1 4180d05b 2004-06-17 devnull #include <u.h>
2 4180d05b 2004-06-17 devnull #include <libc.h>
3 4180d05b 2004-06-17 devnull #include <authsrv.h>
5 4180d05b 2004-06-17 devnull static long finddosfile(int, char*);
7 4180d05b 2004-06-17 devnull static int
8 4180d05b 2004-06-17 devnull check(void *x, int len, uchar sum, char *msg)
10 4180d05b 2004-06-17 devnull if(nvcsum(x, len) == sum)
11 4180d05b 2004-06-17 devnull return 0;
12 4180d05b 2004-06-17 devnull memset(x, 0, len);
13 4180d05b 2004-06-17 devnull fprint(2, "%s\n", msg);
14 4180d05b 2004-06-17 devnull return 1;
18 4180d05b 2004-06-17 devnull * get key info out of nvram. since there isn't room in the PC's nvram use
19 4180d05b 2004-06-17 devnull * a disk partition there.
21 4180d05b 2004-06-17 devnull static struct {
22 4180d05b 2004-06-17 devnull char *cputype;
23 4180d05b 2004-06-17 devnull char *file;
26 4180d05b 2004-06-17 devnull } nvtab[] = {
27 4180d05b 2004-06-17 devnull "sparc", "#r/nvram", 1024+850, sizeof(Nvrsafe),
28 4180d05b 2004-06-17 devnull "pc", "#S/sdC0/nvram", 0, sizeof(Nvrsafe),
29 4180d05b 2004-06-17 devnull "pc", "#S/sdC0/9fat", -1, sizeof(Nvrsafe),
30 4180d05b 2004-06-17 devnull "pc", "#S/sdC1/nvram", 0, sizeof(Nvrsafe),
31 4180d05b 2004-06-17 devnull "pc", "#S/sdC1/9fat", -1, sizeof(Nvrsafe),
32 4180d05b 2004-06-17 devnull "pc", "#S/sd00/nvram", 0, sizeof(Nvrsafe),
33 4180d05b 2004-06-17 devnull "pc", "#S/sd00/9fat", -1, sizeof(Nvrsafe),
34 4180d05b 2004-06-17 devnull "pc", "#S/sd01/nvram", 0, sizeof(Nvrsafe),
35 4180d05b 2004-06-17 devnull "pc", "#S/sd01/9fat", -1, sizeof(Nvrsafe),
36 4180d05b 2004-06-17 devnull "pc", "#f/fd0disk", -1, 512, /* 512: #f requires whole sector reads */
37 4180d05b 2004-06-17 devnull "pc", "#f/fd1disk", -1, 512,
38 4180d05b 2004-06-17 devnull "mips", "#r/nvram", 1024+900, sizeof(Nvrsafe),
39 4180d05b 2004-06-17 devnull "power", "#F/flash/flash0", 0x440000, sizeof(Nvrsafe),
40 4180d05b 2004-06-17 devnull "power", "#r/nvram", 4352, sizeof(Nvrsafe), /* OK for MTX-604e */
41 4180d05b 2004-06-17 devnull "debug", "/tmp/nvram", 0, sizeof(Nvrsafe),
44 4180d05b 2004-06-17 devnull static char*
45 4180d05b 2004-06-17 devnull readcons(char *prompt, char *def, int raw, char *buf, int nbuf)
47 4180d05b 2004-06-17 devnull int fdin, fdout, ctl, n, m;
48 4180d05b 2004-06-17 devnull char line[10];
50 4180d05b 2004-06-17 devnull fdin = open("/dev/cons", OREAD);
51 4180d05b 2004-06-17 devnull if(fdin < 0)
52 4180d05b 2004-06-17 devnull fdin = 0;
53 4180d05b 2004-06-17 devnull fdout = open("/dev/cons", OWRITE);
54 4180d05b 2004-06-17 devnull if(fdout < 0)
55 4180d05b 2004-06-17 devnull fdout = 1;
56 4180d05b 2004-06-17 devnull if(def != nil)
57 4180d05b 2004-06-17 devnull fprint(fdout, "%s[%s]: ", prompt, def);
59 4180d05b 2004-06-17 devnull fprint(fdout, "%s: ", prompt);
61 4180d05b 2004-06-17 devnull ctl = open("/dev/consctl", OWRITE);
62 4180d05b 2004-06-17 devnull if(ctl >= 0)
63 4180d05b 2004-06-17 devnull write(ctl, "rawon", 5);
65 4180d05b 2004-06-17 devnull ctl = -1;
69 4180d05b 2004-06-17 devnull n = read(fdin, line, 1);
70 4180d05b 2004-06-17 devnull if(n == 0){
71 4180d05b 2004-06-17 devnull close(ctl);
72 4180d05b 2004-06-17 devnull werrstr("readcons: EOF");
73 4180d05b 2004-06-17 devnull return nil;
75 4180d05b 2004-06-17 devnull if(n < 0){
76 4180d05b 2004-06-17 devnull close(ctl);
77 4180d05b 2004-06-17 devnull werrstr("can't read cons");
78 4180d05b 2004-06-17 devnull return nil;
80 4180d05b 2004-06-17 devnull if(line[0] == 0x7f)
81 4180d05b 2004-06-17 devnull exits(0);
82 4180d05b 2004-06-17 devnull if(n == 0 || line[0] == '\n' || line[0] == '\r'){
84 4180d05b 2004-06-17 devnull write(ctl, "rawoff", 6);
85 4180d05b 2004-06-17 devnull write(fdout, "\n", 1);
86 4180d05b 2004-06-17 devnull close(ctl);
88 4180d05b 2004-06-17 devnull buf[m] = '\0';
89 4180d05b 2004-06-17 devnull if(buf[0]=='\0' && def)
90 4180d05b 2004-06-17 devnull strcpy(buf, def);
91 4180d05b 2004-06-17 devnull return buf;
93 4180d05b 2004-06-17 devnull if(line[0] == '\b'){
94 4180d05b 2004-06-17 devnull if(m > 0)
96 4180d05b 2004-06-17 devnull }else if(line[0] == 0x15){ /* ^U: line kill */
98 4180d05b 2004-06-17 devnull if(def != nil)
99 4180d05b 2004-06-17 devnull fprint(fdout, "%s[%s]: ", prompt, def);
101 4180d05b 2004-06-17 devnull fprint(fdout, "%s: ", prompt);
103 4180d05b 2004-06-17 devnull if(m >= nbuf-1){
104 4180d05b 2004-06-17 devnull fprint(fdout, "line too long\n");
106 4180d05b 2004-06-17 devnull if(def != nil)
107 4180d05b 2004-06-17 devnull fprint(fdout, "%s[%s]: ", prompt, def);
109 4180d05b 2004-06-17 devnull fprint(fdout, "%s: ", prompt);
111 4180d05b 2004-06-17 devnull buf[m++] = line[0];
114 4180d05b 2004-06-17 devnull return buf; /* how does this happen */
119 4180d05b 2004-06-17 devnull * get key info out of nvram. since there isn't room in the PC's nvram use
120 4180d05b 2004-06-17 devnull * a disk partition there.
123 4180d05b 2004-06-17 devnull readnvram(Nvrsafe *safep, int flag)
125 4180d05b 2004-06-17 devnull char buf[1024], in[128], *cputype, *nvrfile, *nvrlen, *nvroff, *v[2];
126 4180d05b 2004-06-17 devnull int fd, err, i, safeoff, safelen;
127 4180d05b 2004-06-17 devnull Nvrsafe *safe;
129 4180d05b 2004-06-17 devnull err = 0;
130 4180d05b 2004-06-17 devnull memset(safep, 0, sizeof(*safep));
132 4180d05b 2004-06-17 devnull nvrfile = getenv("nvram");
133 4180d05b 2004-06-17 devnull cputype = getenv("cputype");
134 4180d05b 2004-06-17 devnull if(cputype == nil)
135 4180d05b 2004-06-17 devnull cputype = "mips";
136 4180d05b 2004-06-17 devnull if(strcmp(cputype, "386")==0 || strcmp(cputype, "alpha")==0)
137 4180d05b 2004-06-17 devnull cputype = "pc";
139 4180d05b 2004-06-17 devnull safe = (Nvrsafe*)buf;
141 4180d05b 2004-06-17 devnull fd = -1;
142 4180d05b 2004-06-17 devnull safeoff = -1;
143 4180d05b 2004-06-17 devnull safelen = -1;
144 4180d05b 2004-06-17 devnull if(nvrfile != nil){
145 4180d05b 2004-06-17 devnull /* accept device and device!file */
146 4180d05b 2004-06-17 devnull i = gettokens(nvrfile, v, nelem(v), "!");
147 4180d05b 2004-06-17 devnull fd = open(v[0], ORDWR);
148 4180d05b 2004-06-17 devnull safelen = sizeof(Nvrsafe);
149 4180d05b 2004-06-17 devnull if(strstr(v[0], "/9fat") == nil)
150 4180d05b 2004-06-17 devnull safeoff = 0;
151 4180d05b 2004-06-17 devnull nvrlen = getenv("nvrlen");
152 4180d05b 2004-06-17 devnull if(nvrlen != nil)
153 4180d05b 2004-06-17 devnull safelen = atoi(nvrlen);
154 4180d05b 2004-06-17 devnull nvroff = getenv("nvroff");
155 4180d05b 2004-06-17 devnull if(nvroff != nil){
156 4180d05b 2004-06-17 devnull if(strcmp(nvroff, "dos") == 0)
157 4180d05b 2004-06-17 devnull safeoff = -1;
159 4180d05b 2004-06-17 devnull safeoff = atoi(nvroff);
161 4180d05b 2004-06-17 devnull if(safeoff < 0 && fd >= 0){
162 4180d05b 2004-06-17 devnull safelen = 512;
163 4180d05b 2004-06-17 devnull safeoff = finddosfile(fd, i == 2 ? v[1] : "plan9.nvr");
164 4180d05b 2004-06-17 devnull if(safeoff < 0){
165 4180d05b 2004-06-17 devnull close(fd);
166 4180d05b 2004-06-17 devnull fd = -1;
169 4180d05b 2004-06-17 devnull free(nvrfile);
170 4180d05b 2004-06-17 devnull if(nvrlen != nil)
171 4180d05b 2004-06-17 devnull free(nvrlen);
172 4180d05b 2004-06-17 devnull if(nvroff != nil)
173 4180d05b 2004-06-17 devnull free(nvroff);
175 4180d05b 2004-06-17 devnull for(i=0; i<nelem(nvtab); i++){
176 4180d05b 2004-06-17 devnull if(strcmp(cputype, nvtab[i].cputype) != 0)
177 4180d05b 2004-06-17 devnull continue;
178 4180d05b 2004-06-17 devnull if((fd = open(nvtab[i].file, ORDWR)) < 0)
179 4180d05b 2004-06-17 devnull continue;
180 4180d05b 2004-06-17 devnull safeoff = nvtab[i].off;
181 4180d05b 2004-06-17 devnull safelen = nvtab[i].len;
182 4180d05b 2004-06-17 devnull if(safeoff == -1){
183 4180d05b 2004-06-17 devnull safeoff = finddosfile(fd, "plan9.nvr");
184 4180d05b 2004-06-17 devnull if(safeoff < 0){
185 4180d05b 2004-06-17 devnull close(fd);
186 4180d05b 2004-06-17 devnull fd = -1;
187 4180d05b 2004-06-17 devnull continue;
194 4180d05b 2004-06-17 devnull if(fd < 0
195 4180d05b 2004-06-17 devnull || seek(fd, safeoff, 0) < 0
196 4180d05b 2004-06-17 devnull || read(fd, buf, safelen) != safelen){
197 4180d05b 2004-06-17 devnull err = 1;
198 4180d05b 2004-06-17 devnull if(flag&(NVwrite|NVwriteonerr))
199 4180d05b 2004-06-17 devnull fprint(2, "can't read nvram: %r\n");
200 4180d05b 2004-06-17 devnull memset(safep, 0, sizeof(*safep));
201 4180d05b 2004-06-17 devnull safe = safep;
203 4180d05b 2004-06-17 devnull *safep = *safe;
204 4180d05b 2004-06-17 devnull safe = safep;
206 4180d05b 2004-06-17 devnull err |= check(safe->machkey, DESKEYLEN, safe->machsum, "bad nvram key");
207 4180d05b 2004-06-17 devnull // err |= check(safe->config, CONFIGLEN, safe->configsum, "bad secstore key");
208 4180d05b 2004-06-17 devnull err |= check(safe->authid, ANAMELEN, safe->authidsum, "bad authentication id");
209 4180d05b 2004-06-17 devnull err |= check(safe->authdom, DOMLEN, safe->authdomsum, "bad authentication domain");
212 4180d05b 2004-06-17 devnull if((flag&NVwrite) || (err && (flag&NVwriteonerr))){
213 4180d05b 2004-06-17 devnull readcons("authid", nil, 0, safe->authid, sizeof(safe->authid));
214 4180d05b 2004-06-17 devnull readcons("authdom", nil, 0, safe->authdom, sizeof(safe->authdom));
215 4180d05b 2004-06-17 devnull readcons("secstore key", nil, 1, safe->config, sizeof(safe->config));
216 4180d05b 2004-06-17 devnull for(;;){
217 4180d05b 2004-06-17 devnull if(readcons("password", nil, 1, in, sizeof in) == nil)
218 4180d05b 2004-06-17 devnull goto Out;
219 4180d05b 2004-06-17 devnull if(passtokey(safe->machkey, in))
222 4180d05b 2004-06-17 devnull safe->machsum = nvcsum(safe->machkey, DESKEYLEN);
223 4180d05b 2004-06-17 devnull safe->configsum = nvcsum(safe->config, CONFIGLEN);
224 4180d05b 2004-06-17 devnull safe->authidsum = nvcsum(safe->authid, sizeof(safe->authid));
225 4180d05b 2004-06-17 devnull safe->authdomsum = nvcsum(safe->authdom, sizeof(safe->authdom));
226 4180d05b 2004-06-17 devnull *(Nvrsafe*)buf = *safe;
227 4180d05b 2004-06-17 devnull if(seek(fd, safeoff, 0) < 0
228 4180d05b 2004-06-17 devnull || write(fd, buf, safelen) != safelen){
229 4180d05b 2004-06-17 devnull fprint(2, "can't write key to nvram: %r\n");
230 4180d05b 2004-06-17 devnull err = 1;
232 4180d05b 2004-06-17 devnull err = 0;
235 4180d05b 2004-06-17 devnull close(fd);
236 4180d05b 2004-06-17 devnull return err ? -1 : 0;
239 4180d05b 2004-06-17 devnull typedef struct Dosboot Dosboot;
240 4180d05b 2004-06-17 devnull struct Dosboot{
241 4180d05b 2004-06-17 devnull uchar magic[3]; /* really an xx86 JMP instruction */
242 4180d05b 2004-06-17 devnull uchar version[8];
243 4180d05b 2004-06-17 devnull uchar sectsize[2];
244 4180d05b 2004-06-17 devnull uchar clustsize;
245 4180d05b 2004-06-17 devnull uchar nresrv[2];
246 4180d05b 2004-06-17 devnull uchar nfats;
247 4180d05b 2004-06-17 devnull uchar rootsize[2];
248 4180d05b 2004-06-17 devnull uchar volsize[2];
249 4180d05b 2004-06-17 devnull uchar mediadesc;
250 4180d05b 2004-06-17 devnull uchar fatsize[2];
251 4180d05b 2004-06-17 devnull uchar trksize[2];
252 4180d05b 2004-06-17 devnull uchar nheads[2];
253 4180d05b 2004-06-17 devnull uchar nhidden[4];
254 4180d05b 2004-06-17 devnull uchar bigvolsize[4];
255 4180d05b 2004-06-17 devnull uchar driveno;
256 4180d05b 2004-06-17 devnull uchar reserved0;
257 4180d05b 2004-06-17 devnull uchar bootsig;
258 4180d05b 2004-06-17 devnull uchar volid[4];
259 4180d05b 2004-06-17 devnull uchar label[11];
260 4180d05b 2004-06-17 devnull uchar type[8];
262 4180d05b 2004-06-17 devnull #define GETSHORT(p) (((p)[1]<<8) | (p)[0])
263 4180d05b 2004-06-17 devnull #define GETLONG(p) ((GETSHORT((p)+2) << 16) | GETSHORT((p)))
265 4180d05b 2004-06-17 devnull typedef struct Dosdir Dosdir;
266 4180d05b 2004-06-17 devnull struct Dosdir
268 4180d05b 2004-06-17 devnull char name[8];
269 4180d05b 2004-06-17 devnull char ext[3];
270 4180d05b 2004-06-17 devnull uchar attr;
271 4180d05b 2004-06-17 devnull uchar reserved[10];
272 4180d05b 2004-06-17 devnull uchar time[2];
273 4180d05b 2004-06-17 devnull uchar date[2];
274 4180d05b 2004-06-17 devnull uchar start[2];
275 4180d05b 2004-06-17 devnull uchar length[4];
278 4180d05b 2004-06-17 devnull static char*
279 4180d05b 2004-06-17 devnull dosparse(char *from, char *to, int len)
283 4180d05b 2004-06-17 devnull memset(to, ' ', len);
284 4180d05b 2004-06-17 devnull if(from == 0)
285 4180d05b 2004-06-17 devnull return 0;
286 4180d05b 2004-06-17 devnull while(len-- > 0){
287 4180d05b 2004-06-17 devnull c = *from++;
288 4180d05b 2004-06-17 devnull if(c == '.')
289 4180d05b 2004-06-17 devnull return from;
290 4180d05b 2004-06-17 devnull if(c == 0)
292 4180d05b 2004-06-17 devnull if(c >= 'a' && c <= 'z')
293 4180d05b 2004-06-17 devnull *to++ = c + 'A' - 'a';
295 4180d05b 2004-06-17 devnull *to++ = c;
297 4180d05b 2004-06-17 devnull return 0;
301 4180d05b 2004-06-17 devnull * return offset of first file block
303 4180d05b 2004-06-17 devnull * This is a very simplistic dos file system. It only
304 4180d05b 2004-06-17 devnull * works on floppies, only looks in the root, and only
305 4180d05b 2004-06-17 devnull * returns a pointer to the first block of a file.
307 4180d05b 2004-06-17 devnull * This exists for cpu servers that have no hard disk
308 4180d05b 2004-06-17 devnull * or nvram to store the key on.
310 4180d05b 2004-06-17 devnull * Please don't make this any smarter: it stays resident
311 4180d05b 2004-06-17 devnull * and I'ld prefer not to waste the space on something that
312 4180d05b 2004-06-17 devnull * runs only at boottime -- presotto.
314 4180d05b 2004-06-17 devnull static long
315 4180d05b 2004-06-17 devnull finddosfile(int fd, char *file)
317 4180d05b 2004-06-17 devnull uchar secbuf[512];
318 4180d05b 2004-06-17 devnull char name[8];
319 4180d05b 2004-06-17 devnull char ext[3];
320 4180d05b 2004-06-17 devnull Dosboot *b;
321 4180d05b 2004-06-17 devnull Dosdir *root, *dp;
322 4180d05b 2004-06-17 devnull int nroot, sectsize, rootoff, rootsects, n;
324 4180d05b 2004-06-17 devnull /* dos'ize file name */
325 4180d05b 2004-06-17 devnull file = dosparse(file, name, 8);
326 4180d05b 2004-06-17 devnull dosparse(file, ext, 3);
328 4180d05b 2004-06-17 devnull /* read boot block, check for sanity */
329 4180d05b 2004-06-17 devnull b = (Dosboot*)secbuf;
330 4180d05b 2004-06-17 devnull if(read(fd, secbuf, sizeof(secbuf)) != sizeof(secbuf))
331 4180d05b 2004-06-17 devnull return -1;
332 4180d05b 2004-06-17 devnull if(b->magic[0] != 0xEB || b->magic[1] != 0x3C || b->magic[2] != 0x90)
333 4180d05b 2004-06-17 devnull return -1;
334 4180d05b 2004-06-17 devnull sectsize = GETSHORT(b->sectsize);
335 4180d05b 2004-06-17 devnull if(sectsize != 512)
336 4180d05b 2004-06-17 devnull return -1;
337 4180d05b 2004-06-17 devnull rootoff = (GETSHORT(b->nresrv) + b->nfats*GETSHORT(b->fatsize)) * sectsize;
338 4180d05b 2004-06-17 devnull if(seek(fd, rootoff, 0) < 0)
339 4180d05b 2004-06-17 devnull return -1;
340 4180d05b 2004-06-17 devnull nroot = GETSHORT(b->rootsize);
341 4180d05b 2004-06-17 devnull rootsects = (nroot*sizeof(Dosdir)+sectsize-1)/sectsize;
342 4180d05b 2004-06-17 devnull if(rootsects <= 0 || rootsects > 64)
343 4180d05b 2004-06-17 devnull return -1;
346 4180d05b 2004-06-17 devnull * read root. it is contiguous to make stuff like
347 4180d05b 2004-06-17 devnull * this easier
349 4180d05b 2004-06-17 devnull root = malloc(rootsects*sectsize);
350 4180d05b 2004-06-17 devnull if(read(fd, root, rootsects*sectsize) != rootsects*sectsize)
351 4180d05b 2004-06-17 devnull return -1;
353 4180d05b 2004-06-17 devnull for(dp = root; dp < &root[nroot]; dp++)
354 4180d05b 2004-06-17 devnull if(memcmp(name, dp->name, 8) == 0 && memcmp(ext, dp->ext, 3) == 0){
355 4180d05b 2004-06-17 devnull n = GETSHORT(dp->start);
358 4180d05b 2004-06-17 devnull free(root);
360 4180d05b 2004-06-17 devnull if(n < 0)
361 4180d05b 2004-06-17 devnull return -1;
364 4180d05b 2004-06-17 devnull * dp->start is in cluster units, not sectors. The first
365 4180d05b 2004-06-17 devnull * cluster is cluster 2 which starts immediately after the
366 4180d05b 2004-06-17 devnull * root directory
368 4180d05b 2004-06-17 devnull return rootoff + rootsects*sectsize + (n-2)*sectsize*b->clustsize;
