rlogind.c revision 1.22 1 1.22 itojun /* $NetBSD: rlogind.c,v 1.22 2000/11/09 01:04:14 itojun Exp $ */
2 1.20 itojun
3 1.20 itojun /*
4 1.20 itojun * Copyright (C) 1998 WIDE Project.
5 1.20 itojun * All rights reserved.
6 1.20 itojun *
7 1.20 itojun * Redistribution and use in source and binary forms, with or without
8 1.20 itojun * modification, are permitted provided that the following conditions
9 1.20 itojun * are met:
10 1.20 itojun * 1. Redistributions of source code must retain the above copyright
11 1.20 itojun * notice, this list of conditions and the following disclaimer.
12 1.20 itojun * 2. Redistributions in binary form must reproduce the above copyright
13 1.20 itojun * notice, this list of conditions and the following disclaimer in the
14 1.20 itojun * documentation and/or other materials provided with the distribution.
15 1.20 itojun * 3. All advertising materials mentioning features or use of this software
16 1.20 itojun * must display the following acknowledgement:
17 1.20 itojun * This product includes software developed by WIDE Project and
18 1.20 itojun * its contributors.
19 1.20 itojun * 4. Neither the name of the project nor the names of its contributors
20 1.20 itojun * may be used to endorse or promote products derived from this software
21 1.20 itojun * without specific prior written permission.
22 1.20 itojun *
23 1.20 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
24 1.20 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 1.20 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 1.20 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
27 1.20 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 1.20 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 1.20 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 1.20 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 1.20 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 1.20 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 1.20 itojun * SUCH DAMAGE.
34 1.20 itojun */
35 1.10 mrg
36 1.1 cgd /*-
37 1.5 cgd * Copyright (c) 1983, 1988, 1989, 1993
38 1.5 cgd * The Regents of the University of California. All rights reserved.
39 1.1 cgd *
40 1.1 cgd * Redistribution and use in source and binary forms, with or without
41 1.1 cgd * modification, are permitted provided that the following conditions
42 1.1 cgd * are met:
43 1.1 cgd * 1. Redistributions of source code must retain the above copyright
44 1.1 cgd * notice, this list of conditions and the following disclaimer.
45 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
46 1.1 cgd * notice, this list of conditions and the following disclaimer in the
47 1.1 cgd * documentation and/or other materials provided with the distribution.
48 1.1 cgd * 3. All advertising materials mentioning features or use of this software
49 1.1 cgd * must display the following acknowledgement:
50 1.1 cgd * This product includes software developed by the University of
51 1.1 cgd * California, Berkeley and its contributors.
52 1.1 cgd * 4. Neither the name of the University nor the names of its contributors
53 1.1 cgd * may be used to endorse or promote products derived from this software
54 1.1 cgd * without specific prior written permission.
55 1.1 cgd *
56 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
57 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
58 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
59 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
60 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
61 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
62 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
63 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
64 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
65 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
66 1.1 cgd * SUCH DAMAGE.
67 1.1 cgd */
68 1.1 cgd
69 1.10 mrg #include <sys/cdefs.h>
70 1.1 cgd #ifndef lint
71 1.10 mrg __COPYRIGHT("@(#) Copyright (c) 1983, 1988, 1989, 1993\n\
72 1.10 mrg The Regents of the University of California. All rights reserved.\n");
73 1.10 mrg #if 0
74 1.10 mrg static char sccsid[] = "@(#)rlogind.c 8.2 (Berkeley) 4/28/95";
75 1.10 mrg #else
76 1.22 itojun __RCSID("$NetBSD: rlogind.c,v 1.22 2000/11/09 01:04:14 itojun Exp $");
77 1.10 mrg #endif
78 1.1 cgd #endif /* not lint */
79 1.1 cgd
80 1.1 cgd /*
81 1.1 cgd * remote login server:
82 1.1 cgd * \0
83 1.1 cgd * remuser\0
84 1.1 cgd * locuser\0
85 1.1 cgd * terminal_type/speed\0
86 1.1 cgd * data
87 1.1 cgd */
88 1.1 cgd
89 1.1 cgd #define FD_SETSIZE 16 /* don't need many bits for select */
90 1.1 cgd #include <sys/param.h>
91 1.1 cgd #include <sys/stat.h>
92 1.1 cgd #include <sys/ioctl.h>
93 1.1 cgd #include <signal.h>
94 1.1 cgd #include <termios.h>
95 1.1 cgd
96 1.1 cgd #include <sys/socket.h>
97 1.1 cgd #include <netinet/in.h>
98 1.1 cgd #include <netinet/in_systm.h>
99 1.1 cgd #include <netinet/ip.h>
100 1.1 cgd #include <arpa/inet.h>
101 1.1 cgd #include <netdb.h>
102 1.1 cgd
103 1.1 cgd #include <pwd.h>
104 1.1 cgd #include <syslog.h>
105 1.1 cgd #include <errno.h>
106 1.1 cgd #include <stdio.h>
107 1.1 cgd #include <unistd.h>
108 1.1 cgd #include <stdlib.h>
109 1.1 cgd #include <string.h>
110 1.9 lukem #include <util.h>
111 1.8 mrg #include <utmp.h>
112 1.1 cgd #include "pathnames.h"
113 1.1 cgd
114 1.1 cgd #ifndef TIOCPKT_WINDOW
115 1.1 cgd #define TIOCPKT_WINDOW 0x80
116 1.1 cgd #endif
117 1.1 cgd
118 1.9 lukem #define OPTIONS "alnL"
119 1.1 cgd
120 1.1 cgd char *env[2];
121 1.1 cgd #define NMAX 30
122 1.1 cgd char lusername[NMAX+1], rusername[NMAX+1];
123 1.1 cgd static char term[64] = "TERM=";
124 1.1 cgd #define ENVSIZE (sizeof("TERM=")-1) /* skip null for concatenation */
125 1.1 cgd int keepalive = 1;
126 1.1 cgd int check_all = 0;
127 1.9 lukem int log_success = 0;
128 1.1 cgd
129 1.1 cgd struct passwd *pwd;
130 1.1 cgd
131 1.20 itojun void doit __P((int, struct sockaddr *));
132 1.5 cgd int control __P((int, char *, int));
133 1.5 cgd void protocol __P((int, int));
134 1.5 cgd void cleanup __P((int));
135 1.5 cgd void fatal __P((int, char *, int));
136 1.20 itojun int do_rlogin __P((struct sockaddr *, char *));
137 1.5 cgd void getstr __P((char *, int, char *));
138 1.5 cgd void setup_term __P((int));
139 1.20 itojun #if 0
140 1.20 itojun int do_krb_login __P((union sockunion *));
141 1.20 itojun #endif
142 1.5 cgd void usage __P((void));
143 1.5 cgd int local_domain __P((char *));
144 1.5 cgd char *topdomain __P((char *));
145 1.11 mrg int main __P((int, char *[]));
146 1.5 cgd
147 1.5 cgd int
148 1.1 cgd main(argc, argv)
149 1.1 cgd int argc;
150 1.5 cgd char *argv[];
151 1.1 cgd {
152 1.3 pk extern int __check_rhosts_file;
153 1.20 itojun struct sockaddr_storage from;
154 1.5 cgd int ch, fromlen, on;
155 1.1 cgd
156 1.14 mrg openlog("rlogind", LOG_PID, LOG_AUTH);
157 1.1 cgd
158 1.1 cgd opterr = 0;
159 1.12 enami while ((ch = getopt(argc, argv, OPTIONS)) != -1)
160 1.1 cgd switch (ch) {
161 1.1 cgd case 'a':
162 1.1 cgd check_all = 1;
163 1.1 cgd break;
164 1.1 cgd case 'l':
165 1.3 pk __check_rhosts_file = 0;
166 1.1 cgd break;
167 1.1 cgd case 'n':
168 1.1 cgd keepalive = 0;
169 1.1 cgd break;
170 1.9 lukem case 'L':
171 1.9 lukem log_success = 1;
172 1.9 lukem break;
173 1.1 cgd case '?':
174 1.1 cgd default:
175 1.1 cgd usage();
176 1.1 cgd break;
177 1.1 cgd }
178 1.1 cgd argc -= optind;
179 1.1 cgd argv += optind;
180 1.1 cgd
181 1.20 itojun fromlen = sizeof (from); /* xxx */
182 1.1 cgd if (getpeername(0, (struct sockaddr *)&from, &fromlen) < 0) {
183 1.1 cgd syslog(LOG_ERR,"Can't get peer name of remote host: %m");
184 1.1 cgd fatal(STDERR_FILENO, "Can't get peer name of remote host", 1);
185 1.1 cgd }
186 1.21 itojun #ifdef INET6
187 1.21 itojun if (((struct sockaddr *)&from)->sa_family == AF_INET6 &&
188 1.21 itojun IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *)&from)->sin6_addr) &&
189 1.21 itojun sizeof(struct sockaddr_in) <= sizeof(from)) {
190 1.21 itojun struct sockaddr_in sin;
191 1.21 itojun struct sockaddr_in6 *sin6;
192 1.21 itojun const int off = sizeof(struct sockaddr_in6) -
193 1.21 itojun sizeof(struct sockaddr_in);
194 1.21 itojun
195 1.21 itojun sin6 = (struct sockaddr_in6 *)&from;
196 1.21 itojun memset(&sin, 0, sizeof(sin));
197 1.21 itojun sin.sin_family = AF_INET;
198 1.21 itojun sin.sin_len = sizeof(struct sockaddr_in);
199 1.21 itojun memcpy(&sin.sin_addr, &sin6->sin6_addr.s6_addr[off],
200 1.21 itojun sizeof(sin.sin_addr));
201 1.21 itojun memcpy(&from, &sin, sizeof(sin));
202 1.21 itojun fromlen = sin.sin_len;
203 1.21 itojun }
204 1.21 itojun #else
205 1.21 itojun if (((struct sockaddr *)&from)->sa_family == AF_INET6 &&
206 1.21 itojun IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *)&from)->sin6_addr)) {
207 1.21 itojun char hbuf[NI_MAXHOST];
208 1.21 itojun if (getnameinfo((struct sockaddr *)&from, fromlen, hbuf,
209 1.21 itojun sizeof(hbuf), NULL, 0, NI_NUMERICHOST) != 0) {
210 1.21 itojun strncpy(hbuf, "invalid", sizeof(hbuf));
211 1.21 itojun }
212 1.21 itojun syslog(LOG_ERR, "malformed \"from\" address (v4 mapped, %s)\n",
213 1.21 itojun hbuf);
214 1.21 itojun exit(1);
215 1.21 itojun }
216 1.21 itojun #endif
217 1.5 cgd on = 1;
218 1.1 cgd if (keepalive &&
219 1.1 cgd setsockopt(0, SOL_SOCKET, SO_KEEPALIVE, &on, sizeof (on)) < 0)
220 1.1 cgd syslog(LOG_WARNING, "setsockopt (SO_KEEPALIVE): %m");
221 1.20 itojun #if defined(IP_TOS)
222 1.20 itojun if (((struct sockaddr *)&from)->sa_family == AF_INET) {
223 1.20 itojun on = IPTOS_LOWDELAY;
224 1.20 itojun if (setsockopt(0, IPPROTO_IP, IP_TOS, (char *)&on, sizeof(int)) < 0)
225 1.20 itojun syslog(LOG_WARNING, "setsockopt (IP_TOS): %m");
226 1.20 itojun }
227 1.20 itojun #endif
228 1.20 itojun doit(0, (struct sockaddr *)&from);
229 1.9 lukem /* NOTREACHED */
230 1.11 mrg #ifdef __GNUC__
231 1.11 mrg exit(0);
232 1.11 mrg #endif
233 1.1 cgd }
234 1.1 cgd
235 1.1 cgd int child;
236 1.1 cgd int netf;
237 1.1 cgd char line[MAXPATHLEN];
238 1.1 cgd int confirmed;
239 1.1 cgd
240 1.1 cgd struct winsize win = { 0, 0, 0, 0 };
241 1.1 cgd
242 1.1 cgd
243 1.5 cgd void
244 1.1 cgd doit(f, fromp)
245 1.1 cgd int f;
246 1.20 itojun struct sockaddr *fromp;
247 1.1 cgd {
248 1.5 cgd int master, pid, on = 1;
249 1.5 cgd int authenticated = 0;
250 1.9 lukem char utmphost[UT_HOSTSIZE + 1];
251 1.9 lukem char *hostname;
252 1.9 lukem char hostnamebuf[2 * MAXHOSTNAMELEN + 1];
253 1.1 cgd char c;
254 1.20 itojun char naddr[NI_MAXHOST];
255 1.20 itojun char saddr[NI_MAXHOST];
256 1.20 itojun char raddr[NI_MAXHOST];
257 1.20 itojun int af = fromp->sa_family;
258 1.20 itojun u_int16_t *portp;
259 1.20 itojun struct addrinfo hints, *res, *res0;
260 1.20 itojun int gaierror;
261 1.20 itojun #ifdef NI_WITHSCOPEID
262 1.20 itojun const int niflags = NI_NUMERICHOST | NI_NUMERICSERV | NI_WITHSCOPEID;
263 1.20 itojun #else
264 1.20 itojun const int niflags = NI_NUMERICHOST | NI_NUMERICSERV;
265 1.20 itojun #endif
266 1.1 cgd
267 1.1 cgd alarm(60);
268 1.1 cgd read(f, &c, 1);
269 1.1 cgd
270 1.1 cgd if (c != 0)
271 1.1 cgd exit(1);
272 1.1 cgd
273 1.1 cgd alarm(0);
274 1.20 itojun switch (af) {
275 1.20 itojun case AF_INET:
276 1.20 itojun portp = &((struct sockaddr_in *)fromp)->sin_port;
277 1.20 itojun break;
278 1.20 itojun #ifdef INET6
279 1.20 itojun case AF_INET6:
280 1.20 itojun portp = &((struct sockaddr_in6 *)fromp)->sin6_port;
281 1.20 itojun break;
282 1.20 itojun #endif
283 1.20 itojun default:
284 1.20 itojun syslog(LOG_ERR, "malformed \"from\" address (af %d)\n", af);
285 1.20 itojun exit(1);
286 1.20 itojun }
287 1.20 itojun if (getnameinfo((struct sockaddr *)fromp, fromp->sa_len,
288 1.20 itojun naddr, sizeof(naddr), NULL, 0, niflags) != 0) {
289 1.20 itojun syslog(LOG_ERR, "malformed \"from\" address (af %d)\n", af);
290 1.20 itojun exit(1);
291 1.20 itojun }
292 1.20 itojun
293 1.20 itojun if (getnameinfo((struct sockaddr *)fromp, fromp->sa_len,
294 1.20 itojun saddr, sizeof(saddr), NULL, 0, NI_NAMEREQD) == 0) {
295 1.9 lukem /*
296 1.9 lukem * If name returned by gethostbyaddr is in our domain,
297 1.9 lukem * attempt to verify that we haven't been fooled by someone
298 1.9 lukem * in a remote net; look up the name and check that this
299 1.9 lukem * address corresponds to the name.
300 1.9 lukem */
301 1.20 itojun hostname = saddr;
302 1.22 itojun res0 = NULL;
303 1.20 itojun if (check_all || local_domain(saddr)) {
304 1.20 itojun strncpy(hostnamebuf, saddr, sizeof(hostnamebuf) - 1);
305 1.9 lukem hostnamebuf[sizeof(hostnamebuf) - 1] = 0;
306 1.20 itojun memset(&hints, 0, sizeof(hints));
307 1.20 itojun hints.ai_family = fromp->sa_family;
308 1.20 itojun hints.ai_socktype = SOCK_STREAM;
309 1.20 itojun hints.ai_flags = AI_CANONNAME;
310 1.20 itojun gaierror = getaddrinfo(hostnamebuf, "0", &hints, &res0);
311 1.20 itojun if (gaierror) {
312 1.9 lukem syslog(LOG_INFO,
313 1.20 itojun "Couldn't look up address for %s: %s",
314 1.20 itojun hostnamebuf, gai_strerror(gaierror));
315 1.20 itojun hostname = naddr;
316 1.20 itojun } else {
317 1.20 itojun for (res = res0; res; res = res->ai_next) {
318 1.20 itojun if (res->ai_family != fromp->sa_family)
319 1.20 itojun continue;
320 1.20 itojun if (res->ai_addrlen != fromp->sa_len)
321 1.20 itojun continue;
322 1.20 itojun if (getnameinfo(res->ai_addr,
323 1.20 itojun res->ai_addrlen,
324 1.20 itojun raddr, sizeof(raddr), NULL, 0,
325 1.20 itojun niflags) == 0
326 1.20 itojun && strcmp(naddr, raddr) == 0) {
327 1.20 itojun hostname = res->ai_canonname
328 1.20 itojun ? res->ai_canonname
329 1.20 itojun : saddr;
330 1.20 itojun break;
331 1.20 itojun }
332 1.20 itojun }
333 1.20 itojun if (res == NULL) {
334 1.9 lukem syslog(LOG_NOTICE,
335 1.9 lukem "Host addr %s not listed for host %s",
336 1.20 itojun naddr, res0->ai_canonname
337 1.20 itojun ? res0->ai_canonname
338 1.20 itojun : saddr);
339 1.20 itojun hostname = naddr;
340 1.9 lukem }
341 1.9 lukem }
342 1.9 lukem }
343 1.9 lukem hostname = strncpy(hostnamebuf, hostname,
344 1.9 lukem sizeof(hostnamebuf) - 1);
345 1.22 itojun if (res0)
346 1.22 itojun freeaddrinfo(res0);
347 1.9 lukem } else
348 1.20 itojun hostname = strncpy(hostnamebuf, naddr,
349 1.9 lukem sizeof(hostnamebuf) - 1);
350 1.9 lukem
351 1.9 lukem hostnamebuf[sizeof(hostnamebuf) - 1] = '\0';
352 1.9 lukem
353 1.9 lukem if (strlen(hostname) < sizeof(utmphost))
354 1.9 lukem (void)strcpy(utmphost, hostname);
355 1.5 cgd else
356 1.20 itojun (void)strncpy(utmphost, hostname, sizeof(utmphost));
357 1.9 lukem utmphost[sizeof(utmphost) - 1] = '\0';
358 1.9 lukem
359 1.20 itojun if (ntohs(*portp) >= IPPORT_RESERVED ||
360 1.20 itojun ntohs(*portp) < IPPORT_RESERVED/2) {
361 1.9 lukem syslog(LOG_NOTICE, "Connection from %s on illegal port",
362 1.20 itojun naddr);
363 1.9 lukem fatal(f, "Permission denied", 0);
364 1.9 lukem }
365 1.9 lukem #ifdef IP_OPTIONS
366 1.20 itojun if (fromp->sa_family == AF_INET) {
367 1.5 cgd u_char optbuf[BUFSIZ/3], *cp;
368 1.5 cgd char lbuf[BUFSIZ], *lp;
369 1.5 cgd int optsize = sizeof(optbuf), ipproto;
370 1.5 cgd struct protoent *ip;
371 1.5 cgd
372 1.5 cgd if ((ip = getprotobyname("ip")) != NULL)
373 1.5 cgd ipproto = ip->p_proto;
374 1.5 cgd else
375 1.5 cgd ipproto = IPPROTO_IP;
376 1.5 cgd if (getsockopt(0, ipproto, IP_OPTIONS, (char *)optbuf,
377 1.5 cgd &optsize) == 0 && optsize != 0) {
378 1.5 cgd lp = lbuf;
379 1.5 cgd for (cp = optbuf; optsize > 0; cp++, optsize--, lp += 3)
