To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 24.1.81
- compare with another revision
- download diff
- download tarball
- view history from revision 24.1.81
- Committer: Björn Påhlsson
- Date: 2008-09-03 18:47:50 UTC
- mto: (24.1.154 mandos) (237.4.3 mandos-release)
- mto: This revision was merged to the branch mainline in revision 149.
- Revision ID: belorn@braxen-20080903184750-s0k0jrrq0lxiamwh
removed keyring pre-requirement for starting password-request.
Keys will now be imported in run-time to a run-time created keyring
Changed seckey and pubkey to be paths to private and public keys of the pgp encrypted password and gnutls authentication credentials.
Keys will now be imported in run-time to a run-time created keyring
Changed seckey and pubkey to be paths to private and public keys of the pgp encrypted password and gnutls authentication credentials.
- files added:
- plugins.d/usplash
- files removed:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- network-hooks.d
- files renamed:
- plugins.d/mandos-client.c => plugins.d/password-request.c
- plugins.d/mandos-client.xml => plugins.d/password-request.xml
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008-2013 Teddy Hogeborn
6
* Copyright © 2008-2013 Björn Påhlsson
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
7
6
*
8
7
* This program is free software: you can redistribute it and/or
9
8
* modify it under the terms of the GNU General Public License as
19
18
* along with this program. If not, see
20
19
* <http://www.gnu.org/licenses/>.
21
20
*
22
* Contact the authors at <mandos@recompile.se>.
21
* Contact the authors at <mandos@fukt.bsnet.se>.
23
22
*/
24
23
25
24
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
26
asprintf(), O_CLOEXEC */
25
asprintf() */
27
26
#include <stddef.h> /* size_t, NULL */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
29
realloc() */
27
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
28
EXIT_SUCCESS, realloc() */
30
29
#include <stdbool.h> /* bool, true, false */
31
#include <stdio.h> /* fileno(), fprintf(),
32
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, fdopendir(), stat(), struct
30
#include <stdio.h> /* perror, popen(), fileno(),
31
fprintf(), stderr, STDOUT_FILENO */
32
#include <sys/types.h> /* DIR, opendir(), stat(), struct
34
33
stat, waitpid(), WIFEXITED(),
35
34
WEXITSTATUS(), wait(), pid_t,
36
35
uid_t, gid_t, getuid(), getgid(),
38
37
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
38
FD_SET(), FD_ISSET(), FD_CLR */
40
39
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS(), WTERMSIG(),
42
WCOREDUMP() */
40
WEXITSTATUS() */
43
41
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
44
42
#include <iso646.h> /* and, or, not */
45
#include <dirent.h> /* DIR, struct dirent, fdopendir(),
43
#include <dirent.h> /* DIR, struct dirent, opendir(),
46
44
readdir(), closedir(), dirfd() */
47
45
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
48
46
fcntl(), setuid(), setgid(),
49
47
F_GETFD, F_SETFD, FD_CLOEXEC,
50
48
access(), pipe(), fork(), close()
51
dup2(), STDOUT_FILENO, _exit(),
49
dup2, STDOUT_FILENO, _exit(),
52
50
execv(), write(), read(),
53
51
close() */
54
52
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
55
53
FD_CLOEXEC */
56
#include <string.h> /* strsep, strlen(), asprintf(),
57
strsignal(), strcmp(), strncmp() */
54
#include <string.h> /* strsep, strlen(), asprintf() */
58
55
#include <errno.h> /* errno */
59
56
#include <argp.h> /* struct argp_option, struct
60
57
argp_state, struct argp,
64
61
#include <signal.h> /* struct sigaction, sigemptyset(),
65
62
sigaddset(), sigaction(),
66
63
sigprocmask(), SIG_BLOCK, SIGCHLD,
67
SIG_UNBLOCK, kill(), sig_atomic_t
68
*/
64
SIG_UNBLOCK, kill() */
69
65
#include <errno.h> /* errno, EBADF */
70
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
71
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
72
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
73
#include <errno.h> /* errno */
74
#include <error.h> /* error() */
75
66
76
67
#define BUFFER_SIZE 256
77
68
78
69
#define PDIR "/lib/mandos/plugins.d"
79
70
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
80
71
81
const char *argp_program_version = "plugin-runner " VERSION;
82
const char *argp_program_bug_address = "<mandos@recompile.se>";
72
const char *argp_program_version = "plugin-runner 1.0";
73
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
74
75
struct plugin;
83
76
84
77
typedef struct plugin{
85
78
char *name; /* can be NULL or any plugin name */
88
81
char **environ;
89
82
int envc;
90
83
bool disabled;
91
84
92
85
/* Variables used for running processes*/
93
86
pid_t pid;
94
87
int fd;
96
89
size_t buffer_size;
97
90
size_t buffer_length;
98
91
bool eof;
99
volatile sig_atomic_t completed;
100
int status;
92
volatile bool completed;
93
volatile int status;
101
94
struct plugin *next;
102
95
} plugin;
103
96
104
97
static plugin *plugin_list = NULL;
105
98
106
/* Gets an existing plugin based on name,
99
/* Gets a existing plugin based on name,
107
100
or if none is found, creates a new one */
108
101
static plugin *getplugin(char *name){
109
/* Check for existing plugin with that name */
110
for(plugin *p = plugin_list; p != NULL; p = p->next){
111
if((p->name == name)
112
or (p->name and name and (strcmp(p->name, name) == 0))){
102
/* Check for exiting plugin with that name */
103
for (plugin *p = plugin_list; p != NULL; p = p->next){
104
if ((p->name == name)
105
or (p->name and name and (strcmp(p->name, name) == 0))){
113
106
return p;
114
107
}
115
108
}
116
109
/* Create a new plugin */
117
plugin *new_plugin = NULL;
118
do {
119
new_plugin = malloc(sizeof(plugin));
120
} while(new_plugin == NULL and errno == EINTR);
121
if(new_plugin == NULL){
110
plugin *new_plugin = malloc(sizeof(plugin));
111
if (new_plugin == NULL){
122
112
return NULL;
123
113
}
124
114
char *copy_name = NULL;
125
115
if(name != NULL){
126
do {
127
copy_name = strdup(name);
128
} while(copy_name == NULL and errno == EINTR);
116
copy_name = strdup(name);
129
117
if(copy_name == NULL){
130
int e = errno;
131
free(new_plugin);
132
errno = e;
133
118
return NULL;
134
119
}
135
120
}
136
137
*new_plugin = (plugin){ .name = copy_name,
138
.argc = 1,
139
.disabled = false,
140
.next = plugin_list };
141
142
do {
143
new_plugin->argv = malloc(sizeof(char *) * 2);
144
} while(new_plugin->argv == NULL and errno == EINTR);
145
if(new_plugin->argv == NULL){
146
int e = errno;
121
122
*new_plugin = (plugin) { .name = copy_name,
123
.argc = 1,
124
.disabled = false,
125
.next = plugin_list };
126
127
new_plugin->argv = malloc(sizeof(char *) * 2);
128
if (new_plugin->argv == NULL){
147
129
free(copy_name);
148
130
free(new_plugin);
149
errno = e;
150
131
return NULL;
151
132
}
152
133
new_plugin->argv[0] = copy_name;
153
134
new_plugin->argv[1] = NULL;
154
135
155
do {
156
new_plugin->environ = malloc(sizeof(char *));
157
} while(new_plugin->environ == NULL and errno == EINTR);
136
new_plugin->environ = malloc(sizeof(char *));
158
137
if(new_plugin->environ == NULL){
159
int e = errno;
160
138
free(copy_name);
161
139
free(new_plugin->argv);
162
140
free(new_plugin);
163
errno = e;
164
141
return NULL;
165
142
}
166
143
new_plugin->environ[0] = NULL;
171
148
}
172
149
173
150
/* Helper function for add_argument and add_environment */
174
__attribute__((nonnull))
175
151
static bool add_to_char_array(const char *new, char ***array,
176
152
int *len){
177
153
/* Resize the pointed-to array to hold one more pointer */
178
do {
179
*array = realloc(*array, sizeof(char *)
180
* (size_t) ((*len) + 2));
181
} while(*array == NULL and errno == EINTR);
154
*array = realloc(*array, sizeof(char *)
155
* (size_t) ((*len) + 2));
182
156
/* Malloc check */
183
157
if(*array == NULL){
184
158
return false;
185
159
}
186
160
/* Make a copy of the new string */
187
char *copy;
188
do {
189
copy = strdup(new);
190
} while(copy == NULL and errno == EINTR);
161
char *copy = strdup(new);
191
162
if(copy == NULL){
192
163
return false;
193
164
}
200
171
}
201
172
202
173
/* Add to a plugin's argument vector */
203
__attribute__((nonnull(2)))
204
174
static bool add_argument(plugin *p, const char *arg){
205
175
if(p == NULL){
206
176
return false;
209
179
}
210
180
211
181
/* Add to a plugin's environment */
212
__attribute__((nonnull(2)))
213
182
static bool add_environment(plugin *p, const char *def, bool replace){
214
183
if(p == NULL){
215
184
return false;
218
187
size_t namelen = (size_t)(strchrnul(def, '=') - def);
219
188
/* Search for this environment variable */
220
189
for(char **e = p->environ; *e != NULL; e++){
221
if(strncmp(*e, def, namelen + 1) == 0){
190
if(strncmp(*e, def, namelen+1) == 0){
222
191
/* It already exists */
223
192
if(replace){
224
char *new;
225
do {
226
new = realloc(*e, strlen(def) + 1);
227
} while(new == NULL and errno == EINTR);
193
char *new = realloc(*e, strlen(def));
228
194
if(new == NULL){
229
195
return false;
230
196
}
240
206
/*
241
207
* Based on the example in the GNU LibC manual chapter 13.13 "File
242
208
* Descriptor Flags".
243
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
209
* *Note File Descriptor Flags:(libc)Descriptor Flags.
244
210
*/
245
static int set_cloexec_flag(int fd){
246
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
211
static int set_cloexec_flag(int fd)
212
{
213
int ret = fcntl(fd, F_GETFD, 0);
247
214
/* If reading the flags failed, return error indication now. */
248
215
if(ret < 0){
249
216
return ret;
250
217
}
251
218
/* Store modified flag word in the descriptor. */
252
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
253
ret | FD_CLOEXEC));
219
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
254
220
}
255
221
256
222
257
223
/* Mark processes as completed when they exit, and save their exit
258
224
status. */
259
static void handle_sigchld(__attribute__((unused)) int sig){
260
int old_errno = errno;
225
void handle_sigchld(__attribute__((unused)) int sig){
261
226
while(true){
262
227
plugin *proc = plugin_list;
263
228
int status;
267
232
break;
268
233
}
269
234
if(pid == -1){
270
if(errno == ECHILD){
271
/* No child processes */
272
break;
235
if (errno != ECHILD){
236
perror("waitpid");
273
237
}
274
error(0, errno, "waitpid");
238
/* No child processes */
239
break;
275
240
}
276
241
277
242
/* A child exited, find it in process_list */
278
243
while(proc != NULL and proc->pid != pid){
279
244
proc = proc->next;
283
248
continue;
284
249
}
285
250
proc->status = status;
286
proc->completed = 1;
251
proc->completed = true;
287
252
}
288
errno = old_errno;
289
253
}
290
254
291
255
/* Prints out a password to stdout */
292
__attribute__((nonnull))
293
static bool print_out_password(const char *buffer, size_t length){
256
bool print_out_password(const char *buffer, size_t length){
294
257
ssize_t ret;
258
if(length>0 and buffer[length-1] == '\n'){
259
length--;
260
}
295
261
for(size_t written = 0; written < length; written += (size_t)ret){
296
262
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
297
263
length - written));
303
269
}
304
270
305
271
/* Removes and free a plugin from the plugin list */
306
__attribute__((nonnull))
307
272
static void free_plugin(plugin *plugin_node){
308
273
309
274
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
315
280
}
316
281
free(plugin_node->environ);
317
282
free(plugin_node->buffer);
318
283
319
284
/* Removes the plugin from the singly-linked list */
320
285
if(plugin_node == plugin_list){
321
286
/* First one - simple */
349
314
struct stat st;
350
315
fd_set rfds_all;
351
316
int ret, maxfd = 0;
352
ssize_t sret;
353
317
uid_t uid = 65534;
354
318
gid_t gid = 65534;
355
319
bool debug = false;
364
328
sigemptyset(&sigchld_action.sa_mask);
365
329
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
366
330
if(ret == -1){
367
error(0, errno, "sigaddset");
368
exitstatus = EX_OSERR;
331
perror("sigaddset");
332
exitstatus = EXIT_FAILURE;
369
333
goto fallback;
370
334
}
371
335
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
372
336
if(ret == -1){
373
error(0, errno, "sigaction");
374
exitstatus = EX_OSERR;
337
perror("sigaction");
338
exitstatus = EXIT_FAILURE;
375
339
goto fallback;
376
340
}
377
341
409
373
.doc = "Group ID the plugins will run as", .group = 3 },
410
374
{ .name = "debug", .key = 132,
411
375
.doc = "Debug mode", .group = 4 },
412
/*
413
* These reproduce what we would get without ARGP_NO_HELP
414
*/
415
{ .name = "help", .key = '?',
416
.doc = "Give this help list", .group = -1 },
417
{ .name = "usage", .key = -3,
418
.doc = "Give a short usage message", .group = -1 },
419
{ .name = "version", .key = 'V',
420
.doc = "Print program version", .group = -1 },
421
376
{ .name = NULL }
422
377
};
423
378
424
__attribute__((nonnull(3)))
425
error_t parse_opt(int key, char *arg, struct argp_state *state){
426
errno = 0;
427
switch(key){
428
char *tmp;
429
intmax_t tmp_id;
379
error_t parse_opt (int key, char *arg, __attribute__((unused))
380
struct argp_state *state) {
381
switch (key) {
430
382
case 'g': /* --global-options */
431
{
432
char *plugin_option;
433
while((plugin_option = strsep(&arg, ",")) != NULL){
434
if(not add_argument(getplugin(NULL), plugin_option)){
435
break;
383
if (arg != NULL){
384
char *p;
385
while((p = strsep(&arg, ",")) != NULL){
386
if(p[0] == '\0'){
387
continue;
388
}
389
if(not add_argument(getplugin(NULL), p)){
390
perror("add_argument");
391
return ARGP_ERR_UNKNOWN;
436
392
}
437
393
}
438
394
}
439
395
break;
440
396
case 'G': /* --global-env */
441
add_environment(getplugin(NULL), arg, true);
397
if(arg == NULL){
398
break;
399
}
400
{
401
char *envdef = strdup(arg);
402
if(envdef == NULL){
403
break;
404
}
405
if(not add_environment(getplugin(NULL), envdef, true)){
406
perror("add_environment");
407
}
408
}
442
409
break;
443
410
case 'o': /* --options-for */
444
{
445
char *option_list = strchr(arg, ':');
446
if(option_list == NULL){
447
argp_error(state, "No colon in \"%s\"", arg);
448
errno = EINVAL;
449
break;
450
}
451
*option_list = '\0';
452
option_list++;
453
if(arg[0] == '\0'){
454
argp_error(state, "Empty plugin name");
455
errno = EINVAL;
456
break;
457
}
458
char *option;
459
while((option = strsep(&option_list, ",")) != NULL){
460
if(not add_argument(getplugin(arg), option)){
461
break;
411
if (arg != NULL){
412
char *p_name = strsep(&arg, ":");
413
if(p_name[0] == '\0'){
414
break;
415
}
416
char *opt = strsep(&arg, ":");
417
if(opt[0] == '\0'){
418
break;
419
}
420
if(opt != NULL){
421
char *p;
422
while((p = strsep(&opt, ",")) != NULL){
423
if(p[0] == '\0'){
424
continue;
425
}
426
if(not add_argument(getplugin(p_name), p)){
427
perror("add_argument");
428
return ARGP_ERR_UNKNOWN;
429
}
462
430
}
463
431
}
464
432
}
465
433
break;
466
434
case 'E': /* --env-for */
435
if(arg == NULL){
436
break;
437
}
467
438
{
468
439
char *envdef = strchr(arg, ':');
469
440
if(envdef == NULL){
470
argp_error(state, "No colon in \"%s\"", arg);
471
errno = EINVAL;
472
break;
473
}
474
*envdef = '\0';
441
break;
442
}
443
char *p_name = strndup(arg, (size_t) (envdef-arg));
444
if(p_name == NULL){
445
break;
446
}
475
447
envdef++;
476
if(arg[0] == '\0'){
477
argp_error(state, "Empty plugin name");
478
errno = EINVAL;
479
break;
448
if(not add_environment(getplugin(p_name), envdef, true)){
449
perror("add_environment");
480
450
}
481
add_environment(getplugin(arg), envdef, true);
482
451
}
483
452
break;
484
453
case 'd': /* --disable */
485
{
454
if (arg != NULL){
486
455
plugin *p = getplugin(arg);
487
if(p != NULL){
488
p->disabled = true;
456
if(p == NULL){
457
return ARGP_ERR_UNKNOWN;
489
458
}
459
p->disabled = true;
490
460
}
491
461
break;
492
462
case 'e': /* --enable */
493
{
463
if (arg != NULL){
494
464
plugin *p = getplugin(arg);
495
if(p != NULL){
496
p->disabled = false;
465
if(p == NULL){
466
return ARGP_ERR_UNKNOWN;
497
467
}
468
p->disabled = false;
498
469
}
499
470
break;
500
471
case 128: /* --plugin-dir */
501
free(plugindir);
502
472
plugindir = strdup(arg);
473
if(plugindir == NULL){
474
perror("strdup");
475
}
503
476
break;
504
477
case 129: /* --config-file */
505
478
/* This is already done by parse_opt_config_file() */
506
479
break;
507
480
case 130: /* --userid */
508
tmp_id = strtoimax(arg, &tmp, 10);
509
if(errno != 0 or tmp == arg or *tmp != '\0'
510
or tmp_id != (uid_t)tmp_id){
511
argp_error(state, "Bad user ID number: \"%s\", using %"
512
PRIdMAX, arg, (intmax_t)uid);
513
break;
514
}
515
uid = (uid_t)tmp_id;
481
uid = (uid_t)strtol(arg, NULL, 10);
516
482
break;
517
483
case 131: /* --groupid */
518
tmp_id = strtoimax(arg, &tmp, 10);
519
if(errno != 0 or tmp == arg or *tmp != '\0'
520
or tmp_id != (gid_t)tmp_id){
521
argp_error(state, "Bad group ID number: \"%s\", using %"
522
PRIdMAX, arg, (intmax_t)gid);
523
break;
524
}
525
gid = (gid_t)tmp_id;
484
gid = (gid_t)strtol(arg, NULL, 10);
526
485
break;
527
486
case 132: /* --debug */
528
487
debug = true;
529
488
break;
530
/*
531
* These reproduce what we would get without ARGP_NO_HELP
532
*/
533
case '?': /* --help */
534
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
535
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
536
case -3: /* --usage */
537
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
538
argp_state_help(state, state->out_stream,
539
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
540
case 'V': /* --version */
541
fprintf(state->out_stream, "%s\n", argp_program_version);
542
exit(EXIT_SUCCESS);
543
break;
544
/*
545
* When adding more options before this line, remember to also add a
546
* "case" to the "parse_opt_config_file" function below.
547
*/
548
489
case ARGP_KEY_ARG:
549
/* Cryptsetup always passes an argument, which is an empty
550
string if "none" was specified in /etc/crypttab. So if
551
argument was empty, we ignore it silently. */
552
if(arg[0] == '\0'){
553
break;
554
}
490
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
491
break;
492
case ARGP_KEY_END:
493
break;
555
494
default:
556
495
return ARGP_ERR_UNKNOWN;
557
496
}
558
return errno; /* Set to 0 at start */
497
return 0;
559
498
}
560
499
561
500
/* This option parser is the same as parse_opt() above, except it
562
501
ignores everything but the --config-file option. */
563
error_t parse_opt_config_file(int key, char *arg,
564
__attribute__((unused))
565
struct argp_state *state){
566
errno = 0;
567
switch(key){
502
error_t parse_opt_config_file (int key, char *arg,
503
__attribute__((unused))
504
struct argp_state *state) {
505
switch (key) {
568
506
case 'g': /* --global-options */
569
507
case 'G': /* --global-env */
570
508
case 'o': /* --options-for */
574
512
case 128: /* --plugin-dir */
575
513
break;
576
514
case 129: /* --config-file */
577
free(argfile);
578
515
argfile = strdup(arg);
579
break;
516
if(argfile == NULL){
517
perror("strdup");
518
}
519
break;
580
520
case 130: /* --userid */
581
521
case 131: /* --groupid */
582
522
case 132: /* --debug */
583
case '?': /* --help */
584
case -3: /* --usage */
585
case 'V': /* --version */
586
523
case ARGP_KEY_ARG:
524
case ARGP_KEY_END:
587
525
break;
588
526
default:
589
527
return ARGP_ERR_UNKNOWN;
590
528
}
591
return errno;
529
return 0;
592
530
}
593
531
594
532
struct argp argp = { .options = options,
596
534
.args_doc = "",
597
535
.doc = "Mandos plugin runner -- Run plugins" };
598
536
599
/* Parse using parse_opt_config_file() in order to get the custom
537
/* Parse using the parse_opt_config_file in order to get the custom
600
538
config file location, if any. */
601
ret = argp_parse(&argp, argc, argv,
602
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
603
NULL, NULL);
604
switch(ret){
605
case 0:
606
break;
607
case ENOMEM:
608
default:
609
errno = ret;
610
error(0, errno, "argp_parse");
611
exitstatus = EX_OSERR;
612
goto fallback;
613
case EINVAL:
614
exitstatus = EX_USAGE;
539
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
540
if (ret == ARGP_ERR_UNKNOWN){
541
fprintf(stderr, "Unknown error while parsing arguments\n");
542
exitstatus = EXIT_FAILURE;
615
543
goto fallback;
616
544
}
617
545
619
547
argp.parser = parse_opt;
620
548
621
549
/* Open the configfile if available */
622
if(argfile == NULL){
550
if (argfile == NULL){
623
551
conffp = fopen(AFILE, "r");
624
552
} else {
625
553
conffp = fopen(argfile, "r");
626
}
554
}
627
555
if(conffp != NULL){
628
556
char *org_line = NULL;
629
557
char *p, *arg, *new_arg, *line;
630
558
size_t size = 0;
559
ssize_t sret;
631
560
const char whitespace_delims[] = " \r\t\f\v\n";
632
561
const char comment_delim[] = "#";
633
562
634
563
custom_argc = 1;
635
564
custom_argv = malloc(sizeof(char*) * 2);
636
565
if(custom_argv == NULL){
637
error(0, errno, "malloc");
638
exitstatus = EX_OSERR;
566
perror("malloc");
567
exitstatus = EXIT_FAILURE;
639
568
goto fallback;
640
569
}
641
570
custom_argv[0] = argv[0];
642
571
custom_argv[1] = NULL;
643
572
644
573
/* for each line in the config file, strip whitespace and ignore
645
574
commented text */
646
575
while(true){
648
577
if(sret == -1){
649
578
break;
650
579
}
651
580
652
581
line = org_line;
653
582
arg = strsep(&line, comment_delim);
654
583
while((p = strsep(&arg, whitespace_delims)) != NULL){
657
586
}
658
587
new_arg = strdup(p);
659
588
if(new_arg == NULL){
660
error(0, errno, "strdup");
661
exitstatus = EX_OSERR;
589
perror("strdup");
590
exitstatus = EXIT_FAILURE;
662
591
free(org_line);
663
592
goto fallback;
664
593
}
667
596
custom_argv = realloc(custom_argv, sizeof(char *)
668
597
* ((unsigned int) custom_argc + 1));
669
598
if(custom_argv == NULL){
670
error(0, errno, "realloc");
671
exitstatus = EX_OSERR;
599
perror("realloc");
600
exitstatus = EXIT_FAILURE;
672
601
free(org_line);
673
602
goto fallback;
674
603
}
675
604
custom_argv[custom_argc-1] = new_arg;
676
custom_argv[custom_argc] = NULL;
605
custom_argv[custom_argc] = NULL;
677
606
}
678
607
}
679
do {
680
ret = fclose(conffp);
681
} while(ret == EOF and errno == EINTR);
682
if(ret == EOF){
683
error(0, errno, "fclose");
684
exitstatus = EX_IOERR;
685
goto fallback;
686
}
687
608
free(org_line);
688
609
} else {
689
610
/* Check for harmful errors and go to fallback. Other errors might
690
611
not affect opening plugins */
691
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
692
error(0, errno, "fopen");
693
exitstatus = EX_OSERR;
612
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
613
perror("fopen");
614
exitstatus = EXIT_FAILURE;
694
615
goto fallback;
695
616
}
696
617
}
697
/* If there were any arguments from the configuration file, pass
698
them to parser as command line arguments */
618
/* If there was any arguments from configuration file,
619
pass them to parser as command arguments */
699
620
if(custom_argv != NULL){
700
ret = argp_parse(&argp, custom_argc, custom_argv,
