ffs inode randomizer

3 files changed, 238 insertions, 0 deletions

diff --git a/sbin/fsirand/Makefile b/sbin/fsirand/Makefile
new file mode 100644
index 00000000000..5f2446bb9e8
--- /dev/null
+++ b/sbin/fsirand/Makefile
@@ -0,0 +1,8 @@
+#	$OpenBSD: Makefile,v 1.1 1997/01/26 02:23:20 millert Exp $
+
+PROG=	fsirand
+MAN=	fsirand.8
+DPADD=	${LIBUTIL}
+LDADD=	-lutil
+
+.include <bsd.prog.mk>
diff --git a/sbin/fsirand/fsirand.8 b/sbin/fsirand/fsirand.8
new file mode 100644
index 00000000000..03124705014
--- /dev/null
+++ b/sbin/fsirand/fsirand.8
@@ -0,0 +1,75 @@
+.\" Copyright (c) 1997 Todd C. Miller <Todd.Miller@courtesan.com>
+.\" All rights reserved.
+.\"
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\" 1. Redistributions of source code must retain the above copyright
+.\"    notice, this list of conditions and the following disclaimer.
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\"    notice, this list of conditions and the following disclaimer in the
+.\"    documentation and/or other materials provided with the distribution.
+.\" 3. All advertising materials mentioning features or use of this software
+.\"    must display the following acknowledgement:
+.\"	This product includes software developed by Todd C. Miller.
+.\" 4. The name of the author may not be used to endorse or promote products
+.\"    derived from this software without specific prior written permission.
+.\"
+.\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+.\" INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+.\" AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL
+.\" THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+.\" EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+.\" PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
+.\" OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+.\" WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+.\" OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
+.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+.\"
+.\"	$OpenBSD: fsirand.8,v 1.1 1997/01/26 02:23:21 millert Exp $
+.\"
+.Dd January 25, 1997
+.Dt FSIRAND 8
+.Os
+.Sh NAME
+.Nm fsirand
+.Nd randomize inode generation numbers
+.Sh SYNOPSIS
+.Nm fsirand
+.Op Fl f
+.Op Fl p
+.Ar special
+.Sh DESCRIPTION
+The
+.Nm fsirand
+command installs random generation numbers on all the inodes in
+the filesystem contained on
+.Ar special .
+This increases the security of NFS-exported filesystems by making
+it difficult to ``guess'' filehandles.
+
+.Nm Fsirand
+should only be used on an unmounted filesystem that
+has been checked with
+.Xr fsck 8
+or a filesystem that is mounted read-only.
+.Sh OPTIONS
+.Bl -tag -width indent
+The available options are as follows:
+.It Fl f
+Force
+.Nm
+to run even if the filesystem on
+.Ar special
+is not marked as clean.
+.It Fl p
+Print the current generation numbers for all inodes instead of
+generating new ones.
+.Sh SEE ALSO
+.Xr fs 5 ,
+.Xr fsck 8 ,
+.Xr newfs 8 .
+.Sh HISTORY
+The
+.Nm
+command appeared in SunOS 3.x.
diff --git a/sbin/fsirand/fsirand.c b/sbin/fsirand/fsirand.c
new file mode 100644
index 00000000000..e1d75529bcd
--- /dev/null
+++ b/sbin/fsirand/fsirand.c
@@ -0,0 +1,155 @@
+/*	$OpenBSD: fsirand.c,v 1.1 1997/01/26 02:23:23 millert Exp $	*/
+
+/*
+ * Copyright (c) 1997 Todd C. Miller <Todd.Miller@courtesan.com>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *	This product includes software developed by Todd C. Miller.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL
+ * THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+ * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
+ * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+ * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
+ * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef lint                                                              
+static char rcsid[] = "$OpenBSD: fsirand.c,v 1.1 1997/01/26 02:23:23 millert Exp $";
+#endif /* not lint */                                                        
+
+#include <sys/param.h>
+#include <sys/types.h>
+
+#include <ufs/ffs/fs.h>
+#include <ufs/ufs/dinode.h>
+
+#include <err.h>
+#include <errno.h>
+#include <fcntl.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <util.h>
+
+void usage __P((int));
+
+extern char *__progname;
+
+int
+main(argc, argv)
+	int	argc;
+	char	*argv[];
+{
+	struct fs *sblock;
+	ino_t inumber, maxino;
+	size_t ibufsize;
+	struct dinode *inodebuf;
+	static daddr_t dblk;
+	char sbuf[SBSIZE];
+	int devfd, n, printonly = 0, force = 0;
+	char *devpath;
+
+	while ((n = getopt(argc, argv, "fp")) != -1) {
+		switch (n) {
+		case 'p':
+			printonly++;
+			break;
+		case 'f':
+			force++;
+			break;
+		default:
+			usage(1);
+		}
+	}
+	if (argc - optind != 1)
+		usage(1);
+
+	/* Open device and read in superblock */
+	if ((devfd = opendev(argv[optind], printonly ? O_RDONLY : O_RDWR,
+	     OPENDEV_PART, &devpath)) < 0)
+		err(1, "Can't open %s", devpath);
+	(void)memset(&sbuf, 0, sizeof(sbuf));
+	sblock = (struct fs *)&sbuf;
+	if (lseek(devfd, SBOFF, SEEK_SET) == -1)
+		err(1, "Can't seek to superblock (%qd) on %s", SBOFF, devpath);
+	if ((n = read(devfd, (void *)sblock, SBSIZE)) != SBSIZE)
+		err(1, "Can't read superblock on %s: %s", devpath,
+		    (n < SBSIZE) ? "short read" : strerror(errno));
+
+	/* Simple sanity checks on the superblock */
+	if (sblock->fs_magic != FS_MAGIC)
+		errx(1, "Wrong magic number in superblock");
+	if (sblock->fs_sbsize > SBSIZE)
+		errx(1, "Superblock size is preposterous");
+	if (!force && !printonly && sblock->fs_clean != FS_ISCLEAN)
+		errx(1, "Filesystem is not clean, fsck %s before running %s\n",
+		     devpath, __progname);
+
+	ibufsize = sizeof(struct dinode) * INOPB(sblock);
+	if ((inodebuf = malloc(ibufsize)) == NULL)
+		errx(1, "Can't allocate memory for inode buffer");
+
+	maxino = sblock->fs_ncg * sblock->fs_ipg;
+	for (inumber = 0; inumber < maxino;) {
+		/* Read in inodes, then print or randomize generation nums */
+		dblk = fsbtodb(sblock, ino_to_fsba(sblock, inumber));
+		/* XXX - don't use DEV_BSIZE, get value from disklabel! */
+		if (lseek(devfd, (off_t)(dblk * DEV_BSIZE), SEEK_SET) < 0)
+			err(1, "Can't seek to %qd", (off_t)(dblk * DEV_BSIZE));
+		else if ((n = read(devfd, inodebuf, ibufsize)) != ibufsize)
+			errx(1, "Can't read inodes: %s",
+			     (n < ibufsize) ? "short read" : strerror(errno));
+
+		for (n = 0; n < INOPB(sblock); n++, inumber++) {
+			if (inumber >= ROOTINO) {
+				if (printonly)
+					(void)printf("ino %d gen %x\n", inumber,
+						     inodebuf[n].di_gen);
+				else
+					inodebuf[n].di_gen = arc4random();
+			}
+		}
+
+		/* Write out modified inodes */
+		if (!printonly) {
+			/* XXX - don't use DEV_BSIZE, get from disklabel! */
+			if (lseek(devfd, (off_t)(dblk * DEV_BSIZE), SEEK_SET) < 0)
+				err(1, "Can't seek to %qd",
+				    (off_t)(dblk * DEV_BSIZE));
+			else if ((n = write(devfd, inodebuf, ibufsize)) !=
+				 ibufsize)
+				errx(1, "Can't write inodes: %s",
+				     (n != ibufsize) ? "short write" :
+				     strerror(errno));
+		}
+	}
+	(void)close(devfd);
+
+	exit(0);
+}
+
+void
+usage(ex)
+	int ex;
+{
+	(void)fprintf(stderr, "Usage: %s [ -p ] special\n", __progname);
+	exit(ex);
+}