]> git.ozlabs.org Git - petitboot/blobdiff - ui/common/discover-client.c
ui/common: Client authentication helpers
[petitboot] / ui / common / discover-client.c
index a565be880f272293eb0b372c72bf84a04b218f32..e7dfb831ba6b586ab311607128abb47e92890e8d 100644 (file)
@@ -1,10 +1,15 @@
 
+#if defined(HAVE_CONFIG_H)
+#include "config.h"
+#endif
+
 #include <assert.h>
 #include <errno.h>
 #include <unistd.h>
 #include <stdlib.h>
 #include <stdio.h>
 #include <stdint.h>
+#include <string.h>
 
 #include <sys/socket.h>
 #include <sys/un.h>
@@ -21,6 +26,7 @@ struct discover_client {
        struct discover_client_ops ops;
        int n_devices;
        struct device **devices;
+       bool authenticated;
 };
 
 static int discover_client_destructor(void *arg)
@@ -112,6 +118,21 @@ static void device_remove(struct discover_client *client, const char *id)
        talloc_free(device);
 }
 
+static void plugin_option_add(struct discover_client *client,
+               struct plugin_option *opt)
+{
+       talloc_steal(client, opt);
+
+       if (client->ops.plugin_option_add)
+               client->ops.plugin_option_add(opt, client->ops.cb_arg);
+}
+
+static void plugins_remove(struct discover_client *client)
+{
+       if (client->ops.plugins_remove)
+               client->ops.plugins_remove(client->ops.cb_arg);
+}
+
 void discover_client_enumerate(struct discover_client *client)
 {
        struct boot_option *opt;
@@ -131,7 +152,7 @@ void discover_client_enumerate(struct discover_client *client)
 }
 
 static void update_status(struct discover_client *client,
-               struct boot_status *status)
+               struct status *status)
 {
        if (client->ops.update_status)
                client->ops.update_status(status, client->ops.cb_arg);
@@ -155,9 +176,11 @@ static int discover_client_process(void *arg)
 {
        struct discover_client *client = arg;
        struct pb_protocol_message *message;
+       struct auth_message *auth_msg;
+       struct plugin_option *p_opt;
        struct system_info *sysinfo;
-       struct boot_status *status;
        struct boot_option *opt;
+       struct status *status;
        struct config *config;
        struct device *dev;
        char *dev_id;
@@ -180,8 +203,8 @@ static int discover_client_process(void *arg)
 
                rc = pb_protocol_deserialise_device(dev, message);
                if (rc) {
-                       pb_log("%s: no device?\n", __func__);
-                       return 0;
+                       pb_log_fn("no device?\n");
+                       goto out;
                }
 
                device_add(client, dev);
@@ -191,8 +214,8 @@ static int discover_client_process(void *arg)
 
                rc = pb_protocol_deserialise_boot_option(opt, message);
                if (rc) {
-                       pb_log("%s: no boot_option?\n", __func__);
-                       return 0;
+                       pb_log_fn("no boot_option?\n");
+                       goto out;
                }
 
                boot_option_add(client, opt);
@@ -200,18 +223,18 @@ static int discover_client_process(void *arg)
        case PB_PROTOCOL_ACTION_DEVICE_REMOVE:
                dev_id = pb_protocol_deserialise_string(ctx, message);
                if (!dev_id) {
-                       pb_log("%s: no device id?\n", __func__);
-                       return 0;
+                       pb_log_fn("no device id?\n");
+                       goto out;
                }
                device_remove(client, dev_id);
                break;
        case PB_PROTOCOL_ACTION_STATUS:
-               status = talloc_zero(ctx, struct boot_status);
+               status = talloc_zero(ctx, struct status);
 
                rc = pb_protocol_deserialise_boot_status(status, message);
                if (rc) {
-                       pb_log("%s: invalid status message?\n", __func__);
-                       return 0;
+                       pb_log_fn("invalid status message?\n");
+                       goto out;
                }
                update_status(client, status);
                break;
@@ -220,8 +243,8 @@ static int discover_client_process(void *arg)
 
                rc = pb_protocol_deserialise_system_info(sysinfo, message);
                if (rc) {
-                       pb_log("%s: invalid sysinfo message?\n", __func__);
-                       return 0;
+                       pb_log_fn("invalid sysinfo message?\n");
+                       goto out;
                }
                update_sysinfo(client, sysinfo);
                break;
@@ -230,15 +253,44 @@ static int discover_client_process(void *arg)
 
                rc = pb_protocol_deserialise_config(config, message);
                if (rc) {
-                       pb_log("%s: invalid config message?\n", __func__);
-                       return 0;
+                       pb_log_fn("invalid config message?\n");
+                       goto out;
                }
                update_config(client, config);
                break;
+       case PB_PROTOCOL_ACTION_PLUGIN_OPTION_ADD:
+               p_opt = talloc_zero(ctx, struct plugin_option);
+
+               rc = pb_protocol_deserialise_plugin_option(p_opt, message);
+               if (rc) {
+                       pb_log_fn("no plugin_option?\n");
+                       goto out;
+               }
+
+               plugin_option_add(client, p_opt);
+               break;
+       case PB_PROTOCOL_ACTION_PLUGINS_REMOVE:
+               plugins_remove(client);
+               break;
+       case PB_PROTOCOL_ACTION_AUTHENTICATE:
+               auth_msg = talloc_zero(ctx, struct auth_message);
+
+               rc = pb_protocol_deserialise_authenticate(auth_msg, message);
+               if (rc || auth_msg->op != AUTH_MSG_RESPONSE) {
+                       pb_log("%s: invalid auth message? (%d)\n",
+                                       __func__, rc);
+                       goto out;
+               }
+
+               pb_log("Client %sauthenticated by server\n",
+                               client->authenticated ? "" : "un");
+               client->authenticated = auth_msg->authenticated;
+               break;
        default:
-               pb_log("%s: unknown action %d\n", __func__, message->action);
+               pb_log_fn("unknown action %d\n", message->action);
        }
 
+out:
        talloc_free(ctx);
 
        return 0;
@@ -259,7 +311,7 @@ struct discover_client* discover_client_init(struct waitset *waitset,
 
        client->fd = socket(AF_UNIX, SOCK_STREAM, 0);
        if (client->fd < 0) {
-               pb_log("%s: socket: %s\n", __func__, strerror(errno));
+               pb_log_fn("socket: %s\n", strerror(errno));
                goto out_err;
        }
 
@@ -272,13 +324,20 @@ struct discover_client* discover_client_init(struct waitset *waitset,
        strcpy(addr.sun_path, PB_SOCKET_PATH);
 
        if (connect(client->fd, (struct sockaddr *)&addr, sizeof(addr))) {
-               pb_log("%s: connect: %s\n", __func__, strerror(errno));
+               pb_log_fn("connect: %s\n", strerror(errno));
                goto out_err;
        }
 
        waiter_register_io(waitset, client->fd, WAIT_IN,
                        discover_client_process, client);
 
+       /* Assume this client can't make changes if crypt support is enabled */
+#ifdef CRYPT_SUPPORT
+       client->authenticated = false;
+#else
+       client->authenticated = true;
+#endif
+
        return client;
 
 out_err:
@@ -301,6 +360,11 @@ struct device *discover_client_get_device(struct discover_client *client,
        return client->devices[index];
 }
 
+bool discover_client_authenticated(struct discover_client *client)
+{
+       return client->authenticated;
+}
+
 static void create_boot_command(struct boot_command *command,
                const struct device *device __attribute__((unused)),
                const struct boot_option *boot_option,
@@ -311,6 +375,8 @@ static void create_boot_command(struct boot_command *command,
        command->initrd_file = data->initrd;
        command->dtb_file = data->dtb;
        command->boot_args = data->args;
+       command->args_sig_file = data->args_sig_file;
+       command->console = ttyname(STDIN_FILENO);
 }
 
 int discover_client_boot(struct discover_client *client,
@@ -383,3 +449,106 @@ int discover_client_send_config(struct discover_client *client,
 
        return pb_protocol_write_message(client->fd, message);
 }
+
+int discover_client_send_url(struct discover_client *client,
+               char *url)
+{
+       struct pb_protocol_message *message;
+       int len;
+
+       len = pb_protocol_url_len(url);
+
+       message = pb_protocol_create_message(client,
+                               PB_PROTOCOL_ACTION_ADD_URL, len);
+       if (!message)
+               return -1;
+
+       pb_protocol_serialise_url(url, message->payload, len);
+
+       return pb_protocol_write_message(client->fd, message);
+}
+
+int discover_client_send_plugin_install(struct discover_client *client,
+               char *file)
+{
+       struct pb_protocol_message *message;
+       int len;
+
+       len = pb_protocol_url_len(file);
+
+       message = pb_protocol_create_message(client,
+                               PB_PROTOCOL_ACTION_PLUGIN_INSTALL, len);
+       if (!message)
+               return -1;
+
+       pb_protocol_serialise_url(file, message->payload, len);
+
+       return pb_protocol_write_message(client->fd, message);
+}
+
+int discover_client_send_temp_autoboot(struct discover_client *client,
+               const struct autoboot_option *opt)
+{
+       struct pb_protocol_message *message;
+       int len;
+
+       len = pb_protocol_temp_autoboot_len(opt);
+
+       message = pb_protocol_create_message(client,
+                       PB_PROTOCOL_ACTION_TEMP_AUTOBOOT, len);
+       if (!message)
+               return -1;
+
+       pb_protocol_serialise_temp_autoboot(opt, message->payload, len);
+
+       return pb_protocol_write_message(client->fd, message);
+}
+
+int discover_client_send_authenticate(struct discover_client *client,
+               char *password)
+{
+       struct pb_protocol_message *message;
+       struct auth_message auth_msg;
+       int len;
+
+       auth_msg.op = AUTH_MSG_REQUEST;
+       auth_msg.password = password;
+
+       len = pb_protocol_authenticate_len(&auth_msg);
+
+       message = pb_protocol_create_message(client,
+                               PB_PROTOCOL_ACTION_AUTHENTICATE, len);
+       if (!message)
+               return -1;
+
+       pb_log("serialising auth message..\n");
+       pb_protocol_serialise_authenticate(&auth_msg, message->payload, len);
+
+       pb_log("sending auth message..\n");
+       return pb_protocol_write_message(client->fd, message);
+}
+
+int discover_client_send_set_password(struct discover_client *client,
+               char *password, char *new_password)
+{
+       struct pb_protocol_message *message;
+       struct auth_message auth_msg;
+       int len;
+
+       auth_msg.op = AUTH_MSG_SET;
+       auth_msg.set_password.password = password;
+       auth_msg.set_password.new_password = new_password;
+
+       len = pb_protocol_authenticate_len(&auth_msg);
+
+       message = pb_protocol_create_message(client,
+                               PB_PROTOCOL_ACTION_AUTHENTICATE, len);
+       if (!message)
+               return -1;
+
+       pb_log("serialising auth message..\n");
+       pb_protocol_serialise_authenticate(&auth_msg, message->payload, len);
+
+       pb_log("sending auth message..\n");
+       return pb_protocol_write_message(client->fd, message);
+}