Add gnubby authentication to remoting host

remoting/tools/me2me_virtual_host.py

 #!/usr/bin/python
 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Virtual Me2Me implementation.  This script runs and manages the processes
 # required for a Virtual Me2Me desktop, which are: X server, X desktop
 # session, and Host process.
 # This script is intended to run continuously as a background daemon
 # process, running under an ordinary (non-root) user account.
@@ skipping 186 matching lines @@
 
   def __init__(self, sizes):
     self.x_proc = None
     self.session_proc = None
     self.host_proc = None
     self.child_env = None
     self.sizes = sizes
     self.pulseaudio_pipe = None
     self.server_supports_exact_resize = False
     self.host_ready = False
+    self.ssh_auth_sockname = None
     g_desktops.append(self)
 
   @staticmethod
   def get_unused_display_number():
     """Return a candidate display number for which there is currently no
     X Server lock file"""
     display = FIRST_X_DISPLAY_NUMBER
     while os.path.exists(X_LOCK_FILE_TEMPLATE % display):
       display += 1
     return display
@@ skipping 80 matching lines @@
       return False
 
     self.child_env["PULSE_CONFIG_PATH"] = pulse_path
     self.child_env["PULSE_RUNTIME_PATH"] = pulse_path
     self.child_env["PULSE_STATE_PATH"] = pulse_path
     self.child_env["PULSE_SINK"] = sink_name
     self.pulseaudio_pipe = pipe_name
 
     return True
 
+  def _setup_gnubby(self):
+    self.ssh_auth_sockname = ("/tmp/chromoting.%s.ssh_auth_sock" %
+                              os.environ["USER"])
+
   def _launch_x_server(self, extra_x_args):
     x_auth_file = os.path.expanduser("~/.Xauthority")
     self.child_env["XAUTHORITY"] = x_auth_file
     devnull = open(os.devnull, "rw")
     display = self.get_unused_display_number()
 
     # Run "xauth add" with |child_env| so that it modifies the same XAUTHORITY
     # file which will be used for the X session.
     ret_code = subprocess.call("xauth add :%d . `mcookie`" % display,
                                env=self.child_env, shell=True)
@@ skipping 37 matching lines @@
 
     self.child_env["DISPLAY"] = ":%d" % display
     self.child_env["CHROME_REMOTE_DESKTOP_SESSION"] = "1"
 
     # Use a separate profile for any instances of Chrome that are started in
     # the virtual session. Chrome doesn't support sharing a profile between
     # multiple DISPLAYs, but Chrome Sync allows for a reasonable compromise.
     chrome_profile = os.path.join(CONFIG_DIR, "chrome-profile")
     self.child_env["CHROME_USER_DATA_DIR"] = chrome_profile
 
+    # Set SSH_AUTH_SOCK to the file name to listen on.
+    if self.ssh_auth_sockname:
+      self.child_env["SSH_AUTH_SOCK"] = self.ssh_auth_sockname
+
     # Wait for X to be active.
     for _test in range(5):
       proc = subprocess.Popen("xdpyinfo", env=self.child_env, stdout=devnull)
       _pid, retcode = os.waitpid(proc.pid, 0)
       if retcode == 0:
         break
       time.sleep(0.5)
     if retcode != 0:
       raise Exception("Could not connect to Xvfb.")
     else:
@@ skipping 52 matching lines @@
     self.session_proc = subprocess.Popen(xsession_command,
                                          stdin=open(os.devnull, "r"),
                                          cwd=HOME_DIR,
                                          env=self.child_env)
     if not self.session_proc.pid:
       raise Exception("Could not start X session")
 
   def launch_session(self, x_args):
     self._init_child_env()
     self._setup_pulseaudio()
+    self._setup_gnubby()
     self._launch_x_server(x_args)
     self._launch_x_session()
 
   def launch_host(self, host_config):
     # Start remoting host
     args = [locate_executable(HOST_BINARY_NAME), "--host-config=-"]
     if self.pulseaudio_pipe:
       args.append("--audio-pipe-name=%s" % self.pulseaudio_pipe)
     if self.server_supports_exact_resize:
       args.append("--server-supports-exact-resize")
+    if self.ssh_auth_sockname:
+      args.append("--ssh-auth-sockname=%s" % self.ssh_auth_sockname)
 
     # Have the host process use SIGUSR1 to signal a successful start.
     def sigusr1_handler(signum, frame):
       _ = signum, frame
       logging.info("Host ready to receive connections.")
       self.host_ready = True
       if (ParentProcessLogger.instance() and
           False not in [desktop.host_ready for desktop in g_desktops]):
         ParentProcessLogger.instance().release_parent()
 
@@ skipping 733 matching lines @@
         else:
           logging.info("Host exited with status %s." % os.WEXITSTATUS(status))
       elif os.WIFSIGNALED(status):
         logging.info("Host terminated by signal %s." % os.WTERMSIG(status))
 
 
 if __name__ == "__main__":
   logging.basicConfig(level=logging.DEBUG,
                       format="%(asctime)s:%(levelname)s:%(message)s")
   sys.exit(main())