![[BACK]](/icons/back.gif){kind=icon}
Return to tcfsaddgroup.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / tcfs|
Return to tcfsaddgroup.c CVS log | Up to [local] / src / usr.bin / tcfs |
1.1 provos 1: /*
2: * Transparent Cryptographic File System (TCFS) for NetBSD
3: * Author and mantainer: Luigi Catuogno [luicat@tcfs.unisa.it]
4: *
5: * references: http://tcfs.dia.unisa.it
6: * tcfs-bsd@tcfs.unisa.it
7: */
8:
9: /*
10: * Base utility set v0.1
11: */
12:
13: #include <sys/types.h>
14: #include <stdio.h>
15: #include <unistd.h>
16: #include <stdlib.h>
17: #include <pwd.h>
18: #include <grp.h>
19:
20: #include <miscfs/tcfs/tcfs.h>
21: #include "tcfslib.h"
22: #include "tcfserrors.h"
23:
24: char *addgroup_usage="Usage: %s [OPTION]
25: Add a TCFS group to the TCFS group database.
26:
27: -g <group> Group id [or name] of the TCFS group
28: -m <members> Number of members of the group
29: -t <threshold> Threshold of the group
30: -v Makes the output a little more verbose
31: -h Shows this help\n";
32:
33: int threshold;
34: unsigned char coeff[KEYSIZE][256];
35: unsigned char *S=NULL; /* Pointer to a 64-bit TCFS group key */
36:
37: union bobbit
38: {
39: unsigned char byte;
40: struct
41: {
42: unsigned char b1:1;
43: unsigned char b2:1;
44: unsigned char b3:1;
45: unsigned char b4:1;
46: unsigned char b5:1;
47: unsigned char b6:1;
48: unsigned char b7:1;
49: unsigned char b8:1;
50: } bf;
51: };
52:
53: int
54: tcfsgetuid (char *login)
55: {
56: struct passwd *entry;
57:
58: setpwent();
59:
60: while ((entry = getpwent()) != NULL) {
61: if (strcmp (login, entry->pw_name) == 0)
62: return entry->pw_uid;
63: }
64:
65: endpwent();
66: free(entry);
67:
68: return -1;
69: }
70:
71: void
72: gencoeff (void)
73: {
74: int i, j;
75:
76: for (i = 0; i < KEYSIZE; i++){
77: for (j = 1; j < threshold; j++){
78: coeff[j][i] = arc4random();
79: }
80: }
81: }
82:
83: unsigned char *
84: gengrpkey (char *login)
85: {
86: int l, x1, i, j, k=0;
87: unsigned int x;
88:
89: unsigned char *res = NULL;
90: unsigned int tmp;
91: union bobbit obits;
92:
93: res = (unsigned char*)calloc(KEYSIZE + KEYSIZE/8, sizeof(char));
94: if (!res)
95: tcfs_error (ER_MEM, NULL);
96:
97: x1 = tcfsgetuid(login);
98: x = (x1 % 257);
99:
100: #ifdef DEBUG_TCFS
101: printf ("La chiave utente di %u e':\n", x);
102: #endif
103:
104: for (i = 0; i < KEYSIZE; i++) {
105: tmp = 0;
106: for (j = 1; j < threshold; j++) {
107: tmp += (eleva(x1,j,257)*coeff[j][i]) % 257;
108: #ifdef DEBUG_TCFS
109: printf ("x1= %u\tj=%d\tcoeff[%d][%d]=%u\ttmp=%u\tchiave: ", x1, j, j, i, coeff[j][i], tmp);
110: #endif
111: }
112: tmp += (unsigned int)S[i];
113: tmp %= 257;
114:
115: memcpy (res+k++, &tmp, 1);
116: #ifdef DEBUG_TCFS
117: printf ("%u\n", *(res+k-1));
118: #endif
119: switch (i % 8){
120: case 0:
121: obits.bf.b1=tmp>>8;
122: break;
123: case 1:
124: obits.bf.b2=tmp>>8;
125: break;
126: case 2:
127: obits.bf.b3=tmp>>8;
128: break;
129: case 3:
130: obits.bf.b4=tmp>>8;
131: break;
132: case 4:
133: obits.bf.b5=tmp>>8;
134: break;
135: case 5:
136: obits.bf.b6=tmp>>8;
137: break;
138: case 6:
139: obits.bf.b7=tmp>>8;
140: break;
141: case 7:
142: obits.bf.b8=tmp>>8;
143: break;
144: }
145:
146: if ((i%8) == 7) {
147: res[k] = obits.byte;
148: k++;
149:
150: #ifdef DEBUG_TCFS
151: printf ("%u\n", res[k-1]);
152: #endif
153:
154: obits.byte=0;
155: }
156: }
157:
158: /*
159: res[KEYSIZE]=obits.byte;
160: */
161: return res;
162: }
163:
164: int
165: addgroup_main (int argn, char *argv[])
166: {
167: int index, val;
168: gid_t gid;
169: int have_gid = FALSE, have_members = FALSE, have_threshold = FALSE;
170: int be_verbose = FALSE;
171: int temp_members, members;
172: tcfsgpwdb **group_info;
173:
174: /*
175: * Going to check the arguments
176: */
177: while ((val = getopt (argn, argv, "vg:m:t:h")) != EOF)
178: switch (val) {
179: case 'm':
180: members = atoi(optarg);
181: have_members = TRUE;
182: break;
183: case 'g':
184: gid = (gid_t)atoi(optarg);
185: if (!gid && optarg[0] != '0') { /* group name given */
186: struct group *group_id;
187:
188: group_id = getgrnam(optarg);
189: if (!group_id)
190: tcfs_error (ER_CUSTOM, "Nonexistent group.");
191:
192: gid=group_id->gr_gid;
193: }
194:
195: have_gid = TRUE;
196: break;
197: case 't':
198: threshold = atoi(optarg);
199: have_threshold = TRUE;
200: break;
201: case 'h':
202: show_usage (addgroup_usage, argv[0]);
203: exit (OK);
204: case 'v':
205: be_verbose = TRUE;
206: break;
207: default:
208: fprintf (stderr, "Try %s --help for more information.\n", argv[0]);
209: exit (ER_UNKOPT);
210: }
211:
212: if (argn-optind)
213: tcfs_error (ER_UNKOPT, NULL);
214:
215: if (!have_gid) {
216: char *buff = NULL;
217: int len;
218:
219: buff = (char*)calloc(2048, sizeof(char));
220: if (!buff)
221: tcfs_error (ER_MEM, NULL);
222:
223: printf ("Group id [or name] of the TCFS group to add to the database: ");
224: fgets (buff, 2048, stdin);
225: len = strlen(buff) - 2;
226: buff[len] = buff[len] == '\n' ? 0 : buff[len];
227: gid = atoi(buff);
228:
229: if (!gid && buff[0] != '0') { /* group name given */
230: struct group *group_id;
231:
232: group_id = getgrnam(buff);
233: if (!group_id)
234: tcfs_error (ER_CUSTOM, "Nonexistent group.");
235:
236: gid=group_id->gr_gid;
237: }
238:
239: if (gid <= 0)
240: tcfs_error (ER_CUSTOM, "A positive ID please!");
241:
242: free (buff);
243: }
244:
245: if (!have_members) {
246: char *buff = NULL;
247: int len;
248:
249: buff=(char*)calloc(2048, sizeof(char));
250: if (!buff)
251: tcfs_error (ER_MEM, NULL);
252:
253: printf ("Number of members for the TCFS group ID #%d: ", gid);
254: fgets (buff, 2048, stdin);
255: len = strlen(buff) - 2;
256: buff[len] = buff[len] == '\n' ? 0 : buff[len];
257: members = atoi(buff);
258:
259: free(buff);
260: }
261:
262: if (!have_threshold) {
263: char *buff = NULL;
264: int len;
265:
266: buff = (char*)calloc(2048, sizeof(char));
267: if (!buff)
268: tcfs_error (ER_MEM, NULL);
269:
270: printf ("Threshold for the TCFS group ID #%d: ", gid);
271: fgets (buff, 2048, stdin);
272: len = strlen(buff) - 2;
273: buff[len] = buff[len] == '\n' ? 0 : buff[len];
274: threshold = atoi(buff);
275:
276: free (buff);
277: }
278:
279: if (members < 2)
280: tcfs_error (ER_CUSTOM, "At least two members!");
281:
282: if (threshold > members || threshold <= 0)
283: tcfs_error (ER_CUSTOM, "The threshold must be no greater than the number of members and greater than zero!");
284:
285: S = gentcfskey();
286: #ifdef DEBUG_TCFS
287: {
288: int i;
289:
290: printf ("La chiave segreta e':\n");
291:
292: for (i=0;i<KEYSIZE;i++)
293: printf ("%u:", S[i]);
294:
295: printf ("\n");
296: }
297: #endif
298:
299: gencoeff();
300:
301: temp_members = members;
302:
303: group_info = (tcfsgpwdb **)calloc(members, sizeof(tcfsgpwdb *));
304:
305: /*
306: * Creating user entry
307: */
308: while (members) {
309: char *user = NULL, *passwd = NULL;
310: unsigned char *newkey = NULL, *cryptedkey = NULL;
311: tcfsgpwdb *tmp = NULL;
312: int tmpmemb = temp_members, cont=0;
313:
314: group_info[members-1] = (tcfsgpwdb *)calloc(1, sizeof(tcfsgpwdb));
315:
316: group_info[members-1]->gid = gid;
317: group_info[members-1]->n = members;
318: group_info[members-1]->soglia = threshold;
319:
320: if (!unix_auth (&user, &passwd, FALSE)) {
321: fprintf (stderr, "Invalid password or the user does not exist.\n");
322: continue;
323: }
324:
325: if (tcfs_ggetpwnam (user, gid, &tmp))
326: tcfs_error(ER_CUSTOM, "Group already exists.");
327:
328: while (tmpmemb > members) {
329: if (!strcmp (user, group_info[tmpmemb-1]->user)) {
330: fprintf (stderr, "User already present into the group.\n");
331: cont = 1;
332: break;
333: }
334: tmpmemb--;
335: }
336:
337: if (cont)
338: continue;
339:
340: strcpy (group_info[members-1]->user, user);
341:
342: newkey = (unsigned char*)calloc(KEYSIZE*2, sizeof (char));
343: if (!newkey)
344: tcfs_error (ER_MEM, NULL);
345:
346: cryptedkey = (unsigned char*)calloc(UUKEYSIZE, sizeof(char));
347: if (!cryptedkey)
348: tcfs_error (ER_MEM, NULL);
349:
350: memcpy (newkey, gengrpkey (user), KEYSIZE + KEYSIZE/8);
351: newkey[KEYSIZE + KEYSIZE/8] = '\0';
352: #ifdef DEBUG_TCFS
353: {
354: int i;
355:
356: printf ("%s newkey: ", user);
357: for (i = 0;i <= KEYSIZE; i++)
358: printf ("%u:", newkey[i]);
359: printf ("\n");
360: }
361: #endif
362:
363: /*
364: * Encrypt the just generated key with the user password
365: */
366: if (!tcfs_encrypt_key (user, passwd, newkey, cryptedkey, GROUPKEY))
367: tcfs_error (ER_MEM, NULL);
368:
369: #ifdef DEBUG_TCFS
370: {
371: unsigned char *key;
372: int i;
373:
374: key=(unsigned char *)calloc(UUKEYSIZE, sizeof(char));
375: if (!tcfs_decrypt_key (user, passwd, cryptedkey, key, GROUPKEY))
376: exit (0);
377:
378: printf ("%s key: ", user);
379: for (i=0;i<=KEYSIZE;i++)
380: printf ("%u:", key[i]);
381: printf ("\n");
382:
383: free (key);
384: }
385: #endif
386:
387: free (newkey);
388:
389: strcpy (group_info[members-1]->gkey, cryptedkey);
390: free (cryptedkey);
391:
392: members--;
393: }
394:
395: members=temp_members;
396:
397: while (members) {
398: if (be_verbose)
399: printf ("Creating a new entry for user %s in the TCFS database...\n", group_info[members-1]->user);
400:
401: if (!tcfs_gputpwnam (group_info[members-1]->user, group_info[members-1], U_NEW)) {
402: /* TODO: Remove the group entries saved before */
403: tcfs_error (ER_CUSTOM, "Error: cannot add a user to the group.");
404: }
405:
406: if (be_verbose)
407: printf ("TCFS group entry for user %s created.\n", group_info[members-1]->user);
408:
409: members--;
410: }
411:
412: tcfs_error (ER_CUSTOM, "\nAll group keys generated.");
413:
414: return 0;
415: }
416:
417:
418: int
419: eleva(int x, int y, int z)
420: {
421: int mask = 0x80000000;
422: int res = 1,i;
423:
424: for (i = 0; i < 32; i++) {
425: res = (res*res)%z;
426: if (y & mask)
427: res = (x*res)%z;
428: mask = mask >> 1;
429: }
430:
431: return res;
432: }