(root)/mandos/release
» Revision
237.2.1
(compared to revision 237.25.5)
: plugins.d/mandos-client.c
To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 237.2.1
- compare with another revision
- download diff
- download tarball
- view history from revision 237.2.1
- Committer: Teddy Hogeborn
- Date: 2008-12-10 01:26:02 UTC
- mfrom: (237.1.2 mandos)
- mto: (24.1.114 mandos) (237.4.2 mandos-pipe-ipc) (299.1.1 release) (300.1.1 release) (301.1.1 release)
- mto: This revision was merged to the branch mainline in revision 238.
- Revision ID: teddy@fukt.bsnet.se-20081210012602-vhz3h75xkj24t340
First version of a somewhat complete D-Bus server interface. Also
change user/group name to "_mandos".
* debian/mandos.postinst: Rename old "mandos" user and group to
"_mandos"; create "_mandos" user and group
if none exist.
* debian/mandos-client.postinst: - '' -
* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
group name.
* mandos (_datetime_to_dbus_struct): New; was previously local.
(Client.started): Renamed to "last_started". All users changed.
(Client.started): New; boolean.
(Client.dbus_object_path): New.
(Client.check_command): Renamed to "checker_command". All users
changed.
(Client.__init__): Set and use "self.dbus_object_path". Set
"self.started".
(Client.start): Update "self.started". Emit "self.PropertyChanged"
signals for both "started" and "last_started".
(Client.stop): Update "self.started". Emit "self.PropertyChanged"
signal for "started".
(Client.checker_callback): Take additional "command" argument. All
callers changed. Emit
"self.PropertyChanged" signal.
(Client.bump_timeout): Emit "self.PropertyChanged" signal for
"last_checked_ok".
(Client.start_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.stop_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.still_valid): Bug fix: use "getattr(self, started, False)"
instead of "self.started" in case this client
object is so new that the "started" attribute
has not been created yet.
(Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
Client.GetCreated, Client.GetFingerprint, Client.GetHost,
Client.GetInterval, Client.GetName, Client.GetStarted,
Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
Removed; all callers changed.
(Client.CheckerCompleted): Add "condition" and "command" arguments.
All callers changed.
(Client.GetAllProperties, Client.PropertyChanged): New.
(Client.StillValid): Renamed to "IsStillValid".
(Client.StartChecker): Changed to its own function to avoid the
return value from "Client.start_checker()".
(Client.Stop): Changed to its own function to avoid the return value
from "Client.stop()".
(main): Try "_mandos" before "mandos" as user and group name.
Removed inner function "remove_from_clients". New inner
class "MandosServer".
change user/group name to "_mandos".
* debian/mandos.postinst: Rename old "mandos" user and group to
"_mandos"; create "_mandos" user and group
if none exist.
* debian/mandos-client.postinst: - '' -
* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
group name.
* mandos (_datetime_to_dbus_struct): New; was previously local.
(Client.started): Renamed to "last_started". All users changed.
(Client.started): New; boolean.
(Client.dbus_object_path): New.
(Client.check_command): Renamed to "checker_command". All users
changed.
(Client.__init__): Set and use "self.dbus_object_path". Set
"self.started".
(Client.start): Update "self.started". Emit "self.PropertyChanged"
signals for both "started" and "last_started".
(Client.stop): Update "self.started". Emit "self.PropertyChanged"
signal for "started".
(Client.checker_callback): Take additional "command" argument. All
callers changed. Emit
"self.PropertyChanged" signal.
(Client.bump_timeout): Emit "self.PropertyChanged" signal for
"last_checked_ok".
(Client.start_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.stop_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.still_valid): Bug fix: use "getattr(self, started, False)"
instead of "self.started" in case this client
object is so new that the "started" attribute
has not been created yet.
(Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
Client.GetCreated, Client.GetFingerprint, Client.GetHost,
Client.GetInterval, Client.GetName, Client.GetStarted,
Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
Removed; all callers changed.
(Client.CheckerCompleted): Add "condition" and "command" arguments.
All callers changed.
(Client.GetAllProperties, Client.PropertyChanged): New.
(Client.StillValid): Renamed to "IsStillValid".
(Client.StartChecker): Changed to its own function to avoid the
return value from "Client.start_checker()".
(Client.Stop): Changed to its own function to avoid the return value
from "Client.stop()".
(main): Try "_mandos" before "mandos" as user and group name.
Removed inner function "remove_from_clients". New inner
class "MandosServer".
- files added:
- debian/mandos-client.config
- files removed:
- DBUS-API
- debian/source
- debian/upstream
- network-hooks.d
- plugin-helpers
- files modified:
- .bzrignore
added
removed
plugins.d/mandos-client.c
1
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
* Mandos-client - get and decrypt data from a Mandos server
3
* Mandos client - get and decrypt data from a Mandos server
4
4
*
5
5
* This program is partly derived from an example program for an Avahi
6
6
* service browser, downloaded from
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2015 Teddy Hogeborn
13
* Copyright © 2008-2015 Björn Påhlsson
12
* Copyright © 2008 Teddy Hogeborn
13
* Copyright © 2008 Björn Påhlsson
14
14
*
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
26
26
* along with this program. If not, see
27
27
* <http://www.gnu.org/licenses/>.
28
28
*
29
* Contact the authors at <mandos@recompile.se>.
29
* Contact the authors at <mandos@fukt.bsnet.se>.
30
30
*/
31
31
32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
#ifndef _LARGEFILE_SOURCE
34
33
#define _LARGEFILE_SOURCE
35
#endif /* not _LARGEFILE_SOURCE */
36
#ifndef _FILE_OFFSET_BITS
37
34
#define _FILE_OFFSET_BITS 64
38
#endif /* not _FILE_OFFSET_BITS */
39
35
40
36
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
37
42
38
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
39
stdout, ferror() */
44
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
40
#include <stdint.h> /* uint16_t, uint32_t */
45
41
#include <stddef.h> /* NULL, size_t, ssize_t */
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
strtof(), abort() */
48
#include <stdbool.h> /* bool, false, true */
42
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
43
srand() */
44
#include <stdbool.h> /* bool, true */
49
45
#include <string.h> /* memset(), strcmp(), strlen(),
50
46
strerror(), asprintf(), strcpy() */
51
#include <sys/ioctl.h> /* ioctl */
47
#include <sys/ioctl.h> /* ioctl */
52
48
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
53
49
sockaddr_in6, PF_INET6,
54
SOCK_STREAM, uid_t, gid_t, open(),
55
opendir(), DIR */
56
#include <sys/stat.h> /* open(), S_ISREG */
50
SOCK_STREAM, INET6_ADDRSTRLEN,
51
uid_t, gid_t, open(), opendir(), DIR */
52
#include <sys/stat.h> /* open() */
57
53
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect(),
59
getnameinfo() */
60
#include <fcntl.h> /* open(), unlinkat() */
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
62
*/
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
64
strtoimax() */
65
#include <errno.h> /* perror(), errno,
66
program_invocation_short_name */
67
#include <time.h> /* nanosleep(), time(), sleep() */
54
struct in6_addr, inet_pton(),
55
connect() */
56
#include <fcntl.h> /* open() */
57
#include <dirent.h> /* opendir(), struct dirent, readdir() */
58
#include <inttypes.h> /* PRIu16 */
59
#include <assert.h> /* assert() */
60
#include <errno.h> /* perror(), errno */
61
#include <time.h> /* time() */
68
62
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
69
63
SIOCSIFFLAGS, if_indextoname(),
70
64
if_nametoindex(), IF_NAMESIZE */
71
#include <netinet/in.h> /* IN6_IS_ADDR_LINKLOCAL,
72
INET_ADDRSTRLEN, INET6_ADDRSTRLEN
73
*/
65
#include <netinet/in.h>
74
66
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
getuid(), getgid(), seteuid(),
76
setgid(), pause(), _exit(),
77
unlinkat() */
78
#include <arpa/inet.h> /* inet_pton(), htons() */
79
#include <iso646.h> /* not, or, and */
67
getuid(), getgid(), setuid(),
68
setgid() */
69
#include <arpa/inet.h> /* inet_pton(), htons */
70
#include <iso646.h> /* not, and */
80
71
#include <argp.h> /* struct argp_option, error_t, struct
81
72
argp_state, struct argp,
82
73
argp_parse(), ARGP_KEY_ARG,
83
74
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
84
#include <signal.h> /* sigemptyset(), sigaddset(),
85
sigaction(), SIGTERM, sig_atomic_t,
86
raise() */
87
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_UNAVAILABLE,
88
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
89
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
90
WEXITSTATUS(), WTERMSIG() */
91
#include <grp.h> /* setgroups() */
92
#include <argz.h> /* argz_add_sep(), argz_next(),
93
argz_delete(), argz_append(),
94
argz_stringify(), argz_add(),
95
argz_count() */
96
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
97
EAI_SYSTEM, gai_strerror() */
98
99
#ifdef __linux__
100
#include <sys/klog.h> /* klogctl() */
101
#endif /* __linux__ */
102
75
103
76
/* Avahi */
104
77
/* All Avahi types, constants and functions
117
90
gnutls_*
118
91
init_gnutls_session(),
119
92
GNUTLS_* */
120
#include <gnutls/openpgp.h>
121
/* gnutls_certificate_set_openpgp_key_file(),
122
GNUTLS_OPENPGP_FMT_BASE64 */
93
#include <gnutls/openpgp.h> /* gnutls_certificate_set_openpgp_key_file(),
94
GNUTLS_OPENPGP_FMT_BASE64 */
123
95
124
96
/* GPGME */
125
97
#include <gpgme.h> /* All GPGME types, constants and
133
105
#define PATHDIR "/conf/conf.d/mandos"
134
106
#define SECKEY "seckey.txt"
135
107
#define PUBKEY "pubkey.txt"
136
#define HOOKDIR "/lib/mandos/network-hooks.d"
137
108
138
109
bool debug = false;
139
110
static const char mandos_protocol_version[] = "1";
140
111
const char *argp_program_version = "mandos-client " VERSION;
141
const char *argp_program_bug_address = "<mandos@recompile.se>";
142
static const char sys_class_net[] = "/sys/class/net";
143
char *connect_to = NULL;
144
const char *hookdir = HOOKDIR;
145
int hookdir_fd = -1;
146
uid_t uid = 65534;
147
gid_t gid = 65534;
148
149
/* Doubly linked list that need to be circularly linked when used */
150
typedef struct server{
151
const char *ip;
152
in_port_t port;
153
AvahiIfIndex if_index;
154
int af;
155
struct timespec last_seen;
156
struct server *next;
157
struct server *prev;
158
} server;
112
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
159
113
160
114
/* Used for passing in values through the Avahi callback functions */
161
115
typedef struct {
116
AvahiSimplePoll *simple_poll;
162
117
AvahiServer *server;
163
118
gnutls_certificate_credentials_t cred;
164
119
unsigned int dh_bits;
165
120
gnutls_dh_params_t dh_params;
166
121
const char *priority;
167
122
gpgme_ctx_t ctx;
168
server *current_server;
169
char *interfaces;
170
size_t interfaces_size;
171
123
} mandos_context;
172
124
173
/* global so signal handler can reach it*/
174
AvahiSimplePoll *simple_poll;
175
176
sig_atomic_t quit_now = 0;
177
int signal_received = 0;
178
179
/* Function to use when printing errors */
180
void perror_plus(const char *print_text){
181
int e = errno;
182
fprintf(stderr, "Mandos plugin %s: ",
183
program_invocation_short_name);
184
errno = e;
185
perror(print_text);
186
}
187
188
__attribute__((format (gnu_printf, 2, 3), nonnull))
189
int fprintf_plus(FILE *stream, const char *format, ...){
190
va_list ap;
191
va_start (ap, format);
192
193
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
194
program_invocation_short_name));
195
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
196
}
197
198
125
/*
199
* Make additional room in "buffer" for at least BUFFER_SIZE more
200
* bytes. "buffer_capacity" is how much is currently allocated,
126
* Make room in "buffer" for at least BUFFER_SIZE additional bytes.
127
* "buffer_capacity" is how much is currently allocated,
201
128
* "buffer_length" is how much is already used.
202
129
*/
203
__attribute__((nonnull, warn_unused_result))
204
size_t incbuffer(char **buffer, size_t buffer_length,
205
size_t buffer_capacity){
206
if(buffer_length + BUFFER_SIZE > buffer_capacity){
207
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
208
if(new_buf == NULL){
209
int old_errno = errno;
210
free(*buffer);
211
errno = old_errno;
212
*buffer = NULL;
130
size_t adjustbuffer(char **buffer, size_t buffer_length,
131
size_t buffer_capacity){
132
if (buffer_length + BUFFER_SIZE > buffer_capacity){
133
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
134
if (buffer == NULL){
213
135
return 0;
214
136
}
215
*buffer = new_buf;
216
137
buffer_capacity += BUFFER_SIZE;
217
138
}
218
139
return buffer_capacity;
219
140
}
220
141
221
/* Add server to set of servers to retry periodically */
222
__attribute__((nonnull, warn_unused_result))
223
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
224
int af, server **current_server){
225
int ret;
226
server *new_server = malloc(sizeof(server));
227
if(new_server == NULL){
228
perror_plus("malloc");
229
return false;
230
}
231
*new_server = (server){ .ip = strdup(ip),
232
.port = port,
233
.if_index = if_index,
234
.af = af };
235
if(new_server->ip == NULL){
236
perror_plus("strdup");
237
free(new_server);
238
return false;
239
}
240
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
241
if(ret == -1){
242
perror_plus("clock_gettime");
243
#ifdef __GNUC__
244
#pragma GCC diagnostic push
245
#pragma GCC diagnostic ignored "-Wcast-qual"
246
#endif
247
free((char *)(new_server->ip));
248
#ifdef __GNUC__
249
#pragma GCC diagnostic pop
250
#endif
251
free(new_server);
252
return false;
253
}
254
/* Special case of first server */
255
if(*current_server == NULL){
256
new_server->next = new_server;
257
new_server->prev = new_server;
258
*current_server = new_server;
259
} else {
260
/* Place the new server last in the list */
261
new_server->next = *current_server;
262
new_server->prev = (*current_server)->prev;
263
new_server->prev->next = new_server;
264
(*current_server)->prev = new_server;
265
}
266
return true;
267
}
268
269
142
/*
270
143
* Initialize GPGME.
271
144
*/
272
__attribute__((nonnull, warn_unused_result))
273
static bool init_gpgme(const char * const seckey,
274
const char * const pubkey,
275
const char * const tempdir,
276
mandos_context *mc){
145
static bool init_gpgme(mandos_context *mc, const char *seckey,
146
const char *pubkey, const char *tempdir){
147
int ret;
277
148
gpgme_error_t rc;
278
149
gpgme_engine_info_t engine_info;
279
150
151
280
152
/*
281
* Helper function to insert pub and seckey to the engine keyring.
153
* Helper function to insert pub and seckey to the enigne keyring.
282
154
*/
283
bool import_key(const char * const filename){
284
int ret;
155
bool import_key(const char *filename){
285
156
int fd;
286
157
gpgme_data_t pgp_data;
287
158
288
fd = (int)TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
159
fd = TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
289
160
if(fd == -1){
290
perror_plus("open");
161
perror("open");
291
162
return false;
292
163
}
293
164
294
165
rc = gpgme_data_new_from_fd(&pgp_data, fd);
295
if(rc != GPG_ERR_NO_ERROR){
296
fprintf_plus(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
297
gpgme_strsource(rc), gpgme_strerror(rc));
166
if (rc != GPG_ERR_NO_ERROR){
167
fprintf(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
168
gpgme_strsource(rc), gpgme_strerror(rc));
298
169
return false;
299
170
}
300
171
301
172
rc = gpgme_op_import(mc->ctx, pgp_data);
302
if(rc != GPG_ERR_NO_ERROR){
303
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
304
gpgme_strsource(rc), gpgme_strerror(rc));
173
if (rc != GPG_ERR_NO_ERROR){
174
fprintf(stderr, "bad gpgme_op_import: %s: %s\n",
175
gpgme_strsource(rc), gpgme_strerror(rc));
305
176
return false;
306
177
}
307
178
308
ret = (int)TEMP_FAILURE_RETRY(close(fd));
179
ret = TEMP_FAILURE_RETRY(close(fd));
309
180
if(ret == -1){
310
perror_plus("close");
181
perror("close");
311
182
}
312
183
gpgme_data_release(pgp_data);
313
184
return true;
314
185
}
315
186
316
if(debug){
317
fprintf_plus(stderr, "Initializing GPGME\n");
187
if (debug){
188
fprintf(stderr, "Initialize gpgme\n");
318
189
}
319
190
320
191
/* Init GPGME */
321
192
gpgme_check_version(NULL);
322
193
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
323
if(rc != GPG_ERR_NO_ERROR){
324
fprintf_plus(stderr, "bad gpgme_engine_check_version: %s: %s\n",
325
gpgme_strsource(rc), gpgme_strerror(rc));
194
if (rc != GPG_ERR_NO_ERROR){
195
fprintf(stderr, "bad gpgme_engine_check_version: %s: %s\n",
196
gpgme_strsource(rc), gpgme_strerror(rc));
326
197
return false;
327
198
}
328
199
329
/* Set GPGME home directory for the OpenPGP engine only */
330
rc = gpgme_get_engine_info(&engine_info);
331
if(rc != GPG_ERR_NO_ERROR){
332
fprintf_plus(stderr, "bad gpgme_get_engine_info: %s: %s\n",
333
gpgme_strsource(rc), gpgme_strerror(rc));
200
/* Set GPGME home directory for the OpenPGP engine only */
201
rc = gpgme_get_engine_info (&engine_info);
202
if (rc != GPG_ERR_NO_ERROR){
203
fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
204
gpgme_strsource(rc), gpgme_strerror(rc));
334
205
return false;
335
206
}
336
207
while(engine_info != NULL){
342
213
engine_info = engine_info->next;
343
214
}
344
215
if(engine_info == NULL){
345
fprintf_plus(stderr, "Could not set GPGME home dir to %s\n",
346
tempdir);
216
fprintf(stderr, "Could not set GPGME home dir to %s\n", tempdir);
347
217
return false;
348
218
}
349
219
350
220
/* Create new GPGME "context" */
351
221
rc = gpgme_new(&(mc->ctx));
352
if(rc != GPG_ERR_NO_ERROR){
353
fprintf_plus(stderr, "Mandos plugin mandos-client: "
354
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
355
gpgme_strerror(rc));
356
return false;
357
}
358
359
if(not import_key(pubkey) or not import_key(seckey)){
360
return false;
361
}
362
363
return true;
222
if (rc != GPG_ERR_NO_ERROR){
223
fprintf(stderr, "bad gpgme_new: %s: %s\n",
224
gpgme_strsource(rc), gpgme_strerror(rc));
225
return false;
226
}
227
228
if (not import_key(pubkey) or not import_key(seckey)){
229
return false;
230
}
231
232
return true;
364
233
}
365
234
366
235
/*
367
236
* Decrypt OpenPGP data.
368
237
* Returns -1 on error
369
238
*/
370
__attribute__((nonnull, warn_unused_result))
371
static ssize_t pgp_packet_decrypt(const char *cryptotext,
372
size_t crypto_size,
373
char **plaintext,
374
mandos_context *mc){
239
static ssize_t pgp_packet_decrypt (const mandos_context *mc,
240
const char *cryptotext,
241
size_t crypto_size,
242
char **plaintext){
375
243
gpgme_data_t dh_crypto, dh_plain;
376
244
gpgme_error_t rc;
377
245
ssize_t ret;
378
246
size_t plaintext_capacity = 0;
379
247
ssize_t plaintext_length = 0;
380
248
381
if(debug){
382
fprintf_plus(stderr, "Trying to decrypt OpenPGP data\n");
249
if (debug){
250
fprintf(stderr, "Trying to decrypt OpenPGP data\n");
383
251
}
384
252
385
253
/* Create new GPGME data buffer from memory cryptotext */
386
254
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
387
255
0);
388
if(rc != GPG_ERR_NO_ERROR){
389
fprintf_plus(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
390
gpgme_strsource(rc), gpgme_strerror(rc));
256
if (rc != GPG_ERR_NO_ERROR){
257
fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
258
gpgme_strsource(rc), gpgme_strerror(rc));
391
259
return -1;
392
260
}
393
261
394
262
/* Create new empty GPGME data buffer for the plaintext */
395
263
rc = gpgme_data_new(&dh_plain);
396
if(rc != GPG_ERR_NO_ERROR){
397
fprintf_plus(stderr, "Mandos plugin mandos-client: "
398
"bad gpgme_data_new: %s: %s\n",
399
gpgme_strsource(rc), gpgme_strerror(rc));
264
if (rc != GPG_ERR_NO_ERROR){
265
fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
266
gpgme_strsource(rc), gpgme_strerror(rc));
400
267
gpgme_data_release(dh_crypto);
401
268
return -1;
402
269
}
404
271
/* Decrypt data from the cryptotext data buffer to the plaintext
405
272
data buffer */
406
273
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
407
if(rc != GPG_ERR_NO_ERROR){
408
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
409
gpgme_strsource(rc), gpgme_strerror(rc));
274
if (rc != GPG_ERR_NO_ERROR){
275
fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
276
gpgme_strsource(rc), gpgme_strerror(rc));
410
277
plaintext_length = -1;
411
if(debug){
278
if (debug){
412
279
gpgme_decrypt_result_t result;
413
280
result = gpgme_op_decrypt_result(mc->ctx);
414
if(result == NULL){
415
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
281
if (result == NULL){
282
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
416
283
} else {
417
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
418
result->unsupported_algorithm);
419
fprintf_plus(stderr, "Wrong key usage: %u\n",
420
result->wrong_key_usage);
284
fprintf(stderr, "Unsupported algorithm: %s\n",
285
result->unsupported_algorithm);
286
fprintf(stderr, "Wrong key usage: %u\n",
287
result->wrong_key_usage);
421
288
if(result->file_name != NULL){
422
fprintf_plus(stderr, "File name: %s\n", result->file_name);
289
fprintf(stderr, "File name: %s\n", result->file_name);
423
290
}
424
291
gpgme_recipient_t recipient;
425
292
recipient = result->recipients;
426
while(recipient != NULL){
427
fprintf_plus(stderr, "Public key algorithm: %s\n",
428
gpgme_pubkey_algo_name
429
(recipient->pubkey_algo));
430
fprintf_plus(stderr, "Key ID: %s\n", recipient->keyid);
431
fprintf_plus(stderr, "Secret key available: %s\n",
432
recipient->status == GPG_ERR_NO_SECKEY
433
? "No" : "Yes");
434
recipient = recipient->next;
293
if(recipient){
294
while(recipient != NULL){
295
fprintf(stderr, "Public key algorithm: %s\n",
296
gpgme_pubkey_algo_name(recipient->pubkey_algo));
297
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
298
fprintf(stderr, "Secret key available: %s\n",
299
recipient->status == GPG_ERR_NO_SECKEY
300
? "No" : "Yes");
301
recipient = recipient->next;
302
}
435
303
}
436
304
}
437
305
}
439
307
}
440
308
441
309
if(debug){
442
fprintf_plus(stderr, "Decryption of OpenPGP data succeeded\n");
310
fprintf(stderr, "Decryption of OpenPGP data succeeded\n");
443
311
}
444
312
445
313
/* Seek back to the beginning of the GPGME plaintext data buffer */
446
if(gpgme_data_seek(dh_plain, (off_t)0, SEEK_SET) == -1){
447
perror_plus("gpgme_data_seek");
314
if (gpgme_data_seek(dh_plain, (off_t) 0, SEEK_SET) == -1){
315
perror("gpgme_data_seek");
448
316
plaintext_length = -1;
449
317
goto decrypt_end;
450
318
}
451
319
452
320
*plaintext = NULL;
453
321
while(true){
454
plaintext_capacity = incbuffer(plaintext,
455
(size_t)plaintext_length,
456
plaintext_capacity);
457
if(plaintext_capacity == 0){
458
perror_plus("incbuffer");
459
plaintext_length = -1;
460
goto decrypt_end;
322
plaintext_capacity = adjustbuffer(plaintext,
323
(size_t)plaintext_length,
324
plaintext_capacity);
325
if (plaintext_capacity == 0){
326
perror("adjustbuffer");
327
plaintext_length = -1;
328
goto decrypt_end;
461
329
}
462
330
463
331
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
464
332
BUFFER_SIZE);
465
333
/* Print the data, if any */
466
if(ret == 0){
334
if (ret == 0){
467
335
/* EOF */
468
336
break;
469
337
}
470
338
if(ret < 0){
471
perror_plus("gpgme_data_read");
339
perror("gpgme_data_read");
472
340
plaintext_length = -1;
473
341
goto decrypt_end;
474
342
}
476
344
}
477
345
478
346
if(debug){
479
fprintf_plus(stderr, "Decrypted password is: ");
347
fprintf(stderr, "Decrypted password is: ");
480
348
for(ssize_t i = 0; i < plaintext_length; i++){
481
349
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
482
350
}
493
361
return plaintext_length;
494
362
}
495
363
496
__attribute__((warn_unused_result))
497
static const char *safer_gnutls_strerror(int value){
498
const char *ret = gnutls_strerror(value);
499
if(ret == NULL)
364
static const char * safer_gnutls_strerror (int value) {
365
const char *ret = gnutls_strerror (value); /* Spurious warning */
366
if (ret == NULL)
500
367
ret = "(unknown)";
501
368
return ret;
502
369
}
503
370
504
371
/* GnuTLS log function callback */
505
__attribute__((nonnull))
506
372
static void debuggnutls(__attribute__((unused)) int level,
507
373
const char* string){
508
fprintf_plus(stderr, "GnuTLS: %s", string);
374
fprintf(stderr, "GnuTLS: %s", string);
509
375
}
510
376
511
__attribute__((nonnull, warn_unused_result))
512
static int init_gnutls_global(const char *pubkeyfilename,
513
const char *seckeyfilename,
514
mandos_context *mc){
377
static int init_gnutls_global(mandos_context *mc,
378
const char *pubkeyfilename,
379
const char *seckeyfilename){
515
380
int ret;
516
381
517
382
if(debug){
518
fprintf_plus(stderr, "Initializing GnuTLS\n");
383
fprintf(stderr, "Initializing GnuTLS\n");
519
384
}
520
385
521
386
ret = gnutls_global_init();
522
if(ret != GNUTLS_E_SUCCESS){
523
fprintf_plus(stderr, "GnuTLS global_init: %s\n",
524
safer_gnutls_strerror(ret));
387
if (ret != GNUTLS_E_SUCCESS) {
388
fprintf (stderr, "GnuTLS global_init: %s\n",
389
safer_gnutls_strerror(ret));
525
390
return -1;
526
391
}
527
392
528
if(debug){
393
if (debug){
529
394
/* "Use a log level over 10 to enable all debugging options."
530
395
* - GnuTLS manual
531
396
*/
534
399
}
535
400
536
401
/* OpenPGP credentials */
537
ret = gnutls_certificate_allocate_credentials(&mc->cred);
538
if(ret != GNUTLS_E_SUCCESS){
539
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
540
safer_gnutls_strerror(ret));
541
gnutls_global_deinit();
402
gnutls_certificate_allocate_credentials(&mc->cred);
403
if (ret != GNUTLS_E_SUCCESS){
404
fprintf (stderr, "GnuTLS memory error: %s\n", /* Spurious
405
warning */
406
safer_gnutls_strerror(ret));
407
gnutls_global_deinit ();
542
408
return -1;
543
409
}
544
410
545
411
if(debug){
546
fprintf_plus(stderr, "Attempting to use OpenPGP public key %s and"
547
" secret key %s as GnuTLS credentials\n",
548
pubkeyfilename,
549
seckeyfilename);
412
fprintf(stderr, "Attempting to use OpenPGP public key %s and"
413
" secret key %s as GnuTLS credentials\n", pubkeyfilename,
414
seckeyfilename);
550
415
}
551
416
552
417
ret = gnutls_certificate_set_openpgp_key_file
553
418
(mc->cred, pubkeyfilename, seckeyfilename,
554
419
GNUTLS_OPENPGP_FMT_BASE64);
555
if(ret != GNUTLS_E_SUCCESS){
556
fprintf_plus(stderr,
557
"Error[%d] while reading the OpenPGP key pair ('%s',"
558
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
559
fprintf_plus(stderr, "The GnuTLS error is: %s\n",
560
safer_gnutls_strerror(ret));
420
if (ret != GNUTLS_E_SUCCESS) {
421
fprintf(stderr,
422
"Error[%d] while reading the OpenPGP key pair ('%s',"
423
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
424
fprintf(stderr, "The GnuTLS error is: %s\n",
425
safer_gnutls_strerror(ret));
561
426
goto globalfail;
562
427
}
563
428
564
429
/* GnuTLS server initialization */
565
430
ret = gnutls_dh_params_init(&mc->dh_params);
566
if(ret != GNUTLS_E_SUCCESS){
567
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
568
" initialization: %s\n",
569
safer_gnutls_strerror(ret));
431
if (ret != GNUTLS_E_SUCCESS) {
432
fprintf (stderr, "Error in GnuTLS DH parameter initialization:"
433
" %s\n", safer_gnutls_strerror(ret));
570
434
goto globalfail;
571
435
}
572
436
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
573
if(ret != GNUTLS_E_SUCCESS){
574
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
575
safer_gnutls_strerror(ret));
437
if (ret != GNUTLS_E_SUCCESS) {
438
fprintf (stderr, "Error in GnuTLS prime generation: %s\n",
439
safer_gnutls_strerror(ret));
576
440
goto globalfail;
577
441
}
578
442
588
452
return -1;
589
453
}
590
454
591
__attribute__((nonnull, warn_unused_result))
592
static int init_gnutls_session(gnutls_session_t *session,
593
mandos_context *mc){
455
static int init_gnutls_session(mandos_context *mc,
456
gnutls_session_t *session){
594
457
int ret;
595
458
/* GnuTLS session creation */
596
do {
597
ret = gnutls_init(session, GNUTLS_SERVER);
598
if(quit_now){
599
return -1;
600
}
601
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
602
if(ret != GNUTLS_E_SUCCESS){
603
fprintf_plus(stderr,
604
"Error in GnuTLS session initialization: %s\n",
605
safer_gnutls_strerror(ret));
459
ret = gnutls_init(session, GNUTLS_SERVER);
460
if (ret != GNUTLS_E_SUCCESS){
461
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
462
safer_gnutls_strerror(ret));
606
463
}
607
464
608
465
{
609
466
const char *err;
610
do {
611
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
612
if(quit_now){
613
gnutls_deinit(*session);
614
return -1;
615
}
616
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
617
if(ret != GNUTLS_E_SUCCESS){
618
fprintf_plus(stderr, "Syntax error at: %s\n", err);
619
fprintf_plus(stderr, "GnuTLS error: %s\n",
620
safer_gnutls_strerror(ret));
621
gnutls_deinit(*session);
467
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
468
if (ret != GNUTLS_E_SUCCESS) {
469
fprintf(stderr, "Syntax error at: %s\n", err);
470
fprintf(stderr, "GnuTLS error: %s\n",
471
safer_gnutls_strerror(ret));
472
gnutls_deinit (*session);
622
473
return -1;
623
474
}
624
475
}
625
476
626
do {
627
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
628
mc->cred);
629
if(quit_now){
630
gnutls_deinit(*session);
631
return -1;
632
}
633
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
634
if(ret != GNUTLS_E_SUCCESS){
635
fprintf_plus(stderr, "Error setting GnuTLS credentials: %s\n",
636
safer_gnutls_strerror(ret));
637
gnutls_deinit(*session);
477
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
478
mc->cred);
479
if (ret != GNUTLS_E_SUCCESS) {
480
fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
481
safer_gnutls_strerror(ret));
482
gnutls_deinit (*session);
638
483
return -1;
639
484
}
640
485
641
486
/* ignore client certificate if any. */
642
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
487
gnutls_certificate_server_set_request (*session,
488
GNUTLS_CERT_IGNORE);
643
489
644
gnutls_dh_set_prime_bits(*session, mc->dh_bits);
490
gnutls_dh_set_prime_bits (*session, mc->dh_bits);
645
491
646
492
return 0;
647
493
}
650
496
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
651
497
__attribute__((unused)) const char *txt){}
652
498
653
/* Set effective uid to 0, return errno */
654
__attribute__((warn_unused_result))
655
error_t raise_privileges(void){
656
error_t old_errno = errno;
657
error_t ret_errno = 0;
658
if(seteuid(0) == -1){
659
ret_errno = errno;
660
}
661
errno = old_errno;
662
return ret_errno;
663
}
664
665
/* Set effective and real user ID to 0. Return errno. */
666
__attribute__((warn_unused_result))
667
error_t raise_privileges_permanently(void){
668
error_t old_errno = errno;
669
error_t ret_errno = raise_privileges();
670
if(ret_errno != 0){
671
errno = old_errno;
672
return ret_errno;
673
}
674
if(setuid(0) == -1){
675
ret_errno = errno;
676
}
677
errno = old_errno;
678
return ret_errno;
679
}
680
681
/* Set effective user ID to unprivileged saved user ID */
682
__attribute__((warn_unused_result))
683
error_t lower_privileges(void){
684
error_t old_errno = errno;
685
error_t ret_errno = 0;
686
if(seteuid(uid) == -1){
687
ret_errno = errno;
688
}
689
errno = old_errno;
690
return ret_errno;
691
}
692
693
/* Lower privileges permanently */
694
__attribute__((warn_unused_result))
695
error_t lower_privileges_permanently(void){
696
error_t old_errno = errno;
697
error_t ret_errno = 0;
698
if(setuid(uid) == -1){
699
ret_errno = errno;
700
}
701
errno = old_errno;
702
return ret_errno;
703
}
704
705
/* Helper function to add_local_route() and remove_local_route() */
706
__attribute__((nonnull, warn_unused_result))
707
static bool add_remove_local_route(const bool add,
708
const char *address,
709
AvahiIfIndex if_index){
710
int ret;
711
char helper[] = "mandos-client-iprouteadddel";
712
char add_arg[] = "add";
713
char delete_arg[] = "delete";
714
char *pluginhelperdir = getenv("MANDOSPLUGINHELPERDIR");
715
if(pluginhelperdir == NULL){
716
if(debug){
717
fprintf_plus(stderr, "MANDOSPLUGINHELPERDIR environment"
718
" variable not set; cannot run helper\n");
719
}
720
return false;
721
}
722
723
char interface[IF_NAMESIZE];
724
if(if_indextoname((unsigned int)if_index, interface) == NULL){
725
perror_plus("if_indextoname");
726
return false;
727
}
728
729
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
730
if(devnull == -1){
731
perror_plus("open(\"/dev/null\", O_RDONLY)");
732
return false;
733
}
734
pid_t pid = fork();
735
if(pid == 0){
736
/* Child */
737
/* Raise privileges */
738
errno = raise_privileges_permanently();
739
if(errno != 0){
740
perror_plus("Failed to raise privileges");
741
/* _exit(EX_NOPERM); */
742
} else {
743
/* Set group */
744
errno = 0;
745
ret = setgid(0);
746
if(ret == -1){
747
perror_plus("setgid");
748
_exit(EX_NOPERM);
749
}
750
/* Reset supplementary groups */
751
errno = 0;
752
ret = setgroups(0, NULL);
753
if(ret == -1){
754
perror_plus("setgroups");
755
_exit(EX_NOPERM);
756
}
757
}
758
ret = dup2(devnull, STDIN_FILENO);
759
if(ret == -1){
760
perror_plus("dup2(devnull, STDIN_FILENO)");
761
_exit(EX_OSERR);
762
}
763
ret = (int)TEMP_FAILURE_RETRY(close(devnull));
764
if(ret == -1){
765
perror_plus("close");
766
_exit(EX_OSERR);
767
}
768
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
769
if(ret == -1){
770
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
771
_exit(EX_OSERR);
772
}
773
int helperdir_fd = (int)TEMP_FAILURE_RETRY(open(pluginhelperdir,
774
O_RDONLY
775
| O_DIRECTORY
776
| O_PATH
777
| O_CLOEXEC));
778
if(helperdir_fd == -1){
779
perror_plus("open");
780
_exit(EX_UNAVAILABLE);
781
}
782
int helper_fd = (int)TEMP_FAILURE_RETRY(openat(helperdir_fd,
783
helper, O_RDONLY));
784
if(helper_fd == -1){
785
perror_plus("openat");
786
_exit(EX_UNAVAILABLE);
787
}
788
TEMP_FAILURE_RETRY(close(helperdir_fd));
789
#ifdef __GNUC__
790
#pragma GCC diagnostic push
791
#pragma GCC diagnostic ignored "-Wcast-qual"
792
#endif
793
if(fexecve(helper_fd, (char *const [])
794
{ helper, add ? add_arg : delete_arg, (char *)address,
795
interface, NULL }, environ) == -1){
796
#ifdef __GNUC__
797
#pragma GCC diagnostic pop
798
#endif
799
perror_plus("fexecve");
800
_exit(EXIT_FAILURE);
801
}
802
}
803
if(pid == -1){
804
perror_plus("fork");
805
return false;
806
}
807
int status;
808
pid_t pret = -1;
809
errno = 0;
810
do {
811
pret = waitpid(pid, &status, 0);
812
if(pret == -1 and errno == EINTR and quit_now){
813
int errno_raising = 0;
814
if((errno = raise_privileges()) != 0){
815
errno_raising = errno;
816
perror_plus("Failed to raise privileges in order to"
817
" kill helper program");
818
}
819
if(kill(pid, SIGTERM) == -1){
820
perror_plus("kill");
821
}
822
if((errno_raising == 0) and (errno = lower_privileges()) != 0){
823
perror_plus("Failed to lower privileges after killing"
824
" helper program");
825
}
826
return false;
827
}
828
} while(pret == -1 and errno == EINTR);
829
if(pret == -1){
830
perror_plus("waitpid");
831
return false;
832
}
833
if(WIFEXITED(status)){
834
if(WEXITSTATUS(status) != 0){
835
fprintf_plus(stderr, "Error: iprouteadddel exited"
836
" with status %d\n", WEXITSTATUS(status));
837
return false;
838
}
839
return true;
840
}
841
if(WIFSIGNALED(status)){
842
fprintf_plus(stderr, "Error: iprouteadddel died by"
843
" signal %d\n", WTERMSIG(status));
844
return false;
845
}
846
fprintf_plus(stderr, "Error: iprouteadddel crashed\n");
847
return false;
848
}
849
850
__attribute__((nonnull, warn_unused_result))
851
static bool add_local_route(const char *address,
852
AvahiIfIndex if_index){
853
return add_remove_local_route(true, address, if_index);
854
}
855
856
__attribute__((nonnull, warn_unused_result))
857
static bool remove_local_route(const char *address,
858
AvahiIfIndex if_index){
859
return add_remove_local_route(false, address, if_index);
860
}
861
862
499
/* Called when a Mandos server is found */
863
__attribute__((nonnull, warn_unused_result))
864
static int start_mandos_communication(const char *ip, in_port_t port,
500
static int start_mandos_communication(const char *ip, uint16_t port,
865
501
AvahiIfIndex if_index,
866
int af, mandos_context *mc){
867
int ret, tcp_sd = -1;
868
ssize_t sret;
869
struct sockaddr_storage to;
502
mandos_context *mc){
503
int ret, tcp_sd;
504
union { struct sockaddr in; struct sockaddr_in6 in6; } to;
870
505
char *buffer = NULL;
871
char *decrypted_buffer = NULL;
506
char *decrypted_buffer;
872
507
size_t buffer_length = 0;
873
508
size_t buffer_capacity = 0;
509
ssize_t decrypted_buffer_size;
874
510
size_t written;
875
int retval = -1;
511
int retval = 0;
512
char interface[IF_NAMESIZE];
876
513
gnutls_session_t session;
877
int pf; /* Protocol family */
878
bool route_added = false;
879
880
errno = 0;
881
882
if(quit_now){
883
errno = EINTR;
884
return -1;
885
}
886
887
switch(af){
888
case AF_INET6:
889
pf = PF_INET6;
890
break;
891
case AF_INET:
892
pf = PF_INET;
893
break;
894
default:
895
fprintf_plus(stderr, "Bad address family: %d\n", af);
896
errno = EINVAL;
897
return -1;
898
}
899
900
/* If the interface is specified and we have a list of interfaces */
901
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
902
/* Check if the interface is one of the interfaces we are using */
903
bool match = false;
904
{
905
char *interface = NULL;
906
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
907
interface))){
908
if(if_nametoindex(interface) == (unsigned int)if_index){
909
match = true;
910
break;
911
}
912
}
913
}
914
if(not match){
915
/* This interface does not match any in the list, so we don't
916
connect to the server */
917
if(debug){
918
char interface[IF_NAMESIZE];
919
if(if_indextoname((unsigned int)if_index, interface) == NULL){
920
perror_plus("if_indextoname");
921
} else {
922
fprintf_plus(stderr, "Skipping server on non-used interface"
923
" \"%s\"\n",
924
if_indextoname((unsigned int)if_index,
925
interface));
926
}
927
}
514
515
ret = init_gnutls_session (mc, &session);
516
if (ret != 0){
517
return -1;
518
}
519
520
if(debug){
521
fprintf(stderr, "Setting up a tcp connection to %s, port %" PRIu16
522
"\n", ip, port);
523
}
524
525
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
526
if(tcp_sd < 0) {
527
perror("socket");
528
return -1;
529
}
530
531
if(debug){
532
if(if_indextoname((unsigned int)if_index, interface) == NULL){
533
perror("if_indextoname");
928
534
return -1;
929
535
}
930
}
931
932
ret = init_gnutls_session(&session, mc);
933
if(ret != 0){
934
return -1;
935
}
936
937
if(debug){
938
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
939
PRIuMAX "\n", ip, (uintmax_t)port);
940
}
941
942
tcp_sd = socket(pf, SOCK_STREAM | SOCK_CLOEXEC, 0);
943
if(tcp_sd < 0){
944
int e = errno;
945
perror_plus("socket");
946
errno = e;
947
goto mandos_end;
948
}
949
950
if(quit_now){
951
errno = EINTR;
952
goto mandos_end;
536
fprintf(stderr, "Binding to interface %s\n", interface);
953
537
}
954
538
955
539
memset(&to, 0, sizeof(to));
956
if(af == AF_INET6){
957
((struct sockaddr_in6 *)&to)->sin6_family = (sa_family_t)af;
958
ret = inet_pton(af, ip, &((struct sockaddr_in6 *)&to)->sin6_addr);
959
} else { /* IPv4 */
960
((struct sockaddr_in *)&to)->sin_family = (sa_family_t)af;
961
ret = inet_pton(af, ip, &((struct sockaddr_in *)&to)->sin_addr);
962
}
963
if(ret < 0 ){
964
int e = errno;
965
perror_plus("inet_pton");
966
errno = e;
967
goto mandos_end;
540
to.in6.sin6_family = AF_INET6;
541
/* It would be nice to have a way to detect if we were passed an
542
IPv4 address here. Now we assume an IPv6 address. */
543
ret = inet_pton(AF_INET6, ip, &to.in6.sin6_addr);
544
if (ret < 0 ){
545
perror("inet_pton");
546
return -1;
968
547
}
969
548
if(ret == 0){
970
int e = errno;
971
fprintf_plus(stderr, "Bad address: %s\n", ip);
972
errno = e;
973
goto mandos_end;
974
}
975
if(af == AF_INET6){
976
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
977
if(IN6_IS_ADDR_LINKLOCAL
978
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
979
if(if_index == AVAHI_IF_UNSPEC){
980
fprintf_plus(stderr, "An IPv6 link-local address is"
981
" incomplete without a network interface\n");
982
errno = EINVAL;
983
goto mandos_end;
984
}
985
/* Set the network interface number as scope */
986
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
987
}
988
} else {
989
((struct sockaddr_in *)&to)->sin_port = htons(port);
990
}
549
fprintf(stderr, "Bad address: %s\n", ip);
550
return -1;
551
}
552
to.in6.sin6_port = htons(port); /* Spurious warning */
991
553
992
if(quit_now){
993
errno = EINTR;
994
goto mandos_end;
995
}
554
to.in6.sin6_scope_id = (uint32_t)if_index;
996
555
997
556
if(debug){
998
if(af == AF_INET6 and if_index != AVAHI_IF_UNSPEC){
999
char interface[IF_NAMESIZE];
1000
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1001
perror_plus("if_indextoname");
1002
} else {
1003
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
1004
"\n", ip, interface, (uintmax_t)port);
1005
}
1006
} else {
1007
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
1008
ip, (uintmax_t)port);
1009
}
1010
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
1011
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
1012
if(af == AF_INET6){
1013
ret = getnameinfo((struct sockaddr *)&to,
1014
sizeof(struct sockaddr_in6),
1015
addrstr, sizeof(addrstr), NULL, 0,
1016
NI_NUMERICHOST);
1017
} else {
1018
ret = getnameinfo((struct sockaddr *)&to,
1019
sizeof(struct sockaddr_in),
1020
addrstr, sizeof(addrstr), NULL, 0,
1021
NI_NUMERICHOST);
1022
}
1023
if(ret == EAI_SYSTEM){
1024
perror_plus("getnameinfo");
1025
} else if(ret != 0) {
1026
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
1027
} else if(strcmp(addrstr, ip) != 0){
1028
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
1029
}
1030
}
1031
1032
if(quit_now){
1033
errno = EINTR;
1034
goto mandos_end;
1035
}
1036
1037
while(true){
1038
if(af == AF_INET6){
1039
ret = connect(tcp_sd, (struct sockaddr *)&to,
1040
sizeof(struct sockaddr_in6));
1041
} else {
1042
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
1043
sizeof(struct sockaddr_in));
1044
}
1045
if(ret < 0){
1046
if(errno == ENETUNREACH
1047
and if_index != AVAHI_IF_UNSPEC
1048
and connect_to == NULL
1049
and not route_added and
1050
((af == AF_INET6 and not
1051
IN6_IS_ADDR_LINKLOCAL(&(((struct sockaddr_in6 *)
1052
&to)->sin6_addr)))
1053
or (af == AF_INET and
1054
/* Not a a IPv4LL address */
1055
(ntohl(((struct sockaddr_in *)&to)->sin_addr.s_addr)
1056
& 0xFFFF0000L) != 0xA9FE0000L))){
1057
/* Work around Avahi bug - Avahi does not announce link-local
1058
addresses if it has a global address, so local hosts with
1059
*only* a link-local address (e.g. Mandos clients) cannot
1060
connect to a Mandos server announced by Avahi on a server
1061
host with a global address. Work around this by retrying
1062
with an explicit route added with the server's address.
1063
1064
Avahi bug reference:
1065
http://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1066
https://bugs.debian.org/587961
1067
*/
1068
int e = errno;
1069
route_added = add_local_route(ip, if_index);
1070
if(route_added){
1071
continue;
1072
}
1073
errno = e;
1074
}
1075
if(errno != ECONNREFUSED or debug){
1076
int e = errno;
1077
perror_plus("connect");
1078
errno = e;
1079
}
1080
goto mandos_end;
1081
}
1082
1083
if(quit_now){
1084
errno = EINTR;
1085
goto mandos_end;
1086
}
1087
break;
557
fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
558
port);
559
char addrstr[INET6_ADDRSTRLEN] = "";
560
if(inet_ntop(to.in6.sin6_family, &(to.in6.sin6_addr), addrstr,
561
sizeof(addrstr)) == NULL){
562
perror("inet_ntop");
563
} else {
564
if(strcmp(addrstr, ip) != 0){
565
fprintf(stderr, "Canonical address form: %s\n", addrstr);
566
}
567
}
568
}
569
570
ret = connect(tcp_sd, &to.in, sizeof(to));
571
if (ret < 0){
572
perror("connect");
573
return -1;
1088
574
}
1089
575
1090
576
const char *out = mandos_protocol_version;
1091
577
written = 0;
1092
while(true){
578
while (true){
1093
579
size_t out_size = strlen(out);
1094
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
1095
out_size - written));
1096
if(ret == -1){
1097
int e = errno;
1098
perror_plus("write");
1099
errno = e;
580
ret = TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
581
out_size - written));
582
if (ret == -1){
583
perror("write");
584
retval = -1;
1100
585
goto mandos_end;
1101
586
}
1102
587
written += (size_t)ret;
1103
588
if(written < out_size){
1104
589
continue;
1105
590
} else {
1106
if(out == mandos_protocol_version){
591
if (out == mandos_protocol_version){
1107
592
written = 0;
1108
593
out = "\r\n";
1109
594
} else {
1110
595
break;
1111
596
}
1112
597
}
1113
1114
if(quit_now){
1115
errno = EINTR;
1116
goto mandos_end;
1117
}
1118
598
}
1119
599
1120
600
if(debug){
1121
fprintf_plus(stderr, "Establishing TLS session with %s\n", ip);
1122
}
1123
1124
if(quit_now){
1125
errno = EINTR;
1126
goto mandos_end;
1127
}
1128
1129
/* This casting via intptr_t is to eliminate warning about casting
1130
an int to a pointer type. This is exactly how the GnuTLS Guile
1131
function "set-session-transport-fd!" does it. */
1132
gnutls_transport_set_ptr(session,
1133
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
1134
1135
if(quit_now){
1136
errno = EINTR;
1137
goto mandos_end;
1138
}
1139
1140
do {
1141
ret = gnutls_handshake(session);
1142
if(quit_now){
1143
errno = EINTR;
1144
goto mandos_end;
1145
}
601
fprintf(stderr, "Establishing TLS session with %s\n", ip);
602
}
603
604
gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) tcp_sd);
605
606
do{
607
ret = gnutls_handshake (session);
1146
608
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
1147
609
1148
if(ret != GNUTLS_E_SUCCESS){
610
if (ret != GNUTLS_E_SUCCESS){
1149
611
if(debug){
1150
fprintf_plus(stderr, "*** GnuTLS Handshake failed ***\n");
1151
gnutls_perror(ret);
612
fprintf(stderr, "*** GnuTLS Handshake failed ***\n");
613
gnutls_perror (ret);
1152
614
}
1153
errno = EPROTO;
615
retval = -1;
1154
616
goto mandos_end;
1155
617
}
1156
618
1157
619
/* Read OpenPGP packet that contains the wanted password */
1158
620
1159
621
if(debug){
1160
fprintf_plus(stderr, "Retrieving OpenPGP encrypted password from"
1161
" %s\n", ip);
622
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
623
ip);
1162
624
}
1163
625
1164
626
while(true){
1165
1166
if(quit_now){
1167
errno = EINTR;
1168
goto mandos_end;
1169
}
1170
1171
buffer_capacity = incbuffer(&buffer, buffer_length,
1172
buffer_capacity);
1173
if(buffer_capacity == 0){
1174
int e = errno;
1175
perror_plus("incbuffer");
1176
errno = e;
1177
goto mandos_end;
1178
}
1179
1180
if(quit_now){
1181
errno = EINTR;
1182
goto mandos_end;
1183
}
1184
1185
sret = gnutls_record_recv(session, buffer+buffer_length,
1186
BUFFER_SIZE);
1187
if(sret == 0){
627
buffer_capacity = adjustbuffer(&buffer, buffer_length,
628
buffer_capacity);
629
if (buffer_capacity == 0){
630
perror("adjustbuffer");
631
retval = -1;
632
goto mandos_end;
633
}
634
635
ret = gnutls_record_recv(session, buffer+buffer_length,
636
BUFFER_SIZE);
637
if (ret == 0){
1188
638
break;
1189
639
}
1190
if(sret < 0){
1191
switch(sret){
640
if (ret < 0){
641
switch(ret){
1192
642
case GNUTLS_E_INTERRUPTED:
1193
643
case GNUTLS_E_AGAIN:
1194
644
break;
1195
645
case GNUTLS_E_REHANDSHAKE:
1196
do {
1197
ret = gnutls_handshake(session);
1198
1199
if(quit_now){
1200
errno = EINTR;
1201
goto mandos_end;
1202
}
646
do{
647
ret = gnutls_handshake (session);
1203
648
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
1204
if(ret < 0){
1205
fprintf_plus(stderr, "*** GnuTLS Re-handshake failed "
1206
"***\n");
1207
gnutls_perror(ret);
1208
errno = EPROTO;
649
if (ret < 0){
650
fprintf(stderr, "*** GnuTLS Re-handshake failed ***\n");
651
gnutls_perror (ret);
652
retval = -1;
1209
653
goto mandos_end;
1210
654
}
1211
655
break;
1212
656
default:
1213
fprintf_plus(stderr, "Unknown error while reading data from"
1214
" encrypted session with Mandos server\n");
1215
gnutls_bye(session, GNUTLS_SHUT_RDWR);
1216
errno = EIO;
657
fprintf(stderr, "Unknown error while reading data from"
658
" encrypted session with Mandos server\n");
659
retval = -1;
660
gnutls_bye (session, GNUTLS_SHUT_RDWR);
1217
661
goto mandos_end;
1218
662
}
1219
663
} else {
1220
buffer_length += (size_t) sret;
664
buffer_length += (size_t) ret;
1221
665
}
1222
666
}
1223
667
1224
668
if(debug){
1225
fprintf_plus(stderr, "Closing TLS session\n");
1226
}
1227
1228
if(quit_now){
1229
errno = EINTR;
1230
goto mandos_end;
1231
}
1232
1233
do {
1234
ret = gnutls_bye(session, GNUTLS_SHUT_RDWR);
1235
if(quit_now){
1236
errno = EINTR;
1237
goto mandos_end;
1238
}
1239
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
1240
1241
if(buffer_length > 0){
1242
ssize_t decrypted_buffer_size;
1243
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
1244
&decrypted_buffer, mc);
1245
if(decrypted_buffer_size >= 0){
1246
669
fprintf(stderr, "Closing TLS session\n");
670
}
671
672
gnutls_bye (session, GNUTLS_SHUT_RDWR);
673
674
if (buffer_length > 0){
675
decrypted_buffer_size = pgp_packet_decrypt(mc, buffer,
676
buffer_length,
677
&decrypted_buffer);
678
if (decrypted_buffer_size >= 0){
1247
679
written = 0;
1248
680
while(written < (size_t) decrypted_buffer_size){
1249
if(quit_now){
1250
errno = EINTR;
1251
goto mandos_end;
1252
}
1253
1254
ret = (int)fwrite(decrypted_buffer + written, 1,
1255
(size_t)decrypted_buffer_size - written,
1256
stdout);
681
ret = (int)fwrite (decrypted_buffer + written, 1,
682
(size_t)decrypted_buffer_size - written,
683
stdout);
1257
684
if(ret == 0 and ferror(stdout)){
1258
int e = errno;
1259
685
if(debug){
1260
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1261
strerror(errno));
686
fprintf(stderr, "Error writing encrypted data: %s\n",
687
strerror(errno));
1262
688
}
1263
errno = e;
1264
goto mandos_end;
689
retval = -1;
690
break;
1265
691
}
1266
692
written += (size_t)ret;
1267
693
}
1268
retval = 0;
694
free(decrypted_buffer);
695
} else {
696
retval = -1;
1269
697
}
698
} else {
699
retval = -1;
1270
700
}
1271
701
1272
702
/* Shutdown procedure */
1273
703
1274
704
mandos_end:
1275
{
1276
if(route_added){
1277
if(not remove_local_route(ip, if_index)){
1278
fprintf_plus(stderr, "Failed to remove local route to %s on"
1279
" interface %d", ip, if_index);
1280
}
1281
}
1282
int e = errno;
1283
free(decrypted_buffer);
1284
free(buffer);
1285
if(tcp_sd >= 0){
1286
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
1287
}
1288
if(ret == -1){
1289
if(e == 0){
1290
e = errno;
1291
}
1292
perror_plus("close");
1293
}
1294
gnutls_deinit(session);
1295
errno = e;
1296
if(quit_now){
1297
errno = EINTR;
1298
retval = -1;
1299
}
705
free(buffer);
706
ret = TEMP_FAILURE_RETRY(close(tcp_sd));
707
if(ret == -1){
708
perror("close");
1300
709
}
710
gnutls_deinit (session);
1301
711
return retval;
1302
712
}
1303
713
1304
__attribute__((nonnull))
1305
714
static void resolve_callback(AvahiSServiceResolver *r,
1306
715
AvahiIfIndex interface,
1307
AvahiProtocol proto,
716
AVAHI_GCC_UNUSED AvahiProtocol protocol,
1308
717
AvahiResolverEvent event,
1309
718
const char *name,
1310
719
const char *type,
1315
724
AVAHI_GCC_UNUSED AvahiStringList *txt,
1316
725
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1317
726
flags,
1318
void *mc){
1319
if(r == NULL){
1320
return;
1321
}
727
void* userdata) {
728
mandos_context *mc = userdata;
729
assert(r);
1322
730
1323
731
/* Called whenever a service has been resolved successfully or
1324
732
timed out */
1325
733
1326
if(quit_now){
1327
avahi_s_service_resolver_free(r);
1328
return;
1329
}
1330
1331
switch(event){
734
switch (event) {
1332
735
default:
1333
736
case AVAHI_RESOLVER_FAILURE:
1334
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1335
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1336
domain,
1337
avahi_strerror(avahi_server_errno
1338
(((mandos_context*)mc)->server)));
737
fprintf(stderr, "(Avahi Resolver) Failed to resolve service '%s'"
738
" of type '%s' in domain '%s': %s\n", name, type, domain,
739
avahi_strerror(avahi_server_errno(mc->server)));
1339
740
break;
1340
741
1341
742
case AVAHI_RESOLVER_FOUND:
1343
744
char ip[AVAHI_ADDRESS_STR_MAX];
1344
745
avahi_address_snprint(ip, sizeof(ip), address);
1345
746
if(debug){
1346
fprintf_plus(stderr, "Mandos server \"%s\" found on %s (%s, %"
1347
PRIdMAX ") on port %" PRIu16 "\n", name,
1348
host_name, ip, (intmax_t)interface, port);
747
fprintf(stderr, "Mandos server \"%s\" found on %s (%s, %"
748
PRIu16 ") on port %d\n", name, host_name, ip,
749
interface, port);
1349
750
}
1350
int ret = start_mandos_communication(ip, (in_port_t)port,
1351
interface,
1352
avahi_proto_to_af(proto),
1353
mc);
1354
if(ret == 0){
1355
avahi_simple_poll_quit(simple_poll);
1356
} else {
1357
if(not add_server(ip, (in_port_t)port, interface,
1358
avahi_proto_to_af(proto),
1359
&((mandos_context*)mc)->current_server)){
1360
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1361
" list\n", name);
1362
}
751
int ret = start_mandos_communication(ip, port, interface, mc);
752
if (ret == 0){
753
avahi_simple_poll_quit(mc->simple_poll);
1363
754
}
1364
755
}
1365
756
}
1366
757
avahi_s_service_resolver_free(r);
1367
758
}
1368
759
1369
static void browse_callback(AvahiSServiceBrowser *b,
1370
AvahiIfIndex interface,
1371
AvahiProtocol protocol,
1372
AvahiBrowserEvent event,
1373
const char *name,
1374
const char *type,
1375
const char *domain,
1376
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1377
flags,
1378
void *mc){
1379
if(b == NULL){
1380
return;
1381
}
760
static void browse_callback( AvahiSServiceBrowser *b,
761
AvahiIfIndex interface,
762
AvahiProtocol protocol,
763
AvahiBrowserEvent event,
764
const char *name,
765
const char *type,
766
const char *domain,
767
AVAHI_GCC_UNUSED AvahiLookupResultFlags
768
flags,
769
void* userdata) {
770
mandos_context *mc = userdata;
771
assert(b);
1382
772
1383
773
/* Called whenever a new services becomes available on the LAN or
1384
774
is removed from the LAN */
1385
775
1386
if(quit_now){
1387
return;
1388
}
1389
1390
switch(event){
776
switch (event) {
1391
777
default:
1392
778
case AVAHI_BROWSER_FAILURE:
1393
779
1394
fprintf_plus(stderr, "(Avahi browser) %s\n",
1395
avahi_strerror(avahi_server_errno
1396
(((mandos_context*)mc)->server)));
1397
avahi_simple_poll_quit(simple_poll);
780
fprintf(stderr, "(Avahi browser) %s\n",
781
avahi_strerror(avahi_server_errno(mc->server)));
782
avahi_simple_poll_quit(mc->simple_poll);
1398
783
return;
1399
784
1400
785
case AVAHI_BROWSER_NEW:
1403
788
the callback function is called the Avahi server will free the
1404
789
resolver for us. */
1405
790
1406
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1407
interface, protocol, name, type,
1408
domain, protocol, 0,
1409
resolve_callback, mc) == NULL)
1410
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1411
" %s\n", name,
1412
avahi_strerror(avahi_server_errno
1413
(((mandos_context*)mc)->server)));
791
if (!(avahi_s_service_resolver_new(mc->server, interface,
792
protocol, name, type, domain,
793
AVAHI_PROTO_INET6, 0,
794
resolve_callback, mc)))
795
fprintf(stderr, "Avahi: Failed to resolve service '%s': %s\n",
796
name, avahi_strerror(avahi_server_errno(mc->server)));
1414
797
break;
1415
798
1416
799
case AVAHI_BROWSER_REMOVE:
1419
802
case AVAHI_BROWSER_ALL_FOR_NOW:
1420
803
case AVAHI_BROWSER_CACHE_EXHAUSTED:
1421
804
if(debug){
1422
fprintf_plus(stderr, "No Mandos server found, still"
1423
" searching...\n");
805
fprintf(stderr, "No Mandos server found, still searching...\n");
1424
806
}
1425
807
break;
1426
808
}
1427
809
}
1428
810
1429
/* Signal handler that stops main loop after SIGTERM */
1430
static void handle_sigterm(int sig){
1431
if(quit_now){
1432
return;
1433
}
1434
quit_now = 1;
1435
signal_received = sig;
1436
int old_errno = errno;
1437
/* set main loop to exit */
1438
if(simple_poll != NULL){
1439
avahi_simple_poll_quit(simple_poll);
1440
}
1441
errno = old_errno;
1442
}
1443
1444
__attribute__((nonnull, warn_unused_result))
1445
bool get_flags(const char *ifname, struct ifreq *ifr){
1446
int ret;
1447
error_t ret_errno;
1448
1449
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1450
if(s < 0){
1451
ret_errno = errno;
1452
perror_plus("socket");
1453
errno = ret_errno;
1454
return false;
1455
}
1456
strcpy(ifr->ifr_name, ifname);
1457
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1458
if(ret == -1){
1459
if(debug){
1460
ret_errno = errno;
1461
perror_plus("ioctl SIOCGIFFLAGS");
1462
errno = ret_errno;
1463
}
1464
return false;
1465
}
1466
return true;
1467
}
1468
1469
__attribute__((nonnull, warn_unused_result))
1470
bool good_flags(const char *ifname, const struct ifreq *ifr){
1471
1472
/* Reject the loopback device */
1473
if(ifr->ifr_flags & IFF_LOOPBACK){
1474
if(debug){
1475
fprintf_plus(stderr, "Rejecting loopback interface \"%s\"\n",
1476
ifname);
1477
}
1478
return false;
1479
}
1480
/* Accept point-to-point devices only if connect_to is specified */
1481
if(connect_to != NULL and (ifr->ifr_flags & IFF_POINTOPOINT)){
1482
if(debug){
1483
fprintf_plus(stderr, "Accepting point-to-point interface"
1484
" \"%s\"\n", ifname);
1485
}
1486
return true;
1487
}
1488
/* Otherwise, reject non-broadcast-capable devices */
1489
if(not (ifr->ifr_flags & IFF_BROADCAST)){
1490
if(debug){
1491
fprintf_plus(stderr, "Rejecting non-broadcast interface"
1492
" \"%s\"\n", ifname);
1493
}
1494
return false;
1495
}
1496
/* Reject non-ARP interfaces (including dummy interfaces) */
1497
if(ifr->ifr_flags & IFF_NOARP){
1498
if(debug){
1499
fprintf_plus(stderr, "Rejecting non-ARP interface \"%s\"\n",
1500
ifname);
1501
}
1502
return false;
1503
}
1504
1505
/* Accept this device */
1506
if(debug){
1507
fprintf_plus(stderr, "Interface \"%s\" is good\n", ifname);
1508
}
1509
return true;
1510
}
1511
1512
/*
1513
* This function determines if a directory entry in /sys/class/net
1514
* corresponds to an acceptable network device.
1515
* (This function is passed to scandir(3) as a filter function.)
1516
*/
1517
__attribute__((nonnull, warn_unused_result))
1518
int good_interface(const struct dirent *if_entry){
1519
if(if_entry->d_name[0] == '.'){
1520
return 0;
1521
}
1522
1523
struct ifreq ifr;
1524
if(not get_flags(if_entry->d_name, &ifr)){
1525
if(debug){
1526
fprintf_plus(stderr, "Failed to get flags for interface "
1527
"\"%s\"\n", if_entry->d_name);
1528
}
1529
return 0;
1530
}
1531
1532
if(not good_flags(if_entry->d_name, &ifr)){
1533
return 0;
1534
}
1535
return 1;
1536
}
1537
1538
/*
1539
* This function determines if a network interface is up.
1540
*/
1541
__attribute__((nonnull, warn_unused_result))
1542
bool interface_is_up(const char *interface){
1543
struct ifreq ifr;
1544
if(not get_flags(interface, &ifr)){
1545
if(debug){
1546
fprintf_plus(stderr, "Failed to get flags for interface "
1547
"\"%s\"\n", interface);
1548
}
1549
return false;
1550
}
1551
1552
return (bool)(ifr.ifr_flags & IFF_UP);
1553
}
1554
1555
/*
1556
* This function determines if a network interface is running
1557
*/
1558
__attribute__((nonnull, warn_unused_result))
1559
bool interface_is_running(const char *interface){
1560
struct ifreq ifr;
1561
if(not get_flags(interface, &ifr)){
1562
if(debug){
1563
fprintf_plus(stderr, "Failed to get flags for interface "
1564
"\"%s\"\n", interface);
1565
}
1566
return false;
1567
}
1568
1569
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1570
}
1571
1572
__attribute__((nonnull, pure, warn_unused_result))
1573
int notdotentries(const struct dirent *direntry){
1574
/* Skip "." and ".." */
1575
if(direntry->d_name[0] == '.'
1576
and (direntry->d_name[1] == '\0'
1577
or (direntry->d_name[1] == '.'
1578
and direntry->d_name[2] == '\0'))){
1579
return 0;
1580
}
1581
return 1;
1582
}
1583
1584
/* Is this directory entry a runnable program? */
1585
__attribute__((nonnull, warn_unused_result))
1586
int runnable_hook(const struct dirent *direntry){
1587
int ret;
1588
size_t sret;
1589
struct stat st;
1590
1591
if((direntry->d_name)[0] == '\0'){
1592
/* Empty name? */
1593
return 0;
1594
}
1595
1596
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1597
"abcdefghijklmnopqrstuvwxyz"
1598
"0123456789"
1599
"_.-");
1600
if((direntry->d_name)[sret] != '\0'){
1601
/* Contains non-allowed characters */
1602
if(debug){
1603
fprintf_plus(stderr, "Ignoring hook \"%s\" with bad name\n",
1604
direntry->d_name);
1605
}
1606
return 0;
1607
}
1608
1609
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1610
if(ret == -1){
1611
if(debug){
1612
perror_plus("Could not stat hook");
1613
}
1614
return 0;
1615
}
1616
if(not (S_ISREG(st.st_mode))){
1617
/* Not a regular file */
1618
if(debug){
1619
fprintf_plus(stderr, "Ignoring hook \"%s\" - not a file\n",
1620
direntry->d_name);
1621
}
1622
return 0;
1623
}
1624
if(not (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))){
1625
/* Not executable */
1626
if(debug){
1627
fprintf_plus(stderr, "Ignoring hook \"%s\" - not executable\n",
1628
direntry->d_name);
1629
}
1630
return 0;
1631
}
1632
if(debug){
1633
fprintf_plus(stderr, "Hook \"%s\" is acceptable\n",
1634
direntry->d_name);
1635
}
1636
return 1;
1637
}
1638
1639
__attribute__((nonnull, warn_unused_result))
1640
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
1641
mandos_context *mc){
1642
int ret;
1643
struct timespec now;
1644
struct timespec waited_time;
1645
intmax_t block_time;
1646
1647
while(true){
1648
if(mc->current_server == NULL){
1649
if(debug){
1650
fprintf_plus(stderr, "Wait until first server is found."
1651
" No timeout!\n");
1652
}
1653
ret = avahi_simple_poll_iterate(s, -1);
1654
} else {
1655
if(debug){
1656
fprintf_plus(stderr, "Check current_server if we should run"
1657
" it, or wait\n");
1658
}
1659
/* the current time */
1660
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1661
if(ret == -1){
1662
perror_plus("clock_gettime");
1663
return -1;
1664
}
1665
/* Calculating in ms how long time between now and server
1666
who we visted longest time ago. Now - last seen. */
1667
waited_time.tv_sec = (now.tv_sec
1668
- mc->current_server->last_seen.tv_sec);
1669
waited_time.tv_nsec = (now.tv_nsec
1670
- mc->current_server->last_seen.tv_nsec);
1671
/* total time is 10s/10,000ms.
1672
Converting to s from ms by dividing by 1,000,
1673
and ns to ms by dividing by 1,000,000. */
1674
block_time = ((retry_interval
1675
- ((intmax_t)waited_time.tv_sec * 1000))
1676
- ((intmax_t)waited_time.tv_nsec / 1000000));
1677
1678
if(debug){
1679
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
1680
block_time);
1681
}
1682
1683
if(block_time <= 0){
1684
ret = start_mandos_communication(mc->current_server->ip,
1685
mc->current_server->port,
1686
mc->current_server->if_index,
1687
mc->current_server->af, mc);
1688
if(ret == 0){
1689
avahi_simple_poll_quit(s);
1690
return 0;
1691
}
1692
ret = clock_gettime(CLOCK_MONOTONIC,
1693
&mc->current_server->last_seen);
1694
if(ret == -1){
1695
perror_plus("clock_gettime");
1696
return -1;
1697
}
1698
mc->current_server = mc->current_server->next;
1699
block_time = 0; /* Call avahi to find new Mandos
1700
servers, but don't block */
1701
}
1702
1703
ret = avahi_simple_poll_iterate(s, (int)block_time);
1704
}
1705
if(ret != 0){
1706
if(ret > 0 or errno != EINTR){
1707
return (ret != 1) ? ret : 0;
1708
}
1709
}
1710
}
1711
}
1712
1713
__attribute__((nonnull))
1714
void run_network_hooks(const char *mode, const char *interface,
1715
const float delay){
1716
struct dirent **direntries = NULL;
1717
if(hookdir_fd == -1){
1718
hookdir_fd = open(hookdir, O_RDONLY | O_DIRECTORY | O_PATH
1719
| O_CLOEXEC);
1720
if(hookdir_fd == -1){
1721
if(errno == ENOENT){
1722
if(debug){
1723
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1724
" found\n", hookdir);
1725
}
1726
} else {
1727
perror_plus("open");
1728
}
1729
return;
1730
}
1731
}
1732
#ifdef __GLIBC__
1733
#if __GLIBC_PREREQ(2, 15)
1734
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1735
runnable_hook, alphasort);
1736
#else /* not __GLIBC_PREREQ(2, 15) */
1737
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1738
alphasort);
1739
#endif /* not __GLIBC_PREREQ(2, 15) */
1740
#else /* not __GLIBC__ */
1741
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1742
alphasort);
1743
#endif /* not __GLIBC__ */
1744
if(numhooks == -1){
1745
perror_plus("scandir");
1746
return;
1747
}
1748
struct dirent *direntry;
1749
int ret;
1750
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1751
if(devnull == -1){
1752
perror_plus("open(\"/dev/null\", O_RDONLY)");
1753
return;
1754
}
1755
for(int i = 0; i < numhooks; i++){
1756
direntry = direntries[i];
1757
if(debug){
1758
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1759
direntry->d_name);
1760
}
1761
pid_t hook_pid = fork();
1762
if(hook_pid == 0){
1763
/* Child */
1764
/* Raise privileges */
1765
errno = raise_privileges_permanently();
1766
if(errno != 0){
1767
perror_plus("Failed to raise privileges");
1768
_exit(EX_NOPERM);
1769
}
1770
/* Set group */
1771
errno = 0;
1772
ret = setgid(0);
1773
if(ret == -1){
1774
perror_plus("setgid");
1775
_exit(EX_NOPERM);
1776
}
1777
/* Reset supplementary groups */
1778
errno = 0;
1779
ret = setgroups(0, NULL);
1780
if(ret == -1){
1781
perror_plus("setgroups");
1782
_exit(EX_NOPERM);
1783
}
1784
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1785
if(ret == -1){
1786
perror_plus("setenv");
1787
_exit(EX_OSERR);
1788
}
1789
ret = setenv("DEVICE", interface, 1);
1790
if(ret == -1){
1791
perror_plus("setenv");
1792
_exit(EX_OSERR);
1793
}
1794
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1795
if(ret == -1){
1796
perror_plus("setenv");
1797
_exit(EX_OSERR);
1798
}
1799
ret = setenv("MODE", mode, 1);
1800
if(ret == -1){
1801
perror_plus("setenv");
1802
_exit(EX_OSERR);
1803
}
1804
char *delaystring;
1805
ret = asprintf(&delaystring, "%f", (double)delay);
1806
if(ret == -1){
1807
perror_plus("asprintf");
1808
_exit(EX_OSERR);
1809
}
1810
ret = setenv("DELAY", delaystring, 1);
1811
if(ret == -1){
1812
free(delaystring);
1813
perror_plus("setenv");
1814
_exit(EX_OSERR);
1815
}
1816
free(delaystring);
1817
if(connect_to != NULL){
1818
ret = setenv("CONNECT", connect_to, 1);
1819
if(ret == -1){
1820
perror_plus("setenv");
1821
_exit(EX_OSERR);
1822
}
1823
}
1824
int hook_fd = (int)TEMP_FAILURE_RETRY(openat(hookdir_fd,
1825
direntry->d_name,
1826
O_RDONLY));
1827
if(hook_fd == -1){
1828
perror_plus("openat");
1829
_exit(EXIT_FAILURE);
1830
}
1831
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1832
perror_plus("close");
1833
_exit(EXIT_FAILURE);
1834
}
1835
ret = dup2(devnull, STDIN_FILENO);
1836
if(ret == -1){
1837
perror_plus("dup2(devnull, STDIN_FILENO)");
1838
_exit(EX_OSERR);
1839
}
1840
ret = (int)TEMP_FAILURE_RETRY(close(devnull));
1841
if(ret == -1){
1842
perror_plus("close");
1843
_exit(EX_OSERR);
1844
}
1845
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1846
if(ret == -1){
1847
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1848
_exit(EX_OSERR);
1849
}
1850
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
1851
environ) == -1){
1852
perror_plus("fexecve");
1853
_exit(EXIT_FAILURE);
1854
}
1855
} else {
1856
if(hook_pid == -1){
1857
perror_plus("fork");
1858
free(direntry);
1859
continue;
1860
}
1861
int status;
1862
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1863
perror_plus("waitpid");
1864
free(direntry);
1865
continue;
1866
}
1867
if(WIFEXITED(status)){
1868
if(WEXITSTATUS(status) != 0){
1869
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1870
" with status %d\n", direntry->d_name,
1871
WEXITSTATUS(status));
1872
free(direntry);
1873
continue;
1874
}
1875
} else if(WIFSIGNALED(status)){
1876
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1877
" signal %d\n", direntry->d_name,
1878
WTERMSIG(status));
1879
free(direntry);
1880
continue;
1881
} else {
1882
fprintf_plus(stderr, "Warning: network hook \"%s\""
1883
" crashed\n", direntry->d_name);
1884
free(direntry);
1885
continue;
1886
}
1887
}
1888
if(debug){
1889
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1890
direntry->d_name);
1891
}
1892
free(direntry);
1893
}
1894
free(direntries);
1895
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1896
perror_plus("close");
1897
} else {
1898
hookdir_fd = -1;
1899
}
1900
close(devnull);
1901
}
1902
1903
__attribute__((nonnull, warn_unused_result))
1904
error_t bring_up_interface(const char *const interface,
1905
const float delay){
1906
error_t old_errno = errno;
1907
int ret;
1908
struct ifreq network;
1909
unsigned int if_index = if_nametoindex(interface);
1910
if(if_index == 0){
1911
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1912
errno = old_errno;
1913
return ENXIO;
1914
}
1915
1916
if(quit_now){
1917
errno = old_errno;
1918
return EINTR;
1919
}
1920
1921
if(not interface_is_up(interface)){
1922
error_t ret_errno = 0, ioctl_errno = 0;
1923
if(not get_flags(interface, &network)){
1924
ret_errno = errno;
1925
fprintf_plus(stderr, "Failed to get flags for interface "
1926
"\"%s\"\n", interface);
1927
errno = old_errno;
1928
return ret_errno;
1929
}
1930
network.ifr_flags |= IFF_UP; /* set flag */
1931
1932
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1933
if(sd == -1){
1934
ret_errno = errno;
1935
perror_plus("socket");
1936
errno = old_errno;
1937
return ret_errno;
1938
}
1939
1940
if(quit_now){
1941
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1942
if(ret == -1){
1943
perror_plus("close");
1944
}
1945
errno = old_errno;
1946
return EINTR;
1947
}
1948
1949
if(debug){
1950
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
1951
interface);
1952
}
1953
1954
/* Raise privileges */
1955
ret_errno = raise_privileges();
1956
if(ret_errno != 0){
1957
errno = ret_errno;
1958
perror_plus("Failed to raise privileges");
1959
}
1960
1961
#ifdef __linux__
1962
int ret_linux;
1963
bool restore_loglevel = false;
1964
if(ret_errno == 0){
1965
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1966
messages about the network interface to mess up the prompt */
1967
ret_linux = klogctl(8, NULL, 5);
1968
if(ret_linux == -1){
1969
perror_plus("klogctl");
1970
} else {
1971
restore_loglevel = true;
1972
}
1973
}
1974
#endif /* __linux__ */
1975
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1976
ioctl_errno = errno;
1977
#ifdef __linux__
1978
if(restore_loglevel){
1979
ret_linux = klogctl(7, NULL, 0);
1980
if(ret_linux == -1){
1981
perror_plus("klogctl");
1982
}
1983
}
1984
#endif /* __linux__ */
1985
1986
/* If raise_privileges() succeeded above */
1987
if(ret_errno == 0){
1988
/* Lower privileges */
1989
ret_errno = lower_privileges();
1990
if(ret_errno != 0){
1991
errno = ret_errno;
1992
perror_plus("Failed to lower privileges");
1993
}
1994
}
1995
1996
/* Close the socket */
1997
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1998
if(ret == -1){
1999
perror_plus("close");
2000
}
2001
2002
if(ret_setflags == -1){
2003
errno = ioctl_errno;
2004
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
2005
errno = old_errno;
2006
return ioctl_errno;
2007
}
2008
} else if(debug){
2009
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
2010
interface);
2011
}
2012
2013
/* Sleep checking until interface is running.
2014
Check every 0.25s, up to total time of delay */
2015
for(int i=0; i < delay * 4; i++){
2016
if(interface_is_running(interface)){
2017
break;
2018
}
2019
struct timespec sleeptime = { .tv_nsec = 250000000 };
2020
ret = nanosleep(&sleeptime, NULL);
2021
if(ret == -1 and errno != EINTR){
2022
perror_plus("nanosleep");
2023
}
2024
}
2025
2026
errno = old_errno;
2027
return 0;
2028
}
2029
2030
__attribute__((nonnull, warn_unused_result))
2031
error_t take_down_interface(const char *const interface){
2032
error_t old_errno = errno;
2033
struct ifreq network;
2034
unsigned int if_index = if_nametoindex(interface);
2035
if(if_index == 0){
2036
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2037
errno = old_errno;
2038
return ENXIO;
2039
}
2040
if(interface_is_up(interface)){
2041
error_t ret_errno = 0, ioctl_errno = 0;
2042
if(not get_flags(interface, &network) and debug){
2043
ret_errno = errno;
2044
fprintf_plus(stderr, "Failed to get flags for interface "
2045
"\"%s\"\n", interface);
2046
errno = old_errno;
2047
return ret_errno;
2048
}
2049
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2050
2051
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2052
if(sd == -1){
2053
ret_errno = errno;
2054
perror_plus("socket");
2055
errno = old_errno;
2056
return ret_errno;
2057
}
2058
2059
if(debug){
2060
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
2061
interface);
2062
}
2063
2064
/* Raise privileges */
2065
ret_errno = raise_privileges();
2066
if(ret_errno != 0){
2067
errno = ret_errno;
2068
perror_plus("Failed to raise privileges");
2069
}
2070
2071
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2072
ioctl_errno = errno;
2073
2074
/* If raise_privileges() succeeded above */
2075
if(ret_errno == 0){
2076
/* Lower privileges */
2077
ret_errno = lower_privileges();
2078
if(ret_errno != 0){
2079
errno = ret_errno;
2080
perror_plus("Failed to lower privileges");
2081
}
2082
}
2083
2084
/* Close the socket */
2085
int ret = (int)TEMP_FAILURE_RETRY(close(sd));
2086
if(ret == -1){
2087
perror_plus("close");
2088
}
2089
2090
if(ret_setflags == -1){
2091
errno = ioctl_errno;
2092
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2093
errno = old_errno;
2094
return ioctl_errno;
2095
}
2096
} else if(debug){
2097
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
2098
interface);
2099
}
2100
2101
errno = old_errno;
2102
return 0;
2103
}
2104
2105
811
int main(int argc, char *argv[]){
2106
mandos_context mc = { .server = NULL, .dh_bits = 1024,
2107
.priority = "SECURE256:!CTYPE-X.509:"
2108
"+CTYPE-OPENPGP", .current_server = NULL,
2109
.interfaces = NULL, .interfaces_size = 0 };
2110
AvahiSServiceBrowser *sb = NULL;
2111
error_t ret_errno;
2112
int ret;
2113
intmax_t tmpmax;
2114
char *tmp;
2115
int exitcode = EXIT_SUCCESS;
2116
char *interfaces_to_take_down = NULL;
2117
size_t interfaces_to_take_down_size = 0;
2118
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
2119
char old_tempdir[] = "/tmp/mandosXXXXXX";
2120
char *tempdir = NULL;
2121
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
2122
const char *seckey = PATHDIR "/" SECKEY;
2123
const char *pubkey = PATHDIR "/" PUBKEY;
2124
char *interfaces_hooks = NULL;
2125
2126
bool gnutls_initialized = false;
2127
bool gpgme_initialized = false;
2128
float delay = 2.5f;
2129
double retry_interval = 10; /* 10s between trying a server and
2130
retrying the same server again */
2131
2132
struct sigaction old_sigterm_action = { .sa_handler = SIG_DFL };
2133
struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
2134
2135
uid = getuid();
2136
gid = getgid();
2137
2138
/* Lower any group privileges we might have, just to be safe */
2139
errno = 0;
2140
ret = setgid(gid);
2141
if(ret == -1){
2142
perror_plus("setgid");
2143
}
2144
2145
/* Lower user privileges (temporarily) */
2146
errno = 0;
2147
ret = seteuid(uid);
2148
if(ret == -1){
2149
perror_plus("seteuid");
2150
}
2151
2152
if(quit_now){
2153
goto end;
2154
}
2155
2156
{
2157
struct argp_option options[] = {
2158
{ .name = "debug", .key = 128,
2159
.doc = "Debug mode", .group = 3 },
2160
{ .name = "connect", .key = 'c',
2161
.arg = "ADDRESS:PORT",
2162
.doc = "Connect directly to a specific Mandos server",
2163
.group = 1 },
2164
{ .name = "interface", .key = 'i',
2165
.arg = "NAME",
2166
.doc = "Network interface that will be used to search for"
2167
" Mandos servers",
2168
.group = 1 },
2169
{ .name = "seckey", .key = 's',
2170
.arg = "FILE",
2171
.doc = "OpenPGP secret key file base name",
2172
.group = 1 },
2173
{ .name = "pubkey", .key = 'p',
2174
.arg = "FILE",
2175
.doc = "OpenPGP public key file base name",
2176
.group = 2 },
2177
{ .name = "dh-bits", .key = 129,
2178
.arg = "BITS",
2179
.doc = "Bit length of the prime number used in the"
2180
" Diffie-Hellman key exchange",
2181
.group = 2 },
2182
{ .name = "priority", .key = 130,
2183
.arg = "STRING",
2184
.doc = "GnuTLS priority string for the TLS handshake",
2185
.group = 1 },
2186
{ .name = "delay", .key = 131,
2187
.arg = "SECONDS",
2188
.doc = "Maximum delay to wait for interface startup",
2189
.group = 2 },
2190
{ .name = "retry", .key = 132,
2191
.arg = "SECONDS",
2192
.doc = "Retry interval used when denied by the Mandos server",
2193
.group = 2 },
2194
{ .name = "network-hook-dir", .key = 133,
2195
.arg = "DIR",
2196
.doc = "Directory where network hooks are located",
2197
.group = 2 },
2198
/*
2199
* These reproduce what we would get without ARGP_NO_HELP
2200
*/
2201
{ .name = "help", .key = '?',
2202
.doc = "Give this help list", .group = -1 },
2203
{ .name = "usage", .key = -3,
2204
.doc = "Give a short usage message", .group = -1 },
2205
{ .name = "version", .key = 'V',
2206
.doc = "Print program version", .group = -1 },
2207
{ .name = NULL }
2208
};
2209
2210
error_t parse_opt(int key, char *arg,
2211
struct argp_state *state){
812
AvahiSServiceBrowser *sb = NULL;
813
int error;
814
int ret;
815
int exitcode = EXIT_SUCCESS;
816
const char *interface = "eth0";
817
struct ifreq network;
818
int sd;
819
uid_t uid;
820
gid_t gid;
821
char *connect_to = NULL;
822
char tempdir[] = "/tmp/mandosXXXXXX";
823
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
824
const char *seckey = PATHDIR "/" SECKEY;
825
const char *pubkey = PATHDIR "/" PUBKEY;
826
827
mandos_context mc = { .simple_poll = NULL, .server = NULL,
828
.dh_bits = 1024, .priority = "SECURE256"
829
":!CTYPE-X.509:+CTYPE-OPENPGP" };
830
bool gnutls_initalized = false;
831
bool gpgme_initalized = false;
832
833
{
834
struct argp_option options[] = {
835
{ .name = "debug", .key = 128,
836
.doc = "Debug mode", .group = 3 },
837
{ .name = "connect", .key = 'c',
838
.arg = "ADDRESS:PORT",
839
.doc = "Connect directly to a specific Mandos server",
840
.group = 1 },
841
{ .name = "interface", .key = 'i',
842
.arg = "NAME",
843
.doc = "Interface that will be used to search for Mandos"
844
" servers",
845
.group = 1 },
846
{ .name = "seckey", .key = 's',
847
.arg = "FILE",
848
.doc = "OpenPGP secret key file base name",
849
.group = 1 },
850
{ .name = "pubkey", .key = 'p',
851
.arg = "FILE",
852
.doc = "OpenPGP public key file base name",
853
.group = 2 },
854
{ .name = "dh-bits", .key = 129,
855
.arg = "BITS",
856
.doc = "Bit length of the prime number used in the"
857
" Diffie-Hellman key exchange",
858
.group = 2 },
859
{ .name = "priority", .key = 130,
860
.arg = "STRING",
861
.doc = "GnuTLS priority string for the TLS handshake",
862
.group = 1 },
863
{ .name = NULL }
864
};
865
866
error_t parse_opt (int key, char *arg,
867
struct argp_state *state) {
868
/* Get the INPUT argument from `argp_parse', which we know is
869
a pointer to our plugin list pointer. */
870
switch (key) {
871
case 128: /* --debug */
872
debug = true;
873
break;
874
case 'c': /* --connect */
875
connect_to = arg;
876
break;
877
case 'i': /* --interface */
878
interface = arg;
879
break;
880
case 's': /* --seckey */
881
seckey = arg;
882
break;
883
case 'p': /* --pubkey */
884
pubkey = arg;
885
break;
886
case 129: /* --dh-bits */
887
errno = 0;
888
mc.dh_bits = (unsigned int) strtol(arg, NULL, 10);
889
if (errno){
890
perror("strtol");
891
exit(EXIT_FAILURE);
892
}
893
break;
894
case 130: /* --priority */
895
mc.priority = arg;
896
break;
897
case ARGP_KEY_ARG:
898
argp_usage (state);
899
case ARGP_KEY_END:
900
break;
901
default:
902
return ARGP_ERR_UNKNOWN;
903
}
904
return 0;
905
}
906
907
struct argp argp = { .options = options, .parser = parse_opt,
908
.args_doc = "",
909
.doc = "Mandos client -- Get and decrypt"
910
" passwords from a Mandos server" };
911
ret = argp_parse (&argp, argc, argv, 0, 0, NULL);
912
if (ret == ARGP_ERR_UNKNOWN){
913
fprintf(stderr, "Unknown error while parsing arguments\n");
914
exitcode = EXIT_FAILURE;
915
goto end;
916
}
917
}
918
919
/* If the interface is down, bring it up */
920
{
921
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
922
if(sd < 0) {
923
perror("socket");
924
exitcode = EXIT_FAILURE;
925
goto end;
926
}
927
strcpy(network.ifr_name, interface);
928
ret = ioctl(sd, SIOCGIFFLAGS, &network);
929
if(ret == -1){
930
perror("ioctl SIOCGIFFLAGS");
931
exitcode = EXIT_FAILURE;
932
goto end;
933
}
934
if((network.ifr_flags & IFF_UP) == 0){
935
network.ifr_flags |= IFF_UP;
936
ret = ioctl(sd, SIOCSIFFLAGS, &network);
937
if(ret == -1){
938
perror("ioctl SIOCSIFFLAGS");
939
exitcode = EXIT_FAILURE;
940
goto end;
941
}
942
}
943
ret = TEMP_FAILURE_RETRY(close(sd));
944
if(ret == -1){
945
perror("close");
946
}
947
}
948
949
uid = getuid();
950
gid = getgid();
951
952
ret = setuid(uid);
953
if (ret == -1){
954
perror("setuid");
955
}
956
957
setgid(gid);
958
if (ret == -1){
959
perror("setgid");
960
}
961
962
ret = init_gnutls_global(&mc, pubkey, seckey);
963
if (ret == -1){
964
fprintf(stderr, "init_gnutls_global failed\n");
965
exitcode = EXIT_FAILURE;
966
goto end;
967
} else {
968
gnutls_initalized = true;
969
}
970
971
if(mkdtemp(tempdir) == NULL){
972
perror("mkdtemp");
973
tempdir[0] = '\0';
974
goto end;
975
}
976
977
if(not init_gpgme(&mc, pubkey, seckey, tempdir)){
978
fprintf(stderr, "gpgme_initalized failed\n");
979
exitcode = EXIT_FAILURE;
980
goto end;
981
} else {
982
gpgme_initalized = true;
983
}
984
985
if_index = (AvahiIfIndex) if_nametoindex(interface);
986
if(if_index == 0){
987
fprintf(stderr, "No such interface: \"%s\"\n", interface);
988
exit(EXIT_FAILURE);
989
}
990
991
if(connect_to != NULL){
992
/* Connect directly, do not use Zeroconf */
993
/* (Mainly meant for debugging) */
994
char *address = strrchr(connect_to, ':');
995
if(address == NULL){
996
fprintf(stderr, "No colon in address\n");
997
exitcode = EXIT_FAILURE;
998
goto end;
999
}
2212
1000
errno = 0;
2213
switch(key){
2214
case 128: /* --debug */
2215
debug = true;
2216
break;
2217
case 'c': /* --connect */
2218
connect_to = arg;
2219
break;
2220
case 'i': /* --interface */
2221
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
2222
arg, (int)',');
2223
if(ret_errno != 0){
2224
argp_error(state, "%s", strerror(ret_errno));
2225
}
2226
break;
2227
case 's': /* --seckey */
2228
seckey = arg;
2229
break;
2230
case 'p': /* --pubkey */
2231
pubkey = arg;
2232
break;
2233
case 129: /* --dh-bits */
2234
errno = 0;
2235
tmpmax = strtoimax(arg, &tmp, 10);
2236
if(errno != 0 or tmp == arg or *tmp != '\0'
2237
or tmpmax != (typeof(mc.dh_bits))tmpmax){
2238
argp_error(state, "Bad number of DH bits");
2239
}
2240
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
2241
break;
2242
case 130: /* --priority */
2243
mc.priority = arg;
2244
break;
2245
case 131: /* --delay */
2246
errno = 0;
2247
delay = strtof(arg, &tmp);
2248
if(errno != 0 or tmp == arg or *tmp != '\0'){
2249
argp_error(state, "Bad delay");
2250
}
2251
case 132: /* --retry */
2252
errno = 0;
2253
retry_interval = strtod(arg, &tmp);
2254
if(errno != 0 or tmp == arg or *tmp != '\0'
2255
or (retry_interval * 1000) > INT_MAX
2256
or retry_interval < 0){
2257
argp_error(state, "Bad retry interval");
2258
}
2259
break;
2260
case 133: /* --network-hook-dir */
2261
hookdir = arg;
2262
break;
2263
/*
2264
* These reproduce what we would get without ARGP_NO_HELP
2265
*/
2266
case '?': /* --help */
2267
argp_state_help(state, state->out_stream,
2268
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
2269
& ~(unsigned int)ARGP_HELP_EXIT_OK);
2270
case -3: /* --usage */
2271
argp_state_help(state, state->out_stream,
2272
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
2273
case 'V': /* --version */
2274
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
2275
exit(argp_err_exit_status);
2276
break;
2277
default:
2278
return ARGP_ERR_UNKNOWN;
2279
}
2280
return errno;
2281
}
2282
2283
struct argp argp = { .options = options, .parser = parse_opt,
2284
.args_doc = "",
2285
.doc = "Mandos client -- Get and decrypt"
2286
" passwords from a Mandos server" };
2287
ret = argp_parse(&argp, argc, argv,
2288
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2289
switch(ret){
2290
case 0:
2291
break;
2292
case ENOMEM:
2293
default:
2294
errno = ret;
2295
perror_plus("argp_parse");
2296
exitcode = EX_OSERR;
2297
goto end;
2298
case EINVAL:
2299
exitcode = EX_USAGE;
2300
goto end;
2301
}
2302
}
2303
2304
{
2305
/* Work around Debian bug #633582:
2306
<http://bugs.debian.org/633582> */
2307
2308
/* Re-raise privileges */
2309
ret_errno = raise_privileges();
2310
if(ret_errno != 0){
2311
errno = ret_errno;
2312
perror_plus("Failed to raise privileges");
2313
} else {
2314
struct stat st;
2315
2316
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
2317
int seckey_fd = open(seckey, O_RDONLY);
2318
if(seckey_fd == -1){
2319
perror_plus("open");
2320
} else {
2321
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
2322
if(ret == -1){
2323
perror_plus("fstat");
2324
} else {
2325
if(S_ISREG(st.st_mode)
2326
and st.st_uid == 0 and st.st_gid == 0){
2327
ret = fchown(seckey_fd, uid, gid);
2328
if(ret == -1){
2329
perror_plus("fchown");
2330
}
2331
}
2332
}
2333
TEMP_FAILURE_RETRY(close(seckey_fd));
2334
}
2335
}
2336
2337
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2338
int pubkey_fd = open(pubkey, O_RDONLY);
2339
if(pubkey_fd == -1){
2340
perror_plus("open");
2341
} else {
2342
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
2343
if(ret == -1){
2344
perror_plus("fstat");
2345
} else {
2346
if(S_ISREG(st.st_mode)
2347
and st.st_uid == 0 and st.st_gid == 0){
2348
ret = fchown(pubkey_fd, uid, gid);
2349
if(ret == -1){
2350
perror_plus("fchown");
2351
}
2352
}
2353
}
2354
TEMP_FAILURE_RETRY(close(pubkey_fd));
2355
}
2356
}
2357
2358
/* Lower privileges */
2359
ret_errno = lower_privileges();
2360
if(ret_errno != 0){
2361
errno = ret_errno;
2362
perror_plus("Failed to lower privileges");
2363
}
2364
}
2365
}
2366
2367
/* Remove invalid interface names (except "none") */
2368
{
2369
char *interface = NULL;
2370
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2371
interface))){
2372
if(strcmp(interface, "none") != 0
2373
and if_nametoindex(interface) == 0){
2374
if(interface[0] != '\0'){
2375
fprintf_plus(stderr, "Not using nonexisting interface"
2376
" \"%s\"\n", interface);
2377
}
2378
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2379
interface = NULL;
2380
}
2381
}
2382
}
2383
2384
/* Run network hooks */
2385
{
2386
if(mc.interfaces != NULL){
2387
interfaces_hooks = malloc(mc.interfaces_size);
2388
if(interfaces_hooks == NULL){
2389
perror_plus("malloc");
1001
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
1002
if(errno){
1003
perror("Bad port number");
1004
exitcode = EXIT_FAILURE;
2390
1005
goto end;
2391
1006
}
2392
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2393
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2394
}
2395
run_network_hooks("start", interfaces_hooks != NULL ?
2396
interfaces_hooks : "", delay);
2397
}
2398
2399
if(not debug){
2400
avahi_set_log_function(empty_log);
2401
}
2402
2403
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
2404
from the signal handler */
2405
/* Initialize the pseudo-RNG for Avahi */
2406
srand((unsigned int) time(NULL));
2407
simple_poll = avahi_simple_poll_new();
2408
if(simple_poll == NULL){
2409
fprintf_plus(stderr,
2410
"Avahi: Failed to create simple poll object.\n");
2411
exitcode = EX_UNAVAILABLE;
2412
goto end;
2413
}
2414
2415
sigemptyset(&sigterm_action.sa_mask);
2416
ret = sigaddset(&sigterm_action.sa_mask, SIGINT);
2417
if(ret == -1){
2418
perror_plus("sigaddset");
2419
exitcode = EX_OSERR;
2420
goto end;
2421
}
2422
ret = sigaddset(&sigterm_action.sa_mask, SIGHUP);
2423
if(ret == -1){
2424
perror_plus("sigaddset");
2425
exitcode = EX_OSERR;
2426
goto end;
2427
}
2428
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
2429
if(ret == -1){
2430
perror_plus("sigaddset");
2431
exitcode = EX_OSERR;
2432
goto end;
2433
}
2434
/* Need to check if the handler is SIG_IGN before handling:
2435
| [[info:libc:Initial Signal Actions]] |
2436
| [[info:libc:Basic Signal Handling]] |
2437
*/
2438
ret = sigaction(SIGINT, NULL, &old_sigterm_action);
2439
if(ret == -1){
2440
perror_plus("sigaction");
2441
return EX_OSERR;
2442
}
2443
if(old_sigterm_action.sa_handler != SIG_IGN){
2444
ret = sigaction(SIGINT, &sigterm_action, NULL);
2445
if(ret == -1){
2446
perror_plus("sigaction");
2447
exitcode = EX_OSERR;
2448
goto end;
2449
}
2450
}
2451
ret = sigaction(SIGHUP, NULL, &old_sigterm_action);
2452
if(ret == -1){
2453
perror_plus("sigaction");
2454
return EX_OSERR;
2455
}
2456
if(old_sigterm_action.sa_handler != SIG_IGN){
2457
ret = sigaction(SIGHUP, &sigterm_action, NULL);
2458
if(ret == -1){
2459
perror_plus("sigaction");
2460
exitcode = EX_OSERR;
2461
goto end;
2462
}
2463
}
2464
ret = sigaction(SIGTERM, NULL, &old_sigterm_action);
2465
if(ret == -1){
2466
perror_plus("sigaction");
2467
return EX_OSERR;
2468
}
2469
if(old_sigterm_action.sa_handler != SIG_IGN){
2470
ret = sigaction(SIGTERM, &sigterm_action, NULL);
2471
if(ret == -1){
2472
perror_plus("sigaction");
2473
exitcode = EX_OSERR;
2474
goto end;
2475
}
2476
}
2477
2478
/* If no interfaces were specified, make a list */
2479
if(mc.interfaces == NULL){
2480
struct dirent **direntries = NULL;
2481
/* Look for any good interfaces */
2482
ret = scandir(sys_class_net, &direntries, good_interface,
2483
alphasort);
2484
if(ret >= 1){
2485
/* Add all found interfaces to interfaces list */
2486
for(int i = 0; i < ret; ++i){
2487
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2488
direntries[i]->d_name);
2489
if(ret_errno != 0){
2490
errno = ret_errno;
2491
perror_plus("argz_add");
2492
free(direntries[i]);
2493
continue;
2494
}
2495
if(debug){
2496
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2497
direntries[i]->d_name);
2498
}
2499
free(direntries[i]);
2500
}
2501
free(direntries);
2502
} else {
2503
if(ret == 0){
2504
free(direntries);
2505
}
2506
fprintf_plus(stderr, "Could not find a network interface\n");
2507
exitcode = EXIT_FAILURE;
2508
goto end;
2509
}
2510
}
2511
2512
/* Bring up interfaces which are down, and remove any "none"s */
2513
{
2514
char *interface = NULL;
2515
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2516
interface))){
2517
/* If interface name is "none", stop bringing up interfaces.
2518
Also remove all instances of "none" from the list */
2519
if(strcmp(interface, "none") == 0){
2520
argz_delete(&mc.interfaces, &mc.interfaces_size,
2521
interface);
2522
interface = NULL;
2523
while((interface = argz_next(mc.interfaces,
2524
mc.interfaces_size, interface))){
2525
if(strcmp(interface, "none") == 0){
2526
argz_delete(&mc.interfaces, &mc.interfaces_size,
2527
interface);
2528
interface = NULL;
2529
}
2530
}
2531
break;
2532
}
2533
bool interface_was_up = interface_is_up(interface);
2534
errno = bring_up_interface(interface, delay);
2535
if(not interface_was_up){
2536
if(errno != 0){
2537
perror_plus("Failed to bring up interface");
2538
} else {
2539
errno = argz_add(&interfaces_to_take_down,
2540
&interfaces_to_take_down_size,
2541
interface);
2542
if(errno != 0){
2543
perror_plus("argz_add");
2544
}
2545
}
2546
}
2547
}
2548
if(debug and (interfaces_to_take_down == NULL)){
2549
fprintf_plus(stderr, "No interfaces were brought up\n");
2550
}
2551
}
2552
2553
/* If we only got one interface, explicitly use only that one */
2554
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2555
if(debug){
2556
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2557
mc.interfaces);
2558
}
2559
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2560
}
2561
2562
if(quit_now){
2563
goto end;
2564
}
2565
2566
ret = init_gnutls_global(pubkey, seckey, &mc);
2567
if(ret == -1){
2568
fprintf_plus(stderr, "init_gnutls_global failed\n");
2569
exitcode = EX_UNAVAILABLE;
2570
goto end;
2571
} else {
2572
gnutls_initialized = true;
2573
}
2574
2575
if(quit_now){
2576
goto end;
2577
}
2578
2579
/* Try /run/tmp before /tmp */
2580
tempdir = mkdtemp(run_tempdir);
2581
if(tempdir == NULL and errno == ENOENT){
2582
if(debug){
2583
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2584
run_tempdir, old_tempdir);
2585
}
2586
tempdir = mkdtemp(old_tempdir);
2587
}
2588
if(tempdir == NULL){
2589
perror_plus("mkdtemp");
2590
goto end;
2591
}
2592
2593
if(quit_now){
2594
goto end;
2595
}
2596
2597
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
2598
fprintf_plus(stderr, "init_gpgme failed\n");
2599
exitcode = EX_UNAVAILABLE;
2600
goto end;
2601
} else {
2602
gpgme_initialized = true;
2603
}
2604
2605
if(quit_now){
2606
goto end;
2607
}
2608
2609
if(connect_to != NULL){
2610
/* Connect directly, do not use Zeroconf */
2611
/* (Mainly meant for debugging) */
2612
char *address = strrchr(connect_to, ':');
2613
2614
if(address == NULL){
2615
fprintf_plus(stderr, "No colon in address\n");
2616
exitcode = EX_USAGE;
2617
goto end;
2618
}
2619
2620
if(quit_now){
2621
goto end;
2622
}
2623
2624
in_port_t port;
2625
errno = 0;
2626
tmpmax = strtoimax(address+1, &tmp, 10);
2627
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2628
or tmpmax != (in_port_t)tmpmax){
2629
fprintf_plus(stderr, "Bad port number\n");
2630
exitcode = EX_USAGE;
2631
goto end;
2632
}
2633
2634
if(quit_now){
2635
goto end;
2636
}
2637
2638
port = (in_port_t)tmpmax;
2639
*address = '\0';
2640
/* Colon in address indicates IPv6 */
2641
int af;
2642
if(strchr(connect_to, ':') != NULL){
2643
af = AF_INET6;
2644
/* Accept [] around IPv6 address - see RFC 5952 */
2645
if(connect_to[0] == '[' and address[-1] == ']')
2646
{
2647
connect_to++;
2648
address[-1] = '\0';
2649
}
2650
} else {
2651
af = AF_INET;
2652
}
2653
address = connect_to;
2654
2655
if(quit_now){
2656
goto end;
2657
}
2658
2659
while(not quit_now){
2660
ret = start_mandos_communication(address, port, if_index, af,
2661
&mc);
2662
if(quit_now or ret == 0){
2663
break;
2664
}
2665
if(debug){
2666
fprintf_plus(stderr, "Retrying in %d seconds\n",
2667
(int)retry_interval);
2668
}
2669
sleep((unsigned int)retry_interval);
2670
}
2671
2672
if(not quit_now){
2673
exitcode = EXIT_SUCCESS;
2674
}
2675
2676
goto end;
2677
}
2678
2679
if(quit_now){
2680
goto end;
2681
}
2682
2683
{
2684
AvahiServerConfig config;
2685
/* Do not publish any local Zeroconf records */
2686
avahi_server_config_init(&config);
2687
config.publish_hinfo = 0;
2688
config.publish_addresses = 0;
2689
config.publish_workstation = 0;
2690
config.publish_domain = 0;
2691
2692
/* Allocate a new server */
2693
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2694
&config, NULL, NULL, &ret_errno);
2695
2696
/* Free the Avahi configuration data */
2697
avahi_server_config_free(&config);
2698
}
2699
2700
/* Check if creating the Avahi server object succeeded */
2701
if(mc.server == NULL){
2702
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
2703
avahi_strerror(ret_errno));
2704
exitcode = EX_UNAVAILABLE;
2705
goto end;
2706
}
2707
2708
if(quit_now){
2709
goto end;
2710
}
2711
2712
/* Create the Avahi service browser */
2713
sb = avahi_s_service_browser_new(mc.server, if_index,
2714
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2715
NULL, 0, browse_callback,
2716
(void *)&mc);
2717
if(sb == NULL){
2718
fprintf_plus(stderr, "Failed to create service browser: %s\n",
2719
avahi_strerror(avahi_server_errno(mc.server)));
2720
exitcode = EX_UNAVAILABLE;
2721
goto end;
2722
}
2723
2724
if(quit_now){
2725
goto end;
2726
}
2727
2728
/* Run the main loop */
2729
2730
if(debug){
2731
fprintf_plus(stderr, "Starting Avahi loop search\n");
2732
}
2733
2734
ret = avahi_loop_with_timeout(simple_poll,
2735
(int)(retry_interval * 1000), &mc);
2736
if(debug){
2737
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
2738
(ret == 0) ? "successfully" : "with error");
2739
}
2740
1007
*address = '\0';
1008
address = connect_to;
1009
ret = start_mandos_communication(address, port, if_index, &mc);
1010
if(ret < 0){
1011
exitcode = EXIT_FAILURE;
1012
} else {
1013
exitcode = EXIT_SUCCESS;
1014
}
1015
goto end;
1016
}
1017
1018
if (not debug){
1019
avahi_set_log_function(empty_log);
1020
}
1021
1022
/* Initialize the pseudo-RNG for Avahi */
1023
srand((unsigned int) time(NULL));
1024
1025
/* Allocate main Avahi loop object */
1026
mc.simple_poll = avahi_simple_poll_new();
1027
if (mc.simple_poll == NULL) {
1028
fprintf(stderr, "Avahi: Failed to create simple poll"
1029
" object.\n");
1030
exitcode = EXIT_FAILURE;
1031
goto end;
1032
}
1033
1034
{
1035
AvahiServerConfig config;
1036
/* Do not publish any local Zeroconf records */
1037
avahi_server_config_init(&config);
1038
config.publish_hinfo = 0;
1039
config.publish_addresses = 0;
1040
config.publish_workstation = 0;
1041
config.publish_domain = 0;
1042
1043
/* Allocate a new server */
1044
mc.server = avahi_server_new(avahi_simple_poll_get
1045
(mc.simple_poll), &config, NULL,
1046
NULL, &error);
1047
1048
/* Free the Avahi configuration data */
1049
avahi_server_config_free(&config);
1050
}
1051
1052
/* Check if creating the Avahi server object succeeded */
1053
if (mc.server == NULL) {
1054
fprintf(stderr, "Failed to create Avahi server: %s\n",
1055
avahi_strerror(error));
1056
exitcode = EXIT_FAILURE;
1057
goto end;
1058
}
1059
1060
/* Create the Avahi service browser */
1061
sb = avahi_s_service_browser_new(mc.server, if_index,
1062
AVAHI_PROTO_INET6,
1063
"_mandos._tcp", NULL, 0,
1064
browse_callback, &mc);
1065
if (sb == NULL) {
1066
fprintf(stderr, "Failed to create service browser: %s\n",
1067
avahi_strerror(avahi_server_errno(mc.server)));
1068
exitcode = EXIT_FAILURE;
1069
goto end;
1070
}
1071
1072
/* Run the main loop */
1073
1074
if (debug){
1075
fprintf(stderr, "Starting Avahi loop search\n");
1076
}
1077
1078
avahi_simple_poll_loop(mc.simple_poll);
1079
2741
1080
end:
2742
2743
if(debug){
2744
fprintf_plus(stderr, "%s exiting\n", argv[0]);
2745
}
2746
2747
/* Cleanup things */
2748
free(mc.interfaces);
2749
2750
if(sb != NULL)
2751
avahi_s_service_browser_free(sb);
2752
2753
if(mc.server != NULL)
2754
avahi_server_free(mc.server);
2755
2756
if(simple_poll != NULL)
2757
avahi_simple_poll_free(simple_poll);
2758
2759
if(gnutls_initialized){
2760
gnutls_certificate_free_credentials(mc.cred);
2761
gnutls_global_deinit();
2762
gnutls_dh_params_deinit(mc.dh_params);
2763
}
2764
2765
if(gpgme_initialized){
2766
gpgme_release(mc.ctx);
2767
}
2768
2769
/* Cleans up the circular linked list of Mandos servers the client
2770
has seen */
2771
if(mc.current_server != NULL){
2772
mc.current_server->prev->next = NULL;
2773
while(mc.current_server != NULL){
2774
server *next = mc.current_server->next;
2775
#ifdef __GNUC__
2776
#pragma GCC diagnostic push
2777
#pragma GCC diagnostic ignored "-Wcast-qual"
2778
#endif
2779
free((char *)(mc.current_server->ip));
2780
#ifdef __GNUC__
2781
#pragma GCC diagnostic pop
2782
#endif
2783
free(mc.current_server);
2784
mc.current_server = next;
2785
}
2786
}
2787
2788
/* Re-raise privileges */
2789
{
2790
ret_errno = raise_privileges();
2791
if(ret_errno != 0){
2792
errno = ret_errno;
2793
perror_plus("Failed to raise privileges");
2794
} else {
2795
2796
/* Run network hooks */
2797
run_network_hooks("stop", interfaces_hooks != NULL ?
2798
interfaces_hooks : "", delay);
2799
2800
/* Take down the network interfaces which were brought up */
2801
{
2802
char *interface = NULL;
2803
while((interface=argz_next(interfaces_to_take_down,
2804
interfaces_to_take_down_size,
2805
interface))){
2806
ret_errno = take_down_interface(interface);
2807
if(ret_errno != 0){
2808
errno = ret_errno;
2809
perror_plus("Failed to take down interface");
2810
}
2811
}
2812
if(debug and (interfaces_to_take_down == NULL)){
2813
fprintf_plus(stderr, "No interfaces needed to be taken"
2814
" down\n");
2815
}
2816
}
2817
}
2818
2819
ret_errno = lower_privileges_permanently();
2820
if(ret_errno != 0){
2821
errno = ret_errno;
2822
perror_plus("Failed to lower privileges permanently");
2823
}
2824
}
2825
2826
free(interfaces_to_take_down);
2827
free(interfaces_hooks);
2828
2829
/* Removes the GPGME temp directory and all files inside */
2830
if(tempdir != NULL){
2831
struct dirent **direntries = NULL;
2832
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY
2833
| O_NOFOLLOW
2834
| O_DIRECTORY
2835
| O_PATH));
2836
if(tempdir_fd == -1){
2837
perror_plus("open");
2838
} else {
2839
#ifdef __GLIBC__
2840
#if __GLIBC_PREREQ(2, 15)
2841
int numentries = scandirat(tempdir_fd, ".", &direntries,
2842
notdotentries, alphasort);
2843
#else /* not __GLIBC_PREREQ(2, 15) */
2844
int numentries = scandir(tempdir, &direntries, notdotentries,
2845
alphasort);
2846
#endif /* not __GLIBC_PREREQ(2, 15) */
2847
#else /* not __GLIBC__ */
2848
int numentries = scandir(tempdir, &direntries, notdotentries,
2849
alphasort);
2850
#endif /* not __GLIBC__ */
2851
if(numentries >= 0){
2852
for(int i = 0; i < numentries; i++){
2853
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2854
if(ret == -1){
2855
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2856
" \"%s\", 0): %s\n", tempdir,
2857
direntries[i]->d_name, strerror(errno));
2858
}
2859
free(direntries[i]);
2860
}
2861
2862
/* need to clean even if 0 because man page doesn't specify */
2863
free(direntries);
2864
if(numentries == -1){
2865
perror_plus("scandir");
2866
}
2867
ret = rmdir(tempdir);
2868
if(ret == -1 and errno != ENOENT){
2869
perror_plus("rmdir");
2870
}
2871
}
2872
TEMP_FAILURE_RETRY(close(tempdir_fd));
2873
}
2874
}
2875
2876
if(quit_now){
2877
sigemptyset(&old_sigterm_action.sa_mask);
2878
old_sigterm_action.sa_handler = SIG_DFL;
2879
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
2880
&old_sigterm_action,
2881
NULL));
2882
if(ret == -1){
2883
perror_plus("sigaction");
2884
}
2885
do {
2886
ret = raise(signal_received);
2887
} while(ret != 0 and errno == EINTR);
2888
if(ret != 0){
2889
perror_plus("raise");
2890
abort();
2891
}
2892
TEMP_FAILURE_RETRY(pause());
2893
}
2894
2895
return exitcode;
1081
1082
if (debug){
1083
fprintf(stderr, "%s exiting\n", argv[0]);
1084
}
1085
1086
/* Cleanup things */
1087
if (sb != NULL)
1088
avahi_s_service_browser_free(sb);
1089
1090
if (mc.server != NULL)
1091
avahi_server_free(mc.server);
1092
1093
if (mc.simple_poll != NULL)
1094
avahi_simple_poll_free(mc.simple_poll);
1095
1096
if (gnutls_initalized){
1097
gnutls_certificate_free_credentials(mc.cred);
1098
gnutls_global_deinit ();
1099
gnutls_dh_params_deinit(mc.dh_params);
1100
}
1101
1102
if(gpgme_initalized){
1103
gpgme_release(mc.ctx);
1104
}
1105
1106
/* Removes the temp directory used by GPGME */
1107
if(tempdir[0] != '\0'){
1108
DIR *d;
1109
struct dirent *direntry;
1110
d = opendir(tempdir);
1111
if(d == NULL){
1112
perror("opendir");
1113
} else {
1114
while(true){
1115
direntry = readdir(d);
1116
if(direntry == NULL){
1117
break;
1118
}
1119
if (direntry->d_type == DT_REG){
1120
char *fullname = NULL;
1121
ret = asprintf(&fullname, "%s/%s", tempdir,
1122
direntry->d_name);
1123
if(ret < 0){
1124
perror("asprintf");
1125
continue;
1126
}
1127
ret = unlink(fullname);
1128
if(ret == -1){
1129
fprintf(stderr, "unlink(\"%s\"): %s",
1130
fullname, strerror(errno));
1131
}
1132
free(fullname);
1133
}
1134
}
1135
closedir(d);
1136
}
1137
ret = rmdir(tempdir);
1138
if(ret == -1){
1139
perror("rmdir");
1140
}
1141
}
1142
1143
return exitcode;
2896
1144
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0