busybox/loginutils/sulogin.c

117 lines
2.5 KiB
C
Raw Normal View History

/* vi: set sw=4 ts=4: */
/*
2006-09-08 22:52:05 +05:30
* Mini sulogin implementation for busybox
*
* Licensed under GPLv2 or later, see file LICENSE in this tarball for details.
*/
#include "libbb.h"
#include <syslog.h>
2008-07-05 14:48:54 +05:30
//static void catchalarm(int UNUSED_PARAM junk)
//{
// exit(EXIT_FAILURE);
//}
int sulogin_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
2008-07-05 14:48:54 +05:30
int sulogin_main(int argc UNUSED_PARAM, char **argv)
{
char *cp;
int timeout = 0;
2006-09-08 22:52:05 +05:30
struct passwd *pwd;
const char *shell;
#if ENABLE_FEATURE_SHADOWPASSWDS
/* Using _r function to avoid pulling in static buffers */
char buffer[256];
struct spwd spw;
#endif
2006-01-25 05:38:53 +05:30
2006-09-09 19:30:58 +05:30
logmode = LOGMODE_BOTH;
2006-10-04 02:30:43 +05:30
openlog(applet_name, 0, LOG_AUTH);
2006-01-25 05:38:53 +05:30
opt_complementary = "t+"; /* -t N */
getopt32(argv, "t:", &timeout);
2006-09-08 22:52:05 +05:30
if (argv[optind]) {
close(0);
close(1);
dup(xopen(argv[optind], O_RDWR));
close(2);
2006-09-08 22:52:05 +05:30
dup(0);
}
2006-09-08 22:52:05 +05:30
/* Malicious use like "sulogin /dev/sda"? */
2006-09-08 22:52:05 +05:30
if (!isatty(0) || !isatty(1) || !isatty(2)) {
2006-09-09 19:30:58 +05:30
logmode = LOGMODE_SYSLOG;
bb_error_msg_and_die("not a tty");
}
/* Clear dangerous stuff, set PATH */
sanitize_env_if_suid();
// bb_askpass() already handles this
// signal(SIGALRM, catchalarm);
2006-09-08 22:52:05 +05:30
pwd = getpwuid(0);
if (!pwd) {
2006-09-09 19:30:58 +05:30
goto auth_error;
2006-09-17 21:58:10 +05:30
}
2006-09-08 22:52:05 +05:30
#if ENABLE_FEATURE_SHADOWPASSWDS
{
/* getspnam_r may return 0 yet set result to NULL.
* At least glibc 2.4 does this. Be extra paranoid here. */
struct spwd *result = NULL;
int r = getspnam_r(pwd->pw_name, &spw, buffer, sizeof(buffer), &result);
if (r || !result) {
goto auth_error;
}
pwd->pw_passwd = result->sp_pwdp;
}
#endif
2006-09-08 22:52:05 +05:30
while (1) {
char *encrypted;
int r;
2006-09-08 22:52:05 +05:30
/* cp points to a static buffer that is zeroed every time */
2006-09-09 19:30:58 +05:30
cp = bb_askpass(timeout,
"Give root password for system maintenance\n"
"(or type Control-D for normal startup):");
if (!cp || !*cp) {
2006-09-08 22:52:05 +05:30
bb_info_msg("Normal startup");
2006-09-09 19:30:58 +05:30
return 0;
}
encrypted = pw_encrypt(cp, pwd->pw_passwd, 1);
r = strcmp(encrypted, pwd->pw_passwd);
free(encrypted);
if (r == 0) {
break;
}
bb_do_delay(FAIL_DELAY);
2006-09-09 19:30:58 +05:30
bb_error_msg("login incorrect");
}
2006-09-08 22:52:05 +05:30
memset(cp, 0, strlen(cp));
// signal(SIGALRM, SIG_DFL);
2006-09-08 22:52:05 +05:30
bb_info_msg("System Maintenance Mode");
2006-09-08 22:52:05 +05:30
USE_SELINUX(renew_current_security_context());
shell = getenv("SUSHELL");
if (!shell)
shell = getenv("sushell");
if (!shell) {
shell = "/bin/sh";
if (pwd->pw_shell[0])
shell = pwd->pw_shell;
}
/* Exec login shell with no additional parameters. Never returns. */
run_shell(shell, 1, NULL, NULL);
2006-09-09 19:30:58 +05:30
auth_error:
bb_error_msg_and_die("no password entry for root");
}