Modular sudo front-end which loads policy and I/O plugins that do
most the actual work. Currently relies on dynamic loading using dlopen(). See doc/plugin.pod for the plugin API.
This commit is contained in:
Todd C. Miller
431
src/parse_args.c
Normal file
431
src/parse_args.c
Normal file
@@ -0,0 +1,431 @@
|
||||
/*
|
||||
* Copyright (c) 1993-1996, 1998-2009 Todd C. Miller <Todd.Miller@courtesan.com>
|
||||
*
|
||||
* Permission to use, copy, modify, and distribute this software for any
|
||||
* purpose with or without fee is hereby granted, provided that the above
|
||||
* copyright notice and this permission notice appear in all copies.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
||||
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
||||
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
||||
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
||||
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
||||
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
||||
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
||||
*
|
||||
* Sponsored in part by the Defense Advanced Research Projects
|
||||
* Agency (DARPA) and Air Force Research Laboratory, Air Force
|
||||
* Materiel Command, USAF, under agreement number F39502-99-1-0512.
|
||||
*/
|
||||
|
||||
#include <config.h>
|
||||
|
||||
/* XXX - prune this */
|
||||
|
||||
#include <sys/types.h>
|
||||
#include <sys/param.h>
|
||||
|
||||
#include <stdio.h>
|
||||
#ifdef STDC_HEADERS
|
||||
# include <stdlib.h>
|
||||
# include <stddef.h>
|
||||
#else
|
||||
# ifdef HAVE_STDLIB_H
|
||||
# include <stdlib.h>
|
||||
# endif
|
||||
#endif /* STDC_HEADERS */
|
||||
#ifdef HAVE_STRING_H
|
||||
# if defined(HAVE_MEMORY_H) && !defined(STDC_HEADERS)
|
||||
# include <memory.h>
|
||||
# endif
|
||||
# include <string.h>
|
||||
#else
|
||||
# ifdef HAVE_STRINGS_H
|
||||
# include <strings.h>
|
||||
# endif
|
||||
#endif /* HAVE_STRING_H */
|
||||
#ifdef HAVE_UNISTD_H
|
||||
# include <unistd.h>
|
||||
#endif /* HAVE_UNISTD_H */
|
||||
#include <pwd.h>
|
||||
#include <grp.h>
|
||||
|
||||
#include <sudo_usage.h>
|
||||
#include "sudo.h"
|
||||
#include "lbuf.h" /* XXX */
|
||||
|
||||
/* For getopt(3) */
|
||||
extern char *optarg;
|
||||
extern int optind;
|
||||
|
||||
/* XXX - better home for these and extern in header file */
|
||||
int tgetpass_flags;
|
||||
int user_closefrom = -1;
|
||||
const char *list_user, *runas_user, *runas_group;
|
||||
|
||||
/*
|
||||
* Local functions.
|
||||
*/
|
||||
static void usage(int) __attribute__((__noreturn__));
|
||||
static void usage_excl(int) __attribute__((__noreturn__));
|
||||
|
||||
/*
|
||||
* Mapping of command line flags to name/value settings.
|
||||
*/
|
||||
struct name_value_pair {
|
||||
const char *name;
|
||||
const char *value;
|
||||
};
|
||||
static struct sudo_settings {
|
||||
struct name_value_pair a;
|
||||
struct name_value_pair c;
|
||||
struct name_value_pair D;
|
||||
struct name_value_pair E;
|
||||
struct name_value_pair g;
|
||||
struct name_value_pair H;
|
||||
struct name_value_pair i;
|
||||
struct name_value_pair k;
|
||||
struct name_value_pair p;
|
||||
struct name_value_pair r;
|
||||
struct name_value_pair t;
|
||||
struct name_value_pair U;
|
||||
struct name_value_pair u;
|
||||
} sudo_settings = {
|
||||
{ "bsdauth_type" },
|
||||
{ "login_class" },
|
||||
{ "debug_level" },
|
||||
{ "preserve_environment" },
|
||||
{ "runas_group" },
|
||||
{ "set_home" },
|
||||
{ "login_shell" },
|
||||
{ "ignore_ticket" },
|
||||
{ "prompt" },
|
||||
{ "selinux_role" },
|
||||
{ "selinux_type" },
|
||||
{ "runas_user" }
|
||||
};
|
||||
static struct name_value_pair *setting_pairs[] = {
|
||||
&sudo_settings.a,
|
||||
&sudo_settings.c,
|
||||
&sudo_settings.D,
|
||||
&sudo_settings.E,
|
||||
&sudo_settings.g,
|
||||
&sudo_settings.H,
|
||||
&sudo_settings.i,
|
||||
&sudo_settings.p,
|
||||
&sudo_settings.r,
|
||||
&sudo_settings.t,
|
||||
&sudo_settings.u
|
||||
};
|
||||
#define settings_size (sizeof(setting_pairs) / sizeof(struct name_value_pair))
|
||||
|
||||
/*
|
||||
* Command line argument parsing.
|
||||
* Sets nargc and nargv which corresponds to the argc/argv we'll use
|
||||
* for the command to be run (if we are running one).
|
||||
*/
|
||||
int
|
||||
parse_args(int argc, char **argv, int *nargc, char ***nargv, char ***settingsp,
|
||||
char ***env_addp)
|
||||
{
|
||||
int mode = 0; /* what mode is sudo to be run in? */
|
||||
int flags = 0; /* mode flags */
|
||||
int valid_flags, ch;
|
||||
int i, j;
|
||||
char **settings;
|
||||
char **env_add;
|
||||
int nenv = 0;
|
||||
int env_size = 32;
|
||||
|
||||
env_add = emalloc2(env_size, sizeof(char *));
|
||||
env_add[0] = NULL;
|
||||
|
||||
/* First, check to see if we were invoked as "sudoedit". */
|
||||
if (strcmp(getprogname(), "sudoedit") == 0)
|
||||
mode = MODE_EDIT;
|
||||
|
||||
/* Returns true if the last option string was "--" */
|
||||
#define got_end_of_args (optind > 1 && argv[optind - 1][0] == '-' && \
|
||||
argv[optind - 1][1] == '-' && argv[optind - 1][2] == '\0')
|
||||
|
||||
/* Returns true if next option is an environment variable */
|
||||
#define is_envar (optind < argc && argv[optind][0] != '/' && \
|
||||
strchr(argv[optind], '=') != NULL)
|
||||
|
||||
/* Flags allowed when running a command */
|
||||
valid_flags = MODE_BACKGROUND|MODE_PRESERVE_ENV|MODE_RESET_HOME|
|
||||
MODE_LOGIN_SHELL|MODE_INVALIDATE|MODE_NONINTERACTIVE|
|
||||
MODE_PRESERVE_GROUPS|MODE_SHELL;
|
||||
/* XXX - should fill in settings at the end to avoid dupes */
|
||||
for (;;) {
|
||||
/*
|
||||
* We disable arg permutation for GNU getopt().
|
||||
* Some trickiness is required to allow environment variables
|
||||
* to be interspersed with command line options.
|
||||
*/
|
||||
if ((ch = getopt(argc, argv, "+Aa:bC:c:D:Eeg:HhiKkLlnPp:r:Sst:U:u:Vv")) != -1) {
|
||||
switch (ch) {
|
||||
case 'A':
|
||||
SET(tgetpass_flags, TGP_ASKPASS);
|
||||
break;
|
||||
#ifdef HAVE_BSD_AUTH_H
|
||||
case 'a':
|
||||
sudo_settings.a.value = optarg;
|
||||
break;
|
||||
#endif
|
||||
case 'b':
|
||||
SET(flags, MODE_BACKGROUND);
|
||||
break;
|
||||
case 'C':
|
||||
if ((user_closefrom = atoi(optarg)) < 3) {
|
||||
warningx("the argument to -C must be at least 3");
|
||||
usage(1);
|
||||
}
|
||||
break;
|
||||
#ifdef HAVE_LOGIN_CAP_H
|
||||
case 'c':
|
||||
sudo_settings.c.value = optarg;
|
||||
break;
|
||||
#endif
|
||||
case 'D':
|
||||
sudo_settings.D.value = optarg;
|
||||
break;
|
||||
case 'E':
|
||||
sudo_settings.c.value = "true";
|
||||
break;
|
||||
case 'e':
|
||||
if (mode && mode != MODE_EDIT)
|
||||
usage_excl(1);
|
||||
mode = MODE_EDIT;
|
||||
valid_flags = MODE_INVALIDATE|MODE_NONINTERACTIVE;
|
||||
break;
|
||||
case 'g':
|
||||
runas_group = optarg;
|
||||
sudo_settings.g.value = optarg;
|
||||
break;
|
||||
case 'H':
|
||||
sudo_settings.H.value = optarg;
|
||||
break;
|
||||
case 'h':
|
||||
if (mode && mode != MODE_HELP) {
|
||||
if (strcmp(getprogname(), "sudoedit") != 0)
|
||||
usage_excl(1);
|
||||
}
|
||||
mode = MODE_HELP;
|
||||
valid_flags = 0;
|
||||
break;
|
||||
case 'i':
|
||||
sudo_settings.i.value = "true";
|
||||
SET(flags, MODE_LOGIN_SHELL);
|
||||
break;
|
||||
case 'k':
|
||||
sudo_settings.k.value = "true";
|
||||
SET(flags, MODE_INVALIDATE);
|
||||
break;
|
||||
case 'K':
|
||||
sudo_settings.k.value = "true";
|
||||
if (mode && mode != MODE_KILL)
|
||||
usage_excl(1);
|
||||
mode = MODE_KILL;
|
||||
valid_flags = 0;
|
||||
break;
|
||||
case 'l':
|
||||
if (mode) {
|
||||
if (mode == MODE_LIST)
|
||||
SET(flags, MODE_LONG_LIST);
|
||||
else
|
||||
usage_excl(1);
|
||||
}
|
||||
mode = MODE_LIST;
|
||||
valid_flags = MODE_INVALIDATE|MODE_NONINTERACTIVE|MODE_LONG_LIST;
|
||||
break;
|
||||
case 'n':
|
||||
SET(flags, MODE_NONINTERACTIVE);
|
||||
break;
|
||||
case 'P':
|
||||
SET(flags, MODE_PRESERVE_GROUPS);
|
||||
break;
|
||||
case 'p':
|
||||
sudo_settings.i.value = optarg;
|
||||
break;
|
||||
#ifdef HAVE_SELINUX
|
||||
case 'r':
|
||||
sudo_settings.r.value = optarg;
|
||||
break;
|
||||
case 't':
|
||||
sudo_settings.t.value = optarg;
|
||||
break;
|
||||
#endif
|
||||
case 'S':
|
||||
SET(tgetpass_flags, TGP_STDIN);
|
||||
break;
|
||||
case 's':
|
||||
SET(flags, MODE_SHELL);
|
||||
break;
|
||||
case 'U':
|
||||
/* XXX - sudo_getpwnam */
|
||||
if ((getpwnam(optarg)) == NULL)
|
||||
errorx(1, "unknown user: %s", optarg);
|
||||
list_user = optarg;
|
||||
break;
|
||||
case 'u':
|
||||
runas_user = optarg;
|
||||
sudo_settings.u.value = optarg;
|
||||
break;
|
||||
case 'v':
|
||||
if (mode && mode != MODE_VALIDATE)
|
||||
usage_excl(1);
|
||||
mode = MODE_VALIDATE;
|
||||
valid_flags = MODE_INVALIDATE|MODE_NONINTERACTIVE;
|
||||
break;
|
||||
case 'V':
|
||||
if (mode && mode != MODE_VERSION)
|
||||
usage_excl(1);
|
||||
mode = MODE_VERSION;
|
||||
valid_flags = 0;
|
||||
break;
|
||||
default:
|
||||
usage(1);
|
||||
}
|
||||
} else if (!got_end_of_args && is_envar) {
|
||||
if (nenv == env_size - 2) {
|
||||
env_size *= 2;
|
||||
env_add = erealloc3(env_add, env_size, sizeof(char *));
|
||||
}
|
||||
env_add[nenv++] = argv[optind];
|
||||
|
||||
/* Crank optind and resume getopt. */
|
||||
optind++;
|
||||
} else {
|
||||
/* Not an option or an environment variable -- we're done. */
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
*nargc = argc - optind;
|
||||
*nargv = argv + optind;
|
||||
|
||||
if (!mode) {
|
||||
/* Defer -k mode setting until we know whether it is a flag or not */
|
||||
if (ISSET(flags, MODE_INVALIDATE) && *nargc == 0) {
|
||||
mode = MODE_INVALIDATE; /* -k by itself */
|
||||
CLR(flags, MODE_INVALIDATE);
|
||||
sudo_settings.k.value = NULL;
|
||||
valid_flags = 0;
|
||||
} else {
|
||||
mode = MODE_RUN; /* running a command */
|
||||
}
|
||||
}
|
||||
|
||||
if (*nargc > 0 && mode == MODE_LIST)
|
||||
mode = MODE_CHECK;
|
||||
|
||||
if (ISSET(flags, MODE_LOGIN_SHELL)) {
|
||||
if (ISSET(flags, MODE_SHELL)) {
|
||||
warningx("you may not specify both the `-i' and `-s' options");
|
||||
usage(1);
|
||||
}
|
||||
if (ISSET(flags, MODE_PRESERVE_ENV)) {
|
||||
warningx("you may not specify both the `-i' and `-E' options");
|
||||
usage(1);
|
||||
}
|
||||
SET(flags, MODE_SHELL);
|
||||
}
|
||||
if ((flags & valid_flags) != flags)
|
||||
usage(1);
|
||||
if (mode == MODE_EDIT &&
|
||||
(ISSET(flags, MODE_PRESERVE_ENV) || env_add[0] != NULL)) {
|
||||
if (ISSET(mode, MODE_PRESERVE_ENV))
|
||||
warningx("the `-E' option is not valid in edit mode");
|
||||
if (env_add[0] != NULL)
|
||||
warningx("you may not specify environment variables in edit mode");
|
||||
usage(1);
|
||||
}
|
||||
if ((runas_user != NULL || runas_group != NULL) &&
|
||||
!ISSET(mode, MODE_EDIT | MODE_RUN | MODE_CHECK | MODE_VALIDATE)) {
|
||||
usage(1);
|
||||
}
|
||||
if (list_user != NULL && mode != MODE_LIST && mode != MODE_CHECK) {
|
||||
warningx("the `-U' option may only be used with the `-l' option");
|
||||
usage(1);
|
||||
}
|
||||
if (ISSET(tgetpass_flags, TGP_STDIN) && ISSET(tgetpass_flags, TGP_ASKPASS)) {
|
||||
warningx("the `-A' and `-S' options may not be used together");
|
||||
usage(1);
|
||||
}
|
||||
if ((*nargc == 0 && mode == MODE_EDIT) ||
|
||||
(*nargc > 0 && !ISSET(mode, MODE_RUN | MODE_EDIT | MODE_CHECK)))
|
||||
usage(1);
|
||||
if (*nargc == 0 && mode == MODE_RUN && !ISSET(flags, MODE_SHELL))
|
||||
SET(flags, (MODE_IMPLIED_SHELL | MODE_SHELL));
|
||||
|
||||
if (mode == MODE_HELP)
|
||||
usage(0);
|
||||
|
||||
/*
|
||||
* Format setting_pairs into settings array.
|
||||
*/
|
||||
settings = emalloc2(settings_size + 1, sizeof (char *));
|
||||
for (i = 0, j = 0; i < settings_size; i++) {
|
||||
if (setting_pairs[i]->value) {
|
||||
settings[j++] = fmt_string(setting_pairs[i]->name,
|
||||
setting_pairs[i]->value);
|
||||
}
|
||||
}
|
||||
settings[j] = NULL;
|
||||
|
||||
*settingsp = settings;
|
||||
*env_addp = env_add;
|
||||
return(mode | flags);
|
||||
}
|
||||
|
||||
/*
|
||||
* Give usage message and exit.
|
||||
* The actual usage strings are in sudo_usage.h for configure substitution.
|
||||
* XXX - avoid lbuf usage
|
||||
*/
|
||||
static void
|
||||
usage(int exit_val)
|
||||
{
|
||||
struct lbuf lbuf;
|
||||
char *uvec[6];
|
||||
int i, ulen;
|
||||
|
||||
/*
|
||||
* Use usage vectors appropriate to the progname.
|
||||
*/
|
||||
if (strcmp(getprogname(), "sudoedit") == 0) {
|
||||
uvec[0] = SUDO_USAGE5 + 3;
|
||||
uvec[1] = NULL;
|
||||
} else {
|
||||
uvec[0] = SUDO_USAGE1;
|
||||
uvec[1] = SUDO_USAGE2;
|
||||
uvec[2] = SUDO_USAGE3;
|
||||
uvec[3] = SUDO_USAGE4;
|
||||
uvec[4] = SUDO_USAGE5;
|
||||
uvec[5] = NULL;
|
||||
}
|
||||
|
||||
/*
|
||||
* Print usage and wrap lines as needed, depending on the
|
||||
* tty width.
|
||||
*/
|
||||
ulen = (int)strlen(getprogname()) + 8;
|
||||
lbuf_init(&lbuf, NULL, ulen, 0);
|
||||
for (i = 0; uvec[i] != NULL; i++) {
|
||||
lbuf_append(&lbuf, "usage: ", getprogname(), uvec[i], NULL);
|
||||
lbuf_print(&lbuf);
|
||||
}
|
||||
lbuf_destroy(&lbuf);
|
||||
exit(exit_val);
|
||||
}
|
||||
|
||||
/*
|
||||
* Tell which options are mutually exclusive and exit.
|
||||
*/
|
||||
static void
|
||||
usage_excl(int exit_val)
|
||||
{
|
||||
warningx("Only one of the -e, -h, -i, -K, -l, -s, -v or -V options may be specified");
|
||||
usage(exit_val);
|
||||
}
|
||||
Reference in New Issue
Block a user