To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 723.1.1
- compare with another revision
- download diff
- download tarball
- view history from revision 723.1.1
- Committer: Teddy Hogeborn
- Date: 2014-07-25 22:44:20 UTC
- mto: This revision was merged to the branch mainline in revision 724.
- Revision ID: teddy@recompile.se-20140725224420-4a5ct2ptt0hsc92z
Require Python 2.7.
This is in preparation for the eventual move to Python 3, which will
happen as soon as all Python modules required by Mandos are available.
The mandos-ctl and mandos-monitor programs are already portable
between Python 2.6 and Python 3 without changes; this change will
bring the requirement up to Python 2.7.
* INSTALL (Prerequisites/Libraries/Mandos Server): Document
requirement of
Python 2.7; remove
Python-argparse
which is in the
Python 2.7 standard
library.
* debian/control (Source: mandos/Build-Depends-Indep): Depend on
exactly the
python2.7
package and all
the Python 2.7
versions of the
python modules.
(Package: mandos/Depends): - '' - but still depend on python (<=2.7)
and the generic versions of the Python
modules; this is for mandos-ctl and
mandos-monitor, both of which are
compatible with Python 3, and use
#!/usr/bin/python.
* mandos: Use #!/usr/bin/python2.7 instead of #!/usr/bin/python.
This is in preparation for the eventual move to Python 3, which will
happen as soon as all Python modules required by Mandos are available.
The mandos-ctl and mandos-monitor programs are already portable
between Python 2.6 and Python 3 without changes; this change will
bring the requirement up to Python 2.7.
* INSTALL (Prerequisites/Libraries/Mandos Server): Document
requirement of
Python 2.7; remove
Python-argparse
which is in the
Python 2.7 standard
library.
* debian/control (Source: mandos/Build-Depends-Indep): Depend on
exactly the
python2.7
package and all
the Python 2.7
versions of the
python modules.
(Package: mandos/Depends): - '' - but still depend on python (<=2.7)
and the generic versions of the Python
modules; this is for mandos-ctl and
mandos-monitor, both of which are
compatible with Python 3, and use
#!/usr/bin/python.
* mandos: Use #!/usr/bin/python2.7 instead of #!/usr/bin/python.
- files added:
- debian/upstream
- files removed:
- debian/upstream-signing-key.pgp
- files modified:
- INSTALL
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2013 Teddy Hogeborn
13
* Copyright © 2008-2013 Björn Påhlsson
12
* Copyright © 2008-2014 Teddy Hogeborn
13
* Copyright © 2008-2014 Björn Påhlsson
14
14
*
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
33
#ifndef _LARGEFILE_SOURCE
34
34
#define _LARGEFILE_SOURCE
35
#endif
35
#endif /* not _LARGEFILE_SOURCE */
36
36
#ifndef _FILE_OFFSET_BITS
37
37
#define _FILE_OFFSET_BITS 64
38
#endif
38
#endif /* not _FILE_OFFSET_BITS */
39
39
40
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
41
42
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror(), remove() */
43
stdout, ferror() */
44
44
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
45
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
57
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
58
inet_pton(), connect(),
59
59
getnameinfo() */
60
#include <fcntl.h> /* open() */
60
#include <fcntl.h> /* open(), unlinkat() */
61
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
62
62
*/
63
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
73
73
*/
74
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
75
getuid(), getgid(), seteuid(),
76
setgid(), pause(), _exit() */
76
setgid(), pause(), _exit(),
77
unlinkat() */
77
78
#include <arpa/inet.h> /* inet_pton(), htons() */
78
79
#include <iso646.h> /* not, or, and */
79
80
#include <argp.h> /* struct argp_option, error_t, struct
141
142
static const char sys_class_net[] = "/sys/class/net";
142
143
char *connect_to = NULL;
143
144
const char *hookdir = HOOKDIR;
145
int hookdir_fd = -1;
144
146
uid_t uid = 65534;
145
147
gid_t gid = 65534;
146
148
232
234
.af = af };
233
235
if(new_server->ip == NULL){
234
236
perror_plus("strdup");
237
free(new_server);
235
238
return false;
236
239
}
237
240
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
238
241
if(ret == -1){
239
242
perror_plus("clock_gettime");
243
#ifdef __GNUC__
244
#pragma GCC diagnostic push
245
#pragma GCC diagnostic ignored "-Wcast-qual"
246
#endif
247
free((char *)(new_server->ip));
248
#ifdef __GNUC__
249
#pragma GCC diagnostic pop
250
#endif
251
free(new_server);
240
252
return false;
241
253
}
242
254
/* Special case of first server */
258
270
* Initialize GPGME.
259
271
*/
260
272
__attribute__((nonnull, warn_unused_result))
261
static bool init_gpgme(const char *seckey, const char *pubkey,
262
const char *tempdir, mandos_context *mc){
273
static bool init_gpgme(const char * const seckey,
274
const char * const pubkey,
275
const char * const tempdir,
276
mandos_context *mc){
263
277
gpgme_error_t rc;
264
278
gpgme_engine_info_t engine_info;
265
279
266
280
/*
267
281
* Helper function to insert pub and seckey to the engine keyring.
268
282
*/
269
bool import_key(const char *filename){
283
bool import_key(const char * const filename){
270
284
int ret;
271
285
int fd;
272
286
gpgme_data_t pgp_data;
1062
1076
timed out */
1063
1077
1064
1078
if(quit_now){
1079
avahi_s_service_resolver_free(r);
1065
1080
return;
1066
1081
}
1067
1082
1333
1348
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1334
1349
"abcdefghijklmnopqrstuvwxyz"
1335
1350
"0123456789"
1336
"_-");
1351
"_.-");
1337
1352
if((direntry->d_name)[sret] != '\0'){
1338
1353
/* Contains non-allowed characters */
1339
1354
if(debug){
1343
1358
return 0;
1344
1359
}
1345
1360
1346
char *fullname = NULL;
1347
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1348
if(ret < 0){
1349
perror_plus("asprintf");
1350
return 0;
1351
}
1352
1353
ret = stat(fullname, &st);
1361
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1354
1362
if(ret == -1){
1355
1363
if(debug){
1356
1364
perror_plus("Could not stat hook");
1461
1469
error_t ret_errno = 0;
1462
1470
if(seteuid(0) == -1){
1463
1471
ret_errno = errno;
1464
perror_plus("seteuid");
1465
1472
}
1466
1473
errno = old_errno;
1467
1474
return ret_errno;
1478
1485
}
1479
1486
if(setuid(0) == -1){
1480
1487
ret_errno = errno;
1481
perror_plus("seteuid");
1482
1488
}
1483
1489
errno = old_errno;
1484
1490
return ret_errno;
1491
1497
error_t ret_errno = 0;
1492
1498
if(seteuid(uid) == -1){
1493
1499
ret_errno = errno;
1494
perror_plus("seteuid");
1495
1500
}
1496
1501
errno = old_errno;
1497
1502
return ret_errno;
1504
1509
error_t ret_errno = 0;
1505
1510
if(setuid(uid) == -1){
1506
1511
ret_errno = errno;
1507
perror_plus("setuid");
1508
1512
}
1509
1513
errno = old_errno;
1510
1514
return ret_errno;
1513
1517
__attribute__((nonnull))
1514
1518
void run_network_hooks(const char *mode, const char *interface,
1515
1519
const float delay){
1516
struct dirent **direntries;
1517
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1518
alphasort);
1520
struct dirent **direntries = NULL;
1521
if(hookdir_fd == -1){
1522
hookdir_fd = open(hookdir, O_RDONLY);
1523
if(hookdir_fd == -1){
1524
if(errno == ENOENT){
1525
if(debug){
1526
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1527
" found\n", hookdir);
1528
}
1529
} else {
1530
perror_plus("open");
1531
}
1532
return;
1533
}
1534
}
1535
#ifdef __GLIBC__
1536
#if __GLIBC_PREREQ(2, 15)
1537
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1538
runnable_hook, alphasort);
1539
#else /* not __GLIBC_PREREQ(2, 15) */
1540
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1541
alphasort);
1542
#endif /* not __GLIBC_PREREQ(2, 15) */
1543
#else /* not __GLIBC__ */
1544
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1545
alphasort);
1546
#endif /* not __GLIBC__ */
1519
1547
if(numhooks == -1){
1520
if(errno == ENOENT){
1521
if(debug){
1522
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1523
" found\n", hookdir);
