Annotation of src/usr.bin/lock/lock.c, Revision 1.1
1.1 ! deraadt 1: /* $NetBSD: lock.c,v 1.7 1995/06/27 00:16:17 jtc Exp $ */
! 2:
! 3: /*
! 4: * Copyright (c) 1980, 1987, 1993
! 5: * The Regents of the University of California. All rights reserved.
! 6: *
! 7: * This code is derived from software contributed to Berkeley by
! 8: * Bob Toxen.
! 9: *
! 10: * Redistribution and use in source and binary forms, with or without
! 11: * modification, are permitted provided that the following conditions
! 12: * are met:
! 13: * 1. Redistributions of source code must retain the above copyright
! 14: * notice, this list of conditions and the following disclaimer.
! 15: * 2. Redistributions in binary form must reproduce the above copyright
! 16: * notice, this list of conditions and the following disclaimer in the
! 17: * documentation and/or other materials provided with the distribution.
! 18: * 3. All advertising materials mentioning features or use of this software
! 19: * must display the following acknowledgement:
! 20: * This product includes software developed by the University of
! 21: * California, Berkeley and its contributors.
! 22: * 4. Neither the name of the University nor the names of its contributors
! 23: * may be used to endorse or promote products derived from this software
! 24: * without specific prior written permission.
! 25: *
! 26: * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
! 27: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
! 28: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
! 29: * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
! 30: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
! 31: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
! 32: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
! 33: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
! 34: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
! 35: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
! 36: * SUCH DAMAGE.
! 37: */
! 38:
! 39: #ifndef lint
! 40: static char copyright[] =
! 41: "@(#) Copyright (c) 1980, 1987, 1993\n\
! 42: The Regents of the University of California. All rights reserved.\n";
! 43: #endif /* not lint */
! 44:
! 45: #ifndef lint
! 46: #if 0
! 47: static char sccsid[] = "@(#)lock.c 8.1 (Berkeley) 6/6/93";
! 48: #endif
! 49: static char rcsid[] = "$NetBSD: lock.c,v 1.7 1995/06/27 00:16:17 jtc Exp $";
! 50: #endif /* not lint */
! 51:
! 52: /*
! 53: * Lock a terminal up until the given key is entered, until the root
! 54: * password is entered, or the given interval times out.
! 55: *
! 56: * Timeout interval is by default TIMEOUT, it can be changed with
! 57: * an argument of the form -time where time is in minutes
! 58: */
! 59:
! 60: #include <sys/param.h>
! 61: #include <sys/stat.h>
! 62: #include <sys/time.h>
! 63: #include <signal.h>
! 64:
! 65: #include <ctype.h>
! 66: #include <err.h>
! 67: #include <pwd.h>
! 68: #include <stdio.h>
! 69: #include <string.h>
! 70: #include <termios.h>
! 71:
! 72: #define TIMEOUT 15
! 73:
! 74: void quit(), bye(), hi();
! 75:
! 76: struct timeval timeout;
! 77: struct timeval zerotime;
! 78: struct termios tty, ntty;
! 79: long nexttime; /* keep the timeout time */
! 80:
! 81: /*ARGSUSED*/
! 82: main(argc, argv)
! 83: int argc;
! 84: char **argv;
! 85: {
! 86: extern char *optarg;
! 87: extern int errno, optind;
! 88: struct passwd *pw;
! 89: struct timeval timval;
! 90: struct itimerval ntimer, otimer;
! 91: struct tm *timp;
! 92: time_t curtime;
! 93: int ch, sectimeout, usemine;
! 94: char *ap, *mypw, *ttynam, *tzn;
! 95: char hostname[MAXHOSTNAMELEN], s[BUFSIZ], s1[BUFSIZ];
! 96: char *crypt(), *ttyname();
! 97:
! 98: sectimeout = TIMEOUT;
! 99: mypw = NULL;
! 100: usemine = 0;
! 101:
! 102: if (!(pw = getpwuid(getuid())))
! 103: errx(1, "unknown uid %d.", getuid());
! 104:
! 105: while ((ch = getopt(argc, argv, "pt:")) != EOF)
! 106: switch((char)ch) {
! 107: case 't':
! 108: if ((sectimeout = atoi(optarg)) <= 0)
! 109: errx(1, "illegal timeout value: %s", optarg);
! 110: break;
! 111: case 'p':
! 112: usemine = 1;
! 113: mypw = strdup(pw->pw_passwd);
! 114: break;
! 115: case '?':
! 116: default:
! 117: (void)fprintf(stderr,
! 118: "usage: lock [-p] [-t timeout]\n");
! 119: exit(1);
! 120: }
! 121: timeout.tv_sec = sectimeout * 60;
! 122:
! 123: setuid(getuid()); /* discard privs */
! 124:
! 125: if (tcgetattr(0, &tty) < 0) /* get information for header */
! 126: exit(1);
! 127: gethostname(hostname, sizeof(hostname));
! 128: if (!(ttynam = ttyname(0)))
! 129: errx(1, "not a terminal?");
! 130: if (gettimeofday(&timval, (struct timezone *)NULL))
! 131: err(1, "gettimeofday");
! 132: curtime = timval.tv_sec;
! 133: nexttime = timval.tv_sec + (sectimeout * 60);
! 134: timp = localtime(&curtime);
! 135: ap = asctime(timp);
! 136: tzn = timp->tm_zone;
! 137:
! 138: (void)signal(SIGINT, quit);
! 139: (void)signal(SIGQUIT, quit);
! 140: ntty = tty; ntty.c_lflag &= ~ECHO;
! 141: (void)tcsetattr(0, TCSADRAIN, &ntty);
! 142:
! 143: if (!mypw) {
! 144: /* get key and check again */
! 145: (void)printf("Key: ");
! 146: if (!fgets(s, sizeof(s), stdin) || *s == '\n')
! 147: quit();
! 148: (void)printf("\nAgain: ");
! 149: /*
! 150: * Don't need EOF test here, if we get EOF, then s1 != s
! 151: * and the right things will happen.
! 152: */
! 153: (void)fgets(s1, sizeof(s1), stdin);
! 154: (void)putchar('\n');
! 155: if (strcmp(s1, s)) {
! 156: (void)printf("\alock: passwords didn't match.\n");
! 157: (void)tcsetattr(0, TCSADRAIN, &tty);
! 158: exit(1);
! 159: }
! 160: s[0] = NULL;
! 161: mypw = s1;
! 162: }
! 163:
! 164: /* set signal handlers */
! 165: (void)signal(SIGINT, hi);
! 166: (void)signal(SIGQUIT, hi);
! 167: (void)signal(SIGTSTP, hi);
! 168: (void)signal(SIGALRM, bye);
! 169:
! 170: ntimer.it_interval = zerotime;
! 171: ntimer.it_value = timeout;
! 172: setitimer(ITIMER_REAL, &ntimer, &otimer);
! 173:
! 174: /* header info */
! 175: (void)printf("lock: %s on %s. timeout in %d minutes\ntime now is %.20s%s%s",
! 176: ttynam, hostname, sectimeout, ap, tzn, ap + 19);
! 177:
! 178: for (;;) {
! 179: (void)printf("Key: ");
! 180: if (!fgets(s, sizeof(s), stdin)) {
! 181: clearerr(stdin);
! 182: hi();
! 183: continue;
! 184: }
! 185: if (usemine) {
! 186: s[strlen(s) - 1] = '\0';
! 187: #ifdef SKEY
! 188: if (strcasecmp(s, "s/key") == 0) {
! 189: if (skey_auth(pw->pw_name))
! 190: break;
! 191: }
! 192: #endif
! 193: if (!strcmp(mypw, crypt(s, mypw)))
! 194: break;
! 195: }
! 196: else if (!strcmp(s, s1))
! 197: break;
! 198: (void)printf("\a\n");
! 199: if (tcsetattr(0, TCSADRAIN, &ntty) < 0)
! 200: exit(1);
! 201: }
! 202: quit();
! 203: }
! 204:
! 205: #ifdef SKEY
! 206: /*
! 207: * We can't use libskey's skey_authenticate() since it
! 208: * handles signals in a way that's inappropriate
! 209: * for our needs. Instead we roll our own.
! 210: */
! 211: int
! 212: skey_auth(char *user)
! 213: {
! 214: char s[128], *ask, *skey_keyinfo __P((char *name));
! 215: int ret = 0;
! 216:
! 217: if (!skey_haskey(user) && (ask = skey_keyinfo(user))) {
! 218: printf("\n[%s]\nResponse: ", ask);
! 219: if (!fgets(s, sizeof(s), stdin) || *s == '\n')
! 220: clearerr(stdin);
! 221: else {
! 222: s[strlen(s) - 1] = '\0';
! 223: if (skey_passcheck(user, s) != -1)
! 224: ret = 1;
! 225: }
! 226: } else
! 227: printf("Sorry, you have no s/key.\n");
! 228: return ret;
! 229: }
! 230: #endif
! 231:
! 232: void
! 233: hi()
! 234: {
! 235: struct timeval timval;
! 236:
! 237: if (!gettimeofday(&timval, (struct timezone *)NULL))
! 238: (void)printf("lock: type in the unlock key. timeout in %ld:%ld minutes\n",
! 239: (nexttime - timval.tv_sec) / 60, (nexttime - timval.tv_sec) % 60);
! 240: }
! 241:
! 242: void
! 243: quit()
! 244: {
! 245: (void)putchar('\n');
! 246: (void)tcsetattr(0, TCSADRAIN, &tty);
! 247: exit(0);
! 248: }
! 249:
! 250: void
! 251: bye()
! 252: {
! 253: (void)tcsetattr(0, TCSADRAIN, &tty);
! 254: (void)printf("lock: timeout\n");
! 255: exit(1);
! 256: }
![[BACK]](/icons/back.gif){kind=icon}
Return to lock.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / lock