(root)/mandos/release
» Revision
237.7.842
(compared to revision 237.16.3)
: plugins.d/mandos-client.c
To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/release
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 237.7.842
- compare with another revision
- download diff
- download tarball
- view history from revision 237.7.842
- Committer: Teddy Hogeborn
- Date: 2024-09-09 01:36:41 UTC
- mto: This revision was merged to the branch mainline in revision 410.
- Revision ID: teddy@recompile.se-20240909013641-6zu6kx2f7meu134k
Make all required directories when installing
When installing into a normal system, one can assume that target
directories, such as /usr/bin, already exists. But when installing
into a subdirectory for the purpose of creating a package, one cannot
assume that all directories already exist. Therefore, when
installing, we must not check if any directories exist, and must
instead always create any directories we want to install into.
* Makefile (confdir/mandos.conf, confdir/clients.conf, install-html):
Use the "-D" option to "install" instead of creating the directory
separately.
(install-server): Move creation of $(CONFDIR) down to before it is
needed. Don't check if the $(TMPFILES) or $(SYSUSERS) directories
exist; instead create them by using the "-D" option to "install".
Create the $(PREFIX)/sbin directory. Always use
"--target-directory" if possible; i.e. if the file name is the same.
Create the $(DBUSPOLICYDIR) and $(DESTDIR)/etc/init.d directories by
using the "-D" option to "install". Don't check if the $(SYSTEMD)
directory exists; instead create it by using the "-D" option to
"install". Create the $(DESTDIR)/etc/default and $(MANDIR)/man8
directories by using the "-D" option to "install". Create the
$(MANDIR)/man5 directories explicitly.
(install-client-nokey): Remove unnecessary creation of the
$(CONFDIR) directory. Don't check if the $(SYSUSERS) directory
exists; instead create it by using the "-D" option to "install".
Move the "--directory" argument to be the first argument, for
clarity. Create the $(PREFIX)/sbin directory. Use the "-D"
argument to "install" when installing
$(INITRAMFSTOOLS)/hooks/mandos,
$(INITRAMFSTOOLS)/conf.d/mandos-conf,
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos,
$(INITRAMFSTOOLS)/scripts/init-premount/mandos,
$(INITRAMFSTOOLS)/scripts/local-premount/mandos,
$(DRACUTMODULE)/ask-password-mandos.path, and
$(DRACUTMODULE)/dracut-module/ask-password-mandos.service. Create
the $(MANDIR)/man8 directory.
Reported-By: Erich Eckner <erich@eckner.net>
Thanks: Erich Eckner <erich@eckner.net> for analysis
When installing into a normal system, one can assume that target
directories, such as /usr/bin, already exists. But when installing
into a subdirectory for the purpose of creating a package, one cannot
assume that all directories already exist. Therefore, when
installing, we must not check if any directories exist, and must
instead always create any directories we want to install into.
* Makefile (confdir/mandos.conf, confdir/clients.conf, install-html):
Use the "-D" option to "install" instead of creating the directory
separately.
(install-server): Move creation of $(CONFDIR) down to before it is
needed. Don't check if the $(TMPFILES) or $(SYSUSERS) directories
exist; instead create them by using the "-D" option to "install".
Create the $(PREFIX)/sbin directory. Always use
"--target-directory" if possible; i.e. if the file name is the same.
Create the $(DBUSPOLICYDIR) and $(DESTDIR)/etc/init.d directories by
using the "-D" option to "install". Don't check if the $(SYSTEMD)
directory exists; instead create it by using the "-D" option to
"install". Create the $(DESTDIR)/etc/default and $(MANDIR)/man8
directories by using the "-D" option to "install". Create the
$(MANDIR)/man5 directories explicitly.
(install-client-nokey): Remove unnecessary creation of the
$(CONFDIR) directory. Don't check if the $(SYSUSERS) directory
exists; instead create it by using the "-D" option to "install".
Move the "--directory" argument to be the first argument, for
clarity. Create the $(PREFIX)/sbin directory. Use the "-D"
argument to "install" when installing
$(INITRAMFSTOOLS)/hooks/mandos,
$(INITRAMFSTOOLS)/conf.d/mandos-conf,
$(INITRAMFSTOOLS)/conf-hooks.d/zz-mandos,
$(INITRAMFSTOOLS)/scripts/init-premount/mandos,
$(INITRAMFSTOOLS)/scripts/local-premount/mandos,
$(DRACUTMODULE)/ask-password-mandos.path, and
$(DRACUTMODULE)/dracut-module/ask-password-mandos.service. Create
the $(MANDIR)/man8 directory.
Reported-By: Erich Eckner <erich@eckner.net>
Thanks: Erich Eckner <erich@eckner.net> for analysis
- files added:
- bugs.xml
- debian/tests
- debian/upstream
- dracut-module
- network-hooks.d
- plugin-helpers
- files removed:
- initramfs-tools-hook-conf
- files modified:
- .bzrignore
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2011 Teddy Hogeborn
13
* Copyright © 2008-2011 Björn Påhlsson
14
*
15
* This program is free software: you can redistribute it and/or
16
* modify it under the terms of the GNU General Public License as
17
* published by the Free Software Foundation, either version 3 of the
18
* License, or (at your option) any later version.
19
*
20
* This program is distributed in the hope that it will be useful, but
12
* Copyright © 2008-2022 Teddy Hogeborn
13
* Copyright © 2008-2022 Björn Påhlsson
14
*
15
* This file is part of Mandos.
16
*
17
* Mandos is free software: you can redistribute it and/or modify it
18
* under the terms of the GNU General Public License as published by
19
* the Free Software Foundation, either version 3 of the License, or
20
* (at your option) any later version.
21
*
22
* Mandos is distributed in the hope that it will be useful, but
21
23
* WITHOUT ANY WARRANTY; without even the implied warranty of
22
24
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
23
25
* General Public License for more details.
24
26
*
25
27
* You should have received a copy of the GNU General Public License
26
* along with this program. If not, see
27
* <http://www.gnu.org/licenses/>.
28
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
28
29
*
29
30
* Contact the authors at <mandos@recompile.se>.
30
31
*/
32
33
/* Needed by GPGME, specifically gpgme_data_seek() */
33
34
#ifndef _LARGEFILE_SOURCE
34
35
#define _LARGEFILE_SOURCE
35
#endif
36
#endif /* not _LARGEFILE_SOURCE */
36
37
#ifndef _FILE_OFFSET_BITS
37
38
#define _FILE_OFFSET_BITS 64
38
#endif
39
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror(), remove() */
44
#include <stdint.h> /* uint16_t, uint32_t */
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
strtof(), abort() */
39
#endif /* not _FILE_OFFSET_BITS */
40
41
#define _GNU_SOURCE /* program_invocation_short_name,
42
TEMP_FAILURE_RETRY(), O_CLOEXEC,
43
scandirat(), asprintf() */
48
44
#include <stdbool.h> /* bool, false, true */
49
#include <string.h> /* memset(), strcmp(), strlen(),
50
strerror(), asprintf(), strcpy() */
51
#include <sys/ioctl.h> /* ioctl */
52
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
53
sockaddr_in6, PF_INET6,
54
SOCK_STREAM, uid_t, gid_t, open(),
55
opendir(), DIR */
56
#include <sys/stat.h> /* open(), S_ISREG */
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect() */
59
#include <fcntl.h> /* open() */
60
#include <dirent.h> /* opendir(), struct dirent, readdir()
61
*/
62
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
45
#include <argp.h> /* argp_program_version,
46
argp_program_bug_address,
47
struct argp_option,
48
struct argp_state, argp_error(),
49
argp_state_help,
50
ARGP_HELP_STD_HELP,
51
ARGP_HELP_EXIT_ERR,
52
ARGP_HELP_EXIT_OK, ARGP_HELP_USAGE,
53
argp_err_exit_status,
54
ARGP_ERR_UNKNOWN, struct argp,
55
argp_parse(), ARGP_IN_ORDER,
56
ARGP_NO_HELP */
57
#include <stddef.h> /* NULL, size_t */
58
#include <sys/types.h> /* uid_t, gid_t, sig_atomic_t,
59
seteuid(), setuid(), pid_t,
60
setgid(), getuid(), getgid() */
61
#include <unistd.h> /* uid_t, gid_t, TEMP_FAILURE_RETRY(),
62
seteuid(), setuid(), close(),
63
ssize_t, read(), fork(), setgid(),
64
_exit(), dup2(), STDIN_FILENO,
65
STDERR_FILENO, STDOUT_FILENO,
66
fexecve(), write(), getuid(),
67
getgid(), fchown(), symlink(),
68
sleep(), unlinkat(), pause() */
69
#include <netinet/in.h> /* in_port_t, struct sockaddr_in6,
70
sa_family_t, struct sockaddr_in,
71
htons(), IN6_IS_ADDR_LINKLOCAL,
72
INET_ADDRSTRLEN, INET6_ADDRSTRLEN,
73
ntohl(), IPPROTO_IP */
74
#include <time.h> /* struct timespec, clock_gettime(),
75
CLOCK_MONOTONIC, time_t, struct tm,
76
gmtime_r(), clock_settime(),
77
CLOCK_REALTIME, nanosleep() */
78
#include <errno.h> /* errno,
79
program_invocation_short_name,
80
EINTR, EINVAL, ENETUNREACH,
81
EHOSTUNREACH, ECONNREFUSED, EPROTO,
82
EIO, ENOENT, ENXIO, error_t,
83
ENOMEM, EISDIR, ENOTEMPTY */
84
#include <stdio.h> /* fprintf(), stderr, perror(), FILE,
85
vfprintf(), off_t, SEEK_SET,
86
stdout, fwrite(), ferror(),
87
fflush(), asprintf() */
88
#include <stdarg.h> /* va_list, va_start(), vfprintf() */
89
#include <stdlib.h> /* realloc(), free(), malloc(),
90
getenv(), EXIT_FAILURE, setenv(),
91
EXIT_SUCCESS, strtof(), strtod(),
92
srand(), mkdtemp(), abort() */
93
#include <string.h> /* strdup(), strcmp(), strlen(),
94
strerror(), strncpy(), strspn(),
95
memcpy(), strrchr(), strchr(),
96
strsignal() */
97
#include <fcntl.h> /* open(), O_RDONLY, O_DIRECTORY,
98
O_PATH, O_CLOEXEC, openat(),
99
O_NOFOLLOW, AT_REMOVEDIR */
100
#include <iso646.h> /* or, and, not */
101
#include <sys/stat.h> /* struct stat, fstat(), fstatat(),
102
S_ISREG(), S_IXUSR, S_IXGRP,
103
S_IXOTH, lstat() */
104
#include <net/if.h> /* IF_NAMESIZE, if_indextoname(),
105
if_nametoindex(), SIOCGIFFLAGS,
106
IFF_LOOPBACK, IFF_POINTOPOINT,
107
IFF_BROADCAST, IFF_NOARP, IFF_UP,
108
IFF_RUNNING, SIOCSIFFLAGS */
109
#include <sysexits.h> /* EX_NOPERM, EX_OSERR,
110
EX_UNAVAILABLE, EX_USAGE */
111
#include <grp.h> /* setgroups() */
112
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
113
WEXITSTATUS(), WIFSIGNALED(),
114
WTERMSIG() */
115
#include <signal.h> /* kill(), SIGTERM, struct sigaction,
116
SIG_DFL, sigemptyset(),
117
sigaddset(), SIGINT, SIGHUP,
118
SIG_IGN, raise() */
119
#include <sys/socket.h> /* struct sockaddr_storage, AF_INET6,
120
PF_INET6, AF_INET, PF_INET,
121
socket(), SOCK_STREAM,
122
SOCK_CLOEXEC, struct sockaddr,
123
connect(), SOCK_DGRAM */
124
#include <argz.h> /* argz_next(), argz_add_sep(),
125
argz_delete(), argz_stringify(),
126
argz_add(), argz_count() */
127
#include <inttypes.h> /* PRIuMAX, uintmax_t, uint32_t,
128
PRIdMAX, PRIu16, intmax_t,
63
129
strtoimax() */
64
#include <assert.h> /* assert() */
65
#include <errno.h> /* perror(), errno,
66
program_invocation_short_name */
67
#include <time.h> /* nanosleep(), time(), sleep() */
68
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
69
SIOCSIFFLAGS, if_indextoname(),
70
if_nametoindex(), IF_NAMESIZE */
71
#include <netinet/in.h> /* IN6_IS_ADDR_LINKLOCAL,
72
INET_ADDRSTRLEN, INET6_ADDRSTRLEN
73
*/
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
getuid(), getgid(), seteuid(),
76
setgid(), pause() */
77
#include <arpa/inet.h> /* inet_pton(), htons, inet_ntop() */
78
#include <iso646.h> /* not, or, and */
79
#include <argp.h> /* struct argp_option, error_t, struct
80
argp_state, struct argp,
81
argp_parse(), ARGP_KEY_ARG,
82
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
83
#include <signal.h> /* sigemptyset(), sigaddset(),
84
sigaction(), SIGTERM, sig_atomic_t,
85
raise() */
86
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_UNAVAILABLE,
87
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
88
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
89
WEXITSTATUS(), WTERMSIG() */
130
#include <arpa/inet.h> /* inet_pton() */
131
#include <stdint.h> /* uint32_t, intptr_t, uint16_t */
132
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
133
EAI_SYSTEM, gai_strerror() */
134
#include <sys/ioctl.h> /* ioctl() */
135
#include <dirent.h> /* struct dirent, scandirat(),
136
alphasort(), scandir() */
137
#include <limits.h> /* INT_MAX */
90
138
91
139
#ifdef __linux__
92
140
#include <sys/klog.h> /* klogctl() */
105
153
106
154
/* GnuTLS */
107
155
#include <gnutls/gnutls.h> /* All GnuTLS types, constants and
108
functions:
109
gnutls_*
110
init_gnutls_session(),
111
GNUTLS_* */
156
functions: gnutls_*, GNUTLS_* */
157
#if GNUTLS_VERSION_NUMBER < 0x030600
112
158
#include <gnutls/openpgp.h>
113
/* gnutls_certificate_set_openpgp_key_file(),
114
GNUTLS_OPENPGP_FMT_BASE64 */
159
/* gnutls_certificate_set_openpgp_key_file(),
160
GNUTLS_OPENPGP_FMT_BASE64 */
161
#elif GNUTLS_VERSION_NUMBER >= 0x030606
162
#include <gnutls/x509.h> /* GNUTLS_PKCS_PLAIN,
163
GNUTLS_PKCS_NULL_PASSWORD */
164
#endif
115
165
116
166
/* GPGME */
117
167
#include <gpgme.h> /* All GPGME types, constants and
118
168
functions:
119
gpgme_*
120
GPGME_PROTOCOL_OpenPGP,
121
GPG_ERR_NO_* */
169
gpgme_*, GPG_ERR_NO_*,
170
GPGME_IMPORT_*
171
GPGME_PROTOCOL_OpenPGP */
122
172
123
173
#define BUFFER_SIZE 256
124
174
125
175
#define PATHDIR "/conf/conf.d/mandos"
126
176
#define SECKEY "seckey.txt"
127
177
#define PUBKEY "pubkey.txt"
178
#define TLS_PRIVKEY "tls-privkey.pem"
179
#define TLS_PUBKEY "tls-pubkey.pem"
128
180
#define HOOKDIR "/lib/mandos/network-hooks.d"
129
181
130
182
bool debug = false;
133
185
const char *argp_program_bug_address = "<mandos@recompile.se>";
134
186
static const char sys_class_net[] = "/sys/class/net";
135
187
char *connect_to = NULL;
188
const char *hookdir = HOOKDIR;
189
int hookdir_fd = -1;
190
uid_t uid = 65534;
191
gid_t gid = 65534;
136
192
137
193
/* Doubly linked list that need to be circularly linked when used */
138
194
typedef struct server{
139
195
const char *ip;
140
uint16_t port;
196
in_port_t port;
141
197
AvahiIfIndex if_index;
142
198
int af;
143
199
struct timespec last_seen;
147
203
148
204
/* Used for passing in values through the Avahi callback functions */
149
205
typedef struct {
150
AvahiSimplePoll *simple_poll;
151
206
AvahiServer *server;
152
207
gnutls_certificate_credentials_t cred;
153
208
unsigned int dh_bits;
155
210
const char *priority;
156
211
gpgme_ctx_t ctx;
157
212
server *current_server;
213
char *interfaces;
214
size_t interfaces_size;
158
215
} mandos_context;
159
216
160
/* global context so signal handler can reach it*/
161
mandos_context mc = { .simple_poll = NULL, .server = NULL,
162
.dh_bits = 1024, .priority = "SECURE256"
163
":!CTYPE-X.509:+CTYPE-OPENPGP",
164
.current_server = NULL };
217
/* global so signal handler can reach it*/
218
AvahiSimplePoll *simple_poll;
165
219
166
220
sig_atomic_t quit_now = 0;
167
221
int signal_received = 0;
168
222
169
223
/* Function to use when printing errors */
170
224
void perror_plus(const char *print_text){
225
int e = errno;
171
226
fprintf(stderr, "Mandos plugin %s: ",
172
227
program_invocation_short_name);
228
errno = e;
173
229
perror(print_text);
174
230
}
175
231
232
__attribute__((format (gnu_printf, 2, 3), nonnull))
233
int fprintf_plus(FILE *stream, const char *format, ...){
234
va_list ap;
235
va_start (ap, format);
236
237
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
238
program_invocation_short_name));
239
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
240
}
241
176
242
/*
177
243
* Make additional room in "buffer" for at least BUFFER_SIZE more
178
244
* bytes. "buffer_capacity" is how much is currently allocated,
179
245
* "buffer_length" is how much is already used.
