To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 690
- compare with another revision
- download diff
- download tarball
- view history from revision 690
- Committer: Teddy Hogeborn
- Date: 2014-06-07 20:29:36 UTC
- Revision ID: teddy@recompile.se-20140607202936-crh5fxrdd804oora
Fix typo in code comment.
* debian/mandos.postinst: Fix typo in comment.
* debian/mandos.postinst: Fix typo in comment.
- files removed:
- plugin-helpers
- files modified:
- DBUS-API
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2015 Teddy Hogeborn
13
* Copyright © 2008-2015 Björn Påhlsson
12
* Copyright © 2008-2014 Teddy Hogeborn
13
* Copyright © 2008-2014 Björn Påhlsson
14
14
*
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
33
#ifndef _LARGEFILE_SOURCE
34
34
#define _LARGEFILE_SOURCE
35
#endif /* not _LARGEFILE_SOURCE */
35
#endif
36
36
#ifndef _FILE_OFFSET_BITS
37
37
#define _FILE_OFFSET_BITS 64
38
#endif /* not _FILE_OFFSET_BITS */
38
#endif
39
39
40
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
41
42
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror() */
43
stdout, ferror(), remove() */
44
44
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
45
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
57
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
58
inet_pton(), connect(),
59
59
getnameinfo() */
60
#include <fcntl.h> /* open(), unlinkat() */
60
#include <fcntl.h> /* open() */
61
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
62
62
*/
63
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
73
73
*/
74
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
75
getuid(), getgid(), seteuid(),
76
setgid(), pause(), _exit(),
77
unlinkat() */
76
setgid(), pause(), _exit() */
78
77
#include <arpa/inet.h> /* inet_pton(), htons() */
79
78
#include <iso646.h> /* not, or, and */
80
79
#include <argp.h> /* struct argp_option, error_t, struct
142
141
static const char sys_class_net[] = "/sys/class/net";
143
142
char *connect_to = NULL;
144
143
const char *hookdir = HOOKDIR;
145
int hookdir_fd = -1;
146
144
uid_t uid = 65534;
147
145
gid_t gid = 65534;
148
146
234
232
.af = af };
235
233
if(new_server->ip == NULL){
236
234
perror_plus("strdup");
237
free(new_server);
238
235
return false;
239
236
}
240
237
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
241
238
if(ret == -1){
242
239
perror_plus("clock_gettime");
243
#ifdef __GNUC__
244
#pragma GCC diagnostic push
245
#pragma GCC diagnostic ignored "-Wcast-qual"
246
#endif
247
free((char *)(new_server->ip));
248
#ifdef __GNUC__
249
#pragma GCC diagnostic pop
250
#endif
251
free(new_server);
252
240
return false;
253
241
}
254
242
/* Special case of first server */
493
481
return plaintext_length;
494
482
}
495
483
496
__attribute__((warn_unused_result, const))
497
static const char *safe_string(const char *str){
498
if(str == NULL)
499
return "(unknown)";
500
return str;
501
}
502
503
484
__attribute__((warn_unused_result))
504
485
static const char *safer_gnutls_strerror(int value){
505
486
const char *ret = gnutls_strerror(value);
506
return safe_string(ret);
487
if(ret == NULL)
488
ret = "(unknown)";
489
return ret;
507
490
}
508
491
509
492
/* GnuTLS log function callback */
518
501
const char *seckeyfilename,
519
502
mandos_context *mc){
520
503
int ret;
521
unsigned int uret;
522
504
523
505
if(debug){
524
506
fprintf_plus(stderr, "Initializing GnuTLS\n");
575
557
safer_gnutls_strerror(ret));
576
558
goto globalfail;
577
559
}
578
if(mc->dh_bits == 0){
579
/* Find out the optimal number of DH bits */
580
/* Try to read the private key file */
581
gnutls_datum_t buffer = { .data = NULL, .size = 0 };
582
{
583
int secfile = open(seckeyfilename, O_RDONLY);
584
size_t buffer_capacity = 0;
585
while(true){
586
buffer_capacity = incbuffer((char **)&buffer.data,
587
(size_t)buffer.size,
588
(size_t)buffer_capacity);
589
if(buffer_capacity == 0){
590
perror_plus("incbuffer");
591
free(buffer.data);
592
buffer.data = NULL;
593
break;
594
}
595
ssize_t bytes_read = read(secfile, buffer.data + buffer.size,
