To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 541
- compare with another revision
- download diff
- download tarball
- view history from revision 541
- Committer: Teddy Hogeborn
- Date: 2011-12-31 20:07:11 UTC
- mfrom: (535.1.9 wireless-network-hook)
- Revision ID: teddy@recompile.se-20111231200711-6dli3r8drftem57r
Merge new wireless network hook. Fix bridge network hook to use
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
- files added:
- DBUS-API
- debian/source
- network-hooks.d
- files renamed:
- mandos-list => mandos-ctl
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8 -*- */
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008,2009 Teddy Hogeborn
6
* Copyright © 2008,2009 Björn Påhlsson
5
* Copyright © 2008-2011 Teddy Hogeborn
6
* Copyright © 2008-2011 Björn Påhlsson
7
7
*
8
8
* This program is free software: you can redistribute it and/or
9
9
* modify it under the terms of the GNU General Public License as
19
19
* along with this program. If not, see
20
20
* <http://www.gnu.org/licenses/>.
21
21
*
22
* Contact the authors at <mandos@fukt.bsnet.se>.
22
* Contact the authors at <mandos@recompile.se>.
23
23
*/
24
24
25
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
26
asprintf() */
26
asprintf(), O_CLOEXEC */
27
27
#include <stddef.h> /* size_t, NULL */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
29
EXIT_SUCCESS, realloc() */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
29
realloc() */
30
30
#include <stdbool.h> /* bool, true, false */
31
#include <stdio.h> /* perror, fileno(), fprintf(),
31
#include <stdio.h> /* fileno(), fprintf(),
32
32
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, opendir(), stat(), struct
33
#include <sys/types.h> /* DIR, fdopendir(), stat(), struct
34
34
stat, waitpid(), WIFEXITED(),
35
35
WEXITSTATUS(), wait(), pid_t,
36
36
uid_t, gid_t, getuid(), getgid(),
38
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
39
FD_SET(), FD_ISSET(), FD_CLR */
40
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS() */
41
WEXITSTATUS(), WTERMSIG(),
42
WCOREDUMP() */
42
43
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
43
44
#include <iso646.h> /* and, or, not */
44
#include <dirent.h> /* DIR, struct dirent, opendir(),
45
#include <dirent.h> /* DIR, struct dirent, fdopendir(),
45
46
readdir(), closedir(), dirfd() */
46
47
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
47
48
fcntl(), setuid(), setgid(),
52
53
close() */
53
54
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
54
55
FD_CLOEXEC */
55
#include <string.h> /* strsep, strlen(), asprintf() */
56
#include <string.h> /* strsep, strlen(), asprintf(),
57
strsignal(), strcmp(), strncmp() */
56
58
#include <errno.h> /* errno */
57
59
#include <argp.h> /* struct argp_option, struct
58
60
argp_state, struct argp,
62
64
#include <signal.h> /* struct sigaction, sigemptyset(),
63
65
sigaddset(), sigaction(),
64
66
sigprocmask(), SIG_BLOCK, SIGCHLD,
65
SIG_UNBLOCK, kill() */
67
SIG_UNBLOCK, kill(), sig_atomic_t
68
*/
66
69
#include <errno.h> /* errno, EBADF */
67
#include <inttypes.h> /* intmax_t, SCNdMAX, PRIdMAX, */
70
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
71
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
72
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
73
#include <errno.h> /* errno */
74
#include <error.h> /* error() */
68
75
69
76
#define BUFFER_SIZE 256
70
77
72
79
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
73
80
74
81
const char *argp_program_version = "plugin-runner " VERSION;
75
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
82
const char *argp_program_bug_address = "<mandos@recompile.se>";
76
83
77
84
typedef struct plugin{
78
85
char *name; /* can be NULL or any plugin name */
81
88
char **environ;
82
89
int envc;
83
90
bool disabled;
84
91
85
92
/* Variables used for running processes*/
86
93
pid_t pid;
87
94
int fd;
89
96
size_t buffer_size;
90
97
size_t buffer_length;
91
98
bool eof;
92
volatile bool completed;
93
volatile int status;
99
volatile sig_atomic_t completed;
100
int status;
94
101
struct plugin *next;
95
102
} plugin;
96
103
99
106
/* Gets an existing plugin based on name,
100
107
or if none is found, creates a new one */
101
108
static plugin *getplugin(char *name){
102
/* Check for exiting plugin with that name */
109
/* Check for existing plugin with that name */
103
110
for(plugin *p = plugin_list; p != NULL; p = p->next){
104
111
if((p->name == name)
105
112
or (p->name and name and (strcmp(p->name, name) == 0))){
107
114
}
108
115
}
109
116
/* Create a new plugin */
110
plugin *new_plugin = malloc(sizeof(plugin));
117
plugin *new_plugin = NULL;
118
do {
119
new_plugin = malloc(sizeof(plugin));
120
} while(new_plugin == NULL and errno == EINTR);
111
121
if(new_plugin == NULL){
112
122
return NULL;
113
123
}
114
124
char *copy_name = NULL;
115
125
if(name != NULL){
116
copy_name = strdup(name);
126
do {
127
copy_name = strdup(name);
128
} while(copy_name == NULL and errno == EINTR);
117
129
if(copy_name == NULL){
130
int e = errno;
131
free(new_plugin);
132
errno = e;
118
133
return NULL;
119
134
}
120
135
}
121
136
122
*new_plugin = (plugin) { .name = copy_name,
123
.argc = 1,
124
.disabled = false,
125
.next = plugin_list };
137
*new_plugin = (plugin){ .name = copy_name,
138
.argc = 1,
139
.disabled = false,
140
.next = plugin_list };
126
141
127
new_plugin->argv = malloc(sizeof(char *) * 2);
142
do {
143
new_plugin->argv = malloc(sizeof(char *) * 2);
144
} while(new_plugin->argv == NULL and errno == EINTR);
128
145
if(new_plugin->argv == NULL){
146
int e = errno;
129
147
free(copy_name);
130
148
free(new_plugin);
149
errno = e;
131
150
return NULL;
132
151
}
133
152
new_plugin->argv[0] = copy_name;
134
153
new_plugin->argv[1] = NULL;
135
154
136
new_plugin->environ = malloc(sizeof(char *));
155
do {
156
new_plugin->environ = malloc(sizeof(char *));
157
} while(new_plugin->environ == NULL and errno == EINTR);
137
158
if(new_plugin->environ == NULL){
159
int e = errno;
138
160
free(copy_name);
139
161
free(new_plugin->argv);
140
162
free(new_plugin);
163
errno = e;
141
164
return NULL;
142
165
}
143
166
new_plugin->environ[0] = NULL;
148
171
}
149
172
150
173
/* Helper function for add_argument and add_environment */
174
__attribute__((nonnull))
151
175
static bool add_to_char_array(const char *new, char ***array,
152
176
int *len){
153
177
/* Resize the pointed-to array to hold one more pointer */
154
*array = realloc(*array, sizeof(char *)
155
* (size_t) ((*len) + 2));
178
do {
179
*array = realloc(*array, sizeof(char *)
180
* (size_t) ((*len) + 2));
181
} while(*array == NULL and errno == EINTR);
156
182
/* Malloc check */
157
183
if(*array == NULL){
158
184
return false;
159
185
}
160
186
/* Make a copy of the new string */
161
char *copy = strdup(new);
187
char *copy;
188
do {
189
copy = strdup(new);
190
} while(copy == NULL and errno == EINTR);
162
191
if(copy == NULL){
163
192
return false;
164
193
}
171
200
}
172
201
173
202
/* Add to a plugin's argument vector */
203
__attribute__((nonnull(2)))
174
204
static bool add_argument(plugin *p, const char *arg){
175
205
if(p == NULL){
176
206
return false;
179
209
}
180
210
181
211
/* Add to a plugin's environment */
212
__attribute__((nonnull(2)))
182
213
static bool add_environment(plugin *p, const char *def, bool replace){
183
214
if(p == NULL){
184
215
return false;
190
221
if(strncmp(*e, def, namelen + 1) == 0){
191
222
/* It already exists */
192
223
if(replace){
193
char *new = realloc(*e, strlen(def) + 1);
224
char *new;
225
do {
226
new = realloc(*e, strlen(def) + 1);
227
} while(new == NULL and errno == EINTR);
194
228
if(new == NULL){
195
229
return false;
196
230
}
206
240
/*
207
241
* Based on the example in the GNU LibC manual chapter 13.13 "File
208
242
* Descriptor Flags".
209
* *Note File Descriptor Flags:(libc)Descriptor Flags.
243
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
210
244
*/
211
245
static int set_cloexec_flag(int fd){
212
int ret = fcntl(fd, F_GETFD, 0);
246
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
213
247
/* If reading the flags failed, return error indication now. */
214
248
if(ret < 0){
215
249
return ret;
216
250
}
217
251
/* Store modified flag word in the descriptor. */
218
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
252
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
253
ret | FD_CLOEXEC));
219
254
}
220
255
221
256
222
257
/* Mark processes as completed when they exit, and save their exit
223
258
status. */
224
259
static void handle_sigchld(__attribute__((unused)) int sig){
260
int old_errno = errno;
225
261
while(true){
226
262
plugin *proc = plugin_list;
227
263
int status;
231
267
break;
232
268
}
233
269
if(pid == -1){
234
if(errno != ECHILD){
235
perror("waitpid");
270
if(errno == ECHILD){
271
/* No child processes */
272
break;
236
273
}
237
/* No child processes */
238
break;
274
error(0, errno, "waitpid");
239
275
}
240
276
241
277
/* A child exited, find it in process_list */
247
283
continue;
248
284
}
249
285
proc->status = status;
250
proc->completed = true;
286
proc->completed = 1;
251
287
}
288
errno = old_errno;
252
289
}
253
290
254
291
/* Prints out a password to stdout */
292
__attribute__((nonnull))
255
293
static bool print_out_password(const char *buffer, size_t length){
256
294
ssize_t ret;
257
295
for(size_t written = 0; written < length; written += (size_t)ret){
265
303
}
266
304
267
305
/* Removes and free a plugin from the plugin list */
306
__attribute__((nonnull))
268
307
static void free_plugin(plugin *plugin_node){
269
308
270
309
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
276
315
}
277
316
free(plugin_node->environ);
278
317
free(plugin_node->buffer);
279
318
280
319
/* Removes the plugin from the singly-linked list */
281
320
if(plugin_node == plugin_list){
282
321
/* First one - simple */
309
348
struct dirent *dirst;
310
349
struct stat st;
311
350
fd_set rfds_all;
312
int ret, numchars, maxfd = 0;
351
int ret, maxfd = 0;
313
352
ssize_t sret;
314
intmax_t tmpmax;
315
353
uid_t uid = 65534;
316
354
gid_t gid = 65534;
317
355
bool debug = false;
326
364
sigemptyset(&sigchld_action.sa_mask);
327
365
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
328
366
if(ret == -1){
329
perror("sigaddset");
330
exitstatus = EXIT_FAILURE;
367
error(0, errno, "sigaddset");
368
exitstatus = EX_OSERR;
331
369
goto fallback;
332
370
}
333
371
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
334
372
if(ret == -1){
335
perror("sigaction");
336
exitstatus = EXIT_FAILURE;
373
error(0, errno, "sigaction");
374
exitstatus = EX_OSERR;
337
375
goto fallback;
338
376
}
339
377
371
409
.doc = "Group ID the plugins will run as", .group = 3 },
372
410
{ .name = "debug", .key = 132,
373
411
.doc = "Debug mode", .group = 4 },
412
/*
413
* These reproduce what we would get without ARGP_NO_HELP
414
*/
415
{ .name = "help", .key = '?',
416
.doc = "Give this help list", .group = -1 },
417
{ .name = "usage", .key = -3,
418
.doc = "Give a short usage message", .group = -1 },
419
{ .name = "version", .key = 'V',
420
.doc = "Print program version", .group = -1 },
374
421
{ .name = NULL }
375
422
};
376
423
377
error_t parse_opt(int key, char *arg, __attribute__((unused))
378
struct argp_state *state) {
379
switch(key) {
424
__attribute__((nonnull(3)))
425
error_t parse_opt(int key, char *arg, struct argp_state *state){
426
errno = 0;
427
switch(key){
428
char *tmp;
429
intmax_t tmp_id;
380
430
case 'g': /* --global-options */
381
if(arg != NULL){
382
char *p;
383
while((p = strsep(&arg, ",")) != NULL){
384
if(p[0] == '\0'){
385
continue;
386
}
387
if(not add_argument(getplugin(NULL), p)){
388
perror("add_argument");
389
return ARGP_ERR_UNKNOWN;
431
{
432
char *plugin_option;
433
while((plugin_option = strsep(&arg, ",")) != NULL){
434
if(not add_argument(getplugin(NULL), plugin_option)){
435
break;
390
436
}
391
437
}
392
438
}
393
439
break;
394
440
case 'G': /* --global-env */
395
if(arg == NULL){
396
break;
397
}
398
if(not add_environment(getplugin(NULL), arg, true)){
399
perror("add_environment");
400
}
441
add_environment(getplugin(NULL), arg, true);
401
442
break;
402
443
case 'o': /* --options-for */
403
if(arg != NULL){
404
char *p_name = strsep(&arg, ":");
405
if(p_name[0] == '\0' or arg == NULL){
406
break;
407
}
408
char *opt = strsep(&arg, ":");
409
if(opt[0] == '\0' or opt == NULL){
410
break;
411
}
412
char *p;
413
while((p = strsep(&opt, ",")) != NULL){
414
if(p[0] == '\0'){
415
continue;
416
}
417
if(not add_argument(getplugin(p_name), p)){
418
perror("add_argument");
419
return ARGP_ERR_UNKNOWN;
444
{
445
char *option_list = strchr(arg, ':');
446
if(option_list == NULL){
447
argp_error(state, "No colon in \"%s\"", arg);
448
errno = EINVAL;
449
break;
450
}
451
*option_list = '\0';
452
option_list++;
453
if(arg[0] == '\0'){
454
argp_error(state, "Empty plugin name");
455
errno = EINVAL;
456
break;
457
}
458
char *option;
459
while((option = strsep(&option_list, ",")) != NULL){
460
if(not add_argument(getplugin(arg), option)){
461
break;
420
462
}
421
463
}
422
464
}
423
465
break;
424
466
case 'E': /* --env-for */
425
if(arg == NULL){
426
break;
427
}
428
467
{
429
468
char *envdef = strchr(arg, ':');
430
469
if(envdef == NULL){
470
argp_error(state, "No colon in \"%s\"", arg);
471
errno = EINVAL;
431
472
break;
432
473
}
433
474
*envdef = '\0';
434
if(not add_environment(getplugin(arg), envdef+1, true)){
435
perror("add_environment");
475
envdef++;
476
if(arg[0] == '\0'){
477
argp_error(state, "Empty plugin name");
478
errno = EINVAL;
479
break;
436
480
}
481
add_environment(getplugin(arg), envdef, true);
437
482
}
438
483
break;
439
484
case 'd': /* --disable */
440
if(arg != NULL){
485
{
441
486
plugin *p = getplugin(arg);
442
if(p == NULL){
443
return ARGP_ERR_UNKNOWN;
487
if(p != NULL){
488
p->disabled = true;
444
489
}
445
p->disabled = true;
446
490
}
447
491
break;
448
492
case 'e': /* --enable */
449
if(arg != NULL){
493
{
450
494
plugin *p = getplugin(arg);
451
if(p == NULL){
452
return ARGP_ERR_UNKNOWN;
495
if(p != NULL){
496
p->disabled = false;
453
497
}
454
p->disabled = false;
455
498
}
456
499
break;
457
500
case 128: /* --plugin-dir */
458
501
free(plugindir);
459
502
plugindir = strdup(arg);
460
if(plugindir == NULL){
461
perror("strdup");
462
}
463
503
break;
464
504
case 129: /* --config-file */
465
505
/* This is already done by parse_opt_config_file() */
466
506
break;
467
507
case 130: /* --userid */
468
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
469
if(ret < 1 or tmpmax != (uid_t)tmpmax
470
or arg[numchars] != '\0'){
471
fprintf(stderr, "Bad user ID number: \"%s\", using %"
472
PRIdMAX "\n", arg, (intmax_t)uid);
473
} else {
474
uid = (uid_t)tmpmax;
508
tmp_id = strtoimax(arg, &tmp, 10);
509
if(errno != 0 or tmp == arg or *tmp != '\0'
510
or tmp_id != (uid_t)tmp_id){
511
argp_error(state, "Bad user ID number: \"%s\", using %"
512
PRIdMAX, arg, (intmax_t)uid);
513
break;
475
514
}
515
uid = (uid_t)tmp_id;
476
516
break;
477
517
case 131: /* --groupid */
478
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
479
if(ret < 1 or tmpmax != (gid_t)tmpmax
480
or arg[numchars] != '\0'){
481
fprintf(stderr, "Bad group ID number: \"%s\", using %"
482
PRIdMAX "\n", arg, (intmax_t)gid);
483
} else {
484
gid = (gid_t)tmpmax;
518
tmp_id = strtoimax(arg, &tmp, 10);
519
if(errno != 0 or tmp == arg or *tmp != '\0'
520
or tmp_id != (gid_t)tmp_id){
521
argp_error(state, "Bad group ID number: \"%s\", using %"
522
PRIdMAX, arg, (intmax_t)gid);
523
break;
485
524
}
525
gid = (gid_t)tmp_id;
486
526
break;
487
527
case 132: /* --debug */
488
528
debug = true;
489
529
break;
530
/*
531
* These reproduce what we would get without ARGP_NO_HELP
532
*/
533
case '?': /* --help */
534
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
535
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
536
case -3: /* --usage */
537
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
538
argp_state_help(state, state->out_stream,
539
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
540
case 'V': /* --version */
541
fprintf(state->out_stream, "%s\n", argp_program_version);
542
exit(EXIT_SUCCESS);
543
break;
490
544
/*
491
545
* When adding more options before this line, remember to also add a
492
546
* "case" to the "parse_opt_config_file" function below.
495
549
/* Cryptsetup always passes an argument, which is an empty
496
550
string if "none" was specified in /etc/crypttab. So if
497
551
argument was empty, we ignore it silently. */
498
if(arg[0] != '\0'){
499
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
552
if(arg[0] == '\0'){
553
break;
500
554
}
501
break;
502
case ARGP_KEY_END:
503
break;
504
555
default:
505
556
return ARGP_ERR_UNKNOWN;
506
557
}
507
return 0;
558
return errno; /* Set to 0 at start */
508
559
}
509
560
510
561
/* This option parser is the same as parse_opt() above, except it
511
562
ignores everything but the --config-file option. */
512
563
error_t parse_opt_config_file(int key, char *arg,
513
564
__attribute__((unused))
514
struct argp_state *state) {
515
switch(key) {
565
struct argp_state *state){
566
errno = 0;
567
switch(key){
516
568
case 'g': /* --global-options */
517
569
case 'G': /* --global-env */
518
570
case 'o': /* --options-for */
524
576
case 129: /* --config-file */
525
577
free(argfile);
526
578
argfile = strdup(arg);
527
if(argfile == NULL){
528
perror("strdup");
529
}
530
break;
579
break;
531
580
case 130: /* --userid */
532
581
case 131: /* --groupid */
533
582
case 132: /* --debug */
583
case '?': /* --help */
584
case -3: /* --usage */
585
case 'V': /* --version */
534
586
case ARGP_KEY_ARG:
535
case ARGP_KEY_END:
536
587
break;
537
588
default:
538
589
return ARGP_ERR_UNKNOWN;
539
590
}
540
return 0;
591
return errno;
541
592
}
542
593
543
594
struct argp argp = { .options = options,
547
598
548
599
/* Parse using parse_opt_config_file() in order to get the custom
549
600
config file location, if any. */
550
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
551
if(ret == ARGP_ERR_UNKNOWN){
552
fprintf(stderr, "Unknown error while parsing arguments\n");
553
exitstatus = EXIT_FAILURE;
601
ret = argp_parse(&argp, argc, argv,
602
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
603
NULL, NULL);
604
switch(ret){
605
case 0:
606
break;
607
case ENOMEM:
608
default:
609
errno = ret;
610
error(0, errno, "argp_parse");
611
exitstatus = EX_OSERR;
612
goto fallback;
613
case EINVAL:
614
exitstatus = EX_USAGE;
554
615
goto fallback;
555
616
}
556
617
562
623
conffp = fopen(AFILE, "r");
563
624
} else {
564
625
conffp = fopen(argfile, "r");
565
}
626
}
566
627
if(conffp != NULL){
567
628
char *org_line = NULL;
568
629
char *p, *arg, *new_arg, *line;
569
630
size_t size = 0;
570
631
const char whitespace_delims[] = " \r\t\f\v\n";
571
632
const char comment_delim[] = "#";
572
633
573
634
custom_argc = 1;
574
635
custom_argv = malloc(sizeof(char*) * 2);
575
636
if(custom_argv == NULL){
576
perror("malloc");
577
exitstatus = EXIT_FAILURE;
637
error(0, errno, "malloc");
638
exitstatus = EX_OSERR;
578
639
goto fallback;
579
640
}
580
641
custom_argv[0] = argv[0];
581
642
custom_argv[1] = NULL;
582
643
583
644
/* for each line in the config file, strip whitespace and ignore
584
645
commented text */
585
646
while(true){
587
648
if(sret == -1){
588
649
break;
589
650
}
590
651
591
652
line = org_line;
592
653
arg = strsep(&line, comment_delim);
593
654
while((p = strsep(&arg, whitespace_delims)) != NULL){
596
657
}
597
658
new_arg = strdup(p);
598
659
if(new_arg == NULL){
599
perror("strdup");
600
exitstatus = EXIT_FAILURE;
660
error(0, errno, "strdup");
661
exitstatus = EX_OSERR;
601
662
free(org_line);
602
663
goto fallback;
603
664
}
606
667
custom_argv = realloc(custom_argv, sizeof(char *)
607
668
* ((unsigned int) custom_argc + 1));
608
669
if(custom_argv == NULL){
609
perror("realloc");
610
exitstatus = EXIT_FAILURE;
670
error(0, errno, "realloc");
671
exitstatus = EX_OSERR;
611
672
free(org_line);
612
673
goto fallback;
613
674
}
614
675
custom_argv[custom_argc-1] = new_arg;
615
custom_argv[custom_argc] = NULL;
676
custom_argv[custom_argc] = NULL;
616
677
}
617
678
}
679
do {
680
ret = fclose(conffp);
681
} while(ret == EOF and errno == EINTR);
682
if(ret == EOF){
683
error(0, errno, "fclose");
684
exitstatus = EX_IOERR;
685
goto fallback;
686
}
618
687
free(org_line);
619
688
} else {
620
689
/* Check for harmful errors and go to fallback. Other errors might
621
690
not affect opening plugins */
622
691
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
623
perror("fopen");
624
exitstatus = EXIT_FAILURE;
692
error(0, errno, "fopen");
693
exitstatus = EX_OSERR;
625
694
goto fallback;
626
695
}
627
696
}
628
/* If there was any arguments from configuration file,
629
pass them to parser as command arguments */
697
/* If there were any arguments from the configuration file, pass
698
them to parser as command line arguments */
630
699
if(custom_argv != NULL){
631
ret = argp_parse(&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
632
0, NULL);
633
if(ret == ARGP_ERR_UNKNOWN){
634
fprintf(stderr, "Unknown error while parsing arguments\n");
635
exitstatus = EXIT_FAILURE;
700
ret = argp_parse(&argp, custom_argc, custom_argv,
701
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
702
NULL, NULL);
703
switch(ret){
704
case 0:
705
break;
706
case ENOMEM:
707
default:
708
errno = ret;
709
error(0, errno, "argp_parse");
710
exitstatus = EX_OSERR;
711
goto fallback;
712
case EINVAL:
713
exitstatus = EX_CONFIG;
636
714
goto fallback;
637
715
}
638
716
}
639
717
640
718
/* Parse actual command line arguments, to let them override the
641
719
config file */
642
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
643
if(ret == ARGP_ERR_UNKNOWN){
644
fprintf(stderr, "Unknown error while parsing arguments\n");
645
exitstatus = EXIT_FAILURE;
720
ret = argp_parse(&argp, argc, argv,
721
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
722
NULL, NULL);
723
switch(ret){
724
case 0:
725
break;
726
case ENOMEM:
727
default:
728
errno = ret;
729
error(0, errno, "argp_parse");
730
exitstatus = EX_OSERR;
731
goto fallback;
732
case EINVAL:
733
exitstatus = EX_USAGE;
646
734
goto fallback;
647
735
}
648
736
660
748
}
661
749
}
662
750
663
/* Strip permissions down to nobody */
751
if(getuid() == 0){
752
/* Work around Debian bug #633582:
753
<http://bugs.debian.org/633582> */
754
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
755
if(plugindir_fd == -1){
756
error(0, errno, "open");
757
} else {
758
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
759
if(ret == -1){
760
error(0, errno, "fstat");
761
} else {
762
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
763
ret = fchown(plugindir_fd, uid, gid);
764
if(ret == -1){
765
error(0, errno, "fchown");
766
}
767
}
768
}
769
TEMP_FAILURE_RETRY(close(plugindir_fd));
770
}
771
}
772
773
/* Lower permissions */
774
setgid(gid);
775
if(ret == -1){
776
error(0, errno, "setgid");
777
}
664
778
ret = setuid(uid);
665
779
if(ret == -1){
666
perror("setuid");
667
}
668
setgid(gid);
669
if(ret == -1){
670
perror("setgid");
671
}
672
673
if(plugindir == NULL){
674
dir = opendir(PDIR);
675
} else {
676
dir = opendir(plugindir);
677
}
678
679
if(dir == NULL){
680
perror("Could not open plugin dir");
681
exitstatus = EXIT_FAILURE;
682
goto fallback;
683
}
684
685
/* Set the FD_CLOEXEC flag on the directory, if possible */
780
error(0, errno, "setuid");
781
}
782
783
/* Open plugin directory with close_on_exec flag */
686
784
{
687
int dir_fd = dirfd(dir);
688
if(dir_fd >= 0){
689
ret = set_cloexec_flag(dir_fd);
690
if(ret < 0){
691
perror("set_cloexec_flag");
692
exitstatus = EXIT_FAILURE;
693
goto fallback;
694
}
785
int dir_fd = -1;
786
if(plugindir == NULL){
787
dir_fd = open(PDIR, O_RDONLY |
788
#ifdef O_CLOEXEC
789
O_CLOEXEC
790
#else /* not O_CLOEXEC */
791
0
792
#endif /* not O_CLOEXEC */
793
);
794
} else {
795
dir_fd = open(plugindir, O_RDONLY |
796
#ifdef O_CLOEXEC
797
O_CLOEXEC
798
#else /* not O_CLOEXEC */
799
0
800
#endif /* not O_CLOEXEC */
801
);
802
}
803
if(dir_fd == -1){
804
error(0, errno, "Could not open plugin dir");
805
exitstatus = EX_UNAVAILABLE;
806
goto fallback;
807
}
808
809
#ifndef O_CLOEXEC
810
/* Set the FD_CLOEXEC flag on the directory */
811
ret = set_cloexec_flag(dir_fd);
812
if(ret < 0){
813
error(0, errno, "set_cloexec_flag");
814
TEMP_FAILURE_RETRY(close(dir_fd));
815
exitstatus = EX_OSERR;
816
goto fallback;
817
}
818
#endif /* O_CLOEXEC */
819
820
dir = fdopendir(dir_fd);
821
if(dir == NULL){
822
error(0, errno, "Could not open plugin dir");
823
TEMP_FAILURE_RETRY(close(dir_fd));
824
exitstatus = EX_OSERR;
825
goto fallback;
695
826
}
696
827
}
697
828
699
830
700
831
/* Read and execute any executable in the plugin directory*/
701
832
while(true){
702
dirst = readdir(dir);
833
do {
834
dirst = readdir(dir);
835
} while(dirst == NULL and errno == EINTR);
703
836
704
837
/* All directory entries have been processed */
705
838
if(dirst == NULL){
706
839
if(errno == EBADF){
707
perror("readdir");
708
exitstatus = EXIT_FAILURE;
840
error(0, errno, "readdir");
841
exitstatus = EX_IOERR;
709
842
goto fallback;
710
843
}
711
844
break;
741
874
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
742
875
size_t suf_len = strlen(*suf);
743
876
if((d_name_len >= suf_len)
744
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
877
and (strcmp((dirst->d_name) + d_name_len-suf_len, *suf)
745
878
== 0)){
746
879
if(debug){
747
880
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
756
889
continue;
757
890
}
758
891
}
759
892
760
893
char *filename;
761
894
if(plugindir == NULL){
762
ret = asprintf(&filename, PDIR "/%s", dirst->d_name);
895
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, PDIR "/%s",
896
dirst->d_name));
763
897
} else {
764
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
898
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, "%s/%s",
899
plugindir,
900
dirst->d_name));
765
901
}
766
902
if(ret < 0){
767
perror("asprintf");
903
error(0, errno, "asprintf");
768
904
continue;
769
905
}
770
906
771
ret = stat(filename, &st);
907
ret = (int)TEMP_FAILURE_RETRY(stat(filename, &st));
772
908
if(ret == -1){
773
perror("stat");
909
error(0, errno, "stat");
774
910
free(filename);
775
911
continue;
776
912
}
777
913
778
914
/* Ignore non-executable files */
779
if(not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
915
if(not S_ISREG(st.st_mode)
916
or (TEMP_FAILURE_RETRY(access(filename, X_OK)) != 0)){
780
917
if(debug){
781
918
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
782
919
" with bad type or mode\n", filename);
787
924
788
925
plugin *p = getplugin(dirst->d_name);
789
926
if(p == NULL){
790
perror("getplugin");
927
error(0, errno, "getplugin");
791
928
free(filename);
792
929
continue;
793
930
}
805
942
if(g != NULL){
806
943
for(char **a = g->argv + 1; *a != NULL; a++){
807
944
if(not add_argument(p, *a)){
808
perror("add_argument");
945
error(0, errno, "add_argument");
809
946
}
810
947
}
811
948
/* Add global environment variables */
812
949
for(char **e = g->environ; *e != NULL; e++){
813
950
if(not add_environment(p, *e, false)){
814
perror("add_environment");
951
error(0, errno, "add_environment");
815
952
}
816
953
}
817
954
}
822
959
if(p->environ[0] != NULL){
823
960
for(char **e = environ; *e != NULL; e++){
824
961
if(not add_environment(p, *e, false)){
825
perror("add_environment");
962
error(0, errno, "add_environment");
826
963
}
827
964
}
828
965
}
829
966
830
967
int pipefd[2];
831
ret = pipe(pipefd);
968
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
832
969
if(ret == -1){
833
perror("pipe");
834
exitstatus = EXIT_FAILURE;
970
error(0, errno, "pipe");
971
exitstatus = EX_OSERR;
835
972
goto fallback;
836
973
}
837
974
/* Ask OS to automatic close the pipe on exec */
838
975
ret = set_cloexec_flag(pipefd[0]);
839
976
if(ret < 0){
840
perror("set_cloexec_flag");
841
exitstatus = EXIT_FAILURE;
977
error(0, errno, "set_cloexec_flag");
978
exitstatus = EX_OSERR;
842
979
goto fallback;
843
980
}
844
981
ret = set_cloexec_flag(pipefd[1]);
845
982
if(ret < 0){
846
perror("set_cloexec_flag");
