tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-31 01:35:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

upstream: add a SetEnv directive to ssh_config that allows setting

Browse Source 
environment variables for the remote session (subject to the server accepting
them)

refactor SendEnv to remove the arbitrary limit of variable names.

ok markus@

OpenBSD-Commit-ID: cfbb00d9b0e10c1ffff1d83424351fd961d1f2be
This commit is contained in:
djm@openbsd.org 2018-06-09 03:01:12 +00:00 committed by Damien Miller
parent 3b9798bda1
commit 7082bb58a2
11 changed files with 109 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
clientloop.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: clientloop.c,v 1.312 2018/04/10 00:10:49 djm Exp $ */ /* $OpenBSD: clientloop.c,v 1.313 2018/06/09 03:01:12 djm Exp $ */
/* /*
* Author: Tatu Ylonen <ylo@cs.hut.fi> * Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -2158,7 +2158,8 @@ void
client_session2_setup(struct ssh *ssh, int id, int want_tty, int want_subsystem, client_session2_setup(struct ssh *ssh, int id, int want_tty, int want_subsystem,
const char *term, struct termios *tiop, int in_fd, Buffer *cmd, char **env) const char *term, struct termios *tiop, int in_fd, Buffer *cmd, char **env)
{ {
int len; int i, j, matched, len;
char *name, *val;
Channel *c = NULL; Channel *c = NULL;
debug2("%s: id %d", __func__, id); debug2("%s: id %d", __func__, id);
@ -2193,9 +2194,6 @@ client_session2_setup(struct ssh *ssh, int id, int want_tty, int want_subsystem,
/* Transfer any environment variables from client to server */ /* Transfer any environment variables from client to server */
if (options.num_send_env != 0 && env != NULL) { if (options.num_send_env != 0 && env != NULL) {
int i, j, matched;
char *name, *val;
debug("Sending environment."); debug("Sending environment.");
for (i = 0; env[i] != NULL; i++) { for (i = 0; env[i] != NULL; i++) {
/* Split */ /* Split */
@ -2227,6 +2225,22 @@ client_session2_setup(struct ssh *ssh, int id, int want_tty, int want_subsystem,
free(name); free(name);
} }
} }
for (i = 0; i < options.num_setenv; i++) {
/* Split */
name = xstrdup(options.setenv[i]);
if ((val = strchr(name, '=')) == NULL) {
free(name);
continue;
}
*val++ = '\0';
debug("Setting env %s = %s", name, val);
channel_request_start(ssh, id, "env", 0);
packet_put_cstring(name);
packet_put_cstring(val);
packet_send();
free(name);
}
len = buffer_len(cmd); len = buffer_len(cmd);
if (len > 0) { if (len > 0) {

32
misc.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: misc.c,v 1.128 2018/06/06 18:29:18 markus Exp $ */ /* $OpenBSD: misc.c,v 1.129 2018/06/09 03:01:12 djm Exp $ */
/* /*
* Copyright (c) 2000 Markus Friedl. All rights reserved. * Copyright (c) 2000 Markus Friedl. All rights reserved.
* Copyright (c) 2005,2006 Damien Miller. All rights reserved. * Copyright (c) 2005,2006 Damien Miller. All rights reserved.
@ -239,8 +239,8 @@ set_rdomain(int fd, const char *name)
#define QUOTE "\"" #define QUOTE "\""
/* return next token in configuration line */ /* return next token in configuration line */
char * static char *
strdelim(char **s) strdelim_internal(char **s, int split_equals)
{ {
char *old; char *old;
int wspace = 0; int wspace = 0;
@ -250,7 +250,8 @@ strdelim(char **s)
old = *s; old = *s;
*s = strpbrk(*s, WHITESPACE QUOTE "="); *s = strpbrk(*s,
split_equals ? WHITESPACE QUOTE "=" : WHITESPACE QUOTE);
if (*s == NULL) if (*s == NULL)
return (old); return (old);
@ -267,18 +268,37 @@ strdelim(char **s)
} }
/* Allow only one '=' to be skipped */ /* Allow only one '=' to be skipped */
if (*s[0] == '=') if (split_equals && *s[0] == '=')
wspace = 1; wspace = 1;
*s[0] = '\0'; *s[0] = '\0';
/* Skip any extra whitespace after first token */ /* Skip any extra whitespace after first token */
*s += strspn(*s + 1, WHITESPACE) + 1; *s += strspn(*s + 1, WHITESPACE) + 1;
if (*s[0] == '=' && !wspace) if (split_equals && *s[0] == '=' && !wspace)
*s += strspn(*s + 1, WHITESPACE) + 1; *s += strspn(*s + 1, WHITESPACE) + 1;
return (old); return (old);
} }
/*
* Return next token in configuration line; splts on whitespace or a
* single '=' character.
*/
char *
strdelim(char **s)
{
return strdelim_internal(s, 1);
}
/*
* Return next token in configuration line; splts on whitespace only.
*/
char *
strdelimw(char **s)
{
return strdelim_internal(s, 0);
}
struct passwd * struct passwd *
pwcopy(struct passwd *pw) pwcopy(struct passwd *pw)
{ {

3
misc.h
View File

@ -1,4 +1,4 @@
/* $OpenBSD: misc.h,v 1.72 2018/06/06 18:29:18 markus Exp $ */ /* $OpenBSD: misc.h,v 1.73 2018/06/09 03:01:12 djm Exp $ */
/* /*
* Author: Tatu Ylonen <ylo@cs.hut.fi> * Author: Tatu Ylonen <ylo@cs.hut.fi>
@ -45,6 +45,7 @@ struct ForwardOptions {
char *chop(char *); char *chop(char *);
char *strdelim(char **); char *strdelim(char **);
char *strdelimw(char **);
int set_nonblock(int); int set_nonblock(int);
int unset_nonblock(int); int unset_nonblock(int);
void set_nodelay(int); void set_nodelay(int);

10
mux.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: mux.c,v 1.70 2018/06/06 18:22:41 djm Exp $ */ /* $OpenBSD: mux.c,v 1.71 2018/06/09 03:01:12 djm Exp $ */
/* /*
* Copyright (c) 2002-2008 Damien Miller <djm@openbsd.org> * Copyright (c) 2002-2008 Damien Miller <djm@openbsd.org>
* *
@ -1852,9 +1852,9 @@ mux_client_request_session(int fd)
{ {
Buffer m; Buffer m;
char *e, *term; char *e, *term;
u_int i, rid, sid, esid, exitval, type, exitval_seen; u_int rid, sid, esid, exitval, type, exitval_seen;
extern char **environ; extern char **environ;
int devnull, rawmode; int i, devnull, rawmode;
debug3("%s: entering", __func__); debug3("%s: entering", __func__);
@ -1889,14 +1889,16 @@ mux_client_request_session(int fd)
buffer_put_cstring(&m, term == NULL ? "" : term); buffer_put_cstring(&m, term == NULL ? "" : term);
buffer_put_string(&m, buffer_ptr(&command), buffer_len(&command)); buffer_put_string(&m, buffer_ptr(&command), buffer_len(&command));
if (options.num_send_env > 0 && environ != NULL) {
/* Pass environment */ /* Pass environment */
if (options.num_send_env > 0 && environ != NULL) {
for (i = 0; environ[i] != NULL; i++) { for (i = 0; environ[i] != NULL; i++) {
if (env_permitted(environ[i])) { if (env_permitted(environ[i])) {
buffer_put_cstring(&m, environ[i]); buffer_put_cstring(&m, environ[i]);
} }
} }
} }
for (i = 0; i < options.num_setenv; i++)
buffer_put_cstring(&m, options.setenv[i]);
if (mux_client_write_packet(fd, &m) != 0) if (mux_client_write_packet(fd, &m) != 0)
fatal("%s: write packet: %s", __func__, strerror(errno)); fatal("%s: write packet: %s", __func__, strerror(errno));

34
readconf.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: readconf.c,v 1.289 2018/06/06 18:29:18 markus Exp $ */ /* $OpenBSD: readconf.c,v 1.290 2018/06/09 03:01:12 djm Exp $ */
/* /*
* Author: Tatu Ylonen <ylo@cs.hut.fi> * Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -161,7 +161,7 @@ typedef enum {
oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout,
oAddressFamily, oGssAuthentication, oGssDelegateCreds, oAddressFamily, oGssAuthentication, oGssDelegateCreds,
oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly,
oSendEnv, oControlPath, oControlMaster, oControlPersist, oSendEnv, oSetEnv, oControlPath, oControlMaster, oControlPersist,
oHashKnownHosts, oHashKnownHosts,
oTunnel, oTunnelDevice, oTunnel, oTunnelDevice,
oLocalCommand, oPermitLocalCommand, oRemoteCommand, oLocalCommand, oPermitLocalCommand, oRemoteCommand,
@ -277,6 +277,7 @@ static struct {
{ "serveraliveinterval", oServerAliveInterval }, { "serveraliveinterval", oServerAliveInterval },
{ "serveralivecountmax", oServerAliveCountMax }, { "serveralivecountmax", oServerAliveCountMax },
{ "sendenv", oSendEnv }, { "sendenv", oSendEnv },
{ "setenv", oSetEnv },
{ "controlpath", oControlPath }, { "controlpath", oControlPath },
{ "controlmaster", oControlMaster }, { "controlmaster", oControlMaster },
{ "controlpersist", oControlPersist }, { "controlpersist", oControlPersist },
@ -1398,15 +1399,38 @@ parse_keytypes:
continue; continue;
} else { } else {
/* Adding an env var */ /* Adding an env var */
if (options->num_send_env >= MAX_SEND_ENV) if (options->num_send_env >= INT_MAX)
fatal("%s line %d: too many send env.", fatal("%s line %d: too many send env.",
filename, linenum); filename, linenum);
options->send_env = xrecallocarray(
options->send_env, options->num_send_env,
options->num_send_env,
sizeof(*options->send_env));
options->send_env[options->num_send_env++] = options->send_env[options->num_send_env++] =
xstrdup(arg); xstrdup(arg);
} }
} }
break; break;
case oSetEnv:
value = options->num_setenv;
while ((arg = strdelimw(&s)) != NULL && *arg != '\0') {
if (strchr(arg, '=') == NULL)
fatal("%s line %d: Invalid SetEnv.",
filename, linenum);
if (!*activep || value != 0)
continue;
/* Adding a setenv var */
if (options->num_setenv >= INT_MAX)
fatal("%s line %d: too many SetEnv.",
filename, linenum);
options->setenv = xrecallocarray(
options->setenv, options->num_setenv,
options->num_setenv + 1, sizeof(*options->setenv));
options->setenv[options->num_setenv++] = xstrdup(arg);
}
break;
case oControlPath: case oControlPath:
charptr = &options->control_path; charptr = &options->control_path;
goto parse_string; goto parse_string;
@ -1855,7 +1879,10 @@ initialize_options(Options * options)
options->verify_host_key_dns = -1; options->verify_host_key_dns = -1;
options->server_alive_interval = -1; options->server_alive_interval = -1;
options->server_alive_count_max = -1; options->server_alive_count_max = -1;
options->send_env = NULL;
options->num_send_env = 0; options->num_send_env = 0;
options->setenv = NULL;
options->num_setenv = 0;
options->control_path = NULL; options->control_path = NULL;
options->control_master = -1; options->control_master = -1;
options->control_persist = -1; options->control_persist = -1;
@ -2606,6 +2633,7 @@ dump_client_config(Options *o, const char *host)
dump_cfg_strarray_oneline(oGlobalKnownHostsFile, o->num_system_hostfiles, o->system_hostfiles); dump_cfg_strarray_oneline(oGlobalKnownHostsFile, o->num_system_hostfiles, o->system_hostfiles);
dump_cfg_strarray_oneline(oUserKnownHostsFile, o->num_user_hostfiles, o->user_hostfiles); dump_cfg_strarray_oneline(oUserKnownHostsFile, o->num_user_hostfiles, o->user_hostfiles);
dump_cfg_strarray(oSendEnv, o->num_send_env, o->send_env); dump_cfg_strarray(oSendEnv, o->num_send_env, o->send_env);
dump_cfg_strarray(oSetEnv, o->num_setenv, o->setenv);
/* Special cases */ /* Special cases */

7
readconf.h
View File

@ -1,4 +1,4 @@
/* $OpenBSD: readconf.h,v 1.125 2018/02/23 02:34:33 djm Exp $ */ /* $OpenBSD: readconf.h,v 1.126 2018/06/09 03:01:12 djm Exp $ */
/* /*
* Author: Tatu Ylonen <ylo@cs.hut.fi> * Author: Tatu Ylonen <ylo@cs.hut.fi>
@ -18,7 +18,6 @@
/* Data structure for representing option data. */ /* Data structure for representing option data. */
#define MAX_SEND_ENV 256
#define SSH_MAX_HOSTS_FILES 32 #define SSH_MAX_HOSTS_FILES 32
#define MAX_CANON_DOMAINS 32 #define MAX_CANON_DOMAINS 32
#define PATH_MAX_SUN (sizeof((struct sockaddr_un *)0)->sun_path) #define PATH_MAX_SUN (sizeof((struct sockaddr_un *)0)->sun_path)
@ -120,7 +119,9 @@ typedef struct {
int server_alive_count_max; int server_alive_count_max;
int num_send_env; int num_send_env;
char *send_env[MAX_SEND_ENV]; char **send_env;
int num_setenv;
char **setenv;
char *control_path; char *control_path;
int control_master; int control_master;

5
scp.1
View File

@ -8,9 +8,9 @@
.\" .\"
.\" Created: Sun May 7 00:14:37 1995 ylo .\" Created: Sun May 7 00:14:37 1995 ylo
.\" .\"
.\" $OpenBSD: scp.1,v 1.77 2018/02/23 07:38:09 jmc Exp $ .\" $OpenBSD: scp.1,v 1.78 2018/06/09 03:01:12 djm Exp $
.\" .\"
.Dd $Mdocdate: February 23 2018 $ .Dd $Mdocdate: June 9 2018 $
.Dt SCP 1 .Dt SCP 1
.Os .Os
.Sh NAME .Sh NAME
@ -171,6 +171,7 @@ For full details of the options listed below, and their possible values, see
.It PubkeyAuthentication .It PubkeyAuthentication
.It RekeyLimit .It RekeyLimit
.It SendEnv .It SendEnv
.It SetEnv
.It ServerAliveInterval .It ServerAliveInterval
.It ServerAliveCountMax .It ServerAliveCountMax
.It StrictHostKeyChecking .It StrictHostKeyChecking

5
sftp.1
View File

@ -1,4 +1,4 @@
.\" $OpenBSD: sftp.1,v 1.114 2018/02/23 07:38:09 jmc Exp $ .\" $OpenBSD: sftp.1,v 1.115 2018/06/09 03:01:12 djm Exp $
.\" .\"
.\" Copyright (c) 2001 Damien Miller. All rights reserved. .\" Copyright (c) 2001 Damien Miller. All rights reserved.
.\" .\"
@ -22,7 +22,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.Dd $Mdocdate: February 23 2018 $ .Dd $Mdocdate: June 9 2018 $
.Dt SFTP 1 .Dt SFTP 1
.Os .Os
.Sh NAME .Sh NAME
@ -241,6 +241,7 @@ For full details of the options listed below, and their possible values, see
.It PubkeyAuthentication .It PubkeyAuthentication
.It RekeyLimit .It RekeyLimit
.It SendEnv .It SendEnv
.It SetEnv
.It ServerAliveInterval .It ServerAliveInterval
.It ServerAliveCountMax .It ServerAliveCountMax
.It StrictHostKeyChecking .It StrictHostKeyChecking

5
ssh.1
View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: ssh.1,v 1.393 2018/05/11 04:01:11 djm Exp $ .\" $OpenBSD: ssh.1,v 1.394 2018/06/09 03:01:12 djm Exp $
.Dd $Mdocdate: May 11 2018 $ .Dd $Mdocdate: June 9 2018 $
.Dt SSH 1 .Dt SSH 1
.Os .Os
.Sh NAME .Sh NAME
@ -525,6 +525,7 @@ For full details of the options listed below, and their possible values, see
.It RemoteForward .It RemoteForward
.It RequestTTY .It RequestTTY
.It SendEnv .It SendEnv
.It SetEnv
.It ServerAliveInterval .It ServerAliveInterval
.It ServerAliveCountMax .It ServerAliveCountMax
.It StreamLocalBindMask .It StreamLocalBindMask

10
ssh_config.5
View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: ssh_config.5,v 1.275 2018/06/01 06:23:10 jmc Exp $ .\" $OpenBSD: ssh_config.5,v 1.276 2018/06/09 03:01:12 djm Exp $
.Dd $Mdocdate: June 1 2018 $ .Dd $Mdocdate: June 9 2018 $
.Dt SSH_CONFIG 5 .Dt SSH_CONFIG 5
.Os .Os
.Sh NAME .Sh NAME
@ -1404,6 +1404,12 @@ It is possible to clear previously set
variable names by prefixing patterns with variable names by prefixing patterns with
.Pa - . .Pa - .
The default is not to send any environment variables. The default is not to send any environment variables.
.It Cm SetEnv
Directly specify one or more environment variables and their contents to
be sent to the server.
Similarly to
.Cm SendEnv ,
the server must be prepared to accept the environment variable.
.It Cm ServerAliveCountMax .It Cm ServerAliveCountMax
Sets the number of server alive messages (see below) which may be Sets the number of server alive messages (see below) which may be
sent without sent without

6
sshd_config.5
View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd_config.5,v 1.272 2018/06/07 11:26:14 jmc Exp $ .\" $OpenBSD: sshd_config.5,v 1.273 2018/06/09 03:01:12 djm Exp $
.Dd $Mdocdate: June 7 2018 $ .Dd $Mdocdate: June 9 2018 $
.Dt SSHD_CONFIG 5 .Dt SSHD_CONFIG 5
.Os .Os
.Sh NAME .Sh NAME
@ -66,6 +66,8 @@ the session's
.Xr environ 7 . .Xr environ 7 .
See See
.Cm SendEnv .Cm SendEnv
and
.Cm SetEnv
in in
.Xr ssh_config 5 .Xr ssh_config 5
for how to configure the client. for how to configure the client.