/mandos/trunk : revision 693

40

#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */

41

42

#include <stdio.h> /* fprintf(), stderr, fwrite(),

43

stdout, ferror() */

43

stdout, ferror(), remove() */

44

#include <stdint.h> /* uint16_t, uint32_t, intptr_t */

45

#include <stddef.h> /* NULL, size_t, ssize_t */

46

#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),

57

#include <sys/socket.h> /* socket(), struct sockaddr_in6,

58

inet_pton(), connect(),

59

getnameinfo() */

60

#include <fcntl.h> /* open(), unlinkat() */

60

#include <fcntl.h> /* open() */

61

#include <dirent.h> /* opendir(), struct dirent, readdir()

62

*/

63

#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,

73

*/

74

#include <unistd.h> /* close(), SEEK_SET, off_t, write(),

75

getuid(), getgid(), seteuid(),

76

setgid(), pause(), _exit(),

77

unlinkat() */

76

setgid(), pause(), _exit() */

78

77

#include <arpa/inet.h> /* inet_pton(), htons() */

79

78

#include <iso646.h> /* not, or, and */

80

79

#include <argp.h> /* struct argp_option, error_t, struct

234

233

.af = af };

235

234

if(new_server->ip == NULL){

236

235

perror_plus("strdup");

237

free(new_server);

238

236

return false;

239

237

}

240

238

ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));

241

239

if(ret == -1){

242

240

perror_plus("clock_gettime");

243

#ifdef __GNUC__

244

#pragma GCC diagnostic push

245

#pragma GCC diagnostic ignored "-Wcast-qual"

246

#endif

247

free((char *)(new_server->ip));

248

#ifdef __GNUC__

249

#pragma GCC diagnostic pop

250

#endif

251

free(new_server);

252

241

return false;

253

242

}

254

243

/* Special case of first server */

1076

1065

timed out */

1077

1066

1078

1067

if(quit_now){

1079

avahi_s_service_resolver_free(r);

1080

1068

return;

1081

1069

}

1082

1070

1469

1457

error_t ret_errno = 0;

1470

1458

if(seteuid(0) == -1){

1471

1459

ret_errno = errno;

1460

perror_plus("seteuid");

1472

1461

}

1473

1462

errno = old_errno;

1474

1463

return ret_errno;

1485

1474

}

1486

1475

if(setuid(0) == -1){

1487

1476

ret_errno = errno;

1477

perror_plus("seteuid");

1488

1478

}

1489

1479

errno = old_errno;

1490

1480

return ret_errno;

1497

1487

error_t ret_errno = 0;

1498

1488

if(seteuid(uid) == -1){

1499

1489

ret_errno = errno;

1490

perror_plus("seteuid");

1500

1491

}

1501

1492

errno = old_errno;

1502

1493

return ret_errno;

1509

1500

error_t ret_errno = 0;

1510

1501

if(setuid(uid) == -1){

1511

1502

ret_errno = errno;

1503

perror_plus("setuid");

1512

1504

}

1513

1505

errno = old_errno;

1514

1506

return ret_errno;

1515

1507

}

1516

1508

1509

#ifndef O_CLOEXEC

1510

/*

1511

* Based on the example in the GNU LibC manual chapter 13.13 "File

1512

* Descriptor Flags".

1513

| [[info:libc:Descriptor%20Flags][File Descriptor Flags]] |

1514

*/

1515

__attribute__((warn_unused_result))

1516

static int set_cloexec_flag(int fd){

1517

int ret = (int)TEMP_FAILURE_RETRY(fcntl(fd, F_GETFD, 0));

1518

/* If reading the flags failed, return error indication now. */

1519

if(ret < 0){

1520

return ret;

1521

}

1522

/* Store modified flag word in the descriptor. */

1523

return (int)TEMP_FAILURE_RETRY(fcntl(fd, F_SETFD,

1524

ret | FD_CLOEXEC));

1525

}

1526

#endif /* not O_CLOEXEC */

1527

1517

1528

__attribute__((nonnull))

1518

1529

void run_network_hooks(const char *mode, const char *interface,

1519

1530

const float delay){

1520

struct dirent **direntries = NULL;

1531

struct dirent **direntries;

1521

1532

if(hookdir_fd == -1){

1522

hookdir_fd = open(hookdir, O_RDONLY);

1533

hookdir_fd = open(hookdir, O_RDONLY |

1534

#ifdef O_CLOEXEC

1535

O_CLOEXEC

1536

#else /* not O_CLOEXEC */

1537

0

1538

#endif /* not O_CLOEXEC */

1539

);

1523

1540

if(hookdir_fd == -1){

1524

1541

if(errno == ENOENT){

1525

1542

if(debug){

1531

1548

}

1532

1549

return;

1533

1550

}

1551

#ifndef O_CLOEXEC

1552

if(set_cloexec_flag(hookdir_fd) < 0){

1553

perror_plus("set_cloexec_flag");

1554

if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){

1555

perror_plus("close");

1556

} else {

1557

hookdir_fd = -1;

1558

}

1559

return;

1560

}

1561

#endif /* not O_CLOEXEC */

1534

1562

}

1535

1563

#ifdef __GLIBC__

1536

1564

#if __GLIBC_PREREQ(2, 15)

1561

1589

if(hook_pid == 0){

1562

1590

/* Child */

1563

1591

/* Raise privileges */

1564

errno = raise_privileges_permanently();

1565

if(errno != 0){

1592

if(raise_privileges_permanently() != 0){

1566

1593

perror_plus("Failed to raise privileges");

1567

1594

_exit(EX_NOPERM);

1568

1595

}

1635

1662

_exit(EX_OSERR);

1636

1663

}

1637

1664

}

1638

int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);

1639

if(hook_fd == -1){

1640

perror_plus("openat");

1641

_exit(EXIT_FAILURE);

1642

}

1643

if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){

1644

perror_plus("close");

1645

_exit(EXIT_FAILURE);

1646

}

1647

if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },

1648

environ) == -1){

1665

if(fexecve(hookdir_fd, (char *const [])

1666

{ direntry->d_name, NULL }, environ) == -1){

1649

1667

perror_plus("fexecve");

1650

1668

_exit(EXIT_FAILURE);

1651

1669

}

1653

1671

int status;

1654

1672

if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){

1655

1673

perror_plus("waitpid");

1656

free(direntry);

1657

1674

continue;

1658

1675

}

1659

1676

if(WIFEXITED(status)){

1661

1678

fprintf_plus(stderr, "Warning: network hook \"%s\" exited"

1662

1679

" with status %d\n", direntry->d_name,

1663

1680

WEXITSTATUS(status));

1664

free(direntry);

1665

1681

continue;

1666

1682

}

1667

1683

} else if(WIFSIGNALED(status)){

1668

1684

fprintf_plus(stderr, "Warning: network hook \"%s\" died by"

1669

1685

" signal %d\n", direntry->d_name,

1670

1686

WTERMSIG(status));

1671

free(direntry);

1672

1687

continue;

1673

1688

} else {

1674

1689

fprintf_plus(stderr, "Warning: network hook \"%s\""

1675

1690

" crashed\n", direntry->d_name);

1676

free(direntry);

1677

1691

continue;

1678

1692

}

1679

1693

}

1681

1695

fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",

1682

1696

direntry->d_name);

1683

1697

}

1684

free(direntry);

1685

1698

}

1686

free(direntries);

1687

1699

if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){

1688

1700

perror_plus("close");

1689

1701

} else {

1746

1758

/* Raise privileges */

1747

1759

ret_errno = raise_privileges();

1748

1760

if(ret_errno != 0){

1749

errno = ret_errno;

1750

1761

perror_plus("Failed to raise privileges");

1751

1762

}

1752

1763

1856

1867

/* Raise privileges */

1857

1868

ret_errno = raise_privileges();

1858

1869

if(ret_errno != 0){

1859

errno = ret_errno;

1860

1870

perror_plus("Failed to raise privileges");

1861

1871

}

1862

1872

2269

2279

2270

2280

/* If no interfaces were specified, make a list */

2271

2281

if(mc.interfaces == NULL){

2272

struct dirent **direntries = NULL;

2282

struct dirent **direntries;

2273

2283

/* Look for any good interfaces */

2274

2284

ret = scandir(sys_class_net, &direntries, good_interface,

2275

2285

alphasort);

2281

2291

if(ret_errno != 0){

2282

2292

errno = ret_errno;

2283

2293

perror_plus("argz_add");

2284

free(direntries[i]);

2285

2294

continue;

2286

2295

}

2287

2296

if(debug){

2288

2297

fprintf_plus(stderr, "Will use interface \"%s\"\n",

2289

2298

direntries[i]->d_name);

2290

2299

}

2291

free(direntries[i]);

2292

2300

}

2293

2301

free(direntries);

2294

2302

} else {

2295

if(ret == 0){

2296

free(direntries);

2297

}

2303

free(direntries);

2298

2304

fprintf_plus(stderr, "Could not find a network interface\n");

2299

2305

exitcode = EXIT_FAILURE;

2300

2306

goto end;

2564

2570

mc.current_server->prev->next = NULL;

2565

2571

while(mc.current_server != NULL){

2566

2572

server *next = mc.current_server->next;

2567

#ifdef __GNUC__

2568

#pragma GCC diagnostic push

2569

#pragma GCC diagnostic ignored "-Wcast-qual"

2570

#endif

2571

free((char *)(mc.current_server->ip));

2572

#ifdef __GNUC__

2573

#pragma GCC diagnostic pop

2574

#endif

2575

2573

free(mc.current_server);

2576

2574

mc.current_server = next;

2577

2575

}

2581

2579

{

2582

2580

ret_errno = raise_privileges();

2583

2581

if(ret_errno != 0){

2584

errno = ret_errno;

2585

2582

perror_plus("Failed to raise privileges");

2586

2583

} else {

2587

2584

2610

2607

2611

2608

ret_errno = lower_privileges_permanently();

2612

2609

if(ret_errno != 0){

2613

errno = ret_errno;

2614

2610

perror_plus("Failed to lower privileges permanently");

2615

2611

}

2616

2612

}

2621

2617

/* Removes the GPGME temp directory and all files inside */

2622

2618

if(tempdir != NULL){

2623

2619

struct dirent **direntries = NULL;

2624

int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |

2625

O_NOFOLLOW));

2626

if(tempdir_fd == -1){

2627

perror_plus("open");

2628

} else {

2629

#ifdef __GLIBC__

2630

#if __GLIBC_PREREQ(2, 15)

2631

int numentries = scandirat(tempdir_fd, ".", &direntries,

2632

notdotentries, alphasort);

2633

#else /* not __GLIBC_PREREQ(2, 15) */

2634

int numentries = scandir(tempdir, &direntries, notdotentries,

2635

alphasort);

2636

#endif /* not __GLIBC_PREREQ(2, 15) */

2637

#else /* not __GLIBC__ */

2638

int numentries = scandir(tempdir, &direntries, notdotentries,

2639

alphasort);

2640

#endif /* not __GLIBC__ */

2641

if(numentries >= 0){

2642

for(int i = 0; i < numentries; i++){

2643

ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);

2644

if(ret == -1){

2645

fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"

2646

" \"%s\", 0): %s\n", tempdir,

2647

direntries[i]->d_name, strerror(errno));

2648

}

2649

free(direntries[i]);

2650

}

2651

2652

/* need to clean even if 0 because man page doesn't specify */

2653

free(direntries);

2654

if(numentries == -1){

2655

perror_plus("scandir");

2656

}

2657

ret = rmdir(tempdir);

2658

if(ret == -1 and errno != ENOENT){

2659

perror_plus("rmdir");

2660

}

2620

struct dirent *direntry = NULL;

2621

int numentries = scandir(tempdir, &direntries, notdotentries,

2622

alphasort);

2623

if(numentries > 0){

2624

for(int i = 0; i < numentries; i++){

2625

direntry = direntries[i];

2626

char *fullname = NULL;

2627

ret = asprintf(&fullname, "%s/%s", tempdir,

2628

direntry->d_name);

2629

if(ret < 0){

2630

perror_plus("asprintf");

2631

continue;

2632

}

2633

ret = remove(fullname);

2634

if(ret == -1){

2635

fprintf_plus(stderr, "remove(\"%s\"): %s\n", fullname,

2636

strerror(errno));

2637

}

2638

free(fullname);

2661

2639

}

2662

TEMP_FAILURE_RETRY(close(tempdir_fd));

2640

}

2641

2642

/* need to clean even if 0 because man page doesn't specify */

2643

free(direntries);

2644

if(numentries == -1){

2645

perror_plus("scandir");

2646

}

2647

ret = rmdir(tempdir);

2648

if(ret == -1 and errno != ENOENT){

2649

perror_plus("rmdir");

2663

2650

}

2664

2651

}

2665

2652