1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
/* ISC license. */
#include <string.h>
#include <stdint.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <sys/uio.h>
#include <sys/wait.h>
#include <skalibs/types.h>
#include <skalibs/sgetopt.h>
#include <skalibs/buffer.h>
#include <skalibs/stralloc.h>
#include <skalibs/strerr2.h>
#include <skalibs/djbunix.h>
#include <skalibs/tai.h>
#include <skalibs/env.h>
#include <skalibs/unix-timed.h>
#include <skalibs/unixmessage.h>
#include "s6-sudo.h"
#define USAGE "s6-sudoc [ -e ] [ -t timeoutconn ] [ -T timeoutrun ] [ args... ]"
#define dieusage() strerr_dieusage(100, USAGE)
#define dienomem() strerr_diefu1sys(111, "stralloc_catb")
int main (int argc, char const *const *argv, char const *const *envp)
{
char buf6[64] ;
buffer b6 = BUFFER_INIT(&buffer_read, 6, buf6, 64) ;
unixmessage_sender_t b7 = UNIXMESSAGE_SENDER_INIT(7) ;
subgetopt_t l = SUBGETOPT_ZERO ;
unsigned int t = 0, T = 0 ;
int doenv = 1 ;
tain_t deadline = TAIN_INFINITE_RELATIVE ;
PROG = "s6-sudoc" ;
for (;;)
{
int opt = subgetopt_r(argc, argv, "et:T:", &l) ;
if (opt < 0) break ;
switch (opt)
{
case 'e' : doenv = 0 ; break ;
case 't' : if (!uint0_scan(l.arg, &t)) dieusage() ; break ;
case 'T' : if (!uint0_scan(l.arg, &T)) dieusage() ; break ;
default : dieusage() ;
}
}
argc -= l.ind ; argv += l.ind ;
if (t) tain_from_millisecs(&deadline, t) ;
if ((ndelay_on(6) < 0) || (ndelay_on(7) < 0))
strerr_diefu1sys(111, "make socket non-blocking") ;
if (!fd_sanitize() || !fd_ensure_open(2, 1))
strerr_diefu1sys(111, "sanitize stdin/stdout/stderr") ;
tain_now_g() ;
tain_add_g(&deadline, &deadline) ;
{
size_t r ;
char tmp[S6_SUDO_BANNERB_LEN] ;
r = buffer_timed_get_g(&b6, tmp, S6_SUDO_BANNERB_LEN, &deadline) ;
if (!r)
strerr_diefu1x(111, "connect to the s6-sudod server - check that you have appropriate permissions") ;
if (r < S6_SUDO_BANNERB_LEN)
strerr_diefu1sys(111, "read banner from s6-sudod") ;
if (strncmp(tmp, S6_SUDO_BANNERB, S6_SUDO_BANNERB_LEN))
strerr_dief1x(100, "wrong banner - check that you are connecting to a s6-sudod server") ;
}
{
int fds[3] = { 0, 1, 2 } ;
char pack[16] ;
struct iovec v[4] = {
{ .iov_base = S6_SUDO_BANNERA, .iov_len = S6_SUDO_BANNERA_LEN },
{ .iov_base = pack, .iov_len = 16 },
{ .iov_base = 0, .iov_len = 0 },
{ .iov_base = 0, .iov_len = 0 } } ;
unixmessage_v_t mv = { .v = v, .vlen = 4, .fds = fds, .nfds = 3 } ;
stralloc sa = STRALLOC_ZERO ;
size_t envlen = doenv ? env_len(envp) : 0 ;
uint32_pack_big(pack, (uint32_t)argc) ;
uint32_pack_big(pack + 4, (uint32_t)envlen) ;
if (!env_string(&sa, argv, argc)) dienomem() ;
v[2].iov_len = sa.len ;
uint32_pack_big(pack + 8, (uint32_t)v[2].iov_len) ;
if (doenv)
{
if (!env_string(&sa, envp, envlen)) dienomem() ;
v[3].iov_len = sa.len - v[2].iov_len ;
}
uint32_pack_big(pack + 12, (uint32_t)v[3].iov_len) ;
v[2].iov_base = sa.s ;
v[3].iov_base = sa.s + v[2].iov_len ;
if (!unixmessage_putv_and_close(&b7, &mv, (unsigned char const *)"\003"))
strerr_diefu1sys(111, "unixmessage_putv") ;
stralloc_free(&sa) ;
}
if (!unixmessage_sender_timed_flush_g(&b7, &deadline))
strerr_diefu1sys(111, "send args to server") ;
unixmessage_sender_free(&b7) ;
{
char c ;
if (buffer_timed_get_g(&b6, &c, 1, &deadline) < 1)
strerr_diefu1sys(111, "get confirmation from server") ;
if (c)
{
errno = c ;
strerr_diefu1sys(111, "start privileged program: server answered: ") ;
}
}
if (T) tain_from_millisecs(&deadline, T) ; else deadline = tain_infinite_relative ;
tain_add_g(&deadline, &deadline) ;
{
char pack[UINT_PACK] ;
if (buffer_timed_get_g(&b6, pack, UINT_PACK, &deadline) < UINT_PACK)
strerr_diefu1sys(111, "get exit status from server") ;
uint_unpack_big(pack, &t) ;
}
return wait_estatus(t) ;
}
|
