mirror of
https://git.proxmox.com/git/mirror_corosync
synced 2025-05-21 07:43:44 +00:00
b04d69d381
git-svn-id: http://svn.fedorahosted.org/svn/corosync/trunk@157 fd59a12c-fef9-0310-b244-a6a79926bd2f
99 lines
3.0 KiB
C
99 lines
3.0 KiB
C
/*
|
|
* Copyright (c) 2004 MontaVista Software, Inc.
|
|
*
|
|
* All rights reserved.
|
|
*
|
|
* Author: Steven Dake (sdake@mvista.com)
|
|
*
|
|
* This software licensed under BSD license, the text of which follows:
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* - Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
* - Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
* - Neither the name of the MontaVista Software, Inc. nor the names of its
|
|
* contributors may be used to endorse or promote products derived from this
|
|
* software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
|
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
|
|
* THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
#include <fcntl.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
|
|
#include <netinet/in.h>
|
|
|
|
int main (void) {
|
|
int authkey_fd;
|
|
int random_fd;
|
|
unsigned char key[128];
|
|
int res;
|
|
|
|
printf ("OpenAIS Authentication key generator.\n");
|
|
if (geteuid() != 0) {
|
|
printf ("Error: Authorization key must be generated as root user.\n");
|
|
exit (1);
|
|
}
|
|
mkdir ("/etc/ais", 0700);
|
|
|
|
printf ("Gathering %d bits for key from /dev/random.\n", sizeof (key) * 8);
|
|
random_fd = open ("/dev/random", O_RDONLY);
|
|
if (random_fd == -1) {
|
|
perror ("Is /dev/random present? Opening /dev/random");
|
|
exit (1);
|
|
}
|
|
|
|
/*
|
|
* Read random data
|
|
*/
|
|
res = read (random_fd, key, sizeof (key));
|
|
if (res == -1) {
|
|
perror ("Could not read /etc/ais/authkey");
|
|
exit (1);
|
|
}
|
|
|
|
/*
|
|
* Open key
|
|
*/
|
|
authkey_fd = open ("/etc/ais/authkey", O_CREAT|O_WRONLY);
|
|
if (authkey_fd == -1) {
|
|
perror ("Could not create /etc/ais/authkey");
|
|
exit (1);
|
|
}
|
|
/*
|
|
* Set security of authorization key to uid = 0 uid = 0 mode = 0400
|
|
*/
|
|
fchown (authkey_fd, 0, 0);
|
|
fchmod (authkey_fd, 0400);
|
|
|
|
printf ("Writing openais key to /etc/ais/authkey.\n");
|
|
|
|
/*
|
|
* Write key
|
|
*/
|
|
res = write (authkey_fd, key, sizeof (key));
|
|
if (res == -1) {
|
|
perror ("Could not write /etc/ais/authkey");
|
|
exit (1);
|
|
}
|
|
|
|
return (0);
|
|
}
|