I am trying to write a demo PAM module in C that uses Embedding Python in C concept to run a script written in python (2.7) inside the pam_sm_authenticate () function, which is written in the C file (pam_auth.c).
This is a python script: test.py
import math
import numpy
def test_func():
a = "test"
return a
The path to test.py is / usr / lib / Python2.7 /, so I can easily import it.
This is the C file:
#define PAM_SM_AUTH
#define PAM_SM_ACCOUNT
#define PAM_SM_SESSION
#include <security/pam_modules.h>
#include <security/_pam_macros.h>
#include <security/pam_appl.h>
#include<python2.7/Python.h>
#include<stdio.h>
#include<stdlib.h>
#include<string.h>
#define NOBODY "nobody"
PAM_EXTERN int pam_sm_authenticate(
pam_handle_t* pamh, int flags, int argc, const char** argv)
{
const char *user;
int retval;
user = NULL;
retval = pam_get_user(pamh, &user, NULL);
if(retval != PAM_SUCCESS)
{
fprintf(stderr, "%s", pam_strerror(pamh, retval));
}
fprintf(stdout, "retval= %d user=%s\n", retval,user);
if (user == NULL || *user =='\0')
pam_set_item(pamh, PAM_USER, (const char*)NOBODY);
PyObject *pName, *pModule, *pDict, *pFunc, *pValue, *pResult;
Py_Initialize();
pName = PyString_FromString((char*)"test");
pModule = PyImport_Import(pName);
PyErr_Print();
pDict = PyModule_GetDict(pModule);
pFunc = PyDict_GetItemString(pDict, (char*)"test_func");
if (PyCallable_Check(pFunc))
{
pValue=NULL;
PyErr_Print();
pResult=PyObject_CallObject(pFunc,pValue);
PyErr_Print();
}else
{
PyErr_Print();
}
printf("Result is %s\n",PyString_AsString(pResult));
Py_DECREF(pModule);
Py_DECREF(pName);
Py_Finalize();
return PAM_SUCCESS;
}
PAM_EXTERN int pam_sm_setcred(
pam_handle_t* pamh, int flags, int argc, const char** argv)
{
return PAM_SUCCESS;
}
PAM_EXTERN int pam_sm_acct_mgmt(
pam_handle_t* pamh, int flags, int argc, const char** argv)
{
return PAM_SUCCESS;
}
PAM_EXTERN int pam_sm_open_session(
pam_handle_t* pamh, int flags, int argc, const char** argv)
{
return PAM_SUCCESS;
}
PAM_EXTERN int pam_sm_close_session(
pam_handle_t* pamh, int flags, int argc, const char** argv)
{
return PAM_SUCCESS;
}
PAM_EXTERN int pam_sm_chauthtok(
pam_handle_t* pamh, int flags, int argc, const char** argv)
{
return PAM_SUCCESS;
}
The C file is just a modification of pam_permit.c. The C file was compiled using gcc (gcc -shared -o pam_auth.so -fPIC pam_auth.c -I / usr / include / python2.7 -lpython2.7) to get the .so file (pam_auth.so) and placed inside the / lib / security /
I changed the PAM configuration of the sudo file in the /etc/pam.d file as follows:
auth required pam_env.so readenv=1 user_readenv=0
auth required pam_env.so readenv=1 envfile=/etc/default/locale user_readenv=0
auth required pam_auth.so
@include common-account
@include common-session-noninteractive
"auth required pam_auth.so" , "sudo". ( exo sudo nautilus)
:
C "pModule = PyImport_Import (pName);" , PyErr_Print() :
stitches@Andromida:~$ sudo nautilus
retval= 0 user=stitches
Traceback (most recent call last):
File "/usr/lib/python2.7/subho_auth.py", line 8, in <module>
import numpy
File "/usr/lib/python2.7/dist-packages/numpy/__init__.py", line 153, in <module>
from . import add_newdocs
File "/usr/lib/python2.7/dist-packages/numpy/add_newdocs.py", line 13, in <module>
from numpy.lib import add_newdoc
File "/usr/lib/python2.7/dist-packages/numpy/lib/__init__.py", line 8, in <module>
from .type_check import *
File "/usr/lib/python2.7/dist-packages/numpy/lib/type_check.py", line 11, in <module>
import numpy.core.numeric as _nx
File "/usr/lib/python2.7/dist-packages/numpy/core/__init__.py", line 6, in <module>
from . import multiarray
ImportError: /usr/lib/python2.7/dist-packages/numpy/core/multiarray.so: undefined symbol: PyExc_SystemError
Segmentation fault (core dumped)
, numpy, test.py. ImportError PyExc_SystemError?
script , :
#include <Python.h>
#include <stdlib.h>
#include <string.h>
int main()
{
PyObject *pName, *pModule, *pDict, *pFunc, *pValue, *pResult;
Py_Initialize();
pName = PyString_FromString((char*)"test");
pModule = PyImport_Import(pName);
PyErr_Print();
pDict = PyModule_GetDict(pModule);
pFunc = PyDict_GetItemString(pDict, (char*)"test_func");
if (PyCallable_Check(pFunc))
{
pValue=NULL;
PyErr_Print();
pResult=PyObject_CallObject(pFunc,pValue);
PyErr_Print();
}else
{
PyErr_Print();
}
printf("Result is %s\n",PyString_AsString(pResult));
Py_DECREF(pModule);
Py_DECREF(pName);
Py_Finalize();
return 0;
}
python, PAM ( .so)?
PS: numpy . , python script, script , . , . SciPY.
PPS: Numpy Scipy python /usr/lib/python 2.7/dist-packages/. ubuntu 14.04.
, !!!!