From patchwork Sat Aug 13 02:36:11 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Timothy Pearson X-Patchwork-Id: 658915 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.ozlabs.org (lists.ozlabs.org [103.22.144.68]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 3sB5V94zvBz9sC4 for ; Sat, 13 Aug 2016 12:36:17 +1000 (AEST) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=raptorengineering.com header.i=@raptorengineering.com header.b=g6Oo5EF+; dkim-atps=neutral Received: from ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 3sB5V93rMbzDr2g for ; Sat, 13 Aug 2016 12:36:17 +1000 (AEST) Authentication-Results: lists.ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=raptorengineering.com header.i=@raptorengineering.com header.b=g6Oo5EF+; dkim-atps=neutral X-Original-To: petitboot@lists.ozlabs.org Delivered-To: petitboot@lists.ozlabs.org Received: from mail.rptsys.com (mail.rptsys.com [192.119.205.245]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 3sB5V631RjzDr2Q for ; Sat, 13 Aug 2016 12:36:14 +1000 (AEST) Authentication-Results: lists.ozlabs.org; dkim=pass (1024-bit key; unprotected) header.d=raptorengineering.com header.i=@raptorengineering.com header.b=g6Oo5EF+; dkim-atps=neutral Received: from localhost (localhost [127.0.0.1]) by mail.rptsys.com (Postfix) with ESMTP id 246BE640DC2 for ; Fri, 12 Aug 2016 21:36:12 -0500 (CDT) Received: from mail.rptsys.com ([127.0.0.1]) by localhost (vali.starlink.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id n4LqW_CfWSou for ; Fri, 12 Aug 2016 21:36:11 -0500 (CDT) Received: from localhost (localhost [127.0.0.1]) by mail.rptsys.com (Postfix) with ESMTP id 8644A641074 for ; Fri, 12 Aug 2016 21:36:11 -0500 (CDT) DKIM-Filter: OpenDKIM Filter v2.9.2 mail.rptsys.com 8644A641074 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raptorengineering.com; s=B8E824E6-0BE2-11E6-931D-288C65937AAD; t=1471055771; bh=NMvWq9kIiq6BFU/rFqwenqlT55XOLQ1e/l48rT5ohe8=; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type: Content-Transfer-Encoding; b=g6Oo5EF+1vFk7INGEI+BkPkpzbI8JK1tpGF7rO//8Qjko9wWNnZz4jJn9pxMbgKGv k843FXjervyOka+Lz467y9QlW0Z/sqG5TRMx3ixAXodE+Mmn5xOlkHhpp2p66St3Kk TO8zhndkO7Uy/R8Jr0GN+e5sFTe0kDtCafuKuSiY= X-Virus-Scanned: amavisd-new at rptsys.com Received: from mail.rptsys.com ([127.0.0.1]) by localhost (vali.starlink.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id zodHLQATlzjH for ; Fri, 12 Aug 2016 21:36:11 -0500 (CDT) Received: from vali.starlink.edu (localhost [127.0.0.1]) by mail.rptsys.com (Postfix) with ESMTP id 5AAE0640DC2 for ; Fri, 12 Aug 2016 21:36:11 -0500 (CDT) Date: Fri, 12 Aug 2016 21:36:11 -0500 (CDT) From: Timothy Pearson To: petitboot Message-ID: <468004846.64556.1471055771292.JavaMail.zimbra@raptorengineeringinc.com> Subject: [PATCH 2/3] [V5] Disable shell access when lockdown is active MIME-Version: 1.0 X-Mailer: Zimbra 8.5.0_GA_3042 (ZimbraWebClient - FF3.6 (Linux)/8.5.0_GA_3042) Thread-Topic: Disable shell access when lockdown is active Thread-Index: BE6IsYPbGcbVygNEsF1DI0ybxE7bdg== X-BeenThere: petitboot@lists.ozlabs.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Petitboot bootloader development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: petitboot-bounces+incoming=patchwork.ozlabs.org@lists.ozlabs.org Sender: "Petitboot" This patch disables direct command line access when the /etc/pb-lockdown file is present. Signed-off-by: Timothy Pearson --- ui/ncurses/nc-cui.c | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/ui/ncurses/nc-cui.c b/ui/ncurses/nc-cui.c index 09b63b0..96ebd1e 100644 --- a/ui/ncurses/nc-cui.c +++ b/ui/ncurses/nc-cui.c @@ -25,6 +25,7 @@ #include #include #include +#include #include "log/log.h" #include "pb-protocol/pb-protocol.h" @@ -94,6 +95,15 @@ static void cui_atexit(void) clear(); refresh(); endwin(); + + bool lockdown = false; + if (access(LOCKDOWN_FILE, F_OK) != -1) + lockdown = true; + + while (lockdown) { + sync(); + reboot(RB_AUTOBOOT); + } } /** @@ -826,6 +836,9 @@ static struct pmenu *main_menu_init(struct cui *cui) struct pmenu_item *i; struct pmenu *m; int result; + bool lockdown = false; + if (access(LOCKDOWN_FILE, F_OK) != -1) + lockdown = true; m = pmenu_init(cui, 7, cui_on_exit); if (!m) { @@ -869,7 +882,10 @@ static struct pmenu *main_menu_init(struct cui *cui) i->on_execute = menu_add_url_execute; pmenu_item_insert(m, i, 5); - i = pmenu_item_create(m, _("Exit to shell")); + if (lockdown) + i = pmenu_item_create(m, _("Reboot")); + else + i = pmenu_item_create(m, _("Exit to shell")); i->on_execute = pmenu_exit_cb; pmenu_item_insert(m, i, 6);