slock.c (10144B)
1 /* See LICENSE file for license details. */ 2 #define _XOPEN_SOURCE 500 3 #if HAVE_SHADOW_H 4 #include <shadow.h> 5 #endif 6 7 #include <ctype.h> 8 #include <errno.h> 9 #include <grp.h> 10 #include <pwd.h> 11 #include <stdarg.h> 12 #include <stdlib.h> 13 #include <stdio.h> 14 #include <string.h> 15 #include <unistd.h> 16 #include <sys/types.h> 17 #include <X11/extensions/Xrandr.h> 18 #include <X11/extensions/dpms.h> 19 #include <X11/keysym.h> 20 #include <X11/Xlib.h> 21 #include <X11/Xutil.h> 22 23 #include "arg.h" 24 #include "util.h" 25 26 char *argv0; 27 28 enum { 29 INIT, 30 INPUT, 31 FAILED, 32 NUMCOLS 33 }; 34 35 struct lock { 36 int screen; 37 Window root, win; 38 Pixmap pmap; 39 unsigned long colors[NUMCOLS]; 40 }; 41 42 struct xrandr { 43 int active; 44 int evbase; 45 int errbase; 46 }; 47 48 #include "config.h" 49 50 static void 51 die(const char *errstr, ...) 52 { 53 va_list ap; 54 55 va_start(ap, errstr); 56 vfprintf(stderr, errstr, ap); 57 va_end(ap); 58 exit(1); 59 } 60 61 #ifdef __linux__ 62 #include <fcntl.h> 63 #include <linux/oom.h> 64 65 static void 66 dontkillme(void) 67 { 68 FILE *f; 69 const char oomfile[] = "/proc/self/oom_score_adj"; 70 71 if (!(f = fopen(oomfile, "w"))) { 72 if (errno == ENOENT) 73 return; 74 die("slock: fopen %s: %s\n", oomfile, strerror(errno)); 75 } 76 fprintf(f, "%d", OOM_SCORE_ADJ_MIN); 77 if (fclose(f)) { 78 if (errno == EACCES) 79 die("slock: unable to disable OOM killer. " 80 "Make sure to suid or sgid slock.\n"); 81 else 82 die("slock: fclose %s: %s\n", oomfile, strerror(errno)); 83 } 84 } 85 #endif 86 87 static const char * 88 gethash(void) 89 { 90 const char *hash; 91 struct passwd *pw; 92 93 /* Check if the current user has a password entry */ 94 errno = 0; 95 if (!(pw = getpwuid(getuid()))) { 96 if (errno) 97 die("slock: getpwuid: %s\n", strerror(errno)); 98 else 99 die("slock: cannot retrieve password entry\n"); 100 } 101 hash = pw->pw_passwd; 102 103 #if HAVE_SHADOW_H 104 if (!strcmp(hash, "x")) { 105 struct spwd *sp; 106 if (!(sp = getspnam(pw->pw_name))) 107 die("slock: getspnam: cannot retrieve shadow entry. " 108 "Make sure to suid or sgid slock.\n"); 109 hash = sp->sp_pwdp; 110 } 111 #else 112 if (!strcmp(hash, "*")) { 113 #ifdef __OpenBSD__ 114 if (!(pw = getpwuid_shadow(getuid()))) 115 die("slock: getpwnam_shadow: cannot retrieve shadow entry. " 116 "Make sure to suid or sgid slock.\n"); 117 hash = pw->pw_passwd; 118 #else 119 die("slock: getpwuid: cannot retrieve shadow entry. " 120 "Make sure to suid or sgid slock.\n"); 121 #endif /* __OpenBSD__ */ 122 } 123 #endif /* HAVE_SHADOW_H */ 124 125 return hash; 126 } 127 128 static void 129 readpw(Display *dpy, struct xrandr *rr, struct lock **locks, int nscreens, 130 const char *hash) 131 { 132 XRRScreenChangeNotifyEvent *rre; 133 char buf[32], passwd[256], *inputhash; 134 int num, screen, running, failure, oldc; 135 unsigned int len, color; 136 KeySym ksym; 137 XEvent ev; 138 139 len = 0; 140 running = 1; 141 failure = 0; 142 oldc = INIT; 143 144 while (running && !XNextEvent(dpy, &ev)) { 145 if (ev.type == KeyPress) { 146 explicit_bzero(&buf, sizeof(buf)); 147 num = XLookupString(&ev.xkey, buf, sizeof(buf), &ksym, 0); 148 if (IsKeypadKey(ksym)) { 149 if (ksym == XK_KP_Enter) 150 ksym = XK_Return; 151 else if (ksym >= XK_KP_0 && ksym <= XK_KP_9) 152 ksym = (ksym - XK_KP_0) + XK_0; 153 } 154 if (IsFunctionKey(ksym) || 155 IsKeypadKey(ksym) || 156 IsMiscFunctionKey(ksym) || 157 IsPFKey(ksym) || 158 IsPrivateKeypadKey(ksym)) 159 continue; 160 switch (ksym) { 161 case XK_Return: 162 passwd[len] = '\0'; 163 errno = 0; 164 if (!(inputhash = crypt(passwd, hash))) 165 fprintf(stderr, "slock: crypt: %s\n", strerror(errno)); 166 else 167 running = !!strcmp(inputhash, hash); 168 if (running) { 169 XBell(dpy, 100); 170 failure = 1; 171 } 172 explicit_bzero(&passwd, sizeof(passwd)); 173 len = 0; 174 break; 175 case XK_Escape: 176 explicit_bzero(&passwd, sizeof(passwd)); 177 len = 0; 178 break; 179 case XK_BackSpace: 180 if (len) 181 passwd[len--] = '\0'; 182 break; 183 default: 184 if (num && !iscntrl((int)buf[0]) && 185 (len + num < sizeof(passwd))) { 186 memcpy(passwd + len, buf, num); 187 len += num; 188 } 189 break; 190 } 191 color = len ? INPUT : ((failure || failonclear) ? FAILED : INIT); 192 if (running && oldc != color) { 193 for (screen = 0; screen < nscreens; screen++) { 194 XSetWindowBackground(dpy, 195 locks[screen]->win, 196 locks[screen]->colors[color]); 197 XClearWindow(dpy, locks[screen]->win); 198 } 199 oldc = color; 200 } 201 } else if (rr->active && ev.type == rr->evbase + RRScreenChangeNotify) { 202 rre = (XRRScreenChangeNotifyEvent*)&ev; 203 for (screen = 0; screen < nscreens; screen++) { 204 if (locks[screen]->win == rre->window) { 205 XResizeWindow(dpy, locks[screen]->win, 206 rre->width, rre->height); 207 XClearWindow(dpy, locks[screen]->win); 208 } 209 } 210 } else for (screen = 0; screen < nscreens; screen++) 211 XRaiseWindow(dpy, locks[screen]->win); 212 } 213 } 214 215 static struct lock * 216 lockscreen(Display *dpy, struct xrandr *rr, int screen) 217 { 218 char curs[] = {0, 0, 0, 0, 0, 0, 0, 0}; 219 int i, ptgrab, kbgrab; 220 struct lock *lock; 221 XColor color, dummy; 222 XSetWindowAttributes wa; 223 Cursor invisible; 224 225 if (dpy == NULL || screen < 0 || !(lock = malloc(sizeof(struct lock)))) 226 return NULL; 227 228 lock->screen = screen; 229 lock->root = RootWindow(dpy, lock->screen); 230 231 for (i = 0; i < NUMCOLS; i++) { 232 XAllocNamedColor(dpy, DefaultColormap(dpy, lock->screen), 233 colorname[i], &color, &dummy); 234 lock->colors[i] = color.pixel; 235 } 236 237 /* init */ 238 wa.override_redirect = 1; 239 wa.background_pixel = lock->colors[INIT]; 240 lock->win = XCreateWindow(dpy, lock->root, 0, 0, 241 DisplayWidth(dpy, lock->screen), 242 DisplayHeight(dpy, lock->screen), 243 0, DefaultDepth(dpy, lock->screen), 244 CopyFromParent, 245 DefaultVisual(dpy, lock->screen), 246 CWOverrideRedirect | CWBackPixel, &wa); 247 lock->pmap = XCreateBitmapFromData(dpy, lock->win, curs, 8, 8); 248 invisible = XCreatePixmapCursor(dpy, lock->pmap, lock->pmap, 249 &color, &color, 0, 0); 250 XDefineCursor(dpy, lock->win, invisible); 251 252 /* Try to grab mouse pointer *and* keyboard for 600ms, else fail the lock */ 253 for (i = 0, ptgrab = kbgrab = -1; i < 6; i++) { 254 if (ptgrab != GrabSuccess) { 255 ptgrab = XGrabPointer(dpy, lock->root, False, 256 ButtonPressMask | ButtonReleaseMask | 257 PointerMotionMask, GrabModeAsync, 258 GrabModeAsync, None, invisible, CurrentTime); 259 } 260 if (kbgrab != GrabSuccess) { 261 kbgrab = XGrabKeyboard(dpy, lock->root, True, 262 GrabModeAsync, GrabModeAsync, CurrentTime); 263 } 264 265 /* input is grabbed: we can lock the screen */ 266 if (ptgrab == GrabSuccess && kbgrab == GrabSuccess) { 267 XMapRaised(dpy, lock->win); 268 if (rr->active) 269 XRRSelectInput(dpy, lock->win, RRScreenChangeNotifyMask); 270 271 XSelectInput(dpy, lock->root, SubstructureNotifyMask); 272 return lock; 273 } 274 275 /* retry on AlreadyGrabbed but fail on other errors */ 276 if ((ptgrab != AlreadyGrabbed && ptgrab != GrabSuccess) || 277 (kbgrab != AlreadyGrabbed && kbgrab != GrabSuccess)) 278 break; 279 280 usleep(100000); 281 } 282 283 /* we couldn't grab all input: fail out */ 284 if (ptgrab != GrabSuccess) 285 fprintf(stderr, "slock: unable to grab mouse pointer for screen %d\n", 286 screen); 287 if (kbgrab != GrabSuccess) 288 fprintf(stderr, "slock: unable to grab keyboard for screen %d\n", 289 screen); 290 return NULL; 291 } 292 293 static void 294 usage(void) 295 { 296 die("usage: slock [-v] [cmd [arg ...]]\n"); 297 } 298 299 int 300 main(int argc, char **argv) { 301 struct xrandr rr; 302 struct lock **locks; 303 struct passwd *pwd; 304 struct group *grp; 305 uid_t duid; 306 gid_t dgid; 307 const char *hash; 308 Display *dpy; 309 int s, nlocks, nscreens; 310 CARD16 standby, suspend, off; 311 312 ARGBEGIN { 313 case 'v': 314 fprintf(stderr, "slock-"VERSION"\n"); 315 return 0; 316 default: 317 usage(); 318 } ARGEND 319 320 /* validate drop-user and -group */ 321 errno = 0; 322 if (!(pwd = getpwnam(user))) 323 die("slock: getpwnam %s: %s\n", user, 324 errno ? strerror(errno) : "user entry not found"); 325 duid = pwd->pw_uid; 326 errno = 0; 327 if (!(grp = getgrnam(group))) 328 die("slock: getgrnam %s: %s\n", group, 329 errno ? strerror(errno) : "group entry not found"); 330 dgid = grp->gr_gid; 331 332 #ifdef __linux__ 333 dontkillme(); 334 #endif 335 336 hash = gethash(); 337 errno = 0; 338 if (!crypt("", hash)) 339 die("slock: crypt: %s\n", strerror(errno)); 340 341 if (!(dpy = XOpenDisplay(NULL))) 342 die("slock: cannot open display\n"); 343 344 /* drop privileges */ 345 if (setgroups(0, NULL) < 0) 346 die("slock: setgroups: %s\n", strerror(errno)); 347 if (setgid(dgid) < 0) 348 die("slock: setgid: %s\n", strerror(errno)); 349 if (setuid(duid) < 0) 350 die("slock: setuid: %s\n", strerror(errno)); 351 352 /* check for Xrandr support */ 353 rr.active = XRRQueryExtension(dpy, &rr.evbase, &rr.errbase); 354 355 /* get number of screens in display "dpy" and blank them */ 356 nscreens = ScreenCount(dpy); 357 if (!(locks = calloc(nscreens, sizeof(struct lock *)))) 358 die("slock: out of memory\n"); 359 for (nlocks = 0, s = 0; s < nscreens; s++) { 360 if ((locks[s] = lockscreen(dpy, &rr, s)) != NULL) 361 nlocks++; 362 else 363 break; 364 } 365 XSync(dpy, 0); 366 367 /* did we manage to lock everything? */ 368 if (nlocks != nscreens) 369 return 1; 370 371 /* DPMS magic to disable the monitor */ 372 if (!DPMSCapable(dpy)) 373 die("slock: DPMSCapable failed\n"); 374 if (!DPMSEnable(dpy)) 375 die("slock: DPMSEnable failed\n"); 376 if (!DPMSGetTimeouts(dpy, &standby, &suspend, &off)) 377 die("slock: DPMSGetTimeouts failed\n"); 378 if (!standby || !suspend || !off) 379 die("slock: at least one DPMS variable is zero\n"); 380 if (!DPMSSetTimeouts(dpy, monitortime, monitortime, monitortime)) 381 die("slock: DPMSSetTimeouts failed\n"); 382 383 XSync(dpy, 0); 384 385 /* run post-lock command */ 386 if (argc > 0) { 387 switch (fork()) { 388 case -1: 389 die("slock: fork failed: %s\n", strerror(errno)); 390 case 0: 391 if (close(ConnectionNumber(dpy)) < 0) 392 die("slock: close: %s\n", strerror(errno)); 393 execvp(argv[0], argv); 394 fprintf(stderr, "slock: execvp %s: %s\n", argv[0], strerror(errno)); 395 _exit(1); 396 } 397 } 398 399 /* everything is now blank. Wait for the correct password */ 400 readpw(dpy, &rr, locks, nscreens, hash); 401 402 /* reset DPMS values to inital ones */ 403 DPMSSetTimeouts(dpy, standby, suspend, off); 404 XSync(dpy, 0); 405 406 return 0; 407 }