/mandos/release : revision 320

40

#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */

41

42

#include <stdio.h> /* fprintf(), stderr, fwrite(),

43

stdout, ferror(), remove() */

43

stdout, ferror() */

44

#include <stdint.h> /* uint16_t, uint32_t, intptr_t */

45

#include <stddef.h> /* NULL, size_t, ssize_t */

46

#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),

57

#include <sys/socket.h> /* socket(), struct sockaddr_in6,

58

inet_pton(), connect(),

59

getnameinfo() */

60

#include <fcntl.h> /* open() */

60

#include <fcntl.h> /* open(), unlinkat() */

61

#include <dirent.h> /* opendir(), struct dirent, readdir()

62

*/

63

#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,

73

*/

74

#include <unistd.h> /* close(), SEEK_SET, off_t, write(),

75

getuid(), getgid(), seteuid(),

76

setgid(), pause(), _exit() */

76

setgid(), pause(), _exit(),

77

unlinkat() */

77

78

#include <arpa/inet.h> /* inet_pton(), htons() */

78

79

#include <iso646.h> /* not, or, and */

79

80

#include <argp.h> /* struct argp_option, error_t, struct

233

234

.af = af };

234

235

if(new_server->ip == NULL){

235

236

perror_plus("strdup");

237

free(new_server);

236

238

return false;

237

239

}

238

240

ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));

239

241

if(ret == -1){

240

242

perror_plus("clock_gettime");

243

#ifdef __GNUC__

244

#pragma GCC diagnostic push

245

#pragma GCC diagnostic ignored "-Wcast-qual"

246

#endif

247

free((char *)(new_server->ip));

248

#ifdef __GNUC__

249

#pragma GCC diagnostic pop

250

#endif

251

free(new_server);

241

252

return false;

242

253

}

243

254

/* Special case of first server */

1065

1076

timed out */

1066

1077

1067

1078

if(quit_now){

1079

avahi_s_service_resolver_free(r);

1068

1080

return;

1069

1081

}

1070

1082

1346

1358

return 0;

1347

1359

}

1348

1360

1349

char *fullname = NULL;

1350

ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);

1351

if(ret < 0){

1352

perror_plus("asprintf");

1353

return 0;

1354

}

1355

1356

ret = stat(fullname, &st);

1361

ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);

1357

1362

if(ret == -1){

1358

1363

if(debug){

1359

1364

perror_plus("Could not stat hook");

1360

1365

}

1361

1366

return 0;

1362

1367

}

1363

free(fullname);

1364

1368

if(not (S_ISREG(st.st_mode))){

1365

1369

/* Not a regular file */

1366

1370

if(debug){

1465

1469

error_t ret_errno = 0;

1466

1470

if(seteuid(0) == -1){

1467

1471

ret_errno = errno;

1468

perror_plus("seteuid");

1469

1472

}

1470

1473

errno = old_errno;

1471

1474

return ret_errno;

1482

1485

}

1483

1486

if(setuid(0) == -1){

1484

1487

ret_errno = errno;

1485

perror_plus("seteuid");

1486

1488

}

1487

1489

errno = old_errno;

1488

1490

return ret_errno;

1495

1497

error_t ret_errno = 0;

1496

1498

if(seteuid(uid) == -1){

1497

1499

ret_errno = errno;

1498

perror_plus("seteuid");

1499

1500

}

1500

1501

errno = old_errno;

1501

1502

return ret_errno;

1508

1509

error_t ret_errno = 0;

1509

1510

if(setuid(uid) == -1){

1510

1511

ret_errno = errno;

1511

perror_plus("setuid");

1512

}

1513

errno = old_errno;

1514

return ret_errno;

1515

}

1516

1517

#ifndef O_CLOEXEC

1518

/*

1519

* Based on the example in the GNU LibC manual chapter 13.13 "File

1520

* Descriptor Flags".

1521

| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |

1522

*/

1523

__attribute__((warn_unused_result))

1524

static int set_cloexec_flag(int fd){

1525

int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));

1526

/* If reading the flags failed, return error indication now. */

1527

if(ret < 0){

1528

return ret;

1529

}

1530

/* Store modified flag word in the descriptor. */

1531

return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,

1532

ret | FD_CLOEXEC));

1533

}

1534

#endif /* not O_CLOEXEC */

1535

1536

1517

__attribute__((nonnull))

1537

1518

void run_network_hooks(const char *mode, const char *interface,

1538

1519

const float delay){

1539

struct dirent **direntries;

1520

struct dirent **direntries = NULL;

