1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
|
/* vlock.c -- main routine for vlock, the VT locking program for linux
*
* This program is copyright (C) 1994 Michael K. Johnson, and is free
* software which is freely distributable under the terms of the
* GNU public license, included as the file COPYING in this
* distribution. It is NOT public domain software, and any
* redistribution not permitted by the GNU Public License is
* expressly forbidden without prior written permission from
* the author.
*
*/
/* RCS log:
* $Log: vlock.c,v $
* Revision 1.12 1996/05/17 02:52:03 johnsonm
* /dev/console --> /dev/tty
* get encrypted password strings
* changed header files
*
* Revision 1.11 1994/07/03 12:41:43 johnsonm
* Removed emacs variables.
*
* Revision 1.10 1994/07/03 12:15:22 johnsonm
* *** empty log message ***
*
* Revision 1.9 1994/03/23 17:00:47 johnsonm
* Removed appendages for patterns.
* Added support for non-VT ttys.
*
* Revision 1.8 1994/03/20 11:21:20 johnsonm
* Now check /dev/console after opening it to make sure the call succeeded
*
* Revision 1.7 1994/03/19 17:54:42 johnsonm
* Moved printing the lock message to get_password. Added a return
* code again.
*
* Revision 1.6 1994/03/19 14:36:08 johnsonm
* Made a better explanation for when the --all or -a flag is chosen.
*
* Revision 1.5 1994/03/19 14:25:16 johnsonm
* Removed silly two-process model. Must have been half asleep when
* I came up with that idea. vlock works now.
*
* Revision 1.4 1994/03/16 20:14:06 johnsonm
* Cleaned up, putting most real work into child functions, which
* cleaned up the interface. The whole program is almost all
* working now.
*
* Revision 1.3 1994/03/15 18:27:33 johnsonm
* Moved terminal handling stuff into terminal.c, and changed the
* end to support a two-process model for async I/O.
*
* Revision 1.2 1994/03/13 17:28:56 johnsonm
* Now using SIGUSR{1,2} correctly to announce VC switches. Fixed a few
* other minor bugs.
*
* Revision 1.1 1994/03/13 16:28:16 johnsonm
* Initial revision
*
*/
#include <stdio.h>
#include <unistd.h>
#include <fcntl.h>
#include <getopt.h>
#include <termios.h>
#include <signal.h>
#include <sys/vt.h>
#include <sys/kd.h>
#include <sys/ioctl.h>
#include "vlock.h"
#include "version.h"
static char rcsid[] = "$Id: vlock.c,v 1.12 1996/05/17 02:52:03 johnsonm Exp johnsonm $";
/* Option globals */
/* This determines whether the default behavior is to lock only the */
/* current VT or all of them. 0 means current, 1 means all. */
int o_lock_all = 0;
/* Other globals */
struct vt_mode ovtm;
struct termios oterm;
int vfd;
int is_vt;
int main(int argc, char **argv) {
static struct option long_options[] = { /* For parsing long arguments */
{"current", 0, &o_lock_all, 0},
{"all", 0, &o_lock_all, 1},
{"version", no_argument, 0, O_VERSION},
{"help", no_argument, 0, O_HELP},
{0, 0, 0, 0},
};
int option_index; /* Unused */
int c;
struct vt_mode vtm;
/* First we parse all the command line arguments */
while ((c = getopt_long(argc, argv, "acvh",
long_options, &option_index)) != -1) {
switch(c) {
case 'c':
o_lock_all = 0;
break;
case 'a':
o_lock_all = 1;
break;
case 'v':
case O_VERSION:
fprintf(stderr, VERSION);
exit(0);
break;
case 'h':
case O_HELP:
print_help(0);
break;
case '?':
print_help(1);
break;
}
}
/* Now we have parsed the options, and can get on with life */
/* Get the user's and root's encrypted passwords. This needs
to run as root when using shadow passwords, but will drop
root privileges as soon as they are no longer needed. */
init_passwords();
if ((vfd = open("/dev/tty", O_RDWR)) < 0) {
perror("vlock: could not open /dev/tty");
exit (1);
}
/* First we will set process control of VC switching; if this fails, */
/* then we know that we aren't on a VC, and will print a warning message */
/* If it doesn't fail, it gets the current VT status... */
c = ioctl(vfd, VT_GETMODE, &vtm);
if (c < 0) {
fprintf(stderr, " *** This tty is not a VC (virtual console). ***\n"
" *** It may not be securely locked. ***\n\n");
is_vt = 0;
o_lock_all = 0;
} else {
is_vt = 1;
}
/* Now set the signals so we can't be summarily executed or stopped, */
/* and handle SIGUSR{1,2} and SIGCHLD */
mask_signals();
if (is_vt) {
clear_screen();
ovtm = vtm; /* Keep a copy around to restore at appropriate times */
vtm.mode = VT_PROCESS;
vtm.relsig = SIGUSR1; /* handled by release_vt() */
vtm.acqsig = SIGUSR2; /* handled by acquire_vt() */
ioctl(vfd, VT_SETMODE, &vtm);
}
/* get_password() sets the terminal characteristics and does not */
/* return until the correct password has been read. */
get_password();
/* vt status was restored in restore_terminal() already... */
if (is_vt) restore_screen();
/* we should really return something... */
return (0);
}
|
