ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/rxvt-unicode/src/ptytty.C
(Generate patch)

Comparing rxvt-unicode/src/ptytty.C (file contents):
Revision 1.35 by root, Tue Jan 17 10:19:13 2006 UTC vs.
Revision 1.58 by root, Sun Jan 22 12:23:55 2006 UTC

1// This file is part of libptytty. Do not make local modifications.
2// http://software.schmorp.de/pkg/libptytty
3
1/*--------------------------------*-C-*---------------------------------* 4/*----------------------------------------------------------------------*
2 * File: ptytty.C 5 * File: ptytty.C
3 *----------------------------------------------------------------------* 6 *----------------------------------------------------------------------*
4 * 7 *
5 * All portions of code are copyright by their respective author/s. 8 * All portions of code are copyright by their respective author/s.
6 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com> 9 * Copyright (c) 1999-2001 Geoff Wing <gcw@pobox.com>
7 * Copyright (c) 2004-2006 Marc Lehmann <pcg@goof.com> 10 * Copyright (c) 2004-2006 Marc Lehmann <pcg@goof.com>
11 * Copyright (c) 2006 Emanuele Giaquinta <e.giaquinta@glauco.it>
8 * 12 *
9 * This program is free software; you can redistribute it and/or modify 13 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by 14 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or 15 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version. 16 * (at your option) any later version.
… …
19 * You should have received a copy of the GNU General Public License 23 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software 24 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 25 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
22 *---------------------------------------------------------------------*/ 26 *---------------------------------------------------------------------*/
23 27
24#include "../config.h" /* NECESSARY */ 28#include "../config.h"
29
25#include "rxvt.h" 30#include "ptytty.h"
26 31
27# include <cstdlib> 32#include <cstdlib>
28# include <cstring> 33#include <cstring>
29 34
30#ifdef HAVE_SYS_TYPES_H
31# include <sys/types.h> 35#include <sys/types.h>
32#endif 36#include <sys/socket.h>
33#ifdef HAVE_UNISTD_H
34# include <unistd.h> 37#include <unistd.h>
35#endif
36#ifdef HAVE_FCNTL_H
37# include <fcntl.h> 38#include <fcntl.h>
38#endif 39
39#ifdef HAVE_SYS_IOCTL_H 40#ifdef HAVE_SYS_IOCTL_H
40# include <sys/ioctl.h> 41# include <sys/ioctl.h>
41#endif 42#endif
42#if defined(PTYS_ARE_PTMX) && defined(HAVE_SYS_STROPTS_H) 43#if defined(HAVE_DEV_PTMX) && defined(HAVE_SYS_STROPTS_H)
43# include <sys/stropts.h> /* for I_PUSH */ 44# include <sys/stropts.h> /* for I_PUSH */
44#endif 45#endif
45#ifdef HAVE_ISASTREAM 46#ifdef HAVE_ISASTREAM
46# include <stropts.h> 47# include <stropts.h>
47#endif 48#endif
… …
50#elif defined(HAVE_LIBUTIL_H) 51#elif defined(HAVE_LIBUTIL_H)
51# include <libutil.h> 52# include <libutil.h>
52#elif defined(HAVE_UTIL_H) 53#elif defined(HAVE_UTIL_H)
53# include <util.h> 54# include <util.h>
54#endif 55#endif
56#ifdef TTY_GID_SUPPORT
57#include <grp.h>
58#endif
55 59
56#include <cstdio> 60#include <cstdio>
57#include <grp.h> 61
62/////////////////////////////////////////////////////////////////////////////
58 63
59/* ------------------------------------------------------------------------- * 64/* ------------------------------------------------------------------------- *
60 * GET PSEUDO TELETYPE - MASTER AND SLAVE * 65 * GET PSEUDO TELETYPE - MASTER AND SLAVE *
61 * ------------------------------------------------------------------------- */ 66 * ------------------------------------------------------------------------- */
62/* 67/*
63 * Returns pty file descriptor, or -1 on failure 68 * Returns pty file descriptor, or -1 on failure
64 * If successful, ttydev is set to the name of the slave device. 69 * If successful, ttydev is set to the name of the slave device.
65 * fd_tty _may_ also be set to an open fd to the slave device 70 * fd_tty _may_ also be set to an open fd to the slave device
66 */ 71 */
72#if defined(UNIX98_PTY)
67static int 73static int
68get_pty (int *fd_tty, char **ttydev) 74get_pty (int *fd_tty, char **ttydev)
69{ 75{
70 int pfd; 76 int pfd;
71 77
72#ifdef PTYS_ARE_OPENPTY 78# if defined(HAVE_GETPT)
73 char tty_name[sizeof "/dev/pts/????\0"]; 79 pfd = getpt();
80# elif defined(HAVE_POSIX_OPENPT)
81 pfd = posix_openpt (O_RDWR);
82# else
83 pfd = open (CLONE_DEVICE, O_RDWR | O_NOCTTY, 0);
84# endif
85 if (pfd >= 0)
86 {
87 if (grantpt (pfd) == 0 /* change slave permissions */
88 && unlockpt (pfd) == 0)
89 { /* slave now unlocked */
90 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
91 return pfd;
92 }
74 93
75 rxvt_privileges(RESTORE); 94 close (pfd);
95 }
96
97 return -1;
98}
99#elif defined(HAVE_OPENPTY)
100static int
101get_pty (int *fd_tty, char **ttydev)
102{
103 int pfd;
104 int res;
105 char tty_name[32];
106
76 int res = openpty (&pfd, fd_tty, tty_name, NULL, NULL); 107 res = openpty (&pfd, fd_tty, tty_name, NULL, NULL);
77 rxvt_privileges(IGNORE);
78
79 if (res != -1) 108 if (res != -1)
80 { 109 {
81 *ttydev = strdup (tty_name); 110 *ttydev = strdup (tty_name);
82 return pfd; 111 return pfd;
83 } 112 }
84#endif
85 113
86#ifdef PTYS_ARE__GETPTY 114 return -1;
115}
116#elif defined(HAVE__GETPTY)
117static int
118get_pty (int *fd_tty, char **ttydev)
119{
120 int pfd;
121
87 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0); 122 *ttydev = _getpty (&pfd, O_RDWR | O_NONBLOCK | O_NOCTTY, 0622, 0);
88 if (*ttydev != NULL) 123 if (*ttydev != NULL)
89 return pfd; 124 return pfd;
90#endif
91 125
92#if defined(HAVE_GRANTPT) && defined(HAVE_UNLOCKPT) 126 return -1;
93# if defined(PTYS_ARE_GETPT) || defined(PTYS_ARE_POSIX) || defined(PTYS_ARE_PTMX) 127}
128#elif defined(HAVE_DEV_PTC)
129static int
130get_pty (int *fd_tty, char **ttydev)
131{
132 int pfd;
94 133
95 {
96# ifdef PTYS_ARE_GETPT
97 pfd = getpt();
98# else
99# ifdef PTYS_ARE_POSIX
100 pfd = posix_openpt (O_RDWR);
101# else
102 pfd = open ("/dev/ptmx", O_RDWR | O_NOCTTY, 0);
103# endif
104# endif
105
106 if (pfd >= 0)
107 {
108 if (grantpt (pfd) == 0 /* change slave permissions */
109 && unlockpt (pfd) == 0)
110 { /* slave now unlocked */
111 *ttydev = strdup (ptsname (pfd)); /* get slave's name */
112 return pfd;
113 }
114 close (pfd);
115 }
116 }
117# endif
118#endif
119
120#ifdef PTYS_ARE_PTC
121 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0) 134 if ((pfd = open ("/dev/ptc", O_RDWR | O_NOCTTY, 0)) >= 0)
122 { 135 {
123 *ttydev = strdup (ttyname (pfd)); 136 *ttydev = strdup (ttyname (pfd));
124 return pfd; 137 return pfd;
125 } 138 }
126#endif
127 139
128#ifdef PTYS_ARE_CLONE 140 return -1;
141}
142#elif defined(HAVE_DEV_CLONE)
143static int
144get_pty (int *fd_tty, char **ttydev)
145{
146 int pfd;
147
129 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0) 148 if ((pfd = open ("/dev/ptym/clone", O_RDWR | O_NOCTTY, 0)) >= 0)
130 { 149 {
131 *ttydev = strdup (ptsname (pfd)); 150 *ttydev = strdup (ptsname (pfd));
132 return pfd; 151 return pfd;
133 } 152 }
134#endif
135
136#ifdef PTYS_ARE_NUMERIC
137 {
138 int idx;
139 char *c1, *c2;
140 char pty_name[] = "/dev/ptyp???";
141 char tty_name[] = "/dev/ttyp???";
142
143 c1 = &(pty_name[sizeof (pty_name) - 4]);
144 c2 = &(tty_name[sizeof (tty_name) - 4]);
145 for (idx = 0; idx < 256; idx++)
146 {
147 sprintf (c1, "%d", idx);
148 sprintf (c2, "%d", idx);
149 if (access (tty_name, F_OK) < 0)
150 {
151 idx = 256;
152 break;
153 }
154
155 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) >= 0)
156 {
157 if (access (tty_name, R_OK | W_OK) == 0)
158 {
159 *ttydev = strdup (tty_name);
160 return pfd;
161 }
162
163 close (pfd);
164 }
165 }
166 }
167#endif
168
169#ifdef PTYS_ARE_SEARCHED
170 {
171 const char *c1, *c2;
172 char pty_name[] = "/dev/pty??";
173 char tty_name[] = "/dev/tty??";
174
175# ifndef PTYCHAR1
176# define PTYCHAR1 "pqrstuvwxyz"
177# endif
178# ifndef PTYCHAR2
179# define PTYCHAR2 "0123456789abcdef"
180# endif
181
182 for (c1 = PTYCHAR1; *c1; c1++)
183 {
184 pty_name[ (sizeof (pty_name) - 3)] =
185 tty_name[ (sizeof (pty_name) - 3)] = *c1;
186 for (c2 = PTYCHAR2; *c2; c2++)
187 {
188 pty_name[ (sizeof (pty_name) - 2)] =
189 tty_name[ (sizeof (pty_name) - 2)] = *c2;
190 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) >= 0)
191 {
192 if (access (tty_name, R_OK | W_OK) == 0)
193 {
194 *ttydev = strdup (tty_name);
195 return pfd;
196 }
197
198 close (pfd);
199 }
200 }
201 }
202 }
203#endif
204 153
205 return -1; 154 return -1;
206} 155}
156#else
157/* Based on the code in openssh/openbsd-compat/bsd-openpty.c */
158static int
159get_pty (int *fd_tty, char **ttydev)
160{
161 int pfd;
162 int i;
163 char pty_name[32];
164 char tty_name[32];
165 const char *majors = "pqrstuvwxyzabcde";
166 const char *minors = "0123456789abcdef";
167 for (i = 0; i < 256; i++)
168 {
169 snprintf(pty_name, 32, "/dev/pty%c%c", majors[i / 16], minors[i % 16]);
170 snprintf(tty_name, 32, "/dev/tty%c%c", majors[i / 16], minors[i % 16]);
171 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
172 {
173 snprintf(pty_name, 32, "/dev/ptyp%d", i);
174 snprintf(tty_name, 32, "/dev/ttyp%d", i);
175 if ((pfd = open (pty_name, O_RDWR | O_NOCTTY, 0)) == -1)
176 continue;
177 }
178 if (access (tty_name, R_OK | W_OK) == 0)
179 {
180 *ttydev = strdup (tty_name);
181 return pfd;
182 }
183
184 close (pfd);
185 }
186}
187#endif
207 188
208/*----------------------------------------------------------------------*/ 189/*----------------------------------------------------------------------*/
209/* 190/*
210 * Returns tty file descriptor, or -1 on failure 191 * Returns tty file descriptor, or -1 on failure
211 */ 192 */
… …
218/*----------------------------------------------------------------------*/ 199/*----------------------------------------------------------------------*/
219/* 200/*
220 * Make our tty a controlling tty so that /dev/tty points to us 201 * Make our tty a controlling tty so that /dev/tty points to us
221 */ 202 */
222static int 203static int
223control_tty (int fd_tty, const char *ttydev) 204control_tty (int fd_tty)
224{ 205{
225#ifndef __QNX__
226 int fd;
227
228 /* ---------------------------------------- */
229# ifdef HAVE_SETSID
230 setsid (); 206 setsid ();
231# endif
232# if defined(HAVE_SETPGID)
233 setpgid (0, 0);
234# elif defined(HAVE_SETPGRP)
235 setpgrp (0, 0);
236# endif
237 207
238 /* ---------------------------------------- */
239# ifdef TIOCNOTTY
240 fd = open ("/dev/tty", O_RDWR | O_NOCTTY);
241 if (fd >= 0)
242 {
243 ioctl (fd, TIOCNOTTY, NULL); /* void tty associations */
244 close (fd);
245 }
246# endif
247
248 /* ---------------------------------------- */
249 fd = open ("/dev/tty", O_RDWR | O_NOCTTY);
250 if (fd >= 0)
251 close (fd); /* ouch: still have controlling tty */
252
253 /* ---------------------------------------- */
254#if defined(PTYS_ARE_PTMX) && defined(I_PUSH) 208#if defined(HAVE_DEV_PTMX) && defined(I_PUSH)
255 /* 209 /*
256 * Push STREAMS modules: 210 * Push STREAMS modules:
257 * ptem: pseudo-terminal hardware emulation module. 211 * ptem: pseudo-terminal hardware emulation module.
258 * ldterm: standard terminal line discipline. 212 * ldterm: standard terminal line discipline.
259 * ttcompat: V7, 4BSD and XENIX STREAMS compatibility module. 213 * ttcompat: V7, 4BSD and XENIX STREAMS compatibility module.
… …
276 ioctl (fd_tty, I_PUSH, "ptem"); 230 ioctl (fd_tty, I_PUSH, "ptem");
277 ioctl (fd_tty, I_PUSH, "ldterm"); 231 ioctl (fd_tty, I_PUSH, "ldterm");
278 ioctl (fd_tty, I_PUSH, "ttcompat"); 232 ioctl (fd_tty, I_PUSH, "ttcompat");
279 } 233 }
280#endif 234#endif
281 /* ---------------------------------------- */ 235
282# if defined(TIOCSCTTY)
283 fd = ioctl (fd_tty, TIOCSCTTY, NULL); 236 ioctl (fd_tty, TIOCSCTTY, NULL);
284# elif defined(TIOCSETCTTY) 237
285 fd = ioctl (fd_tty, TIOCSETCTTY, NULL);
286# else
287 fd = open (ttydev, O_RDWR);
288 if (fd >= 0)
289 close (fd);
290# endif
291 /* ---------------------------------------- */
292 fd = open ("/dev/tty", O_WRONLY); 238 int fd = open ("/dev/tty", O_WRONLY);
293 if (fd < 0) 239 if (fd < 0)
294 return -1; /* fatal */ 240 return -1; /* fatal */
241
295 close (fd); 242 close (fd);
296 /* ---------------------------------------- */
297#endif /* ! __QNX__ */
298 243
299 return 0; 244 return 0;
300} 245}
301 246
302#ifndef NO_SETOWNER_TTYDEV 247void
248ptytty::close_tty ()
249{
250 if (tty < 0)
251 return;
252
253 close (tty);
254 tty = -1;
255}
256
257bool
258ptytty::make_controlling_tty ()
259{
260 return control_tty (tty) >= 0;
261}
262
263void
264ptytty::set_utf8_mode (bool on)
265{
266#ifdef IUTF8
267 if (pty < 0)
268 return;
269
270 struct termios tio;
271
272 if (tcgetattr (pty, &tio) != -1)
273 {
274 tcflag_t new_cflag = tio.c_iflag;
275
276 if (on)
277 new_cflag |= IUTF8;
278 else
279 new_cflag &= ~IUTF8;
280
281 if (new_cflag != tio.c_iflag)
282 {
283 tio.c_iflag = new_cflag;
284 tcsetattr (pty, TCSANOW, &tio);
285 }
286 }
287#endif
288}
289
303static struct ttyconf { 290static struct ttyconf {
304 gid_t gid; 291 gid_t gid;
305 mode_t mode; 292 mode_t mode;
306 293
307 ttyconf () 294 ttyconf ()
… …
316 } 303 }
317 else 304 else
318#endif /* TTY_GID_SUPPORT */ 305#endif /* TTY_GID_SUPPORT */
319 { 306 {
320 mode = S_IRUSR | S_IWUSR | S_IWGRP | S_IWOTH; 307 mode = S_IRUSR | S_IWUSR | S_IWGRP | S_IWOTH;
321 gid = getgid (); 308 gid = 0;
322 } 309 }
323 } 310 }
324} ttyconf; 311} ttyconf;
325 312
313ptytty_unix::ptytty_unix ()
314{
315 name = 0;
316#if UTMP_SUPPORT
317 cmd_pid = 0;
318#endif
319}
320
321ptytty_unix::~ptytty_unix ()
322{
323#if UTMP_SUPPORT
324 logout ();
325#endif
326 put ();
327}
328
326void 329void
327rxvt_ptytty::privileges (rxvt_privaction action) 330ptytty_unix::put ()
328{ 331{
329 if (!name || !*name) 332 chmod (name, RESTORE_TTY_MODE);
330 return; 333 chown (name, 0, ttyconf.gid);
331 334
332 rxvt_privileges (RESTORE); 335 close_tty ();
333 336
334 if (action == SAVE) 337 if (pty >= 0)
335 { 338 close (pty);
336# ifndef RESET_TTY_TO_COMMON_DEFAULTS
337 /* store original tty status for restoration rxvt_clean_exit () -- rgg 04/12/95 */
338 if (lstat (name, &savestat) < 0) /* you lose out */
339 ;
340 else
341# endif
342 {
343 saved = true;
344 chown (name, getuid (), ttyconf.gid); /* fail silently */
345 chmod (name, ttyconf.mode);
346# ifdef HAVE_REVOKE
347 revoke (name);
348# endif
349 }
350 }
351 else
352 { /* action == RESTORE */
353# ifndef RESET_TTY_TO_COMMON_DEFAULTS
354 if (saved)
355 {
356 chmod (name, savestat.st_mode);
357 chown (name, savestat.st_uid, savestat.st_gid);
358 }
359# else
360 chmod (name, (S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH));
361 chown (name, 0, 0);
362# endif
363 339
364 } 340 free (name);
365 341
366 rxvt_privileges (IGNORE);
367}
368#endif
369
370rxvt_ptytty::rxvt_ptytty ()
371{
372 pty = tty = -1; 342 pty = tty = -1;
373 name = 0; 343 name = 0;
374#ifndef NO_SETOWNER_TTYDEV
375 saved = false;
376#endif
377#if UTMP_SUPPORT
378 cmd_pid = 0;
379#endif
380}
381
382rxvt_ptytty::~rxvt_ptytty ()
383{
384 logout ();
385 put ();
386}
387
388void
389
390rxvt_ptytty::close_tty ()
391{
392 if (tty < 0)
393 return;
394
395 close (tty);
396 tty = -1;
397}
398
399void
400rxvt_ptytty::put ()
401{
402#ifndef NO_SETOWNER_TTYDEV
403 privileges (RESTORE);
404#endif
405
406 if (pty >= 0) close (pty);
407 close_tty ();
408 free (name);
409
410 pty = tty = -1;
411 name = 0;
412} 344}
413 345
414bool 346bool
415rxvt_ptytty::make_controlling_tty () 347ptytty_unix::get ()
416{
417 return control_tty (tty, name) >= 0;
418}
419
420bool
421rxvt_ptytty::get ()
422{ 348{
423 /* get master (pty) */ 349 /* get master (pty) */
424 if ((pty = get_pty (&tty, &name)) < 0) 350 if ((pty = get_pty (&tty, &name)) < 0)
425 return false; 351 return false;
426 352
… …
428 354
429 /* get slave (tty) */ 355 /* get slave (tty) */
430 if (tty < 0) 356 if (tty < 0)
431 { 357 {
432#ifndef NO_SETOWNER_TTYDEV 358#ifndef NO_SETOWNER_TTYDEV
433 privileges (SAVE); 359 chown (name, getuid (), ttyconf.gid); /* fail silently */
360 chmod (name, ttyconf.mode);
361# ifdef HAVE_REVOKE
362 revoke (name);
363# endif
434#endif 364#endif
435 365
436 if ((tty = get_tty (name)) < 0) 366 if ((tty = get_tty (name)) < 0)
437 { 367 {
438 put (); 368 put ();
… …
441 } 371 }
442 372
443 return true; 373 return true;
444} 374}
445 375
376#if PTYTTY_HELPER
377
378static int sock_fd = -1;
379static int helper_pid, owner_pid;
380
381struct command
382{
383 enum { get, login, destroy } type;
384
385 ptytty *id;
386
387 bool login_shell;
388 int cmd_pid;
389 char hostname[512]; // arbitrary, but should be plenty
390};
391
392struct ptytty_proxy : ptytty
393{
394 ptytty *id;
395
396 ptytty_proxy ()
397 : id(0)
398 {
399 }
400
401 ~ptytty_proxy ();
402
403 bool get ();
404 void login (int cmd_pid, bool login_shell, const char *hostname);
405};
406
407bool
408ptytty_proxy::get ()
409{
410 command cmd;
411
412 cmd.type = command::get;
413
414 write (sock_fd, &cmd, sizeof (cmd));
415
416 if (read (sock_fd, &id, sizeof (id)) != sizeof (id))
417 ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n");
418
419 if (!id)
420 return false;
421
422 if ((pty = recv_fd (sock_fd)) < 0
423 || (tty = recv_fd (sock_fd)) < 0)
424 ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n");
425
426 return true;
427}
428
446void 429void
447rxvt_ptytty::set_utf8_mode (bool on) 430ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname)
448{ 431{
449#ifdef IUTF8 432 command cmd;
450 if (pty < 0) 433
434 cmd.type = command::login;
435 cmd.id = id;
436 cmd.cmd_pid = cmd_pid;
437 cmd.login_shell = login_shell;
438 strncpy (cmd.hostname, hostname, sizeof (cmd.hostname));
439
440 write (sock_fd, &cmd, sizeof (cmd));
441}
442
443ptytty_proxy::~ptytty_proxy ()
444{
445 if (id)
446 {
447 command cmd;
448
449 cmd.type = command::destroy;
450 cmd.id = id;
451
452 write (sock_fd, &cmd, sizeof (cmd));
453 }
454}
455
456static
457void serve ()
458{
459 command cmd;
460 vector<ptytty *> ptys;
461
462 while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command))
463 {
464 if (cmd.type == command::get)
465 {
466 // -> id ptyfd ttyfd
467 cmd.id = new ptytty_unix;
468
469 if (cmd.id->get ())
470 {
471 write (sock_fd, &cmd.id, sizeof (cmd.id));
472 ptys.push_back (cmd.id);
473
474 ptytty::send_fd (sock_fd, cmd.id->pty);
475 ptytty::send_fd (sock_fd, cmd.id->tty);
476 }
477 else
478 {
479 delete cmd.id;
480 cmd.id = 0;
481 write (sock_fd, &cmd.id, sizeof (cmd.id));
482 }
483 }
484 else if (cmd.type == command::login)
485 {
486#if UTMP_SUPPORT