596
BUFFER_SIZE);
597
/* EOF */
598
if(bytes_read == 0){
599
break;
600
}
601
/* check bytes_read for failure */
602
if(bytes_read < 0){
603
perror_plus("read");
604
free(buffer.data);
605
buffer.data = NULL;
606
break;
607
}
608
buffer.size += (unsigned int)bytes_read;
609
}
610
close(secfile);
611
}
612
/* If successful, use buffer to parse private key */
613
gnutls_sec_param_t sec_param = GNUTLS_SEC_PARAM_ULTRA;
614
if(buffer.data != NULL){
615
{
616
gnutls_openpgp_privkey_t privkey = NULL;
617
ret = gnutls_openpgp_privkey_init(&privkey);
618
if(ret != GNUTLS_E_SUCCESS){
619
fprintf_plus(stderr, "Error initializing OpenPGP key"
620
" structure: %s", safer_gnutls_strerror(ret));
621
free(buffer.data);
622
buffer.data = NULL;
623
} else {
624
ret = gnutls_openpgp_privkey_import(privkey, &buffer,
625
GNUTLS_OPENPGP_FMT_BASE64,
626
"", 0);
627
if(ret != GNUTLS_E_SUCCESS){
628
fprintf_plus(stderr, "Error importing OpenPGP key : %s",
629
safer_gnutls_strerror(ret));
630
privkey = NULL;
631
}
632
free(buffer.data);
633
buffer.data = NULL;
634
if(privkey != NULL){
635
/* Use private key to suggest an appropriate sec_param */
636
sec_param = gnutls_openpgp_privkey_sec_param(privkey);
637
gnutls_openpgp_privkey_deinit(privkey);
638
if(debug){
639
fprintf_plus(stderr, "This OpenPGP key implies using a"
640
" GnuTLS security parameter \"%s\".\n",
641
safe_string(gnutls_sec_param_get_name
642
(sec_param)));
643
}
644
}
645
}
646
}
647
if(sec_param == GNUTLS_SEC_PARAM_UNKNOWN){
648
/* Err on the side of caution */
649
sec_param = GNUTLS_SEC_PARAM_ULTRA;
650
if(debug){
651
fprintf_plus(stderr, "Falling back to security parameter"
652
" \"%s\"\n",
653
safe_string(gnutls_sec_param_get_name
654
(sec_param)));
655
}
656
}
657
}
658
uret = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, sec_param);
659
if(uret != 0){
660
mc->dh_bits = uret;
661
if(debug){
662
fprintf_plus(stderr, "A \"%s\" GnuTLS security parameter"
663
" implies %u DH bits; using that.\n",
664
safe_string(gnutls_sec_param_get_name
665
(sec_param)),
666
mc->dh_bits);
667
}
668
} else {
669
fprintf_plus(stderr, "Failed to get implied number of DH"
670
" bits for security parameter \"%s\"): %s\n",
671
safe_string(gnutls_sec_param_get_name(sec_param)),
672
safer_gnutls_strerror(ret));
673
goto globalfail;
674
}
675
} else if(debug){
676
fprintf_plus(stderr, "DH bits explicitly set to %u\n",
677
mc->dh_bits);
678
}
679
560
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
680
561
if(ret != GNUTLS_E_SUCCESS){
681
fprintf_plus(stderr, "Error in GnuTLS prime generation (%u bits):"
682
" %s\n", mc->dh_bits, safer_gnutls_strerror(ret));
562
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
563
safer_gnutls_strerror(ret));
683
564
goto globalfail;
684
565
}
685
566
757
638
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
758
639
__attribute__((unused)) const char *txt){}
759
640
760
/* Set effective uid to 0, return errno */
761
__attribute__((warn_unused_result))
762
error_t raise_privileges(void){
763
error_t old_errno = errno;
764
error_t ret_errno = 0;
765
if(seteuid(0) == -1){
766
ret_errno = errno;
767
}
768
errno = old_errno;
769
return ret_errno;
770
}
771
772
/* Set effective and real user ID to 0. Return errno. */
773
__attribute__((warn_unused_result))
774
error_t raise_privileges_permanently(void){
775
error_t old_errno = errno;
776
error_t ret_errno = raise_privileges();
777
if(ret_errno != 0){
778
errno = old_errno;
779
return ret_errno;
780
}
781
if(setuid(0) == -1){
782
ret_errno = errno;
783
}
784
errno = old_errno;
785
return ret_errno;
786
}
787
788
/* Set effective user ID to unprivileged saved user ID */
789
__attribute__((warn_unused_result))
790
error_t lower_privileges(void){
791
error_t old_errno = errno;
792
error_t ret_errno = 0;
793
if(seteuid(uid) == -1){
794
ret_errno = errno;
795
}
796
errno = old_errno;
797
return ret_errno;
798
}
799
800
/* Lower privileges permanently */
801
__attribute__((warn_unused_result))
802
error_t lower_privileges_permanently(void){
803
error_t old_errno = errno;
804
error_t ret_errno = 0;
805
if(setuid(uid) == -1){
806
ret_errno = errno;
807
}
808
errno = old_errno;
809
return ret_errno;
810
}
811
812
/* Helper function to add_local_route() and delete_local_route() */
813
__attribute__((nonnull, warn_unused_result))
814
static bool add_delete_local_route(const bool add,
815
const char *address,
816
AvahiIfIndex if_index){
817
int ret;
818
char helper[] = "mandos-client-iprouteadddel";
819
char add_arg[] = "add";
820
char delete_arg[] = "delete";
821
char debug_flag[] = "--debug";
822
char *pluginhelperdir = getenv("MANDOSPLUGINHELPERDIR");
823
if(pluginhelperdir == NULL){
824
if(debug){
825
fprintf_plus(stderr, "MANDOSPLUGINHELPERDIR environment"
826
" variable not set; cannot run helper\n");
827
}
828
return false;
829
}
830
831
char interface[IF_NAMESIZE];
832
if(if_indextoname((unsigned int)if_index, interface) == NULL){
833
perror_plus("if_indextoname");
834
return false;
835
}
836
837
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
838
if(devnull == -1){
839
perror_plus("open(\"/dev/null\", O_RDONLY)");
840
return false;
841
}
842
pid_t pid = fork();
843
if(pid == 0){
844
/* Child */
845
/* Raise privileges */
846
errno = raise_privileges_permanently();
847
if(errno != 0){
848
perror_plus("Failed to raise privileges");
849
/* _exit(EX_NOPERM); */
850
} else {
851
/* Set group */
852
errno = 0;
853
ret = setgid(0);
854
if(ret == -1){
855
perror_plus("setgid");
856
_exit(EX_NOPERM);
857
}
858
/* Reset supplementary groups */
859
errno = 0;
860
ret = setgroups(0, NULL);
861
if(ret == -1){
862
perror_plus("setgroups");
863
_exit(EX_NOPERM);
864
}
865
}
866
ret = dup2(devnull, STDIN_FILENO);
867
if(ret == -1){
868
perror_plus("dup2(devnull, STDIN_FILENO)");
869
_exit(EX_OSERR);
870
}
871
ret = (int)TEMP_FAILURE_RETRY(close(devnull));
872
if(ret == -1){
873
perror_plus("close");
874
_exit(EX_OSERR);
875
}
876
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
877
if(ret == -1){
878
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
879
_exit(EX_OSERR);
880
}
881
int helperdir_fd = (int)TEMP_FAILURE_RETRY(open(pluginhelperdir,
882
O_RDONLY
883
| O_DIRECTORY
884
| O_PATH
885
| O_CLOEXEC));
886
if(helperdir_fd == -1){
887
perror_plus("open");
888
_exit(EX_UNAVAILABLE);
889
}
890
int helper_fd = (int)TEMP_FAILURE_RETRY(openat(helperdir_fd,
891
helper, O_RDONLY));
892
if(helper_fd == -1){
893
perror_plus("openat");
894
_exit(EX_UNAVAILABLE);
895
}
896
TEMP_FAILURE_RETRY(close(helperdir_fd));
897
#ifdef __GNUC__
898
#pragma GCC diagnostic push
899
#pragma GCC diagnostic ignored "-Wcast-qual"
900
#endif
901
if(fexecve(helper_fd, (char *const [])
902
{ helper, add ? add_arg : delete_arg, (char *)address,
903
interface, debug ? debug_flag : NULL, NULL },
904
environ) == -1){
905
#ifdef __GNUC__
906
#pragma GCC diagnostic pop
907
#endif
908
perror_plus("fexecve");
909
_exit(EXIT_FAILURE);
910
}
911
}
912
if(pid == -1){
913
perror_plus("fork");
914
return false;
915
}
916
int status;
917
pid_t pret = -1;
918
errno = 0;
919
do {
920
pret = waitpid(pid, &status, 0);
921
if(pret == -1 and errno == EINTR and quit_now){
922
int errno_raising = 0;
923
if((errno = raise_privileges()) != 0){
924
errno_raising = errno;
925
perror_plus("Failed to raise privileges in order to"
926
" kill helper program");
927
}
928
if(kill(pid, SIGTERM) == -1){
929
perror_plus("kill");
930
}
931
if((errno_raising == 0) and (errno = lower_privileges()) != 0){
932
perror_plus("Failed to lower privileges after killing"
933
" helper program");
934
}
935
return false;
936
}
937
} while(pret == -1 and errno == EINTR);
938
if(pret == -1){
939
perror_plus("waitpid");
940
return false;
941
}
942
if(WIFEXITED(status)){
943
if(WEXITSTATUS(status) != 0){
944
fprintf_plus(stderr, "Error: iprouteadddel exited"
945
" with status %d\n", WEXITSTATUS(status));
946
return false;
947
}
948
return true;
949
}
950
if(WIFSIGNALED(status)){
951
fprintf_plus(stderr, "Error: iprouteadddel died by"
952
" signal %d\n", WTERMSIG(status));
953
return false;
954
}
955
fprintf_plus(stderr, "Error: iprouteadddel crashed\n");
956
return false;
957
}
958
959
__attribute__((nonnull, warn_unused_result))
960
static bool add_local_route(const char *address,
961
AvahiIfIndex if_index){
962
if(debug){
963
fprintf_plus(stderr, "Adding route to %s\n", address);
964
}
965
return add_delete_local_route(true, address, if_index);
966
}
967
968
__attribute__((nonnull, warn_unused_result))
969
static bool delete_local_route(const char *address,
970
AvahiIfIndex if_index){
971
if(debug){
972
fprintf_plus(stderr, "Removing route to %s\n", address);
973
}
974
return add_delete_local_route(false, address, if_index);
975
}
976
977
641
/* Called when a Mandos server is found */
978
642
__attribute__((nonnull, warn_unused_result))
979
643
static int start_mandos_communication(const char *ip, in_port_t port,
990
654
int retval = -1;
991
655
gnutls_session_t session;
992
656
int pf; /* Protocol family */
993
bool route_added = false;
994
657
995
658
errno = 0;
996
659
1054
717
PRIuMAX "\n", ip, (uintmax_t)port);
1055
718
}
1056
719
1057
tcp_sd = socket(pf, SOCK_STREAM | SOCK_CLOEXEC, 0);
720
tcp_sd = socket(pf, SOCK_STREAM, 0);
1058
721
if(tcp_sd < 0){
1059
722
int e = errno;
1060
723
perror_plus("socket");
1149
812
goto mandos_end;
1150
813
}
1151
814
1152
while(true){
1153
if(af == AF_INET6){
1154
ret = connect(tcp_sd, (struct sockaddr *)&to,
1155
sizeof(struct sockaddr_in6));
1156
} else {
1157
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
1158
sizeof(struct sockaddr_in));
1159
}
1160
if(ret < 0){
1161
if(errno == ENETUNREACH
1162
and if_index != AVAHI_IF_UNSPEC
1163
and connect_to == NULL
1164
and not route_added and
1165
((af == AF_INET6 and not
1166
IN6_IS_ADDR_LINKLOCAL(&(((struct sockaddr_in6 *)
1167
&to)->sin6_addr)))
1168
or (af == AF_INET and
1169
/* Not a a IPv4LL address */
1170
(ntohl(((struct sockaddr_in *)&to)->sin_addr.s_addr)
1171
& 0xFFFF0000L) != 0xA9FE0000L))){
1172
/* Work around Avahi bug - Avahi does not announce link-local
1173
addresses if it has a global address, so local hosts with
1174
*only* a link-local address (e.g. Mandos clients) cannot
1175
connect to a Mandos server announced by Avahi on a server
1176
host with a global address. Work around this by retrying
1177
with an explicit route added with the server's address.
1178
1179
Avahi bug reference:
1180
http://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1181
https://bugs.debian.org/587961
1182
*/
1183
if(debug){
1184
fprintf_plus(stderr, "Mandos server unreachable, trying"
1185
" direct route\n");
1186
}
1187
int e = errno;
1188
route_added = add_local_route(ip, if_index);
1189
if(route_added){
1190
continue;
1191
}
1192
errno = e;
1193
}
1194
if(errno != ECONNREFUSED or debug){
1195
int e = errno;
1196
perror_plus("connect");
1197
errno = e;
1198
}
1199
goto mandos_end;
1200
}
1201
1202
if(quit_now){
1203
errno = EINTR;
1204
goto mandos_end;
1205
}
1206
break;
815
if(af == AF_INET6){
816
ret = connect(tcp_sd, (struct sockaddr *)&to,
817
sizeof(struct sockaddr_in6));
818
} else {
819
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
820
sizeof(struct sockaddr_in));
821
}
822
if(ret < 0){
823
if((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
824
int e = errno;
825
perror_plus("connect");
826
errno = e;
827
}
828
goto mandos_end;
829
}
830
831
if(quit_now){
832
errno = EINTR;
833
goto mandos_end;
1207
834
}
1208
835
1209
836
const char *out = mandos_protocol_version;
1392
1019
1393
1020
mandos_end:
1394
1021
{
1395
if(route_added){
1396
if(not delete_local_route(ip, if_index)){
1397
fprintf_plus(stderr, "Failed to delete local route to %s on"
1398
" interface %d", ip, if_index);
1399
}
1400
}
1401
1022
int e = errno;
1402
1023
free(decrypted_buffer);
1403
1024
free(buffer);
1443
1064
timed out */
1444
1065
1445
1066
if(quit_now){
1446
avahi_s_service_resolver_free(r);
1447
1067
return;
1448
1068
}
1449
1069
1725
1345
return 0;
1726
1346
}
1727
1347
1728
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1348
