version 1.2.2.3, 2012/04/05 12:22:44
|
version 1.5.20.2, 2017/10/08 21:58:47
|
Line 12 terms:
|
Line 12 terms:
|
All of the documentation and software included in the ELWIX and AITNET |
All of the documentation and software included in the ELWIX and AITNET |
Releases is copyrighted by ELWIX - Sofia/Bulgaria <info@elwix.org> |
Releases is copyrighted by ELWIX - Sofia/Bulgaria <info@elwix.org> |
|
|
Copyright 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012 | Copyright 2004 - 2017 |
by Michael Pounov <misho@elwix.org>. All rights reserved. |
by Michael Pounov <misho@elwix.org>. All rights reserved. |
|
|
Redistribution and use in source and binary forms, with or without |
Redistribution and use in source and binary forms, with or without |
Line 49 SUCH DAMAGE.
|
Line 49 SUCH DAMAGE.
|
cfg_root_t cfg; |
cfg_root_t cfg; |
int Verbose, Timeout, kq; |
int Verbose, Timeout, kq; |
ait_val_t User, Mount, Dev, Chroot; |
ait_val_t User, Mount, Dev, Chroot; |
char szSess[MAXPATHLEN], szConfig[MAXPATHLEN]; | char szSess[MAXPATHLEN], szSLCK[MAXPATHLEN], szConfig[MAXPATHLEN]; |
extern char compiled[], compiledby[], compilehost[]; |
extern char compiled[], compiledby[], compilehost[]; |
|
|
|
|
Line 64 Usage()
|
Line 64 Usage()
|
"\t-c <dir>\tAfter execute chroot to dir [default=/]\n" |
"\t-c <dir>\tAfter execute chroot to dir [default=/]\n" |
"\t-u <user>\tAfter execute suid to user [default=root]\n" |
"\t-u <user>\tAfter execute suid to user [default=root]\n" |
"\t-d <dev>\tOther device [default=/dev/ufs/elwix]\n" |
"\t-d <dev>\tOther device [default=/dev/ufs/elwix]\n" |
"\t-m <mnt>\tOther mount dir [default=/cf]\n" | "\t-m <mnt>\tOther mount dir [default=/]\n" |
"\t-t <sec>\tTimeout for autolock mount dir after seconds [default=300]\n" |
"\t-t <sec>\tTimeout for autolock mount dir after seconds [default=300]\n" |
|
"\t-L <reason>\tService lock and set RW state of device with reason\n" |
|
"\t-U \t\tService unlock and set RO state of device\n" |
"\n", compiled, compiledby, compilehost); |
"\n", compiled, compiledby, compilehost); |
} |
} |
|
|
Line 111 static int
|
Line 113 static int
|
mkevent(struct kevent *chg, struct kevent *evt) |
mkevent(struct kevent *chg, struct kevent *evt) |
{ |
{ |
int f; |
int f; |
char szStr[MAX_STR]; | char szStr[STRSIZ]; |
|
|
f = open(szSess, O_CREAT | O_WRONLY | O_TRUNC, 0644); |
f = open(szSess, O_CREAT | O_WRONLY | O_TRUNC, 0644); |
if (f == -1) { |
if (f == -1) { |
printf("Error:: can`t lock session #%d - %s\n", errno, strerror(errno)); |
printf("Error:: can`t lock session #%d - %s\n", errno, strerror(errno)); |
return -1; |
return -1; |
} else { |
} else { |
memset(szStr, 0, MAX_STR); | memset(szStr, 0, sizeof szStr); |
snprintf(szStr, MAX_STR, "%d", getpid()); | snprintf(szStr, sizeof szStr, "%d", getpid()); |
write(f, szStr, strlen(szStr)); |
write(f, szStr, strlen(szStr)); |
} |
} |
VERB(3) printf("Created lock file %s\n", szSess); |
VERB(3) printf("Created lock file %s\n", szSess); |
Line 135 mkevent(struct kevent *chg, struct kevent *evt)
|
Line 137 mkevent(struct kevent *chg, struct kevent *evt)
|
memset(evt, 0, sizeof(struct kevent)); |
memset(evt, 0, sizeof(struct kevent)); |
|
|
EV_SET(chg, f, EVFILT_VNODE, EV_ADD, NOTE_DELETE | NOTE_RENAME | NOTE_REVOKE, |
EV_SET(chg, f, EVFILT_VNODE, EV_ADD, NOTE_DELETE | NOTE_RENAME | NOTE_REVOKE, |
0, (intptr_t) NULL); | 0, NULL); |
} |
} |
|
|
return f; |
return f; |
Line 152 cleanexit()
|
Line 154 cleanexit()
|
cfgUnloadConfig(&cfg); |
cfgUnloadConfig(&cfg); |
} |
} |
|
|
|
static int |
|
s_unlck() |
|
{ |
|
if (access(szSLCK, F_OK)) |
|
return 1; |
|
|
|
if (update(MNT_UPDATE | MNT_RDONLY) == -1) |
|
return 8; |
|
|
|
unlink(szSLCK); |
|
VERB(3) printf("Unlock & deleted service lock file %s\n", szSLCK); |
|
return 0; |
|
} |
|
|
|
static int |
|
s_lck(const char *reason) |
|
{ |
|
int f; |
|
char szStr[STRSIZ]; |
|
|
|
if (!access(szSLCK, F_OK)) { |
|
printf("cfexec:: Service held lock ...\n"); |
|
return 127; |
|
} |
|
|
|
f = open(szSLCK, O_CREAT | O_WRONLY | O_TRUNC, 0644); |
|
if (f == -1) { |
|
printf("Error:: can`t service lock session #%d - %s\n", errno, strerror(errno)); |
|
return -1; |
|
} else { |
|
memset(szStr, 0, sizeof szStr); |
|
snprintf(szStr, sizeof szStr, "[%d] - %s", getpid(), reason); |
|
write(f, szStr, strlen(szStr)); |
|
} |
|
close(f); |
|
|
|
if (update(MNT_UPDATE) == -1) { |
|
unlink(szSLCK); |
|
return 4; |
|
} |
|
|
|
VERB(3) printf("Lock & created service lock file %s\n", szSLCK); |
|
return 0; |
|
} |
|
|
|
|
int |
int |
main(int argc, char **argv) |
main(int argc, char **argv) |
{ |
{ |
char ch; | char ch, mod = 0, reason[STRSIZ]; |
const char *err = NULL; |
const char *err = NULL; |
struct kevent chg, evt; |
struct kevent chg, evt; |
struct timespec ts; |
struct timespec ts; |
pid_t pid; |
pid_t pid; |
int f, stat = 0; | int f, ret = 0, stat = 0; |
|
|
strlcpy(szConfig, DEFAULT_CONFIG, MAXPATHLEN); |
strlcpy(szConfig, DEFAULT_CONFIG, MAXPATHLEN); |
/* Load variables from config if exists */ |
/* Load variables from config if exists */ |
Line 195 main(int argc, char **argv)
|
Line 242 main(int argc, char **argv)
|
atexit(cleanexit); |
atexit(cleanexit); |
|
|
/* Load variables from arguments if exists */ |
/* Load variables from arguments if exists */ |
while ((ch = getopt(argc, argv, "hvu:c:d:m:t:")) != -1) | while ((ch = getopt(argc, argv, "hvUu:c:d:m:t:L:")) != -1) |
switch (ch) { |
switch (ch) { |
case 'v': |
case 'v': |
Verbose++; |
Verbose++; |
Line 212 main(int argc, char **argv)
|
Line 259 main(int argc, char **argv)
|
case 'm': |
case 'm': |
AIT_SET_STR(&Mount, optarg); |
AIT_SET_STR(&Mount, optarg); |
break; |
break; |
|
case 'L': |
|
strlcpy(reason, optarg, sizeof reason); |
|
mod = 1; |
|
break; |
|
case 'U': |
|
mod = -1; |
|
break; |
case 't': |
case 't': |
#ifndef HAVE_STRTONUM |
#ifndef HAVE_STRTONUM |
Timeout = (int) strtol(optarg, NULL, 0); |
Timeout = (int) strtol(optarg, NULL, 0); |
Line 234 main(int argc, char **argv)
|
Line 288 main(int argc, char **argv)
|
|
|
memset(szSess, 0, MAXPATHLEN); |
memset(szSess, 0, MAXPATHLEN); |
snprintf(szSess, MAXPATHLEN, "%s%s-cfexec.LCK", DEFAULT_TMP, AIT_GET_STR(&Mount)); |
snprintf(szSess, MAXPATHLEN, "%s%s-cfexec.LCK", DEFAULT_TMP, AIT_GET_STR(&Mount)); |
|
memset(szSLCK, 0, MAXPATHLEN); |
|
snprintf(szSLCK, MAXPATHLEN, CFEXEC_SLOCK, DEFAULT_TMP); |
|
|
|
/* we have request for service lock! */ |
|
if (mod) { |
|
VERB(3) printf("Info(3):: mode=%hhd\n", mod); |
|
if (mod == -1) |
|
ret = s_unlck(); |
|
else |
|
ret = s_lck(reason); |
|
return ret; |
|
} |
|
|
VERB(3) printf("Info(3):: Chroot=%s SUID=%s Device=%s Mount=%s Timeout=%d Session=%s\n", |
VERB(3) printf("Info(3):: Chroot=%s SUID=%s Device=%s Mount=%s Timeout=%d Session=%s\n", |
AIT_GET_STR(&Chroot), AIT_GET_STR(&User), AIT_GET_STR(&Dev), |
AIT_GET_STR(&Chroot), AIT_GET_STR(&User), AIT_GET_STR(&Dev), |
AIT_GET_STR(&Mount), Timeout, szSess); |
AIT_GET_STR(&Mount), Timeout, szSess); |
Line 271 main(int argc, char **argv)
|
Line 337 main(int argc, char **argv)
|
stat = 7; |
stat = 7; |
break; |
break; |
case 0: |
case 0: |
|
if (!access(szSLCK, F_OK)) { |
|
VERB(1) printf("Timeout reached - service locked\n"); |
|
break; |
|
} |
VERB(1) printf("Timeout reached - secure mount\n"); |
VERB(1) printf("Timeout reached - secure mount\n"); |
default: |
default: |
VERB(1) printf("Lock file is deleted - secure mount\n"); |
VERB(1) printf("Lock file is deleted - secure mount\n"); |
if (update(MNT_UPDATE | MNT_RDONLY) == -1) | if (access(szSLCK, F_OK) && update(MNT_UPDATE | MNT_RDONLY) == -1) |
stat = 8; |
stat = 8; |
} |
} |
|
|
Line 319 main(int argc, char **argv)
|
Line 389 main(int argc, char **argv)
|
if (stat == 32512) |
if (stat == 32512) |
stat = 127; |
stat = 127; |
|
|
if (update(MNT_UPDATE | MNT_RDONLY) == -1) | if (access(szSLCK, F_OK) && update(MNT_UPDATE | MNT_RDONLY) == -1) |
return 8; |
return 8; |
} |
} |
} |
} |