Annotation of embedaddon/sudo/src/signal.c, revision 1.1.1.1

1.1       misho       1: /*
                      2:  * Copyright (c) 2009-2013 Todd C. Miller <Todd.Miller@courtesan.com>
                      3:  *
                      4:  * Permission to use, copy, modify, and distribute this software for any
                      5:  * purpose with or without fee is hereby granted, provided that the above
                      6:  * copyright notice and this permission notice appear in all copies.
                      7:  *
                      8:  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
                      9:  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
                     10:  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
                     11:  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
                     12:  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
                     13:  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
                     14:  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
                     15:  */
                     16: 
                     17: #include <config.h>
                     18: 
                     19: #include <sys/types.h>
                     20: #include <stdio.h>
                     21: #ifdef STDC_HEADERS
                     22: # include <stdlib.h>
                     23: # include <stddef.h>
                     24: #else
                     25: # ifdef HAVE_STDLIB_H
                     26: #  include <stdlib.h>
                     27: # endif
                     28: #endif /* STDC_HEADERS */
                     29: #ifdef HAVE_STRING_H
                     30: # include <string.h>
                     31: #endif /* HAVE_STRING_H */
                     32: #ifdef HAVE_STRINGS_H
                     33: # include <strings.h>
                     34: #endif /* HAVE_STRINGS_H */
                     35: #ifdef HAVE_UNISTD_H
                     36: # include <unistd.h>
                     37: #endif /* HAVE_UNISTD_H */
                     38: #include <errno.h>
                     39: #include <signal.h>
                     40: 
                     41: #include "sudo.h"
                     42: 
                     43: int signal_pipe[2];
                     44: 
                     45: static struct signal_state {
                     46:     int signo;
                     47:     int restore;
                     48:     sigaction_t sa;
                     49: } saved_signals[] = {
                     50:     { SIGALRM },       /* SAVED_SIGALRM */
                     51:     { SIGCHLD },       /* SAVED_SIGCHLD */
                     52:     { SIGCONT },       /* SAVED_SIGCONT */
                     53:     { SIGHUP },                /* SAVED_SIGHUP */
                     54:     { SIGINT },                /* SAVED_SIGINT */
                     55:     { SIGPIPE },       /* SAVED_SIGPIPE */
                     56:     { SIGQUIT },       /* SAVED_SIGQUIT */
                     57:     { SIGTERM },       /* SAVED_SIGTERM */
                     58:     { SIGTSTP },       /* SAVED_SIGTSTP */
                     59:     { SIGTTIN },       /* SAVED_SIGTTIN */
                     60:     { SIGTTOU },       /* SAVED_SIGTTOU */
                     61:     { SIGUSR1 },       /* SAVED_SIGUSR1 */
                     62:     { SIGUSR2 },       /* SAVED_SIGUSR2 */
                     63:     { -1 }
                     64: };
                     65: 
                     66: /*
                     67:  * Save signal handler state so it can be restored before exec.
                     68:  */
                     69: void
                     70: save_signals(void)
                     71: {
                     72:     struct signal_state *ss;
                     73:     debug_decl(save_signals, SUDO_DEBUG_MAIN)
                     74: 
                     75:     for (ss = saved_signals; ss->signo != -1; ss++)
                     76:        sigaction(ss->signo, NULL, &ss->sa);
                     77: 
                     78:     debug_return;
                     79: }
                     80: 
                     81: /*
                     82:  * Restore signal handlers to initial state for exec.
                     83:  */
                     84: void
                     85: restore_signals(void)
                     86: {
                     87:     struct signal_state *ss;
                     88:     debug_decl(restore_signals, SUDO_DEBUG_MAIN)
                     89: 
                     90:     for (ss = saved_signals; ss->signo != -1; ss++) {
                     91:        if (ss->restore)
                     92:            sigaction(ss->signo, &ss->sa, NULL);
                     93:     }
                     94: 
                     95:     debug_return;
                     96: }
                     97: 
                     98: static void
                     99: sudo_handler(int signo)
                    100: {
                    101:     /*
                    102:      * The pipe is non-blocking, if we overflow the kernel's pipe
                    103:      * buffer we drop the signal.  This is not a problem in practice.
                    104:      */
                    105:     ignore_result(write(signal_pipe[1], &signo, sizeof(signo)));
                    106: }
                    107: 
                    108: /*
                    109:  * Trap tty-generated (and other) signals so we can't be killed before
                    110:  * calling the policy close function.  The signal pipe will be drained
                    111:  * in sudo_execute() before running the command and new handlers will
                    112:  * be installed in the parent.
                    113:  */
                    114: void
                    115: init_signals(void)
                    116: {
                    117:     struct sigaction sa;
                    118:     struct signal_state *ss;
                    119:     debug_decl(init_signals, SUDO_DEBUG_MAIN)
                    120: 
                    121:     /*
                    122:      * We use a pipe to atomically handle signal notification within
                    123:      * the select() loop without races (we may not have pselect()).
                    124:      */
                    125:     if (pipe_nonblock(signal_pipe) != 0)
                    126:        fatal(_("unable to create pipe"));
                    127: 
                    128:     memset(&sa, 0, sizeof(sa));
                    129:     sigfillset(&sa.sa_mask);
                    130:     sa.sa_flags = SA_RESTART;
                    131:     sa.sa_handler = sudo_handler;
                    132: 
                    133:     for (ss = saved_signals; ss->signo > 0; ss++) {
                    134:        switch (ss->signo) {
                    135:            case SIGCHLD:
                    136:            case SIGCONT:
                    137:            case SIGPIPE:
                    138:            case SIGTTIN:
                    139:            case SIGTTOU:
                    140:                /* Don't install these until exec time. */
                    141:                break;
                    142:            default:
                    143:                if (ss->sa.sa_handler != SIG_IGN)
                    144:                    sigaction(ss->signo, &sa, NULL);
                    145:                break;
                    146:        }
                    147:     }
                    148:     debug_return;
                    149: }
                    150: 
                    151: /*
                    152:  * Like sigaction() but sets restore flag in saved_signals[]
                    153:  * if needed.
                    154:  */
                    155: int
                    156: sudo_sigaction(int signo, struct sigaction *sa, struct sigaction *osa)
                    157: {
                    158:     struct signal_state *ss;
                    159:     int rval;
                    160:     debug_decl(sudo_sigaction, SUDO_DEBUG_MAIN)
                    161: 
                    162:     for (ss = saved_signals; ss->signo > 0; ss++) {
                    163:        if (ss->signo == signo) {
                    164:            /* If signal was or now is ignored, restore old handler on exec. */
                    165:            if (ss->sa.sa_handler == SIG_IGN || sa->sa_handler == SIG_IGN) {
                    166:                sudo_debug_printf(SUDO_DEBUG_INFO,
                    167:                    "will restore signal %d on exec", signo);
                    168:                ss->restore = true;
                    169:            }
                    170:            break;
                    171:        }
                    172:     }
                    173:     rval = sigaction(signo, sa, osa);
                    174: 
                    175:     debug_return_int(rval);
                    176: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>