380 1.5 cgd sprintf(lp, " %2.2x", *cp);
381 1.5 cgd syslog(LOG_NOTICE,
382 1.5 cgd "Connection received using IP options (ignored):%s",
383 1.5 cgd lbuf);
384 1.5 cgd if (setsockopt(0, ipproto, IP_OPTIONS,
385 1.5 cgd (char *)NULL, optsize) != 0) {
386 1.5 cgd syslog(LOG_ERR,
387 1.5 cgd "setsockopt IP_OPTIONS NULL: %m");
388 1.5 cgd exit(1);
389 1.5 cgd }
390 1.5 cgd }
391 1.9 lukem }
392 1.1 cgd #endif
393 1.9 lukem if (do_rlogin(fromp, hostname) == 0)
394 1.9 lukem authenticated++;
395 1.1 cgd if (confirmed == 0) {
396 1.1 cgd write(f, "", 1);
397 1.1 cgd confirmed = 1; /* we sent the null! */
398 1.1 cgd }
399 1.1 cgd netf = f;
400 1.1 cgd
401 1.1 cgd pid = forkpty(&master, line, NULL, &win);
402 1.1 cgd if (pid < 0) {
403 1.1 cgd if (errno == ENOENT)
404 1.1 cgd fatal(f, "Out of ptys", 0);
405 1.1 cgd else
406 1.1 cgd fatal(f, "Forkpty", 1);
407 1.1 cgd }
408 1.1 cgd if (pid == 0) {
409 1.5 cgd if (f > 2) /* f should always be 0, but... */
410 1.1 cgd (void) close(f);
411 1.1 cgd setup_term(0);
412 1.7 mycroft if (authenticated)
413 1.1 cgd execl(_PATH_LOGIN, "login", "-p",
414 1.9 lukem "-h", utmphost, "-f", "--", lusername, (char *)0);
415 1.7 mycroft else
416 1.1 cgd execl(_PATH_LOGIN, "login", "-p",
417 1.9 lukem "-h", utmphost, "--", lusername, (char *)0);
418 1.1 cgd fatal(STDERR_FILENO, _PATH_LOGIN, 1);
419 1.1 cgd /*NOTREACHED*/
420 1.1 cgd }
421 1.19 itojun ioctl(f, FIONBIO, &on);
422 1.1 cgd ioctl(master, FIONBIO, &on);
423 1.1 cgd ioctl(master, TIOCPKT, &on);
424 1.1 cgd signal(SIGCHLD, cleanup);
425 1.1 cgd protocol(f, master);
426 1.1 cgd signal(SIGCHLD, SIG_IGN);
427 1.5 cgd cleanup(0);
428 1.1 cgd }
429 1.1 cgd
430 1.1 cgd char magic[2] = { 0377, 0377 };
431 1.1 cgd char oobdata[] = {TIOCPKT_WINDOW};
432 1.1 cgd
433 1.1 cgd /*
434 1.1 cgd * Handle a "control" request (signaled by magic being present)
435 1.1 cgd * in the data stream. For now, we are only willing to handle
436 1.1 cgd * window size changes.
437 1.1 cgd */
438 1.5 cgd int
439 1.1 cgd control(pty, cp, n)
440 1.1 cgd int pty;
441 1.1 cgd char *cp;
442 1.1 cgd int n;
443 1.1 cgd {
444 1.1 cgd struct winsize w;
445 1.1 cgd
446 1.1 cgd if (n < 4+sizeof (w) || cp[2] != 's' || cp[3] != 's')
447 1.1 cgd return (0);
448 1.1 cgd oobdata[0] &= ~TIOCPKT_WINDOW; /* we know he heard */
449 1.10 mrg memmove(&w, cp+4, sizeof(w));
450 1.1 cgd w.ws_row = ntohs(w.ws_row);
451 1.1 cgd w.ws_col = ntohs(w.ws_col);
452 1.1 cgd w.ws_xpixel = ntohs(w.ws_xpixel);
453 1.1 cgd w.ws_ypixel = ntohs(w.ws_ypixel);
454 1.1 cgd (void)ioctl(pty, TIOCSWINSZ, &w);
455 1.1 cgd return (4+sizeof (w));
456 1.1 cgd }
457 1.1 cgd
458 1.1 cgd /*
459 1.1 cgd * rlogin "protocol" machine.
460 1.1 cgd */
461 1.5 cgd void
462 1.1 cgd protocol(f, p)
463 1.13 mrg int f, p;
464 1.1 cgd {
465 1.11 mrg char pibuf[1024+1], fibuf[1024], *pbp = NULL, *fbp = NULL;
466 1.11 mrg /* XXX gcc above */
467 1.13 mrg int pcc = 0, fcc = 0;
468 1.1 cgd int cc, nfd, n;
469 1.1 cgd char cntl;
470 1.1 cgd
471 1.1 cgd /*
472 1.1 cgd * Must ignore SIGTTOU, otherwise we'll stop
473 1.1 cgd * when we try and set slave pty's window shape
474 1.1 cgd * (our controlling tty is the master pty).
475 1.1 cgd */
476 1.1 cgd (void) signal(SIGTTOU, SIG_IGN);
477 1.1 cgd send(f, oobdata, 1, MSG_OOB); /* indicate new rlogin */
478 1.1 cgd if (f > p)
479 1.1 cgd nfd = f + 1;
480 1.1 cgd else
481 1.1 cgd nfd = p + 1;
482 1.1 cgd if (nfd > FD_SETSIZE) {
483 1.1 cgd syslog(LOG_ERR, "select mask too small, increase FD_SETSIZE");
484 1.1 cgd fatal(f, "internal error (select mask too small)", 0);
485 1.1 cgd }
486 1.1 cgd for (;;) {
487 1.1 cgd fd_set ibits, obits, ebits, *omask;
488 1.1 cgd
489 1.1 cgd FD_ZERO(&ebits);
490 1.1 cgd FD_ZERO(&ibits);
491 1.1 cgd FD_ZERO(&obits);
492 1.1 cgd omask = (fd_set *)NULL;
493 1.1 cgd if (fcc) {
494 1.1 cgd FD_SET(p, &obits);
495 1.1 cgd omask = &obits;
496 1.1 cgd } else
497 1.1 cgd FD_SET(f, &ibits);
498 1.16 ross if (pcc >= 0) {
499 1.1 cgd if (pcc) {
500 1.1 cgd FD_SET(f, &obits);
501 1.1 cgd omask = &obits;
502 1.1 cgd } else
503 1.1 cgd FD_SET(p, &ibits);
504 1.16 ross }
505 1.1 cgd FD_SET(p, &ebits);
506 1.1 cgd if ((n = select(nfd, &ibits, omask, &ebits, 0)) < 0) {
507 1.1 cgd if (errno == EINTR)
508 1.1 cgd continue;
509 1.1 cgd fatal(f, "select", 1);
510 1.1 cgd }
511 1.1 cgd if (n == 0) {
512 1.1 cgd /* shouldn't happen... */
513 1.1 cgd sleep(5);
514 1.1 cgd continue;
515 1.1 cgd }
516 1.1 cgd #define pkcontrol(c) ((c)&(TIOCPKT_FLUSHWRITE|TIOCPKT_NOSTOP|TIOCPKT_DOSTOP))
517 1.1 cgd if (FD_ISSET(p, &ebits)) {
518 1.1 cgd cc = read(p, &cntl, 1);
519 1.1 cgd if (cc == 1 && pkcontrol(cntl)) {
520 1.1 cgd cntl |= oobdata[0];
521 1.1 cgd send(f, &cntl, 1, MSG_OOB);
522 1.1 cgd if (cntl & TIOCPKT_FLUSHWRITE) {
523 1.1 cgd pcc = 0;
524 1.1 cgd FD_CLR(p, &ibits);
525 1.1 cgd }
526 1.1 cgd }
527 1.1 cgd }
528 1.1 cgd if (FD_ISSET(f, &ibits)) {
529 1.1 cgd fcc = read(f, fibuf, sizeof(fibuf));
530 1.1 cgd if (fcc < 0 && errno == EWOULDBLOCK)
531 1.1 cgd fcc = 0;
532 1.1 cgd else {
533 1.13 mrg char *cp;
534 1.1 cgd int left, n;
535 1.1 cgd
536 1.1 cgd if (fcc <= 0)
537 1.1 cgd break;
538 1.1 cgd fbp = fibuf;
539 1.1 cgd
540 1.1 cgd top:
541 1.1 cgd for (cp = fibuf; cp < fibuf+fcc-1; cp++)
542 1.1 cgd if (cp[0] == magic[0] &&
543 1.1 cgd cp[1] == magic[1]) {
544 1.1 cgd left = fcc - (cp-fibuf);
545 1.1 cgd n = control(p, cp, left);
546 1.1 cgd if (n) {
547 1.1 cgd left -= n;
548 1.1 cgd if (left > 0)
549 1.17 perry memmove(cp,
550 1.15 perry cp+n,
551 1.9 lukem left);
552 1.1 cgd fcc -= n;
553 1.1 cgd goto top; /* n^2 */
554 1.1 cgd }
555 1.1 cgd }
556 1.1 cgd FD_SET(p, &obits); /* try write */
557 1.1 cgd }
558 1.1 cgd }
559 1.1 cgd
560 1.1 cgd if (FD_ISSET(p, &obits) && fcc > 0) {
561 1.1 cgd cc = write(p, fbp, fcc);
562 1.1 cgd if (cc > 0) {
563 1.1 cgd fcc -= cc;
564 1.1 cgd fbp += cc;
565 1.1 cgd }
566 1.1 cgd }
567 1.1 cgd
568 1.1 cgd if (FD_ISSET(p, &ibits)) {
569 1.1 cgd pcc = read(p, pibuf, sizeof (pibuf));
570 1.1 cgd pbp = pibuf;
571 1.1 cgd if (pcc < 0 && errno == EWOULDBLOCK)
572 1.1 cgd pcc = 0;
573 1.1 cgd else if (pcc <= 0)
574 1.1 cgd break;
575 1.1 cgd else if (pibuf[0] == 0) {
576 1.1 cgd pbp++, pcc--;
577 1.1 cgd FD_SET(f, &obits); /* try write */
578 1.1 cgd } else {
579 1.1 cgd if (pkcontrol(pibuf[0])) {
580 1.1 cgd pibuf[0] |= oobdata[0];
581 1.1 cgd send(f, &pibuf[0], 1, MSG_OOB);
582 1.1 cgd }
583 1.1 cgd pcc = 0;
584 1.1 cgd }
585 1.1 cgd }
586 1.1 cgd if ((FD_ISSET(f, &obits)) && pcc > 0) {
587 1.1 cgd cc = write(f, pbp, pcc);
588 1.1 cgd if (cc < 0 && errno == EWOULDBLOCK) {
589 1.1 cgd /*
590 1.1 cgd * This happens when we try write after read
591 1.1 cgd * from p, but some old kernels balk at large
592 1.1 cgd * writes even when select returns true.
593 1.1 cgd */
594 1.1 cgd if (!FD_ISSET(p, &ibits))
595 1.1 cgd sleep(5);
596 1.1 cgd continue;
597 1.1 cgd }
598 1.1 cgd if (cc > 0) {
599 1.1 cgd pcc -= cc;
600 1.1 cgd pbp += cc;
601 1.1 cgd }
602 1.1 cgd }
603 1.1 cgd }
604 1.1 cgd }
605 1.1 cgd
606 1.1 cgd void
607 1.5 cgd cleanup(signo)
608 1.5 cgd int signo;
609 1.1 cgd {
610 1.18 tsarna char *p, c;
611 1.1 cgd
612 1.1 cgd p = line + sizeof(_PATH_DEV) - 1;
613 1.1 cgd if (logout(p))
614 1.1 cgd logwtmp(p, "", "");
615 1.1 cgd (void)chmod(line, 0666);
616 1.1 cgd (void)chown(line, 0, 0);
617 1.18 tsarna c = *p; *p = 'p';
618 1.1 cgd (void)chmod(line, 0666);
619 1.1 cgd (void)chown(line, 0, 0);
620 1.18 tsarna *p = c;
621 1.18 tsarna if (ttyaction(line, "rlogind", "root"))
622 1.18 tsarna syslog(LOG_ERR, "%s: ttyaction failed", line);
623 1.1 cgd shutdown(netf, 2);
624 1.1 cgd exit(1);
625 1.1 cgd }
626 1.1 cgd
627 1.5 cgd void
628 1.1 cgd fatal(f, msg, syserr)
629 1.5 cgd int f;
630 1.1 cgd char *msg;
631 1.5 cgd int syserr;
632 1.1 cgd {
633 1.1 cgd int len;
634 1.1 cgd char buf[BUFSIZ], *bp = buf;
635 1.1 cgd
636 1.1 cgd /*
637 1.1 cgd * Prepend binary one to message if we haven't sent
638 1.1 cgd * the magic null as confirmation.
639 1.1 cgd */
640 1.1 cgd if (!confirmed)
641 1.1 cgd *bp++ = '\01'; /* error indicator */
642 1.1 cgd if (syserr)
643 1.1 cgd len = sprintf(bp, "rlogind: %s: %s.\r\n",
644 1.1 cgd msg, strerror(errno));
645 1.1 cgd else
646 1.1 cgd len = sprintf(bp, "rlogind: %s.\r\n", msg);
647 1.1 cgd (void) write(f, buf, bp + len - buf);
648 1.1 cgd exit(1);
649 1.1 cgd }
650 1.1 cgd
651 1.5 cgd int
652 1.9 lukem do_rlogin(dest, host)
653 1.20 itojun struct sockaddr *dest;
654 1.9 lukem char *host;
655 1.1 cgd {
656 1.9 lukem extern char *__rcmd_errstr; /* syslog hook from libc/net/rcmd.c */
657 1.9 lukem int retval;
658 1.9 lukem
659 1.1 cgd getstr(rusername, sizeof(rusername), "remuser too long");
660 1.1 cgd getstr(lusername, sizeof(lusername), "locuser too long");
661 1.1 cgd getstr(term+ENVSIZE, sizeof(term)-ENVSIZE, "Terminal type too long");
662 1.1 cgd
663 1.1 cgd pwd = getpwnam(lusername);
664 1.9 lukem if (pwd == NULL) {
665 1.9 lukem syslog(LOG_INFO,
666 1.9 lukem "%s@%s as %s: unknown login.", rusername, host, lusername);
667 1.5 cgd return (-1);
668 1.9 lukem }
669 1.20 itojun
670 1.20 itojun retval = iruserok_sa(dest, dest->sa_len, pwd->pw_uid == 0, rusername,
671 1.20 itojun lusername);
672 1.9 lukem /* XXX put inet_ntoa(dest->sin_addr.s_addr) into all messages below */
673 1.9 lukem if (retval == 0) {
674 1.9 lukem if (log_success)
675 1.9 lukem syslog(LOG_INFO, "%s@%s as %s: iruserok succeeded",
676 1.9 lukem rusername, host, lusername);
677 1.9 lukem } else {
678 1.9 lukem if (__rcmd_errstr)
679 1.9 lukem syslog(LOG_INFO, "%s@%s as %s: iruserok failed (%s)",
680 1.9 lukem rusername, host, lusername, __rcmd_errstr);
681 1.9 lukem else
682 1.9 lukem syslog(LOG_INFO, "%s@%s as %s: iruserok failed",
683 1.9 lukem rusername, host, lusername);
684 1.9 lukem }
685 1.9 lukem return(retval);
686 1.1 cgd }
687 1.1 cgd
688 1.5 cgd void
689 1.1 cgd getstr(buf, cnt, errmsg)
690 1.1 cgd char *buf;
691 1.1 cgd int cnt;
692 1.1 cgd char *errmsg;
693 1.1 cgd {
694 1.1 cgd char c;
695 1.1 cgd
696 1.1 cgd do {
697 1.1 cgd if (read(0, &c, 1) != 1)
698 1.1 cgd exit(1);
699 1.1 cgd if (--cnt < 0)
700 1.1 cgd fatal(STDOUT_FILENO, errmsg, 0);
701 1.1 cgd *buf++ = c;
702 1.1 cgd } while (c != 0);
703 1.1 cgd }
704 1.1 cgd
705 1.1 cgd extern char **environ;
706 1.1 cgd
707 1.5 cgd void
708 1.1 cgd setup_term(fd)
709 1.1 cgd int fd;
710 1.1 cgd {
711 1.13 mrg char *cp = index(term+ENVSIZE, '/');
712 1.1 cgd char *speed;
713 1.1 cgd struct termios tt;
714 1.1 cgd
715 1.1 cgd #ifndef notyet
716 1.1 cgd tcgetattr(fd, &tt);
717 1.1 cgd if (cp) {
718 1.1 cgd *cp++ = '\0';
719 1.1 cgd speed = cp;
720 1.1 cgd cp = index(speed, '/');
721 1.1 cgd if (cp)
722 1.1 cgd *cp++ = '\0';
723 1.1 cgd cfsetspeed(&tt, atoi(speed));
724 1.1 cgd }
725 1.1 cgd
726 1.1 cgd tt.c_iflag = TTYDEF_IFLAG;
727 1.1 cgd tt.c_oflag = TTYDEF_OFLAG;
728 1.1 cgd tt.c_lflag = TTYDEF_LFLAG;
729 1.1 cgd tcsetattr(fd, TCSAFLUSH, &tt);
730 1.1 cgd #else
731 1.1 cgd if (cp) {
732 1.1 cgd *cp++ = '\0';
733 1.1 cgd speed = cp;
734 1.1 cgd cp = index(speed, '/');
735 1.1 cgd if (cp)
736 1.1 cgd *cp++ = '\0';
737 1.1 cgd tcgetattr(fd, &tt);
738 1.1 cgd cfsetspeed(&tt, atoi(speed));
739 1.1 cgd tcsetattr(fd, TCSAFLUSH, &tt);
740 1.1 cgd }
741 1.1 cgd #endif
742 1.1 cgd
743 1.1 cgd env[0] = term;
744 1.1 cgd env[1] = 0;
745 1.1 cgd environ = env;
746 1.1 cgd }
747 1.1 cgd
748 1.1 cgd
749 1.5 cgd void
750 1.1 cgd usage()
751 1.1 cgd {
752 1.9 lukem syslog(LOG_ERR, "usage: rlogind [-alnL]");
753 1.1 cgd }
754 1.1 cgd
755 1.1 cgd /*
756 1.1 cgd * Check whether host h is in our local domain,
757 1.1 cgd * defined as sharing the last two components of the domain part,
758 1.1 cgd * or the entire domain part if the local domain has only one component.
759 1.1 cgd * If either name is unqualified (contains no '.'),
760 1.1 cgd * assume that the host is local, as it will be
761 1.1 cgd * interpreted as such.
762 1.1 cgd */
763 1.5 cgd int
764 1.1 cgd local_domain(h)
765 1.1 cgd char *h;
766 1.1 cgd {
767 1.14 mrg char localhost[MAXHOSTNAMELEN + 1];
768 1.5 cgd char *p1, *p2;
769 1.1 cgd
770 1.1 cgd localhost[0] = 0;
771 1.1 cgd (void) gethostname(localhost, sizeof(localhost));
772 1.14 mrg localhost[sizeof(localhost) - 1] = '\0';
773 1.1 cgd p1 = topdomain(localhost);
774 1.1 cgd p2 = topdomain(h);
775 1.1 cgd if (p1 == NULL || p2 == NULL || !strcasecmp(p1, p2))
776 1.5 cgd return (1);
777 1.5 cgd return (0);
778 1.1 cgd }
779 1.1 cgd
780 1.1 cgd char *
781 1.1 cgd topdomain(h)
782 1.1 cgd char *h;
783 1.1 cgd {
784 1.13 mrg char *p;
785 1.1 cgd char *maybe = NULL;
786 1.1 cgd int dots = 0;
787 1.1 cgd
788 1.1 cgd for (p = h + strlen(h); p >= h; p--) {
789 1.1 cgd if (*p == '.') {
790 1.1 cgd if (++dots == 2)
791 1.1 cgd return (p);
792 1.1 cgd maybe = p;
793 1.1 cgd }
794 1.1 cgd }
795 1.1 cgd return (maybe);
796 1.1 cgd }
797