ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/libptytty/src/ptytty.C
(Generate patch)

Comparing libptytty/src/ptytty.C (file contents):
Revision 1.18 by root, Mon Jan 23 11:23:04 2006 UTC vs.
Revision 1.29 by ayin, Thu Jun 28 17:41:01 2007 UTC

… …
29 29
30#include "ptytty.h" 30#include "ptytty.h"
31 31
32#include <cstdlib> 32#include <cstdlib>
33#include <cstring> 33#include <cstring>
34#include <csignal>
34 35
35#include <sys/types.h> 36#include <sys/types.h>
36#include <sys/socket.h>
37#include <unistd.h> 37#include <unistd.h>
38#include <fcntl.h> 38#include <fcntl.h>
39 39
40#ifdef HAVE_SYS_IOCTL_H 40#ifdef HAVE_SYS_IOCTL_H
41# include <sys/ioctl.h> 41# include <sys/ioctl.h>
… …
63 63
64/* ------------------------------------------------------------------------- * 64/* ------------------------------------------------------------------------- *
65 * GET PSEUDO TELETYPE - MASTER AND SLAVE * 65 * GET PSEUDO TELETYPE - MASTER AND SLAVE *
66 * ------------------------------------------------------------------------- */ 66 * ------------------------------------------------------------------------- */
67/* 67/*
68 * Returns pty file descriptor, or -1 on failure 68 * Returns pty file descriptor, or -1 on failure
69 * If successful, ttydev is set to the name of the slave device. 69 * If successful, ttydev is set to the name of the slave device.
70 * fd_tty _may_ also be set to an open fd to the slave device 70 * fd_tty _may_ also be set to an open fd to the slave device
71 */ 71 */
72#if defined(UNIX98_PTY) 72#if defined(UNIX98_PTY)
73
73static int 74 static int
74get_pty (int *fd_tty, char **ttydev) 75 get_pty (int *fd_tty, char **ttydev)
75{ 76 {
76 int pfd; 77 int pfd;
77 78
78# if defined(HAVE_GETPT) 79# if defined(HAVE_GETPT)
79 pfd = getpt(); 80 pfd = getpt();
80# elif defined(HAVE_POSIX_OPENPT) 81# elif defined(HAVE_POSIX_OPENPT)
81 pfd = posix_openpt (O_RDWR); 82 pfd = posix_openpt (O_RDWR);
82# else 83# else
83 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0); 84 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0);
84# endif 85# endif
86
85 if (pfd >= 0) 87 if (pfd >= 0)
86 { 88 {
87 if (grantpt (pfd) == 0 /* change slave permissions */ 89 if (grantpt (pfd) == 0 /* change slave permissions */
88 && unlockpt (pfd) == 0) 90 && unlockpt (pfd) == 0)
89 { /* slave now unlocked */ 91 { /* slave now unlocked */
90 *ttydev = strdup (ptsname (pfd)); /* get slave's name */ 92 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
91 return pfd; 93 return pfd;
92 } 94 }
93 95
94 close (pfd); 96 close (pfd);
95 } 97 }
96 98
97 return -1; 99 return -1;
98} 100 }
101
99#elif defined(HAVE_OPENPTY) 102#elif defined(HAVE_OPENPTY)
103
100static int 104 static int
101get_pty (int *fd_tty, char **ttydev) 105 get_pty (int *fd_tty, char **ttydev)
102{ 106 {
103 int pfd; 107 int pfd;
104 int res; 108 int res;
105 char tty_name[32]; 109
106
107 res = openpty (&pfd, fd_tty, tty_name, NULL, NULL); 110 res = openpty (&pfd, fd_tty, NULL, NULL, NULL);
111
108 if (res != -1) 112 if (res != -1)
109 { 113 {
110 *ttydev = strdup (tty_name); 114 *ttydev = strdup (ttyname (*fd_tty));
115 return pfd;
116 }
117
118 return -1;
119 }
120
121#elif defined(HAVE__GETPTY)
122
123 static int
124 get_pty (int *fd_tty, char **ttydev)
125 {
126 int pfd;
127
128 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0);
129
130 if (*ttydev != NULL)
111 return pfd; 131 return pfd;
112 }
113 132
114 return -1; 133 return -1;
115} 134 }
116#elif defined(HAVE__GETPTY)
117static int
118get_pty (int *fd_tty, char **ttydev)
119{
120 int pfd;
121 135
122 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0);
123 if (*ttydev != NULL)
124 return pfd;
125
126 return -1;
127}
128#elif defined(HAVE_DEV_PTC) 136#elif defined(HAVE_DEV_PTC)
137
129static int 138 static int
130get_pty (int *fd_tty, char **ttydev) 139 get_pty (int *fd_tty, char **ttydev)
131{ 140 {
132 int pfd; 141 int pfd;
133 142
134 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0) 143 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0)
135 { 144 {
136 *ttydev = strdup (ttyname (pfd)); 145 *ttydev = strdup (ttyname (pfd));
137 return pfd; 146 return pfd;
138 } 147 }
139 148
140 return -1; 149 return -1;
141} 150 }
151
142#elif defined(HAVE_DEV_CLONE) 152#elif defined(HAVE_DEV_CLONE)
153
143static int 154 static int
144get_pty (int *fd_tty, char **ttydev) 155 get_pty (int *fd_tty, char **ttydev)
145{ 156 {
146 int pfd; 157 int pfd;
147 158
148 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0) 159 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0)
149 { 160 {
150 *ttydev = strdup (ptsname (pfd)); 161 *ttydev = strdup (ptsname (pfd));
151 return pfd; 162 return pfd;
152 } 163 }
153 164
154 return -1; 165 return -1;
155} 166 }
167
156#else 168#else
169
157/* Based on the code in openssh/openbsd-compat/bsd-openpty.c */ 170 /* Based on the code in openssh/openbsd-compat/bsd-openpty.c */
158static int 171 static int
159get_pty (int *fd_tty, char **ttydev) 172 get_pty (int *fd_tty, char **ttydev)
160{ 173 {
161 int pfd; 174 int pfd;
162 int i; 175 int i;
163 char pty_name[32]; 176 char pty_name[32];
164 char tty_name[32]; 177 char tty_name[32];
165 const char *majors = "pqrstuvwxyzabcde"; 178 const char *majors = "pqrstuvwxyzabcde";
166 const char *minors = "0123456789abcdef"; 179 const char *minors = "0123456789abcdef";
180
167 for (i = 0; i < 256; i++) 181 for (i = 0; i < 256; i++)
168 { 182 {
169 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]); 183 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]);
170 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]); 184 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]);
185
171 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1) 186 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
172 { 187 {
173 snprintf(pty_name, 32, "/dev/ptyp%d", i); 188 snprintf(pty_name, 32, "/dev/ptyp%d", i);
174 snprintf(tty_name, 32, "/dev/ttyp%d", i); 189 snprintf(tty_name, 32, "/dev/ttyp%d", i);
175 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1) 190 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
176 continue; 191 continue;
177 } 192 }
193
178 if (access (tty_name, R_OK | W_OK) == 0) 194 if (access (tty_name, R_OK | W_OK) == 0)
179 { 195 {
180 *ttydev = strdup (tty_name); 196 *ttydev = strdup (tty_name);
181 return pfd; 197 return pfd;
182 } 198 }
183 199
184 close (pfd); 200 close (pfd);
185 } 201 }
186} 202
203 return -1;
204 }
205
187#endif 206#endif
188 207
189/*----------------------------------------------------------------------*/ 208/*----------------------------------------------------------------------*/
190/* 209/*
191 * Returns tty file descriptor, or -1 on failure 210 * Returns tty file descriptor, or -1 on failure
192 */ 211 */
193static int 212static int
194get_tty (char *ttydev) 213get_tty (char *ttydev)
195{ 214{
196 return open (ttydev, O_RDWR | O_NOCTTY, 0); 215 return open (ttydev, O_RDWR | O_NOCTTY, 0);
… …
201 * Make our tty a controlling tty so that /dev/tty points to us 220 * Make our tty a controlling tty so that /dev/tty points to us
202 */ 221 */
203static int 222static int
204control_tty (int fd_tty) 223control_tty (int fd_tty)
205{ 224{