1524
}
1525
} else {
1526
perror_plus("scandir");
1548
perror_plus("scandir");
1549
return;
1550
}
1551
struct dirent *direntry;
1552
int ret;
1553
int devnull = open("/dev/null", O_RDONLY);
1554
for(int i = 0; i < numhooks; i++){
1555
direntry = direntries[i];
1556
if(debug){
1557
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1558
direntry->d_name);
1527
1559
}
1528
} else {
1529
struct dirent *direntry;
1530
int ret;
1531
int devnull = open("/dev/null", O_RDONLY);
1532
for(int i = 0; i < numhooks; i++){
1533
direntry = direntries[i];
1534
char *fullname = NULL;
1535
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1536
if(ret < 0){
1560
pid_t hook_pid = fork();
1561
if(hook_pid == 0){
1562
/* Child */
1563
/* Raise privileges */
1564
errno = raise_privileges_permanently();
1565
if(errno != 0){
1566
perror_plus("Failed to raise privileges");
1567
_exit(EX_NOPERM);
1568
}
1569
/* Set group */
1570
errno = 0;
1571
ret = setgid(0);
1572
if(ret == -1){
1573
perror_plus("setgid");
1574
_exit(EX_NOPERM);
1575
}
1576
/* Reset supplementary groups */
1577
errno = 0;
1578
ret = setgroups(0, NULL);
1579
if(ret == -1){
1580
perror_plus("setgroups");
1581
_exit(EX_NOPERM);
1582
}
1583
ret = dup2(devnull, STDIN_FILENO);
1584
if(ret == -1){
1585
perror_plus("dup2(devnull, STDIN_FILENO)");
1586
_exit(EX_OSERR);
1587
}
1588
ret = close(devnull);
1589
if(ret == -1){
1590
perror_plus("close");
1591
_exit(EX_OSERR);
1592
}
1593
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1594
if(ret == -1){
1595
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1596
_exit(EX_OSERR);
1597
}
1598
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1599
if(ret == -1){
1600
perror_plus("setenv");
1601
_exit(EX_OSERR);
1602
}
1603
ret = setenv("DEVICE", interface, 1);
1604
if(ret == -1){
1605
perror_plus("setenv");
1606
_exit(EX_OSERR);
1607
}
1608
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1609
if(ret == -1){
1610
perror_plus("setenv");
1611
_exit(EX_OSERR);
1612
}
1613
ret = setenv("MODE", mode, 1);
1614
if(ret == -1){
1615
perror_plus("setenv");
1616
_exit(EX_OSERR);
1617
}
1618
char *delaystring;
1619
ret = asprintf(&delaystring, "%f", (double)delay);
1620
if(ret == -1){
1537
1621
perror_plus("asprintf");
1538
continue;
1539
}
1540
if(debug){
1541
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1542
direntry->d_name);
1543
}
1544
pid_t hook_pid = fork();
1545
if(hook_pid == 0){
1546
/* Child */
1547
/* Raise privileges */
1548
if(raise_privileges_permanently() != 0){
1549
perror_plus("Failed to raise privileges");
1550
_exit(EX_NOPERM);
1551
}
1552
/* Set group */
1553
errno = 0;
1554
ret = setgid(0);
1555
if(ret == -1){
1556
perror_plus("setgid");
1557
_exit(EX_NOPERM);
1558
}
1559
/* Reset supplementary groups */
1560
errno = 0;
1561
ret = setgroups(0, NULL);
1562
if(ret == -1){
1563
perror_plus("setgroups");
1564
_exit(EX_NOPERM);
1565
}
1566
ret = dup2(devnull, STDIN_FILENO);
1567
if(ret == -1){
1568
perror_plus("dup2(devnull, STDIN_FILENO)");
1569
_exit(EX_OSERR);
1570
}
1571
ret = close(devnull);
1572
if(ret == -1){
1573
perror_plus("close");
1574
_exit(EX_OSERR);
1575
}
1576
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1577
if(ret == -1){
1578
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1579
_exit(EX_OSERR);
1580
}
1581
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1582
if(ret == -1){
1583
perror_plus("setenv");
1584
_exit(EX_OSERR);
1585
}
1586
ret = setenv("DEVICE", interface, 1);
1587
if(ret == -1){
1588
perror_plus("setenv");
1589
_exit(EX_OSERR);
1590
}
1591
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1592
if(ret == -1){
1593
perror_plus("setenv");
1594
_exit(EX_OSERR);
1595
}
1596
ret = setenv("MODE", mode, 1);
1597
if(ret == -1){
1598
perror_plus("setenv");
1599
_exit(EX_OSERR);
1600
}
1601
char *delaystring;
1602
ret = asprintf(&delaystring, "%f", (double)delay);
1603
if(ret == -1){
1604
perror_plus("asprintf");
1605
_exit(EX_OSERR);
1606
}
1607
ret = setenv("DELAY", delaystring, 1);
1608
if(ret == -1){
1609
free(delaystring);
1610
perror_plus("setenv");
1611
_exit(EX_OSERR);
1612
}
1622
_exit(EX_OSERR);
1623
}
1624
ret = setenv("DELAY", delaystring, 1);
1625
if(ret == -1){
1613
1626
free(delaystring);
1614
if(connect_to != NULL){
1615
ret = setenv("CONNECT", connect_to, 1);
1616
if(ret == -1){
1617
perror_plus("setenv");
1618
_exit(EX_OSERR);
1619
}
1620
}
1621
if(execl(fullname, direntry->d_name, mode, NULL) == -1){
1622
perror_plus("execl");
1623
_exit(EXIT_FAILURE);
1624
}
1627
perror_plus("setenv");
1628
_exit(EX_OSERR);
1629
}
1630
free(delaystring);
1631
if(connect_to != NULL){
1632
ret = setenv("CONNECT", connect_to, 1);
1633
if(ret == -1){
1634
perror_plus("setenv");
1635
_exit(EX_OSERR);
1636
}
1637
}
1638
int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);
1639
if(hook_fd == -1){
1640
perror_plus("openat");
1641
_exit(EXIT_FAILURE);
1642
}
1643
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1644
perror_plus("close");
1645
_exit(EXIT_FAILURE);
1646
}
1647
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
1648
environ) == -1){
1649
perror_plus("fexecve");
1650
_exit(EXIT_FAILURE);
1651
}
1652
} else {
1653
int status;
1654
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1655
perror_plus("waitpid");
1656
free(direntry);
1657
continue;
1658
}
1659
if(WIFEXITED(status)){
1660
if(WEXITSTATUS(status) != 0){
1661
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1662
" with status %d\n", direntry->d_name,
1663
WEXITSTATUS(status));
1664
free(direntry);
1665
continue;
1666
}
1667
} else if(WIFSIGNALED(status)){
1668
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1669
" signal %d\n", direntry->d_name,
1670
WTERMSIG(status));
1671
free(direntry);
1672
continue;
1625
1673
} else {
1626
int status;
1627
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1628
perror_plus("waitpid");
1629
free(fullname);
1630
continue;
1631
}
1632
if(WIFEXITED(status)){
1633
if(WEXITSTATUS(status) != 0){
1634
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1635
" with status %d\n", direntry->d_name,
1636
WEXITSTATUS(status));
1637
free(fullname);
1638
continue;
1639
}
1640
} else if(WIFSIGNALED(status)){
1641
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1642
" signal %d\n", direntry->d_name,
1643
WTERMSIG(status));
1644
free(fullname);
1645
continue;
1646
} else {
1647
fprintf_plus(stderr, "Warning: network hook \"%s\""
1648
" crashed\n", direntry->d_name);
1649
free(fullname);
1650
continue;
1651
}
1652
}
1653
free(fullname);
1654
if(debug){
1655
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1656
direntry->d_name);
1657
}
1658
}
1659
close(devnull);
1660
}
1674
fprintf_plus(stderr, "Warning: network hook \"%s\""
