Connections.cgi neu geschrieben.

[people/pmueller/ipfire-2.x.git] / src / misc-progs / tripwirectrl.c

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>
#include <fcntl.h>
#include "setuid.h"

#define BUFFER_SIZE 1024

char command[BUFFER_SIZE]; 

int main(int argc, char *argv[])
{

        if (!(initsetuid()))
                exit(1);

        // Check what command is asked
        if (argc==1)
        {
            fprintf (stderr, "Missing tripwirectrl command!\n");
            return 1;
        }

        if (strcmp(argv[1], "tripwirelog")==0)
        {
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/twprint -m r --cfgfile /var/ipfire/tripwire/tw.cfg --twrfile /var/ipfire/tripwire/report/%s", argv[2]);
            safe_system(command);
            return 0;
        }

        if (strcmp(argv[1], "generatereport")==0)
        {
            safe_system("/usr/sbin/tripwire --check --cfgfile /var/ipfire/tripwire/tw.cfg --polfile /var/ipfire/tripwire/tw.pol  >/dev/null 2>&1");
            return 0;
        }

        if (strcmp(argv[1], "deletereport")==0)
        {
        		sprintf(command, "rm -f /var/ipfire/tripwire/report/%s", argv[2]);
            safe_system(command);
            return 0;
        }

        if (strcmp(argv[1], "updatedatabase")==0)
        {
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/tripwire --update --accept-all --cfgfile /var/ipfire/tripwire/tw.cfg --polfile /var/ipfire/tripwire/tw.pol --local-passphrase %s --twrfile %s  >/dev/null 2>&1", argv[2], argv[3]);
            safe_system(command);
            return 0;
        }

        if (strcmp(argv[1], "keys")==0)
        {
            printf("Generating Site Key<br />");
            snprintf(command, BUFFER_SIZE-1, "rm -rf /var/ipfire/tripwire/site.key && /usr/sbin/twadmin --generate-keys --site-keyfile /var/ipfire/tripwire/site.key --site-passphrase %s && chmod 640 /var/ipfire/tripwire/site.key  >/dev/null 2>&1", argv[2]);
            safe_system(command);
            printf("Generating Local Key<br />");
            snprintf(command, BUFFER_SIZE-1, "rm -rf /var/ipfire/tripwire/local.key && /usr/sbin/twadmin --generate-keys --local-keyfile /var/ipfire/tripwire/local.key --local-passphrase %s && chmod 640 /var/ipfire/tripwire/local.key  >/dev/null 2>&1", argv[3]);
            safe_system(command);
            printf("Generating Config File<br />");
            snprintf(command, BUFFER_SIZE-1, "rm -rf /var/ipfire/tripwire/tw.cfg && /usr/sbin/twadmin --create-cfgfile --cfgfile /var/ipfire/tripwire/tw.cfg --site-keyfile /var/ipfire/tripwire/site.key --site-passphrase %s /var/ipfire/tripwire/twcfg.txt && chmod 640 /var/ipfire/tripwire/tw.cfg  >/dev/null 2>&1", argv[2]);
            safe_system(command);
            printf("Generating Policy File<br />");
            snprintf(command, BUFFER_SIZE-1, "rm -rf /var/ipfire/tripwire/tw.pol && /usr/sbin/twadmin --create-polfile --cfgfile /var/ipfire/tripwire/tw.cfg --site-keyfile /var/ipfire/tripwire/site.key --site-passphrase %s /var/ipfire/tripwire/twpol.txt && chmod 640 /var/ipfire/tripwire/tw.pol  >/dev/null 2>&1", argv[2]);
            safe_system(command);
            printf("Initialising - This may take a while depending on your Policy<br />");
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/tripwire --init --cfgfile /var/ipfire/tripwire/tw.cfg --polfile /var/ipfire/tripwire/tw.pol --local-passphrase %s  >/dev/null 2>&1", argv[3]);
            safe_system(command);
            return 0;
        }

        if (strcmp(argv[1], "generatepolicy")==0)
        {
            printf("Generating Policy File<br />");
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/twadmin --create-polfile --site-keyfile /var/ipfire/tripwire/site.key --site-passphrase %s --polfile /var/ipfire/tripwire/tw.pol --cfgfile /var/ipfire/tripwire/tw.cfg /var/ipfire/tripwire/twpol.txt  >/dev/null 2>&1", argv[2]);
            safe_system(command);
            printf("Initialising - This may take a while depending on your Policy<br />");
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/tripwire --init --cfgfile /var/ipfire/tripwire/tw.cfg --polfile /var/ipfire/tripwire/tw.cfg --local-passphrase %s  >/dev/null 2>&1", argv[3]);
            safe_system(command);
            return 0;
        }

        if (strcmp(argv[1], "resetpolicy")==0)
        {
            printf("Generating Policy File<br />");
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/twadmin --create-polfile --site-keyfile /var/ipfire/tripwire/site.key --site-passphrase %s --polfile /var/ipfire/tripwire/tw.pol --cfgfile /var/ipfire/tripwire/tw.cfg /var/ipfire/tripwire/twpol.default  >/dev/null 2>&1", argv[2]);
            safe_system(command);
            printf("Initialising - This may take a while depending on your Policy");
            snprintf(command, BUFFER_SIZE-1, "/usr/sbin/tripwire --init --cfgfile /var/ipfire/tripwire/tw.cfg --polfile /var/ipfire/tripwire/tw.cfg --local-passphrase %s  >/dev/null 2>&1", argv[3]);
            safe_system(command);
            return 0;
        }

        if (strcmp(argv[1], "readconfig")==0)
        {
            safe_system("/bin/chown nobody:nobody /var/ipfire/tripwire/twcfg.txt");
            return 0;
        }

        if (strcmp(argv[1], "lockconfig")==0)
        {
            safe_system("/bin/chown root:root /var/ipfire/tripwire/twcfg.txt");
            return 0;
        }
return 0;
}