1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
|
/*
* The Spread Toolkit.
*
* The contents of this file are subject to the Spread Open-Source
* License, Version 1.0 (the ``License''); you may not use
* this file except in compliance with the License. You may obtain a
* copy of the License at:
*
* http://www.spread.org/license/
*
* or in the file ``license.txt'' found in this distribution.
*
* Software distributed under the License is distributed on an AS IS basis,
* WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
* for the specific language governing rights and limitations under the
* License.
*
* The Creators of Spread are:
* Yair Amir, Michal Miskin-Amir, Jonathan Stanton.
*
* Copyright (C) 1993-2004 Spread Concepts LLC <spread@spreadconcepts.com>
*
* All Rights Reserved.
*
* Major Contributor(s):
* ---------------
* Cristina Nita-Rotaru crisn@cs.purdue.edu - group communication security.
* Theo Schlossnagle jesus@omniti.com - Perl, skiplists, autoconf.
* Dan Schoenblum dansch@cnds.jhu.edu - Java interface.
* John Schultz jschultz@cnds.jhu.edu - contribution to process group membership.
*
*/
#include <string.h>
#include "arch.h"
#include "spread_params.h"
#include "session.h"
#include "configuration.h"
#include "sp_events.h"
#include "status.h"
#include "log.h"
#include "alarm.h"
#ifndef ARCH_PC_WIN95
#include <grp.h>
#include <pwd.h>
#include <unistd.h>
#include <sys/types.h>
#endif
#ifdef ARCH_PC_WIN95
#include <winsock.h>
WSADATA WSAData;
#endif /* ARCH_PC_WIN95 */
static char *My_name;
static char My_name_buf[80];
static char Config_file[80];
static int Log;
static void Invalid_privilege_decrease(char *user, char *group);
static void Usage(int argc, char *argv[]);
/* auth-null.c: */
void null_init(void);
/* auth-ip.c: */
void ip_init(void);
/* acp-permit.c: */
void permit_init(void);
int main(int argc, char *argv[])
{
#ifdef ARCH_PC_WIN95
int ret;
#endif
#ifndef ARCH_PC_WIN95
struct group *grp;
struct passwd *pwd;
#endif
Alarm_set_types( CONF );
Alarmp( SPLOG_PRINT, SYSTEM, "/===========================================================================\\\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| The Spread Toolkit. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Copyright (c) 1993-2006 Spread Concepts LLC |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| All rights reserved. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| The Spread toolkit is licensed under the Spread Open-Source License. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| You may only use this software in compliance with the License. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| A copy of the license can be found at http://www.spread.org/license |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| This product uses software developed by Spread Concepts LLC for use |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| in the Spread toolkit. For more information about Spread, |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| see http://www.spread.org |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| This software is distributed on an \"AS IS\" basis, WITHOUT WARRANTY OF |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| ANY KIND, either express or implied. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Spread is developed at Spread Concepts LLC and the Center for Networking |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| and Distributed Systems, The Johns Hopkins University. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Creators: |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Yair Amir yairamir@cs.jhu.edu |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Michal Miskin-Amir michal@spreadconcepts.com |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Jonathan Stanton jstanton@gwu.edu |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Major Contributors: |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Cristina Nita-Rotaru crisn@cs.purdue.edu - GC security. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Theo Schlossnagle jesus@omniti.com - Perl, skiplists, autoconf. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Dan Schoenblum dansch@cnds.jhu.edu - Java interface. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| John Schultz jschultz@d-fusion.net - contribution to process |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| group membership. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Special thanks to the following for providing ideas and/or code: |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Ken Birman, Danny Dolev, Mike Goodrich, Ben Laurie, |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| David Shaw, Robbert VanRenesse. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Partial funding provided by the Defense Advanced Research Project Agency |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| (DARPA) and the National Security Agency (NSA) since 2000. The Spread |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| toolkit is not necessarily endorsed by DARPA or the NSA. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| For a full list of contributors, see Readme.txt in the distribution. |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| WWW: www.spread.org www.cnds.jhu.edu www.spreadconcepts.com |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Contact: spread@spread.org |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| |\n");
Alarmp( SPLOG_PRINT, SYSTEM, "| Version %d.%02d.%02d Built 21/November/2006 |\n",
(int)SP_MAJOR_VERSION, (int)SP_MINOR_VERSION, (int)SP_PATCH_VERSION );
Alarmp( SPLOG_PRINT, SYSTEM, "\\===========================================================================/\n");
Usage( argc, argv );
#ifdef ARCH_PC_WIN95
ret = WSAStartup( MAKEWORD(1,1), &WSAData );
if( ret != 0 )
Alarmp( SPLOG_FATAL, NETWORK, "Spread: winsock initialization error %d\n", ret );
#endif /* ARCH_PC_WIN95 */
/* initialize each valid authentication protocol */
null_init();
ip_init();
#ifdef ENABLE_PASSWORD
pword_init();
#endif
permit_init();
/* Initialize Access Control & Authentication */
Acm_init();
Conf_init( Config_file, My_name );
E_init();
Sess_init();
Stat_init();
if( Log ) Log_init();
#ifndef ARCH_PC_WIN95
/* Yupp, we're paranoid */
if (geteuid() != (uid_t) 0) {
Alarmp( SPLOG_WARNING, SECURITY, "Spread: not running as root, won't chroot\n" );
}
else if ( (grp = getgrnam(Conf_get_group())) == NULL
|| (pwd = getpwnam(Conf_get_user())) == NULL ) {
Invalid_privilege_decrease(Conf_get_user(), Conf_get_group());
}
else if (chdir(Conf_get_runtime_dir()) < 0
|| chroot(Conf_get_runtime_dir()) < 0 ) {
Alarmp( SPLOG_FATAL, SECURITY, "Spread: FAILED chroot to '%s'\n",
Conf_get_runtime_dir() );
}
else if ( setgroups(1, &grp->gr_gid) < 0
|| setgid(grp->gr_gid) < 0
|| setuid(pwd->pw_uid) < 0) {
Invalid_privilege_decrease(Conf_get_user(), Conf_get_group());
} else {
Alarmp( SPLOG_INFO, SECURITY, "Spread: setugid and chroot successeful\n" );
}
#endif /* ARCH_PC_WIN95 */
E_handle_events();
return 0;
}
static void Print_help(void)
{
Alarmp( SPLOG_FATAL, SYSTEM, "Usage: spread\n%s\n%s\n%s\n",
"\t[-l y/n] : print log",
"\t[-n <proc name>] : force computer name",
"\t[-c <file name>] : specify configuration file" );
}
static void Invalid_privilege_decrease(char *user, char *group)
{
Alarmp( SPLOG_FATAL, SECURITY, "Spread: FAILED privilege drop to user/group "
"'%s/%s' (defined in spread.conf or spread_params.h)\n",
user, group );
}
static void Usage(int argc, char *argv[])
{
My_name = 0; /* NULL */
Log = 0;
strcpy( Config_file, "spread.conf" );
while( --argc > 0 )
{
argv++;
if( !strncmp( *argv, "-n", 2 ) )
{
if (argc < 2) Print_help();
if( strlen( argv[1] ) > MAX_PROC_NAME-1 ) /* -1 for the null */
Alarmp( SPLOG_FATAL, SYSTEM, "Usage: proc name %s too long\n",
argv[1] );
memcpy( My_name_buf, argv[1], strlen( argv[1] ) );
My_name = My_name_buf;
argc--; argv++;
}else if( !strncmp( *argv, "-c", 2 ) ){
if (argc < 2) Print_help();
strcpy( Config_file, argv[1] );
argc--; argv++;
}else if( !strncmp( *argv, "-l", 2 ) ){
if (argc < 2) Print_help();
if( !strcmp( argv[1], "y" ) )
Log = 1;
else if( !strcmp( argv[1], "n" ) )
Log = 0;
else Print_help();
argc--; argv++;
}else{
Print_help();
}
}
}
|
