To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 723.1.4
- compare with another revision
- download diff
- download tarball
- view history from revision 723.1.4
- Committer: Teddy Hogeborn
- Date: 2014-07-25 23:16:04 UTC
- mto: This revision was merged to the branch mainline in revision 724.
- Revision ID: teddy@recompile.se-20140725231604-f5c4f82rn2o5ll1k
Use the .items() method instead of .iteritems().
This is strictly not a Python 2.7 change, but Python 2.7 backported
the new .viewitems() from Python 3, and instead of changing .items()
to .viewitems() and later having to change them all into .items()
again in Python 3, I opted to just change all .iteritems() to .items()
so the code will work both now and with Python 3. The slowdown with
Python 2 is not significant, and with Python 3 it will again be fast.
* mandos (Client.__init__): Use .items() instead of .iteritems().
(DBusObjectWithProperties.Introspect): - '' -
(alternate_dbus_interfaces/wrapper): - '' -
(main): - '' -
* mandos-ctl (main): - '' -
This is strictly not a Python 2.7 change, but Python 2.7 backported
the new .viewitems() from Python 3, and instead of changing .items()
to .viewitems() and later having to change them all into .items()
again in Python 3, I opted to just change all .iteritems() to .items()
so the code will work both now and with Python 3. The slowdown with
Python 2 is not significant, and with Python 3 it will again be fast.
* mandos (Client.__init__): Use .items() instead of .iteritems().
(DBusObjectWithProperties.Introspect): - '' -
(alternate_dbus_interfaces/wrapper): - '' -
(main): - '' -
* mandos-ctl (main): - '' -
- files added:
- debian/mandos-client.examples
- debian/upstream
- network-hooks.d
- files modified:
- .bzrignore
added
removed
plugins.d/mandos-client.c
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2011 Teddy Hogeborn
13
* Copyright © 2008-2011 Björn Påhlsson
12
* Copyright © 2008-2014 Teddy Hogeborn
13
* Copyright © 2008-2014 Björn Påhlsson
14
14
*
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
33
#ifndef _LARGEFILE_SOURCE
34
34
#define _LARGEFILE_SOURCE
35
#endif
35
#endif /* not _LARGEFILE_SOURCE */
36
36
#ifndef _FILE_OFFSET_BITS
37
37
#define _FILE_OFFSET_BITS 64
38
#endif
38
#endif /* not _FILE_OFFSET_BITS */
39
39
40
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
41
42
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror(), remove() */
44
#include <stdint.h> /* uint16_t, uint32_t */
43
stdout, ferror() */
44
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
45
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
47
strtof(), abort() */
55
55
opendir(), DIR */
56
56
#include <sys/stat.h> /* open(), S_ISREG */
57
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect() */
59
#include <fcntl.h> /* open() */
58
inet_pton(), connect(),
59
getnameinfo() */
60
#include <fcntl.h> /* open(), unlinkat() */
60
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
61
62
*/
62
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
63
64
strtoimax() */
64
#include <assert.h> /* assert() */
65
65
#include <errno.h> /* perror(), errno,
66
66
program_invocation_short_name */
67
67
#include <time.h> /* nanosleep(), time(), sleep() */
73
73
*/
74
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
75
getuid(), getgid(), seteuid(),
76
setgid(), pause() */
77
#include <arpa/inet.h> /* inet_pton(), htons, inet_ntop() */
76
setgid(), pause(), _exit(),
77
unlinkat() */
78
#include <arpa/inet.h> /* inet_pton(), htons() */
78
79
#include <iso646.h> /* not, or, and */
79
80
#include <argp.h> /* struct argp_option, error_t, struct
80
81
argp_state, struct argp,
87
88
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
88
89
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
89
90
WEXITSTATUS(), WTERMSIG() */
91
#include <grp.h> /* setgroups() */
92
#include <argz.h> /* argz_add_sep(), argz_next(),
93
argz_delete(), argz_append(),
94
argz_stringify(), argz_add(),
95
argz_count() */
96
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
97
EAI_SYSTEM, gai_strerror() */
90
98
91
99
#ifdef __linux__
92
100
#include <sys/klog.h> /* klogctl() */
110
118
init_gnutls_session(),
111
119
GNUTLS_* */
112
120
#include <gnutls/openpgp.h>
113
/* gnutls_certificate_set_openpgp_key_file(),
114
GNUTLS_OPENPGP_FMT_BASE64 */
121
/* gnutls_certificate_set_openpgp_key_file(),
122
GNUTLS_OPENPGP_FMT_BASE64 */
115
123
116
124
/* GPGME */
117
125
#include <gpgme.h> /* All GPGME types, constants and
134
142
static const char sys_class_net[] = "/sys/class/net";
135
143
char *connect_to = NULL;
136
144
const char *hookdir = HOOKDIR;
145
int hookdir_fd = -1;
146
uid_t uid = 65534;
147
gid_t gid = 65534;
137
148
138
149
/* Doubly linked list that need to be circularly linked when used */
139
150
typedef struct server{
140
151
const char *ip;
141
uint16_t port;
152
in_port_t port;
142
153
AvahiIfIndex if_index;
143
154
int af;
144
155
struct timespec last_seen;
148
159
149
160
/* Used for passing in values through the Avahi callback functions */
150
161
typedef struct {
151
AvahiSimplePoll *simple_poll;
152
162
AvahiServer *server;
153
163
gnutls_certificate_credentials_t cred;
154
164
unsigned int dh_bits;
156
166
const char *priority;
157
167
gpgme_ctx_t ctx;
158
168
server *current_server;
169
char *interfaces;
170
size_t interfaces_size;
159
171
} mandos_context;
160
172
161
/* global context so signal handler can reach it*/
162
mandos_context mc = { .simple_poll = NULL, .server = NULL,
163
.dh_bits = 1024, .priority = "SECURE256"
164
":!CTYPE-X.509:+CTYPE-OPENPGP",
165
.current_server = NULL };
173
/* global so signal handler can reach it*/
174
AvahiSimplePoll *simple_poll;
166
175
167
176
sig_atomic_t quit_now = 0;
168
177
int signal_received = 0;
169
178
170
179
/* Function to use when printing errors */
171
180
void perror_plus(const char *print_text){
181
int e = errno;
172
182
fprintf(stderr, "Mandos plugin %s: ",
173
183
program_invocation_short_name);
184
errno = e;
174
185
perror(print_text);
175
186
}
176
187
188
__attribute__((format (gnu_printf, 2, 3), nonnull))
189
int fprintf_plus(FILE *stream, const char *format, ...){
190
va_list ap;
191
va_start (ap, format);
192
193
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
194
program_invocation_short_name));
195
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
196
}
197
177
198
/*
178
199
* Make additional room in "buffer" for at least BUFFER_SIZE more
179
200
* bytes. "buffer_capacity" is how much is currently allocated,
180
201
* "buffer_length" is how much is already used.
181
202
*/
203
__attribute__((nonnull, warn_unused_result))
182
204
size_t incbuffer(char **buffer, size_t buffer_length,
183
size_t buffer_capacity){
205
size_t buffer_capacity){
184
206
if(buffer_length + BUFFER_SIZE > buffer_capacity){
185
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
186
if(buffer == NULL){
207
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
208
if(new_buf == NULL){
209
int old_errno = errno;
210
free(*buffer);
211
errno = old_errno;
212
*buffer = NULL;
187
213
return 0;
188
214
}
215
*buffer = new_buf;
189
216
buffer_capacity += BUFFER_SIZE;
190
217
}
191
218
return buffer_capacity;
192
219
}
193
220
194
221
/* Add server to set of servers to retry periodically */
195
int add_server(const char *ip, uint16_t port,
196
AvahiIfIndex if_index,
197
int af){
222
__attribute__((nonnull, warn_unused_result))
223
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
224
int af, server **current_server){
198
225
int ret;
199
226
server *new_server = malloc(sizeof(server));
200
227
if(new_server == NULL){
201
228
perror_plus("malloc");
202
return -1;
229
return false;
203
230
}
204
231
*new_server = (server){ .ip = strdup(ip),
205
.port = port,
206
.if_index = if_index,
207
.af = af };
232
.port = port,
233
.if_index = if_index,
234
.af = af };
208
235
if(new_server->ip == NULL){
209
236
perror_plus("strdup");
210
return -1;
237
free(new_server);
238
return false;
239
}
240
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
241
if(ret == -1){
242
perror_plus("clock_gettime");
243
#ifdef __GNUC__
244
#pragma GCC diagnostic push
245
#pragma GCC diagnostic ignored "-Wcast-qual"
246
#endif
247
free((char *)(new_server->ip));
248
#ifdef __GNUC__
249
#pragma GCC diagnostic pop
250
#endif
251
free(new_server);
252
return false;
211
253
}
212
254
/* Special case of first server */
213
if (mc.current_server == NULL){
255
if(*current_server == NULL){
214
256
new_server->next = new_server;
215
257
new_server->prev = new_server;
216
mc.current_server = new_server;
217
/* Place the new server last in the list */
258
*current_server = new_server;
218
259
} else {
219
new_server->next = mc.current_server;
220
new_server->prev = mc.current_server->prev;
260
/* Place the new server last in the list */
261
new_server->next = *current_server;
262
new_server->prev = (*current_server)->prev;
221
263
new_server->prev->next = new_server;
222
mc.current_server->prev = new_server;
223
}
224
ret = clock_gettime(CLOCK_MONOTONIC, &mc.current_server->last_seen);
225
if(ret == -1){
226
perror_plus("clock_gettime");
227
return -1;
228
}
229
return 0;
264
(*current_server)->prev = new_server;
265
}
266
return true;
230
267
}
231
268
232
269
/*
233
270
* Initialize GPGME.
234
271
*/
235
static bool init_gpgme(const char *seckey,
236
const char *pubkey, const char *tempdir){
272
__attribute__((nonnull, warn_unused_result))
273
static bool init_gpgme(const char * const seckey,
274
const char * const pubkey,
275
const char * const tempdir,
276
mandos_context *mc){
237
277
gpgme_error_t rc;
238
278
gpgme_engine_info_t engine_info;
239
279
240
241
280
/*
242
281
* Helper function to insert pub and seckey to the engine keyring.