225 int fd;
226
206 setsid (); 227 setsid ();
207 228
208#if defined(HAVE_DEV_PTMX) && defined(I_PUSH) 229#if defined(HAVE_DEV_PTMX) && defined(I_PUSH)
209 /* 230 /*
210 * Push STREAMS modules: 231 * Push STREAMS modules:
… …
231 ioctl (fd_tty, I_PUSH, "ldterm"); 252 ioctl (fd_tty, I_PUSH, "ldterm");
232 ioctl (fd_tty, I_PUSH, "ttcompat"); 253 ioctl (fd_tty, I_PUSH, "ttcompat");
233 } 254 }
234#endif 255#endif
235 256
257#ifdef TIOCSCTTY
236 ioctl (fd_tty, TIOCSCTTY, NULL); 258 ioctl (fd_tty, TIOCSCTTY, NULL);
259#else
260 fd = open (ttyname (fd_tty), O_RDWR);
261 if (fd >= 0)
262 close (fd);
263#endif
237 264
238 int fd = open ("/dev/tty", O_WRONLY); 265 fd = open ("/dev/tty", O_WRONLY);
239 if (fd < 0) 266 if (fd < 0)
240 return -1; /* fatal */ 267 return -1; /* fatal */
241 268
242 close (fd); 269 close (fd);
243 270
… …
327} 354}
328 355
329void 356void
330ptytty_unix::put () 357ptytty_unix::put ()
331{ 358{
359 if (name)
360 {
332 chmod (name, RESTORE_TTY_MODE); 361 chmod (name, RESTORE_TTY_MODE);
333 chown (name, 0, ttyconf.gid); 362 chown (name, 0, ttyconf.gid);
363 }
334 364
335 close_tty (); 365 close_tty ();
336 366
337 if (pty >= 0) 367 if (pty >= 0)
338 close (pty); 368 close (pty);
… …
371 } 401 }
372 402
373 return true; 403 return true;
374} 404}
375 405
376/////////////////////////////////////////////////////////////////////////////
377// helper/proxy support
378
379#if PTYTTY_HELPER
380
381static int sock_fd = -1;
382static int helper_pid, owner_pid;
383
384struct command
385{
386 enum { get, login, destroy } type;
387
388 ptytty *id;
389
390 bool login_shell;
391 int cmd_pid;
392 char hostname[512]; // arbitrary, but should be plenty
393};
394
395struct ptytty_proxy : ptytty
396{
397 ptytty *id;
398
399 ptytty_proxy ()
400 : id(0)
401 {
402 }
403
404 ~ptytty_proxy ();
405
406 bool get ();
407 void login (int cmd_pid, bool login_shell, const char *hostname);
408};
409
410bool
411ptytty_proxy::get ()
412{
413 command cmd;
414
415 cmd.type = command::get;
416
417 write (sock_fd, &cmd, sizeof (cmd));
418
419 if (read (sock_fd, &id, sizeof (id)) != sizeof (id))
420 ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n");
421
422 if (!id)
423 return false;
424
425 if ((pty = recv_fd (sock_fd)) < 0
426 || (tty = recv_fd (sock_fd)) < 0)
427 ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n");
428
429 return true;
430}
431
432void
433ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname)
434{
435 command cmd;
436
437 cmd.type = command::login;
438 cmd.id = id;
439 cmd.cmd_pid = cmd_pid;
440 cmd.login_shell = login_shell;
441 strncpy (cmd.hostname, hostname, sizeof (cmd.hostname));
442
443 write (sock_fd, &cmd, sizeof (cmd));
444}
445
446ptytty_proxy::~ptytty_proxy ()
447{
448 if (id)
449 {
450 command cmd;
451
452 cmd.type = command::destroy;
453 cmd.id = id;
454
455 write (sock_fd, &cmd, sizeof (cmd));
456 }
457}
458
459static
460void serve ()
461{
462 command cmd;
463 vector<ptytty *> ptys;
464
465 while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command))
466 {
467 if (cmd.type == command::get)
468 {
469 // -> id ptyfd ttyfd
470 cmd.id = new ptytty_unix;
471
472 if (cmd.id->get ())
473 {
474 write (sock_fd, &cmd.id, sizeof (cmd.id));
475 ptys.push_back (cmd.id);
476
477 ptytty::send_fd (sock_fd, cmd.id->pty);
478 ptytty::send_fd (sock_fd, cmd.id->tty);
479 }
480 else
481 {
482 delete cmd.id;
483 cmd.id = 0;
484 write (sock_fd, &cmd.id, sizeof (cmd.id));
485 }
486 }
487 else if (cmd.type == command::login)
488 {
489#if UTMP_SUPPORT
490 if (find (ptys.begin (), ptys.end (), cmd.id) != ptys.end ())
491 {
492 cmd.hostname[sizeof (cmd.hostname) - 1] = 0;
493 cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname);
494 }
495#endif
496 }
497 else if (cmd.type == command::destroy)
498 {
499 vector<ptytty *>::iterator pty = find (ptys.begin (), ptys.end (), cmd.id);
500
501 if (pty != ptys.end ())
502 {
503 delete *pty;
504 ptys.erase (pty);
505 }
506 }
507 else
508 break;
509 }
510
511 // destroy all ptys
512 for (vector<ptytty *>::iterator i = ptys.end (); i-- > ptys.begin (); )
513 delete *i;
514}
515
516void
517ptytty::use_helper ()
518{
519 int pid = getpid ();
520
521 if (sock_fd >= 0 && pid == owner_pid)
522 return;
523
524 owner_pid = pid;
525
526 int sv[2];
527
528 if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv))
529 ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n");
530
531 helper_pid = fork ();
532
533 if (helper_pid < 0)
534 ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n");
535
536 if (helper_pid)
537 {
538 // client, process
539 sock_fd = sv[0];
540 close (sv[1]);
541 fcntl (sock_fd, F_SETFD, FD_CLOEXEC);
542 }
543 else
544 {
545 // server, pty-helper
546 sock_fd = sv[1];
547
548 chdir ("/");
549
550 for (int fd = 0; fd < 1023; fd++)
551 if (fd != sock_fd)
552 close (fd);
553
554 serve ();
555 _exit (EXIT_SUCCESS);
556 }
557}
558
559#endif
560
561ptytty *
562ptytty::create ()
563{
564#if PTYTTY_HELPER
565 if (helper_pid && getpid () == owner_pid)
566 // use helper process
567 return new ptytty_proxy;
568 else
569#endif
570 return new ptytty_unix;
571}
572
573void
574ptytty::init ()
575{
576 uid_t uid = getuid ();
577 gid_t gid = getgid ();
578
579 // before doing anything else, check for setuid/setgid operation,
580 // start the helper process and drop privileges
581 if (uid != geteuid ()
582 || gid != getegid ())
583 {
584#if PTYTTY_HELPER
585 use_helper ();
586#else
587 ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n");
588#endif
589
590 drop_privileges ();
591 }
592}
593
594void
595ptytty::drop_privileges ()
596{
597 uid_t uid = getuid ();
598 gid_t gid = getgid ();
599
600 // drop privileges
601#if HAVE_SETRESUID
602 setresgid (gid, gid, gid);
603 setresuid (uid, uid, uid);
604#elif HAVE_SETREUID
605 setregid (gid, gid);
606 setreuid (uid, uid);
607#elif HAVE_SETUID
608 setgid (gid);
609 setuid (uid);
610#endif
611
612 if (uid != geteuid ()
613 || gid != getegid ())
614 ptytty_fatal ("unable to drop privileges, aborting.\n");
615}
616
617/////////////////////////////////////////////////////////////////////////////
618// C API
619
620#ifndef NO_C_API
621
622#define DEFINE_METHOD(retval, name, args1, args2) \
623extern "C" retval ptytty_ ## name args1 \
624{ return ((struct ptytty *)ptytty)->name args2; }
625
626DEFINE_METHOD(int,pty,(void *ptytty),)
627DEFINE_METHOD(int,tty,(void *ptytty),)
628DEFINE_METHOD(int,get,(void *ptytty),())
629DEFINE_METHOD(void,login,(void *ptytty, int cmd_pid, bool login_shell, const char *hostname),(cmd_pid,login_shell,hostname))
630
631DEFINE_METHOD(void,close_tty,(void *ptytty),())
632DEFINE_METHOD(int,make_controlling_tty,(void *ptytty),())
633DEFINE_METHOD(void,set_utf8_mode,(void *ptytty, int on),(on))
634
635#define DEFINE_STATIC(retval, name, args) \
636extern "C" retval ptytty_ ## name args \
637{ return ptytty::name args; }
638
639DEFINE_STATIC(void,drop_privileges,())
640DEFINE_STATIC(void,use_helper,())
641DEFINE_STATIC(void,init,())
642
643DEFINE_STATIC(void *,create,())
644
645void ptytty_delete (void *ptytty)
646{
647 delete (struct ptytty *)ptytty;
648}
649
650// send_fd, recv_fd not exposed
651
652#endif

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines