| … | |
… | |
| 29 | |
29 | |
| 30 | #include "ptytty.h" |
30 | #include "ptytty.h" |
| 31 | |
31 | |
| 32 | #include <cstdlib> |
32 | #include <cstdlib> |
| 33 | #include <cstring> |
33 | #include <cstring> |
|
|
34 | #include <csignal> |
| 34 | |
35 | |
| 35 | #include <sys/types.h> |
36 | #include <sys/types.h> |
| 36 | #include <sys/socket.h> |
|
|
| 37 | #include <unistd.h> |
37 | #include <unistd.h> |
| 38 | #include <fcntl.h> |
38 | #include <fcntl.h> |
| 39 | |
39 | |
| 40 | #ifdef HAVE_SYS_IOCTL_H |
40 | #ifdef HAVE_SYS_IOCTL_H |
| 41 | # include <sys/ioctl.h> |
41 | # include <sys/ioctl.h> |
| … | |
… | |
| 181 | return pfd; |
181 | return pfd; |
| 182 | } |
182 | } |
| 183 | |
183 | |
| 184 | close (pfd); |
184 | close (pfd); |
| 185 | } |
185 | } |
|
|
186 | |
|
|
187 | return -1; |
| 186 | } |
188 | } |
| 187 | #endif |
189 | #endif |
| 188 | |
190 | |
| 189 | /*----------------------------------------------------------------------*/ |
191 | /*----------------------------------------------------------------------*/ |
| 190 | /* |
192 | /* |
| … | |
… | |
| 371 | } |
373 | } |
| 372 | |
374 | |
| 373 | return true; |
375 | return true; |
| 374 | } |
376 | } |
| 375 | |
377 | |
| 376 | #if PTYTTY_HELPER |
|
|
| 377 | |
|
|
| 378 | static int sock_fd = -1; |
|
|
| 379 | static int helper_pid, owner_pid; |
|
|
| 380 | |
|
|
| 381 | struct command |
|
|
| 382 | { |
|
|
| 383 | enum { get, login, destroy } type; |
|
|
| 384 | |
|
|
| 385 | ptytty *id; |
|
|
| 386 | |
|
|
| 387 | bool login_shell; |
|
|
| 388 | int cmd_pid; |
|
|
| 389 | char hostname[512]; // arbitrary, but should be plenty |
|
|
| 390 | }; |
|
|
| 391 | |
|
|
| 392 | struct ptytty_proxy : ptytty |
|
|
| 393 | { |
|
|
| 394 | ptytty *id; |
|
|
| 395 | |
|
|
| 396 | ptytty_proxy () |
|
|
| 397 | : id(0) |
|
|
| 398 | { |
|
|
| 399 | } |
|
|
| 400 | |
|
|
| 401 | ~ptytty_proxy (); |
|
|
| 402 | |
|
|
| 403 | bool get (); |
|
|
| 404 | void login (int cmd_pid, bool login_shell, const char *hostname); |
|
|
| 405 | }; |
|
|
| 406 | |
|
|
| 407 | bool |
|
|
| 408 | ptytty_proxy::get () |
|
|
| 409 | { |
|
|
| 410 | command cmd; |
|
|
| 411 | |
|
|
| 412 | cmd.type = command::get; |
|
|
| 413 | |
|
|
| 414 | write (sock_fd, &cmd, sizeof (cmd)); |
|
|
| 415 | |
|
|
| 416 | if (read (sock_fd, &id, sizeof (id)) != sizeof (id)) |
|
|
| 417 | ptytty_fatal ("protocol error while creating pty using helper process, aborting.\n"); |
|
|
| 418 | |
|
|
| 419 | if (!id) |
|
|
| 420 | return false; |
|
|
| 421 | |
|
|
| 422 | if ((pty = recv_fd (sock_fd)) < 0 |
|
|
| 423 | || (tty = recv_fd (sock_fd)) < 0) |
|
|
| 424 | ptytty_fatal ("protocol error while reading pty/tty fds from helper process, aborting.\n"); |
|
|
| 425 | |
|
|
| 426 | return true; |
|
|
| 427 | } |
|
|
| 428 | |
|
|
| 429 | void |
|
|
| 430 | ptytty_proxy::login (int cmd_pid, bool login_shell, const char *hostname) |
|
|
| 431 | { |
|
|
| 432 | command cmd; |
|
|
| 433 | |
|
|
| 434 | cmd.type = command::login; |
|
|
| 435 | cmd.id = id; |
|
|
| 436 | cmd.cmd_pid = cmd_pid; |
|
|
| 437 | cmd.login_shell = login_shell; |
|
|
| 438 | strncpy (cmd.hostname, hostname, sizeof (cmd.hostname)); |
|
|
| 439 | |
|
|
| 440 | write (sock_fd, &cmd, sizeof (cmd)); |
|
|
| 441 | } |
|
|
| 442 | |
|
|
| 443 | ptytty_proxy::~ptytty_proxy () |
|
|
| 444 | { |
|
|
| 445 | if (id) |
|
|
| 446 | { |
|
|
| 447 | command cmd; |
|
|
| 448 | |
|
|
| 449 | cmd.type = command::destroy; |
|
|
| 450 | cmd.id = id; |
|
|
| 451 | |
|
|
| 452 | write (sock_fd, &cmd, sizeof (cmd)); |
|
|
| 453 | } |
|
|
| 454 | } |
|
|
| 455 | |
|
|
| 456 | static |
|
|
| 457 | void serve () |
|
|
| 458 | { |
|
|
| 459 | command cmd; |
|
|
| 460 | vector<ptytty *> ptys; |
|
|
| 461 | |
|
|
| 462 | while (read (sock_fd, &cmd, sizeof (command)) == sizeof (command)) |
|
|
| 463 | { |
|
|
| 464 | if (cmd.type == command::get) |
|
|
| 465 | { |
|
|
| 466 | // -> id ptyfd ttyfd |
|
|
| 467 | cmd.id = new ptytty_unix; |
|
|
| 468 | |
|
|
| 469 | if (cmd.id->get ()) |
|
|
| 470 | { |
|
|
| 471 | write (sock_fd, &cmd.id, sizeof (cmd.id)); |
|
|
| 472 | ptys.push_back (cmd.id); |
|
|
| 473 | |
|
|
| 474 | ptytty::send_fd (sock_fd, cmd.id->pty); |
|
|
| 475 | ptytty::send_fd (sock_fd, cmd.id->tty); |
|
|
| 476 | } |
|
|
| 477 | else |
|
|
| 478 | { |
|
|
| 479 | delete cmd.id; |
|
|
| 480 | cmd.id = 0; |
|
|
| 481 | write (sock_fd, &cmd.id, sizeof (cmd.id)); |
|
|
| 482 | } |
|
|
| 483 | } |
|
|
| 484 | else if (cmd.type == command::login) |
|
|
| 485 | { |
|
|
| 486 | #if UTMP_SUPPORT |
|
|
| 487 | if (find (ptys.begin (), ptys.end (), cmd.id)) |
|
|
| 488 | { |
|
|
| 489 | cmd.hostname[sizeof (cmd.hostname) - 1] = 0; |
|
|
| 490 | cmd.id->login (cmd.cmd_pid, cmd.login_shell, cmd.hostname); |
|
|
| 491 | } |
|
|
| 492 | #endif |
|
|
| 493 | } |
|
|
| 494 | else if (cmd.type == command::destroy) |
|
|
| 495 | { |
|
|
| 496 | vector<ptytty *>::iterator pty = find (ptys.begin (), ptys.end (), cmd.id); |
|
|
| 497 | |
|
|
| 498 | if (pty != ptys.end ()) |
|
|
| 499 | { |
|
|
| 500 | delete *pty; |
|
|
| 501 | ptys.erase (pty); |
|
|
| 502 | } |
|
|
| 503 | } |
|
|
| 504 | else |
|
|
| 505 | break; |
|
|
| 506 | } |
|
|
| 507 | |
|
|
| 508 | // destroy all ptys |
|
|
| 509 | for (vector<ptytty *>::iterator i = ptys.end (); i-- > ptys.begin (); ) |
|
|
| 510 | delete *i; |
|
|
| 511 | } |
|
|
| 512 | |
|
|
| 513 | void |
|
|
| 514 | ptytty::use_helper () |
|
|
| 515 | { |
|
|
| 516 | int pid = getpid (); |
|
|
| 517 | |
|
|
| 518 | if (sock_fd >= 0 && pid == owner_pid) |
|
|
| 519 | return; |
|
|
| 520 | |
|
|
| 521 | owner_pid = pid; |
