/usr/lib/python2.7/dist-packages/psshlib/askpass_server.py is in pssh 2.3.1-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 | #!/usr/bin/env python
# -*- Mode: python -*-
# Copyright (c) 2009-2012, Andrew McNabb
"""Sends the password over a socket to askpass.
"""
import errno
import getpass
import os
import socket
import sys
import tempfile
import textwrap
from psshlib import psshutil
class PasswordServer(object):
"""Listens on a UNIX domain socket for password requests."""
def __init__(self):
self.sock = None
self.tempdir = None
self.address = None
self.socketmap = {}
self.buffermap = {}
def start(self, iomap, backlog):
"""Prompts for the password, creates a socket, and starts listening.
The specified backlog should be the max number of clients connecting
at once.
"""
message = ('Warning: do not enter your password if anyone else has'
' superuser privileges or access to your account.')
print(textwrap.fill(message))
self.password = getpass.getpass()
# Note that according to the docs for mkdtemp, "The directory is
# readable, writable, and searchable only by the creating user."
self.tempdir = tempfile.mkdtemp(prefix='pssh.')
self.address = os.path.join(self.tempdir, 'pssh_askpass_socket')
self.sock = socket.socket(socket.AF_UNIX)
psshutil.set_cloexec(self.sock)
self.sock.bind(self.address)
self.sock.listen(backlog)
iomap.register_read(self.sock.fileno(), self.handle_listen)
def handle_listen(self, fd, iomap):
try:
conn = self.sock.accept()[0]
except socket.error:
_, e, _ = sys.exc_info()
number = e.args[0]
if number == errno.EINTR:
return
else:
# TODO: print an error message here?
self.sock.close()
self.sock = None
fd = conn.fileno()
iomap.register_write(fd, self.handle_write)
self.socketmap[fd] = conn
self.buffermap[fd] = self.password
def handle_write(self, fd, iomap):
buffer = self.buffermap[fd]
conn = self.socketmap[fd]
try:
bytes_written = conn.send(buffer)
except socket.error:
_, e, _ = sys.exc_info()
number = e.args[0]
if number == errno.EINTR:
return
else:
self.close_socket(fd, iomap)
buffer = buffer[bytes_written:]
if buffer:
self.buffermap[fd] = buffer
else:
self.close_socket(fd, iomap)
def close_socket(self, fd, iomap):
iomap.unregister(fd)
self.socketmap[fd].close()
del self.socketmap[fd]
del self.buffermap[fd]
def __del__(self):
if self.sock:
self.sock.close()
self.sock = None
if self.address:
os.remove(self.address)
if self.tempdir:
os.rmdir(self.tempdir)
|