xref: /openssh-portable/monitor.h (revision 04c091fc)
1 /* $OpenBSD: monitor.h,v 1.23 2019/01/19 21:43:56 djm Exp $ */
2 
3 /*
4  * Copyright 2002 Niels Provos <provos@citi.umich.edu>
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
17  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
18  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
19  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
20  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
21  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
22  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
23  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
24  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
25  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
26  */
27 
28 #ifndef _MONITOR_H_
29 #define _MONITOR_H_
30 
31 /* Please keep *_REQ_* values on even numbers and *_ANS_* on odd numbers */
32 enum monitor_reqtype {
33 	MONITOR_REQ_MODULI = 0, MONITOR_ANS_MODULI = 1,
34 	MONITOR_REQ_FREE = 2,
35 	MONITOR_REQ_AUTHSERV = 4,
36 	MONITOR_REQ_SIGN = 6, MONITOR_ANS_SIGN = 7,
37 	MONITOR_REQ_PWNAM = 8, MONITOR_ANS_PWNAM = 9,
38 	MONITOR_REQ_AUTH2_READ_BANNER = 10, MONITOR_ANS_AUTH2_READ_BANNER = 11,
39 	MONITOR_REQ_AUTHPASSWORD = 12, MONITOR_ANS_AUTHPASSWORD = 13,
40 	MONITOR_REQ_BSDAUTHQUERY = 14, MONITOR_ANS_BSDAUTHQUERY = 15,
41 	MONITOR_REQ_BSDAUTHRESPOND = 16, MONITOR_ANS_BSDAUTHRESPOND = 17,
42 	MONITOR_REQ_KEYALLOWED = 22, MONITOR_ANS_KEYALLOWED = 23,
43 	MONITOR_REQ_KEYVERIFY = 24, MONITOR_ANS_KEYVERIFY = 25,
44 	MONITOR_REQ_KEYEXPORT = 26,
45 	MONITOR_REQ_PTY = 28, MONITOR_ANS_PTY = 29,
46 	MONITOR_REQ_PTYCLEANUP = 30,
47 	MONITOR_REQ_SESSKEY = 32, MONITOR_ANS_SESSKEY = 33,
48 	MONITOR_REQ_SESSID = 34,
49 	MONITOR_REQ_RSAKEYALLOWED = 36, MONITOR_ANS_RSAKEYALLOWED = 37,
50 	MONITOR_REQ_RSACHALLENGE = 38, MONITOR_ANS_RSACHALLENGE = 39,
51 	MONITOR_REQ_RSARESPONSE = 40, MONITOR_ANS_RSARESPONSE = 41,
52 	MONITOR_REQ_GSSSETUP = 42, MONITOR_ANS_GSSSETUP = 43,
53 	MONITOR_REQ_GSSSTEP = 44, MONITOR_ANS_GSSSTEP = 45,
54 	MONITOR_REQ_GSSUSEROK = 46, MONITOR_ANS_GSSUSEROK = 47,
55 	MONITOR_REQ_GSSCHECKMIC = 48, MONITOR_ANS_GSSCHECKMIC = 49,
56 	MONITOR_REQ_TERM = 50,
57 
58 	MONITOR_REQ_PAM_START = 100,
59 	MONITOR_REQ_PAM_ACCOUNT = 102, MONITOR_ANS_PAM_ACCOUNT = 103,
60 	MONITOR_REQ_PAM_INIT_CTX = 104, MONITOR_ANS_PAM_INIT_CTX = 105,
61 	MONITOR_REQ_PAM_QUERY = 106, MONITOR_ANS_PAM_QUERY = 107,
62 	MONITOR_REQ_PAM_RESPOND = 108, MONITOR_ANS_PAM_RESPOND = 109,
63 	MONITOR_REQ_PAM_FREE_CTX = 110, MONITOR_ANS_PAM_FREE_CTX = 111,
64 	MONITOR_REQ_AUDIT_EVENT = 112, MONITOR_REQ_AUDIT_COMMAND = 113,
65 
66 };
67 
68 struct ssh;
69 
70 struct monitor {
71 	int			 m_recvfd;
72 	int			 m_sendfd;
73 	int			 m_log_recvfd;
74 	int			 m_log_sendfd;
75 	struct kex		**m_pkex;
76 	pid_t			 m_pid;
77 };
78 
79 struct monitor *monitor_init(void);
80 void monitor_reinit(struct monitor *);
81 
82 struct Authctxt;
83 void monitor_child_preauth(struct ssh *, struct monitor *);
84 void monitor_child_postauth(struct ssh *, struct monitor *);
85 
86 void monitor_clear_keystate(struct ssh *, struct monitor *);
87 void monitor_apply_keystate(struct ssh *, struct monitor *);
88 
89 /* Prototypes for request sending and receiving */
90 void mm_request_send(int, enum monitor_reqtype, struct sshbuf *);
91 void mm_request_receive(int, struct sshbuf *);
92 void mm_request_receive_expect(int, enum monitor_reqtype, struct sshbuf *);
93 void mm_get_keystate(struct ssh *, struct monitor *);
94 
95 #endif /* _MONITOR_H_ */
96