(root)/mandos/release
» Revision
237.7.761
(compared to revision 237.16.8)
: plugins.d/mandos-client.c
To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 237.7.761
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.761
- Committer: teddy at recompile
- Date: 2020-04-05 21:30:59 UTC
- mto: This revision was merged to the branch mainline in revision 398.
- Revision ID: teddy@recompile.se-20200405213059-fb2a61ckqynrmatk
Fix file descriptor leak in mandos-client
When the local network has Mandos servers announcing themselves using
real, globally reachable, IPv6 addresses (i.e. not link-local
addresses), but there is no router on the local network providing IPv6
RA (Router Advertisement) packets, the client cannot reach the server
by normal means, since the client only has a link-local IPv6 address,
and has no usable route to reach the server's global IPv6 address.
(This is not a common situation, and usually only happens when the
router itself reboots and runs a Mandos client, since it cannot then
give RA packets to itself.) The client code has a solution for
this, which consists of adding a temporary local route to reach the
address of the server during communication, and removing this
temporary route afterwards.
This solution with a temporary route works, but has a file descriptor
leak; it leaks one file descriptor for each addition and for each
removal of a route. If one server requiring an added route is present
on the network, but no servers gives a password, making the client
retry after the default ten seconds, and we furthermore assume a
default 1024 open files limit, the client runs out of file descriptors
after about 90 minutes, after which time the client process will be
useless and fail to retrieve any passwords, necessitating manual
password entry via the keyboard.
Fix this by eliminating the file descriptor leak in the client.
* plugins.d/mandos-client.c (add_delete_local_route): Do
close(devnull) also in parent process, also if fork() fails, and on
any failure in child process.
When the local network has Mandos servers announcing themselves using
real, globally reachable, IPv6 addresses (i.e. not link-local
addresses), but there is no router on the local network providing IPv6
RA (Router Advertisement) packets, the client cannot reach the server
by normal means, since the client only has a link-local IPv6 address,
and has no usable route to reach the server's global IPv6 address.
(This is not a common situation, and usually only happens when the
router itself reboots and runs a Mandos client, since it cannot then
give RA packets to itself.) The client code has a solution for
this, which consists of adding a temporary local route to reach the
address of the server during communication, and removing this
temporary route afterwards.
This solution with a temporary route works, but has a file descriptor
leak; it leaks one file descriptor for each addition and for each
removal of a route. If one server requiring an added route is present
on the network, but no servers gives a password, making the client
retry after the default ten seconds, and we furthermore assume a
default 1024 open files limit, the client runs out of file descriptors
after about 90 minutes, after which time the client process will be
useless and fail to retrieve any passwords, necessitating manual
password entry via the keyboard.
Fix this by eliminating the file descriptor leak in the client.
* plugins.d/mandos-client.c (add_delete_local_route): Do
close(devnull) also in parent process, also if fork() fails, and on
any failure in child process.
- files added:
- bugs.xml
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2011 Teddy Hogeborn
13
* Copyright © 2008-2011 Björn Påhlsson
14
*
15
* This program is free software: you can redistribute it and/or
16
* modify it under the terms of the GNU General Public License as
17
* published by the Free Software Foundation, either version 3 of the
18
* License, or (at your option) any later version.
19
*
20
* This program is distributed in the hope that it will be useful, but
12
* Copyright © 2008-2019 Teddy Hogeborn
13
* Copyright © 2008-2019 Björn Påhlsson
14
*
15
* This file is part of Mandos.
16
*
17
* Mandos is free software: you can redistribute it and/or modify it
18
* under the terms of the GNU General Public License as published by
19
* the Free Software Foundation, either version 3 of the License, or
20
* (at your option) any later version.
21
*
22
* Mandos is distributed in the hope that it will be useful, but
21
23
* WITHOUT ANY WARRANTY; without even the implied warranty of
22
24
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
23
25
* General Public License for more details.
24
26
*
25
27
* You should have received a copy of the GNU General Public License
26
* along with this program. If not, see
27
* <http://www.gnu.org/licenses/>.
28
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
28
29
*
29
30
* Contact the authors at <mandos@recompile.se>.
30
31
*/
32
33
/* Needed by GPGME, specifically gpgme_data_seek() */
33
34
#ifndef _LARGEFILE_SOURCE
34
35
#define _LARGEFILE_SOURCE
35
#endif
36
#endif /* not _LARGEFILE_SOURCE */
36
37
#ifndef _FILE_OFFSET_BITS
37
38
#define _FILE_OFFSET_BITS 64
38
#endif
39
#endif /* not _FILE_OFFSET_BITS */
39
40
40
41
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
42
42
43
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror(), remove() */
44
#include <stdint.h> /* uint16_t, uint32_t */
44
stdout, ferror() */
45
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
45
46
#include <stddef.h> /* NULL, size_t, ssize_t */
46
47
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
48
strtof(), abort() */
48
49
#include <stdbool.h> /* bool, false, true */
49
#include <string.h> /* memset(), strcmp(), strlen(),
50
strerror(), asprintf(), strcpy() */
50
#include <string.h> /* strcmp(), strlen(), strerror(),
51
asprintf(), strncpy(), strsignal()
52
*/
51
53
#include <sys/ioctl.h> /* ioctl */
52
54
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
53
55
sockaddr_in6, PF_INET6,
55
57
opendir(), DIR */
56
58
#include <sys/stat.h> /* open(), S_ISREG */
57
59
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect() */
59
#include <fcntl.h> /* open() */
60
inet_pton(), connect(),
61
getnameinfo() */
62
#include <fcntl.h> /* open(), unlinkat(), AT_REMOVEDIR */
60
63
#include <dirent.h> /* opendir(), struct dirent, readdir()
61
64
*/
62
65
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
63
66
strtoimax() */
64
#include <assert.h> /* assert() */
65
#include <errno.h> /* perror(), errno,
67
#include <errno.h> /* perror(), errno, EINTR, EINVAL,
68
EAI_SYSTEM, ENETUNREACH,
69
EHOSTUNREACH, ECONNREFUSED, EPROTO,
70
EIO, ENOENT, ENXIO, ENOMEM, EISDIR,
71
ENOTEMPTY,
66
72
program_invocation_short_name */
67
73
#include <time.h> /* nanosleep(), time(), sleep() */
68
74
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
73
79
*/
74
80
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
81
getuid(), getgid(), seteuid(),
76
setgid(), pause() */
77
#include <arpa/inet.h> /* inet_pton(), htons, inet_ntop() */
82
setgid(), pause(), _exit(),
83
unlinkat() */
84
#include <arpa/inet.h> /* inet_pton(), htons() */
78
85
#include <iso646.h> /* not, or, and */
79
86
#include <argp.h> /* struct argp_option, error_t, struct
80
87
argp_state, struct argp,
87
94
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
88
95
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
89
96
WEXITSTATUS(), WTERMSIG() */
97
#include <grp.h> /* setgroups() */
98
#include <argz.h> /* argz_add_sep(), argz_next(),
99
argz_delete(), argz_append(),
100
argz_stringify(), argz_add(),
101
argz_count() */
102
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
103
EAI_SYSTEM, gai_strerror() */
90
104
91
105
#ifdef __linux__
92
106
#include <sys/klog.h> /* klogctl() */
109
123
gnutls_*
110
124
init_gnutls_session(),
111
125
GNUTLS_* */
126
#if GNUTLS_VERSION_NUMBER < 0x030600
112
127
#include <gnutls/openpgp.h>
113
128
/* gnutls_certificate_set_openpgp_key_file(),
114
129
GNUTLS_OPENPGP_FMT_BASE64 */
130
#elif GNUTLS_VERSION_NUMBER >= 0x030606
131
#include <gnutls/x509.h> /* gnutls_pkcs_encrypt_flags_t,
132
GNUTLS_PKCS_PLAIN,
133
GNUTLS_PKCS_NULL_PASSWORD */
134
#endif
115
135
116
136
/* GPGME */
117
137
#include <gpgme.h> /* All GPGME types, constants and
125
145
#define PATHDIR "/conf/conf.d/mandos"
126
146
#define SECKEY "seckey.txt"
127
147
#define PUBKEY "pubkey.txt"
148
#define TLS_PRIVKEY "tls-privkey.pem"
149
#define TLS_PUBKEY "tls-pubkey.pem"
128
150
#define HOOKDIR "/lib/mandos/network-hooks.d"
129
151
130
152
bool debug = false;
134
156
static const char sys_class_net[] = "/sys/class/net";
135
157
char *connect_to = NULL;
136
158
const char *hookdir = HOOKDIR;
159
int hookdir_fd = -1;
160
uid_t uid = 65534;
161
gid_t gid = 65534;
137
162
138
163
/* Doubly linked list that need to be circularly linked when used */
139
164
typedef struct server{
140
165
const char *ip;
141
uint16_t port;
166
in_port_t port;
142
167
AvahiIfIndex if_index;
143
168
int af;
144
169
struct timespec last_seen;
148
173
149
174
/* Used for passing in values through the Avahi callback functions */
150
175
typedef struct {
151
AvahiSimplePoll *simple_poll;
152
176
AvahiServer *server;
153
177
gnutls_certificate_credentials_t cred;
154
178
unsigned int dh_bits;
156
180
const char *priority;
157
181
gpgme_ctx_t ctx;
158
182
server *current_server;
183
char *interfaces;
184
size_t interfaces_size;
159
185
} mandos_context;
160
186
161
/* global context so signal handler can reach it*/
162
mandos_context mc = { .simple_poll = NULL, .server = NULL,
163
.dh_bits = 1024, .priority = "SECURE256"
164
":!CTYPE-X.509:+CTYPE-OPENPGP",
165
.current_server = NULL };
187
/* global so signal handler can reach it*/
188
AvahiSimplePoll *simple_poll;
166
189
167
190
sig_atomic_t quit_now = 0;
168
191
int signal_received = 0;
169
192
170
193
/* Function to use when printing errors */
171
194
void perror_plus(const char *print_text){
195
int e = errno;
172
196
fprintf(stderr, "Mandos plugin %s: ",
173
197
program_invocation_short_name);
198
errno = e;
174
199
perror(print_text);
175
200
}
176
201
202
__attribute__((format (gnu_printf, 2, 3), nonnull))
203
int fprintf_plus(FILE *stream, const char *format, ...){
204
va_list ap;
205
va_start (ap, format);
206
207
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
208
program_invocation_short_name));
209
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
210
}
211
177
212
/*
178
213
* Make additional room in "buffer" for at least BUFFER_SIZE more
179
214
* bytes. "buffer_capacity" is how much is currently allocated,
180
215
* "buffer_length" is how much is already used.
181
216
*/
217
__attribute__((nonnull, warn_unused_result))
182
218
size_t incbuffer(char **buffer, size_t buffer_length,
183
219
size_t buffer_capacity){
184
220
if(buffer_length + BUFFER_SIZE > buffer_capacity){
185
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
186
if(buffer == NULL){
221
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
222
if(new_buf == NULL){
223
int old_errno = errno;
224
free(*buffer);
225
errno = old_errno;
226
*buffer = NULL;
187
227
return 0;
188
228
}
229
*buffer = new_buf;
189
230
buffer_capacity += BUFFER_SIZE;
190
231
}
191
232
return buffer_capacity;
192
233
}
193
234
194
235
/* Add server to set of servers to retry periodically */
195
int add_server(const char *ip, uint16_t port, AvahiIfIndex if_index,
196
int af){
236
__attribute__((nonnull, warn_unused_result))
237
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
238
int af, server **current_server){
197
239
int ret;
198
240
server *new_server = malloc(sizeof(server));
199
241
if(new_server == NULL){
200
242
perror_plus("malloc");
201
return -1;
243
return false;
202
244
}
203
245
*new_server = (server){ .ip = strdup(ip),
204
246
.port = port,
206
248
.af = af };
207
249
if(new_server->ip == NULL){
208
250
perror_plus("strdup");
209
return -1;
251
free(new_server);
252
return false;
253
}
254
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
255
if(ret == -1){
256
perror_plus("clock_gettime");
257
#ifdef __GNUC__
258
#pragma GCC diagnostic push
259
#pragma GCC diagnostic ignored "-Wcast-qual"
260
#endif
261
free((char *)(new_server->ip));
262
#ifdef __GNUC__
263
#pragma GCC diagnostic pop
264
#endif
265
free(new_server);
266
return false;
210
267
}
211
268
/* Special case of first server */
212
if (mc.current_server == NULL){
269
if(*current_server == NULL){
213
270
new_server->next = new_server;
214
271
new_server->prev = new_server;
215
mc.current_server = new_server;
216
/* Place the new server last in the list */
272
*current_server = new_server;
217
273
} else {
218
new_server->next = mc.current_server;
219
new_server->prev = mc.current_server->prev;
274
/* Place the new server last in the list */
275
new_server->next = *current_server;
276
new_server->prev = (*current_server)->prev;
220
277
new_server->prev->next = new_server;
221
mc.current_server->prev = new_server;
222
}
223
ret = clock_gettime(CLOCK_MONOTONIC, &mc.current_server->last_seen);
224
if(ret == -1){
225
perror_plus("clock_gettime");
226
return -1;
227
}
228
return 0;
278
(*current_server)->prev = new_server;
279
}
280
return true;
281
}
282
283
/* Set effective uid to 0, return errno */
284
__attribute__((warn_unused_result))
285
int raise_privileges(void){
286
int old_errno = errno;
287
int ret = 0;
288
if(seteuid(0) == -1){
289
ret = errno;
290
}
291
errno = old_errno;
292
return ret;
293
}
294
295
/* Set effective and real user ID to 0. Return errno. */
296
__attribute__((warn_unused_result))
297
int raise_privileges_permanently(void){
298
int old_errno = errno;
299
int ret = raise_privileges();
300
if(ret != 0){
301
errno = old_errno;
302
return ret;
303
}
304
if(setuid(0) == -1){
305
ret = errno;
306
}
307
errno = old_errno;
308
return ret;
309
}
310
311
/* Set effective user ID to unprivileged saved user ID */
312
__attribute__((warn_unused_result))
313
int lower_privileges(void){
314
int old_errno = errno;
315
int ret = 0;
316
if(seteuid(uid) == -1){
317
ret = errno;
318
}
319
errno = old_errno;
320
return ret;
321
}
322
323
/* Lower privileges permanently */
324
__attribute__((warn_unused_result))
325
int lower_privileges_permanently(void){
326
int old_errno = errno;
327
int ret = 0;
328
if(setuid(uid) == -1){
329
ret = errno;
330
}
331
errno = old_errno;
332
return ret;
229
333
}
230
334
231
335
/*
232
336
* Initialize GPGME.
233
337
*/
234
static bool init_gpgme(const char *seckey, const char *pubkey,
235
const char *tempdir){
338
__attribute__((nonnull, warn_unused_result))
339
static bool init_gpgme(const char * const seckey,
340
const char * const pubkey,
341
const char * const tempdir,
342
mandos_context *mc){
236
343
gpgme_error_t rc;
237
344
gpgme_engine_info_t engine_info;
238
345
239
240
346
/*
241
347
* Helper function to insert pub and seckey to the engine keyring.
242
348
*/
243
bool import_key(const char *filename){
349
bool import_key(const char * const filename){
244
350
int ret;
245
351
int fd;
246
352
gpgme_data_t pgp_data;
251
357
return false;
252
358
}
253
359
360
/* Workaround for systems without a real-time clock; see also
361
Debian bug #894495: <https://bugs.debian.org/894495> */
362
do {
363
{
364
time_t currtime = time(NULL);
365
if(currtime != (time_t)-1){
366
struct tm tm;
367
if(gmtime_r(&currtime, &tm) == NULL) {
368
perror_plus("gmtime_r");
369
break;
370
}
371
if(tm.tm_year != 70 or tm.tm_mon != 0){
372
break;
373
}
374
if(debug){
375
fprintf_plus(stderr, "System clock is January 1970");
376
}
377
} else {
378
if(debug){
379
fprintf_plus(stderr, "System clock is invalid");
380
}
381
}
382
}
383
struct stat keystat;
384
ret = fstat(fd, &keystat);
385
if(ret != 0){
386
perror_plus("fstat");
387
break;
388
}
389
ret = raise_privileges();
390
if(ret != 0){
391
errno = ret;
392
perror_plus("Failed to raise privileges");
393
break;
394
}
395
if(debug){
396
fprintf_plus(stderr,
397
"Setting system clock to key file mtime");
398
}
399
time_t keytime = keystat.st_mtim.tv_sec;
400
if(stime(&keytime) != 0){
401
perror_plus("stime");
402
}
403
ret = lower_privileges();
404
if(ret != 0){
405
errno = ret;
406
perror_plus("Failed to lower privileges");
407
}
408
} while(false);
409
254
410
rc = gpgme_data_new_from_fd(&pgp_data, fd);
255
411
if(rc != GPG_ERR_NO_ERROR){
256
fprintf(stderr, "Mandos plugin mandos-client: "
257
"bad gpgme_data_new_from_fd: %s: %s\n",
258
gpgme_strsource(rc), gpgme_strerror(rc));
412
fprintf_plus(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
413
gpgme_strsource(rc), gpgme_strerror(rc));
259
414
return false;
260
415
}
261
416
262
rc = gpgme_op_import(mc.ctx, pgp_data);
417
rc = gpgme_op_import(mc->ctx, pgp_data);
263
418
if(rc != GPG_ERR_NO_ERROR){
264
fprintf(stderr, "Mandos plugin mandos-client: "
265
"bad gpgme_op_import: %s: %s\n",
266
gpgme_strsource(rc), gpgme_strerror(rc));
419
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
420
gpgme_strsource(rc), gpgme_strerror(rc));
267
421
return false;
268
422
}
423
{
424
gpgme_import_result_t import_result
425
= gpgme_op_import_result(mc->ctx);
426
if((import_result->imported < 1
427
or import_result->not_imported > 0)
428
and import_result->unchanged == 0){
429
fprintf_plus(stderr, "bad gpgme_op_import_results:\n");
430
fprintf_plus(stderr,
431
"The total number of considered keys: %d\n",
432
import_result->considered);
433
fprintf_plus(stderr,
434
"The number of keys without user ID: %d\n",
435
import_result->no_user_id);
436
fprintf_plus(stderr,
437
"The total number of imported keys: %d\n",
438
import_result->imported);
439
fprintf_plus(stderr, "The number of imported RSA keys: %d\n",
440
import_result->imported_rsa);
441
fprintf_plus(stderr, "The number of unchanged keys: %d\n",
442
import_result->unchanged);
443
fprintf_plus(stderr, "The number of new user IDs: %d\n",
444
import_result->new_user_ids);
445
fprintf_plus(stderr, "The number of new sub keys: %d\n",
446
import_result->new_sub_keys);
447
fprintf_plus(stderr, "The number of new signatures: %d\n",
448
import_result->new_signatures);
449
fprintf_plus(stderr, "The number of new revocations: %d\n",
450
import_result->new_revocations);
451
fprintf_plus(stderr,
452
"The total number of secret keys read: %d\n",
453
import_result->secret_read);
454
fprintf_plus(stderr,
455
"The number of imported secret keys: %d\n",
456
import_result->secret_imported);
457
fprintf_plus(stderr,
458
"The number of unchanged secret keys: %d\n",
459
import_result->secret_unchanged);
460
fprintf_plus(stderr, "The number of keys not imported: %d\n",
461
import_result->not_imported);
462
for(gpgme_import_status_t import_status
463
= import_result->imports;
464
import_status != NULL;
465
import_status = import_status->next){
466
fprintf_plus(stderr, "Import status for key: %s\n",
467
import_status->fpr);
468
if(import_status->result != GPG_ERR_NO_ERROR){
469
fprintf_plus(stderr, "Import result: %s: %s\n",
470
gpgme_strsource(import_status->result),
471
gpgme_strerror(import_status->result));
472
}
473
fprintf_plus(stderr, "Key status:\n");
474
fprintf_plus(stderr,
475
import_status->status & GPGME_IMPORT_NEW
476
? "The key was new.\n"
477
: "The key was not new.\n");
478
fprintf_plus(stderr,
479
import_status->status & GPGME_IMPORT_UID
480
? "The key contained new user IDs.\n"
481
: "The key did not contain new user IDs.\n");
482
fprintf_plus(stderr,
483
import_status->status & GPGME_IMPORT_SIG
484
? "The key contained new signatures.\n"
485
: "The key did not contain new signatures.\n");
486
fprintf_plus(stderr,
487
import_status->status & GPGME_IMPORT_SUBKEY
488
? "The key contained new sub keys.\n"
489
: "The key did not contain new sub keys.\n");
490
fprintf_plus(stderr,
491
import_status->status & GPGME_IMPORT_SECRET
492
? "The key contained a secret key.\n"
493
: "The key did not contain a secret key.\n");
494
}
495
return false;
496
}
497
}
269
498
270
ret = (int)TEMP_FAILURE_RETRY(close(fd));
499
ret = close(fd);
271
500
if(ret == -1){
272
501
perror_plus("close");
273
502
}
276
505
}
277
506
278
507
if(debug){
279
fprintf(stderr, "Mandos plugin mandos-client: "
280
"Initializing GPGME\n");
508
fprintf_plus(stderr, "Initializing GPGME\n");
281
509
}
282
510
283
511
/* Init GPGME */
284
512
gpgme_check_version(NULL);
285
513
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
286
514
if(rc != GPG_ERR_NO_ERROR){
287
fprintf(stderr, "Mandos plugin mandos-client: "
288
"bad gpgme_engine_check_version: %s: %s\n",
289
gpgme_strsource(rc), gpgme_strerror(rc));
515
fprintf_plus(stderr, "bad gpgme_engine_check_version: %s: %s\n",
516
gpgme_strsource(rc), gpgme_strerror(rc));
290
517
return false;
291
518
}
292
519
293
520
/* Set GPGME home directory for the OpenPGP engine only */
294
521
rc = gpgme_get_engine_info(&engine_info);
295
522
if(rc != GPG_ERR_NO_ERROR){
296
fprintf(stderr, "Mandos plugin mandos-client: "
297
"bad gpgme_get_engine_info: %s: %s\n",
298
gpgme_strsource(rc), gpgme_strerror(rc));
523
fprintf_plus(stderr, "bad gpgme_get_engine_info: %s: %s\n",
524
gpgme_strsource(rc), gpgme_strerror(rc));
299
525
return false;
300
526
}
301
527
while(engine_info != NULL){
307
533
engine_info = engine_info->next;
308
534
}
309
535
if(engine_info == NULL){
310
fprintf(stderr, "Mandos plugin mandos-client: "
311
"Could not set GPGME home dir to %s\n", tempdir);
536
fprintf_plus(stderr, "Could not set GPGME home dir to %s\n",
537
tempdir);
312
538
return false;
313
539
}
314
540
315
541
/* Create new GPGME "context" */
316
rc = gpgme_new(&(mc.ctx));
542
rc = gpgme_new(&(mc->ctx));
317
543
if(rc != GPG_ERR_NO_ERROR){
318
fprintf(stderr, "Mandos plugin mandos-client: "
319
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
320
gpgme_strerror(rc));
544
fprintf_plus(stderr, "bad gpgme_new: %s: %s\n",
545
gpgme_strsource(rc), gpgme_strerror(rc));
321
546
return false;
322
547
}
323
548
332
557
* Decrypt OpenPGP data.
333
558
* Returns -1 on error
334
559
*/
560
__attribute__((nonnull, warn_unused_result))
335
561
static ssize_t pgp_packet_decrypt(const char *cryptotext,
336
562
size_t crypto_size,
337
char **plaintext){
563
char **plaintext,
564
mandos_context *mc){
338
565
gpgme_data_t dh_crypto, dh_plain;
339
566
gpgme_error_t rc;
340
567
ssize_t ret;
342
569
ssize_t plaintext_length = 0;
343
570
344
571
if(debug){
345
fprintf(stderr, "Mandos plugin mandos-client: "
346
"Trying to decrypt OpenPGP data\n");
572
fprintf_plus(stderr, "Trying to decrypt OpenPGP data\n");
347
573
}
348
574
349
575
/* Create new GPGME data buffer from memory cryptotext */
350
576
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
351
577
0);
352
578
if(rc != GPG_ERR_NO_ERROR){
353
fprintf(stderr, "Mandos plugin mandos-client: "
354
"bad gpgme_data_new_from_mem: %s: %s\n",
355
gpgme_strsource(rc), gpgme_strerror(rc));
579
fprintf_plus(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
580
gpgme_strsource(rc), gpgme_strerror(rc));
356
581
return -1;
357
582
}
358
583
359
584
/* Create new empty GPGME data buffer for the plaintext */
360
585
rc = gpgme_data_new(&dh_plain);
361
586
if(rc != GPG_ERR_NO_ERROR){
362
fprintf(stderr, "Mandos plugin mandos-client: "
363
"bad gpgme_data_new: %s: %s\n",
364
gpgme_strsource(rc), gpgme_strerror(rc));
587
fprintf_plus(stderr, "bad gpgme_data_new: %s: %s\n",
588
gpgme_strsource(rc), gpgme_strerror(rc));
365
589
gpgme_data_release(dh_crypto);
366
590
return -1;
367
591
}
368
592
369
593
/* Decrypt data from the cryptotext data buffer to the plaintext
370
594
data buffer */
371
rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
595
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
372
596
if(rc != GPG_ERR_NO_ERROR){
373
fprintf(stderr, "Mandos plugin mandos-client: "
374
"bad gpgme_op_decrypt: %s: %s\n",
375
gpgme_strsource(rc), gpgme_strerror(rc));
597
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
598
gpgme_strsource(rc), gpgme_strerror(rc));
376
599
plaintext_length = -1;
377
600
if(debug){
378
601
gpgme_decrypt_result_t result;
379
result = gpgme_op_decrypt_result(mc.ctx);
602
result = gpgme_op_decrypt_result(mc->ctx);
380
603
if(result == NULL){
381
fprintf(stderr, "Mandos plugin mandos-client: "
382
"gpgme_op_decrypt_result failed\n");
604
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
383
605
} else {
384
fprintf(stderr, "Mandos plugin mandos-client: "
385
"Unsupported algorithm: %s\n",
386
result->unsupported_algorithm);
387
fprintf(stderr, "Mandos plugin mandos-client: "
388
"Wrong key usage: %u\n",
389
result->wrong_key_usage);
606
if(result->unsupported_algorithm != NULL) {
607
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
608
result->unsupported_algorithm);
609
}
610
fprintf_plus(stderr, "Wrong key usage: %s\n",
611
result->wrong_key_usage ? "Yes" : "No");
390
612
if(result->file_name != NULL){
391
fprintf(stderr, "Mandos plugin mandos-client: "
392
"File name: %s\n", result->file_name);
613
fprintf_plus(stderr, "File name: %s\n", result->file_name);
393
614
}
394
gpgme_recipient_t recipient;
395
recipient = result->recipients;
396
while(recipient != NULL){
397
fprintf(stderr, "Mandos plugin mandos-client: "
398
"Public key algorithm: %s\n",
399
gpgme_pubkey_algo_name(recipient->pubkey_algo));
400
fprintf(stderr, "Mandos plugin mandos-client: "
401
"Key ID: %s\n", recipient->keyid);
402
fprintf(stderr, "Mandos plugin mandos-client: "
403
"Secret key available: %s\n",
404
recipient->status == GPG_ERR_NO_SECKEY
405
? "No" : "Yes");
406
recipient = recipient->next;
615
616
for(gpgme_recipient_t r = result->recipients; r != NULL;
617
r = r->next){
618
fprintf_plus(stderr, "Public key algorithm: %s\n",
619
gpgme_pubkey_algo_name(r->pubkey_algo));
620
fprintf_plus(stderr, "Key ID: %s\n", r->keyid);
621
fprintf_plus(stderr, "Secret key available: %s\n",
622
r->status == GPG_ERR_NO_SECKEY ? "No" : "Yes");
407
623
}
408
624
}
409
625
}
411
627
}
412
628
413
629
if(debug){
414
fprintf(stderr, "Mandos plugin mandos-client: "
415
"Decryption of OpenPGP data succeeded\n");
630
fprintf_plus(stderr, "Decryption of OpenPGP data succeeded\n");
416
631
}
417
632
418
633
/* Seek back to the beginning of the GPGME plaintext data buffer */
449
664
}
450
665
451
666
if(debug){
452
fprintf(stderr, "Mandos plugin mandos-client: "
453
"Decrypted password is: ");
667
fprintf_plus(stderr, "Decrypted password is: ");
454
668
for(ssize_t i = 0; i < plaintext_length; i++){
455
669
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
456
670
}
467
681
return plaintext_length;
468
682
}
469
683
470
static const char * safer_gnutls_strerror(int value){
471
const char *ret = gnutls_strerror(value); /* Spurious warning from
472
-Wunreachable-code */
473
if(ret == NULL)
474
ret = "(unknown)";
475
return ret;
684
__attribute__((warn_unused_result, const))
685
static const char *safe_string(const char *str){
686
if(str == NULL)
687
return "(unknown)";
688
return str;
689
}
690
691
__attribute__((warn_unused_result))
692
static const char *safer_gnutls_strerror(int value){
693
const char *ret = gnutls_strerror(value);
694
return safe_string(ret);
476
695
}
477
696
478
697
/* GnuTLS log function callback */
698
__attribute__((nonnull))
479
699
static void debuggnutls(__attribute__((unused)) int level,
480
700
const char* string){
481
fprintf(stderr, "Mandos plugin mandos-client: GnuTLS: %s", string);
701
fprintf_plus(stderr, "GnuTLS: %s", string);
482
702
}
483
703
704
__attribute__((nonnull(1, 2, 4), warn_unused_result))
484
705
static int init_gnutls_global(const char *pubkeyfilename,
485
const char *seckeyfilename){
706
const char *seckeyfilename,
707
const char *dhparamsfilename,
708
mandos_context *mc){
486
709
int ret;
487
710
488
711
if(debug){
489
fprintf(stderr, "Mandos plugin mandos-client: "
490
"Initializing GnuTLS\n");
491
}
492
493
ret = gnutls_global_init();
494
if(ret != GNUTLS_E_SUCCESS){
495
fprintf(stderr, "Mandos plugin mandos-client: "
496
"GnuTLS global_init: %s\n", safer_gnutls_strerror(ret));
497
return -1;
712
fprintf_plus(stderr, "Initializing GnuTLS\n");
498
713
}
499
714
500
715
if(debug){
506
721
}
507
722
508
723
/* OpenPGP credentials */
509
ret = gnutls_certificate_allocate_credentials(&mc.cred);
724
ret = gnutls_certificate_allocate_credentials(&mc->cred);
510
725
if(ret != GNUTLS_E_SUCCESS){
511
fprintf(stderr, "Mandos plugin mandos-client: "
512
"GnuTLS memory error: %s\n", safer_gnutls_strerror(ret));
513
gnutls_global_deinit();
726
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
727
safer_gnutls_strerror(ret));
514
728
return -1;
515
729
}
516
730
517
731
if(debug){
518
fprintf(stderr, "Mandos plugin mandos-client: "
519
"Attempting to use OpenPGP public key %s and"
520
" secret key %s as GnuTLS credentials\n", pubkeyfilename,
521
seckeyfilename);
732
fprintf_plus(stderr, "Attempting to use public key %s and"
733
" private key %s as GnuTLS credentials\n",
734
pubkeyfilename,
735
seckeyfilename);
522
736
}
523
737
738
#if GNUTLS_VERSION_NUMBER >= 0x030606
739
ret = gnutls_certificate_set_rawpk_key_file
740
(mc->cred, pubkeyfilename, seckeyfilename,
741
GNUTLS_X509_FMT_PEM, /* format */
742
NULL, /* pass */
743
/* key_usage */
744
GNUTLS_KEY_DIGITAL_SIGNATURE | GNUTLS_KEY_KEY_ENCIPHERMENT,
745
NULL, /* names */
746
0, /* names_length */
747
/* privkey_flags */
748
GNUTLS_PKCS_PLAIN | GNUTLS_PKCS_NULL_PASSWORD,
749
0); /* pkcs11_flags */
750
#elif GNUTLS_VERSION_NUMBER < 0x030600
524
751
ret = gnutls_certificate_set_openpgp_key_file
525
(mc.cred, pubkeyfilename, seckeyfilename,
752
(mc->cred, pubkeyfilename, seckeyfilename,
526
753
GNUTLS_OPENPGP_FMT_BASE64);
754
#else
755
#error "Needs GnuTLS 3.6.6 or later, or before 3.6.0"
756
#endif
527
757
if(ret != GNUTLS_E_SUCCESS){
528
fprintf(stderr,
529
"Mandos plugin mandos-client: "
530
"Error[%d] while reading the OpenPGP key pair ('%s',"
531
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
532
fprintf(stderr, "Mandos plugin mandos-client: "
533
"The GnuTLS error is: %s\n", safer_gnutls_strerror(ret));
758
fprintf_plus(stderr,
759
"Error[%d] while reading the key pair ('%s',"
760
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
761
fprintf_plus(stderr, "The GnuTLS error is: %s\n",
762
safer_gnutls_strerror(ret));
534
763
goto globalfail;
535
764
}
536
765
537
766
/* GnuTLS server initialization */
538
ret = gnutls_dh_params_init(&mc.dh_params);
539
if(ret != GNUTLS_E_SUCCESS){
540
fprintf(stderr, "Mandos plugin mandos-client: "
541
"Error in GnuTLS DH parameter initialization:"
542
" %s\n", safer_gnutls_strerror(ret));
543
goto globalfail;
544
}
545
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
546
if(ret != GNUTLS_E_SUCCESS){
547
fprintf(stderr, "Mandos plugin mandos-client: "
548
"Error in GnuTLS prime generation: %s\n",
549
safer_gnutls_strerror(ret));
550
goto globalfail;
551
}
552
553
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
767
ret = gnutls_dh_params_init(&mc->dh_params);
768
if(ret != GNUTLS_E_SUCCESS){
769
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
770
" initialization: %s\n",
771
safer_gnutls_strerror(ret));
772
goto globalfail;
773
}
774
/* If a Diffie-Hellman parameters file was given, try to use it */
775
if(dhparamsfilename != NULL){
776
gnutls_datum_t params = { .data = NULL, .size = 0 };
777
do {
778
int dhpfile = open(dhparamsfilename, O_RDONLY);
779
if(dhpfile == -1){
780
perror_plus("open");
781
dhparamsfilename = NULL;
782
break;
783
}
784
size_t params_capacity = 0;
785
while(true){
786
params_capacity = incbuffer((char **)¶ms.data,
787
(size_t)params.size,
788
(size_t)params_capacity);
789
if(params_capacity == 0){
790
perror_plus("incbuffer");
791
free(params.data);
792
params.data = NULL;
793
dhparamsfilename = NULL;
794
break;
795
}
796
ssize_t bytes_read = read(dhpfile,
797
params.data + params.size,
798
BUFFER_SIZE);
799
/* EOF */
800
if(bytes_read == 0){
801
break;
802
}
803
/* check bytes_read for failure */
804
if(bytes_read < 0){
805
perror_plus("read");
806
free(params.data);
807
params.data = NULL;
808
dhparamsfilename = NULL;
809
break;
810
}
811
params.size += (unsigned int)bytes_read;
812
}
813
ret = close(dhpfile);
814
if(ret == -1){
815
perror_plus("close");
816
}
817
if(params.data == NULL){
818
dhparamsfilename = NULL;
819
}
820
if(dhparamsfilename == NULL){
821
break;
822
}
823
ret = gnutls_dh_params_import_pkcs3(mc->dh_params, ¶ms,
824
GNUTLS_X509_FMT_PEM);
825
if(ret != GNUTLS_E_SUCCESS){
826
fprintf_plus(stderr, "Failed to parse DH parameters in file"
827
" \"%s\": %s\n", dhparamsfilename,
828
safer_gnutls_strerror(ret));
829
dhparamsfilename = NULL;
830
}
831
free(params.data);
832
} while(false);
833
}
834
if(dhparamsfilename == NULL){
835
if(mc->dh_bits == 0){
836
#if GNUTLS_VERSION_NUMBER < 0x030600
837
/* Find out the optimal number of DH bits */
838
/* Try to read the private key file */
839
gnutls_datum_t buffer = { .data = NULL, .size = 0 };
840
do {
841
int secfile = open(seckeyfilename, O_RDONLY);
842
if(secfile == -1){
843
perror_plus("open");
844
break;
845
}
846
size_t buffer_capacity = 0;
847
while(true){
848
buffer_capacity = incbuffer((char **)&buffer.data,
849
(size_t)buffer.size,
850
(size_t)buffer_capacity);
851
if(buffer_capacity == 0){
852
perror_plus("incbuffer");
853
free(buffer.data);
854
buffer.data = NULL;
855
break;
856
}
857
ssize_t bytes_read = read(secfile,
858
buffer.data + buffer.size,
859
BUFFER_SIZE);
860
/* EOF */
861
if(bytes_read == 0){
862
break;
863
}
864
/* check bytes_read for failure */
865
if(bytes_read < 0){
866
perror_plus("read");
867
free(buffer.data);
868
buffer.data = NULL;
869
break;
870
}
871
buffer.size += (unsigned int)bytes_read;
872
}
873
close(secfile);
874
} while(false);
875
/* If successful, use buffer to parse private key */
876
gnutls_sec_param_t sec_param = GNUTLS_SEC_PARAM_ULTRA;
877
if(buffer.data != NULL){
878
{
879
gnutls_openpgp_privkey_t privkey = NULL;
880
ret = gnutls_openpgp_privkey_init(&privkey);
881
if(ret != GNUTLS_E_SUCCESS){
882
fprintf_plus(stderr, "Error initializing OpenPGP key"
883
" structure: %s",
884
safer_gnutls_strerror(ret));
885
free(buffer.data);
886
buffer.data = NULL;
887
} else {
888
ret = gnutls_openpgp_privkey_import
889
(privkey, &buffer, GNUTLS_OPENPGP_FMT_BASE64, "", 0);
890
if(ret != GNUTLS_E_SUCCESS){
891
fprintf_plus(stderr, "Error importing OpenPGP key : %s",
892
safer_gnutls_strerror(ret));
893
privkey = NULL;
894
}
895
free(buffer.data);
896
buffer.data = NULL;
897
if(privkey != NULL){
898
/* Use private key to suggest an appropriate
899
sec_param */
900
sec_param = gnutls_openpgp_privkey_sec_param(privkey);
901
gnutls_openpgp_privkey_deinit(privkey);
902
if(debug){
903
fprintf_plus(stderr, "This OpenPGP key implies using"
904
" a GnuTLS security parameter \"%s\".\n",
905
safe_string(gnutls_sec_param_get_name
906
(sec_param)));
907
}
908
}
909
}
910
}
911
if(sec_param == GNUTLS_SEC_PARAM_UNKNOWN){
912
/* Err on the side of caution */
913
sec_param = GNUTLS_SEC_PARAM_ULTRA;
914
if(debug){
915
fprintf_plus(stderr, "Falling back to security parameter"
916
" \"%s\"\n",
917
safe_string(gnutls_sec_param_get_name
918
(sec_param)));
919
}
920
}
921
}
922
unsigned int uret = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, sec_param);
923
if(uret != 0){
924
mc->dh_bits = uret;
925
if(debug){
926
fprintf_plus(stderr, "A \"%s\" GnuTLS security parameter"
927
" implies %u DH bits; using that.\n",
928
safe_string(gnutls_sec_param_get_name
929
(sec_param)),
930
mc->dh_bits);
931
}
932
} else {
933
fprintf_plus(stderr, "Failed to get implied number of DH"
934
" bits for security parameter \"%s\"): %s\n",
935
safe_string(gnutls_sec_param_get_name
936
(sec_param)),
937
safer_gnutls_strerror(ret));
938
goto globalfail;
939
}
940
#endif
941
} else { /* dh_bits != 0 */
942
if(debug){
943
fprintf_plus(stderr, "DH bits explicitly set to %u\n",
944
mc->dh_bits);
945
}
946
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
947
if(ret != GNUTLS_E_SUCCESS){
948
fprintf_plus(stderr, "Error in GnuTLS prime generation (%u"
949
" bits): %s\n", mc->dh_bits,
950
safer_gnutls_strerror(ret));
951
goto globalfail;
952
}
953
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
954
}
955
}
554
956
555
957
return 0;
556
958
557
959
globalfail:
558
960
559
gnutls_certificate_free_credentials(mc.cred);
560
gnutls_global_deinit();
561
gnutls_dh_params_deinit(mc.dh_params);
961
gnutls_certificate_free_credentials(mc->cred);
962
gnutls_dh_params_deinit(mc->dh_params);
562
963
return -1;
563
964
}
564
965
565
static int init_gnutls_session(gnutls_session_t *session){
966
__attribute__((nonnull, warn_unused_result))
967
static int init_gnutls_session(gnutls_session_t *session,
968
mandos_context *mc){
566
969
int ret;
567
970
/* GnuTLS session creation */
568
971
do {
569
ret = gnutls_init(session, GNUTLS_SERVER);
972
ret = gnutls_init(session, (GNUTLS_SERVER
973
#if GNUTLS_VERSION_NUMBER >= 0x030506
974
| GNUTLS_NO_TICKETS
975
#endif
976
#if GNUTLS_VERSION_NUMBER >= 0x030606
977
| GNUTLS_ENABLE_RAWPK
978
#endif
979
));
570
980
if(quit_now){
571
981
return -1;
572
982
}
573
983
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
574
984
if(ret != GNUTLS_E_SUCCESS){
575
fprintf(stderr, "Mandos plugin mandos-client: "
576
"Error in GnuTLS session initialization: %s\n",
577
safer_gnutls_strerror(ret));
985
fprintf_plus(stderr,
986
"Error in GnuTLS session initialization: %s\n",
987
safer_gnutls_strerror(ret));
578
988
}
579
989
580
990
{
581
991
const char *err;
582
992
do {
583
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
993
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
584
994
if(quit_now){
585
995
gnutls_deinit(*session);
586
996
return -1;
587
997
}
588
998
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
589
999
if(ret != GNUTLS_E_SUCCESS){
590
fprintf(stderr, "Mandos plugin mandos-client: "
591
"Syntax error at: %s\n", err);
592
fprintf(stderr, "Mandos plugin mandos-client: "
593
"GnuTLS error: %s\n", safer_gnutls_strerror(ret));
1000
fprintf_plus(stderr, "Syntax error at: %s\n", err);
1001
fprintf_plus(stderr, "GnuTLS error: %s\n",
1002
safer_gnutls_strerror(ret));
594
1003
gnutls_deinit(*session);
595
1004
return -1;
596
1005
}
598
1007
599
1008
do {
600
1009
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
601
mc.cred);
1010
mc->cred);
602
1011
if(quit_now){
603
1012
gnutls_deinit(*session);
604
1013
return -1;
605
1014
}
606
1015
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
607
1016
if(ret != GNUTLS_E_SUCCESS){
608
fprintf(stderr, "Mandos plugin mandos-client: "
609
"Error setting GnuTLS credentials: %s\n",
610
safer_gnutls_strerror(ret));
1017
fprintf_plus(stderr, "Error setting GnuTLS credentials: %s\n",
1018
safer_gnutls_strerror(ret));
611
1019
gnutls_deinit(*session);
612
1020
return -1;
613
1021
}
615
1023
/* ignore client certificate if any. */
616
1024
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
617
1025
618
gnutls_dh_set_prime_bits(*session, mc.dh_bits);
619
620
1026
return 0;
621
1027
}
622
1028
624
1030
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
625
1031
__attribute__((unused)) const char *txt){}
626
1032
1033
/* Helper function to add_local_route() and delete_local_route() */
1034
__attribute__((nonnull, warn_unused_result))
1035
static bool add_delete_local_route(const bool add,
1036
const char *address,
1037
AvahiIfIndex if_index){
1038
int ret;
1039
char helper[] = "mandos-client-iprouteadddel";
1040
char add_arg[] = "add";
1041
char delete_arg[] = "delete";
1042
char debug_flag[] = "--debug";
1043
char *pluginhelperdir = getenv("MANDOSPLUGINHELPERDIR");
1044
if(pluginhelperdir == NULL){
1045
if(debug){
1046
fprintf_plus(stderr, "MANDOSPLUGINHELPERDIR environment"
1047
" variable not set; cannot run helper\n");
1048
}
1049
return false;
1050
}
1051
1052
char interface[IF_NAMESIZE];
1053
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1054
perror_plus("if_indextoname");
1055
return false;
1056
}
1057
1058
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1059
if(devnull == -1){
1060
perror_plus("open(\"/dev/null\", O_RDONLY)");
1061
return false;
1062
}
1063
pid_t pid = fork();
1064
if(pid == 0){
1065
/* Child */
1066
/* Raise privileges */
1067
errno = raise_privileges_permanently();
1068
if(errno != 0){
1069
perror_plus("Failed to raise privileges");
1070
/* _exit(EX_NOPERM); */
1071
} else {
1072
/* Set group */
1073
errno = 0;
1074
ret = setgid(0);
1075
if(ret == -1){
1076
perror_plus("setgid");
1077
close(devnull);
1078
_exit(EX_NOPERM);
1079
}
1080
/* Reset supplementary groups */
1081
errno = 0;
1082
ret = setgroups(0, NULL);
1083
if(ret == -1){
1084
perror_plus("setgroups");
1085
close(devnull);
1086
_exit(EX_NOPERM);
1087
}
1088
}
1089
ret = dup2(devnull, STDIN_FILENO);
1090
if(ret == -1){
1091
perror_plus("dup2(devnull, STDIN_FILENO)");
1092
close(devnull);
1093
_exit(EX_OSERR);
1094
}
1095
ret = close(devnull);
1096
if(ret == -1){
1097
perror_plus("close");
1098
}
1099
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1100
if(ret == -1){
1101
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1102
_exit(EX_OSERR);
1103
}
1104
int helperdir_fd = (int)TEMP_FAILURE_RETRY(open(pluginhelperdir,
1105
O_RDONLY
1106
| O_DIRECTORY
1107
| O_PATH
1108
| O_CLOEXEC));
1109
if(helperdir_fd == -1){
1110
perror_plus("open");
1111
_exit(EX_UNAVAILABLE);
1112
}
1113
int helper_fd = (int)TEMP_FAILURE_RETRY(openat(helperdir_fd,
1114
helper, O_RDONLY));
1115
if(helper_fd == -1){
1116
perror_plus("openat");
1117
close(helperdir_fd);
1118
_exit(EX_UNAVAILABLE);
1119
}
1120
close(helperdir_fd);
1121
#ifdef __GNUC__
1122
#pragma GCC diagnostic push
1123
#pragma GCC diagnostic ignored "-Wcast-qual"
1124
#endif
1125
if(fexecve(helper_fd, (char *const [])
1126
{ helper, add ? add_arg : delete_arg, (char *)address,
1127
interface, debug ? debug_flag : NULL, NULL },
1128
environ) == -1){
1129
#ifdef __GNUC__
1130
#pragma GCC diagnostic pop
1131
#endif
1132
perror_plus("fexecve");
1133
_exit(EXIT_FAILURE);
1134
}
1135
}
1136
if(pid == -1){
1137
perror_plus("fork");
1138
close(devnull);
1139
return false;
1140
}
1141
ret = close(devnull);
1142
if(ret == -1){
1143
perror_plus("close");
1144
}
1145
int status;
1146
pid_t pret = -1;
1147
errno = 0;
1148
do {
1149
pret = waitpid(pid, &status, 0);
1150
if(pret == -1 and errno == EINTR and quit_now){
1151
int errno_raising = 0;
1152
if((errno = raise_privileges()) != 0){
1153
errno_raising = errno;
1154
perror_plus("Failed to raise privileges in order to"
1155
" kill helper program");
1156
}
1157
if(kill(pid, SIGTERM) == -1){
1158
perror_plus("kill");
1159
}
1160
if((errno_raising == 0) and (errno = lower_privileges()) != 0){
1161
perror_plus("Failed to lower privileges after killing"
1162
" helper program");
1163
}
1164
return false;
1165
}
1166
} while(pret == -1 and errno == EINTR);
1167
if(pret == -1){
