--- rxvt-unicode/src/ptytty.C 2006/01/22 12:23:55 1.58 +++ rxvt-unicode/src/ptytty.C 2006/09/11 08:48:37 1.62 @@ -31,9 +31,9 @@ #include #include +#include #include -#include #include #include @@ -183,6 +183,8 @@ close (pfd); } + + return -1; } #endif @@ -373,241 +375,3 @@ return true; } -#if PTYTTY_HELPER - -static int sock_fd = -1; -static int helper_pid, owner_pid; - -struct command -{ - enum { get, login, destroy } type; - - ptytty *id; - - bool login_shell; - int cmd_pid; - char hostname[512]; // arbitrary, but should be plenty -}; - -struct ptytty_proxy : ptytty -{ - ptytty *id; - - ptytty_proxy () - : id(0) - { - } - - ~ptytty_proxy (); - - bool get (); - void login (int cmd_pid, bool login_shell, const char *hostname); -}; - -bool -ptytty_proxy::get () -{ - command cmd; - - cmd.type = command::get; - - write (sock_fd, &cmd, sizeof (cmd)); - - if (read (sock_fd, &id, sizeof (id)) != sizeof (id)) - ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n"); - - if (!id) - return false; - - if ((pty = recv_fd (sock_fd)) < 0 - || (tty = recv_fd (sock_fd)) < 0) - ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n"); - - return true; -} - -void -ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname) -{ - command cmd; - - cmd.type = command::login; - cmd.id = id; - cmd.cmd_pid = cmd_pid; - cmd.login_shell = login_shell; - strncpy (cmd.hostname, hostname, sizeof (cmd.hostname)); - - write (sock_fd, &cmd, sizeof (cmd)); -} - -ptytty_proxy::~ptytty_proxy () -{ - if (id) - { - command cmd; - - cmd.type = command::destroy; - cmd.id = id; - - write (sock_fd, &cmd, sizeof (cmd)); - } -} - -static -void serve () -{ - command cmd; - vector ptys; - - while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command)) - { - if (cmd.type == command::get) - { - // -> id ptyfd ttyfd - cmd.id = new ptytty_unix; - - if (cmd.id->get ()) - { - write (sock_fd, &cmd.id, sizeof (cmd.id)); - ptys.push_back (cmd.id); - - ptytty::send_fd (sock_fd, cmd.id->pty); - ptytty::send_fd (sock_fd, cmd.id->tty); - } - else - { - delete cmd.id; - cmd.id = 0; - write (sock_fd, &cmd.id, sizeof (cmd.id)); - } - } - else if (cmd.type == command::login) - { -#if UTMP_SUPPORT - if (find (ptys.begin (), ptys.end (), cmd.id)) - { - cmd.hostname[sizeof (cmd.hostname) - 1] = 0; - cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname); - } -#endif - } - else if (cmd.type == command::destroy) - { - vector::iterator pty = find (ptys.begin (), ptys.end (), cmd.id); - - if (pty != ptys.end ()) - { - delete *pty; - ptys.erase (pty); - } - } - else - break; - } - - // destroy all ptys - for (vector::iterator i = ptys.end (); i-- > ptys.begin (); ) - delete *i; -} - -void -ptytty::use_helper () -{ - int pid = getpid (); - - if (sock_fd >= 0 && pid == owner_pid) - return; - - owner_pid = pid; - - int sv[2]; - - if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv)) - ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n"); - - helper_pid = fork (); - - if (helper_pid < 0) - ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n"); - - if (helper_pid) - { - // client, process - sock_fd = sv[0]; - close (sv[1]); - fcntl (sock_fd, F_SETFD, FD_CLOEXEC); - } - else - { - // server, pty-helper - sock_fd = sv[1]; - - chdir ("/"); - - for (int fd = 0; fd < 1023; fd++) - if (fd != sock_fd) - close (fd); - - serve (); - _exit (EXIT_SUCCESS); - } -} - -#endif - -ptytty * -ptytty::create () -{ -#if PTYTTY_HELPER - if (helper_pid && getpid () == owner_pid) - // use helper process - return new ptytty_proxy; - else -#endif - return new ptytty_unix; -} - -void -ptytty::init () -{ - uid_t uid = getuid (); - gid_t gid = getgid (); - - // before doing anything else, check for setuid/setgid operation, - // start the helper process and drop privileges - if (uid != geteuid () - || gid != getegid ()) - { -#if PTYTTY_HELPER - use_helper (); -#else - ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n"); -#endif - - drop_privileges (); - } -} - -void -ptytty::drop_privileges () -{ - uid_t uid = getuid (); - gid_t gid = getgid (); - - // drop privileges -#if HAVE_SETRESUID - setresgid (gid, gid, gid); - setresuid (uid, uid, uid); -#elif HAVE_SETREUID - setregid (gid, gid); - setreuid (uid, uid); -#elif HAVE_SETUID - setgid (gid); - setuid (uid); -#endif - - if (uid != geteuid () - || gid != getegid ()) - ptytty_fatal ("unable to drop privileges, aborting.\n"); -} -