Context Navigation

source: trunk/src/sh_utmp.c@ 282

Last change on this file since 282 was 279, checked in by katerina, 15 years ago
Fix for tickets #200 to #206 (kernel check, login checks, bugfixes).
File size: 27.7 KB

Rev	Line
[1]	1	/* SAMHAIN file system integrity testing */
	2	/* Copyright (C) 1999 Rainer Wichmann */
	3	/* */
	4	/* This program is free software; you can redistribute it */
	5	/* and/or modify */
	6	/* it under the terms of the GNU General Public License as */
	7	/* published by */
	8	/* the Free Software Foundation; either version 2 of the License, or */
	9	/* (at your option) any later version. */
	10	/* */
	11	/* This program is distributed in the hope that it will be useful, */
	12	/* but WITHOUT ANY WARRANTY; without even the implied warranty of */
	13	/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the */
	14	/* GNU General Public License for more details. */
	15	/* */
	16	/* You should have received a copy of the GNU General Public License */
	17	/* along with this program; if not, write to the Free Software */
	18	/* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
	19
	20	#include "config_xor.h"
	21
	22	#include <stdio.h>
	23	#include <stdlib.h>
	24	#include <string.h>
	25	#include <sys/types.h>
	26	#include <sys/stat.h>
	27	#include <fcntl.h>
	28	#include <errno.h>
	29
	30	#ifdef HAVE_UTADDR
	31	#include <sys/socket.h>
	32	#include <netinet/in.h>
	33	#ifndef S_SPLINT_S
	34	#include <arpa/inet.h>
	35	#else
	36	#define AF_INET 2
	37	#endif
	38	#endif
	39
	40	#ifdef SH_USE_UTMP
	41
	42	#ifdef HAVE_UTMPX_H
	43
	44	#ifdef S_SPLINT_S
	45	typedef pid_t __pid_t;
	46	#endif
	47
	48	#include <utmpx.h>
	49	#define SH_UTMP_S utmpx
	50	#undef ut_name
	51	#define ut_name ut_user
	52	#ifdef HAVE_UTXTIME
	53	#undef ut_time
	54	#define ut_time ut_xtime
	55	#else
	56	#undef ut_time
	57	#define ut_time ut_tv.tv_sec
	58	#endif
	59
	60	#else
	61	#include <utmp.h>
	62	#define SH_UTMP_S utmp
	63	#endif
	64
	65
	66	#ifdef HAVE_PATHS_H
	67	#include <paths.h>
	68	#endif
	69
	70	#undef FIL__
	71	#define FIL__ _("sh_utmp.c")
	72
	73	#if defined (SH_WITH_CLIENT) \|\| defined (SH_STANDALONE)
	74
	75
	76	#include "samhain.h"
	77	#include "sh_utils.h"
	78	#include "sh_error.h"
	79	#include "sh_modules.h"
	80	#include "sh_utmp.h"
[143]	81	#include "sh_pthread.h"
[259]	82	#include "sh_inotify.h"
[1]	83
[143]	84	SH_MUTEX_EXTERN(mutex_thread_nolog);
[1]	85
	86	#ifdef TM_IN_SYS_TIME
	87	#include <sys/time.h>
	88	#else
	89	#include <time.h>
	90	#endif
	91
	92	#ifdef HAVE_UNISTD_H
	93	#include <unistd.h>
	94	#endif
	95
	96	#ifdef HAVE_DIRENT_H
	97	#include <dirent.h>
	98	#define NAMLEN(dirent) sl_strlen((dirent)->d_name)
	99	#else
	100	#define dirent direct
	101	#define NAMLEN(dirent) (dirent)->d_namlen
	102	#ifdef HAVE_SYS_NDIR_H
	103	#include <sys/ndir.h>
	104	#endif
	105	#ifdef HAVE_SYS_DIR_H
	106	#include <sys/dir.h>
	107	#endif
	108	#ifdef HAVE_NDIR_H
	109	#include <ndir.h>
	110	#endif
	111	#endif
	112
	113	#ifndef HAVE_LSTAT
	114	#define lstat stat
	115	#endif
	116
	117	#ifndef UT_LINESIZE
	118	#ifndef __UT_LINESIZE
	119	#define UT_LINESIZE 12
	120	#else
	121	#define UT_LINESIZE __UT_LINESIZE
	122	#endif
	123	#endif
	124
	125	#ifndef UT_NAMESIZE
	126	#ifndef __UT_NAMESIZE
	127	#define UT_NAMESIZE 8
	128	#else
	129	#define UT_NAMESIZE __UT_NAMESIZE
	130	#endif
	131	#endif
	132
	133	#ifndef UT_HOSTSIZE
	134	#ifndef __UT_HOSTSIZE
	135	#define UT_HOSTSIZE 16
	136	#else
	137	#define UT_HOSTSIZE __UT_HOSTSIZE
	138	#endif
	139	#endif
	140
	141	#ifdef HAVE_UTMPX_H
	142
	143	#ifndef _PATH_UTMP
	144	#ifdef UTMPX_FILE
	145	#define _PATH_UTMP UTMPX_FILE
	146	#else
	147	#error You must define UTMPX_FILE in the file config.h
	148	#endif
	149	#endif
	150	#ifndef _PATH_WTMP
	151	#ifdef WTMPX_FILE
	152	#define _PATH_WTMP WTMPX_FILE
	153	#else
	154	#error You must define WTMPX_FILE in the file config.h
	155	#endif
	156	#endif
	157
	158	#else
	159
	160	#ifndef _PATH_UTMP
	161	#ifdef UTMP_FILE
	162	#define _PATH_UTMP UTMP_FILE
	163	#else
	164	#error You must define UTMP_FILE in the file config.h
	165	#endif
	166	#endif
	167	#ifndef _PATH_WTMP
	168	#ifdef WTMP_FILE
	169	#define _PATH_WTMP WTMP_FILE
	170	#else
	171	#error You must define WTMP_FILE in the file config.h
	172	#endif
	173	#endif
	174
	175	#endif
	176
	177	typedef struct log_user {
	178	char ut_tty[UT_LINESIZE+1];
	179	char name[UT_NAMESIZE+1];
	180	char ut_host[UT_HOSTSIZE+1];
	181	char ut_ship[16]; /* IP address */
	182	time_t time;
	183	struct log_user * next;
	184	} blah_utmp;
	185
	186	#ifdef HAVE_UTTYPE
	187	static char terminated_line[UT_HOSTSIZE];
	188	#endif
	189
[259]	190	static char * mode_path[] = { _PATH_WTMP, _PATH_WTMP, _PATH_UTMP };
	191
[1]	192	static struct SH_UTMP_S save_utmp;
	193
	194	static void sh_utmp_logout_morechecks(struct log_user * user);
	195	static void sh_utmp_login_morechecks(struct SH_UTMP_S * ut);
	196	static void sh_utmp_addlogin (struct SH_UTMP_S * ut);
	197	static void sh_utmp_check_internal(int mode);
	198
	199	static int ShUtmpLoginSolo = SH_ERR_INFO;
	200	static int ShUtmpLoginMulti = SH_ERR_WARN;
	201	static int ShUtmpLogout = SH_ERR_INFO;
	202	static int ShUtmpActive = S_TRUE;
	203	static time_t ShUtmpInterval = 300;
	204
	205	sh_rconf sh_utmp_table[] = {
	206	{
	207	N_("severityloginmulti"),
	208	sh_utmp_set_login_multi
	209	},
	210	{
	211	N_("severitylogin"),
	212	sh_utmp_set_login_solo
	213	},
	214	{
	215	N_("severitylogout"),
	216	sh_utmp_set_logout_good
	217	},
	218	{
	219	N_("logincheckactive"),
	220	sh_utmp_set_login_activate
	221	},
	222	{
	223	N_("logincheckinterval"),
	224	sh_utmp_set_login_timer
	225	},
	226	{
[279]	227	N_("logincheckfirst"),
	228	sh_login_set_checklevel
	229	},
	230	{
	231	N_("logincheckoutlier"),
	232	sh_login_set_siglevel
	233	},
	234	{
	235	N_("logincheckdate"),
	236	sh_login_set_def_allow
	237	},
	238	{
	239	N_("logincheckuserdate"),
	240	sh_login_set_user_allow
	241	},
	242	{
[1]	243	NULL,
	244	NULL
	245	},
	246	};
	247
[149]	248	static void set_defaults(void)
[1]	249	{
[149]	250	ShUtmpLoginSolo = SH_ERR_INFO;
	251	ShUtmpLoginMulti = SH_ERR_WARN;
	252	ShUtmpLogout = SH_ERR_INFO;
	253	ShUtmpActive = S_TRUE;
	254	ShUtmpInterval = 300;
[279]	255
	256	sh_login_reset();
[149]	257	return;
[1]	258	}
	259
	260
	261	#if defined (HAVE_SETUTENT) && defined (USE_SETUTENT)
	262
	263	#ifdef HAVE_UTMPX_H
	264
	265	#define sh_utmp_utmpname utmpxname
	266	#define sh_utmp_setutent setutxent
	267	#define sh_utmp_endutent endutxent
	268	#define sh_utmp_getutent getutxent
	269	#define sh_utmp_getutid getutxid
	270	#define sh_utmp_getutline getutxline
	271
	272	#else
	273
	274	#define sh_utmp_utmpname utmpname
	275	#define sh_utmp_setutent setutent
	276	#define sh_utmp_endutent endutent
	277	#define sh_utmp_getutent getutent
	278	#define sh_utmp_getutid getutid
	279	#define sh_utmp_getutline getutline
	280
	281	#endif
	282
	283	#else
	284
	285	/* BSD lacks getutent() etc.
	286	* utmpname(), setutent(), and endutent() return void,
	287	* so we do not perform much error handling.
	288	* Errors must be recognized by getutent() returning NULL.
	289	* Apparently, the application cannot check whether wtmp is empty,
	290	* or whether there was an fopen() error.
	291	*/
	292
	293	static FILE * sh_utmpfile = NULL;
	294	static char sh_utmppath[80] = _PATH_UTMP;
	295
	296	/* sh_utmp_feed_forward is for optimizing
	297	* (fseek instead of getutent loop)
	298	*/
	299	static long sh_utmp_feed_forward = 0;
	300
	301	static void sh_utmp_utmpname(const char * str)
	302	{
	303	SL_ENTER(_("sh_utmp_utmpname"));
	304	if (sh_utmpfile != NULL)
	305	{
[252]	306	(void) sl_fclose (FIL__, __LINE__, sh_utmpfile);
[1]	307	sh_utmpfile = NULL;
	308	}
	309
	310	(void) sl_strlcpy (sh_utmppath, str, 80);
	311	SL_RET0(_("sh_utmp_utmpname"));
	312	}
	313
	314	static void sh_utmp_setutent(void)
	315	{
	316	int error;
	317	int fd;
	318
	319	SL_ENTER(_("sh_utmp_setutent"));
	320
	321	ASSERT((sh_utmppath != NULL), _("sh_utmppath != NULL"));
	322
	323	if (sh_utmppath == NULL)
	324	SL_RET0(_("sh_utmp_setutent"));
	325
	326	if (sh_utmpfile == NULL)
	327	{
[143]	328	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	329	fd = (int) aud_open (FIL__, __LINE__, SL_NOPRIV,
	330	sh_utmppath, O_RDONLY, 0);
[143]	331	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	332	if (fd >= 0)
	333	{
	334	sh_utmpfile = fdopen(fd, "r");
	335	}
	336
	337	/* -- If (sh_utmpfile == NULL) then either the open() or the fdopen()
	338	* has failed.
	339	*/
	340	if (sh_utmpfile == NULL)
	341	{
	342	error = errno;
[143]	343	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	344	sh_error_handle ((-1), FIL__, __LINE__, error, MSG_E_ACCESS,
	345	(long) sh.real.uid, sh_utmppath);
[143]	346	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	347	SL_RET0(_("sh_utmp_setutent"));
	348	}
	349	}
	350	(void) fseek (sh_utmpfile, 0L, SEEK_SET);
	351	if (-1 == fseek (sh_utmpfile, sh_utmp_feed_forward, SEEK_CUR))
	352	{
	353	sh_utmp_feed_forward = 0; /* modified Apr 4, 2004 */
	354	(void) fseek (sh_utmpfile, 0L, SEEK_SET);
	355	}
	356	clearerr (sh_utmpfile);
	357	SL_RET0(_("sh_utmp_setutent"));
	358	}
	359
	360	static void sh_utmp_endutent(void)
	361	{
	362	SL_ENTER(_("sh_utmp_endutent"));
[30]	363	if (NULL != sh_utmpfile)
[252]	364	(void) sl_fclose(FIL__, __LINE__, sh_utmpfile);
[1]	365	sh_utmpfile = NULL;
	366	SL_RET0(_("sh_utmp_endutent"));
	367	}
	368
	369	static struct SH_UTMP_S * sh_utmp_getutent(void)
	370	{
	371	size_t in;
	372	static struct SH_UTMP_S out;
	373
	374	SL_ENTER(_("sh_utmp_getutent"));
	375
	376	ASSERT_RET((sh_utmpfile != NULL), _("sh_utmpfile != NULL"), (NULL))
	377
	378	in = fread (&out, sizeof(struct SH_UTMP_S), 1, sh_utmpfile);
	379
	380	if (in != 1)
	381	{
	382	if (ferror (sh_utmpfile) != 0)
	383	{
	384	clearerr (sh_utmpfile);
	385	SL_RETURN(NULL, _("sh_utmp_getutent"));
	386	}
	387	else
	388	{
	389	SL_RETURN(NULL, _("sh_utmp_getutent"));
	390	}
	391	}
	392	SL_RETURN(&out, _("sh_utmp_getutent"));
	393	}
	394
	395	#ifdef USE_UNUSED
	396
	397	static struct SH_UTMP_S * sh_utmp_getutline(struct SH_UTMP_S * ut)
	398	{
	399	struct SH_UTMP_S * out;
	400
	401	while (1) {
	402	if ((out = sh_utmp_getutent()) == NULL) {
	403	return NULL;
	404	}
	405	#ifdef HAVE_UTTYPE
	406	if (out->ut_type == USER_PROCESS \|\| out->ut_type == LOGIN_PROCESS)
	407	if (sl_strcmp(ut->ut_line, out->ut_line) == 0)
	408	return out;
	409	#else
	410	if ( 0 != sl_strncmp (out->ut_name, "reboot", 6) &&
	411	0 != sl_strncmp (out->ut_name, "shutdown", 8) &&
	412	0 != sl_strncmp (out->ut_name, "date", 4) )
	413	return out;
	414	#endif
	415	}
	416	return NULL;
	417	}
	418
	419	static struct SH_UTMP_S * sh_utmp_getutid(struct SH_UTMP_S * ut)
	420	{
	421	#ifdef HAVE_UTTYPE
	422	struct SH_UTMP_S * out;
	423
	424	if (ut->ut_type == RUN_LVL \|\| ut->ut_type == BOOT_TIME \|\|
	425	ut->ut_type == NEW_TIME \|\| ut->ut_type == OLD_TIME)
	426	{
	427	while (1) {
	428	if ((out = sh_utmp_getutent()) == NULL) {
	429	return NULL;
	430	}
	431	if (out->ut_type == ut->ut_type)
	432	return out;
	433	}
	434	}
	435	else if (ut->ut_type == INIT_PROCESS \|\| ut->ut_type == LOGIN_PROCESS \|\|
	436	ut->ut_type == USER_PROCESS \|\| ut->ut_type == DEAD_PROCESS )
	437	{
	438	while (1) {
	439	if ((out = sh_utmp_getutent()) == NULL) {
	440	return NULL;
	441	}
	442	if (sl_strcmp(ut->ut_id, out->ut_id) == 0)
	443	return out;
	444	}
	445	}
	446	#endif
	447	return NULL;
	448	}
	449	/* #ifdef USE_UNUSED */
	450	#endif
	451
	452	/* #ifdef HAVE_SETUTENT */
	453	#endif
	454
	455	#ifdef HAVE_UTADDR
	456	#ifdef HAVE_INET_ATON
	457	static char * my_inet_ntoa(struct in_addr in)
	458	{
	459	return /@-unrecog@/inet_ntoa(in)/@+unrecog@/;
	460	}
	461	#else
	462	static char * my_inet_ntoa(struct in_addr in)
	463	{
	464	unsigned char a, b, c, d;
	465	static char foo[16];
	466	char bar[4];
	467	memcpy (bar, &(in.s_addr), 4); /* memory alignment (?) */
	468	memcpy (&a, &bar[0], 1);
	469	memcpy (&b, &bar[1], 1);
	470	memcpy (&c, &bar[2], 1);
	471	memcpy (&d, &bar[3], 1);
[34]	472	sprintf(foo, _("%d.%d.%d.%d"), /* known to fit */
[1]	473	(int) a, (int) b, (int) c, (int) d);
	474	return foo;
	475	}
	476	#endif
	477	/* #ifdef HAVE_UTADDR */
	478	#endif
	479
	480	#if defined(__linux__) && !defined(ut_addr)
	481	#define ut_addr ut_addr_v6[0]
	482	#endif
	483
	484
	485	static struct log_user * userlist = NULL;
	486	static time_t lastcheck;
[142]	487	static int init_done = 0;
[1]	488
	489	/*************
	490	*
	491	* module init
	492	*
	493	*************/
[142]	494
[170]	495	static int sh_utmp_init_internal (void)
[1]	496	{
	497
	498	SL_ENTER(_("sh_utmp_init"));
	499	if (ShUtmpActive == BAD)
	500	SL_RETURN( (-1), _("sh_utmp_init"));
	501
	502	/* do not re-initialize after a re-configuration
	503	*/
[142]	504	if (init_done == 1) {
[1]	505	SL_RETURN( (0), _("sh_utmp_init"));
	506	}
	507	lastcheck = time (NULL);
	508	userlist = NULL;
	509	memset (&save_utmp, 0, sizeof(struct SH_UTMP_S));
	510	sh_utmp_check_internal (2); /* current logins */
	511	sh_utmp_check_internal (0);
[142]	512	init_done = 1;
[1]	513	SL_RETURN( (0), _("sh_utmp_init"));
	514	}
	515
[142]	516	int sh_utmp_init (struct mod_type * arg)
	517	{
[279]	518	#if !defined(HAVE_PTHREAD)
	519	(void) arg;
	520	#endif
[142]	521	if (ShUtmpActive == BAD)
	522	return SH_MOD_FAILED;
	523	#ifdef HAVE_PTHREAD
[144]	524	if (arg != NULL && arg->initval < 0 &&
	525	(sh.flag.isdaemon == S_TRUE \|\| sh.flag.loop == S_TRUE))
[142]	526	{
	527	if (0 == sh_pthread_create(sh_threaded_module_run, (void *)arg))
	528	return SH_MOD_THREAD;
	529	else
	530	return SH_MOD_FAILED;
	531	}
	532	#endif
	533	return sh_utmp_init_internal();
	534	}
	535
[1]	536	/*************
	537	*
	538	* module cleanup
	539	*
	540	*************/
	541	#ifdef HAVE_UTTYPE
[170]	542	static int sh_utmp_login_clean(void);
[1]	543	#endif
	544
[259]	545	#if defined(HAVE_PTHREAD)
	546	static sh_watches inotify_watch;
	547	#endif
	548
[1]	549	int sh_utmp_end ()
	550	{
	551	struct log_user * user = userlist;
	552	struct log_user * userold;
	553
	554	SL_ENTER(_("sh_utmp_end"));
	555	while (user)
	556	{
	557	userold = user;
	558	user = user->next;
	559	SH_FREE(userold);
	560	}
	561	userlist = NULL;
	562	#ifdef HAVE_UTTYPE
	563	(void) sh_utmp_login_clean();
	564	#endif
[142]	565	/* Reset the flag, such that the module
	566	* can be re-enabled.
	567	*/
[149]	568	set_defaults();
[142]	569	init_done = 0;
[259]	570
[279]	571	#if defined(HAVE_PTHREAD)
[259]	572	sh_inotify_remove(&inotify_watch);
[279]	573	#endif
[259]	574
[1]	575	SL_RETURN( (0), _("sh_utmp_end"));
	576	}
	577
[259]	578
[149]	579	int sh_utmp_reconf()
	580	{
	581	set_defaults();
[279]	582	#if defined(HAVE_PTHREAD)
[259]	583	sh_inotify_remove(&inotify_watch);
[279]	584	#endif
[149]	585	return 0;
	586	}
[1]	587
[149]	588
[1]	589	/*************
	590	*
	591	* module timer
	592	*
	593	*************/
	594	int sh_utmp_timer (time_t tcurrent)
	595	{
[259]	596	#if !defined(HAVE_PTHREAD)
	597	retry_msleep(1, 0);
	598
[1]	599	if ((time_t) (tcurrent - lastcheck) >= ShUtmpInterval)
	600	{
	601	lastcheck = tcurrent;
	602	return (-1);
	603	}
	604	return 0;
[259]	605	#else
	606	int errnum = 0;
	607
[262]	608	if ( (sh.flag.isdaemon == S_TRUE \|\| sh.flag.loop == S_TRUE) &&
	609	sh.flag.checkSum != SH_CHECK_INIT )
	610	{
	611	sh_inotify_wait_for_change(mode_path[1], &inotify_watch,
	612	&errnum, ShUtmpInterval);
	613	}
	614
	615	lastcheck = tcurrent;
[259]	616
	617	if (SH_INOTIFY_ERROR(errnum))
	618	{
	619	char ebuf[SH_ERRBUF_SIZE];
	620
	621	SH_MUTEX_LOCK(mutex_thread_nolog);
	622	sh_error_message(errnum, ebuf, sizeof(ebuf));
	623	sh_error_handle (SH_ERR_WARN, FIL__, __LINE__, errnum, MSG_E_SUBGEN,
	624	ebuf,
	625	_("sh_utmp_timer") );
	626	SH_MUTEX_UNLOCK(mutex_thread_nolog);
	627	}
	628	return -1;
	629	#endif
[1]	630	}
	631
	632	/*************
	633	*
	634	* module check
	635	*
	636	*************/
	637	int sh_utmp_check ()
	638	{
	639	SL_ENTER(_("sh_utmp_check"));
[142]	640	if (ShUtmpActive == BAD)
[259]	641	{
	642	#if defined(HAVE_PTHREAD)
	643	sh_inotify_remove(&inotify_watch);
	644	#endif
	645	SL_RETURN( (-1), _("sh_utmp_check"));
	646	}
[143]	647	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	648	sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_UT_CHECK);
[143]	649	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	650	sh_utmp_check_internal (1);
	651
	652	SL_RETURN(0, _("sh_utmp_check"));
	653	}
	654
	655	/*************
	656	*
	657	* module setup
	658	*
	659	*************/
	660
[68]	661	int sh_utmp_set_login_solo (const char * c)
[1]	662	{
	663	int retval;
	664	char tmp[32];
	665
	666	SL_ENTER(_("sh_utmp_set_login_solo"));
	667	tmp[0] = '='; tmp[1] = '\0';
	668	(void) sl_strlcat (tmp, c, 32);
[143]	669	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	670	retval = sh_error_set_level (tmp, &ShUtmpLoginSolo);
[143]	671	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	672	SL_RETURN(retval, _("sh_utmp_set_login_solo"));
	673	}
	674
[68]	675	int sh_utmp_set_login_multi (const char * c)
[1]	676	{
	677	int retval;
	678	char tmp[32];
	679
	680	SL_ENTER(_("sh_utmp_set_login_multi"));
	681	tmp[0] = '='; tmp[1] = '\0';
	682	(void) sl_strlcat (tmp, c, 32);
[143]	683	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	684	retval = sh_error_set_level (tmp, &ShUtmpLoginMulti);
[143]	685	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	686	SL_RETURN(retval, _("sh_utmp_set_login_multi"));
	687	}
	688
[68]	689	int sh_utmp_set_logout_good (const char * c)
[1]	690	{
	691	int retval;
	692	char tmp[32];
	693
	694	SL_ENTER(_("sh_utmp_set_logout_good"));
	695	tmp[0] = '='; tmp[1] = '\0';
	696	(void) sl_strlcat (tmp, c, 32);
[143]	697	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	698	retval = sh_error_set_level (tmp, &ShUtmpLogout);
[143]	699	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	700	SL_RETURN(retval, _("sh_utmp_set_logout_good"));
	701	}
	702
[68]	703	int sh_utmp_set_login_timer (const char * c)
[1]	704	{
	705	long val;
	706
	707	SL_ENTER(_("sh_utmp_set_login_timer"));
	708	val = strtol (c, (char **)NULL, 10);
	709	if (val <= 0)
	710	{
[143]	711	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	712	sh_error_handle ((-1), FIL__, __LINE__, EINVAL, MSG_EINVALS,
	713	_("utmp timer"), c);
[143]	714	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[170]	715	SL_RETURN((-1), _("sh_utmp_set_login_timer"));
[1]	716	}
	717
	718	ShUtmpInterval = (time_t) val;
	719	SL_RETURN(0, _("sh_utmp_set_login_timer"));
	720	}
	721
[68]	722	int sh_utmp_set_login_activate (const char * c)
[1]	723	{
	724	int i;
	725	SL_ENTER(_("sh_utmp_set_login_activate"));
	726	i = sh_util_flagval(c, &ShUtmpActive);
	727	SL_RETURN(i, _("sh_utmp_set_login_activate"));
	728	}
	729
	730	#ifdef HAVE_UTTYPE
	731	struct login_ct {
	732	char name[UT_NAMESIZE+1];
	733	int nlogin;
	734	struct login_ct * next;
	735	};
	736
	737	static struct login_ct * login_ct_list = NULL;
	738
[170]	739	static int sh_utmp_login_clean(void)
[1]	740	{
	741	struct login_ct * list = login_ct_list;
	742	struct login_ct * old;
	743
	744	login_ct_list = NULL;
	745
	746	while (list)
	747	{
	748	old = list;
	749	list = list->next;
	750	SH_FREE(old);
	751	}
	752	return 0;
	753	}
	754
	755	/* add a username to the list of logged-in users
	756	*/
	757	static int sh_utmp_login_a(char * str)
	758	{
	759	struct login_ct * list = login_ct_list;
	760
	761	while (list)
	762	{
	763	if (0 == sl_strcmp(list->name, str))
	764	{
	765	++(list->nlogin);
	766	return list->nlogin;
	767	}
	768	list = list->next;
	769	}
	770	list = SH_ALLOC(sizeof(struct login_ct));
	771	(void) sl_strlcpy(list->name, str, UT_NAMESIZE+1);
	772	list->nlogin = 1;
	773	list->next = login_ct_list;
	774	login_ct_list = list;
	775	return 1;
	776	}
	777
	778	static int sh_utmp_login_r(char * str)
	779	{
	780	struct login_ct * list = login_ct_list;
	781	struct login_ct * old = login_ct_list;
	782
	783	while (list)
	784	{
	785	if (0 == sl_strcmp(list->name, str))
	786	{
	787	list->nlogin -= 1;
	788	if (list->nlogin > 0)
	789	{
	790	return list->nlogin;
	791	}
	792	if (login_ct_list == list) /* modified Apr 4, 2004 */
	793	{
	794	login_ct_list = list->next;
	795	SH_FREE(list);
	796	}
	797	else
	798	{
	799	old->next = list->next;
	800	SH_FREE(list);
	801	}
	802	return 0;
	803	}
	804	old = list;
	805	list = list->next;
	806	}
	807	return 0;
	808	}
	809
	810	#endif
	811
	812
	813	/* for each login:
	814	* - allocate a log record
	815	* - link device.ut_record -> log_record
	816	* - link user.ut_record -> log_record
	817	*/
[259]	818
[1]	819	#ifdef HAVE_UTTYPE
	820	static int sh_utmp_is_virtual (char * in_utline, char * in_uthost)
	821	{
[259]	822
	823	if (in_uthost != NULL &&
	824	in_utline != NULL &&
[1]	825	in_uthost[0] == ':' &&
	826	in_uthost[1] == '0' &&
[259]	827	0 == sl_strncmp(in_utline, _("pts/"), 4))
[1]	828	{
[259]	829	return 1;
[1]	830	}
[259]	831
	832	return 0;
[1]	833	}
	834	#endif
	835
[154]	836	/* These variables are not used anywhere. They only exist
	837	* to assign &userold, &user to them, which keeps gcc from
	838	* putting them into a register, and avoids the 'clobbered
	839	* by longjmp' warning. And no, 'volatile' proved insufficient.
	840	*/
[170]	841	static void * sh_dummy_userold = NULL;
	842	static void * sh_dummy_user = NULL;
[154]	843
	844
[1]	845	static void sh_utmp_addlogin (struct SH_UTMP_S * ut)
	846	{
[154]	847	struct log_user * user = userlist;
	848	struct log_user * userold = userlist;
[1]	849	#ifdef HAVE_UTTYPE
	850	struct log_user * username = userlist;
	851	#endif
	852
	853	char ttt[TIM_MAX];
	854	#ifdef HAVE_UTTYPE
[153]	855	volatile int status;
[1]	856	#endif
	857
	858	SL_ENTER(_("sh_utmp_addlogin"));
	859
[154]	860	/* Take the address to keep gcc from putting them into registers.
	861	* Avoids the 'clobbered by longjmp' warning.
	862	*/
	863	sh_dummy_userold = (void*) &userold;
	864	sh_dummy_user = (void*) &user;
	865
[1]	866	if (ut->ut_line[0] == '\0')
	867	SL_RET0(_("sh_utmp_addlogin"));
	868
	869	/* for some stupid reason, AIX repeats the wtmp entry for logouts
	870	* with ssh
	871	*/
	872	if (memcmp (&save_utmp, ut, sizeof(struct SH_UTMP_S)) == 0)
	873	{
	874	memset(&save_utmp, (int) '\0', sizeof(struct SH_UTMP_S));
	875	SL_RET0(_("sh_utmp_addlogin"));
	876	}
	877	memcpy (&save_utmp, ut, sizeof(struct SH_UTMP_S));
	878
	879
	880	/* ------- find user --------
	881	*/
	882	while (user != NULL)
	883	{
[154]	884	if (0 == sl_strncmp((char*)(user->ut_tty), ut->ut_line, UT_LINESIZE) )
[1]	885	break;
	886	userold = user;
	887	user = user->next;
	888	}
	889
	890	#ifdef HAVE_UTTYPE
	891	while (username != NULL)
	892	{
	893	if (0 == sl_strncmp(username->name, ut->ut_name, UT_NAMESIZE) )
	894	break;
	895	username = username->next;
	896	}
	897	#endif
	898
	899	#ifdef HAVE_UTTYPE
	900	/* ---------- LOGIN -------------- */
	901	if (ut->ut_type == USER_PROCESS)
	902	{
	903	if (user == NULL)
	904	{
	905	user = SH_ALLOC(sizeof(struct log_user));
	906	user->next = userlist;
[154]	907	userlist = (struct log_user *) user;
[1]	908	}
[154]	909	(void) sl_strlcpy((char*)(user->ut_tty), ut->ut_line, UT_LINESIZE+1);
	910	(void) sl_strlcpy((char*)(user->name), ut->ut_name, UT_NAMESIZE+1);
[1]	911	#ifdef HAVE_UTHOST
[154]	912	(void) sl_strlcpy((char*)(user->ut_host), ut->ut_host, UT_HOSTSIZE+1);
[1]	913	#else
	914	user->ut_host[0] = '\0';
	915	#endif
	916	#ifdef HAVE_UTADDR
	917	/@-type@//* ut_addr does exist !!! */
[154]	918	(void) sl_strlcpy((char*)(user->ut_ship),
[1]	919	my_inet_ntoa((struct in_addr)&(ut->ut_addr)), 16);
	920	/@+type@/
	921	#endif
	922	user->time = ut->ut_time;
	923
	924	if (username == NULL /* not yet logged in */
	925	\|\| 0 == sl_strncmp(ut->ut_line, _("ttyp"), 4) /* in virt. console */
	926	\|\| 0 == sl_strncmp(ut->ut_line, _("ttyq"), 4) /* in virt. console */
	927	) {
[154]	928	status = sh_utmp_login_a((char*)user->name);
[143]	929	SH_MUTEX_LOCK(mutex_thread_nolog);
[132]	930	(void) sh_unix_time (user->time, ttt, TIM_MAX);
[1]	931	sh_error_handle( ShUtmpLoginSolo, FIL__, __LINE__, 0,
	932	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	933	MSG_UT_LG1X,
	934	#elif defined(HAVE_UTHOST)
	935	MSG_UT_LG1A,
	936	#else
	937	MSG_UT_LG1B,
	938	#endif
	939	user->name,
	940	user->ut_tty,
	941	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	942	user->ut_host,
	943	user->ut_ship,
	944	#elif defined(HAVE_UTHOST)
	945	user->ut_host,
	946	#endif
	947	ttt,
	948	status
	949	);
[143]	950	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	951	} else
[259]	952	if (0 == sh_utmp_is_virtual(ut->ut_line, (char*)user->ut_host))
[1]	953	{
[154]	954	status = sh_utmp_login_a((char*)user->name);
[143]	955	SH_MUTEX_LOCK(mutex_thread_nolog);
[132]	956	(void) sh_unix_time (user->time, ttt, TIM_MAX);
[1]	957	sh_error_handle( ShUtmpLoginMulti, FIL__, __LINE__, 0,
	958	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	959	MSG_UT_LG2X,
	960	#elif defined(HAVE_UTHOST)
	961	MSG_UT_LG2A,
	962	#else
	963	MSG_UT_LG2B,
	964	#endif
	965	user->name,
	966	user->ut_tty,
	967	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	968	user->ut_host,
	969	user->ut_ship,
	970	#elif defined(HAVE_UTHOST)
	971	user->ut_host,
	972	#endif
	973	ttt,
	974	status
	975	);
[143]	976	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	977	}
	978
	979	sh_utmp_login_morechecks(ut);
	980	SL_RET0(_("sh_utmp_addlogin"));
	981	}
	982
	983
	984	/* --------- LOGOUT ---------------- */
	985	else if (ut->ut_name[0] == '\0'
	986	\|\| ut->ut_type == DEAD_PROCESS /* solaris does not clear ut_name */
	987	)
	988	{
	989	if (user != NULL)
	990	{
[259]	991	#if defined(__linux__)
	992	if (0 == sh_utmp_is_virtual(ut->ut_line, (char*)user->ut_host)) {
	993	#endif
	994	status = sh_utmp_login_r((char*)user->name);
	995	SH_MUTEX_LOCK(mutex_thread_nolog);
	996	(void) sh_unix_time (ut->ut_time, ttt, TIM_MAX);
	997	sh_error_handle( ShUtmpLogout, FIL__, __LINE__, 0,
[1]	998	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
[259]	999	MSG_UT_LG3X,
[1]	1000	#elif defined(HAVE_UTHOST)
[259]	1001	MSG_UT_LG3A,
[1]	1002	#else
[259]	1003	MSG_UT_LG3B,
[1]	1004	#endif
[259]	1005	user->name,
	1006	user->ut_tty,
[1]	1007	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
[259]	1008	user->ut_host,
	1009	user->ut_ship,
[1]	1010	#elif defined(HAVE_UTHOST)
[259]	1011	user->ut_host,
[1]	1012	#endif
[259]	1013	ttt,
	1014	status
	1015	);
	1016	SH_MUTEX_UNLOCK(mutex_thread_nolog);
	1017	userold->next = user->next;
	1018	if (user == userlist)
	1019	userlist = user->next;
	1020	sh_utmp_logout_morechecks((struct log_user *)user);
	1021	SH_FREE((struct log_user *)user);
	1022	user = NULL;
	1023	#if defined(__linux__)
	1024	}
	1025	#endif
[1]	1026	}
	1027	else
	1028	{
	1029	(void) sl_strlcpy(terminated_line, ut->ut_line, UT_HOSTSIZE);
[143]	1030	SH_MUTEX_LOCK(mutex_thread_nolog);
[132]	1031	(void) sh_unix_time (ut->ut_time, ttt, TIM_MAX);
[1]	1032	sh_error_handle( ShUtmpLogout, FIL__, __LINE__, 0,
	1033	MSG_UT_LG3C,
	1034	terminated_line,
	1035	ttt, 0
	1036	);
[143]	1037	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1038	}
	1039	SL_RET0(_("sh_utmp_addlogin"));
	1040	}
	1041
	1042	/* default */
	1043	SL_RET0(_("sh_utmp_addlogin"));
	1044
	1045	/* #ifdef HAVE_UTTYPE */
	1046	#else
	1047
	1048	if (user == NULL) /* probably a login */
	1049	{
	1050	user = SH_ALLOC(sizeof(struct log_user));
	1051	sl_strlcpy(user->ut_tty, ut->ut_line, UT_LINESIZE+1);
	1052	sl_strlcpy(user->name, ut->ut_name, UT_NAMESIZE+1);
	1053	#ifdef HAVE_UTHOST
	1054	sl_strlcpy(user->ut_host, ut->ut_host, UT_HOSTSIZE+1);
	1055	#endif
	1056	#ifdef HAVE_UTADDR
	1057	sl_strlcpy(user->ut_ship,my_inet_ntoa((struct in_addr)ut->ut_addr),16);
	1058	#endif
	1059	user->time = ut->ut_time;
	1060	user->next = userlist;
	1061	userlist = user;
	1062
[143]	1063	SH_MUTEX_LOCK(mutex_thread_nolog);
[132]	1064	(void) sh_unix_time (user->time, ttt, TIM_MAX);
[1]	1065	sh_error_handle( ShUtmpLoginSolo, FIL__, __LINE__, 0,
	1066	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	1067	MSG_UT_LG1X,
	1068	#elif defined(HAVE_UTHOST)
	1069	MSG_UT_LG1A,
	1070	#else
	1071	MSG_UT_LG1B,
	1072	#endif
	1073	user->name,
	1074	user->ut_tty,
	1075	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	1076	user->ut_host,
	1077	user->ut_ship,
	1078	#elif defined(HAVE_UTHOST)
	1079	user->ut_host,
	1080	#endif
	1081	ttt,
	1082	1
	1083	);
[143]	1084	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1085	sh_utmp_login_morechecks(ut);
	1086	}
	1087	else /* probably a logout */
	1088	{
[143]	1089	SH_MUTEX_LOCK(mutex_thread_nolog);
[132]	1090	(void) sh_unix_time (ut->ut_time, ttt, TIM_MAX);
[1]	1091	sh_error_handle( ShUtmpLogout, FIL__, __LINE__, 0,
	1092	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	1093	MSG_UT_LG2X,
	1094	#elif defined(HAVE_UTHOST)
	1095	MSG_UT_LG2A,
	1096	#else
	1097	MSG_UT_LG2B,
	1098	#endif
	1099	user->name,
	1100	user->ut_tty,
	1101	#if defined(HAVE_UTHOST) && defined(HAVE_UTADDR)
	1102	user->ut_host,
	1103	user->ut_ship,
	1104	#elif defined(HAVE_UTHOST)
	1105	user->ut_host,
	1106	#endif
	1107	ttt,
	1108	1
	1109	);
[143]	1110	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1111	sh_utmp_logout_morechecks(user);
	1112	userold->next = user->next;
	1113	if (user == userlist) /* inserted Apr 4, 2004 */
	1114	userlist = user->next;
	1115	SH_FREE(user);
	1116	user = NULL;
	1117	}
	1118
	1119	SL_RET0(_("sh_utmp_addlogin"));
	1120	#endif
	1121	}
	1122
	1123	static time_t lastmod = 0;
	1124	static off_t lastsize = 0;
	1125	static unsigned long lastread = 0;
	1126
	1127	static void sh_utmp_check_internal (int mode)
	1128	{
	1129	struct stat buf;
	1130	int error;
	1131	struct SH_UTMP_S * ut;
[170]	1132	unsigned long this_read;
[143]	1133	int val_retry;
[1]	1134
	1135	SL_ENTER(_("sh_utmp_check_internal"));
	1136
	1137	/* error if no access
	1138	*/
[143]	1139	do {
	1140	val_retry = /@-unrecog@/lstat ( mode_path[mode], &buf)/@+unrecog@/;
	1141	} while (val_retry < 0 && errno == EINTR);
	1142
	1143	if (0 != val_retry)
[1]	1144	{
	1145	error = errno;
[143]	1146	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1147	sh_error_handle((-1), FIL__, __LINE__, error, MSG_E_ACCESS,
	1148	(long) sh.real.uid, mode_path[mode]);
[143]	1149	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1150	SL_RET0(_("sh_utmp_check_internal"));
	1151	}
	1152
	1153	/* modification time
	1154	*/
	1155	if (mode < 2)
	1156	{
	1157	if (/@-usedef@/buf.st_mtime <= lastmod/@+usedef@/)
	1158	{
	1159	SL_RET0(_("sh_utmp_check_internal"));
	1160	}
	1161	else
	1162	lastmod = buf.st_mtime;
	1163	}
	1164
	1165	/* file size
	1166	*/
	1167	if (/@-usedef@/buf.st_size < lastsize/@+usedef@/ && mode < 2)
	1168	{
[143]	1169	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1170	sh_error_handle((-1), FIL__, __LINE__, 0, MSG_UT_ROT,
	1171	mode_path[mode]);
[143]	1172	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1173	lastread = 0;
	1174	#ifndef USE_SETUTENT
	1175	sh_utmp_feed_forward = 0L;
	1176	#endif
	1177	}
	1178
	1179	if (mode < 2)
	1180	lastsize = buf.st_size;
	1181
	1182	if (buf.st_size == 0)
	1183	SL_RET0(_("sh_utmp_check_internal"));
	1184
	1185	sh_utmp_utmpname(mode_path[mode]);
	1186	sh_utmp_setutent();
	1187
	1188	/*
	1189	* feed forward if initializing
	1190	* we need to do this here
	1191	*/
[170]	1192	this_read = 0;
	1193
[1]	1194	if (mode < 2)
	1195	{
	1196	while (this_read < lastread) {
	1197	ut = sh_utmp_getutent();
	1198	++this_read;
	1199	}
	1200	}
	1201
	1202	/* start reading
	1203	*/
	1204	this_read = 0;
	1205	while (1 == 1) {
	1206	ut = sh_utmp_getutent();
	1207	if (ut == NULL)
	1208	break;
	1209	/* modified: ut_user --> ut_name */
	1210	if (mode == 1 \|\| (mode == 2 && ut->ut_name[0] != '\0'
	1211	#ifdef HAVE_UTTYPE
	1212	&& ut->ut_type != DEAD_PROCESS
	1213	#endif
	1214	))
	1215	sh_utmp_addlogin (ut);
	1216	++this_read;
	1217	}
	1218
	1219	sh_utmp_endutent();
	1220
	1221	if (mode < 2)
	1222	{
	1223	lastread += this_read;
	1224	#ifndef USE_SETUTENT
	1225	sh_utmp_feed_forward += (long) (this_read * sizeof(struct SH_UTMP_S));
	1226	lastread = 0;
	1227	#endif
	1228	}
	1229
	1230	SL_RET0(_("sh_utmp_check_internal"));
	1231	}
	1232
[279]	1233	extern void sh_ltrack_check(struct SH_UTMP_S * ut);
[1]	1234
	1235	static void sh_utmp_login_morechecks(struct SH_UTMP_S * ut)
	1236	{
[279]	1237	sh_ltrack_check(ut);
[1]	1238	return;
	1239	}
	1240
	1241	static void sh_utmp_logout_morechecks(struct log_user * user)
	1242	{
[279]	1243	(void) user;
[1]	1244	return;
	1245	}
	1246
	1247	#endif
	1248
	1249
	1250	/* #ifdef SH_USE_UTMP */
	1251	#endif
	1252
	1253
	1254

Note: See TracBrowser for help on using the repository browser.

Download in other formats: