19
19
* along with this program. If not, see
20
20
* <http://www.gnu.org/licenses/>.
22
* Contact the authors at <mandos@recompile.se>.
22
* Contact the authors at <mandos@fukt.bsnet.se>.
25
25
#define _GNU_SOURCE /* asprintf(), TEMP_FAILURE_RETRY() */
35
35
#include <sys/types.h> /* size_t, ssize_t, pid_t, DIR, struct
37
37
#include <stddef.h> /* NULL */
38
#include <string.h> /* strlen(), memcmp(), strerror() */
39
#include <stdio.h> /* asprintf(), vasprintf(), vprintf(),
38
#include <string.h> /* strlen(), memcmp() */
39
#include <stdio.h> /* asprintf()*/
41
40
#include <unistd.h> /* close(), write(), readlink(),
42
41
read(), STDOUT_FILENO, sleep(),
43
42
fork(), setuid(), geteuid(),
51
50
#include <sys/stat.h> /* struct stat, lstat(), S_ISLNK */
52
51
#include <sysexits.h> /* EX_OSERR, EX_UNAVAILABLE */
53
52
#include <argz.h> /* argz_count(), argz_extract() */
54
#include <stdarg.h> /* va_list, va_start(), ... */
56
54
sig_atomic_t interrupted_by_signal = 0;
57
55
int signal_received;
58
56
const char usplash_name[] = "/sbin/usplash";
60
/* Function to use when printing errors */
61
void error_plus(int status, int errnum, const char *formatstring,
67
va_start(ap, formatstring);
68
ret = vasprintf(&text, formatstring, ap);
70
fprintf(stderr, "Mandos plugin %s: ",
71
program_invocation_short_name);
72
vfprintf(stderr, formatstring, ap);
73
fprintf(stderr, ": ");
74
fprintf(stderr, "%s\n", strerror(errnum));
75
error(status, errno, "vasprintf while printing error");
78
fprintf(stderr, "Mandos plugin ");
79
error(status, errnum, "%s", text);
83
58
static void termination_handler(int signum){
84
59
if(interrupted_by_signal){
180
155
size_t cmdline_len = 0;
181
156
DIR *proc_dir = opendir("/proc");
182
157
if(proc_dir == NULL){
183
error_plus(0, errno, "opendir");
158
error(0, errno, "opendir");
209
184
ret = asprintf(&exe_link, "/proc/%s/exe", proc_ent->d_name);
211
error_plus(0, errno, "asprintf");
186
error(0, errno, "asprintf");
212
187
goto fail_find_usplash;
251
226
ret = asprintf(&cmdline_filename, "/proc/%s/cmdline",
252
227
proc_ent->d_name);
254
error_plus(0, errno, "asprintf");
229
error(0, errno, "asprintf");
255
230
goto fail_find_usplash;
257
232
cl_fd = open(cmdline_filename, O_RDONLY);
258
233
free(cmdline_filename);
260
error_plus(0, errno, "open");
235
error(0, errno, "open");
261
236
goto fail_find_usplash;
269
244
if(cmdline_len + blocksize > cmdline_allocated){
270
245
tmp = realloc(cmdline, cmdline_allocated + blocksize);
272
error_plus(0, errno, "realloc");
247
error(0, errno, "realloc");
274
249
goto fail_find_usplash;
280
255
sret = read(cl_fd, cmdline + cmdline_len,
281
256
cmdline_allocated - cmdline_len);
283
error_plus(0, errno, "read");
258
error(0, errno, "read");
285
260
goto fail_find_usplash;
288
263
} while(sret != 0);
289
264
ret = close(cl_fd);
291
error_plus(0, errno, "close");
266
error(0, errno, "close");
292
267
goto fail_find_usplash;
295
270
/* Close directory */
296
271
ret = closedir(proc_dir);
298
error_plus(0, errno, "closedir");
273
error(0, errno, "closedir");
299
274
goto fail_find_usplash;
350
325
sigemptyset(&new_action.sa_mask);
351
326
ret = sigaddset(&new_action.sa_mask, SIGINT);
353
error_plus(0, errno, "sigaddset");
328
error(0, errno, "sigaddset");
354
329
status = EX_OSERR;
357
332
ret = sigaddset(&new_action.sa_mask, SIGHUP);
359
error_plus(0, errno, "sigaddset");
334
error(0, errno, "sigaddset");
360
335
status = EX_OSERR;
363
338
ret = sigaddset(&new_action.sa_mask, SIGTERM);
365
error_plus(0, errno, "sigaddset");
340
error(0, errno, "sigaddset");
366
341
status = EX_OSERR;
369
344
ret = sigaction(SIGINT, NULL, &old_action);
371
346
if(errno != EINTR){
372
error_plus(0, errno, "sigaction");
347
error(0, errno, "sigaction");
373
348
status = EX_OSERR;
378
353
ret = sigaction(SIGINT, &new_action, NULL);
380
355
if(errno != EINTR){
381
error_plus(0, errno, "sigaction");
356
error(0, errno, "sigaction");
382
357
status = EX_OSERR;
387
362
ret = sigaction(SIGHUP, NULL, &old_action);
389
364
if(errno != EINTR){
390
error_plus(0, errno, "sigaction");
365
error(0, errno, "sigaction");
391
366
status = EX_OSERR;
396
371
ret = sigaction(SIGHUP, &new_action, NULL);
398
373
if(errno != EINTR){
399
error_plus(0, errno, "sigaction");
374
error(0, errno, "sigaction");
400
375
status = EX_OSERR;
405
380
ret = sigaction(SIGTERM, NULL, &old_action);
407
382
if(errno != EINTR){
408
error_plus(0, errno, "sigaction");
383
error(0, errno, "sigaction");
409
384
status = EX_OSERR;
414
389
ret = sigaction(SIGTERM, &new_action, NULL);
416
391
if(errno != EINTR){
417
error_plus(0, errno, "sigaction");
392
error(0, errno, "sigaction");
418
393
status = EX_OSERR;
426
401
/* Write command to FIFO */
427
402
if(not usplash_write(&fifo_fd, "TIMEOUT", "0")){
428
403
if(errno != EINTR){
429
error_plus(0, errno, "usplash_write");
404
error(0, errno, "usplash_write");
430
405
status = EX_OSERR;
439
414
if(not usplash_write(&fifo_fd, "INPUTQUIET", prompt)){
440
415
if(errno != EINTR){
441
error_plus(0, errno, "usplash_write");
416
error(0, errno, "usplash_write");
442
417
status = EX_OSERR;
475
450
char *tmp = realloc(buf, buf_allocated + blocksize);
477
452
if(errno != EINTR){
478
error_plus(0, errno, "realloc");
453
error(0, errno, "realloc");
479
454
status = EX_OSERR;
516
491
if(not usplash_write(&fifo_fd, "TIMEOUT", "15")){
517
492
if(errno != EINTR){
518
error_plus(0, errno, "usplash_write");
493
error(0, errno, "usplash_write");
519
494
status = EX_OSERR;
542
517
sret = write(STDOUT_FILENO, buf + written, buf_len - written);
544
519
if(errno != EINTR){
545
error_plus(0, errno, "write");
520
error(0, errno, "write");
546
521
status = EX_OSERR;
579
554
if(fifo_fd != -1){
580
555
ret = (int)TEMP_FAILURE_RETRY(close(fifo_fd));
581
556
if(ret == -1 and errno != EINTR){
582
error_plus(0, errno, "close");
557
error(0, errno, "close");
588
563
if(outfifo_fd != -1){
589
564
ret = (int)TEMP_FAILURE_RETRY(close(outfifo_fd));
591
error_plus(0, errno, "close");
566
error(0, errno, "close");
596
571
char **cmdline_argv = malloc((argz_count(cmdline, cmdline_len) + 1)
597
572
* sizeof(char *)); /* Count args */
598
573
if(cmdline_argv == NULL){
599
error_plus(0, errno, "malloc");
574
error(0, errno, "malloc");
602
577
argz_extract(cmdline, cmdline_len, cmdline_argv); /* Create argv */
617
592
the real user ID (_mandos) */
618
593
ret = setuid(geteuid());
620
error_plus(0, errno, "setuid");
595
error(0, errno, "setuid");
624
599
ret = chdir("/");
626
error_plus(0, errno, "chdir");
601
error(0, errno, "chdir");
629
604
/* if(fork() != 0){ */
632
607
ret = dup2(STDERR_FILENO, STDOUT_FILENO); /* replace our stdout */
634
error_plus(0, errno, "dup2");
609
error(0, errno, "dup2");
638
613
execv(usplash_name, cmdline_argv);
639
614
if(not interrupted_by_signal){
640
error_plus(0, errno, "execv");
615
error(0, errno, "execv");
643
618
free(cmdline_argv);
649
624
if(not usplash_write(&fifo_fd, "PULSATE", NULL)){
650
625
if(errno != EINTR){
651
error_plus(0, errno, "usplash_write");
626
error(0, errno, "usplash_write");
656
631
if(fifo_fd != -1){
657
632
ret = (int)TEMP_FAILURE_RETRY(close(fifo_fd));
658
633
if(ret == -1 and errno != EINTR){
659
error_plus(0, errno, "close");
634
error(0, errno, "close");
667
642
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
668
643
&signal_action, NULL));
670
error_plus(0, errno, "sigaction");
645
error(0, errno, "sigaction");
673
648
ret = raise(signal_received);
674
649
} while(ret != 0 and errno == EINTR);
676
error_plus(0, errno, "raise");
651
error(0, errno, "raise");
679
654
TEMP_FAILURE_RETRY(pause());