To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 723.1.1
- compare with another revision
- download diff
- download tarball
- view history from revision 723.1.1
- Committer: Teddy Hogeborn
- Date: 2014-07-25 22:44:20 UTC
- mto: This revision was merged to the branch mainline in revision 724.
- Revision ID: teddy@recompile.se-20140725224420-4a5ct2ptt0hsc92z
Require Python 2.7.
This is in preparation for the eventual move to Python 3, which will
happen as soon as all Python modules required by Mandos are available.
The mandos-ctl and mandos-monitor programs are already portable
between Python 2.6 and Python 3 without changes; this change will
bring the requirement up to Python 2.7.
* INSTALL (Prerequisites/Libraries/Mandos Server): Document
requirement of
Python 2.7; remove
Python-argparse
which is in the
Python 2.7 standard
library.
* debian/control (Source: mandos/Build-Depends-Indep): Depend on
exactly the
python2.7
package and all
the Python 2.7
versions of the
python modules.
(Package: mandos/Depends): - '' - but still depend on python (<=2.7)
and the generic versions of the Python
modules; this is for mandos-ctl and
mandos-monitor, both of which are
compatible with Python 3, and use
#!/usr/bin/python.
* mandos: Use #!/usr/bin/python2.7 instead of #!/usr/bin/python.
This is in preparation for the eventual move to Python 3, which will
happen as soon as all Python modules required by Mandos are available.
The mandos-ctl and mandos-monitor programs are already portable
between Python 2.6 and Python 3 without changes; this change will
bring the requirement up to Python 2.7.
* INSTALL (Prerequisites/Libraries/Mandos Server): Document
requirement of
Python 2.7; remove
Python-argparse
which is in the
Python 2.7 standard
library.
* debian/control (Source: mandos/Build-Depends-Indep): Depend on
exactly the
python2.7
package and all
the Python 2.7
versions of the
python modules.
(Package: mandos/Depends): - '' - but still depend on python (<=2.7)
and the generic versions of the Python
modules; this is for mandos-ctl and
mandos-monitor, both of which are
compatible with Python 3, and use
#!/usr/bin/python.
* mandos: Use #!/usr/bin/python2.7 instead of #!/usr/bin/python.
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2018 Teddy Hogeborn
13
* Copyright © 2008-2018 Björn Påhlsson
14
*
15
* This file is part of Mandos.
16
*
17
* Mandos is free software: you can redistribute it and/or modify it
18
* under the terms of the GNU General Public License as published by
19
* the Free Software Foundation, either version 3 of the License, or
20
* (at your option) any later version.
21
*
22
* Mandos is distributed in the hope that it will be useful, but
12
* Copyright © 2008-2014 Teddy Hogeborn
13
* Copyright © 2008-2014 Björn Påhlsson
14
*
15
* This program is free software: you can redistribute it and/or
16
* modify it under the terms of the GNU General Public License as
17
* published by the Free Software Foundation, either version 3 of the
18
* License, or (at your option) any later version.
19
*
20
* This program is distributed in the hope that it will be useful, but
23
21
* WITHOUT ANY WARRANTY; without even the implied warranty of
24
22
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
25
23
* General Public License for more details.
26
24
*
27
25
* You should have received a copy of the GNU General Public License
28
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
26
* along with this program. If not, see
27
* <http://www.gnu.org/licenses/>.
29
28
*
30
29
* Contact the authors at <mandos@recompile.se>.
31
30
*/
47
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
48
47
strtof(), abort() */
49
48
#include <stdbool.h> /* bool, false, true */
50
#include <string.h> /* strcmp(), strlen(), strerror(),
51
asprintf(), strncpy(), strsignal()
52
*/
49
#include <string.h> /* memset(), strcmp(), strlen(),
50
strerror(), asprintf(), strcpy() */
53
51
#include <sys/ioctl.h> /* ioctl */
54
52
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
55
53
sockaddr_in6, PF_INET6,
59
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
60
58
inet_pton(), connect(),
61
59
getnameinfo() */
62
#include <fcntl.h> /* open(), unlinkat(), AT_REMOVEDIR */
60
#include <fcntl.h> /* open(), unlinkat() */
63
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
64
62
*/
65
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
66
64
strtoimax() */
67
#include <errno.h> /* perror(), errno, EINTR, EINVAL,
68
EAI_SYSTEM, ENETUNREACH,
69
EHOSTUNREACH, ECONNREFUSED, EPROTO,
70
EIO, ENOENT, ENXIO, ENOMEM, EISDIR,
71
ENOTEMPTY,
65
#include <errno.h> /* perror(), errno,
72
66
program_invocation_short_name */
73
67
#include <time.h> /* nanosleep(), time(), sleep() */
74
68
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
310
304
gpgme_strsource(rc), gpgme_strerror(rc));
311
305
return false;
312
306
}
313
{
314
gpgme_import_result_t import_result
315
= gpgme_op_import_result(mc->ctx);
316
if((import_result->imported < 1
317
or import_result->not_imported > 0)
318
and import_result->unchanged == 0){
319
fprintf_plus(stderr, "bad gpgme_op_import_results:\n");
320
fprintf_plus(stderr,
321
"The total number of considered keys: %d\n",
322
import_result->considered);
323
fprintf_plus(stderr,
324
"The number of keys without user ID: %d\n",
325
import_result->no_user_id);
326
fprintf_plus(stderr,
327
"The total number of imported keys: %d\n",
328
import_result->imported);
329
fprintf_plus(stderr, "The number of imported RSA keys: %d\n",
330
import_result->imported_rsa);
331
fprintf_plus(stderr, "The number of unchanged keys: %d\n",
332
import_result->unchanged);
333
