itIndentation tweaks in sup.c - sup - small tool for privilege escalation	Err	parazyd.org	70
hgit clone https://git.parazyd.org/sup	URL:https://git.parazyd.org/sup	parazyd.org	70
1Log	/git/sup/log.gph	parazyd.org	70
1Files	/git/sup/files.gph	parazyd.org	70
1Refs	/git/sup/refs.gph	parazyd.org	70
1README	/git/sup/file/README.gph	parazyd.org	70
1LICENSE	/git/sup/file/LICENSE.gph	parazyd.org	70
i---	Err	parazyd.org	70
1commit 2d1c01d008c45941d3e710f7ec5f7abc94fcffcc	/git/sup/commit/2d1c01d008c45941d3e710f7ec5f7abc94fcffcc.gph	parazyd.org	70
1parent 7869bc4fa8353f917e6868f8c2b165f5fcf979dc	/git/sup/commit/7869bc4fa8353f917e6868f8c2b165f5fcf979dc.gph	parazyd.org	70
hAuthor: parazyd <parazyd@dyne.org>	URL:mailto:parazyd@dyne.org	parazyd.org	70
iDate:   Wed, 27 Jan 2021 15:11:51 +0100	Err	parazyd.org	70
i	Err	parazyd.org	70
iIndentation tweaks in sup.c	Err	parazyd.org	70
i	Err	parazyd.org	70
iDiffstat:	Err	parazyd.org	70
i  M sup.c                               |      32 ++++++++++++++++++-------------	Err	parazyd.org	70
i	Err	parazyd.org	70
i1 file changed, 19 insertions(+), 13 deletions(-)	Err	parazyd.org	70
i---	Err	parazyd.org	70
1diff --git a/sup.c b/sup.c	/git/sup/file/sup.c.gph	parazyd.org	70
it@@ -10,7 +10,7 @@	Err	parazyd.org	70
i #include "sha256.h"	Err	parazyd.org	70
i 	Err	parazyd.org	70
i #define nelem(x) (sizeof (x) / sizeof *(x))	Err	parazyd.org	70
i-#define CHUNK 1048576 /* 1MiB */	Err	parazyd.org	70
i+#define CHUNK 1048576                /* 1MiB */	Err	parazyd.org	70
i 	Err	parazyd.org	70
i struct rule_t {	Err	parazyd.org	70
i         const int uid;	Err	parazyd.org	70
it@@ -23,12 +23,14 @@ struct rule_t {	Err	parazyd.org	70
i 	Err	parazyd.org	70
i char *argv0;	Err	parazyd.org	70
i 	Err	parazyd.org	70
i-void die(char *msg) {	Err	parazyd.org	70
i+void die(char *msg)	Err	parazyd.org	70
i+{	Err	parazyd.org	70
i         fprintf(stderr, "%s\n", msg);	Err	parazyd.org	70
i         exit(1);	Err	parazyd.org	70
i }	Err	parazyd.org	70
i 	Err	parazyd.org	70
i-static uint32 getsha(const char *path, unsigned char *dest) {	Err	parazyd.org	70
i+static uint32 getsha(const char *path, unsigned char *dest)	Err	parazyd.org	70
i+{	Err	parazyd.org	70
i         static sha256_context sha;	Err	parazyd.org	70
i         unsigned char buf[CHUNK];	Err	parazyd.org	70
i         uint32 len, tot = 0;	Err	parazyd.org	70
it@@ -50,25 +52,27 @@ static uint32 getsha(const char *path, unsigned char *dest) {	Err	parazyd.org	70
i         return tot;	Err	parazyd.org	70
i }	Err	parazyd.org	70
i 	Err	parazyd.org	70
i-int main(int argc, char *argv[]) {	Err	parazyd.org	70
i+int main(int argc, char *argv[])	Err	parazyd.org	70
i+{	Err	parazyd.org	70
i         unsigned int c, i, lflag = 0;	Err	parazyd.org	70
i         unsigned char digest[32];	Err	parazyd.org	70
i         char output[65];	Err	parazyd.org	70
i         struct stat st;	Err	parazyd.org	70
i 	Err	parazyd.org	70
i         ARGBEGIN {	Err	parazyd.org	70
i-                case 'l':	Err	parazyd.org	70
i-                        lflag = 1;	Err	parazyd.org	70
i-                        break;	Err	parazyd.org	70
i-                default:	Err	parazyd.org	70
i-                        die("Usage: sup [-l] command [ args ... ]");	Err	parazyd.org	70
i+        case 'l':	Err	parazyd.org	70
i+                lflag = 1;	Err	parazyd.org	70
i+                break;	Err	parazyd.org	70
i+        default:	Err	parazyd.org	70
i+                die("Usage: sup [-l] command [ args ... ]");	Err	parazyd.org	70
i         } ARGEND;	Err	parazyd.org	70
i 	Err	parazyd.org	70
i         if (lflag) {	Err	parazyd.org	70
i                 printf("List of compiled authorizations:\n");	Err	parazyd.org	70
i                 for (i = 0; i < nelem(rules); i++)	Err	parazyd.org	70
i                         printf("\nuser: %d\ncmd: %s\nbinary: %s\nsha256: %s\n",	Err	parazyd.org	70
i-                                        rules[i].uid, rules[i].cmd, rules[i].path, rules[i].hash);	Err	parazyd.org	70
i+                               rules[i].uid, rules[i].cmd, rules[i].path,	Err	parazyd.org	70
i+                               rules[i].hash);	Err	parazyd.org	70
i                 return 0;	Err	parazyd.org	70
i         }	Err	parazyd.org	70
i 	Err	parazyd.org	70
it@@ -91,14 +95,16 @@ int main(int argc, char *argv[]) {	Err	parazyd.org	70
i                                 die("Binary file differs from size read.");	Err	parazyd.org	70
i 	Err	parazyd.org	70
i                         for (c = 0; c < 32; c++)	Err	parazyd.org	70
i-                                sprintf(output + (c*2), "%02x", digest[c]);	Err	parazyd.org	70
i+                                sprintf(output + (c * 2), "%02x", digest[c]);	Err	parazyd.org	70
i                         output[64] = '\0';	Err	parazyd.org	70
i 	Err	parazyd.org	70
i                         if (strncmp(rules[i].hash, output, 64))	Err	parazyd.org	70
i                                 die("Checksums do not match.");	Err	parazyd.org	70
i 	Err	parazyd.org	70
i-                        if (setgid(SETGID) < 0) die("setgid failed");	Err	parazyd.org	70
i-                        if (setuid(SETUID) < 0) die("setuid failed");	Err	parazyd.org	70
i+                        if (setgid(SETGID) < 0)	Err	parazyd.org	70
i+                                die("setgid failed");	Err	parazyd.org	70
i+                        if (setuid(SETUID) < 0)	Err	parazyd.org	70
i+                                die("setuid failed");	Err	parazyd.org	70
i 	Err	parazyd.org	70
i                         if (execv(rules[i].path, argv) < 0)	Err	parazyd.org	70
i                                 die("execv failed.");	Err	parazyd.org	70
.