847
exitstatus = EXIT_FAILURE;
983
error(0, errno, "set_cloexec_flag");
984
exitstatus = EX_OSERR;
848
985
goto fallback;
849
986
}
850
987
/* Block SIGCHLD until process is safely in process list */
851
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
988
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
989
&sigchld_action.sa_mask,
990
NULL));
852
991
if(ret < 0){
853
perror("sigprocmask");
854
exitstatus = EXIT_FAILURE;
992
error(0, errno, "sigprocmask");
993
exitstatus = EX_OSERR;
855
994
goto fallback;
856
995
}
857
996
/* Starting a new process to be watched */
858
pid_t pid = fork();
997
pid_t pid;
998
do {
999
pid = fork();
1000
} while(pid == -1 and errno == EINTR);
859
1001
if(pid == -1){
860
perror("fork");
861
exitstatus = EXIT_FAILURE;
1002
error(0, errno, "fork");
1003
exitstatus = EX_OSERR;
862
1004
goto fallback;
863
1005
}
864
1006
if(pid == 0){
865
1007
/* this is the child process */
866
1008
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
867
1009
if(ret < 0){
868
perror("sigaction");
869
_exit(EXIT_FAILURE);
1010
error(0, errno, "sigaction");
1011
_exit(EX_OSERR);
870
1012
}
871
1013
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
872
1014
if(ret < 0){
873
perror("sigprocmask");
874
_exit(EXIT_FAILURE);
1015
error(0, errno, "sigprocmask");
1016
_exit(EX_OSERR);
875
1017
}
876
1018
877
1019
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
878
1020
if(ret == -1){
879
perror("dup2");
880
_exit(EXIT_FAILURE);
1021
error(0, errno, "dup2");
1022
_exit(EX_OSERR);
881
1023
}
882
1024
883
1025
if(dirfd(dir) < 0){
887
1029
}
888
1030
if(p->environ[0] == NULL){
889
1031
if(execv(filename, p->argv) < 0){
890
perror("execv");
891
_exit(EXIT_FAILURE);
1032
error(0, errno, "execv for %s", filename);
1033
_exit(EX_OSERR);
892
1034
}
893
1035
} else {
894
1036
if(execve(filename, p->argv, p->environ) < 0){
895
perror("execve");
896
_exit(EXIT_FAILURE);
1037
error(0, errno, "execve for %s", filename);
1038
_exit(EX_OSERR);
897
1039
}
898
1040
}
899
1041
/* no return */
900
1042
}
901
1043
/* Parent process */
902
close(pipefd[1]); /* Close unused write end of pipe */
1044
TEMP_FAILURE_RETRY(close(pipefd[1])); /* Close unused write end of
1045
pipe */
903
1046
free(filename);
904
1047
plugin *new_plugin = getplugin(dirst->d_name);
905
1048
if(new_plugin == NULL){
906
perror("getplugin");
907
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1049
error(0, errno, "getplugin");
1050
ret = (int)(TEMP_FAILURE_RETRY
1051
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1052
NULL)));
908
1053
if(ret < 0){
909
perror("sigprocmask");
1054
error(0, errno, "sigprocmask");
910
1055
}
911
exitstatus = EXIT_FAILURE;
1056
exitstatus = EX_OSERR;
912
1057
goto fallback;
913
1058
}
914
1059
917
1062
918
1063
/* Unblock SIGCHLD so signal handler can be run if this process
919
1064
has already completed */
920
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1065
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1066
&sigchld_action.sa_mask,
1067
NULL));
921
1068
if(ret < 0){
922
perror("sigprocmask");
923
exitstatus = EXIT_FAILURE;
1069
error(0, errno, "sigprocmask");
1070
exitstatus = EX_OSERR;
924
1071
goto fallback;
925
1072
}
926
1073
927
FD_SET(new_plugin->fd, &rfds_all);
1074
FD_SET(new_plugin->fd, &rfds_all); /* Spurious warning from
1075
-Wconversion */
928
1076
929
1077
if(maxfd < new_plugin->fd){
930
1078
maxfd = new_plugin->fd;
931
1079
}
932
1080
}
933
1081
934
closedir(dir);
1082
TEMP_FAILURE_RETRY(closedir(dir));
935
1083
dir = NULL;
1084
free_plugin(getplugin(NULL));
936
1085
937
1086
for(plugin *p = plugin_list; p != NULL; p = p->next){
938
1087
if(p->pid != 0){
949
1098
while(plugin_list){
950
1099
fd_set rfds = rfds_all;
951
1100
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
952
if(select_ret == -1){
953
perror("select");
954
exitstatus = EXIT_FAILURE;
1101
if(select_ret == -1 and errno != EINTR){
1102
error(0, errno, "select");
1103
exitstatus = EX_OSERR;
955
1104
goto fallback;
956
1105
}
957
1106
/* OK, now either a process completed, or something can be read
958
1107
from one of them */
959
1108
for(plugin *proc = plugin_list; proc != NULL;){
960
1109
/* Is this process completely done? */
961
if(proc->eof and proc->completed){
1110
if(proc->completed and proc->eof){
962
1111
/* Only accept the plugin output if it exited cleanly */
963
1112
if(not WIFEXITED(proc->status)
964
1113
or WEXITSTATUS(proc->status) != 0){
965
1114
/* Bad exit by plugin */
966
1115
967
1116
if(debug){
968
1117
if(WIFEXITED(proc->status)){
969
fprintf(stderr, "Plugin %" PRIdMAX " exited with status"
970
" %d\n", (intmax_t) (proc->pid),
1118
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
1119
" status %d\n", proc->name,
1120
(intmax_t) (proc->pid),
971
1121
WEXITSTATUS(proc->status));
972
} else if(WIFSIGNALED(proc->status)) {
973
fprintf(stderr, "Plugin %" PRIdMAX " killed by signal"
974
" %d\n", (intmax_t) (proc->pid),
975
WTERMSIG(proc->status));
1122
} else if(WIFSIGNALED(proc->status)){
1123
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
1124
" signal %d: %s\n", proc->name,
1125
(intmax_t) (proc->pid),
1126
WTERMSIG(proc->status),
1127
strsignal(WTERMSIG(proc->status)));
976
1128
} else if(WCOREDUMP(proc->status)){
977
fprintf(stderr, "Plugin %" PRIdMAX " dumped core\n",
978
(intmax_t) (proc->pid));
1129
fprintf(stderr, "Plugin %s [%" PRIdMAX "] dumped"
1130
" core\n", proc->name, (intmax_t) (proc->pid));
979
1131
}
980
1132
}
981
1133
982
1134
/* Remove the plugin */
983
FD_CLR(proc->fd, &rfds_all);
984
1135
FD_CLR(proc->fd, &rfds_all); /* Spurious warning from
1136
-Wconversion */
1137
985
1138
/* Block signal while modifying process_list */
986
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1139
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1140
(SIG_BLOCK,
1141
&sigchld_action.sa_mask,
1142
NULL));
987
1143
if(ret < 0){
988
perror("sigprocmask");
989
exitstatus = EXIT_FAILURE;
1144
error(0, errno, "sigprocmask");
1145
exitstatus = EX_OSERR;
990
1146
goto fallback;
991
1147
}
992
1148
995
1151
proc = next_plugin;
996
1152
997
1153
/* We are done modifying process list, so unblock signal */
998
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
999
NULL);
1154
ret = (int)(TEMP_FAILURE_RETRY
1155
(sigprocmask(SIG_UNBLOCK,
1156
&sigchld_action.sa_mask, NULL)));
1000
1157
if(ret < 0){
1001
perror("sigprocmask");
1002
exitstatus = EXIT_FAILURE;
1158
error(0, errno, "sigprocmask");
1159
exitstatus = EX_OSERR;
1003
1160
goto fallback;
1004
1161
}
1005
1162
1015
1172
bool bret = print_out_password(proc->buffer,
1016
1173
proc->buffer_length);
1017
1174
if(not bret){
1018
perror("print_out_password");
1019
exitstatus = EXIT_FAILURE;
1175
error(0, errno, "print_out_password");
1176
exitstatus = EX_IOERR;
1020
1177
}
1021
1178
goto fallback;
1022
1179
}
1023
1180
1024
1181
/* This process has not completed. Does it have any output? */
1025
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1182
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){ /* Spurious
1183
warning from
1184
-Wconversion */
1026
1185
/* This process had nothing to say at this time */
1027
1186
proc = proc->next;
1028
1187
continue;
1032
1191
proc->buffer = realloc(proc->buffer, proc->buffer_size
1033
1192
+ (size_t) BUFFER_SIZE);
1034
1193
if(proc->buffer == NULL){
1035
perror("malloc");
1036
exitstatus = EXIT_FAILURE;
1194
error(0, errno, "malloc");
1195
exitstatus = EX_OSERR;
1037
1196
goto fallback;
1038
1197
}
1039
1198
proc->buffer_size += BUFFER_SIZE;
1040
1199
}
1041
1200
/* Read from the process */
1042
sret = read(proc->fd, proc->buffer + proc->buffer_length,
1043
BUFFER_SIZE);
1201
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1202
proc->buffer
1203
+ proc->buffer_length,
1204
BUFFER_SIZE));
1044
1205
if(sret < 0){
1045
1206
/* Read error from this process; ignore the error */
1046
1207
proc = proc->next;
1054
1215
}
1055
1216
}
1056
1217
}
1057
1058
1218
1219
1059
1220
fallback:
1060
1221
1061
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1222
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1223
and exitstatus != EX_OK)){
1062
1224
/* Fallback if all plugins failed, none are found or an error
1063
1225
occured */
1064
1226
bool bret;
1072
1234
}
1073
1235
bret = print_out_password(passwordbuffer, len);
1074
1236
if(not bret){
1075
perror("print_out_password");
1076
exitstatus = EXIT_FAILURE;
1237
error(0, errno, "print_out_password");
1238
exitstatus = EX_IOERR;
1077
1239
}
1078
1240
}
1079
1241
1080
1242
/* Restore old signal handler */
1081
1243
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1082
1244
if(ret == -1){
1083
perror("sigaction");
1084
exitstatus = EXIT_FAILURE;
1245
error(0, errno, "sigaction");
1246
exitstatus = EX_OSERR;
1085
1247
}
1086
1248
1087
1249
if(custom_argv != NULL){
1102
1264
ret = kill(p->pid, SIGTERM);
1103
1265
if(ret == -1 and errno != ESRCH){
1104
1266
/* Set-uid proccesses might not get closed */
1105
perror("kill");
1267
error(0, errno, "kill");
1106
1268
}
1107
1269
}
1108
1270
}
1109
1271
1110
1272
/* Wait for any remaining child processes to terminate */
1111
do{
1273
do {
1112
1274
ret = wait(NULL);
1113
1275
} while(ret >= 0);
1114
1276
if(errno != ECHILD){
1115
perror("wait");
1277
error(0, errno, "wait");
1116
1278
}
1117
1279
1118
1280
free_plugin_list();
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0