fprintf_plus(stderr, "The number of new user IDs: %d\n",
334
import_result->new_user_ids);
335
fprintf_plus(stderr, "The number of new sub keys: %d\n",
336
import_result->new_sub_keys);
337
fprintf_plus(stderr, "The number of new signatures: %d\n",
338
import_result->new_signatures);
339
fprintf_plus(stderr, "The number of new revocations: %d\n",
340
import_result->new_revocations);
341
fprintf_plus(stderr,
342
"The total number of secret keys read: %d\n",
343
import_result->secret_read);
344
fprintf_plus(stderr,
345
"The number of imported secret keys: %d\n",
346
import_result->secret_imported);
347
fprintf_plus(stderr,
348
"The number of unchanged secret keys: %d\n",
349
import_result->secret_unchanged);
350
fprintf_plus(stderr, "The number of keys not imported: %d\n",
351
import_result->not_imported);
352
for(gpgme_import_status_t import_status
353
= import_result->imports;
354
import_status != NULL;
355
import_status = import_status->next){
356
fprintf_plus(stderr, "Import status for key: %s\n",
357
import_status->fpr);
358
if(import_status->result != GPG_ERR_NO_ERROR){
359
fprintf_plus(stderr, "Import result: %s: %s\n",
360
gpgme_strsource(import_status->result),
361
gpgme_strerror(import_status->result));
362
}
363
fprintf_plus(stderr, "Key status:\n");
364
fprintf_plus(stderr,
365
import_status->status & GPGME_IMPORT_NEW
366
? "The key was new.\n"
367
: "The key was not new.\n");
368
fprintf_plus(stderr,
369
import_status->status & GPGME_IMPORT_UID
370
? "The key contained new user IDs.\n"
371
: "The key did not contain new user IDs.\n");
372
fprintf_plus(stderr,
373
import_status->status & GPGME_IMPORT_SIG
374
? "The key contained new signatures.\n"
375
: "The key did not contain new signatures.\n");
376
fprintf_plus(stderr,
377
import_status->status & GPGME_IMPORT_SUBKEY
378
? "The key contained new sub keys.\n"
379
: "The key did not contain new sub keys.\n");
380
fprintf_plus(stderr,
381
import_status->status & GPGME_IMPORT_SECRET
382
? "The key contained a secret key.\n"
383
: "The key did not contain a secret key.\n");
384
}
385
return false;
386
}
387
}
388
307
389
ret = close(fd);
308
ret = (int)TEMP_FAILURE_RETRY(close(fd));
390
309
if(ret == -1){
391
310
perror_plus("close");
392
311
}
431
350
/* Create new GPGME "context" */
432
351
rc = gpgme_new(&(mc->ctx));
433
352
if(rc != GPG_ERR_NO_ERROR){
434
fprintf_plus(stderr, "bad gpgme_new: %s: %s\n",
435
gpgme_strsource(rc), gpgme_strerror(rc));
353
fprintf_plus(stderr, "Mandos plugin mandos-client: "
354
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
355
gpgme_strerror(rc));
436
356
return false;
437
357
}
438
358
474
394
/* Create new empty GPGME data buffer for the plaintext */
475
395
rc = gpgme_data_new(&dh_plain);
476
396
if(rc != GPG_ERR_NO_ERROR){
477
fprintf_plus(stderr, "bad gpgme_data_new: %s: %s\n",
397
fprintf_plus(stderr, "Mandos plugin mandos-client: "
398
"bad gpgme_data_new: %s: %s\n",
478
399
gpgme_strsource(rc), gpgme_strerror(rc));
479
400
gpgme_data_release(dh_crypto);
480
401
return -1;
493
414
if(result == NULL){
494
415
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
495
416
} else {
496
if(result->unsupported_algorithm != NULL) {
497
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
498
result->unsupported_algorithm);
499
}
500
fprintf_plus(stderr, "Wrong key usage: %s\n",
501
result->wrong_key_usage ? "Yes" : "No");
417
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
418
result->unsupported_algorithm);
419
fprintf_plus(stderr, "Wrong key usage: %u\n",
420
result->wrong_key_usage);
502
421
if(result->file_name != NULL){
503
422
fprintf_plus(stderr, "File name: %s\n", result->file_name);
504
423
}
505
506
for(gpgme_recipient_t r = result->recipients; r != NULL;
507
r = r->next){
424
gpgme_recipient_t recipient;
425
recipient = result->recipients;
426
while(recipient != NULL){
508
427
fprintf_plus(stderr, "Public key algorithm: %s\n",
509
gpgme_pubkey_algo_name(r->pubkey_algo));
510
fprintf_plus(stderr, "Key ID: %s\n", r->keyid);
428
gpgme_pubkey_algo_name
429
(recipient->pubkey_algo));
430
fprintf_plus(stderr, "Key ID: %s\n", recipient->keyid);
511
431
fprintf_plus(stderr, "Secret key available: %s\n",
512
r->status == GPG_ERR_NO_SECKEY ? "No" : "Yes");
432
recipient->status == GPG_ERR_NO_SECKEY
433
? "No" : "Yes");
434
recipient = recipient->next;
513
435
}
514
436
}
515
437
}
571
493
return plaintext_length;
572
494
}
573
495
574
__attribute__((warn_unused_result, const))
575
static const char *safe_string(const char *str){
576
if(str == NULL)
577
return "(unknown)";
578
return str;
579
}
580
581
496
__attribute__((warn_unused_result))
582
497
static const char *safer_gnutls_strerror(int value){
583
498
const char *ret = gnutls_strerror(value);
584
return safe_string(ret);
499
if(ret == NULL)
500
ret = "(unknown)";
501
return ret;
585
502
}
586
503
587
504
/* GnuTLS log function callback */
591
508
fprintf_plus(stderr, "GnuTLS: %s", string);
592
509
}
593
510
594
__attribute__((nonnull(1, 2, 4), warn_unused_result))
511
__attribute__((nonnull, warn_unused_result))
595
512
static int init_gnutls_global(const char *pubkeyfilename,
596
513
const char *seckeyfilename,
597
const char *dhparamsfilename,
598
514
mandos_context *mc){
599
515
int ret;
600
unsigned int uret;
601
516
602
517
if(debug){
603
518
fprintf_plus(stderr, "Initializing GnuTLS\n");
604
519
}
605
520
521
ret = gnutls_global_init();
522
if(ret != GNUTLS_E_SUCCESS){
523
fprintf_plus(stderr, "GnuTLS global_init: %s\n",
524
safer_gnutls_strerror(ret));
525
return -1;
526
}
527
606
528
if(debug){
607
529
/* "Use a log level over 10 to enable all debugging options."
608
530
* - GnuTLS manual
616
538
if(ret != GNUTLS_E_SUCCESS){
617
539
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
618
540
safer_gnutls_strerror(ret));
541
gnutls_global_deinit();
619
542
return -1;
620
543
}
621
544
646
569
safer_gnutls_strerror(ret));
647
570
goto globalfail;
648
571
}
649
/* If a Diffie-Hellman parameters file was given, try to use it */
650
if(dhparamsfilename != NULL){
651
gnutls_datum_t params = { .data = NULL, .size = 0 };
652
do {
653
int dhpfile = open(dhparamsfilename, O_RDONLY);
654
if(dhpfile == -1){
655
perror_plus("open");
656
dhparamsfilename = NULL;
657
break;
658
}
659
size_t params_capacity = 0;
660
while(true){
661
params_capacity = incbuffer((char **)¶ms.data,
662
(size_t)params.size,
663
(size_t)params_capacity);
664
if(params_capacity == 0){
665
perror_plus("incbuffer");
666
free(params.data);
667
params.data = NULL;
668
dhparamsfilename = NULL;
669
break;
670
}
671
ssize_t bytes_read = read(dhpfile,
672
params.data + params.size,
673
BUFFER_SIZE);
674
/* EOF */
675
if(bytes_read == 0){
676
break;
677
}
678
/* check bytes_read for failure */
679
if(bytes_read < 0){
680
perror_plus("read");
681
free(params.data);
682
params.data = NULL;
683
dhparamsfilename = NULL;
684
break;
685
}
686
params.size += (unsigned int)bytes_read;
687
}
688
ret = close(dhpfile);
689
if(ret == -1){
690
perror_plus("close");
691
}
692
if(params.data == NULL){
693
dhparamsfilename = NULL;
694
}
695
if(dhparamsfilename == NULL){
696
break;
697
}
698
ret = gnutls_dh_params_import_pkcs3(mc->dh_params, ¶ms,
699
GNUTLS_X509_FMT_PEM);
700
if(ret != GNUTLS_E_SUCCESS){
701
fprintf_plus(stderr, "Failed to parse DH parameters in file"
702
" \"%s\": %s\n", dhparamsfilename,
703
safer_gnutls_strerror(ret));
704
dhparamsfilename = NULL;
705
}
706
free(params.data);
707
} while(false);
708
}
709
if(dhparamsfilename == NULL){
710
if(mc->dh_bits == 0){
711
/* Find out the optimal number of DH bits */
712
/* Try to read the private key file */
713
gnutls_datum_t buffer = { .data = NULL, .size = 0 };
714
do {
715
int secfile = open(seckeyfilename, O_RDONLY);
716
if(secfile == -1){
717
perror_plus("open");
718
break;
719
}
720
size_t buffer_capacity = 0;
721
while(true){
722
buffer_capacity = incbuffer((char **)&buffer.data,
723
(size_t)buffer.size,
724
(size_t)buffer_capacity);
725
if(buffer_capacity == 0){
726
perror_plus("incbuffer");
727
free(buffer.data);
728
buffer.data = NULL;
729
break;
730
}
731
ssize_t bytes_read = read(secfile,
732
buffer.data + buffer.size,
733
BUFFER_SIZE);
734
/* EOF */
735
if(bytes_read == 0){
736
break;
737
}
738
/* check bytes_read for failure */
739
if(bytes_read < 0){
740
perror_plus("read");
741
free(buffer.data);
742
buffer.data = NULL;
743
break;
744
}
745
buffer.size += (unsigned int)bytes_read;
746
}
747
close(secfile);
748
} while(false);
749
/* If successful, use buffer to parse private key */
750
gnutls_sec_param_t sec_param = GNUTLS_SEC_PARAM_ULTRA;
751
if(buffer.data != NULL){
752
{
753
gnutls_openpgp_privkey_t privkey = NULL;
754
ret = gnutls_openpgp_privkey_init(&privkey);
755
if(ret != GNUTLS_E_SUCCESS){
756
fprintf_plus(stderr, "Error initializing OpenPGP key"
757
" structure: %s",
758
safer_gnutls_strerror(ret));
759
free(buffer.data);
760
buffer.data = NULL;
761
} else {
762
ret = gnutls_openpgp_privkey_import
763
(privkey, &buffer, GNUTLS_OPENPGP_FMT_BASE64, "", 0);
764
if(ret != GNUTLS_E_SUCCESS){
765
fprintf_plus(stderr, "Error importing OpenPGP key : %s",
766
safer_gnutls_strerror(ret));
767
privkey = NULL;
768
}
769
free(buffer.data);
770
buffer.data = NULL;
771
if(privkey != NULL){
772
/* Use private key to suggest an appropriate
773
sec_param */
774
sec_param = gnutls_openpgp_privkey_sec_param(privkey);
775
gnutls_openpgp_privkey_deinit(privkey);
776
if(debug){
777
fprintf_plus(stderr, "This OpenPGP key implies using"
778
" a GnuTLS security parameter \"%s\".\n",
779
safe_string(gnutls_sec_param_get_name
780
(sec_param)));
781
}
782
}
783
}
784
}
785
if(sec_param == GNUTLS_SEC_PARAM_UNKNOWN){
786
/* Err on the side of caution */
787
sec_param = GNUTLS_SEC_PARAM_ULTRA;
788
if(debug){
789
fprintf_plus(stderr, "Falling back to security parameter"
790
" \"%s\"\n",
791
safe_string(gnutls_sec_param_get_name
792
(sec_param)));
793
}
794
}
795
}
796
uret = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, sec_param);
797
if(uret != 0){
798
mc->dh_bits = uret;
799
if(debug){
800
fprintf_plus(stderr, "A \"%s\" GnuTLS security parameter"
801
" implies %u DH bits; using that.\n",
802
safe_string(gnutls_sec_param_get_name
803
(sec_param)),
804
mc->dh_bits);
805
}
806
} else {
807
fprintf_plus(stderr, "Failed to get implied number of DH"
808
" bits for security parameter \"%s\"): %s\n",
809
safe_string(gnutls_sec_param_get_name
810
(sec_param)),
811
safer_gnutls_strerror(ret));
812
goto globalfail;
813
}
814
} else if(debug){
815
fprintf_plus(stderr, "DH bits explicitly set to %u\n",
816
mc->dh_bits);
817
}
818
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
819
if(ret != GNUTLS_E_SUCCESS){
820
fprintf_plus(stderr, "Error in GnuTLS prime generation (%u"
821
" bits): %s\n", mc->dh_bits,
822
safer_gnutls_strerror(ret));
823
goto globalfail;
824
}
825
}
572
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
573
if(ret != GNUTLS_E_SUCCESS){
574
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
575
safer_gnutls_strerror(ret));
576
goto globalfail;
577
}
578
826
579
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
827
580
828
581
return 0;
830
583
globalfail:
831
584
832
585
gnutls_certificate_free_credentials(mc->cred);
586
gnutls_global_deinit();
833
587
gnutls_dh_params_deinit(mc->dh_params);
834
588
return -1;
835
589
}
887
641
/* ignore client certificate if any. */
888
642
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
889
643
644
gnutls_dh_set_prime_bits(*session, mc->dh_bits);
645
890
646
return 0;
891
647
}
892
648
894
650
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
895
651
__attribute__((unused)) const char *txt){}
896
652
897
/* Set effective uid to 0, return errno */
898
__attribute__((warn_unused_result))
899
int raise_privileges(void){
900
int old_errno = errno;
901
int ret = 0;
902
if(seteuid(0) == -1){
903
ret = errno;
904
}
905
errno = old_errno;
906
return ret;
907
}
908
909
/* Set effective and real user ID to 0. Return errno. */
910
__attribute__((warn_unused_result))
911
int raise_privileges_permanently(void){
912
int old_errno = errno;
913
int ret = raise_privileges();
914
if(ret != 0){
915
errno = old_errno;
916
return ret;
917
}
918
if(setuid(0) == -1){
919
ret = errno;
920
}
921
errno = old_errno;
922
return ret;
923
}
924
925
/* Set effective user ID to unprivileged saved user ID */
926
__attribute__((warn_unused_result))
927
int lower_privileges(void){
928
int old_errno = errno;
929
int ret = 0;
930
if(seteuid(uid) == -1){
931
ret = errno;
932
}
933
errno = old_errno;
934
return ret;
935
}
936
937
/* Lower privileges permanently */
938
__attribute__((warn_unused_result))
939
int lower_privileges_permanently(void){
940
int old_errno = errno;
941
int ret = 0;
942
if(setuid(uid) == -1){
943
ret = errno;
944
}
945
errno = old_errno;
946
return ret;
947
}
948
949
/* Helper function to add_local_route() and delete_local_route() */
950
__attribute__((nonnull, warn_unused_result))
951
static bool add_delete_local_route(const bool add,
952
const char *address,
953
AvahiIfIndex if_index){
954
int ret;
955
char helper[] = "mandos-client-iprouteadddel";
956
char add_arg[] = "add";
957
char delete_arg[] = "delete";
958
char debug_flag[] = "--debug";
959
char *pluginhelperdir = getenv("MANDOSPLUGINHELPERDIR");
960
if(pluginhelperdir == NULL){
961
if(debug){
962
fprintf_plus(stderr, "MANDOSPLUGINHELPERDIR environment"
963
" variable not set; cannot run helper\n");
964
}
965
return false;
966
}
967
968
char interface[IF_NAMESIZE];
969
if(if_indextoname((unsigned int)if_index, interface) == NULL){
970
perror_plus("if_indextoname");
971
return false;
972
}
973
974
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
975
if(devnull == -1){
976
perror_plus("open(\"/dev/null\", O_RDONLY)");
977
return false;
978
}
979
pid_t pid = fork();
980
if(pid == 0){
981
/* Child */
982
/* Raise privileges */
983
errno = raise_privileges_permanently();
984
if(errno != 0){
985
perror_plus("Failed to raise privileges");
986
/* _exit(EX_NOPERM); */
987
} else {
988
/* Set group */
989
errno = 0;
990
ret = setgid(0);
991
if(ret == -1){
992
perror_plus("setgid");
993
_exit(EX_NOPERM);
994
}
995
/* Reset supplementary groups */
996
errno = 0;
997
ret = setgroups(0, NULL);
998
if(ret == -1){
999
perror_plus("setgroups");
1000
_exit(EX_NOPERM);
1001
}
1002
}
1003
ret = dup2(devnull, STDIN_FILENO);
1004
if(ret == -1){
1005
perror_plus("dup2(devnull, STDIN_FILENO)");
1006
_exit(EX_OSERR);
1007
}
1008
ret = close(devnull);
1009
if(ret == -1){
1010
perror_plus("close");
1011
_exit(EX_OSERR);
1012
}
1013
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1014
if(ret == -1){
1015
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1016
_exit(EX_OSERR);
1017
}
1018
int helperdir_fd = (int)TEMP_FAILURE_RETRY(open(pluginhelperdir,
1019
O_RDONLY
1020
| O_DIRECTORY
1021
| O_PATH
1022
| O_CLOEXEC));
1023
if(helperdir_fd == -1){
1024
perror_plus("open");
1025
_exit(EX_UNAVAILABLE);
1026
}
1027
int helper_fd = (int)TEMP_FAILURE_RETRY(openat(helperdir_fd,
1028
helper, O_RDONLY));
1029
if(helper_fd == -1){
1030
perror_plus("openat");
1031
close(helperdir_fd);
1032
_exit(EX_UNAVAILABLE);
1033
}
1034
close(helperdir_fd);
1035
#ifdef __GNUC__
1036
#pragma GCC diagnostic push
1037
#pragma GCC diagnostic ignored "-Wcast-qual"
1038
#endif
1039
if(fexecve(helper_fd, (char *const [])
1040
{ helper, add ? add_arg : delete_arg, (char *)address,
1041
interface, debug ? debug_flag : NULL, NULL },
1042
environ) == -1){
1043
#ifdef __GNUC__
1044
#pragma GCC diagnostic pop
1045
#endif
1046
perror_plus("fexecve");
1047
_exit(EXIT_FAILURE);
1048
}
1049
}
1050
if(pid == -1){
1051
perror_plus("fork");
1052
return false;
1053
}
1054
int status;
1055
pid_t pret = -1;
1056
errno = 0;
1057
do {
1058
pret = waitpid(pid, &status, 0);
1059
if(pret == -1 and errno == EINTR and quit_now){
1060
int errno_raising = 0;
1061
if((errno = raise_privileges()) != 0){
1062
errno_raising = errno;
1063
perror_plus("Failed to raise privileges in order to"
1064
" kill helper program");
1065
}
1066
if(kill(pid, SIGTERM) == -1){
1067
perror_plus("kill");
1068
}
1069
if((errno_raising == 0) and (errno = lower_privileges()) != 0){
1070
perror_plus("Failed to lower privileges after killing"
1071
" helper program");
1072
}
1073
return false;
1074
}
1075
} while(pret == -1 and errno == EINTR);
1076
if(pret == -1){
1077
perror_plus("waitpid");
1078
return false;
1079
}
1080
if(WIFEXITED(status)){
1081
if(WEXITSTATUS(status) != 0){
1082
fprintf_plus(stderr, "Error: iprouteadddel exited"
1083
" with status %d\n", WEXITSTATUS(status));
1084
return false;
1085
}
1086
return true;
1087
}
1088
if(WIFSIGNALED(status)){
1089
fprintf_plus(stderr, "Error: iprouteadddel died by"
1090
" signal %d\n", WTERMSIG(status));
1091
return false;
1092
}
1093
fprintf_plus(stderr, "Error: iprouteadddel crashed\n");
1094
return false;
1095
}
1096
1097
__attribute__((nonnull, warn_unused_result))
1098
static bool add_local_route(const char *address,
1099
AvahiIfIndex if_index){
1100
if(debug){
1101
fprintf_plus(stderr, "Adding route to %s\n", address);
1102
}
1103
return add_delete_local_route(true, address, if_index);
1104
}
1105
1106
__attribute__((nonnull, warn_unused_result))
1107
static bool delete_local_route(const char *address,
1108
AvahiIfIndex if_index){
1109
if(debug){
1110
fprintf_plus(stderr, "Removing route to %s\n", address);
1111
}
1112
return add_delete_local_route(false, address, if_index);
1113
}
1114
1115
653
/* Called when a Mandos server is found */
1116
654
__attribute__((nonnull, warn_unused_result))
1117
655
static int start_mandos_communication(const char *ip, in_port_t port,
1128
666
int retval = -1;
1129
667
gnutls_session_t session;
1130
668
int pf; /* Protocol family */
1131
bool route_added = false;
1132
669
1133
670
errno = 0;
1134
671
1156
693
bool match = false;
1157
694
{
1158
695
char *interface = NULL;
1159
while((interface = argz_next(mc->interfaces,
1160
mc->interfaces_size,
1161
interface))){
696
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
697
interface))){
1162
698
if(if_nametoindex(interface) == (unsigned int)if_index){
1163
699
match = true;
1164
700
break;
1193
729
PRIuMAX "\n", ip, (uintmax_t)port);
1194
730
}
1195
731
1196
tcp_sd = socket(pf, SOCK_STREAM | SOCK_CLOEXEC, 0);
732
tcp_sd = socket(pf, SOCK_STREAM, 0);
1197
733
if(tcp_sd < 0){
1198
734
int e = errno;
1199
735
perror_plus("socket");
1206
742
goto mandos_end;
1207
743
}
1208
744
745
memset(&to, 0, sizeof(to));
1209
746
if(af == AF_INET6){
1210
struct sockaddr_in6 *to6 = (struct sockaddr_in6 *)&to;
1211
*to6 = (struct sockaddr_in6){ .sin6_family = (sa_family_t)af };
1212
ret = inet_pton(af, ip, &to6->sin6_addr);
747
((struct sockaddr_in6 *)&to)->sin6_family = (sa_family_t)af;
748
ret = inet_pton(af, ip, &((struct sockaddr_in6 *)&to)->sin6_addr);
1213
749
} else { /* IPv4 */
1214
struct sockaddr_in *to4 = (struct sockaddr_in *)&to;
1215
*to4 = (struct sockaddr_in){ .sin_family = (sa_family_t)af };
1216
ret = inet_pton(af, ip, &to4->sin_addr);
750
((struct sockaddr_in *)&to)->sin_family = (sa_family_t)af;
751
ret = inet_pton(af, ip, &((struct sockaddr_in *)&to)->sin_addr);
1217
752
}
1218
753
if(ret < 0 ){
1219
754
int e = errno;
1289
824
goto mandos_end;
1290
825
}
1291
826
1292
while(true){
1293
if(af == AF_INET6){
1294
ret = connect(tcp_sd, (struct sockaddr *)&to,
1295
sizeof(struct sockaddr_in6));
1296
} else {
1297
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
1298
sizeof(struct sockaddr_in));
1299
}
1300
if(ret < 0){
1301
if(((errno == ENETUNREACH) or (errno == EHOSTUNREACH))
1302
and if_index != AVAHI_IF_UNSPEC
1303
and connect_to == NULL
1304
and not route_added and
1305
((af == AF_INET6 and not
1306
IN6_IS_ADDR_LINKLOCAL(&(((struct sockaddr_in6 *)
1307
&to)->sin6_addr)))
1308
or (af == AF_INET and
1309
/* Not a a IPv4LL address */
1310
(ntohl(((struct sockaddr_in *)&to)->sin_addr.s_addr)
1311
& 0xFFFF0000L) != 0xA9FE0000L))){
1312
/* Work around Avahi bug - Avahi does not announce link-local
1313
addresses if it has a global address, so local hosts with
1314
*only* a link-local address (e.g. Mandos clients) cannot
1315
connect to a Mandos server announced by Avahi on a server
1316
host with a global address. Work around this by retrying
1317
with an explicit route added with the server's address.
1318
1319
Avahi bug reference:
1320
https://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1321
https://bugs.debian.org/587961
1322
*/
1323
if(debug){
1324
fprintf_plus(stderr, "Mandos server unreachable, trying"
1325
" direct route\n");
1326
}
1327
int e = errno;
1328
route_added = add_local_route(ip, if_index);
1329
if(route_added){
1330
continue;
1331
}
1332
errno = e;
1333
}
1334
if(errno != ECONNREFUSED or debug){
1335
int e = errno;
1336
perror_plus("connect");
1337
errno = e;
1338
}
1339
goto mandos_end;
1340
}
1341
1342
if(quit_now){
1343
errno = EINTR;
1344
goto mandos_end;
1345
}
1346
break;
827
if(af == AF_INET6){
828
ret = connect(tcp_sd, (struct sockaddr *)&to,
829
sizeof(struct sockaddr_in6));
830
} else {
831
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
832
sizeof(struct sockaddr_in));
833
}
834
if(ret < 0){
835
if((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
836
int e = errno;
837
perror_plus("connect");
838
errno = e;
839
}
840
goto mandos_end;
841
}
842
843
if(quit_now){
844
errno = EINTR;
845
goto mandos_end;
1347
846
}
1348
847
1349
848
const char *out = mandos_protocol_version;
1503
1002
&decrypted_buffer, mc);
1504
1003
if(decrypted_buffer_size >= 0){
1505
1004
1506
clearerr(stdout);
1507
1005
written = 0;
1508
1006
while(written < (size_t) decrypted_buffer_size){
1509
1007
if(quit_now){
1525
1023
}
1526
1024
written += (size_t)ret;
1527
1025
}
1528
ret = fflush(stdout);
1529
if(ret != 0){
1530
int e = errno;
1531
if(debug){
1532
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1533
strerror(errno));
1534
}
1535
errno = e;
1536
goto mandos_end;
1537
}
1538
1026
retval = 0;
1539
1027
}
1540
1028
}
1543
1031
1544
1032
mandos_end:
1545
1033
{
1546
if(route_added){
1547
if(not delete_local_route(ip, if_index)){
1548
fprintf_plus(stderr, "Failed to delete local route to %s on"
1549
" interface %d", ip, if_index);
1550
}
1551
}
1552
1034
int e = errno;
1553
1035
free(decrypted_buffer);
1554
1036
free(buffer);
1555
1037
if(tcp_sd >= 0){
1556
ret = close(tcp_sd);
1038
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
1557
1039
}
1558
1040
if(ret == -1){
1559
1041
if(e == 0){
1571
1053
return retval;
1572
1054
}
1573
1055
1056
__attribute__((nonnull))
1574
1057
static void resolve_callback(AvahiSServiceResolver *r,
1575
1058
AvahiIfIndex interface,
1576
1059
AvahiProtocol proto,
1713
1196
__attribute__((nonnull, warn_unused_result))
1714
1197
bool get_flags(const char *ifname, struct ifreq *ifr){
1715
1198
int ret;
1716
int old_errno;
1199
error_t ret_errno;
1717
1200
1718
1201
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1719
1202
if(s < 0){
1720
old_errno = errno;
1203
ret_errno = errno;
1721
1204
perror_plus("socket");
1722
errno = old_errno;
1205
errno = ret_errno;
1723
1206
return false;
1724
1207
}
1725
strncpy(ifr->ifr_name, ifname, IF_NAMESIZE);
1726
ifr->ifr_name[IF_NAMESIZE-1] = '\0'; /* NUL terminate */
1208
strcpy(ifr->ifr_name, ifname);
1727
1209
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1728
1210
if(ret == -1){
1729
1211
if(debug){
1730
old_errno = errno;
1212
ret_errno = errno;
1731
1213
perror_plus("ioctl SIOCGIFFLAGS");
1732
errno = old_errno;
1733
}
1734
if((close(s) == -1) and debug){
1735
old_errno = errno;
1736
perror_plus("close");
1737
errno = old_errno;
1214
errno = ret_errno;
1738
1215
}
1739
1216
return false;
1740
1217
}
1741
if((close(s) == -1) and debug){
1742
old_errno = errno;
1743
perror_plus("close");
1744
errno = old_errno;
1745
}
1746
1218
return true;
1747
1219
}
1748
1220
1990
1462
}
1991
1463
}
1992
1464
1465
/* Set effective uid to 0, return errno */
1466
__attribute__((warn_unused_result))
1467
error_t raise_privileges(void){
1468
error_t old_errno = errno;
1469
error_t ret_errno = 0;
1470
if(seteuid(0) == -1){
1471
ret_errno = errno;
1472
}
1473
errno = old_errno;
1474
return ret_errno;
1475
}
1476
1477
/* Set effective and real user ID to 0. Return errno. */
1478
__attribute__((warn_unused_result))
1479
error_t raise_privileges_permanently(void){
1480
error_t old_errno = errno;
1481
error_t ret_errno = raise_privileges();
1482
if(ret_errno != 0){
1483
errno = old_errno;
1484
return ret_errno;
1485
}
1486
if(setuid(0) == -1){
1487
ret_errno = errno;
1488
}
1489
errno = old_errno;
1490
return ret_errno;
1491
}
1492
1493
/* Set effective user ID to unprivileged saved user ID */
1494
__attribute__((warn_unused_result))
1495
error_t lower_privileges(void){
1496
error_t old_errno = errno;
1497
error_t ret_errno = 0;
1498
if(seteuid(uid) == -1){
1499
ret_errno = errno;
1500
}
1501
errno = old_errno;
1502
return ret_errno;
1503
}
1504
1505
/* Lower privileges permanently */
1506
__attribute__((warn_unused_result))
1507
error_t lower_privileges_permanently(void){
1508
error_t old_errno = errno;
1509
error_t ret_errno = 0;
1510
if(setuid(uid) == -1){
1511
ret_errno = errno;
1512
}
1513
errno = old_errno;
1514
return ret_errno;
1515
}
1516
1993
1517
__attribute__((nonnull))
1994
1518
void run_network_hooks(const char *mode, const char *interface,
1995
1519
const float delay){
1996
1520
struct dirent **direntries = NULL;
1997
1521
if(hookdir_fd == -1){
1998
hookdir_fd = open(hookdir, O_RDONLY | O_DIRECTORY | O_PATH
1999
| O_CLOEXEC);
1522
hookdir_fd = open(hookdir, O_RDONLY);
2000
1523
if(hookdir_fd == -1){
2001
1524
if(errno == ENOENT){
2002
1525
if(debug){
2009
1532
return;
2010
1533
}
2011
1534
}
2012
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
2013
if(devnull == -1){
2014
perror_plus("open(\"/dev/null\", O_RDONLY)");
2015
return;
2016
}
1535
#ifdef __GLIBC__
1536
#if __GLIBC_PREREQ(2, 15)
2017
1537
int numhooks = scandirat(hookdir_fd, ".", &direntries,
2018
1538
runnable_hook, alphasort);
1539
#else /* not __GLIBC_PREREQ(2, 15) */
1540
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1541
alphasort);
1542
#endif /* not __GLIBC_PREREQ(2, 15) */
1543
#else /* not __GLIBC__ */
1544
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1545
alphasort);
1546
#endif /* not __GLIBC__ */
2019
1547
if(numhooks == -1){
2020
1548
perror_plus("scandir");
2021
close(devnull);
2022
1549
return;
2023
1550
}
2024
1551
struct dirent *direntry;
2025
1552
int ret;
1553
int devnull = open("/dev/null", O_RDONLY);
2026
1554
for(int i = 0; i < numhooks; i++){
2027
1555
direntry = direntries[i];
2028
1556
if(debug){
2052
1580
perror_plus("setgroups");
2053
1581
_exit(EX_NOPERM);
2054
1582
}
1583
ret = dup2(devnull, STDIN_FILENO);
1584
if(ret == -1){
1585
perror_plus("dup2(devnull, STDIN_FILENO)");
1586
_exit(EX_OSERR);
1587
}
1588
ret = close(devnull);
1589
if(ret == -1){
1590
perror_plus("close");
1591
_exit(EX_OSERR);
1592
}
1593
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1594
if(ret == -1){
1595
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1596
_exit(EX_OSERR);
1597
}
2055
1598
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
2056
1599
if(ret == -1){
2057
1600
perror_plus("setenv");
2092
1635
_exit(EX_OSERR);
2093
1636
}
2094
1637
}
2095
int hook_fd = (int)TEMP_FAILURE_RETRY(openat(hookdir_fd,
2096
direntry->d_name,
2097
O_RDONLY));
1638
int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);
2098
1639
if(hook_fd == -1){
2099
1640
perror_plus("openat");
2100
1641
_exit(EXIT_FAILURE);
2101
1642
}
2102
if(close(hookdir_fd) == -1){
1643
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
2103
1644
perror_plus("close");
2104
1645
_exit(EXIT_FAILURE);
2105
1646
}
2106
ret = dup2(devnull, STDIN_FILENO);
2107
if(ret == -1){
2108
perror_plus("dup2(devnull, STDIN_FILENO)");
2109
_exit(EX_OSERR);
2110
}
2111
ret = close(devnull);
2112
if(ret == -1){
2113
perror_plus("close");
2114
_exit(EX_OSERR);
2115
}
2116
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
2117
if(ret == -1){
2118
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
2119
_exit(EX_OSERR);
2120
}
2121
1647
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
2122
1648
environ) == -1){
2123
1649
perror_plus("fexecve");
2124
1650
_exit(EXIT_FAILURE);
2125
1651
}
2126
1652
} else {
2127
if(hook_pid == -1){
2128
perror_plus("fork");
2129
free(direntry);
2130
continue;
2131
}
2132
1653
int status;
2133
1654
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
2134
1655
perror_plus("waitpid");
2163
1684
free(direntry);
2164
1685
}
2165
1686
free(direntries);
2166
if(close(hookdir_fd) == -1){
1687
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
2167
1688
perror_plus("close");
2168
1689
} else {
2169
1690
hookdir_fd = -1;
2172
1693
}
2173
1694
2174
1695
__attribute__((nonnull, warn_unused_result))
2175
int bring_up_interface(const char *const interface,
2176
const float delay){
2177
int old_errno = errno;
1696
error_t bring_up_interface(const char *const interface,
1697
const float delay){
1698
error_t old_errno = errno;
2178
1699
int ret;
2179
1700
struct ifreq network;
2180
1701
unsigned int if_index = if_nametoindex(interface);
2190
1711
}
2191
1712
2192
1713
if(not interface_is_up(interface)){
2193
int ret_errno = 0;
2194
int ioctl_errno = 0;
1714
error_t ret_errno = 0, ioctl_errno = 0;
2195
1715
if(not get_flags(interface, &network)){
2196
1716
ret_errno = errno;
2197
1717
fprintf_plus(stderr, "Failed to get flags for interface "
2210
1730
}
2211
1731
2212
1732
if(quit_now){
2213
ret = close(sd);
1733
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2214
1734
if(ret == -1){
2215
1735
perror_plus("close");
2216
1736
}
2266
1786
}
2267
1787
2268
1788
/* Close the socket */
2269
ret = close(sd);
1789
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2270
1790
if(ret == -1){
2271
1791
perror_plus("close");
2272
1792
}
2284
1804
2285
1805
/* Sleep checking until interface is running.
2286
1806
Check every 0.25s, up to total time of delay */
2287
for(int i = 0; i < delay * 4; i++){
1807
for(int i=0; i < delay * 4; i++){
2288
1808
if(interface_is_running(interface)){
2289
1809
break;
2290
1810
}
2300
1820
}
2301
1821
2302
1822
__attribute__((nonnull, warn_unused_result))
2303
int take_down_interface(const char *const interface){
2304
int old_errno = errno;
1823
error_t take_down_interface(const char *const interface){
1824
error_t old_errno = errno;
2305
1825
struct ifreq network;
2306
1826
unsigned int if_index = if_nametoindex(interface);
2307
1827
if(if_index == 0){
2310
1830
return ENXIO;
2311
1831
}
2312
1832
if(interface_is_up(interface)){
2313
int ret_errno = 0;
2314
int ioctl_errno = 0;
1833
error_t ret_errno = 0, ioctl_errno = 0;
2315
1834
if(not get_flags(interface, &network) and debug){
2316
1835
ret_errno = errno;
2317
1836
fprintf_plus(stderr, "Failed to get flags for interface "
2355
1874
}
2356
1875
2357
1876
/* Close the socket */
2358
int ret = close(sd);
1877
int ret = (int)TEMP_FAILURE_RETRY(close(sd));
2359
1878
if(ret == -1){
2360
1879
perror_plus("close");
2361
1880
}
2376
1895
}
2377
1896
2378
1897
int main(int argc, char *argv[]){
2379
mandos_context mc = { .server = NULL, .dh_bits = 0,
2380
.priority = "SECURE256:!CTYPE-X.509"
2381
":+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256",
2382
.current_server = NULL, .interfaces = NULL,
2383
.interfaces_size = 0 };
1898
mandos_context mc = { .server = NULL, .dh_bits = 1024,
1899
.priority = "SECURE256:!CTYPE-X.509:"
1900
"+CTYPE-OPENPGP", .current_server = NULL,
1901
.interfaces = NULL, .interfaces_size = 0 };
2384
1902
AvahiSServiceBrowser *sb = NULL;
2385
1903
error_t ret_errno;
2386
1904
int ret;
2395
1913
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
2396
1914
const char *seckey = PATHDIR "/" SECKEY;
2397
1915
const char *pubkey = PATHDIR "/" PUBKEY;
2398
const char *dh_params_file = NULL;
2399
1916
char *interfaces_hooks = NULL;
2400
1917
2401
1918
bool gnutls_initialized = false;
2454
1971
.doc = "Bit length of the prime number used in the"
2455
1972
" Diffie-Hellman key exchange",
2456
1973
.group = 2 },
2457
{ .name = "dh-params", .key = 134,
2458
.arg = "FILE",
2459
.doc = "PEM-encoded PKCS#3 file with pre-generated parameters"
2460
" for the Diffie-Hellman key exchange",
2461
.group = 2 },
2462
1974
{ .name = "priority", .key = 130,
2463
1975
.arg = "STRING",
2464
1976
.doc = "GnuTLS priority string for the TLS handshake",
2519
2031
}
2520
2032
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
2521
2033
break;
2522
case 134: /* --dh-params */
2523
dh_params_file = arg;
2524
break;
2525
2034
case 130: /* --priority */
2526
2035
mc.priority = arg;
2527
2036
break;
2567
2076
.args_doc = "",
2568
2077
.doc = "Mandos client -- Get and decrypt"
2569
2078
" passwords from a Mandos server" };
2570
ret_errno = argp_parse(&argp, argc, argv,
2571
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2572
switch(ret_errno){
2079
ret = argp_parse(&argp, argc, argv,
2080
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2081
switch(ret){
2573
2082
case 0:
2574
2083
break;
2575
2084
case ENOMEM:
2576
2085
default:
2577
errno = ret_errno;
2086
errno = ret;
2578
2087
perror_plus("argp_parse");
2579
2088
exitcode = EX_OSERR;
2580
2089
goto end;
2583
2092
goto end;
2584
2093
}
2585
2094
}
2586
2095
2587
2096
{
2588
2097
/* Work around Debian bug #633582:
2589
<https://bugs.debian.org/633582> */
2098
<http://bugs.debian.org/633582> */
2590
2099
2591
2100
/* Re-raise privileges */
2592
ret = raise_privileges();
2593
if(ret != 0){
2594
errno = ret;
2101
ret_errno = raise_privileges();
2102
if(ret_errno != 0){
2103
errno = ret_errno;
2595
2104
perror_plus("Failed to raise privileges");
2596
2105
} else {
2597
2106
struct stat st;
2613
2122
}
2614
2123
}
2615
2124
}
2616
close(seckey_fd);
2125
TEMP_FAILURE_RETRY(close(seckey_fd));
2617
2126
}
2618
2127
}
2619
2128
2620
2129
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2621
2130
int pubkey_fd = open(pubkey, O_RDONLY);
2622
2131
if(pubkey_fd == -1){
2634
2143
}
2635
2144
}
2636
2145
}
2637
close(pubkey_fd);
2638
}
2639
}
2640
2641
if(dh_params_file != NULL
2642
and strcmp(dh_params_file, PATHDIR "/dhparams.pem" ) == 0){
2643
int dhparams_fd = open(dh_params_file, O_RDONLY);
2644
if(dhparams_fd == -1){
2645
perror_plus("open");
2646
} else {
2647
ret = (int)TEMP_FAILURE_RETRY(fstat(dhparams_fd, &st));
2648
if(ret == -1){
2649
perror_plus("fstat");
2650
} else {
2651
if(S_ISREG(st.st_mode)
2652
and st.st_uid == 0 and st.st_gid == 0){
2653
ret = fchown(dhparams_fd, uid, gid);
2654
if(ret == -1){
2655
perror_plus("fchown");
2656
}
2657
}
2658
}
2659
close(dhparams_fd);
2660
}
2661
}
2662
2146
TEMP_FAILURE_RETRY(close(pubkey_fd));
2147
}
2148
}
2149
2663
2150
/* Lower privileges */
2664
ret = lower_privileges();
2665
if(ret != 0){
2666
errno = ret;
2151
ret_errno = lower_privileges();
2152
if(ret_errno != 0){
2153
errno = ret_errno;
2667
2154
perror_plus("Failed to lower privileges");
2668
2155
}
2669
2156
}
2839
2326
errno = bring_up_interface(interface, delay);
2840
2327
if(not interface_was_up){
2841
2328
if(errno != 0){
2842
fprintf_plus(stderr, "Failed to bring up interface \"%s\":"
2843
" %s\n", interface, strerror(errno));
2329
perror_plus("Failed to bring up interface");
2844
2330
} else {
2845
2331
errno = argz_add(&interfaces_to_take_down,
2846
2332
&interfaces_to_take_down_size,
2869
2355
goto end;
2870
2356
}
2871
2357
2872
ret = init_gnutls_global(pubkey, seckey, dh_params_file, &mc);
2358
ret = init_gnutls_global(pubkey, seckey, &mc);
2873
2359
if(ret == -1){
2874
2360
fprintf_plus(stderr, "init_gnutls_global failed\n");
2875
2361
exitcode = EX_UNAVAILABLE;
2997
2483
2998
2484
/* Allocate a new server */
2999
2485
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
3000
&config, NULL, NULL, &ret);
2486
&config, NULL, NULL, &ret_errno);
3001
2487
3002
2488
/* Free the Avahi configuration data */
3003
2489
avahi_server_config_free(&config);
3006
2492
/* Check if creating the Avahi server object succeeded */
3007
2493
if(mc.server == NULL){
3008
2494
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
3009
avahi_strerror(ret));
2495
avahi_strerror(ret_errno));
3010
2496
exitcode = EX_UNAVAILABLE;
3011
2497
goto end;
3012
2498
}
3047
2533
end:
3048
2534
3049
2535
if(debug){
3050
if(signal_received){
3051
fprintf_plus(stderr, "%s exiting due to signal %d: %s\n",
3052
argv[0], signal_received,
3053
strsignal(signal_received));
3054
} else {
3055
fprintf_plus(stderr, "%s exiting\n", argv[0]);
3056
}
2536
fprintf_plus(stderr, "%s exiting\n", argv[0]);
3057
2537
}
3058
2538
3059
2539
/* Cleanup things */
3070
2550
3071
2551
if(gnutls_initialized){
3072
2552
gnutls_certificate_free_credentials(mc.cred);
2553
gnutls_global_deinit();
3073
2554
gnutls_dh_params_deinit(mc.dh_params);
3074
2555
}
3075
2556
3098
2579
3099
2580
/* Re-raise privileges */
3100
2581
{
3101
ret = raise_privileges();
3102
if(ret != 0){
3103
errno = ret;
2582
ret_errno = raise_privileges();
2583
if(ret_errno != 0){
2584
errno = ret_errno;
3104
2585
perror_plus("Failed to raise privileges");
3105
2586
} else {
3106
2587
3111
2592
/* Take down the network interfaces which were brought up */
3112
2593
{
3113
2594
char *interface = NULL;
3114
while((interface = argz_next(interfaces_to_take_down,
3115
interfaces_to_take_down_size,
3116
interface))){
3117
ret = take_down_interface(interface);
3118
if(ret != 0){
3119
errno = ret;
2595
while((interface=argz_next(interfaces_to_take_down,
2596
interfaces_to_take_down_size,
2597
interface))){
2598
ret_errno = take_down_interface(interface);
2599
if(ret_errno != 0){
2600
errno = ret_errno;
3120
2601
perror_plus("Failed to take down interface");
3121
2602
}
3122
2603
}
3127
2608
}
3128
2609
}
3129
2610
3130
ret = lower_privileges_permanently();
3131
if(ret != 0){
3132
errno = ret;
2611
ret_errno = lower_privileges_permanently();
2612
if(ret_errno != 0){
2613
errno = ret_errno;
3133
2614
perror_plus("Failed to lower privileges permanently");
3134
2615
}
3135
2616
}
3137
2618
free(interfaces_to_take_down);
3138
2619
free(interfaces_hooks);
3139
2620
3140
void clean_dir_at(int base, const char * const dirname,
3141
uintmax_t level){
3142
struct dirent **direntries = NULL;
3143
int dret;
3144
int dir_fd = (int)TEMP_FAILURE_RETRY(openat(base, dirname,
3145
O_RDONLY
3146
| O_NOFOLLOW
3147
| O_DIRECTORY
3148
| O_PATH));
3149
if(dir_fd == -1){
3150
perror_plus("open");
3151
return;
3152
}
3153
int numentries = scandirat(dir_fd, ".", &direntries,
3154
notdotentries, alphasort);
3155
if(numentries >= 0){
3156
for(int i = 0; i < numentries; i++){
3157
if(debug){
3158
fprintf_plus(stderr, "Unlinking \"%s/%s\"\n",
3159
dirname, direntries[i]->d_name);
3160
}
3161
dret = unlinkat(dir_fd, direntries[i]->d_name, 0);
3162
if(dret == -1){
3163
if(errno == EISDIR){
3164
dret = unlinkat(dir_fd, direntries[i]->d_name,
3165
AT_REMOVEDIR);
3166
}
3167
if((dret == -1) and (errno == ENOTEMPTY)
3168
and (strcmp(direntries[i]->d_name, "private-keys-v1.d")
3169
== 0) and (level == 0)){
3170
/* Recurse only in this special case */
3171
clean_dir_at(dir_fd, direntries[i]->d_name, level+1);
3172
dret = 0;
3173
}
3174
if((dret == -1) and (errno != ENOENT)){
3175
fprintf_plus(stderr, "unlink(\"%s/%s\"): %s\n", dirname,
3176
direntries[i]->d_name, strerror(errno));
3177
}
3178
}
3179
free(direntries[i]);
3180
}
3181
3182
/* need to clean even if 0 because man page doesn't specify */
3183
free(direntries);
3184
dret = unlinkat(base, dirname, AT_REMOVEDIR);
3185
if(dret == -1 and errno != ENOENT){
3186
perror_plus("rmdir");
3187
}
3188
} else {
3189
perror_plus("scandirat");
3190
}
3191
close(dir_fd);
3192
}
3193
3194
2621
/* Removes the GPGME temp directory and all files inside */
3195
2622
if(tempdir != NULL){
3196
clean_dir_at(-1, tempdir, 0);
2623
struct dirent **direntries = NULL;
2624
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |
2625
O_NOFOLLOW));
2626
if(tempdir_fd == -1){
2627
perror_plus("open");
2628
} else {
2629
#ifdef __GLIBC__
2630
#if __GLIBC_PREREQ(2, 15)
2631
int numentries = scandirat(tempdir_fd, ".", &direntries,
2632
notdotentries, alphasort);
2633
#else /* not __GLIBC_PREREQ(2, 15) */
2634
int numentries = scandir(tempdir, &direntries, notdotentries,
2635
alphasort);
2636
#endif /* not __GLIBC_PREREQ(2, 15) */
2637
#else /* not __GLIBC__ */
2638
int numentries = scandir(tempdir, &direntries, notdotentries,
2639
alphasort);
2640
#endif /* not __GLIBC__ */
2641
if(numentries >= 0){
2642
for(int i = 0; i < numentries; i++){
2643
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2644
if(ret == -1){
2645
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2646
" \"%s\", 0): %s\n", tempdir,
2647
direntries[i]->d_name, strerror(errno));
2648
}
2649
free(direntries[i]);
2650
}
2651
2652
/* need to clean even if 0 because man page doesn't specify */
2653
free(direntries);
2654
if(numentries == -1){
2655
perror_plus("scandir");
2656
}
2657
ret = rmdir(tempdir);
2658
if(ret == -1 and errno != ENOENT){
2659
perror_plus("rmdir");
2660
}
2661
}
2662
TEMP_FAILURE_RETRY(close(tempdir_fd));
2663
}
3197
2664
}
3198
2665
3199
2666
if(quit_now){
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0