/* * user.cc - Implementation of the Key classes for user account data * libhscript, the HorizonScript library for * Project Horizon * * Copyright (c) 2019 Adélie Linux and contributors. All rights reserved. * This code is licensed under the AGPL 3.0 license, as noted in the * LICENSE-code file in the root directory of this repository. * * SPDX-License-Identifier: AGPL-3.0-only */ #include #include #include #include #include #include "user.hh" #include "util/output.hh" using namespace Horizon::Keys; Key *RootPassphrase::parseFromData(const std::string &data, int lineno, int *errors, int *warnings) { if(data.size() < 5 || data[0] != '$' || (data[1] != '2' && data[1] != '6') || data[2] != '$') { if(errors) *errors += 1; output_error("installfile:" + std::to_string(lineno), "rootpw: value is not a crypt-style encrypted passphrase"); return nullptr; } return new RootPassphrase(lineno, data); } bool RootPassphrase::validate(ScriptOptions) const { /* XXX TODO: not sure what other validation we can / should do here. */ return true; } bool RootPassphrase::execute(ScriptOptions options) const { const std::string root_line = "root:" + this->_value + ":" + std::to_string(time(nullptr) / 86400) + ":0:::::"; if(options.test(Simulate)) { std::cout << "(printf '" << root_line << "\\" << "n'; " << "cat /target/etc/shadow | sed '1d') > /tmp/shadow" << std::endl << "mv /tmp/shadow /target/etc/shadow" << std::endl << "chown root:shadow /target/etc/shadow" << std::endl << "chmod 640 /target/etc/shadow" << std::endl; return true; } std::ifstream old_shadow("/target/etc/shadow"); if(!old_shadow) { output_error("installfile:" + std::to_string(this->lineno()), "rootpw: cannot open existing shadow file"); return false; } std::stringstream shadow_stream; char shadow_line[200]; /* Discard root. */ old_shadow.getline(shadow_line, sizeof(shadow_line)); assert(strncmp(shadow_line, "root", 4) == 0); /* Insert the new root line... */ shadow_stream << root_line << std::endl; /* ...and copy the rest of the old shadow file. */ while(old_shadow.getline(shadow_line, sizeof(shadow_line))) { shadow_stream << shadow_line << std::endl; } old_shadow.close(); std::ofstream new_shadow("/target/etc/shadow", std::ios_base::trunc); if(!new_shadow) { output_error("installfile:" + std::to_string(this->lineno()), "rootpw: cannot replace target shadow file"); return false; } new_shadow << shadow_stream.str(); return true; }