2002-06-23 04:24:25 +00:00
|
|
|
/* vi: set sw=4 ts=4: */
|
2006-07-12 07:56:04 +00:00
|
|
|
/*
|
2006-09-08 17:22:05 +00:00
|
|
|
* Mini sulogin implementation for busybox
|
|
|
|
*
|
2006-07-12 07:56:04 +00:00
|
|
|
* Licensed under GPLv2 or later, see file LICENSE in this tarball for details.
|
|
|
|
*/
|
|
|
|
|
2007-05-26 19:00:18 +00:00
|
|
|
#include "libbb.h"
|
2008-01-27 12:50:12 +00:00
|
|
|
#include <syslog.h>
|
2002-06-23 04:24:25 +00:00
|
|
|
|
2007-10-20 19:20:22 +00:00
|
|
|
//static void catchalarm(int ATTRIBUTE_UNUSED junk)
|
|
|
|
//{
|
|
|
|
// exit(EXIT_FAILURE);
|
|
|
|
//}
|
2002-06-23 04:24:25 +00:00
|
|
|
|
|
|
|
|
2007-10-11 10:05:36 +00:00
|
|
|
int sulogin_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
|
2008-03-17 09:00:54 +00:00
|
|
|
int sulogin_main(int argc ATTRIBUTE_UNUSED, char **argv)
|
2002-06-23 04:24:25 +00:00
|
|
|
{
|
|
|
|
char *cp;
|
|
|
|
int timeout = 0;
|
2006-09-08 17:22:05 +00:00
|
|
|
struct passwd *pwd;
|
2006-10-14 11:47:02 +00:00
|
|
|
const char *shell;
|
2007-03-13 13:01:14 +00:00
|
|
|
#if ENABLE_FEATURE_SHADOWPASSWDS
|
|
|
|
/* Using _r function to avoid pulling in static buffers */
|
|
|
|
char buffer[256];
|
|
|
|
struct spwd spw;
|
|
|
|
#endif
|
2006-01-25 00:08:53 +00:00
|
|
|
|
2006-09-09 14:00:58 +00:00
|
|
|
logmode = LOGMODE_BOTH;
|
2006-10-03 21:00:43 +00:00
|
|
|
openlog(applet_name, 0, LOG_AUTH);
|
2006-01-25 00:08:53 +00:00
|
|
|
|
2008-03-17 09:09:09 +00:00
|
|
|
opt_complementary = "t+"; /* -t N */
|
|
|
|
getopt32(argv, "t:", &timeout);
|
2006-09-08 17:22:05 +00:00
|
|
|
|
|
|
|
if (argv[optind]) {
|
|
|
|
close(0);
|
|
|
|
close(1);
|
|
|
|
dup(xopen(argv[optind], O_RDWR));
|
2006-09-11 00:34:01 +00:00
|
|
|
close(2);
|
2006-09-08 17:22:05 +00:00
|
|
|
dup(0);
|
2002-06-23 04:24:25 +00:00
|
|
|
}
|
2006-09-08 17:22:05 +00:00
|
|
|
|
2008-03-17 09:09:09 +00:00
|
|
|
/* Malicious use like "sulogin /dev/sda"? */
|
2006-09-08 17:22:05 +00:00
|
|
|
if (!isatty(0) || !isatty(1) || !isatty(2)) {
|
2006-09-09 14:00:58 +00:00
|
|
|
logmode = LOGMODE_SYSLOG;
|
|
|
|
bb_error_msg_and_die("not a tty");
|
2006-09-07 16:20:03 +00:00
|
|
|
}
|
2002-06-23 04:24:25 +00:00
|
|
|
|
2007-11-06 05:26:51 +00:00
|
|
|
/* Clear dangerous stuff, set PATH */
|
2008-02-18 11:08:33 +00:00
|
|
|
sanitize_env_if_suid();
|
2002-06-23 04:24:25 +00:00
|
|
|
|
2007-10-20 19:20:22 +00:00
|
|
|
// bb_askpass() already handles this
|
|
|
|
// signal(SIGALRM, catchalarm);
|
2006-09-08 17:22:05 +00:00
|
|
|
|
2006-10-14 11:47:02 +00:00
|
|
|
pwd = getpwuid(0);
|
|
|
|
if (!pwd) {
|
2006-09-09 14:00:58 +00:00
|
|
|
goto auth_error;
|
2006-09-17 16:28:10 +00:00
|
|
|
}
|
2006-09-08 17:22:05 +00:00
|
|
|
|
2006-12-30 14:46:51 +00:00
|
|
|
#if ENABLE_FEATURE_SHADOWPASSWDS
|
2007-10-29 19:25:45 +00:00
|
|
|
{
|
|
|
|
/* getspnam_r may return 0 yet set result to NULL.
|
|
|
|
* At least glibc 2.4 does this. Be extra paranoid here. */
|
|
|
|
struct spwd *result = NULL;
|
|
|
|
int r = getspnam_r(pwd->pw_name, &spw, buffer, sizeof(buffer), &result);
|
|
|
|
if (r || !result) {
|
|
|
|
goto auth_error;
|
|
|
|
}
|
|
|
|
pwd->pw_passwd = result->sp_pwdp;
|
2002-06-23 04:24:25 +00:00
|
|
|
}
|
2006-12-30 14:46:51 +00:00
|
|
|
#endif
|
2006-09-08 17:22:05 +00:00
|
|
|
|
2002-06-23 04:24:25 +00:00
|
|
|
while (1) {
|
2006-09-08 17:22:05 +00:00
|
|
|
/* cp points to a static buffer that is zeroed every time */
|
2006-09-09 14:00:58 +00:00
|
|
|
cp = bb_askpass(timeout,
|
|
|
|
"Give root password for system maintenance\n"
|
|
|
|
"(or type Control-D for normal startup):");
|
|
|
|
|
2002-06-23 04:24:25 +00:00
|
|
|
if (!cp || !*cp) {
|
2006-09-08 17:22:05 +00:00
|
|
|
bb_info_msg("Normal startup");
|
2006-09-09 14:00:58 +00:00
|
|
|
return 0;
|
2002-06-23 04:24:25 +00:00
|
|
|
}
|
2006-09-08 17:22:05 +00:00
|
|
|
if (strcmp(pw_encrypt(cp, pwd->pw_passwd), pwd->pw_passwd) == 0) {
|
2002-06-23 04:24:25 +00:00
|
|
|
break;
|
|
|
|
}
|
2006-01-06 20:59:09 +00:00
|
|
|
bb_do_delay(FAIL_DELAY);
|
2006-09-09 14:00:58 +00:00
|
|
|
bb_error_msg("login incorrect");
|
2002-06-23 04:24:25 +00:00
|
|
|
}
|
2006-09-08 17:22:05 +00:00
|
|
|
memset(cp, 0, strlen(cp));
|
2007-10-20 19:20:22 +00:00
|
|
|
// signal(SIGALRM, SIG_DFL);
|
2005-05-03 06:25:50 +00:00
|
|
|
|
2006-09-08 17:22:05 +00:00
|
|
|
bb_info_msg("System Maintenance Mode");
|
2005-05-03 06:25:50 +00:00
|
|
|
|
2006-09-08 17:22:05 +00:00
|
|
|
USE_SELINUX(renew_current_security_context());
|
2005-05-03 06:25:50 +00:00
|
|
|
|
2006-10-14 11:47:02 +00:00
|
|
|
shell = getenv("SUSHELL");
|
2007-09-10 13:15:28 +00:00
|
|
|
if (!shell)
|
|
|
|
shell = getenv("sushell");
|
2006-10-14 11:47:02 +00:00
|
|
|
if (!shell) {
|
|
|
|
shell = "/bin/sh";
|
|
|
|
if (pwd->pw_shell[0])
|
|
|
|
shell = pwd->pw_shell;
|
|
|
|
}
|
2007-09-10 13:15:28 +00:00
|
|
|
/* Exec login shell with no additional parameters. Never returns. */
|
|
|
|
run_shell(shell, 1, NULL, NULL);
|
2006-09-09 14:00:58 +00:00
|
|
|
|
2007-10-20 19:20:22 +00:00
|
|
|
auth_error:
|
|
|
|
bb_error_msg_and_die("no password entry for root");
|
2002-06-23 04:24:25 +00:00
|
|
|
}
|