qga: Refactor common SSH functions
Message-Id: <20240424144029.30665-2-aidan_leuck@selinc.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit In preparation of a Windows implementation, move the non-POSIX specific code to commands-common-ssh. Signed-off-by: Aidan Leuck <aidan_leuck@selinc.com> Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org> Tested-by: Dehan Meng <demeng@redhat.com> Reviewed-by: Konstantin Kostiuk <kkostiuk@redhat.com> Link: https://lore.kernel.org/r/20240424144029.30665-2-aidan_leuck@selinc.com Signed-off-by: Konstantin Kostiuk <kkostiuk@redhat.com>
This commit is contained in:
parent
0e5b75a390
commit
1cc9932700
50
qga/commands-common-ssh.c
Normal file
50
qga/commands-common-ssh.c
Normal file
@ -0,0 +1,50 @@
|
||||
/*
|
||||
* This work is licensed under the terms of the GNU GPL, version 2 or later.
|
||||
* See the COPYING file in the top-level directory.
|
||||
*/
|
||||
|
||||
#include "qemu/osdep.h"
|
||||
#include "qapi/error.h"
|
||||
#include "commands-common-ssh.h"
|
||||
|
||||
GStrv read_authkeys(const char *path, Error **errp)
|
||||
{
|
||||
g_autoptr(GError) err = NULL;
|
||||
g_autofree char *contents = NULL;
|
||||
|
||||
if (!g_file_get_contents(path, &contents, NULL, &err)) {
|
||||
error_setg(errp, "failed to read '%s': %s", path, err->message);
|
||||
return NULL;
|
||||
}
|
||||
|
||||
return g_strsplit(contents, "\n", -1);
|
||||
}
|
||||
|
||||
bool check_openssh_pub_keys(strList *keys, size_t *nkeys, Error **errp)
|
||||
{
|
||||
size_t n = 0;
|
||||
strList *k;
|
||||
|
||||
for (k = keys; k != NULL; k = k->next) {
|
||||
if (!check_openssh_pub_key(k->value, errp)) {
|
||||
return false;
|
||||
}
|
||||
n++;
|
||||
}
|
||||
|
||||
if (nkeys) {
|
||||
*nkeys = n;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
bool check_openssh_pub_key(const char *key, Error **errp)
|
||||
{
|
||||
/* simple sanity-check, we may want more? */
|
||||
if (!key || key[0] == '#' || strchr(key, '\n')) {
|
||||
error_setg(errp, "invalid OpenSSH public key: '%s'", key);
|
||||
return false;
|
||||
}
|
||||
|
||||
return true;
|
||||
}
|
10
qga/commands-common-ssh.h
Normal file
10
qga/commands-common-ssh.h
Normal file
@ -0,0 +1,10 @@
|
||||
/*
|
||||
* This work is licensed under the terms of the GNU GPL, version 2 or later.
|
||||
* See the COPYING file in the top-level directory.
|
||||
*/
|
||||
|
||||
#include "qapi/qapi-builtin-types.h"
|
||||
|
||||
GStrv read_authkeys(const char *path, Error **errp);
|
||||
bool check_openssh_pub_keys(strList *keys, size_t *nkeys, Error **errp);
|
||||
bool check_openssh_pub_key(const char *key, Error **errp);
|
@ -9,6 +9,7 @@
|
||||
#include <locale.h>
|
||||
#include <pwd.h>
|
||||
|
||||
#include "commands-common-ssh.h"
|
||||
#include "qapi/error.h"
|
||||
#include "qga-qapi-commands.h"
|
||||
|
||||
@ -80,37 +81,6 @@ mkdir_for_user(const char *path, const struct passwd *p,
|
||||
return true;
|
||||
}
|
||||
|
||||
static bool
|
||||
check_openssh_pub_key(const char *key, Error **errp)
|
||||
{
|
||||
/* simple sanity-check, we may want more? */
|
||||
if (!key || key[0] == '#' || strchr(key, '\n')) {
|
||||
error_setg(errp, "invalid OpenSSH public key: '%s'", key);
|
||||
return false;
|
||||
}
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
static bool
|
||||
check_openssh_pub_keys(strList *keys, size_t *nkeys, Error **errp)
|
||||
{
|
||||
size_t n = 0;
|
||||
strList *k;
|
||||
|
||||
for (k = keys; k != NULL; k = k->next) {
|
||||
if (!check_openssh_pub_key(k->value, errp)) {
|
||||
return false;
|
||||
}
|
||||
n++;
|
||||
}
|
||||
|
||||
if (nkeys) {
|
||||
*nkeys = n;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
static bool
|
||||
write_authkeys(const char *path, const GStrv keys,
|
||||
const struct passwd *p, Error **errp)
|
||||
@ -139,21 +109,6 @@ write_authkeys(const char *path, const GStrv keys,
|
||||
return true;
|
||||
}
|
||||
|
||||
static GStrv
|
||||
read_authkeys(const char *path, Error **errp)
|
||||
{
|
||||
g_autoptr(GError) err = NULL;
|
||||
g_autofree char *contents = NULL;
|
||||
|
||||
if (!g_file_get_contents(path, &contents, NULL, &err)) {
|
||||
error_setg(errp, "failed to read '%s': %s", path, err->message);
|
||||
return NULL;
|
||||
}
|
||||
|
||||
return g_strsplit(contents, "\n", -1);
|
||||
|
||||
}
|
||||
|
||||
void
|
||||
qmp_guest_ssh_add_authorized_keys(const char *username, strList *keys,
|
||||
bool has_reset, bool reset,
|
||||
|
@ -66,6 +66,7 @@ qga_ss.add(files(
|
||||
'guest-agent-command-state.c',
|
||||
'main.c',
|
||||
'cutils.c',
|
||||
'commands-common-ssh.c'
|
||||
))
|
||||
if host_os == 'windows'
|
||||
qga_ss.add(files(
|
||||
@ -186,7 +187,7 @@ test_env.set('G_TEST_BUILDDIR', meson.current_build_dir())
|
||||
# this when an alternative is implemented or when the underlying glib
|
||||
# issue is identified/fix
|
||||
if host_os != 'windows' and not get_option('fuzzing')
|
||||
srcs = [files('commands-posix-ssh.c')]
|
||||
srcs = [files('commands-common-ssh.c', 'commands-posix-ssh.c')]
|
||||
i = 0
|
||||
foreach output: qga_qapi_outputs
|
||||
if output.startswith('qga-qapi-types') or output.startswith('qga-qapi-visit')
|
||||
|
Loading…
Reference in New Issue
Block a user