1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
/* $OpenBSD: tcfsrun.c,v 1.8 2000/06/20 10:46:52 fgsch Exp $ */
/*
* Transparent Cryptographic File System (TCFS) for NetBSD
* Author and mantainer: Luigi Catuogno [luicat@tcfs.unisa.it]
*
* references: http://tcfs.dia.unisa.it
* tcfs-bsd@tcfs.unisa.it
*/
/*
* Base utility set v0.1
*/
#include <sys/types.h>
#include <sys/param.h>
#include <sys/mount.h>
#include <sys/wait.h>
#include <ctype.h>
#include <pwd.h>
#include <stdio.h>
#include <string.h>
#include <unistd.h>
#include <miscfs/tcfs/tcfs.h>
#include "tcfslib.h"
char *cmd_def="/bin/sh";
char *run_usage = "usage: tcfsrun [-p mount-point | -f fs-label] [cmd] [args...]";
int
run_main(int argc, char *argv[], char *envp[])
{
char *key, *cmd = NULL, x;
char fspath[MAXPATHLEN], cmdname[MAXPATHLEN];
uid_t uid;
pid_t pid;
int es;
int havefspath = 0, havecmd = 0;
uid = getuid();
while ((x = getopt(argc, argv, "p:f:")) != EOF) {
switch(x) {
case 'p':
strlcpy(fspath, optarg, sizeof(fspath));
havefspath = 1;
break;
case 'f':
es = tcfs_getfspath(optarg, fspath);
if (!es) {
fprintf(stderr,
"filesystem label not found!\n");
exit(1);
}
havefspath = 1;
break;
}
}
if (argc - optind) {
strlcpy(cmdname, argv[optind], sizeof(cmdname));
havecmd = 1;
cmd = cmdname;
}
if (!havefspath) {
es = tcfs_getfspath("default", fspath);
if (!es)
exit(1);
}
if (!havecmd)
cmd = cmd_def;
key = getpass("tcfs key:");
pid = fork();
if (!pid) {
pid = getpid();
if (tcfs_proc_enable(fspath, uid, pid, key) != -1) {
setuid(uid);
execve(cmd, argv + optind, envp);
}
fprintf(stderr, "Operation failed\n");
exit(1);
}
wait(0);
if (tcfs_proc_disable(fspath, uid, pid) == -1) {
fprintf (stderr, "Problems removing process key\n");
exit(1);
}
exit(0);
}
|
