Home | History | Annotate | Line # | Download | only in rlogind
rlogind.c revision 1.22
      1  1.22   itojun /*	$NetBSD: rlogind.c,v 1.22 2000/11/09 01:04:14 itojun Exp $	*/
      2  1.20   itojun 
      3  1.20   itojun /*
      4  1.20   itojun  * Copyright (C) 1998 WIDE Project.
      5  1.20   itojun  * All rights reserved.
      6  1.20   itojun  *
      7  1.20   itojun  * Redistribution and use in source and binary forms, with or without
      8  1.20   itojun  * modification, are permitted provided that the following conditions
      9  1.20   itojun  * are met:
     10  1.20   itojun  * 1. Redistributions of source code must retain the above copyright
     11  1.20   itojun  *    notice, this list of conditions and the following disclaimer.
     12  1.20   itojun  * 2. Redistributions in binary form must reproduce the above copyright
     13  1.20   itojun  *    notice, this list of conditions and the following disclaimer in the
     14  1.20   itojun  *    documentation and/or other materials provided with the distribution.
     15  1.20   itojun  * 3. All advertising materials mentioning features or use of this software
     16  1.20   itojun  *    must display the following acknowledgement:
     17  1.20   itojun  *    This product includes software developed by WIDE Project and
     18  1.20   itojun  *    its contributors.
     19  1.20   itojun  * 4. Neither the name of the project nor the names of its contributors
     20  1.20   itojun  *    may be used to endorse or promote products derived from this software
     21  1.20   itojun  *    without specific prior written permission.
     22  1.20   itojun  *
     23  1.20   itojun  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     24  1.20   itojun  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     25  1.20   itojun  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     26  1.20   itojun  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     27  1.20   itojun  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     28  1.20   itojun  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     29  1.20   itojun  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     30  1.20   itojun  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     31  1.20   itojun  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     32  1.20   itojun  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     33  1.20   itojun  * SUCH DAMAGE.
     34  1.20   itojun  */
     35  1.10      mrg 
     36   1.1      cgd /*-
     37   1.5      cgd  * Copyright (c) 1983, 1988, 1989, 1993
     38   1.5      cgd  *	The Regents of the University of California.  All rights reserved.
     39   1.1      cgd  *
     40   1.1      cgd  * Redistribution and use in source and binary forms, with or without
     41   1.1      cgd  * modification, are permitted provided that the following conditions
     42   1.1      cgd  * are met:
     43   1.1      cgd  * 1. Redistributions of source code must retain the above copyright
     44   1.1      cgd  *    notice, this list of conditions and the following disclaimer.
     45   1.1      cgd  * 2. Redistributions in binary form must reproduce the above copyright
     46   1.1      cgd  *    notice, this list of conditions and the following disclaimer in the
     47   1.1      cgd  *    documentation and/or other materials provided with the distribution.
     48   1.1      cgd  * 3. All advertising materials mentioning features or use of this software
     49   1.1      cgd  *    must display the following acknowledgement:
     50   1.1      cgd  *	This product includes software developed by the University of
     51   1.1      cgd  *	California, Berkeley and its contributors.
     52   1.1      cgd  * 4. Neither the name of the University nor the names of its contributors
     53   1.1      cgd  *    may be used to endorse or promote products derived from this software
     54   1.1      cgd  *    without specific prior written permission.
     55   1.1      cgd  *
     56   1.1      cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     57   1.1      cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     58   1.1      cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     59   1.1      cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     60   1.1      cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     61   1.1      cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     62   1.1      cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     63   1.1      cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     64   1.1      cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     65   1.1      cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     66   1.1      cgd  * SUCH DAMAGE.
     67   1.1      cgd  */
     68   1.1      cgd 
     69  1.10      mrg #include <sys/cdefs.h>
     70   1.1      cgd #ifndef lint
     71  1.10      mrg __COPYRIGHT("@(#) Copyright (c) 1983, 1988, 1989, 1993\n\
     72  1.10      mrg 	The Regents of the University of California.  All rights reserved.\n");
     73  1.10      mrg #if 0
     74  1.10      mrg static char sccsid[] = "@(#)rlogind.c	8.2 (Berkeley) 4/28/95";
     75  1.10      mrg #else
     76  1.22   itojun __RCSID("$NetBSD: rlogind.c,v 1.22 2000/11/09 01:04:14 itojun Exp $");
     77  1.10      mrg #endif
     78   1.1      cgd #endif /* not lint */
     79   1.1      cgd 
     80   1.1      cgd /*
     81   1.1      cgd  * remote login server:
     82   1.1      cgd  *	\0
     83   1.1      cgd  *	remuser\0
     84   1.1      cgd  *	locuser\0
     85   1.1      cgd  *	terminal_type/speed\0
     86   1.1      cgd  *	data
     87   1.1      cgd  */
     88   1.1      cgd 
     89   1.1      cgd #define	FD_SETSIZE	16		/* don't need many bits for select */
     90   1.1      cgd #include <sys/param.h>
     91   1.1      cgd #include <sys/stat.h>
     92   1.1      cgd #include <sys/ioctl.h>
     93   1.1      cgd #include <signal.h>
     94   1.1      cgd #include <termios.h>
     95   1.1      cgd 
     96   1.1      cgd #include <sys/socket.h>
     97   1.1      cgd #include <netinet/in.h>
     98   1.1      cgd #include <netinet/in_systm.h>
     99   1.1      cgd #include <netinet/ip.h>
    100   1.1      cgd #include <arpa/inet.h>
    101   1.1      cgd #include <netdb.h>
    102   1.1      cgd 
    103   1.1      cgd #include <pwd.h>
    104   1.1      cgd #include <syslog.h>
    105   1.1      cgd #include <errno.h>
    106   1.1      cgd #include <stdio.h>
    107   1.1      cgd #include <unistd.h>
    108   1.1      cgd #include <stdlib.h>
    109   1.1      cgd #include <string.h>
    110   1.9    lukem #include <util.h>
    111   1.8      mrg #include <utmp.h>
    112   1.1      cgd #include "pathnames.h"
    113   1.1      cgd 
    114   1.1      cgd #ifndef TIOCPKT_WINDOW
    115   1.1      cgd #define TIOCPKT_WINDOW 0x80
    116   1.1      cgd #endif
    117   1.1      cgd 
    118   1.9    lukem #define		OPTIONS			"alnL"
    119   1.1      cgd 
    120   1.1      cgd char	*env[2];
    121   1.1      cgd #define	NMAX 30
    122   1.1      cgd char	lusername[NMAX+1], rusername[NMAX+1];
    123   1.1      cgd static	char term[64] = "TERM=";
    124   1.1      cgd #define	ENVSIZE	(sizeof("TERM=")-1)	/* skip null for concatenation */
    125   1.1      cgd int	keepalive = 1;
    126   1.1      cgd int	check_all = 0;
    127   1.9    lukem int	log_success = 0;
    128   1.1      cgd 
    129   1.1      cgd struct	passwd *pwd;
    130   1.1      cgd 
    131  1.20   itojun void	doit __P((int, struct sockaddr *));
    132   1.5      cgd int	control __P((int, char *, int));
    133   1.5      cgd void	protocol __P((int, int));
    134   1.5      cgd void	cleanup __P((int));
    135   1.5      cgd void	fatal __P((int, char *, int));
    136  1.20   itojun int	do_rlogin __P((struct sockaddr *, char *));
    137   1.5      cgd void	getstr __P((char *, int, char *));
    138   1.5      cgd void	setup_term __P((int));
    139  1.20   itojun #if 0
    140  1.20   itojun int	do_krb_login __P((union sockunion *));
    141  1.20   itojun #endif
    142   1.5      cgd void	usage __P((void));
    143   1.5      cgd int	local_domain __P((char *));
    144   1.5      cgd char	*topdomain __P((char *));
    145  1.11      mrg int	main __P((int, char *[]));
    146   1.5      cgd 
    147   1.5      cgd int
    148   1.1      cgd main(argc, argv)
    149   1.1      cgd 	int argc;
    150   1.5      cgd 	char *argv[];
    151   1.1      cgd {
    152   1.3       pk 	extern int __check_rhosts_file;
    153  1.20   itojun 	struct sockaddr_storage from;
    154   1.5      cgd 	int ch, fromlen, on;
    155   1.1      cgd 
    156  1.14      mrg 	openlog("rlogind", LOG_PID, LOG_AUTH);
    157   1.1      cgd 
    158   1.1      cgd 	opterr = 0;
    159  1.12    enami 	while ((ch = getopt(argc, argv, OPTIONS)) != -1)
    160   1.1      cgd 		switch (ch) {
    161   1.1      cgd 		case 'a':
    162   1.1      cgd 			check_all = 1;
    163   1.1      cgd 			break;
    164   1.1      cgd 		case 'l':
    165   1.3       pk 			__check_rhosts_file = 0;
    166   1.1      cgd 			break;
    167   1.1      cgd 		case 'n':
    168   1.1      cgd 			keepalive = 0;
    169   1.1      cgd 			break;
    170   1.9    lukem 		case 'L':
    171   1.9    lukem 			log_success = 1;
    172   1.9    lukem 			break;
    173   1.1      cgd 		case '?':
    174   1.1      cgd 		default:
    175   1.1      cgd 			usage();
    176   1.1      cgd 			break;
    177   1.1      cgd 		}
    178   1.1      cgd 	argc -= optind;
    179   1.1      cgd 	argv += optind;
    180   1.1      cgd 
    181  1.20   itojun 	fromlen = sizeof (from); /* xxx */
    182   1.1      cgd 	if (getpeername(0, (struct sockaddr *)&from, &fromlen) < 0) {
    183   1.1      cgd 		syslog(LOG_ERR,"Can't get peer name of remote host: %m");
    184   1.1      cgd 		fatal(STDERR_FILENO, "Can't get peer name of remote host", 1);
    185   1.1      cgd 	}
    186  1.21   itojun #ifdef INET6
    187  1.21   itojun 	if (((struct sockaddr *)&from)->sa_family == AF_INET6 &&
    188  1.21   itojun 	    IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *)&from)->sin6_addr) &&
    189  1.21   itojun 	    sizeof(struct sockaddr_in) <= sizeof(from)) {
    190  1.21   itojun 		struct sockaddr_in sin;
    191  1.21   itojun 		struct sockaddr_in6 *sin6;
    192  1.21   itojun 		const int off = sizeof(struct sockaddr_in6) -
    193  1.21   itojun 		    sizeof(struct sockaddr_in);
    194  1.21   itojun 
    195  1.21   itojun 		sin6 = (struct sockaddr_in6 *)&from;
    196  1.21   itojun 		memset(&sin, 0, sizeof(sin));
    197  1.21   itojun 		sin.sin_family = AF_INET;
    198  1.21   itojun 		sin.sin_len = sizeof(struct sockaddr_in);
    199  1.21   itojun 		memcpy(&sin.sin_addr, &sin6->sin6_addr.s6_addr[off],
    200  1.21   itojun 		    sizeof(sin.sin_addr));
    201  1.21   itojun 		memcpy(&from, &sin, sizeof(sin));
    202  1.21   itojun 		fromlen = sin.sin_len;
    203  1.21   itojun 	}
    204  1.21   itojun #else
    205  1.21   itojun 	if (((struct sockaddr *)&from)->sa_family == AF_INET6 &&
    206  1.21   itojun 	    IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *)&from)->sin6_addr)) {
    207  1.21   itojun 		char hbuf[NI_MAXHOST];
    208  1.21   itojun 		if (getnameinfo((struct sockaddr *)&from, fromlen, hbuf,
    209  1.21   itojun 				sizeof(hbuf), NULL, 0, NI_NUMERICHOST) != 0) {
    210  1.21   itojun 			strncpy(hbuf, "invalid", sizeof(hbuf));
    211  1.21   itojun 		}
    212  1.21   itojun 		syslog(LOG_ERR, "malformed \"from\" address (v4 mapped, %s)\n",
    213  1.21   itojun 		    hbuf);
    214  1.21   itojun 		exit(1);
    215  1.21   itojun 	}
    216  1.21   itojun #endif
    217   1.5      cgd 	on = 1;
    218   1.1      cgd 	if (keepalive &&
    219   1.1      cgd 	    setsockopt(0, SOL_SOCKET, SO_KEEPALIVE, &on, sizeof (on)) < 0)
    220   1.1      cgd 		syslog(LOG_WARNING, "setsockopt (SO_KEEPALIVE): %m");
    221  1.20   itojun #if defined(IP_TOS)
    222  1.20   itojun 	if (((struct sockaddr *)&from)->sa_family == AF_INET) {
    223  1.20   itojun 		on = IPTOS_LOWDELAY;
    224  1.20   itojun 		if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&on, sizeof(int)) < 0)
    225  1.20   itojun 			syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
    226  1.20   itojun 	}
    227  1.20   itojun #endif
    228  1.20   itojun 	doit(0, (struct sockaddr *)&from);
    229   1.9    lukem 	/* NOTREACHED */
    230  1.11      mrg #ifdef __GNUC__
    231  1.11      mrg 	exit(0);
    232  1.11      mrg #endif
    233   1.1      cgd }
    234   1.1      cgd 
    235   1.1      cgd int	child;
    236   1.1      cgd int	netf;
    237   1.1      cgd char	line[MAXPATHLEN];
    238   1.1      cgd int	confirmed;
    239   1.1      cgd 
    240   1.1      cgd struct winsize win = { 0, 0, 0, 0 };
    241   1.1      cgd 
    242   1.1      cgd 
    243   1.5      cgd void
    244   1.1      cgd doit(f, fromp)
    245   1.1      cgd 	int f;
    246  1.20   itojun 	struct sockaddr *fromp;
    247   1.1      cgd {
    248   1.5      cgd 	int master, pid, on = 1;
    249   1.5      cgd 	int authenticated = 0;
    250   1.9    lukem 	char utmphost[UT_HOSTSIZE + 1];
    251   1.9    lukem 	char *hostname;
    252   1.9    lukem 	char hostnamebuf[2 * MAXHOSTNAMELEN + 1];
    253   1.1      cgd 	char c;
    254  1.20   itojun 	char naddr[NI_MAXHOST];
    255  1.20   itojun 	char saddr[NI_MAXHOST];
    256  1.20   itojun 	char raddr[NI_MAXHOST];
    257  1.20   itojun 	int af = fromp->sa_family;
    258  1.20   itojun 	u_int16_t *portp;
    259  1.20   itojun 	struct addrinfo hints, *res, *res0;
    260  1.20   itojun 	int gaierror;
    261  1.20   itojun #ifdef NI_WITHSCOPEID
    262  1.20   itojun 	const int niflags = NI_NUMERICHOST | NI_NUMERICSERV | NI_WITHSCOPEID;
    263  1.20   itojun #else
    264  1.20   itojun 	const int niflags = NI_NUMERICHOST | NI_NUMERICSERV;
    265  1.20   itojun #endif
    266   1.1      cgd 
    267   1.1      cgd 	alarm(60);
    268   1.1      cgd 	read(f, &c, 1);
    269   1.1      cgd 
    270   1.1      cgd 	if (c != 0)
    271   1.1      cgd 		exit(1);
    272   1.1      cgd 
    273   1.1      cgd 	alarm(0);
    274  1.20   itojun 	switch (af) {
    275  1.20   itojun 	case AF_INET:
    276  1.20   itojun 		portp = &((struct sockaddr_in *)fromp)->sin_port;
    277  1.20   itojun 		break;
    278  1.20   itojun #ifdef INET6
    279  1.20   itojun 	case AF_INET6:
    280  1.20   itojun 		portp = &((struct sockaddr_in6 *)fromp)->sin6_port;
    281  1.20   itojun 		break;
    282  1.20   itojun #endif
    283  1.20   itojun 	default:
    284  1.20   itojun 		syslog(LOG_ERR, "malformed \"from\" address (af %d)\n", af);
    285  1.20   itojun 		exit(1);
    286  1.20   itojun 	}
    287  1.20   itojun 	if (getnameinfo((struct sockaddr *)fromp, fromp->sa_len,
    288  1.20   itojun 		    naddr, sizeof(naddr), NULL, 0, niflags) != 0) {
    289  1.20   itojun 		syslog(LOG_ERR, "malformed \"from\" address (af %d)\n", af);
    290  1.20   itojun 		exit(1);
    291  1.20   itojun 	}
    292  1.20   itojun 
    293  1.20   itojun 	if (getnameinfo((struct sockaddr *)fromp, fromp->sa_len,
    294  1.20   itojun 		    saddr, sizeof(saddr), NULL, 0, NI_NAMEREQD) == 0) {
    295   1.9    lukem 		/*
    296   1.9    lukem 		 * If name returned by gethostbyaddr is in our domain,
    297   1.9    lukem 		 * attempt to verify that we haven't been fooled by someone
    298   1.9    lukem 		 * in a remote net; look up the name and check that this
    299   1.9    lukem 		 * address corresponds to the name.
    300   1.9    lukem 		 */
    301  1.20   itojun 		hostname = saddr;
    302  1.22   itojun 		res0 = NULL;
    303  1.20   itojun 		if (check_all || local_domain(saddr)) {
    304  1.20   itojun 			strncpy(hostnamebuf, saddr, sizeof(hostnamebuf) - 1);
    305   1.9    lukem 			hostnamebuf[sizeof(hostnamebuf) - 1] = 0;
    306  1.20   itojun 			memset(&hints, 0, sizeof(hints));
    307  1.20   itojun 			hints.ai_family = fromp->sa_family;
    308  1.20   itojun 			hints.ai_socktype = SOCK_STREAM;
    309  1.20   itojun 			hints.ai_flags = AI_CANONNAME;
    310  1.20   itojun 			gaierror = getaddrinfo(hostnamebuf, "0", &hints, &res0);
    311  1.20   itojun 			if (gaierror) {
    312   1.9    lukem 				syslog(LOG_INFO,
    313  1.20   itojun 				    "Couldn't look up address for %s: %s",
    314  1.20   itojun 				    hostnamebuf, gai_strerror(gaierror));
    315  1.20   itojun 				hostname = naddr;
    316  1.20   itojun 			} else {
    317  1.20   itojun 				for (res = res0; res; res = res->ai_next) {
    318  1.20   itojun 					if (res->ai_family != fromp->sa_family)
    319  1.20   itojun 						continue;
    320  1.20   itojun 					if (res->ai_addrlen != fromp->sa_len)
    321  1.20   itojun 						continue;
    322  1.20   itojun 					if (getnameinfo(res->ai_addr,
    323  1.20   itojun 						res->ai_addrlen,
    324  1.20   itojun 						raddr, sizeof(raddr), NULL, 0,
    325  1.20   itojun 						niflags) == 0
    326  1.20   itojun 					 && strcmp(naddr, raddr) == 0) {
    327  1.20   itojun 						hostname = res->ai_canonname
    328  1.20   itojun 							? res->ai_canonname
    329  1.20   itojun 							: saddr;
    330  1.20   itojun 						break;
    331  1.20   itojun 					}
    332  1.20   itojun 				}
    333  1.20   itojun 				if (res == NULL) {
    334   1.9    lukem 					syslog(LOG_NOTICE,
    335   1.9    lukem 					  "Host addr %s not listed for host %s",
    336  1.20   itojun 					    naddr, res0->ai_canonname
    337  1.20   itojun 						    ? res0->ai_canonname
    338  1.20   itojun 						    : saddr);
    339  1.20   itojun 					hostname = naddr;
    340   1.9    lukem 				}
    341   1.9    lukem 			}
    342   1.9    lukem 		}
    343   1.9    lukem 		hostname = strncpy(hostnamebuf, hostname,
    344   1.9    lukem 				   sizeof(hostnamebuf) - 1);
    345  1.22   itojun 		if (res0)
    346  1.22   itojun 			freeaddrinfo(res0);
    347   1.9    lukem 	} else
    348  1.20   itojun 		hostname = strncpy(hostnamebuf, naddr,
    349   1.9    lukem 				   sizeof(hostnamebuf) - 1);
    350   1.9    lukem 
    351   1.9    lukem 	hostnamebuf[sizeof(hostnamebuf) - 1] = '\0';
    352   1.9    lukem 
    353   1.9    lukem 	if (strlen(hostname) < sizeof(utmphost))
    354   1.9    lukem 		(void)strcpy(utmphost, hostname);
    355   1.5      cgd 	else
    356  1.20   itojun 		(void)strncpy(utmphost, hostname, sizeof(utmphost));
    357   1.9    lukem 	utmphost[sizeof(utmphost) - 1] = '\0';
    358   1.9    lukem 
    359  1.20   itojun 	if (ntohs(*portp) >= IPPORT_RESERVED ||
    360  1.20   itojun 	    ntohs(*portp) < IPPORT_RESERVED/2) {
    361   1.9    lukem 		syslog(LOG_NOTICE, "Connection from %s on illegal port",
    362  1.20   itojun 		       naddr);
    363   1.9    lukem 		fatal(f, "Permission denied", 0);
    364   1.9    lukem 	}
    365   1.9    lukem #ifdef IP_OPTIONS
    366  1.20   itojun 	if (fromp->sa_family == AF_INET) {
    367   1.5      cgd 		u_char optbuf[BUFSIZ/3], *cp;
    368   1.5      cgd 		char lbuf[BUFSIZ], *lp;
    369   1.5      cgd 		int optsize = sizeof(optbuf), ipproto;
    370   1.5      cgd 		struct protoent *ip;
    371   1.5      cgd 
    372   1.5      cgd 		if ((ip = getprotobyname("ip")) != NULL)
    373   1.5      cgd 			ipproto = ip->p_proto;
    374   1.5      cgd 		else
    375   1.5      cgd 			ipproto = IPPROTO_IP;
    376   1.5      cgd 		if (getsockopt(0, ipproto, IP_OPTIONS, (char *)optbuf,
    377   1.5      cgd 		    &optsize) == 0 && optsize != 0) {
    378   1.5      cgd 			lp = lbuf;
    379   1.5      cgd 			for (cp = optbuf; optsize > 0; cp++, optsize--, lp += 3)
    380   1.5      cgd 				sprintf(lp, " %2.2x", *cp);
    381   1.5      cgd 			syslog(LOG_NOTICE,
    382   1.5      cgd 			    "Connection received using IP options (ignored):%s",
    383   1.5      cgd 			    lbuf);
    384   1.5      cgd 			if (setsockopt(0, ipproto, IP_OPTIONS,
    385   1.5      cgd 			    (char *)NULL, optsize) != 0) {
    386   1.5      cgd 				syslog(LOG_ERR,
    387   1.5      cgd 				    "setsockopt IP_OPTIONS NULL: %m");
    388   1.5      cgd 				exit(1);
    389   1.5      cgd 			}
    390   1.5      cgd 		}
    391   1.9    lukem 	}
    392   1.1      cgd #endif
    393   1.9    lukem 	if (do_rlogin(fromp, hostname) == 0)
    394   1.9    lukem 		authenticated++;
    395   1.1      cgd 	if (confirmed == 0) {
    396   1.1      cgd 		write(f, "", 1);
    397   1.1      cgd 		confirmed = 1;		/* we sent the null! */
    398   1.1      cgd 	}
    399   1.1      cgd 	netf = f;
    400   1.1      cgd 
    401   1.1      cgd 	pid = forkpty(&master, line, NULL, &win);
    402   1.1      cgd 	if (pid < 0) {
    403   1.1      cgd 		if (errno == ENOENT)
    404   1.1      cgd 			fatal(f, "Out of ptys", 0);
    405   1.1      cgd 		else
    406   1.1      cgd 			fatal(f, "Forkpty", 1);
    407   1.1      cgd 	}
    408   1.1      cgd 	if (pid == 0) {
    409   1.5      cgd 		if (f > 2)	/* f should always be 0, but... */
    410   1.1      cgd 			(void) close(f);
    411   1.1      cgd 		setup_term(0);
    412   1.7  mycroft 		if (authenticated)
    413   1.1      cgd 			execl(_PATH_LOGIN, "login", "-p",
    414   1.9    lukem 			    "-h", utmphost, "-f", "--", lusername, (char *)0);
    415   1.7  mycroft 		else
    416   1.1      cgd 			execl(_PATH_LOGIN, "login", "-p",
    417   1.9    lukem 			    "-h", utmphost, "--", lusername, (char *)0);
    418   1.1      cgd 		fatal(STDERR_FILENO, _PATH_LOGIN, 1);
    419   1.1      cgd 		/*NOTREACHED*/
    420   1.1      cgd 	}
    421  1.19   itojun 	ioctl(f, FIONBIO, &on);
    422   1.1      cgd 	ioctl(master, FIONBIO, &on);
    423   1.1      cgd 	ioctl(master, TIOCPKT, &on);
    424   1.1      cgd 	signal(SIGCHLD, cleanup);
    425   1.1      cgd 	protocol(f, master);
    426   1.1      cgd 	signal(SIGCHLD, SIG_IGN);
    427   1.5      cgd 	cleanup(0);
    428   1.1      cgd }
    429   1.1      cgd 
    430   1.1      cgd char	magic[2] = { 0377, 0377 };
    431   1.1      cgd char	oobdata[] = {TIOCPKT_WINDOW};
    432   1.1      cgd 
    433   1.1      cgd /*
    434   1.1      cgd  * Handle a "control" request (signaled by magic being present)
    435   1.1      cgd  * in the data stream.  For now, we are only willing to handle
    436   1.1      cgd  * window size changes.
    437   1.1      cgd  */
    438   1.5      cgd int
    439   1.1      cgd control(pty, cp, n)
    440   1.1      cgd 	int pty;
    441   1.1      cgd 	char *cp;
    442   1.1      cgd 	int n;
    443   1.1      cgd {
    444   1.1      cgd 	struct winsize w;
    445   1.1      cgd 
    446   1.1      cgd 	if (n < 4+sizeof (w) || cp[2] != 's' || cp[3] != 's')
    447   1.1      cgd 		return (0);
    448   1.1      cgd 	oobdata[0] &= ~TIOCPKT_WINDOW;	/* we know he heard */
    449  1.10      mrg 	memmove(&w, cp+4, sizeof(w));
    450   1.1      cgd 	w.ws_row = ntohs(w.ws_row);
    451   1.1      cgd 	w.ws_col = ntohs(w.ws_col);
    452   1.1      cgd 	w.ws_xpixel = ntohs(w.ws_xpixel);
    453   1.1      cgd 	w.ws_ypixel = ntohs(w.ws_ypixel);
    454   1.1      cgd 	(void)ioctl(pty, TIOCSWINSZ, &w);
    455   1.1      cgd 	return (4+sizeof (w));
    456   1.1      cgd }
    457   1.1      cgd 
    458   1.1      cgd /*
    459   1.1      cgd  * rlogin "protocol" machine.
    460   1.1      cgd  */
    461   1.5      cgd void
    462   1.1      cgd protocol(f, p)
    463  1.13      mrg 	int f, p;
    464   1.1      cgd {
    465  1.11      mrg 	char pibuf[1024+1], fibuf[1024], *pbp = NULL, *fbp = NULL;
    466  1.11      mrg 					/* XXX gcc above */
    467  1.13      mrg 	int pcc = 0, fcc = 0;
    468   1.1      cgd 	int cc, nfd, n;
    469   1.1      cgd 	char cntl;
    470   1.1      cgd 
    471   1.1      cgd 	/*
    472   1.1      cgd 	 * Must ignore SIGTTOU, otherwise we'll stop
    473   1.1      cgd 	 * when we try and set slave pty's window shape
    474   1.1      cgd 	 * (our controlling tty is the master pty).
    475   1.1      cgd 	 */
    476   1.1      cgd 	(void) signal(SIGTTOU, SIG_IGN);
    477   1.1      cgd 	send(f, oobdata, 1, MSG_OOB);	/* indicate new rlogin */
    478   1.1      cgd 	if (f > p)
    479   1.1      cgd 		nfd = f + 1;
    480   1.1      cgd 	else
    481   1.1      cgd 		nfd = p + 1;
    482   1.1      cgd 	if (nfd > FD_SETSIZE) {
    483   1.1      cgd 		syslog(LOG_ERR, "select mask too small, increase FD_SETSIZE");
    484   1.1      cgd 		fatal(f, "internal error (select mask too small)", 0);
    485   1.1      cgd 	}
    486   1.1      cgd 	for (;;) {
    487   1.1      cgd 		fd_set ibits, obits, ebits, *omask;
    488   1.1      cgd 
    489   1.1      cgd 		FD_ZERO(&ebits);
    490   1.1      cgd 		FD_ZERO(&ibits);
    491   1.1      cgd 		FD_ZERO(&obits);
    492   1.1      cgd 		omask = (fd_set *)NULL;
    493   1.1      cgd 		if (fcc) {
    494   1.1      cgd 			FD_SET(p, &obits);
    495   1.1      cgd 			omask = &obits;
    496   1.1      cgd 		} else
    497   1.1      cgd 			FD_SET(f, &ibits);
    498  1.16     ross 		if (pcc >= 0) {
    499   1.1      cgd 			if (pcc) {
    500   1.1      cgd 				FD_SET(f, &obits);
    501   1.1      cgd 				omask = &obits;
    502   1.1      cgd 			} else
    503   1.1      cgd 				FD_SET(p, &ibits);
    504  1.16     ross 		}
    505   1.1      cgd 		FD_SET(p, &ebits);
    506   1.1      cgd 		if ((n = select(nfd, &ibits, omask, &ebits, 0)) < 0) {
    507   1.1      cgd 			if (errno == EINTR)
    508   1.1      cgd 				continue;
    509   1.1      cgd 			fatal(f, "select", 1);
    510   1.1      cgd 		}
    511   1.1      cgd 		if (n == 0) {
    512   1.1      cgd 			/* shouldn't happen... */
    513   1.1      cgd 			sleep(5);
    514   1.1      cgd 			continue;
    515   1.1      cgd 		}
    516   1.1      cgd #define	pkcontrol(c)	((c)&(TIOCPKT_FLUSHWRITE|TIOCPKT_NOSTOP|TIOCPKT_DOSTOP))
    517   1.1      cgd 		if (FD_ISSET(p, &ebits)) {
    518   1.1      cgd 			cc = read(p, &cntl, 1);
    519   1.1      cgd 			if (cc == 1 && pkcontrol(cntl)) {
    520   1.1      cgd 				cntl |= oobdata[0];
    521   1.1      cgd 				send(f, &cntl, 1, MSG_OOB);
    522   1.1      cgd 				if (cntl & TIOCPKT_FLUSHWRITE) {
    523   1.1      cgd 					pcc = 0;
    524   1.1      cgd 					FD_CLR(p, &ibits);
    525   1.1      cgd 				}
    526   1.1      cgd 			}
    527   1.1      cgd 		}
    528   1.1      cgd 		if (FD_ISSET(f, &ibits)) {
    529   1.1      cgd 				fcc = read(f, fibuf, sizeof(fibuf));
    530   1.1      cgd 			if (fcc < 0 && errno == EWOULDBLOCK)
    531   1.1      cgd 				fcc = 0;
    532   1.1      cgd 			else {
    533  1.13      mrg 				char *cp;
    534   1.1      cgd 				int left, n;
    535   1.1      cgd 
    536   1.1      cgd 				if (fcc <= 0)
    537   1.1      cgd 					break;
    538   1.1      cgd 				fbp = fibuf;
    539   1.1      cgd 
    540   1.1      cgd 			top:
    541   1.1      cgd 				for (cp = fibuf; cp < fibuf+fcc-1; cp++)
    542   1.1      cgd 					if (cp[0] == magic[0] &&
    543   1.1      cgd 					    cp[1] == magic[1]) {
    544   1.1      cgd 						left = fcc - (cp-fibuf);
    545   1.1      cgd 						n = control(p, cp, left);
    546   1.1      cgd 						if (n) {
    547   1.1      cgd 							left -= n;
    548   1.1      cgd 							if (left > 0)
    549  1.17    perry 								memmove(cp,
    550  1.15    perry 								    cp+n,
    551   1.9    lukem 								    left);
    552   1.1      cgd 							fcc -= n;
    553   1.1      cgd 							goto top; /* n^2 */
    554   1.1      cgd 						}
    555   1.1      cgd 					}
    556   1.1      cgd 				FD_SET(p, &obits);		/* try write */
    557   1.1      cgd 			}
    558   1.1      cgd 		}
    559   1.1      cgd 
    560   1.1      cgd 		if (FD_ISSET(p, &obits) && fcc > 0) {
    561   1.1      cgd 			cc = write(p, fbp, fcc);
    562   1.1      cgd 			if (cc > 0) {
    563   1.1      cgd 				fcc -= cc;
    564   1.1      cgd 				fbp += cc;
    565   1.1      cgd 			}
    566   1.1      cgd 		}
    567   1.1      cgd 
    568   1.1      cgd 		if (FD_ISSET(p, &ibits)) {
    569   1.1      cgd 			pcc = read(p, pibuf, sizeof (pibuf));
    570   1.1      cgd 			pbp = pibuf;
    571   1.1      cgd 			if (pcc < 0 && errno == EWOULDBLOCK)
    572   1.1      cgd 				pcc = 0;
    573   1.1      cgd 			else if (pcc <= 0)
    574   1.1      cgd 				break;
    575   1.1      cgd 			else if (pibuf[0] == 0) {
    576   1.1      cgd 				pbp++, pcc--;
    577   1.1      cgd 					FD_SET(f, &obits);	/* try write */
    578   1.1      cgd 			} else {
    579   1.1      cgd 				if (pkcontrol(pibuf[0])) {
    580   1.1      cgd 					pibuf[0] |= oobdata[0];
    581   1.1      cgd 					send(f, &pibuf[0], 1, MSG_OOB);
    582   1.1      cgd 				}
    583   1.1      cgd 				pcc = 0;
    584   1.1      cgd 			}
    585   1.1      cgd 		}
    586   1.1      cgd 		if ((FD_ISSET(f, &obits)) && pcc > 0) {
    587   1.1      cgd 				cc = write(f, pbp, pcc);
    588   1.1      cgd 			if (cc < 0 && errno == EWOULDBLOCK) {
    589   1.1      cgd 				/*
    590   1.1      cgd 				 * This happens when we try write after read
    591   1.1      cgd 				 * from p, but some old kernels balk at large
    592   1.1      cgd 				 * writes even when select returns true.
    593   1.1      cgd 				 */
    594   1.1      cgd 				if (!FD_ISSET(p, &ibits))
    595   1.1      cgd 					sleep(5);
    596   1.1      cgd 				continue;
    597   1.1      cgd 			}
    598   1.1      cgd 			if (cc > 0) {
    599   1.1      cgd 				pcc -= cc;
    600   1.1      cgd 				pbp += cc;
    601   1.1      cgd 			}
    602   1.1      cgd 		}
    603   1.1      cgd 	}
    604   1.1      cgd }
    605   1.1      cgd 
    606   1.1      cgd void
    607   1.5      cgd cleanup(signo)
    608   1.5      cgd 	int signo;
    609   1.1      cgd {
    610  1.18   tsarna 	char *p, c;
    611   1.1      cgd 
    612   1.1      cgd 	p = line + sizeof(_PATH_DEV) - 1;
    613   1.1      cgd 	if (logout(p))
    614   1.1      cgd 		logwtmp(p, "", "");
    615   1.1      cgd 	(void)chmod(line, 0666);
    616   1.1      cgd 	(void)chown(line, 0, 0);
    617  1.18   tsarna 	c = *p; *p = 'p';
    618   1.1      cgd 	(void)chmod(line, 0666);
    619   1.1      cgd 	(void)chown(line, 0, 0);
    620  1.18   tsarna 	*p = c;
    621  1.18   tsarna 	if (ttyaction(line, "rlogind", "root"))
    622  1.18   tsarna 		syslog(LOG_ERR, "%s: ttyaction failed", line);
    623   1.1      cgd 	shutdown(netf, 2);
    624   1.1      cgd 	exit(1);
    625   1.1      cgd }
    626   1.1      cgd 
    627   1.5      cgd void
    628   1.1      cgd fatal(f, msg, syserr)
    629   1.5      cgd 	int f;
    630   1.1      cgd 	char *msg;
    631   1.5      cgd 	int syserr;
    632   1.1      cgd {
    633   1.1      cgd 	int len;
    634   1.1      cgd 	char buf[BUFSIZ], *bp = buf;
    635   1.1      cgd 
    636   1.1      cgd 	/*
    637   1.1      cgd 	 * Prepend binary one to message if we haven't sent
    638   1.1      cgd 	 * the magic null as confirmation.
    639   1.1      cgd 	 */
    640   1.1      cgd 	if (!confirmed)
    641   1.1      cgd 		*bp++ = '\01';		/* error indicator */
    642   1.1      cgd 	if (syserr)
    643   1.1      cgd 		len = sprintf(bp, "rlogind: %s: %s.\r\n",
    644   1.1      cgd 		    msg, strerror(errno));
    645   1.1      cgd 	else
    646   1.1      cgd 		len = sprintf(bp, "rlogind: %s.\r\n", msg);
    647   1.1      cgd 	(void) write(f, buf, bp + len - buf);
    648   1.1      cgd 	exit(1);
    649   1.1      cgd }
    650   1.1      cgd 
    651   1.5      cgd int
    652   1.9    lukem do_rlogin(dest, host)
    653  1.20   itojun 	struct sockaddr *dest;
    654   1.9    lukem 	char *host;
    655   1.1      cgd {
    656   1.9    lukem 	extern char *__rcmd_errstr;	/* syslog hook from libc/net/rcmd.c */
    657   1.9    lukem 	int retval;
    658   1.9    lukem 
    659   1.1      cgd 	getstr(rusername, sizeof(rusername), "remuser too long");
    660   1.1      cgd 	getstr(lusername, sizeof(lusername), "locuser too long");
    661   1.1      cgd 	getstr(term+ENVSIZE, sizeof(term)-ENVSIZE, "Terminal type too long");
    662   1.1      cgd 
    663   1.1      cgd 	pwd = getpwnam(lusername);
    664   1.9    lukem 	if (pwd == NULL) {
    665   1.9    lukem 		syslog(LOG_INFO,
    666   1.9    lukem 		    "%s@%s as %s: unknown login.", rusername, host, lusername);
    667   1.5      cgd 		return (-1);
    668   1.9    lukem 	}
    669  1.20   itojun 
    670  1.20   itojun 	retval = iruserok_sa(dest, dest->sa_len, pwd->pw_uid == 0, rusername,
    671  1.20   itojun 		lusername);
    672   1.9    lukem /* XXX put inet_ntoa(dest->sin_addr.s_addr) into all messages below */
    673   1.9    lukem 	if (retval == 0) {
    674   1.9    lukem 		if (log_success)
    675   1.9    lukem 			syslog(LOG_INFO, "%s@%s as %s: iruserok succeeded",
    676   1.9    lukem 			    rusername, host, lusername);
    677   1.9    lukem 	} else {
    678   1.9    lukem 		if (__rcmd_errstr)
    679   1.9    lukem 			syslog(LOG_INFO, "%s@%s as %s: iruserok failed (%s)",
    680   1.9    lukem 			    rusername, host, lusername, __rcmd_errstr);
    681   1.9    lukem 		else
    682   1.9    lukem 			syslog(LOG_INFO, "%s@%s as %s: iruserok failed",
    683   1.9    lukem 			    rusername, host, lusername);
    684   1.9    lukem 	}
    685   1.9    lukem 	return(retval);
    686   1.1      cgd }
    687   1.1      cgd 
    688   1.5      cgd void
    689   1.1      cgd getstr(buf, cnt, errmsg)
    690   1.1      cgd 	char *buf;
    691   1.1      cgd 	int cnt;
    692   1.1      cgd 	char *errmsg;
    693   1.1      cgd {
    694   1.1      cgd 	char c;
    695   1.1      cgd 
    696   1.1      cgd 	do {
    697   1.1      cgd 		if (read(0, &c, 1) != 1)
    698   1.1      cgd 			exit(1);
    699   1.1      cgd 		if (--cnt < 0)
    700   1.1      cgd 			fatal(STDOUT_FILENO, errmsg, 0);
    701   1.1      cgd 		*buf++ = c;
    702   1.1      cgd 	} while (c != 0);
    703   1.1      cgd }
    704   1.1      cgd 
    705   1.1      cgd extern	char **environ;
    706   1.1      cgd 
    707   1.5      cgd void
    708   1.1      cgd setup_term(fd)
    709   1.1      cgd 	int fd;
    710   1.1      cgd {
    711  1.13      mrg 	char *cp = index(term+ENVSIZE, '/');
    712   1.1      cgd 	char *speed;
    713   1.1      cgd 	struct termios tt;
    714   1.1      cgd 
    715   1.1      cgd #ifndef notyet
    716   1.1      cgd 	tcgetattr(fd, &tt);
    717   1.1      cgd 	if (cp) {
    718   1.1      cgd 		*cp++ = '\0';
    719   1.1      cgd 		speed = cp;
    720   1.1      cgd 		cp = index(speed, '/');
    721   1.1      cgd 		if (cp)
    722   1.1      cgd 			*cp++ = '\0';
    723   1.1      cgd 		cfsetspeed(&tt, atoi(speed));
    724   1.1      cgd 	}
    725   1.1      cgd 
    726   1.1      cgd 	tt.c_iflag = TTYDEF_IFLAG;
    727   1.1      cgd 	tt.c_oflag = TTYDEF_OFLAG;
    728   1.1      cgd 	tt.c_lflag = TTYDEF_LFLAG;
    729   1.1      cgd 	tcsetattr(fd, TCSAFLUSH, &tt);
    730   1.1      cgd #else
    731   1.1      cgd 	if (cp) {
    732   1.1      cgd 		*cp++ = '\0';
    733   1.1      cgd 		speed = cp;
    734   1.1      cgd 		cp = index(speed, '/');
    735   1.1      cgd 		if (cp)
    736   1.1      cgd 			*cp++ = '\0';
    737   1.1      cgd 		tcgetattr(fd, &tt);
    738   1.1      cgd 		cfsetspeed(&tt, atoi(speed));
    739   1.1      cgd 		tcsetattr(fd, TCSAFLUSH, &tt);
    740   1.1      cgd 	}
    741   1.1      cgd #endif
    742   1.1      cgd 
    743   1.1      cgd 	env[0] = term;
    744   1.1      cgd 	env[1] = 0;
    745   1.1      cgd 	environ = env;
    746   1.1      cgd }
    747   1.1      cgd 
    748   1.1      cgd 
    749   1.5      cgd void
    750   1.1      cgd usage()
    751   1.1      cgd {
    752   1.9    lukem 	syslog(LOG_ERR, "usage: rlogind [-alnL]");
    753   1.1      cgd }
    754   1.1      cgd 
    755   1.1      cgd /*
    756   1.1      cgd  * Check whether host h is in our local domain,
    757   1.1      cgd  * defined as sharing the last two components of the domain part,
    758   1.1      cgd  * or the entire domain part if the local domain has only one component.
    759   1.1      cgd  * If either name is unqualified (contains no '.'),
    760   1.1      cgd  * assume that the host is local, as it will be
    761   1.1      cgd  * interpreted as such.
    762   1.1      cgd  */
    763   1.5      cgd int
    764   1.1      cgd local_domain(h)
    765   1.1      cgd 	char *h;
    766   1.1      cgd {
    767  1.14      mrg 	char localhost[MAXHOSTNAMELEN + 1];
    768   1.5      cgd 	char *p1, *p2;
    769   1.1      cgd 
    770   1.1      cgd 	localhost[0] = 0;
    771   1.1      cgd 	(void) gethostname(localhost, sizeof(localhost));
    772  1.14      mrg 	localhost[sizeof(localhost) - 1] = '\0';
    773   1.1      cgd 	p1 = topdomain(localhost);
    774   1.1      cgd 	p2 = topdomain(h);
    775   1.1      cgd 	if (p1 == NULL || p2 == NULL || !strcasecmp(p1, p2))
    776   1.5      cgd 		return (1);
    777   1.5      cgd 	return (0);
    778   1.1      cgd }
    779   1.1      cgd 
    780   1.1      cgd char *
    781   1.1      cgd topdomain(h)
    782   1.1      cgd 	char *h;
    783   1.1      cgd {
    784  1.13      mrg 	char *p;
    785   1.1      cgd 	char *maybe = NULL;
    786   1.1      cgd 	int dots = 0;
    787   1.1      cgd 
    788   1.1      cgd 	for (p = h + strlen(h); p >= h; p--) {
    789   1.1      cgd 		if (*p == '.') {
    790   1.1      cgd 			if (++dots == 2)
    791   1.1      cgd 				return (p);
    792   1.1      cgd 			maybe = p;
    793   1.1      cgd 		}
    794   1.1      cgd 	}
    795   1.1      cgd 	return (maybe);
    796   1.1      cgd }
    797