatus = EXIT_FAILURE;
533
/* Reset to the normal argument parser */
534
argp.parser = parse_opt;
536
/* Open the configfile if available */
537
if (argfile == NULL){
538
conffp = fopen(AFILE, "r");
540
conffp = fopen(argfile, "r");
473
conffp = fopen(argfile, "r");
542
474
if(conffp != NULL){
543
475
char *org_line = NULL;
544
476
char *p, *arg, *new_arg, *line;
966
853
exitstatus = EXIT_FAILURE;
856
/* Delete this process entry from the list */
857
if(process_list == proc){
858
/* First one - simple */
859
process_list = proc->next;
861
/* Second one or later */
862
for(process *p = process_list; p != NULL; p = p->next){
864
p->next = proc->next;
970
869
/* We are done modifying process list, so unblock signal */
971
870
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
974
873
perror("sigprocmask");
975
exitstatus = EXIT_FAILURE;
979
if(plugin_list == NULL){
983
plugin *next_plugin = proc->next;
877
/* We deleted this process from the list, so we can't go
878
proc->next. Therefore, start over from the beginning of
989
882
/* This process exited nicely, so print its buffer */
991
884
bool bret = print_out_password(proc->buffer,
1063
947
if(custom_argv != NULL){
1064
for(char **arg = custom_argv+1; *arg != NULL; arg++){
948
for(char **arg = custom_argv; *arg != NULL; arg++){
1067
951
free(custom_argv);
953
free_plugin_list(plugin_list);
1070
955
if(dir != NULL){
1074
959
/* Free the process list and kill the processes */
1075
for(plugin *p = plugin_list; p != NULL; p = p->next){
1078
ret = kill(p->pid, SIGTERM);
1079
if(ret == -1 and errno != ESRCH){
1080
/* Set-uid proccesses might not get closed */
960
for(process *next; process_list != NULL; process_list = next){
961
next = process_list->next;
962
close(process_list->fd);
963
ret = kill(process_list->pid, SIGTERM);
964
if(ret == -1 and errno != ESRCH){
965
/* set-uid proccesses migth not get closed */
968
free(process_list->buffer);
1086
972
/* Wait for any remaining child processes to terminate */