forked from soccera/rdo
90 lines
1.8 KiB
C
90 lines
1.8 KiB
C
#include <pwd.h>
|
|
#include <err.h>
|
|
#include <shadow.h>
|
|
#include <crypt.h>
|
|
#include <unistd.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <bsd/readpassphrase.h>
|
|
|
|
int getconf(FILE* fp, const char* entry, char* result, size_t len_result) {
|
|
char* line = NULL;
|
|
size_t len = 0;
|
|
|
|
fseek(fp, 0, SEEK_SET);
|
|
|
|
while (getline(&line, &len, fp) != -1) {
|
|
if (strncmp(entry, line, strlen(entry)) == 0) {
|
|
strtok(line, "=");
|
|
char* token = strtok(NULL, "=");
|
|
if (token) {
|
|
strncpy(result, token, len_result);
|
|
result[strcspn(result, "\n")] = 0;
|
|
return 0;
|
|
}
|
|
}
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
void runprog(int argc, char** argv) {
|
|
for(int i=0; i<argc; i++)
|
|
argv[i] = argv[i + 1];
|
|
|
|
setuid(0);
|
|
setgid(0);
|
|
|
|
if (execvp(argv[0], argv) != 0)
|
|
perror(argv[0]);
|
|
}
|
|
|
|
int main(int argc, char** argv) {
|
|
if (argc < 2)
|
|
errx(1, "Please specify a program to run");
|
|
|
|
FILE* fp = fopen("/etc/rdo.conf", "r");
|
|
|
|
if (!fp)
|
|
err(1, "Could not open /etc/rdo.conf");
|
|
|
|
int ruid = getuid();
|
|
if (ruid == 0) {
|
|
fclose(fp);
|
|
runprog(argc, argv);
|
|
return 0;
|
|
}
|
|
|
|
char username[64];
|
|
getconf(fp, "username", username, sizeof(username));
|
|
|
|
struct passwd* p = getpwnam(username);
|
|
if (!p)
|
|
err(1, "Could not get user info");
|
|
|
|
int uid = p->pw_uid;
|
|
if (uid != ruid && ruid != 0)
|
|
errx(1, "You are not in the username file");
|
|
|
|
struct spwd* shadowEntry = getspnam(username);
|
|
|
|
if (!shadowEntry)
|
|
err(1, "Could not get shadow entry");
|
|
|
|
int tries = 0;
|
|
char password[128];
|
|
while (tries < 3) {
|
|
if (!readpassphrase("(rdo) Password: ", password, sizeof(password), RPP_REQUIRE_TTY))
|
|
err(1, "Could not get passphrase");
|
|
|
|
if (strcmp(shadowEntry->sp_pwdp, crypt(password, shadowEntry->sp_pwdp)) == 0) {
|
|
runprog(argc, argv);
|
|
return 0;
|
|
}
|
|
|
|
fprintf(stderr, "Wrong password.\n");
|
|
tries++;
|
|
}
|
|
errx(1, "Too many wrong password attempts.");
|
|
return 1;
|
|
}
|