|
|
| 522 | |
|
|
| 523 | int sv[2]; |
|
|
| 524 | |
|
|
| 525 | if (socketpair (AF_UNIX, SOCK_STREAM, 0, sv)) |
|
|
| 526 | ptytty_fatal ("could not create socket to communicate with pty/sessiondb helper, aborting.\n"); |
|
|
| 527 | |
|
|
| 528 | helper_pid = fork (); |
|
|
| 529 | |
|
|
| 530 | if (helper_pid < 0) |
|
|
| 531 | ptytty_fatal ("could not create pty/sessiondb helper process, aborting.\n"); |
|
|
| 532 | |
|
|
| 533 | if (helper_pid) |
|
|
| 534 | { |
|
|
| 535 | // client, process |
|
|
| 536 | sock_fd = sv[0]; |
|
|
| 537 | close (sv[1]); |
|
|
| 538 | fcntl (sock_fd, F_SETFD, FD_CLOEXEC); |
|
|
| 539 | } |
|
|
| 540 | else |
|
|
| 541 | { |
|
|
| 542 | // server, pty-helper |
|
|
| 543 | sock_fd = sv[1]; |
|
|
| 544 | |
|
|
| 545 | chdir ("/"); |
|
|
| 546 | |
|
|
| 547 | for (int fd = 0; fd < 1023; fd++) |
|
|
| 548 | if (fd != sock_fd) |
|
|
| 549 | close (fd); |
|
|
| 550 | |
|
|
| 551 | serve (); |
|
|
| 552 | _exit (EXIT_SUCCESS); |
|
|
| 553 | } |
|
|
| 554 | } |
|
|
| 555 | |
|
|
| 556 | #endif |
|
|
| 557 | |
|
|
| 558 | ptytty * |
|
|
| 559 | ptytty::create () |
|
|
| 560 | { |
|
|
| 561 | #if PTYTTY_HELPER |
|
|
| 562 | if (helper_pid && getpid () == owner_pid) |
|
|
| 563 | // use helper process |
|
|
| 564 | return new ptytty_proxy; |
|
|
| 565 | else |
|
|
| 566 | #endif |
|
|
| 567 | return new ptytty_unix; |
|
|
| 568 | } |
|
|
| 569 | |
|
|
| 570 | void |
|
|
| 571 | ptytty::init () |
|
|
| 572 | { |
|
|
| 573 | uid_t uid = getuid (); |
|
|
| 574 | gid_t gid = getgid (); |
|
|
| 575 | |
|
|
| 576 | // before doing anything else, check for setuid/setgid operation, |
|
|
| 577 | // start the helper process and drop privileges |
|
|
| 578 | if (uid != geteuid () |
|
|
| 579 | || gid != getegid ()) |
|
|
| 580 | { |
|
|
| 581 | #if PTYTTY_HELPER |
|
|
| 582 | use_helper (); |
|
|
| 583 | #else |
|
|
| 584 | ptytty_warn ("running setuid/setgid without pty helper compiled in, continuing unprivileged.\n"); |
|
|
| 585 | #endif |
|
|
| 586 | |
|
|
| 587 | drop_privileges (); |
|
|
| 588 | } |
|
|
| 589 | } |
|
|
| 590 | |
|
|
| 591 | void |
|
|
| 592 | ptytty::drop_privileges () |
|
|
| 593 | { |
|
|
| 594 | uid_t uid = getuid (); |
|
|
| 595 | gid_t gid = getgid (); |
|
|
| 596 | |
|
|
| 597 | // drop privileges |
|
|
| 598 | #if HAVE_SETRESUID |
|
|
| 599 | setresgid (gid, gid, gid); |
|
|
| 600 | setresuid (uid, uid, uid); |
|
|
| 601 | #elif HAVE_SETREUID |
|
|
| 602 | setregid (gid, gid); |
|
|
| 603 | setreuid (uid, uid); |
|
|
| 604 | #elif HAVE_SETUID |
|
|
| 605 | setgid (gid); |
|
|
| 606 | setuid (uid); |
|
|
| 607 | #endif |
|
|
| 608 | |
|
|
| 609 | if (uid != geteuid () |
|
|
| 610 | || gid != getegid ()) |
|
|
| 611 | ptytty_fatal ("unable to drop privileges, aborting.\n"); |
|
|
| 612 | } |
|
|
| 613 | |
|
|
