ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/libptytty/src/ptytty.C
(Generate patch)

Comparing libptytty/src/ptytty.C (file contents):
Revision 1.19 by root, Mon Jan 23 11:36:01 2006 UTC vs.
Revision 1.56 by sf-exg, Fri May 1 13:12:17 2015 UTC

1// This file is part of libptytty. Do not make local modifications.
2// http://software.schmorp.de/pkg/libptytty
3
4/*----------------------------------------------------------------------* 1/*----------------------------------------------------------------------*
5 * File: ptytty.C 2 * File: ptytty.C
6 *----------------------------------------------------------------------* 3 *----------------------------------------------------------------------*
7 * 4 *
8 * All portions of code are copyright by their respective author/s. 5 * All portions of code are copyright by their respective author/s.
9 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com> 6 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com>
10 * Copyright (c) 2004-2006 Marc Lehmann <pcg@goof.com> 7 * Copyright (c) 2004-2006 Marc Lehmann <schmorp@schmorp.de>
11 * Copyright (c) 2006 Emanuele Giaquinta <e.giaquinta@glauco.it> 8 * Copyright (c) 2006 Emanuele Giaquinta <e.giaquinta@glauco.it>
12 * 9 *
13 * This program is free software; you can redistribute it and/or modify 10 * This program is free software; you can redistribute it and/or modify
14 * it under the terms of the GNU General Public License as published by 11 * it under the terms of the GNU General Public License as published by
15 * the Free Software Foundation; either version 2 of the License, or 12 * the Free Software Foundation; either version 2 of the License, or
… …
23 * You should have received a copy of the GNU General Public License 20 * You should have received a copy of the GNU General Public License
24 * along with this program; if not, write to the Free Software 21 * along with this program; if not, write to the Free Software
25 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 22 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
26 *---------------------------------------------------------------------*/ 23 *---------------------------------------------------------------------*/
27 24
28#include "../config.h" 25#include "config.h"
29 26
30#include "ptytty.h" 27#include "ptytty.h"
31 28
32#include <cstdlib> 29#include <stdlib.h>
30#include <stdio.h>
33#include <cstring> 31#include <string.h>
34#include <csignal>
35 32
36#include <sys/types.h> 33#include <sys/types.h>
37#include <sys/socket.h> 34#include <sys/stat.h>
38#include <unistd.h> 35#include <unistd.h>
39#include <fcntl.h> 36#include <fcntl.h>
40 37
41#ifdef HAVE_SYS_IOCTL_H 38#ifdef HAVE_SYS_IOCTL_H
42# include <sys/ioctl.h> 39# include <sys/ioctl.h>
43#endif 40#endif
44#if defined(HAVE_DEV_PTMX) && defined(HAVE_SYS_STROPTS_H) 41#ifdef HAVE_STROPTS_H
45# include <sys/stropts.h> /* for I_PUSH */
46#endif
47#ifdef HAVE_ISASTREAM
48# include <stropts.h> 42# include <stropts.h>
49#endif 43#endif
50#if defined(HAVE_PTY_H) 44#if defined(HAVE_PTY_H)
51# include <pty.h> 45# include <pty.h>
52#elif defined(HAVE_LIBUTIL_H) 46#elif defined(HAVE_LIBUTIL_H)
… …
56#endif 50#endif
57#ifdef TTY_GID_SUPPORT 51#ifdef TTY_GID_SUPPORT
58#include <grp.h> 52#include <grp.h>
59#endif 53#endif
60 54
61#include <cstdio> 55#ifndef O_NOCTTY
56# define O_NOCTTY 0
57#endif
62 58
63///////////////////////////////////////////////////////////////////////////// 59/////////////////////////////////////////////////////////////////////////////
64 60
65/* ------------------------------------------------------------------------- * 61/* ------------------------------------------------------------------------- *
66 * GET PSEUDO TELETYPE - MASTER AND SLAVE * 62 * GET PSEUDO TELETYPE - MASTER AND SLAVE *
67 * ------------------------------------------------------------------------- */ 63 * ------------------------------------------------------------------------- */
68/* 64/*
69 * Returns pty file descriptor, or -1 on failure 65 * Returns pty file descriptor, or -1 on failure
70 * If successful, ttydev is set to the name of the slave device. 66 * If successful, ttydev is set to the name of the slave device.
