Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 1 | /* |
Damien Miller | 50945fa | 1999-12-09 10:31:37 +1100 | [diff] [blame] | 2 | * Copyright (c) 1988, 1993 |
| 3 | * The Regents of the University of California. All rights reserved. |
| 4 | * |
| 5 | * Redistribution and use in source and binary forms, with or without |
| 6 | * modification, are permitted provided that the following conditions |
| 7 | * are met: |
| 8 | * 1. Redistributions of source code must retain the above copyright |
| 9 | * notice, this list of conditions and the following disclaimer. |
| 10 | * 2. Redistributions in binary form must reproduce the above copyright |
| 11 | * notice, this list of conditions and the following disclaimer in the |
| 12 | * documentation and/or other materials provided with the distribution. |
| 13 | * 3. All advertising materials mentioning features or use of this software |
| 14 | * must display the following acknowledgement: |
| 15 | * This product includes software developed by the University of |
| 16 | * California, Berkeley and its contributors. |
| 17 | * 4. Neither the name of the University nor the names of its contributors |
| 18 | * may be used to endorse or promote products derived from this software |
| 19 | * without specific prior written permission. |
| 20 | * |
| 21 | * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND |
| 22 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| 23 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
| 24 | * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE |
| 25 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
| 26 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
| 27 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
| 28 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
| 29 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
| 30 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
| 31 | * SUCH DAMAGE. |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 32 | */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 33 | |
| 34 | #include "includes.h" |
Damien Miller | 07ab49e | 2001-07-14 12:19:56 +1000 | [diff] [blame] | 35 | RCSID("$OpenBSD: readpass.c,v 1.21 2001/07/10 21:49:12 markus Exp $"); |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 36 | |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 37 | #include "xmalloc.h" |
Ben Lindstrom | 31ca54a | 2001-02-09 02:11:24 +0000 | [diff] [blame] | 38 | #include "readpass.h" |
Ben Lindstrom | 5eb97b6 | 2001-04-19 20:33:07 +0000 | [diff] [blame] | 39 | #include "pathnames.h" |
| 40 | #include "log.h" |
| 41 | #include "atomicio.h" |
| 42 | #include "ssh.h" |
| 43 | |
Ben Lindstrom | bba8121 | 2001-06-25 05:01:22 +0000 | [diff] [blame] | 44 | static char * |
Ben Lindstrom | 6d84931 | 2001-05-02 01:30:32 +0000 | [diff] [blame] | 45 | ssh_askpass(char *askpass, const char *msg) |
Ben Lindstrom | 5eb97b6 | 2001-04-19 20:33:07 +0000 | [diff] [blame] | 46 | { |
| 47 | pid_t pid; |
| 48 | size_t len; |
| 49 | char *nl, *pass; |
| 50 | int p[2], status; |
| 51 | char buf[1024]; |
| 52 | |
| 53 | if (fflush(stdout) != 0) |
| 54 | error("ssh_askpass: fflush: %s", strerror(errno)); |
| 55 | if (askpass == NULL) |
| 56 | fatal("internal error: askpass undefined"); |
Damien Miller | 07ab49e | 2001-07-14 12:19:56 +1000 | [diff] [blame] | 57 | if (pipe(p) < 0) { |
| 58 | error("ssh_askpass: pipe: %s", strerror(errno)); |
| 59 | return xstrdup(""); |
| 60 | } |
| 61 | if ((pid = fork()) < 0) { |
| 62 | error("ssh_askpass: fork: %s", strerror(errno)); |
| 63 | return xstrdup(""); |
| 64 | } |
Ben Lindstrom | 5eb97b6 | 2001-04-19 20:33:07 +0000 | [diff] [blame] | 65 | if (pid == 0) { |
| 66 | seteuid(getuid()); |
| 67 | setuid(getuid()); |
| 68 | close(p[0]); |
| 69 | if (dup2(p[1], STDOUT_FILENO) < 0) |
| 70 | fatal("ssh_askpass: dup2: %s", strerror(errno)); |
| 71 | execlp(askpass, askpass, msg, (char *) 0); |
| 72 | fatal("ssh_askpass: exec(%s): %s", askpass, strerror(errno)); |
| 73 | } |
| 74 | close(p[1]); |
| 75 | len = read(p[0], buf, sizeof buf); |
| 76 | close(p[0]); |
| 77 | while (waitpid(pid, &status, 0) < 0) |
| 78 | if (errno != EINTR) |
| 79 | break; |
| 80 | if (len <= 1) |
| 81 | return xstrdup(""); |
| 82 | nl = strchr(buf, '\n'); |
| 83 | if (nl) |
| 84 | *nl = '\0'; |
| 85 | pass = xstrdup(buf); |
| 86 | memset(buf, 0, sizeof(buf)); |
| 87 | return pass; |
| 88 | } |
| 89 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 90 | /* |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 91 | * Reads a passphrase from /dev/tty with echo turned off/on. Returns the |
| 92 | * passphrase (allocated with xmalloc). Exits if EOF is encountered. If |
| 93 | * RP_ALLOW_STDIN is set, the passphrase will be read from stdin if no |
| 94 | * tty is available |
Damien Miller | 874d77b | 2000-10-14 16:23:11 +1100 | [diff] [blame] | 95 | */ |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 96 | char * |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 97 | read_passphrase(const char *prompt, int flags) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 98 | { |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 99 | char *askpass = NULL, *ret, buf[1024]; |
| 100 | int rppflags, use_askpass = 0, ttyfd; |
Ben Lindstrom | 5eb97b6 | 2001-04-19 20:33:07 +0000 | [diff] [blame] | 101 | |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 102 | rppflags = (flags & RP_ECHO) ? RPP_ECHO_ON : RPP_ECHO_OFF; |
| 103 | if (flags & RP_ALLOW_STDIN) { |
Ben Lindstrom | 5eb97b6 | 2001-04-19 20:33:07 +0000 | [diff] [blame] | 104 | if (!isatty(STDIN_FILENO)) |
| 105 | use_askpass = 1; |
| 106 | } else { |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 107 | rppflags |= RPP_REQUIRE_TTY; |
Ben Lindstrom | 5eb97b6 | 2001-04-19 20:33:07 +0000 | [diff] [blame] | 108 | ttyfd = open("/dev/tty", O_RDWR); |
| 109 | if (ttyfd >= 0) |
| 110 | close(ttyfd); |
| 111 | else |
| 112 | use_askpass = 1; |
| 113 | } |
| 114 | |
| 115 | if (use_askpass && getenv("DISPLAY")) { |
| 116 | if (getenv(SSH_ASKPASS_ENV)) |
| 117 | askpass = getenv(SSH_ASKPASS_ENV); |
| 118 | else |
| 119 | askpass = _PATH_SSH_ASKPASS_DEFAULT; |
| 120 | return ssh_askpass(askpass, prompt); |
| 121 | } |
| 122 | |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 123 | if (readpassphrase(prompt, buf, sizeof buf, rppflags) == NULL) |
Ben Lindstrom | 4f42d8c | 2001-07-04 05:19:27 +0000 | [diff] [blame] | 124 | return xstrdup(""); |
Ben Lindstrom | 949974b | 2001-06-25 05:20:31 +0000 | [diff] [blame] | 125 | |
| 126 | ret = xstrdup(buf); |
| 127 | memset(buf, 'x', sizeof buf); |
| 128 | return ret; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 129 | } |