To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 541
- compare with another revision
- download diff
- download tarball
- view history from revision 541
- Committer: Teddy Hogeborn
- Date: 2011-12-31 20:07:11 UTC
- mfrom: (535.1.9 wireless-network-hook)
- Revision ID: teddy@recompile.se-20111231200711-6dli3r8drftem57r
Merge new wireless network hook. Fix bridge network hook to use
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
- files added:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- network-hooks.d
- files removed:
- plugins.d/usplash
- files renamed:
- plugins.d/password-request.c => plugins.d/mandos-client.c
- plugins.d/password-request.xml => plugins.d/mandos-client.xml
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8 -*- */
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
5
* Copyright © 2008-2011 Teddy Hogeborn
6
* Copyright © 2008-2011 Björn Påhlsson
6
7
*
7
8
* This program is free software: you can redistribute it and/or
8
9
* modify it under the terms of the GNU General Public License as
18
19
* along with this program. If not, see
19
20
* <http://www.gnu.org/licenses/>.
20
21
*
21
* Contact the authors at <mandos@fukt.bsnet.se>.
22
* Contact the authors at <mandos@recompile.se>.
22
23
*/
23
24
24
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
25
asprintf() */
26
asprintf(), O_CLOEXEC */
26
27
#include <stddef.h> /* size_t, NULL */
27
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
28
EXIT_SUCCESS, realloc() */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
29
realloc() */
29
30
#include <stdbool.h> /* bool, true, false */
30
#include <stdio.h> /* perror, popen(), fileno(),
31
fprintf(), stderr, STDOUT_FILENO */
32
#include <sys/types.h> /* DIR, opendir(), stat(), struct
31
#include <stdio.h> /* fileno(), fprintf(),
32
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, fdopendir(), stat(), struct
33
34
stat, waitpid(), WIFEXITED(),
34
35
WEXITSTATUS(), wait(), pid_t,
35
36
uid_t, gid_t, getuid(), getgid(),
37
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
38
39
FD_SET(), FD_ISSET(), FD_CLR */
39
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
40
WEXITSTATUS() */
41
WEXITSTATUS(), WTERMSIG(),
42
WCOREDUMP() */
41
43
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
42
44
#include <iso646.h> /* and, or, not */
43
#include <dirent.h> /* DIR, struct dirent, opendir(),
45
#include <dirent.h> /* DIR, struct dirent, fdopendir(),
44
46
readdir(), closedir(), dirfd() */
45
47
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
46
48
fcntl(), setuid(), setgid(),
47
49
F_GETFD, F_SETFD, FD_CLOEXEC,
48
50
access(), pipe(), fork(), close()
49
dup2, STDOUT_FILENO, _exit(),
51
dup2(), STDOUT_FILENO, _exit(),
50
52
execv(), write(), read(),
51
53
close() */
52
54
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
53
55
FD_CLOEXEC */
54
#include <string.h> /* strsep, strlen(), asprintf() */
56
#include <string.h> /* strsep, strlen(), asprintf(),
57
strsignal(), strcmp(), strncmp() */
55
58
#include <errno.h> /* errno */
56
59
#include <argp.h> /* struct argp_option, struct
57
60
argp_state, struct argp,
61
64
#include <signal.h> /* struct sigaction, sigemptyset(),
62
65
sigaddset(), sigaction(),
63
66
sigprocmask(), SIG_BLOCK, SIGCHLD,
64
SIG_UNBLOCK, kill() */
67
SIG_UNBLOCK, kill(), sig_atomic_t
68
*/
65
69
#include <errno.h> /* errno, EBADF */
70
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
71
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
72
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
73
#include <errno.h> /* errno */
74
#include <error.h> /* error() */
66
75
67
76
#define BUFFER_SIZE 256
68
77
69
78
#define PDIR "/lib/mandos/plugins.d"
70
79
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
71
80
72
const char *argp_program_version = "plugin-runner 1.0";
73
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
74
75
struct plugin;
81
const char *argp_program_version = "plugin-runner " VERSION;
82
const char *argp_program_bug_address = "<mandos@recompile.se>";
76
83
77
84
typedef struct plugin{
78
85
char *name; /* can be NULL or any plugin name */
81
88
char **environ;
82
89
int envc;
83
90
bool disabled;
84
91
85
92
/* Variables used for running processes*/
86
93
pid_t pid;
87
94
int fd;
89
96
size_t buffer_size;
90
97
size_t buffer_length;
91
98
bool eof;
92
volatile bool completed;
93
volatile int status;
99
volatile sig_atomic_t completed;
100
int status;
94
101
struct plugin *next;
95
102
} plugin;
96
103
97
104
static plugin *plugin_list = NULL;
98
105
99
/* Gets a existing plugin based on name,
106
/* Gets an existing plugin based on name,
100
107
or if none is found, creates a new one */
101
108
static plugin *getplugin(char *name){
102
/* Check for exiting plugin with that name */
103
for (plugin *p = plugin_list; p != NULL; p = p->next){
104
if ((p->name == name)
105
or (p->name and name and (strcmp(p->name, name) == 0))){
109
/* Check for existing plugin with that name */
110
for(plugin *p = plugin_list; p != NULL; p = p->next){
111
if((p->name == name)
112
or (p->name and name and (strcmp(p->name, name) == 0))){
106
113
return p;
107
114
}
108
115
}
109
116
/* Create a new plugin */
110
plugin *new_plugin = malloc(sizeof(plugin));
111
if (new_plugin == NULL){
117
plugin *new_plugin = NULL;
118
do {
119
new_plugin = malloc(sizeof(plugin));
120
} while(new_plugin == NULL and errno == EINTR);
121
if(new_plugin == NULL){
112
122
return NULL;
113
123
}
114
124
char *copy_name = NULL;
115
125
if(name != NULL){
116
copy_name = strdup(name);
126
do {
127
copy_name = strdup(name);
128
} while(copy_name == NULL and errno == EINTR);
117
129
if(copy_name == NULL){
130
int e = errno;
131
free(new_plugin);
132
errno = e;
118
133
return NULL;
119
134
}
120
135
}
121
122
*new_plugin = (plugin) { .name = copy_name,
123
.argc = 1,
124
.disabled = false,
125
.next = plugin_list };
126
127
new_plugin->argv = malloc(sizeof(char *) * 2);
128
if (new_plugin->argv == NULL){
136
137
*new_plugin = (plugin){ .name = copy_name,
138
.argc = 1,
139
.disabled = false,
140
.next = plugin_list };
141
142
do {
143
new_plugin->argv = malloc(sizeof(char *) * 2);
144
} while(new_plugin->argv == NULL and errno == EINTR);
145
if(new_plugin->argv == NULL){
146
int e = errno;
129
147
free(copy_name);
130
148
free(new_plugin);
149
errno = e;
131
150
return NULL;
132
151
}
133
152
new_plugin->argv[0] = copy_name;
134
153
new_plugin->argv[1] = NULL;
135
154
136
new_plugin->environ = malloc(sizeof(char *));
155
do {
156
new_plugin->environ = malloc(sizeof(char *));
157
} while(new_plugin->environ == NULL and errno == EINTR);
137
158
if(new_plugin->environ == NULL){
159
int e = errno;
138
160
free(copy_name);
139
161
free(new_plugin->argv);
140
162
free(new_plugin);
163
errno = e;
141
164
return NULL;
142
165
}
143
166
new_plugin->environ[0] = NULL;
148
171
}
149
172
150
173
/* Helper function for add_argument and add_environment */
174
__attribute__((nonnull))
151
175
static bool add_to_char_array(const char *new, char ***array,
152
176
int *len){
153
177
/* Resize the pointed-to array to hold one more pointer */
154
*array = realloc(*array, sizeof(char *)
155
* (size_t) ((*len) + 2));
178
do {
179
*array = realloc(*array, sizeof(char *)
180
* (size_t) ((*len) + 2));
181
} while(*array == NULL and errno == EINTR);
156
182
/* Malloc check */
157
183
if(*array == NULL){
158
184
return false;
159
185
}
160
186
/* Make a copy of the new string */
161
char *copy = strdup(new);
187
char *copy;
188
do {
189
copy = strdup(new);
190
} while(copy == NULL and errno == EINTR);
162
191
if(copy == NULL){
163
192
return false;
164
193
}
171
200
}
172
201
173
202
/* Add to a plugin's argument vector */
203
__attribute__((nonnull(2)))
174
204
static bool add_argument(plugin *p, const char *arg){
175
205
if(p == NULL){
176
206
return false;
179
209
}
180
210
181
211
/* Add to a plugin's environment */
212
__attribute__((nonnull(2)))
182
213
static bool add_environment(plugin *p, const char *def, bool replace){
183
214
if(p == NULL){
184
215
return false;
187
218
size_t namelen = (size_t)(strchrnul(def, '=') - def);
188
219
/* Search for this environment variable */
189
220
for(char **e = p->environ; *e != NULL; e++){
190
if(strncmp(*e, def, namelen+1) == 0){
221
if(strncmp(*e, def, namelen + 1) == 0){
191
222
/* It already exists */
192
223
if(replace){
193
char *new = realloc(*e, strlen(def));
224
char *new;
225
do {
226
new = realloc(*e, strlen(def) + 1);
227
} while(new == NULL and errno == EINTR);
194
228
if(new == NULL){
195
229
return false;
196
230
}
206
240
/*
207
241
* Based on the example in the GNU LibC manual chapter 13.13 "File
208
242
* Descriptor Flags".
209
* *Note File Descriptor Flags:(libc)Descriptor Flags.
243
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
210
244
*/
211
static int set_cloexec_flag(int fd)
212
{
213
int ret = fcntl(fd, F_GETFD, 0);
245
static int set_cloexec_flag(int fd){
246
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
214
247
/* If reading the flags failed, return error indication now. */
215
248
if(ret < 0){
216
249
return ret;
217
250
}
218
251
/* Store modified flag word in the descriptor. */
219
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
252
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
253
ret | FD_CLOEXEC));
220
254
}
221
255
222
256
223
257
/* Mark processes as completed when they exit, and save their exit
224
258
status. */
225
void handle_sigchld(__attribute__((unused)) int sig){
259
static void handle_sigchld(__attribute__((unused)) int sig){
260
int old_errno = errno;
226
261
while(true){
227
262
plugin *proc = plugin_list;
228
263
int status;
232
267
break;
233
268
}
234
269
if(pid == -1){
235
if (errno != ECHILD){
236
perror("waitpid");
270
if(errno == ECHILD){
271
/* No child processes */
272
break;
237
273
}
238
/* No child processes */
239
break;
274
error(0, errno, "waitpid");
240
275
}
241
276
242
277
/* A child exited, find it in process_list */
243
278
while(proc != NULL and proc->pid != pid){
244
279
proc = proc->next;
248
283
continue;
249
284
}
250
285
proc->status = status;
251
proc->completed = true;
286
proc->completed = 1;
252
287
}
288
errno = old_errno;
253
289
}
254
290
255
291
/* Prints out a password to stdout */
256
bool print_out_password(const char *buffer, size_t length){
292
__attribute__((nonnull))
293
static bool print_out_password(const char *buffer, size_t length){
257
294
ssize_t ret;
258
if(length>0 and buffer[length-1] == '\n'){
259
length--;
260
}
261
295
for(size_t written = 0; written < length; written += (size_t)ret){
262
296
ret = TEMP_FAILURE_RETRY(write(STDOUT_FILENO, buffer + written,
263
297
length - written));
269
303
}
270
304
271
305
/* Removes and free a plugin from the plugin list */
306
__attribute__((nonnull))
272
307
static void free_plugin(plugin *plugin_node){
273
308
274
309
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
280
315
}
281
316
free(plugin_node->environ);
282
317
free(plugin_node->buffer);
283
318
284
319
/* Removes the plugin from the singly-linked list */
285
320
if(plugin_node == plugin_list){
286
321
/* First one - simple */
314
349
struct stat st;
315
350
fd_set rfds_all;
316
351
int ret, maxfd = 0;
352
ssize_t sret;
317
353
uid_t uid = 65534;
318
354
gid_t gid = 65534;
319
355
bool debug = false;
328
364
sigemptyset(&sigchld_action.sa_mask);
329
365
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
330
366
if(ret == -1){
331
perror("sigaddset");
332
exitstatus = EXIT_FAILURE;
367
error(0, errno, "sigaddset");
368
exitstatus = EX_OSERR;
333
369
goto fallback;
334
370
}
335
371
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
336
372
if(ret == -1){
337
perror("sigaction");
338
exitstatus = EXIT_FAILURE;
373
error(0, errno, "sigaction");
374
exitstatus = EX_OSERR;
339
375
goto fallback;
340
376
}
341
377
373
409
.doc = "Group ID the plugins will run as", .group = 3 },
374
410
{ .name = "debug", .key = 132,
375
411
.doc = "Debug mode", .group = 4 },
412
/*
413
* These reproduce what we would get without ARGP_NO_HELP
414
*/
415
{ .name = "help", .key = '?',
416
.doc = "Give this help list", .group = -1 },
417
{ .name = "usage", .key = -3,
418
.doc = "Give a short usage message", .group = -1 },
419
{ .name = "version", .key = 'V',
420
.doc = "Print program version", .group = -1 },
376
421
{ .name = NULL }
377
422
};
378
423
379
error_t parse_opt (int key, char *arg, __attribute__((unused))
380
struct argp_state *state) {
381
switch (key) {
424
__attribute__((nonnull(3)))
425
error_t parse_opt(int key, char *arg, struct argp_state *state){
426
errno = 0;
427
switch(key){
428
char *tmp;
429
intmax_t tmp_id;
382
430
case 'g': /* --global-options */
383
if (arg != NULL){
384
char *p;
385
while((p = strsep(&arg, ",")) != NULL){
386
if(p[0] == '\0'){
387
continue;
388
}
389
if(not add_argument(getplugin(NULL), p)){
390
perror("add_argument");
391
return ARGP_ERR_UNKNOWN;
431
{
432
char *plugin_option;
433
while((plugin_option = strsep(&arg, ",")) != NULL){
434
if(not add_argument(getplugin(NULL), plugin_option)){
435
break;
392
436
}
393
437
}
394
438
}
395
439
break;
396
440
case 'G': /* --global-env */
397
if(arg == NULL){
398
break;
399
}
400
{
401
char *envdef = strdup(arg);
402
if(envdef == NULL){
403
break;
404
}
405
if(not add_environment(getplugin(NULL), envdef, true)){
406
perror("add_environment");
407
}
408
}
441
add_environment(getplugin(NULL), arg, true);
409
442
break;
410
443
case 'o': /* --options-for */
411
if (arg != NULL){
412
char *p_name = strsep(&arg, ":");
413
if(p_name[0] == '\0'){
414
break;
415
}
416
char *opt = strsep(&arg, ":");
417
if(opt[0] == '\0'){
418
break;
419
}
420
if(opt != NULL){
421
char *p;
422
while((p = strsep(&opt, ",")) != NULL){
423
if(p[0] == '\0'){
424
continue;
425
}
426
if(not add_argument(getplugin(p_name), p)){
427
perror("add_argument");
428
return ARGP_ERR_UNKNOWN;
429
}
444
{
445
char *option_list = strchr(arg, ':');
446
if(option_list == NULL){
447
argp_error(state, "No colon in \"%s\"", arg);
448
errno = EINVAL;
449
break;
450
}
451
*option_list = '\0';
452
option_list++;
453
if(arg[0] == '\0'){
454
argp_error(state, "Empty plugin name");
455
errno = EINVAL;
456
break;
457
}
458
char *option;
459
while((option = strsep(&option_list, ",")) != NULL){
460
if(not add_argument(getplugin(arg), option)){
461
break;
430
462
}
431
463
}
432
464
}
433
465
break;
434
466
case 'E': /* --env-for */
435
if(arg == NULL){
436
break;
437
}
438
467
{
439
468
char *envdef = strchr(arg, ':');
440
469
if(envdef == NULL){
441
break;
442
}
443
char *p_name = strndup(arg, (size_t) (envdef-arg));
444
if(p_name == NULL){
445
break;
446
}
470
argp_error(state, "No colon in \"%s\"", arg);
471
errno = EINVAL;
472
break;
473
}
474
*envdef = '\0';
447
475
envdef++;
448
if(not add_environment(getplugin(p_name), envdef, true)){
449
perror("add_environment");
476
if(arg[0] == '\0'){
477
argp_error(state, "Empty plugin name");
478
errno = EINVAL;
479
break;
450
480
}
481
add_environment(getplugin(arg), envdef, true);
451
482
}
452
483
break;
453
484
case 'd': /* --disable */
454
if (arg != NULL){
485
{
455
486
plugin *p = getplugin(arg);
456
if(p == NULL){
457
return ARGP_ERR_UNKNOWN;
487
if(p != NULL){
488
p->disabled = true;
458
489
}
459
p->disabled = true;
460
490
}
461
491
break;
462
492
case 'e': /* --enable */
463
if (arg != NULL){
493
{
464
494
plugin *p = getplugin(arg);
465
if(p == NULL){
466
return ARGP_ERR_UNKNOWN;
495
if(p != NULL){
496
p->disabled = false;
467
497
}
468
p->disabled = false;
469
498
}
470
499
break;
471
500
case 128: /* --plugin-dir */
501
free(plugindir);
472
502
plugindir = strdup(arg);
473
if(plugindir == NULL){
474
perror("strdup");
475
}
476
503
break;
477
504
case 129: /* --config-file */
478
505
/* This is already done by parse_opt_config_file() */
479
506
break;
480
507
case 130: /* --userid */
481
uid = (uid_t)strtol(arg, NULL, 10);
508
tmp_id = strtoimax(arg, &tmp, 10);
509
if(errno != 0 or tmp == arg or *tmp != '\0'
510
or tmp_id != (uid_t)tmp_id){
511
argp_error(state, "Bad user ID number: \"%s\", using %"
512
PRIdMAX, arg, (intmax_t)uid);
513
break;
514
}
515
uid = (uid_t)tmp_id;
482
516
break;
483
517
case 131: /* --groupid */
484
gid = (gid_t)strtol(arg, NULL, 10);
518
tmp_id = strtoimax(arg, &tmp, 10);
519
if(errno != 0 or tmp == arg or *tmp != '\0'
520
or tmp_id != (gid_t)tmp_id){
521
argp_error(state, "Bad group ID number: \"%s\", using %"
522
PRIdMAX, arg, (intmax_t)gid);
523
break;
524
}
525
gid = (gid_t)tmp_id;
485
526
break;
486
527
case 132: /* --debug */
487
528
debug = true;
488
529
break;
530
/*
531
* These reproduce what we would get without ARGP_NO_HELP
532
*/
533
case '?': /* --help */
534
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
535
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
536
case -3: /* --usage */
537
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
538
argp_state_help(state, state->out_stream,
539
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
540
case 'V': /* --version */
541
fprintf(state->out_stream, "%s\n", argp_program_version);
542
exit(EXIT_SUCCESS);
543
break;
544
/*
545
* When adding more options before this line, remember to also add a
546
* "case" to the "parse_opt_config_file" function below.
547
*/
489
548
case ARGP_KEY_ARG:
490
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
491
break;
492
case ARGP_KEY_END:
493
break;
549
/* Cryptsetup always passes an argument, which is an empty
550
string if "none" was specified in /etc/crypttab. So if
551
argument was empty, we ignore it silently. */
552
if(arg[0] == '\0'){
553
break;
554
}
494
555
default:
495
556
return ARGP_ERR_UNKNOWN;
496
557
}
497
return 0;
558
return errno; /* Set to 0 at start */
498
559
}
499
560
500
561
/* This option parser is the same as parse_opt() above, except it
501
562
ignores everything but the --config-file option. */
502
error_t parse_opt_config_file (int key, char *arg,
503
__attribute__((unused))
504
struct argp_state *state) {
505
switch (key) {
563
error_t parse_opt_config_file(int key, char *arg,
564
__attribute__((unused))
565
struct argp_state *state){
566
errno = 0;
567
switch(key){
506
568
case 'g': /* --global-options */
507
569
case 'G': /* --global-env */
508
570
case 'o': /* --options-for */
512
574
case 128: /* --plugin-dir */
513
575
break;
514
576
case 129: /* --config-file */
577
free(argfile);
515
578
argfile = strdup(arg);
516
if(argfile == NULL){
517
perror("strdup");
518
}
519
break;
579
break;
520
580
case 130: /* --userid */
521
581
case 131: /* --groupid */
522
582
case 132: /* --debug */
583
case '?': /* --help */
584
case -3: /* --usage */
585
case 'V': /* --version */
523
586
case ARGP_KEY_ARG:
524
case ARGP_KEY_END:
525
587
break;
526
588
default:
527
589
return ARGP_ERR_UNKNOWN;
528
590
}
529
return 0;
591
return errno;
530
592
}
531
593
532
594
struct argp argp = { .options = options,
534
596
.args_doc = "",
535
597
.doc = "Mandos plugin runner -- Run plugins" };
536
598
537
/* Parse using the parse_opt_config_file in order to get the custom
599
/* Parse using parse_opt_config_file() in order to get the custom
538
600
config file location, if any. */
539
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
540
if (ret == ARGP_ERR_UNKNOWN){
541
fprintf(stderr, "Unknown error while parsing arguments\n");
542
exitstatus = EXIT_FAILURE;
601
ret = argp_parse(&argp, argc, argv,
602
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
603
NULL, NULL);
604
switch(ret){
605
case 0:
606
break;
607
case ENOMEM:
608
default:
609
errno = ret;
610
error(0, errno, "argp_parse");
611
exitstatus = EX_OSERR;
612
goto fallback;
613
case EINVAL:
614
exitstatus = EX_USAGE;
543
615
goto fallback;
544
616
}
545
617
547
619
argp.parser = parse_opt;
548
620
549
621
/* Open the configfile if available */
550
if (argfile == NULL){
622
if(argfile == NULL){
551
623
conffp = fopen(AFILE, "r");
552
624
} else {
553
625
conffp = fopen(argfile, "r");
554
}
626
}
555
627
if(conffp != NULL){
556
628
char *org_line = NULL;
557
629
char *p, *arg, *new_arg, *line;
558
630
size_t size = 0;
559
ssize_t sret;
560
631
const char whitespace_delims[] = " \r\t\f\v\n";
561
632
const char comment_delim[] = "#";
562
633
563
634
custom_argc = 1;
564
635
custom_argv = malloc(sizeof(char*) * 2);
565
636
if(custom_argv == NULL){
566
perror("malloc");
567
exitstatus = EXIT_FAILURE;
637
error(0, errno, "malloc");
638
exitstatus = EX_OSERR;
568
639
goto fallback;
569
640
}
570
641
custom_argv[0] = argv[0];
571
642
custom_argv[1] = NULL;
572
643
573
644
/* for each line in the config file, strip whitespace and ignore
574
645
commented text */
575
646
while(true){
577
648
if(sret == -1){
578
649
break;
579
650
}
580
651
581
652
line = org_line;
582
653
arg = strsep(&line, comment_delim);
583
654
while((p = strsep(&arg, whitespace_delims)) != NULL){
586
657
}
587
658
new_arg = strdup(p);
588
659
if(new_arg == NULL){
589
perror("strdup");
590
exitstatus = EXIT_FAILURE;
660
error(0, errno, "strdup");
661
exitstatus = EX_OSERR;
591
662
free(org_line);
592
663
goto fallback;
593
664
}
596
667
custom_argv = realloc(custom_argv, sizeof(char *)
597
668
* ((unsigned int) custom_argc + 1));
598
669
if(custom_argv == NULL){
599
perror("realloc");
600
exitstatus = EXIT_FAILURE;
670
error(0, errno, "realloc");
671
exitstatus = EX_OSERR;
601
672
free(org_line);
602
673
goto fallback;
603
674
}
604
675
custom_argv[custom_argc-1] = new_arg;
605
custom_argv[custom_argc] = NULL;
676
custom_argv[custom_argc] = NULL;
606
677
}
607
678
}
679
do {
680
ret = fclose(conffp);
681
} while(ret == EOF and errno == EINTR);
682
if(ret == EOF){
683
error(0, errno, "fclose");
684
exitstatus = EX_IOERR;
685
goto fallback;
686
}
608
687
free(org_line);
609
688
} else {
610
689
/* Check for harmful errors and go to fallback. Other errors might
611
690
not affect opening plugins */
612
if (errno == EMFILE or errno == ENFILE or errno == ENOMEM){
613
perror("fopen");
614
exitstatus = EXIT_FAILURE;
691
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
692
error(0, errno, "fopen");
693
exitstatus = EX_OSERR;
615
694
goto fallback;
616
695
}
617
696
}
618
/* If there was any arguments from configuration file,
619
pass them to parser as command arguments */
697
/* If there were any arguments from the configuration file, pass
698
them to parser as command line arguments */
620
699
if(custom_argv != NULL){
621
ret = argp_parse (&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
622
0, NULL);
623
if (ret == ARGP_ERR_UNKNOWN){
624
fprintf(stderr, "Unknown error while parsing arguments\n");
625
exitstatus = EXIT_FAILURE;
700
ret = argp_parse(&argp, custom_argc, custom_argv,
701
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
702
NULL, NULL);
703
switch(ret){
704
case 0:
705
break;
706
case ENOMEM:
707
default:
708
errno = ret;
709
error(0, errno, "argp_parse");
710
exitstatus = EX_OSERR;
711
goto fallback;
712
case EINVAL:
713
exitstatus = EX_CONFIG;
626
714
goto fallback;
627
715
}
628
716
}
629
717
630
718
/* Parse actual command line arguments, to let them override the
631
719
config file */
632
ret = argp_parse (&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
633
if (ret == ARGP_ERR_UNKNOWN){
634
fprintf(stderr, "Unknown error while parsing arguments\n");
635
exitstatus = EXIT_FAILURE;
720
ret = argp_parse(&argp, argc, argv,
721
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
722
NULL, NULL);
723
switch(ret){
724
case 0:
725
break;
726
case ENOMEM:
727
default:
728
errno = ret;
729
error(0, errno, "argp_parse");
730
exitstatus = EX_OSERR;
731
goto fallback;
732
case EINVAL:
733
exitstatus = EX_USAGE;
636
734
goto fallback;
637
735
}
638
736
643
741
for(char **a = p->argv; *a != NULL; a++){
644
742
fprintf(stderr, "\tArg: %s\n", *a);
645
743
}
646
fprintf(stderr, "...and %u environment variables\n", p->envc);
744
fprintf(stderr, "...and %d environment variables\n", p->envc);
647
745
for(char **a = p->environ; *a != NULL; a++){
648
746
fprintf(stderr, "\t%s\n", *a);
649
747
}
650
748
}
651
749
}
652
750
653
/* Strip permissions down to nobody */
751
if(getuid() == 0){
752
/* Work around Debian bug #633582:
753
<http://bugs.debian.org/633582> */
754
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
755
if(plugindir_fd == -1){
756
error(0, errno, "open");
757
} else {
758
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
759
if(ret == -1){
760
error(0, errno, "fstat");
761
} else {
762
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
763
ret = fchown(plugindir_fd, uid, gid);
764
if(ret == -1){
765
error(0, errno, "fchown");
766
}
767
}
768
}
769
TEMP_FAILURE_RETRY(close(plugindir_fd));
770
}
771
}
772
773
/* Lower permissions */
774
setgid(gid);
775
if(ret == -1){
776
error(0, errno, "setgid");
777
}
654
778
ret = setuid(uid);
655
if (ret == -1){
656
perror("setuid");
657
}
658
setgid(gid);
659
if (ret == -1){
660
perror("setgid");
661
}
662
663
if (plugindir == NULL){
664
dir = opendir(PDIR);
665
} else {
666
dir = opendir(plugindir);
667
}
668
669
if(dir == NULL){
670
perror("Could not open plugin dir");
671
exitstatus = EXIT_FAILURE;
672
goto fallback;
673
}
674
675
/* Set the FD_CLOEXEC flag on the directory, if possible */
779
if(ret == -1){
780
error(0, errno, "setuid");
781
}
782
783
/* Open plugin directory with close_on_exec flag */
676
784
{
677
int dir_fd = dirfd(dir);
678
if(dir_fd >= 0){
679
ret = set_cloexec_flag(dir_fd);
680
if(ret < 0){
681
perror("set_cloexec_flag");
682
exitstatus = EXIT_FAILURE;
683
goto fallback;
684
}
785
int dir_fd = -1;
786
if(plugindir == NULL){
787
dir_fd = open(PDIR, O_RDONLY |
788
#ifdef O_CLOEXEC
789
O_CLOEXEC
790
#else /* not O_CLOEXEC */
791
0
792
#endif /* not O_CLOEXEC */
793
);
794
} else {
795
dir_fd = open(plugindir, O_RDONLY |
796
#ifdef O_CLOEXEC
797
O_CLOEXEC
798
#else /* not O_CLOEXEC */
799
0
800
#endif /* not O_CLOEXEC */
801
);
802
}
803
if(dir_fd == -1){
804
error(0, errno, "Could not open plugin dir");
805
exitstatus = EX_UNAVAILABLE;
806
goto fallback;
807
}
808
809
#ifndef O_CLOEXEC
810
/* Set the FD_CLOEXEC flag on the directory */
811
ret = set_cloexec_flag(dir_fd);
812
if(ret < 0){
813
error(0, errno, "set_cloexec_flag");
814
TEMP_FAILURE_RETRY(close(dir_fd));
815
exitstatus = EX_OSERR;
816
goto fallback;
817
}
818
#endif /* O_CLOEXEC */
819
820
dir = fdopendir(dir_fd);
821
if(dir == NULL){
822
error(0, errno, "Could not open plugin dir");
823
TEMP_FAILURE_RETRY(close(dir_fd));
824
exitstatus = EX_OSERR;
825
goto fallback;
685
826
}
686
827
}
687
828
689
830
690
831
/* Read and execute any executable in the plugin directory*/
691
832
while(true){
692
dirst = readdir(dir);
833
do {
834
dirst = readdir(dir);
835
} while(dirst == NULL and errno == EINTR);
693
836
694
837
/* All directory entries have been processed */
695
838
if(dirst == NULL){
696
if (errno == EBADF){
697
perror("readdir");
698
exitstatus = EXIT_FAILURE;
839
if(errno == EBADF){
840
error(0, errno, "readdir");
841
exitstatus = EX_IOERR;
699
842
goto fallback;
700
843
}
701
844
break;
711
854
712
855
const char const *bad_suffixes[] = { "~", "#", ".dpkg-new",
713
856
".dpkg-old",
857
".dpkg-bak",
714
858
".dpkg-divert", NULL };
715
859
for(const char **pre = bad_prefixes; *pre != NULL; pre++){
716
860
size_t pre_len = strlen(*pre);
730
874
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
731
875
size_t suf_len = strlen(*suf);
732
876
if((d_name_len >= suf_len)
733
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
877
and (strcmp((dirst->d_name) + d_name_len-suf_len, *suf)
734
878
== 0)){
735
879
if(debug){
736
880
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
745
889
continue;
746
890
}
747
891
}
748
892
749
893
char *filename;
750
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
894
if(plugindir == NULL){
895
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, PDIR "/%s",
896
dirst->d_name));
897
} else {
898
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, "%s/%s",
899
plugindir,
900
dirst->d_name));
901
}
751
902
if(ret < 0){
752
perror("asprintf");
903
error(0, errno, "asprintf");
753
904
continue;
754
905
}
755
906
756
ret = stat(filename, &st);
757
if (ret == -1){
758
perror("stat");
907
ret = (int)TEMP_FAILURE_RETRY(stat(filename, &st));
908
if(ret == -1){
909
error(0, errno, "stat");
759
910
free(filename);
760
911
continue;
761
912
}
762
913
763
914
/* Ignore non-executable files */
764
if (not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
915
if(not S_ISREG(st.st_mode)
916
or (TEMP_FAILURE_RETRY(access(filename, X_OK)) != 0)){
765
917
if(debug){
766
918
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
767
919
" with bad type or mode\n", filename);
772
924
773
925
plugin *p = getplugin(dirst->d_name);
774
926
if(p == NULL){
775
perror("getplugin");
927
error(0, errno, "getplugin");
776
928
free(filename);
777
929
continue;
778
930
}
790
942
if(g != NULL){
791
943
for(char **a = g->argv + 1; *a != NULL; a++){
792
944
if(not add_argument(p, *a)){
793
perror("add_argument");
945
error(0, errno, "add_argument");
794
946
}
795
947
}
796
948
/* Add global environment variables */
797
949
for(char **e = g->environ; *e != NULL; e++){
798
950
if(not add_environment(p, *e, false)){
799
perror("add_environment");
951
error(0, errno, "add_environment");
800
952
}
801
953
}
802
954
}
807
959
if(p->environ[0] != NULL){
808
960
for(char **e = environ; *e != NULL; e++){
809
961
if(not add_environment(p, *e, false)){
810
perror("add_environment");
962
error(0, errno, "add_environment");
811
963
}
812
964
}
813
965
}
814
966
815
967
int pipefd[2];
816
ret = pipe(pipefd);
817
if (ret == -1){
818
perror("pipe");
819
exitstatus = EXIT_FAILURE;
968
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
969
if(ret == -1){
970
error(0, errno, "pipe");
971
exitstatus = EX_OSERR;
820
972
goto fallback;
821
973
}
822
974
/* Ask OS to automatic close the pipe on exec */
823
975
ret = set_cloexec_flag(pipefd[0]);
824
976
if(ret < 0){
825
perror("set_cloexec_flag");
826
exitstatus = EXIT_FAILURE;
977
error(0, errno, "set_cloexec_flag");
978
exitstatus = EX_OSERR;
827
979
goto fallback;
828
980
}
829
981
ret = set_cloexec_flag(pipefd[1]);
830
982
if(ret < 0){
831
perror("set_cloexec_flag");
832
exitstatus = EXIT_FAILURE;
983
error(0, errno, "set_cloexec_flag");
984
exitstatus = EX_OSERR;
833
985
goto fallback;
834
986
}
835
987
/* Block SIGCHLD until process is safely in process list */
836
ret = sigprocmask (SIG_BLOCK, &sigchld_action.sa_mask, NULL);
988
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
989
&sigchld_action.sa_mask,
990
NULL));
837
991
if(ret < 0){
838
perror("sigprocmask");
839
exitstatus = EXIT_FAILURE;
992
error(0, errno, "sigprocmask");
993
exitstatus = EX_OSERR;
840
994
goto fallback;
841
995
}
842
996
/* Starting a new process to be watched */
843
pid_t pid = fork();
997
pid_t pid;
998
do {
999
pid = fork();
1000
} while(pid == -1 and errno == EINTR);
844
1001
if(pid == -1){
845
perror("fork");
846
exitstatus = EXIT_FAILURE;
1002
error(0, errno, "fork");
1003
exitstatus = EX_OSERR;
847
1004
goto fallback;
848
1005
}
849
1006
if(pid == 0){
850
1007
/* this is the child process */
851
1008
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
852
1009
if(ret < 0){
853
perror("sigaction");
854
_exit(EXIT_FAILURE);
1010
error(0, errno, "sigaction");
1011
_exit(EX_OSERR);
855
1012
}
856
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1013
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
857
1014
if(ret < 0){
858
perror("sigprocmask");
859
_exit(EXIT_FAILURE);
1015
error(0, errno, "sigprocmask");
1016
_exit(EX_OSERR);
860
1017
}
861
1018
862
1019
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
863
1020
if(ret == -1){
864
perror("dup2");
865
_exit(EXIT_FAILURE);
1021
error(0, errno, "dup2");
1022
_exit(EX_OSERR);
866
1023
}
867
1024
868
1025
if(dirfd(dir) < 0){
872
1029
}
873
1030
if(p->environ[0] == NULL){
874
1031
if(execv(filename, p->argv) < 0){
875
perror("execv");
876
_exit(EXIT_FAILURE);
1032
error(0, errno, "execv for %s", filename);
1033
_exit(EX_OSERR);
877
1034
}
878
1035
} else {
879
1036
if(execve(filename, p->argv, p->environ) < 0){
880
perror("execve");
881
_exit(EXIT_FAILURE);
1037
error(0, errno, "execve for %s", filename);
1038
_exit(EX_OSERR);
882
1039
}
883
1040
}
884
1041
/* no return */
885
1042
}
886
1043
/* Parent process */
887
close(pipefd[1]); /* Close unused write end of pipe */
1044
TEMP_FAILURE_RETRY(close(pipefd[1])); /* Close unused write end of
1045
pipe */
888
1046
free(filename);
889
1047
plugin *new_plugin = getplugin(dirst->d_name);
890
if (new_plugin == NULL){
891
perror("getplugin");
892
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1048
if(new_plugin == NULL){
1049
error(0, errno, "getplugin");
1050
ret = (int)(TEMP_FAILURE_RETRY
1051
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1052
NULL)));
893
1053
if(ret < 0){
894
perror("sigprocmask");
1054
error(0, errno, "sigprocmask");
895
1055
}
896
exitstatus = EXIT_FAILURE;
1056
exitstatus = EX_OSERR;
897
1057
goto fallback;
898
1058
}
899
1059
902
1062
903
1063
/* Unblock SIGCHLD so signal handler can be run if this process
904
1064
has already completed */
905
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1065
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1066
&sigchld_action.sa_mask,
1067
NULL));
906
1068
if(ret < 0){
907
perror("sigprocmask");
908
exitstatus = EXIT_FAILURE;
1069
error(0, errno, "sigprocmask");
1070
exitstatus = EX_OSERR;
909
1071
goto fallback;
910
1072
}
911
1073
912
FD_SET(new_plugin->fd, &rfds_all);
1074
FD_SET(new_plugin->fd, &rfds_all); /* Spurious warning from
1075
-Wconversion */
913
1076
914
if (maxfd < new_plugin->fd){
1077
if(maxfd < new_plugin->fd){
915
1078
maxfd = new_plugin->fd;
916
1079
}
917
918
1080
}
919
1081
920
closedir(dir);
1082
TEMP_FAILURE_RETRY(closedir(dir));
921
1083
dir = NULL;
922
1084
free_plugin(getplugin(NULL));
1085
923
1086
for(plugin *p = plugin_list; p != NULL; p = p->next){
924
1087
if(p->pid != 0){
925
1088
break;
930
1093
free_plugin_list();
931
1094
}
932
1095
}
933
1096
934
1097
/* Main loop while running plugins exist */
935
1098
while(plugin_list){
936
1099
fd_set rfds = rfds_all;
937
1100
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
938
if (select_ret == -1){
939
perror("select");
940
exitstatus = EXIT_FAILURE;
1101
if(select_ret == -1 and errno != EINTR){
1102
error(0, errno, "select");
1103
exitstatus = EX_OSERR;
941
1104
goto fallback;
942
1105
}
943
1106
/* OK, now either a process completed, or something can be read
944
1107
from one of them */
945
for(plugin *proc = plugin_list; proc != NULL; proc = proc->next){
1108
for(plugin *proc = plugin_list; proc != NULL;){
946
1109
/* Is this process completely done? */
947
if(proc->eof and proc->completed){
1110
if(proc->completed and proc->eof){
948
1111
/* Only accept the plugin output if it exited cleanly */
949
1112
if(not WIFEXITED(proc->status)
950
1113
or WEXITSTATUS(proc->status) != 0){
951
1114
/* Bad exit by plugin */
952
1115
953
1116
if(debug){
954
1117
if(WIFEXITED(proc->status)){
955
fprintf(stderr, "Plugin %u exited with status %d\n",
956
(unsigned int) (proc->pid),
1118
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1119
" status %d\n", proc->name,
1120
(intmax_t) (proc->pid),
957
1121
WEXITSTATUS(proc->status));
958
} else if(WIFSIGNALED(proc->status)) {
959
fprintf(stderr, "Plugin %u killed by signal %d\n",
960
(unsigned int) (proc->pid),
961
WTERMSIG(proc->status));
1122
} else if(WIFSIGNALED(proc->status)){
1123
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1124
" signal %d: %s\n", proc->name,
1125
(intmax_t) (proc->pid),
1126
WTERMSIG(proc->status),
1127
strsignal(WTERMSIG(proc->status)));
962
1128
} else if(WCOREDUMP(proc->status)){
963
fprintf(stderr, "Plugin %d dumped core\n",
964
(unsigned int) (proc->pid));
1129
fprintf(stderr, "Plugin %s [%" PRIdMAX "] dumped"
1130
" core\n", proc->name, (intmax_t) (proc->pid));
965
1131
}
966
1132
}
967
1133
968
1134
/* Remove the plugin */
969
FD_CLR(proc->fd, &rfds_all);
970
1135
FD_CLR(proc->fd, &rfds_all); /* Spurious warning from
1136
-Wconversion */
1137
971
1138
/* Block signal while modifying process_list */
972
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1139
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1140
(SIG_BLOCK,
1141
&sigchld_action.sa_mask,
1142
NULL));
973
1143
if(ret < 0){
974
perror("sigprocmask");
975
exitstatus = EXIT_FAILURE;
1144
error(0, errno, "sigprocmask");