180
246
*/
247
__attribute__((nonnull, warn_unused_result))
181
248
size_t incbuffer(char **buffer, size_t buffer_length,
182
size_t buffer_capacity){
249
size_t buffer_capacity){
183
250
if(buffer_length + BUFFER_SIZE > buffer_capacity){
184
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
185
if(buffer == NULL){
251
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
252
if(new_buf == NULL){
253
int old_errno = errno;
254
free(*buffer);
255
errno = old_errno;
256
*buffer = NULL;
186
257
return 0;
187
258
}
259
*buffer = new_buf;
188
260
buffer_capacity += BUFFER_SIZE;
189
261
}
190
262
return buffer_capacity;
191
263
}
192
264
193
265
/* Add server to set of servers to retry periodically */
194
int add_server(const char *ip, uint16_t port,
195
AvahiIfIndex if_index,
196
int af){
266
__attribute__((nonnull, warn_unused_result))
267
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
268
int af, server **current_server){
197
269
int ret;
198
270
server *new_server = malloc(sizeof(server));
199
271
if(new_server == NULL){
200
272
perror_plus("malloc");
201
return -1;
273
return false;
202
274
}
203
275
*new_server = (server){ .ip = strdup(ip),
204
.port = port,
205
.if_index = if_index,
206
.af = af };
276
.port = port,
277
.if_index = if_index,
278
.af = af };
207
279
if(new_server->ip == NULL){
208
280
perror_plus("strdup");
209
return -1;
281
free(new_server);
282
return false;
283
}
284
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
285
if(ret == -1){
286
perror_plus("clock_gettime");
287
#ifdef __GNUC__
288
#pragma GCC diagnostic push
289
#pragma GCC diagnostic ignored "-Wcast-qual"
290
#endif
291
free((char *)(new_server->ip));
292
#ifdef __GNUC__
293
#pragma GCC diagnostic pop
294
#endif
295
free(new_server);
296
return false;
210
297
}
211
298
/* Special case of first server */
212
if (mc.current_server == NULL){
299
if(*current_server == NULL){
213
300
new_server->next = new_server;
214
301
new_server->prev = new_server;
215
mc.current_server = new_server;
216
/* Place the new server last in the list */
302
*current_server = new_server;
217
303
} else {
218
new_server->next = mc.current_server;
219
new_server->prev = mc.current_server->prev;
304
/* Place the new server last in the list */
305
new_server->next = *current_server;
306
new_server->prev = (*current_server)->prev;
220
307
new_server->prev->next = new_server;
221
mc.current_server->prev = new_server;
222
}
223
ret = clock_gettime(CLOCK_MONOTONIC, &mc.current_server->last_seen);
224
if(ret == -1){
225
perror_plus("clock_gettime");
226
return -1;
227
}
228
return 0;
308
(*current_server)->prev = new_server;
309
}
310
return true;
311
}
312
313
/* Set effective uid to 0, return errno */
314
__attribute__((warn_unused_result))
315
int raise_privileges(void){
316
int old_errno = errno;
317
int ret = 0;
318
if(seteuid(0) == -1){
319
ret = errno;
320
}
321
errno = old_errno;
322
return ret;
323
}
324
325
/* Set effective and real user ID to 0. Return errno. */
326
__attribute__((warn_unused_result))
327
int raise_privileges_permanently(void){
328
int old_errno = errno;
329
int ret = raise_privileges();
330
if(ret != 0){
331
errno = old_errno;
332
return ret;
333
}
334
if(setuid(0) == -1){
335
ret = errno;
336
}
337
errno = old_errno;
338
return ret;
339
}
340
341
/* Set effective user ID to unprivileged saved user ID */
342
__attribute__((warn_unused_result))
343
int lower_privileges(void){
344
int old_errno = errno;
345
int ret = 0;
346
if(seteuid(uid) == -1){
347
ret = errno;
348
}
349
errno = old_errno;
350
return ret;
351
}
352
353
/* Lower privileges permanently */
354
__attribute__((warn_unused_result))
355
int lower_privileges_permanently(void){
356
int old_errno = errno;
357
int ret = 0;
358
if(setuid(uid) == -1){
359
ret = errno;
360
}
361
errno = old_errno;
362
return ret;
229
363
}
230
364
231
365
/*
232
366
* Initialize GPGME.
233
367
*/
234
static bool init_gpgme(const char *seckey,
235
const char *pubkey, const char *tempdir){
368
__attribute__((nonnull, warn_unused_result))
369
static bool init_gpgme(const char * const seckey,
370
const char * const pubkey,
371
const char * const tempdir,
372
mandos_context *mc){
236
373
gpgme_error_t rc;
237
374
gpgme_engine_info_t engine_info;
238
375
239
240
376
/*
241
377
* Helper function to insert pub and seckey to the engine keyring.
242
378
*/
243
bool import_key(const char *filename){
379
bool import_key(const char * const filename){
244
380
int ret;
245
381
int fd;
246
382
gpgme_data_t pgp_data;
251
387
return false;
252
388
}
253
389
390
/* Workaround for systems without a real-time clock; see also
391
Debian bug #894495: <https://bugs.debian.org/894495> */
392
do {
393
{
394
time_t currtime = time(NULL);
395
if(currtime != (time_t)-1){
396
struct tm tm;
397
if(gmtime_r(&currtime, &tm) == NULL) {
398
perror_plus("gmtime_r");
399
break;
400
}
401
if(tm.tm_year != 70 or tm.tm_mon != 0){
402
break;
403
}
404
if(debug){
405
fprintf_plus(stderr, "System clock is January 1970");
406
}
407
} else {
408
if(debug){
409
fprintf_plus(stderr, "System clock is invalid");
410
}
411
}
412
}
413
struct stat keystat;
414
ret = fstat(fd, &keystat);
415
if(ret != 0){
416
perror_plus("fstat");
417
break;
418
}
419
ret = raise_privileges();
420
if(ret != 0){
421
errno = ret;
422
perror_plus("Failed to raise privileges");
423
break;
424
}
425
if(debug){
426
fprintf_plus(stderr,
427
"Setting system clock to key file mtime");
428
}
429
if(clock_settime(CLOCK_REALTIME, &keystat.st_mtim) != 0){
430
perror_plus("clock_settime");
431
}
432
ret = lower_privileges();
433
if(ret != 0){
434
errno = ret;
435
perror_plus("Failed to lower privileges");
436
}
437
} while(false);
438
254
439
rc = gpgme_data_new_from_fd(&pgp_data, fd);
255
440
if(rc != GPG_ERR_NO_ERROR){
256
fprintf(stderr, "Mandos plugin mandos-client: "
257
"bad gpgme_data_new_from_fd: %s: %s\n",
258
gpgme_strsource(rc), gpgme_strerror(rc));
441
fprintf_plus(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
442
gpgme_strsource(rc), gpgme_strerror(rc));
259
443
return false;
260
444
}
261
445
262
rc = gpgme_op_import(mc.ctx, pgp_data);
446
rc = gpgme_op_import(mc->ctx, pgp_data);
263
447
if(rc != GPG_ERR_NO_ERROR){
264
fprintf(stderr, "Mandos plugin mandos-client: "
265
"bad gpgme_op_import: %s: %s\n",
266
gpgme_strsource(rc), gpgme_strerror(rc));
448
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
449
gpgme_strsource(rc), gpgme_strerror(rc));
267
450
return false;
268
451
}
452
{
453
gpgme_import_result_t import_result
454
= gpgme_op_import_result(mc->ctx);
455
if((import_result->imported < 1
456
or import_result->not_imported > 0)
457
and import_result->unchanged == 0){
458
fprintf_plus(stderr, "bad gpgme_op_import_results:\n");
459
fprintf_plus(stderr,
460
"The total number of considered keys: %d\n",
461
import_result->considered);
462
fprintf_plus(stderr,
463
"The number of keys without user ID: %d\n",
464
import_result->no_user_id);
465
fprintf_plus(stderr,
466
"The total number of imported keys: %d\n",
467
import_result->imported);
468
fprintf_plus(stderr, "The number of imported RSA keys: %d\n",
469
import_result->imported_rsa);
470
fprintf_plus(stderr, "The number of unchanged keys: %d\n",
471
import_result->unchanged);
472
fprintf_plus(stderr, "The number of new user IDs: %d\n",
473
import_result->new_user_ids);
474
fprintf_plus(stderr, "The number of new sub keys: %d\n",
475
import_result->new_sub_keys);
476
fprintf_plus(stderr, "The number of new signatures: %d\n",
477
import_result->new_signatures);
478
fprintf_plus(stderr, "The number of new revocations: %d\n",
479
import_result->new_revocations);
480
fprintf_plus(stderr,
481
"The total number of secret keys read: %d\n",
482
import_result->secret_read);
483
fprintf_plus(stderr,
484
"The number of imported secret keys: %d\n",
485
import_result->secret_imported);
486
fprintf_plus(stderr,
487
"The number of unchanged secret keys: %d\n",
488
import_result->secret_unchanged);
489
fprintf_plus(stderr, "The number of keys not imported: %d\n",
490
import_result->not_imported);
491
for(gpgme_import_status_t import_status
492
= import_result->imports;
493
import_status != NULL;
494
import_status = import_status->next){
495
fprintf_plus(stderr, "Import status for key: %s\n",
496
import_status->fpr);
497
if(import_status->result != GPG_ERR_NO_ERROR){
498
fprintf_plus(stderr, "Import result: %s: %s\n",
499
gpgme_strsource(import_status->result),
500
gpgme_strerror(import_status->result));
501
}
502
fprintf_plus(stderr, "Key status:\n");
503
fprintf_plus(stderr,
504
import_status->status & GPGME_IMPORT_NEW
505
? "The key was new.\n"
506
: "The key was not new.\n");
507
fprintf_plus(stderr,
508
import_status->status & GPGME_IMPORT_UID
509
? "The key contained new user IDs.\n"
510
: "The key did not contain new user IDs.\n");
511
fprintf_plus(stderr,
512
import_status->status & GPGME_IMPORT_SIG
513
? "The key contained new signatures.\n"
514
: "The key did not contain new signatures.\n");
515
fprintf_plus(stderr,
516
import_status->status & GPGME_IMPORT_SUBKEY
517
? "The key contained new sub keys.\n"
518
: "The key did not contain new sub keys.\n");
519
fprintf_plus(stderr,
520
import_status->status & GPGME_IMPORT_SECRET
521
? "The key contained a secret key.\n"
522
: "The key did not contain a secret key.\n");
523
}
524
return false;
525
}
526
}
269
527
270
ret = (int)TEMP_FAILURE_RETRY(close(fd));
528
ret = close(fd);
271
529
if(ret == -1){
272
530
perror_plus("close");
273
531
}
276
534
}
277
535
278
536
if(debug){
279
fprintf(stderr, "Mandos plugin mandos-client: "
280
"Initializing GPGME\n");
537
fprintf_plus(stderr, "Initializing GPGME\n");
281
538
}
282
539
283
540
/* Init GPGME */
284
541
gpgme_check_version(NULL);
285
542
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
286
543
if(rc != GPG_ERR_NO_ERROR){
287
fprintf(stderr, "Mandos plugin mandos-client: "
288
"bad gpgme_engine_check_version: %s: %s\n",
289
gpgme_strsource(rc), gpgme_strerror(rc));
544
fprintf_plus(stderr, "bad gpgme_engine_check_version: %s: %s\n",
545
gpgme_strsource(rc), gpgme_strerror(rc));
290
546
return false;
291
547
}
292
548
293
549
/* Set GPGME home directory for the OpenPGP engine only */
294
550
rc = gpgme_get_engine_info(&engine_info);
295
551
if(rc != GPG_ERR_NO_ERROR){
296
fprintf(stderr, "Mandos plugin mandos-client: "
297
"bad gpgme_get_engine_info: %s: %s\n",
298
gpgme_strsource(rc), gpgme_strerror(rc));
552
fprintf_plus(stderr, "bad gpgme_get_engine_info: %s: %s\n",
553
gpgme_strsource(rc), gpgme_strerror(rc));
299
554
return false;
300
555
}
301
556
while(engine_info != NULL){
307
562
engine_info = engine_info->next;
308
563
}
309
564
if(engine_info == NULL){
310
fprintf(stderr, "Mandos plugin mandos-client: "
311
"Could not set GPGME home dir to %s\n", tempdir);
565
fprintf_plus(stderr, "Could not set GPGME home dir to %s\n",
566
tempdir);
312
567
return false;
313
568
}
314
569
315
570
/* Create new GPGME "context" */
316
rc = gpgme_new(&(mc.ctx));
571
rc = gpgme_new(&(mc->ctx));
317
572
if(rc != GPG_ERR_NO_ERROR){
318
fprintf(stderr, "Mandos plugin mandos-client: "
319
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
320
gpgme_strerror(rc));
573
fprintf_plus(stderr, "bad gpgme_new: %s: %s\n",
574
gpgme_strsource(rc), gpgme_strerror(rc));
321
575
return false;
322
576
}
323
577
332
586
* Decrypt OpenPGP data.
333
587
* Returns -1 on error
334
588
*/
589
__attribute__((nonnull, warn_unused_result))
335
590
static ssize_t pgp_packet_decrypt(const char *cryptotext,
336
591
size_t crypto_size,
337
char **plaintext){
592
char **plaintext,
593
mandos_context *mc){
338
594
gpgme_data_t dh_crypto, dh_plain;
339
595
gpgme_error_t rc;
340
596
ssize_t ret;
342
598
ssize_t plaintext_length = 0;
343
599
344
600
if(debug){
345
fprintf(stderr, "Mandos plugin mandos-client: "
346
"Trying to decrypt OpenPGP data\n");
601
fprintf_plus(stderr, "Trying to decrypt OpenPGP data\n");
347
602
}
348
603
349
604
/* Create new GPGME data buffer from memory cryptotext */
350
605
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
351
606
0);
352
607
if(rc != GPG_ERR_NO_ERROR){
353
fprintf(stderr, "Mandos plugin mandos-client: "
354
"bad gpgme_data_new_from_mem: %s: %s\n",
355
gpgme_strsource(rc), gpgme_strerror(rc));
608
fprintf_plus(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
609
gpgme_strsource(rc), gpgme_strerror(rc));
356
610
return -1;
357
611
}
358
612
359
613
/* Create new empty GPGME data buffer for the plaintext */
360
614
rc = gpgme_data_new(&dh_plain);
361
615
if(rc != GPG_ERR_NO_ERROR){
362
fprintf(stderr, "Mandos plugin mandos-client: "
363
"bad gpgme_data_new: %s: %s\n",
364
gpgme_strsource(rc), gpgme_strerror(rc));
616
fprintf_plus(stderr, "bad gpgme_data_new: %s: %s\n",
617
gpgme_strsource(rc), gpgme_strerror(rc));
365
618
gpgme_data_release(dh_crypto);
366
619
return -1;
367
620
}
368
621
369
622
/* Decrypt data from the cryptotext data buffer to the plaintext
370
623
data buffer */
371
rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
624
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
372
625
if(rc != GPG_ERR_NO_ERROR){
373
fprintf(stderr, "Mandos plugin mandos-client: "
374
"bad gpgme_op_decrypt: %s: %s\n",
375
gpgme_strsource(rc), gpgme_strerror(rc));
626
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
627
gpgme_strsource(rc), gpgme_strerror(rc));
376
628
plaintext_length = -1;
377
629
if(debug){
378
630
gpgme_decrypt_result_t result;
379
result = gpgme_op_decrypt_result(mc.ctx);
631
result = gpgme_op_decrypt_result(mc->ctx);
380
632
if(result == NULL){
381
fprintf(stderr, "Mandos plugin mandos-client: "
382
"gpgme_op_decrypt_result failed\n");
633
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
383
634
} else {
384
fprintf(stderr, "Mandos plugin mandos-client: "
385
"Unsupported algorithm: %s\n",
386
result->unsupported_algorithm);
387
fprintf(stderr, "Mandos plugin mandos-client: "
388
"Wrong key usage: %u\n",
389
result->wrong_key_usage);
635
if(result->unsupported_algorithm != NULL) {
636
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
637
result->unsupported_algorithm);
638
}
639
fprintf_plus(stderr, "Wrong key usage: %s\n",
640
result->wrong_key_usage ? "Yes" : "No");
390
641
if(result->file_name != NULL){
391
fprintf(stderr, "Mandos plugin mandos-client: "
392
"File name: %s\n", result->file_name);
642
fprintf_plus(stderr, "File name: %s\n", result->file_name);
393
643
}
394
gpgme_recipient_t recipient;
395
recipient = result->recipients;
396
while(recipient != NULL){
397
fprintf(stderr, "Mandos plugin mandos-client: "
398
"Public key algorithm: %s\n",
399
gpgme_pubkey_algo_name(recipient->pubkey_algo));
400
fprintf(stderr, "Mandos plugin mandos-client: "
401
"Key ID: %s\n", recipient->keyid);
402
fprintf(stderr, "Mandos plugin mandos-client: "
403
"Secret key available: %s\n",
404
recipient->status == GPG_ERR_NO_SECKEY
405
? "No" : "Yes");
406
recipient = recipient->next;
644
645
for(gpgme_recipient_t r = result->recipients; r != NULL;
646
r = r->next){
647
fprintf_plus(stderr, "Public key algorithm: %s\n",
648
gpgme_pubkey_algo_name(r->pubkey_algo));
649
fprintf_plus(stderr, "Key ID: %s\n", r->keyid);
650
fprintf_plus(stderr, "Secret key available: %s\n",
651
r->status == GPG_ERR_NO_SECKEY ? "No" : "Yes");
407
652
}
408
653
}
409
654
}
411
656
}
412
657
413
658
if(debug){
414
fprintf(stderr, "Mandos plugin mandos-client: "
415
"Decryption of OpenPGP data succeeded\n");
659
fprintf_plus(stderr, "Decryption of OpenPGP data succeeded\n");
416
660
}
417
661
418
662
/* Seek back to the beginning of the GPGME plaintext data buffer */
425
669
*plaintext = NULL;
426
670
while(true){
427
671
plaintext_capacity = incbuffer(plaintext,
428
(size_t)plaintext_length,
429
plaintext_capacity);
672
(size_t)plaintext_length,
673
plaintext_capacity);
430
674
if(plaintext_capacity == 0){
431
perror_plus("incbuffer");
432
plaintext_length = -1;
433
goto decrypt_end;
675
perror_plus("incbuffer");
676
plaintext_length = -1;
677
goto decrypt_end;
434
678
}
435
679
436
680
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
449
693
}
450
694
451
695
if(debug){
452
fprintf(stderr, "Mandos plugin mandos-client: "
453
"Decrypted password is: ");
696
fprintf_plus(stderr, "Decrypted password is: ");
454
697
for(ssize_t i = 0; i < plaintext_length; i++){
455
698
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
456
699
}
467
710
return plaintext_length;
468
711
}
469
712
470
static const char * safer_gnutls_strerror(int value){
471
const char *ret = gnutls_strerror(value); /* Spurious warning from
472
-Wunreachable-code */
473
if(ret == NULL)
474
ret = "(unknown)";
475
return ret;
713
__attribute__((warn_unused_result, const))
714
static const char *safe_string(const char *str){
715
if(str == NULL)
716
return "(unknown)";
717
return str;
718
}
719
720
__attribute__((warn_unused_result))
721
static const char *safer_gnutls_strerror(int value){
722
const char *ret = gnutls_strerror(value);
723
return safe_string(ret);
476
724
}
477
725
478
726
/* GnuTLS log function callback */
727
__attribute__((nonnull))
479
728
static void debuggnutls(__attribute__((unused)) int level,
480
729
const char* string){
481
fprintf(stderr, "Mandos plugin mandos-client: GnuTLS: %s", string);
730
fprintf_plus(stderr, "GnuTLS: %s", string);
482
731
}
483
732
733
__attribute__((nonnull(1, 2, 4), warn_unused_result))
484
734
static int init_gnutls_global(const char *pubkeyfilename,
485
const char *seckeyfilename){
735
const char *seckeyfilename,
736
const char *dhparamsfilename,
737
mandos_context *mc){
486
738
int ret;
487
739
488
740
if(debug){
489
fprintf(stderr, "Mandos plugin mandos-client: "
490
"Initializing GnuTLS\n");
491
}
492
493
ret = gnutls_global_init();
494
if(ret != GNUTLS_E_SUCCESS){
495
fprintf(stderr, "Mandos plugin mandos-client: "
496
"GnuTLS global_init: %s\n", safer_gnutls_strerror(ret));
497
return -1;
741
fprintf_plus(stderr, "Initializing GnuTLS\n");
498
742
}
499
743
500
744
if(debug){
506
750
}
507
751
508
752
/* OpenPGP credentials */
509
ret = gnutls_certificate_allocate_credentials(&mc.cred);
753
ret = gnutls_certificate_allocate_credentials(&mc->cred);
510
754
if(ret != GNUTLS_E_SUCCESS){
511
fprintf(stderr, "Mandos plugin mandos-client: "
512
"GnuTLS memory error: %s\n", safer_gnutls_strerror(ret));
513
gnutls_global_deinit();
755
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
756
safer_gnutls_strerror(ret));
514
757
return -1;
515
758
}
516
759
517
760
if(debug){
518
fprintf(stderr, "Mandos plugin mandos-client: "
519
"Attempting to use OpenPGP public key %s and"
520
" secret key %s as GnuTLS credentials\n", pubkeyfilename,
521
seckeyfilename);
761
fprintf_plus(stderr, "Attempting to use public key %s and"
762
" private key %s as GnuTLS credentials\n",
763
pubkeyfilename,
764
seckeyfilename);
522
765
}
523
766
767
#if GNUTLS_VERSION_NUMBER >= 0x030606
768
ret = gnutls_certificate_set_rawpk_key_file
769
(mc->cred, pubkeyfilename, seckeyfilename,
770
GNUTLS_X509_FMT_PEM, /* format */
771
NULL, /* pass */
772
/* key_usage */
773
GNUTLS_KEY_DIGITAL_SIGNATURE | GNUTLS_KEY_KEY_ENCIPHERMENT,
774
NULL, /* names */
775
0, /* names_length */
776
/* privkey_flags */
777
GNUTLS_PKCS_PLAIN | GNUTLS_PKCS_NULL_PASSWORD,
778
0); /* pkcs11_flags */
779
#elif GNUTLS_VERSION_NUMBER < 0x030600
524
780
ret = gnutls_certificate_set_openpgp_key_file
525
(mc.cred, pubkeyfilename, seckeyfilename,
781
(mc->cred, pubkeyfilename, seckeyfilename,
526
782
GNUTLS_OPENPGP_FMT_BASE64);
783
#else
784
#error "Needs GnuTLS 3.6.6 or later, or before 3.6.0"
785
#endif
527
786
if(ret != GNUTLS_E_SUCCESS){
528
fprintf(stderr,
529
"Mandos plugin mandos-client: "
530
"Error[%d] while reading the OpenPGP key pair ('%s',"
531
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
532
fprintf(stderr, "Mandos plugin mandos-client: "
533
"The GnuTLS error is: %s\n", safer_gnutls_strerror(ret));
787
fprintf_plus(stderr,
788
"Error[%d] while reading the key pair ('%s',"
789
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
790
fprintf_plus(stderr, "The GnuTLS error is: %s\n",
791
safer_gnutls_strerror(ret));
534
792
goto globalfail;
535
793
}
536
794
537
795
/* GnuTLS server initialization */
538
ret = gnutls_dh_params_init(&mc.dh_params);
539
if(ret != GNUTLS_E_SUCCESS){
540
fprintf(stderr, "Mandos plugin mandos-client: "
541
"Error in GnuTLS DH parameter initialization:"
542
" %s\n", safer_gnutls_strerror(ret));
543
goto globalfail;
544
}
545
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
546
if(ret != GNUTLS_E_SUCCESS){
547
fprintf(stderr, "Mandos plugin mandos-client: "
548
"Error in GnuTLS prime generation: %s\n",
549
safer_gnutls_strerror(ret));
550
goto globalfail;
551
}
552
553
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
796
ret = gnutls_dh_params_init(&mc->dh_params);
797
if(ret != GNUTLS_E_SUCCESS){
798
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
799
" initialization: %s\n",
800
safer_gnutls_strerror(ret));
801
goto globalfail;
802
}
803
/* If a Diffie-Hellman parameters file was given, try to use it */
804
if(dhparamsfilename != NULL){
805
gnutls_datum_t params = { .data = NULL, .size = 0 };
806
do {
807
int dhpfile = open(dhparamsfilename, O_RDONLY);
808
if(dhpfile == -1){
809
perror_plus("open");
810
dhparamsfilename = NULL;
811
break;
812
}
813
size_t params_capacity = 0;
814
while(true){
815
params_capacity = incbuffer((char **)¶ms.data,
816
(size_t)params.size,
817
(size_t)params_capacity);
818
if(params_capacity == 0){
819
perror_plus("incbuffer");
820
free(params.data);
821
params.data = NULL;
822
dhparamsfilename = NULL;
823
break;
824
}
825
ssize_t bytes_read = read(dhpfile,
826
params.data + params.size,
827
BUFFER_SIZE);
828
/* EOF */
829
if(bytes_read == 0){
830
break;
831
}
832
/* check bytes_read for failure */
833
if(bytes_read < 0){
834
perror_plus("read");
835
free(params.data);
836
params.data = NULL;
837
dhparamsfilename = NULL;
838
break;
839
}
840
params.size += (unsigned int)bytes_read;
841
}
842
ret = close(dhpfile);
843
if(ret == -1){
844
perror_plus("close");
845
}
846
if(params.data == NULL){
847
dhparamsfilename = NULL;
848
}
849
if(dhparamsfilename == NULL){
850
break;
851
}
852
ret = gnutls_dh_params_import_pkcs3(mc->dh_params, ¶ms,
853
GNUTLS_X509_FMT_PEM);
854
if(ret != GNUTLS_E_SUCCESS){
855
fprintf_plus(stderr, "Failed to parse DH parameters in file"
856
" \"%s\": %s\n", dhparamsfilename,
857
safer_gnutls_strerror(ret));
858
dhparamsfilename = NULL;
859
}
860
free(params.data);
861
} while(false);
862
}
863
if(dhparamsfilename == NULL){
864
if(mc->dh_bits == 0){
865
#if GNUTLS_VERSION_NUMBER < 0x030600
866
/* Find out the optimal number of DH bits */
867
/* Try to read the private key file */
868
gnutls_datum_t buffer = { .data = NULL, .size = 0 };
869
do {
870
int secfile = open(seckeyfilename, O_RDONLY);
871
if(secfile == -1){
872
perror_plus("open");
873
break;
874
}
875
size_t buffer_capacity = 0;
876
while(true){
877
buffer_capacity = incbuffer((char **)&buffer.data,
878
(size_t)buffer.size,
879
(size_t)buffer_capacity);
880
if(buffer_capacity == 0){
881
perror_plus("incbuffer");
882
free(buffer.data);
883
buffer.data = NULL;
884
break;
885
}
886
ssize_t bytes_read = read(secfile,
887
buffer.data + buffer.size,
888
BUFFER_SIZE);
889
/* EOF */
890
if(bytes_read == 0){
891
break;
892
}
893
/* check bytes_read for failure */
894
if(bytes_read < 0){
895
perror_plus("read");
896
free(buffer.data);
897
buffer.data = NULL;
898
break;
899
}
900
buffer.size += (unsigned int)bytes_read;
901
}
902
close(secfile);
903
} while(false);
904
/* If successful, use buffer to parse private key */
905
gnutls_sec_param_t sec_param = GNUTLS_SEC_PARAM_ULTRA;
906
if(buffer.data != NULL){
907
{
908
gnutls_openpgp_privkey_t privkey = NULL;
909
ret = gnutls_openpgp_privkey_init(&privkey);
910
if(ret != GNUTLS_E_SUCCESS){
911
fprintf_plus(stderr, "Error initializing OpenPGP key"
912
" structure: %s",
913
safer_gnutls_strerror(ret));
914
free(buffer.data);
915
buffer.data = NULL;
916
} else {
917
ret = gnutls_openpgp_privkey_import
918
(privkey, &buffer, GNUTLS_OPENPGP_FMT_BASE64, "", 0);
919
if(ret != GNUTLS_E_SUCCESS){
920
fprintf_plus(stderr, "Error importing OpenPGP key : %s",
921
safer_gnutls_strerror(ret));
922
privkey = NULL;
923
}
924
free(buffer.data);
925
buffer.data = NULL;
926
if(privkey != NULL){
927
/* Use private key to suggest an appropriate
928
sec_param */
929
sec_param = gnutls_openpgp_privkey_sec_param(privkey);
930
gnutls_openpgp_privkey_deinit(privkey);
931
if(debug){
932
fprintf_plus(stderr, "This OpenPGP key implies using"
933
" a GnuTLS security parameter \"%s\".\n",
934
safe_string(gnutls_sec_param_get_name
935
(sec_param)));
936
}
937
}
938
}
939
}
940
if(sec_param == GNUTLS_SEC_PARAM_UNKNOWN){
941
/* Err on the side of caution */
942
sec_param = GNUTLS_SEC_PARAM_ULTRA;
943
if(debug){
944
fprintf_plus(stderr, "Falling back to security parameter"
945
" \"%s\"\n",
946
safe_string(gnutls_sec_param_get_name
947
(sec_param)));
948
}
949
}
950
}
951
unsigned int uret = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, sec_param);
952
if(uret != 0){
953
mc->dh_bits = uret;
954
if(debug){
955
fprintf_plus(stderr, "A \"%s\" GnuTLS security parameter"
956
" implies %u DH bits; using that.\n",
957
safe_string(gnutls_sec_param_get_name
958
(sec_param)),
959
mc->dh_bits);
960
}
961
} else {
962
fprintf_plus(stderr, "Failed to get implied number of DH"
963
" bits for security parameter \"%s\"): %s\n",
964
safe_string(gnutls_sec_param_get_name
965
(sec_param)),
966
safer_gnutls_strerror(ret));
967
goto globalfail;
968
}
969
#endif
970
} else { /* dh_bits != 0 */
971
if(debug){
972
fprintf_plus(stderr, "DH bits explicitly set to %u\n",
973
mc->dh_bits);
974
}
975
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
976
if(ret != GNUTLS_E_SUCCESS){
977
fprintf_plus(stderr, "Error in GnuTLS prime generation (%u"
978
" bits): %s\n", mc->dh_bits,
979
safer_gnutls_strerror(ret));
980
goto globalfail;
981
}
982
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
983
}
984
}
554
985
555
986
return 0;
556
987
557
988
globalfail:
558
989
559
gnutls_certificate_free_credentials(mc.cred);
560
gnutls_global_deinit();
561
gnutls_dh_params_deinit(mc.dh_params);
990
gnutls_certificate_free_credentials(mc->cred);
991
gnutls_dh_params_deinit(mc->dh_params);
562
992
return -1;
563
993
}
564
994
565
static int init_gnutls_session(gnutls_session_t *session){
995
__attribute__((nonnull, warn_unused_result))
996
static int init_gnutls_session(gnutls_session_t *session,
997
mandos_context *mc){
566
998
int ret;
567
999
/* GnuTLS session creation */
568
1000
do {
569
ret = gnutls_init(session, GNUTLS_SERVER);
1001
ret = gnutls_init(session, (GNUTLS_SERVER
1002
#if GNUTLS_VERSION_NUMBER >= 0x030506
1003
| GNUTLS_NO_TICKETS
1004
#endif
1005
#if GNUTLS_VERSION_NUMBER >= 0x030606
1006
| GNUTLS_ENABLE_RAWPK
1007
#endif
1008
));
570
1009
if(quit_now){
571
1010
return -1;
572
1011
}
573
1012
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
574
1013
if(ret != GNUTLS_E_SUCCESS){
575
fprintf(stderr, "Mandos plugin mandos-client: "
576
"Error in GnuTLS session initialization: %s\n",
577
safer_gnutls_strerror(ret));
1014
fprintf_plus(stderr,
1015
"Error in GnuTLS session initialization: %s\n",
1016
safer_gnutls_strerror(ret));
578
1017
}
579
1018
580
1019
{
581
1020
const char *err;
582
1021
do {
583
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
1022
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
584
1023
if(quit_now){
585
1024
gnutls_deinit(*session);
586
1025
return -1;
587
1026
}
588
1027
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
589
1028
if(ret != GNUTLS_E_SUCCESS){
590
fprintf(stderr, "Mandos plugin mandos-client: "
591
"Syntax error at: %s\n", err);
592
fprintf(stderr, "Mandos plugin mandos-client: "
593
"GnuTLS error: %s\n", safer_gnutls_strerror(ret));
1029
fprintf_plus(stderr, "Syntax error at: %s\n", err);
1030
fprintf_plus(stderr, "GnuTLS error: %s\n",
1031
safer_gnutls_strerror(ret));
594
1032
gnutls_deinit(*session);
595
1033
return -1;
596
1034
}
598
1036
599
1037
do {
600
1038
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
601
mc.cred);
1039
mc->cred);
602
1040
if(quit_now){
603
1041
gnutls_deinit(*session);
604
1042
return -1;
605
1043
}
606
1044
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
607
1045
if(ret != GNUTLS_E_SUCCESS){
608
fprintf(stderr, "Mandos plugin mandos-client: "
609
"Error setting GnuTLS credentials: %s\n",
610
safer_gnutls_strerror(ret));
1046
fprintf_plus(stderr, "Error setting GnuTLS credentials: %s\n",
1047
safer_gnutls_strerror(ret));
611
1048
gnutls_deinit(*session);
612
1049
return -1;
613
1050
}
615
1052
/* ignore client certificate if any. */
616
1053
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
617
1054
618
gnutls_dh_set_prime_bits(*session, mc.dh_bits);
619
620
1055
return 0;
621
1056
}
622
1057
624
1059
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
625
1060
__attribute__((unused)) const char *txt){}
626
1061
1062
/* Helper function to add_local_route() and delete_local_route() */
1063
__attribute__((nonnull, warn_unused_result))
1064
static bool add_delete_local_route(const bool add,
1065
const char *address,
1066
AvahiIfIndex if_index){
1067
int ret;
1068
char helper[] = "mandos-client-iprouteadddel";
1069
char add_arg[] = "add";
1070
char delete_arg[] = "delete";
1071
char debug_flag[] = "--debug";
1072
char *pluginhelperdir = getenv("MANDOSPLUGINHELPERDIR");
1073
if(pluginhelperdir == NULL){
1074
if(debug){
1075
fprintf_plus(stderr, "MANDOSPLUGINHELPERDIR environment"
1076
" variable not set; cannot run helper\n");
1077
}
1078
return false;
1079
}
1080
1081
char interface[IF_NAMESIZE];
1082
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1083
perror_plus("if_indextoname");
1084
return false;
1085
}
1086
1087
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1088
if(devnull == -1){
1089
perror_plus("open(\"/dev/null\", O_RDONLY)");
1090
return false;
1091
}
1092
pid_t pid = fork();
1093
if(pid == 0){
1094
/* Child */
1095
/* Raise privileges */
1096
errno = raise_privileges_permanently();
1097
if(errno != 0){
1098
perror_plus("Failed to raise privileges");
1099
/* _exit(EX_NOPERM); */
1100
} else {
1101
/* Set group */
1102
errno = 0;
1103
ret = setgid(0);
1104
if(ret == -1){
1105
perror_plus("setgid");
1106
close(devnull);
1107
_exit(EX_NOPERM);
1108
}
1109
/* Reset supplementary groups */
1110
errno = 0;
1111
ret = setgroups(0, NULL);
1112
if(ret == -1){
1113
perror_plus("setgroups");
1114
close(devnull);
1115
_exit(EX_NOPERM);
1116
}
1117
}
1118
ret = dup2(devnull, STDIN_FILENO);
1119
if(ret == -1){
1120
perror_plus("dup2(devnull, STDIN_FILENO)");
1121
close(devnull);
1122
_exit(EX_OSERR);
1123
}
1124
ret = close(devnull);
1125
if(ret == -1){
1126
perror_plus("close");
1127
}
1128
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1129
if(ret == -1){
1130
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1131
_exit(EX_OSERR);
1132
}
1133
int helperdir_fd = (int)TEMP_FAILURE_RETRY(open(pluginhelperdir,
1134
O_RDONLY
1135
| O_DIRECTORY
1136
| O_PATH
1137
| O_CLOEXEC));
1138
if(helperdir_fd == -1){
1139
perror_plus("open");
1140
_exit(EX_UNAVAILABLE);
1141
}
1142
int helper_fd = (int)TEMP_FAILURE_RETRY(openat(helperdir_fd,
1143
helper, O_RDONLY));
1144
if(helper_fd == -1){
1145
perror_plus("openat");
1146
close(helperdir_fd);
1147
_exit(EX_UNAVAILABLE);
1148
}
1149
close(helperdir_fd);
1150
#ifdef __GNUC__
1151
#pragma GCC diagnostic push
1152
#pragma GCC diagnostic ignored "-Wcast-qual"
1153
#endif
1154
if(fexecve(helper_fd, (char *const [])
1155
{ helper, add ? add_arg : delete_arg, (char *)address,
1156
interface, debug ? debug_flag : NULL, NULL },
1157
environ) == -1){
1158
#ifdef __GNUC__
1159
#pragma GCC diagnostic pop
1160
#endif
1161
perror_plus("fexecve");
1162
_exit(EXIT_FAILURE);
1163
}
1164
}
1165
if(pid == -1){
1166
perror_plus("fork");
1167
close(devnull);
1168
return false;
1169
}
1170
ret = close(devnull);
1171
if(ret == -1){
1172
perror_plus("close");
1173
}
1174
int status;
1175
pid_t pret = -1;
1176
errno = 0;
1177
do {
1178
pret = waitpid(pid, &status, 0);
1179
if(pret == -1 and errno == EINTR and quit_now){
1180
int errno_raising = 0;
1181
if((errno = raise_privileges()) != 0){
1182
errno_raising = errno;
1183
perror_plus("Failed to raise privileges in order to"
1184
" kill helper program");
1185
}
1186
if(kill(pid, SIGTERM) == -1){
1187
perror_plus("kill");
1188
}
1189
if((errno_raising == 0) and (errno = lower_privileges()) != 0){
1190
perror_plus("Failed to lower privileges after killing"
1191
" helper program");
1192
}
1193
return false;
1194
}
1195
} while(pret == -1 and errno == EINTR);
1196
if(pret == -1){
1197
perror_plus("waitpid");
1198
return false;
1199
}
1200
if(WIFEXITED(status)){
1201
if(WEXITSTATUS(status) != 0){
1202
fprintf_plus(stderr, "Error: iprouteadddel exited"
1203
" with status %d\n", WEXITSTATUS(status));
1204
return false;
1205
}
1206
return true;
1207
}
1208
if(WIFSIGNALED(status)){
1209
fprintf_plus(stderr, "Error: iprouteadddel died by"
1210
" signal %d\n", WTERMSIG(status));
1211
return false;
1212
}
1213
fprintf_plus(stderr, "Error: iprouteadddel crashed\n");
1214
return false;
1215
}
1216
1217
__attribute__((nonnull, warn_unused_result))
1218
static bool add_local_route(const char *address,
1219
AvahiIfIndex if_index){
1220
if(debug){
1221
fprintf_plus(stderr, "Adding route to %s\n", address);
1222
}
1223
return add_delete_local_route(true, address, if_index);
1224
}
1225
1226
__attribute__((nonnull, warn_unused_result))
1227
static bool delete_local_route(const char *address,
1228
AvahiIfIndex if_index){
1229
if(debug){
1230
fprintf_plus(stderr, "Removing route to %s\n", address);
1231
}
1232
return add_delete_local_route(false, address, if_index);
1233
}
1234
627
1235
/* Called when a Mandos server is found */
628
static int start_mandos_communication(const char *ip, uint16_t port,
1236
__attribute__((nonnull, warn_unused_result))
1237
static int start_mandos_communication(const char *ip, in_port_t port,
629
1238
AvahiIfIndex if_index,
630
int af){
1239
int af, mandos_context *mc){
631
1240
int ret, tcp_sd = -1;
632
1241
ssize_t sret;
633
union {
634
struct sockaddr_in in;
635
struct sockaddr_in6 in6;
636
} to;
1242
struct sockaddr_storage to;
637
1243
char *buffer = NULL;
638
1244
char *decrypted_buffer = NULL;
639
1245
size_t buffer_length = 0;
642
1248
int retval = -1;
643
1249
gnutls_session_t session;
644
1250
int pf; /* Protocol family */
1251
bool route_added = false;
645
1252
646
1253
errno = 0;
647
1254
658
1265
pf = PF_INET;
659
1266
break;
660
1267
default:
661
fprintf(stderr, "Mandos plugin mandos-client: "
662
"Bad address family: %d\n", af);
1268
fprintf_plus(stderr, "Bad address family: %d\n", af);
663
1269
errno = EINVAL;
664
1270
return -1;
665
1271
}
666
1272
667
ret = init_gnutls_session(&session);
1273
/* If the interface is specified and we have a list of interfaces */
1274
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
1275
/* Check if the interface is one of the interfaces we are using */
1276
bool match = false;
1277
{
1278
char *interface = NULL;
1279
while((interface = argz_next(mc->interfaces,
1280
mc->interfaces_size,
1281
interface))){
1282
if(if_nametoindex(interface) == (unsigned int)if_index){
1283
match = true;
1284
break;
1285
}
1286
}
1287
}
1288
if(not match){
1289
/* This interface does not match any in the list, so we don't
1290
connect to the server */
1291
if(debug){
1292
char interface[IF_NAMESIZE];
1293
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1294
perror_plus("if_indextoname");
1295
} else {
1296
fprintf_plus(stderr, "Skipping server on non-used interface"
1297
" \"%s\"\n",
1298
if_indextoname((unsigned int)if_index,
1299
interface));
1300
}
1301
}
1302
return -1;
1303
}
1304
}
1305
1306
ret = init_gnutls_session(&session, mc);
668
1307
if(ret != 0){
669
1308
return -1;
670
1309
}
671
1310
672
1311
if(debug){
673
fprintf(stderr, "Mandos plugin mandos-client: "
674
"Setting up a TCP connection to %s, port %" PRIu16
675
"\n", ip, port);
1312
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
1313
PRIuMAX "\n", ip, (uintmax_t)port);
676
1314
}
677
1315
678
tcp_sd = socket(pf, SOCK_STREAM, 0);
1316
tcp_sd = socket(pf, SOCK_STREAM | SOCK_CLOEXEC, 0);
679
1317
if(tcp_sd < 0){
680
1318
int e = errno;
681
1319
perror_plus("socket");
688
1326
goto mandos_end;
689
1327
}
690
1328
691
memset(&to, 0, sizeof(to));
692
1329
if(af == AF_INET6){
693
to.in6.sin6_family = (sa_family_t)af;
694
ret = inet_pton(af, ip, &to.in6.sin6_addr);
1330
struct sockaddr_in6 *to6 = (struct sockaddr_in6 *)&to;
1331
*to6 = (struct sockaddr_in6){ .sin6_family = (sa_family_t)af };
1332
ret = inet_pton(af, ip, &to6->sin6_addr);
695
1333
} else { /* IPv4 */
696
to.in.sin_family = (sa_family_t)af;
697
ret = inet_pton(af, ip, &to.in.sin_addr);
1334
struct sockaddr_in *to4 = (struct sockaddr_in *)&to;
1335
*to4 = (struct sockaddr_in){ .sin_family = (sa_family_t)af };
1336
ret = inet_pton(af, ip, &to4->sin_addr);
698
1337
}
699
1338
if(ret < 0 ){
700
1339
int e = errno;
704
1343
}
705
1344
if(ret == 0){
706
1345
int e = errno;
707
fprintf(stderr, "Mandos plugin mandos-client: "
708
"Bad address: %s\n", ip);
1346
fprintf_plus(stderr, "Bad address: %s\n", ip);
709
1347
errno = e;
710
1348
goto mandos_end;
711
1349
}
712
1350
if(af == AF_INET6){
713
to.in6.sin6_port = htons(port); /* Spurious warnings from
714
-Wconversion and
715
-Wunreachable-code */
716
717
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
718
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
719
-Wunreachable-code*/
1351
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
1352
if(IN6_IS_ADDR_LINKLOCAL
1353
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
720
1354
if(if_index == AVAHI_IF_UNSPEC){
721
fprintf(stderr, "Mandos plugin mandos-client: "
722
"An IPv6 link-local address is incomplete"
723
" without a network interface\n");
1355
fprintf_plus(stderr, "An IPv6 link-local address is"
1356
" incomplete without a network interface\n");
724
1357
errno = EINVAL;
725
1358
goto mandos_end;
726
1359
}
727
1360
/* Set the network interface number as scope */
728
to.in6.sin6_scope_id = (uint32_t)if_index;
1361
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
729
1362
}
730
1363
} else {
731
to.in.sin_port = htons(port); /* Spurious warnings from
732
-Wconversion and
733
-Wunreachable-code */
1364
((struct sockaddr_in *)&to)->sin_port = htons(port);
734
1365
}
735
1366
736
1367
if(quit_now){
744
1375
if(if_indextoname((unsigned int)if_index, interface) == NULL){
745
1376
perror_plus("if_indextoname");
746
1377
} else {
747
fprintf(stderr, "Mandos plugin mandos-client: "
748
"Connection to: %s%%%s, port %" PRIu16 "\n",
749
ip, interface, port);
1378
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
1379
"\n", ip, interface, (uintmax_t)port);
750
1380
}
751
1381
} else {
752
fprintf(stderr, "Mandos plugin mandos-client: "
753
"Connection to: %s, port %" PRIu16 "\n", ip, port);
1382
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
1383
ip, (uintmax_t)port);
754
1384
}
755
1385
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
756
1386
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
757
const char *pcret;
758
if(af == AF_INET6){
759
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
760
sizeof(addrstr));
761
} else {
762
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
763
sizeof(addrstr));
764
}
765
if(pcret == NULL){
766
perror_plus("inet_ntop");
767
} else {
768
if(strcmp(addrstr, ip) != 0){
769
fprintf(stderr, "Mandos plugin mandos-client: "
770
"Canonical address form: %s\n", addrstr);
771
}
772
}
773
}
774
775
if(quit_now){
776
errno = EINTR;
777
goto mandos_end;
778
}
779
780
if(af == AF_INET6){
781
ret = connect(tcp_sd, &to.in6, sizeof(to));
782
} else {
783
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
784
}
785
if(ret < 0){
786
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
787
int e = errno;
788
perror_plus("connect");
789
errno = e;
790
}
791
goto mandos_end;
792
}
793
794
if(quit_now){
795
errno = EINTR;
796
goto mandos_end;
1387
if(af == AF_INET6){
1388
ret = getnameinfo((struct sockaddr *)&to,
1389
sizeof(struct sockaddr_in6),
1390
addrstr, sizeof(addrstr), NULL, 0,
1391
NI_NUMERICHOST);
1392
} else {
1393
ret = getnameinfo((struct sockaddr *)&to,
1394
sizeof(struct sockaddr_in),
1395
addrstr, sizeof(addrstr), NULL, 0,
1396
NI_NUMERICHOST);
1397
}
1398
if(ret == EAI_SYSTEM){
1399
perror_plus("getnameinfo");
1400
} else if(ret != 0) {
1401
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
1402
} else if(strcmp(addrstr, ip) != 0){
1403
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
1404
}
1405
}
1406
1407
if(quit_now){
1408
errno = EINTR;
1409
goto mandos_end;
1410
}
1411
1412
while(true){
1413
if(af == AF_INET6){
1414
ret = connect(tcp_sd, (struct sockaddr *)&to,
1415
sizeof(struct sockaddr_in6));
1416
} else {
1417
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
1418
sizeof(struct sockaddr_in));
1419
}
1420
if(ret < 0){
1421
if(((errno == ENETUNREACH) or (errno == EHOSTUNREACH))
1422
and if_index != AVAHI_IF_UNSPEC
1423
and connect_to == NULL
1424
and not route_added and
1425
((af == AF_INET6 and not
1426
IN6_IS_ADDR_LINKLOCAL(&(((struct sockaddr_in6 *)
1427
&to)->sin6_addr)))
1428
or (af == AF_INET and
1429
/* Not a a IPv4LL address */
1430
(ntohl(((struct sockaddr_in *)&to)->sin_addr.s_addr)
1431
& 0xFFFF0000L) != 0xA9FE0000L))){
1432
/* Work around Avahi bug - Avahi does not announce link-local
1433
addresses if it has a global address, so local hosts with
1434
*only* a link-local address (e.g. Mandos clients) cannot
1435
connect to a Mandos server announced by Avahi on a server
1436
host with a global address. Work around this by retrying
1437
with an explicit route added with the server's address.
1438
1439
Avahi bug reference:
1440
https://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1441
https://bugs.debian.org/587961
1442
*/
1443
if(debug){
1444
fprintf_plus(stderr, "Mandos server unreachable, trying"
1445
" direct route\n");
1446
}
1447
int e = errno;
1448
route_added = add_local_route(ip, if_index);
1449
if(route_added){
1450
continue;
1451
}
1452
errno = e;
1453
}
1454
if(errno != ECONNREFUSED or debug){
1455
int e = errno;
1456
perror_plus("connect");
1457
errno = e;
1458
}
1459
goto mandos_end;
1460
}
1461
1462
if(quit_now){
1463
errno = EINTR;
1464
goto mandos_end;
1465
}
1466
break;
797
1467
}
798
1468
799
1469
const char *out = mandos_protocol_version;
801
1471
while(true){
802
1472
size_t out_size = strlen(out);
803
1473
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
804
out_size - written));
1474
out_size - written));
805
1475
if(ret == -1){
806
1476
int e = errno;
807
1477
perror_plus("write");
827
1497
}
828
1498
829
1499
if(debug){
830
fprintf(stderr, "Mandos plugin mandos-client: "
831
"Establishing TLS session with %s\n", ip);
1500
fprintf_plus(stderr, "Establishing TLS session with %s\n", ip);
832
1501
}
833
1502
834
1503
if(quit_now){
836
1505
goto mandos_end;
837
1506
}
838
1507
839
/* Spurious warning from -Wint-to-pointer-cast */
840
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
1508
/* This casting via intptr_t is to eliminate warning about casting
1509
an int to a pointer type. This is exactly how the GnuTLS Guile
1510
function "set-session-transport-fd!" does it. */
1511
gnutls_transport_set_ptr(session,
1512
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
841
1513
842
1514
if(quit_now){
843
1515
errno = EINTR;
854
1526
855
1527
if(ret != GNUTLS_E_SUCCESS){
856
1528
if(debug){
857
fprintf(stderr, "Mandos plugin mandos-client: "
858
"*** GnuTLS Handshake failed ***\n");
1529
fprintf_plus(stderr, "*** GnuTLS Handshake failed ***\n");
859
1530
gnutls_perror(ret);
860
1531
}
861
1532
errno = EPROTO;
865
1536
/* Read OpenPGP packet that contains the wanted password */
866
1537
867
1538
if(debug){
868
fprintf(stderr, "Mandos plugin mandos-client: "
869
"Retrieving OpenPGP encrypted password from %s\n", ip);
1539
fprintf_plus(stderr, "Retrieving OpenPGP encrypted password from"
1540
" %s\n", ip);
870
1541
}
871
1542
872
1543
while(true){
877
1548
}
878
1549
879
1550
buffer_capacity = incbuffer(&buffer, buffer_length,
880
buffer_capacity);
1551
buffer_capacity);
881
1552
if(buffer_capacity == 0){
882
1553
int e = errno;
883
1554
perror_plus("incbuffer");
910
1581
}
911
1582
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
912
1583
if(ret < 0){
913
fprintf(stderr, "Mandos plugin mandos-client: "
914
"*** GnuTLS Re-handshake failed ***\n");
1584
fprintf_plus(stderr, "*** GnuTLS Re-handshake failed "
1585
"***\n");
915
1586
gnutls_perror(ret);
916
1587
errno = EPROTO;
917
1588
goto mandos_end;
918
1589
}
919
1590
break;
920
1591
default:
921
fprintf(stderr, "Mandos plugin mandos-client: "
922
"Unknown error while reading data from"
923
" encrypted session with Mandos server\n");
1592
fprintf_plus(stderr, "Unknown error while reading data from"
1593
" encrypted session with Mandos server\n");
924
1594
gnutls_bye(session, GNUTLS_SHUT_RDWR);
925
1595
errno = EIO;
926
1596
goto mandos_end;
931
1601
}
932
1602
933
1603
if(debug){
934
fprintf(stderr, "Mandos plugin mandos-client: "
935
"Closing TLS session\n");
1604
fprintf_plus(stderr, "Closing TLS session\n");
936
1605
}
937
1606
938
1607
if(quit_now){
950
1619
951
1620
if(buffer_length > 0){
952
1621
ssize_t decrypted_buffer_size;
953
decrypted_buffer_size = pgp_packet_decrypt(buffer,
954
buffer_length,
955
&decrypted_buffer);
1622
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
1623
&decrypted_buffer, mc);
956
1624
if(decrypted_buffer_size >= 0){
957
1625
1626
clearerr(stdout);
958
1627
written = 0;
959
1628
while(written < (size_t) decrypted_buffer_size){
960
1629
if(quit_now){
968
1637
if(ret == 0 and ferror(stdout)){
969
1638
int e = errno;
970
1639
if(debug){
971
fprintf(stderr, "Mandos plugin mandos-client: "
972
"Error writing encrypted data: %s\n",
973
strerror(errno));
1640
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1641
strerror(errno));
974
1642
}
975
1643
errno = e;
976
1644
goto mandos_end;
977
1645
}
978
1646
written += (size_t)ret;
979
1647
}
1648
ret = fflush(stdout);
1649
if(ret != 0){
1650
int e = errno;
1651
if(debug){
1652
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1653
strerror(errno));
1654
}
1655
errno = e;
1656
goto mandos_end;
1657
}
980
1658
retval = 0;
981
1659
}
982
1660
}
985
1663
986
1664
mandos_end:
987
1665
{
1666
if(route_added){
1667
if(not delete_local_route(ip, if_index)){
1668
fprintf_plus(stderr, "Failed to delete local route to %s on"
1669
" interface %d", ip, if_index);
1670
}
1671
}
988
1672
int e = errno;
989
1673
free(decrypted_buffer);
990
1674
free(buffer);
991
1675
if(tcp_sd >= 0){
992
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
1676
ret = close(tcp_sd);
993
1677
}
994
1678
if(ret == -1){
995
1679
if(e == 0){
1020
1704
AVAHI_GCC_UNUSED AvahiStringList *txt,
1021
1705
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1022
1706
flags,
1023
AVAHI_GCC_UNUSED void* userdata){
1024
assert(r);
1707
void *mc){
1708
if(r == NULL){
1709
return;
1710
}
1025
1711
1026
1712
/* Called whenever a service has been resolved successfully or
1027
1713
timed out */
1028
1714
1029
1715
if(quit_now){
1716
avahi_s_service_resolver_free(r);
1030
1717
return;
1031
1718
}
1032
1719
1033
1720
switch(event){
1034
1721
default:
1035
1722
case AVAHI_RESOLVER_FAILURE:
1036
fprintf(stderr, "Mandos plugin mandos-client: "
1037
"(Avahi Resolver) Failed to resolve service '%s'"
1038
" of type '%s' in domain '%s': %s\n", name, type, domain,
1039
avahi_strerror(avahi_server_errno(mc.server)));
1723
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1724
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1725
domain,
1726
avahi_strerror(avahi_server_errno
1727
(((mandos_context*)mc)->server)));
1040
1728
break;
1041
1729
1042
1730
case AVAHI_RESOLVER_FOUND:
1044
1732
char ip[AVAHI_ADDRESS_STR_MAX];
1045
1733
avahi_address_snprint(ip, sizeof(ip), address);
1046
1734
if(debug){
1047
fprintf(stderr, "Mandos plugin mandos-client: "
1048
"Mandos server \"%s\" found on %s (%s, %"
1049
PRIdMAX ") on port %" PRIu16 "\n", name, host_name,
1050
ip, (intmax_t)interface, port);
1735
fprintf_plus(stderr, "Mandos server \"%s\" found on %s (%s, %"
1736
PRIdMAX ") on port %" PRIu16 "\n", name,
1737
host_name, ip, (intmax_t)interface, port);
1051
1738
}
1052
int ret = start_mandos_communication(ip, port, interface,
1053
avahi_proto_to_af(proto));
1739
int ret = start_mandos_communication(ip, (in_port_t)port,
1740
interface,
1741
avahi_proto_to_af(proto),
1742
mc);
1054
1743
if(ret == 0){
1055
avahi_simple_poll_quit(mc.simple_poll);
1744
avahi_simple_poll_quit(simple_poll);
1056
1745
} else {
1057
ret = add_server(ip, port, interface,
1058
avahi_proto_to_af(proto));
1746
if(not add_server(ip, (in_port_t)port, interface,
1747
avahi_proto_to_af(proto),
1748
&((mandos_context*)mc)->current_server)){
1749
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1750
" list\n", name);
1751
}
1059
1752
}
1060
1753
}
1061
1754
}
1071
1764
const char *domain,
1072
1765
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1073
1766
flags,
1074
AVAHI_GCC_UNUSED void* userdata){
1075
assert(b);
1767
void *mc){
1768
if(b == NULL){
1769
return;
1770
}
1076
1771
1077
1772
/* Called whenever a new services becomes available on the LAN or
1078
1773
is removed from the LAN */
1085
1780
default:
1086
1781
case AVAHI_BROWSER_FAILURE:
1087
1782
1088
fprintf(stderr, "Mandos plugin mandos-client: "
1089
"(Avahi browser) %s\n",
1090
avahi_strerror(avahi_server_errno(mc.server)));
1091
avahi_simple_poll_quit(mc.simple_poll);
1783
fprintf_plus(stderr, "(Avahi browser) %s\n",
1784
avahi_strerror(avahi_server_errno
1785
(((mandos_context*)mc)->server)));
1786
avahi_simple_poll_quit(simple_poll);
1092
1787
return;
1093
1788
1094
1789
case AVAHI_BROWSER_NEW:
1097
1792
the callback function is called the Avahi server will free the
1098
1793
resolver for us. */
1099
1794
1100
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
1101
name, type, domain, protocol, 0,
1102
resolve_callback, NULL) == NULL)
1103
fprintf(stderr, "Mandos plugin mandos-client: "
1104
"Avahi: Failed to resolve service '%s': %s\n",
1105
name, avahi_strerror(avahi_server_errno(mc.server)));
1795
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1796
interface, protocol, name, type,
1797
domain, protocol, 0,
1798
resolve_callback, mc) == NULL)
1799
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1800
" %s\n", name,
1801
avahi_strerror(avahi_server_errno
1802
(((mandos_context*)mc)->server)));
1106
1803
break;
1107
1804
1108
1805
case AVAHI_BROWSER_REMOVE:
1111
1808
case AVAHI_BROWSER_ALL_FOR_NOW:
1112
1809
case AVAHI_BROWSER_CACHE_EXHAUSTED:
1113
1810
if(debug){
1114
fprintf(stderr, "Mandos plugin mandos-client: "
1115
"No Mandos server found, still searching...\n");
1811
fprintf_plus(stderr, "No Mandos server found, still"
1812
" searching...\n");
1116
1813
}
1117
1814
break;
1118
1815
}
1127
1824
signal_received = sig;
1128
1825
int old_errno = errno;
1129
1826
/* set main loop to exit */
1130
if(mc.simple_poll != NULL){
1131
avahi_simple_poll_quit(mc.simple_poll);
1827
if(simple_poll != NULL){
1828
avahi_simple_poll_quit(simple_poll);
1132
1829
}
1133
1830
errno = old_errno;
1134
1831
}
1135
1832
1833
__attribute__((nonnull, warn_unused_result))
1136
1834
bool get_flags(const char *ifname, struct ifreq *ifr){
1137
1835
int ret;
1836
int old_errno;
1138
1837
1139
1838
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1140
1839
if(s < 0){
1840
old_errno = errno;
1141
1841
perror_plus("socket");
1842
errno = old_errno;
1142
1843
return false;
1143
1844
}
1144
strcpy(ifr->ifr_name, ifname);
1845
strncpy(ifr->ifr_name, ifname, IF_NAMESIZE);
1846
ifr->ifr_name[IF_NAMESIZE-1] = '\0'; /* NUL terminate */
1145
1847
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1146
1848
if(ret == -1){
1147
1849
if(debug){
1850
old_errno = errno;
1148
1851
perror_plus("ioctl SIOCGIFFLAGS");
1852
errno = old_errno;
1853
}
1854
if((close(s) == -1) and debug){
1855
old_errno = errno;
1856
perror_plus("close");
1857
errno = old_errno;
1149
1858
}
1150
1859
return false;
1151
1860
}
1861
if((close(s) == -1) and debug){
1862
old_errno = errno;
1863
perror_plus("close");
1864
errno = old_errno;
1865
}
1152
1866
return true;
1153
1867
}
1154
1868
1869
__attribute__((nonnull, warn_unused_result))
1155
1870
bool good_flags(const char *ifname, const struct ifreq *ifr){
1156
1871
1157
1872
/* Reject the loopback device */
1158
1873
if(ifr->ifr_flags & IFF_LOOPBACK){
1159
1874
if(debug){
1160
fprintf(stderr, "Mandos plugin mandos-client: "
1161
"Rejecting loopback interface \"%s\"\n", ifname);
1875
fprintf_plus(stderr, "Rejecting loopback interface \"%s\"\n",
1876
ifname);
1162
1877
}
1163
1878
return false;
1164
1879
}
1165
1880
/* Accept point-to-point devices only if connect_to is specified */
1166
1881
if(connect_to != NULL and (ifr->ifr_flags & IFF_POINTOPOINT)){
1167
1882
if(debug){
1168
fprintf(stderr, "Mandos plugin mandos-client: "
1169
"Accepting point-to-point interface \"%s\"\n", ifname);
1883
fprintf_plus(stderr, "Accepting point-to-point interface"
1884
" \"%s\"\n", ifname);
1170
1885
}
1171
1886
return true;
1172
1887
}
1173
1888
/* Otherwise, reject non-broadcast-capable devices */
1174
1889
if(not (ifr->ifr_flags & IFF_BROADCAST)){
1175
1890
if(debug){
1176
fprintf(stderr, "Mandos plugin mandos-client: "
1177
"Rejecting non-broadcast interface \"%s\"\n", ifname);
1891
fprintf_plus(stderr, "Rejecting non-broadcast interface"
1892
" \"%s\"\n", ifname);
1178
1893
}
1179
1894
return false;
1180
1895
}
1181
1896
/* Reject non-ARP interfaces (including dummy interfaces) */
1182
1897
if(ifr->ifr_flags & IFF_NOARP){
1183
1898
if(debug){
1184
fprintf(stderr, "Mandos plugin mandos-client: "
1185
"Rejecting non-ARP interface \"%s\"\n", ifname);
1899
fprintf_plus(stderr, "Rejecting non-ARP interface \"%s\"\n",
1900
ifname);
1186
1901
}
1187
1902
return false;
1188
1903
}
1189
1904
1190
1905
/* Accept this device */
1191
1906
if(debug){
1192
fprintf(stderr, "Mandos plugin mandos-client: "
1193
"Interface \"%s\" is good\n", ifname);
1907
fprintf_plus(stderr, "Interface \"%s\" is good\n", ifname);
1194
1908
}
1195
1909
return true;
1196
1910
}
1200
1914
* corresponds to an acceptable network device.
1201
1915
* (This function is passed to scandir(3) as a filter function.)
1202
1916
*/
1917
__attribute__((nonnull, warn_unused_result))
1203
1918
int good_interface(const struct dirent *if_entry){
1204
1919
if(if_entry->d_name[0] == '.'){
1205
1920
return 0;
1208
1923
struct ifreq ifr;
1209
1924
if(not get_flags(if_entry->d_name, &ifr)){
1210
1925
if(debug){
1211
fprintf(stderr, "Mandos plugin mandos-client: "
1212
"Failed to get flags for interface \"%s\"\n",
1213
if_entry->d_name);
1214
}
1215
return 0;
1216
}
1217
1218
if(not good_flags(if_entry->d_name, &ifr)){
1219
return 0;
1220
}
1221
return 1;
1222
}
1223
1224
/*
1225
* This function determines if a directory entry in /sys/class/net
1226
* corresponds to an acceptable network device which is up.
1227
* (This function is passed to scandir(3) as a filter function.)
1228
*/
1229
int up_interface(const struct dirent *if_entry){
1230
if(if_entry->d_name[0] == '.'){
1231
return 0;
1232
}
1233
1234
struct ifreq ifr;
1235
if(not get_flags(if_entry->d_name, &ifr)){
1236
if(debug){
1237
fprintf(stderr, "Mandos plugin mandos-client: "
1238
"Failed to get flags for interface \"%s\"\n",
1239
if_entry->d_name);
1240
}
1241
return 0;
1242
}
1243
1244
/* Reject down interfaces */
1245
if(not (ifr.ifr_flags & IFF_UP)){
1246
if(debug){
1247
fprintf(stderr, "Mandos plugin mandos-client: "
1248
"Rejecting down interface \"%s\"\n",
1249
if_entry->d_name);
1250
}
1251
return 0;
1252
}
1253
1254
/* Reject non-running interfaces */
1255
if(not (ifr.ifr_flags & IFF_RUNNING)){
1256
if(debug){
1257
fprintf(stderr, "Mandos plugin mandos-client: "
1258
"Rejecting non-running interface \"%s\"\n",
1259
if_entry->d_name);
1260
}
1261
return 0;
1262
}
1263
1264
if(not good_flags(if_entry->d_name, &ifr)){
1265
return 0;
1266
}
1267
return 1;
1268
}
1269
1926
fprintf_plus(stderr, "Failed to get flags for interface "
1927
"\"%s\"\n", if_entry->d_name);
1928
}
1929
return 0;
1930
}
1931
1932
if(not good_flags(if_entry->d_name, &ifr)){
1933
return 0;
1934
}
1935
return 1;
1936
}
1937
1938
/*
1939
* This function determines if a network interface is up.
1940
*/
1941
__attribute__((nonnull, warn_unused_result))
1942
bool interface_is_up(const char *interface){
1943
struct ifreq ifr;
1944
if(not get_flags(interface, &ifr)){
1945
if(debug){
1946
fprintf_plus(stderr, "Failed to get flags for interface "
1947
"\"%s\"\n", interface);
1948
}
1949
return false;
1950
}
1951
1952
return (bool)(ifr.ifr_flags & IFF_UP);
1953
}
1954
1955
/*
1956
* This function determines if a network interface is running
1957
*/
1958
__attribute__((nonnull, warn_unused_result))
1959
bool interface_is_running(const char *interface){
1960
struct ifreq ifr;
1961
if(not get_flags(interface, &ifr)){
1962
if(debug){
1963
fprintf_plus(stderr, "Failed to get flags for interface "
1964
"\"%s\"\n", interface);
1965
}
1966
return false;
1967
}
1968
1969
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1970
}
1971
1972
__attribute__((nonnull, pure, warn_unused_result))
1270
1973
int notdotentries(const struct dirent *direntry){
1271
1974
/* Skip "." and ".." */
1272
1975
if(direntry->d_name[0] == '.'
1279
1982
}
1280
1983
1281
1984
/* Is this directory entry a runnable program? */
1985
__attribute__((nonnull, warn_unused_result))
1282
1986
int runnable_hook(const struct dirent *direntry){
1283
1987
int ret;
1988
size_t sret;
1284
1989
struct stat st;
1285
1990
1286
1991
if((direntry->d_name)[0] == '\0'){
1288
1993
return 0;
1289
1994
}
1290
1995
1291
/* Save pointer to last character */
1292
char *end = strchr(direntry->d_name, '\0')-1;
1293
1294
if(*end == '~'){
1295
/* Backup name~ */
1296
return 0;
1297
}
1298
1299
if(((direntry->d_name)[0] == '#')
1300
and (*end == '#')){
1301
/* Temporary #name# */
1302
return 0;
1303
}
1304
1305
/* XXX more rules here */
1306
1307
ret = stat(direntry->d_name, &st);
1996
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1997
"abcdefghijklmnopqrstuvwxyz"
1998
"0123456789"
1999
"_.-");
2000
if((direntry->d_name)[sret] != '\0'){
2001
/* Contains non-allowed characters */
2002
if(debug){
2003
fprintf_plus(stderr, "Ignoring hook \"%s\" with bad name\n",
2004
direntry->d_name);
2005
}
2006
return 0;
2007
}
2008
2009
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1308
2010
if(ret == -1){
1309
2011
if(debug){
1310
perror_plus("Could not stat plugin");
2012
perror_plus("Could not stat hook");
1311
2013
}
1312
2014
return 0;
1313
2015
}
1314
2016
if(not (S_ISREG(st.st_mode))){
1315
2017
/* Not a regular file */
2018
if(debug){
2019
fprintf_plus(stderr, "Ignoring hook \"%s\" - not a file\n",
2020
direntry->d_name);
2021
}
1316
2022
return 0;
1317
2023
}
1318
2024
if(not (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))){
1319
2025
/* Not executable */
2026
if(debug){
2027
fprintf_plus(stderr, "Ignoring hook \"%s\" - not executable\n",
2028
direntry->d_name);
2029
}
1320
2030
return 0;
1321
2031
}
2032
if(debug){
2033
fprintf_plus(stderr, "Hook \"%s\" is acceptable\n",
2034
direntry->d_name);
2035
}
1322
2036
return 1;
1323
2037
}
1324
2038
1325
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval){
2039
__attribute__((nonnull, warn_unused_result))
2040
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
2041
mandos_context *mc){
1326
2042
int ret;
1327
2043
struct timespec now;
1328
2044
struct timespec waited_time;
1329
2045
intmax_t block_time;
1330
2046
1331
2047
while(true){
1332
if(mc.current_server == NULL){
1333
if (debug){
1334
fprintf(stderr, "Mandos plugin mandos-client: "
1335
"Wait until first server is found. No timeout!\n");
2048
if(mc->current_server == NULL){
2049
if(debug){
2050
fprintf_plus(stderr, "Wait until first server is found."
2051
" No timeout!\n");
1336
2052
}
1337
2053
ret = avahi_simple_poll_iterate(s, -1);
1338
2054
} else {
1339
if (debug){
1340
fprintf(stderr, "Mandos plugin mandos-client: "
1341
"Check current_server if we should run it,"
1342
" or wait\n");
2055
if(debug){
2056
fprintf_plus(stderr, "Check current_server if we should run"
2057
" it, or wait\n");
1343
2058
}
1344
2059
/* the current time */
1345
2060
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1350
2065
/* Calculating in ms how long time between now and server
1351
2066
who we visted longest time ago. Now - last seen. */
1352
2067
waited_time.tv_sec = (now.tv_sec
1353
- mc.current_server->last_seen.tv_sec);
2068
- mc->current_server->last_seen.tv_sec);
1354
2069
waited_time.tv_nsec = (now.tv_nsec
1355
- mc.current_server->last_seen.tv_nsec);
2070
- mc->current_server->last_seen.tv_nsec);
1356
2071
/* total time is 10s/10,000ms.
1357
2072
Converting to s from ms by dividing by 1,000,
1358
2073
and ns to ms by dividing by 1,000,000. */
1360
2075
- ((intmax_t)waited_time.tv_sec * 1000))
1361
2076
- ((intmax_t)waited_time.tv_nsec / 1000000));
1362
2077
1363
if (debug){
1364
fprintf(stderr, "Mandos plugin mandos-client: "
1365
"Blocking for %" PRIdMAX " ms\n", block_time);
2078
if(debug){
2079
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
2080
block_time);
1366
2081
}
1367
2082
1368
2083
if(block_time <= 0){
1369
ret = start_mandos_communication(mc.current_server->ip,
1370
mc.current_server->port,
1371
mc.current_server->if_index,
1372
mc.current_server->af);
2084
ret = start_mandos_communication(mc->current_server->ip,
2085
mc->current_server->port,
2086
mc->current_server->if_index,
2087
mc->current_server->af, mc);
1373
2088
if(ret == 0){
1374
avahi_simple_poll_quit(mc.simple_poll);
2089
avahi_simple_poll_quit(s);
1375
2090
return 0;
1376
2091
}
1377
2092
ret = clock_gettime(CLOCK_MONOTONIC,
1378
&mc.current_server->last_seen);
2093
&mc->current_server->last_seen);
1379
2094
if(ret == -1){
1380
2095
perror_plus("clock_gettime");
1381
2096
return -1;
1382
2097
}
1383
mc.current_server = mc.current_server->next;
2098
mc->current_server = mc->current_server->next;
1384
2099
block_time = 0; /* Call avahi to find new Mandos
1385
2100
servers, but don't block */
1386
2101
}
1388
2103
ret = avahi_simple_poll_iterate(s, (int)block_time);
1389
2104
}
1390
2105
if(ret != 0){
1391
if (ret > 0 or errno != EINTR){
2106
if(ret > 0 or errno != EINTR){
1392
2107
return (ret != 1) ? ret : 0;
1393
2108
}
1394
2109
}
1395
2110
}
1396
2111
}
1397
2112
2113
__attribute__((nonnull))
2114
void run_network_hooks(const char *mode, const char *interface,
2115
const float delay){
2116
struct dirent **direntries = NULL;
2117
if(hookdir_fd == -1){
2118
hookdir_fd = open(hookdir, O_RDONLY | O_DIRECTORY | O_PATH
2119
| O_CLOEXEC);
2120
if(hookdir_fd == -1){
2121
if(errno == ENOENT){
2122
if(debug){
2123
fprintf_plus(stderr, "Network hook directory \"%s\" not"
2124
" found\n", hookdir);
2125
}
2126
} else {
2127
perror_plus("open");
2128
}
2129
return;
2130
}
2131
}
2132
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
2133
if(devnull == -1){
2134
perror_plus("open(\"/dev/null\", O_RDONLY)");
2135
return;
2136
}
2137
int numhooks = scandirat(hookdir_fd, ".", &direntries,
2138
runnable_hook, alphasort);
2139
if(numhooks == -1){
2140
perror_plus("scandir");
2141
close(devnull);
2142
return;
2143
}
2144
struct dirent *direntry;
2145
int ret;
2146
for(int i = 0; i < numhooks; i++){
2147
direntry = direntries[i];
2148
if(debug){
2149
fprintf_plus(stderr, "Running network hook \"%s\"\n",
2150
direntry->d_name);
2151
}
2152
pid_t hook_pid = fork();
2153
if(hook_pid == 0){
2154
/* Child */
2155
/* Raise privileges */
2156
errno = raise_privileges_permanently();
2157
if(errno != 0){
2158
perror_plus("Failed to raise privileges");
2159
_exit(EX_NOPERM);
2160
}
2161
/* Set group */
2162
errno = 0;
2163
ret = setgid(0);
2164
if(ret == -1){
2165
perror_plus("setgid");
2166
_exit(EX_NOPERM);
2167
}
2168
/* Reset supplementary groups */
2169
errno = 0;
2170
ret = setgroups(0, NULL);
2171
if(ret == -1){
2172
perror_plus("setgroups");
2173
_exit(EX_NOPERM);
2174
}
2175
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
2176
if(ret == -1){
2177
perror_plus("setenv");
2178
_exit(EX_OSERR);
2179
}
2180
ret = setenv("DEVICE", interface, 1);
2181
if(ret == -1){
2182
perror_plus("setenv");
2183
_exit(EX_OSERR);
2184
}
2185
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
2186
if(ret == -1){
2187
perror_plus("setenv");
2188
_exit(EX_OSERR);
2189
}
2190
ret = setenv("MODE", mode, 1);
2191
if(ret == -1){
2192
perror_plus("setenv");
2193
_exit(EX_OSERR);
2194
}
2195
char *delaystring;
2196
ret = asprintf(&delaystring, "%f", (double)delay);
2197
if(ret == -1){
2198
perror_plus("asprintf");
2199
_exit(EX_OSERR);
2200
}
2201
ret = setenv("DELAY", delaystring, 1);
2202
if(ret == -1){
2203
free(delaystring);
2204
perror_plus("setenv");
2205
_exit(EX_OSERR);
2206
}
2207
free(delaystring);
2208
if(connect_to != NULL){
2209
ret = setenv("CONNECT", connect_to, 1);
2210
if(ret == -1){
2211
perror_plus("setenv");
2212
_exit(EX_OSERR);
2213
}
2214
}
2215
int hook_fd = (int)TEMP_FAILURE_RETRY(openat(hookdir_fd,
2216
direntry->d_name,
2217
O_RDONLY));
2218
if(hook_fd == -1){
2219
perror_plus("openat");
2220
_exit(EXIT_FAILURE);
2221
}
2222
if(close(hookdir_fd) == -1){
2223
perror_plus("close");
2224
_exit(EXIT_FAILURE);
2225
}
2226
ret = dup2(devnull, STDIN_FILENO);
2227
if(ret == -1){
2228
perror_plus("dup2(devnull, STDIN_FILENO)");
2229
_exit(EX_OSERR);
2230
}
2231
ret = close(devnull);
2232
if(ret == -1){
2233
perror_plus("close");
2234
_exit(EX_OSERR);
2235
}
2236
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
2237
if(ret == -1){
2238
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
2239
_exit(EX_OSERR);
2240
}
2241
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
2242
environ) == -1){
2243
perror_plus("fexecve");
2244
_exit(EXIT_FAILURE);
2245
}
2246
} else {
2247
if(hook_pid == -1){
2248
perror_plus("fork");
2249
free(direntry);
2250
continue;
2251
}
2252
int status;
2253
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
2254
perror_plus("waitpid");
2255
free(direntry);
2256
continue;
2257
}
2258
if(WIFEXITED(status)){
2259
if(WEXITSTATUS(status) != 0){
2260
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
2261
" with status %d\n", direntry->d_name,
2262
WEXITSTATUS(status));
2263
free(direntry);
2264
continue;
2265
}
2266
} else if(WIFSIGNALED(status)){
2267
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
2268
" signal %d\n", direntry->d_name,
2269
WTERMSIG(status));
2270
free(direntry);
2271
continue;
2272
} else {
2273
fprintf_plus(stderr, "Warning: network hook \"%s\""
2274
" crashed\n", direntry->d_name);
2275
free(direntry);
2276
continue;
2277
}
2278
}
2279
if(debug){
2280
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
2281
direntry->d_name);
2282
}
2283
free(direntry);
2284
}
2285
free(direntries);
2286
if(close(hookdir_fd) == -1){
2287
perror_plus("close");
2288
} else {
2289
hookdir_fd = -1;
2290
}
2291
close(devnull);
2292
}
2293
2294
__attribute__((nonnull, warn_unused_result))
2295
int bring_up_interface(const char *const interface,
2296
const float delay){
2297
int old_errno = errno;
2298
int ret;
2299
struct ifreq network;
2300
unsigned int if_index = if_nametoindex(interface);
2301
if(if_index == 0){
2302
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2303
errno = old_errno;
2304
return ENXIO;
2305
}
2306
2307
if(quit_now){
2308
errno = old_errno;
2309
return EINTR;
2310
}
2311
2312
if(not interface_is_up(interface)){
2313
int ret_errno = 0;
2314
int ioctl_errno = 0;
2315
if(not get_flags(interface, &network)){
2316
ret_errno = errno;
2317
fprintf_plus(stderr, "Failed to get flags for interface "
2318
"\"%s\"\n", interface);
2319
errno = old_errno;
2320
return ret_errno;
2321
}
2322
network.ifr_flags |= IFF_UP; /* set flag */
2323
2324
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2325
if(sd == -1){
2326
ret_errno = errno;
2327
perror_plus("socket");
2328
errno = old_errno;
2329
return ret_errno;
2330
}
2331
2332
if(quit_now){
2333
ret = close(sd);
2334
if(ret == -1){
2335
perror_plus("close");
2336
}
2337
errno = old_errno;
2338
return EINTR;
2339
}
2340
2341
if(debug){
2342
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
2343
interface);
2344
}
2345
2346
/* Raise privileges */
2347
ret_errno = raise_privileges();
2348
if(ret_errno != 0){
2349
errno = ret_errno;
2350
perror_plus("Failed to raise privileges");
2351
}
2352
2353
#ifdef __linux__
2354
int ret_linux;
2355
bool restore_loglevel = false;
2356
if(ret_errno == 0){
2357
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
2358
messages about the network interface to mess up the prompt */
2359
ret_linux = klogctl(8, NULL, 5);
2360
if(ret_linux == -1){
2361
perror_plus("klogctl");
2362
} else {
2363
restore_loglevel = true;
2364
}
2365
}
2366
#endif /* __linux__ */
2367
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2368
ioctl_errno = errno;
2369
#ifdef __linux__
2370
if(restore_loglevel){
2371
ret_linux = klogctl(7, NULL, 0);
2372
if(ret_linux == -1){
2373
perror_plus("klogctl");
2374
}
2375
}
2376
#endif /* __linux__ */
2377
2378
/* If raise_privileges() succeeded above */
2379
if(ret_errno == 0){
2380
/* Lower privileges */
2381
ret_errno = lower_privileges();
2382
if(ret_errno != 0){
2383
errno = ret_errno;
2384
perror_plus("Failed to lower privileges");
2385
}
2386
}
2387
2388
/* Close the socket */
2389
ret = close(sd);
2390
if(ret == -1){
2391
perror_plus("close");
2392
}
2393
2394
if(ret_setflags == -1){
2395
errno = ioctl_errno;
2396
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
2397
errno = old_errno;
2398
return ioctl_errno;
2399
}
2400
} else if(debug){
2401
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
2402
interface);
2403
}
2404
2405
/* Sleep checking until interface is running.
2406
Check every 0.25s, up to total time of delay */
2407
for(int i = 0; i < delay * 4; i++){
2408
if(interface_is_running(interface)){
2409
break;
2410
}
2411
struct timespec sleeptime = { .tv_nsec = 250000000 };
2412
ret = nanosleep(&sleeptime, NULL);
2413
if(ret == -1 and errno != EINTR){
2414
perror_plus("nanosleep");
2415
}
2416
}
2417
2418
errno = old_errno;
2419
return 0;
2420
}
2421
2422
__attribute__((nonnull, warn_unused_result))
2423
int take_down_interface(const char *const interface){
2424
int old_errno = errno;
2425
struct ifreq network;
2426
unsigned int if_index = if_nametoindex(interface);
2427
if(if_index == 0){
2428
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2429
errno = old_errno;
2430
return ENXIO;
2431
}
2432
if(interface_is_up(interface)){
2433
int ret_errno = 0;
2434
int ioctl_errno = 0;
2435
if(not get_flags(interface, &network) and debug){
2436
ret_errno = errno;
2437
fprintf_plus(stderr, "Failed to get flags for interface "
2438
"\"%s\"\n", interface);
2439
errno = old_errno;
2440
return ret_errno;
2441
}
2442
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2443
2444
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2445
if(sd == -1){
2446
ret_errno = errno;
2447
perror_plus("socket");
2448
errno = old_errno;
2449
return ret_errno;
2450
}
2451
2452
if(debug){
2453
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
2454
interface);
2455
}
2456
2457
/* Raise privileges */
2458
ret_errno = raise_privileges();
2459
if(ret_errno != 0){
2460
errno = ret_errno;
2461
perror_plus("Failed to raise privileges");
2462
}
2463
2464
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2465
ioctl_errno = errno;
2466
2467
/* If raise_privileges() succeeded above */
2468
if(ret_errno == 0){
2469
/* Lower privileges */
2470
ret_errno = lower_privileges();
2471
if(ret_errno != 0){
2472
errno = ret_errno;
2473
perror_plus("Failed to lower privileges");
2474
}
2475
}
2476
2477
/* Close the socket */
2478
int ret = close(sd);
2479
if(ret == -1){
2480
perror_plus("close");
2481
}
2482
2483
if(ret_setflags == -1){
2484
errno = ioctl_errno;
2485
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2486
errno = old_errno;
2487
return ioctl_errno;
2488
}
2489
} else if(debug){
2490
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
2491
interface);
2492
}
2493
2494
errno = old_errno;
2495
return 0;
2496
}
2497
1398
2498
int main(int argc, char *argv[]){
2499
mandos_context mc = { .server = NULL, .dh_bits = 0,
2500
#if GNUTLS_VERSION_NUMBER >= 0x030606
2501
.priority = "SECURE128:!CTYPE-X.509"
2502
":+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3"
2503
":%PROFILE_ULTRA",
2504
#elif GNUTLS_VERSION_NUMBER < 0x030600
2505
.priority = "SECURE256:!CTYPE-X.509"
2506
":+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256",
2507
#else
2508
#error "Needs GnuTLS 3.6.6 or later, or before 3.6.0"
2509
#endif
2510
.current_server = NULL, .interfaces = NULL,
2511
.interfaces_size = 0 };
1399
2512
AvahiSServiceBrowser *sb = NULL;
1400
int error;
2513
error_t ret_errno;
1401
2514
int ret;
1402
2515
intmax_t tmpmax;
1403
2516
char *tmp;
1404
2517
int exitcode = EXIT_SUCCESS;
1405
const char *interface = "";
1406
struct ifreq network;
1407
int sd = -1;
1408
bool take_down_interface = false;
1409
uid_t uid;
1410
gid_t gid;
1411
char tempdir[] = "/tmp/mandosXXXXXX";
1412
bool tempdir_created = false;
2518
char *interfaces_to_take_down = NULL;
2519
size_t interfaces_to_take_down_size = 0;
2520
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
2521
char old_tempdir[] = "/tmp/mandosXXXXXX";
2522
char *tempdir = NULL;
1413
2523
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1414
2524
const char *seckey = PATHDIR "/" SECKEY;
1415
2525
const char *pubkey = PATHDIR "/" PUBKEY;
2526
#if GNUTLS_VERSION_NUMBER >= 0x030606
2527
const char *tls_privkey = PATHDIR "/" TLS_PRIVKEY;
2528
const char *tls_pubkey = PATHDIR "/" TLS_PUBKEY;
2529
#endif
2530
const char *dh_params_file = NULL;
2531
char *interfaces_hooks = NULL;
1416
2532
1417
2533
bool gnutls_initialized = false;
1418
2534
bool gpgme_initialized = false;
1464
2580
{ .name = "pubkey", .key = 'p',
1465
2581
.arg = "FILE",
1466
2582
.doc = "OpenPGP public key file base name",
1467
.group = 2 },
2583
.group = 1 },
2584
{ .name = "tls-privkey", .key = 't',
2585
.arg = "FILE",
2586
#if GNUTLS_VERSION_NUMBER >= 0x030606
2587
.doc = "TLS private key file base name",
2588
#else
2589
.doc = "Dummy; ignored (requires GnuTLS 3.6.6)",
2590
#endif
2591
.group = 1 },
2592
{ .name = "tls-pubkey", .key = 'T',
2593
.arg = "FILE",
2594
#if GNUTLS_VERSION_NUMBER >= 0x030606
2595
.doc = "TLS public key file base name",
2596
#else
2597
.doc = "Dummy; ignored (requires GnuTLS 3.6.6)",
2598
#endif
2599
.group = 1 },
1468
2600
{ .name = "dh-bits", .key = 129,
1469
2601
.arg = "BITS",
1470
2602
.doc = "Bit length of the prime number used in the"
1471
2603
" Diffie-Hellman key exchange",
1472
2604
.group = 2 },
2605
{ .name = "dh-params", .key = 134,
2606
.arg = "FILE",
2607
.doc = "PEM-encoded PKCS#3 file with pre-generated parameters"
2608
" for the Diffie-Hellman key exchange",
2609
.group = 2 },
1473
2610
{ .name = "priority", .key = 130,
1474
2611
.arg = "STRING",
1475
2612
.doc = "GnuTLS priority string for the TLS handshake",
1480
2617
.group = 2 },
1481
2618
{ .name = "retry", .key = 132,
1482
2619
.arg = "SECONDS",
1483
.doc = "Retry interval used when denied by the mandos server",
2620
.doc = "Retry interval used when denied by the Mandos server",
2621
.group = 2 },
2622
{ .name = "network-hook-dir", .key = 133,
2623
.arg = "DIR",
2624
.doc = "Directory where network hooks are located",
1484
2625
.group = 2 },
1485
2626
/*
1486
2627
* These reproduce what we would get without ARGP_NO_HELP
1505
2646
connect_to = arg;
1506
2647
break;
1507
2648
case 'i': /* --interface */
1508
interface = arg;
2649
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
2650
arg, (int)',');
2651
if(ret_errno != 0){
2652
argp_error(state, "%s", strerror(ret_errno));
2653
}
1509
2654
break;
1510
2655
case 's': /* --seckey */
1511
2656
seckey = arg;
1513
2658
case 'p': /* --pubkey */
1514
2659
pubkey = arg;
1515
2660
break;
2661
case 't': /* --tls-privkey */
2662
#if GNUTLS_VERSION_NUMBER >= 0x030606
2663
tls_privkey = arg;
2664
#endif
2665
break;
2666
case 'T': /* --tls-pubkey */
2667
#if GNUTLS_VERSION_NUMBER >= 0x030606
2668
tls_pubkey = arg;
2669
#endif
2670
break;
1516
2671
case 129: /* --dh-bits */
1517
2672
errno = 0;
1518
2673
tmpmax = strtoimax(arg, &tmp, 10);
1522
2677
}
1523
2678
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
1524
2679
break;
2680
case 134: /* --dh-params */
2681
dh_params_file = arg;
2682
break;
1525
2683
case 130: /* --priority */
1526
2684
mc.priority = arg;
1527
2685
break;
1540
2698
argp_error(state, "Bad retry interval");
1541
2699
}
1542
2700
break;
2701
case 133: /* --network-hook-dir */
2702
hookdir = arg;
2703
break;
1543
2704
/*
1544
2705
* These reproduce what we would get without ARGP_NO_HELP
1545
2706
*/
1547
2708
argp_state_help(state, state->out_stream,
1548
2709
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
1549
2710
& ~(unsigned int)ARGP_HELP_EXIT_OK);
2711
__builtin_unreachable();
1550
2712
case -3: /* --usage */
1551
2713
argp_state_help(state, state->out_stream,
1552
2714
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
2715
__builtin_unreachable();
1553
2716
case 'V': /* --version */
1554
fprintf(state->out_stream, "Mandos plugin mandos-client: ");
1555
fprintf(state->out_stream, "%s\n", argp_program_version);
2717
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
1556
2718
exit(argp_err_exit_status);
1557
2719
break;
1558
2720
default:
1565
2727
.args_doc = "",
1566
2728
.doc = "Mandos client -- Get and decrypt"
1567
2729
" passwords from a Mandos server" };
1568
ret = argp_parse(&argp, argc, argv,
1569
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
1570
switch(ret){
2730
ret_errno = argp_parse(&argp, argc, argv,
2731
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2732
switch(ret_errno){
1571
2733
case 0:
1572
2734
break;
1573
2735
case ENOMEM:
1574
2736
default:
1575
errno = ret;
2737
errno = ret_errno;
1576
2738
perror_plus("argp_parse");
1577
2739
exitcode = EX_OSERR;
1578
2740
goto end;
1581
2743
goto end;
1582
2744
}
1583
2745
}
1584
1585
{
1586
/* Work around Debian bug #633582:
1587
<http://bugs.debian.org/633582> */
1588
struct stat st;
1589
1590
/* Re-raise priviliges */
1591
errno = 0;
1592
ret = seteuid(0);
1593
if(ret == -1){
1594
perror_plus("seteuid");
1595
}
1596
1597
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
1598
int seckey_fd = open(seckey, O_RDONLY);
1599
if(seckey_fd == -1){
1600
perror_plus("open");
1601
} else {
1602
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
1603
if(ret == -1){
1604
perror_plus("fstat");
1605
} else {
1606
if(S_ISREG(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
1607
ret = fchown(seckey_fd, uid, gid);
1608
if(ret == -1){
1609
perror_plus("fchown");
1610
}
1611
}
1612
}
1613
TEMP_FAILURE_RETRY(close(seckey_fd));
1614
}
1615
}
1616
1617
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
1618
int pubkey_fd = open(pubkey, O_RDONLY);
1619
if(pubkey_fd == -1){
1620
perror_plus("open");
1621
} else {
1622
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
1623
if(ret == -1){
1624
perror_plus("fstat");
1625
} else {
1626
if(S_ISREG(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
1627
ret = fchown(pubkey_fd, uid, gid);
1628
if(ret == -1){
1629
perror_plus("fchown");
1630
}
1631
}
1632
}
1633
TEMP_FAILURE_RETRY(close(pubkey_fd));
1634
}
1635
}
1636
1637
/* Lower privileges */
1638
errno = 0;
1639
ret = seteuid(uid);
1640
if(ret == -1){
1641
perror_plus("seteuid");
1642
}
1643
}
1644
2746
1645
/* Find network hooks and run them */
1646
2747
{
1647
struct dirent **direntries;
1648
struct dirent *direntry;
1649
int numhooks = scandir(HOOKDIR, &direntries, runnable_hook,
1650
alphasort);
1651
if(numhooks == -1){
1652
perror_plus("scandir");
2748
/* Re-raise privileges */
2749
ret = raise_privileges();
2750
if(ret != 0){
2751
errno = ret;
2752
perror_plus("Failed to raise privileges");
1653
2753
} else {
1654
int devnull = open("/dev/null", O_RDONLY);
1655
for(int i = 0; i < numhooks; i++){
1656
direntry = direntries[0];
1657
char *fullname = NULL;
1658
ret = asprintf(&fullname, "%s/%s", tempdir,
1659
direntry->d_name);
1660
if(ret < 0){
1661
perror_plus("asprintf");
1662
continue;
1663
}
1664
pid_t hook_pid = fork();
1665
if(hook_pid == 0){
1666
/* Child */
1667
dup2(devnull, STDIN_FILENO);
1668
close(devnull);
1669
dup2(STDERR_FILENO, STDOUT_FILENO);
1670
ret = setenv("DEVICE", interface, 1);
1671
if(ret == -1){
1672
perror_plus("setenv");
1673
exit(1);
1674
}
1675
ret = setenv("VERBOSE", debug ? "1" : "0", 1);
1676
if(ret == -1){
1677
perror_plus("setenv");
1678
exit(1);
1679
}
1680
ret = setenv("MODE", "start", 1);
1681
if(ret == -1){
1682
perror_plus("setenv");
1683
exit(1);
1684
}
1685
char *delaystring;
1686
ret = asprintf(&delaystring, "%f", delay);
1687
if(ret == -1){
1688
perror_plus("asprintf");
1689
exit(1);
1690
}
1691
ret = setenv("DELAY", delaystring, 1);
1692
if(ret == -1){
1693
free(delaystring);
1694
perror_plus("setenv");
1695
exit(1);
1696
}
1697
free(delaystring);
1698
ret = execl(fullname, direntry->d_name, "start", NULL);
1699
perror_plus("execl");
1700
} else {
1701
int status;
1702
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1703
perror_plus("waitpid");
1704
free(fullname);
1705
continue;
1706
}
1707
if(WIFEXITED(status)){
1708
if(WEXITSTATUS(status) != 0){
1709
fprintf(stderr, "Mandos plugin mandos-client: "
1710
"Warning: network hook \"%s\" exited"
1711
" with status %d\n", direntry->d_name,
1712
WEXITSTATUS(status));
1713
free(fullname);
1714
continue;
1715
}
1716
} else if(WIFSIGNALED(status)){
1717
fprintf(stderr, "Mandos plugin mandos-client: "
1718
"Warning: network hook \"%s\" died by"
1719
" signal %d\n", direntry->d_name,
1720
WTERMSIG(status));
1721
free(fullname);
1722
continue;
1723
} else {
1724
fprintf(stderr, "Mandos plugin mandos-client: "
1725
"Warning: network hook \"%s\" crashed\n",
1726
direntry->d_name);
1727
free(fullname);
1728
continue;
1729
}
1730
}
1731
free(fullname);
1732
if(quit_now){
1733
goto end;
1734
}
1735
}
1736
close(devnull);
1737
}
2754
struct stat st;
2755
2756
/* Work around Debian bug #633582:
2757
<https://bugs.debian.org/633582> */
2758
2759
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
2760
int seckey_fd = open(seckey, O_RDONLY);
2761
if(seckey_fd == -1){
2762
perror_plus("open");
2763
} else {
2764
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
2765
if(ret == -1){
2766
perror_plus("fstat");
2767
} else {
2768
if(S_ISREG(st.st_mode)
2769
and st.st_uid == 0 and st.st_gid == 0){
2770
ret = fchown(seckey_fd, uid, gid);
2771
if(ret == -1){
2772
perror_plus("fchown");
2773
}
2774
}
2775
}
2776
close(seckey_fd);
2777
}
2778
}
2779
2780
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2781
int pubkey_fd = open(pubkey, O_RDONLY);
2782
if(pubkey_fd == -1){
2783
perror_plus("open");
2784
} else {
2785
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
2786
if(ret == -1){
2787
perror_plus("fstat");
2788
} else {
2789
if(S_ISREG(st.st_mode)
2790
and st.st_uid == 0 and st.st_gid == 0){
2791
ret = fchown(pubkey_fd, uid, gid);
2792
if(ret == -1){
2793
perror_plus("fchown");
2794
}
2795
}
2796
}
2797
close(pubkey_fd);
2798
}
2799
}
2800
2801
if(dh_params_file != NULL
2802
and strcmp(dh_params_file, PATHDIR "/dhparams.pem" ) == 0){
2803
int dhparams_fd = open(dh_params_file, O_RDONLY);
2804
if(dhparams_fd == -1){
2805
perror_plus("open");
2806
} else {
2807
ret = (int)TEMP_FAILURE_RETRY(fstat(dhparams_fd, &st));
2808
if(ret == -1){
2809
perror_plus("fstat");
2810
} else {
2811
if(S_ISREG(st.st_mode)
2812
and st.st_uid == 0 and st.st_gid == 0){
2813
ret = fchown(dhparams_fd, uid, gid);
2814
if(ret == -1){
2815
perror_plus("fchown");
2816
}
2817
}
2818
}
2819
close(dhparams_fd);
2820
}
2821
}
2822
2823
/* Work around Debian bug #981302
2824
<https://bugs.debian.org/981302> */
2825
if(lstat("/dev/fd", &st) != 0 and errno == ENOENT){
2826
ret = symlink("/proc/self/fd", "/dev/fd");
2827
if(ret == -1){
2828
perror_plus("Failed to create /dev/fd symlink");
2829
}
2830
}
2831
2832
/* Lower privileges */
2833
ret = lower_privileges();
2834
if(ret != 0){
2835
errno = ret;
2836
perror_plus("Failed to lower privileges");
2837
}
2838
}
2839
}
2840
2841
/* Remove invalid interface names (except "none") */
2842
{
2843
char *interface = NULL;
2844
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2845
interface))){
2846
if(strcmp(interface, "none") != 0
2847
and if_nametoindex(interface) == 0){
2848
if(interface[0] != '\0'){
2849
fprintf_plus(stderr, "Not using nonexisting interface"
2850
" \"%s\"\n", interface);
2851
}
2852
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2853
interface = NULL;
2854
}
2855
}
2856
}
2857
2858
/* Run network hooks */
2859
{
2860
if(mc.interfaces != NULL){
2861
interfaces_hooks = malloc(mc.interfaces_size);
2862
if(interfaces_hooks == NULL){
2863
perror_plus("malloc");
2864
goto end;
2865
}
2866
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2867
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2868
}
2869
run_network_hooks("start", interfaces_hooks != NULL ?
2870
interfaces_hooks : "", delay);
1738
2871
}
1739
2872
1740
2873
if(not debug){
1741
2874
avahi_set_log_function(empty_log);
1742
2875
}
1743
2876
1744
if(interface[0] == '\0'){
1745
struct dirent **direntries;
1746
/* First look for interfaces that are up */
1747
ret = scandir(sys_class_net, &direntries, up_interface,
1748
alphasort);
1749
if(ret == 0){
1750
/* No up interfaces, look for any good interfaces */
1751
free(direntries);
1752
ret = scandir(sys_class_net, &direntries, good_interface,
1753
alphasort);
1754
}
1755
if(ret >= 1){
1756
/* Pick the first interface returned */
1757
interface = strdup(direntries[0]->d_name);
1758
if(debug){
1759
fprintf(stderr, "Mandos plugin mandos-client: "
1760
"Using interface \"%s\"\n", interface);
1761
}
1762
if(interface == NULL){
1763
perror_plus("malloc");
1764
free(direntries);
1765
exitcode = EXIT_FAILURE;
1766
goto end;
1767
}
1768
free(direntries);
1769
} else {
1770
free(direntries);
1771
fprintf(stderr, "Mandos plugin mandos-client: "
1772
"Could not find a network interface\n");
1773
exitcode = EXIT_FAILURE;
1774
goto end;
1775
}
1776
}
1777
1778
2877
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1779
2878
from the signal handler */
1780
2879
/* Initialize the pseudo-RNG for Avahi */
1781
2880
srand((unsigned int) time(NULL));
1782
mc.simple_poll = avahi_simple_poll_new();
1783
if(mc.simple_poll == NULL){
1784
fprintf(stderr, "Mandos plugin mandos-client: "
1785
"Avahi: Failed to create simple poll object.\n");
2881
simple_poll = avahi_simple_poll_new();
2882
if(simple_poll == NULL){
2883
fprintf_plus(stderr,
2884
"Avahi: Failed to create simple poll object.\n");
1786
2885
exitcode = EX_UNAVAILABLE;
1787
2886
goto end;
1788
2887
}
1850
2949
}
1851
2950
}
1852
2951
1853
/* If the interface is down, bring it up */
1854
if(strcmp(interface, "none") != 0){
1855
if_index = (AvahiIfIndex) if_nametoindex(interface);
1856
if(if_index == 0){
1857
fprintf(stderr, "Mandos plugin mandos-client: "
1858
"No such interface: \"%s\"\n", interface);
1859
exitcode = EX_UNAVAILABLE;
1860
goto end;
1861
}
1862
1863
if(quit_now){
1864
goto end;
1865
}
1866
1867
/* Re-raise priviliges */
1868
errno = 0;
1869
ret = seteuid(0);
1870
if(ret == -1){
1871
perror_plus("seteuid");
1872
}
1873
1874
#ifdef __linux__
1875
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1876
messages about the network interface to mess up the prompt */
1877
ret = klogctl(8, NULL, 5);
1878
bool restore_loglevel = true;
1879
if(ret == -1){
1880
restore_loglevel = false;
1881
perror_plus("klogctl");
1882
}
1883
#endif /* __linux__ */
1884
1885
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1886
if(sd < 0){
1887
perror_plus("socket");
1888
exitcode = EX_OSERR;
1889
#ifdef __linux__
1890
if(restore_loglevel){
1891
ret = klogctl(7, NULL, 0);
1892
if(ret == -1){
1893
perror_plus("klogctl");
1894
}
1895
}
1896
#endif /* __linux__ */
1897
/* Lower privileges */
1898
errno = 0;
1899
ret = seteuid(uid);
1900
if(ret == -1){
1901
perror_plus("seteuid");
1902
}
1903
goto end;
1904
}
1905
strcpy(network.ifr_name, interface);
1906
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1907
if(ret == -1){
1908
perror_plus("ioctl SIOCGIFFLAGS");
1909
#ifdef __linux__
1910
if(restore_loglevel){
1911
ret = klogctl(7, NULL, 0);
1912
if(ret == -1){
1913
perror_plus("klogctl");
1914
}
1915
}
1916
#endif /* __linux__ */
1917
exitcode = EX_OSERR;
1918
/* Lower privileges */
1919
errno = 0;
1920
ret = seteuid(uid);
1921
if(ret == -1){
1922
perror_plus("seteuid");
1923
}
1924
goto end;
1925
}
1926
if((network.ifr_flags & IFF_UP) == 0){
1927
network.ifr_flags |= IFF_UP;
1928
take_down_interface = true;
1929
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1930
if(ret == -1){
1931
take_down_interface = false;
1932
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1933
exitcode = EX_OSERR;
1934
#ifdef __linux__
1935
if(restore_loglevel){
1936
ret = klogctl(7, NULL, 0);
1937
if(ret == -1){
1938
perror_plus("klogctl");
2952
/* If no interfaces were specified, make a list */
2953
if(mc.interfaces == NULL){
2954
struct dirent **direntries = NULL;
2955
/* Look for any good interfaces */
2956
ret = scandir(sys_class_net, &direntries, good_interface,
2957
alphasort);
2958
if(ret >= 1){
2959
/* Add all found interfaces to interfaces list */
2960
for(int i = 0; i < ret; ++i){
2961
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2962
direntries[i]->d_name);
2963
if(ret_errno != 0){
2964
errno = ret_errno;
2965
perror_plus("argz_add");
2966
free(direntries[i]);
2967
continue;
2968
}
2969
if(debug){
2970
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2971
direntries[i]->d_name);
2972
}
2973
free(direntries[i]);
2974
}
2975
free(direntries);
2976
} else {
2977
if(ret == 0){
2978
free(direntries);
2979
}
2980
fprintf_plus(stderr, "Could not find a network interface\n");
2981
exitcode = EXIT_FAILURE;
2982
goto end;
2983
}
2984
}
2985
2986
/* Bring up interfaces which are down, and remove any "none"s */
2987
{
2988
char *interface = NULL;
2989
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2990
interface))){
2991
/* If interface name is "none", stop bringing up interfaces.
2992
Also remove all instances of "none" from the list */
2993
if(strcmp(interface, "none") == 0){
2994
argz_delete(&mc.interfaces, &mc.interfaces_size,
2995
interface);
2996
interface = NULL;
2997
while((interface = argz_next(mc.interfaces,
2998
mc.interfaces_size, interface))){
2999
if(strcmp(interface, "none") == 0){
3000
argz_delete(&mc.interfaces, &mc.interfaces_size,
3001
interface);
3002
interface = NULL;
1939
3003
}
1940
3004
}
1941
#endif /* __linux__ */
1942
/* Lower privileges */
1943
errno = 0;
1944
ret = seteuid(uid);
1945
if(ret == -1){
1946
perror_plus("seteuid");
1947
}
1948
goto end;
1949
}
1950
}
1951
/* Sleep checking until interface is running.
1952
Check every 0.25s, up to total time of delay */
1953
for(int i=0; i < delay * 4; i++){
1954
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1955
if(ret == -1){
1956
perror_plus("ioctl SIOCGIFFLAGS");
1957
} else if(network.ifr_flags & IFF_RUNNING){
1958
3005
break;
1959
3006
}
1960
struct timespec sleeptime = { .tv_nsec = 250000000 };
1961
ret = nanosleep(&sleeptime, NULL);
1962
if(ret == -1 and errno != EINTR){
1963
perror_plus("nanosleep");
1964
}
1965
}
1966
if(not take_down_interface){
1967
/* We won't need the socket anymore */
1968
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1969
if(ret == -1){
1970
perror_plus("close");
1971
}
1972
}
1973
#ifdef __linux__
1974
if(restore_loglevel){
1975
/* Restores kernel loglevel to default */
1976
ret = klogctl(7, NULL, 0);
1977
if(ret == -1){
1978
perror_plus("klogctl");
1979
}
1980
}
1981
#endif /* __linux__ */
1982
/* Lower privileges */
1983
errno = 0;
1984
if(take_down_interface){
1985
/* Lower privileges */
1986
ret = seteuid(uid);
1987
if(ret == -1){
1988
perror_plus("seteuid");
1989
}
1990
} else {
1991
/* Lower privileges permanently */
1992
ret = setuid(uid);
1993
if(ret == -1){
1994
perror_plus("setuid");
1995
}
1996
}
3007
bool interface_was_up = interface_is_up(interface);
3008
errno = bring_up_interface(interface, delay);
3009
if(not interface_was_up){
3010
if(errno != 0){
3011
fprintf_plus(stderr, "Failed to bring up interface \"%s\":"
3012
" %s\n", interface, strerror(errno));
3013
} else {
3014
errno = argz_add(&interfaces_to_take_down,
3015
&interfaces_to_take_down_size,
3016
interface);
3017
if(errno != 0){
3018
perror_plus("argz_add");
3019
}
3020
}
3021
}
3022
}
3023
if(debug and (interfaces_to_take_down == NULL)){
3024
fprintf_plus(stderr, "No interfaces were brought up\n");
3025
}
3026
}
3027
3028
/* If we only got one interface, explicitly use only that one */
3029
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
3030
if(debug){
3031
fprintf_plus(stderr, "Using only interface \"%s\"\n",
3032
mc.interfaces);
3033
}
3034
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
1997
3035
}
1998
3036
1999
3037
if(quit_now){
2000
3038
goto end;
2001
3039
}
2002
3040
2003
ret = init_gnutls_global(pubkey, seckey);
3041
#if GNUTLS_VERSION_NUMBER >= 0x030606
3042
ret = init_gnutls_global(tls_pubkey, tls_privkey, dh_params_file, &mc);
3043
#elif GNUTLS_VERSION_NUMBER < 0x030600
3044
ret = init_gnutls_global(pubkey, seckey, dh_params_file, &mc);
3045
#else
3046
#error "Needs GnuTLS 3.6.6 or later, or before 3.6.0"
3047
#endif
2004
3048
if(ret == -1){
2005
fprintf(stderr, "Mandos plugin mandos-client: "
2006
"init_gnutls_global failed\n");
3049
fprintf_plus(stderr, "init_gnutls_global failed\n");
2007
3050
exitcode = EX_UNAVAILABLE;
2008
3051
goto end;
2009
3052
} else {
2014
3057
goto end;
2015
3058
}
2016
3059
2017
if(mkdtemp(tempdir) == NULL){
3060
/* Try /run/tmp before /tmp */
3061
tempdir = mkdtemp(run_tempdir);
3062
if(tempdir == NULL and errno == ENOENT){
3063
if(debug){
3064
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
3065
run_tempdir, old_tempdir);
3066
}
3067
tempdir = mkdtemp(old_tempdir);
3068
}
3069
if(tempdir == NULL){
2018
3070
perror_plus("mkdtemp");
2019
3071
goto end;
2020
3072
}
2021
tempdir_created = true;
2022
3073
2023
3074
if(quit_now){
2024
3075
goto end;
2025
3076
}
2026
3077
2027
if(not init_gpgme(pubkey, seckey, tempdir)){
2028
fprintf(stderr, "Mandos plugin mandos-client: "
2029
"init_gpgme failed\n");
3078
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
3079
fprintf_plus(stderr, "init_gpgme failed\n");
2030
3080
exitcode = EX_UNAVAILABLE;
2031
3081
goto end;
2032
3082
} else {
2041
3091
/* Connect directly, do not use Zeroconf */
2042
3092
/* (Mainly meant for debugging) */
2043
3093
char *address = strrchr(connect_to, ':');
3094
2044
3095
if(address == NULL){
2045
fprintf(stderr, "Mandos plugin mandos-client: "
2046
"No colon in address\n");
3096
fprintf_plus(stderr, "No colon in address\n");
2047
3097
exitcode = EX_USAGE;
2048
3098
goto end;
2049
3099
}
2052
3102
goto end;
2053
3103
}
2054
3104
2055
uint16_t port;
3105
in_port_t port;
2056
3106
errno = 0;
2057
3107
tmpmax = strtoimax(address+1, &tmp, 10);
2058
3108
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2059
or tmpmax != (uint16_t)tmpmax){
2060
fprintf(stderr, "Mandos plugin mandos-client: "
2061
"Bad port number\n");
3109
or tmpmax != (in_port_t)tmpmax){
3110
fprintf_plus(stderr, "Bad port number\n");
2062
3111
exitcode = EX_USAGE;
2063
3112
goto end;
2064
3113
}
2065
3114
2066
3115
if(quit_now){
2067
3116
goto end;
2068
3117
}
2069
3118
2070
port = (uint16_t)tmpmax;
3119
port = (in_port_t)tmpmax;
2071
3120
*address = '\0';
2072
3121
/* Colon in address indicates IPv6 */
2073
3122
int af;
2089
3138
}
2090
3139
2091
3140
while(not quit_now){
2092
ret = start_mandos_communication(address, port, if_index, af);
3141
ret = start_mandos_communication(address, port, if_index, af,
3142
&mc);
2093
3143
if(quit_now or ret == 0){
2094
3144
break;
2095
3145
}
2096
3146
if(debug){
2097
fprintf(stderr, "Mandos plugin mandos-client: "
2098
"Retrying in %d seconds\n", (int)retry_interval);
3147
fprintf_plus(stderr, "Retrying in %d seconds\n",
3148
(int)retry_interval);
2099
3149
}
2100
sleep((int)retry_interval);
3150
sleep((unsigned int)retry_interval);
2101
3151
}
2102
3152
2103
if (not quit_now){
3153
if(not quit_now){
2104
3154
exitcode = EXIT_SUCCESS;
2105
3155
}
2106
3156
2121
3171
config.publish_domain = 0;
2122
3172
2123
3173
/* Allocate a new server */
2124
mc.server = avahi_server_new(avahi_simple_poll_get
2125
(mc.simple_poll), &config, NULL,
2126
NULL, &error);
3174
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
3175
&config, NULL, NULL, &ret);
2127
3176
2128
3177
/* Free the Avahi configuration data */
2129
3178
avahi_server_config_free(&config);
2131
3180
2132
3181
/* Check if creating the Avahi server object succeeded */
2133
3182
if(mc.server == NULL){
2134
fprintf(stderr, "Mandos plugin mandos-client: "
2135
"Failed to create Avahi server: %s\n",
2136
avahi_strerror(error));
3183
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
3184
avahi_strerror(ret));
2137
3185
exitcode = EX_UNAVAILABLE;
2138
3186
goto end;
2139
3187
}
2145
3193
/* Create the Avahi service browser */
2146
3194
sb = avahi_s_service_browser_new(mc.server, if_index,
2147
3195
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2148
NULL, 0, browse_callback, NULL);
3196
NULL, 0, browse_callback,
3197
(void *)&mc);
2149
3198
if(sb == NULL){
2150
fprintf(stderr, "Mandos plugin mandos-client: "
2151
"Failed to create service browser: %s\n",
2152
avahi_strerror(avahi_server_errno(mc.server)));
3199
fprintf_plus(stderr, "Failed to create service browser: %s\n",
3200
avahi_strerror(avahi_server_errno(mc.server)));
2153
3201
exitcode = EX_UNAVAILABLE;
2154
3202
goto end;
2155
3203
}
2161
3209
/* Run the main loop */
2162
3210
2163
3211
if(debug){
2164
fprintf(stderr, "Mandos plugin mandos-client: "
2165
"Starting Avahi loop search\n");
3212
fprintf_plus(stderr, "Starting Avahi loop search\n");
2166
3213
}
2167
2168
ret = avahi_loop_with_timeout(mc.simple_poll,
2169
(int)(retry_interval * 1000));
3214
3215
ret = avahi_loop_with_timeout(simple_poll,
3216
(int)(retry_interval * 1000), &mc);
2170
3217
if(debug){
2171
fprintf(stderr, "Mandos plugin mandos-client: "
2172
"avahi_loop_with_timeout exited %s\n",
2173
(ret == 0) ? "successfully" : "with error");
3218
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
3219
(ret == 0) ? "successfully" : "with error");
2174
3220
}
2175
3221
2176
3222
end:
2177
3223
2178
3224
if(debug){
2179
fprintf(stderr, "Mandos plugin mandos-client: "
2180
"%s exiting\n", argv[0]);
3225
if(signal_received){
3226
fprintf_plus(stderr, "%s exiting due to signal %d: %s\n",
3227
argv[0], signal_received,
3228
strsignal(signal_received));
3229
} else {
3230
fprintf_plus(stderr, "%s exiting\n", argv[0]);
3231
}
2181
3232
}
2182
3233
2183
3234
/* Cleanup things */
3235
free(mc.interfaces);
3236
2184
3237
if(sb != NULL)
2185
3238
avahi_s_service_browser_free(sb);
2186
3239
2187
3240
if(mc.server != NULL)
2188
3241
avahi_server_free(mc.server);
2189
3242
2190
if(mc.simple_poll != NULL)
2191
avahi_simple_poll_free(mc.simple_poll);
3243
if(simple_poll != NULL)
3244
avahi_simple_poll_free(simple_poll);
2192
3245
2193
3246
if(gnutls_initialized){
2194
3247
gnutls_certificate_free_credentials(mc.cred);
2195
gnutls_global_deinit();
2196
3248
gnutls_dh_params_deinit(mc.dh_params);
2197
3249
}
2198
3250
2199
3251
if(gpgme_initialized){
2200
3252
gpgme_release(mc.ctx);
2201
3253
}
2202
3254
2203
3255
/* Cleans up the circular linked list of Mandos servers the client
2204
3256
has seen */
2205
3257
if(mc.current_server != NULL){
2206
3258
mc.current_server->prev->next = NULL;
2207
3259
while(mc.current_server != NULL){
2208
3260
server *next = mc.current_server->next;
3261
#ifdef __GNUC__
3262
#pragma GCC diagnostic push
3263
#pragma GCC diagnostic ignored "-Wcast-qual"
3264
#endif
3265
free((char *)(mc.current_server->ip));
3266
#ifdef __GNUC__
3267
#pragma GCC diagnostic pop
3268
#endif
2209
3269
free(mc.current_server);
2210
3270
mc.current_server = next;
2211
3271
}
2212
3272
}
2213
3273
2214
/* XXX run network hooks "stop" here */
2215
2216
/* Take down the network interface */
2217
if(take_down_interface){
2218
/* Re-raise priviliges */
2219
errno = 0;
2220
ret = seteuid(0);
2221
if(ret == -1){
2222
perror_plus("seteuid");
2223
}
2224
if(geteuid() == 0){
2225
ret = ioctl(sd, SIOCGIFFLAGS, &network);
2226
if(ret == -1){
2227
perror_plus("ioctl SIOCGIFFLAGS");
2228
} else if(network.ifr_flags & IFF_UP){
2229
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2230
ret = ioctl(sd, SIOCSIFFLAGS, &network);
2231
if(ret == -1){
2232
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2233
}
2234
}
2235
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2236
if(ret == -1){
2237
perror_plus("close");
2238
}
2239
/* Lower privileges permanently */
2240
errno = 0;
2241
ret = setuid(uid);
2242
if(ret == -1){
2243
perror_plus("setuid");
2244
}
2245
}
3274
/* Re-raise privileges */
3275
{
3276
ret = raise_privileges();
3277
if(ret != 0){
3278
errno = ret;
3279
perror_plus("Failed to raise privileges");
3280
} else {
3281
3282
/* Run network hooks */
3283
run_network_hooks("stop", interfaces_hooks != NULL ?
3284
interfaces_hooks : "", delay);
3285
3286
/* Take down the network interfaces which were brought up */
3287
{
3288
char *interface = NULL;
3289
while((interface = argz_next(interfaces_to_take_down,
3290
interfaces_to_take_down_size,
3291
interface))){
3292
ret = take_down_interface(interface);
3293
if(ret != 0){
3294
errno = ret;
3295
perror_plus("Failed to take down interface");
3296
}
3297
}
3298
if(debug and (interfaces_to_take_down == NULL)){
3299
fprintf_plus(stderr, "No interfaces needed to be taken"
3300
" down\n");
3301
}
3302
}
3303
}
3304
3305
ret = lower_privileges_permanently();
3306
if(ret != 0){
3307
errno = ret;
3308
perror_plus("Failed to lower privileges permanently");
3309
}
3310
}
3311
3312
free(interfaces_to_take_down);
3313
free(interfaces_hooks);
3314
3315
void clean_dir_at(int base, const char * const dirname,
3316
uintmax_t level){
3317
struct dirent **direntries = NULL;
3318
int dret;
3319
int dir_fd = (int)TEMP_FAILURE_RETRY(openat(base, dirname,
3320
O_RDONLY
3321
| O_NOFOLLOW
3322
| O_DIRECTORY
3323
| O_PATH));
3324
if(dir_fd == -1){
3325
perror_plus("open");
3326
return;
3327
}
3328
int numentries = scandirat(dir_fd, ".", &direntries,
3329
notdotentries, alphasort);
3330
if(numentries >= 0){
3331
for(int i = 0; i < numentries; i++){
3332
if(debug){
3333
fprintf_plus(stderr, "Unlinking \"%s/%s\"\n",
3334
dirname, direntries[i]->d_name);
3335
}
3336
dret = unlinkat(dir_fd, direntries[i]->d_name, 0);
3337
if(dret == -1){
3338
if(errno == EISDIR){
3339
dret = unlinkat(dir_fd, direntries[i]->d_name,
3340
AT_REMOVEDIR);
3341
}
3342
if((dret == -1) and (errno == ENOTEMPTY)
3343
and (strcmp(direntries[i]->d_name, "private-keys-v1.d")
3344
== 0) and (level == 0)){
3345
/* Recurse only in this special case */
3346
clean_dir_at(dir_fd, direntries[i]->d_name, level+1);
3347
dret = 0;
3348
}
3349
if((dret == -1) and (errno != ENOENT)){
3350
fprintf_plus(stderr, "unlink(\"%s/%s\"): %s\n", dirname,
3351
direntries[i]->d_name, strerror(errno));
3352
}
3353
}
3354
free(direntries[i]);
3355
}
3356
3357
/* need to clean even if 0 because man page doesn't specify */
3358
free(direntries);
3359
dret = unlinkat(base, dirname, AT_REMOVEDIR);
3360
if(dret == -1 and errno != ENOENT){
3361
perror_plus("rmdir");
3362
}
3363
} else {
3364
perror_plus("scandirat");
3365
}
3366
close(dir_fd);
2246
3367
}
2247
3368
2248
3369
/* Removes the GPGME temp directory and all files inside */
2249
if(tempdir_created){
2250
struct dirent **direntries = NULL;
2251
struct dirent *direntry = NULL;
2252
int numentries = scandir(tempdir, &direntries, notdotentries,
2253
alphasort);
2254
if (numentries > 0){
2255
for(int i = 0; i < numentries; i++){
2256
direntry = direntries[i];
2257
char *fullname = NULL;
2258
ret = asprintf(&fullname, "%s/%s", tempdir,
2259
direntry->d_name);
2260
if(ret < 0){
2261
perror_plus("asprintf");
2262
continue;
2263
}
2264
ret = remove(fullname);
2265
if(ret == -1){
2266
fprintf(stderr, "Mandos plugin mandos-client: "
2267
"remove(\"%s\"): %s\n", fullname, strerror(errno));
2268
}
2269
free(fullname);
2270
}
2271
}
2272
2273
/* need to clean even if 0 because man page doesn't specify */
2274
free(direntries);
2275
if (numentries == -1){
2276
perror_plus("scandir");
2277
}
2278
ret = rmdir(tempdir);
2279
if(ret == -1 and errno != ENOENT){
2280
perror_plus("rmdir");
2281
}
3370
if(tempdir != NULL){
3371
clean_dir_at(-1, tempdir, 0);
2282
3372
}
2283
3373
2284
3374
if(quit_now){
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0