/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to plugins.d/mandos-client.c

  • Committer: Teddy Hogeborn
  • Date: 2016-02-28 20:38:55 UTC
  • Revision ID: teddy@recompile.se-20160228203855-pkcunjkz804yep7r
Client: Remove new key directory introduced in GnuPG 2.1

* plugins.d/mandos-client.c (main/clean_dir_at): New function; calls
  itself for any known subdirectories which should also be removed.
  (main): Call clean_dir_at() to remove GPGME temp directory.

Show diffs side-by-side

added added

removed removed

Lines of Context:
plugins.d/mandos-client.c
57
57
#include <sys/socket.h>         /* socket(), struct sockaddr_in6,
58
58
                                   inet_pton(), connect(),
59
59
                                   getnameinfo() */
60
 
#include <fcntl.h>              /* open(), unlinkat() */
 
60
#include <fcntl.h>              /* open(), unlinkat(), AT_REMOVEDIR */
61
61
#include <dirent.h>             /* opendir(), struct dirent, readdir()
62
62
                                 */
63
63
#include <inttypes.h>           /* PRIu16, PRIdMAX, intmax_t,
64
64
                                   strtoimax() */
65
 
#include <errno.h>              /* perror(), errno,
 
65
#include <errno.h>              /* perror(), errno, EINTR, EINVAL,
 
66
                                   EAI_SYSTEM, ENETUNREACH,
 
67
                                   EHOSTUNREACH, ECONNREFUSED, EPROTO,
 
68
                                   EIO, ENOENT, ENXIO, ENOMEM, EISDIR,
 
69
                                   ENOTEMPTY,
66
70
                                   program_invocation_short_name */
67
71
#include <time.h>               /* nanosleep(), time(), sleep() */
68
72
#include <net/if.h>             /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
3024
3028
  free(interfaces_to_take_down);
3025
3029
  free(interfaces_hooks);
3026
3030
  
 
3031
  void clean_dir_at(int base, const char * const dirname,
 
3032
                    uintmax_t level){
 
3033
    struct dirent **direntries = NULL;
 
3034
    int dret;
 
3035
    int dir_fd = (int)TEMP_FAILURE_RETRY(openat(base, dirname,
 
3036
                                                O_RDONLY
 
3037
                                                | O_NOFOLLOW
 
3038
                                                | O_DIRECTORY
 
3039
                                                | O_PATH));
 
3040
    if(dir_fd == -1){
 
3041
      perror_plus("open");
 
3042
    }
 
3043
    int numentries = scandirat(dir_fd, ".", &direntries,
 
3044
                               notdotentries, alphasort);
 
3045
    if(numentries >= 0){
 
3046
      for(int i = 0; i < numentries; i++){
 
3047
        if(debug){
 
3048
          fprintf_plus(stderr, "Unlinking \"%s/%s\"\n",
 
3049
                       dirname, direntries[i]->d_name);
 
3050
        }
 
3051
        dret = unlinkat(dir_fd, direntries[i]->d_name, 0);
 
3052
        if(dret == -1){
 
3053
          if(errno == EISDIR){
 
3054
              dret = unlinkat(dir_fd, direntries[i]->d_name,
 
3055
                              AT_REMOVEDIR);
 
3056
          }         
 
3057
          if((dret == -1) and (errno == ENOTEMPTY)
 
3058
             and (strcmp(direntries[i]->d_name, "private-keys-v1.d")
 
3059
                  == 0) and (level == 0)){
 
3060
            /* Recurse only in this special case */
 
3061
            clean_dir_at(dir_fd, direntries[i]->d_name, level+1);
 
3062
            dret = 0;
 
3063
          }
 
3064
          if(dret == -1){
 
3065
            fprintf_plus(stderr, "unlink(\"%s/%s\"): %s\n", dirname,
 
3066
                         direntries[i]->d_name, strerror(errno));
 
3067
          }
 
3068
        }
 
3069
        free(direntries[i]);
 
3070
      }
 
3071
      
 
3072
      /* need to clean even if 0 because man page doesn't specify */
 
3073
      free(direntries);
 
3074
      if(numentries == -1){
 
3075
        perror_plus("scandirat");
 
3076
      }
 
3077
      dret = unlinkat(base, dirname, AT_REMOVEDIR);
 
3078
      if(dret == -1 and errno != ENOENT){
 
3079
        perror_plus("rmdir");
 
3080
      }
 
3081
    } else {
 
3082
      perror_plus("scandirat");
 
3083
    }
 
3084
    close(dir_fd);
 
3085
  }
 
3086
  
3027
3087
  /* Removes the GPGME temp directory and all files inside */
3028
3088
  if(tempdir != NULL){
3029
 
    struct dirent **direntries = NULL;
3030
 
    int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY
3031
 
                                                  | O_NOFOLLOW
3032
 
                                                  | O_DIRECTORY
3033
 
                                                  | O_PATH));
3034
 
    if(tempdir_fd == -1){
3035
 
      perror_plus("open");
3036
 
    } else {
3037
 
      int numentries = scandirat(tempdir_fd, ".", &direntries,
3038
 
                                 notdotentries, alphasort);
3039
 
      if(numentries >= 0){
3040
 
        for(int i = 0; i < numentries; i++){
3041
 
          ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
3042
 
          if(ret == -1){
3043
 
            fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
3044
 
                         " \"%s\", 0): %s\n", tempdir,
3045
 
                         direntries[i]->d_name, strerror(errno));
3046
 
          }
3047
 
          free(direntries[i]);
3048
 
        }
3049
 
        
3050
 
        /* need to clean even if 0 because man page doesn't specify */
3051
 
        free(direntries);
3052
 
        if(numentries == -1){
3053
 
          perror_plus("scandir");
3054
 
        }
3055
 
        ret = rmdir(tempdir);
3056
 
        if(ret == -1 and errno != ENOENT){
3057
 
          perror_plus("rmdir");
3058
 
        }
3059
 
      }
3060
 
      close(tempdir_fd);
3061
 
    }
 
3089
    clean_dir_at(-1, tempdir, 0);
3062
3090
  }
3063
3091
  
3064
3092
  if(quit_now){