(root)/mandos/release
» Revision
237.7.289
(compared to revision 237.11.25)
: plugins.d/mandos-client.c
To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 237.7.289
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.289
- Committer: Teddy Hogeborn
- Date: 2015-01-25 00:02:51 UTC
- mto: (237.7.304 trunk)
- mto: This revision was merged to the branch mainline in revision 325.
- Revision ID: teddy@recompile.se-20150125000251-j2bw50gfq9smqyxe
mandos.xml (SEE ALSO): Update links.
Update link to GnuPG home page, change reference from TLS 1.1 to TLS
1.2, and change to latest RFC for using OpenPGP keys with TLS (and use
its correct title).
Update link to GnuPG home page, change reference from TLS 1.1 to TLS
1.2, and change to latest RFC for using OpenPGP keys with TLS (and use
its correct title).
- files added:
- debian/mandos-client.examples
- debian/upstream
- files modified:
- .bzrignore
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2011 Teddy Hogeborn
13
* Copyright © 2008-2011 Björn Påhlsson
12
* Copyright © 2008-2014 Teddy Hogeborn
13
* Copyright © 2008-2014 Björn Påhlsson
14
14
*
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
33
#ifndef _LARGEFILE_SOURCE
34
34
#define _LARGEFILE_SOURCE
35
#endif
35
#endif /* not _LARGEFILE_SOURCE */
36
36
#ifndef _FILE_OFFSET_BITS
37
37
#define _FILE_OFFSET_BITS 64
38
#endif
38
#endif /* not _FILE_OFFSET_BITS */
39
39
40
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
41
42
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror(), remove() */
44
#include <stdint.h> /* uint16_t, uint32_t */
43
stdout, ferror() */
44
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
45
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
47
strtof(), abort() */
55
55
opendir(), DIR */
56
56
#include <sys/stat.h> /* open(), S_ISREG */
57
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect() */
59
#include <fcntl.h> /* open() */
58
inet_pton(), connect(),
59
getnameinfo() */
60
#include <fcntl.h> /* open(), unlinkat() */
60
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
61
62
*/
62
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
63
64
strtoimax() */
64
#include <assert.h> /* assert() */
65
65
#include <errno.h> /* perror(), errno,
66
66
program_invocation_short_name */
67
67
#include <time.h> /* nanosleep(), time(), sleep() */
73
73
*/
74
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
75
getuid(), getgid(), seteuid(),
76
setgid(), pause(), _exit() */
77
#include <arpa/inet.h> /* inet_pton(), htons, inet_ntop() */
76
setgid(), pause(), _exit(),
77
unlinkat() */
78
#include <arpa/inet.h> /* inet_pton(), htons() */
78
79
#include <iso646.h> /* not, or, and */
79
80
#include <argp.h> /* struct argp_option, error_t, struct
80
81
argp_state, struct argp,
88
89
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
89
90
WEXITSTATUS(), WTERMSIG() */
90
91
#include <grp.h> /* setgroups() */
92
#include <argz.h> /* argz_add_sep(), argz_next(),
93
argz_delete(), argz_append(),
94
argz_stringify(), argz_add(),
95
argz_count() */
96
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
97
EAI_SYSTEM, gai_strerror() */
91
98
92
99
#ifdef __linux__
93
100
#include <sys/klog.h> /* klogctl() */
135
142
static const char sys_class_net[] = "/sys/class/net";
136
143
char *connect_to = NULL;
137
144
const char *hookdir = HOOKDIR;
145
int hookdir_fd = -1;
146
uid_t uid = 65534;
147
gid_t gid = 65534;
138
148
139
149
/* Doubly linked list that need to be circularly linked when used */
140
150
typedef struct server{
141
151
const char *ip;
142
uint16_t port;
152
in_port_t port;
143
153
AvahiIfIndex if_index;
144
154
int af;
145
155
struct timespec last_seen;
149
159
150
160
/* Used for passing in values through the Avahi callback functions */
151
161
typedef struct {
152
AvahiSimplePoll *simple_poll;
153
162
AvahiServer *server;
154
163
gnutls_certificate_credentials_t cred;
155
164
unsigned int dh_bits;
157
166
const char *priority;
158
167
gpgme_ctx_t ctx;
159
168
server *current_server;
169
char *interfaces;
170
size_t interfaces_size;
160
171
} mandos_context;
161
172
162
/* global context so signal handler can reach it*/
163
mandos_context mc = { .simple_poll = NULL, .server = NULL,
164
.dh_bits = 1024, .priority = "SECURE256"
165
":!CTYPE-X.509:+CTYPE-OPENPGP",
166
.current_server = NULL };
173
/* global so signal handler can reach it*/
174
AvahiSimplePoll *simple_poll;
167
175
168
176
sig_atomic_t quit_now = 0;
169
177
int signal_received = 0;
170
178
171
179
/* Function to use when printing errors */
172
180
void perror_plus(const char *print_text){
181
int e = errno;
173
182
fprintf(stderr, "Mandos plugin %s: ",
174
183
program_invocation_short_name);
184
errno = e;
175
185
perror(print_text);
176
186
}
177
187
188
__attribute__((format (gnu_printf, 2, 3), nonnull))
178
189
int fprintf_plus(FILE *stream, const char *format, ...){
179
190
va_list ap;
180
191
va_start (ap, format);
181
192
182
193
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
183
194
program_invocation_short_name));
184
return TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
195
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
185
196
}
186
197
187
198
/*
189
200
* bytes. "buffer_capacity" is how much is currently allocated,
190
201
* "buffer_length" is how much is already used.
191
202
*/
203
__attribute__((nonnull, warn_unused_result))
192
204
size_t incbuffer(char **buffer, size_t buffer_length,
193
205
size_t buffer_capacity){
194
206
if(buffer_length + BUFFER_SIZE > buffer_capacity){
195
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
196
if(buffer == NULL){
207
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
208
if(new_buf == NULL){
209
int old_errno = errno;
210
free(*buffer);
211
errno = old_errno;
212
*buffer = NULL;
197
213
return 0;
198
214
}
215
*buffer = new_buf;
199
216
buffer_capacity += BUFFER_SIZE;
200
217
}
201
218
return buffer_capacity;
202
219
}
203
220
204
221
/* Add server to set of servers to retry periodically */
205
int add_server(const char *ip, uint16_t port, AvahiIfIndex if_index,
206
int af){
222
__attribute__((nonnull, warn_unused_result))
223
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
224
int af, server **current_server){
207
225
int ret;
208
226
server *new_server = malloc(sizeof(server));
209
227
if(new_server == NULL){
210
228
perror_plus("malloc");
211
return -1;
229
return false;
212
230
}
213
231
*new_server = (server){ .ip = strdup(ip),
214
232
.port = port,
216
234
.af = af };
217
235
if(new_server->ip == NULL){
218
236
perror_plus("strdup");
219
return -1;
237
free(new_server);
238
return false;
239
}
240
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
241
if(ret == -1){
242
perror_plus("clock_gettime");
243
#ifdef __GNUC__
244
#pragma GCC diagnostic push
245
#pragma GCC diagnostic ignored "-Wcast-qual"
246
#endif
247
free((char *)(new_server->ip));
248
#ifdef __GNUC__
249
#pragma GCC diagnostic pop
250
#endif
251
free(new_server);
252
return false;
220
253
}
221
254
/* Special case of first server */
222
if (mc.current_server == NULL){
255
if(*current_server == NULL){
223
256
new_server->next = new_server;
224
257
new_server->prev = new_server;
225
mc.current_server = new_server;
226
/* Place the new server last in the list */
258
*current_server = new_server;
227
259
} else {
228
new_server->next = mc.current_server;
229
new_server->prev = mc.current_server->prev;
260
/* Place the new server last in the list */
261
new_server->next = *current_server;
262
new_server->prev = (*current_server)->prev;
230
263
new_server->prev->next = new_server;
231
mc.current_server->prev = new_server;
232
}
233
ret = clock_gettime(CLOCK_MONOTONIC, &mc.current_server->last_seen);
234
if(ret == -1){
235
perror_plus("clock_gettime");
236
return -1;
237
}
238
return 0;
264
(*current_server)->prev = new_server;
265
}
266
return true;
239
267
}
240
268
241
269
/*
242
270
* Initialize GPGME.
243
271
*/
244
static bool init_gpgme(const char *seckey, const char *pubkey,
245
const char *tempdir){
272
__attribute__((nonnull, warn_unused_result))
273
static bool init_gpgme(const char * const seckey,
274
const char * const pubkey,
275
const char * const tempdir,
276
mandos_context *mc){
246
277
gpgme_error_t rc;
247
278
gpgme_engine_info_t engine_info;
248
279
249
250
280
/*
251
281
* Helper function to insert pub and seckey to the engine keyring.
252
282
*/
253
bool import_key(const char *filename){
283
bool import_key(const char * const filename){
254
284
int ret;
255
285
int fd;
256
286
gpgme_data_t pgp_data;
268
298
return false;
269
299
}
270
300
271
rc = gpgme_op_import(mc.ctx, pgp_data);
301
rc = gpgme_op_import(mc->ctx, pgp_data);
272
302
if(rc != GPG_ERR_NO_ERROR){
273
303
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
274
304
gpgme_strsource(rc), gpgme_strerror(rc));
318
348
}
319
349
320
350
/* Create new GPGME "context" */
321
rc = gpgme_new(&(mc.ctx));
351
rc = gpgme_new(&(mc->ctx));
322
352
if(rc != GPG_ERR_NO_ERROR){
323
353
fprintf_plus(stderr, "Mandos plugin mandos-client: "
324
354
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
337
367
* Decrypt OpenPGP data.
338
368
* Returns -1 on error
339
369
*/
370
__attribute__((nonnull, warn_unused_result))
340
371
static ssize_t pgp_packet_decrypt(const char *cryptotext,
341
372
size_t crypto_size,
342
char **plaintext){
373
char **plaintext,
374
mandos_context *mc){
343
375
gpgme_data_t dh_crypto, dh_plain;
344
376
gpgme_error_t rc;
345
377
ssize_t ret;
371
403
372
404
/* Decrypt data from the cryptotext data buffer to the plaintext
373
405
data buffer */
374
rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
406
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
375
407
if(rc != GPG_ERR_NO_ERROR){
376
408
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
377
409
gpgme_strsource(rc), gpgme_strerror(rc));
378
410
plaintext_length = -1;
379
411
if(debug){
380
412
gpgme_decrypt_result_t result;
381
result = gpgme_op_decrypt_result(mc.ctx);
413
result = gpgme_op_decrypt_result(mc->ctx);
382
414
if(result == NULL){
383
415
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
384
416
} else {
461
493
return plaintext_length;
462
494
}
463
495
464
static const char * safer_gnutls_strerror(int value){
465
const char *ret = gnutls_strerror(value); /* Spurious warning from
466
-Wunreachable-code */
496
__attribute__((warn_unused_result))
497
static const char *safer_gnutls_strerror(int value){
498
const char *ret = gnutls_strerror(value);
467
499
if(ret == NULL)
468
500
ret = "(unknown)";
469
501
return ret;
470
502
}
471
503
472
504
/* GnuTLS log function callback */
505
__attribute__((nonnull))
473
506
static void debuggnutls(__attribute__((unused)) int level,
474
507
const char* string){
475
508
fprintf_plus(stderr, "GnuTLS: %s", string);
476
509
}
477
510
511
__attribute__((nonnull, warn_unused_result))
478
512
static int init_gnutls_global(const char *pubkeyfilename,
479
const char *seckeyfilename){
513
const char *seckeyfilename,
514
mandos_context *mc){
480
515
int ret;
481
516
482
517
if(debug){
499
534
}
500
535
501
536
/* OpenPGP credentials */
502
ret = gnutls_certificate_allocate_credentials(&mc.cred);
537
ret = gnutls_certificate_allocate_credentials(&mc->cred);
503
538
if(ret != GNUTLS_E_SUCCESS){
504
539
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
505
540
safer_gnutls_strerror(ret));
515
550
}
516
551
517
552
ret = gnutls_certificate_set_openpgp_key_file
518
(mc.cred, pubkeyfilename, seckeyfilename,
553
(mc->cred, pubkeyfilename, seckeyfilename,
519
554
GNUTLS_OPENPGP_FMT_BASE64);
520
555
if(ret != GNUTLS_E_SUCCESS){
521
556
fprintf_plus(stderr,
527
562
}
528
563
529
564
/* GnuTLS server initialization */
530
ret = gnutls_dh_params_init(&mc.dh_params);
565
ret = gnutls_dh_params_init(&mc->dh_params);
531
566
if(ret != GNUTLS_E_SUCCESS){
532
567
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
533
568
" initialization: %s\n",
534
569
safer_gnutls_strerror(ret));
535
570
goto globalfail;
536
571
}
537
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
572
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
538
573
if(ret != GNUTLS_E_SUCCESS){
539
574
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
540
575
safer_gnutls_strerror(ret));
541
576
goto globalfail;
542
577
}
543
578
544
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
579
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
545
580
546
581
return 0;
547
582
548
583
globalfail:
549
584
550
gnutls_certificate_free_credentials(mc.cred);
585
gnutls_certificate_free_credentials(mc->cred);
551
586
gnutls_global_deinit();
552
gnutls_dh_params_deinit(mc.dh_params);
587
gnutls_dh_params_deinit(mc->dh_params);
553
588
return -1;
554
589
}
555
590
556
static int init_gnutls_session(gnutls_session_t *session){
591
__attribute__((nonnull, warn_unused_result))
592
static int init_gnutls_session(gnutls_session_t *session,
593
mandos_context *mc){
557
594
int ret;
558
595
/* GnuTLS session creation */
559
596
do {
571
608
{
572
609
const char *err;
573
610
do {
574
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
611
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
575
612
if(quit_now){
576
613
gnutls_deinit(*session);
577
614
return -1;
588
625
589
626
do {
590
627
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
591
mc.cred);
628
mc->cred);
592
629
if(quit_now){
593
630
gnutls_deinit(*session);
594
631
return -1;
604
641
/* ignore client certificate if any. */
605
642
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
606
643
607
gnutls_dh_set_prime_bits(*session, mc.dh_bits);
644
gnutls_dh_set_prime_bits(*session, mc->dh_bits);
608
645
609
646
return 0;
610
647
}
614
651
__attribute__((unused)) const char *txt){}
615
652
616
653
/* Called when a Mandos server is found */
617
static int start_mandos_communication(const char *ip, uint16_t port,
654
__attribute__((nonnull, warn_unused_result))
655
static int start_mandos_communication(const char *ip, in_port_t port,
618
656
AvahiIfIndex if_index,
619
int af){
657
int af, mandos_context *mc){
620
658
int ret, tcp_sd = -1;
621
659
ssize_t sret;
622
union {
623
struct sockaddr_in in;
624
struct sockaddr_in6 in6;
625
} to;
660
struct sockaddr_storage to;
626
661
char *buffer = NULL;
627
662
char *decrypted_buffer = NULL;
628
663
size_t buffer_length = 0;
652
687
return -1;
653
688
}
654
689
655
ret = init_gnutls_session(&session);
690
/* If the interface is specified and we have a list of interfaces */
691
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
692
/* Check if the interface is one of the interfaces we are using */
693
bool match = false;
694
{
695
char *interface = NULL;
696
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
697
interface))){
698
if(if_nametoindex(interface) == (unsigned int)if_index){
699
match = true;
700
break;
701
}
702
}
703
}
704
if(not match){
705
/* This interface does not match any in the list, so we don't
706
connect to the server */
707
if(debug){
708
char interface[IF_NAMESIZE];
709
if(if_indextoname((unsigned int)if_index, interface) == NULL){
710
perror_plus("if_indextoname");
711
} else {
712
fprintf_plus(stderr, "Skipping server on non-used interface"
713
" \"%s\"\n",
714
if_indextoname((unsigned int)if_index,
715
interface));
716
}
717
}
718
return -1;
719
}
720
}
721
722
ret = init_gnutls_session(&session, mc);
656
723
if(ret != 0){
657
724
return -1;
658
725
}
659
726
660
727
if(debug){
661
728
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
662
PRIu16 "\n", ip, port);
729
PRIuMAX "\n", ip, (uintmax_t)port);
663
730
}
664
731
665
732
tcp_sd = socket(pf, SOCK_STREAM, 0);
677
744
678
745
memset(&to, 0, sizeof(to));
679
746
if(af == AF_INET6){
680
to.in6.sin6_family = (sa_family_t)af;
681
ret = inet_pton(af, ip, &to.in6.sin6_addr);
747
((struct sockaddr_in6 *)&to)->sin6_family = (sa_family_t)af;
748
ret = inet_pton(af, ip, &((struct sockaddr_in6 *)&to)->sin6_addr);
682
749
} else { /* IPv4 */
683
to.in.sin_family = (sa_family_t)af;
684
ret = inet_pton(af, ip, &to.in.sin_addr);
750
((struct sockaddr_in *)&to)->sin_family = (sa_family_t)af;
751
ret = inet_pton(af, ip, &((struct sockaddr_in *)&to)->sin_addr);
685
752
}
686
753
if(ret < 0 ){
687
754
int e = errno;
696
763
goto mandos_end;
697
764
}
698
765
if(af == AF_INET6){
699
to.in6.sin6_port = htons(port); /* Spurious warnings from
700
-Wconversion and
701
-Wunreachable-code */
702
703
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
704
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
705
-Wunreachable-code*/
766
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
767
if(IN6_IS_ADDR_LINKLOCAL
768
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
706
769
if(if_index == AVAHI_IF_UNSPEC){
707
770
fprintf_plus(stderr, "An IPv6 link-local address is"
708
771
" incomplete without a network interface\n");
710
773
goto mandos_end;
711
774
}
712
775
/* Set the network interface number as scope */
713
to.in6.sin6_scope_id = (uint32_t)if_index;
776
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
714
777
}
715
778
} else {
716
to.in.sin_port = htons(port); /* Spurious warnings from
717
-Wconversion and
718
-Wunreachable-code */
779
((struct sockaddr_in *)&to)->sin_port = htons(port);
719
780
}
720
781
721
782
if(quit_now){
729
790
if(if_indextoname((unsigned int)if_index, interface) == NULL){
730
791
perror_plus("if_indextoname");
731
792
} else {
732
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIu16
733
"\n", ip, interface, port);
793
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
794
"\n", ip, interface, (uintmax_t)port);
734
795
}
735
796
} else {
736
fprintf_plus(stderr, "Connection to: %s, port %" PRIu16 "\n",
737
ip, port);
797
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
798
ip, (uintmax_t)port);
738
799
}
739
800
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
740
801
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
741
const char *pcret;
742
802
if(af == AF_INET6){
743
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
744
sizeof(addrstr));
803
ret = getnameinfo((struct sockaddr *)&to,
804
sizeof(struct sockaddr_in6),
805
addrstr, sizeof(addrstr), NULL, 0,
806
NI_NUMERICHOST);
745
807
} else {
746
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
747
sizeof(addrstr));
808
ret = getnameinfo((struct sockaddr *)&to,
809
sizeof(struct sockaddr_in),
810
addrstr, sizeof(addrstr), NULL, 0,
811
NI_NUMERICHOST);
748
812
}
749
if(pcret == NULL){
750
perror_plus("inet_ntop");
751
} else {
752
if(strcmp(addrstr, ip) != 0){
753
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
754
}
813
if(ret == EAI_SYSTEM){
814
perror_plus("getnameinfo");
815
} else if(ret != 0) {
816
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
817
} else if(strcmp(addrstr, ip) != 0){
818
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
755
819
}
756
820
}
757
821
761
825
}
762
826
763
827
if(af == AF_INET6){
764
ret = connect(tcp_sd, &to.in6, sizeof(to));
828
ret = connect(tcp_sd, (struct sockaddr *)&to,
829
sizeof(struct sockaddr_in6));
765
830
} else {
766
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
831
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
832
sizeof(struct sockaddr_in));
767
833
}
768
834
if(ret < 0){
769
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
835
if((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
770
836
int e = errno;
771
837
perror_plus("connect");
772
838
errno = e;
818
884
goto mandos_end;
819
885
}
820
886
821
/* Spurious warning from -Wint-to-pointer-cast */
822
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
887
/* This casting via intptr_t is to eliminate warning about casting
888
an int to a pointer type. This is exactly how the GnuTLS Guile
889
function "set-session-transport-fd!" does it. */
890
gnutls_transport_set_ptr(session,
891
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
823
892
824
893
if(quit_now){
825
894
errno = EINTR;
930
999
if(buffer_length > 0){
931
1000
ssize_t decrypted_buffer_size;
932
1001
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
933
&decrypted_buffer);
1002
&decrypted_buffer, mc);
934
1003
if(decrypted_buffer_size >= 0){
935
1004
936
1005
written = 0;
984
1053
return retval;
985
1054
}
986
1055
1056
__attribute__((nonnull))
987
1057
static void resolve_callback(AvahiSServiceResolver *r,
988
1058
AvahiIfIndex interface,
989
1059
AvahiProtocol proto,
997
1067
AVAHI_GCC_UNUSED AvahiStringList *txt,
998
1068
AVAHI_GCC_UNUSED AvahiLookupResultFlags
999
1069
flags,
1000
AVAHI_GCC_UNUSED void* userdata){
1001
assert(r);
1070
void *mc){
1071
if(r == NULL){
1072
return;
1073
}
1002
1074
1003
1075
/* Called whenever a service has been resolved successfully or
1004
1076
timed out */
1005
1077
1006
1078
if(quit_now){
1079
avahi_s_service_resolver_free(r);
1007
1080
return;
1008
1081
}
1009
1082
1013
1086
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1014
1087
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1015
1088
domain,
1016
avahi_strerror(avahi_server_errno(mc.server)));
1089
avahi_strerror(avahi_server_errno
1090
(((mandos_context*)mc)->server)));
1017
1091
break;
1018
1092
1019
1093
case AVAHI_RESOLVER_FOUND:
1025
1099
PRIdMAX ") on port %" PRIu16 "\n", name,
1026
1100
host_name, ip, (intmax_t)interface, port);
1027
1101
}
1028
int ret = start_mandos_communication(ip, port, interface,
1029
avahi_proto_to_af(proto));
1102
int ret = start_mandos_communication(ip, (in_port_t)port,
1103
interface,
1104
avahi_proto_to_af(proto),
1105
mc);
1030
1106
if(ret == 0){
1031
avahi_simple_poll_quit(mc.simple_poll);
1107
avahi_simple_poll_quit(simple_poll);
1032
1108
} else {
1033
ret = add_server(ip, port, interface,
1034
avahi_proto_to_af(proto));
1109
if(not add_server(ip, (in_port_t)port, interface,
1110
avahi_proto_to_af(proto),
1111
&((mandos_context*)mc)->current_server)){
1112
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1113
" list\n", name);
1114
}
1035
1115
}
1036
1116
}
1037
1117
}
1047
1127
const char *domain,
1048
1128
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1049
1129
flags,
1050
AVAHI_GCC_UNUSED void* userdata){
1051
assert(b);
1130
void *mc){
1131
if(b == NULL){
1132
return;
1133
}
1052
1134
1053
1135
/* Called whenever a new services becomes available on the LAN or
1054
1136
is removed from the LAN */
1062
1144
case AVAHI_BROWSER_FAILURE:
1063
1145
1064
1146
fprintf_plus(stderr, "(Avahi browser) %s\n",
1065
avahi_strerror(avahi_server_errno(mc.server)));
1066
avahi_simple_poll_quit(mc.simple_poll);
1147
avahi_strerror(avahi_server_errno
1148
(((mandos_context*)mc)->server)));
1149
avahi_simple_poll_quit(simple_poll);
1067
1150
return;
1068
1151
1069
1152
case AVAHI_BROWSER_NEW:
1072
1155
the callback function is called the Avahi server will free the
1073
1156
resolver for us. */
1074
1157
1075
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
1076
name, type, domain, protocol, 0,
1077
resolve_callback, NULL) == NULL)
1158
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1159
interface, protocol, name, type,
1160
domain, protocol, 0,
1161
resolve_callback, mc) == NULL)
1078
1162
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1079
1163
" %s\n", name,
1080
avahi_strerror(avahi_server_errno(mc.server)));
1164
avahi_strerror(avahi_server_errno
1165
(((mandos_context*)mc)->server)));
1081
1166
break;
1082
1167
1083
1168
case AVAHI_BROWSER_REMOVE:
1102
1187
signal_received = sig;
1103
1188
int old_errno = errno;
1104
1189
/* set main loop to exit */
1105
if(mc.simple_poll != NULL){
1106
avahi_simple_poll_quit(mc.simple_poll);
1190
if(simple_poll != NULL){
1191
avahi_simple_poll_quit(simple_poll);
1107
1192
}
1108
1193
errno = old_errno;
1109
1194
}
1110
1195
1196
__attribute__((nonnull, warn_unused_result))
1111
1197
bool get_flags(const char *ifname, struct ifreq *ifr){
1112
1198
int ret;
1199
error_t ret_errno;
1113
1200
1114
1201
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1115
1202
if(s < 0){
1203
ret_errno = errno;
1116
1204
perror_plus("socket");
1205
errno = ret_errno;
1117
1206
return false;
1118
1207
}
1119
1208
strcpy(ifr->ifr_name, ifname);
1120
1209
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1121
1210
if(ret == -1){
1122
1211
if(debug){
1212
ret_errno = errno;
1123
1213
perror_plus("ioctl SIOCGIFFLAGS");
1214
errno = ret_errno;
1124
1215
}
1125
1216
return false;
1126
1217
}
1127
1218
return true;
1128
1219
}
1129
1220
1221
__attribute__((nonnull, warn_unused_result))
1130
1222
bool good_flags(const char *ifname, const struct ifreq *ifr){
1131
1223
1132
1224
/* Reject the loopback device */
1174
1266
* corresponds to an acceptable network device.
1175
1267
* (This function is passed to scandir(3) as a filter function.)
1176
1268
*/
1269
__attribute__((nonnull, warn_unused_result))
1177
1270
int good_interface(const struct dirent *if_entry){
1178
1271
if(if_entry->d_name[0] == '.'){
1179
1272
return 0;
1195
1288
}
1196
1289
1197
1290
/*
1198
* This function determines if a directory entry in /sys/class/net
1199
* corresponds to an acceptable network device which is up.
1200
* (This function is passed to scandir(3) as a filter function.)
1201
*/
1202
int up_interface(const struct dirent *if_entry){
1203
if(if_entry->d_name[0] == '.'){
1204
return 0;
1205
}
1206
1207
struct ifreq ifr;
1208
if(not get_flags(if_entry->d_name, &ifr)){
1209
if(debug){
1210
fprintf_plus(stderr, "Failed to get flags for interface "
1211
"\"%s\"\n", if_entry->d_name);
1212
}
1213
return 0;
1214
}
1215
1216
/* Reject down interfaces */
1217
if(not (ifr.ifr_flags & IFF_UP)){
1218
if(debug){
1219
fprintf_plus(stderr, "Rejecting down interface \"%s\"\n",
1220
if_entry->d_name);
1221
}
1222
return 0;
1223
}
1224
1225
/* Reject non-running interfaces */
1226
if(not (ifr.ifr_flags & IFF_RUNNING)){
1227
if(debug){
1228
fprintf_plus(stderr, "Rejecting non-running interface \"%s\"\n",
1229
if_entry->d_name);
1230
}
1231
return 0;
1232
}
1233
1234
if(not good_flags(if_entry->d_name, &ifr)){
1235
return 0;
1236
}
1237
return 1;
1238
}
1239
1291
* This function determines if a network interface is up.
1292
*/
1293
__attribute__((nonnull, warn_unused_result))
1294
bool interface_is_up(const char *interface){
1295
struct ifreq ifr;
1296
if(not get_flags(interface, &ifr)){
1297
if(debug){
1298
fprintf_plus(stderr, "Failed to get flags for interface "
1299
"\"%s\"\n", interface);
1300
}
1301
return false;
1302
}
1303
1304
return (bool)(ifr.ifr_flags & IFF_UP);
1305
}
1306
1307
/*
1308
* This function determines if a network interface is running
1309
*/
1310
__attribute__((nonnull, warn_unused_result))
1311
bool interface_is_running(const char *interface){
1312
struct ifreq ifr;
1313
if(not get_flags(interface, &ifr)){
1314
if(debug){
1315
fprintf_plus(stderr, "Failed to get flags for interface "
1316
"\"%s\"\n", interface);
1317
}
1318
return false;
1319
}
1320
1321
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1322
}
1323
1324
__attribute__((nonnull, pure, warn_unused_result))
1240
1325
int notdotentries(const struct dirent *direntry){
1241
1326
/* Skip "." and ".." */
1242
1327
if(direntry->d_name[0] == '.'
1249
1334
}
1250
1335
1251
1336
/* Is this directory entry a runnable program? */
1337
__attribute__((nonnull, warn_unused_result))
1252
1338
int runnable_hook(const struct dirent *direntry){
1253
1339
int ret;
1254
1340
size_t sret;
1262
1348
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1263
1349
"abcdefghijklmnopqrstuvwxyz"
1264
1350
"0123456789"
1265
"_-");
1351
"_.-");
1266
1352
if((direntry->d_name)[sret] != '\0'){
1267
1353
/* Contains non-allowed characters */
1268
1354
if(debug){
1272
1358
return 0;
1273
1359
}
1274
1360
1275
char *fullname = NULL;
1276
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1277
if(ret < 0){
1278
perror_plus("asprintf");
1279
return 0;
1280
}
1281
1282
ret = stat(fullname, &st);
1361
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1283
1362
if(ret == -1){
1284
1363
if(debug){
1285
1364
perror_plus("Could not stat hook");
1309
1388
return 1;
1310
1389
}
1311
1390
1312
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval){
1391
__attribute__((nonnull, warn_unused_result))
1392
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
1393
mandos_context *mc){
1313
1394
int ret;
1314
1395
struct timespec now;
1315
1396
struct timespec waited_time;
1316
1397
intmax_t block_time;
1317
1398
1318
1399
while(true){
1319
if(mc.current_server == NULL){
1320
if (debug){
1400
if(mc->current_server == NULL){
1401
if(debug){
1321
1402
fprintf_plus(stderr, "Wait until first server is found."
1322
1403
" No timeout!\n");
1323
1404
}
1324
1405
ret = avahi_simple_poll_iterate(s, -1);
1325
1406
} else {
1326
if (debug){
1407
if(debug){
1327
1408
fprintf_plus(stderr, "Check current_server if we should run"
1328
1409
" it, or wait\n");
1329
1410
}
1336
1417
/* Calculating in ms how long time between now and server
1337
1418
who we visted longest time ago. Now - last seen. */
1338
1419
waited_time.tv_sec = (now.tv_sec
1339
- mc.current_server->last_seen.tv_sec);
1420
- mc->current_server->last_seen.tv_sec);
1340
1421
waited_time.tv_nsec = (now.tv_nsec
1341
- mc.current_server->last_seen.tv_nsec);
1422
- mc->current_server->last_seen.tv_nsec);
1342
1423
/* total time is 10s/10,000ms.
1343
1424
Converting to s from ms by dividing by 1,000,
1344
1425
and ns to ms by dividing by 1,000,000. */
1346
1427
- ((intmax_t)waited_time.tv_sec * 1000))
1347
1428
- ((intmax_t)waited_time.tv_nsec / 1000000));
1348
1429
1349
if (debug){
1430
if(debug){
1350
1431
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
1351
1432
block_time);
1352
1433
}
1353
1434
1354
1435
if(block_time <= 0){
1355
ret = start_mandos_communication(mc.current_server->ip,
1356
mc.current_server->port,
1357
mc.current_server->if_index,
1358
mc.current_server->af);
1436
ret = start_mandos_communication(mc->current_server->ip,
1437
mc->current_server->port,
1438
mc->current_server->if_index,
1439
mc->current_server->af, mc);
1359
1440
if(ret == 0){
1360
avahi_simple_poll_quit(mc.simple_poll);
1441
avahi_simple_poll_quit(s);
1361
1442
return 0;
1362
1443
}
1363
1444
ret = clock_gettime(CLOCK_MONOTONIC,
1364
&mc.current_server->last_seen);
1445
&mc->current_server->last_seen);
1365
1446
if(ret == -1){
1366
1447
perror_plus("clock_gettime");
1367
1448
return -1;
1368
1449
}
1369
mc.current_server = mc.current_server->next;
1450
mc->current_server = mc->current_server->next;
1370
1451
block_time = 0; /* Call avahi to find new Mandos
1371
1452
servers, but don't block */
1372
1453
}
1374
1455
ret = avahi_simple_poll_iterate(s, (int)block_time);
1375
1456
}
1376
1457
if(ret != 0){
1377
if (ret > 0 or errno != EINTR){
1458
if(ret > 0 or errno != EINTR){
1378
1459
return (ret != 1) ? ret : 0;
1379
1460
}
1380
1461
}
1381
1462
}
1382
1463
}
1383
1464
1384
bool run_network_hooks(const char *mode, const char *interface,
1465
/* Set effective uid to 0, return errno */
1466
__attribute__((warn_unused_result))
1467
error_t raise_privileges(void){
1468
error_t old_errno = errno;
1469
error_t ret_errno = 0;
1470
if(seteuid(0) == -1){
1471
ret_errno = errno;
1472
}
1473
errno = old_errno;
1474
return ret_errno;
1475
}
1476
1477
/* Set effective and real user ID to 0. Return errno. */
1478
__attribute__((warn_unused_result))
1479
error_t raise_privileges_permanently(void){
1480
error_t old_errno = errno;
1481
error_t ret_errno = raise_privileges();
1482
if(ret_errno != 0){
1483
errno = old_errno;
1484
return ret_errno;
1485
}
1486
if(setuid(0) == -1){
1487
ret_errno = errno;
1488
}
1489
errno = old_errno;
1490
return ret_errno;
1491
}
1492
1493
/* Set effective user ID to unprivileged saved user ID */
1494
__attribute__((warn_unused_result))
1495
error_t lower_privileges(void){
1496
error_t old_errno = errno;
1497
error_t ret_errno = 0;
1498
if(seteuid(uid) == -1){
1499
ret_errno = errno;
1500
}
1501
errno = old_errno;
1502
return ret_errno;
1503
}
1504
1505
/* Lower privileges permanently */
1506
__attribute__((warn_unused_result))
1507
error_t lower_privileges_permanently(void){
1508
error_t old_errno = errno;
1509
error_t ret_errno = 0;
1510
if(setuid(uid) == -1){
1511
ret_errno = errno;
1512
}
1513
errno = old_errno;
1514
return ret_errno;
1515
}
1516
1517
__attribute__((nonnull))
1518
void run_network_hooks(const char *mode, const char *interface,
1385
1519
const float delay){
1386
struct dirent **direntries;
1387
struct dirent *direntry;
1388
int ret;
1389
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1390
alphasort);
1520
struct dirent **direntries = NULL;
1521
if(hookdir_fd == -1){
1522
hookdir_fd = open(hookdir, O_RDONLY);
1523
if(hookdir_fd == -1){
1524
if(errno == ENOENT){
1525
if(debug){
1526
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1527
" found\n", hookdir);
1528
}
1529
} else {
1530
perror_plus("open");
1531
}
1532
return;
1533
}
1534
}
1535
#ifdef __GLIBC__
1536
#if __GLIBC_PREREQ(2, 15)
1537
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1538
runnable_hook, alphasort);
1539
#else /* not __GLIBC_PREREQ(2, 15) */
1540
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1541
alphasort);
1542
#endif /* not __GLIBC_PREREQ(2, 15) */
1543
#else /* not __GLIBC__ */
1544
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1545
alphasort);
1546
#endif /* not __GLIBC__ */
1391
1547
if(numhooks == -1){
1392
1548
perror_plus("scandir");
1393
} else {
1394
int devnull = open("/dev/null", O_RDONLY);
1395
for(int i = 0; i < numhooks; i++){
1396
direntry = direntries[i];
1397
char *fullname = NULL;
1398
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1399
if(ret < 0){
1549
return;
1550
}
1551
struct dirent *direntry;
1552
int ret;
1553
int devnull = open("/dev/null", O_RDONLY);
1554
for(int i = 0; i < numhooks; i++){
1555
direntry = direntries[i];
1556
if(debug){
1557
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1558
direntry->d_name);
1559
}
1560
pid_t hook_pid = fork();
1561
if(hook_pid == 0){
1562
/* Child */
1563
/* Raise privileges */
1564
errno = raise_privileges_permanently();
1565
if(errno != 0){
1566
perror_plus("Failed to raise privileges");
1567
_exit(EX_NOPERM);
1568
}
1569
/* Set group */
1570
errno = 0;
1571
ret = setgid(0);
1572
if(ret == -1){
1573
perror_plus("setgid");
1574
_exit(EX_NOPERM);
1575
}
1576
/* Reset supplementary groups */
1577
errno = 0;
1578
ret = setgroups(0, NULL);
1579
if(ret == -1){
1580
perror_plus("setgroups");
1581
_exit(EX_NOPERM);
1582
}
1583
ret = dup2(devnull, STDIN_FILENO);
1584
if(ret == -1){
1585
perror_plus("dup2(devnull, STDIN_FILENO)");
1586
_exit(EX_OSERR);
1587
}
1588
ret = close(devnull);
1589
if(ret == -1){
1590
perror_plus("close");
1591
_exit(EX_OSERR);
1592
}
1593
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1594
if(ret == -1){
1595
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1596
_exit(EX_OSERR);
1597
}
1598
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1599
if(ret == -1){
1600
perror_plus("setenv");
1601
_exit(EX_OSERR);
1602
}
1603
ret = setenv("DEVICE", interface, 1);
1604
if(ret == -1){
1605
perror_plus("setenv");
1606
_exit(EX_OSERR);
1607
}
1608
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1609
if(ret == -1){
1610
perror_plus("setenv");
1611
_exit(EX_OSERR);
1612
}
1613
ret = setenv("MODE", mode, 1);
1614
if(ret == -1){
1615
perror_plus("setenv");
1616
_exit(EX_OSERR);
1617
}
1618
char *delaystring;
1619
ret = asprintf(&delaystring, "%f", (double)delay);
1620
if(ret == -1){
1400
1621
perror_plus("asprintf");
1401
continue;
1402
}
1403
if(debug){
1404
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1405
direntry->d_name);
1406
}
1407
pid_t hook_pid = fork();
1408
if(hook_pid == 0){
1409
/* Child */
1410
/* Raise privileges */
1411
errno = 0;
1412
ret = seteuid(0);
1413
if(ret == -1){
1414
perror_plus("seteuid");
1415
}
1416
/* Raise privileges even more */
1417
errno = 0;
1418
ret = setuid(0);
1419
if(ret == -1){
1420
perror_plus("setuid");
1421
}
1422
/* Set group */
1423
errno = 0;
1424
ret = setgid(0);
1425
if(ret == -1){
1426
perror_plus("setgid");
1427
}
1428
/* Reset supplementary groups */
1429
errno = 0;
1430
ret = setgroups(0, NULL);
1431
if(ret == -1){
1432
perror_plus("setgroups");
1433
}
1434
dup2(devnull, STDIN_FILENO);
1435
close(devnull);
1436
dup2(STDERR_FILENO, STDOUT_FILENO);
1437
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1438
if(ret == -1){
1439
perror_plus("setenv");
1440
_exit(EX_OSERR);
1441
}
1442
ret = setenv("DEVICE", interface, 1);
1443
if(ret == -1){
1444
perror_plus("setenv");
1445
_exit(EX_OSERR);
1446
}
1447
ret = setenv("VERBOSE", debug ? "1" : "0", 1);
1448
if(ret == -1){
1449
perror_plus("setenv");
1450
_exit(EX_OSERR);
1451
}
1452
ret = setenv("MODE", mode, 1);
1453
if(ret == -1){
1454
perror_plus("setenv");
1455
_exit(EX_OSERR);
1456
}
1457
char *delaystring;
1458
ret = asprintf(&delaystring, "%f", delay);
1459
if(ret == -1){
1460
perror_plus("asprintf");
1461
_exit(EX_OSERR);
1462
}
1463
ret = setenv("DELAY", delaystring, 1);
1464
if(ret == -1){
1465
free(delaystring);
1466
perror_plus("setenv");
1467
_exit(EX_OSERR);
1468
}
1622
_exit(EX_OSERR);
1623
}
1624
ret = setenv("DELAY", delaystring, 1);
1625
if(ret == -1){
1469
1626
free(delaystring);
1470
ret = execl(fullname, direntry->d_name, mode, NULL);
1471
perror_plus("execl");
1472
} else {
1473
int status;
1474
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1475
perror_plus("waitpid");
1476
free(fullname);
1477
continue;
1478
}
1479
if(WIFEXITED(status)){
1480
if(WEXITSTATUS(status) != 0){
1481
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1482
" with status %d\n", direntry->d_name,
1483
WEXITSTATUS(status));
1484
free(fullname);
1485
continue;
1486
}
1487
} else if(WIFSIGNALED(status)){
1488
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1489
" signal %d\n", direntry->d_name,
1490
WTERMSIG(status));
1491
free(fullname);
1492
continue;
1493
} else {
1494
fprintf_plus(stderr, "Warning: network hook \"%s\""
1495
" crashed\n", direntry->d_name);
1496
free(fullname);
1497
continue;
1498
}
1499
}
1500
free(fullname);
1501
if(debug){
1502
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1503
direntry->d_name);
1504
}
1505
}
1506
close(devnull);
1507
}
1508
return true;
1627
perror_plus("setenv");
1628
_exit(EX_OSERR);
1629
}
1630
free(delaystring);
1631
if(connect_to != NULL){
1632
ret = setenv("CONNECT", connect_to, 1);
1633
if(ret == -1){
1634
perror_plus("setenv");
1635
_exit(EX_OSERR);
1636
}
1637
}
1638
int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);
1639
if(hook_fd == -1){
1640
perror_plus("openat");
1641
_exit(EXIT_FAILURE);
1642
}
1643
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1644
perror_plus("close");
1645
_exit(EXIT_FAILURE);
1646
}
1647
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
1648
environ) == -1){
1649
perror_plus("fexecve");
1650
_exit(EXIT_FAILURE);
1651
}
1652
} else {
1653
if(hook_pid == -1){
1654
perror_plus("fork");
1655
free(direntry);
1656
continue;
1657
}
1658
int status;
1659
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1660
perror_plus("waitpid");
1661
free(direntry);
1662
continue;
1663
}
1664
if(WIFEXITED(status)){
1665
if(WEXITSTATUS(status) != 0){
1666
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1667
" with status %d\n", direntry->d_name,
1668
WEXITSTATUS(status));
1669
free(direntry);
1670
continue;
1671
}
1672
} else if(WIFSIGNALED(status)){
1673
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1674
" signal %d\n", direntry->d_name,
1675
WTERMSIG(status));
1676
free(direntry);
1677
continue;
1678
} else {
1679
fprintf_plus(stderr, "Warning: network hook \"%s\""
1680
" crashed\n", direntry->d_name);
1681
free(direntry);
1682
continue;
1683
}
1684
}
1685
if(debug){
1686
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1687
direntry->d_name);
1688
}
1689
free(direntry);
1690
}
1691
free(direntries);
1692
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1693
perror_plus("close");
1694
} else {
1695
hookdir_fd = -1;
1696
}
1697
close(devnull);
1698
}
1699
1700
__attribute__((nonnull, warn_unused_result))
1701
error_t bring_up_interface(const char *const interface,
1702
const float delay){
1703
error_t old_errno = errno;
1704
int ret;
1705
struct ifreq network;
1706
unsigned int if_index = if_nametoindex(interface);
1707
if(if_index == 0){
1708
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1709
errno = old_errno;
1710
return ENXIO;
1711
}
1712
1713
if(quit_now){
1714
errno = old_errno;
1715
return EINTR;
1716
}
1717
1718
if(not interface_is_up(interface)){
1719
error_t ret_errno = 0, ioctl_errno = 0;
1720
if(not get_flags(interface, &network)){
1721
ret_errno = errno;
1722
fprintf_plus(stderr, "Failed to get flags for interface "
1723
"\"%s\"\n", interface);
1724
errno = old_errno;
1725
return ret_errno;
1726
}
1727
network.ifr_flags |= IFF_UP; /* set flag */
1728
1729
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1730
if(sd == -1){
1731
ret_errno = errno;
1732
perror_plus("socket");
1733
errno = old_errno;
1734
return ret_errno;
1735
}
1736
1737
if(quit_now){
1738
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1739
if(ret == -1){
1740
perror_plus("close");
1741
}
1742
errno = old_errno;
1743
return EINTR;
1744
}
1745
1746
if(debug){
1747
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
1748
interface);
1749
}
1750
1751
/* Raise privileges */
1752
ret_errno = raise_privileges();
1753
if(ret_errno != 0){
1754
errno = ret_errno;
1755
perror_plus("Failed to raise privileges");
1756
}
1757
1758
#ifdef __linux__
1759
int ret_linux;
1760
bool restore_loglevel = false;
1761
if(ret_errno == 0){
1762
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1763
messages about the network interface to mess up the prompt */
1764
ret_linux = klogctl(8, NULL, 5);
1765
if(ret_linux == -1){
1766
perror_plus("klogctl");
1767
} else {
1768
restore_loglevel = true;
1769
}
1770
}
1771
#endif /* __linux__ */
1772
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1773
ioctl_errno = errno;
1774
#ifdef __linux__
1775
if(restore_loglevel){
1776
ret_linux = klogctl(7, NULL, 0);
1777
if(ret_linux == -1){
1778
perror_plus("klogctl");
1779
}
1780
}
1781
#endif /* __linux__ */
1782
1783
/* If raise_privileges() succeeded above */
1784
if(ret_errno == 0){
1785
/* Lower privileges */
1786
ret_errno = lower_privileges();
1787
if(ret_errno != 0){
1788
errno = ret_errno;
1789
perror_plus("Failed to lower privileges");
1790
}
1791
}
1792
1793
/* Close the socket */
1794
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1795
if(ret == -1){
1796
perror_plus("close");
1797
}
1798
1799
if(ret_setflags == -1){
1800
errno = ioctl_errno;
1801
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1802
errno = old_errno;
1803
return ioctl_errno;
1804
}
1805
} else if(debug){
1806
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
1807
interface);
1808
}
1809
1810
/* Sleep checking until interface is running.
1811
Check every 0.25s, up to total time of delay */
1812
for(int i=0; i < delay * 4; i++){
1813
if(interface_is_running(interface)){
1814
break;
1815
}
1816
struct timespec sleeptime = { .tv_nsec = 250000000 };
1817
ret = nanosleep(&sleeptime, NULL);
1818
if(ret == -1 and errno != EINTR){
1819
perror_plus("nanosleep");
1820
}
1821
}
1822
1823
errno = old_errno;
1824
return 0;
1825
}
1826
1827
__attribute__((nonnull, warn_unused_result))
1828
error_t take_down_interface(const char *const interface){
1829
error_t old_errno = errno;
1830
struct ifreq network;
1831
unsigned int if_index = if_nametoindex(interface);
1832
if(if_index == 0){
1833
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1834
errno = old_errno;
1835
return ENXIO;
1836
}
1837
if(interface_is_up(interface)){
1838
error_t ret_errno = 0, ioctl_errno = 0;
1839
if(not get_flags(interface, &network) and debug){
1840
ret_errno = errno;
1841
fprintf_plus(stderr, "Failed to get flags for interface "
1842
"\"%s\"\n", interface);
1843
errno = old_errno;
1844
return ret_errno;
1845
}
1846
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
1847
1848
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1849
if(sd == -1){
1850
ret_errno = errno;
1851
perror_plus("socket");
1852
errno = old_errno;
1853
return ret_errno;
1854
}
1855
1856
if(debug){
1857
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
1858
interface);
1859
}
1860
1861
/* Raise privileges */
1862
ret_errno = raise_privileges();
1863
if(ret_errno != 0){
1864
errno = ret_errno;
1865
perror_plus("Failed to raise privileges");
1866
}
1867
1868
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1869
ioctl_errno = errno;
1870
1871
/* If raise_privileges() succeeded above */
1872
if(ret_errno == 0){
1873
/* Lower privileges */
1874
ret_errno = lower_privileges();
1875
if(ret_errno != 0){
1876
errno = ret_errno;
1877
perror_plus("Failed to lower privileges");
1878
}
1879
}
1880
1881
/* Close the socket */
1882
int ret = (int)TEMP_FAILURE_RETRY(close(sd));
1883
if(ret == -1){
1884
perror_plus("close");
1885
}
1886
1887
if(ret_setflags == -1){
1888
errno = ioctl_errno;
1889
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
1890
errno = old_errno;
1891
return ioctl_errno;
1892
}
1893
} else if(debug){
1894
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
1895
interface);
1896
}
1897
1898
errno = old_errno;
1899
return 0;
1509
1900
}
1510
1901
1511
1902
int main(int argc, char *argv[]){
1903
mandos_context mc = { .server = NULL, .dh_bits = 1024,
1904
.priority = "SECURE256:!CTYPE-X.509:"
1905
"+CTYPE-OPENPGP", .current_server = NULL,
1906
.interfaces = NULL, .interfaces_size = 0 };
1512
1907
AvahiSServiceBrowser *sb = NULL;
1513
int error;
1908
error_t ret_errno;
1514
1909
int ret;
1515
1910
intmax_t tmpmax;
1516
1911
char *tmp;
1517
1912
int exitcode = EXIT_SUCCESS;
1518
const char *interface = "";
1519
struct ifreq network;
1520
int sd = -1;
1521
bool take_down_interface = false;
1522
uid_t uid;
1523
gid_t gid;
1524
char tempdir[] = "/tmp/mandosXXXXXX";
1525
bool tempdir_created = false;
1913
char *interfaces_to_take_down = NULL;
1914
size_t interfaces_to_take_down_size = 0;
1915
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
1916
char old_tempdir[] = "/tmp/mandosXXXXXX";
1917
char *tempdir = NULL;
1526
1918
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1527
1919
const char *seckey = PATHDIR "/" SECKEY;
1528
1920
const char *pubkey = PATHDIR "/" PUBKEY;
1921
char *interfaces_hooks = NULL;
1529
1922
1530
1923
bool gnutls_initialized = false;
1531
1924
bool gpgme_initialized = false;
1593
1986
.group = 2 },
1594
1987
{ .name = "retry", .key = 132,
1595
1988
.arg = "SECONDS",
1596
.doc = "Retry interval used when denied by the mandos server",
1989
.doc = "Retry interval used when denied by the Mandos server",
1597
1990
.group = 2 },
1598
1991
{ .name = "network-hook-dir", .key = 133,
1599
1992
.arg = "DIR",
1622
2015
connect_to = arg;
1623
2016
break;
1624
2017
case 'i': /* --interface */
1625
interface = arg;
2018
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
2019
arg, (int)',');
2020
if(ret_errno != 0){
2021
argp_error(state, "%s", strerror(ret_errno));
2022
}
1626
2023
break;
1627
2024
case 's': /* --seckey */
1628
2025
seckey = arg;
1671
2068
argp_state_help(state, state->out_stream,
1672
2069
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
1673
2070
case 'V': /* --version */
1674
fprintf_plus(state->out_stream,
1675
"Mandos plugin mandos-client: ");
1676
2071
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
1677
2072
exit(argp_err_exit_status);
1678
2073
break;
1707
2102
/* Work around Debian bug #633582:
1708
2103
<http://bugs.debian.org/633582> */
1709
2104
1710
/* Re-raise priviliges */
1711
errno = 0;
1712
ret = seteuid(0);
1713
if(ret == -1){
1714
perror_plus("seteuid");
2105
/* Re-raise privileges */
2106
ret_errno = raise_privileges();
2107
if(ret_errno != 0){
2108
errno = ret_errno;
2109
perror_plus("Failed to raise privileges");
1715
2110
} else {
1716
2111
struct stat st;
1717
2112
1758
2153
}
1759
2154
1760
2155
/* Lower privileges */
1761
errno = 0;
1762
ret = seteuid(uid);
1763
if(ret == -1){
1764
perror_plus("seteuid");
2156
ret_errno = lower_privileges();
2157
if(ret_errno != 0){
2158
errno = ret_errno;
2159
perror_plus("Failed to lower privileges");
2160
}
2161
}
2162
}
2163
2164
/* Remove invalid interface names (except "none") */
2165
{
2166
char *interface = NULL;
2167
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2168
interface))){
2169
if(strcmp(interface, "none") != 0
2170
and if_nametoindex(interface) == 0){
2171
if(interface[0] != '\0'){
2172
fprintf_plus(stderr, "Not using nonexisting interface"
2173
" \"%s\"\n", interface);
2174
}
2175
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2176
interface = NULL;
1765
2177
}
1766
2178
}
1767
2179
}
1768
2180
1769
2181
/* Run network hooks */
1770
if(not run_network_hooks("start", interface, delay)){
1771
goto end;
2182
{
2183
if(mc.interfaces != NULL){
2184
interfaces_hooks = malloc(mc.interfaces_size);
2185
if(interfaces_hooks == NULL){
2186
perror_plus("malloc");
2187
goto end;
2188
}
2189
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2190
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2191
}
2192
run_network_hooks("start", interfaces_hooks != NULL ?
2193
interfaces_hooks : "", delay);
1772
2194
}
1773
2195
1774
2196
if(not debug){
1775
2197
avahi_set_log_function(empty_log);
1776
2198
}
1777
2199
1778
if(interface[0] == '\0'){
1779
struct dirent **direntries;
1780
/* First look for interfaces that are up */
1781
ret = scandir(sys_class_net, &direntries, up_interface,
1782
alphasort);
1783
if(ret == 0){
1784
/* No up interfaces, look for any good interfaces */
1785
free(direntries);
1786
ret = scandir(sys_class_net, &direntries, good_interface,
1787
alphasort);
1788
}
1789
if(ret >= 1){
1790
/* Pick the first interface returned */
1791
interface = strdup(direntries[0]->d_name);
1792
if(debug){
1793
fprintf_plus(stderr, "Using interface \"%s\"\n", interface);
1794
}
1795
if(interface == NULL){
1796
perror_plus("malloc");
1797
free(direntries);
1798
exitcode = EXIT_FAILURE;
1799
goto end;
1800
}
1801
free(direntries);
1802
} else {
1803
free(direntries);
1804
fprintf_plus(stderr, "Could not find a network interface\n");
1805
exitcode = EXIT_FAILURE;
1806
goto end;
1807
}
1808
}
1809
1810
2200
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1811
2201
from the signal handler */
1812
2202
/* Initialize the pseudo-RNG for Avahi */
1813
2203
srand((unsigned int) time(NULL));
1814
mc.simple_poll = avahi_simple_poll_new();
1815
if(mc.simple_poll == NULL){
2204
simple_poll = avahi_simple_poll_new();
2205
if(simple_poll == NULL){
1816
2206
fprintf_plus(stderr,
1817
2207
"Avahi: Failed to create simple poll object.\n");
1818
2208
exitcode = EX_UNAVAILABLE;
1882
2272
}
1883
2273
}
1884
2274
1885
/* If the interface is down, bring it up */
1886
if(strcmp(interface, "none") != 0){
1887
if_index = (AvahiIfIndex) if_nametoindex(interface);
1888
if(if_index == 0){
1889
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1890
exitcode = EX_UNAVAILABLE;
1891
goto end;
1892
}
1893
1894
if(quit_now){
1895
goto end;
1896
}
1897
1898
/* Re-raise priviliges */
1899
errno = 0;
1900
ret = seteuid(0);
1901
if(ret == -1){
1902
perror_plus("seteuid");
1903
}
1904
1905
#ifdef __linux__
1906
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1907
messages about the network interface to mess up the prompt */
1908
ret = klogctl(8, NULL, 5);
1909
bool restore_loglevel = true;
1910
if(ret == -1){
1911
restore_loglevel = false;
1912
perror_plus("klogctl");
1913
}
1914
#endif /* __linux__ */
1915
1916
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1917
if(sd < 0){
1918
perror_plus("socket");
1919
exitcode = EX_OSERR;
1920
#ifdef __linux__
1921
if(restore_loglevel){
1922
ret = klogctl(7, NULL, 0);
1923
if(ret == -1){
1924
perror_plus("klogctl");
1925
}
1926
}
1927
#endif /* __linux__ */
1928
/* Lower privileges */
1929
errno = 0;
1930
ret = seteuid(uid);
1931
if(ret == -1){
1932
perror_plus("seteuid");
1933
}
1934
goto end;
1935
}
1936
strcpy(network.ifr_name, interface);
1937
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1938
if(ret == -1){
1939
perror_plus("ioctl SIOCGIFFLAGS");
1940
#ifdef __linux__
1941
if(restore_loglevel){
1942
ret = klogctl(7, NULL, 0);
1943
if(ret == -1){
1944
perror_plus("klogctl");
1945
}
1946
}
1947
#endif /* __linux__ */
1948
exitcode = EX_OSERR;
1949
/* Lower privileges */
1950
errno = 0;
1951
ret = seteuid(uid);
1952
if(ret == -1){
1953
perror_plus("seteuid");
1954
}
1955
goto end;
1956
}
1957
if((network.ifr_flags & IFF_UP) == 0){
1958
network.ifr_flags |= IFF_UP;
1959
take_down_interface = true;
1960
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1961
if(ret == -1){
1962
take_down_interface = false;
1963
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1964
exitcode = EX_OSERR;
1965
#ifdef __linux__
1966
if(restore_loglevel){
1967
ret = klogctl(7, NULL, 0);
1968
if(ret == -1){
1969
perror_plus("klogctl");
2275
/* If no interfaces were specified, make a list */
2276
if(mc.interfaces == NULL){
2277
struct dirent **direntries = NULL;
2278
/* Look for any good interfaces */
2279
ret = scandir(sys_class_net, &direntries, good_interface,
2280
alphasort);
2281
if(ret >= 1){
2282
/* Add all found interfaces to interfaces list */
2283
for(int i = 0; i < ret; ++i){
2284
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2285
direntries[i]->d_name);
2286
if(ret_errno != 0){
2287
errno = ret_errno;
2288
perror_plus("argz_add");
2289
free(direntries[i]);
2290
continue;
2291
}
2292
if(debug){
2293
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2294
direntries[i]->d_name);
2295
}
2296
free(direntries[i]);
2297
}
2298
free(direntries);
2299
} else {
2300
if(ret == 0){
2301
free(direntries);
2302
}
2303
fprintf_plus(stderr, "Could not find a network interface\n");
2304
exitcode = EXIT_FAILURE;
2305
goto end;
2306
}
2307
}
2308
2309
/* Bring up interfaces which are down, and remove any "none"s */
2310
{
2311
char *interface = NULL;
2312
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2313
interface))){
2314
/* If interface name is "none", stop bringing up interfaces.
2315
Also remove all instances of "none" from the list */
2316
if(strcmp(interface, "none") == 0){
2317
argz_delete(&mc.interfaces, &mc.interfaces_size,
2318
interface);
2319
interface = NULL;
2320
while((interface = argz_next(mc.interfaces,
2321
mc.interfaces_size, interface))){
2322
if(strcmp(interface, "none") == 0){
2323
argz_delete(&mc.interfaces, &mc.interfaces_size,
2324
interface);
2325
interface = NULL;
1970
2326
}
1971
2327
}
1972
#endif /* __linux__ */
1973
/* Lower privileges */
1974
errno = 0;
1975
ret = seteuid(uid);
1976
if(ret == -1){
1977
perror_plus("seteuid");
1978
}
1979
goto end;
1980
}
1981
}
1982
/* Sleep checking until interface is running.
1983
Check every 0.25s, up to total time of delay */
1984
for(int i=0; i < delay * 4; i++){
1985
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1986
if(ret == -1){
1987
perror_plus("ioctl SIOCGIFFLAGS");
1988
} else if(network.ifr_flags & IFF_RUNNING){
1989
2328
break;
1990
2329
}
1991
struct timespec sleeptime = { .tv_nsec = 250000000 };
1992
ret = nanosleep(&sleeptime, NULL);
1993
if(ret == -1 and errno != EINTR){
1994
perror_plus("nanosleep");
1995
}
1996
}
1997
if(not take_down_interface){
1998
/* We won't need the socket anymore */
1999
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2000
if(ret == -1){
2001
perror_plus("close");
2002
}
2003
}
2004
#ifdef __linux__
2005
if(restore_loglevel){
2006
/* Restores kernel loglevel to default */
2007
ret = klogctl(7, NULL, 0);
2008
if(ret == -1){
2009
perror_plus("klogctl");
2010
}
2011
}
2012
#endif /* __linux__ */
2013
/* Lower privileges */
2014
errno = 0;
2015
/* Lower privileges */
2016
ret = seteuid(uid);
2017
if(ret == -1){
2018
perror_plus("seteuid");
2019
}
2330
bool interface_was_up = interface_is_up(interface);
2331
errno = bring_up_interface(interface, delay);
2332
if(not interface_was_up){
2333
if(errno != 0){
2334
perror_plus("Failed to bring up interface");
2335
} else {
2336
errno = argz_add(&interfaces_to_take_down,
2337
&interfaces_to_take_down_size,
2338
interface);
2339
if(errno != 0){
2340
perror_plus("argz_add");
2341
}
2342
}
2343
}
2344
}
2345
if(debug and (interfaces_to_take_down == NULL)){
2346
fprintf_plus(stderr, "No interfaces were brought up\n");
2347
}
2348
}
2349
2350
/* If we only got one interface, explicitly use only that one */
2351
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2352
if(debug){
2353
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2354
mc.interfaces);
2355
}
2356
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2020
2357
}
2021
2358
2022
2359
if(quit_now){
2023
2360
goto end;
2024
2361
}
2025
2362
2026
ret = init_gnutls_global(pubkey, seckey);
2363
ret = init_gnutls_global(pubkey, seckey, &mc);
2027
2364
if(ret == -1){
2028
2365
fprintf_plus(stderr, "init_gnutls_global failed\n");
2029
2366
exitcode = EX_UNAVAILABLE;
2036
2373
goto end;
2037
2374
}
2038
2375
2039
if(mkdtemp(tempdir) == NULL){
2376
/* Try /run/tmp before /tmp */
2377
tempdir = mkdtemp(run_tempdir);
2378
if(tempdir == NULL and errno == ENOENT){
2379
if(debug){
2380
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2381
run_tempdir, old_tempdir);
2382
}
2383
tempdir = mkdtemp(old_tempdir);
2384
}
2385
if(tempdir == NULL){
2040
2386
perror_plus("mkdtemp");
2041
2387
goto end;
2042
2388
}
2043
tempdir_created = true;
2044
2389
2045
2390
if(quit_now){
2046
2391
goto end;
2047
2392
}
2048
2393
2049
if(not init_gpgme(pubkey, seckey, tempdir)){
2394
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
2050
2395
fprintf_plus(stderr, "init_gpgme failed\n");
2051
2396
exitcode = EX_UNAVAILABLE;
2052
2397
goto end;
2062
2407
/* Connect directly, do not use Zeroconf */
2063
2408
/* (Mainly meant for debugging) */
2064
2409
char *address = strrchr(connect_to, ':');
2410
2065
2411
if(address == NULL){
2066
2412
fprintf_plus(stderr, "No colon in address\n");
2067
2413
exitcode = EX_USAGE;
2072
2418
goto end;
2073
2419
}
2074
2420
2075
uint16_t port;
2421
in_port_t port;
2076
2422
errno = 0;
2077
2423
tmpmax = strtoimax(address+1, &tmp, 10);
2078
2424
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2079
or tmpmax != (uint16_t)tmpmax){
2425
or tmpmax != (in_port_t)tmpmax){
2080
2426
fprintf_plus(stderr, "Bad port number\n");
2081
2427
exitcode = EX_USAGE;
2082
2428
goto end;
2083
2429
}
2084
2430
2085
2431
if(quit_now){
2086
2432
goto end;
2087
2433
}
2088
2434
2089
port = (uint16_t)tmpmax;
2435
port = (in_port_t)tmpmax;
2090
2436
*address = '\0';
2091
2437
/* Colon in address indicates IPv6 */
2092
2438
int af;
2108
2454
}
2109
2455
2110
2456
while(not quit_now){
2111
ret = start_mandos_communication(address, port, if_index, af);
2457
ret = start_mandos_communication(address, port, if_index, af,
2458
&mc);
2112
2459
if(quit_now or ret == 0){
2113
2460
break;
2114
2461
}
2116
2463
fprintf_plus(stderr, "Retrying in %d seconds\n",
2117
2464
(int)retry_interval);
2118
2465
}
2119
sleep((int)retry_interval);
2466
sleep((unsigned int)retry_interval);
2120
2467
}
2121
2468
2122
if (not quit_now){
2469
if(not quit_now){
2123
2470
exitcode = EXIT_SUCCESS;
2124
2471
}
2125
2472
2140
2487
config.publish_domain = 0;
2141
2488
2142
2489
/* Allocate a new server */
2143
mc.server = avahi_server_new(avahi_simple_poll_get
2144
(mc.simple_poll), &config, NULL,
2145
NULL, &error);
2490
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2491
&config, NULL, NULL, &ret_errno);
2146
2492
2147
2493
/* Free the Avahi configuration data */
2148
2494
avahi_server_config_free(&config);
2151
2497
/* Check if creating the Avahi server object succeeded */
2152
2498
if(mc.server == NULL){
2153
2499
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
2154
avahi_strerror(error));
2500
avahi_strerror(ret_errno));
2155
2501
exitcode = EX_UNAVAILABLE;
2156
2502
goto end;
2157
2503
}
2163
2509
/* Create the Avahi service browser */
2164
2510
sb = avahi_s_service_browser_new(mc.server, if_index,
2165
2511
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2166
NULL, 0, browse_callback, NULL);
2512
NULL, 0, browse_callback,
2513
(void *)&mc);
2167
2514
if(sb == NULL){
2168
2515
fprintf_plus(stderr, "Failed to create service browser: %s\n",
2169
2516
avahi_strerror(avahi_server_errno(mc.server)));
2180
2527
if(debug){
2181
2528
fprintf_plus(stderr, "Starting Avahi loop search\n");
2182
2529
}
2183
2184
ret = avahi_loop_with_timeout(mc.simple_poll,
2185
(int)(retry_interval * 1000));
2530
2531
ret = avahi_loop_with_timeout(simple_poll,
2532
(int)(retry_interval * 1000), &mc);
2186
2533
if(debug){
2187
2534
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
2188
2535
(ret == 0) ? "successfully" : "with error");
2195
2542
}
2196
2543
2197
2544
/* Cleanup things */
2545
free(mc.interfaces);
2546
2198
2547
if(sb != NULL)
2199
2548
avahi_s_service_browser_free(sb);
2200
2549
2201
2550
if(mc.server != NULL)
2202
2551
avahi_server_free(mc.server);
2203
2552
2204
if(mc.simple_poll != NULL)
2205
avahi_simple_poll_free(mc.simple_poll);
2553
if(simple_poll != NULL)
2554
avahi_simple_poll_free(simple_poll);
2206
2555
2207
2556
if(gnutls_initialized){
2208
2557
gnutls_certificate_free_credentials(mc.cred);
2220
2569
mc.current_server->prev->next = NULL;
2221
2570
while(mc.current_server != NULL){
2222
2571
server *next = mc.current_server->next;
2572
#ifdef __GNUC__
2573
#pragma GCC diagnostic push
2574
#pragma GCC diagnostic ignored "-Wcast-qual"
2575
#endif
2576
free((char *)(mc.current_server->ip));
2577
#ifdef __GNUC__
2578
#pragma GCC diagnostic pop
2579
#endif
2223
2580
free(mc.current_server);
2224
2581
mc.current_server = next;
2225
2582
}
2226
2583
}
2227
2584
2228
/* Run network hooks */
2229
run_network_hooks("stop", interface, delay);
2230
2231
/* Re-raise priviliges */
2585
/* Re-raise privileges */
2232
2586
{
2233
errno = 0;
2234
ret = seteuid(0);
2235
if(ret == -1){
2236
perror_plus("seteuid");
2587
ret_errno = raise_privileges();
2588
if(ret_errno != 0){
2589
errno = ret_errno;
2590
perror_plus("Failed to raise privileges");
2591
} else {
2592
2593
/* Run network hooks */
2594
run_network_hooks("stop", interfaces_hooks != NULL ?
2595
interfaces_hooks : "", delay);
2596
2597
/* Take down the network interfaces which were brought up */
2598
{
2599
char *interface = NULL;
2600
while((interface=argz_next(interfaces_to_take_down,
2601
interfaces_to_take_down_size,
2602
interface))){
2603
ret_errno = take_down_interface(interface);
2604
if(ret_errno != 0){
2605
errno = ret_errno;
2606
perror_plus("Failed to take down interface");
2607
}
2608
}
2609
if(debug and (interfaces_to_take_down == NULL)){
2610
fprintf_plus(stderr, "No interfaces needed to be taken"
2611
" down\n");
2612
}
2613
}
2237
2614
}
2238
2615
2239
/* Take down the network interface */
2240
if(take_down_interface and geteuid() == 0){
2241
ret = ioctl(sd, SIOCGIFFLAGS, &network);
2242
if(ret == -1){
2243
perror_plus("ioctl SIOCGIFFLAGS");
2244
} else if(network.ifr_flags & IFF_UP){
2245
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2246
ret = ioctl(sd, SIOCSIFFLAGS, &network);
2247
if(ret == -1){
2248
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2249
}
2250
}
2251
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2252
if(ret == -1){
2253
perror_plus("close");
2254
}
2616
ret_errno = lower_privileges_permanently();
2617
if(ret_errno != 0){
2618
errno = ret_errno;
2619
perror_plus("Failed to lower privileges permanently");
2255
2620
}
2256
2621
}
2257
/* Lower privileges permanently */
2258
errno = 0;
2259
ret = setuid(uid);
2260
if(ret == -1){
2261
perror_plus("setuid");
2262
}
2622
2623
free(interfaces_to_take_down);
2624
free(interfaces_hooks);
2263
2625
2264
2626
/* Removes the GPGME temp directory and all files inside */
2265
if(tempdir_created){
2627
if(tempdir != NULL){
2266
2628
struct dirent **direntries = NULL;
2267
struct dirent *direntry = NULL;
2268
int numentries = scandir(tempdir, &direntries, notdotentries,
2269
alphasort);
2270
if (numentries > 0){
2271
for(int i = 0; i < numentries; i++){
2272
direntry = direntries[i];
2273
char *fullname = NULL;
2274
ret = asprintf(&fullname, "%s/%s", tempdir,
2275
direntry->d_name);
2276
if(ret < 0){
2277
perror_plus("asprintf");
2278
continue;
2279
}
2280
ret = remove(fullname);
2281
if(ret == -1){
2282
fprintf_plus(stderr, "remove(\"%s\"): %s\n", fullname,
2283
strerror(errno));
2284
}
2285
free(fullname);
2629
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |
2630
O_NOFOLLOW));
2631
if(tempdir_fd == -1){
2632
perror_plus("open");
2633
} else {
2634
#ifdef __GLIBC__
2635
#if __GLIBC_PREREQ(2, 15)
2636
int numentries = scandirat(tempdir_fd, ".", &direntries,
2637
notdotentries, alphasort);
2638
#else /* not __GLIBC_PREREQ(2, 15) */
2639
int numentries = scandir(tempdir, &direntries, notdotentries,
2640
alphasort);
2641
#endif /* not __GLIBC_PREREQ(2, 15) */
2642
#else /* not __GLIBC__ */
2643
int numentries = scandir(tempdir, &direntries, notdotentries,
2644
alphasort);
2645
#endif /* not __GLIBC__ */
2646
if(numentries >= 0){
2647
for(int i = 0; i < numentries; i++){
2648
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2649
if(ret == -1){
2650
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2651
" \"%s\", 0): %s\n", tempdir,
2652
direntries[i]->d_name, strerror(errno));
2653
}
2654
free(direntries[i]);
2655
}
2656
2657
/* need to clean even if 0 because man page doesn't specify */
2658
free(direntries);
2659
if(numentries == -1){
2660
perror_plus("scandir");
2661
}
2662
ret = rmdir(tempdir);
2663
if(ret == -1 and errno != ENOENT){
2664
perror_plus("rmdir");
2665
}
2286
2666
}
2287
}
2288
2289
/* need to clean even if 0 because man page doesn't specify */
2290
free(direntries);
2291
if (numentries == -1){
2292
perror_plus("scandir");
2293
}
2294
ret = rmdir(tempdir);
2295
if(ret == -1 and errno != ENOENT){
2296
perror_plus("rmdir");
2667
TEMP_FAILURE_RETRY(close(tempdir_fd));
2297
2668
}
2298
2669
}
2299
2670
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0