1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
# IVLE
# Copyright (C) 2007-2008 The University of Melbourne
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
# App: consoleservice
# Author: Matt Giuca, Tom Conway
# Date: 14/1/2008
import os
import pwd
import httplib
import urllib
import cjson
from common import (util, studpath)
import conf
trampoline_path = os.path.join(conf.ivle_install_dir, "bin/trampoline")
python_path = "/usr/bin/python" # Within jail
console_dir = "/opt/ivle/console" # Within jail
console_path = "/opt/ivle/console/python-console" # Within jail
def handle(req):
"""Handler for the Console Service AJAX backend application."""
if len(req.path) > 0 and req.path[-1] == os.sep:
path = req.path[:-1]
else:
path = req.path
# The path determines which "command" we are receiving
if req.path == "start":
handle_start(req)
elif req.path == "chat":
handle_chat(req)
else:
req.throw_error(req.HTTP_BAD_REQUEST)
def handle_start(req):
jail_path = os.path.join(conf.jail_base, req.username)
working_dir = os.path.join("/home", req.username) # Within jail
# Get the UID of the logged-in user
try:
(_,_,uid,_,_,_,_) = pwd.getpwnam(req.username)
except KeyError:
# The user does not exist. This should have already failed the
# previous test.
req.throw_error(req.HTTP_INTERNAL_SERVER_ERROR)
# Set request attributes
req.content_type = "text/plain"
req.write_html_head_foot = False
# TODO: Figure out the host name the console server is running on.
host = req.hostname
# Find an available port on the server.
# TODO
port = 1025
# Create magic
# TODO
magic = "xyzzy"
# Start the console server (port, magic)
# trampoline usage: tramp uid jail_dir working_dir script_path args
# console usage: python-console port magic
# TODO: Cleanup (don't use os.system)
# TODO: Pass working_dir as argument, let console cd to it
# Use "&" to run as a background process
cmd = ' '.join([trampoline_path, str(uid), jail_path, console_dir,
python_path, console_path, str(port), str(magic), "&"])
#req.write(cmd + '\n')
os.system(cmd)
# Return port, magic
req.write(cjson.encode({"host": host, "port": port, "magic": magic}))
def handle_chat(req):
# The request *should* have the following four fields:
# host, port: Host and port where the console server apparently lives
# digest, text: Fields to pass along to the console server
# It simply acts as a proxy to the console server
if req.method != "POST":
req.throw_error(req.HTTP_BAD_REQUEST)
fields = req.get_fieldstorage()
try:
host = fields.getfirst("host").value
port = fields.getfirst("port").value
digest = fields.getfirst("digest").value
except AttributeError:
# Any of the getfirsts returned None
req.throw_error(req.HTTP_BAD_REQUEST)
# If text is None, it was probably just an empty line
try:
text = fields.getfirst("text").value
except AttributeError:
text = ""
# Open an HTTP connection
url = ("http://" + urllib.quote(host) + ":" + urllib.quote(port)
+ "/chat");
body = ("digest=" + urllib.quote(digest)
+ "&text=" + urllib.quote(text))
headers = {"Content-Type": "application/x-www-form-urlencoded"}
try:
conn = httplib.HTTPConnection(host, port)
except:
req.throw_error(req.HTTP_BAD_REQUEST)
conn.request("POST", url, body, headers)
response = conn.getresponse()
req.status = response.status
# NOTE: Ignoring arbitrary headers returned by the server
# Probably not necessary to proxy them
req.content_type = response.getheader("Content-Type", "text/plain")
req.write(response.read())
conn.close()
|