slock.c (12193B)
1 /* See LICENSE file for license details. */ 2 #define _XOPEN_SOURCE 500 3 #if HAVE_SHADOW_H 4 #include <shadow.h> 5 #endif 6 7 #include <ctype.h> 8 #include <errno.h> 9 #include <grp.h> 10 #include <pwd.h> 11 #include <stdarg.h> 12 #include <stdlib.h> 13 #include <stdio.h> 14 #include <string.h> 15 #include <unistd.h> 16 #include <spawn.h> 17 #include <sys/types.h> 18 #include <X11/extensions/Xrandr.h> 19 #include <X11/keysym.h> 20 #include <X11/Xlib.h> 21 #include <X11/Xutil.h> 22 #include <Imlib2.h> 23 #include <X11/xpm.h> 24 25 #include "arg.h" 26 #include "util.h" 27 28 char *argv0; 29 30 enum { 31 INIT, 32 INPUT, 33 FAILED, 34 NUMCOLS 35 }; 36 37 struct lock { 38 int screen; 39 Window root, win; 40 Pixmap pmap; 41 Pixmap bgmap; 42 unsigned long colors[NUMCOLS]; 43 }; 44 45 struct xrandr { 46 int active; 47 int evbase; 48 int errbase; 49 }; 50 51 #include "config.h" 52 53 Imlib_Image image; 54 55 static void 56 die(const char *errstr, ...) 57 { 58 va_list ap; 59 60 va_start(ap, errstr); 61 vfprintf(stderr, errstr, ap); 62 va_end(ap); 63 exit(1); 64 } 65 66 #ifdef __linux__ 67 #include <fcntl.h> 68 #include <linux/oom.h> 69 70 static void 71 dontkillme(void) 72 { 73 FILE *f; 74 const char oomfile[] = "/proc/self/oom_score_adj"; 75 76 if (!(f = fopen(oomfile, "w"))) { 77 if (errno == ENOENT) 78 return; 79 die("slock: fopen %s: %s\n", oomfile, strerror(errno)); 80 } 81 fprintf(f, "%d", OOM_SCORE_ADJ_MIN); 82 if (fclose(f)) { 83 if (errno == EACCES) 84 die("slock: unable to disable OOM killer. " 85 "Make sure to suid or sgid slock.\n"); 86 else 87 die("slock: fclose %s: %s\n", oomfile, strerror(errno)); 88 } 89 } 90 #endif 91 92 static const char * 93 gethash(void) 94 { 95 const char *hash; 96 struct passwd *pw; 97 98 /* Check if the current user has a password entry */ 99 errno = 0; 100 if (!(pw = getpwuid(getuid()))) { 101 if (errno) 102 die("slock: getpwuid: %s\n", strerror(errno)); 103 else 104 die("slock: cannot retrieve password entry\n"); 105 } 106 hash = pw->pw_passwd; 107 108 #if HAVE_SHADOW_H 109 if (!strcmp(hash, "x")) { 110 struct spwd *sp; 111 if (!(sp = getspnam(pw->pw_name))) 112 die("slock: getspnam: cannot retrieve shadow entry. " 113 "Make sure to suid or sgid slock.\n"); 114 hash = sp->sp_pwdp; 115 } 116 #else 117 if (!strcmp(hash, "*")) { 118 #ifdef __OpenBSD__ 119 if (!(pw = getpwuid_shadow(getuid()))) 120 die("slock: getpwnam_shadow: cannot retrieve shadow entry. " 121 "Make sure to suid or sgid slock.\n"); 122 hash = pw->pw_passwd; 123 #else 124 die("slock: getpwuid: cannot retrieve shadow entry. " 125 "Make sure to suid or sgid slock.\n"); 126 #endif /* __OpenBSD__ */ 127 } 128 #endif /* HAVE_SHADOW_H */ 129 130 return hash; 131 } 132 133 static void 134 showimage(Display *dpy, Window win) 135 { 136 XImage *ximage; 137 138 if (!XpmReadFileToImage (dpy, imgpath, &ximage, NULL, NULL)) { 139 XSelectInput(dpy, win, ButtonPressMask|ExposureMask); 140 XMapWindow(dpy, win); 141 142 XPutImage(dpy, win, DefaultGC(dpy, 0), ximage, 0, 0, imgoffsetx, imgoffsety, imgwidth, imgheight); 143 } 144 } 145 146 static void 147 readpw(Display *dpy, struct xrandr *rr, struct lock **locks, int nscreens, 148 const char *hash) 149 { 150 XRRScreenChangeNotifyEvent *rre; 151 char buf[32], passwd[256], *inputhash; 152 int num, screen, running, failure, oldc; 153 unsigned int len, color; 154 KeySym ksym; 155 XEvent ev; 156 157 memset(passwd, 0, sizeof(passwd)); 158 159 len = 0; 160 running = 1; 161 failure = 0; 162 oldc = INIT; 163 164 while (running && !XNextEvent(dpy, &ev)) { 165 if (ev.type == KeyPress) { 166 explicit_bzero(&buf, sizeof(buf)); 167 num = XLookupString(&ev.xkey, buf, sizeof(buf), &ksym, 0); 168 if (IsKeypadKey(ksym)) { 169 if (ksym == XK_KP_Enter) 170 ksym = XK_Return; 171 else if (ksym >= XK_KP_0 && ksym <= XK_KP_9) 172 ksym = (ksym - XK_KP_0) + XK_0; 173 } 174 if (IsFunctionKey(ksym) || 175 IsKeypadKey(ksym) || 176 IsMiscFunctionKey(ksym) || 177 IsPFKey(ksym) || 178 IsPrivateKeypadKey(ksym)) 179 continue; 180 switch (ksym) { 181 case XK_Return: 182 passwd[len] = '\0'; 183 errno = 0; 184 if (!(inputhash = crypt(passwd, hash))) 185 fprintf(stderr, "slock: crypt: %s\n", strerror(errno)); 186 else 187 running = !!strcmp(inputhash, hash); 188 if (running) { 189 if (xbell == 1) 190 XBell(dpy, 100); 191 failure = 1; 192 } 193 explicit_bzero(&passwd, sizeof(passwd)); 194 len = 0; 195 break; 196 case XK_Escape: 197 explicit_bzero(&passwd, sizeof(passwd)); 198 len = 0; 199 break; 200 case XK_BackSpace: 201 if (len) 202 passwd[--len] = '\0'; 203 break; 204 default: 205 if (num && !iscntrl((int)buf[0]) && 206 (len + num < sizeof(passwd))) { 207 memcpy(passwd + len, buf, num); 208 len += num; 209 } else if (buf[0] == '\025') { /* ctrl-u clears input */ 210 explicit_bzero(&passwd, sizeof(passwd)); 211 len = 0; 212 } 213 break; 214 } 215 color = len ? INPUT : ((failure || failonclear) ? FAILED : INIT); 216 if (running && oldc != color) { 217 for (screen = 0; screen < nscreens; screen++) { 218 if (locks[screen]->bgmap) 219 XSetWindowBackgroundPixmap(dpy, locks[screen]->win, locks[screen]->bgmap); 220 else 221 XSetWindowBackground(dpy, locks[screen]->win, locks[screen]->colors[0]); 222 XClearWindow(dpy, locks[screen]->win); 223 224 if (strlen(passwd) > 0) { 225 showimage(dpy, locks[screen]->win); 226 } 227 228 } 229 oldc = color; 230 } 231 } else if (rr->active && ev.type == rr->evbase + RRScreenChangeNotify) { 232 rre = (XRRScreenChangeNotifyEvent*)&ev; 233 for (screen = 0; screen < nscreens; screen++) { 234 if (locks[screen]->win == rre->window) { 235 if (rre->rotation == RR_Rotate_90 || 236 rre->rotation == RR_Rotate_270) 237 XResizeWindow(dpy, locks[screen]->win, 238 rre->height, rre->width); 239 else 240 XResizeWindow(dpy, locks[screen]->win, 241 rre->width, rre->height); 242 XClearWindow(dpy, locks[screen]->win); 243 break; 244 } 245 } 246 } else { 247 for (screen = 0; screen < nscreens; screen++) 248 XRaiseWindow(dpy, locks[screen]->win); 249 } 250 } 251 } 252 253 static struct lock * 254 lockscreen(Display *dpy, struct xrandr *rr, int screen) 255 { 256 char curs[] = {0, 0, 0, 0, 0, 0, 0, 0}; 257 int i, ptgrab, kbgrab; 258 struct lock *lock; 259 XColor color, dummy; 260 XSetWindowAttributes wa; 261 Cursor invisible; 262 263 if (dpy == NULL || screen < 0 || !(lock = malloc(sizeof(struct lock)))) 264 return NULL; 265 266 lock->screen = screen; 267 lock->root = RootWindow(dpy, lock->screen); 268 269 if(image) 270 { 271 lock->bgmap = XCreatePixmap(dpy, lock->root, DisplayWidth(dpy, lock->screen), DisplayHeight(dpy, lock->screen), DefaultDepth(dpy, lock->screen)); 272 imlib_context_set_display(dpy); 273 imlib_context_set_visual(DefaultVisual(dpy, lock->screen)); 274 imlib_context_set_colormap(DefaultColormap(dpy, lock->screen)); 275 imlib_context_set_drawable(lock->bgmap); 276 imlib_render_image_on_drawable(0, 0); 277 imlib_free_image(); 278 } 279 280 for (i = 0; i < NUMCOLS; i++) { 281 XAllocNamedColor(dpy, DefaultColormap(dpy, lock->screen), 282 colorname[i], &color, &dummy); 283 lock->colors[i] = color.pixel; 284 } 285 286 /* init */ 287 wa.override_redirect = 1; 288 wa.background_pixel = lock->colors[INIT]; 289 lock->win = XCreateWindow(dpy, lock->root, 0, 0, 290 DisplayWidth(dpy, lock->screen), 291 DisplayHeight(dpy, lock->screen), 292 0, DefaultDepth(dpy, lock->screen), 293 CopyFromParent, 294 DefaultVisual(dpy, lock->screen), 295 CWOverrideRedirect | CWBackPixel, &wa); 296 if(lock->bgmap) 297 XSetWindowBackgroundPixmap(dpy, lock->win, lock->bgmap); 298 lock->pmap = XCreateBitmapFromData(dpy, lock->win, curs, 8, 8); 299 invisible = XCreatePixmapCursor(dpy, lock->pmap, lock->pmap, 300 &color, &color, 0, 0); 301 XDefineCursor(dpy, lock->win, invisible); 302 303 /* Try to grab mouse pointer *and* keyboard for 600ms, else fail the lock */ 304 for (i = 0, ptgrab = kbgrab = -1; i < 6; i++) { 305 if (ptgrab != GrabSuccess) { 306 ptgrab = XGrabPointer(dpy, lock->root, False, 307 ButtonPressMask | ButtonReleaseMask | 308 PointerMotionMask, GrabModeAsync, 309 GrabModeAsync, None, invisible, CurrentTime); 310 } 311 if (kbgrab != GrabSuccess) { 312 kbgrab = XGrabKeyboard(dpy, lock->root, True, 313 GrabModeAsync, GrabModeAsync, CurrentTime); 314 } 315 316 /* input is grabbed: we can lock the screen */ 317 if (ptgrab == GrabSuccess && kbgrab == GrabSuccess) { 318 XMapRaised(dpy, lock->win); 319 if (rr->active) 320 XRRSelectInput(dpy, lock->win, RRScreenChangeNotifyMask); 321 322 XSelectInput(dpy, lock->root, SubstructureNotifyMask); 323 return lock; 324 } 325 326 /* retry on AlreadyGrabbed but fail on other errors */ 327 if ((ptgrab != AlreadyGrabbed && ptgrab != GrabSuccess) || 328 (kbgrab != AlreadyGrabbed && kbgrab != GrabSuccess)) 329 break; 330 331 usleep(100000); 332 } 333 334 /* we couldn't grab all input: fail out */ 335 if (ptgrab != GrabSuccess) 336 fprintf(stderr, "slock: unable to grab mouse pointer for screen %d\n", 337 screen); 338 if (kbgrab != GrabSuccess) 339 fprintf(stderr, "slock: unable to grab keyboard for screen %d\n", 340 screen); 341 return NULL; 342 } 343 344 static void 345 usage(void) 346 { 347 die("usage: slock [-v] [cmd [arg ...]]\n"); 348 } 349 350 int 351 main(int argc, char **argv) { 352 struct xrandr rr; 353 struct lock **locks; 354 struct passwd *pwd; 355 struct group *grp; 356 uid_t duid; 357 gid_t dgid; 358 const char *hash; 359 Display *dpy; 360 int s, nlocks, nscreens; 361 362 ARGBEGIN { 363 case 'v': 364 puts("slock-"VERSION); 365 return 0; 366 default: 367 usage(); 368 } ARGEND 369 370 /* validate drop-user and -group */ 371 errno = 0; 372 if (!(pwd = getpwnam(user))) 373 die("slock: getpwnam %s: %s\n", user, 374 errno ? strerror(errno) : "user entry not found"); 375 duid = pwd->pw_uid; 376 errno = 0; 377 if (!(grp = getgrnam(group))) 378 die("slock: getgrnam %s: %s\n", group, 379 errno ? strerror(errno) : "group entry not found"); 380 dgid = grp->gr_gid; 381 382 #ifdef __linux__ 383 dontkillme(); 384 #endif 385 386 hash = gethash(); 387 errno = 0; 388 if (!crypt("", hash)) 389 die("slock: crypt: %s\n", strerror(errno)); 390 391 if (!(dpy = XOpenDisplay(NULL))) 392 die("slock: cannot open display\n"); 393 394 /* drop privileges */ 395 if (setgroups(0, NULL) < 0) 396 die("slock: setgroups: %s\n", strerror(errno)); 397 if (setgid(dgid) < 0) 398 die("slock: setgid: %s\n", strerror(errno)); 399 if (setuid(duid) < 0) 400 die("slock: setuid: %s\n", strerror(errno)); 401 402 /* Load picture */ 403 Imlib_Image buffer = imlib_load_image(background_image); 404 imlib_context_set_image(buffer); 405 int background_image_width = imlib_image_get_width(); 406 int background_image_height = imlib_image_get_height(); 407 408 /* Create an image to be rendered */ 409 Screen *scr = ScreenOfDisplay(dpy, DefaultScreen(dpy)); 410 image = imlib_create_image(scr->width, scr->height); 411 imlib_context_set_image(image); 412 413 /* Fill the image for every X monitor */ 414 XRRMonitorInfo *monitors; 415 int number_of_monitors; 416 monitors = XRRGetMonitors(dpy, RootWindow(dpy, XScreenNumberOfScreen(scr)), True, &number_of_monitors); 417 418 int i; 419 for (i = 0; i < number_of_monitors; i++) { 420 imlib_blend_image_onto_image(buffer, 0, 0, 0, background_image_width, background_image_height, monitors[i].x, monitors[i].y, monitors[i].width, monitors[i].height); 421 } 422 423 /* Clean up */ 424 imlib_context_set_image(buffer); 425 imlib_free_image(); 426 imlib_context_set_image(image); 427 428 /* check for Xrandr support */ 429 rr.active = XRRQueryExtension(dpy, &rr.evbase, &rr.errbase); 430 431 /* get number of screens in display "dpy" and blank them */ 432 nscreens = ScreenCount(dpy); 433 if (!(locks = calloc(nscreens, sizeof(struct lock *)))) 434 die("slock: out of memory\n"); 435 for (nlocks = 0, s = 0; s < nscreens; s++) { 436 if ((locks[s] = lockscreen(dpy, &rr, s)) != NULL) 437 nlocks++; 438 else 439 break; 440 } 441 XSync(dpy, 0); 442 443 /* did we manage to lock everything? */ 444 if (nlocks != nscreens) 445 return 1; 446 447 /* run post-lock command */ 448 if (argc > 0) { 449 pid_t pid; 450 extern char **environ; 451 int err = posix_spawnp(&pid, argv[0], NULL, NULL, argv, environ); 452 if (err) { 453 die("slock: failed to execute post-lock command: %s: %s\n", 454 argv[0], strerror(err)); 455 } 456 } 457 458 /* everything is now blank. Wait for the correct password */ 459 readpw(dpy, &rr, locks, nscreens, hash); 460 461 return 0; 462 }