71 * fd_tty _may_ also be set to an open fd to the slave device 67 * fd_tty _may_ also be set to an open fd to the slave device
72 */ 68 */
73#if defined(UNIX98_PTY) 69#if defined(UNIX98_PTY)
70
74static int 71 static int
75get_pty (int *fd_tty, char **ttydev) 72 get_pty (int *fd_tty, char **ttydev)
76{ 73 {
77 int pfd; 74 int pfd;
78 75
79# if defined(HAVE_GETPT) 76# if defined(HAVE_GETPT)
80 pfd = getpt(); 77 pfd = getpt ();
81# elif defined(HAVE_POSIX_OPENPT) 78# elif defined(HAVE_POSIX_OPENPT)
82 pfd = posix_openpt (O_RDWR); 79 pfd = posix_openpt (O_RDWR | O_NOCTTY);
83# else 80# else
81# ifdef _AIX
84 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0); 82 pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0);
83# else
84 pfd = open ("/dev/ptmx", O_RDWR | O_NOCTTY, 0);
85# endif
85# endif 86# endif
87
86 if (pfd >= 0) 88 if (pfd >= 0)
87 { 89 {
88 if (grantpt (pfd) == 0 /* change slave permissions */ 90 if (grantpt (pfd) == 0 /* change slave permissions */
89 && unlockpt (pfd) == 0) 91 && unlockpt (pfd) == 0)
92 {
90 { /* slave now unlocked */ 93 /* slave now unlocked */
91 *ttydev = strdup (ptsname (pfd)); /* get slave's name */ 94 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
92 return pfd; 95 return pfd;
93 } 96 }
94 97
95 close (pfd); 98 close (pfd);
96 } 99 }
97 100
98 return -1; 101 return -1;
99} 102 }
103
100#elif defined(HAVE_OPENPTY) 104#elif defined(HAVE_OPENPTY)
105
101static int 106 static int
102get_pty (int *fd_tty, char **ttydev) 107 get_pty (int *fd_tty, char **ttydev)
103{ 108 {
104 int pfd; 109 int pfd;
105 int res; 110 int res;
106 char tty_name[32]; 111
107
108 res = openpty (&pfd, fd_tty, tty_name, NULL, NULL); 112 res = openpty (&pfd, fd_tty, NULL, NULL, NULL);
113
109 if (res != -1) 114 if (res != -1)
110 { 115 {
111 *ttydev = strdup (tty_name); 116 *ttydev = strdup (ttyname (*fd_tty));
112 return pfd; 117 return pfd;
113 } 118 }
114 119
115 return -1; 120 return -1;
116} 121 }
122
117#elif defined(HAVE__GETPTY) 123#elif defined(HAVE__GETPTY)
124
118static int 125 static int
119get_pty (int *fd_tty, char **ttydev) 126 get_pty (int *fd_tty, char **ttydev)
120{ 127 {
121 int pfd; 128 int pfd;
129 char *slave;
122 130
123 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0); 131 slave = _getpty (&pfd, O_RDWR | O_NOCTTY, 0622, 0);
124 if (*ttydev != NULL)
125 return pfd;
126 132
127 return -1; 133 if (slave != NULL)
128}
129#elif defined(HAVE_DEV_PTC)
130static int
131get_pty (int *fd_tty, char **ttydev)
132{
133 int pfd;
134
135 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0)
136 { 134 {
137 *ttydev = strdup (ttyname (pfd)); 135 *ttydev = strdup (slave);
138 return pfd; 136 return pfd;
139 } 137 }
140 138
141 return -1; 139 return -1;
142}
143#elif defined(HAVE_DEV_CLONE)
144static int
145get_pty (int *fd_tty, char **ttydev)
146{
147 int pfd;
148
149 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0)
150 {
151 *ttydev = strdup (ptsname (pfd));
152 return pfd;
153 } 140 }
154 141
155 return -1;
156}
157#else 142#else
143
158/* Based on the code in openssh/openbsd-compat/bsd-openpty.c */ 144 /* Based on the code in openssh/openbsd-compat/bsd-openpty.c */
159static int 145 static int
160get_pty (int *fd_tty, char **ttydev) 146 get_pty (int *fd_tty, char **ttydev)
161{ 147 {
162 int pfd; 148 int pfd;
163 int i; 149 int i;
164 char pty_name[32]; 150 char pty_name[32];
165 char tty_name[32]; 151 char tty_name[32];
166 const char *majors = "pqrstuvwxyzabcde"; 152 const char *majors = "pqrstuvwxyzabcde";
167 const char *minors = "0123456789abcdef"; 153 const char *minors = "0123456789abcdef";
154
168 for (i = 0; i < 256; i++) 155 for (i = 0; i < 256; i++)
169 { 156 {
170 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]); 157 snprintf (pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]);
171 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]); 158 snprintf (tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]);
159
172 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1) 160 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
173 { 161 {
174 snprintf(pty_name, 32, "/dev/ptyp%d", i); 162 snprintf (pty_name, 32, "/dev/ptyp%d", i);
175 snprintf(tty_name, 32, "/dev/ttyp%d", i); 163 snprintf (tty_name, 32, "/dev/ttyp%d", i);
176 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1) 164 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
177 continue; 165 continue;
178 } 166 }
167
179 if (access (tty_name, R_OK | W_OK) == 0) 168 if (access (tty_name, R_OK | W_OK) == 0)
180 { 169 {
181 *ttydev = strdup (tty_name); 170 *ttydev = strdup (tty_name);
182 return pfd; 171 return pfd;
183 } 172 }
184 173
185 close (pfd); 174 close (pfd);
186 } 175 }
187} 176
177 return -1;
178 }
179
188#endif 180#endif
189 181
190/*----------------------------------------------------------------------*/ 182/*----------------------------------------------------------------------*/
191/* 183/*
192 * Returns tty file descriptor, or -1 on failure 184 * Returns tty file descriptor, or -1 on failure
193 */ 185 */
194static int 186static int
195get_tty (char *ttydev) 187get_tty (char *ttydev)
196{ 188{
197 return open (ttydev, O_RDWR | O_NOCTTY, 0); 189 return open (ttydev, O_RDWR | O_NOCTTY, 0);
… …
202 * Make our tty a controlling tty so that /dev/tty points to us 194 * Make our tty a controlling tty so that /dev/tty points to us
203 */ 195 */
204static int 196static int
205control_tty (int fd_tty) 197control_tty (int fd_tty)
206{ 198{
199 int fd;
200
207 setsid (); 201 setsid ();
208 202
209#if defined(HAVE_DEV_PTMX) && defined(I_PUSH) 203#ifdef TIOCSCTTY
210 /*
211 * Push STREAMS modules:
212 * ptem: pseudo-terminal hardware emulation module.
213 * ldterm: standard terminal line discipline.
214 * ttcompat: V7, 4BSD and XENIX STREAMS compatibility module.
215 *
216 * After we push the STREAMS modules, the first open () on the slave side
217 * (i.e. the next section between the dashes giving us "tty opened OK")
218 * should make the "ptem" (or "ldterm" depending upon either which OS
219 * version or which set of manual pages you have) module give us a
220 * controlling terminal. We must already have close ()d the master side
221 * fd in this child process before we push STREAMS modules on because the
222 * documentation is really unclear about whether it is any close () on
223 * the master side or the last close () - i.e. a proper STREAMS dismantling
224 * close () - on the master side which causes a hang up to be sent
225 * through - Geoff Wing
226 */
227# ifdef HAVE_ISASTREAM
228 if (isastream (fd_tty) == 1)
229# endif
230 {
231 ioctl (fd_tty, I_PUSH, "ptem");
232 ioctl (fd_tty, I_PUSH, "ldterm");
233 ioctl (fd_tty, I_PUSH, "ttcompat");
234 }
235#endif
236
237 ioctl (fd_tty, TIOCSCTTY, NULL); 204 ioctl (fd_tty, TIOCSCTTY, NULL);
205#else
206 fd = open (ttyname (fd_tty), O_RDWR);
207 if (fd >= 0)
208 close (fd);
209#endif
238 210
239 int fd = open ("/dev/tty", O_WRONLY); 211 fd = open ("/dev/tty", O_WRONLY);
240 if (fd < 0) 212 if (fd < 0)
241 return -1; /* fatal */ 213 return -1; /* fatal */
242 214
243 close (fd); 215 close (fd);
244 216
… …
296 { 268 {
297#ifdef TTY_GID_SUPPORT 269#ifdef TTY_GID_SUPPORT
298 struct group *gr = getgrnam ("tty"); 270 struct group *gr = getgrnam ("tty");
299 271
300 if (gr) 272 if (gr)
273 {
301 { /* change group ownership of tty to "tty" */ 274 /* change group ownership of tty to "tty" */
302 mode = S_IRUSR | S_IWUSR | S_IWGRP; 275 mode = S_IRUSR | S_IWUSR | S_IWGRP;
303 gid = gr->gr_gid; 276 gid = gr->gr_gid;
304 } 277 }
305 else 278 else
306#endif /* TTY_GID_SUPPORT */ 279#endif /* TTY_GID_SUPPORT */
307 { 280 {
308 mode = S_IRUSR | S_IWUSR | S_IWGRP | S_IWOTH; 281 mode = S_IRUSR | S_IWUSR | S_IWGRP | S_IWOTH;
309 gid = 0; 282 gid = 0;
310 } 283 }
311 } 284 }
… …
328} 301}
329 302
330void 303void
331ptytty_unix::put () 304ptytty_unix::put ()
332{ 305{
306 if (name)
307 {
333 chmod (name, RESTORE_TTY_MODE); 308 chmod (name, RESTORE_TTY_MODE);
334 chown (name, 0, ttyconf.gid); 309 chown (name, 0, ttyconf.gid);
310 }
335 311
336 close_tty (); 312 close_tty ();
337 313
338 if (pty >= 0) 314 if (pty >= 0)
339 close (pty); 315 close (pty);
… …
348ptytty_unix::get () 324ptytty_unix::get ()
349{ 325{
350 /* get master (pty) */ 326 /* get master (pty) */
351 if ((pty = get_pty (&tty, &name)) < 0) 327 if ((pty = get_pty (&tty, &name)) < 0)
352 return false; 328 return false;
353
354 fcntl (pty, F_SETFL, O_NONBLOCK);
355 329
356 /* get slave (tty) */ 330 /* get slave (tty) */
357 if (tty < 0) 331 if (tty < 0)
358 { 332 {
359#ifndef NO_SETOWNER_TTYDEV 333#ifndef NO_SETOWNER_TTYDEV
… …
369 put (); 343 put ();
370 return false; 344 return false;
371 } 345 }
372 } 346 }
373 347
348#if defined(I_PUSH)
349 /*
350 * Push STREAMS modules:
351 * ptem: pseudo-terminal hardware emulation module.
352 * ldterm: standard terminal line discipline.
353 * ttcompat: V7, 4BSD and XENIX STREAMS compatibility module.
354 *
355 * On Solaris, a process can acquire a controlling terminal in the
356 * following ways:
357 * - open() of /dev/ptmx or of a slave device without O_NOCTTY
358 * - I_PUSH ioctl() of the "ptem" or "ldterm" module on a slave device
359 * The second case is problematic, because it cannot be disabled.
360 * Fortunately, Solaris (10 and 11 at least) provides an undocumented
361 * __IPUSH_NOCTTY ioctl which does not have this side-effect, so we
362 * use it if defined. See
363 * https://github.com/illumos/illumos-gate/blob/master/usr/src/uts/common/os/streamio.c#L3755
364 * https://github.com/illumos/illumos-gate/blob/master/usr/src/uts/common/io/ptem.c#L203
365 * https://github.com/illumos/illumos-gate/blob/master/usr/src/uts/common/io/ldterm.c#L794
366 * Note that an open() of a slave device autoloads the modules,
367 * with __I_PUSH_NOCTTY, if xpg[46] mode is enabled (which requires
368 * linking /usr/lib/values-xpg[46].o).
369 * https://github.com/illumos/illumos-gate/blob/master/usr/src/lib/libc/port/sys/open.c#L173
370 */
371
372#ifdef __I_PUSH_NOCTTY
373# define PT_I_PUSH __I_PUSH_NOCTTY
374#else
375# define PT_I_PUSH I_PUSH
376#endif
377
378#if defined(HAVE_ISASTREAM) && defined(HAVE_STROPTS_H)
379 if (isastream (tty) == 1)
380# endif
381 {
382 if (!ioctl (tty, I_FIND, "ptem"))
383 ioctl (tty, PT_I_PUSH, "ptem");
384
385 if (!ioctl (tty, I_FIND, "ldterm"))
386 ioctl (tty, PT_I_PUSH, "ldterm");
387
388 if (!ioctl (tty, I_FIND, "ttcompat"))
389 ioctl (tty, PT_I_PUSH, "ttcompat");
390 }
391#endif
392
393#if UTMP_SUPPORT
394# if defined(HAVE_STRUCT_UTMP) && !defined(HAVE_UTMP_PID)
395 int fd_stdin = dup (STDIN_FILENO);
396 dup2 (tty, STDIN_FILENO);
397
398 utmp_pos = ttyslot ();
399
400 dup2 (fd_stdin, STDIN_FILENO);
401 close (fd_stdin);
402# endif
403#endif
404
374 return true; 405 return true;
375} 406}
376 407
377/////////////////////////////////////////////////////////////////////////////
378// helper/proxy support
379
380#if PTYTTY_HELPER
381
382static int sock_fd = -1, lock_fd = -1;
383static int helper_pid, owner_pid;
384
385struct command
386{
387 enum { get, login, destroy } type;
388
389 ptytty *id;
390
391 bool login_shell;
392 int cmd_pid;
393 char hostname[512]; // arbitrary, but should be plenty
394};
395
396struct ptytty_proxy : ptytty
397{
398 ptytty *id;
399
400 ptytty_proxy ()
401 : id(0)
402 {
403 }
404
405 ~ptytty_proxy ();
406
407 bool get ();
408 void login (int cmd_pid, bool login_shell, const char *hostname);
409};
410
411bool
412ptytty_proxy::get ()
413{
414 command cmd;
415
416 cmd.type = command::get;
417
418 write (sock_fd, &cmd, sizeof (cmd));
419
420 if (read (sock_fd, &id, sizeof (id)) != sizeof (id))
421 ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n");
422
423 if (!id)
424 return false;
425
426 if ((pty = recv_fd (sock_fd)) < 0
427 || (tty = recv_fd (sock_fd)) < 0)
428 ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n");
429
430 return true;
431}
432
433void
434ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname)
435{
436 command cmd;
437
438 cmd.type = command::login;
439 cmd.id = id;
440 cmd.cmd_pid = cmd_pid;
441 cmd.login_shell = login_shell;
442 strncpy (cmd.hostname, hostname, sizeof (cmd.hostname));
443
444 write (sock_fd, &cmd, sizeof (cmd));
445}
446
447ptytty_proxy::~ptytty_proxy ()
448{
449 if (id)
450 {
451 command cmd;
452
453 cmd.type = command::destroy;
454 cmd.id = id;
455
456 write (sock_fd, &cmd, sizeof (cmd));
457 }
458}
459
460static
461void serve ()
462{
463 command cmd;
464 vector<ptytty *> ptys;
465
466 while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command))
467 {
468 if (cmd.type == command::get)
469 {
470 // -> id ptyfd ttyfd
471 cmd.id = new ptytty_unix;
472
473 if (cmd.id->get ())
474 {
475 write (sock_fd, &cmd.id, sizeof (cmd.id));
476 ptys.push_back (cmd.id);
477
478 ptytty::send_fd (sock_fd, cmd.id->pty);
479 ptytty::send_fd (sock_fd, cmd.id->tty);
480 }
481 else
482 {
483 delete cmd.id;
484 cmd.id = 0;
485 write (sock_fd, &cmd.id, sizeof (cmd.id));
486 }
487 }
488 else if (cmd.type == command::login)
489 {
490#if UTMP_SUPPORT
491 if (find (ptys.begin (), ptys.end (), cmd.id) != ptys.end ())
492 {
493 cmd.hostname[sizeof (cmd.hostname) - 1] = 0;
494 cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname);
495 }
496#endif
497 }
498 else if (cmd.type == command::destroy)
499 {
500 vector<ptytty *>::iterator pty = find (ptys.begin (), ptys.end (), cmd.id);
501
502 if (pty != ptys.end ())
503 {
504 delete *pty;
505 ptys.erase (pty);
506 }
507 }
508 else
509 break;
510 }
511
512 // destroy all ptys
513 for (vector<ptytty *>::iterator i = ptys.end (); i-- > ptys.begin (); )
514 delete *i;
515}
516
517void
518ptytty::use_helper ()
519{
520 int pid = getpid ();
521
522 if (sock_fd >= 0 && pid == owner_pid)
523 return;
524
525 owner_pid = pid;
526
527 int sv[2];
528
529 if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv))
530 ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n");
531
532#ifdef PTYTTY_REENTRANT
533 int lv[2];
534
535 if (socketpair (AF_UNIX, SOCK_STREAM, 0, lv))
536 ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n");
537#endif
538
539 helper_pid = fork ();
540
541 if (helper_pid < 0)
542 ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n");
543
544 if (helper_pid)
545 {
546 // client, process
547 sock_fd = sv[0];
548 close (sv[1]);
549 fcntl (sock_fd, F_SETFD, FD_CLOEXEC);
550#ifdef PTYTTY_REENTRANT
551 lock_fd = lv[0];
552 close (lv[1]);
553 fcntl (lock_fd, F_SETFD, FD_CLOEXEC);
554#endif
555 }
556 else
557 {
558 // server, pty-helper
559 sock_fd = sv[1];
560#ifdef PTYTTY_REENTRANT
561 lock_fd = lv[1];
562#endif
563
564 chdir ("/");
565
566 signal (SIGHUP, SIG_IGN);
567 signal (SIGTERM, SIG_IGN);
568 signal (SIGINT, SIG_IGN);
569 signal (SIGPIPE, SIG_IGN);
570
571 for (int fd = 0; fd < 1023; fd++)
572 if (fd != sock_fd && fd != lock_fd)
573 close (fd);
574
575 serve ();
576 _exit (EXIT_SUCCESS);
577 }
578}
579
580#endif
581
582ptytty *
583ptytty::create ()
584{
585#if PTYTTY_HELPER
586 if (helper_pid && getpid () == owner_pid)
587 // use helper process
588 return new ptytty_proxy;
589 else
590#endif
591 return new ptytty_unix;
592}
593
594void
595ptytty::init ()
596{
597 uid_t uid = getuid ();
598 gid_t gid = getgid ();
599
600 // before doing anything else, check for setuid/setgid operation,
601 // start the helper process and drop privileges
602 if (uid != geteuid ()
603 || gid != getegid ())
604 {
605#if PTYTTY_HELPER
606 use_helper ();
607#else
608 ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n");
609#endif
610
611 drop_privileges ();
612 }
613}
614
615void
616ptytty::drop_privileges ()
617{
618 uid_t uid = getuid ();
619 gid_t gid = getgid ();
620
621 // drop privileges
622#if HAVE_SETRESUID
623 setresgid (gid, gid, gid);
624 setresuid (uid, uid, uid);
625#elif HAVE_SETREUID
626 setregid (gid, gid);
627 setreuid (uid, uid);
628#elif HAVE_SETUID
629 setgid (gid);
630 setuid (uid);
631#endif
632
633 if (uid != geteuid ()
634 || gid != getegid ())
635 ptytty_fatal ("unable to drop privileges, aborting.\n");
636}
637
638/////////////////////////////////////////////////////////////////////////////
639// C API
640
641#ifndef NO_C_API
642
643#define DEFINE_METHOD(retval, name, args1, args2) \
644extern "C" retval ptytty_ ## name args1 \
645{ return ((struct ptytty *)ptytty)->name args2; }
646
647DEFINE_METHOD(int,pty,(void *ptytty),)
648DEFINE_METHOD(int,tty,(void *ptytty),)
649DEFINE_METHOD(int,get,(void *ptytty),())
650DEFINE_METHOD(void,login,(void *ptytty, int cmd_pid, bool login_shell, const char *hostname),(cmd_pid,login_shell,hostname))
651
652DEFINE_METHOD(void,close_tty,(void *ptytty),())
653DEFINE_METHOD(int,make_controlling_tty,(void *ptytty),())
654DEFINE_METHOD(void,set_utf8_mode,(void *ptytty, int on),(on))
655
656#define DEFINE_STATIC(retval, name, args) \
657extern "C" retval ptytty_ ## name args \
658{ return ptytty::name args; }
659
660DEFINE_STATIC(void,drop_privileges,())
661DEFINE_STATIC(void,use_helper,())
662DEFINE_STATIC(void,init,())
663
664DEFINE_STATIC(void *,create,())
665
666void ptytty_delete (void *ptytty)
667{
668 delete (struct ptytty *)ptytty;
669}
670
671// send_fd, recv_fd not exposed
672
673#endif

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines