ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/rxvt-unicode/src/ptytty.C
(Generate patch)

Comparing rxvt-unicode/src/ptytty.C (file contents):
Revision 1.56 by root, Sun Jan 22 04:01:52 2006 UTC vs.
Revision 1.63 by root, Tue Oct 3 11:21:33 2006 UTC

… …
6 *----------------------------------------------------------------------* 6 *----------------------------------------------------------------------*
7 * 7 *
8 * All portions of code are copyright by their respective author/s. 8 * All portions of code are copyright by their respective author/s.
9 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com> 9 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com>
10 * Copyright (c) 2004-2006 Marc Lehmann <pcg@goof.com> 10 * Copyright (c) 2004-2006 Marc Lehmann <pcg@goof.com>
11 * Copyright (c) 2006 Emanuele Giaquinta <e.giaquinta@glauco.it>
11 * 12 *
12 * This program is free software; you can redistribute it and/or modify 13 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU General Public License as published by 14 * it under the terms of the GNU General Public License as published by
14 * the Free Software Foundation; either version 2 of the License, or 15 * the Free Software Foundation; either version 2 of the License, or
15 * (at your option) any later version. 16 * (at your option) any later version.
… …
28 29
29#include "ptytty.h" 30#include "ptytty.h"
30 31
31#include <cstdlib> 32#include <cstdlib>
32#include <cstring> 33#include <cstring>
34#include <csignal>
33 35
34#include <sys/types.h> 36#include <sys/types.h>
35#include <sys/socket.h>
36#include <unistd.h> 37#include <unistd.h>
37#include <fcntl.h> 38#include <fcntl.h>
38 39
39#ifdef HAVE_SYS_IOCTL_H 40#ifdef HAVE_SYS_IOCTL_H
40# include <sys/ioctl.h> 41# include <sys/ioctl.h>
… …
67 * Returns pty file descriptor, or -1 on failure 68 * Returns pty file descriptor, or -1 on failure
68 * If successful, ttydev is set to the name of the slave device. 69 * If successful, ttydev is set to the name of the slave device.
69 * fd_tty _may_ also be set to an open fd to the slave device 70 * fd_tty _may_ also be set to an open fd to the slave device
70 */ 71 */
71#if defined(UNIX98_PTY) 72#if defined(UNIX98_PTY)
73
72static int 74 static int
73get_pty (int *fd_tty, char **ttydev) 75 get_pty (int *fd_tty, char **ttydev)
74{ 76 {
75 int pfd; 77 int pfd;
76 78
77# if defined(HAVE_GETPT) 79# if defined(HAVE_GETPT)
78 pfd = getpt(); 80 pfd = getpt();
79# elif defined(HAVE_POSIX_OPENPT) 81# elif defined(HAVE_POSIX_OPENPT)
80 pfd = posix_openpt (O_RDWR); 82 pfd = posix_openpt (O_RDWR);
81# else 83# else
82 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0); 84 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0);
83# endif 85# endif
86
84 if (pfd >= 0) 87 if (pfd >= 0)
85 { 88 {
86 if (grantpt (pfd) == 0 /* change slave permissions */ 89 if (grantpt (pfd) == 0 /* change slave permissions */
87 && unlockpt (pfd) == 0) 90 && unlockpt (pfd) == 0)
88 { /* slave now unlocked */ 91 { /* slave now unlocked */
89 *ttydev = strdup (ptsname (pfd)); /* get slave's name */ 92 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
90 return pfd; 93 return pfd;
91 } 94 }
92 95
93 close (pfd); 96 close (pfd);
94 } 97 }
95 98
96 return -1; 99 return -1;
97} 100 }
101
98#elif defined(HAVE_OPENPTY) 102#elif defined(HAVE_OPENPTY)
103
99static int 104 static int
100get_pty (int *fd_tty, char **ttydev) 105 get_pty (int *fd_tty, char **ttydev)
101{ 106 {
102 int pfd; 107 int pfd;
103 int res; 108 int res;
104 char tty_name[32]; 109 char tty_name[32];
105 110
106 res = openpty (&pfd, fd_tty, tty_name, NULL, NULL); 111 res = openpty (&pfd, fd_tty, tty_name, NULL, NULL);
112
107 if (res != -1) 113 if (res != -1)
108 { 114 {
109 *ttydev = strdup (tty_name); 115 *ttydev = strdup (tty_name);
116 return pfd;
117 }
118
119 return -1;
120 }
121
122#elif defined(HAVE__GETPTY)
123
124 static int
125 get_pty (int *fd_tty, char **ttydev)
126 {
127 int pfd;
128
129 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0);
130
131 if (*ttydev != NULL)
110 return pfd; 132 return pfd;
111 }
112 133
113 return -1; 134 return -1;
114} 135 }
115#elif defined(HAVE__GETPTY)
116static int
117get_pty (int *fd_tty, char **ttydev)
118{
119 int pfd;
120 136
121 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0);
122 if (*ttydev != NULL)
123 return pfd;
124
125 return -1;
126}
127#elif defined(HAVE_DEV_PTC) 137#elif defined(HAVE_DEV_PTC)
138
128static int 139 static int
129get_pty (int *fd_tty, char **ttydev) 140 get_pty (int *fd_tty, char **ttydev)
130{ 141 {
131 int pfd; 142 int pfd;
132 143
133 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0) 144 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0)
134 { 145 {
135 *ttydev = strdup (ttyname (pfd)); 146 *ttydev = strdup (ttyname (pfd));
136 return pfd; 147 return pfd;
137 } 148 }
138 149
139 return -1; 150 return -1;
140} 151 }
152
141#elif defined(HAVE_DEV_CLONE) 153#elif defined(HAVE_DEV_CLONE)
154
142static int 155 static int
143get_pty (int *fd_tty, char **ttydev) 156 get_pty (int *fd_tty, char **ttydev)
144{ 157 {
145 int pfd; 158 int pfd;
146 159
147 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0) 160 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0)
148 { 161 {
149 *ttydev = strdup (ptsname (pfd)); 162 *ttydev = strdup (ptsname (pfd));
150 return pfd; 163 return pfd;
151 } 164 }
152 165
153 return -1; 166 return -1;
154} 167 }
168
155#else 169#else
170
156/* Based on the code in openssh/openbsd-compat/bsd-openpty.c */ 171 /* Based on the code in openssh/openbsd-compat/bsd-openpty.c */
157static int 172 static int
158get_pty (int *fd_tty, char **ttydev) 173 get_pty (int *fd_tty, char **ttydev)
159{ 174 {
160 int pfd; 175 int pfd;
161 int i; 176 int i;
162 char pty_name[32]; 177 char pty_name[32];
163 char tty_name[32]; 178 char tty_name[32];
164 const char *majors = "pqrstuvwxyzabcde"; 179 const char *majors = "pqrstuvwxyzabcde";
165 const char *minors = "0123456789abcdef"; 180 const char *minors = "0123456789abcdef";
181
166 for (i = 0; i < 256; i++) 182 for (i = 0; i < 256; i++)
167 { 183 {
168 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]); 184 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]);
169 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]); 185 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]);
186
170 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1) 187 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
171 { 188 {
172 snprintf(pty_name, 32, "/dev/ptyp%d", i); 189 snprintf(pty_name, 32, "/dev/ptyp%d", i);
173 snprintf(tty_name, 32, "/dev/ttyp%d", i); 190 snprintf(tty_name, 32, "/dev/ttyp%d", i);
174 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1) 191 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
175 continue; 192 continue;
176 } 193 }
194
177 if (access (tty_name, R_OK | W_OK) == 0) 195 if (access (tty_name, R_OK | W_OK) == 0)
178 { 196 {
179 *ttydev = strdup (tty_name); 197 *ttydev = strdup (tty_name);
180 return pfd; 198 return pfd;
181 } 199 }
182 200
183 close (pfd); 201 close (pfd);
184 } 202 }
185} 203
204 return -1;
205 }
206
186#endif 207#endif
187 208
188/*----------------------------------------------------------------------*/ 209/*----------------------------------------------------------------------*/
189/* 210/*
190 * Returns tty file descriptor, or -1 on failure 211 * Returns tty file descriptor, or -1 on failure
… …
326} 347}
327 348
328void 349void
329ptytty_unix::put () 350ptytty_unix::put ()
330{ 351{
352 if (name)
353 {
331 chmod (name, RESTORE_TTY_MODE); 354 chmod (name, RESTORE_TTY_MODE);
332 chown (name, 0, ttyconf.gid); 355 chown (name, 0, ttyconf.gid);
356 }
333 357
334 close_tty (); 358 close_tty ();
335 359
336 if (pty >= 0) 360 if (pty >= 0)
337 close (pty); 361 close (pty);
… …
370 } 394 }
371 395
372 return true; 396 return true;
373} 397}
374 398
375#if PTYTTY_HELPER
376
377static int sock_fd = -1;
378static int helper_pid, owner_pid;
379
380struct command
381{
382 enum { get, login, destroy } type;
383
384 ptytty *id;
385
386 bool login_shell;
387 int cmd_pid;
388 char hostname[512]; // arbitrary, but should be plenty
389};
390
391struct ptytty_proxy : ptytty
392{
393 ptytty *id;
394
395 ptytty_proxy ()
396 : id(0)
397 {
398 }
399
400 ~ptytty_proxy ();
401
402 bool get ();
403 void login (int cmd_pid, bool login_shell, const char *hostname);
404};
405
406bool
407ptytty_proxy::get ()
408{
409 command cmd;
410
411 cmd.type = command::get;
412
413 write (sock_fd, &cmd, sizeof (cmd));
414
415 if (read (sock_fd, &id, sizeof (id)) != sizeof (id))
416 ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n");
417
418 if (!id)
419 return false;
420
421 if ((pty = recv_fd (sock_fd)) < 0
422 || (tty = recv_fd (sock_fd)) < 0)
423 ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n");
424
425 return true;
426}
427
428void
429ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname)
430{
431 command cmd;
432
433 cmd.type = command::login;
434 cmd.id = id;
435 cmd.cmd_pid = cmd_pid;
436 cmd.login_shell = login_shell;
437 strncpy (cmd.hostname, hostname, sizeof (cmd.hostname));
438
439 write (sock_fd, &cmd, sizeof (cmd));
440}
441
442ptytty_proxy::~ptytty_proxy ()
443{
444 if (id)
445 {
446 command cmd;
447
448 cmd.type = command::destroy;
449 cmd.id = id;
450
451 write (sock_fd, &cmd, sizeof (cmd));
452 }
453}
454
455static
456void serve ()
457{
458 command cmd;
459 vector<ptytty *> ptys;
460
461 while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command))
462 {
463 if (cmd.type == command::get)
464 {
465 // -> id ptyfd ttyfd
466 cmd.id = new ptytty_unix;
467
468 if (cmd.id->get ())
469 {
470 write (sock_fd, &cmd.id, sizeof (cmd.id));
471 ptys.push_back (cmd.id);
472
473 ptytty::send_fd (sock_fd, cmd.id->pty);
474 ptytty::send_fd (sock_fd, cmd.id->tty);
475 }
476 else
477 {
478 delete cmd.id;
479 cmd.id = 0;
480 write (sock_fd, &cmd.id, sizeof (cmd.id));
481 }
482 }
483 else if (cmd.type == command::login)
484 {
485#if UTMP_SUPPORT
486 if (find (ptys.begin (), ptys.end (), cmd.id))
487 {
488 cmd.hostname[sizeof (cmd.hostname) - 1] = 0;
489 cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname);
490 }
491#endif
492 }
493 else if (cmd.type == command::destroy)
494 {
495 vector<ptytty *>::iterator pty = find (ptys.begin (), ptys.end (), cmd.id);
496
497 if (pty != ptys.end ())
498 {
499 delete *pty;
500 ptys.erase (pty);
501 }
502 }
503 else
504 break;
505 }
506
507 // destroy all ptys
508 for (vector<ptytty *>::iterator i = ptys.end (); i-- > ptys.begin (); )
509 delete *i;
510}
511
512void
513ptytty::use_helper ()
514{
515 int pid = getpid ();
516
517 if (sock_fd >= 0 && pid == owner_pid)
518 return;
519
520 owner_pid = pid;
521
522 int sv[2];
523
524 if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv))
525 ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n");
526
527 helper_pid = fork ();
528
529 if (helper_pid < 0)
530 ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n");
531
532 if (helper_pid)
533 {
534 // client, process
535 sock_fd = sv[0];
536 close (sv[1]);
537 fcntl (sock_fd, F_SETFD, FD_CLOEXEC);
538 }
539 else
540 {
541 // server, pty-helper
542 sock_fd = sv[1];
543
544 chdir ("/");
545
546 for (int fd = 0; fd < 1023; fd++)
547 if (fd != sock_fd)
548 close (fd);
549
550 serve ();
551 _exit (EXIT_SUCCESS);
552 }
553}
554
555#endif
556
557ptytty *
558ptytty::create ()
559{
560#if PTYTTY_HELPER
561 if (helper_pid && getpid () == owner_pid)
562 // use helper process
563 return new ptytty_proxy;
564 else
565#endif
566 return new ptytty_unix;
567}
568
569void
570ptytty::init ()
571{
572 uid_t uid = getuid ();
573 gid_t gid = getgid ();
574
575 // before doing anything else, check for setuid/setgid operation,
576 // start the helper process and drop privileges
577 if (uid != geteuid ()
578 || gid != getegid ())
579 {
580#if PTYTTY_HELPER
581 use_helper ();
582#else
583 ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n");
584#endif
585
586 drop_privileges ();
587 }
588}
589
590void
591ptytty::drop_privileges ()
592{
593 uid_t uid = getuid ();
594 gid_t gid = getgid ();
595
596 // drop privileges
597#if HAVE_SETRESUID
598 setresgid (gid, gid, gid);
599 setresuid (uid, uid, uid);
600#elif HAVE_SETREUID
601 setregid (gid, gid);
602 setreuid (uid, uid);
603#elif HAVE_SETUID
604 setgid (gid);
605 setuid (uid);
606#endif
607
608 if (uid != geteuid ()
609 || gid != getegid ())
610 ptytty_fatal ("unable to drop privileges, aborting.\n");
611}
612

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines