To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugin-runner.c
- browse files at revision 541
- compare with another revision
- download diff
- download tarball
- view history from revision 541
- Committer: Teddy Hogeborn
- Date: 2011-12-31 20:07:11 UTC
- mfrom: (535.1.9 wireless-network-hook)
- Revision ID: teddy@recompile.se-20111231200711-6dli3r8drftem57r
Merge new wireless network hook. Fix bridge network hook to use
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
hardware addresses instead of interface names. Implement and document
new "CONNECT" environment variable for network hooks.
- files added:
- DBUS-API
- debian/source
- network-hooks.d
- files modified:
- .bzrignore
added
removed
plugin-runner.c
1
/* -*- coding: utf-8 -*- */
1
/* -*- coding: utf-8; mode: c; mode: orgtbl -*- */
2
2
/*
3
3
* Mandos plugin runner - Run Mandos plugins
4
4
*
5
* Copyright © 2008,2009 Teddy Hogeborn
6
* Copyright © 2008,2009 Björn Påhlsson
5
* Copyright © 2008-2011 Teddy Hogeborn
6
* Copyright © 2008-2011 Björn Påhlsson
7
7
*
8
8
* This program is free software: you can redistribute it and/or
9
9
* modify it under the terms of the GNU General Public License as
19
19
* along with this program. If not, see
20
20
* <http://www.gnu.org/licenses/>.
21
21
*
22
* Contact the authors at <mandos@fukt.bsnet.se>.
22
* Contact the authors at <mandos@recompile.se>.
23
23
*/
24
24
25
25
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), getline(),
26
asprintf() */
26
asprintf(), O_CLOEXEC */
27
27
#include <stddef.h> /* size_t, NULL */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_FAILURE,
29
EXIT_SUCCESS, realloc() */
28
#include <stdlib.h> /* malloc(), exit(), EXIT_SUCCESS,
29
realloc() */
30
30
#include <stdbool.h> /* bool, true, false */
31
#include <stdio.h> /* perror, fileno(), fprintf(),
31
#include <stdio.h> /* fileno(), fprintf(),
32
32
stderr, STDOUT_FILENO */
33
#include <sys/types.h> /* DIR, opendir(), stat(), struct
33
#include <sys/types.h> /* DIR, fdopendir(), stat(), struct
34
34
stat, waitpid(), WIFEXITED(),
35
35
WEXITSTATUS(), wait(), pid_t,
36
36
uid_t, gid_t, getuid(), getgid(),
38
38
#include <sys/select.h> /* fd_set, select(), FD_ZERO(),
39
39
FD_SET(), FD_ISSET(), FD_CLR */
40
40
#include <sys/wait.h> /* wait(), waitpid(), WIFEXITED(),
41
WEXITSTATUS() */
41
WEXITSTATUS(), WTERMSIG(),
42
WCOREDUMP() */
42
43
#include <sys/stat.h> /* struct stat, stat(), S_ISREG() */
43
44
#include <iso646.h> /* and, or, not */
44
#include <dirent.h> /* DIR, struct dirent, opendir(),
45
#include <dirent.h> /* DIR, struct dirent, fdopendir(),
45
46
readdir(), closedir(), dirfd() */
46
47
#include <unistd.h> /* struct stat, stat(), S_ISREG(),
47
48
fcntl(), setuid(), setgid(),
52
53
close() */
53
54
#include <fcntl.h> /* fcntl(), F_GETFD, F_SETFD,
54
55
FD_CLOEXEC */
55
#include <string.h> /* strsep, strlen(), asprintf() */
56
#include <string.h> /* strsep, strlen(), asprintf(),
57
strsignal(), strcmp(), strncmp() */
56
58
#include <errno.h> /* errno */
57
59
#include <argp.h> /* struct argp_option, struct
58
60
argp_state, struct argp,
62
64
#include <signal.h> /* struct sigaction, sigemptyset(),
63
65
sigaddset(), sigaction(),
64
66
sigprocmask(), SIG_BLOCK, SIGCHLD,
65
SIG_UNBLOCK, kill() */
67
SIG_UNBLOCK, kill(), sig_atomic_t
68
*/
66
69
#include <errno.h> /* errno, EBADF */
67
#include <inttypes.h> /* intmax_t, SCNdMAX, PRIdMAX, */
70
#include <inttypes.h> /* intmax_t, PRIdMAX, strtoimax() */
71
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_IOERR,
72
EX_CONFIG, EX_UNAVAILABLE, EX_OK */
73
#include <errno.h> /* errno */
74
#include <error.h> /* error() */
68
75
69
76
#define BUFFER_SIZE 256
70
77
72
79
#define AFILE "/conf/conf.d/mandos/plugin-runner.conf"
73
80
74
81
const char *argp_program_version = "plugin-runner " VERSION;
75
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
82
const char *argp_program_bug_address = "<mandos@recompile.se>";
76
83
77
84
typedef struct plugin{
78
85
char *name; /* can be NULL or any plugin name */
81
88
char **environ;
82
89
int envc;
83
90
bool disabled;
84
91
85
92
/* Variables used for running processes*/
86
93
pid_t pid;
87
94
int fd;
99
106
/* Gets an existing plugin based on name,
100
107
or if none is found, creates a new one */
101
108
static plugin *getplugin(char *name){
102
/* Check for exiting plugin with that name */
109
/* Check for existing plugin with that name */
103
110
for(plugin *p = plugin_list; p != NULL; p = p->next){
104
111
if((p->name == name)
105
112
or (p->name and name and (strcmp(p->name, name) == 0))){
107
114
}
108
115
}
109
116
/* Create a new plugin */
110
plugin *new_plugin = malloc(sizeof(plugin));
117
plugin *new_plugin = NULL;
118
do {
119
new_plugin = malloc(sizeof(plugin));
120
} while(new_plugin == NULL and errno == EINTR);
111
121
if(new_plugin == NULL){
112
122
return NULL;
113
123
}
114
124
char *copy_name = NULL;
115
125
if(name != NULL){
116
copy_name = strdup(name);
126
do {
127
copy_name = strdup(name);
128
} while(copy_name == NULL and errno == EINTR);
117
129
if(copy_name == NULL){
130
int e = errno;
118
131
free(new_plugin);
132
errno = e;
119
133
return NULL;
120
134
}
121
135
}
125
139
.disabled = false,
126
140
.next = plugin_list };
127
141
128
new_plugin->argv = malloc(sizeof(char *) * 2);
142
do {
143
new_plugin->argv = malloc(sizeof(char *) * 2);
144
} while(new_plugin->argv == NULL and errno == EINTR);
129
145
if(new_plugin->argv == NULL){
146
int e = errno;
130
147
free(copy_name);
131
148
free(new_plugin);
149
errno = e;
132
150
return NULL;
133
151
}
134
152
new_plugin->argv[0] = copy_name;
135
153
new_plugin->argv[1] = NULL;
136
154
137
new_plugin->environ = malloc(sizeof(char *));
155
do {
156
new_plugin->environ = malloc(sizeof(char *));
157
} while(new_plugin->environ == NULL and errno == EINTR);
138
158
if(new_plugin->environ == NULL){
159
int e = errno;
139
160
free(copy_name);
140
161
free(new_plugin->argv);
141
162
free(new_plugin);
163
errno = e;
142
164
return NULL;
143
165
}
144
166
new_plugin->environ[0] = NULL;
149
171
}
150
172
151
173
/* Helper function for add_argument and add_environment */
174
__attribute__((nonnull))
152
175
static bool add_to_char_array(const char *new, char ***array,
153
176
int *len){
154
177
/* Resize the pointed-to array to hold one more pointer */
155
*array = realloc(*array, sizeof(char *)
156
* (size_t) ((*len) + 2));
178
do {
179
*array = realloc(*array, sizeof(char *)
180
* (size_t) ((*len) + 2));
181
} while(*array == NULL and errno == EINTR);
157
182
/* Malloc check */
158
183
if(*array == NULL){
159
184
return false;
160
185
}
161
186
/* Make a copy of the new string */
162
char *copy = strdup(new);
187
char *copy;
188
do {
189
copy = strdup(new);
190
} while(copy == NULL and errno == EINTR);
163
191
if(copy == NULL){
164
192
return false;
165
193
}
172
200
}
173
201
174
202
/* Add to a plugin's argument vector */
203
__attribute__((nonnull(2)))
175
204
static bool add_argument(plugin *p, const char *arg){
176
205
if(p == NULL){
177
206
return false;
180
209
}
181
210
182
211
/* Add to a plugin's environment */
212
__attribute__((nonnull(2)))
183
213
static bool add_environment(plugin *p, const char *def, bool replace){
184
214
if(p == NULL){
185
215
return false;
191
221
if(strncmp(*e, def, namelen + 1) == 0){
192
222
/* It already exists */
193
223
if(replace){
194
char *new = realloc(*e, strlen(def) + 1);
224
char *new;
225
do {
226
new = realloc(*e, strlen(def) + 1);
227
} while(new == NULL and errno == EINTR);
195
228
if(new == NULL){
196
229
return false;
197
230
}
207
240
/*
208
241
* Based on the example in the GNU LibC manual chapter 13.13 "File
209
242
* Descriptor Flags".
210
* *Note File Descriptor Flags:(libc)Descriptor Flags.
243
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
211
244
*/
212
245
static int set_cloexec_flag(int fd){
213
int ret = fcntl(fd, F_GETFD, 0);
246
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
214
247
/* If reading the flags failed, return error indication now. */
215
248
if(ret < 0){
216
249
return ret;
217
250
}
218
251
/* Store modified flag word in the descriptor. */
219
return fcntl(fd, F_SETFD, ret | FD_CLOEXEC);
252
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
253
ret | FD_CLOEXEC));
220
254
}
221
255
222
256
237
271
/* No child processes */
238
272
break;
239
273
}
240
perror("waitpid");
274
error(0, errno, "waitpid");
241
275
}
242
276
243
277
/* A child exited, find it in process_list */
255
289
}
256
290
257
291
/* Prints out a password to stdout */
292
__attribute__((nonnull))
258
293
static bool print_out_password(const char *buffer, size_t length){
259
294
ssize_t ret;
260
295
for(size_t written = 0; written < length; written += (size_t)ret){
268
303
}
269
304
270
305
/* Removes and free a plugin from the plugin list */
306
__attribute__((nonnull))
271
307
static void free_plugin(plugin *plugin_node){
272
308
273
309
for(char **arg = plugin_node->argv; *arg != NULL; arg++){
279
315
}
280
316
free(plugin_node->environ);
281
317
free(plugin_node->buffer);
282
318
283
319
/* Removes the plugin from the singly-linked list */
284
320
if(plugin_node == plugin_list){
285
321
/* First one - simple */
312
348
struct dirent *dirst;
313
349
struct stat st;
314
350
fd_set rfds_all;
315
int ret, numchars, maxfd = 0;
351
int ret, maxfd = 0;
316
352
ssize_t sret;
317
intmax_t tmpmax;
318
353
uid_t uid = 65534;
319
354
gid_t gid = 65534;
320
355
bool debug = false;
329
364
sigemptyset(&sigchld_action.sa_mask);
330
365
ret = sigaddset(&sigchld_action.sa_mask, SIGCHLD);
331
366
if(ret == -1){
332
perror("sigaddset");
333
exitstatus = EXIT_FAILURE;
367
error(0, errno, "sigaddset");
368
exitstatus = EX_OSERR;
334
369
goto fallback;
335
370
}
336
371
ret = sigaction(SIGCHLD, &sigchld_action, &old_sigchld_action);
337
372
if(ret == -1){
338
perror("sigaction");
339
exitstatus = EXIT_FAILURE;
373
error(0, errno, "sigaction");
374
exitstatus = EX_OSERR;
340
375
goto fallback;
341
376
}
342
377
374
409
.doc = "Group ID the plugins will run as", .group = 3 },
375
410
{ .name = "debug", .key = 132,
376
411
.doc = "Debug mode", .group = 4 },
412
/*
413
* These reproduce what we would get without ARGP_NO_HELP
414
*/
415
{ .name = "help", .key = '?',
416
.doc = "Give this help list", .group = -1 },
417
{ .name = "usage", .key = -3,
418
.doc = "Give a short usage message", .group = -1 },
419
{ .name = "version", .key = 'V',
420
.doc = "Print program version", .group = -1 },
377
421
{ .name = NULL }
378
422
};
379
423
380
error_t parse_opt(int key, char *arg, __attribute__((unused))
381
struct argp_state *state){
424
__attribute__((nonnull(3)))
425
error_t parse_opt(int key, char *arg, struct argp_state *state){
426
errno = 0;
382
427
switch(key){
428
char *tmp;
429
intmax_t tmp_id;
383
430
case 'g': /* --global-options */
384
if(arg != NULL){
385
char *p;
386
while((p = strsep(&arg, ",")) != NULL){
387
if(p[0] == '\0'){
388
continue;
389
}
390
if(not add_argument(getplugin(NULL), p)){
391
perror("add_argument");
392
return ARGP_ERR_UNKNOWN;
431
{
432
char *plugin_option;
433
while((plugin_option = strsep(&arg, ",")) != NULL){
434
if(not add_argument(getplugin(NULL), plugin_option)){
435
break;
393
436
}
394
437
}
395
438
}
396
439
break;
397
440
case 'G': /* --global-env */
398
if(arg == NULL){
399
break;
400
}
401
if(not add_environment(getplugin(NULL), arg, true)){
402
perror("add_environment");
403
}
441
add_environment(getplugin(NULL), arg, true);
404
442
break;
405
443
case 'o': /* --options-for */
406
if(arg != NULL){
407
char *p_name = strsep(&arg, ":");
408
if(p_name[0] == '\0' or arg == NULL){
409
break;
410
}
411
char *opt = strsep(&arg, ":");
412
if(opt[0] == '\0' or opt == NULL){
413
break;
414
}
415
char *p;
416
while((p = strsep(&opt, ",")) != NULL){
417
if(p[0] == '\0'){
418
continue;
419
}
420
if(not add_argument(getplugin(p_name), p)){
421
perror("add_argument");
422
return ARGP_ERR_UNKNOWN;
444
{
445
char *option_list = strchr(arg, ':');
446
if(option_list == NULL){
447
argp_error(state, "No colon in \"%s\"", arg);
448
errno = EINVAL;
449
break;
450
}
451
*option_list = '\0';
452
option_list++;
453
if(arg[0] == '\0'){
454
argp_error(state, "Empty plugin name");
455
errno = EINVAL;
456
break;
457
}
458
char *option;
459
while((option = strsep(&option_list, ",")) != NULL){
460
if(not add_argument(getplugin(arg), option)){
461
break;
423
462
}
424
463
}
425
464
}
426
465
break;
427
466
case 'E': /* --env-for */
428
if(arg == NULL){
429
break;
430
}
431
467
{
432
468
char *envdef = strchr(arg, ':');
433
469
if(envdef == NULL){
470
argp_error(state, "No colon in \"%s\"", arg);
471
errno = EINVAL;
434
472
break;
435
473
}
436
474
*envdef = '\0';
437
if(not add_environment(getplugin(arg), envdef+1, true)){
438
perror("add_environment");
475
envdef++;
476
if(arg[0] == '\0'){
477
argp_error(state, "Empty plugin name");
478
errno = EINVAL;
479
break;
439
480
}
481
add_environment(getplugin(arg), envdef, true);
440
482
}
441
483
break;
442
484
case 'd': /* --disable */
443
if(arg != NULL){
485
{
444
486
plugin *p = getplugin(arg);
445
if(p == NULL){
446
return ARGP_ERR_UNKNOWN;
487
if(p != NULL){
488
p->disabled = true;
447
489
}
448
p->disabled = true;
449
490
}
450
491
break;
451
492
case 'e': /* --enable */
452
if(arg != NULL){
493
{
453
494
plugin *p = getplugin(arg);
454
if(p == NULL){
455
return ARGP_ERR_UNKNOWN;
495
if(p != NULL){
496
p->disabled = false;
456
497
}
457
p->disabled = false;
458
498
}
459
499
break;
460
500
case 128: /* --plugin-dir */
461
501
free(plugindir);
462
502
plugindir = strdup(arg);
463
if(plugindir == NULL){
464
perror("strdup");
465
}
466
503
break;
467
504
case 129: /* --config-file */
468
505
/* This is already done by parse_opt_config_file() */
469
506
break;
470
507
case 130: /* --userid */
471
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
472
if(ret < 1 or tmpmax != (uid_t)tmpmax
473
or arg[numchars] != '\0'){
474
fprintf(stderr, "Bad user ID number: \"%s\", using %"
475
PRIdMAX "\n", arg, (intmax_t)uid);
476
} else {
477
uid = (uid_t)tmpmax;
508
tmp_id = strtoimax(arg, &tmp, 10);
509
if(errno != 0 or tmp == arg or *tmp != '\0'
510
or tmp_id != (uid_t)tmp_id){
511
argp_error(state, "Bad user ID number: \"%s\", using %"
512
PRIdMAX, arg, (intmax_t)uid);
513
break;
478
514
}
515
uid = (uid_t)tmp_id;
479
516
break;
480
517
case 131: /* --groupid */
481
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
482
if(ret < 1 or tmpmax != (gid_t)tmpmax
483
or arg[numchars] != '\0'){
484
fprintf(stderr, "Bad group ID number: \"%s\", using %"
485
PRIdMAX "\n", arg, (intmax_t)gid);
486
} else {
487
gid = (gid_t)tmpmax;
518
tmp_id = strtoimax(arg, &tmp, 10);
519
if(errno != 0 or tmp == arg or *tmp != '\0'
520
or tmp_id != (gid_t)tmp_id){
521
argp_error(state, "Bad group ID number: \"%s\", using %"
522
PRIdMAX, arg, (intmax_t)gid);
523
break;
488
524
}
525
gid = (gid_t)tmp_id;
489
526
break;
490
527
case 132: /* --debug */
491
528
debug = true;
492
529
break;
530
/*
531
* These reproduce what we would get without ARGP_NO_HELP
532
*/
533
case '?': /* --help */
534
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
535
argp_state_help(state, state->out_stream, ARGP_HELP_STD_HELP);
536
case -3: /* --usage */
537
state->flags &= ~(unsigned int)ARGP_NO_EXIT; /* force exit */
538
argp_state_help(state, state->out_stream,
539
ARGP_HELP_USAGE | ARGP_HELP_EXIT_OK);
540
case 'V': /* --version */
541
fprintf(state->out_stream, "%s\n", argp_program_version);
542
exit(EXIT_SUCCESS);
543
break;
493
544
/*
494
545
* When adding more options before this line, remember to also add a
495
546
* "case" to the "parse_opt_config_file" function below.
498
549
/* Cryptsetup always passes an argument, which is an empty
499
550
string if "none" was specified in /etc/crypttab. So if
500
551
argument was empty, we ignore it silently. */
501
if(arg[0] != '\0'){
502
fprintf(stderr, "Ignoring unknown argument \"%s\"\n", arg);
552
if(arg[0] == '\0'){
553
break;
503
554
}
504
break;
505
case ARGP_KEY_END:
506
break;
507
555
default:
508
556
return ARGP_ERR_UNKNOWN;
509
557
}
510
return 0;
558
return errno; /* Set to 0 at start */
511
559
}
512
560
513
561
/* This option parser is the same as parse_opt() above, except it
515
563
error_t parse_opt_config_file(int key, char *arg,
516
564
__attribute__((unused))
517
565
struct argp_state *state){
566
errno = 0;
518
567
switch(key){
519
568
case 'g': /* --global-options */
520
569
case 'G': /* --global-env */
527
576
case 129: /* --config-file */
528
577
free(argfile);
529
578
argfile = strdup(arg);
530
if(argfile == NULL){
531
perror("strdup");
532
}
533
break;
579
break;
534
580
case 130: /* --userid */
535
581
case 131: /* --groupid */
536
582
case 132: /* --debug */
583
case '?': /* --help */
584
case -3: /* --usage */
585
case 'V': /* --version */
537
586
case ARGP_KEY_ARG:
538
case ARGP_KEY_END:
539
587
break;
540
588
default:
541
589
return ARGP_ERR_UNKNOWN;
542
590
}
543
return 0;
591
return errno;
544
592
}
545
593
546
594
struct argp argp = { .options = options,
550
598
551
599
/* Parse using parse_opt_config_file() in order to get the custom
552
600
config file location, if any. */
553
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
554
if(ret == ARGP_ERR_UNKNOWN){
555
fprintf(stderr, "Unknown error while parsing arguments\n");
556
exitstatus = EXIT_FAILURE;
601
ret = argp_parse(&argp, argc, argv,
602
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
603
NULL, NULL);
604
switch(ret){
605
case 0:
606
break;
607
case ENOMEM:
608
default:
609
errno = ret;
610
error(0, errno, "argp_parse");
611
exitstatus = EX_OSERR;
612
goto fallback;
613
case EINVAL:
614
exitstatus = EX_USAGE;
557
615
goto fallback;
558
616
}
559
617
565
623
conffp = fopen(AFILE, "r");
566
624
} else {
567
625
conffp = fopen(argfile, "r");
568
}
626
}
569
627
if(conffp != NULL){
570
628
char *org_line = NULL;
571
629
char *p, *arg, *new_arg, *line;
572
630
size_t size = 0;
573
631
const char whitespace_delims[] = " \r\t\f\v\n";
574
632
const char comment_delim[] = "#";
575
633
576
634
custom_argc = 1;
577
635
custom_argv = malloc(sizeof(char*) * 2);
578
636
if(custom_argv == NULL){
579
perror("malloc");
580
exitstatus = EXIT_FAILURE;
637
error(0, errno, "malloc");
638
exitstatus = EX_OSERR;
581
639
goto fallback;
582
640
}
583
641
custom_argv[0] = argv[0];
584
642
custom_argv[1] = NULL;
585
643
586
644
/* for each line in the config file, strip whitespace and ignore
587
645
commented text */
588
646
while(true){
590
648
if(sret == -1){
591
649
break;
592
650
}
593
651
594
652
line = org_line;
595
653
arg = strsep(&line, comment_delim);
596
654
while((p = strsep(&arg, whitespace_delims)) != NULL){
599
657
}
600
658
new_arg = strdup(p);
601
659
if(new_arg == NULL){
602
perror("strdup");
603
exitstatus = EXIT_FAILURE;
660
error(0, errno, "strdup");
661
exitstatus = EX_OSERR;
604
662
free(org_line);
605
663
goto fallback;
606
664
}
609
667
custom_argv = realloc(custom_argv, sizeof(char *)
610
668
* ((unsigned int) custom_argc + 1));
611
669
if(custom_argv == NULL){
612
perror("realloc");
613
exitstatus = EXIT_FAILURE;
670
error(0, errno, "realloc");
671
exitstatus = EX_OSERR;
614
672
free(org_line);
615
673
goto fallback;
616
674
}
617
675
custom_argv[custom_argc-1] = new_arg;
618
custom_argv[custom_argc] = NULL;
676
custom_argv[custom_argc] = NULL;
619
677
}
620
678
}
679
do {
680
ret = fclose(conffp);
681
} while(ret == EOF and errno == EINTR);
682
if(ret == EOF){
683
error(0, errno, "fclose");
684
exitstatus = EX_IOERR;
685
goto fallback;
686
}
621
687
free(org_line);
622
688
} else {
623
689
/* Check for harmful errors and go to fallback. Other errors might
624
690
not affect opening plugins */
625
691
if(errno == EMFILE or errno == ENFILE or errno == ENOMEM){
626
perror("fopen");
627
exitstatus = EXIT_FAILURE;
692
error(0, errno, "fopen");
693
exitstatus = EX_OSERR;
628
694
goto fallback;
629
695
}
630
696
}
631
/* If there was any arguments from configuration file,
632
pass them to parser as command arguments */
697
/* If there were any arguments from the configuration file, pass
698
them to parser as command line arguments */
633
699
if(custom_argv != NULL){
634
ret = argp_parse(&argp, custom_argc, custom_argv, ARGP_IN_ORDER,
635
0, NULL);
636
if(ret == ARGP_ERR_UNKNOWN){
637
fprintf(stderr, "Unknown error while parsing arguments\n");
638
exitstatus = EXIT_FAILURE;
700
ret = argp_parse(&argp, custom_argc, custom_argv,
701
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
702
NULL, NULL);
703
switch(ret){
704
case 0:
705
break;
706
case ENOMEM:
707
default:
708
errno = ret;
709
error(0, errno, "argp_parse");
710
exitstatus = EX_OSERR;
711
goto fallback;
712
case EINVAL:
713
exitstatus = EX_CONFIG;
639
714
goto fallback;
640
715
}
641
716
}
642
717
643
718
/* Parse actual command line arguments, to let them override the
644
719
config file */
645
ret = argp_parse(&argp, argc, argv, ARGP_IN_ORDER, 0, NULL);
646
if(ret == ARGP_ERR_UNKNOWN){
647
fprintf(stderr, "Unknown error while parsing arguments\n");
648
exitstatus = EXIT_FAILURE;
720
ret = argp_parse(&argp, argc, argv,
721
ARGP_IN_ORDER | ARGP_NO_EXIT | ARGP_NO_HELP,
722
NULL, NULL);
723
switch(ret){
724
case 0:
725
break;
726
case ENOMEM:
727
default:
728
errno = ret;
729
error(0, errno, "argp_parse");
730
exitstatus = EX_OSERR;
731
goto fallback;
732
case EINVAL:
733
exitstatus = EX_USAGE;
649
734
goto fallback;
650
735
}
651
736
663
748
}
664
749
}
665
750
666
/* Strip permissions down to nobody */
751
if(getuid() == 0){
752
/* Work around Debian bug #633582:
753
<http://bugs.debian.org/633582> */
754
int plugindir_fd = open(/* plugindir or */ PDIR, O_RDONLY);
755
if(plugindir_fd == -1){
756
error(0, errno, "open");
757
} else {
758
ret = (int)TEMP_FAILURE_RETRY(fstat(plugindir_fd, &st));
759
if(ret == -1){
760
error(0, errno, "fstat");
761
} else {
762
if(S_ISDIR(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
763
ret = fchown(plugindir_fd, uid, gid);
764
if(ret == -1){
765
error(0, errno, "fchown");
766
}
767
}
768
}
769
TEMP_FAILURE_RETRY(close(plugindir_fd));
770
}
771
}
772
773
/* Lower permissions */
667
774
setgid(gid);
668
775
if(ret == -1){
669
perror("setgid");
776
error(0, errno, "setgid");
670
777
}
671
778
ret = setuid(uid);
672
779
if(ret == -1){
673
perror("setuid");
674
}
675
676
if(plugindir == NULL){
677
dir = opendir(PDIR);
678
} else {
679
dir = opendir(plugindir);
680
}
681
682
if(dir == NULL){
683
perror("Could not open plugin dir");
684
exitstatus = EXIT_FAILURE;
685
goto fallback;
686
}
687
688
/* Set the FD_CLOEXEC flag on the directory, if possible */
780
error(0, errno, "setuid");
781
}
782
783
/* Open plugin directory with close_on_exec flag */
689
784
{
690
int dir_fd = dirfd(dir);
691
if(dir_fd >= 0){
692
ret = set_cloexec_flag(dir_fd);
693
if(ret < 0){
694
perror("set_cloexec_flag");
695
exitstatus = EXIT_FAILURE;
696
goto fallback;
697
}
785
int dir_fd = -1;
786
if(plugindir == NULL){
787
dir_fd = open(PDIR, O_RDONLY |
788
#ifdef O_CLOEXEC
789
O_CLOEXEC
790
#else /* not O_CLOEXEC */
791
0
792
#endif /* not O_CLOEXEC */
793
);
794
} else {
795
dir_fd = open(plugindir, O_RDONLY |
796
#ifdef O_CLOEXEC
797
O_CLOEXEC
798
#else /* not O_CLOEXEC */
799
0
800
#endif /* not O_CLOEXEC */
801
);
802
}
803
if(dir_fd == -1){
804
error(0, errno, "Could not open plugin dir");
805
exitstatus = EX_UNAVAILABLE;
806
goto fallback;
807
}
808
809
#ifndef O_CLOEXEC
810
/* Set the FD_CLOEXEC flag on the directory */
811
ret = set_cloexec_flag(dir_fd);
812
if(ret < 0){
813
error(0, errno, "set_cloexec_flag");
814
TEMP_FAILURE_RETRY(close(dir_fd));
815
exitstatus = EX_OSERR;
816
goto fallback;
817
}
818
#endif /* O_CLOEXEC */
819
820
dir = fdopendir(dir_fd);
821
if(dir == NULL){
822
error(0, errno, "Could not open plugin dir");
823
TEMP_FAILURE_RETRY(close(dir_fd));
824
exitstatus = EX_OSERR;
825
goto fallback;
698
826
}
699
827
}
700
828
702
830
703
831
/* Read and execute any executable in the plugin directory*/
704
832
while(true){
705
dirst = readdir(dir);
833
do {
834
dirst = readdir(dir);
835
} while(dirst == NULL and errno == EINTR);
706
836
707
837
/* All directory entries have been processed */
708
838
if(dirst == NULL){
709
839
if(errno == EBADF){
710
perror("readdir");
711
exitstatus = EXIT_FAILURE;
840
error(0, errno, "readdir");
841
exitstatus = EX_IOERR;
712
842
goto fallback;
713
843
}
714
844
break;
744
874
for(const char **suf = bad_suffixes; *suf != NULL; suf++){
745
875
size_t suf_len = strlen(*suf);
746
876
if((d_name_len >= suf_len)
747
and (strcmp((dirst->d_name)+d_name_len-suf_len, *suf)
877
and (strcmp((dirst->d_name) + d_name_len-suf_len, *suf)
748
878
== 0)){
749
879
if(debug){
750
880
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
759
889
continue;
760
890
}
761
891
}
762
892
763
893
char *filename;
764
894
if(plugindir == NULL){
765
ret = asprintf(&filename, PDIR "/%s", dirst->d_name);
895
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, PDIR "/%s",
896
dirst->d_name));
766
897
} else {
767
ret = asprintf(&filename, "%s/%s", plugindir, dirst->d_name);
898
ret = (int)TEMP_FAILURE_RETRY(asprintf(&filename, "%s/%s",
899
plugindir,
900
dirst->d_name));
768
901
}
769
902
if(ret < 0){
770
perror("asprintf");
903
error(0, errno, "asprintf");
771
904
continue;
772
905
}
773
906
774
ret = stat(filename, &st);
907
ret = (int)TEMP_FAILURE_RETRY(stat(filename, &st));
775
908
if(ret == -1){
776
perror("stat");
909
error(0, errno, "stat");
777
910
free(filename);
778
911
continue;
779
912
}
780
913
781
914
/* Ignore non-executable files */
782
if(not S_ISREG(st.st_mode) or (access(filename, X_OK) != 0)){
915
if(not S_ISREG(st.st_mode)
916
or (TEMP_FAILURE_RETRY(access(filename, X_OK)) != 0)){
783
917
if(debug){
784
918
fprintf(stderr, "Ignoring plugin dir entry \"%s\""
785
919
" with bad type or mode\n", filename);
790
924
791
925
plugin *p = getplugin(dirst->d_name);
792
926
if(p == NULL){
793
perror("getplugin");
927
error(0, errno, "getplugin");
794
928
free(filename);
795
929
continue;
796
930
}
808
942
if(g != NULL){
809
943
for(char **a = g->argv + 1; *a != NULL; a++){
810
944
if(not add_argument(p, *a)){
811
perror("add_argument");
945
error(0, errno, "add_argument");
812
946
}
813
947
}
814
948
/* Add global environment variables */
815
949
for(char **e = g->environ; *e != NULL; e++){
816
950
if(not add_environment(p, *e, false)){
817
perror("add_environment");
951
error(0, errno, "add_environment");
818
952
}
819
953
}
820
954
}
825
959
if(p->environ[0] != NULL){
826
960
for(char **e = environ; *e != NULL; e++){
827
961
if(not add_environment(p, *e, false)){
828
perror("add_environment");
962
error(0, errno, "add_environment");
829
963
}
830
964
}
831
965
}
832
966
833
967
int pipefd[2];
834
ret = pipe(pipefd);
968
ret = (int)TEMP_FAILURE_RETRY(pipe(pipefd));
835
969
if(ret == -1){
836
perror("pipe");
837
exitstatus = EXIT_FAILURE;
970
error(0, errno, "pipe");
971
exitstatus = EX_OSERR;
838
972
goto fallback;
839
973
}
840
974
/* Ask OS to automatic close the pipe on exec */
841
975
ret = set_cloexec_flag(pipefd[0]);
842
976
if(ret < 0){
843
perror("set_cloexec_flag");
844
exitstatus = EXIT_FAILURE;
977
error(0, errno, "set_cloexec_flag");
978
exitstatus = EX_OSERR;
845
979
goto fallback;
846
980
}
847
981
ret = set_cloexec_flag(pipefd[1]);
848
982
if(ret < 0){
849
perror("set_cloexec_flag");
850
exitstatus = EXIT_FAILURE;
983
error(0, errno, "set_cloexec_flag");
984
exitstatus = EX_OSERR;
851
985
goto fallback;
852
986
}
853
987
/* Block SIGCHLD until process is safely in process list */
854
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
988
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_BLOCK,
989
&sigchld_action.sa_mask,
990
NULL));
855
991
if(ret < 0){
856
perror("sigprocmask");
857
exitstatus = EXIT_FAILURE;
992
error(0, errno, "sigprocmask");
993
exitstatus = EX_OSERR;
858
994
goto fallback;
859
995
}
860
996
/* Starting a new process to be watched */
861
pid_t pid = fork();
997
pid_t pid;
998
do {
999
pid = fork();
1000
} while(pid == -1 and errno == EINTR);
862
1001
if(pid == -1){
863
perror("fork");
864
exitstatus = EXIT_FAILURE;
1002
error(0, errno, "fork");
1003
exitstatus = EX_OSERR;
865
1004
goto fallback;
866
1005
}
867
1006
if(pid == 0){
868
1007
/* this is the child process */
869
1008
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
870
1009
if(ret < 0){
871
perror("sigaction");
872
_exit(EXIT_FAILURE);
1010
error(0, errno, "sigaction");
1011
_exit(EX_OSERR);
873
1012
}
874
1013
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
875
1014
if(ret < 0){
876
perror("sigprocmask");
877
_exit(EXIT_FAILURE);
1015
error(0, errno, "sigprocmask");
1016
_exit(EX_OSERR);
878
1017
}
879
1018
880
1019
ret = dup2(pipefd[1], STDOUT_FILENO); /* replace our stdout */
881
1020
if(ret == -1){
882
perror("dup2");
883
_exit(EXIT_FAILURE);
1021
error(0, errno, "dup2");
1022
_exit(EX_OSERR);
884
1023
}
885
1024
886
1025
if(dirfd(dir) < 0){
890
1029
}
891
1030
if(p->environ[0] == NULL){
892
1031
if(execv(filename, p->argv) < 0){
893
perror("execv");
894
_exit(EXIT_FAILURE);
1032
error(0, errno, "execv for %s", filename);
1033
_exit(EX_OSERR);
895
1034
}
896
1035
} else {
897
1036
if(execve(filename, p->argv, p->environ) < 0){
898
perror("execve");
899
_exit(EXIT_FAILURE);
1037
error(0, errno, "execve for %s", filename);
1038
_exit(EX_OSERR);
900
1039
}
901
1040
}
902
1041
/* no return */
903
1042
}
904
1043
/* Parent process */
905
close(pipefd[1]); /* Close unused write end of pipe */
1044
TEMP_FAILURE_RETRY(close(pipefd[1])); /* Close unused write end of
1045
pipe */
906
1046
free(filename);
907
1047
plugin *new_plugin = getplugin(dirst->d_name);
908
1048
if(new_plugin == NULL){
909
perror("getplugin");
910
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1049
error(0, errno, "getplugin");
1050
ret = (int)(TEMP_FAILURE_RETRY
1051
(sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1052
NULL)));
911
1053
if(ret < 0){
912
perror("sigprocmask");
1054
error(0, errno, "sigprocmask");
913
1055
}
914
exitstatus = EXIT_FAILURE;
1056
exitstatus = EX_OSERR;
915
1057
goto fallback;
916
1058
}
917
1059
920
1062
921
1063
/* Unblock SIGCHLD so signal handler can be run if this process
922
1064
has already completed */
923
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask, NULL);
1065
ret = (int)TEMP_FAILURE_RETRY(sigprocmask(SIG_UNBLOCK,
1066
&sigchld_action.sa_mask,
1067
NULL));
924
1068
if(ret < 0){
925
perror("sigprocmask");
926
exitstatus = EXIT_FAILURE;
1069
error(0, errno, "sigprocmask");
1070
exitstatus = EX_OSERR;
927
1071
goto fallback;
928
1072
}
929
1073
930
FD_SET(new_plugin->fd, &rfds_all);
1074
FD_SET(new_plugin->fd, &rfds_all); /* Spurious warning from
1075
-Wconversion */
931
1076
932
1077
if(maxfd < new_plugin->fd){
933
1078
maxfd = new_plugin->fd;
934
1079
}
935
1080
}
936
1081
937
closedir(dir);
1082
TEMP_FAILURE_RETRY(closedir(dir));
938
1083
dir = NULL;
1084
free_plugin(getplugin(NULL));
939
1085
940
1086
for(plugin *p = plugin_list; p != NULL; p = p->next){
941
1087
if(p->pid != 0){
952
1098
while(plugin_list){
953
1099
fd_set rfds = rfds_all;
954
1100
int select_ret = select(maxfd+1, &rfds, NULL, NULL, NULL);
955
if(select_ret == -1){
956
perror("select");
957
exitstatus = EXIT_FAILURE;
1101
if(select_ret == -1 and errno != EINTR){
1102
error(0, errno, "select");
1103
exitstatus = EX_OSERR;
958
1104
goto fallback;
959
1105
}
960
1106
/* OK, now either a process completed, or something can be read
966
1112
if(not WIFEXITED(proc->status)
967
1113
or WEXITSTATUS(proc->status) != 0){
968
1114
/* Bad exit by plugin */
969
1115
970
1116
if(debug){
971
1117
if(WIFEXITED(proc->status)){
972
1118
fprintf(stderr, "Plugin %s [%" PRIdMAX "] exited with"
975
1121
WEXITSTATUS(proc->status));
976
1122
} else if(WIFSIGNALED(proc->status)){
977
1123
fprintf(stderr, "Plugin %s [%" PRIdMAX "] killed by"
978
" signal %d\n", proc->name,
1124
" signal %d: %s\n", proc->name,
979
1125
(intmax_t) (proc->pid),
980
WTERMSIG(proc->status));
1126
WTERMSIG(proc->status),
1127
strsignal(WTERMSIG(proc->status)));
981
1128
} else if(WCOREDUMP(proc->status)){
982
1129
fprintf(stderr, "Plugin %s [%" PRIdMAX "] dumped"
983
1130
" core\n", proc->name, (intmax_t) (proc->pid));
985
1132
}
986
1133
987
1134
/* Remove the plugin */
988
FD_CLR(proc->fd, &rfds_all);
989
1135
FD_CLR(proc->fd, &rfds_all); /* Spurious warning from
1136
-Wconversion */
1137
990
1138
/* Block signal while modifying process_list */
991
ret = sigprocmask(SIG_BLOCK, &sigchld_action.sa_mask, NULL);
1139
ret = (int)TEMP_FAILURE_RETRY(sigprocmask
1140
(SIG_BLOCK,
1141
&sigchld_action.sa_mask,
1142
NULL));
992
1143
if(ret < 0){
993
perror("sigprocmask");
994
exitstatus = EXIT_FAILURE;
1144
error(0, errno, "sigprocmask");
1145
exitstatus = EX_OSERR;
995
1146
goto fallback;
996
1147
}
997
1148
1000
1151
proc = next_plugin;
1001
1152
1002
1153
/* We are done modifying process list, so unblock signal */
1003
ret = sigprocmask(SIG_UNBLOCK, &sigchld_action.sa_mask,
1004
NULL);
1154
ret = (int)(TEMP_FAILURE_RETRY
1155
(sigprocmask(SIG_UNBLOCK,
1156
&sigchld_action.sa_mask, NULL)));
1005
1157
if(ret < 0){
1006
perror("sigprocmask");
1007
exitstatus = EXIT_FAILURE;
1158
error(0, errno, "sigprocmask");
1159
exitstatus = EX_OSERR;
1008
1160
goto fallback;
1009
1161
}
1010
1162
1020
1172
bool bret = print_out_password(proc->buffer,
1021
1173
proc->buffer_length);
1022
1174
if(not bret){
1023
perror("print_out_password");
1024
exitstatus = EXIT_FAILURE;
1175
error(0, errno, "print_out_password");
1176
exitstatus = EX_IOERR;
1025
1177
}
1026
1178
goto fallback;
1027
1179
}
1028
1180
1029
1181
/* This process has not completed. Does it have any output? */
1030
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){
1182
if(proc->eof or not FD_ISSET(proc->fd, &rfds)){ /* Spurious
1183
warning from
1184
-Wconversion */
1031
1185
/* This process had nothing to say at this time */
1032
1186
proc = proc->next;
1033
1187
continue;
1037
1191
proc->buffer = realloc(proc->buffer, proc->buffer_size
1038
1192
+ (size_t) BUFFER_SIZE);
1039
1193
if(proc->buffer == NULL){
1040
perror("malloc");
1041
exitstatus = EXIT_FAILURE;
1194
error(0, errno, "malloc");
1195
exitstatus = EX_OSERR;
1042
1196
goto fallback;
1043
1197
}
1044
1198
proc->buffer_size += BUFFER_SIZE;
1045
1199
}
1046
1200
/* Read from the process */
1047
sret = read(proc->fd, proc->buffer + proc->buffer_length,
1048
BUFFER_SIZE);
1201
sret = TEMP_FAILURE_RETRY(read(proc->fd,
1202
proc->buffer
1203
+ proc->buffer_length,
1204
BUFFER_SIZE));
1049
1205
if(sret < 0){
1050
1206
/* Read error from this process; ignore the error */
1051
1207
proc = proc->next;
1059
1215
}
1060
1216
}
1061
1217
}
1062
1063
1218
1219
1064
1220
fallback:
1065
1221
1066
if(plugin_list == NULL or exitstatus != EXIT_SUCCESS){
1222
if(plugin_list == NULL or (exitstatus != EXIT_SUCCESS
1223
and exitstatus != EX_OK)){
1067
1224
/* Fallback if all plugins failed, none are found or an error
1068
1225
occured */
1069
1226
bool bret;
1077
1234
}
1078
1235
bret = print_out_password(passwordbuffer, len);
1079
1236
if(not bret){
1080
perror("print_out_password");
1081
exitstatus = EXIT_FAILURE;
1237
error(0, errno, "print_out_password");
1238
exitstatus = EX_IOERR;
1082
1239
}
1083
1240
}
1084
1241
1085
1242
/* Restore old signal handler */
1086
1243
ret = sigaction(SIGCHLD, &old_sigchld_action, NULL);
1087
1244
if(ret == -1){
1088
perror("sigaction");
1089
exitstatus = EXIT_FAILURE;
1245
error(0, errno, "sigaction");
1246
exitstatus = EX_OSERR;
1090
1247
}
1091
1248
1092
1249
if(custom_argv != NULL){
1107
1264
ret = kill(p->pid, SIGTERM);
1108
1265
if(ret == -1 and errno != ESRCH){
1109
1266
/* Set-uid proccesses might not get closed */
1110
perror("kill");
1267
error(0, errno, "kill");
1111
1268
}
1112
1269
}
1113
1270
}
1114
1271
1115
1272
/* Wait for any remaining child processes to terminate */
1116
do{
1273
do {
1117
1274
ret = wait(NULL);
1118
1275
} while(ret >= 0);
1119
1276
if(errno != ECHILD){
1120
perror("wait");
1277
error(0, errno, "wait");
1121
1278
}
1122
1279
1123
1280
free_plugin_list();
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0