ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/rxvt-unicode/src/ptytty.C
(Generate patch)

Comparing rxvt-unicode/src/ptytty.C (file contents):
Revision 1.16 by root, Sun Aug 15 03:30:04 2004 UTC vs.
Revision 1.56 by root, Sun Jan 22 04:01:52 2006 UTC

1// This file is part of libptytty. Do not make local modifications.
2// http://software.schmorp.de/pkg/libptytty
3
1/*--------------------------------*-C-*---------------------------------* 4/*----------------------------------------------------------------------*
2 * File: ptytty.C 5 * File: ptytty.C
3 *----------------------------------------------------------------------* 6 *----------------------------------------------------------------------*
4 * 7 *
5 * All portions of code are copyright by their respective author/s. 8 * All portions of code are copyright by their respective author/s.
6 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com> 9 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com>
7 * Copyright (c) 2004 Marc Lehmann <pcg@goof.com> 10 * Copyright (c) 2004-2006 Marc Lehmann <pcg@goof.com>
8 * 11 *
9 * This program is free software; you can redistribute it and/or modify 12 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by 13 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or 14 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version. 15 * (at your option) any later version.
… …
19 * You should have received a copy of the GNU General Public License 22 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software 23 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 24 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
22 *---------------------------------------------------------------------*/ 25 *---------------------------------------------------------------------*/
23 26
24#include "../config.h" /* NECESSARY */ 27#include "../config.h"
28
25#include "rxvt.h" 29#include "ptytty.h"
26 30
27#ifdef HAVE_STDLIB_H
28# include <cstdlib> 31#include <cstdlib>
29#endif 32#include <cstring>
30#ifdef HAVE_SYS_TYPES_H 33
31# include <sys/types.h> 34#include <sys/types.h>
32#endif 35#include <sys/socket.h>
33#ifdef HAVE_UNISTD_H
34# include <unistd.h> 36#include <unistd.h>
35#endif
36#if defined(HAVE_STRING_H)
37# include <cstring>
38#endif
39#ifdef HAVE_FCNTL_H
40# include <fcntl.h> 37#include <fcntl.h>
41#endif 38
42#ifdef HAVE_SYS_IOCTL_H 39#ifdef HAVE_SYS_IOCTL_H
43# include <sys/ioctl.h> 40# include <sys/ioctl.h>
44#endif 41#endif
45#if defined(PTYS_ARE_PTMX) && defined(HAVE_SYS_STROPTS_H) 42#if defined(HAVE_DEV_PTMX) && defined(HAVE_SYS_STROPTS_H)
46# include <sys/stropts.h> /* for I_PUSH */ 43# include <sys/stropts.h> /* for I_PUSH */
47#endif 44#endif
48#ifdef HAVE_ISASTREAM 45#ifdef HAVE_ISASTREAM
49# include <stropts.h> 46# include <stropts.h>
50#endif 47#endif
51 48#if defined(HAVE_PTY_H)
52#if defined( __FreeBSD__) 49# include <pty.h>
53// better do this via configure, but.... 50#elif defined(HAVE_LIBUTIL_H)
54# include <libutil.h> 51# include <libutil.h>
52#elif defined(HAVE_UTIL_H)
53# include <util.h>
54#endif
55#ifdef TTY_GID_SUPPORT
56#include <grp.h>
55#endif 57#endif
56 58
57#include <cstdio> 59#include <cstdio>
58#include <grp.h> 60
61/////////////////////////////////////////////////////////////////////////////
59 62
60/* ------------------------------------------------------------------------- * 63/* ------------------------------------------------------------------------- *
61 * GET PSEUDO TELETYPE - MASTER AND SLAVE * 64 * GET PSEUDO TELETYPE - MASTER AND SLAVE *
62 * ------------------------------------------------------------------------- */ 65 * ------------------------------------------------------------------------- */
63/* 66/*
64 * Returns pty file descriptor, or -1 on failure 67 * Returns pty file descriptor, or -1 on failure
65 * If successful, ttydev is set to the name of the slave device. 68 * If successful, ttydev is set to the name of the slave device.
66 * fd_tty _may_ also be set to an open fd to the slave device 69 * fd_tty _may_ also be set to an open fd to the slave device
67 */ 70 */
71#if defined(UNIX98_PTY)
68static int 72static int
69get_pty (int *fd_tty, char **ttydev) 73get_pty (int *fd_tty, char **ttydev)
70{ 74{
71 int pfd; 75 int pfd;
72 76
73#ifdef PTYS_ARE_OPENPTY 77# if defined(HAVE_GETPT)
74 char tty_name[sizeof "/dev/pts/????\0"]; 78 pfd = getpt();
79# elif defined(HAVE_POSIX_OPENPT)
80 pfd = posix_openpt (O_RDWR);
81# else
82 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0);
83# endif
84 if (pfd >= 0)
85 {
86 if (grantpt (pfd) == 0 /* change slave permissions */
87 && unlockpt (pfd) == 0)
88 { /* slave now unlocked */
89 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
90 return pfd;
91 }
75 92
93 close (pfd);
94 }
95
96 return -1;
97}
98#elif defined(HAVE_OPENPTY)
99static int
100get_pty (int *fd_tty, char **ttydev)
101{
102 int pfd;
103 int res;
104 char tty_name[32];
105
76 if (openpty (&pfd, fd_tty, tty_name, NULL, NULL) != -1) 106 res = openpty (&pfd, fd_tty, tty_name, NULL, NULL);
107 if (res != -1)
77 { 108 {
78 *ttydev = strdup (tty_name); 109 *ttydev = strdup (tty_name);
79 return pfd; 110 return pfd;
80 } 111 }
81#endif
82 112
83#ifdef PTYS_ARE__GETPTY 113 return -1;
114}
115#elif defined(HAVE__GETPTY)
116static int
117get_pty (int *fd_tty, char **ttydev)
118{
119 int pfd;
120
84 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0); 121 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0);
85 if (*ttydev != NULL) 122 if (*ttydev != NULL)
86 return pfd; 123 return pfd;
87#endif
88 124
89#ifdef PTYS_ARE_GETPTY 125 return -1;
126}
127#elif defined(HAVE_DEV_PTC)
128static int
129get_pty (int *fd_tty, char **ttydev)
130{
131 int pfd;
90 132
91 char *ptydev;
92
93 while ((ptydev = getpty ()) != NULL)
94 if ((pfd = open (ptydev, O_RDWR | O_NOCTTY, 0)) >= 0)
95 {
96 *ttydev = ptydev;
97 return pfd;
98 }
99#endif
100
101#if defined(HAVE_GRANTPT) && defined(HAVE_UNLOCKPT)
102# if defined(PTYS_ARE_GETPT) || defined(PTYS_ARE_PTMX)
103
104 {
105# ifdef PTYS_ARE_GETPT
106 pfd = getpt ();
107# else
108 pfd = open ("/dev/ptmx", O_RDWR | O_NOCTTY, 0);
109# endif
110
111 if (pfd >= 0)
112 {
113 if (grantpt (pfd) == 0 /* change slave permissions */
114 && unlockpt (pfd) == 0)
115 { /* slave now unlocked */
116 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
117 return pfd;
118 }
119 close (pfd);
120 }
121 }
122# endif
123#endif
124
125#ifdef PTYS_ARE_PTC
126 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0) 133 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0)
127 { 134 {
128 *ttydev = strdup (ttyname (pfd)); 135 *ttydev = strdup (ttyname (pfd));
129 return pfd; 136 return pfd;
130 } 137 }
131#endif
132 138
133#ifdef PTYS_ARE_CLONE 139 return -1;
140}
141#elif defined(HAVE_DEV_CLONE)
142static int
143get_pty (int *fd_tty, char **ttydev)
144{
145 int pfd;
146
134 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0) 147 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0)
135 { 148 {
136 *ttydev = strdup (ptsname (pfd)); 149 *ttydev = strdup (ptsname (pfd));
137 return pfd; 150 return pfd;
138 } 151 }
139#endif
140
141#ifdef PTYS_ARE_NUMERIC
142 {
143 int idx;
144 char *c1, *c2;
145 char pty_name[] = "/dev/ptyp???";
146 char tty_name[] = "/dev/ttyp???";
147
148 c1 = &(pty_name[sizeof (pty_name) - 4]);
149 c2 = &(tty_name[sizeof (tty_name) - 4]);
150 for (idx = 0; idx < 256; idx++)
151 {
152 sprintf (c1, "%d", idx);
153 sprintf (c2, "%d", idx);
154 if (access (tty_name, F_OK) < 0)
155 {
156 idx = 256;
157 break;
158 }
159
160 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) >= 0)
161 {
162 if (access (tty_name, R_OK | W_OK) == 0)
163 {
164 *ttydev = strdup (tty_name);
165 return pfd;
166 }
167
168 close (pfd);
169 }
170 }
171 }
172#endif
173
174#ifdef PTYS_ARE_SEARCHED
175 {
176 const char *c1, *c2;
177 char pty_name[] = "/dev/pty??";
178 char tty_name[] = "/dev/tty??";
179
180# ifndef PTYCHAR1
181# define PTYCHAR1 "pqrstuvwxyz"
182# endif
183# ifndef PTYCHAR2
184# define PTYCHAR2 "0123456789abcdef"
185# endif
186
187 for (c1 = PTYCHAR1; *c1; c1++)
188 {
189 pty_name[ (sizeof (pty_name) - 3)] =
190 tty_name[ (sizeof (pty_name) - 3)] = *c1;
191 for (c2 = PTYCHAR2; *c2; c2++)
192 {
193 pty_name[ (sizeof (pty_name) - 2)] =
194 tty_name[ (sizeof (pty_name) - 2)] = *c2;
195 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) >= 0)
196 {
197 if (access (tty_name, R_OK | W_OK) == 0)
198 {
199 *ttydev = strdup (tty_name);
200 return pfd;
201 }
202
203 close (pfd);
204 }
205 }
206 }
207 }
208#endif
209 152
210 return -1; 153 return -1;
211} 154}
155#else
156/* Based on the code in openssh/openbsd-compat/bsd-openpty.c */
157static int
158get_pty (int *fd_tty, char **ttydev)
159{
160 int pfd;
161 int i;
162 char pty_name[32];
163 char tty_name[32];
164 const char *majors = "pqrstuvwxyzabcde";
165 const char *minors = "0123456789abcdef";
166 for (i = 0; i < 256; i++)
167 {
168 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]);
169 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]);
170 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
171 {
172 snprintf(pty_name, 32, "/dev/ptyp%d", i);
173 snprintf(tty_name, 32, "/dev/ttyp%d", i);
174 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
175 continue;
176 }
177 if (access (tty_name, R_OK | W_OK) == 0)
178 {
179 *ttydev = strdup (tty_name);
180 return pfd;
181 }
182
183 close (pfd);
184 }
185}
186#endif
212 187
213/*----------------------------------------------------------------------*/ 188/*----------------------------------------------------------------------*/
214/* 189/*
215 * Returns tty file descriptor, or -1 on failure 190 * Returns tty file descriptor, or -1 on failure
216 */ 191 */
… …
223/*----------------------------------------------------------------------*/ 198/*----------------------------------------------------------------------*/
224/* 199/*
225 * Make our tty a controlling tty so that /dev/tty points to us 200 * Make our tty a controlling tty so that /dev/tty points to us
226 */ 201 */
227static int 202static int
228control_tty (int fd_tty, const char *ttydev) 203control_tty (int fd_tty)
229{ 204{
230#ifndef __QNX__
231 int fd;
232
233 /* ---------------------------------------- */
234# ifdef HAVE_SETSID
235 setsid (); 205 setsid ();
236# endif
237# if defined(HAVE_SETPGID)
238 setpgid (0, 0);
239# elif defined(HAVE_SETPGRP)
240 setpgrp (0, 0);
241# endif
242 206
243 /* ---------------------------------------- */
244# ifdef TIOCNOTTY
245 fd = open ("/dev/tty", O_RDWR | O_NOCTTY);
246 if (fd >= 0)
247 {
248 ioctl (fd, TIOCNOTTY, NULL); /* void tty associations */
249 close (fd);
250 }
251# endif
252
253 /* ---------------------------------------- */
254 fd = open ("/dev/tty", O_RDWR | O_NOCTTY);
255 if (fd >= 0)
256 close (fd); /* ouch: still have controlling tty */
257
258 /* ---------------------------------------- */
259#if defined(PTYS_ARE_PTMX) && defined(I_PUSH) 207#if defined(HAVE_DEV_PTMX) && defined(I_PUSH)
260 /* 208 /*
261 * Push STREAMS modules: 209 * Push STREAMS modules:
262 * ptem: pseudo-terminal hardware emulation module. 210 * ptem: pseudo-terminal hardware emulation module.
263 * ldterm: standard terminal line discipline. 211 * ldterm: standard terminal line discipline.
264 * ttcompat: V7, 4BSD and XENIX STREAMS compatibility module. 212 * ttcompat: V7, 4BSD and XENIX STREAMS compatibility module.
… …
281 ioctl (fd_tty, I_PUSH, "ptem"); 229 ioctl (fd_tty, I_PUSH, "ptem");
282 ioctl (fd_tty, I_PUSH, "ldterm"); 230 ioctl (fd_tty, I_PUSH, "ldterm");
283 ioctl (fd_tty, I_PUSH, "ttcompat"); 231 ioctl (fd_tty, I_PUSH, "ttcompat");
284 } 232 }
285#endif 233#endif
286 /* ---------------------------------------- */ 234
287# if defined(TIOCSCTTY)
288 fd = ioctl (fd_tty, TIOCSCTTY, NULL); 235 ioctl (fd_tty, TIOCSCTTY, NULL);
289# elif defined(TIOCSETCTTY) 236
290 fd = ioctl (fd_tty, TIOCSETCTTY, NULL);
291# else
292 fd = open (ttydev, O_RDWR);
293 if (fd >= 0)
294 close (fd);
295# endif
296 /* ---------------------------------------- */
297 fd = open ("/dev/tty", O_WRONLY); 237 int fd = open ("/dev/tty", O_WRONLY);
298 if (fd < 0) 238 if (fd < 0)
299 return -1; /* fatal */ 239 return -1; /* fatal */
240
300 close (fd); 241 close (fd);
301 /* ---------------------------------------- */
302#endif /* ! __QNX__ */
303 242
304 return 0; 243 return 0;
305} 244}
306 245
307#ifndef NO_SETOWNER_TTYDEV 246void
247ptytty::close_tty ()
248{
249 if (tty < 0)
250 return;
251
252 close (tty);
253 tty = -1;
254}
255
256bool
257ptytty::make_controlling_tty ()
258{
259 return control_tty (tty) >= 0;
260}
261
262void
263ptytty::set_utf8_mode (bool on)
264{
265#ifdef IUTF8
266 if (pty < 0)
267 return;
268
269 struct termios tio;
270
271 if (tcgetattr (pty, &tio) != -1)
272 {
273 tcflag_t new_cflag = tio.c_iflag;
274
275 if (on)
276 new_cflag |= IUTF8;
277 else
278 new_cflag &= ~IUTF8;
279
280 if (new_cflag != tio.c_iflag)
281 {
282 tio.c_iflag = new_cflag;
283 tcsetattr (pty, TCSANOW, &tio);
284 }
285 }
286#endif
287}
288
308static struct ttyconf { 289static struct ttyconf {
309 gid_t gid; 290 gid_t gid;
310 mode_t mode; 291 mode_t mode;
311 292
312 ttyconf () 293 ttyconf ()
… …
321 } 302 }
322 else 303 else
323#endif /* TTY_GID_SUPPORT */ 304#endif /* TTY_GID_SUPPORT */
324 { 305 {
325 mode = S_IRUSR | S_IWUSR | S_IWGRP | S_IWOTH; 306 mode = S_IRUSR | S_IWUSR | S_IWGRP | S_IWOTH;
326 gid = getgid (); 307 gid = 0;
327 } 308 }
328 } 309 }
329} ttyconf; 310} ttyconf;
330 311
312ptytty_unix::ptytty_unix ()
313{
314 name = 0;
315#if UTMP_SUPPORT
316 cmd_pid = 0;
317#endif
318}
319
320ptytty_unix::~ptytty_unix ()
321{
322#if UTMP_SUPPORT
323 logout ();
324#endif
325 put ();
326}
327
331void 328void
332rxvt_ptytty::privileges (rxvt_privaction action) 329ptytty_unix::put ()
333{ 330{
334 rxvt_privileges (RESTORE); 331 chmod (name, RESTORE_TTY_MODE);
332 chown (name, 0, ttyconf.gid);
335 333
336 if (action == SAVE) 334 close_tty ();
337 {
338 //next_tty_action = RESTORE;
339# ifndef RESET_TTY_TO_COMMON_DEFAULTS
340 /* store original tty status for restoration rxvt_clean_exit () -- rgg 04/12/95 */
341 if (lstat (name, &savestat) < 0) /* you lose out */
342 ;//next_tty_action = IGNORE;
343 else
344# endif
345 335
346 { 336 if (pty >= 0)
347 chown (name, getuid (), ttyconf.gid); /* fail silently */ 337 close (pty);
348 chmod (name, ttyconf.mode);
349# ifdef HAVE_REVOKE
350 revoke (name);
351# endif
352 338
353 } 339 free (name);
354 }
