1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
# IVLE
# Copyright (C) 2007-2008 The University of Melbourne
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
# App: consoleservice
# Author: Matt Giuca, Tom Conway
# Date: 14/1/2008
import os
import pwd
import httplib
import urllib
import cjson
from common import (util, studpath)
import conf
trampoline_path = os.path.join(conf.ivle_install_dir, "bin/trampoline")
python_path = "/usr/bin/python" # Within jail
console_dir = "/opt/ivle/console" # Within jail
console_path = "/opt/ivle/console/python-console" # Within jail
def handle(req):
"""Handler for the Console Service AJAX backend application."""
if len(req.path) > 0 and req.path[-1] == os.sep:
path = req.path[:-1]
else:
path = req.path
# The path determines which "command" we are receiving
if req.path == "start":
handle_start(req)
elif req.path == "chat":
handle_chat(req)
else:
req.throw_error(req.HTTP_BAD_REQUEST)
def handle_start(req):
jail_path = os.path.join(conf.jail_base, req.username)
working_dir = os.path.join("/home", req.username) # Within jail
# Get the UID of the logged-in user
try:
(_,_,uid,_,_,_,_) = pwd.getpwnam(req.username)
except KeyError:
# The user does not exist. This should have already failed the
# previous test.
req.throw_error(req.HTTP_INTERNAL_SERVER_ERROR)
# Set request attributes
req.content_type = "text/plain"
req.write_html_head_foot = False
# TODO: Figure out the host name the console server is running on.
host = req.hostname
# Find an available port on the server.
# TODO
port = 1025
# Create magic
# TODO
magic = "xyzzy"
# Start the console server (port, magic)
# trampoline usage: tramp uid jail_dir working_dir script_path args
# console usage: python-console port magic
# TODO: Cleanup (don't use os.system)
# TODO: Pass working_dir as argument, let console cd to it
# Use "&" to run as a background process
cmd = ' '.join([trampoline_path, str(uid), jail_path, console_dir,
python_path, console_path, str(port), str(magic), "&"])
#req.write(cmd + '\n')
os.system(cmd)
# Return port, magic
req.write(cjson.encode({"host": host, "port": port, "magic": magic}))
def handle_chat(req):
# The request *should* have the following four fields:
# host, port: Host and port where the console server apparently lives
# digest, text: Fields to pass along to the console server
# It simply acts as a proxy to the console server
if req.method != "POST":
req.throw_error(req.HTTP_BAD_REQUEST)
fields = req.get_fieldstorage()
try:
host = fields.getfirst("host").value
port = fields.getfirst("port").value
digest = fields.getfirst("digest").value
text = fields.getfirst("text").value
except AttributeError:
# Any of the getfirsts returned None
req.throw_error(req.HTTP_BAD_REQUEST)
# Open an HTTP connection
url = ("http://" + urllib.quote(host) + ":" + urllib.quote(port)
+ "/chat");
body = ("digest=" + urllib.quote(digest)
+ "&text=" + urllib.quote(text) + '\n\n')
headers = {"Content-Type": "application/x-www-form-urlencoded"}
try:
conn = httplib.HTTPConnection(host, port)
conn.request("POST", url, body, headers)
response = conn.getresponse()
req.status = response.status
# NOTE: Ignoring arbitrary headers returned by the server
# Probably not necessary to proxy them
req.content_type = response.getheader("Content-Type", "text/plain")
req.write(response.read())
conn.close()
except:
req.throw_error(req.HTTP_BAD_REQUEST)
|