1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 This file is part of systemd.
6 Copyright 2010 Lennart Poettering
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
25 #include <sys/socket.h>
29 #include <sys/inotify.h>
32 #include <sys/signalfd.h>
36 #include "conf-parser.h"
37 #include "utmp-wtmp.h"
38 #include "socket-util.h"
39 #include "ask-password-api.h"
47 } arg_action
= ACTION_QUERY
;
49 static bool arg_plymouth
= false;
50 static bool arg_console
= false;
52 static int ask_password_plymouth(
55 const char *flag_file
,
57 char ***_passphrases
) {
59 int fd
= -1, notify
= -1;
60 union sockaddr_union sa
;
64 struct pollfd pollfd
[2];
65 char buffer
[LINE_MAX
];
75 if ((notify
= inotify_init1(IN_CLOEXEC
|IN_NONBLOCK
)) < 0) {
80 if (inotify_add_watch(notify
, flag_file
, IN_ATTRIB
/* for the link count */) < 0) {
86 if ((fd
= socket(AF_UNIX
, SOCK_STREAM
|SOCK_CLOEXEC
|SOCK_NONBLOCK
, 0)) < 0) {
92 sa
.sa
.sa_family
= AF_UNIX
;
93 strncpy(sa
.un
.sun_path
+1, "/org/freedesktop/plymouthd", sizeof(sa
.un
.sun_path
)-1);
94 if (connect(fd
, &sa
.sa
, offsetof(struct sockaddr_un
, sun_path
) + 1 + strlen(sa
.un
.sun_path
+1)) < 0) {
95 log_error("Failed to connect to Plymouth: %m");
101 packet
= strdup("c");
104 asprintf(&packet
, "*\002%c%s%n", (int) (strlen(message
) + 1), message
, &n
);
111 if ((k
= loop_write(fd
, packet
, n
+1, true)) != n
+1) {
112 r
= k
< 0 ? (int) k
: -EIO
;
117 pollfd
[POLL_SOCKET
].fd
= fd
;
118 pollfd
[POLL_SOCKET
].events
= POLLIN
;
119 pollfd
[POLL_INOTIFY
].fd
= notify
;
120 pollfd
[POLL_INOTIFY
].events
= POLLIN
;
123 int sleep_for
= -1, j
;
128 y
= now(CLOCK_MONOTONIC
);
135 sleep_for
= (int) ((until
- y
) / USEC_PER_MSEC
);
139 if (access(flag_file
, F_OK
) < 0) {
144 if ((j
= poll(pollfd
, notify
> 0 ? 2 : 1, sleep_for
)) < 0) {
156 if (notify
> 0 && pollfd
[POLL_INOTIFY
].revents
!= 0)
159 if (pollfd
[POLL_SOCKET
].revents
== 0)
162 if ((k
= read(fd
, buffer
+ p
, sizeof(buffer
) - p
)) <= 0) {
163 r
= k
< 0 ? -errno
: -EIO
;
172 if (buffer
[0] == 5) {
175 /* Hmm, first try with cached
176 * passwords failed, so let's retry
177 * with a normal password request */
181 if (asprintf(&packet
, "*\002%c%s%n", (int) (strlen(message
) + 1), message
, &n
) < 0) {
186 if ((k
= loop_write(fd
, packet
, n
+1, true)) != n
+1) {
187 r
= k
< 0 ? (int) k
: -EIO
;
191 accept_cached
= false;
196 /* No password, because UI not shown */
200 } else if (buffer
[0] == 2 || buffer
[0] == 9) {
204 /* One ore more answers */
208 memcpy(&size
, buffer
+1, sizeof(size
));
209 size
= le32toh(size
);
210 if (size
+5 > sizeof(buffer
)) {
218 if (!(l
= strv_parse_nulstr(buffer
+ 5, size
))) {
237 close_nointr_nofail(notify
);
240 close_nointr_nofail(fd
);
247 static int parse_password(const char *filename
, char **wall
) {
248 char *socket_name
= NULL
, *message
= NULL
, *packet
= NULL
;
249 uint64_t not_after
= 0;
252 bool accept_cached
= false;
254 const ConfigTableItem items
[] = {
255 { "Ask", "Socket", config_parse_string
, 0, &socket_name
},
256 { "Ask", "NotAfter", config_parse_uint64
, 0, ¬_after
},
257 { "Ask", "Message", config_parse_string
, 0, &message
},
258 { "Ask", "PID", config_parse_unsigned
, 0, &pid
},
259 { "Ask", "AcceptCached", config_parse_bool
, 0, &accept_cached
},
260 { NULL
, NULL
, NULL
, 0, NULL
}
268 f
= fopen(filename
, "re");
273 log_error("open(%s): %m", filename
);
277 r
= config_parse(filename
, f
, NULL
, config_item_table_lookup
, (void*) items
, true, NULL
);
279 log_error("Failed to parse password file %s: %s", filename
, strerror(-r
));
284 log_error("Invalid password file %s", filename
);
290 if (now(CLOCK_MONOTONIC
) > not_after
) {
303 if (arg_action
== ACTION_LIST
)
304 printf("'%s' (PID %u)\n", message
, pid
);
305 else if (arg_action
== ACTION_WALL
) {
309 "%s%sPassword entry required for \'%s\' (PID %u).\r\n"
310 "Please enter password with the systemd-tty-ask-password-agent tool!",
312 *wall
? "\r\n\r\n" : "",
315 log_error("Out of memory");
325 struct sockaddr_un un
;
327 size_t packet_length
= 0;
329 assert(arg_action
== ACTION_QUERY
||
330 arg_action
== ACTION_WATCH
);
332 if (access(socket_name
, W_OK
) < 0) {
334 if (arg_action
== ACTION_QUERY
)
335 log_info("Not querying '%s' (PID %u), lacking privileges.", message
, pid
);
342 char **passwords
= NULL
;
344 if ((r
= ask_password_plymouth(message
, not_after
, filename
, accept_cached
, &passwords
)) >= 0) {
348 STRV_FOREACH(p
, passwords
)
349 packet_length
+= strlen(*p
) + 1;
351 if (!(packet
= new(char, packet_length
)))
359 STRV_FOREACH(p
, passwords
)
360 d
= stpcpy(d
, *p
) + 1;
369 if ((tty_fd
= acquire_terminal("/dev/console", false, false, false)) < 0) {
374 r
= ask_password_tty(message
, not_after
, filename
, &password
);
377 close_nointr_nofail(tty_fd
);
382 packet_length
= 1+strlen(password
)+1;
383 if (!(packet
= new(char, packet_length
)))
387 strcpy(packet
+1, password
);
394 if (r
== -ETIME
|| r
== -ENOENT
) {
395 /* If the query went away, that's OK */
401 log_error("Failed to query password: %s", strerror(-r
));
405 if ((socket_fd
= socket(AF_UNIX
, SOCK_DGRAM
|SOCK_CLOEXEC
, 0)) < 0) {
406 log_error("socket(): %m");
412 sa
.un
.sun_family
= AF_UNIX
;
413 strncpy(sa
.un
.sun_path
, socket_name
, sizeof(sa
.un
.sun_path
));
415 if (sendto(socket_fd
, packet
, packet_length
, MSG_NOSIGNAL
, &sa
.sa
, offsetof(struct sockaddr_un
, sun_path
) + strlen(socket_name
)) < 0) {
416 log_error("Failed to send: %m");
426 close_nointr_nofail(socket_fd
);
435 static int wall_tty_block(void) {
440 r
= get_ctty_devnr(0, &devnr
);
444 if (asprintf(&p
, "/run/systemd/ask-password-block/%u:%u", major(devnr
), minor(devnr
)) < 0)
447 mkdir_parents(p
, 0700);
450 fd
= open(p
, O_RDONLY
|O_CLOEXEC
|O_NONBLOCK
|O_NOCTTY
);
459 static bool wall_tty_match(const char *path
) {
464 if (path_is_absolute(path
))
465 k
= lstat(path
, &st
);
467 if (asprintf(&p
, "/dev/%s", path
) < 0)
477 if (!S_ISCHR(st
.st_mode
))
480 /* We use named pipes to ensure that wall messages suggesting
481 * password entry are not printed over password prompts
482 * already shown. We use the fact here that opening a pipe in
483 * non-blocking mode for write-only will succeed only if
484 * there's some writer behind it. Using pipes has the
485 * advantage that the block will automatically go away if the
488 if (asprintf(&p
, "/run/systemd/ask-password-block/%u:%u", major(st
.st_rdev
), minor(st
.st_rdev
)) < 0)
491 fd
= open(p
, O_WRONLY
|O_CLOEXEC
|O_NONBLOCK
|O_NOCTTY
);
497 /* What, we managed to open the pipe? Then this tty is filtered. */
498 close_nointr_nofail(fd
);
502 static int show_passwords(void) {
507 if (!(d
= opendir("/run/systemd/ask-password"))) {
511 log_error("opendir(): %m");
515 while ((de
= readdir(d
))) {
520 /* We only support /dev on tmpfs, hence we can rely on
521 * d_type to be reliable */
523 if (de
->d_type
!= DT_REG
)
526 if (ignore_file(de
->d_name
))
529 if (!startswith(de
->d_name
, "ask."))
532 if (!(p
= strappend("/run/systemd/ask-password/", de
->d_name
))) {
533 log_error("Out of memory");
539 if ((q
= parse_password(p
, &wall
)) < 0)
545 utmp_wall(wall
, wall_tty_match
);
557 static int watch_passwords(void) {
564 int notify
= -1, signal_fd
= -1, tty_block_fd
= -1;
565 struct pollfd pollfd
[_FD_MAX
];
569 tty_block_fd
= wall_tty_block();
571 mkdir_p("/run/systemd/ask-password", 0755);
573 if ((notify
= inotify_init1(IN_CLOEXEC
)) < 0) {
578 if (inotify_add_watch(notify
, "/run/systemd/ask-password", IN_CLOSE_WRITE
|IN_MOVED_TO
) < 0) {
583 assert_se(sigemptyset(&mask
) == 0);
584 sigset_add_many(&mask
, SIGINT
, SIGTERM
, -1);
585 assert_se(sigprocmask(SIG_SETMASK
, &mask
, NULL
) == 0);
587 if ((signal_fd
= signalfd(-1, &mask
, SFD_NONBLOCK
|SFD_CLOEXEC
)) < 0) {
588 log_error("signalfd(): %m");
594 pollfd
[FD_INOTIFY
].fd
= notify
;
595 pollfd
[FD_INOTIFY
].events
= POLLIN
;
596 pollfd
[FD_SIGNAL
].fd
= signal_fd
;
597 pollfd
[FD_SIGNAL
].events
= POLLIN
;
600 if ((r
= show_passwords()) < 0)
601 log_error("Failed to show password: %s", strerror(-r
));
603 if (poll(pollfd
, _FD_MAX
, -1) < 0) {
612 if (pollfd
[FD_INOTIFY
].revents
!= 0)
615 if (pollfd
[FD_SIGNAL
].revents
!= 0)
623 close_nointr_nofail(notify
);
626 close_nointr_nofail(signal_fd
);
628 if (tty_block_fd
>= 0)
629 close_nointr_nofail(tty_block_fd
);
634 static int help(void) {
636 printf("%s [OPTIONS...]\n\n"
637 "Process system password requests.\n\n"
638 " -h --help Show this help\n"
639 " --list Show pending password requests\n"
640 " --query Process pending password requests\n"
641 " --watch Continuously process password requests\n"
642 " --wall Continuously forward password requests to wall\n"
643 " --plymouth Ask question with Plymouth instead of on TTY\n"
644 " --console Ask question on /dev/console instead of current TTY\n",
645 program_invocation_short_name
);
650 static int parse_argv(int argc
, char *argv
[]) {
661 static const struct option options
[] = {
662 { "help", no_argument
, NULL
, 'h' },
663 { "list", no_argument
, NULL
, ARG_LIST
},
664 { "query", no_argument
, NULL
, ARG_QUERY
},
665 { "watch", no_argument
, NULL
, ARG_WATCH
},
666 { "wall", no_argument
, NULL
, ARG_WALL
},
667 { "plymouth", no_argument
, NULL
, ARG_PLYMOUTH
},
668 { "console", no_argument
, NULL
, ARG_CONSOLE
},
677 while ((c
= getopt_long(argc
, argv
, "h", options
, NULL
)) >= 0) {
686 arg_action
= ACTION_LIST
;
690 arg_action
= ACTION_QUERY
;
694 arg_action
= ACTION_WATCH
;
698 arg_action
= ACTION_WALL
;
713 log_error("Unknown option code %c", c
);
718 if (optind
!= argc
) {
726 int main(int argc
, char *argv
[]) {
729 log_parse_environment();
734 if ((r
= parse_argv(argc
, argv
)) <= 0)
742 if (arg_action
== ACTION_WATCH
||
743 arg_action
== ACTION_WALL
)
744 r
= watch_passwords();
746 r
= show_passwords();
749 log_error("Error: %s", strerror(-r
));
752 return r
< 0 ? EXIT_FAILURE
: EXIT_SUCCESS
;