701
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
702
NULL, NULL);
703
switch(ret){
704
case 0:
705
break;
706
case ENOMEM:
707
default:
708
errno = ret;
709
error(0, errno, "argp_parse");
710
exitstatus = EX_OSERR;
711
goto fallback;
712
case EINVAL:
713
exitstatus = EX_CONFIG;
621
ret = argp_parse (&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
622
0, NULL);
623
if (ret == ARGP_ERR_UNKNOWN){
624
fprintf(stderr, "Unknown error while parsing arguments\n");
625
exitstatus = EXIT_FAILURE;
714
626
goto fallback;
715
627
}
716
628
}
717
629
718
630
/* Parse actual command line arguments, to let them override the
719
631
config file */
720
ret = argp_parse(&argp, argc, argv,
721
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
722
NULL, NULL);
723
switch(ret){
724
case 0:
725
break;
726
case ENOMEM:
727
default:
728
errno = ret;
729
error(0, errno, "argp_parse");
730
exitstatus = EX_OSERR;
731
goto fallback;
732
case EINVAL:
733
exitstatus = EX_USAGE;
632
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
633
if (ret == ARGP_ERR_UNKNOWN){
634
fprintf(stderr, "Unknown error while parsing arguments\n");
635
exitstatus = EXIT_FAILURE;
734
636
goto fallback;
735
637
}
736
638
741
643
for(char **a = p->argv; *a != NULL; a++){
742
644
fprintf(stderr, "\tArg: %s\n", *a);
743
645
}
744
fprintf(stderr, "...and %d environment variables\n", p->envc);
646
fprintf(stderr, "...and %u environment variables\n", p->envc);
745
647
for(char **a = p->environ; *a != NULL; a++){
746
648
fprintf(stderr, "\t%s\n", *a);
747
649
}
748
650
}
749
651
}
750
652
751
if(getuid() == 0){
752
/* Work around Debian bug #633582:
753
<http://bugs.debian.org/633582> */
754
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
755
if(plugindir_fd == -1){
756
error(0, errno, "open");
757
} else {
758
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
759
if(ret == -1){
760
error(0, errno, "fstat");
761
} else {
762
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
763
ret = fchown(plugindir_fd, uid, gid);
764
if(ret == -1){
765
error(0, errno, "fchown");
766
}
767
}
768
}
769
TEMP_FAILURE_RETRY(close(plugindir_fd));
770
}
771
}
772
773
/* Lower permissions */
774
ret = setgid(gid);
775
if(ret == -1){
776
error(0, errno, "setgid");
777
}
653
/* Strip permissions down to nobody */
778
654
ret = setuid(uid);
779
if(ret == -1){
780
error(0, errno, "setuid");
781
}
782
783
/* Open plugin directory with close_on_exec flag */
655
if (ret == -1){
656
perror("setuid");
657
}
658
setgid(gid);
659
if (ret == -1){
660
perror("setgid");
661
}
662
663
if (plugindir == NULL){
664
dir = opendir(PDIR);
665
} else {
666
dir = opendir(plugindir);
667
}
668
669
if(dir == NULL){
670
perror("Could not open plugin dir");
671
exitstatus = EXIT_FAILURE;
672
goto fallback;
673
}
674
675
/* Set the FD_CLOEXEC flag on the directory, if possible */
784
676
{
785
int dir_fd = -1;
786
if(plugindir == NULL){
787
dir_fd = open(PDIR, O_RDONLY |
788
#ifdef O_CLOEXEC
789
O_CLOEXEC
790
#else /* not O_CLOEXEC */
791
0
792
#endif /* not O_CLOEXEC */
793
);
794
} else {
795
dir_fd = open(plugindir, O_RDONLY |
796
#ifdef O_CLOEXEC
797
O_CLOEXEC
798
#else /* not O_CLOEXEC */
799
0
800
#endif /* not O_CLOEXEC */
801
);
802
}
803
if(dir_fd == -1){
804
error(0, errno, "Could not open plugin dir");
805
exitstatus = EX_UNAVAILABLE;
806
goto fallback;
807
}
808
809
#ifndef O_CLOEXEC
810
/* Set the FD_CLOEXEC flag on the directory */
811
ret = set_cloexec_flag(dir_fd);
812
if(ret < 0){
813
error(0, errno, "set_cloexec_flag");
814
TEMP_FAILURE_RETRY(close(dir_fd));
815
exitstatus = EX_OSERR;
816
goto fallback;
817
}
818
#endif /* O_CLOEXEC */
819
820
dir = fdopendir(dir_fd);
821
if(dir == NULL){
822
error(0, errno, "Could not open plugin dir");
823
TEMP_FAILURE_RETRY(close(dir_fd));
824
exitstatus = EX_OSERR;
825
goto fallback;
677
int dir_fd = dirfd(dir);
678
if(dir_fd >= 0){
679
ret = set_cloexec_flag(dir_fd);
680
if(ret < 0){
681
perror("set_cloexec_flag");
682
exitstatus = EXIT_FAILURE;
683
goto fallback;
684
}
826
685
}
827
686
}
828
687
830
689
831
690
/* Read and execute any executable in the plugin directory*/
832
691
while(true){
833
do {
834
dirst = readdir(dir);
835
} while(dirst == NULL and errno == EINTR);
692
dirst = readdir(dir);
836
693
837
694
/* All directory entries have been processed */
838
695
if(dirst == NULL){
839
if(errno == EBADF){
840
error(0, errno, "readdir");
841
exitstatus = EX_IOERR;
696
if (errno == EBADF){
697
perror("readdir");
698
exitstatus = EXIT_FAILURE;
842
699
goto fallback;
843
700
}
844
701
break;
850
707
{
851
708
bool bad_name = false;
852
709
853
const char * const bad_prefixes[] = { ".", "#", NULL };
710
const char const *bad_prefixes[] = { ".", "#", NULL };
854
711
855
const char * const bad_suffixes[] = { "~", "#", ".dpkg-new",
712
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
856
713
".dpkg-old",
857
".dpkg-bak",
858
714
".dpkg-divert", NULL };
859
#pragma GCC diagnostic push
860
#pragma GCC diagnostic ignored "-Wcast-qual"
861
for(const char **pre = (const char **)bad_prefixes;
862
*pre != NULL; pre++){
863
#pragma GCC diagnostic pop
715
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
864
716
size_t pre_len = strlen(*pre);
865
717
if((d_name_len >= pre_len)
866
718
and strncmp((dirst->d_name), *pre, pre_len) == 0){
875
727
if(bad_name){
876
728
continue;
877
729
}
878
#pragma GCC diagnostic push
879
#pragma GCC diagnostic ignored "-Wcast-qual"
880
for(const char **suf = (const char **)bad_suffixes;
881
*suf != NULL; suf++){
882
#pragma GCC diagnostic pop
730
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
883
731
size_t suf_len = strlen(*suf);
884
732
if((d_name_len >= suf_len)
885
and (strcmp((dirst->d_name) + d_name_len-suf_len, *suf)
733
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
886
734
== 0)){
887
735
if(debug){
888
736
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
897
745
continue;
898
746
}
899
747
}
900
748
901
749
char *filename;
902
if(plugindir == NULL){
903
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, PDIR "/%s",
904
dirst->d_name));
905
} else {
906
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, "%s/%s",
907
plugindir,
908
dirst->d_name));
909
}
750
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
910
751
if(ret < 0){
911
error(0, errno, "asprintf");
752
perror("asprintf");
912
753
continue;
913
754
}
914
755
915
ret = (int)TEMP_FAILURE_RETRY(stat(filename, &st));
916
if(ret == -1){
917
error(0, errno, "stat");
756
ret = stat(filename, &st);
757
if (ret == -1){
758
perror("stat");
918
759
free(filename);
919
760
continue;
920
761
}
921
762
922
763
/* Ignore non-executable files */
923
if(not S_ISREG(st.st_mode)
924
or (TEMP_FAILURE_RETRY(access(filename, X_OK)) != 0)){
764
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
925
765
if(debug){
926
766
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
927
767
" with bad type or mode\n", filename);
932
772
933
773
plugin *p = getplugin(dirst->d_name);
934
774
if(p == NULL){
935
error(0, errno, "getplugin");
775
perror("getplugin");
936
776
free(filename);
937
777
continue;
938
778
}
950
790
if(g != NULL){
951
791
for(char **a = g->argv + 1; *a != NULL; a++){
952
792
if(not add_argument(p, *a)){
953
error(0, errno, "add_argument");
793
perror("add_argument");
954
794
}
955
795
}
956
796
/* Add global environment variables */
957
797
for(char **e = g->environ; *e != NULL; e++){
958
798
if(not add_environment(p, *e, false)){
959
error(0, errno, "add_environment");
799
perror("add_environment");
960
800
}
961
801
}
962
802
}
967
807
if(p->environ[0] != NULL){
968
808
for(char **e = environ; *e != NULL; e++){
969
809
if(not add_environment(p, *e, false)){
970
error(0, errno, "add_environment");
810
perror("add_environment");
971
811
}
972
812
}
973
813
}
974
814
975
815
int pipefd[2];
976
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
977
if(ret == -1){
978
error(0, errno, "pipe");
979
exitstatus = EX_OSERR;
816
ret = pipe(pipefd);
817
if (ret == -1){
818
perror("pipe");
819
exitstatus = EXIT_FAILURE;
980
820
goto fallback;
981
821
}
982
822
/* Ask OS to automatic close the pipe on exec */
983
823
ret = set_cloexec_flag(pipefd[0]);
984
824
if(ret < 0){
985
error(0, errno, "set_cloexec_flag");
986
exitstatus = EX_OSERR;
825
perror("set_cloexec_flag");
826
exitstatus = EXIT_FAILURE;
987
827
goto fallback;
988
828
}
989
829
ret = set_cloexec_flag(pipefd[1]);
990
830
if(ret < 0){
991
error(0, errno, "set_cloexec_flag");
992
exitstatus = EX_OSERR;
831
perror("set_cloexec_flag");
832
exitstatus = EXIT_FAILURE;
993
833
goto fallback;
994
834
}
995
835
/* Block SIGCHLD until process is safely in process list */
996
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
997
&sigchld_action.sa_mask,
998
NULL));
836
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
999
837
if(ret < 0){
1000
error(0, errno, "sigprocmask");
1001
exitstatus = EX_OSERR;
838
perror("sigprocmask");
839
exitstatus = EXIT_FAILURE;
1002
840
goto fallback;
1003
841
}
1004
842
/* Starting a new process to be watched */
1005
pid_t pid;
1006
do {
1007
pid = fork();
1008
} while(pid == -1 and errno == EINTR);
843
pid_t pid = fork();
1009
844
if(pid == -1){
1010
error(0, errno, "fork");
1011
exitstatus = EX_OSERR;
845
perror("fork");
846
exitstatus = EXIT_FAILURE;
1012
847
goto fallback;
1013
848
}
1014
849
if(pid == 0){
1015
850
/* this is the child process */
1016
851
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1017
852
if(ret < 0){
1018
error(0, errno, "sigaction");
1019
_exit(EX_OSERR);
853
perror("sigaction");
854
_exit(EXIT_FAILURE);
1020
855
}
1021
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
856
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1022
857
if(ret < 0){
1023
error(0, errno, "sigprocmask");
1024
_exit(EX_OSERR);
858
perror("sigprocmask");
859
_exit(EXIT_FAILURE);
1025
860
}
1026
861
1027
862
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
1028
863
if(ret == -1){
1029
error(0, errno, "dup2");
1030
_exit(EX_OSERR);
864
perror("dup2");
865
_exit(EXIT_FAILURE);
1031
866
}
1032
867
1033
868
if(dirfd(dir) < 0){
1037
872
}
1038
873
if(p->environ[0] == NULL){
1039
874
if(execv(filename, p->argv) < 0){
1040
error(0, errno, "execv for %s", filename);
1041
_exit(EX_OSERR);
875
perror("execv");
876
_exit(EXIT_FAILURE);
1042
877
}
1043
878
} else {
1044
879
if(execve(filename, p->argv, p->environ) < 0){
1045
error(0, errno, "execve for %s", filename);
1046
_exit(EX_OSERR);
880
perror("execve");
881
_exit(EXIT_FAILURE);
1047
882
}
1048
883
}
1049
884
/* no return */
1050
885
}
1051
886
/* Parent process */
1052
TEMP_FAILURE_RETRY(close(pipefd[1])); /* Close unused write end of
1053
pipe */
887
close(pipefd[1]); /* Close unused write end of pipe */
1054
888
free(filename);
1055
889
plugin *new_plugin = getplugin(dirst->d_name);
1056
if(new_plugin == NULL){
1057
error(0, errno, "getplugin");
1058
ret = (int)(TEMP_FAILURE_RETRY
1059
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1060
NULL)));
890
if (new_plugin == NULL){
891
perror("getplugin");
892
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1061
893
if(ret < 0){
1062
error(0, errno, "sigprocmask");
894
perror("sigprocmask");
1063
895
}
1064
exitstatus = EX_OSERR;
896
exitstatus = EXIT_FAILURE;
1065
897
goto fallback;
1066
898
}
1067
899
1070
902
1071
903
/* Unblock SIGCHLD so signal handler can be run if this process
1072
904
has already completed */
1073
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1074
&sigchld_action.sa_mask,
1075
NULL));
905
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1076
906
if(ret < 0){
1077
error(0, errno, "sigprocmask");
1078
exitstatus = EX_OSERR;
907
perror("sigprocmask");
908
exitstatus = EXIT_FAILURE;
1079
909
goto fallback;
1080
910
}
1081
911
1082
#if defined (__GNUC__) and defined (__GLIBC__)
1083
#if not __GLIBC_PREREQ(2, 16)
1084
#pragma GCC diagnostic push
1085
#pragma GCC diagnostic ignored "-Wsign-conversion"
1086
#endif
1087
#endif
1088
FD_SET(new_plugin->fd, &rfds_all); /* Spurious warning from
1089
-Wconversion in GNU libc
1090
before 2.16 */
1091
#if defined (__GNUC__) and defined (__GLIBC__)
1092
#if not __GLIBC_PREREQ(2, 16)
1093
#pragma GCC diagnostic pop
1094
#endif
1095
#endif
912
FD_SET(new_plugin->fd, &rfds_all);
1096
913
1097
if(maxfd < new_plugin->fd){
914
if (maxfd < new_plugin->fd){
1098
915
maxfd = new_plugin->fd;
1099
916
}
917
1100
918
}
1101
919
1102
TEMP_FAILURE_RETRY(closedir(dir));
920
closedir(dir);
1103
921
dir = NULL;
1104
free_plugin(getplugin(NULL));
1105
922
1106
923
for(plugin *p = plugin_list; p != NULL; p = p->next){
1107
924
if(p->pid != 0){
1108
925
break;
1113
930
free_plugin_list();
1114
931
}
1115
932
}
1116
933
1117
934
/* Main loop while running plugins exist */
1118
935
while(plugin_list){
1119
936
fd_set rfds = rfds_all;
1120
937
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
1121
if(select_ret == -1 and errno != EINTR){
1122
error(0, errno, "select");
1123
exitstatus = EX_OSERR;
938
if (select_ret == -1){
939
perror("select");
940
exitstatus = EXIT_FAILURE;
1124
941
goto fallback;
1125
942
}
1126
943
/* OK, now either a process completed, or something can be read
1127
944
from one of them */
1128
for(plugin *proc = plugin_list; proc != NULL;){
945
for(plugin *proc = plugin_list; proc != NULL; proc = proc->next){
1129
946
/* Is this process completely done? */
1130
if(proc->completed and proc->eof){
947
if(proc->eof and proc->completed){
1131
948
/* Only accept the plugin output if it exited cleanly */
1132
949
if(not WIFEXITED(proc->status)
1133
950
or WEXITSTATUS(proc->status) != 0){
1134
951
/* Bad exit by plugin */
1135
952
1136
953
if(debug){
1137
954
if(WIFEXITED(proc->status)){
1138
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1139
" status %d\n", proc->name,
1140
(intmax_t) (proc->pid),
955
fprintf(stderr, "Plugin %u exited with status %d\n",
956
(unsigned int) (proc->pid),
1141
957
WEXITSTATUS(proc->status));
1142
} else if(WIFSIGNALED(proc->status)){
1143
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1144
" signal %d: %s\n", proc->name,
1145
(intmax_t) (proc->pid),
1146
WTERMSIG(proc->status),
1147
strsignal(WTERMSIG(proc->status)));
958
} else if(WIFSIGNALED(proc->status)) {
959
fprintf(stderr, "Plugin %u killed by signal %d\n",
960
(unsigned int) (proc->pid),
961
WTERMSIG(proc->status));
1148
962
} else if(WCOREDUMP(proc->status)){
1149
fprintf(stderr, "Plugin %s [%" PRIdMAX "] dumped"
1150
" core\n", proc->name, (intmax_t) (proc->pid));
963
fprintf(stderr, "Plugin %d dumped core\n",
964
(unsigned int) (proc->pid));
1151
965
}
1152
966
}
1153
967
1154
968
/* Remove the plugin */
1155
#if defined (__GNUC__) and defined (__GLIBC__)
1156
#if not __GLIBC_PREREQ(2, 16)
1157
#pragma GCC diagnostic push
1158
#pragma GCC diagnostic ignored "-Wsign-conversion"
1159
#endif
1160
#endif
1161
FD_CLR(proc->fd, &rfds_all); /* Spurious warning from
1162
-Wconversion in GNU libc
1163
before 2.16 */
1164
#if defined (__GNUC__) and defined (__GLIBC__)
1165
#if not __GLIBC_PREREQ(2, 16)
1166
#pragma GCC diagnostic pop
1167
#endif
1168
#endif
1169
969
FD_CLR(proc->fd, &rfds_all);
970
1170
971
/* Block signal while modifying process_list */
1171
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1172
(SIG_BLOCK,
1173
&sigchld_action.sa_mask,
1174
NULL));
972
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1175
973
if(ret < 0){
1176
error(0, errno, "sigprocmask");
1177
exitstatus = EX_OSERR;
974
perror("sigprocmask");
975
exitstatus = EXIT_FAILURE;
1178
976
goto fallback;
1179
977
}
1180
1181
plugin *next_plugin = proc->next;
1182
978
free_plugin(proc);
1183
proc = next_plugin;
1184
1185
979
/* We are done modifying process list, so unblock signal */
1186
ret = (int)(TEMP_FAILURE_RETRY
1187
(sigprocmask(SIG_UNBLOCK,
1188
&sigchld_action.sa_mask, NULL)));
980
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
981
NULL);
1189
982
if(ret < 0){
1190
error(0, errno, "sigprocmask");
1191
exitstatus = EX_OSERR;
983
perror("sigprocmask");
984
exitstatus = EXIT_FAILURE;
1192
985
goto fallback;
1193
986
}
1194
987
1195
988
if(plugin_list == NULL){
1196
989
break;
1197
990
}
1198
1199
991
continue;
1200
992
}
1201
993
1202
994
/* This process exited nicely, so print its buffer */
1203
995
1204
996
bool bret = print_out_password(proc->buffer,
1205
997
proc->buffer_length);
1206
998
if(not bret){
1207
error(0, errno, "print_out_password");
1208
exitstatus = EX_IOERR;
999
perror("print_out_password");
1000
exitstatus = EXIT_FAILURE;
1209
1001
}
1210
1002
goto fallback;
1211
1003
}
1212
1004
1213
1005
/* This process has not completed. Does it have any output? */
1214
#if defined (__GNUC__) and defined (__GLIBC__)
1215
#if not __GLIBC_PREREQ(2, 16)
1216
#pragma GCC diagnostic push
1217
#pragma GCC diagnostic ignored "-Wsign-conversion"
1218
#endif
1219
#endif
1220
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){ /* Spurious
1221
warning from
1222
-Wconversion
1223
in GNU libc
1224
before
1225
2.16 */
1226
#if defined (__GNUC__) and defined (__GLIBC__)
1227
#if not __GLIBC_PREREQ(2, 16)
1228
#pragma GCC diagnostic pop
1229
#endif
1230
#endif
1006
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1231
1007
/* This process had nothing to say at this time */
1232
proc = proc->next;
1233
1008
continue;
1234
1009
}
1235
1010
/* Before reading, make the process' data buffer large enough */
1236
1011
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1237
1012
proc->buffer = realloc(proc->buffer, proc->buffer_size
1238
1013
+ (size_t) BUFFER_SIZE);
1239
if(proc->buffer == NULL){
1240
error(0, errno, "malloc");
1241
exitstatus = EX_OSERR;
1014
if (proc->buffer == NULL){
1015
perror("malloc");
1016
exitstatus = EXIT_FAILURE;
1242
1017
goto fallback;
1243
1018
}
1244
1019
proc->buffer_size += BUFFER_SIZE;
1245
1020
}
1246
1021
/* Read from the process */
1247
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1248
proc->buffer
1249
+ proc->buffer_length,
1250
BUFFER_SIZE));
1251
if(sret < 0){
1022
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1023
BUFFER_SIZE);
1024
if(ret < 0){
1252
1025
/* Read error from this process; ignore the error */
1253
proc = proc->next;
1254
1026
continue;
1255
1027
}
1256
if(sret == 0){
1028
if(ret == 0){
1257
1029
/* got EOF */
1258
1030
proc->eof = true;
1259
1031
} else {
1260
proc->buffer_length += (size_t) sret;
1032
proc->buffer_length += (size_t) ret;
1261
1033
}
1262
1034
}
1263
1035
}
1264
1265
1036
1037
1266
1038
fallback:
1267
1039
1268
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1269
and exitstatus != EX_OK)){
1040
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1270
1041
/* Fallback if all plugins failed, none are found or an error
1271
1042
occured */
1272
1043
bool bret;
1273
1044
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1274
1045
char *passwordbuffer = getpass("Password: ");
1275
size_t len = strlen(passwordbuffer);
1276
/* Strip trailing newline */
1277
if(len > 0 and passwordbuffer[len-1] == '\n'){
1278
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1279
len--;
1280
}
1281
bret = print_out_password(passwordbuffer, len);
1046
bret = print_out_password(passwordbuffer, strlen(passwordbuffer));
1282
1047
if(not bret){
1283
error(0, errno, "print_out_password");
1284
exitstatus = EX_IOERR;
1048
perror("print_out_password");
1049
exitstatus = EXIT_FAILURE;
1285
1050
}
1286
1051
}
1287
1052
1288
1053
/* Restore old signal handler */
1289
1054
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1290
1055
if(ret == -1){
1291
error(0, errno, "sigaction");
1292
exitstatus = EX_OSERR;
1056
perror("sigaction");
1057
exitstatus = EXIT_FAILURE;
1293
1058
}
1294
1059
1295
1060
if(custom_argv != NULL){
1296
1061
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1297
1062
free(*arg);
1303
1068
closedir(dir);
1304
1069
}
1305
1070
1306
/* Kill the processes */
1071
/* Free the process list and kill the processes */
1307
1072
for(plugin *p = plugin_list; p != NULL; p = p->next){
1308
1073
if(p->pid != 0){
1309
1074
close(p->fd);
1310
1075
ret = kill(p->pid, SIGTERM);
1311
1076
if(ret == -1 and errno != ESRCH){
1312
1077
/* Set-uid proccesses might not get closed */
1313
error(0, errno, "kill");
1078
perror("kill");
1314
1079
}
1315
1080
}
1316
1081
}
1317
1082
1318
1083
/* Wait for any remaining child processes to terminate */
1319
do {
1084
do{
1320
1085
ret = wait(NULL);
1321
1086
} while(ret >= 0);
1322
1087
if(errno != ECHILD){
1323
error(0, errno, "wait");
1088
perror("wait");
1324
1089
}
1325
1090
1326
1091
free_plugin_list();
1327
1092
1328
1093
free(plugindir);
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0