1540

1521

if(hookdir_fd == -1){

1541

hookdir_fd = open(hookdir, O_RDONLY |

1542

#ifdef O_CLOEXEC

1543

O_CLOEXEC

1544

#else /* not O_CLOEXEC */

1545

0

1546

#endif /* not O_CLOEXEC */

1547

);

1522

hookdir_fd = open(hookdir, O_RDONLY);

1548

1523

if(hookdir_fd == -1){

1549

1524

if(errno == ENOENT){

1550

1525

if(debug){

1556

1531

}

1557

1532

return;

1558

1533

}

1559

#ifndef O_CLOEXEC

1560

if(set_cloexec_flag(hookdir_fd) < 0){

1561

perror_plus("set_cloexec_flag");

1562

if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){

1563

perror_plus("close");

1564

} else {

1565

hookdir_fd = -1;

1566

}

1567

return;

1568

}

1569

#endif /* not O_CLOEXEC */

1570

1534

}

1571

1535

#ifdef __GLIBC__

1572

1536

#if __GLIBC_PREREQ(2, 15)

1589

1553

int devnull = open("/dev/null", O_RDONLY);

1590

1554

for(int i = 0; i < numhooks; i++){

1591

1555

direntry = direntries[i];

1592

char *fullname = NULL;

1593

ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);

1594

if(ret < 0){

1595

perror_plus("asprintf");

1596

continue;

1597

}

1598

1556

if(debug){

1599

1557

fprintf_plus(stderr, "Running network hook \"%s\"\n",

1600

1558

direntry->d_name);

1603

1561

if(hook_pid == 0){

1604

1562

/* Child */

1605

1563

/* Raise privileges */

1606

if(raise_privileges_permanently() != 0){

1564

errno = raise_privileges_permanently();

1565

if(errno != 0){

1607

1566

perror_plus("Failed to raise privileges");

1608

1567

_exit(EX_NOPERM);

1609

1568

}

1676

1635

_exit(EX_OSERR);

1677

1636

}

1678

1637

}

1679

if(execl(fullname, direntry->d_name, mode, NULL) == -1){

1680

perror_plus("execl");

1638

int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);

1639

if(hook_fd == -1){

1640

perror_plus("openat");

1641

_exit(EXIT_FAILURE);

1642

}

1643

if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){

1644

perror_plus("close");

1645

_exit(EXIT_FAILURE);

1646

}

1647

if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },

1648

environ) == -1){

1649

perror_plus("fexecve");

1681

1650

_exit(EXIT_FAILURE);

1682

1651

}

1683

1652

} else {

1684

1653

int status;

1685

1654

if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){

1686

1655

perror_plus("waitpid");

1687

free(fullname);

1656

free(direntry);

1688

1657

continue;

1689

1658

}

1690

1659

if(WIFEXITED(status)){

1692

1661

fprintf_plus(stderr, "Warning: network hook \"%s\" exited"

1693

1662

" with status %d\n", direntry->d_name,

1694

1663

WEXITSTATUS(status));

1695

free(fullname);

1664

free(direntry);

1696

1665

continue;

1697

1666

}

1698

1667

} else if(WIFSIGNALED(status)){

1699

1668

fprintf_plus(stderr, "Warning: network hook \"%s\" died by"

1700

1669

" signal %d\n", direntry->d_name,

1701

1670

WTERMSIG(status));

1702

free(fullname);

1671

free(direntry);

1703

1672

continue;

1704

1673

} else {

1705

1674

fprintf_plus(stderr, "Warning: network hook \"%s\""

1706

1675

" crashed\n", direntry->d_name);

1707

free(fullname);

1676

free(direntry);

1708

1677

continue;

1709

1678

}

1710

1679

}

1711

free(fullname);

1712

1680

if(debug){

1713

1681

fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",

1714

1682

direntry->d_name);

1715

1683

}

1684

free(direntry);

1716

1685

}

1686

free(direntries);

1717

1687

if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){

1718

1688

perror_plus("close");

1719

1689

} else {

1776

1746

/* Raise privileges */

1777

1747

ret_errno = raise_privileges();

1778

1748

if(ret_errno != 0){

1749

errno = ret_errno;

1779

1750

perror_plus("Failed to raise privileges");

1780

1751

}

1781

1752

1885

1856

/* Raise privileges */

1886

1857

ret_errno = raise_privileges();

1887

1858

if(ret_errno != 0){

1859

errno = ret_errno;

1888

1860

perror_plus("Failed to raise privileges");

1889

1861

}

1890

1862

2297

2269

2298

2270

/* If no interfaces were specified, make a list */

2299

2271

if(mc.interfaces == NULL){

2300

struct dirent **direntries;

2272

struct dirent **direntries = NULL;

2301

2273

/* Look for any good interfaces */

2302

2274

ret = scandir(sys_class_net, &direntries, good_interface,

2303

2275

alphasort);

2309

2281

if(ret_errno != 0){

2310

2282

errno = ret_errno;

2311

2283

perror_plus("argz_add");

2284

free(direntries[i]);

2312

2285

continue;

2313

2286

}

2314

2287

if(debug){

2315

2288

fprintf_plus(stderr, "Will use interface \"%s\"\n",

2316

2289

direntries[i]->d_name);

2317

2290

}

2291

free(direntries[i]);

2318

2292

}

2319

2293

free(direntries);

2320

2294

} else {

2321

free(direntries);

2295

if(ret == 0){

2296

free(direntries);

2297

}

2322

2298

fprintf_plus(stderr, "Could not find a network interface\n");

2323

2299

exitcode = EXIT_FAILURE;

2324

2300

goto end;

2588

2564

mc.current_server->prev->next = NULL;

2589

2565

while(mc.current_server != NULL){

2590

2566

server *next = mc.current_server->next;

2567

#ifdef __GNUC__

2568

#pragma GCC diagnostic push

2569

#pragma GCC diagnostic ignored "-Wcast-qual"

2570

#endif

2571

free((char *)(mc.current_server->ip));

2572

#ifdef __GNUC__

2573

#pragma GCC diagnostic pop

2574

#endif

2591

2575

free(mc.current_server);

2592

2576

mc.current_server = next;

2593

2577

}

2597

2581

{

2598

2582

ret_errno = raise_privileges();

2599

2583

if(ret_errno != 0){

2584

errno = ret_errno;

2600

2585

perror_plus("Failed to raise privileges");

2601

2586

} else {

2602

2587

2625

2610

2626

2611

ret_errno = lower_privileges_permanently();

2627

2612

if(ret_errno != 0){

2613

errno = ret_errno;

2628

2614

perror_plus("Failed to lower privileges permanently");

2629

2615

}

2630

2616

}

2635

2621

/* Removes the GPGME temp directory and all files inside */

2636

2622

if(tempdir != NULL){

2637

2623

struct dirent **direntries = NULL;

2638

struct dirent *direntry = NULL;

2639

int numentries = scandir(tempdir, &direntries, notdotentries,

2640

alphasort);

2641

if(numentries > 0){

2642

for(int i = 0; i < numentries; i++){

2643

direntry = direntries[i];

2644

char *fullname = NULL;

2645

ret = asprintf(&fullname, "%s/%s", tempdir,

2646

direntry->d_name);

2647

if(ret < 0){

2648

perror_plus("asprintf");

2649

continue;

2650

}

2651

ret = remove(fullname);

2652

if(ret == -1){

2653

fprintf_plus(stderr, "remove(\"%s\"): %s\n", fullname,

2654

strerror(errno));

2655

}

2656

free(fullname);

2624

int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |

2625

O_NOFOLLOW));

2626

if(tempdir_fd == -1){

2627

perror_plus("open");

2628

} else {

2629

#ifdef __GLIBC__

2630

#if __GLIBC_PREREQ(2, 15)

2631

int numentries = scandirat(tempdir_fd, ".", &direntries,

2632

notdotentries, alphasort);

2633

#else /* not __GLIBC_PREREQ(2, 15) */

2634

int numentries = scandir(tempdir, &direntries, notdotentries,

2635

alphasort);

2636

#endif /* not __GLIBC_PREREQ(2, 15) */

2637

#else /* not __GLIBC__ */

2638

int numentries = scandir(tempdir, &direntries, notdotentries,

2639

alphasort);

2640

#endif /* not __GLIBC__ */

2641

if(numentries >= 0){

2642

for(int i = 0; i < numentries; i++){

2643

ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);

2644

if(ret == -1){

2645

fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"

2646

" \"%s\", 0): %s\n", tempdir,

2647

direntries[i]->d_name, strerror(errno));

2648

}

2649

free(direntries[i]);

2650

}

2651

2652

/* need to clean even if 0 because man page doesn't specify */

2653

free(direntries);

2654

if(numentries == -1){

2655

perror_plus("scandir");

2656

}

2657

ret = rmdir(tempdir);

2658

if(ret == -1 and errno != ENOENT){

2659

perror_plus("rmdir");

2660

}

2657

2661

}

2658

}

2659

2660

/* need to clean even if 0 because man page doesn't specify */

2661

free(direntries);

2662

if(numentries == -1){

2663

perror_plus("scandir");

2664

}

2665

ret = rmdir(tempdir);

2666

if(ret == -1 and errno != ENOENT){

2667

perror_plus("rmdir");

2662

TEMP_FAILURE_RETRY(close(tempdir_fd));

2668

2663

}

2669

2664

}

2670

2665