56
56
#include <sys/stat.h> /* open(), S_ISREG */
57
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect(),
58
inet_pton(), connect() */
60
59
#include <fcntl.h> /* open() */
61
60
#include <dirent.h> /* opendir(), struct dirent, readdir()
63
62
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
64
#include <assert.h> /* assert() */
65
65
#include <errno.h> /* perror(), errno,
66
66
program_invocation_short_name */
67
67
#include <time.h> /* nanosleep(), time(), sleep() */
74
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
75
getuid(), getgid(), seteuid(),
76
76
setgid(), pause(), _exit() */
77
#include <arpa/inet.h> /* inet_pton(), htons() */
77
#include <arpa/inet.h> /* inet_pton(), htons, inet_ntop() */
78
78
#include <iso646.h> /* not, or, and */
79
79
#include <argp.h> /* struct argp_option, error_t, struct
80
80
argp_state, struct argp,
88
88
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
89
89
WEXITSTATUS(), WTERMSIG() */
90
90
#include <grp.h> /* setgroups() */
91
#include <argz.h> /* argz_add_sep(), argz_next(),
92
argz_delete(), argz_append(),
93
argz_stringify(), argz_add(),
95
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
96
EAI_SYSTEM, gai_strerror() */
99
93
#include <sys/klog.h> /* klogctl() */
164
159
const char *priority;
166
161
server *current_server;
168
size_t interfaces_size;
169
162
} mandos_context;
171
/* global so signal handler can reach it*/
172
AvahiSimplePoll *simple_poll;
164
/* global context so signal handler can reach it*/
165
mandos_context mc = { .simple_poll = NULL, .server = NULL,
166
.dh_bits = 1024, .priority = "SECURE256"
167
":!CTYPE-X.509:+CTYPE-OPENPGP",
168
.current_server = NULL };
174
170
sig_atomic_t quit_now = 0;
175
171
int signal_received = 0;
183
179
perror(print_text);
186
__attribute__((format (gnu_printf, 2, 3), nonnull))
182
__attribute__((format (gnu_printf, 2, 3)))
187
183
int fprintf_plus(FILE *stream, const char *format, ...){
189
185
va_start (ap, format);
191
187
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
192
188
program_invocation_short_name));
193
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
189
return TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
198
194
* bytes. "buffer_capacity" is how much is currently allocated,
199
195
* "buffer_length" is how much is already used.
201
__attribute__((nonnull, warn_unused_result))
202
197
size_t incbuffer(char **buffer, size_t buffer_length,
203
198
size_t buffer_capacity){
204
199
if(buffer_length + BUFFER_SIZE > buffer_capacity){
205
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
207
int old_errno = errno;
200
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
214
204
buffer_capacity += BUFFER_SIZE;
216
206
return buffer_capacity;
219
209
/* Add server to set of servers to retry periodically */
220
__attribute__((nonnull, warn_unused_result))
221
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
222
int af, server **current_server){
210
bool add_server(const char *ip, uint16_t port, AvahiIfIndex if_index,
224
213
server *new_server = malloc(sizeof(server));
225
214
if(new_server == NULL){
234
223
perror_plus("strdup");
237
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
239
perror_plus("clock_gettime");
242
226
/* Special case of first server */
243
if(*current_server == NULL){
227
if (mc.current_server == NULL){
244
228
new_server->next = new_server;
245
229
new_server->prev = new_server;
246
*current_server = new_server;
230
mc.current_server = new_server;
231
/* Place the new server last in the list */
248
/* Place the new server last in the list */
249
new_server->next = *current_server;
250
new_server->prev = (*current_server)->prev;
233
new_server->next = mc.current_server;
234
new_server->prev = mc.current_server->prev;
251
235
new_server->prev->next = new_server;
252
(*current_server)->prev = new_server;
236
mc.current_server->prev = new_server;
238
ret = clock_gettime(CLOCK_MONOTONIC, &mc.current_server->last_seen);
240
perror_plus("clock_gettime");
258
247
* Initialize GPGME.
260
__attribute__((nonnull, warn_unused_result))
261
static bool init_gpgme(const char * const seckey,
262
const char * const pubkey,
263
const char * const tempdir,
249
static bool init_gpgme(const char *seckey, const char *pubkey,
250
const char *tempdir){
265
251
gpgme_error_t rc;
266
252
gpgme_engine_info_t engine_info;
269
256
* Helper function to insert pub and seckey to the engine keyring.
271
bool import_key(const char * const filename){
258
bool import_key(const char *filename){
274
261
gpgme_data_t pgp_data;
392
377
/* Decrypt data from the cryptotext data buffer to the plaintext
394
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
379
rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
395
380
if(rc != GPG_ERR_NO_ERROR){
396
381
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
397
382
gpgme_strsource(rc), gpgme_strerror(rc));
398
383
plaintext_length = -1;
400
385
gpgme_decrypt_result_t result;
401
result = gpgme_op_decrypt_result(mc->ctx);
386
result = gpgme_op_decrypt_result(mc.ctx);
402
387
if(result == NULL){
403
388
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
481
466
return plaintext_length;
484
__attribute__((warn_unused_result))
485
static const char *safer_gnutls_strerror(int value){
486
const char *ret = gnutls_strerror(value);
469
static const char * safer_gnutls_strerror(int value){
470
const char *ret = gnutls_strerror(value); /* Spurious warning from
471
-Wunreachable-code */
488
473
ret = "(unknown)";
492
477
/* GnuTLS log function callback */
493
__attribute__((nonnull))
494
478
static void debuggnutls(__attribute__((unused)) int level,
495
479
const char* string){
496
480
fprintf_plus(stderr, "GnuTLS: %s", string);
499
__attribute__((nonnull, warn_unused_result))
500
483
static int init_gnutls_global(const char *pubkeyfilename,
501
const char *seckeyfilename,
484
const char *seckeyfilename){
552
534
/* GnuTLS server initialization */
553
ret = gnutls_dh_params_init(&mc->dh_params);
535
ret = gnutls_dh_params_init(&mc.dh_params);
554
536
if(ret != GNUTLS_E_SUCCESS){
555
537
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
556
538
" initialization: %s\n",
557
539
safer_gnutls_strerror(ret));
560
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
542
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
561
543
if(ret != GNUTLS_E_SUCCESS){
562
544
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
563
545
safer_gnutls_strerror(ret));
567
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
549
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
573
gnutls_certificate_free_credentials(mc->cred);
555
gnutls_certificate_free_credentials(mc.cred);
574
556
gnutls_global_deinit();
575
gnutls_dh_params_deinit(mc->dh_params);
557
gnutls_dh_params_deinit(mc.dh_params);
579
__attribute__((nonnull, warn_unused_result))
580
static int init_gnutls_session(gnutls_session_t *session,
561
static int init_gnutls_session(gnutls_session_t *session){
583
563
/* GnuTLS session creation */
639
619
__attribute__((unused)) const char *txt){}
641
621
/* Called when a Mandos server is found */
642
__attribute__((nonnull, warn_unused_result))
643
static int start_mandos_communication(const char *ip, in_port_t port,
622
static int start_mandos_communication(const char *ip, uint16_t port,
644
623
AvahiIfIndex if_index,
645
int af, mandos_context *mc){
646
625
int ret, tcp_sd = -1;
648
struct sockaddr_storage to;
628
struct sockaddr_in in;
629
struct sockaddr_in6 in6;
649
631
char *buffer = NULL;
650
632
char *decrypted_buffer = NULL;
651
633
size_t buffer_length = 0;
678
/* If the interface is specified and we have a list of interfaces */
679
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
680
/* Check if the interface is one of the interfaces we are using */
683
char *interface = NULL;
684
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
686
if(if_nametoindex(interface) == (unsigned int)if_index){
693
/* This interface does not match any in the list, so we don't
694
connect to the server */
696
char interface[IF_NAMESIZE];
697
if(if_indextoname((unsigned int)if_index, interface) == NULL){
698
perror_plus("if_indextoname");
700
fprintf_plus(stderr, "Skipping server on non-used interface"
702
if_indextoname((unsigned int)if_index,
710
ret = init_gnutls_session(&session, mc);
660
ret = init_gnutls_session(&session);
716
666
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
717
PRIuMAX "\n", ip, (uintmax_t)port);
667
PRIu16 "\n", ip, port);
720
670
tcp_sd = socket(pf, SOCK_STREAM, 0);
733
683
memset(&to, 0, sizeof(to));
734
684
if(af == AF_INET6){
735
((struct sockaddr_in6 *)&to)->sin6_family = (sa_family_t)af;
736
ret = inet_pton(af, ip, &((struct sockaddr_in6 *)&to)->sin6_addr);
685
to.in6.sin6_family = (sa_family_t)af;
686
ret = inet_pton(af, ip, &to.in6.sin6_addr);
737
687
} else { /* IPv4 */
738
((struct sockaddr_in *)&to)->sin_family = (sa_family_t)af;
739
ret = inet_pton(af, ip, &((struct sockaddr_in *)&to)->sin_addr);
688
to.in.sin_family = (sa_family_t)af;
689
ret = inet_pton(af, ip, &to.in.sin_addr);
753
703
if(af == AF_INET6){
754
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
755
if(IN6_IS_ADDR_LINKLOCAL
756
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
704
to.in6.sin6_port = htons(port); /* Spurious warnings from
706
-Wunreachable-code */
708
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
709
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
757
711
if(if_index == AVAHI_IF_UNSPEC){
758
712
fprintf_plus(stderr, "An IPv6 link-local address is"
759
713
" incomplete without a network interface\n");
778
734
if(if_indextoname((unsigned int)if_index, interface) == NULL){
779
735
perror_plus("if_indextoname");
781
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
782
"\n", ip, interface, (uintmax_t)port);
737
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIu16
738
"\n", ip, interface, port);
785
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
786
ip, (uintmax_t)port);
741
fprintf_plus(stderr, "Connection to: %s, port %" PRIu16 "\n",
788
744
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
789
745
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
790
747
if(af == AF_INET6){
791
ret = getnameinfo((struct sockaddr *)&to,
792
sizeof(struct sockaddr_in6),
793
addrstr, sizeof(addrstr), NULL, 0,
748
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
796
ret = getnameinfo((struct sockaddr *)&to,
797
sizeof(struct sockaddr_in),
798
addrstr, sizeof(addrstr), NULL, 0,
751
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
801
if(ret == EAI_SYSTEM){
802
perror_plus("getnameinfo");
803
} else if(ret != 0) {
804
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
805
} else if(strcmp(addrstr, ip) != 0){
806
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
755
perror_plus("inet_ntop");
757
if(strcmp(addrstr, ip) != 0){
758
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
815
768
if(af == AF_INET6){
816
ret = connect(tcp_sd, (struct sockaddr *)&to,
817
sizeof(struct sockaddr_in6));
769
ret = connect(tcp_sd, &to.in6, sizeof(to));
819
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
820
sizeof(struct sockaddr_in));
771
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
823
if((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
774
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
825
776
perror_plus("connect");
1086
1033
PRIdMAX ") on port %" PRIu16 "\n", name,
1087
1034
host_name, ip, (intmax_t)interface, port);
1089
int ret = start_mandos_communication(ip, (in_port_t)port,
1091
avahi_proto_to_af(proto),
1036
int ret = start_mandos_communication(ip, port, interface,
1037
avahi_proto_to_af(proto));
1094
avahi_simple_poll_quit(simple_poll);
1039
avahi_simple_poll_quit(mc.simple_poll);
1096
if(not add_server(ip, (in_port_t)port, interface,
1097
avahi_proto_to_af(proto),
1098
&((mandos_context*)mc)->current_server)){
1041
if(not add_server(ip, port, interface,
1042
avahi_proto_to_af(proto))){
1099
1043
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1100
1044
" list\n", name);
1142
1083
the callback function is called the Avahi server will free the
1143
1084
resolver for us. */
1145
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1146
interface, protocol, name, type,
1147
domain, protocol, 0,
1148
resolve_callback, mc) == NULL)
1086
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
1087
name, type, domain, protocol, 0,
1088
resolve_callback, NULL) == NULL)
1149
1089
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1151
avahi_strerror(avahi_server_errno
1152
(((mandos_context*)mc)->server)));
1091
avahi_strerror(avahi_server_errno(mc.server)));
1155
1094
case AVAHI_BROWSER_REMOVE:
1174
1113
signal_received = sig;
1175
1114
int old_errno = errno;
1176
1115
/* set main loop to exit */
1177
if(simple_poll != NULL){
1178
avahi_simple_poll_quit(simple_poll);
1116
if(mc.simple_poll != NULL){
1117
avahi_simple_poll_quit(mc.simple_poll);
1180
1119
errno = old_errno;
1183
__attribute__((nonnull, warn_unused_result))
1184
1122
bool get_flags(const char *ifname, struct ifreq *ifr){
1188
1125
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1191
1127
perror_plus("socket");
1195
1130
strcpy(ifr->ifr_name, ifname);
1196
1131
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1200
1134
perror_plus("ioctl SIOCGIFFLAGS");
1208
__attribute__((nonnull, warn_unused_result))
1209
1141
bool good_flags(const char *ifname, const struct ifreq *ifr){
1211
1143
/* Reject the loopback device */
1278
* This function determines if a network interface is up.
1280
__attribute__((nonnull, warn_unused_result))
1281
bool interface_is_up(const char *interface){
1283
if(not get_flags(interface, &ifr)){
1285
fprintf_plus(stderr, "Failed to get flags for interface "
1286
"\"%s\"\n", interface);
1291
return (bool)(ifr.ifr_flags & IFF_UP);
1295
* This function determines if a network interface is running
1297
__attribute__((nonnull, warn_unused_result))
1298
bool interface_is_running(const char *interface){
1300
if(not get_flags(interface, &ifr)){
1302
fprintf_plus(stderr, "Failed to get flags for interface "
1303
"\"%s\"\n", interface);
1308
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1311
__attribute__((nonnull, pure, warn_unused_result))
1209
* This function determines if a directory entry in /sys/class/net
1210
* corresponds to an acceptable network device which is up.
1211
* (This function is passed to scandir(3) as a filter function.)
1213
int up_interface(const struct dirent *if_entry){
1214
if(if_entry->d_name[0] == '.'){
1219
if(not get_flags(if_entry->d_name, &ifr)){
1221
fprintf_plus(stderr, "Failed to get flags for interface "
1222
"\"%s\"\n", if_entry->d_name);
1227
/* Reject down interfaces */
1228
if(not (ifr.ifr_flags & IFF_UP)){
1230
fprintf_plus(stderr, "Rejecting down interface \"%s\"\n",
1236
/* Reject non-running interfaces */
1237
if(not (ifr.ifr_flags & IFF_RUNNING)){
1239
fprintf_plus(stderr, "Rejecting non-running interface \"%s\"\n",
1245
if(not good_flags(if_entry->d_name, &ifr)){
1312
1251
int notdotentries(const struct dirent *direntry){
1313
1252
/* Skip "." and ".." */
1314
1253
if(direntry->d_name[0] == '.'
1385
__attribute__((nonnull, warn_unused_result))
1386
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
1387
mandos_context *mc){
1323
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval){
1389
1325
struct timespec now;
1390
1326
struct timespec waited_time;
1391
1327
intmax_t block_time;
1394
if(mc->current_server == NULL){
1330
if(mc.current_server == NULL){
1396
1332
fprintf_plus(stderr, "Wait until first server is found."
1397
1333
" No timeout!\n");
1399
1335
ret = avahi_simple_poll_iterate(s, -1);
1402
1338
fprintf_plus(stderr, "Check current_server if we should run"
1403
1339
" it, or wait\n");
1411
1347
/* Calculating in ms how long time between now and server
1412
1348
who we visted longest time ago. Now - last seen. */
1413
1349
waited_time.tv_sec = (now.tv_sec
1414
- mc->current_server->last_seen.tv_sec);
1350
- mc.current_server->last_seen.tv_sec);
1415
1351
waited_time.tv_nsec = (now.tv_nsec
1416
- mc->current_server->last_seen.tv_nsec);
1352
- mc.current_server->last_seen.tv_nsec);
1417
1353
/* total time is 10s/10,000ms.
1418
1354
Converting to s from ms by dividing by 1,000,
1419
1355
and ns to ms by dividing by 1,000,000. */
1421
1357
- ((intmax_t)waited_time.tv_sec * 1000))
1422
1358
- ((intmax_t)waited_time.tv_nsec / 1000000));
1425
1361
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
1429
1365
if(block_time <= 0){
1430
ret = start_mandos_communication(mc->current_server->ip,
1431
mc->current_server->port,
1432
mc->current_server->if_index,
1433
mc->current_server->af, mc);
1366
ret = start_mandos_communication(mc.current_server->ip,
1367
mc.current_server->port,
1368
mc.current_server->if_index,
1369
mc.current_server->af);
1435
avahi_simple_poll_quit(s);
1371
avahi_simple_poll_quit(mc.simple_poll);
1438
1374
ret = clock_gettime(CLOCK_MONOTONIC,
1439
&mc->current_server->last_seen);
1375
&mc.current_server->last_seen);
1441
1377
perror_plus("clock_gettime");
1444
mc->current_server = mc->current_server->next;
1380
mc.current_server = mc.current_server->next;
1445
1381
block_time = 0; /* Call avahi to find new Mandos
1446
1382
servers, but don't block */
1459
1395
/* Set effective uid to 0, return errno */
1460
__attribute__((warn_unused_result))
1461
error_t raise_privileges(void){
1462
error_t old_errno = errno;
1463
error_t ret_errno = 0;
1396
int raise_privileges(void){
1397
int old_errno = errno;
1464
1400
if(seteuid(0) == -1){
1466
1401
perror_plus("seteuid");
1468
1404
errno = old_errno;
1469
1405
return ret_errno;
1472
1408
/* Set effective and real user ID to 0. Return errno. */
1473
__attribute__((warn_unused_result))
1474
error_t raise_privileges_permanently(void){
1475
error_t old_errno = errno;
1476
error_t ret_errno = raise_privileges();
1409
int raise_privileges_permanently(void){
1410
int old_errno = errno;
1411
int ret_errno = raise_privileges();
1477
1412
if(ret_errno != 0){
1478
1413
errno = old_errno;
1479
1414
return ret_errno;
1481
1417
if(setuid(0) == -1){
1483
1418
perror_plus("seteuid");
1485
1421
errno = old_errno;
1486
1422
return ret_errno;
1489
1425
/* Set effective user ID to unprivileged saved user ID */
1490
__attribute__((warn_unused_result))
1491
error_t lower_privileges(void){
1492
error_t old_errno = errno;
1493
error_t ret_errno = 0;
1426
int lower_privileges(void){
1427
int old_errno = errno;
1494
1430
if(seteuid(uid) == -1){
1496
1431
perror_plus("seteuid");
1502
/* Lower privileges permanently */
1503
__attribute__((warn_unused_result))
1504
error_t lower_privileges_permanently(void){
1505
error_t old_errno = errno;
1506
error_t ret_errno = 0;
1507
if(setuid(uid) == -1){
1509
perror_plus("setuid");
1515
__attribute__((nonnull))
1516
void run_network_hooks(const char *mode, const char *interface,
1438
bool run_network_hooks(const char *mode, const char *interface,
1517
1439
const float delay){
1518
1440
struct dirent **direntries;
1441
struct dirent *direntry;
1519
1443
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1521
1445
if(numhooks == -1){
1522
if(errno == ENOENT){
1524
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1525
" found\n", hookdir);
1528
perror_plus("scandir");
1446
perror_plus("scandir");
1531
struct dirent *direntry;
1533
1448
int devnull = open("/dev/null", O_RDONLY);
1534
1449
for(int i = 0; i < numhooks; i++){
1535
1450
direntry = direntries[i];
1547
1462
if(hook_pid == 0){
1549
1464
/* Raise privileges */
1550
if(raise_privileges_permanently() != 0){
1551
perror_plus("Failed to raise privileges");
1465
raise_privileges_permanently();
1554
1466
/* Set group */
1556
1468
ret = setgid(0);
1558
1470
perror_plus("setgid");
1561
1472
/* Reset supplementary groups */
1563
1474
ret = setgroups(0, NULL);
1565
1476
perror_plus("setgroups");
1568
ret = dup2(devnull, STDIN_FILENO);
1570
perror_plus("dup2(devnull, STDIN_FILENO)");
1573
ret = close(devnull);
1575
perror_plus("close");
1578
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1580
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1478
dup2(devnull, STDIN_FILENO);
1480
dup2(STDERR_FILENO, STDOUT_FILENO);
1583
1481
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1585
1483
perror_plus("setenv");
1661
1559
close(devnull);
1665
__attribute__((nonnull, warn_unused_result))
1666
error_t bring_up_interface(const char *const interface,
1668
error_t old_errno = errno;
1564
int bring_up_interface(const char * const interface, const float delay){
1566
int old_errno = errno;
1670
1569
struct ifreq network;
1671
unsigned int if_index = if_nametoindex(interface);
1570
AvahiIfIndex if_index = (AvahiIfIndex)if_nametoindex(interface);
1672
1571
if(if_index == 0){
1673
1572
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1674
1573
errno = old_errno;
1683
if(not interface_is_up(interface)){
1684
error_t ret_errno = 0, ioctl_errno = 0;
1685
if(not get_flags(interface, &network)){
1687
fprintf_plus(stderr, "Failed to get flags for interface "
1688
"\"%s\"\n", interface);
1692
network.ifr_flags |= IFF_UP; /* set flag */
1694
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1697
perror_plus("socket");
1703
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1705
perror_plus("close");
1712
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
1716
/* Raise privileges */
1717
ret_errno = raise_privileges();
1719
perror_plus("Failed to raise privileges");
1724
bool restore_loglevel = false;
1726
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1727
messages about the network interface to mess up the prompt */
1728
ret_linux = klogctl(8, NULL, 5);
1729
if(ret_linux == -1){
1730
perror_plus("klogctl");
1732
restore_loglevel = true;
1735
#endif /* __linux__ */
1736
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1737
ioctl_errno = errno;
1739
if(restore_loglevel){
1740
ret_linux = klogctl(7, NULL, 0);
1741
if(ret_linux == -1){
1742
perror_plus("klogctl");
1745
#endif /* __linux__ */
1747
/* If raise_privileges() succeeded above */
1749
/* Lower privileges */
1750
ret_errno = lower_privileges();
1753
perror_plus("Failed to lower privileges");
1757
/* Close the socket */
1758
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1582
/* Re-raise priviliges */
1586
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1587
messages about the network interface to mess up the prompt */
1588
ret = klogctl(8, NULL, 5);
1589
bool restore_loglevel = true;
1591
restore_loglevel = false;
1592
perror_plus("klogctl");
1594
#endif /* __linux__ */
1596
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1599
perror_plus("socket");
1601
if(restore_loglevel){
1602
ret = klogctl(7, NULL, 0);
1604
perror_plus("klogctl");
1607
#endif /* __linux__ */
1608
/* Lower privileges */
1613
strcpy(network.ifr_name, interface);
1614
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1617
perror_plus("ioctl SIOCGIFFLAGS");
1619
if(restore_loglevel){
1620
ret = klogctl(7, NULL, 0);
1622
perror_plus("klogctl");
1625
#endif /* __linux__ */
1626
/* Lower privileges */
1631
if((network.ifr_flags & IFF_UP) == 0){
1632
network.ifr_flags |= IFF_UP;
1633
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1760
perror_plus("close");
1763
if(ret_setflags == -1){
1764
errno = ioctl_errno;
1765
1636
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1638
if(restore_loglevel){
1639
ret = klogctl(7, NULL, 0);
1641
perror_plus("klogctl");
1644
#endif /* __linux__ */
1645
/* Lower privileges */
1766
1647
errno = old_errno;
1770
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
1774
1651
/* Sleep checking until interface is running.
1775
1652
Check every 0.25s, up to total time of delay */
1776
1653
for(int i=0; i < delay * 4; i++){
1777
if(interface_is_running(interface)){
1654
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1656
perror_plus("ioctl SIOCGIFFLAGS");
1657
} else if(network.ifr_flags & IFF_RUNNING){
1780
1660
struct timespec sleeptime = { .tv_nsec = 250000000 };
1783
1663
perror_plus("nanosleep");
1791
__attribute__((nonnull, warn_unused_result))
1792
error_t take_down_interface(const char *const interface){
1793
error_t old_errno = errno;
1794
struct ifreq network;
1795
unsigned int if_index = if_nametoindex(interface);
1797
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1666
/* Close the socket */
1667
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1669
perror_plus("close");
1801
if(interface_is_up(interface)){
1802
error_t ret_errno = 0, ioctl_errno = 0;
1803
if(not get_flags(interface, &network) and debug){
1805
fprintf_plus(stderr, "Failed to get flags for interface "
1806
"\"%s\"\n", interface);
1810
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
1812
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1815
perror_plus("socket");
1821
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
1825
/* Raise privileges */
1826
ret_errno = raise_privileges();
1828
perror_plus("Failed to raise privileges");
1831
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1832
ioctl_errno = errno;
1834
/* If raise_privileges() succeeded above */
1836
/* Lower privileges */
1837
ret_errno = lower_privileges();
1840
perror_plus("Failed to lower privileges");
1844
/* Close the socket */
1845
int ret = (int)TEMP_FAILURE_RETRY(close(sd));
1672
if(restore_loglevel){
1673
/* Restores kernel loglevel to default */
1674
ret = klogctl(7, NULL, 0);
1847
perror_plus("close");
1850
if(ret_setflags == -1){
1851
errno = ioctl_errno;
1852
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
1857
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
1676
perror_plus("klogctl");
1679
#endif /* __linux__ */
1680
/* Lower privileges */
1861
1682
errno = old_errno;
1865
1686
int main(int argc, char *argv[]){
1866
mandos_context mc = { .server = NULL, .dh_bits = 1024,
1867
.priority = "SECURE256:!CTYPE-X.509:"
1868
"+CTYPE-OPENPGP", .current_server = NULL,
1869
.interfaces = NULL, .interfaces_size = 0 };
1870
1687
AvahiSServiceBrowser *sb = NULL;
1873
1690
intmax_t tmpmax;
1875
1692
int exitcode = EXIT_SUCCESS;
1876
char *interfaces_to_take_down = NULL;
1877
size_t interfaces_to_take_down_size = 0;
1878
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
1879
char old_tempdir[] = "/tmp/mandosXXXXXX";
1880
char *tempdir = NULL;
1693
const char *interface = "";
1694
struct ifreq network;
1696
bool take_down_interface = false;
1697
char tempdir[] = "/tmp/mandosXXXXXX";
1698
bool tempdir_created = false;
1881
1699
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1882
1700
const char *seckey = PATHDIR "/" SECKEY;
1883
1701
const char *pubkey = PATHDIR "/" PUBKEY;
1884
char *interfaces_hooks = NULL;
1886
1703
bool gnutls_initialized = false;
1887
1704
bool gpgme_initialized = false;
2118
1927
/* Lower privileges */
2119
ret_errno = lower_privileges();
2122
perror_plus("Failed to lower privileges");
2127
/* Remove invalid interface names (except "none") */
2129
char *interface = NULL;
2130
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2132
if(strcmp(interface, "none") != 0
2133
and if_nametoindex(interface) == 0){
2134
if(interface[0] != '\0'){
2135
fprintf_plus(stderr, "Not using nonexisting interface"
2136
" \"%s\"\n", interface);
2138
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
1931
perror_plus("seteuid");
2144
1936
/* Run network hooks */
2146
if(mc.interfaces != NULL){
2147
interfaces_hooks = malloc(mc.interfaces_size);
2148
if(interfaces_hooks == NULL){
1937
if(not run_network_hooks("start", interface, delay)){
1942
avahi_set_log_function(empty_log);
1945
if(interface[0] == '\0'){
1946
struct dirent **direntries;
1947
/* First look for interfaces that are up */
1948
ret = scandir(sys_class_net, &direntries, up_interface,
1951
/* No up interfaces, look for any good interfaces */
1953
ret = scandir(sys_class_net, &direntries, good_interface,
1957
/* Pick the first interface returned */
1958
interface = strdup(direntries[0]->d_name);
1960
fprintf_plus(stderr, "Using interface \"%s\"\n", interface);
1962
if(interface == NULL){
2149
1963
perror_plus("malloc");
1965
exitcode = EXIT_FAILURE;
2152
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2153
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
1971
fprintf_plus(stderr, "Could not find a network interface\n");
1972
exitcode = EXIT_FAILURE;
2155
run_network_hooks("start", interfaces_hooks != NULL ?
2156
interfaces_hooks : "", delay);
2160
avahi_set_log_function(empty_log);
2163
1977
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
2164
1978
from the signal handler */
2165
1979
/* Initialize the pseudo-RNG for Avahi */
2166
1980
srand((unsigned int) time(NULL));
2167
simple_poll = avahi_simple_poll_new();
2168
if(simple_poll == NULL){
1981
mc.simple_poll = avahi_simple_poll_new();
1982
if(mc.simple_poll == NULL){
2169
1983
fprintf_plus(stderr,
2170
1984
"Avahi: Failed to create simple poll object.\n");
2171
1985
exitcode = EX_UNAVAILABLE;
2238
/* If no interfaces were specified, make a list */
2239
if(mc.interfaces == NULL){
2240
struct dirent **direntries;
2241
/* Look for any good interfaces */
2242
ret = scandir(sys_class_net, &direntries, good_interface,
2245
/* Add all found interfaces to interfaces list */
2246
for(int i = 0; i < ret; ++i){
2247
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2248
direntries[i]->d_name);
2251
perror_plus("argz_add");
2255
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2256
direntries[i]->d_name);
2262
fprintf_plus(stderr, "Could not find a network interface\n");
2263
exitcode = EXIT_FAILURE;
2268
/* Bring up interfaces which are down, and remove any "none"s */
2270
char *interface = NULL;
2271
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2273
/* If interface name is "none", stop bringing up interfaces.
2274
Also remove all instances of "none" from the list */
2275
if(strcmp(interface, "none") == 0){
2276
argz_delete(&mc.interfaces, &mc.interfaces_size,
2279
while((interface = argz_next(mc.interfaces,
2280
mc.interfaces_size, interface))){
2281
if(strcmp(interface, "none") == 0){
2282
argz_delete(&mc.interfaces, &mc.interfaces_size,
2289
bool interface_was_up = interface_is_up(interface);
2290
errno = bring_up_interface(interface, delay);
2291
if(not interface_was_up){
2293
perror_plus("Failed to bring up interface");
2295
errno = argz_add(&interfaces_to_take_down,
2296
&interfaces_to_take_down_size,
2299
perror_plus("argz_add");
2304
if(debug and (interfaces_to_take_down == NULL)){
2305
fprintf_plus(stderr, "No interfaces were brought up\n");
2309
/* If we only got one interface, explicitly use only that one */
2310
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2312
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2315
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2052
/* If the interface is down, bring it up */
2053
if((interface[0] != '\0') and (strcmp(interface, "none") != 0)){
2054
ret = bring_up_interface(interface, delay);
2057
perror_plus("Failed to bring up interface");
2322
ret = init_gnutls_global(pubkey, seckey, &mc);
2065
ret = init_gnutls_global(pubkey, seckey);
2324
2067
fprintf_plus(stderr, "init_gnutls_global failed\n");
2325
2068
exitcode = EX_UNAVAILABLE;
2335
/* Try /run/tmp before /tmp */
2336
tempdir = mkdtemp(run_tempdir);
2337
if(tempdir == NULL and errno == ENOENT){
2339
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2340
run_tempdir, old_tempdir);
2342
tempdir = mkdtemp(old_tempdir);
2344
if(tempdir == NULL){
2078
if(mkdtemp(tempdir) == NULL){
2345
2079
perror_plus("mkdtemp");
2082
tempdir_created = true;
2353
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
2088
if(not init_gpgme(pubkey, seckey, tempdir)){
2354
2089
fprintf_plus(stderr, "init_gpgme failed\n");
2355
2090
exitcode = EX_UNAVAILABLE;
2446
2180
config.publish_domain = 0;
2448
2182
/* Allocate a new server */
2449
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2450
&config, NULL, NULL, &ret_errno);
2183
mc.server = avahi_server_new(avahi_simple_poll_get
2184
(mc.simple_poll), &config, NULL,
2452
2187
/* Free the Avahi configuration data */
2453
2188
avahi_server_config_free(&config);
2468
2203
/* Create the Avahi service browser */
2469
2204
sb = avahi_s_service_browser_new(mc.server, if_index,
2470
2205
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2471
NULL, 0, browse_callback,
2206
NULL, 0, browse_callback, NULL);
2473
2207
if(sb == NULL){
2474
2208
fprintf_plus(stderr, "Failed to create service browser: %s\n",
2475
2209
avahi_strerror(avahi_server_errno(mc.server)));
2487
2221
fprintf_plus(stderr, "Starting Avahi loop search\n");
2490
ret = avahi_loop_with_timeout(simple_poll,
2491
(int)(retry_interval * 1000), &mc);
2224
ret = avahi_loop_with_timeout(mc.simple_poll,
2225
(int)(retry_interval * 1000));
2493
2227
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
2494
2228
(ret == 0) ? "successfully" : "with error");
2536
/* Re-raise privileges */
2268
/* Run network hooks */
2269
run_network_hooks("stop", interface, delay);
2271
/* Re-raise priviliges */
2538
ret_errno = raise_privileges();
2540
perror_plus("Failed to raise privileges");
2543
/* Run network hooks */
2544
run_network_hooks("stop", interfaces_hooks != NULL ?
2545
interfaces_hooks : "", delay);
2547
/* Take down the network interfaces which were brought up */
2549
char *interface = NULL;
2550
while((interface=argz_next(interfaces_to_take_down,
2551
interfaces_to_take_down_size,
2553
ret_errno = take_down_interface(interface);
2556
perror_plus("Failed to take down interface");
2559
if(debug and (interfaces_to_take_down == NULL)){
2560
fprintf_plus(stderr, "No interfaces needed to be taken"
2566
ret_errno = lower_privileges_permanently();
2568
perror_plus("Failed to lower privileges permanently");
2275
/* Take down the network interface */
2276
if(take_down_interface and geteuid() == 0){
2277
ret = ioctl(sd, SIOCGIFFLAGS, &network);
2279
perror_plus("ioctl SIOCGIFFLAGS");
2280
} else if(network.ifr_flags & IFF_UP){
2281
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2282
ret = ioctl(sd, SIOCSIFFLAGS, &network);
2284
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2287
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2289
perror_plus("close");
2572
free(interfaces_to_take_down);
2573
free(interfaces_hooks);
2293
/* Lower privileges permanently */
2297
perror_plus("setuid");
2575
2300
/* Removes the GPGME temp directory and all files inside */
2576
if(tempdir != NULL){
2301
if(tempdir_created){
2577
2302
struct dirent **direntries = NULL;
2578
2303
struct dirent *direntry = NULL;
2579
2304
int numentries = scandir(tempdir, &direntries, notdotentries,
2306
if (numentries > 0){
2582
2307
for(int i = 0; i < numentries; i++){
2583
2308
direntry = direntries[i];
2584
2309
char *fullname = NULL;