char *fullname = NULL;
1349
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1350
if(ret < 0){
1351
perror_plus("asprintf");
1352
return 0;
1353
}
1354
1355
ret = stat(fullname, &st);
1729
1356
if(ret == -1){
1730
1357
if(debug){
1731
1358
perror_plus("Could not stat hook");
1732
1359
}
1733
1360
return 0;
1734
1361
}
1362
free(fullname);
1735
1363
if(not (S_ISREG(st.st_mode))){
1736
1364
/* Not a regular file */
1737
1365
if(debug){
1829
1457
}
1830
1458
}
1831
1459
1460
/* Set effective uid to 0, return errno */
1461
__attribute__((warn_unused_result))
1462
error_t raise_privileges(void){
1463
error_t old_errno = errno;
1464
error_t ret_errno = 0;
1465
if(seteuid(0) == -1){
1466
ret_errno = errno;
1467
perror_plus("seteuid");
1468
}
1469
errno = old_errno;
1470
return ret_errno;
1471
}
1472
1473
/* Set effective and real user ID to 0. Return errno. */
1474
__attribute__((warn_unused_result))
1475
error_t raise_privileges_permanently(void){
1476
error_t old_errno = errno;
1477
error_t ret_errno = raise_privileges();
1478
if(ret_errno != 0){
1479
errno = old_errno;
1480
return ret_errno;
1481
}
1482
if(setuid(0) == -1){
1483
ret_errno = errno;
1484
perror_plus("seteuid");
1485
}
1486
errno = old_errno;
1487
return ret_errno;
1488
}
1489
1490
/* Set effective user ID to unprivileged saved user ID */
1491
__attribute__((warn_unused_result))
1492
error_t lower_privileges(void){
1493
error_t old_errno = errno;
1494
error_t ret_errno = 0;
1495
if(seteuid(uid) == -1){
1496
ret_errno = errno;
1497
perror_plus("seteuid");
1498
}
1499
errno = old_errno;
1500
return ret_errno;
1501
}
1502
1503
/* Lower privileges permanently */
1504
__attribute__((warn_unused_result))
1505
error_t lower_privileges_permanently(void){
1506
error_t old_errno = errno;
1507
error_t ret_errno = 0;
1508
if(setuid(uid) == -1){
1509
ret_errno = errno;
1510
perror_plus("setuid");
1511
}
1512
errno = old_errno;
1513
return ret_errno;
1514
}
1515
1832
1516
__attribute__((nonnull))
1833
1517
void run_network_hooks(const char *mode, const char *interface,
1834
1518
const float delay){
1835
struct dirent **direntries = NULL;
1836
if(hookdir_fd == -1){
1837
hookdir_fd = open(hookdir, O_RDONLY | O_DIRECTORY | O_PATH
1838
| O_CLOEXEC);
1839
if(hookdir_fd == -1){
1840
if(errno == ENOENT){
1841
if(debug){
1842
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1843
" found\n", hookdir);
1844
}
1845
} else {
1846
perror_plus("open");
1847
}
1848
return;
1849
}
1850
}
1851
#ifdef __GLIBC__
1852
#if __GLIBC_PREREQ(2, 15)
1853
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1854
runnable_hook, alphasort);
1855
#else /* not __GLIBC_PREREQ(2, 15) */
1856
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1857
alphasort);
1858
#endif /* not __GLIBC_PREREQ(2, 15) */
1859
#else /* not __GLIBC__ */
1860
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1861
alphasort);
1862
#endif /* not __GLIBC__ */
1519
struct dirent **direntries;
1520
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1521
alphasort);
1863
1522
if(numhooks == -1){
1864
perror_plus("scandir");
1865
return;
1866
}
1867
struct dirent *direntry;
1868
int ret;
1869
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1870
if(devnull == -1){
1871
perror_plus("open(\"/dev/null\", O_RDONLY)");
1872
return;
1873
}
1874
for(int i = 0; i < numhooks; i++){
1875
direntry = direntries[i];
1876
if(debug){
1877
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1878
direntry->d_name);
1523
if(errno == ENOENT){
1524
if(debug){
1525
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1526
" found\n", hookdir);
1527
}
1528
} else {
1529
perror_plus("scandir");
1879
1530
}
1880
pid_t hook_pid = fork();
1881
if(hook_pid == 0){
1882
/* Child */
1883
/* Raise privileges */
1884
errno = raise_privileges_permanently();
1885
if(errno != 0){
1886
perror_plus("Failed to raise privileges");
1887
_exit(EX_NOPERM);
1888
}
1889
/* Set group */
1890
errno = 0;
1891
ret = setgid(0);
1892
if(ret == -1){
1893
perror_plus("setgid");
1894
_exit(EX_NOPERM);
1895
}
1896
/* Reset supplementary groups */
1897
errno = 0;
1898
ret = setgroups(0, NULL);
1899
if(ret == -1){
1900
perror_plus("setgroups");
1901
_exit(EX_NOPERM);
1902
}
1903
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1904
if(ret == -1){
1905
perror_plus("setenv");
1906
_exit(EX_OSERR);
1907
}
1908
ret = setenv("DEVICE", interface, 1);
1909
if(ret == -1){
1910
perror_plus("setenv");
1911
_exit(EX_OSERR);
1912
}
1913
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1914
if(ret == -1){
1915
perror_plus("setenv");
1916
_exit(EX_OSERR);
1917
}
1918
ret = setenv("MODE", mode, 1);
1919
if(ret == -1){
1920
perror_plus("setenv");
1921
_exit(EX_OSERR);
1922
}
1923
char *delaystring;
1924
ret = asprintf(&delaystring, "%f", (double)delay);
1925
if(ret == -1){
1531
} else {
1532
struct dirent *direntry;
1533
int ret;
1534
int devnull = open("/dev/null", O_RDONLY);
1535
for(int i = 0; i < numhooks; i++){
1536
direntry = direntries[i];
1537
char *fullname = NULL;
1538
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1539
if(ret < 0){
1926
1540
perror_plus("asprintf");
1927
_exit(EX_OSERR);
1928
}
1929
ret = setenv("DELAY", delaystring, 1);
1930
if(ret == -1){
1541
continue;
1542
}
1543
if(debug){
1544
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1545
direntry->d_name);
1546
}
1547
pid_t hook_pid = fork();
1548
if(hook_pid == 0){
1549
/* Child */
1550
/* Raise privileges */
1551
if(raise_privileges_permanently() != 0){
1552
perror_plus("Failed to raise privileges");
1553
_exit(EX_NOPERM);
1554
}
1555
/* Set group */
1556
errno = 0;
1557
ret = setgid(0);
1558
if(ret == -1){
1559
perror_plus("setgid");
1560
_exit(EX_NOPERM);
1561
}
1562
/* Reset supplementary groups */
1563
errno = 0;
1564
ret = setgroups(0, NULL);
1565
if(ret == -1){
1566
perror_plus("setgroups");
1567
_exit(EX_NOPERM);
1568
}
1569
ret = dup2(devnull, STDIN_FILENO);
1570
if(ret == -1){
1571
perror_plus("dup2(devnull, STDIN_FILENO)");
1572
_exit(EX_OSERR);
1573
}
1574
ret = close(devnull);
1575
if(ret == -1){
1576
perror_plus("close");
1577
_exit(EX_OSERR);
1578
}
1579
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1580
if(ret == -1){
1581
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1582
_exit(EX_OSERR);
1583
}
1584
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1585
if(ret == -1){
1586
perror_plus("setenv");
1587
_exit(EX_OSERR);
1588
}
1589
ret = setenv("DEVICE", interface, 1);
1590
if(ret == -1){
1591
perror_plus("setenv");
1592
_exit(EX_OSERR);
1593
}
1594
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1595
if(ret == -1){
1596
perror_plus("setenv");
1597
_exit(EX_OSERR);
1598
}
1599
ret = setenv("MODE", mode, 1);
1600
if(ret == -1){
1601
perror_plus("setenv");
1602
_exit(EX_OSERR);
1603
}
1604
char *delaystring;
1605
ret = asprintf(&delaystring, "%f", (double)delay);
1606
if(ret == -1){
1607
perror_plus("asprintf");
1608
_exit(EX_OSERR);
1609
}
1610
ret = setenv("DELAY", delaystring, 1);
1611
if(ret == -1){
1612
free(delaystring);
1613
perror_plus("setenv");
1614
_exit(EX_OSERR);
1615
}
1931
1616
free(delaystring);
1932
perror_plus("setenv");
1933
_exit(EX_OSERR);
1934
}
1935
free(delaystring);
1936
if(connect_to != NULL){
1937
ret = setenv("CONNECT", connect_to, 1);
1938
if(ret == -1){
1939
perror_plus("setenv");
1940
_exit(EX_OSERR);
1941
}
1942
}
1943
int hook_fd = (int)TEMP_FAILURE_RETRY(openat(hookdir_fd,
1944
direntry->d_name,
1945
O_RDONLY));
1946
if(hook_fd == -1){
1947
perror_plus("openat");
1948
_exit(EXIT_FAILURE);
1949
}
1950
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1951
perror_plus("close");
1952
_exit(EXIT_FAILURE);
1953
}
1954
ret = dup2(devnull, STDIN_FILENO);
1955
if(ret == -1){
1956
perror_plus("dup2(devnull, STDIN_FILENO)");
1957
_exit(EX_OSERR);
1958
}
1959
ret = (int)TEMP_FAILURE_RETRY(close(devnull));
1960
if(ret == -1){
1961
perror_plus("close");
1962
_exit(EX_OSERR);
1963
}
1964
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1965
if(ret == -1){
1966
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1967
_exit(EX_OSERR);
1968
}
1969
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
1970
environ) == -1){
1971
perror_plus("fexecve");
1972
_exit(EXIT_FAILURE);
1973
}
1974
} else {
1975
if(hook_pid == -1){
1976
perror_plus("fork");
1977
free(direntry);
1978
continue;
1979
}
1980
int status;
1981
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1982
perror_plus("waitpid");
1983
free(direntry);
1984
continue;
1985
}
1986
if(WIFEXITED(status)){
1987
if(WEXITSTATUS(status) != 0){
1988
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1989
" with status %d\n", direntry->d_name,
1990
WEXITSTATUS(status));
1991
free(direntry);
1992
continue;
1993
}
1994
} else if(WIFSIGNALED(status)){
1995
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1996
" signal %d\n", direntry->d_name,
1997
WTERMSIG(status));
1998
free(direntry);
1999
continue;
1617
if(connect_to != NULL){
1618
ret = setenv("CONNECT", connect_to, 1);
1619
if(ret == -1){
1620
perror_plus("setenv");
1621
_exit(EX_OSERR);
1622
}
1623
}
1624
if(execl(fullname, direntry->d_name, mode, NULL) == -1){
1625
perror_plus("execl");
1626
_exit(EXIT_FAILURE);
1627
}
2000
1628
} else {
2001
fprintf_plus(stderr, "Warning: network hook \"%s\""
2002
" crashed\n", direntry->d_name);
2003
free(direntry);
2004
continue;
2005
}
2006
}
2007
if(debug){
2008
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
2009
direntry->d_name);
2010
}
2011
free(direntry);
2012
}
2013
free(direntries);
2014
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
2015
perror_plus("close");
2016
} else {
2017
hookdir_fd = -1;
2018
}
2019
close(devnull);
1629
int status;
1630
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1631
perror_plus("waitpid");
1632
free(fullname);
1633
continue;
1634
}
1635
if(WIFEXITED(status)){
1636
if(WEXITSTATUS(status) != 0){
1637
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1638
" with status %d\n", direntry->d_name,
1639
WEXITSTATUS(status));
1640
free(fullname);
1641
continue;
1642
}
1643
} else if(WIFSIGNALED(status)){
1644
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1645
" signal %d\n", direntry->d_name,
1646
WTERMSIG(status));
1647
free(fullname);
1648
continue;
1649
} else {
1650
fprintf_plus(stderr, "Warning: network hook \"%s\""
1651
" crashed\n", direntry->d_name);
1652
free(fullname);
1653
continue;
1654
}
1655
}
1656
free(fullname);
1657
if(debug){
1658
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1659
direntry->d_name);
1660
}
1661
}
1662
close(devnull);
1663
}
2020
1664
}
2021
1665
2022
1666
__attribute__((nonnull, warn_unused_result))
2073
1717
/* Raise privileges */
2074
1718
ret_errno = raise_privileges();
2075
1719
if(ret_errno != 0){
2076
errno = ret_errno;
2077
1720
perror_plus("Failed to raise privileges");
2078
1721
}
2079
1722
2183
1826
/* Raise privileges */
2184
1827
ret_errno = raise_privileges();
2185
1828
if(ret_errno != 0){
2186
errno = ret_errno;
2187
1829
perror_plus("Failed to raise privileges");
2188
1830
}
2189
1831
2222
1864
}
2223
1865
2224
1866
int main(int argc, char *argv[]){
2225
mandos_context mc = { .server = NULL, .dh_bits = 0,
1867
mandos_context mc = { .server = NULL, .dh_bits = 1024,
2226
1868
.priority = "SECURE256:!CTYPE-X.509:"
2227
"+CTYPE-OPENPGP:!RSA", .current_server = NULL,
1869
"+CTYPE-OPENPGP", .current_server = NULL,
2228
1870
.interfaces = NULL, .interfaces_size = 0 };
2229
1871
AvahiSServiceBrowser *sb = NULL;
2230
1872
error_t ret_errno;
2419
2061
goto end;
2420
2062
}
2421
2063
}
2422
2064
2423
2065
{
2424
2066
/* Work around Debian bug #633582:
2425
2067
<http://bugs.debian.org/633582> */
2452
2094
TEMP_FAILURE_RETRY(close(seckey_fd));
2453
2095
}
2454
2096
}
2455
2097
2456
2098
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2457
2099
int pubkey_fd = open(pubkey, O_RDONLY);
2458
2100
if(pubkey_fd == -1){
2473
2115
TEMP_FAILURE_RETRY(close(pubkey_fd));
2474
2116
}
2475
2117
}
2476
2118
2477
2119
/* Lower privileges */
2478
2120
ret_errno = lower_privileges();
2479
2121
if(ret_errno != 0){
2596
2238
2597
2239
/* If no interfaces were specified, make a list */
2598
2240
if(mc.interfaces == NULL){
2599
struct dirent **direntries = NULL;
2241
struct dirent **direntries;
2600
2242
/* Look for any good interfaces */
2601
2243
ret = scandir(sys_class_net, &direntries, good_interface,
2602
2244
alphasort);
2608
2250
if(ret_errno != 0){
2609
2251
errno = ret_errno;
2610
2252
perror_plus("argz_add");
2611
free(direntries[i]);
2612
2253
continue;
2613
2254
}
2614
2255
if(debug){
2615
2256
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2616
2257
direntries[i]->d_name);
2617
2258
}
2618
free(direntries[i]);
2619
2259
}
2620
2260
free(direntries);
2621
2261
} else {
2622
if(ret == 0){
2623
free(direntries);
2624
}
2262
free(direntries);
2625
2263
fprintf_plus(stderr, "Could not find a network interface\n");
2626
2264
exitcode = EXIT_FAILURE;
2627
2265
goto end;
2891
2529
mc.current_server->prev->next = NULL;
2892
2530
while(mc.current_server != NULL){
2893
2531
server *next = mc.current_server->next;
2894
#ifdef __GNUC__
2895
#pragma GCC diagnostic push
2896
#pragma GCC diagnostic ignored "-Wcast-qual"
2897
#endif
2898
free((char *)(mc.current_server->ip));
2899
#ifdef __GNUC__
2900
#pragma GCC diagnostic pop
2901
#endif
2902
2532
free(mc.current_server);
2903
2533
mc.current_server = next;
2904
2534
}
2908
2538
{
2909
2539
ret_errno = raise_privileges();
2910
2540
if(ret_errno != 0){
2911
errno = ret_errno;
2912
2541
perror_plus("Failed to raise privileges");
2913
2542
} else {
2914
2543
2937
2566
2938
2567
ret_errno = lower_privileges_permanently();
2939
2568
if(ret_errno != 0){
2940
errno = ret_errno;
2941
2569
perror_plus("Failed to lower privileges permanently");
2942
2570
}
2943
2571
}
2948
2576
/* Removes the GPGME temp directory and all files inside */
2949
2577
if(tempdir != NULL){
2950
2578
struct dirent **direntries = NULL;
2951
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY
2952
| O_NOFOLLOW
2953
| O_DIRECTORY
2954
| O_PATH));
2955
if(tempdir_fd == -1){
2956
perror_plus("open");
2957
} else {
2958
#ifdef __GLIBC__
2959
#if __GLIBC_PREREQ(2, 15)
2960
int numentries = scandirat(tempdir_fd, ".", &direntries,
2961
notdotentries, alphasort);
2962
#else /* not __GLIBC_PREREQ(2, 15) */
2963
int numentries = scandir(tempdir, &direntries, notdotentries,
2964
alphasort);
2965
#endif /* not __GLIBC_PREREQ(2, 15) */
2966
#else /* not __GLIBC__ */
2967
int numentries = scandir(tempdir, &direntries, notdotentries,
2968
alphasort);
2969
#endif /* not __GLIBC__ */
2970
if(numentries >= 0){
2971
for(int i = 0; i < numentries; i++){
2972
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2973
if(ret == -1){
2974
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2975
" \"%s\", 0): %s\n", tempdir,
2976
direntries[i]->d_name, strerror(errno));
2977
}
2978
free(direntries[i]);
2979
}
2980
2981
/* need to clean even if 0 because man page doesn't specify */
2982
free(direntries);
2983
if(numentries == -1){
2984
perror_plus("scandir");
2985
}
2986
ret = rmdir(tempdir);
2987
if(ret == -1 and errno != ENOENT){
2988
perror_plus("rmdir");
2989
}
2579
struct dirent *direntry = NULL;
2580
int numentries = scandir(tempdir, &direntries, notdotentries,
2581
alphasort);
2582
if(numentries > 0){
2583
for(int i = 0; i < numentries; i++){
2584
direntry = direntries[i];
2585
char *fullname = NULL;
2586
ret = asprintf(&fullname, "%s/%s", tempdir,
2587
direntry->d_name);
2588
if(ret < 0){
2589
perror_plus("asprintf");
2590
continue;
2591
}
2592
ret = remove(fullname);
2593
if(ret == -1){
2594
fprintf_plus(stderr, "remove(\"%s\"): %s\n", fullname,
2595
strerror(errno));
2596
}
2597
free(fullname);
2990
2598
}
2991
TEMP_FAILURE_RETRY(close(tempdir_fd));
2599
}
2600
2601
/* need to clean even if 0 because man page doesn't specify */
2602
free(direntries);
2603
if(numentries == -1){
2604
perror_plus("scandir");
2605
}
2606
ret = rmdir(tempdir);
2607
if(ret == -1 and errno != ENOENT){
2608
perror_plus("rmdir");
2992
2609
}
2993
2610
}
2994
2611
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0