1145
exitstatus = EX_OSERR;
976
1146
goto fallback;
977
1147
}
1148
1149
plugin *next_plugin = proc->next;
978
1150
free_plugin(proc);
1151
proc = next_plugin;
1152
979
1153
/* We are done modifying process list, so unblock signal */
980
ret = sigprocmask (SIG_UNBLOCK, &sigchld_action.sa_mask,
981
NULL);
1154
ret = (int)(TEMP_FAILURE_RETRY
1155
(sigprocmask(SIG_UNBLOCK,
1156
&sigchld_action.sa_mask, NULL)));
982
1157
if(ret < 0){
983
perror("sigprocmask");
984
exitstatus = EXIT_FAILURE;
1158
error(0, errno, "sigprocmask");
1159
exitstatus = EX_OSERR;
985
1160
goto fallback;
986
1161
}
987
1162
988
1163
if(plugin_list == NULL){
989
1164
break;
990
1165
}
1166
991
1167
continue;
992
1168
}
993
1169
994
1170
/* This process exited nicely, so print its buffer */
995
1171
996
1172
bool bret = print_out_password(proc->buffer,
997
1173
proc->buffer_length);
998
1174
if(not bret){
999
perror("print_out_password");
1000
exitstatus = EXIT_FAILURE;
1175
error(0, errno, "print_out_password");
1176
exitstatus = EX_IOERR;
1001
1177
}
1002
1178
goto fallback;
1003
1179
}
1004
1180
1005
1181
/* This process has not completed. Does it have any output? */
1006
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1182
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){ /* Spurious
1183
warning from
1184
-Wconversion */
1007
1185
/* This process had nothing to say at this time */
1186
proc = proc->next;
1008
1187
continue;
1009
1188
}
1010
1189
/* Before reading, make the process' data buffer large enough */
1011
1190
if(proc->buffer_length + BUFFER_SIZE > proc->buffer_size){
1012
1191
proc->buffer = realloc(proc->buffer, proc->buffer_size
1013
1192
+ (size_t) BUFFER_SIZE);
1014
if (proc->buffer == NULL){
1015
perror("malloc");
1016
exitstatus = EXIT_FAILURE;
1193
if(proc->buffer == NULL){
1194
error(0, errno, "malloc");
1195
exitstatus = EX_OSERR;
1017
1196
goto fallback;
1018
1197
}
1019
1198
proc->buffer_size += BUFFER_SIZE;
1020
1199
}
1021
1200
/* Read from the process */
1022
ret = read(proc->fd, proc->buffer + proc->buffer_length,
1023
BUFFER_SIZE);
1024
if(ret < 0){
1201
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1202
proc->buffer
1203
+ proc->buffer_length,
1204
BUFFER_SIZE));
1205
if(sret < 0){
1025
1206
/* Read error from this process; ignore the error */
1207
proc = proc->next;
1026
1208
continue;
1027
1209
}
1028
if(ret == 0){
1210
if(sret == 0){
1029
1211
/* got EOF */
1030
1212
proc->eof = true;
1031
1213
} else {
1032
proc->buffer_length += (size_t) ret;
1214
proc->buffer_length += (size_t) sret;
1033
1215
}
1034
1216
}
1035
1217
}
1036
1037
1218
1219
1038
1220
fallback:
1039
1221
1040
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1222
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1223
and exitstatus != EX_OK)){
1041
1224
/* Fallback if all plugins failed, none are found or an error
1042
1225
occured */
1043
1226
bool bret;
1044
1227
fprintf(stderr, "Going to fallback mode using getpass(3)\n");
1045
1228
char *passwordbuffer = getpass("Password: ");
1046
bret = print_out_password(passwordbuffer, strlen(passwordbuffer));
1229
size_t len = strlen(passwordbuffer);
1230
/* Strip trailing newline */
1231
if(len > 0 and passwordbuffer[len-1] == '\n'){
1232
passwordbuffer[len-1] = '\0'; /* not strictly necessary */
1233
len--;
1234
}
1235
bret = print_out_password(passwordbuffer, len);
1047
1236
if(not bret){
1048
perror("print_out_password");
1049
exitstatus = EXIT_FAILURE;
1237
error(0, errno, "print_out_password");
1238
exitstatus = EX_IOERR;
1050
1239
}
1051
1240
}
1052
1241
1053
1242
/* Restore old signal handler */
1054
1243
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1055
1244
if(ret == -1){
1056
perror("sigaction");
1057
exitstatus = EXIT_FAILURE;
1245
error(0, errno, "sigaction");
1246
exitstatus = EX_OSERR;
1058
1247
}
1059
1248
1060
1249
if(custom_argv != NULL){
1061
1250
for(char **arg = custom_argv+1; *arg != NULL; arg++){
1062
1251
free(*arg);
1068
1257
closedir(dir);
1069
1258
}
1070
1259
1071
/* Free the process list and kill the processes */
1260
/* Kill the processes */
1072
1261
for(plugin *p = plugin_list; p != NULL; p = p->next){
1073
1262
if(p->pid != 0){
1074
1263
close(p->fd);
1075
1264
ret = kill(p->pid, SIGTERM);
1076
1265
if(ret == -1 and errno != ESRCH){
1077
1266
/* Set-uid proccesses might not get closed */
1078
perror("kill");
1267
error(0, errno, "kill");
1079
1268
}
1080
1269
}
1081
1270
}
1082
1271
1083
1272
/* Wait for any remaining child processes to terminate */
1084
do{
1273
do {
1085
1274
ret = wait(NULL);
1086
1275
} while(ret >= 0);
1087
1276
if(errno != ECHILD){
1088
perror("wait");
1277
error(0, errno, "wait");
1089
1278
}
1090
1279
1091
1280
free_plugin_list();
1092
1281
1093
1282
free(plugindir);
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0