1675
" crashed\n", direntry->d_name);
1676
free(direntry);
1677
continue;
1678
}
1679
}
1680
if(debug){
1681
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1682
direntry->d_name);
1683
}
1684
free(direntry);
1685
}
1686
free(direntries);
1687
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1688
perror_plus("close");
1689
} else {
1690
hookdir_fd = -1;
1691
}
1692
close(devnull);
1661
1693
}
1662
1694
1663
1695
__attribute__((nonnull, warn_unused_result))
1713
1745
1714
1746
/* Raise privileges */
1715
1747
ret_errno = raise_privileges();
1748
if(ret_errno != 0){
1749
errno = ret_errno;
1750
perror_plus("Failed to raise privileges");
1751
}
1752
1753
#ifdef __linux__
1754
int ret_linux;
1716
1755
bool restore_loglevel = false;
1717
if(ret_errno != 0){
1718
perror_plus("Failed to raise privileges");
1719
}
1720
#ifdef __linux__
1721
int ret_linux;
1722
1756
if(ret_errno == 0){
1723
1757
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1724
1758
messages about the network interface to mess up the prompt */
1822
1856
/* Raise privileges */
1823
1857
ret_errno = raise_privileges();
1824
1858
if(ret_errno != 0){
1859
errno = ret_errno;
1825
1860
perror_plus("Failed to raise privileges");
1826
1861
}
1862
1827
1863
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1828
1864
ioctl_errno = errno;
1829
1865
1871
1907
int exitcode = EXIT_SUCCESS;
1872
1908
char *interfaces_to_take_down = NULL;
1873
1909
size_t interfaces_to_take_down_size = 0;
1874
char tempdir[] = "/tmp/mandosXXXXXX";
1875
bool tempdir_created = false;
1910
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
1911
char old_tempdir[] = "/tmp/mandosXXXXXX";
1912
char *tempdir = NULL;
1876
1913
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1877
1914
const char *seckey = PATHDIR "/" SECKEY;
1878
1915
const char *pubkey = PATHDIR "/" PUBKEY;
2232
2269
2233
2270
/* If no interfaces were specified, make a list */
2234
2271
if(mc.interfaces == NULL){
2235
struct dirent **direntries;
2272
struct dirent **direntries = NULL;
2236
2273
/* Look for any good interfaces */
2237
2274
ret = scandir(sys_class_net, &direntries, good_interface,
2238
2275
alphasort);
2244
2281
if(ret_errno != 0){
2245
2282
errno = ret_errno;
2246
2283
perror_plus("argz_add");
2284
free(direntries[i]);
2247
2285
continue;
2248
2286
}
2249
2287
if(debug){
2250
2288
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2251
2289
direntries[i]->d_name);
2252
2290
}
2291
free(direntries[i]);
2253
2292
}
2254
2293
free(direntries);
2255
2294
} else {
2256
free(direntries);
2295
if(ret == 0){
2296
free(direntries);
2297
}
2257
2298
fprintf_plus(stderr, "Could not find a network interface\n");
2258
2299
exitcode = EXIT_FAILURE;
2259
2300
goto end;
2327
2368
goto end;
2328
2369
}
2329
2370
2330
if(mkdtemp(tempdir) == NULL){
2371
/* Try /run/tmp before /tmp */
2372
tempdir = mkdtemp(run_tempdir);
2373
if(tempdir == NULL and errno == ENOENT){
2374
if(debug){
2375
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2376
run_tempdir, old_tempdir);
2377
}
2378
tempdir = mkdtemp(old_tempdir);
2379
}
2380
if(tempdir == NULL){
2331
2381
perror_plus("mkdtemp");
2332
2382
goto end;
2333
2383
}
2334
tempdir_created = true;
2335
2384
2336
2385
if(quit_now){
2337
2386
goto end;
2473
2522
if(debug){
2474
2523
fprintf_plus(stderr, "Starting Avahi loop search\n");
2475
2524
}
2476
2525
2477
2526
ret = avahi_loop_with_timeout(simple_poll,
2478
2527
(int)(retry_interval * 1000), &mc);
2479
2528
if(debug){
2515
2564
mc.current_server->prev->next = NULL;
2516
2565
while(mc.current_server != NULL){
2517
2566
server *next = mc.current_server->next;
2567
#ifdef __GNUC__
2568
#pragma GCC diagnostic push
2569
#pragma GCC diagnostic ignored "-Wcast-qual"
2570
#endif
2571
free((char *)(mc.current_server->ip));
2572
#ifdef __GNUC__
2573
#pragma GCC diagnostic pop
2574
#endif
2518
2575
free(mc.current_server);
2519
2576
mc.current_server = next;
2520
2577
}
2524
2581
{
2525
2582
ret_errno = raise_privileges();
2526
2583
if(ret_errno != 0){
2584
errno = ret_errno;
2527
2585
perror_plus("Failed to raise privileges");
2528
2586
} else {
2529
2587
2549
2607
}
2550
2608
}
2551
2609
}
2610
2552
2611
ret_errno = lower_privileges_permanently();
2553
2612
if(ret_errno != 0){
2613
errno = ret_errno;
2554
2614
perror_plus("Failed to lower privileges permanently");
2555
2615
}
2556
2616
}
2559
2619
free(interfaces_hooks);
2560
2620
2561
2621
/* Removes the GPGME temp directory and all files inside */
2562
if(tempdir_created){
2622
if(tempdir != NULL){
2563
2623
struct dirent **direntries = NULL;
2564
struct dirent *direntry = NULL;
2565
int numentries = scandir(tempdir, &direntries, notdotentries,
2566
alphasort);
2567
if(numentries > 0){
2568
for(int i = 0; i < numentries; i++){
2569
direntry = direntries[i];
2570
char *fullname = NULL;
2571
ret = asprintf(&fullname, "%s/%s", tempdir,
2572
direntry->d_name);
2573
if(ret < 0){
2574
perror_plus("asprintf");
2575
continue;
2576
}
2577
ret = remove(fullname);
2578
if(ret == -1){
2579
fprintf_plus(stderr, "remove(\"%s\"): %s\n", fullname,
2580
strerror(errno));
2581
}
2582
free(fullname);
2624
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |
2625
O_NOFOLLOW));
2626
if(tempdir_fd == -1){
2627
perror_plus("open");
2628
} else {
2629
#ifdef __GLIBC__
2630
#if __GLIBC_PREREQ(2, 15)
2631
int numentries = scandirat(tempdir_fd, ".", &direntries,
2632
notdotentries, alphasort);
2633
#else /* not __GLIBC_PREREQ(2, 15) */
2634
int numentries = scandir(tempdir, &direntries, notdotentries,
2635
alphasort);
2636
#endif /* not __GLIBC_PREREQ(2, 15) */
2637
#else /* not __GLIBC__ */
2638
int numentries = scandir(tempdir, &direntries, notdotentries,
2639
alphasort);
2640
#endif /* not __GLIBC__ */
2641
if(numentries >= 0){
2642
for(int i = 0; i < numentries; i++){
2643
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2644
if(ret == -1){
2645
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2646
" \"%s\", 0): %s\n", tempdir,
2647
direntries[i]->d_name, strerror(errno));
2648
}
2649
free(direntries[i]);
2650
}
2651
2652
/* need to clean even if 0 because man page doesn't specify */
2653
free(direntries);
2654
if(numentries == -1){
2655
perror_plus("scandir");
2656
}
2657
ret = rmdir(tempdir);
2658
if(ret == -1 and errno != ENOENT){
2659
perror_plus("rmdir");
2660
}
2583
2661
}
2584
}
2585
2586
/* need to clean even if 0 because man page doesn't specify */
2587
free(direntries);
2588
if(numentries == -1){
2589
perror_plus("scandir");
2590
}
2591
ret = rmdir(tempdir);
2592
if(ret == -1 and errno != ENOENT){
2593
perror_plus("rmdir");
2662
TEMP_FAILURE_RETRY(close(tempdir_fd));
2594
2663
}
2595
2664
}
2596
2665
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0