The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]

[Phrack] Hardware interfacing for the Linux (security linux hardware)


<< Предыдущая ИНДЕКС Поиск в статьях src Установить закладку Перейти на закладку Следующая >>
Ключевые слова: security, linux, hardware,  (найти похожие документы)
Subject: [Phrack] Hardware interfacing for the Linux .oO Phrack 50 Oo. Volume Seven, Issue Fifty 11 of 16 H A R D W A R E I N T E R F A C I N G F O R T H E L I N U X O P E R A T I N G S Y S T E M By The Professor <[email protected]> Computer control of real world devices has been an out of reach fantasy for most people. In the past, it has rarely been seen outside the R&D labs of hardware design companies, universities, and a few dedicated hobbyist's basements. It takes not only a skilled programmer, but also a person that can design and build small circuits. In this article, I will show you how to use a standard IBM/PC parallel printer port to control devices, such as bells, relays, and lights. I will also show you how to take input from devices such as DTMF decoder IC's, analog to digital converters, and switches. To access the I/O port, the compiled program must be either executed by root or be suid root. This could be a potential system security hazard so be warned. In order to grant permissions to the port, one must use the function ioperm(). Syntax (also see the man page): #include <unistd.h> ioperm(BASE_ADDRESS,NUM,PERMISSION_BIT); The first parameter is the port number to set permissions of. The second parameter is the number of consecutive ports to set permissions of. (i.e. if num==3, BASE_ADDRESS, BASE_ADDRESS+1, and BASE_ADDRESS+2 are set). The third parameter is 1 to give the program permissions or 0 to remove them. Sending and receiving data via the port is done with the commands, inb() and outb(). Syntax: #include <asm/io.h> value=inb(address); (address can be BASE_ADDRESS+1 or BASE_ADDRESS+2) outb(value,BASE_ADDRESS); O U T P U T Making individual output data lines of a parallel printer port "turn on" is as simple as selecting them with a corresponding binary value. Pin 2 (D0) is the least significant bit and pin 9 (D7) is the most significant bit. If you wanted bits 0, 2, 3, 4, and 6 to "turn on" or go high (+5v) while leaving 1, 5, and 7 low (ground) you would first convert the binary value to decimal and then send that value to the port. (actually, there is no reason why you can't just send the binary value to the port) D7 D6 D5 D4 D3 D2 D1 D0 0 1 0 1 1 1 0 1 == 1011101 == 93 outb(93,BASE_ADDRESS); If you want all lines low or "off", you send a 0. If you want them all high or "on", you send 255. Controlling the status of the individual bits of the I/O port is a simple way of controlling solid state relays, optocouplers, LED's and so on. You could very easily and very safely control a high wattage lighting system in this manner. (assuming you are using solid state relays with back EMF protection). This could/would be good for closet cultivators experimenting with the horticulture of cannabis sativa or any other plant. Have you ever wanted things such as lights and irrigation systems to come on or turn off at certain times? That's what your crontab file is for! The possibilities are endless. I N P U T Standard IBM/PC parallel printer ports have nine control lines capable of inputting real world data. Each printer port has three address locations. The base address is used to transmit data. The next address can input five data bits, using pins 11, 10, 12, 13, and 15 (referred to as BASE_ADDRESS+1 I7 through I3), and the third port address can input or output a nibble of information using pins 17, 16, 14, and 1 (referred to as BASE_ADDRESS+2 I3 through I0). The third port address pins must be set HIGH so we can read from BASE_ADDRESS+2. I'll show you how in the example. The inputs are all active LOW, meaning your device must short them to ground to create a signal (switch, analog to digital converter, DTMF decoder, etc). This is not a problem, as most devices already do this. The ones that don't, just use an inverter. The simplest method of inputting eight data bits is to read the high nibble from the (BASE_ADDRESS+1) and the low nibble from the (BASE_ADDRESS+2). These two nibbles can be logically ORed together to form a data byte. Some of the data bits are hard-wired on the printer card for active HIGH operation. To get around this, I use four sections of a 7404 hex inverter to re-invert the inverted data lines. I7 I6 I5 I4 I3 I2 I1 I0 BASE_ADDRESS+1 INPUT LINES 11 10 12 13 15 -- -- -- PIN NUMBER (-- = NOT USED) I7 I6 I5 I4 I3 I2 I1 I0 BASE_ADDRESS+2 INPUT LINES -- -- -- -- 17 16 14 1 PIN NUMBER (-- = NOT USED) Notice both I3's of both ports are used. Pin 15 (ERROR) is the 9th input of a standard IBM/PC parallel printer port. No offense to this pin, but it's a pain in the ass to use and I only use it when I *have* to. Through software, I disregard it. Check out this example: /* next line sets all open collector output pins HIGH so we can read from BASE_ADDRESS+2) */ outb(inb(BASE_ADDRESS+2) || 15 , BASE_ADDRESS+2); High_Nibble = inb(BASE_ADDRESS+1); Low_Nibble = inb(BASE_ADDRESS+2); High_Nibble = High_Nibble & 0xF0; /* 0xF0 = 11110000 */ Low_Nibble = Low_Nibble & 0x0F; /* 0x0F = 00001111 */ Data_Byte = High_Nibble | Low_Nibble; Pretty simple, eh? This means you can use I7 through I4 in BASE_ADDRESS+1 and I3 through I0 in BASE_ADDRESS+2 to give you 8 bits of data input. All of the data lines must use a pull up resistor. This includes the hard-wired active HIGH pins *after* the 7404 inverter. This lets any device produce both a high and low logic signal. Pull up resistors simply pull all the data lines high so software sees all 0's unless you short a pin to ground. (Remember these are all active LOW inputs -ground means 1) Pins 14, 17, 1, and 11 are all hard-wired for active HIGH operation. These are the pins that are signaled through the 7404 inverter IC (which makes them just like the rest of the pins for ease of use). NOTES: *** When compiling programs using these routines, use the -O2 optimize flag, or else you'll have some headaches. Port 888 is the 1st parallel printer port (LPT1) I am not responsible for your mistakes. If you plug 120vAC directly into your parallel port, I guarantee you'll destroy your computer. Use optically isolated solid state relays to switch high current. For any more info regarding I/O port programming, schematics to some fun projects, or to send a complaint, e-mail [email protected] If you don't like my code, keep in mind that I design hardware for a living. I am not a programmer, nor have I ever claimed to be one. My programs are elegant on occasion, but mostly just get the job done without actually doing it the best way. If you want schematics showing how to hook up the 7404 to the port, mail me. I have some interesting things there regarding circuit design. One of my favorites is a software package called "PADS" Personal Automated Design Software. It is a CAD package for schematics and PCBoard Design. The copy on my web page is a public domain demo. This demo is fully functional in every way. It only limits you to something like 20 IC's, 300 tie points, etc. I usually do not go over these limits. Maybe this article will replace the IO-Port [mini] How-To 'cause that is only about 24 lines of text. E X A M P L E S A N D D I A G R A M /* simple program to send data via parallel port */ #include <unistd.h> #include <asm/io.h> #define BASE_ADDRESS 888 /* 1st Parallel Port */ main() { int port_data=0; int Data_Byte=255; ioperm(BASE_ADDRESS,3,1); /* set permission on port */ outb(Data_Byte,BASE_ADDRESS); printf("Sent 255 to port %d to turn all pins HIGH\n",BASE_ADDRESS); ioperm(BASE_ADDRESS,3,0); /* take away port permission */ return(0); } /* end of simple program to send data via parallel port */ /****************************************************************************/ /* simple program to take in 8 bit input via parallel port */ #include <unistd.h> #include <asm/io.h> #define BASE_ADDRESS 888 /* 1st Parallel Port */ main() { int port_data=0; int High_Nibble, Low_Nibble, Data_Byte; ioperm(BASE_ADDRESS,3,1); /* set permission on port */ outb(inb(BASE_ADDRESS+2) || 15 , BASE_ADDRESS+2); High_Nibble = inb(BASE_ADDRESS+1); Low_Nibble = inb(BASE_ADDRESS+2); High_Nibble = High_Nibble & 0xF0; /* 0xF0 = 11110000 */ Low_Nibble = Low_Nibble & 0x0F; /* 0x0F = 00001111 */ Data_Byte = High_Nibble | Low_Nibble; printf("LN=%d HN=%d DB=%d\n",Low_Nibble,High_Nibble,Data_Byte); ioperm(BASE_ADDRESS,3,0); /* take away port permission */ return(0); } /* end of simple program to take in 8 bit input via parallel port */ /****************************************************************************/ I I I I I 0 6 7 5 4 P A _ P S E S T R E R _ B | L O A U E E B D D D D D D D D C S N C E 0 1 2 3 4 5 6 7 K Y D T _____________________________________ 1 (o o o o o o o o o o o o o) 13 14 \ o o o o o o o o o o o o/ 25 `---------------------------------' _ _ | PINS 18 | A E I S |<----THROUGH 25---->| U R N E | GROUND | T R I L O O T | | R I F N E P E U D * T ** ERROR LINE IS NOT USED AS I3 * (DISREGARDED VIA SOFTWARE) I I I I 1 3 2 3 /******************** End of my little text file / how-to *******************/ EOF

<< Предыдущая ИНДЕКС Поиск в статьях src Установить закладку Перейти на закладку Следующая >>

 Добавить комментарий
Имя:
E-Mail:
Заголовок:
Текст:




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру