version 1.3.2.3, 2013/04/09 08:56:57
|
version 1.5.2.1, 2015/06/15 15:52:34
|
Line 26 Log(int lvl, const char *fmt, ...)
|
Line 26 Log(int lvl, const char *fmt, ...)
|
vfprintf(lf, fmt, lst); |
vfprintf(lf, fmt, lst); |
va_end(lst); |
va_end(lst); |
fprintf(lf, "\n"); |
fprintf(lf, "\n"); |
vsyslog(LOG_WARNING, fmt, cp); | vsyslog(LOG_INFO, fmt, cp); |
va_end(cp); |
va_end(cp); |
} |
} |
} |
} |
Line 45 Err(const char *fmt, ...)
|
Line 45 Err(const char *fmt, ...)
|
va_end(cp); |
va_end(cp); |
} |
} |
|
|
static void | static inline void |
initProg() | DumpProc(const char *txt) |
{ |
{ |
char d[MAXPATHLEN]; | Log(1, "%s:: uid:gid=%d:%d UID:GID=%d:%d Prio=%d Class=%s Name=%s Dir=%s Cmd=%s " |
| "Script=%s From=%s:%s Get=%s", txt ? txt : __func__, |
| geteuid(), getegid(), AIT_GET_I16(&proc.proc_uid), |
| AIT_GET_I16(&proc.proc_gid), AIT_GET_I32(&proc.proc_prio), |
| AIT_GET_STR(&proc.proc_class), AIT_GET_STR(&proc.proc_name), |
| AIT_GET_STR(&proc.proc_dir), AIT_GET_STR(&proc.proc_cmd), |
| getenv("PATH_TRANSLATED"), getenv("REMOTE_ADDR"), |
| getenv("REMOTE_PORT"), getenv("REQUEST_URI")); |
| } |
|
|
|
static int |
|
initProg() |
|
{ |
AIT_SET_I16(&proc.proc_uid, getuid()); |
AIT_SET_I16(&proc.proc_uid, getuid()); |
AIT_SET_I16(&proc.proc_gid, getgid()); |
AIT_SET_I16(&proc.proc_gid, getgid()); |
AIT_SET_I32(&proc.proc_prio, getpriority(PRIO_PROCESS, 0)); |
AIT_SET_I32(&proc.proc_prio, getpriority(PRIO_PROCESS, 0)); |
getcwd(d, sizeof d); | AIT_INIT_VAL2(&proc.proc_class, string); |
AIT_SET_STR(&proc.proc_dir, d); | AIT_INIT_VAL2(&proc.proc_dir, string); |
| AIT_INIT_VAL2(&proc.proc_name, string); |
| AIT_INIT_VAL2(&proc.proc_cmd, string); |
|
|
#if 0 |
#if 0 |
lf = fopen(DEFAULT_LOG, "a"); |
lf = fopen(DEFAULT_LOG, "a"); |
Line 63 initProg()
|
Line 76 initProg()
|
lf = stdout; |
lf = stdout; |
|
|
openlog(PACKAGE_NAME, LOG_CONS | LOG_PID | LOG_NDELAY, LOG_USER); |
openlog(PACKAGE_NAME, LOG_CONS | LOG_PID | LOG_NDELAY, LOG_USER); |
|
return 0; |
} |
} |
|
|
static void |
static void |
Line 99 static inline int
|
Line 113 static inline int
|
setUIDGID(char flg, const char *name) |
setUIDGID(char flg, const char *name) |
{ |
{ |
struct stat sb; |
struct stat sb; |
|
struct passwd *pass; |
|
short uid, gid; |
|
|
if (stat(name, &sb) == -1) { | if (name) { |
ESYSERR(0); | if (stat(name, &sb) == -1) { |
return -1; | ESYSERR(0); |
| return -1; |
| } |
| uid = sb.st_uid; |
| gid = sb.st_gid; |
| } else { |
| pass = getpwnam(getenv("SUX_USER")); |
| if (!pass) { |
| Err("Error:: User %s not found", getenv("SUX_USER")); |
| endpwent(); |
| return -1; |
| } |
| uid = pass->pw_uid; |
| gid = pass->pw_gid; |
| endpwent(); |
} |
} |
|
|
if (!(flg & SUX_GET_UID)) |
if (!(flg & SUX_GET_UID)) |
AIT_SET_I16(&proc.proc_uid, sb.st_uid); | AIT_SET_I16(&proc.proc_uid, uid); |
if (!(flg & SUX_GET_GID)) |
if (!(flg & SUX_GET_GID)) |
AIT_SET_I16(&proc.proc_gid, sb.st_gid); | AIT_SET_I16(&proc.proc_gid, gid); |
|
|
return 0; |
return 0; |
} |
} |
|
|
static inline int |
static inline int |
SetClass() | setClassDir() |
{ |
{ |
login_cap_t *cap; |
|
struct passwd *pass; |
struct passwd *pass; |
|
int ret = 0; |
|
|
pass = getpwuid(AIT_GET_I16(&proc.proc_uid)); |
pass = getpwuid(AIT_GET_I16(&proc.proc_uid)); |
if (!pass) { |
if (!pass) { |
Err("Error:: User with this UID %d not found", AIT_GET_I16(&proc.proc_uid)); |
Err("Error:: User with this UID %d not found", AIT_GET_I16(&proc.proc_uid)); |
endpwent(); | ret = -1; |
return -1; | } else { |
} else | |
AIT_SET_STR(&proc.proc_class, pass->pw_class); |
AIT_SET_STR(&proc.proc_class, pass->pw_class); |
|
AIT_SET_STR(&proc.proc_dir, pass->pw_dir); |
|
|
cap = login_getclass(AIT_GET_STR(&proc.proc_class)); | if (setusercontext(NULL, pass, AIT_GET_I16(&proc.proc_uid), |
if (!cap) { | LOGIN_SETLOGIN | LOGIN_SETGROUP | LOGIN_SETUSER | |
Err("Error:: Cant get login class %s", AIT_GET_STR(&proc.proc_class)); | LOGIN_SETPRIORITY | LOGIN_SETRESOURCES)) { |
endpwent(); | Err("Error:: Can't set login class %s", AIT_GET_STR(&proc.proc_class)); |
return -1; | ret = -1; |
| } |
} |
} |
|
|
if (setusercontext(cap, pass, AIT_GET_I16(&proc.proc_uid), LOGIN_SETALL)) { |
|
Err("Error:: Cant set login class %s", AIT_GET_STR(&proc.proc_class)); |
|
login_close(cap); |
|
endpwent(); |
|
return -1; |
|
} |
|
|
|
login_close(cap); |
|
endpwent(); |
endpwent(); |
return 0; | return ret; |
} |
} |
|
|
static int |
static int |
Line 159 LoadCfgData(char flg)
|
Line 182 LoadCfgData(char flg)
|
} |
} |
if (!strcasecmp(str, "SCRIPT")) { |
if (!strcasecmp(str, "SCRIPT")) { |
mode = 1; |
mode = 1; |
if (setUIDGID(flg, AIT_GET_STR(&proc.proc_name)) == -1) | if (setUIDGID(flg, (getenv("SUX_USER") ? NULL : getenv("PATH_TRANSLATED"))) == -1) |
return -1; |
return -1; |
} else if (!strcasecmp(str, "FILE")) { |
} else if (!strcasecmp(str, "FILE")) { |
mode = 2; |
mode = 2; |
if (setUIDGID(flg, AIT_GET_STR(&proc.proc_name)) == -1) |
if (setUIDGID(flg, AIT_GET_STR(&proc.proc_name)) == -1) |
return -1; |
return -1; |
} else if (!strcasecmp(str, "DIR") && | } else if (!strcasecmp(str, "DIR")) { |
(str = cfg_getAttribute(&cfg, "global", "directory"))) { | |
mode = 3; |
mode = 3; |
if (!(flg & SUX_GET_DIR)) | str = AIT_GET_STR(&proc.proc_dir) ? AIT_GET_STR(&proc.proc_dir) : "."; |
AIT_SET_STR(&proc.proc_dir, str); | if (setUIDGID(flg, str) == -1) |
| |
if (setUIDGID(flg, AIT_GET_STR(&proc.proc_dir)) == -1) | |
return -1; |
return -1; |
} else { |
} else { |
Err("Error:: Unknown mode %s", str); |
Err("Error:: Unknown mode %s", str); |
Line 193 LoadCfgData(char flg)
|
Line 213 LoadCfgData(char flg)
|
ELIBERR(cfg); |
ELIBERR(cfg); |
return -1; |
return -1; |
case 0: |
case 0: |
cfg_loadAttribute(&cfg, "associate", "default", &proc.proc_cmd, DEFAULT_CMD); | cfg_loadAttribute(&cfg, "associate", "default", |
| &proc.proc_cmd, DEFAULT_CMD); |
} |
} |
} else |
} else |
AIT_SET_STR(&proc.proc_cmd, DEFAULT_CMD); |
AIT_SET_STR(&proc.proc_cmd, DEFAULT_CMD); |
Line 239 Run(char **argv, char flg)
|
Line 260 Run(char **argv, char flg)
|
} |
} |
array_Destroy(&acmd); |
array_Destroy(&acmd); |
|
|
if (SetClass()) { | if (setClassDir()) { |
if (args) |
if (args) |
e_free(args); |
e_free(args); |
return -1; |
return -1; |
} |
} |
|
|
if (flg & SUX_GET_FORCE) { |
if (flg & SUX_GET_FORCE) { |
if (setgid(AIT_GET_I16(&proc.proc_gid)) == -1) { | if (setegid(AIT_GET_I16(&proc.proc_gid)) == -1) |
ESYSERR(0); | goto err; |
if (args) | if (seteuid(AIT_GET_I16(&proc.proc_uid)) == -1) |
free(args); | goto err; |
return -1; | if (setpriority(PRIO_PROCESS, 0, AIT_GET_I32(&proc.proc_prio)) == -1) |
} | goto err; |
if (setuid(AIT_GET_I16(&proc.proc_uid)) == -1) { | |
ESYSERR(0); | |
if (args) | |
free(args); | |
return -1; | |
} | |
if (setpriority(PRIO_PROCESS, 0, AIT_GET_I32(&proc.proc_prio)) == -1) { | |
ESYSERR(0); | |
if (args) | |
free(args); | |
return -1; | |
} | |
} |
} |
|
|
Log(0, "UID:GID=%d:%d Prio=%d Class=%s Name=%s Dir=%s Cmd=%s Script=%s", |
|
proc.proc_uid, proc.proc_gid, proc.proc_prio, AIT_GET_STR(&proc.proc_class), |
|
AIT_GET_STR(&proc.proc_name), AIT_GET_STR(&proc.proc_dir), |
|
AIT_GET_STR(&proc.proc_cmd), getenv("PATH_TRANSLATED")); |
|
|
|
EVERBS(3) { |
EVERBS(3) { |
char **el = args - 1; |
char **el = args - 1; |
while (*++el) |
while (*++el) |
Log(3, "args: %s", *el); |
Log(3, "args: %s", *el); |
} |
} |
|
|
|
DumpProc(__func__); |
|
|
fflush(lf); |
fflush(lf); |
|
|
execve(cmd, args, environ); |
execve(cmd, args, environ); |
if (args) | err: |
free(args); | |
ESYSERR(0); |
ESYSERR(0); |
|
if (args) |
|
e_free(args); |
return -1; |
return -1; |
} |
} |
|
|