1168
perror_plus("waitpid");
1169
return false;
1170
}
1171
if(WIFEXITED(status)){
1172
if(WEXITSTATUS(status) != 0){
1173
fprintf_plus(stderr, "Error: iprouteadddel exited"
1174
" with status %d\n", WEXITSTATUS(status));
1175
return false;
1176
}
1177
return true;
1178
}
1179
if(WIFSIGNALED(status)){
1180
fprintf_plus(stderr, "Error: iprouteadddel died by"
1181
" signal %d\n", WTERMSIG(status));
1182
return false;
1183
}
1184
fprintf_plus(stderr, "Error: iprouteadddel crashed\n");
1185
return false;
1186
}
1187
1188
__attribute__((nonnull, warn_unused_result))
1189
static bool add_local_route(const char *address,
1190
AvahiIfIndex if_index){
1191
if(debug){
1192
fprintf_plus(stderr, "Adding route to %s\n", address);
1193
}
1194
return add_delete_local_route(true, address, if_index);
1195
}
1196
1197
__attribute__((nonnull, warn_unused_result))
1198
static bool delete_local_route(const char *address,
1199
AvahiIfIndex if_index){
1200
if(debug){
1201
fprintf_plus(stderr, "Removing route to %s\n", address);
1202
}
1203
return add_delete_local_route(false, address, if_index);
1204
}
1205
627
1206
/* Called when a Mandos server is found */
628
static int start_mandos_communication(const char *ip, uint16_t port,
1207
__attribute__((nonnull, warn_unused_result))
1208
static int start_mandos_communication(const char *ip, in_port_t port,
629
1209
AvahiIfIndex if_index,
630
int af){
1210
int af, mandos_context *mc){
631
1211
int ret, tcp_sd = -1;
632
1212
ssize_t sret;
633
union {
634
struct sockaddr_in in;
635
struct sockaddr_in6 in6;
636
} to;
1213
struct sockaddr_storage to;
637
1214
char *buffer = NULL;
638
1215
char *decrypted_buffer = NULL;
639
1216
size_t buffer_length = 0;
642
1219
int retval = -1;
643
1220
gnutls_session_t session;
644
1221
int pf; /* Protocol family */
1222
bool route_added = false;
645
1223
646
1224
errno = 0;
647
1225
658
1236
pf = PF_INET;
659
1237
break;
660
1238
default:
661
fprintf(stderr, "Mandos plugin mandos-client: "
662
"Bad address family: %d\n", af);
1239
fprintf_plus(stderr, "Bad address family: %d\n", af);
663
1240
errno = EINVAL;
664
1241
return -1;
665
1242
}
666
1243
667
ret = init_gnutls_session(&session);
1244
/* If the interface is specified and we have a list of interfaces */
1245
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
1246
/* Check if the interface is one of the interfaces we are using */
1247
bool match = false;
1248
{
1249
char *interface = NULL;
1250
while((interface = argz_next(mc->interfaces,
1251
mc->interfaces_size,
1252
interface))){
1253
if(if_nametoindex(interface) == (unsigned int)if_index){
1254
match = true;
1255
break;
1256
}
1257
}
1258
}
1259
if(not match){
1260
/* This interface does not match any in the list, so we don't
1261
connect to the server */
1262
if(debug){
1263
char interface[IF_NAMESIZE];
1264
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1265
perror_plus("if_indextoname");
1266
} else {
1267
fprintf_plus(stderr, "Skipping server on non-used interface"
1268
" \"%s\"\n",
1269
if_indextoname((unsigned int)if_index,
1270
interface));
1271
}
1272
}
1273
return -1;
1274
}
1275
}
1276
1277
ret = init_gnutls_session(&session, mc);
668
1278
if(ret != 0){
669
1279
return -1;
670
1280
}
671
1281
672
1282
if(debug){
673
fprintf(stderr, "Mandos plugin mandos-client: "
674
"Setting up a TCP connection to %s, port %" PRIu16
675
"\n", ip, port);
1283
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
1284
PRIuMAX "\n", ip, (uintmax_t)port);
676
1285
}
677
1286
678
tcp_sd = socket(pf, SOCK_STREAM, 0);
1287
tcp_sd = socket(pf, SOCK_STREAM | SOCK_CLOEXEC, 0);
679
1288
if(tcp_sd < 0){
680
1289
int e = errno;
681
1290
perror_plus("socket");
688
1297
goto mandos_end;
689
1298
}
690
1299
691
memset(&to, 0, sizeof(to));
692
1300
if(af == AF_INET6){
693
to.in6.sin6_family = (sa_family_t)af;
694
ret = inet_pton(af, ip, &to.in6.sin6_addr);
1301
struct sockaddr_in6 *to6 = (struct sockaddr_in6 *)&to;
1302
*to6 = (struct sockaddr_in6){ .sin6_family = (sa_family_t)af };
1303
ret = inet_pton(af, ip, &to6->sin6_addr);
695
1304
} else { /* IPv4 */
696
to.in.sin_family = (sa_family_t)af;
697
ret = inet_pton(af, ip, &to.in.sin_addr);
1305
struct sockaddr_in *to4 = (struct sockaddr_in *)&to;
1306
*to4 = (struct sockaddr_in){ .sin_family = (sa_family_t)af };
1307
ret = inet_pton(af, ip, &to4->sin_addr);
698
1308
}
699
1309
if(ret < 0 ){
700
1310
int e = errno;
704
1314
}
705
1315
if(ret == 0){
706
1316
int e = errno;
707
fprintf(stderr, "Mandos plugin mandos-client: "
708
"Bad address: %s\n", ip);
1317
fprintf_plus(stderr, "Bad address: %s\n", ip);
709
1318
errno = e;
710
1319
goto mandos_end;
711
1320
}
712
1321
if(af == AF_INET6){
713
to.in6.sin6_port = htons(port); /* Spurious warnings from
714
-Wconversion and
715
-Wunreachable-code */
716
717
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
718
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
719
-Wunreachable-code*/
1322
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
1323
if(IN6_IS_ADDR_LINKLOCAL
1324
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
720
1325
if(if_index == AVAHI_IF_UNSPEC){
721
fprintf(stderr, "Mandos plugin mandos-client: "
722
"An IPv6 link-local address is incomplete"
723
" without a network interface\n");
1326
fprintf_plus(stderr, "An IPv6 link-local address is"
1327
" incomplete without a network interface\n");
724
1328
errno = EINVAL;
725
1329
goto mandos_end;
726
1330
}
727
1331
/* Set the network interface number as scope */
728
to.in6.sin6_scope_id = (uint32_t)if_index;
1332
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
729
1333
}
730
1334
} else {
731
to.in.sin_port = htons(port); /* Spurious warnings from
732
-Wconversion and
733
-Wunreachable-code */
1335
((struct sockaddr_in *)&to)->sin_port = htons(port);
734
1336
}
735
1337
736
1338
if(quit_now){
744
1346
if(if_indextoname((unsigned int)if_index, interface) == NULL){
745
1347
perror_plus("if_indextoname");
746
1348
} else {
747
fprintf(stderr, "Mandos plugin mandos-client: "
748
"Connection to: %s%%%s, port %" PRIu16 "\n",
749
ip, interface, port);
1349
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
1350
"\n", ip, interface, (uintmax_t)port);
750
1351
}
751
1352
} else {
752
fprintf(stderr, "Mandos plugin mandos-client: "
753
"Connection to: %s, port %" PRIu16 "\n", ip, port);
1353
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
1354
ip, (uintmax_t)port);
754
1355
}
755
1356
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
756
1357
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
757
const char *pcret;
758
if(af == AF_INET6){
759
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
760
sizeof(addrstr));
761
} else {
762
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
763
sizeof(addrstr));
764
}
765
if(pcret == NULL){
766
perror_plus("inet_ntop");
767
} else {
768
if(strcmp(addrstr, ip) != 0){
769
fprintf(stderr, "Mandos plugin mandos-client: "
770
"Canonical address form: %s\n", addrstr);
771
}
772
}
773
}
774
775
if(quit_now){
776
errno = EINTR;
777
goto mandos_end;
778
}
779
780
if(af == AF_INET6){
781
ret = connect(tcp_sd, &to.in6, sizeof(to));
782
} else {
783
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
784
}
785
if(ret < 0){
786
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
787
int e = errno;
788
perror_plus("connect");
789
errno = e;
790
}
791
goto mandos_end;
792
}
793
794
if(quit_now){
795
errno = EINTR;
796
goto mandos_end;
1358
if(af == AF_INET6){
1359
ret = getnameinfo((struct sockaddr *)&to,
1360
sizeof(struct sockaddr_in6),
1361
addrstr, sizeof(addrstr), NULL, 0,
1362
NI_NUMERICHOST);
1363
} else {
1364
ret = getnameinfo((struct sockaddr *)&to,
1365
sizeof(struct sockaddr_in),
1366
addrstr, sizeof(addrstr), NULL, 0,
1367
NI_NUMERICHOST);
1368
}
1369
if(ret == EAI_SYSTEM){
1370
perror_plus("getnameinfo");
1371
} else if(ret != 0) {
1372
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
1373
} else if(strcmp(addrstr, ip) != 0){
1374
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
1375
}
1376
}
1377
1378
if(quit_now){
1379
errno = EINTR;
1380
goto mandos_end;
1381
}
1382
1383
while(true){
1384
if(af == AF_INET6){
1385
ret = connect(tcp_sd, (struct sockaddr *)&to,
1386
sizeof(struct sockaddr_in6));
1387
} else {
1388
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
1389
sizeof(struct sockaddr_in));
1390
}
1391
if(ret < 0){
1392
if(((errno == ENETUNREACH) or (errno == EHOSTUNREACH))
1393
and if_index != AVAHI_IF_UNSPEC
1394
and connect_to == NULL
1395
and not route_added and
1396
((af == AF_INET6 and not
1397
IN6_IS_ADDR_LINKLOCAL(&(((struct sockaddr_in6 *)
1398
&to)->sin6_addr)))
1399
or (af == AF_INET and
1400
/* Not a a IPv4LL address */
1401
(ntohl(((struct sockaddr_in *)&to)->sin_addr.s_addr)
1402
& 0xFFFF0000L) != 0xA9FE0000L))){
1403
/* Work around Avahi bug - Avahi does not announce link-local
1404
addresses if it has a global address, so local hosts with
1405
*only* a link-local address (e.g. Mandos clients) cannot
1406
connect to a Mandos server announced by Avahi on a server
1407
host with a global address. Work around this by retrying
1408
with an explicit route added with the server's address.
1409
1410
Avahi bug reference:
1411
https://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1412
https://bugs.debian.org/587961
1413
*/
1414
if(debug){
1415
fprintf_plus(stderr, "Mandos server unreachable, trying"
1416
" direct route\n");
1417
}
1418
int e = errno;
1419
route_added = add_local_route(ip, if_index);
1420
if(route_added){
1421
continue;
1422
}
1423
errno = e;
1424
}
1425
if(errno != ECONNREFUSED or debug){
1426
int e = errno;
1427
perror_plus("connect");
1428
errno = e;
1429
}
1430
goto mandos_end;
1431
}
1432
1433
if(quit_now){
1434
errno = EINTR;
1435
goto mandos_end;
1436
}
1437
break;
797
1438
}
798
1439
799
1440
const char *out = mandos_protocol_version;
827
1468
}
828
1469
829
1470
if(debug){
830
fprintf(stderr, "Mandos plugin mandos-client: "
831
"Establishing TLS session with %s\n", ip);
1471
fprintf_plus(stderr, "Establishing TLS session with %s\n", ip);
832
1472
}
833
1473
834
1474
if(quit_now){
836
1476
goto mandos_end;
837
1477
}
838
1478
839
/* Spurious warning from -Wint-to-pointer-cast */
840
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
1479
/* This casting via intptr_t is to eliminate warning about casting
1480
an int to a pointer type. This is exactly how the GnuTLS Guile
1481
function "set-session-transport-fd!" does it. */
1482
gnutls_transport_set_ptr(session,
1483
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
841
1484
842
1485
if(quit_now){
843
1486
errno = EINTR;
854
1497
855
1498
if(ret != GNUTLS_E_SUCCESS){
856
1499
if(debug){
857
fprintf(stderr, "Mandos plugin mandos-client: "
858
"*** GnuTLS Handshake failed ***\n");
1500
fprintf_plus(stderr, "*** GnuTLS Handshake failed ***\n");
859
1501
gnutls_perror(ret);
860
1502
}
861
1503
errno = EPROTO;
865
1507
/* Read OpenPGP packet that contains the wanted password */
866
1508
867
1509
if(debug){
868
fprintf(stderr, "Mandos plugin mandos-client: "
869
"Retrieving OpenPGP encrypted password from %s\n", ip);
1510
fprintf_plus(stderr, "Retrieving OpenPGP encrypted password from"
1511
" %s\n", ip);
870
1512
}
871
1513
872
1514
while(true){
910
1552
}
911
1553
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
912
1554
if(ret < 0){
913
fprintf(stderr, "Mandos plugin mandos-client: "
914
"*** GnuTLS Re-handshake failed ***\n");
1555
fprintf_plus(stderr, "*** GnuTLS Re-handshake failed "
1556
"***\n");
915
1557
gnutls_perror(ret);
916
1558
errno = EPROTO;
917
1559
goto mandos_end;
918
1560
}
919
1561
break;
920
1562
default:
921
fprintf(stderr, "Mandos plugin mandos-client: "
922
"Unknown error while reading data from"
923
" encrypted session with Mandos server\n");
1563
fprintf_plus(stderr, "Unknown error while reading data from"
1564
" encrypted session with Mandos server\n");
924
1565
gnutls_bye(session, GNUTLS_SHUT_RDWR);
925
1566
errno = EIO;
926
1567
goto mandos_end;
931
1572
}
932
1573
933
1574
if(debug){
934
fprintf(stderr, "Mandos plugin mandos-client: "
935
"Closing TLS session\n");
1575
fprintf_plus(stderr, "Closing TLS session\n");
936
1576
}
937
1577
938
1578
if(quit_now){
951
1591
if(buffer_length > 0){
952
1592
ssize_t decrypted_buffer_size;
953
1593
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
954
&decrypted_buffer);
1594
&decrypted_buffer, mc);
955
1595
if(decrypted_buffer_size >= 0){
956
1596
1597
clearerr(stdout);
957
1598
written = 0;
958
1599
while(written < (size_t) decrypted_buffer_size){
959
1600
if(quit_now){
967
1608
if(ret == 0 and ferror(stdout)){
968
1609
int e = errno;
969
1610
if(debug){
970
fprintf(stderr, "Mandos plugin mandos-client: "
971
"Error writing encrypted data: %s\n",
972
strerror(errno));
1611
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1612
strerror(errno));
973
1613
}
974
1614
errno = e;
975
1615
goto mandos_end;
976
1616
}
977
1617
written += (size_t)ret;
978
1618
}
1619
ret = fflush(stdout);
1620
if(ret != 0){
1621
int e = errno;
1622
if(debug){
1623
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1624
strerror(errno));
1625
}
1626
errno = e;
1627
goto mandos_end;
1628
}
979
1629
retval = 0;
980
1630
}
981
1631
}
984
1634
985
1635
mandos_end:
986
1636
{
1637
if(route_added){
1638
if(not delete_local_route(ip, if_index)){
1639
fprintf_plus(stderr, "Failed to delete local route to %s on"
1640
" interface %d", ip, if_index);
1641
}
1642
}
987
1643
int e = errno;
988
1644
free(decrypted_buffer);
989
1645
free(buffer);
990
1646
if(tcp_sd >= 0){
991
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
1647
ret = close(tcp_sd);
992
1648
}
993
1649
if(ret == -1){
994
1650
if(e == 0){
1019
1675
AVAHI_GCC_UNUSED AvahiStringList *txt,
1020
1676
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1021
1677
flags,
1022
AVAHI_GCC_UNUSED void* userdata){
1023
assert(r);
1678
void *mc){
1679
if(r == NULL){
1680
return;
1681
}
1024
1682
1025
1683
/* Called whenever a service has been resolved successfully or
1026
1684
timed out */
1027
1685
1028
1686
if(quit_now){
1687
avahi_s_service_resolver_free(r);
1029
1688
return;
1030
1689
}
1031
1690
1032
1691
switch(event){
1033
1692
default:
1034
1693
case AVAHI_RESOLVER_FAILURE:
1035
fprintf(stderr, "Mandos plugin mandos-client: "
1036
"(Avahi Resolver) Failed to resolve service '%s'"
1037
" of type '%s' in domain '%s': %s\n", name, type, domain,
1038
avahi_strerror(avahi_server_errno(mc.server)));
1694
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1695
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1696
domain,
1697
avahi_strerror(avahi_server_errno
1698
(((mandos_context*)mc)->server)));
1039
1699
break;
1040
1700
1041
1701
case AVAHI_RESOLVER_FOUND:
1043
1703
char ip[AVAHI_ADDRESS_STR_MAX];
1044
1704
avahi_address_snprint(ip, sizeof(ip), address);
1045
1705
if(debug){
1046
fprintf(stderr, "Mandos plugin mandos-client: "
1047
"Mandos server \"%s\" found on %s (%s, %"
1048
PRIdMAX ") on port %" PRIu16 "\n", name, host_name,
1049
ip, (intmax_t)interface, port);
1706
fprintf_plus(stderr, "Mandos server \"%s\" found on %s (%s, %"
1707
PRIdMAX ") on port %" PRIu16 "\n", name,
1708
host_name, ip, (intmax_t)interface, port);
1050
1709
}
1051
int ret = start_mandos_communication(ip, port, interface,
1052
avahi_proto_to_af(proto));
1710
int ret = start_mandos_communication(ip, (in_port_t)port,
1711
interface,
1712
avahi_proto_to_af(proto),
1713
mc);
1053
1714
if(ret == 0){
1054
avahi_simple_poll_quit(mc.simple_poll);
1715
avahi_simple_poll_quit(simple_poll);
1055
1716
} else {
1056
ret = add_server(ip, port, interface,
1057
avahi_proto_to_af(proto));
1717
if(not add_server(ip, (in_port_t)port, interface,
1718
avahi_proto_to_af(proto),
1719
&((mandos_context*)mc)->current_server)){
1720
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1721
" list\n", name);
1722
}
1058
1723
}
1059
1724
}
1060
1725
}
1070
1735
const char *domain,
1071
1736
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1072
1737
flags,
1073
AVAHI_GCC_UNUSED void* userdata){
1074
assert(b);
1738
void *mc){
1739
if(b == NULL){
1740
return;
1741
}
1075
1742
1076
1743
/* Called whenever a new services becomes available on the LAN or
1077
1744
is removed from the LAN */
1084
1751
default:
1085
1752
case AVAHI_BROWSER_FAILURE:
1086
1753
1087
fprintf(stderr, "Mandos plugin mandos-client: "
1088
"(Avahi browser) %s\n",
1089
avahi_strerror(avahi_server_errno(mc.server)));
1090
avahi_simple_poll_quit(mc.simple_poll);
1754
fprintf_plus(stderr, "(Avahi browser) %s\n",
1755
avahi_strerror(avahi_server_errno
1756
(((mandos_context*)mc)->server)));
1757
avahi_simple_poll_quit(simple_poll);
1091
1758
return;
1092
1759
1093
1760
case AVAHI_BROWSER_NEW:
1096
1763
the callback function is called the Avahi server will free the
1097
1764
resolver for us. */
1098
1765
1099
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
1100
name, type, domain, protocol, 0,
1101
resolve_callback, NULL) == NULL)
1102
fprintf(stderr, "Mandos plugin mandos-client: "
1103
"Avahi: Failed to resolve service '%s': %s\n",
1104
name, avahi_strerror(avahi_server_errno(mc.server)));
1766
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1767
interface, protocol, name, type,
1768
domain, protocol, 0,
1769
resolve_callback, mc) == NULL)
1770
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1771
" %s\n", name,
1772
avahi_strerror(avahi_server_errno
1773
(((mandos_context*)mc)->server)));
1105
1774
break;
1106
1775
1107
1776
case AVAHI_BROWSER_REMOVE:
1110
1779
case AVAHI_BROWSER_ALL_FOR_NOW:
1111
1780
case AVAHI_BROWSER_CACHE_EXHAUSTED:
1112
1781
if(debug){
1113
fprintf(stderr, "Mandos plugin mandos-client: "
1114
"No Mandos server found, still searching...\n");
1782
fprintf_plus(stderr, "No Mandos server found, still"
1783
" searching...\n");
1115
1784
}
1116
1785
break;
1117
1786
}
1126
1795
signal_received = sig;
1127
1796
int old_errno = errno;
1128
1797
/* set main loop to exit */
1129
if(mc.simple_poll != NULL){
1130
avahi_simple_poll_quit(mc.simple_poll);
1798
if(simple_poll != NULL){
1799
avahi_simple_poll_quit(simple_poll);
1131
1800
}
1132
1801
errno = old_errno;
1133
1802
}
1134
1803
1804
__attribute__((nonnull, warn_unused_result))
1135
1805
bool get_flags(const char *ifname, struct ifreq *ifr){
1136
1806
int ret;
1807
int old_errno;
1137
1808
1138
1809
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1139
1810
if(s < 0){
1811
old_errno = errno;
1140
1812
perror_plus("socket");
1813
errno = old_errno;
1141
1814
return false;
1142
1815
}
1143
strcpy(ifr->ifr_name, ifname);
1816
strncpy(ifr->ifr_name, ifname, IF_NAMESIZE);
1817
ifr->ifr_name[IF_NAMESIZE-1] = '\0'; /* NUL terminate */
1144
1818
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1145
1819
if(ret == -1){
1146
1820
if(debug){
1821
old_errno = errno;
1147
1822
perror_plus("ioctl SIOCGIFFLAGS");
1823
errno = old_errno;
1824
}
1825
if((close(s) == -1) and debug){
1826
old_errno = errno;
1827
perror_plus("close");
1828
errno = old_errno;
1148
1829
}
1149
1830
return false;
1150
1831
}
1832
if((close(s) == -1) and debug){
1833
old_errno = errno;
1834
perror_plus("close");
1835
errno = old_errno;
1836
}
1151
1837
return true;
1152
1838
}
1153
1839
1840
__attribute__((nonnull, warn_unused_result))
1154
1841
bool good_flags(const char *ifname, const struct ifreq *ifr){
1155
1842
1156
1843
/* Reject the loopback device */
1157
1844
if(ifr->ifr_flags & IFF_LOOPBACK){
1158
1845
if(debug){
1159
fprintf(stderr, "Mandos plugin mandos-client: "
1160
"Rejecting loopback interface \"%s\"\n", ifname);
1846
fprintf_plus(stderr, "Rejecting loopback interface \"%s\"\n",
1847
ifname);
1161
1848
}
1162
1849
return false;
1163
1850
}
1164
1851
/* Accept point-to-point devices only if connect_to is specified */
1165
1852
if(connect_to != NULL and (ifr->ifr_flags & IFF_POINTOPOINT)){
1166
1853
if(debug){
1167
fprintf(stderr, "Mandos plugin mandos-client: "
1168
"Accepting point-to-point interface \"%s\"\n", ifname);
1854
fprintf_plus(stderr, "Accepting point-to-point interface"
1855
" \"%s\"\n", ifname);
1169
1856
}
1170
1857
return true;
1171
1858
}
1172
1859
/* Otherwise, reject non-broadcast-capable devices */
1173
1860
if(not (ifr->ifr_flags & IFF_BROADCAST)){
1174
1861
if(debug){
1175
fprintf(stderr, "Mandos plugin mandos-client: "
1176
"Rejecting non-broadcast interface \"%s\"\n", ifname);
1862
fprintf_plus(stderr, "Rejecting non-broadcast interface"
1863
" \"%s\"\n", ifname);
1177
1864
}
1178
1865
return false;
1179
1866
}
1180
1867
/* Reject non-ARP interfaces (including dummy interfaces) */
1181
1868
if(ifr->ifr_flags & IFF_NOARP){
1182
1869
if(debug){
1183
fprintf(stderr, "Mandos plugin mandos-client: "
1184
"Rejecting non-ARP interface \"%s\"\n", ifname);
1870
fprintf_plus(stderr, "Rejecting non-ARP interface \"%s\"\n",
1871
ifname);
1185
1872
}
1186
1873
return false;
1187
1874
}
1188
1875
1189
1876
/* Accept this device */
1190
1877
if(debug){
1191
fprintf(stderr, "Mandos plugin mandos-client: "
1192
"Interface \"%s\" is good\n", ifname);
1878
fprintf_plus(stderr, "Interface \"%s\" is good\n", ifname);
1193
1879
}
1194
1880
return true;
1195
1881
}
1199
1885
* corresponds to an acceptable network device.
1200
1886
* (This function is passed to scandir(3) as a filter function.)
1201
1887
*/
1888
__attribute__((nonnull, warn_unused_result))
1202
1889
int good_interface(const struct dirent *if_entry){
1203
1890
if(if_entry->d_name[0] == '.'){
1204
1891
return 0;
1207
1894
struct ifreq ifr;
1208
1895
if(not get_flags(if_entry->d_name, &ifr)){
1209
1896
if(debug){
1210
fprintf(stderr, "Mandos plugin mandos-client: "
1211
"Failed to get flags for interface \"%s\"\n",
1212
if_entry->d_name);
1213
}
1214
return 0;
1215
}
1216
1217
if(not good_flags(if_entry->d_name, &ifr)){
1218
return 0;
1219
}
1220
return 1;
1221
}
1222
1223
/*
1224
* This function determines if a directory entry in /sys/class/net
1225
* corresponds to an acceptable network device which is up.
1226
* (This function is passed to scandir(3) as a filter function.)
1227
*/
1228
int up_interface(const struct dirent *if_entry){
1229
if(if_entry->d_name[0] == '.'){
1230
return 0;
1231
}
1232
1233
struct ifreq ifr;
1234
if(not get_flags(if_entry->d_name, &ifr)){
1235
if(debug){
1236
fprintf(stderr, "Mandos plugin mandos-client: "
1237
"Failed to get flags for interface \"%s\"\n",
1238
if_entry->d_name);
1239
}
1240
return 0;
1241
}
1242
1243
/* Reject down interfaces */
1244
if(not (ifr.ifr_flags & IFF_UP)){
1245
if(debug){
1246
fprintf(stderr, "Mandos plugin mandos-client: "
1247
"Rejecting down interface \"%s\"\n",
1248
if_entry->d_name);
1249
}
1250
return 0;
1251
}
1252
1253
/* Reject non-running interfaces */
1254
if(not (ifr.ifr_flags & IFF_RUNNING)){
1255
if(debug){
1256
fprintf(stderr, "Mandos plugin mandos-client: "
1257
"Rejecting non-running interface \"%s\"\n",
1258
if_entry->d_name);
1259
}
1260
return 0;
1261
}
1262
1263
if(not good_flags(if_entry->d_name, &ifr)){
1264
return 0;
1265
}
1266
return 1;
1267
}
1268
1897
fprintf_plus(stderr, "Failed to get flags for interface "
1898
"\"%s\"\n", if_entry->d_name);
1899
}
1900
return 0;
1901
}
1902
1903
if(not good_flags(if_entry->d_name, &ifr)){
1904
return 0;
1905
}
1906
return 1;
1907
}
1908
1909
/*
1910
* This function determines if a network interface is up.
1911
*/
1912
__attribute__((nonnull, warn_unused_result))
1913
bool interface_is_up(const char *interface){
1914
struct ifreq ifr;
1915
if(not get_flags(interface, &ifr)){
1916
if(debug){
1917
fprintf_plus(stderr, "Failed to get flags for interface "
1918
"\"%s\"\n", interface);
1919
}
1920
return false;
1921
}
1922
1923
return (bool)(ifr.ifr_flags & IFF_UP);
1924
}
1925
1926
/*
1927
* This function determines if a network interface is running
1928
*/
1929
__attribute__((nonnull, warn_unused_result))
1930
bool interface_is_running(const char *interface){
1931
struct ifreq ifr;
1932
if(not get_flags(interface, &ifr)){
1933
if(debug){
1934
fprintf_plus(stderr, "Failed to get flags for interface "
1935
"\"%s\"\n", interface);
1936
}
1937
return false;
1938
}
1939
1940
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1941
}
1942
1943
__attribute__((nonnull, pure, warn_unused_result))
1269
1944
int notdotentries(const struct dirent *direntry){
1270
1945
/* Skip "." and ".." */
1271
1946
if(direntry->d_name[0] == '.'
1278
1953
}
1279
1954
1280
1955
/* Is this directory entry a runnable program? */
1956
__attribute__((nonnull, warn_unused_result))
1281
1957
int runnable_hook(const struct dirent *direntry){
1282
1958
int ret;
1283
1959
size_t sret;
1291
1967
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1292
1968
"abcdefghijklmnopqrstuvwxyz"
1293
1969
"0123456789"
1294
"_-");
1970
"_.-");
1295
1971
if((direntry->d_name)[sret] != '\0'){
1296
1972
/* Contains non-allowed characters */
1297
1973
if(debug){
1298
fprintf(stderr, "Mandos plugin mandos-client: "
1299
"Ignoring hook \"%s\" with bad name\n",
1300
direntry->d_name);
1974
fprintf_plus(stderr, "Ignoring hook \"%s\" with bad name\n",
1975
direntry->d_name);
1301
1976
}
1302
1977
return 0;
1303
1978
}
1304
1979
1305
char *fullname = NULL;
1306
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1307
if(ret < 0){
1308
perror_plus("asprintf");
1309
return 0;
1310
}
1311
1312
ret = stat(fullname, &st);
1980
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1313
1981
if(ret == -1){
1314
1982
if(debug){
1315
1983
perror_plus("Could not stat hook");
1319
1987
if(not (S_ISREG(st.st_mode))){
1320
1988
/* Not a regular file */
1321
1989
if(debug){
1322
fprintf(stderr, "Mandos plugin mandos-client: "
1323
"Ignoring hook \"%s\" - not a file\n",
1324
direntry->d_name);
1990
fprintf_plus(stderr, "Ignoring hook \"%s\" - not a file\n",
1991
direntry->d_name);
1325
1992
}
1326
1993
return 0;
1327
1994
}
1328
1995
if(not (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))){
1329
1996
/* Not executable */
1330
1997
if(debug){
1331
fprintf(stderr, "Mandos plugin mandos-client: "
1332
"Ignoring hook \"%s\" - not executable\n",
1333
direntry->d_name);
1998
fprintf_plus(stderr, "Ignoring hook \"%s\" - not executable\n",
1999
direntry->d_name);
1334
2000
}
1335
2001
return 0;
1336
2002
}
2003
if(debug){
2004
fprintf_plus(stderr, "Hook \"%s\" is acceptable\n",
2005
direntry->d_name);
2006
}
1337
2007
return 1;
1338
2008
}
1339
2009
1340
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval){
2010
__attribute__((nonnull, warn_unused_result))
2011
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
2012
mandos_context *mc){
1341
2013
int ret;
1342
2014
struct timespec now;
1343
2015
struct timespec waited_time;
1344
2016
intmax_t block_time;
1345
2017
1346
2018
while(true){
1347
if(mc.current_server == NULL){
1348
if (debug){
1349
fprintf(stderr, "Mandos plugin mandos-client: "
1350
"Wait until first server is found. No timeout!\n");
2019
if(mc->current_server == NULL){
2020
if(debug){
2021
fprintf_plus(stderr, "Wait until first server is found."
2022
" No timeout!\n");
1351
2023
}
1352
2024
ret = avahi_simple_poll_iterate(s, -1);
1353
2025
} else {
1354
if (debug){
1355
fprintf(stderr, "Mandos plugin mandos-client: "
1356
"Check current_server if we should run it,"
1357
" or wait\n");
2026
if(debug){
2027
fprintf_plus(stderr, "Check current_server if we should run"
2028
" it, or wait\n");
1358
2029
}
1359
2030
/* the current time */
1360
2031
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1365
2036
/* Calculating in ms how long time between now and server
1366
2037
who we visted longest time ago. Now - last seen. */
1367
2038
waited_time.tv_sec = (now.tv_sec
1368
- mc.current_server->last_seen.tv_sec);
2039
- mc->current_server->last_seen.tv_sec);
1369
2040
waited_time.tv_nsec = (now.tv_nsec
1370
- mc.current_server->last_seen.tv_nsec);
2041
- mc->current_server->last_seen.tv_nsec);
1371
2042
/* total time is 10s/10,000ms.
1372
2043
Converting to s from ms by dividing by 1,000,
1373
2044
and ns to ms by dividing by 1,000,000. */
1375
2046
- ((intmax_t)waited_time.tv_sec * 1000))
1376
2047
- ((intmax_t)waited_time.tv_nsec / 1000000));
1377
2048
1378
if (debug){
1379
fprintf(stderr, "Mandos plugin mandos-client: "
1380
"Blocking for %" PRIdMAX " ms\n", block_time);
2049
if(debug){
2050
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
2051
block_time);
1381
2052
}
1382
2053
1383
2054
if(block_time <= 0){
1384
ret = start_mandos_communication(mc.current_server->ip,
1385
mc.current_server->port,
1386
mc.current_server->if_index,
1387
mc.current_server->af);
2055
ret = start_mandos_communication(mc->current_server->ip,
2056
mc->current_server->port,
2057
mc->current_server->if_index,
2058
mc->current_server->af, mc);
1388
2059
if(ret == 0){
1389
avahi_simple_poll_quit(mc.simple_poll);
2060
avahi_simple_poll_quit(s);
1390
2061
return 0;
1391
2062
}
1392
2063
ret = clock_gettime(CLOCK_MONOTONIC,
1393
&mc.current_server->last_seen);
2064
&mc->current_server->last_seen);
1394
2065
if(ret == -1){
1395
2066
perror_plus("clock_gettime");
1396
2067
return -1;
1397
2068
}
1398
mc.current_server = mc.current_server->next;
2069
mc->current_server = mc->current_server->next;
1399
2070
block_time = 0; /* Call avahi to find new Mandos
1400
2071
servers, but don't block */
1401
2072
}
1403
2074
ret = avahi_simple_poll_iterate(s, (int)block_time);
1404
2075
}
1405
2076
if(ret != 0){
1406
if (ret > 0 or errno != EINTR){
2077
if(ret > 0 or errno != EINTR){
1407
2078
return (ret != 1) ? ret : 0;
1408
2079
}
1409
2080
}
1410
2081
}
1411
2082
}
1412
2083
1413
bool run_network_hooks(const char *mode, const char *interface,
2084
__attribute__((nonnull))
2085
void run_network_hooks(const char *mode, const char *interface,
1414
2086
const float delay){
1415
struct dirent **direntries;
1416
struct dirent *direntry;
1417
int ret;
1418
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1419
alphasort);
2087
struct dirent **direntries = NULL;
2088
if(hookdir_fd == -1){
2089
hookdir_fd = open(hookdir, O_RDONLY | O_DIRECTORY | O_PATH
2090
| O_CLOEXEC);
2091
if(hookdir_fd == -1){
2092
if(errno == ENOENT){
2093
if(debug){
2094
fprintf_plus(stderr, "Network hook directory \"%s\" not"
2095
" found\n", hookdir);
2096
}
2097
} else {
2098
perror_plus("open");
2099
}
2100
return;
2101
}
2102
}
2103
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
2104
if(devnull == -1){
2105
perror_plus("open(\"/dev/null\", O_RDONLY)");
2106
return;
2107
}
2108
int numhooks = scandirat(hookdir_fd, ".", &direntries,
2109
runnable_hook, alphasort);
1420
2110
if(numhooks == -1){
1421
2111
perror_plus("scandir");
1422
} else {
1423
int devnull = open("/dev/null", O_RDONLY);
1424
for(int i = 0; i < numhooks; i++){
1425
direntry = direntries[0];
1426
char *fullname = NULL;
1427
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1428
if(ret < 0){
2112
close(devnull);
2113
return;
2114
}
2115
struct dirent *direntry;
2116
int ret;
2117
for(int i = 0; i < numhooks; i++){
2118
direntry = direntries[i];
2119
if(debug){
2120
fprintf_plus(stderr, "Running network hook \"%s\"\n",
2121
direntry->d_name);
2122
}
2123
pid_t hook_pid = fork();
2124
if(hook_pid == 0){
2125
/* Child */
2126
/* Raise privileges */
2127
errno = raise_privileges_permanently();
2128
if(errno != 0){
2129
perror_plus("Failed to raise privileges");
2130
_exit(EX_NOPERM);
2131
}
2132
/* Set group */
2133
errno = 0;
2134
ret = setgid(0);
2135
if(ret == -1){
2136
perror_plus("setgid");
2137
_exit(EX_NOPERM);
2138
}
2139
/* Reset supplementary groups */
2140
errno = 0;
2141
ret = setgroups(0, NULL);
2142
if(ret == -1){
2143
perror_plus("setgroups");
2144
_exit(EX_NOPERM);
2145
}
2146
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
2147
if(ret == -1){
2148
perror_plus("setenv");
2149
_exit(EX_OSERR);
2150
}
2151
ret = setenv("DEVICE", interface, 1);
2152
if(ret == -1){
2153
perror_plus("setenv");
2154
_exit(EX_OSERR);
2155
}
2156
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
2157
if(ret == -1){
2158
perror_plus("setenv");
2159
_exit(EX_OSERR);
2160
}
2161
ret = setenv("MODE", mode, 1);
2162
if(ret == -1){
2163
perror_plus("setenv");
2164
_exit(EX_OSERR);
2165
}
2166
char *delaystring;
2167
ret = asprintf(&delaystring, "%f", (double)delay);
2168
if(ret == -1){
1429
2169
perror_plus("asprintf");
1430
continue;
2170
_exit(EX_OSERR);
1431
2171
}
1432
pid_t hook_pid = fork();
1433
if(hook_pid == 0){
1434
/* Child */
1435
dup2(devnull, STDIN_FILENO);
1436
close(devnull);
1437
dup2(STDERR_FILENO, STDOUT_FILENO);
1438
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1439
if(ret == -1){
1440
perror_plus("setenv");
1441
return false;
1442
}
1443
ret = setenv("DEVICE", interface, 1);
1444
if(ret == -1){
1445
perror_plus("setenv");
1446
return false;
1447
}
1448
ret = setenv("VERBOSE", debug ? "1" : "0", 1);
1449
if(ret == -1){
1450
perror_plus("setenv");
1451
return false;
1452
}
1453
ret = setenv("MODE", mode, 1);
1454
if(ret == -1){
1455
perror_plus("setenv");
1456
return false;
1457
}
1458
char *delaystring;
1459
ret = asprintf(&delaystring, "%f", delay);
1460
if(ret == -1){
1461
perror_plus("asprintf");
1462
return false;
1463
}
1464
ret = setenv("DELAY", delaystring, 1);
1465
if(ret == -1){
1466
free(delaystring);
1467
perror_plus("setenv");
1468
return false;
1469
}
2172
ret = setenv("DELAY", delaystring, 1);
2173
if(ret == -1){
1470
2174
free(delaystring);
1471
ret = execl(fullname, direntry->d_name, mode, NULL);
1472
perror_plus("execl");
1473
} else {
1474
int status;
1475
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1476
perror_plus("waitpid");
1477
free(fullname);
1478
continue;
1479
}
1480
if(WIFEXITED(status)){
1481
if(WEXITSTATUS(status) != 0){
1482
fprintf(stderr, "Mandos plugin mandos-client: "
1483
"Warning: network hook \"%s\" exited"
1484
" with status %d\n", direntry->d_name,
1485
WEXITSTATUS(status));
1486
free(fullname);
1487
continue;
1488
}
1489
} else if(WIFSIGNALED(status)){
1490
fprintf(stderr, "Mandos plugin mandos-client: "
1491
"Warning: network hook \"%s\" died by"
1492
" signal %d\n", direntry->d_name,
1493
WTERMSIG(status));
1494
free(fullname);
1495
continue;
1496
} else {
1497
fprintf(stderr, "Mandos plugin mandos-client: "
1498
"Warning: network hook \"%s\" crashed\n",
1499
direntry->d_name);
1500
free(fullname);
1501
continue;
1502
}
1503
}
1504
free(fullname);
1505
if(quit_now){
1506
break;
1507
}
1508
}
1509
close(devnull);
1510
}
1511
return true;
2175
perror_plus("setenv");
2176
_exit(EX_OSERR);
2177
}
2178
free(delaystring);
2179
if(connect_to != NULL){
2180
ret = setenv("CONNECT", connect_to, 1);
2181
if(ret == -1){
2182
perror_plus("setenv");
2183
_exit(EX_OSERR);
2184
}
2185
}
2186
int hook_fd = (int)TEMP_FAILURE_RETRY(openat(hookdir_fd,
2187
direntry->d_name,
2188
O_RDONLY));
2189
if(hook_fd == -1){
2190
perror_plus("openat");
2191
_exit(EXIT_FAILURE);
2192
}
2193
if(close(hookdir_fd) == -1){
2194
perror_plus("close");
2195
_exit(EXIT_FAILURE);
2196
}
2197
ret = dup2(devnull, STDIN_FILENO);
2198
if(ret == -1){
2199
perror_plus("dup2(devnull, STDIN_FILENO)");
2200
_exit(EX_OSERR);
2201
}
2202
ret = close(devnull);
2203
if(ret == -1){
2204
perror_plus("close");
2205
_exit(EX_OSERR);
2206
}
2207
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
2208
if(ret == -1){
2209
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
2210
_exit(EX_OSERR);
2211
}
2212
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
2213
environ) == -1){
2214
perror_plus("fexecve");
2215
_exit(EXIT_FAILURE);
2216
}
2217
} else {
2218
if(hook_pid == -1){
2219
perror_plus("fork");
2220
free(direntry);
2221
continue;
2222
}
2223
int status;
2224
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
2225
perror_plus("waitpid");
2226
free(direntry);
2227
continue;
2228
}
2229
if(WIFEXITED(status)){
2230
if(WEXITSTATUS(status) != 0){
2231
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
2232
" with status %d\n", direntry->d_name,
2233
WEXITSTATUS(status));
2234
free(direntry);
2235
continue;
2236
}
2237
} else if(WIFSIGNALED(status)){
2238
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
2239
" signal %d\n", direntry->d_name,
2240
WTERMSIG(status));
2241
free(direntry);
2242
continue;
2243
} else {
2244
fprintf_plus(stderr, "Warning: network hook \"%s\""
2245
" crashed\n", direntry->d_name);
2246
free(direntry);
2247
continue;
2248
}
2249
}
2250
if(debug){
2251
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
2252
direntry->d_name);
2253
}
2254
free(direntry);
2255
}
2256
free(direntries);
2257
if(close(hookdir_fd) == -1){
2258
perror_plus("close");
2259
} else {
2260
hookdir_fd = -1;
2261
}
2262
close(devnull);
2263
}
2264
2265
__attribute__((nonnull, warn_unused_result))
2266
int bring_up_interface(const char *const interface,
2267
const float delay){
2268
int old_errno = errno;
2269
int ret;
2270
struct ifreq network;
2271
unsigned int if_index = if_nametoindex(interface);
2272
if(if_index == 0){
2273
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2274
errno = old_errno;
2275
return ENXIO;
2276
}
2277
2278
if(quit_now){
2279
errno = old_errno;
2280
return EINTR;
2281
}
2282
2283
if(not interface_is_up(interface)){
2284
int ret_errno = 0;
2285
int ioctl_errno = 0;
2286
if(not get_flags(interface, &network)){
2287
ret_errno = errno;
2288
fprintf_plus(stderr, "Failed to get flags for interface "
2289
"\"%s\"\n", interface);
2290
errno = old_errno;
2291
return ret_errno;
2292
}
2293
network.ifr_flags |= IFF_UP; /* set flag */
2294
2295
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2296
if(sd == -1){
2297
ret_errno = errno;
2298
perror_plus("socket");
2299
errno = old_errno;
2300
return ret_errno;
2301
}
2302
2303
if(quit_now){
2304
ret = close(sd);
2305
if(ret == -1){
2306
perror_plus("close");
2307
}
2308
errno = old_errno;
2309
return EINTR;
2310
}
2311
2312
if(debug){
2313
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
2314
interface);
2315
}
2316
2317
/* Raise privileges */
2318
ret_errno = raise_privileges();
2319
if(ret_errno != 0){
2320
errno = ret_errno;
2321
perror_plus("Failed to raise privileges");
2322
}
2323
2324
#ifdef __linux__
2325
int ret_linux;
2326
bool restore_loglevel = false;
2327
if(ret_errno == 0){
2328
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
2329
messages about the network interface to mess up the prompt */
2330
ret_linux = klogctl(8, NULL, 5);
2331
if(ret_linux == -1){
2332
perror_plus("klogctl");
2333
} else {
2334
restore_loglevel = true;
2335
}
2336
}
2337
#endif /* __linux__ */
2338
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2339
ioctl_errno = errno;
2340
#ifdef __linux__
2341
if(restore_loglevel){
2342
ret_linux = klogctl(7, NULL, 0);
2343
if(ret_linux == -1){
2344
perror_plus("klogctl");
2345
}
2346
}
2347
#endif /* __linux__ */
2348
2349
/* If raise_privileges() succeeded above */
2350
if(ret_errno == 0){
2351
/* Lower privileges */
2352
ret_errno = lower_privileges();
2353
if(ret_errno != 0){
2354
errno = ret_errno;
2355
perror_plus("Failed to lower privileges");
2356
}
2357
}
2358
2359
/* Close the socket */
2360
ret = close(sd);
2361
if(ret == -1){
2362
perror_plus("close");
2363
}
2364
2365
if(ret_setflags == -1){
2366
errno = ioctl_errno;
2367
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
2368
errno = old_errno;
2369
return ioctl_errno;
2370
}
2371
} else if(debug){
2372
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
2373
interface);
2374
}
2375
2376
/* Sleep checking until interface is running.
2377
Check every 0.25s, up to total time of delay */
2378
for(int i = 0; i < delay * 4; i++){
2379
if(interface_is_running(interface)){
2380
break;
2381
}
2382
struct timespec sleeptime = { .tv_nsec = 250000000 };
2383
ret = nanosleep(&sleeptime, NULL);
2384
if(ret == -1 and errno != EINTR){
2385
perror_plus("nanosleep");
2386
}
2387
}
2388
2389
errno = old_errno;
2390
return 0;
2391
}
2392
2393
__attribute__((nonnull, warn_unused_result))
2394
int take_down_interface(const char *const interface){
2395
int old_errno = errno;
2396
struct ifreq network;
2397
unsigned int if_index = if_nametoindex(interface);
2398
if(if_index == 0){
2399
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2400
errno = old_errno;
2401
return ENXIO;
2402
}
2403
if(interface_is_up(interface)){
2404
int ret_errno = 0;
2405
int ioctl_errno = 0;
2406
if(not get_flags(interface, &network) and debug){
2407
ret_errno = errno;
2408
fprintf_plus(stderr, "Failed to get flags for interface "
2409
"\"%s\"\n", interface);
2410
errno = old_errno;
2411
return ret_errno;
2412
}
2413
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2414
2415
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2416
if(sd == -1){
2417
ret_errno = errno;
2418
perror_plus("socket");
2419
errno = old_errno;
2420
return ret_errno;
2421
}
2422
2423
if(debug){
2424
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
2425
interface);
2426
}
2427
2428
/* Raise privileges */
2429
ret_errno = raise_privileges();
2430
if(ret_errno != 0){
2431
errno = ret_errno;
2432
perror_plus("Failed to raise privileges");
2433
}
2434
2435
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2436
ioctl_errno = errno;
2437
2438
/* If raise_privileges() succeeded above */
2439
if(ret_errno == 0){
2440
/* Lower privileges */
2441
ret_errno = lower_privileges();
2442
if(ret_errno != 0){
2443
errno = ret_errno;
2444
perror_plus("Failed to lower privileges");
2445
}
2446
}
2447
2448
/* Close the socket */
2449
int ret = close(sd);
2450
if(ret == -1){
2451
perror_plus("close");
2452
}
2453
2454
if(ret_setflags == -1){
2455
errno = ioctl_errno;
2456
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2457
errno = old_errno;
2458
return ioctl_errno;
2459
}
2460
} else if(debug){
2461
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
2462
interface);
2463
}
2464
2465
errno = old_errno;
2466
return 0;
1512
2467
}
1513
2468
1514
2469
int main(int argc, char *argv[]){
2470
mandos_context mc = { .server = NULL, .dh_bits = 0,
2471
#if GNUTLS_VERSION_NUMBER >= 0x030606
2472
.priority = "SECURE128:!CTYPE-X.509"
2473
":+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3"
2474
":%PROFILE_ULTRA",
2475
#elif GNUTLS_VERSION_NUMBER < 0x030600
2476
.priority = "SECURE256:!CTYPE-X.509"
2477
":+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256",
2478
#else
2479
#error "Needs GnuTLS 3.6.6 or later, or before 3.6.0"
2480
#endif
2481
.current_server = NULL, .interfaces = NULL,
2482
.interfaces_size = 0 };
1515
2483
AvahiSServiceBrowser *sb = NULL;
1516
int error;
2484
error_t ret_errno;
1517
2485
int ret;
1518
2486
intmax_t tmpmax;
1519
2487
char *tmp;
1520
2488
int exitcode = EXIT_SUCCESS;
1521
const char *interface = "";
1522
struct ifreq network;
1523
int sd = -1;
1524
bool take_down_interface = false;
1525
uid_t uid;
1526
gid_t gid;
1527
char tempdir[] = "/tmp/mandosXXXXXX";
1528
bool tempdir_created = false;
2489
char *interfaces_to_take_down = NULL;
2490
size_t interfaces_to_take_down_size = 0;
2491
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
2492
char old_tempdir[] = "/tmp/mandosXXXXXX";
2493
char *tempdir = NULL;
1529
2494
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1530
2495
const char *seckey = PATHDIR "/" SECKEY;
1531
2496
const char *pubkey = PATHDIR "/" PUBKEY;
2497
#if GNUTLS_VERSION_NUMBER >= 0x030606
2498
const char *tls_privkey = PATHDIR "/" TLS_PRIVKEY;
2499
const char *tls_pubkey = PATHDIR "/" TLS_PUBKEY;
2500
#endif
2501
const char *dh_params_file = NULL;
2502
char *interfaces_hooks = NULL;
1532
2503
1533
2504
bool gnutls_initialized = false;
1534
2505
bool gpgme_initialized = false;
1580
2551
{ .name = "pubkey", .key = 'p',
1581
2552
.arg = "FILE",
1582
2553
.doc = "OpenPGP public key file base name",
1583
.group = 2 },
2554
.group = 1 },
2555
{ .name = "tls-privkey", .key = 't',
2556
.arg = "FILE",
2557
#if GNUTLS_VERSION_NUMBER >= 0x030606
2558
.doc = "TLS private key file base name",
2559
#else
2560
.doc = "Dummy; ignored (requires GnuTLS 3.6.6)",
2561
#endif
2562
.group = 1 },
2563
{ .name = "tls-pubkey", .key = 'T',
2564
.arg = "FILE",
2565
#if GNUTLS_VERSION_NUMBER >= 0x030606
2566
.doc = "TLS public key file base name",
2567
#else
2568
.doc = "Dummy; ignored (requires GnuTLS 3.6.6)",
2569
#endif
2570
.group = 1 },
1584
2571
{ .name = "dh-bits", .key = 129,
1585
2572
.arg = "BITS",
1586
2573
.doc = "Bit length of the prime number used in the"
1587
2574
" Diffie-Hellman key exchange",
1588
2575
.group = 2 },
2576
{ .name = "dh-params", .key = 134,
2577
.arg = "FILE",
2578
.doc = "PEM-encoded PKCS#3 file with pre-generated parameters"
2579
" for the Diffie-Hellman key exchange",
2580
.group = 2 },
1589
2581
{ .name = "priority", .key = 130,
1590
2582
.arg = "STRING",
1591
2583
.doc = "GnuTLS priority string for the TLS handshake",
1596
2588
.group = 2 },
1597
2589
{ .name = "retry", .key = 132,
1598
2590
.arg = "SECONDS",
1599
.doc = "Retry interval used when denied by the mandos server",
2591
.doc = "Retry interval used when denied by the Mandos server",
1600
2592
.group = 2 },
1601
2593
{ .name = "network-hook-dir", .key = 133,
1602
2594
.arg = "DIR",
1625
2617
connect_to = arg;
1626
2618
break;
1627
2619
case 'i': /* --interface */
1628
interface = arg;
2620
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
2621
arg, (int)',');
2622
if(ret_errno != 0){
2623
argp_error(state, "%s", strerror(ret_errno));
2624
}
1629
2625
break;
1630
2626
case 's': /* --seckey */
1631
2627
seckey = arg;
1633
2629
case 'p': /* --pubkey */
1634
2630
pubkey = arg;
1635
2631
break;
2632
case 't': /* --tls-privkey */
2633
#if GNUTLS_VERSION_NUMBER >= 0x030606
2634
tls_privkey = arg;
2635
#endif
2636
break;
2637
case 'T': /* --tls-pubkey */
2638
#if GNUTLS_VERSION_NUMBER >= 0x030606
2639
tls_pubkey = arg;
2640
#endif
2641
break;
1636
2642
case 129: /* --dh-bits */
1637
2643
errno = 0;
1638
2644
tmpmax = strtoimax(arg, &tmp, 10);
1642
2648
}
1643
2649
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
1644
2650
break;
2651
case 134: /* --dh-params */
2652
dh_params_file = arg;
2653
break;
1645
2654
case 130: /* --priority */
1646
2655
mc.priority = arg;
1647
2656
break;
1670
2679
argp_state_help(state, state->out_stream,
1671
2680
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
1672
2681
& ~(unsigned int)ARGP_HELP_EXIT_OK);
2682
__builtin_unreachable();
1673
2683
case -3: /* --usage */
1674
2684
argp_state_help(state, state->out_stream,
1675
2685
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
2686
__builtin_unreachable();
1676
2687
case 'V': /* --version */
1677
fprintf(state->out_stream, "Mandos plugin mandos-client: ");
1678
fprintf(state->out_stream, "%s\n", argp_program_version);
2688
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
1679
2689
exit(argp_err_exit_status);
1680
2690
break;
1681
2691
default:
1688
2698
.args_doc = "",
1689
2699
.doc = "Mandos client -- Get and decrypt"
1690
2700
" passwords from a Mandos server" };
1691
ret = argp_parse(&argp, argc, argv,
1692
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
1693
switch(ret){
2701
ret_errno = argp_parse(&argp, argc, argv,
2702
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2703
switch(ret_errno){
1694
2704
case 0:
1695
2705
break;
1696
2706
case ENOMEM:
1697
2707
default:
1698
errno = ret;
2708
errno = ret_errno;
1699
2709
perror_plus("argp_parse");
1700
2710
exitcode = EX_OSERR;
1701
2711
goto end;
1704
2714
goto end;
1705
2715
}
1706
2716
}
1707
2717
1708
2718
{
1709
2719
/* Work around Debian bug #633582:
1710
<http://bugs.debian.org/633582> */
1711
struct stat st;
1712
1713
/* Re-raise priviliges */
1714
errno = 0;
1715
ret = seteuid(0);
1716
if(ret == -1){
1717
perror_plus("seteuid");
1718
}
1719
1720
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
1721
int seckey_fd = open(seckey, O_RDONLY);
1722
if(seckey_fd == -1){
1723
perror_plus("open");
1724
} else {
1725
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
1726
if(ret == -1){
1727
perror_plus("fstat");
1728
} else {
1729
if(S_ISREG(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
1730
ret = fchown(seckey_fd, uid, gid);
1731
if(ret == -1){
1732
perror_plus("fchown");
1733
}
1734
}
1735
}
1736
TEMP_FAILURE_RETRY(close(seckey_fd));
1737
}
1738
}
1739
1740
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
1741
int pubkey_fd = open(pubkey, O_RDONLY);
1742
if(pubkey_fd == -1){
1743
perror_plus("open");
1744
} else {
1745
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
1746
if(ret == -1){
1747
perror_plus("fstat");
1748
} else {
1749
if(S_ISREG(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
1750
ret = fchown(pubkey_fd, uid, gid);
1751
if(ret == -1){
1752
perror_plus("fchown");
1753
}
1754
}
1755
}
1756
TEMP_FAILURE_RETRY(close(pubkey_fd));
1757
}
1758
}
1759
1760
/* Lower privileges */
1761
errno = 0;
1762
ret = seteuid(uid);
1763
if(ret == -1){
1764
perror_plus("seteuid");
2720
<https://bugs.debian.org/633582> */
2721
2722
/* Re-raise privileges */
2723
ret = raise_privileges();
2724
if(ret != 0){
2725
errno = ret;
2726
perror_plus("Failed to raise privileges");
2727
} else {
2728
struct stat st;
2729
2730
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
2731
int seckey_fd = open(seckey, O_RDONLY);
2732
if(seckey_fd == -1){
2733
perror_plus("open");
2734
} else {
2735
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
2736
if(ret == -1){
2737
perror_plus("fstat");
2738
} else {
2739
if(S_ISREG(st.st_mode)
2740
and st.st_uid == 0 and st.st_gid == 0){
2741
ret = fchown(seckey_fd, uid, gid);
2742
if(ret == -1){
2743
perror_plus("fchown");
2744
}
2745
}
2746
}
2747
close(seckey_fd);
2748
}
2749
}
2750
2751
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2752
int pubkey_fd = open(pubkey, O_RDONLY);
2753
if(pubkey_fd == -1){
2754
perror_plus("open");
2755
} else {
2756
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
2757
if(ret == -1){
2758
perror_plus("fstat");
2759
} else {
2760
if(S_ISREG(st.st_mode)
2761
and st.st_uid == 0 and st.st_gid == 0){
2762
ret = fchown(pubkey_fd, uid, gid);
2763
if(ret == -1){
2764
perror_plus("fchown");
2765
}
2766
}
2767
}
2768
close(pubkey_fd);
2769
}
2770
}
2771
2772
if(dh_params_file != NULL
2773
and strcmp(dh_params_file, PATHDIR "/dhparams.pem" ) == 0){
2774
int dhparams_fd = open(dh_params_file, O_RDONLY);
2775
if(dhparams_fd == -1){
2776
perror_plus("open");
2777
} else {
2778
ret = (int)TEMP_FAILURE_RETRY(fstat(dhparams_fd, &st));
2779
if(ret == -1){
2780
perror_plus("fstat");
2781
} else {
2782
if(S_ISREG(st.st_mode)
2783
and st.st_uid == 0 and st.st_gid == 0){
2784
ret = fchown(dhparams_fd, uid, gid);
2785
if(ret == -1){
2786
perror_plus("fchown");
2787
}
2788
}
2789
}
2790
close(dhparams_fd);
2791
}
2792
}
2793
2794
/* Lower privileges */
2795
ret = lower_privileges();
2796
if(ret != 0){
2797
errno = ret;
2798
perror_plus("Failed to lower privileges");
2799
}
2800
}
2801
}
2802
2803
/* Remove invalid interface names (except "none") */
2804
{
2805
char *interface = NULL;
2806
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2807
interface))){
2808
if(strcmp(interface, "none") != 0
2809
and if_nametoindex(interface) == 0){
2810
if(interface[0] != '\0'){
2811
fprintf_plus(stderr, "Not using nonexisting interface"
2812
" \"%s\"\n", interface);
2813
}
2814
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2815
interface = NULL;
2816
}
1765
2817
}
1766
2818
}
1767
2819
1768
2820
/* Run network hooks */
1769
2821
{
1770
/* Re-raise priviliges */
1771
errno = 0;
1772
ret = seteuid(0);
1773
if(ret == -1){
1774
perror_plus("seteuid");
1775
}
1776
if(not run_network_hooks("start", interface, delay)){
1777
goto end;
1778
}
1779
/* Lower privileges */
1780
errno = 0;
1781
ret = seteuid(uid);
1782
if(ret == -1){
1783
perror_plus("seteuid");
1784
}
2822
if(mc.interfaces != NULL){
2823
interfaces_hooks = malloc(mc.interfaces_size);
2824
if(interfaces_hooks == NULL){
2825
perror_plus("malloc");
2826
goto end;
2827
}
2828
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2829
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2830
}
2831
run_network_hooks("start", interfaces_hooks != NULL ?
2832
interfaces_hooks : "", delay);
1785
2833
}
1786
2834
1787
2835
if(not debug){
1788
2836
avahi_set_log_function(empty_log);
1789
2837
}
1790
2838
1791
if(interface[0] == '\0'){
1792
struct dirent **direntries;
1793
/* First look for interfaces that are up */
1794
ret = scandir(sys_class_net, &direntries, up_interface,
1795
alphasort);
1796
if(ret == 0){
1797
/* No up interfaces, look for any good interfaces */
1798
free(direntries);
1799
ret = scandir(sys_class_net, &direntries, good_interface,
1800
alphasort);
1801
}
1802
if(ret >= 1){
1803
/* Pick the first interface returned */
1804
interface = strdup(direntries[0]->d_name);
1805
if(debug){
1806
fprintf(stderr, "Mandos plugin mandos-client: "
1807
"Using interface \"%s\"\n", interface);
1808
}
1809
if(interface == NULL){
1810
perror_plus("malloc");
1811
free(direntries);
1812
exitcode = EXIT_FAILURE;
1813
goto end;
1814
}
1815
free(direntries);
1816
} else {
1817
free(direntries);
1818
fprintf(stderr, "Mandos plugin mandos-client: "
1819
"Could not find a network interface\n");
1820
exitcode = EXIT_FAILURE;
1821
goto end;
1822
}
1823
}
1824
1825
2839
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1826
2840
from the signal handler */
1827
2841
/* Initialize the pseudo-RNG for Avahi */
1828
2842
srand((unsigned int) time(NULL));
1829
mc.simple_poll = avahi_simple_poll_new();
1830
if(mc.simple_poll == NULL){
1831
fprintf(stderr, "Mandos plugin mandos-client: "
1832
"Avahi: Failed to create simple poll object.\n");
2843
simple_poll = avahi_simple_poll_new();
2844
if(simple_poll == NULL){
2845
fprintf_plus(stderr,
2846
"Avahi: Failed to create simple poll object.\n");
1833
2847
exitcode = EX_UNAVAILABLE;
1834
2848
goto end;
1835
2849
}
1897
2911
}
1898
2912
}
1899
2913
1900
/* If the interface is down, bring it up */
1901
if(strcmp(interface, "none") != 0){
1902
if_index = (AvahiIfIndex) if_nametoindex(interface);
1903
if(if_index == 0){
1904
fprintf(stderr, "Mandos plugin mandos-client: "
1905
"No such interface: \"%s\"\n", interface);
1906
exitcode = EX_UNAVAILABLE;
1907
goto end;
1908
}
1909
1910
if(quit_now){
1911
goto end;
1912
}
1913
1914
/* Re-raise priviliges */
1915
errno = 0;
1916
ret = seteuid(0);
1917
if(ret == -1){
1918
perror_plus("seteuid");
1919
}
1920
1921
#ifdef __linux__
1922
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1923
messages about the network interface to mess up the prompt */
1924
ret = klogctl(8, NULL, 5);
1925
bool restore_loglevel = true;
1926
if(ret == -1){
1927
restore_loglevel = false;
1928
perror_plus("klogctl");
1929
}
1930
#endif /* __linux__ */
1931
1932
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1933
if(sd < 0){
1934
perror_plus("socket");
1935
exitcode = EX_OSERR;
1936
#ifdef __linux__
1937
if(restore_loglevel){
1938
ret = klogctl(7, NULL, 0);
1939
if(ret == -1){
1940
perror_plus("klogctl");
1941
}
1942
}
1943
#endif /* __linux__ */
1944
/* Lower privileges */
1945
errno = 0;
1946
ret = seteuid(uid);
1947
if(ret == -1){
1948
perror_plus("seteuid");
1949
}
1950
goto end;
1951
}
1952
strcpy(network.ifr_name, interface);
1953
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1954
if(ret == -1){
1955
perror_plus("ioctl SIOCGIFFLAGS");
1956
#ifdef __linux__
1957
if(restore_loglevel){
1958
ret = klogctl(7, NULL, 0);
1959
if(ret == -1){
1960
perror_plus("klogctl");
1961
}
1962
}
1963
#endif /* __linux__ */
1964
exitcode = EX_OSERR;
1965
/* Lower privileges */
1966
errno = 0;
1967
ret = seteuid(uid);
1968
if(ret == -1){
1969
perror_plus("seteuid");
1970
}
1971
goto end;
1972
}
1973
if((network.ifr_flags & IFF_UP) == 0){
1974
network.ifr_flags |= IFF_UP;
1975
take_down_interface = true;
1976
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1977
if(ret == -1){
1978
take_down_interface = false;
1979
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1980
exitcode = EX_OSERR;
1981
#ifdef __linux__
1982
if(restore_loglevel){
1983
ret = klogctl(7, NULL, 0);
1984
if(ret == -1){
1985
perror_plus("klogctl");
2914
/* If no interfaces were specified, make a list */
2915
if(mc.interfaces == NULL){
2916
struct dirent **direntries = NULL;
2917
/* Look for any good interfaces */
2918
ret = scandir(sys_class_net, &direntries, good_interface,
2919
alphasort);
2920
if(ret >= 1){
2921
/* Add all found interfaces to interfaces list */
2922
for(int i = 0; i < ret; ++i){
2923
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2924
direntries[i]->d_name);
2925
if(ret_errno != 0){
2926
errno = ret_errno;
2927
perror_plus("argz_add");
2928
free(direntries[i]);
2929
continue;
2930
}
2931
if(debug){
2932
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2933
direntries[i]->d_name);
2934
}
2935
free(direntries[i]);
2936
}
2937
free(direntries);
2938
} else {
2939
if(ret == 0){
2940
free(direntries);
2941
}
2942
fprintf_plus(stderr, "Could not find a network interface\n");
2943
exitcode = EXIT_FAILURE;
2944
goto end;
2945
}
2946
}
2947
2948
/* Bring up interfaces which are down, and remove any "none"s */
2949
{
2950
char *interface = NULL;
2951
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2952
interface))){
2953
/* If interface name is "none", stop bringing up interfaces.
2954
Also remove all instances of "none" from the list */
2955
if(strcmp(interface, "none") == 0){
2956
argz_delete(&mc.interfaces, &mc.interfaces_size,
2957
interface);
2958
interface = NULL;
2959
while((interface = argz_next(mc.interfaces,
2960
mc.interfaces_size, interface))){
2961
if(strcmp(interface, "none") == 0){
2962
argz_delete(&mc.interfaces, &mc.interfaces_size,
2963
interface);
2964
interface = NULL;
1986
2965
}
1987
2966
}
1988
#endif /* __linux__ */
1989
/* Lower privileges */
1990
errno = 0;
1991
ret = seteuid(uid);
1992
if(ret == -1){
1993
perror_plus("seteuid");
1994
}
1995
goto end;
1996
}
1997
}
1998
/* Sleep checking until interface is running.
1999
Check every 0.25s, up to total time of delay */
2000
for(int i=0; i < delay * 4; i++){
2001
ret = ioctl(sd, SIOCGIFFLAGS, &network);
2002
if(ret == -1){
2003
perror_plus("ioctl SIOCGIFFLAGS");
2004
} else if(network.ifr_flags & IFF_RUNNING){
2005
2967
break;
2006
2968
}
2007
struct timespec sleeptime = { .tv_nsec = 250000000 };
2008
ret = nanosleep(&sleeptime, NULL);
2009
if(ret == -1 and errno != EINTR){
2010
perror_plus("nanosleep");
2011
}
2012
}
2013
if(not take_down_interface){
2014
/* We won't need the socket anymore */
2015
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2016
if(ret == -1){
2017
perror_plus("close");
2018
}
2019
}
2020
#ifdef __linux__
2021
if(restore_loglevel){
2022
/* Restores kernel loglevel to default */
2023
ret = klogctl(7, NULL, 0);
2024
if(ret == -1){
2025
perror_plus("klogctl");
2026
}
2027
}
2028
#endif /* __linux__ */
2029
/* Lower privileges */
2030
errno = 0;
2031
/* Lower privileges */
2032
ret = seteuid(uid);
2033
if(ret == -1){
2034
perror_plus("seteuid");
2035
}
2969
bool interface_was_up = interface_is_up(interface);
2970
errno = bring_up_interface(interface, delay);
2971
if(not interface_was_up){
2972
if(errno != 0){
2973
fprintf_plus(stderr, "Failed to bring up interface \"%s\":"
2974
" %s\n", interface, strerror(errno));
2975
} else {
2976
errno = argz_add(&interfaces_to_take_down,
2977
&interfaces_to_take_down_size,
2978
interface);
2979
if(errno != 0){
2980
perror_plus("argz_add");
2981
}
2982
}
2983
}
2984
}
2985
if(debug and (interfaces_to_take_down == NULL)){
2986
fprintf_plus(stderr, "No interfaces were brought up\n");
2987
}
2988
}
2989
2990
/* If we only got one interface, explicitly use only that one */
2991
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2992
if(debug){
2993
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2994
mc.interfaces);
2995
}
2996
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2036
2997
}
2037
2998
2038
2999
if(quit_now){
2039
3000
goto end;
2040
3001
}
2041
3002
2042
ret = init_gnutls_global(pubkey, seckey);
3003
#if GNUTLS_VERSION_NUMBER >= 0x030606
3004
ret = init_gnutls_global(tls_pubkey, tls_privkey, dh_params_file, &mc);
3005
#elif GNUTLS_VERSION_NUMBER < 0x030600
3006
ret = init_gnutls_global(pubkey, seckey, dh_params_file, &mc);
3007
#else
3008
#error "Needs GnuTLS 3.6.6 or later, or before 3.6.0"
3009
#endif
2043
3010
if(ret == -1){
2044
fprintf(stderr, "Mandos plugin mandos-client: "
2045
"init_gnutls_global failed\n");
3011
fprintf_plus(stderr, "init_gnutls_global failed\n");
2046
3012
exitcode = EX_UNAVAILABLE;
2047
3013
goto end;
2048
3014
} else {
2053
3019
goto end;
2054
3020
}
2055
3021
2056
if(mkdtemp(tempdir) == NULL){
3022
/* Try /run/tmp before /tmp */
3023
tempdir = mkdtemp(run_tempdir);
3024
if(tempdir == NULL and errno == ENOENT){
3025
if(debug){
3026
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
3027
run_tempdir, old_tempdir);
3028
}
3029
tempdir = mkdtemp(old_tempdir);
3030
}
3031
if(tempdir == NULL){
2057
3032
perror_plus("mkdtemp");
2058
3033
goto end;
2059
3034
}
2060
tempdir_created = true;
2061
3035
2062
3036
if(quit_now){
2063
3037
goto end;
2064
3038
}
2065
3039
2066
if(not init_gpgme(pubkey, seckey, tempdir)){
2067
fprintf(stderr, "Mandos plugin mandos-client: "
2068
"init_gpgme failed\n");
3040
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
3041
fprintf_plus(stderr, "init_gpgme failed\n");
2069
3042
exitcode = EX_UNAVAILABLE;
2070
3043
goto end;
2071
3044
} else {
2080
3053
/* Connect directly, do not use Zeroconf */
2081
3054
/* (Mainly meant for debugging) */
2082
3055
char *address = strrchr(connect_to, ':');
3056
2083
3057
if(address == NULL){
2084
fprintf(stderr, "Mandos plugin mandos-client: "
2085
"No colon in address\n");
3058
fprintf_plus(stderr, "No colon in address\n");
2086
3059
exitcode = EX_USAGE;
2087
3060
goto end;
2088
3061
}
2091
3064
goto end;
2092
3065
}
2093
3066
2094
uint16_t port;
3067
in_port_t port;
2095
3068
errno = 0;
2096
3069
tmpmax = strtoimax(address+1, &tmp, 10);
2097
3070
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2098
or tmpmax != (uint16_t)tmpmax){
2099
fprintf(stderr, "Mandos plugin mandos-client: "
2100
"Bad port number\n");
3071
or tmpmax != (in_port_t)tmpmax){
3072
fprintf_plus(stderr, "Bad port number\n");
2101
3073
exitcode = EX_USAGE;
2102
3074
goto end;
2103
3075
}
2104
3076
2105
3077
if(quit_now){
2106
3078
goto end;
2107
3079
}
2108
3080
2109
port = (uint16_t)tmpmax;
3081
port = (in_port_t)tmpmax;
2110
3082
*address = '\0';
2111
3083
/* Colon in address indicates IPv6 */
2112
3084
int af;
2128
3100
}
2129
3101
2130
3102
while(not quit_now){
2131
ret = start_mandos_communication(address, port, if_index, af);
3103
ret = start_mandos_communication(address, port, if_index, af,
3104
&mc);
2132
3105
if(quit_now or ret == 0){
2133
3106
break;
2134
3107
}
2135
3108
if(debug){
2136
fprintf(stderr, "Mandos plugin mandos-client: "
2137
"Retrying in %d seconds\n", (int)retry_interval);
3109
fprintf_plus(stderr, "Retrying in %d seconds\n",
3110
(int)retry_interval);
2138
3111
}
2139
sleep((int)retry_interval);
3112
sleep((unsigned int)retry_interval);
2140
3113
}
2141
3114
2142
if (not quit_now){
3115
if(not quit_now){
2143
3116
exitcode = EXIT_SUCCESS;
2144
3117
}
2145
3118
2160
3133
config.publish_domain = 0;
2161
3134
2162
3135
/* Allocate a new server */
2163
mc.server = avahi_server_new(avahi_simple_poll_get
2164
(mc.simple_poll), &config, NULL,
2165
NULL, &error);
3136
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
3137
&config, NULL, NULL, &ret);
2166
3138
2167
3139
/* Free the Avahi configuration data */
2168
3140
avahi_server_config_free(&config);
2170
3142
2171
3143
/* Check if creating the Avahi server object succeeded */
2172
3144
if(mc.server == NULL){
2173
fprintf(stderr, "Mandos plugin mandos-client: "
2174
"Failed to create Avahi server: %s\n",
2175
avahi_strerror(error));
3145
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
3146
avahi_strerror(ret));
2176
3147
exitcode = EX_UNAVAILABLE;
2177
3148
goto end;
2178
3149
}
2184
3155
/* Create the Avahi service browser */
2185
3156
sb = avahi_s_service_browser_new(mc.server, if_index,
2186
3157
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2187
NULL, 0, browse_callback, NULL);
3158
NULL, 0, browse_callback,
3159
(void *)&mc);
2188
3160
if(sb == NULL){
2189
fprintf(stderr, "Mandos plugin mandos-client: "
2190
"Failed to create service browser: %s\n",
2191
avahi_strerror(avahi_server_errno(mc.server)));
3161
fprintf_plus(stderr, "Failed to create service browser: %s\n",
3162
avahi_strerror(avahi_server_errno(mc.server)));
2192
3163
exitcode = EX_UNAVAILABLE;
2193
3164
goto end;
2194
3165
}
2200
3171
/* Run the main loop */
2201
3172
2202
3173
if(debug){
2203
fprintf(stderr, "Mandos plugin mandos-client: "
2204
"Starting Avahi loop search\n");
3174
fprintf_plus(stderr, "Starting Avahi loop search\n");
2205
3175
}
2206
2207
ret = avahi_loop_with_timeout(mc.simple_poll,
2208
(int)(retry_interval * 1000));
3176
3177
ret = avahi_loop_with_timeout(simple_poll,
3178
(int)(retry_interval * 1000), &mc);
2209
3179
if(debug){
2210
fprintf(stderr, "Mandos plugin mandos-client: "
2211
"avahi_loop_with_timeout exited %s\n",
2212
(ret == 0) ? "successfully" : "with error");
3180
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
3181
(ret == 0) ? "successfully" : "with error");
2213
3182
}
2214
3183
2215
3184
end:
2216
3185
2217
3186
if(debug){
2218
fprintf(stderr, "Mandos plugin mandos-client: "
2219
"%s exiting\n", argv[0]);
3187
if(signal_received){
3188
fprintf_plus(stderr, "%s exiting due to signal %d: %s\n",
3189
argv[0], signal_received,
3190
strsignal(signal_received));
3191
} else {
3192
fprintf_plus(stderr, "%s exiting\n", argv[0]);
3193
}
2220
3194
}
2221
3195
2222
3196
/* Cleanup things */
3197
free(mc.interfaces);
3198
2223
3199
if(sb != NULL)
2224
3200
avahi_s_service_browser_free(sb);
2225
3201
2226
3202
if(mc.server != NULL)
2227
3203
avahi_server_free(mc.server);
2228
3204
2229
if(mc.simple_poll != NULL)
2230
avahi_simple_poll_free(mc.simple_poll);
3205
if(simple_poll != NULL)
3206
avahi_simple_poll_free(simple_poll);
2231
3207
2232
3208
if(gnutls_initialized){
2233
3209
gnutls_certificate_free_credentials(mc.cred);
2234
gnutls_global_deinit();
2235
3210
gnutls_dh_params_deinit(mc.dh_params);
2236
3211
}
2237
3212
2238
3213
if(gpgme_initialized){
2239
3214
gpgme_release(mc.ctx);
2240
3215
}
2241
3216
2242
3217
/* Cleans up the circular linked list of Mandos servers the client
2243
3218
has seen */
2244
3219
if(mc.current_server != NULL){
2245
3220
mc.current_server->prev->next = NULL;
2246
3221
while(mc.current_server != NULL){
2247
3222
server *next = mc.current_server->next;
3223
#ifdef __GNUC__
3224
#pragma GCC diagnostic push
3225
#pragma GCC diagnostic ignored "-Wcast-qual"
3226
#endif
3227
free((char *)(mc.current_server->ip));
3228
#ifdef __GNUC__
3229
#pragma GCC diagnostic pop
3230
#endif
2248
3231
free(mc.current_server);
2249
3232
mc.current_server = next;
2250
3233
}
2251
3234
}
2252
3235
2253
/* Re-raise priviliges */
3236
/* Re-raise privileges */
2254
3237
{
2255
errno = 0;
2256
ret = seteuid(0);
2257
if(ret == -1){
2258
perror_plus("seteuid");
2259
}
2260
/* Run network hooks */
2261
if(not run_network_hooks("stop", interface, delay)){
2262
goto end;
3238
ret = raise_privileges();
3239
if(ret != 0){
3240
errno = ret;
3241
perror_plus("Failed to raise privileges");
3242
} else {
3243
3244
/* Run network hooks */
3245
run_network_hooks("stop", interfaces_hooks != NULL ?
3246
interfaces_hooks : "", delay);
3247
3248
/* Take down the network interfaces which were brought up */
3249
{
3250
char *interface = NULL;
3251
while((interface = argz_next(interfaces_to_take_down,
3252
interfaces_to_take_down_size,
3253
interface))){
3254
ret = take_down_interface(interface);
3255
if(ret != 0){
3256
errno = ret;
3257
perror_plus("Failed to take down interface");
3258
}
3259
}
3260
if(debug and (interfaces_to_take_down == NULL)){
3261
fprintf_plus(stderr, "No interfaces needed to be taken"
3262
" down\n");
3263
}
3264
}
2263
3265
}
2264
3266
2265
/* Take down the network interface */
2266
if(take_down_interface and geteuid() == 0){
2267
ret = ioctl(sd, SIOCGIFFLAGS, &network);
2268
if(ret == -1){
2269
perror_plus("ioctl SIOCGIFFLAGS");
2270
} else if(network.ifr_flags & IFF_UP){
2271
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2272
ret = ioctl(sd, SIOCSIFFLAGS, &network);
2273
if(ret == -1){
2274
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2275
}
2276
}
2277
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2278
if(ret == -1){
2279
perror_plus("close");
2280
}
3267
ret = lower_privileges_permanently();
3268
if(ret != 0){
3269
errno = ret;
3270
perror_plus("Failed to lower privileges permanently");
2281
3271
}
2282
3272
}
2283
/* Lower privileges permanently */
2284
errno = 0;
2285
ret = setuid(uid);
2286
if(ret == -1){
2287
perror_plus("setuid");
3273
3274
free(interfaces_to_take_down);
3275
free(interfaces_hooks);
3276
3277
void clean_dir_at(int base, const char * const dirname,
3278
uintmax_t level){
3279
struct dirent **direntries = NULL;
3280
int dret;
3281
int dir_fd = (int)TEMP_FAILURE_RETRY(openat(base, dirname,
3282
O_RDONLY
3283
| O_NOFOLLOW
3284
| O_DIRECTORY
3285
| O_PATH));
3286
if(dir_fd == -1){
3287
perror_plus("open");
3288
return;
3289
}
3290
int numentries = scandirat(dir_fd, ".", &direntries,
3291
notdotentries, alphasort);
3292
if(numentries >= 0){
3293
for(int i = 0; i < numentries; i++){
3294
if(debug){
3295
fprintf_plus(stderr, "Unlinking \"%s/%s\"\n",
3296
dirname, direntries[i]->d_name);
3297
}
3298
dret = unlinkat(dir_fd, direntries[i]->d_name, 0);
3299
if(dret == -1){
3300
if(errno == EISDIR){
3301
dret = unlinkat(dir_fd, direntries[i]->d_name,
3302
AT_REMOVEDIR);
3303
}
3304
if((dret == -1) and (errno == ENOTEMPTY)
3305
and (strcmp(direntries[i]->d_name, "private-keys-v1.d")
3306
== 0) and (level == 0)){
3307
/* Recurse only in this special case */
3308
clean_dir_at(dir_fd, direntries[i]->d_name, level+1);
3309
dret = 0;
3310
}
3311
if((dret == -1) and (errno != ENOENT)){
3312
fprintf_plus(stderr, "unlink(\"%s/%s\"): %s\n", dirname,
3313
direntries[i]->d_name, strerror(errno));
3314
}
3315
}
3316
free(direntries[i]);
3317
}
3318
3319
/* need to clean even if 0 because man page doesn't specify */
3320
free(direntries);
3321
dret = unlinkat(base, dirname, AT_REMOVEDIR);
3322
if(dret == -1 and errno != ENOENT){
3323
perror_plus("rmdir");
3324
}
3325
} else {
3326
perror_plus("scandirat");
3327
}
3328
close(dir_fd);
2288
3329
}
2289
3330
2290
3331
/* Removes the GPGME temp directory and all files inside */
2291
if(tempdir_created){
2292
struct dirent **direntries = NULL;
2293
struct dirent *direntry = NULL;
2294
int numentries = scandir(tempdir, &direntries, notdotentries,
2295
alphasort);
2296
if (numentries > 0){
2297
for(int i = 0; i < numentries; i++){
2298
direntry = direntries[i];
2299
char *fullname = NULL;
2300
ret = asprintf(&fullname, "%s/%s", tempdir,
2301
direntry->d_name);
2302
if(ret < 0){
2303
perror_plus("asprintf");
2304
continue;
2305
}
2306
ret = remove(fullname);
2307
if(ret == -1){
2308
fprintf(stderr, "Mandos plugin mandos-client: "
2309
"remove(\"%s\"): %s\n", fullname, strerror(errno));
2310
}
2311
free(fullname);
2312
}
2313
}
2314
2315
/* need to clean even if 0 because man page doesn't specify */
2316
free(direntries);
2317
if (numentries == -1){
2318
perror_plus("scandir");
2319
}
2320
ret = rmdir(tempdir);
2321
if(ret == -1 and errno != ENOENT){
2322
perror_plus("rmdir");
2323
}
3332
if(tempdir != NULL){
3333
clean_dir_at(-1, tempdir, 0);
2324
3334
}
2325
3335
2326
3336
if(quit_now){
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0