iTWire - Real world Linux programming

Today on iTWire Virtualisation IT News Telecommunications People Our Blogs Tech Lifestyle Releases Science Discuss Events IT&T JOBS

Bringing the world of Linux to you, David cuts through the tech and shows you how it works and how to use it, in terms that apply to any distro.

IT NEWS Sustainability

- Virtualisation

Technology news and Jobs

The Linux distillery

Real world Linux programming

by David M Williams

Tuesday, 11 December 2007

Page 1 of 3

Here’s a genuine app that I wrote for an ISP. They needed a way to let their help desk staff perform system administration functions in a controlled manner, through a simple menu of choices. The solution was pretty simple: a controlled environment with no shell access plus a series of programs and scripts that were elevated if required by sudo.

The help desk staff would use telnet or ssh or any other means to login to the Linux server as a special menu user account, instead of their ordinary accounts. The shell in /etc/passwd was set to be the menu program. This meant their environment was locked.

It wasn’t desirable to recompile the application whenever a new menu option was needed, so the first thing it does is read a configuration file and dynamically builds up its list of features that the user is offered. Additional programs and shell scripts perform the actual tasks, and these are referenced in the config file.

Also, some functions require privileged access – ie superuser access – and it’s best to run programs with the least permissions required. So, by hiving off the functionality out of the main app, the app itself need just not have any special permission.

Not all users are equal, so the config file also specifies a minimum access level required to perform each task, and another list of users stipulates the access level each user has. If a user doesn’t meet the minimum criteria for any option they simply do not see that option in the list – no point teasing people!

The first file in our program, constants.h, simply defines – as you might guess – some constant values which will be used by the rest of the program. This lets the behaviour be changed in one spot.

#define BANNER "ISP Help-Desk operations menu\nPlease log in\n\n"

#define LOGGING_ENABLED
#undef DISABLE_INTERRUPTS
#define HIDE_PASSWORD
#define CLEAR_SCREEN
#define USE_EXECL
#undef DEBUGGING

#define LOGFILE "/usr/local/menu/menu.log"
#define USERLIST "/usr/local/menu/user.list"
#define MENULIST "/usr/local/menu/menu.list"
#define SCRIPTSDIR "/usr/local/menu/scripts"
#define SUDO "/usr/local/bin/sudo"

The next file, menu.h, defines a data structure to hold the menu in memory as well as declare the functions the program will implement.

#include "constants.h"

#include <crypt.h>
#include <ctype.h>
#include <limits.h>
#include <signal.h>
#include <stdarg.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <time.h>
#include <wait.h>

typedef struct
{
char MenuText [75];
char ScriptName [80];
int RunAsRoot;
void *Next;
void *Submenu;
} ScriptNode;

typedef ScriptNode *ScriptTree;

void clrscrn ();
void login (char *username, char *password);
void noAccess (char *username);
int verify (char *username, char *password, int *access);
void buildMenu (int access, ScriptTree *theMenu);
void DoMenu (char *username, ScriptTree theMenu, int InSub);
ScriptTree AddMenu (ScriptTree *theMenu, char *ItemText);
void AddNode (ScriptTree *theMenu, char *ItemText,
char *ScriptCommand, int UseSudo);
void Destroy (ScriptTree theMenu);
void DoCommand (char *username, char *ScriptName, int UseSudo);
void log (const char *format, ...);
int DisplayMenu (ScriptTree theMenu, int InSub);
int getChoice (int MenuItems);
void ProcessChoice (int userChoice, ScriptTree theMenu, char *username, int InSub);
void DumpMenu (int level, ScriptTree theMenu);
void indent (int level);

CONTINUED

<< First page < 1 2 3 Next page > Last page - Post your comment >>

< Next story in category		Previous story in the category >

Latest jobs

iTWire Technology feature

Virtualisation

maximise your infrastructure, maximise your business

Custom Search

BCI Training – Understanding BCM Principles and Good Practice
August 23, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

BCI Training – Understanding BCM Principles and Good Practice
August 24, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

BCI Training – Understanding BCM Principles and Good Practice
August 25, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

BCI Training – Understanding BCM Principles and Good Practice
August 25, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

HP QuickTest Professional Public Training
August 25 (9:00 am) - August 26 (11:59 pm), 2008
This instructor-led course provides a comprehensive understanding of using QuickTest Professional...

NICTA Big Picture Seminar - Dr Rodney Brooks "Robotics: Shaped by and Shaping the World in 2000 - 2050"
August 25, 2008 (4:00 pm - 5:00 pm)
ABSTRACT: As the 21st century has dawned we have seen a dramatic uptake of robots for unstructure...

BCI Training – Understanding BCM Principles and Good Practice
August 26, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

BCI Training – Understanding BCM Principles and Good Practice
August 26, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

PR Online
August 26, 2008 (9:30 am - 12:00 pm)
PR Online Sydney, August 26, 2008 Speakers: - Michael Henderson, Specrum PR - Jeremy Mitche...

ICT SMART: OFFICE SHOW
August 26 (10:00 am) - August 28 (11:59 pm), 2008
ICT SMART office show, is a business-to-business trade event featuring the latest in business tec...

New event listings

SolidWorks Innovation Day (Melbourne and Adelaide)
October 17, 2008 (All Day)
Hosted by Intercad, SolidWorks’ Innovation Days will give designers, engineers and manufacturers ...

SolidWorks Innovation Day (Sydney)
October 16, 2008 (All Day)
Hosted by Intercad, SolidWorks’ Innovation Days will give designers, engineers and manufacturers ...

SolidWorks Innovation Day (Brisbane and Perth)
October 15, 2008 (All Day)
Hosted by Intercad, SolidWorks’ Innovation Days will give designers, engineers and manufacturers ...

LIXI Industry Forum 2008
September 10, 2008 (All Day)
Wednesday, 10 September 2008 The Westin Sydney The second annual major industry event for the...

BCI Training – Understanding BCM Principles and Good Practice
August 22, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

BCI Training – Understanding BCM Principles and Good Practice
August 21, 2008 (All Day)
BCI Training – Understanding BCM Principles and Good Practice consists of 5 one day training modu...

View Full Calendar