1488
1514
return ret_errno;
1491
bool run_network_hooks(const char *mode, const char *interface,
1519
* Based on the example in the GNU LibC manual chapter 13.13 "File
1520
* Descriptor Flags".
1521
| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |
1523
__attribute__((warn_unused_result))
1524
static int set_cloexec_flag(int fd){
1525
int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));
1526
/* If reading the flags failed, return error indication now. */
1530
/* Store modified flag word in the descriptor. */
1531
return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,
1534
#endif /* not O_CLOEXEC */
1536
__attribute__((nonnull))
1537
void run_network_hooks(const char *mode, const char *interface,
1492
1538
const float delay){
1493
1539
struct dirent **direntries;
1494
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1540
if(hookdir_fd == -1){
1541
hookdir_fd = open(hookdir, O_RDONLY |
1544
#else /* not O_CLOEXEC */
1546
#endif /* not O_CLOEXEC */
1548
if(hookdir_fd == -1){
1549
if(errno == ENOENT){
1551
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1552
" found\n", hookdir);
1555
perror_plus("open");
1560
if(set_cloexec_flag(hookdir_fd) < 0){
1561
perror_plus("set_cloexec_flag");
1562
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1563
perror_plus("close");
1569
#endif /* not O_CLOEXEC */
1572
#if __GLIBC_PREREQ(2, 15)
1573
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1574
runnable_hook, alphasort);
1575
#else /* not __GLIBC_PREREQ(2, 15) */
1576
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1578
#endif /* not __GLIBC_PREREQ(2, 15) */
1579
#else /* not __GLIBC__ */
1580
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1582
#endif /* not __GLIBC__ */
1496
1583
if(numhooks == -1){
1497
if(errno == ENOENT){
1499
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1500
" found\n", hookdir);
1503
perror_plus("scandir");
1506
struct dirent *direntry;
1508
int devnull = open("/dev/null", O_RDONLY);
1509
for(int i = 0; i < numhooks; i++){
1510
direntry = direntries[i];
1511
char *fullname = NULL;
1512
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1584
perror_plus("scandir");
1587
struct dirent *direntry;
1589
int devnull = open("/dev/null", O_RDONLY);
1590
for(int i = 0; i < numhooks; i++){
1591
direntry = direntries[i];
1592
char *fullname = NULL;
1593
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1595
perror_plus("asprintf");
1599
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1602
pid_t hook_pid = fork();
1605
/* Raise privileges */
1606
if(raise_privileges_permanently() != 0){
1607
perror_plus("Failed to raise privileges");
1614
perror_plus("setgid");
1617
/* Reset supplementary groups */
1619
ret = setgroups(0, NULL);
1621
perror_plus("setgroups");
1624
ret = dup2(devnull, STDIN_FILENO);
1626
perror_plus("dup2(devnull, STDIN_FILENO)");
1629
ret = close(devnull);
1631
perror_plus("close");
1634
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1636
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1639
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1641
perror_plus("setenv");
1644
ret = setenv("DEVICE", interface, 1);
1646
perror_plus("setenv");
1649
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1651
perror_plus("setenv");
1654
ret = setenv("MODE", mode, 1);
1656
perror_plus("setenv");
1660
ret = asprintf(&delaystring, "%f", (double)delay);
1514
1662
perror_plus("asprintf");
1518
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1521
pid_t hook_pid = fork();
1524
/* Raise privileges */
1525
raise_privileges_permanently();
1530
perror_plus("setgid");
1532
/* Reset supplementary groups */
1534
ret = setgroups(0, NULL);
1536
perror_plus("setgroups");
1538
dup2(devnull, STDIN_FILENO);
1540
dup2(STDERR_FILENO, STDOUT_FILENO);
1541
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1543
perror_plus("setenv");
1546
ret = setenv("DEVICE", interface, 1);
1548
perror_plus("setenv");
1551
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1553
perror_plus("setenv");
1556
ret = setenv("MODE", mode, 1);
1558
perror_plus("setenv");
1562
ret = asprintf(&delaystring, "%f", delay);
1564
perror_plus("asprintf");
1567
ret = setenv("DELAY", delaystring, 1);
1570
perror_plus("setenv");
1665
ret = setenv("DELAY", delaystring, 1);
1573
1667
free(delaystring);
1574
if(connect_to != NULL){
1575
ret = setenv("CONNECT", connect_to, 1);
1577
perror_plus("setenv");
1581
if(execl(fullname, direntry->d_name, mode, NULL) == -1){
1582
perror_plus("execl");
1583
_exit(EXIT_FAILURE);
1668
perror_plus("setenv");
1672
if(connect_to != NULL){
1673
ret = setenv("CONNECT", connect_to, 1);
1675
perror_plus("setenv");
1679
if(execl(fullname, direntry->d_name, mode, NULL) == -1){
1680
perror_plus("execl");
1681
_exit(EXIT_FAILURE);
1685
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1686
perror_plus("waitpid");
1690
if(WIFEXITED(status)){
1691
if(WEXITSTATUS(status) != 0){
1692
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1693
" with status %d\n", direntry->d_name,
1694
WEXITSTATUS(status));
1698
} else if(WIFSIGNALED(status)){
1699
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1700
" signal %d\n", direntry->d_name,
1587
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1588
perror_plus("waitpid");
1592
if(WIFEXITED(status)){
1593
if(WEXITSTATUS(status) != 0){
1594
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1595
" with status %d\n", direntry->d_name,
1596
WEXITSTATUS(status));
1600
} else if(WIFSIGNALED(status)){
1601
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1602
" signal %d\n", direntry->d_name,
1607
fprintf_plus(stderr, "Warning: network hook \"%s\""
1608
" crashed\n", direntry->d_name);
1615
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1705
fprintf_plus(stderr, "Warning: network hook \"%s\""
1706
" crashed\n", direntry->d_name);
1713
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1717
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1718
perror_plus("close");
1725
__attribute__((nonnull, warn_unused_result))
1624
1726
error_t bring_up_interface(const char *const interface,
1625
1727
const float delay){
1627
1728
error_t old_errno = errno;
1628
error_t ret_errno = 0;
1629
int ret, ret_setflags;
1630
1730
struct ifreq network;
1631
1731
unsigned int if_index = if_nametoindex(interface);
1632
1732
if(if_index == 0){
2452
/* Re-raise priviliges */
2596
/* Re-raise privileges */
2456
/* Run network hooks */
2457
run_network_hooks("stop", interfaces_hooks != NULL ?
2458
interfaces_hooks : "", delay);
2460
/* Take down the network interfaces which were brought up */
2462
char *interface = NULL;
2463
while((interface=argz_next(interfaces_to_take_down,
2464
interfaces_to_take_down_size,
2466
ret_errno = take_down_interface(interface);
2469
perror_plus("Failed to take down interface");
2472
if(debug and (interfaces_to_take_down == NULL)){
2473
fprintf_plus(stderr, "No interfaces needed to be taken"
2478
lower_privileges_permanently();
2598
ret_errno = raise_privileges();
2600
perror_plus("Failed to raise privileges");
2603
/* Run network hooks */
2604
run_network_hooks("stop", interfaces_hooks != NULL ?
2605
interfaces_hooks : "", delay);
2607
/* Take down the network interfaces which were brought up */
2609
char *interface = NULL;
2610
while((interface=argz_next(interfaces_to_take_down,
2611
interfaces_to_take_down_size,
2613
ret_errno = take_down_interface(interface);
2616
perror_plus("Failed to take down interface");
2619
if(debug and (interfaces_to_take_down == NULL)){
2620
fprintf_plus(stderr, "No interfaces needed to be taken"
2626
ret_errno = lower_privileges_permanently();
2628
perror_plus("Failed to lower privileges permanently");
2481
2632
free(interfaces_to_take_down);
2482
2633
free(interfaces_hooks);
2484
2635
/* Removes the GPGME temp directory and all files inside */
2485
if(tempdir_created){
2636
if(tempdir != NULL){
2486
2637
struct dirent **direntries = NULL;
2487
2638
struct dirent *direntry = NULL;
2488
2639
int numentries = scandir(tempdir, &direntries, notdotentries,