355 else
356 { /* action == RESTORE */
357 //next_tty_action = IGNORE;
358# ifndef RESET_TTY_TO_COMMON_DEFAULTS
359 chmod (name, savestat.st_mode);
360 chown (name, savestat.st_uid, savestat.st_gid);
361# else
362 chmod (name, (S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH));
363 chown (name, 0, 0);
364# endif
365 340
366 }
367
368 rxvt_privileges (IGNORE);
369}
370#endif
371
372rxvt_ptytty::rxvt_ptytty ()
373{
374 pty = tty = -1; 341 pty = tty = -1;
375 name = 0; 342 name = 0;
376} 343}
377 344
378rxvt_ptytty::~rxvt_ptytty ()
379{
380 put ();
381}
382
383void
384
385rxvt_ptytty::close_tty ()
386{
387 if (tty >= 0) close (tty);
388 tty = -1;
389}
390
391void
392rxvt_ptytty::put ()
393{
394#ifndef NO_SETOWNER_TTYDEV
395 if (tty >= 0)
396 privileges (RESTORE);
397#endif
398
399 if (pty >= 0) close (pty);
400 close_tty ();
401 free (name);
402
403 pty = tty = -1;
404 name = 0;
405}
406
407bool 345bool
408rxvt_ptytty::make_controlling_tty () 346ptytty_unix::get ()
409{
410 return control_tty (tty, name) >= 0;
411}
412
413bool
414rxvt_ptytty::get ()
415{ 347{
416 /* get master (pty) */ 348 /* get master (pty) */
417 if ((pty = get_pty (&tty, &name)) < 0) 349 if ((pty = get_pty (&tty, &name)) < 0)
418 return false; 350 return false;
419 351
… …
421 353
422 /* get slave (tty) */ 354 /* get slave (tty) */
423 if (tty < 0) 355 if (tty < 0)
424 { 356 {
425#ifndef NO_SETOWNER_TTYDEV 357#ifndef NO_SETOWNER_TTYDEV
426 privileges (SAVE); 358 chown (name, getuid (), ttyconf.gid); /* fail silently */
359 chmod (name, ttyconf.mode);
360# ifdef HAVE_REVOKE
361 revoke (name);
362# endif
427#endif 363#endif
428 364
429 if ((tty = get_tty (name)) < 0) 365 if ((tty = get_tty (name)) < 0)
430 { 366 {
431 put (); 367 put ();
… …
434 } 370 }
435 371
436 return true; 372 return true;
437} 373}
438 374
439/*----------------------- end-of-file (C source) -----------------------*/ 375#if PTYTTY_HELPER
440 376
377static int sock_fd = -1;
378static int helper_pid, owner_pid;
379
380struct command
381{
382 enum { get, login, destroy } type;
383
384 ptytty *id;
385
386 bool login_shell;
387 int cmd_pid;
388 char hostname[512]; // arbitrary, but should be plenty
389};
390
391struct ptytty_proxy : ptytty
392{
393 ptytty *id;
394
395 ptytty_proxy ()
396 : id(0)
397 {
398 }
399
400 ~ptytty_proxy ();
401
402 bool get ();
403 void login (int cmd_pid, bool login_shell, const char *hostname);
404};
405
406bool
407ptytty_proxy::get ()
408{
409 command cmd;
410
411 cmd.type = command::get;
412
413 write (sock_fd, &cmd, sizeof (cmd));
414
415 if (read (sock_fd, &id, sizeof (id)) != sizeof (id))
416 ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n");
417
418 if (!id)
419 return false;
420
421 if ((pty = recv_fd (sock_fd)) < 0
422 || (tty = recv_fd (sock_fd)) < 0)
423 ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n");
424
425 return true;
426}
427
428void
429ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname)
430{
431 command cmd;
432
433 cmd.type = command::login;
434 cmd.id = id;
435 cmd.cmd_pid = cmd_pid;
436 cmd.login_shell = login_shell;
437 strncpy (cmd.hostname, hostname, sizeof (cmd.hostname));
438
439 write (sock_fd, &cmd, sizeof (cmd));
440}
441
442ptytty_proxy::~ptytty_proxy ()
443{
444 if (id)
445 {
446 command cmd;
447
448 cmd.type = command::destroy;
449 cmd.id = id;
450
451 write (sock_fd, &cmd, sizeof (cmd));
452 }
453}
454
455static
456void serve ()
457{
458 command cmd;
459 vector<ptytty *> ptys;
460
461 while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command))
462 {
463 if (cmd.type == command::get)
464 {
465 // -> id ptyfd ttyfd
466 cmd.id = new ptytty_unix;
467
468 if (cmd.id->get ())
469 {
470 write (sock_fd, &cmd.id, sizeof (cmd.id));
471 ptys.push_back (cmd.id);
472
473 ptytty::send_fd (sock_fd, cmd.id->pty);
474 ptytty::send_fd (sock_fd, cmd.id->tty);
475 }
476 else
477 {
478 delete cmd.id;
479 cmd.id = 0;
480 write (sock_fd, &cmd.id, sizeof (cmd.id));
481 }
482 }
483 else if (cmd.type == command::login)
484 {
485#if UTMP_SUPPORT
486 if (find (ptys.begin (), ptys.end (), cmd.id))
487 {
488 cmd.hostname[sizeof (cmd.hostname) - 1] = 0;
489 cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname);
490 }
491#endif
492 }
493 else if (cmd.type == command::destroy)
494 {
495 vector<ptytty *>::iterator pty = find (ptys.begin (), ptys.end (), cmd.id);
496
497 if (pty != ptys.end ())
498 {
499 delete *pty;
500 ptys.erase (pty);
501 }
502 }
503 else
504 break;
505 }
506
507 // destroy all ptys
508 for (vector<ptytty *>::iterator i = ptys.end (); i-- > ptys.begin (); )
509 delete *i;
510}
511
512void
513ptytty::use_helper ()
514{
515 int pid = getpid ();
516
517 if (sock_fd >= 0 && pid == owner_pid)
518 return;
519
520 owner_pid = pid;
521
522 int sv[2];
523
524 if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv))
525 ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n");
526
527 helper_pid = fork ();
528
529 if (helper_pid < 0)
530 ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n");
531
532 if (helper_pid)
533 {
534 // client, process
535 sock_fd = sv[0];
536 close (sv[1]);
537 fcntl (sock_fd, F_SETFD, FD_CLOEXEC);
538 }
539 else
540 {
541 // server, pty-helper
542 sock_fd = sv[1];
543
544 chdir ("/");
545
546 for (int fd = 0; fd < 1023; fd++)
547 if (fd != sock_fd)
548 close (fd);
549
550 serve ();
551 _exit (EXIT_SUCCESS);
552 }
553}
554
555#endif
556
557ptytty *
558ptytty::create ()
559{
560#if PTYTTY_HELPER
561 if (helper_pid && getpid () == owner_pid)
562 // use helper process
563 return new ptytty_proxy;
564 else
565#endif
566 return new ptytty_unix;
567}
568
569void
570ptytty::init ()
571{
572 uid_t uid = getuid ();
573 gid_t gid = getgid ();
574
575 // before doing anything else, check for setuid/setgid operation,
576 // start the helper process and drop privileges
577 if (uid != geteuid ()
578 || gid != getegid ())
579 {
580#if PTYTTY_HELPER
581 use_helper ();
582#else
583 ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n");
584#endif
585
586 drop_privileges ();
587 }
588}
589
590void
591ptytty::drop_privileges ()
592{
593 uid_t uid = getuid ();
594 gid_t gid = getgid ();
595
596 // drop privileges
597#if HAVE_SETRESUID
598 setresgid (gid, gid, gid);
599 setresuid (uid, uid, uid);
600#elif HAVE_SETREUID
601 setregid (gid, gid);
602 setreuid (uid, uid);
603#elif HAVE_SETUID
604 setgid (gid);
605 setuid (uid);
606#endif
607
608 if (uid != geteuid ()
609 || gid != getegid ())
610 ptytty_fatal ("unable to drop privileges, aborting.\n");
611}
612

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines