To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugbasedclient.c
- browse files at revision 39
- compare with another revision
- download diff
- download tarball
- view history from revision 39
- Committer: Teddy Hogeborn
- Date: 2008-08-03 03:33:56 UTC
- Revision ID: teddy@fukt.bsnet.se-20080803033356-6aemgj0g0hoz91ow
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
On debug, show
decrypted plaintext
in hexadecimal. Free
the GPGME data
buffers even on
errors.
On debug, show
decrypted plaintext
in hexadecimal. Free
the GPGME data
buffers even on
errors.
- files added:
- ca.pem
- files removed:
- .bzr-builddeb
- debian
- debian/po
- files renamed:
- plugin-runner.c => plugbasedclient.c
- plugins.d/mandos-client.c => plugins.d/mandosclient.c
- plugins.d/password-prompt.c => plugins.d/passprompt.c
- mandos.conf => server.conf
- mandos => server.py
- files modified:
- Makefile
added
removed
plugbasedclient.c
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008,2009 Teddy Hogeborn
6
* Copyright © 2008,2009 Björn Påhlsson
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
7
6
*
8
7
* This program is free software: you can redistribute it and/or
9
8
* modify it under the terms of the GNU General Public License as
22
21
* Contact the authors at <mandos@fukt.bsnet.se>.
23
22
*/
24
23
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
26
asprintf() */
27
#include <stddef.h> /* size_t, NULL */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
29
EXIT_SUCCESS, realloc() */
30
#include <stdbool.h> /* bool, true, false */
31
#include <stdio.h> /* perror, fileno(), fprintf(),
24
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY() */
25
26
#include <stdio.h> /* popen(), fileno(), fprintf(),
32
27
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, opendir(), stat(), struct
34
stat, waitpid(), WIFEXITED(),
35
WEXITSTATUS(), wait(), pid_t,
36
uid_t, gid_t, getuid(), getgid(),
37
dirfd() */
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
FD_SET(), FD_ISSET(), FD_CLR */
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS() */
42
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
43
28
#include <iso646.h> /* and, or, not */
29
#include <sys/types.h> /* DIR, opendir(), stat(),
30
struct stat, waitpid(),
31
WIFEXITED(), WEXITSTATUS(),
32
wait() */
33
#include <sys/wait.h> /* wait() */
44
34
#include <dirent.h> /* DIR, struct dirent, opendir(),
45
readdir(), closedir(), dirfd() */
35
readdir(), closedir() */
36
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
46
37
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
47
fcntl(), setuid(), setgid(),
48
F_GETFD, F_SETFD, FD_CLOEXEC,
49
access(), pipe(), fork(), close()
50
dup2(), STDOUT_FILENO, _exit(),
51
execv(), write(), read(),
52
close() */
53
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
54
FD_CLOEXEC */
55
#include <string.h> /* strsep, strlen(), asprintf() */
38
fcntl() */
39
#include <fcntl.h> /* fcntl() */
40
#include <stddef.h> /* NULL */
41
#include <stdlib.h> /* EXIT_FAILURE */
42
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
43
FD_SET(), FD_ISSET() */
44
#include <string.h> /* strlen(), strcpy(), strcat() */
45
#include <stdbool.h> /* true */
46
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
47
WEXITSTATUS() */
56
48
#include <errno.h> /* errno */
57
#include <argp.h> /* struct argp_option, struct
58
argp_state, struct argp,
59
argp_parse(), ARGP_ERR_UNKNOWN,
60
ARGP_KEY_END, ARGP_KEY_ARG,
61
error_t */
62
#include <signal.h> /* struct sigaction, sigemptyset(),
63
sigaddset(), sigaction(),
64
sigprocmask(), SIG_BLOCK, SIGCHLD,
65
SIG_UNBLOCK, kill() */
66
#include <errno.h> /* errno, EBADF */
67
#include <inttypes.h> /* intmax_t, SCNdMAX, PRIdMAX, */
49
#include <argp.h> /* struct argp_option,
50
struct argp_state, struct argp,
51
argp_parse() */
68
52
69
53
#define BUFFER_SIZE 256
70
54
71
#define PDIR "/lib/mandos/plugins.d"
72
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
73
74
const char *argp_program_version = "plugin-runner " VERSION;
75
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
76
77
typedef struct plugin{
78
char *name; /* can be NULL or any plugin name */
79
char **argv;
80
int argc;
81
char **environ;
82
int envc;
83
bool disabled;
84
85
/* Variables used for running processes*/
55
struct process;
56
57
typedef struct process{
86
58
pid_t pid;
87
59
int fd;
88
60
char *buffer;
89
61
size_t buffer_size;
90
62
size_t buffer_length;
91
63
bool eof;
92
volatile bool completed;
93
volatile int status;
64
bool completed;
65
int status;
66
struct process *next;
67
} process;
68
69
typedef struct plugin{
70
char *name; /* can be NULL or any plugin name */
71
char **argv;
72
int argc;
73
bool disabled;
94
74
struct plugin *next;
95
75
} plugin;
96
76
97
static plugin *plugin_list = NULL;
98
99
/* Gets an existing plugin based on name,
100
or if none is found, creates a new one */
101
static plugin *getplugin(char *name){
102
/* Check for exiting plugin with that name */
103
for(plugin *p = plugin_list; p != NULL; p = p->next){
104
if((p->name == name)
105
or (p->name and name and (strcmp(p->name, name) == 0))){
77
static plugin *getplugin(char *name, plugin **plugin_list){
78
for (plugin *p = *plugin_list; p != NULL; p = p->next){
79
if ((p->name == name)
80
or (p->name and name and (strcmp(p->name, name) == 0))){
106
81
return p;
107
82
}
108
83
}
109
84
/* Create a new plugin */
110
85
plugin *new_plugin = malloc(sizeof(plugin));
111
if(new_plugin == NULL){
112
return NULL;
113
}
114
char *copy_name = NULL;
115
if(name != NULL){
116
copy_name = strdup(name);
117
if(copy_name == NULL){
118
free(new_plugin);
119
return NULL;
120
}
121
}
122
123
*new_plugin = (plugin) { .name = copy_name,
124
.argc = 1,
125
.disabled = false,
126
.next = plugin_list };
127
86
if (new_plugin == NULL){
87
perror("malloc");
88
exit(EXIT_FAILURE);
89
}
90
new_plugin->name = name;
128
91
new_plugin->argv = malloc(sizeof(char *) * 2);
129
if(new_plugin->argv == NULL){
130
free(copy_name);
131
free(new_plugin);
132
return NULL;
92
if (new_plugin->argv == NULL){
93
perror("malloc");
94
exit(EXIT_FAILURE);
133
95
}
134
new_plugin->argv[0] = copy_name;
96
new_plugin->argv[0] = name;
135
97
new_plugin->argv[1] = NULL;
136
137
new_plugin->environ = malloc(sizeof(char *));
138
if(new_plugin->environ == NULL){
139
free(copy_name);
140
free(new_plugin->argv);
141
free(new_plugin);
142
return NULL;
143
}
144
new_plugin->environ[0] = NULL;
145
98
new_plugin->argc = 1;
99
new_plugin->disabled = false;
100
new_plugin->next = *plugin_list;
146
101
/* Append the new plugin to the list */
147
plugin_list = new_plugin;
102
*plugin_list = new_plugin;
148
103
return new_plugin;
149
104
}
150
105
151
/* Helper function for add_argument and add_environment */
152
static bool add_to_char_array(const char *new, char ***array,
153
int *len){
154
/* Resize the pointed-to array to hold one more pointer */
155
*array = realloc(*array, sizeof(char *)
156
* (size_t) ((*len) + 2));
157
/* Malloc check */
158
if(*array == NULL){
159
return false;
160
}
161
/* Make a copy of the new string */
162
char *copy = strdup(new);
163
if(copy == NULL){
164
return false;
165
}
166
/* Insert the copy */
167
(*array)[*len] = copy;
168
(*len)++;
169
/* Add a new terminating NULL pointer to the last element */
170
(*array)[*len] = NULL;
171
return true;
172
}
173
174
/* Add to a plugin's argument vector */
175
static bool add_argument(plugin *p, const char *arg){
176
if(p == NULL){
177
return false;
178
}
179
return add_to_char_array(arg, &(p->argv), &(p->argc));
180
}
181
182
/* Add to a plugin's environment */
183
static bool add_environment(plugin *p, const char *def, bool replace){
184
if(p == NULL){
185
return false;
186
}
187
/* namelen = length of name of environment variable */
188
size_t namelen = (size_t)(strchrnul(def, '=') - def);
189
/* Search for this environment variable */
190
for(char **e = p->environ; *e != NULL; e++){
191
if(strncmp(*e, def, namelen + 1) == 0){
192
/* It already exists */
193
if(replace){
194
char *new = realloc(*e, strlen(def) + 1);
195
if(new == NULL){
196
return false;
197
}
198
*e = new;
199
strcpy(*e, def);
200
}
201
return true;
202
}
203
}
204
return add_to_char_array(def, &(p->environ), &(p->envc));
106
static void addargument(plugin *p, char *arg){
107
p->argv[p->argc] = arg;
108
p->argv = realloc(p->argv, sizeof(char *) * (size_t)(p->argc + 2));
109
if (p->argv == NULL){
110
perror("malloc");
111
exit(EXIT_FAILURE);
112
}
113
p->argc++;
114
p->argv[p->argc] = NULL;
205
115
}
206
116
207
117
/*
209
119
* Descriptor Flags".
210
120
* *Note File Descriptor Flags:(libc)Descriptor Flags.
211
121
*/
212
static int set_cloexec_flag(int fd){
122
static int set_cloexec_flag(int fd)
123
{
213
124
int ret = fcntl(fd, F_GETFD, 0);
214
125
/* If reading the flags failed, return error indication now. */
215
126
if(ret < 0){
219
130
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
220
131
}
221
132
222
223
/* Mark processes as completed when they exit, and save their exit
133
const char *argp_program_version = "plugbasedclient 0.9";
134
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
135
136
process *process_list = NULL;
137
138
/* Mark a process as completed when it exits, and save its exit
224
139
status. */
225
static void handle_sigchld(__attribute__((unused)) int sig){
226
while(true){
227
plugin *proc = plugin_list;
228
int status;
229
pid_t pid = waitpid(-1, &status, WNOHANG);
230
if(pid == 0){
231
/* Only still running child processes */
232
break;
233
}
234
if(pid == -1){
235
if(errno != ECHILD){
236
perror("waitpid");
237
}
238
/* No child processes */
239
break;
240
}
241
242
/* A child exited, find it in process_list */
243
while(proc != NULL and proc->pid != pid){
244
proc = proc->next;
245
}
246
if(proc == NULL){
247
/* Process not found in process list */
248
continue;
249
}
250
proc->status = status;
251
proc->completed = true;
252
}
253
}
254
255
/* Prints out a password to stdout */
256
static bool print_out_password(const char *buffer, size_t length){
257
ssize_t ret;
258
for(size_t written = 0; written < length; written += (size_t)ret){
259
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
260
length - written));
261
if(ret < 0){
262
return false;
263
}
264
}
265
return true;
266
}
267
268
/* Removes and free a plugin from the plugin list */
269
static void free_plugin(plugin *plugin_node){
270
271
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
272
free(*arg);
273
}
274
free(plugin_node->argv);
275
for(char **env = plugin_node->environ; *env != NULL; env++){
276
free(*env);
277
}
278
free(plugin_node->environ);
279
free(plugin_node->buffer);
280
281
/* Removes the plugin from the singly-linked list */
282
if(plugin_node == plugin_list){
283
/* First one - simple */
284
plugin_list = plugin_list->next;
285
} else {
286
/* Second one or later */
287
for(plugin *p = plugin_list; p != NULL; p = p->next){
288
if(p->next == plugin_node){
289
p->next = plugin_node->next;
290
break;
291
}
292
}
293
}
294
295
free(plugin_node);
296
}
297
298
static void free_plugin_list(void){
299
while(plugin_list != NULL){
300
free_plugin(plugin_list);
301
}
140
void handle_sigchld(__attribute__((unused)) int sig){
141
process *proc = process_list;
142
int status;
143
pid_t pid = wait(&status);
144
while(proc != NULL and proc->pid != pid){
145
proc = proc->next;
146
}
147
if(proc == NULL){
148
/* Process not found in process list */
149
return;
150
}
151
proc->status = status;
152
proc->completed = true;
302
153
}
303
154
304
155
int main(int argc, char *argv[]){
305
char *plugindir = NULL;
306
char *argfile = NULL;
307
FILE *conffp;
156
const char *plugindir = "/conf/conf.d/mandos/plugins.d";
308
157
size_t d_name_len;
309
158
DIR *dir = NULL;
310
159
struct dirent *dirst;
311
160
struct stat st;
312
161
fd_set rfds_all;
313
int ret, numchars, maxfd = 0;
314
ssize_t sret;
315
intmax_t tmpmax;
162
int ret, maxfd = 0;
316
163
uid_t uid = 65534;
317
164
gid_t gid = 65534;
318
165
bool debug = false;
320
167
struct sigaction old_sigchld_action;
321
168
struct sigaction sigchld_action = { .sa_handler = handle_sigchld,
322
169
.sa_flags = SA_NOCLDSTOP };
323
char **custom_argv = NULL;
324
int custom_argc = 0;
170
char *plus_options = NULL;
171
char **plus_argv = NULL;
325
172
326
173
/* Establish a signal handler */
327
174
sigemptyset(&sigchld_action.sa_mask);
328
175
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
329
if(ret == -1){
176
if(ret < 0){
330
177
perror("sigaddset");
331
exitstatus = EXIT_FAILURE;
332
goto fallback;
178
exit(EXIT_FAILURE);
333
179
}
334
180
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
335
if(ret == -1){
181
if(ret < 0){
336
182
perror("sigaction");
337
exitstatus = EXIT_FAILURE;
338
goto fallback;
183
exit(EXIT_FAILURE);
339
184
}
340
185
341
186
/* The options we understand. */
343
188
{ .name = "global-options", .key = 'g',
344
189
.arg = "OPTION[,OPTION[,...]]",
345
190
.doc = "Options passed to all plugins" },
346
{ .name = "global-env", .key = 'G',
347
.arg = "VAR=value",
348
.doc = "Environment variable passed to all plugins" },
349
191
{ .name = "options-for", .key = 'o',
350
192
.arg = "PLUGIN:OPTION[,OPTION[,...]]",
351
193
.doc = "Options passed only to specified plugin" },
352
{ .name = "env-for", .key = 'E',
353
.arg = "PLUGIN:ENV=value",
354
.doc = "Environment variable passed to specified plugin" },
355
194
{ .name = "disable", .key = 'd',
356
195
.arg = "PLUGIN",
357
196
.doc = "Disable a specific plugin", .group = 1 },
358
{ .name = "enable", .key = 'e',
359
.arg = "PLUGIN",
360
.doc = "Enable a specific plugin", .group = 1 },
361
197
{ .name = "plugin-dir", .key = 128,
362
198
.arg = "DIRECTORY",
363
199
.doc = "Specify a different plugin directory", .group = 2 },
364
{ .name = "config-file", .key = 129,
365
.arg = "FILE",
366
.doc = "Specify a different configuration file", .group = 2 },
367
{ .name = "userid", .key = 130,
368
.arg = "ID", .flags = 0,
369
.doc = "User ID the plugins will run as", .group = 3 },
370
{ .name = "groupid", .key = 131,
371
.arg = "ID", .flags = 0,
372
.doc = "Group ID the plugins will run as", .group = 3 },
373
{ .name = "debug", .key = 132,
374
.doc = "Debug mode", .group = 4 },
200
{ .name = "userid", .key = 129,
201
.arg = "ID", .flags = 0,
202
.doc = "User ID the plugins will run as", .group = 2 },
203
{ .name = "groupid", .key = 130,
204
.arg = "ID", .flags = 0,
205
.doc = "Group ID the plugins will run as", .group = 2 },
206
{ .name = "debug", .key = 131,
207
.doc = "Debug mode", .group = 3 },
375
208
{ .name = NULL }
376
209
};
377
210
378
error_t parse_opt(int key, char *arg, __attribute__((unused))
379
struct argp_state *state) {
380
switch(key) {
381
case 'g': /* --global-options */
382
if(arg != NULL){
383
char *p;
384
while((p = strsep(&arg, ",")) != NULL){
385
if(p[0] == '\0'){
386
continue;
387
}
388
if(not add_argument(getplugin(NULL), p)){
389
perror("add_argument");
390
return ARGP_ERR_UNKNOWN;
391
}
392
}
393
}
394
break;
395
case 'G': /* --global-env */
396
if(arg == NULL){
397
break;
398
}
399
if(not add_environment(getplugin(NULL), arg, true)){
400
perror("add_environment");
401
}
402
break;
403
case 'o': /* --options-for */
404
if(arg != NULL){
405
char *p_name = strsep(&arg, ":");
406
if(p_name[0] == '\0' or arg == NULL){
407
break;
408
}
409
char *opt = strsep(&arg, ":");
410
if(opt[0] == '\0' or opt == NULL){
411
break;
412
}
413
char *p;
414
while((p = strsep(&opt, ",")) != NULL){
415
if(p[0] == '\0'){
416
continue;
417
}
418
if(not add_argument(getplugin(p_name), p)){
419
perror("add_argument");
420
return ARGP_ERR_UNKNOWN;
421
}
422
}
423
}
424
break;
425
case 'E': /* --env-for */
426
if(arg == NULL){
427
break;
428
}
429
{
430
char *envdef = strchr(arg, ':');
431
if(envdef == NULL){
432
break;
433
}
434
*envdef = '\0';
435
if(not add_environment(getplugin(arg), envdef+1, true)){
436
perror("add_environment");
437
}
438
}
439
break;
440
case 'd': /* --disable */
441
if(arg != NULL){
442
plugin *p = getplugin(arg);
443
if(p == NULL){
444
return ARGP_ERR_UNKNOWN;
445
}
446
p->disabled = true;
447
}
448
break;
449
case 'e': /* --enable */
450
if(arg != NULL){
451
plugin *p = getplugin(arg);
452
if(p == NULL){
453
return ARGP_ERR_UNKNOWN;
454
}
455
p->disabled = false;
456
}
457
break;
458
case 128: /* --plugin-dir */
459
free(plugindir);
460
plugindir = strdup(arg);
461
if(plugindir == NULL){
462
perror("strdup");
463
}
464
break;
465
case 129: /* --config-file */
466
/* This is already done by parse_opt_config_file() */
467
break;
468
case 130: /* --userid */
469
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
470
if(ret < 1 or tmpmax != (uid_t)tmpmax
471
or arg[numchars] != '\0'){
472
fprintf(stderr, "Bad user ID number: \"%s\", using %"
473
PRIdMAX "\n", arg, (intmax_t)uid);
474
} else {
475
uid = (uid_t)tmpmax;
476
}
477
break;
478
case 131: /* --groupid */
479
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
480
if(ret < 1 or tmpmax != (gid_t)tmpmax
481
or arg[numchars] != '\0'){
482
fprintf(stderr, "Bad group ID number: \"%s\", using %"
483
PRIdMAX "\n", arg, (intmax_t)gid);
484
} else {
485
gid = (gid_t)tmpmax;
486
}
487
break;
488
case 132: /* --debug */
211
error_t parse_opt (int key, char *arg, struct argp_state *state) {
212
/* Get the INPUT argument from `argp_parse', which we know is a
213
pointer to our plugin list pointer. */
214
plugin **plugins = state->input;
215
switch (key) {
216
case 'g':
217
if (arg != NULL){
218
char *p = strtok(arg, ",");
219
do{
220
addargument(getplugin(NULL, plugins), p);
221
p = strtok(NULL, ",");
222
} while (p != NULL);
223
}
224
break;
225
case 'o':
226
if (arg != NULL){
227
char *name = strtok(arg, ":");
228
char *p = strtok(NULL, ":");
229
if(p != NULL){
230
p = strtok(p, ",");
231
do{
232
addargument(getplugin(name, plugins), p);
233
p = strtok(NULL, ",");
234
} while (p != NULL);
235
}
236
}
237
break;
238
case 'd':
239
if (arg != NULL){
240
getplugin(arg, plugins)->disabled = true;
241
}
242
break;
243
case 128:
244
plugindir = arg;
245
break;
246
case 129:
247
uid = (uid_t)strtol(arg, NULL, 10);
248
break;
249
case 130:
250
gid = (gid_t)strtol(arg, NULL, 10);
251
break;
252
case 131:
489
253
debug = true;
490
254
break;
491
/*
492
* When adding more options before this line, remember to also add a
493
* "case" to the "parse_opt_config_file" function below.
494
*/
495
case ARGP_KEY_ARG:
496
/* Cryptsetup always passes an argument, which is an empty
497
string if "none" was specified in /etc/crypttab. So if
498
argument was empty, we ignore it silently. */
499
if(arg[0] != '\0'){
500
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
501
}
502
break;
503
case ARGP_KEY_END:
504
break;
505
default:
506
return ARGP_ERR_UNKNOWN;
507
}
508
return 0;
509
}
510
511
/* This option parser is the same as parse_opt() above, except it
512
ignores everything but the --config-file option. */
513
error_t parse_opt_config_file(int key, char *arg,
514
__attribute__((unused))
515
struct argp_state *state) {
516
switch(key) {
517
case 'g': /* --global-options */
518
case 'G': /* --global-env */
519
case 'o': /* --options-for */
520
case 'E': /* --env-for */
521
case 'd': /* --disable */
522
case 'e': /* --enable */
523
case 128: /* --plugin-dir */
524
break;
525
case 129: /* --config-file */
526
free(argfile);
527
argfile = strdup(arg);
528
if(argfile == NULL){
529
perror("strdup");
530
}
531
break;
532
case 130: /* --userid */
533
case 131: /* --groupid */
534
case 132: /* --debug */
535
case ARGP_KEY_ARG:
536
case ARGP_KEY_END:
537
break;
538
default:
539
return ARGP_ERR_UNKNOWN;
540
}
541
return 0;
542
}
543
544
struct argp argp = { .options = options,
545
.parser = parse_opt_config_file,
546
.args_doc = "",
255
case ARGP_KEY_ARG:
256
if(plus_options != NULL or arg == NULL or arg[0] != '+'){
257
argp_usage (state);
258
}
259
plus_options = arg;
260
break;
261
case ARGP_KEY_END:
262
break;
263
default:
264
return ARGP_ERR_UNKNOWN;
265
}
266
return 0;
267
}
268
269
plugin *plugin_list = NULL;
270
271
struct argp argp = { .options = options, .parser = parse_opt,
272
.args_doc = "[+PLUS_SEPARATED_OPTIONS]",
547
273
.doc = "Mandos plugin runner -- Run plugins" };
548
274
549
/* Parse using parse_opt_config_file() in order to get the custom
550
config file location, if any. */
551
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
552
if(ret == ARGP_ERR_UNKNOWN){
553
fprintf(stderr, "Unknown error while parsing arguments\n");
554
exitstatus = EXIT_FAILURE;
555
goto fallback;
556
}
557
558
/* Reset to the normal argument parser */
559
argp.parser = parse_opt;
560
561
/* Open the configfile if available */
562
if(argfile == NULL){
563
conffp = fopen(AFILE, "r");
564
} else {
565
conffp = fopen(argfile, "r");
566
}
567
if(conffp != NULL){
568
char *org_line = NULL;
569
char *p, *arg, *new_arg, *line;
570
size_t size = 0;
571
const char whitespace_delims[] = " \r\t\f\v\n";
572
const char comment_delim[] = "#";
573
574
custom_argc = 1;
575
custom_argv = malloc(sizeof(char*) * 2);
576
if(custom_argv == NULL){
275
argp_parse (&argp, argc, argv, 0, 0, &plugin_list);
276
277
if(plus_options){
278
/* This is a mangled argument in the form of
279
"+--option+--other-option=parameter+--yet-another-option", etc */
280
/* Make new argc and argv vars, and call argp_parse() again. */
281
plus_options++; /* skip the first '+' character */
282
const char delims[] = "+";
283
char *arg;
284
int new_argc = 1;
285
plus_argv = malloc(sizeof(char*) * 2);
286
if(plus_argv == NULL){
577
287
perror("malloc");
578
288
exitstatus = EXIT_FAILURE;
579
goto fallback;
580
}
581
custom_argv[0] = argv[0];
582
custom_argv[1] = NULL;
583
584
/* for each line in the config file, strip whitespace and ignore
585
commented text */
586
while(true){
587
sret = getline(&org_line, &size, conffp);
588
if(sret == -1){
589
break;
590
}
591
592
line = org_line;
593
arg = strsep(&line, comment_delim);
594
while((p = strsep(&arg, whitespace_delims)) != NULL){
595
if(p[0] == '\0'){
596
continue;
597
}
598
new_arg = strdup(p);
599
if(new_arg == NULL){
600
perror("strdup");
601
exitstatus = EXIT_FAILURE;
602
free(org_line);
603
goto fallback;
604
}
605
606
custom_argc += 1;
607
custom_argv = realloc(custom_argv, sizeof(char *)
608
* ((unsigned int) custom_argc + 1));
609
if(custom_argv == NULL){
610
perror("realloc");
611
exitstatus = EXIT_FAILURE;
612
free(org_line);
613
goto fallback;
614
}
615
custom_argv[custom_argc-1] = new_arg;
616
custom_argv[custom_argc] = NULL;
617
}
618
}
619
free(org_line);
620
} else {
621
/* Check for harmful errors and go to fallback. Other errors might
622
not affect opening plugins */
623
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
624
perror("fopen");
625
exitstatus = EXIT_FAILURE;
626
goto fallback;
627
}
628
}
629
/* If there was any arguments from configuration file,
630
pass them to parser as command arguments */
631
if(custom_argv != NULL){
632
ret = argp_parse(&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
633
0, NULL);
634
if(ret == ARGP_ERR_UNKNOWN){
635
fprintf(stderr, "Unknown error while parsing arguments\n");
636
exitstatus = EXIT_FAILURE;
637
goto fallback;
638
}
639
}
640
641
/* Parse actual command line arguments, to let them override the
642
config file */
643
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
644
if(ret == ARGP_ERR_UNKNOWN){
645
fprintf(stderr, "Unknown error while parsing arguments\n");
646
exitstatus = EXIT_FAILURE;
647
goto fallback;
289
goto end;
290
}
291
plus_argv[0] = argv[0];
292
plus_argv[1] = NULL;
293
arg = strtok(plus_options, delims); /* Get first argument */
294
while(arg != NULL){
295
new_argc++;
296
plus_argv = realloc(plus_argv, sizeof(char *)
297
* ((unsigned int) new_argc + 1));
298
if(plus_argv == NULL){
299
perror("malloc");
300
exitstatus = EXIT_FAILURE;
301
goto end;
302
}
303
plus_argv[new_argc-1] = arg;
304
plus_argv[new_argc] = NULL;
305
arg = strtok(NULL, delims); /* Get next argument */
306
}
307
argp_parse (&argp, new_argc, plus_argv, 0, 0, &plugin_list);
648
308
}
649
309
650
310
if(debug){
654
314
for(char **a = p->argv; *a != NULL; a++){
655
315
fprintf(stderr, "\tArg: %s\n", *a);
656
316
}
657
fprintf(stderr, "...and %d environment variables\n", p->envc);
658
for(char **a = p->environ; *a != NULL; a++){
659
fprintf(stderr, "\t%s\n", *a);
660
}
661
317
}
662
318
}
663
319
664
/* Strip permissions down to nobody */
665
320
ret = setuid(uid);
666
if(ret == -1){
321
if (ret == -1){
667
322
perror("setuid");
668
}
323
}
324
669
325
setgid(gid);
670
if(ret == -1){
326
if (ret == -1){
671
327
perror("setgid");
672
328
}
673
329
674
if(plugindir == NULL){
675
dir = opendir(PDIR);
676
} else {
677
dir = opendir(plugindir);
678
}
679
330
dir = opendir(plugindir);
680
331
if(dir == NULL){
681
332
perror("Could not open plugin dir");
682
333
exitstatus = EXIT_FAILURE;
683
goto fallback;
334
goto end;
684
335
}
685
336
686
337
/* Set the FD_CLOEXEC flag on the directory, if possible */
691
342
if(ret < 0){
692
343
perror("set_cloexec_flag");
693
344
exitstatus = EXIT_FAILURE;
694
goto fallback;
345
goto end;
695
346
}
696
347
}
697
348
}
698
349
699
350
FD_ZERO(&rfds_all);
700
351
701
/* Read and execute any executable in the plugin directory*/
702
352
while(true){
703
353
dirst = readdir(dir);
704
354
705
/* All directory entries have been processed */
355
// All directory entries have been processed
706
356
if(dirst == NULL){
707
if(errno == EBADF){
708
perror("readdir");
709
exitstatus = EXIT_FAILURE;
710
goto fallback;
711
}
712
357
break;
713
358
}
714
359
715
360
d_name_len = strlen(dirst->d_name);
716
361
717
/* Ignore dotfiles, backup files and other junk */
362
// Ignore dotfiles, backup files and other junk
718
363
{
719
364
bool bad_name = false;
720
365
722
367
723
368
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
724
369
".dpkg-old",
725
".dpkg-bak",
726
370
".dpkg-divert", NULL };
727
371
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
728
372
size_t pre_len = strlen(*pre);
736
380
break;
737
381
}
738
382
}
383
739
384
if(bad_name){
740
385
continue;
741
386
}
387
742
388
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
743
389
size_t suf_len = strlen(*suf);
744
390
if((d_name_len >= suf_len)
757
403
continue;
758
404
}
759
405
}
760
761
char *filename;
762
if(plugindir == NULL){
763
ret = asprintf(&filename, PDIR "/%s", dirst->d_name);
764
} else {
765
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
766
}
767
if(ret < 0){
768
perror("asprintf");
769
continue;
770
}
771
772
ret = stat(filename, &st);
773
if(ret == -1){
774
perror("stat");
775
free(filename);
776
continue;
777
}
778
779
/* Ignore non-executable files */
780
if(not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
406
407
char *filename = malloc(d_name_len + strlen(plugindir) + 2);
408
if (filename == NULL){
409
perror("malloc");
410
exitstatus = EXIT_FAILURE;
411
goto end;
412
}
413
strcpy(filename, plugindir); /* Spurious warning */
414
strcat(filename, "/"); /* Spurious warning */
415
strcat(filename, dirst->d_name); /* Spurious warning */
416
417
stat(filename, &st);
418
419
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
781
420
if(debug){
782
421
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
783
422
" with bad type or mode\n", filename);
785
424
free(filename);
786
425
continue;
787
426
}
788
789
plugin *p = getplugin(dirst->d_name);
790
if(p == NULL){
791
perror("getplugin");
792
free(filename);
793
continue;
794
}
795
if(p->disabled){
427
if(getplugin(dirst->d_name, &plugin_list)->disabled){
796
428
if(debug){
797
429
fprintf(stderr, "Ignoring disabled plugin \"%s\"\n",
798
430
dirst->d_name);
800
432
free(filename);
801
433
continue;
802
434
}
435
plugin *p = getplugin(dirst->d_name, &plugin_list);
803
436
{
804
437
/* Add global arguments to argument list for this plugin */
805
plugin *g = getplugin(NULL);
806
if(g != NULL){
807
for(char **a = g->argv + 1; *a != NULL; a++){
808
if(not add_argument(p, *a)){
809
perror("add_argument");
810
}
811
}
812
/* Add global environment variables */
813
for(char **e = g->environ; *e != NULL; e++){
814
if(not add_environment(p, *e, false)){
815
perror("add_environment");
816
}
817
}
818
}
819
}
820
/* If this plugin has any environment variables, we will call
821
using execve and need to duplicate the environment from this
822
process, too. */
823
if(p->environ[0] != NULL){
824
for(char **e = environ; *e != NULL; e++){
825
if(not add_environment(p, *e, false)){
826
perror("add_environment");
827
}
828
}
829
}
830
831
int pipefd[2];
438
plugin *g = getplugin(NULL, &plugin_list);
439
for(char **a = g->argv + 1; *a != NULL; a++){
440
addargument(p, *a);
441
}
442
}
443
int pipefd[2];
832
444
ret = pipe(pipefd);
833
if(ret == -1){
445
if (ret == -1){
834
446
perror("pipe");
835
447
exitstatus = EXIT_FAILURE;
836
goto fallback;
448
goto end;
837
449
}
838
/* Ask OS to automatic close the pipe on exec */
839
450
ret = set_cloexec_flag(pipefd[0]);
840
451
if(ret < 0){
841
452
perror("set_cloexec_flag");
842
453
exitstatus = EXIT_FAILURE;
843
goto fallback;
454
goto end;
844
455
}
845
456
ret = set_cloexec_flag(pipefd[1]);
846
457
if(ret < 0){
847
458
perror("set_cloexec_flag");
848
459
exitstatus = EXIT_FAILURE;
849
goto fallback;
460
goto end;
850
461
}
851
462
/* Block SIGCHLD until process is safely in process list */
852
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
463
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
853
464
if(ret < 0){
854
465
perror("sigprocmask");
855
466
exitstatus = EXIT_FAILURE;
856
goto fallback;
467
goto end;
857
468
}
858
/* Starting a new process to be watched */
469
// Starting a new process to be watched
859
470
pid_t pid = fork();
860
if(pid == -1){
861
perror("fork");
862
exitstatus = EXIT_FAILURE;
863
goto fallback;
864
}
865
471
if(pid == 0){
866
472
/* this is the child process */
867
473
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
869
475
perror("sigaction");
870
476
_exit(EXIT_FAILURE);
871
477
}
872
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
478
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
873
479
if(ret < 0){
874
480
perror("sigprocmask");
875
481
_exit(EXIT_FAILURE);
876
482
}
877
878
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
879
if(ret == -1){
880
perror("dup2");
881
_exit(EXIT_FAILURE);
882
}
483
dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
883
484
884
485
if(dirfd(dir) < 0){
885
486
/* If dir has no file descriptor, we could not set FD_CLOEXEC
886
487
above and must now close it manually here. */
887
488
closedir(dir);
888
489
}
889
if(p->environ[0] == NULL){
890
if(execv(filename, p->argv) < 0){
891
perror("execv");
892
_exit(EXIT_FAILURE);
893
}
894
} else {
895
if(execve(filename, p->argv, p->environ) < 0){
896
perror("execve");
897
_exit(EXIT_FAILURE);
898
}
490
if(execv(filename, p->argv) < 0){
491
perror("execv");
492
_exit(EXIT_FAILURE);
899
493
}
900
494
/* no return */
901
495
}
902
/* Parent process */
903
close(pipefd[1]); /* Close unused write end of pipe */
496
/* parent process */
904
497
free(filename);
905
plugin *new_plugin = getplugin(dirst->d_name);
906
if(new_plugin == NULL){
907
perror("getplugin");
908
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
498
close(pipefd[1]); /* close unused write end of pipe */
499
process *new_process = malloc(sizeof(process));
500
if (new_process == NULL){
501
perror("malloc");
502
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
909
503
if(ret < 0){
910
perror("sigprocmask");
504
perror("sigprocmask");
911
505
}
912
506
exitstatus = EXIT_FAILURE;
913
goto fallback;
507
goto end;
914
508
}
915
509
916
new_plugin->pid = pid;
917
new_plugin->fd = pipefd[0];
918
510
*new_process = (struct process){ .pid = pid,
511
.fd = pipefd[0],
512
.next = process_list };
513
// List handling
514
process_list = new_process;
919
515
/* Unblock SIGCHLD so signal handler can be run if this process
920
516
has already completed */
921
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
517
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
922
518
if(ret < 0){
923
519
perror("sigprocmask");
924
520
exitstatus = EXIT_FAILURE;
925
goto fallback;
926
}
927
928
FD_SET(new_plugin->fd, &rfds_all);
929
930
if(maxfd < new_plugin->fd){
931
maxfd = new_plugin->fd;
932
}
521
goto end;
522
}
523
524
FD_SET(new_process->fd, &rfds_all);
525
526
if (maxfd < new_process->fd){
527
maxfd = new_process->fd;
528
}
529
530
}
531
532
/* Free the plugin list */
533
for(plugin *next; plugin_list != NULL; plugin_list = next){
534
next = plugin_list->next;
535
free(plugin_list->argv);
536
free(plugin_list);
933
537
}
934
538
935
539
closedir(dir);
936
540
dir = NULL;
937
541
938
for(plugin *p = plugin_list; p != NULL; p = p->next){
939
if(p->pid != 0){
940
break;
941
}
942
if(p->next == NULL){
943
fprintf(stderr, "No plugin processes started. Incorrect plugin"
944
" directory?\n");
945
free_plugin_list();
946
}
542
if (process_list == NULL){
543
fprintf(stderr, "No plugin processes started, exiting\n");
544
exitstatus = EXIT_FAILURE;
545
goto end;
947
546
}
948
949
/* Main loop while running plugins exist */
950
while(plugin_list){
547
while(process_list){
951
548
fd_set rfds = rfds_all;
952
549
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
953
if(select_ret == -1){
550
if (select_ret == -1){
954
551
perror("select");
955
552
exitstatus = EXIT_FAILURE;
956
goto fallback;
553
goto end;
957
554
}
958
555
/* OK, now either a process completed, or something can be read
959
556
from one of them */
960
for(plugin *proc = plugin_list; proc != NULL;){
557
for(process *proc = process_list; proc ; proc = proc->next){
961
558
/* Is this process completely done? */
962
559
if(proc->eof and proc->completed){
963
560
/* Only accept the plugin output if it exited cleanly */
964
561
if(not WIFEXITED(proc->status)
965
562
or WEXITSTATUS(proc->status) != 0){
966
563
/* Bad exit by plugin */
967
968
564
if(debug){
969
565
if(WIFEXITED(proc->status)){
970
fprintf(stderr, "Plugin %" PRIdMAX " exited with status"
971
" %d\n", (intmax_t) (proc->pid),
972
WEXITSTATUS(proc->status));
566
fprintf(stderr, "Plugin %d exited with status %d\n",
567
proc->pid, WEXITSTATUS(proc->status));
973
568
} else if(WIFSIGNALED(proc->status)) {
974
fprintf(stderr, "Plugin %" PRIdMAX " killed by signal"
975
" %d\n", (intmax_t) (proc->pid),
976
WTERMSIG(proc->status));
569
fprintf(stderr, "Plugin %d killed by signal %d\n",
570
proc->pid, WTERMSIG(proc->status));
977
571
} else if(WCOREDUMP(proc->status)){
978
fprintf(stderr, "Plugin %" PRIdMAX " dumped core\n",
979
(intmax_t) (proc->pid));
572
fprintf(stderr, "Plugin %d dumped core\n", proc->pid);
980
573
}
981
574
}
982
983
575
/* Remove the plugin */
984
576
FD_CLR(proc->fd, &rfds_all);
985
986
577
/* Block signal while modifying process_list */
987
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
578
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
988
579
if(ret < 0){
989
580
perror("sigprocmask");
990
581
exitstatus = EXIT_FAILURE;
991
goto fallback;
992
}
993
994
plugin *next_plugin = proc->next;
995
free_plugin(proc);
996
proc = next_plugin;
997
582
goto end;
583
}
584
/* Delete this process entry from the list */
585
if(process_list == proc){
586
/* First one - simple */
587
process_list = proc->next;
588
} else {
589
/* Second one or later */
590
for(process *p = process_list; p != NULL; p = p->next){
591
if(p->next == proc){
592
p->next = proc->next;
593
break;
594
}
595
}
596
}
998
597
/* We are done modifying process list, so unblock signal */
999
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1000
NULL);
598
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
599
NULL);
1001
600
if(ret < 0){
1002
601
perror("sigprocmask");
1003
exitstatus = EXIT_FAILURE;
1004
goto fallback;
1005
}
1006
1007
if(plugin_list == NULL){
1008
break;
1009
}
1010
1011
continue;
602
}
603
free(proc->buffer);
604
free(proc);
605
/* We deleted this process from the list, so we can't go
606
proc->next. Therefore, start over from the beginning of
607
the process list */
608
break;
1012
609
}
1013
1014
610
/* This process exited nicely, so print its buffer */
1015
1016
bool bret = print_out_password(proc->buffer,
1017
proc->buffer_length);
1018
if(not bret){
1019
perror("print_out_password");
1020
exitstatus = EXIT_FAILURE;
611
for(size_t written = 0; written < proc->buffer_length;
612
written += (size_t)ret){
613
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO,
614
proc->buffer + written,
615
proc->buffer_length
616
- written));
617
if(ret < 0){
618
perror("write");
619
exitstatus = EXIT_FAILURE;
620
goto end;
621
}
1021
622
}
1022
goto fallback;
623
goto end;
1023
624
}
1024
1025
625
/* This process has not completed. Does it have any output? */
1026
626
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1027
627
/* This process had nothing to say at this time */
1028
proc = proc->next;
1029
628
continue;
1030
629
}
1031
630
/* Before reading, make the process' data buffer large enough */
1032
631
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1033
632
proc->buffer = realloc(proc->buffer, proc->buffer_size
1034
633
+ (size_t) BUFFER_SIZE);
1035
if(proc->buffer == NULL){
634
if (proc->buffer == NULL){
1036
635
perror("malloc");
1037
636
exitstatus = EXIT_FAILURE;
1038
goto fallback;
637
goto end;
1039
638
}
1040
639
proc->buffer_size += BUFFER_SIZE;
1041
640
}
1042
641
/* Read from the process */
1043
sret = read(proc->fd, proc->buffer + proc->buffer_length,
1044
BUFFER_SIZE);
1045
if(sret < 0){
642
ret = read(proc->fd, proc->buffer + proc->buffer_length,
643
BUFFER_SIZE);
644
if(ret < 0){
1046
645
/* Read error from this process; ignore the error */
1047
proc = proc->next;
1048
646
continue;
1049
647
}
1050
if(sret == 0){
648
if(ret == 0){
1051
649
/* got EOF */
1052
650
proc->eof = true;
1053
651
} else {
1054
proc->buffer_length += (size_t) sret;
652
proc->buffer_length += (size_t) ret;
1055
653
}
1056
654
}
1057
655
}
1058
1059
1060
fallback:
1061
1062
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1063
/* Fallback if all plugins failed, none are found or an error
1064
occured */
1065
bool bret;
1066
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1067
char *passwordbuffer = getpass("Password: ");
1068
size_t len = strlen(passwordbuffer);
1069
/* Strip trailing newline */
1070
if(len > 0 and passwordbuffer[len-1] == '\n'){
1071
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1072
len--;
1073
}
1074
bret = print_out_password(passwordbuffer, len);
1075
if(not bret){
1076
perror("print_out_password");
1077
exitstatus = EXIT_FAILURE;
1078
}
656
if(process_list == NULL){
657
fprintf(stderr, "All plugin processes failed, exiting\n");
658
exitstatus = EXIT_FAILURE;
1079
659
}
1080
660
661
end:
1081
662
/* Restore old signal handler */
1082
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1083
if(ret == -1){
1084
perror("sigaction");
1085
exitstatus = EXIT_FAILURE;
1086
}
1087
1088
if(custom_argv != NULL){
1089
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1090
free(*arg);
1091
}
1092
free(custom_argv);
663
sigaction(SIGCHLD, &old_sigchld_action, NULL);
664
665
free(plus_argv);
666
667
/* Free the plugin list */
668
for(plugin *next; plugin_list != NULL; plugin_list = next){
669
next = plugin_list->next;
670
free(plugin_list->argv);
671
free(plugin_list);
1093
672
}
1094
673
1095
674
if(dir != NULL){
1096
675
closedir(dir);
1097
676
}
1098
677
1099
/* Kill the processes */
1100
for(plugin *p = plugin_list; p != NULL; p = p->next){
1101
if(p->pid != 0){
1102
close(p->fd);
1103
ret = kill(p->pid, SIGTERM);
1104
if(ret == -1 and errno != ESRCH){
1105
/* Set-uid proccesses might not get closed */
1106
perror("kill");
1107
}
1108
}
678
/* Free the process list and kill the processes */
679
for(process *next; process_list != NULL; process_list = next){
680
next = process_list->next;
681
close(process_list->fd);
682
kill(process_list->pid, SIGTERM);
683
free(process_list->buffer);
684
free(process_list);
1109
685
}
1110
686
1111
687
/* Wait for any remaining child processes to terminate */
1116
692
perror("wait");
1117
693
}
1118
694
1119
free_plugin_list();
1120
1121
free(plugindir);
1122
free(argfile);
1123
1124
695
return exitstatus;
1125
696
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0