487 if (find (ptys.begin (), ptys.end (), cmd.id))
488 {
489 cmd.hostname[sizeof (cmd.hostname) - 1] = 0;
490 cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname);
491 }
492#endif
493 }
494 else if (cmd.type == command::destroy)
495 {
496 vector<ptytty *>::iterator pty = find (ptys.begin (), ptys.end (), cmd.id);
497
498 if (pty != ptys.end ())
499 {
500 delete *pty;
501 ptys.erase (pty);
502 }
503 }
504 else
505 break;
506 }
507
508 // destroy all ptys
509 for (vector<ptytty *>::iterator i = ptys.end (); i-- > ptys.begin (); )
510 delete *i;
511}
512
513void
514ptytty::use_helper ()
515{
516 int pid = getpid ();
517
518 if (sock_fd >= 0 && pid == owner_pid)
451 return; 519 return;
452 520
453 struct termios tio; 521 owner_pid = pid;
454 522
455 if (tcgetattr (pty, &tio) != -1) 523 int sv[2];
456 {
457 tcflag_t new_cflag = tio.c_iflag;
458 524
459 if (on) 525 if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv))
460 new_cflag |= IUTF8; 526 ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n");
461 else
462 new_cflag &= ~IUTF8;
463 527
464 if (new_cflag != tio.c_iflag) 528 helper_pid = fork ();
465 { 529
466 tio.c_iflag = new_cflag; 530 if (helper_pid < 0)
467 tcsetattr (pty, TCSANOW, &tio); 531 ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n");
468 } 532
533 if (helper_pid)
469 } 534 {
470#endif 535 // client, process
471} 536 sock_fd = sv[0];
537 close (sv[1]);
538 fcntl (sock_fd, F_SETFD, FD_CLOEXEC);
539 }
540 else
541 {
542 // server, pty-helper
543 sock_fd = sv[1];
472 544
473/*----------------------- end-of-file (C source) -----------------------*/ 545 chdir ("/");
474 546
547 for (int fd = 0; fd < 1023; fd++)
548 if (fd != sock_fd)
549 close (fd);
550
551 serve ();
552 _exit (EXIT_SUCCESS);
553 }
554}
555
556#endif
557
558ptytty *
559ptytty::create ()
560{
561#if PTYTTY_HELPER
562 if (helper_pid && getpid () == owner_pid)
563 // use helper process
564 return new ptytty_proxy;
565 else
566#endif
567 return new ptytty_unix;
568}
569
570void
571ptytty::init ()
572{
573 uid_t uid = getuid ();
574 gid_t gid = getgid ();
575
576 // before doing anything else, check for setuid/setgid operation,
577 // start the helper process and drop privileges
578 if (uid != geteuid ()
579 || gid != getegid ())
580 {
581#if PTYTTY_HELPER
582 use_helper ();
583#else
584 ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n");
585#endif
586
587 drop_privileges ();
588 }
589}
590
591void
592ptytty::drop_privileges ()
593{
594 uid_t uid = getuid ();
595 gid_t gid = getgid ();
596
597 // drop privileges
598#if HAVE_SETRESUID
599 setresgid (gid, gid, gid);
600 setresuid (uid, uid, uid);
601#elif HAVE_SETREUID
602 setregid (gid, gid);
603 setreuid (uid, uid);
604#elif HAVE_SETUID
605 setgid (gid);
606 setuid (uid);
607#endif
608
609 if (uid != geteuid ()
610 || gid != getegid ())
611 ptytty_fatal ("unable to drop privileges, aborting.\n");
612}
613

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines