#include "ap_config.h"

#define CORE_PRIVATE

#include "httpd.h"

#include "http_config.h"

#include "http_main.h"

#include "http_log.h"

#include "unixd.h"

#include "mpm_common.h"

#include "os.h"

#include "ap_mpm.h"

#include "apr_thread_proc.h"

#include "apr_strings.h"

#ifdef HAVE_PWD_H

#include <pwd.h>

#endif

#ifdef HAVE_SYS_RESOURCE_H

#include <sys/resource.h>

#endif

#include <sys/stat.h>

#ifdef HAVE_UNISTD_H

#include <unistd.h>

#endif

#ifdef HAVE_GRP_H

#include <grp.h>

#endif

#ifdef HAVE_STRINGS_H

#include <strings.h>

#endif

unixd_config_rec unixd_config;

static int set_group_privs(void)

{

if (!geteuid()) {

const char *name;

/* Get username if passed as a uid */

if (unixd_config.user_name[0] == '#') {

struct passwd *ent;

uid_t uid = atoi(&unixd_config.user_name[1]);

if ((ent = getpwuid(uid)) == NULL) {

ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL,

"getpwuid: couldn't determine user name from uid %u, "

"you probably need to modify the User directive",

(unsigned)uid);

return -1;

}

name = ent->pw_name;

}

else

name = unixd_config.user_name;

#if !defined(OS2) && !defined(TPF)

/* OS/2 and TPF don't support groups. */

/*

if (setgid(unixd_config.group_id) == -1) {

ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL,

"setgid: unable to set group id to Group %u",

(unsigned)unixd_config.group_id);

return -1;

}

/* Reset `groups' attributes. */

if (initgroups(name, unixd_config.group_id) == -1) {

ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL,

"initgroups: unable to set groups for User %s "

"and Group %u", name, (unsigned)unixd_config.group_id);

return -1;

}

#endif /* !defined(OS2) && !defined(TPF) */

}

return 0;

}

int unixd_setup_child(void)

{

if (set_group_privs()) {

return -1;

}

#ifdef MPE

/* Only try to switch if we're running as MANAGER.SYS */

if (geteuid() == 1 && unixd_config.user_id > 1) {

GETPRIVMODE();

if (setuid(unixd_config.user_id) == -1) {

GETUSERMODE();

ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL,

"setuid: unable to change to uid: %ld",

(long) unixd_config.user_id);

exit(1);

}

GETUSERMODE();

}

#else

/* Only try to switch if we're running as root */

if (!geteuid() && (

#ifdef _OSD_POSIX

os_init_job_environment(server_conf, unixd_config.user_name, one_process) != 0 ||

#endif

setuid(unixd_config.user_id) == -1)) {

ap_log_error(APLOG_MARK, APLOG_ALERT, errno, NULL,

"setuid: unable to change to uid: %ld",

(long) unixd_config.user_id);

return -1;

}

#endif

return 0;

}

const char *unixd_set_user(cmd_parms *cmd, void *dummy, const char *arg)

{

const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY);

if (err != NULL) {

return err;

}

unixd_config.user_name = arg;

unixd_config.user_id = ap_uname2id(arg);

#if !defined (BIG_SECURITY_HOLE) && !defined (OS2)

if (unixd_config.user_id == 0) {

return "Error:\tApache has not been designed to serve pages while\n"

"\trunning as root. There are known race conditions that\n"

"\twill allow any local user to read any file on the system.\n"

"\tIf you still desire to serve pages as root then\n"

"\tadd -DBIG_SECURITY_HOLE to the EXTRA_CFLAGS line in your\n"

"\tsrc/Configuration file and rebuild the server. It is\n"

"\tstrongly suggested that you instead modify the User\n"

"\tdirective in your httpd.conf file to list a non-root\n"

"\tuser.\n";

}

#endif

return NULL;

}

const char *unixd_set_group(cmd_parms *cmd, void *dummy, const char *arg)

{

const char *err = ap_check_cmd_context(cmd, GLOBAL_ONLY);

if (err != NULL) {

return err;

}

unixd_config.group_id = ap_gname2id(arg);

return NULL;

}

void unixd_pre_config(apr_pool_t *ptemp)

{

apr_finfo_t wrapper;

unixd_config.user_name = DEFAULT_USER;

unixd_config.user_id = ap_uname2id(DEFAULT_USER);

unixd_config.group_id = ap_gname2id(DEFAULT_GROUP);

/* Check for suexec */

unixd_config.suexec_enabled = 0;

if ((apr_stat(&wrapper, SUEXEC_BIN,

APR_FINFO_NORM, ptemp)) != APR_SUCCESS) {

return;

}

/* XXX - apr_stat is incapable of checking suid bits (grumble) */

/* if ((wrapper.filetype & S_ISUID) && wrapper.user == 0) { */

unixd_config.suexec_enabled = 1;

/* } */

}

#ifdef NEED_AP_SYS_SIGLIST

const char *ap_sys_siglist[NumSIG];

#define store_str(array,index,string) \

(ap_assert(index < (sizeof(array)/sizeof(array[0]))),array[index]=string)

void unixd_siglist_init(void)

{

int sig;

ap_sys_siglist[0] = "Signal 0";

#ifdef SIGHUP

store_str(ap_sys_siglist,SIGHUP,"Hangup");

#endif

#ifdef SIGINT

store_str(ap_sys_siglist,SIGINT,"Interrupt");

#endif

#ifdef SIGQUIT

store_str(ap_sys_siglist,SIGQUIT,"Quit");

#endif

#ifdef SIGILL

store_str(ap_sys_siglist,SIGILL,"Illegal instruction");

#endif

#ifdef SIGTRAP

store_str(ap_sys_siglist,SIGTRAP,"Trace/BPT trap");

#endif

#ifdef SIGIOT

store_str(ap_sys_siglist,SIGIOT,"IOT instruction");

#endif

#ifdef SIGABRT

store_str(ap_sys_siglist,SIGABRT,"Abort");

#endif

#ifdef SIGEMT

store_str(ap_sys_siglist,SIGEMT,"Emulator trap");

#endif

#ifdef SIGFPE

store_str(ap_sys_siglist,SIGFPE,"Arithmetic exception");

#endif

#ifdef SIGKILL

store_str(ap_sys_siglist,SIGKILL,"Killed");

#endif

#ifdef SIGBUS

store_str(ap_sys_siglist,SIGBUS,"Bus error");

#endif

#ifdef SIGSEGV

store_str(ap_sys_siglist,SIGSEGV,"Segmentation fault");

#endif

#ifdef SIGSYS

store_str(ap_sys_siglist,SIGSYS,"Bad system call");

#endif

#ifdef SIGPIPE

store_str(ap_sys_siglist,SIGPIPE,"Broken pipe");

#endif

#ifdef SIGALRM

store_str(ap_sys_siglist,SIGALRM,"Alarm clock");

#endif

#ifdef SIGTERM

store_str(ap_sys_siglist,SIGTERM,"Terminated");

#endif

#ifdef SIGUSR1

store_str(ap_sys_siglist,SIGUSR1,"User defined signal 1");

#endif

#ifdef SIGUSR2

store_str(ap_sys_siglist,SIGUSR2,"User defined signal 2");

#endif

#ifdef SIGCLD

store_str(ap_sys_siglist,SIGCLD,"Child status change");

#endif

#ifdef SIGCHLD

store_str(ap_sys_siglist,SIGCHLD,"Child status change");

#endif

#ifdef SIGPWR

store_str(ap_sys_siglist,SIGPWR,"Power-fail restart");

#endif

#ifdef SIGWINCH

store_str(ap_sys_siglist,SIGWINCH,"Window changed");

#endif

#ifdef SIGURG

store_str(ap_sys_siglist,SIGURG,"urgent socket condition");

#endif

#ifdef SIGPOLL

store_str(ap_sys_siglist,SIGPOLL,"Pollable event occurred");

#endif

#ifdef SIGIO

store_str(ap_sys_siglist,SIGIO,"socket I/O possible");

#endif

#ifdef SIGSTOP

store_str(ap_sys_siglist,SIGSTOP,"Stopped (signal)");

#endif

#ifdef SIGTSTP

store_str(ap_sys_siglist,SIGTSTP,"Stopped");

#endif

#ifdef SIGCONT

store_str(ap_sys_siglist,SIGCONT,"Continued");

#endif

#ifdef SIGTTIN

store_str(ap_sys_siglist,SIGTTIN,"Stopped (tty input)");

#endif

#ifdef SIGTTOU

store_str(ap_sys_siglist,SIGTTOU,"Stopped (tty output)");

#endif

#ifdef SIGVTALRM

store_str(ap_sys_siglist,SIGVTALRM,"virtual timer expired");

#endif

#ifdef SIGPROF

store_str(ap_sys_siglist,SIGPROF,"profiling timer expired");

#endif

#ifdef SIGXCPU

store_str(ap_sys_siglist,SIGXCPU,"exceeded cpu limit");

#endif

#ifdef SIGXFSZ

store_str(ap_sys_siglist,SIGXFSZ,"exceeded file size limit");

#endif

for (sig=0; sig < sizeof(ap_sys_siglist)/sizeof(ap_sys_siglist[0]); ++sig)

if (ap_sys_siglist[sig] == NULL)

ap_sys_siglist[sig] = "";

}

#endif /* NEED_AP_SYS_SIGLIST */

AP_DECLARE(void) unixd_set_rlimit(cmd_parms *cmd, struct rlimit **plimit,

const char *arg, const char * arg2, int type)

{

#if (defined(RLIMIT_CPU) || defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_NPROC) || defined(RLIMIT_AS)) && APR_HAVE_STRUCT_RLIMIT && APR_HAVE_GETRLIMIT

char *str;

struct rlimit *limit;

/* If your platform doesn't define rlim_t then typedef it in ap_config.h */

rlim_t cur = 0;

rlim_t max = 0;

*plimit = (struct rlimit *)apr_pcalloc(cmd->pool, sizeof(**plimit));

limit = *plimit;

if ((getrlimit(type, limit)) != 0) {

*plimit = NULL;

ap_log_error(APLOG_MARK, APLOG_ERR, errno, cmd->server,

"%s: getrlimit failed", cmd->cmd->name);

return;

}

if ((str = ap_getword_conf(cmd->pool, &arg))) {

if (!strcasecmp(str, "max")) {

cur = limit->rlim_max;

}

else {

cur = atol(str);

}

}

else {

ap_log_error(APLOG_MARK, APLOG_NOERRNO|APLOG_ERR, 0, cmd->server,

"Invalid parameters for %s", cmd->cmd->name);

return;

}

if (arg2 && (str = ap_getword_conf(cmd->pool, &arg2))) {

max = atol(str);

}

/* if we aren't running as root, cannot increase max */

if (geteuid()) {

limit->rlim_cur = cur;

if (max) {

ap_log_error(APLOG_MARK, APLOG_NOERRNO|APLOG_ERR, 0, cmd->server,

"Must be uid 0 to raise maximum %s", cmd->cmd->name);

}

}

else {

if (cur) {

limit->rlim_cur = cur;

}

if (max) {

limit->rlim_max = max;

}

}

#else

ap_log_error(APLOG_MARK, APLOG_NOERRNO|APLOG_ERR, 0, cmd->server,

"Platform does not support rlimit for %s", cmd->cmd->name);

#endif

}

APR_HOOK_STRUCT(

APR_HOOK_LINK(get_suexec_identity)

)

AP_IMPLEMENT_HOOK_RUN_FIRST(ap_unix_identity_t *, get_suexec_identity,

(const request_rec *r), (r), NULL)

static apr_status_t ap_unix_create_privileged_process(

apr_proc_t *newproc, const char *progname,

const char * const *args,

const char * const *env,

apr_procattr_t *attr, ap_unix_identity_t *ugid,

apr_pool_t *p)

{

int i = 0;

const char **newargs;

char *newprogname;

char *execuser, *execgroup;

if (!unixd_config.suexec_enabled) {

return apr_proc_create(newproc, progname, args, env, attr, p);

}

execuser = apr_psprintf(p, "%ld", (long) ugid->uid);

execgroup = apr_psprintf(p, "%ld", (long) ugid->gid);

if (!execuser || !execgroup) {

return APR_ENOMEM;

}

i = 0;

if (args) {

while (args[i]) {

i++;

}

}

newargs = apr_palloc(p, sizeof(char *) * (i + 4));

newprogname = SUEXEC_BIN;

newargs[0] = SUEXEC_BIN;

newargs[1] = execuser;

newargs[2] = execgroup;

newargs[3] = apr_pstrdup(p, progname);

i = 0;

do {

newargs[i + 4] = args[i];

} while (args[i++]);

return apr_proc_create(newproc, newprogname, newargs, env, attr, p);

}

AP_DECLARE(apr_status_t) ap_os_create_privileged_process(

const request_rec *r,

apr_proc_t *newproc, const char *progname,

const char * const *args,

const char * const *env,

apr_procattr_t *attr, apr_pool_t *p)

{

ap_unix_identity_t *ugid = ap_run_get_suexec_identity(r);

if (ugid == NULL) {

return apr_proc_create(newproc, progname, args, env, attr, p);

}

return ap_unix_create_privileged_process(newproc, progname, args, env,

attr, ugid, p);

}