243
282
*/
244
bool import_key(const char *filename){
283
bool import_key(const char * const filename){
245
284
int ret;
246
285
int fd;
247
286
gpgme_data_t pgp_data;
254
293
255
294
rc = gpgme_data_new_from_fd(&pgp_data, fd);
256
295
if(rc != GPG_ERR_NO_ERROR){
257
fprintf(stderr, "Mandos plugin mandos-client: "
258
"bad gpgme_data_new_from_fd: %s: %s\n",
259
gpgme_strsource(rc), gpgme_strerror(rc));
296
fprintf_plus(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
297
gpgme_strsource(rc), gpgme_strerror(rc));
260
298
return false;
261
299
}
262
300
263
rc = gpgme_op_import(mc.ctx, pgp_data);
301
rc = gpgme_op_import(mc->ctx, pgp_data);
264
302
if(rc != GPG_ERR_NO_ERROR){
265
fprintf(stderr, "Mandos plugin mandos-client: "
266
"bad gpgme_op_import: %s: %s\n",
267
gpgme_strsource(rc), gpgme_strerror(rc));
303
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
304
gpgme_strsource(rc), gpgme_strerror(rc));
268
305
return false;
269
306
}
270
307
277
314
}
278
315
279
316
if(debug){
280
fprintf(stderr, "Mandos plugin mandos-client: "
281
"Initializing GPGME\n");
317
fprintf_plus(stderr, "Initializing GPGME\n");
282
318
}
283
319
284
320
/* Init GPGME */
285
321
gpgme_check_version(NULL);
286
322
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
287
323
if(rc != GPG_ERR_NO_ERROR){
288
fprintf(stderr, "Mandos plugin mandos-client: "
289
"bad gpgme_engine_check_version: %s: %s\n",
290
gpgme_strsource(rc), gpgme_strerror(rc));
324
fprintf_plus(stderr, "bad gpgme_engine_check_version: %s: %s\n",
325
gpgme_strsource(rc), gpgme_strerror(rc));
291
326
return false;
292
327
}
293
328
294
329
/* Set GPGME home directory for the OpenPGP engine only */
295
330
rc = gpgme_get_engine_info(&engine_info);
296
331
if(rc != GPG_ERR_NO_ERROR){
297
fprintf(stderr, "Mandos plugin mandos-client: "
298
"bad gpgme_get_engine_info: %s: %s\n",
299
gpgme_strsource(rc), gpgme_strerror(rc));
332
fprintf_plus(stderr, "bad gpgme_get_engine_info: %s: %s\n",
333
gpgme_strsource(rc), gpgme_strerror(rc));
300
334
return false;
301
335
}
302
336
while(engine_info != NULL){
308
342
engine_info = engine_info->next;
309
343
}
310
344
if(engine_info == NULL){
311
fprintf(stderr, "Mandos plugin mandos-client: "
312
"Could not set GPGME home dir to %s\n", tempdir);
345
fprintf_plus(stderr, "Could not set GPGME home dir to %s\n",
346
tempdir);
313
347
return false;
314
348
}
315
349
316
350
/* Create new GPGME "context" */
317
rc = gpgme_new(&(mc.ctx));
351
rc = gpgme_new(&(mc->ctx));
318
352
if(rc != GPG_ERR_NO_ERROR){
319
fprintf(stderr, "Mandos plugin mandos-client: "
320
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
321
gpgme_strerror(rc));
353
fprintf_plus(stderr, "Mandos plugin mandos-client: "
354
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
355
gpgme_strerror(rc));
322
356
return false;
323
357
}
324
358
333
367
* Decrypt OpenPGP data.
334
368
* Returns -1 on error
335
369
*/
370
__attribute__((nonnull, warn_unused_result))
336
371
static ssize_t pgp_packet_decrypt(const char *cryptotext,
337
372
size_t crypto_size,
338
char **plaintext){
373
char **plaintext,
374
mandos_context *mc){
339
375
gpgme_data_t dh_crypto, dh_plain;
340
376
gpgme_error_t rc;
341
377
ssize_t ret;
343
379
ssize_t plaintext_length = 0;
344
380
345
381
if(debug){
346
fprintf(stderr, "Mandos plugin mandos-client: "
347
"Trying to decrypt OpenPGP data\n");
382
fprintf_plus(stderr, "Trying to decrypt OpenPGP data\n");
348
383
}
349
384
350
385
/* Create new GPGME data buffer from memory cryptotext */
351
386
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
352
387
0);
353
388
if(rc != GPG_ERR_NO_ERROR){
354
fprintf(stderr, "Mandos plugin mandos-client: "
355
"bad gpgme_data_new_from_mem: %s: %s\n",
356
gpgme_strsource(rc), gpgme_strerror(rc));
389
fprintf_plus(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
390
gpgme_strsource(rc), gpgme_strerror(rc));
357
391
return -1;
358
392
}
359
393
360
394
/* Create new empty GPGME data buffer for the plaintext */
361
395
rc = gpgme_data_new(&dh_plain);
362
396
if(rc != GPG_ERR_NO_ERROR){
363
fprintf(stderr, "Mandos plugin mandos-client: "
364
"bad gpgme_data_new: %s: %s\n",
365
gpgme_strsource(rc), gpgme_strerror(rc));
397
fprintf_plus(stderr, "Mandos plugin mandos-client: "
398
"bad gpgme_data_new: %s: %s\n",
399
gpgme_strsource(rc), gpgme_strerror(rc));
366
400
gpgme_data_release(dh_crypto);
367
401
return -1;
368
402
}
369
403
370
404
/* Decrypt data from the cryptotext data buffer to the plaintext
371
405
data buffer */
372
rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
406
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
373
407
if(rc != GPG_ERR_NO_ERROR){
374
fprintf(stderr, "Mandos plugin mandos-client: "
375
"bad gpgme_op_decrypt: %s: %s\n",
376
gpgme_strsource(rc), gpgme_strerror(rc));
408
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
409
gpgme_strsource(rc), gpgme_strerror(rc));
377
410
plaintext_length = -1;
378
411
if(debug){
379
412
gpgme_decrypt_result_t result;
380
result = gpgme_op_decrypt_result(mc.ctx);
413
result = gpgme_op_decrypt_result(mc->ctx);
381
414
if(result == NULL){
382
fprintf(stderr, "Mandos plugin mandos-client: "
383
"gpgme_op_decrypt_result failed\n");
415
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
384
416
} else {
385
fprintf(stderr, "Mandos plugin mandos-client: "
386
"Unsupported algorithm: %s\n",
387
result->unsupported_algorithm);
388
fprintf(stderr, "Mandos plugin mandos-client: "
389
"Wrong key usage: %u\n",
390
result->wrong_key_usage);
417
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
418
result->unsupported_algorithm);
419
fprintf_plus(stderr, "Wrong key usage: %u\n",
420
result->wrong_key_usage);
391
421
if(result->file_name != NULL){
392
fprintf(stderr, "Mandos plugin mandos-client: "
393
"File name: %s\n", result->file_name);
422
fprintf_plus(stderr, "File name: %s\n", result->file_name);
394
423
}
395
424
gpgme_recipient_t recipient;
396
425
recipient = result->recipients;
397
426
while(recipient != NULL){
398
fprintf(stderr, "Mandos plugin mandos-client: "
399
"Public key algorithm: %s\n",
400
gpgme_pubkey_algo_name(recipient->pubkey_algo));
401
fprintf(stderr, "Mandos plugin mandos-client: "
402
"Key ID: %s\n", recipient->keyid);
403
fprintf(stderr, "Mandos plugin mandos-client: "
404
"Secret key available: %s\n",
405
recipient->status == GPG_ERR_NO_SECKEY
406
? "No" : "Yes");
427
fprintf_plus(stderr, "Public key algorithm: %s\n",
428
gpgme_pubkey_algo_name
429
(recipient->pubkey_algo));
430
fprintf_plus(stderr, "Key ID: %s\n", recipient->keyid);
431
fprintf_plus(stderr, "Secret key available: %s\n",
432
recipient->status == GPG_ERR_NO_SECKEY
433
? "No" : "Yes");
407
434
recipient = recipient->next;
408
435
}
409
436
}
412
439
}
413
440
414
441
if(debug){
415
fprintf(stderr, "Mandos plugin mandos-client: "
416
"Decryption of OpenPGP data succeeded\n");
442
fprintf_plus(stderr, "Decryption of OpenPGP data succeeded\n");
417
443
}
418
444
419
445
/* Seek back to the beginning of the GPGME plaintext data buffer */
426
452
*plaintext = NULL;
427
453
while(true){
428
454
plaintext_capacity = incbuffer(plaintext,
429
(size_t)plaintext_length,
430
plaintext_capacity);
455
(size_t)plaintext_length,
456
plaintext_capacity);
431
457
if(plaintext_capacity == 0){
432
perror_plus("incbuffer");
433
plaintext_length = -1;
434
goto decrypt_end;
458
perror_plus("incbuffer");
459
plaintext_length = -1;
460
goto decrypt_end;
435
461
}
436
462
437
463
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
450
476
}
451
477
452
478
if(debug){
453
fprintf(stderr, "Mandos plugin mandos-client: "
454
"Decrypted password is: ");
479
fprintf_plus(stderr, "Decrypted password is: ");
455
480
for(ssize_t i = 0; i < plaintext_length; i++){
456
481
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
457
482
}
468
493
return plaintext_length;
469
494
}
470
495
471
static const char * safer_gnutls_strerror(int value){
472
const char *ret = gnutls_strerror(value); /* Spurious warning from
473
-Wunreachable-code */
496
__attribute__((warn_unused_result))
497
static const char *safer_gnutls_strerror(int value){
498
const char *ret = gnutls_strerror(value);
474
499
if(ret == NULL)
475
500
ret = "(unknown)";
476
501
return ret;
477
502
}
478
503
479
504
/* GnuTLS log function callback */
505
__attribute__((nonnull))
480
506
static void debuggnutls(__attribute__((unused)) int level,
481
507
const char* string){
482
fprintf(stderr, "Mandos plugin mandos-client: GnuTLS: %s", string);
508
fprintf_plus(stderr, "GnuTLS: %s", string);
483
509
}
484
510
511
__attribute__((nonnull, warn_unused_result))
485
512
static int init_gnutls_global(const char *pubkeyfilename,
486
const char *seckeyfilename){
513
const char *seckeyfilename,
514
mandos_context *mc){
487
515
int ret;
488
516
489
517
if(debug){
490
fprintf(stderr, "Mandos plugin mandos-client: "
491
"Initializing GnuTLS\n");
518
fprintf_plus(stderr, "Initializing GnuTLS\n");
492
519
}
493
520
494
521
ret = gnutls_global_init();
495
522
if(ret != GNUTLS_E_SUCCESS){
496
fprintf(stderr, "Mandos plugin mandos-client: "
497
"GnuTLS global_init: %s\n", safer_gnutls_strerror(ret));
523
fprintf_plus(stderr, "GnuTLS global_init: %s\n",
524
safer_gnutls_strerror(ret));
498
525
return -1;
499
526
}
500
527
507
534
}
508
535
509
536
/* OpenPGP credentials */
510
ret = gnutls_certificate_allocate_credentials(&mc.cred);
537
ret = gnutls_certificate_allocate_credentials(&mc->cred);
511
538
if(ret != GNUTLS_E_SUCCESS){
512
fprintf(stderr, "Mandos plugin mandos-client: "
513
"GnuTLS memory error: %s\n", safer_gnutls_strerror(ret));
539
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
540
safer_gnutls_strerror(ret));
514
541
gnutls_global_deinit();
515
542
return -1;
516
543
}
517
544
518
545
if(debug){
519
fprintf(stderr, "Mandos plugin mandos-client: "
520
"Attempting to use OpenPGP public key %s and"
521
" secret key %s as GnuTLS credentials\n", pubkeyfilename,
522
seckeyfilename);
546
fprintf_plus(stderr, "Attempting to use OpenPGP public key %s and"
547
" secret key %s as GnuTLS credentials\n",
548
pubkeyfilename,
549
seckeyfilename);
523
550
}
524
551
525
552
ret = gnutls_certificate_set_openpgp_key_file
526
(mc.cred, pubkeyfilename, seckeyfilename,
553
(mc->cred, pubkeyfilename, seckeyfilename,
527
554
GNUTLS_OPENPGP_FMT_BASE64);
528
555
if(ret != GNUTLS_E_SUCCESS){
529
fprintf(stderr,
530
"Mandos plugin mandos-client: "
531
"Error[%d] while reading the OpenPGP key pair ('%s',"
532
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
533
fprintf(stderr, "Mandos plugin mandos-client: "
534
"The GnuTLS error is: %s\n", safer_gnutls_strerror(ret));
556
fprintf_plus(stderr,
557
"Error[%d] while reading the OpenPGP key pair ('%s',"
558
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
559
fprintf_plus(stderr, "The GnuTLS error is: %s\n",
560
safer_gnutls_strerror(ret));
535
561
goto globalfail;
536
562
}
537
563
538
564
/* GnuTLS server initialization */
539
ret = gnutls_dh_params_init(&mc.dh_params);
565
ret = gnutls_dh_params_init(&mc->dh_params);
540
566
if(ret != GNUTLS_E_SUCCESS){
541
fprintf(stderr, "Mandos plugin mandos-client: "
542
"Error in GnuTLS DH parameter initialization:"
543
" %s\n", safer_gnutls_strerror(ret));
567
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
568
" initialization: %s\n",
569
safer_gnutls_strerror(ret));
544
570
goto globalfail;
545
571
}
546
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
572
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
547
573
if(ret != GNUTLS_E_SUCCESS){
548
fprintf(stderr, "Mandos plugin mandos-client: "
549
"Error in GnuTLS prime generation: %s\n",
550
safer_gnutls_strerror(ret));
574
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
575
safer_gnutls_strerror(ret));
551
576
goto globalfail;
552
577
}
553
578
554
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
579
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
555
580
556
581
return 0;
557
582
558
583
globalfail:
559
584
560
gnutls_certificate_free_credentials(mc.cred);
585
gnutls_certificate_free_credentials(mc->cred);
561
586
gnutls_global_deinit();
562
gnutls_dh_params_deinit(mc.dh_params);
587
gnutls_dh_params_deinit(mc->dh_params);
563
588
return -1;
564
589
}
565
590
566
static int init_gnutls_session(gnutls_session_t *session){
591
__attribute__((nonnull, warn_unused_result))
592
static int init_gnutls_session(gnutls_session_t *session,
593
mandos_context *mc){
567
594
int ret;
568
595
/* GnuTLS session creation */
569
596
do {
573
600
}
574
601
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
575
602
if(ret != GNUTLS_E_SUCCESS){
576
fprintf(stderr, "Mandos plugin mandos-client: "
577
"Error in GnuTLS session initialization: %s\n",
578
safer_gnutls_strerror(ret));
603
fprintf_plus(stderr,
604
"Error in GnuTLS session initialization: %s\n",
605
safer_gnutls_strerror(ret));
579
606
}
580
607
581
608
{
582
609
const char *err;
583
610
do {
584
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
611
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
585
612
if(quit_now){
586
613
gnutls_deinit(*session);
587
614
return -1;
588
615
}
589
616
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
590
617
if(ret != GNUTLS_E_SUCCESS){
591
fprintf(stderr, "Mandos plugin mandos-client: "
592
"Syntax error at: %s\n", err);
593
fprintf(stderr, "Mandos plugin mandos-client: "
594
"GnuTLS error: %s\n", safer_gnutls_strerror(ret));
618
fprintf_plus(stderr, "Syntax error at: %s\n", err);
619
fprintf_plus(stderr, "GnuTLS error: %s\n",
620
safer_gnutls_strerror(ret));
595
621
gnutls_deinit(*session);
596
622
return -1;
597
623
}
599
625
600
626
do {
601
627
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
602
mc.cred);
628
mc->cred);
603
629
if(quit_now){
604
630
gnutls_deinit(*session);
605
631
return -1;
606
632
}
607
633
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
608
634
if(ret != GNUTLS_E_SUCCESS){
609
fprintf(stderr, "Mandos plugin mandos-client: "
610
"Error setting GnuTLS credentials: %s\n",
611
safer_gnutls_strerror(ret));
635
fprintf_plus(stderr, "Error setting GnuTLS credentials: %s\n",
636
safer_gnutls_strerror(ret));
612
637
gnutls_deinit(*session);
613
638
return -1;
614
639
}
616
641
/* ignore client certificate if any. */
617
642
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
618
643
619
gnutls_dh_set_prime_bits(*session, mc.dh_bits);
644
gnutls_dh_set_prime_bits(*session, mc->dh_bits);
620
645
621
646
return 0;
622
647
}
626
651
__attribute__((unused)) const char *txt){}
627
652
628
653
/* Called when a Mandos server is found */
629
static int start_mandos_communication(const char *ip, uint16_t port,
654
__attribute__((nonnull, warn_unused_result))
655
static int start_mandos_communication(const char *ip, in_port_t port,
630
656
AvahiIfIndex if_index,
631
int af){
657
int af, mandos_context *mc){
632
658
int ret, tcp_sd = -1;
633
659
ssize_t sret;
634
union {
635
struct sockaddr_in in;
636
struct sockaddr_in6 in6;
637
} to;
660
struct sockaddr_storage to;
638
661
char *buffer = NULL;
639
662
char *decrypted_buffer = NULL;
640
663
size_t buffer_length = 0;
659
682
pf = PF_INET;
660
683
break;
661
684
default:
662
fprintf(stderr, "Mandos plugin mandos-client: "
663
"Bad address family: %d\n", af);
685
fprintf_plus(stderr, "Bad address family: %d\n", af);
664
686
errno = EINVAL;
665
687
return -1;
666
688
}
667
689
668
ret = init_gnutls_session(&session);
690
/* If the interface is specified and we have a list of interfaces */
691
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
692
/* Check if the interface is one of the interfaces we are using */
693
bool match = false;
694
{
695
char *interface = NULL;
696
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
697
interface))){
698
if(if_nametoindex(interface) == (unsigned int)if_index){
699
match = true;
700
break;
701
}
702
}
703
}
704
if(not match){
705
/* This interface does not match any in the list, so we don't
706
connect to the server */
707
if(debug){
708
char interface[IF_NAMESIZE];
709
if(if_indextoname((unsigned int)if_index, interface) == NULL){
710
perror_plus("if_indextoname");
711
} else {
712
fprintf_plus(stderr, "Skipping server on non-used interface"
713
" \"%s\"\n",
714
if_indextoname((unsigned int)if_index,
715
interface));
716
}
717
}
718
return -1;
719
}
720
}
721
722
ret = init_gnutls_session(&session, mc);
669
723
if(ret != 0){
670
724
return -1;
671
725
}
672
726
673
727
if(debug){
674
fprintf(stderr, "Mandos plugin mandos-client: "
675
"Setting up a TCP connection to %s, port %" PRIu16
676
"\n", ip, port);
728
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
729
PRIuMAX "\n", ip, (uintmax_t)port);
677
730
}
678
731
679
732
tcp_sd = socket(pf, SOCK_STREAM, 0);
691
744
692
745
memset(&to, 0, sizeof(to));
693
746
if(af == AF_INET6){
694
to.in6.sin6_family = (sa_family_t)af;
695
ret = inet_pton(af, ip, &to.in6.sin6_addr);
747
((struct sockaddr_in6 *)&to)->sin6_family = (sa_family_t)af;
748
ret = inet_pton(af, ip, &((struct sockaddr_in6 *)&to)->sin6_addr);
696
749
} else { /* IPv4 */
697
to.in.sin_family = (sa_family_t)af;
698
ret = inet_pton(af, ip, &to.in.sin_addr);
750
((struct sockaddr_in *)&to)->sin_family = (sa_family_t)af;
751
ret = inet_pton(af, ip, &((struct sockaddr_in *)&to)->sin_addr);
699
752
}
700
753
if(ret < 0 ){
701
754
int e = errno;
705
758
}
706
759
if(ret == 0){
707
760
int e = errno;
708
fprintf(stderr, "Mandos plugin mandos-client: "
709
"Bad address: %s\n", ip);
761
fprintf_plus(stderr, "Bad address: %s\n", ip);
710
762
errno = e;
711
763
goto mandos_end;
712
764
}
713
765
if(af == AF_INET6){
714
to.in6.sin6_port = htons(port); /* Spurious warnings from
715
-Wconversion and
716
-Wunreachable-code */
717
718
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
719
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
720
-Wunreachable-code*/
766
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
767
if(IN6_IS_ADDR_LINKLOCAL
768
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
721
769
if(if_index == AVAHI_IF_UNSPEC){
722
fprintf(stderr, "Mandos plugin mandos-client: "
723
"An IPv6 link-local address is incomplete"
724
" without a network interface\n");
770
fprintf_plus(stderr, "An IPv6 link-local address is"
771
" incomplete without a network interface\n");
725
772
errno = EINVAL;
726
773
goto mandos_end;
727
774
}
728
775
/* Set the network interface number as scope */
729
to.in6.sin6_scope_id = (uint32_t)if_index;
776
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
730
777
}
731
778
} else {
732
to.in.sin_port = htons(port); /* Spurious warnings from
733
-Wconversion and
734
-Wunreachable-code */
779
((struct sockaddr_in *)&to)->sin_port = htons(port);
735
780
}
736
781
737
782
if(quit_now){
745
790
if(if_indextoname((unsigned int)if_index, interface) == NULL){
746
791
perror_plus("if_indextoname");
747
792
} else {
748
fprintf(stderr, "Mandos plugin mandos-client: "
749
"Connection to: %s%%%s, port %" PRIu16 "\n",
750
ip, interface, port);
793
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
794
"\n", ip, interface, (uintmax_t)port);
751
795
}
752
796
} else {
753
fprintf(stderr, "Mandos plugin mandos-client: "
754
"Connection to: %s, port %" PRIu16 "\n", ip, port);
797
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
798
ip, (uintmax_t)port);
755
799
}
756
800
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
757
801
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
758
const char *pcret;
759
802
if(af == AF_INET6){
760
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
761
sizeof(addrstr));
803
ret = getnameinfo((struct sockaddr *)&to,
804
sizeof(struct sockaddr_in6),
805
addrstr, sizeof(addrstr), NULL, 0,
806
NI_NUMERICHOST);
762
807
} else {
763
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
764
sizeof(addrstr));
808
ret = getnameinfo((struct sockaddr *)&to,
809
sizeof(struct sockaddr_in),
810
addrstr, sizeof(addrstr), NULL, 0,
811
NI_NUMERICHOST);
765
812
}
766
if(pcret == NULL){
767
perror_plus("inet_ntop");
768
} else {
769
if(strcmp(addrstr, ip) != 0){
770
fprintf(stderr, "Mandos plugin mandos-client: "
771
"Canonical address form: %s\n", addrstr);
772
}
813
if(ret == EAI_SYSTEM){
814
perror_plus("getnameinfo");
815
} else if(ret != 0) {
816
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
817
} else if(strcmp(addrstr, ip) != 0){
818
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
773
819
}
774
820
}
775
821
779
825
}
780
826
781
827
if(af == AF_INET6){
782
ret = connect(tcp_sd, &to.in6, sizeof(to));
828
ret = connect(tcp_sd, (struct sockaddr *)&to,
829
sizeof(struct sockaddr_in6));
783
830
} else {
784
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
831
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
832
sizeof(struct sockaddr_in));
785
833
}
786
834
if(ret < 0){
787
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
835
if((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
788
836
int e = errno;
789
837
perror_plus("connect");
790
838
errno = e;
802
850
while(true){
803
851
size_t out_size = strlen(out);
804
852
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
805
out_size - written));
853
out_size - written));
806
854
if(ret == -1){
807
855
int e = errno;
808
856
perror_plus("write");
828
876
}
829
877
830
878
if(debug){
831
fprintf(stderr, "Mandos plugin mandos-client: "
832
"Establishing TLS session with %s\n", ip);
879
fprintf_plus(stderr, "Establishing TLS session with %s\n", ip);
833
880
}
834
881
835
882
if(quit_now){
837
884
goto mandos_end;
838
885
}
839
886
840
/* Spurious warning from -Wint-to-pointer-cast */
841
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
887
/* This casting via intptr_t is to eliminate warning about casting
888
an int to a pointer type. This is exactly how the GnuTLS Guile
889
function "set-session-transport-fd!" does it. */
890
gnutls_transport_set_ptr(session,
891
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
842
892
843
893
if(quit_now){
844
894
errno = EINTR;
855
905
856
906
if(ret != GNUTLS_E_SUCCESS){
857
907
if(debug){
858
fprintf(stderr, "Mandos plugin mandos-client: "
859
"*** GnuTLS Handshake failed ***\n");
908
fprintf_plus(stderr, "*** GnuTLS Handshake failed ***\n");
860
909
gnutls_perror(ret);
861
910
}
862
911
errno = EPROTO;
866
915
/* Read OpenPGP packet that contains the wanted password */
867
916
868
917
if(debug){
869
fprintf(stderr, "Mandos plugin mandos-client: "
870
"Retrieving OpenPGP encrypted password from %s\n", ip);
918
fprintf_plus(stderr, "Retrieving OpenPGP encrypted password from"
919
" %s\n", ip);
871
920
}
872
921
873
922
while(true){
878
927
}
879
928
880
929
buffer_capacity = incbuffer(&buffer, buffer_length,
881
buffer_capacity);
930
buffer_capacity);
882
931
if(buffer_capacity == 0){
883
932
int e = errno;
884
933
perror_plus("incbuffer");
911
960
}
912
961
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
913
962
if(ret < 0){
914
fprintf(stderr, "Mandos plugin mandos-client: "
915
"*** GnuTLS Re-handshake failed ***\n");
963
fprintf_plus(stderr, "*** GnuTLS Re-handshake failed "
964
"***\n");
916
965
gnutls_perror(ret);
917
966
errno = EPROTO;
918
967
goto mandos_end;
919
968
}
920
969
break;
921
970
default:
922
fprintf(stderr, "Mandos plugin mandos-client: "
923
"Unknown error while reading data from"
924
" encrypted session with Mandos server\n");
971
fprintf_plus(stderr, "Unknown error while reading data from"
972
" encrypted session with Mandos server\n");
925
973
gnutls_bye(session, GNUTLS_SHUT_RDWR);
926
974
errno = EIO;
927
975
goto mandos_end;
932
980
}
933
981
934
982
if(debug){
935
fprintf(stderr, "Mandos plugin mandos-client: "
936
"Closing TLS session\n");
983
fprintf_plus(stderr, "Closing TLS session\n");
937
984
}
938
985
939
986
if(quit_now){
951
998
952
999
if(buffer_length > 0){
953
1000
ssize_t decrypted_buffer_size;
954
decrypted_buffer_size = pgp_packet_decrypt(buffer,
955
buffer_length,
956
&decrypted_buffer);
1001
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
1002
&decrypted_buffer, mc);
957
1003
if(decrypted_buffer_size >= 0){
958
1004
959
1005
written = 0;
969
1015
if(ret == 0 and ferror(stdout)){
970
1016
int e = errno;
971
1017
if(debug){
972
fprintf(stderr, "Mandos plugin mandos-client: "
973
"Error writing encrypted data: %s\n",
974
strerror(errno));
1018
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1019
strerror(errno));
975
1020
}
976
1021
errno = e;
977
1022
goto mandos_end;
1008
1053
return retval;
1009
1054
}
1010
1055
1056
__attribute__((nonnull))
1011
1057
static void resolve_callback(AvahiSServiceResolver *r,
1012
1058
AvahiIfIndex interface,
1013
1059
AvahiProtocol proto,
1021
1067
AVAHI_GCC_UNUSED AvahiStringList *txt,
1022
1068
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1023
1069
flags,
1024
AVAHI_GCC_UNUSED void* userdata){
1025
assert(r);
1070
void *mc){
1071
if(r == NULL){
1072
return;
1073
}
1026
1074
1027
1075
/* Called whenever a service has been resolved successfully or
1028
1076
timed out */
1029
1077
1030
1078
if(quit_now){
1079
avahi_s_service_resolver_free(r);
1031
1080
return;
1032
1081
}
1033
1082
1034
1083
switch(event){
1035
1084
default:
1036
1085
case AVAHI_RESOLVER_FAILURE:
1037
fprintf(stderr, "Mandos plugin mandos-client: "
1038
"(Avahi Resolver) Failed to resolve service '%s'"
1039
" of type '%s' in domain '%s': %s\n", name, type, domain,
1040
avahi_strerror(avahi_server_errno(mc.server)));
1086
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1087
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1088
domain,
1089
avahi_strerror(avahi_server_errno
1090
(((mandos_context*)mc)->server)));
1041
1091
break;
1042
1092
1043
1093
case AVAHI_RESOLVER_FOUND:
1045
1095
char ip[AVAHI_ADDRESS_STR_MAX];
1046
1096
avahi_address_snprint(ip, sizeof(ip), address);
1047
1097
if(debug){
1048
fprintf(stderr, "Mandos plugin mandos-client: "
1049
"Mandos server \"%s\" found on %s (%s, %"
1050
PRIdMAX ") on port %" PRIu16 "\n", name, host_name,
1051
ip, (intmax_t)interface, port);
1098
fprintf_plus(stderr, "Mandos server \"%s\" found on %s (%s, %"
1099
PRIdMAX ") on port %" PRIu16 "\n", name,
1100
host_name, ip, (intmax_t)interface, port);
1052
1101
}
1053
int ret = start_mandos_communication(ip, port, interface,
1054
avahi_proto_to_af(proto));
1102
int ret = start_mandos_communication(ip, (in_port_t)port,
1103
interface,
1104
avahi_proto_to_af(proto),
1105
mc);
1055
1106
if(ret == 0){
1056
avahi_simple_poll_quit(mc.simple_poll);
1107
avahi_simple_poll_quit(simple_poll);
1057
1108
} else {
1058
ret = add_server(ip, port, interface,
1059
avahi_proto_to_af(proto));
1109
if(not add_server(ip, (in_port_t)port, interface,
1110
avahi_proto_to_af(proto),
1111
&((mandos_context*)mc)->current_server)){
1112
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1113
" list\n", name);
1114
}
1060
1115
}
1061
1116
}
1062
1117
}
1072
1127
const char *domain,
1073
1128
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1074
1129
flags,
1075
AVAHI_GCC_UNUSED void* userdata){
1076
assert(b);
1130
void *mc){
1131
if(b == NULL){
1132
return;
1133
}
1077
1134
1078
1135
/* Called whenever a new services becomes available on the LAN or
1079
1136
is removed from the LAN */
1086
1143
default:
1087
1144
case AVAHI_BROWSER_FAILURE:
1088
1145
1089
fprintf(stderr, "Mandos plugin mandos-client: "
1090
"(Avahi browser) %s\n",
1091
avahi_strerror(avahi_server_errno(mc.server)));
1092
avahi_simple_poll_quit(mc.simple_poll);
1146
fprintf_plus(stderr, "(Avahi browser) %s\n",
1147
avahi_strerror(avahi_server_errno
1148
(((mandos_context*)mc)->server)));
1149
avahi_simple_poll_quit(simple_poll);
1093
1150
return;
1094
1151
1095
1152
case AVAHI_BROWSER_NEW:
1098
1155
the callback function is called the Avahi server will free the
1099
1156
resolver for us. */
1100
1157
1101
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
1102
name, type, domain, protocol, 0,
1103
resolve_callback, NULL) == NULL)
1104
fprintf(stderr, "Mandos plugin mandos-client: "
1105
"Avahi: Failed to resolve service '%s': %s\n",
1106
name, avahi_strerror(avahi_server_errno(mc.server)));
1158
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1159
interface, protocol, name, type,
1160
domain, protocol, 0,
1161
resolve_callback, mc) == NULL)
1162
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1163
" %s\n", name,
1164
avahi_strerror(avahi_server_errno
1165
(((mandos_context*)mc)->server)));
1107
1166
break;
1108
1167
1109
1168
case AVAHI_BROWSER_REMOVE:
1112
1171
case AVAHI_BROWSER_ALL_FOR_NOW:
1113
1172
case AVAHI_BROWSER_CACHE_EXHAUSTED:
1114
1173
if(debug){
1115
fprintf(stderr, "Mandos plugin mandos-client: "
1116
"No Mandos server found, still searching...\n");
1174
fprintf_plus(stderr, "No Mandos server found, still"
1175
" searching...\n");
1117
1176
}
1118
1177
break;
1119
1178
}
1128
1187
signal_received = sig;
1129
1188
int old_errno = errno;
1130
1189
/* set main loop to exit */
1131
if(mc.simple_poll != NULL){
1132
avahi_simple_poll_quit(mc.simple_poll);
1190
if(simple_poll != NULL){
1191
avahi_simple_poll_quit(simple_poll);
1133
1192
}
1134
1193
errno = old_errno;
1135
1194
}
1136
1195
1196
__attribute__((nonnull, warn_unused_result))
1137
1197
bool get_flags(const char *ifname, struct ifreq *ifr){
1138
1198
int ret;
1199
error_t ret_errno;
1139
1200
1140
1201
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1141
1202
if(s < 0){
1203
ret_errno = errno;
1142
1204
perror_plus("socket");
1205
errno = ret_errno;
1143
1206
return false;
1144
1207
}
1145
1208
strcpy(ifr->ifr_name, ifname);
1146
1209
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1147
1210
if(ret == -1){
1148
1211
if(debug){
1212
ret_errno = errno;
1149
1213
perror_plus("ioctl SIOCGIFFLAGS");
1214
errno = ret_errno;
1150
1215
}
1151
1216
return false;
1152
1217
}
1153
1218
return true;
1154
1219
}
1155
1220
1221
__attribute__((nonnull, warn_unused_result))
1156
1222
bool good_flags(const char *ifname, const struct ifreq *ifr){
1157
1223
1158
1224
/* Reject the loopback device */
1159
1225
if(ifr->ifr_flags & IFF_LOOPBACK){
1160
1226
if(debug){
1161
fprintf(stderr, "Mandos plugin mandos-client: "
1162
"Rejecting loopback interface \"%s\"\n", ifname);
1227
fprintf_plus(stderr, "Rejecting loopback interface \"%s\"\n",
1228
ifname);
1163
1229
}
1164
1230
return false;
1165
1231
}
1166
1232
/* Accept point-to-point devices only if connect_to is specified */
1167
1233
if(connect_to != NULL and (ifr->ifr_flags & IFF_POINTOPOINT)){
1168
1234
if(debug){
1169
fprintf(stderr, "Mandos plugin mandos-client: "
1170
"Accepting point-to-point interface \"%s\"\n", ifname);
1235
fprintf_plus(stderr, "Accepting point-to-point interface"
1236
" \"%s\"\n", ifname);
1171
1237
}
1172
1238
return true;
1173
1239
}
1174
1240
/* Otherwise, reject non-broadcast-capable devices */
1175
1241
if(not (ifr->ifr_flags & IFF_BROADCAST)){
1176
1242
if(debug){
1177
fprintf(stderr, "Mandos plugin mandos-client: "
1178
"Rejecting non-broadcast interface \"%s\"\n", ifname);
1243
fprintf_plus(stderr, "Rejecting non-broadcast interface"
1244
" \"%s\"\n", ifname);
1179
1245
}
1180
1246
return false;
1181
1247
}
1182
1248
/* Reject non-ARP interfaces (including dummy interfaces) */
1183
1249
if(ifr->ifr_flags & IFF_NOARP){
1184
1250
if(debug){
1185
fprintf(stderr, "Mandos plugin mandos-client: "
1186
"Rejecting non-ARP interface \"%s\"\n", ifname);
1251
fprintf_plus(stderr, "Rejecting non-ARP interface \"%s\"\n",
1252
ifname);
1187
1253
}
1188
1254
return false;
1189
1255
}
1190
1256
1191
1257
/* Accept this device */
1192
1258
if(debug){
1193
fprintf(stderr, "Mandos plugin mandos-client: "
1194
"Interface \"%s\" is good\n", ifname);
1259
fprintf_plus(stderr, "Interface \"%s\" is good\n", ifname);
1195
1260
}
1196
1261
return true;
1197
1262
}
1201
1266
* corresponds to an acceptable network device.
1202
1267
* (This function is passed to scandir(3) as a filter function.)
1203
1268
*/
1269
__attribute__((nonnull, warn_unused_result))
1204
1270
int good_interface(const struct dirent *if_entry){
1205
1271
if(if_entry->d_name[0] == '.'){
1206
1272
return 0;
1209
1275
struct ifreq ifr;
1210
1276
if(not get_flags(if_entry->d_name, &ifr)){
1211
1277
if(debug){
1212
fprintf(stderr, "Mandos plugin mandos-client: "
1213
"Failed to get flags for interface \"%s\"\n",
1214
if_entry->d_name);
1215
}
1216
return 0;
1217
}
1218
1219
if(not good_flags(if_entry->d_name, &ifr)){
1220
return 0;
1221
}
1222
return 1;
1223
}
1224
1225
/*
1226
* This function determines if a directory entry in /sys/class/net
1227
* corresponds to an acceptable network device which is up.
1228
* (This function is passed to scandir(3) as a filter function.)
1229
*/
1230
int up_interface(const struct dirent *if_entry){
1231
if(if_entry->d_name[0] == '.'){
1232
return 0;
1233
}
1234
1235
struct ifreq ifr;
1236
if(not get_flags(if_entry->d_name, &ifr)){
1237
if(debug){
1238
fprintf(stderr, "Mandos plugin mandos-client: "
1239
"Failed to get flags for interface \"%s\"\n",
1240
if_entry->d_name);
1241
}
1242
return 0;
1243
}
1244
1245
/* Reject down interfaces */
1246
if(not (ifr.ifr_flags & IFF_UP)){
1247
if(debug){
1248
fprintf(stderr, "Mandos plugin mandos-client: "
1249
"Rejecting down interface \"%s\"\n",
1250
if_entry->d_name);
1251
}
1252
return 0;
1253
}
1254
1255
/* Reject non-running interfaces */
1256
if(not (ifr.ifr_flags & IFF_RUNNING)){
1257
if(debug){
1258
fprintf(stderr, "Mandos plugin mandos-client: "
1259
"Rejecting non-running interface \"%s\"\n",
1260
if_entry->d_name);
1261
}
1262
return 0;
1263
}
1264
1265
if(not good_flags(if_entry->d_name, &ifr)){
1266
return 0;
1267
}
1268
return 1;
1269
}
1270
1278
fprintf_plus(stderr, "Failed to get flags for interface "
1279
"\"%s\"\n", if_entry->d_name);
1280
}
1281
return 0;
1282
}
1283
1284
if(not good_flags(if_entry->d_name, &ifr)){
1285
return 0;
1286
}
1287
return 1;
1288
}
1289
1290
/*
1291
* This function determines if a network interface is up.
1292
*/
1293
__attribute__((nonnull, warn_unused_result))
1294
bool interface_is_up(const char *interface){
1295
struct ifreq ifr;
1296
if(not get_flags(interface, &ifr)){
1297
if(debug){
1298
fprintf_plus(stderr, "Failed to get flags for interface "
1299
"\"%s\"\n", interface);
1300
}
1301
return false;
1302
}
1303
1304
return (bool)(ifr.ifr_flags & IFF_UP);
1305
}
1306
1307
/*
1308
* This function determines if a network interface is running
1309
*/
1310
__attribute__((nonnull, warn_unused_result))
1311
bool interface_is_running(const char *interface){
1312
struct ifreq ifr;
1313
if(not get_flags(interface, &ifr)){
1314
if(debug){
1315
fprintf_plus(stderr, "Failed to get flags for interface "
1316
"\"%s\"\n", interface);
1317
}
1318
return false;
1319
}
1320
1321
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1322
}
1323
1324
__attribute__((nonnull, pure, warn_unused_result))
1271
1325
int notdotentries(const struct dirent *direntry){
1272
1326
/* Skip "." and ".." */
1273
1327
if(direntry->d_name[0] == '.'
1280
1334
}
1281
1335
1282
1336
/* Is this directory entry a runnable program? */
1337
__attribute__((nonnull, warn_unused_result))
1283
1338
int runnable_hook(const struct dirent *direntry){
1284
1339
int ret;
1340
size_t sret;
1285
1341
struct stat st;
1286
1342
1287
1343
if((direntry->d_name)[0] == '\0'){
1289
1345
return 0;
1290
1346
}
1291
1347
1292
/* Save pointer to last character */
1293
char *end = strchr(direntry->d_name, '\0')-1;
1294
1295
if(*end == '~'){
1296
/* Backup name~ */
1297
return 0;
1298
}
1299
1300
if(((direntry->d_name)[0] == '#')
1301
and (*end == '#')){
1302
/* Temporary #name# */
1303
return 0;
1304
}
1305
1306
/* XXX more rules here */
1307
1308
char *fullname = NULL;
1309
ret = asprintf(&fullname, "%s/%s", hookdir,
1310
direntry->d_name);
1311
if(ret < 0){
1312
perror_plus("asprintf");
1313
return 0;
1314
}
1315
1316
ret = stat(fullname, &st);
1348
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1349
"abcdefghijklmnopqrstuvwxyz"
1350
"0123456789"
1351
"_.-");
1352
if((direntry->d_name)[sret] != '\0'){
1353
/* Contains non-allowed characters */
1354
if(debug){
1355
fprintf_plus(stderr, "Ignoring hook \"%s\" with bad name\n",
1356
direntry->d_name);
1357
}
1358
return 0;
1359
}
1360
1361
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1317
1362
if(ret == -1){
1318
1363
if(debug){
1319
perror_plus("Could not stat plugin");
1364
perror_plus("Could not stat hook");
1320
1365
}
1321
1366
return 0;
1322
1367
}
1323
1368
if(not (S_ISREG(st.st_mode))){
1324
1369
/* Not a regular file */
1370
if(debug){
1371
fprintf_plus(stderr, "Ignoring hook \"%s\" - not a file\n",
1372
direntry->d_name);
1373
}
1325
1374
return 0;
1326
1375
}
1327
1376
if(not (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))){
1328
1377
/* Not executable */
1378
if(debug){
1379
fprintf_plus(stderr, "Ignoring hook \"%s\" - not executable\n",
1380
direntry->d_name);
1381
}
1329
1382
return 0;
1330
1383
}
1384
if(debug){
1385
fprintf_plus(stderr, "Hook \"%s\" is acceptable\n",
1386
direntry->d_name);
1387
}
1331
1388
return 1;
1332
1389
}
1333
1390
1334
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval){
1391
__attribute__((nonnull, warn_unused_result))
1392
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
1393
mandos_context *mc){
1335
1394
int ret;
1336
1395
struct timespec now;
1337
1396
struct timespec waited_time;
1338
1397
intmax_t block_time;
1339
1398
1340
1399
while(true){
1341
if(mc.current_server == NULL){
1342
if (debug){
1343
fprintf(stderr, "Mandos plugin mandos-client: "
1344
"Wait until first server is found. No timeout!\n");
1400
if(mc->current_server == NULL){
1401
if(debug){
1402
fprintf_plus(stderr, "Wait until first server is found."
1403
" No timeout!\n");
1345
1404
}
1346
1405
ret = avahi_simple_poll_iterate(s, -1);
1347
1406
} else {
1348
if (debug){
1349
fprintf(stderr, "Mandos plugin mandos-client: "
1350
"Check current_server if we should run it,"
1351
" or wait\n");
1407
if(debug){
1408
fprintf_plus(stderr, "Check current_server if we should run"
1409
" it, or wait\n");
1352
1410
}
1353
1411
/* the current time */
1354
1412
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1359
1417
/* Calculating in ms how long time between now and server
1360
1418
who we visted longest time ago. Now - last seen. */
1361
1419
waited_time.tv_sec = (now.tv_sec
1362
- mc.current_server->last_seen.tv_sec);
1420
- mc->current_server->last_seen.tv_sec);
1363
1421
waited_time.tv_nsec = (now.tv_nsec
1364
- mc.current_server->last_seen.tv_nsec);
1422
- mc->current_server->last_seen.tv_nsec);
1365
1423
/* total time is 10s/10,000ms.
1366
1424
Converting to s from ms by dividing by 1,000,
1367
1425
and ns to ms by dividing by 1,000,000. */
1369
1427
- ((intmax_t)waited_time.tv_sec * 1000))
1370
1428
- ((intmax_t)waited_time.tv_nsec / 1000000));
1371
1429
1372
if (debug){
1373
fprintf(stderr, "Mandos plugin mandos-client: "
1374
"Blocking for %" PRIdMAX " ms\n", block_time);
1430
if(debug){
1431
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
1432
block_time);
1375
1433
}
1376
1434
1377
1435
if(block_time <= 0){
1378
ret = start_mandos_communication(mc.current_server->ip,
1379
mc.current_server->port,
1380
mc.current_server->if_index,
1381
mc.current_server->af);
1436
ret = start_mandos_communication(mc->current_server->ip,
1437
mc->current_server->port,
1438
mc->current_server->if_index,
1439
mc->current_server->af, mc);
1382
1440
if(ret == 0){
1383
avahi_simple_poll_quit(mc.simple_poll);
1441
avahi_simple_poll_quit(s);
1384
1442
return 0;
1385
1443
}
1386
1444
ret = clock_gettime(CLOCK_MONOTONIC,
1387
&mc.current_server->last_seen);
1445
&mc->current_server->last_seen);
1388
1446
if(ret == -1){
1389
1447
perror_plus("clock_gettime");
1390
1448
return -1;
1391
1449
}
1392
mc.current_server = mc.current_server->next;
1450
mc->current_server = mc->current_server->next;
1393
1451
block_time = 0; /* Call avahi to find new Mandos
1394
1452
servers, but don't block */
1395
1453
}
1397
1455
ret = avahi_simple_poll_iterate(s, (int)block_time);
1398
1456
}
1399
1457
if(ret != 0){
1400
if (ret > 0 or errno != EINTR){
1458
if(ret > 0 or errno != EINTR){
1401
1459
return (ret != 1) ? ret : 0;
1402
1460
}
1403
1461
}
1404
1462
}
1405
1463
}
1406
1464
1465
/* Set effective uid to 0, return errno */
1466
__attribute__((warn_unused_result))
1467
error_t raise_privileges(void){
1468
error_t old_errno = errno;
1469
error_t ret_errno = 0;
1470
if(seteuid(0) == -1){
1471
ret_errno = errno;
1472
}
1473
errno = old_errno;
1474
return ret_errno;
1475
}
1476
1477
/* Set effective and real user ID to 0. Return errno. */
1478
__attribute__((warn_unused_result))
1479
error_t raise_privileges_permanently(void){
1480
error_t old_errno = errno;
1481
error_t ret_errno = raise_privileges();
1482
if(ret_errno != 0){
1483
errno = old_errno;
1484
return ret_errno;
1485
}
1486
if(setuid(0) == -1){
1487
ret_errno = errno;
1488
}
1489
errno = old_errno;
1490
return ret_errno;
1491
}
1492
1493
/* Set effective user ID to unprivileged saved user ID */
1494
__attribute__((warn_unused_result))
1495
error_t lower_privileges(void){
1496
error_t old_errno = errno;
1497
error_t ret_errno = 0;
1498
if(seteuid(uid) == -1){
1499
ret_errno = errno;
1500
}
1501
errno = old_errno;
1502
return ret_errno;
1503
}
1504
1505
/* Lower privileges permanently */
1506
__attribute__((warn_unused_result))
1507
error_t lower_privileges_permanently(void){
1508
error_t old_errno = errno;
1509
error_t ret_errno = 0;
1510
if(setuid(uid) == -1){
1511
ret_errno = errno;
1512
}
1513
errno = old_errno;
1514
return ret_errno;
1515
}
1516
1517
__attribute__((nonnull))
1518
void run_network_hooks(const char *mode, const char *interface,
1519
const float delay){
1520
struct dirent **direntries = NULL;
1521
if(hookdir_fd == -1){
1522
hookdir_fd = open(hookdir, O_RDONLY);
1523
if(hookdir_fd == -1){
1524
if(errno == ENOENT){
1525
if(debug){
1526
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1527
" found\n", hookdir);
1528
}
1529
} else {
1530
perror_plus("open");
1531
}
1532
return;
1533
}
1534
}
1535
#ifdef __GLIBC__
1536
#if __GLIBC_PREREQ(2, 15)
1537
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1538
runnable_hook, alphasort);
1539
#else /* not __GLIBC_PREREQ(2, 15) */
1540
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1541
alphasort);
1542
#endif /* not __GLIBC_PREREQ(2, 15) */
1543
#else /* not __GLIBC__ */
1544
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1545
alphasort);
1546
#endif /* not __GLIBC__ */
1547
if(numhooks == -1){
1548
perror_plus("scandir");
1549
return;
1550
}
1551
struct dirent *direntry;
1552
int ret;
1553
int devnull = open("/dev/null", O_RDONLY);
1554
for(int i = 0; i < numhooks; i++){
1555
direntry = direntries[i];
1556
if(debug){
1557
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1558
direntry->d_name);
1559
}
1560
pid_t hook_pid = fork();
1561
if(hook_pid == 0){
1562
/* Child */
1563
/* Raise privileges */
1564
errno = raise_privileges_permanently();
1565
if(errno != 0){
1566
perror_plus("Failed to raise privileges");
1567
_exit(EX_NOPERM);
1568
}
1569
/* Set group */
1570
errno = 0;
1571
ret = setgid(0);
1572
if(ret == -1){
1573
perror_plus("setgid");
1574
_exit(EX_NOPERM);
1575
}
1576
/* Reset supplementary groups */
1577
errno = 0;
1578
ret = setgroups(0, NULL);
1579
if(ret == -1){
1580
perror_plus("setgroups");
1581
_exit(EX_NOPERM);
1582
}
1583
ret = dup2(devnull, STDIN_FILENO);
1584
if(ret == -1){
1585
perror_plus("dup2(devnull, STDIN_FILENO)");
1586
_exit(EX_OSERR);
1587
}
1588
ret = close(devnull);
1589
if(ret == -1){
1590
perror_plus("close");
1591
_exit(EX_OSERR);
1592
}
1593
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1594
if(ret == -1){
1595
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1596
_exit(EX_OSERR);
1597
}
1598
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1599
if(ret == -1){
1600
perror_plus("setenv");
1601
_exit(EX_OSERR);
1602
}
1603
ret = setenv("DEVICE", interface, 1);
1604
if(ret == -1){
1605
perror_plus("setenv");
1606
_exit(EX_OSERR);
1607
}
1608
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1609
if(ret == -1){
1610
perror_plus("setenv");
1611
_exit(EX_OSERR);
1612
}
1613
ret = setenv("MODE", mode, 1);
1614
if(ret == -1){
1615
perror_plus("setenv");
1616
_exit(EX_OSERR);
1617
}
1618
char *delaystring;
1619
ret = asprintf(&delaystring, "%f", (double)delay);
1620
if(ret == -1){
1621
perror_plus("asprintf");
1622
_exit(EX_OSERR);
1623
}
1624
ret = setenv("DELAY", delaystring, 1);
1625
if(ret == -1){
1626
free(delaystring);
1627
perror_plus("setenv");
1628
_exit(EX_OSERR);
1629
}
1630
free(delaystring);
1631
if(connect_to != NULL){
1632
ret = setenv("CONNECT", connect_to, 1);
1633
if(ret == -1){
1634
perror_plus("setenv");
1635
_exit(EX_OSERR);
1636
}
1637
}
1638
int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);
1639
if(hook_fd == -1){
1640
perror_plus("openat");
1641
_exit(EXIT_FAILURE);
1642
}
1643
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1644
perror_plus("close");
1645
_exit(EXIT_FAILURE);
1646
}
1647
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
1648
environ) == -1){
1649
perror_plus("fexecve");
1650
_exit(EXIT_FAILURE);
1651
}
1652
} else {
1653
int status;
1654
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1655
perror_plus("waitpid");
1656
free(direntry);
1657
continue;
1658
}
1659
if(WIFEXITED(status)){
1660
if(WEXITSTATUS(status) != 0){
1661
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1662
" with status %d\n", direntry->d_name,
1663
WEXITSTATUS(status));
1664
free(direntry);
1665
continue;
1666
}
1667
} else if(WIFSIGNALED(status)){
1668
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1669
" signal %d\n", direntry->d_name,
1670
WTERMSIG(status));
1671
free(direntry);
1672
continue;
1673
} else {
1674
fprintf_plus(stderr, "Warning: network hook \"%s\""
1675
" crashed\n", direntry->d_name);
1676
free(direntry);
1677
continue;
1678
}
1679
}
1680
if(debug){
1681
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1682
direntry->d_name);
1683
}
1684
free(direntry);
1685
}
1686
free(direntries);
1687
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1688
perror_plus("close");
1689
} else {
1690
hookdir_fd = -1;
1691
}
1692
close(devnull);
1693
}
1694
1695
__attribute__((nonnull, warn_unused_result))
1696
error_t bring_up_interface(const char *const interface,
1697
const float delay){
1698
error_t old_errno = errno;
1699
int ret;
1700
struct ifreq network;
1701
unsigned int if_index = if_nametoindex(interface);
1702
if(if_index == 0){
1703
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1704
errno = old_errno;
1705
return ENXIO;
1706
}
1707
1708
if(quit_now){
1709
errno = old_errno;
1710
return EINTR;
1711
}
1712
1713
if(not interface_is_up(interface)){
1714
error_t ret_errno = 0, ioctl_errno = 0;
1715
if(not get_flags(interface, &network)){
1716
ret_errno = errno;
1717
fprintf_plus(stderr, "Failed to get flags for interface "
1718
"\"%s\"\n", interface);
1719
errno = old_errno;
1720
return ret_errno;
1721
}
1722
network.ifr_flags |= IFF_UP; /* set flag */
1723
1724
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1725
if(sd == -1){
1726
ret_errno = errno;
1727
perror_plus("socket");
1728
errno = old_errno;
1729
return ret_errno;
1730
}
1731
1732
if(quit_now){
1733
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1734
if(ret == -1){
1735
perror_plus("close");
1736
}
1737
errno = old_errno;
1738
return EINTR;
1739
}
1740
1741
if(debug){
1742
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
1743
interface);
1744
}
1745
1746
/* Raise privileges */
1747
ret_errno = raise_privileges();
1748
if(ret_errno != 0){
1749
errno = ret_errno;
1750
perror_plus("Failed to raise privileges");
1751
}
1752
1753
#ifdef __linux__
1754
int ret_linux;
1755
bool restore_loglevel = false;
1756
if(ret_errno == 0){
1757
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1758
messages about the network interface to mess up the prompt */
1759
ret_linux = klogctl(8, NULL, 5);
1760
if(ret_linux == -1){
1761
perror_plus("klogctl");
1762
} else {
1763
restore_loglevel = true;
1764
}
1765
}
1766
#endif /* __linux__ */
1767
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1768
ioctl_errno = errno;
1769
#ifdef __linux__
1770
if(restore_loglevel){
1771
ret_linux = klogctl(7, NULL, 0);
1772
if(ret_linux == -1){
1773
perror_plus("klogctl");
1774
}
1775
}
1776
#endif /* __linux__ */
1777
1778
/* If raise_privileges() succeeded above */
1779
if(ret_errno == 0){
1780
/* Lower privileges */
1781
ret_errno = lower_privileges();
1782
if(ret_errno != 0){
1783
errno = ret_errno;
1784
perror_plus("Failed to lower privileges");
1785
}
1786
}
1787
1788
/* Close the socket */
1789
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1790
if(ret == -1){
1791
perror_plus("close");
1792
}
1793
1794
if(ret_setflags == -1){
1795
errno = ioctl_errno;
1796
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1797
errno = old_errno;
1798
return ioctl_errno;
1799
}
1800
} else if(debug){
1801
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
1802
interface);
1803
}
1804
1805
/* Sleep checking until interface is running.
1806
Check every 0.25s, up to total time of delay */
1807
for(int i=0; i < delay * 4; i++){
1808
if(interface_is_running(interface)){
1809
break;
1810
}
1811
struct timespec sleeptime = { .tv_nsec = 250000000 };
1812
ret = nanosleep(&sleeptime, NULL);
1813
if(ret == -1 and errno != EINTR){
1814
perror_plus("nanosleep");
1815
}
1816
}
1817
1818
errno = old_errno;
1819
return 0;
1820
}
1821
1822
__attribute__((nonnull, warn_unused_result))
1823
error_t take_down_interface(const char *const interface){
1824
error_t old_errno = errno;
1825
struct ifreq network;
1826
unsigned int if_index = if_nametoindex(interface);
1827
if(if_index == 0){
1828
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1829
errno = old_errno;
1830
return ENXIO;
1831
}
1832
if(interface_is_up(interface)){
1833
error_t ret_errno = 0, ioctl_errno = 0;
1834
if(not get_flags(interface, &network) and debug){
1835
ret_errno = errno;
1836
fprintf_plus(stderr, "Failed to get flags for interface "
1837
"\"%s\"\n", interface);
1838
errno = old_errno;
1839
return ret_errno;
1840
}
1841
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
1842
1843
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1844
if(sd == -1){
1845
ret_errno = errno;
1846
perror_plus("socket");
1847
errno = old_errno;
1848
return ret_errno;
1849
}
1850
1851
if(debug){
1852
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
1853
interface);
1854
}
1855
1856
/* Raise privileges */
1857
ret_errno = raise_privileges();
1858
if(ret_errno != 0){
1859
errno = ret_errno;
1860
perror_plus("Failed to raise privileges");
1861
}
1862
1863
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1864
ioctl_errno = errno;
1865
1866
/* If raise_privileges() succeeded above */
1867
if(ret_errno == 0){
1868
/* Lower privileges */
1869
ret_errno = lower_privileges();
1870
if(ret_errno != 0){
1871
errno = ret_errno;
1872
perror_plus("Failed to lower privileges");
1873
}
1874
}
1875
1876
/* Close the socket */
1877
int ret = (int)TEMP_FAILURE_RETRY(close(sd));
1878
if(ret == -1){
1879
perror_plus("close");
1880
}
1881
1882
if(ret_setflags == -1){
1883
errno = ioctl_errno;
1884
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
1885
errno = old_errno;
1886
return ioctl_errno;
1887
}
1888
} else if(debug){
1889
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
1890
interface);
1891
}
1892
1893
errno = old_errno;
1894
return 0;
1895
}
1896
1407
1897
int main(int argc, char *argv[]){
1898
mandos_context mc = { .server = NULL, .dh_bits = 1024,
1899
.priority = "SECURE256:!CTYPE-X.509:"
1900
"+CTYPE-OPENPGP", .current_server = NULL,
1901
.interfaces = NULL, .interfaces_size = 0 };
1408
1902
AvahiSServiceBrowser *sb = NULL;
1409
int error;
1903
error_t ret_errno;
1410
1904
int ret;
1411
1905
intmax_t tmpmax;
1412
1906
char *tmp;
1413
1907
int exitcode = EXIT_SUCCESS;
1414
const char *interface = "";
1415
struct ifreq network;
1416
int sd = -1;
1417
bool take_down_interface = false;
1418
uid_t uid;
1419
gid_t gid;
1420
char tempdir[] = "/tmp/mandosXXXXXX";
1421
bool tempdir_created = false;
1908
char *interfaces_to_take_down = NULL;
1909
size_t interfaces_to_take_down_size = 0;
1910
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
1911
char old_tempdir[] = "/tmp/mandosXXXXXX";
1912
char *tempdir = NULL;
1422
1913
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1423
1914
const char *seckey = PATHDIR "/" SECKEY;
1424
1915
const char *pubkey = PATHDIR "/" PUBKEY;
1916
char *interfaces_hooks = NULL;
1425
1917
1426
1918
bool gnutls_initialized = false;
1427
1919
bool gpgme_initialized = false;
1489
1981
.group = 2 },
1490
1982
{ .name = "retry", .key = 132,
1491
1983
.arg = "SECONDS",
1492
.doc = "Retry interval used when denied by the mandos server",
1984
.doc = "Retry interval used when denied by the Mandos server",
1493
1985
.group = 2 },
1494
1986
{ .name = "network-hook-dir", .key = 133,
1495
1987
.arg = "DIR",
1518
2010
connect_to = arg;
1519
2011
break;
1520
2012
case 'i': /* --interface */
1521
interface = arg;
2013
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
2014
arg, (int)',');
2015
if(ret_errno != 0){
2016
argp_error(state, "%s", strerror(ret_errno));
2017
}
1522
2018
break;
1523
2019
case 's': /* --seckey */
1524
2020
seckey = arg;
1567
2063
argp_state_help(state, state->out_stream,
1568
2064
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
1569
2065
case 'V': /* --version */
1570
fprintf(state->out_stream, "Mandos plugin mandos-client: ");
1571
fprintf(state->out_stream, "%s\n", argp_program_version);
2066
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
1572
2067
exit(argp_err_exit_status);
1573
2068
break;
1574
2069
default:
1601
2096
{
1602
2097
/* Work around Debian bug #633582:
1603
2098
<http://bugs.debian.org/633582> */
1604
struct stat st;
1605
1606
/* Re-raise priviliges */
1607
errno = 0;
1608
ret = seteuid(0);
1609
if(ret == -1){
1610
perror_plus("seteuid");
1611
}
1612
1613
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
1614
int seckey_fd = open(seckey, O_RDONLY);
1615
if(seckey_fd == -1){
1616
perror_plus("open");
1617
} else {
1618
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
1619
if(ret == -1){
1620
perror_plus("fstat");
1621
} else {
1622
if(S_ISREG(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
1623
ret = fchown(seckey_fd, uid, gid);
1624
if(ret == -1){
1625
perror_plus("fchown");
1626
}
1627
}
1628
}
1629
TEMP_FAILURE_RETRY(close(seckey_fd));
1630
}
1631
}
1632
1633
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
1634
int pubkey_fd = open(pubkey, O_RDONLY);
1635
if(pubkey_fd == -1){
1636
perror_plus("open");
1637
} else {
1638
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
1639
if(ret == -1){
1640
perror_plus("fstat");
1641
} else {
1642
if(S_ISREG(st.st_mode) and st.st_uid == 0 and st.st_gid == 0){
1643
ret = fchown(pubkey_fd, uid, gid);
1644
if(ret == -1){
1645
perror_plus("fchown");
1646
}
1647
}
1648
}
1649
TEMP_FAILURE_RETRY(close(pubkey_fd));
1650
}
1651
}
1652
1653
/* Lower privileges */
1654
errno = 0;
1655
ret = seteuid(uid);
1656
if(ret == -1){
1657
perror_plus("seteuid");
1658
}
1659
}
1660
1661
/* Find network hooks and run them */
1662
{
1663
struct dirent **direntries;
1664
struct dirent *direntry;
1665
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1666
alphasort);
1667
if(numhooks == -1){
1668
perror_plus("scandir");
2099
2100
/* Re-raise privileges */
2101
ret_errno = raise_privileges();
2102
if(ret_errno != 0){
2103
errno = ret_errno;
2104
perror_plus("Failed to raise privileges");
1669
2105
} else {
1670
int devnull = open("/dev/null", O_RDONLY);
1671
for(int i = 0; i < numhooks; i++){
1672
direntry = direntries[0];
1673
char *fullname = NULL;
1674
ret = asprintf(&fullname, "%s/%s", hookdir, direntry->d_name);
1675
if(ret < 0){
1676
perror_plus("asprintf");
1677
continue;
1678
}
1679
pid_t hook_pid = fork();
1680
if(hook_pid == 0){
1681
/* Child */
1682
dup2(devnull, STDIN_FILENO);
1683
close(devnull);
1684
dup2(STDERR_FILENO, STDOUT_FILENO);
1685
ret = setenv("DEVICE", interface, 1);
1686
if(ret == -1){
1687
perror_plus("setenv");
1688
exit(1);
1689
}
1690
ret = setenv("VERBOSE", debug ? "1" : "0", 1);
1691
if(ret == -1){
1692
perror_plus("setenv");
1693
exit(1);
1694
}
1695
ret = setenv("MODE", "start", 1);
1696
if(ret == -1){
1697
perror_plus("setenv");
1698
exit(1);
1699
}
1700
char *delaystring;
1701
ret = asprintf(&delaystring, "%f", delay);
1702
if(ret == -1){
1703
perror_plus("asprintf");
1704
exit(1);
1705
}
1706
ret = setenv("DELAY", delaystring, 1);
1707
if(ret == -1){
1708
free(delaystring);
1709
perror_plus("setenv");
1710
exit(1);
1711
}
1712
free(delaystring);
1713
ret = execl(fullname, direntry->d_name, "start", NULL);
1714
perror_plus("execl");
1715
} else {
1716
int status;
1717
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1718
perror_plus("waitpid");
1719
free(fullname);
1720
continue;
1721
}
1722
if(WIFEXITED(status)){
1723
if(WEXITSTATUS(status) != 0){
1724
fprintf(stderr, "Mandos plugin mandos-client: "
1725
"Warning: network hook \"%s\" exited"
1726
" with status %d\n", direntry->d_name,
1727
WEXITSTATUS(status));
1728
free(fullname);
1729
continue;
1730
}
1731
} else if(WIFSIGNALED(status)){
1732
fprintf(stderr, "Mandos plugin mandos-client: "
1733
"Warning: network hook \"%s\" died by"
1734
" signal %d\n", direntry->d_name,
1735
WTERMSIG(status));
1736
free(fullname);
1737
continue;
1738
} else {
1739
fprintf(stderr, "Mandos plugin mandos-client: "
1740
"Warning: network hook \"%s\" crashed\n",
1741
direntry->d_name);
1742
free(fullname);
1743
continue;
1744
}
1745
}
1746
free(fullname);
1747
if(quit_now){
1748
goto end;
1749
}
1750
}
1751
close(devnull);
1752
}
2106
struct stat st;
2107
2108
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
2109
int seckey_fd = open(seckey, O_RDONLY);
2110
if(seckey_fd == -1){
2111
perror_plus("open");
2112
} else {
2113
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
2114
if(ret == -1){
2115
perror_plus("fstat");
2116
} else {
2117
if(S_ISREG(st.st_mode)
2118
and st.st_uid == 0 and st.st_gid == 0){
2119
ret = fchown(seckey_fd, uid, gid);
2120
if(ret == -1){
2121
perror_plus("fchown");
2122
}
2123
}
2124
}
2125
TEMP_FAILURE_RETRY(close(seckey_fd));
2126
}
2127
}
2128
2129
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2130
int pubkey_fd = open(pubkey, O_RDONLY);
2131
if(pubkey_fd == -1){
2132
perror_plus("open");
2133
} else {
2134
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
2135
if(ret == -1){
2136
perror_plus("fstat");
2137
} else {
2138
if(S_ISREG(st.st_mode)
2139
and st.st_uid == 0 and st.st_gid == 0){
2140
ret = fchown(pubkey_fd, uid, gid);
2141
if(ret == -1){
2142
perror_plus("fchown");
2143
}
2144
}
2145
}
2146
TEMP_FAILURE_RETRY(close(pubkey_fd));
2147
}
2148
}
2149
2150
/* Lower privileges */
2151
ret_errno = lower_privileges();
2152
if(ret_errno != 0){
2153
errno = ret_errno;
2154
perror_plus("Failed to lower privileges");
2155
}
2156
}
2157
}
2158
2159
/* Remove invalid interface names (except "none") */
2160
{
2161
char *interface = NULL;
2162
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2163
interface))){
2164
if(strcmp(interface, "none") != 0
2165
and if_nametoindex(interface) == 0){
2166
if(interface[0] != '\0'){
2167
fprintf_plus(stderr, "Not using nonexisting interface"
2168
" \"%s\"\n", interface);
2169
}
2170
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2171
interface = NULL;
2172
}
2173
}
2174
}
2175
2176
/* Run network hooks */
2177
{
2178
if(mc.interfaces != NULL){
2179
interfaces_hooks = malloc(mc.interfaces_size);
2180
if(interfaces_hooks == NULL){
2181
perror_plus("malloc");
2182
goto end;
2183
}
2184
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2185
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2186
}
2187
run_network_hooks("start", interfaces_hooks != NULL ?
2188
interfaces_hooks : "", delay);
1753
2189
}
1754
2190
1755
2191
if(not debug){
1756
2192
avahi_set_log_function(empty_log);
1757
2193
}
1758
2194
1759
if(interface[0] == '\0'){
1760
struct dirent **direntries;
1761
/* First look for interfaces that are up */
1762
ret = scandir(sys_class_net, &direntries, up_interface,
1763
alphasort);
1764
if(ret == 0){
1765
/* No up interfaces, look for any good interfaces */
1766
free(direntries);
1767
ret = scandir(sys_class_net, &direntries, good_interface,
1768
alphasort);
1769
}
1770
if(ret >= 1){
1771
/* Pick the first interface returned */
1772
interface = strdup(direntries[0]->d_name);
1773
if(debug){
1774
fprintf(stderr, "Mandos plugin mandos-client: "
1775
"Using interface \"%s\"\n", interface);
1776
}
1777
if(interface == NULL){
1778
perror_plus("malloc");
1779
free(direntries);
1780
exitcode = EXIT_FAILURE;
1781
goto end;
1782
}
1783
free(direntries);
1784
} else {
1785
free(direntries);
1786
fprintf(stderr, "Mandos plugin mandos-client: "
1787
"Could not find a network interface\n");
1788
exitcode = EXIT_FAILURE;
1789
goto end;
1790
}
1791
}
1792
1793
2195
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1794
2196
from the signal handler */
1795
2197
/* Initialize the pseudo-RNG for Avahi */
1796
2198
srand((unsigned int) time(NULL));
1797
mc.simple_poll = avahi_simple_poll_new();
1798
if(mc.simple_poll == NULL){
1799
fprintf(stderr, "Mandos plugin mandos-client: "
1800
"Avahi: Failed to create simple poll object.\n");
2199
simple_poll = avahi_simple_poll_new();
2200
if(simple_poll == NULL){
2201
fprintf_plus(stderr,
2202
"Avahi: Failed to create simple poll object.\n");
1801
2203
exitcode = EX_UNAVAILABLE;
1802
2204
goto end;
1803
2205
}
1865
2267
}
1866
2268
}
1867
2269
1868
/* If the interface is down, bring it up */
1869
if(strcmp(interface, "none") != 0){
1870
if_index = (AvahiIfIndex) if_nametoindex(interface);
1871
if(if_index == 0){
1872
fprintf(stderr, "Mandos plugin mandos-client: "
1873
"No such interface: \"%s\"\n", interface);
1874
exitcode = EX_UNAVAILABLE;
1875
goto end;
1876
}
1877
1878
if(quit_now){
1879
goto end;
1880
}
1881
1882
/* Re-raise priviliges */
1883
errno = 0;
1884
ret = seteuid(0);
1885
if(ret == -1){
1886
perror_plus("seteuid");
1887
}
1888
1889
#ifdef __linux__
1890
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1891
messages about the network interface to mess up the prompt */
1892
ret = klogctl(8, NULL, 5);
1893
bool restore_loglevel = true;
1894
if(ret == -1){
1895
restore_loglevel = false;
1896
perror_plus("klogctl");
1897
}
1898
#endif /* __linux__ */
1899
1900
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1901
if(sd < 0){
1902
perror_plus("socket");
1903
exitcode = EX_OSERR;
1904
#ifdef __linux__
1905
if(restore_loglevel){
1906
ret = klogctl(7, NULL, 0);
1907
if(ret == -1){
1908
perror_plus("klogctl");
1909
}
1910
}
1911
#endif /* __linux__ */
1912
/* Lower privileges */
1913
errno = 0;
1914
ret = seteuid(uid);
1915
if(ret == -1){
1916
perror_plus("seteuid");
1917
}
1918
goto end;
1919
}
1920
strcpy(network.ifr_name, interface);
1921
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1922
if(ret == -1){
1923
perror_plus("ioctl SIOCGIFFLAGS");
1924
#ifdef __linux__
1925
if(restore_loglevel){
1926
ret = klogctl(7, NULL, 0);
1927
if(ret == -1){
1928
perror_plus("klogctl");
1929
}
1930
}
1931
#endif /* __linux__ */
1932
exitcode = EX_OSERR;
1933
/* Lower privileges */
1934
errno = 0;
1935
ret = seteuid(uid);
1936
if(ret == -1){
1937
perror_plus("seteuid");
1938
}
1939
goto end;
1940
}
1941
if((network.ifr_flags & IFF_UP) == 0){
1942
network.ifr_flags |= IFF_UP;
1943
take_down_interface = true;
1944
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1945
if(ret == -1){
1946
take_down_interface = false;
1947
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1948
exitcode = EX_OSERR;
1949
#ifdef __linux__
1950
if(restore_loglevel){
1951
ret = klogctl(7, NULL, 0);
1952
if(ret == -1){
1953
perror_plus("klogctl");
2270
/* If no interfaces were specified, make a list */
2271
if(mc.interfaces == NULL){
2272
struct dirent **direntries = NULL;
2273
/* Look for any good interfaces */
2274
ret = scandir(sys_class_net, &direntries, good_interface,
2275
alphasort);
2276
if(ret >= 1){
2277
/* Add all found interfaces to interfaces list */
2278
for(int i = 0; i < ret; ++i){
2279
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2280
direntries[i]->d_name);
2281
if(ret_errno != 0){
2282
errno = ret_errno;
2283
perror_plus("argz_add");
2284
free(direntries[i]);
2285
continue;
2286
}
2287
if(debug){
2288
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2289
direntries[i]->d_name);
2290
}
2291
free(direntries[i]);
2292
}
2293
free(direntries);
2294
} else {
2295
if(ret == 0){
2296
free(direntries);
2297
}
2298
fprintf_plus(stderr, "Could not find a network interface\n");
2299
exitcode = EXIT_FAILURE;
2300
goto end;
2301
}
2302
}
2303
2304
/* Bring up interfaces which are down, and remove any "none"s */
2305
{
2306
char *interface = NULL;
2307
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2308
interface))){
2309
/* If interface name is "none", stop bringing up interfaces.
2310
Also remove all instances of "none" from the list */
2311
if(strcmp(interface, "none") == 0){
2312
argz_delete(&mc.interfaces, &mc.interfaces_size,
2313
interface);
2314
interface = NULL;
2315
while((interface = argz_next(mc.interfaces,
2316
mc.interfaces_size, interface))){
2317
if(strcmp(interface, "none") == 0){
2318
argz_delete(&mc.interfaces, &mc.interfaces_size,
2319
interface);
2320
interface = NULL;
1954
2321
}
1955
2322
}
1956
#endif /* __linux__ */
1957
/* Lower privileges */
1958
errno = 0;
1959
ret = seteuid(uid);
1960
if(ret == -1){
1961
perror_plus("seteuid");
1962
}
1963
goto end;
1964
}
1965
}
1966
/* Sleep checking until interface is running.
1967
Check every 0.25s, up to total time of delay */
1968
for(int i=0; i < delay * 4; i++){
1969
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1970
if(ret == -1){
1971
perror_plus("ioctl SIOCGIFFLAGS");
1972
} else if(network.ifr_flags & IFF_RUNNING){
1973
2323
break;
1974
2324
}
1975
struct timespec sleeptime = { .tv_nsec = 250000000 };
1976
ret = nanosleep(&sleeptime, NULL);
1977
if(ret == -1 and errno != EINTR){
1978
perror_plus("nanosleep");
1979
}
1980
}
1981
if(not take_down_interface){
1982
/* We won't need the socket anymore */
1983
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1984
if(ret == -1){
1985
perror_plus("close");
1986
}
1987
}
1988
#ifdef __linux__
1989
if(restore_loglevel){
1990
/* Restores kernel loglevel to default */
1991
ret = klogctl(7, NULL, 0);
1992
if(ret == -1){
1993
perror_plus("klogctl");
1994
}
1995
}
1996
#endif /* __linux__ */
1997
/* Lower privileges */
1998
errno = 0;
1999
if(take_down_interface){
2000
/* Lower privileges */
2001
ret = seteuid(uid);
2002
if(ret == -1){
2003
perror_plus("seteuid");
2004
}
2005
} else {
2006
/* Lower privileges permanently */
2007
ret = setuid(uid);
2008
if(ret == -1){
2009
perror_plus("setuid");
2010
}
2011
}
2325
bool interface_was_up = interface_is_up(interface);
2326
errno = bring_up_interface(interface, delay);
2327
if(not interface_was_up){
2328
if(errno != 0){
2329
perror_plus("Failed to bring up interface");
2330
} else {
2331
errno = argz_add(&interfaces_to_take_down,
2332
&interfaces_to_take_down_size,
2333
interface);
2334
if(errno != 0){
2335
perror_plus("argz_add");
2336
}
2337
}
2338
}
2339
}
2340
if(debug and (interfaces_to_take_down == NULL)){
2341
fprintf_plus(stderr, "No interfaces were brought up\n");
2342
}
2343
}
2344
2345
/* If we only got one interface, explicitly use only that one */
2346
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2347
if(debug){
2348
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2349
mc.interfaces);
2350
}
2351
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2012
2352
}
2013
2353
2014
2354
if(quit_now){
2015
2355
goto end;
2016
2356
}
2017
2357
2018
ret = init_gnutls_global(pubkey, seckey);
2358
ret = init_gnutls_global(pubkey, seckey, &mc);
2019
2359
if(ret == -1){
2020
fprintf(stderr, "Mandos plugin mandos-client: "
2021
"init_gnutls_global failed\n");
2360
fprintf_plus(stderr, "init_gnutls_global failed\n");
2022
2361
exitcode = EX_UNAVAILABLE;
2023
2362
goto end;
2024
2363
} else {
2029
2368
goto end;
2030
2369
}
2031
2370
2032
if(mkdtemp(tempdir) == NULL){
2371
/* Try /run/tmp before /tmp */
2372
tempdir = mkdtemp(run_tempdir);
2373
if(tempdir == NULL and errno == ENOENT){
2374
if(debug){
2375
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2376
run_tempdir, old_tempdir);
2377
}
2378
tempdir = mkdtemp(old_tempdir);
2379
}
2380
if(tempdir == NULL){
2033
2381
perror_plus("mkdtemp");
2034
2382
goto end;
2035
2383
}
2036
tempdir_created = true;
2037
2384
2038
2385
if(quit_now){
2039
2386
goto end;
2040
2387
}
2041
2388
2042
if(not init_gpgme(pubkey, seckey, tempdir)){
2043
fprintf(stderr, "Mandos plugin mandos-client: "
2044
"init_gpgme failed\n");
2389
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
2390
fprintf_plus(stderr, "init_gpgme failed\n");
2045
2391
exitcode = EX_UNAVAILABLE;
2046
2392
goto end;
2047
2393
} else {
2056
2402
/* Connect directly, do not use Zeroconf */
2057
2403
/* (Mainly meant for debugging) */
2058
2404
char *address = strrchr(connect_to, ':');
2405
2059
2406
if(address == NULL){
2060
fprintf(stderr, "Mandos plugin mandos-client: "
2061
"No colon in address\n");
2407
fprintf_plus(stderr, "No colon in address\n");
2062
2408
exitcode = EX_USAGE;
2063
2409
goto end;
2064
2410
}
2067
2413
goto end;
2068
2414
}
2069
2415
2070
uint16_t port;
2416
in_port_t port;
2071
2417
errno = 0;
2072
2418
tmpmax = strtoimax(address+1, &tmp, 10);
2073
2419
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2074
or tmpmax != (uint16_t)tmpmax){
2075
fprintf(stderr, "Mandos plugin mandos-client: "
2076
"Bad port number\n");
2420
or tmpmax != (in_port_t)tmpmax){
2421
fprintf_plus(stderr, "Bad port number\n");
2077
2422
exitcode = EX_USAGE;
2078
2423
goto end;
2079
2424
}
2080
2425
2081
2426
if(quit_now){
2082
2427
goto end;
2083
2428
}
2084
2429
2085
port = (uint16_t)tmpmax;
2430
port = (in_port_t)tmpmax;
2086
2431
*address = '\0';
2087
2432
/* Colon in address indicates IPv6 */
2088
2433
int af;
2104
2449
}
2105
2450
2106
2451
while(not quit_now){
2107
ret = start_mandos_communication(address, port, if_index, af);
2452
ret = start_mandos_communication(address, port, if_index, af,
2453
&mc);
2108
2454
if(quit_now or ret == 0){
2109
2455
break;
2110
2456
}
2111
2457
if(debug){
2112
fprintf(stderr, "Mandos plugin mandos-client: "
2113
"Retrying in %d seconds\n", (int)retry_interval);
2458
fprintf_plus(stderr, "Retrying in %d seconds\n",
2459
(int)retry_interval);
2114
2460
}
2115
sleep((int)retry_interval);
2461
sleep((unsigned int)retry_interval);
2116
2462
}
2117
2463
2118
if (not quit_now){
2464
if(not quit_now){
2119
2465
exitcode = EXIT_SUCCESS;
2120
2466
}
2121
2467
2136
2482
config.publish_domain = 0;
2137
2483
2138
2484
/* Allocate a new server */
2139
mc.server = avahi_server_new(avahi_simple_poll_get
2140
(mc.simple_poll), &config, NULL,
2141
NULL, &error);
2485
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2486
&config, NULL, NULL, &ret_errno);
2142
2487
2143
2488
/* Free the Avahi configuration data */
2144
2489
avahi_server_config_free(&config);
2146
2491
2147
2492
/* Check if creating the Avahi server object succeeded */
2148
2493
if(mc.server == NULL){
2149
fprintf(stderr, "Mandos plugin mandos-client: "
2150
"Failed to create Avahi server: %s\n",
2151
avahi_strerror(error));
2494
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
2495
avahi_strerror(ret_errno));
2152
2496
exitcode = EX_UNAVAILABLE;
2153
2497
goto end;
2154
2498
}
2160
2504
/* Create the Avahi service browser */
2161
2505
sb = avahi_s_service_browser_new(mc.server, if_index,
2162
2506
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2163
NULL, 0, browse_callback, NULL);
2507
NULL, 0, browse_callback,
2508
(void *)&mc);
2164
2509
if(sb == NULL){
2165
fprintf(stderr, "Mandos plugin mandos-client: "
2166
"Failed to create service browser: %s\n",
2167
avahi_strerror(avahi_server_errno(mc.server)));
2510
fprintf_plus(stderr, "Failed to create service browser: %s\n",
2511
avahi_strerror(avahi_server_errno(mc.server)));
2168
2512
exitcode = EX_UNAVAILABLE;
2169
2513
goto end;
2170
2514
}
2176
2520
/* Run the main loop */
2177
2521
2178
2522
if(debug){
2179
fprintf(stderr, "Mandos plugin mandos-client: "
2180
"Starting Avahi loop search\n");
2523
fprintf_plus(stderr, "Starting Avahi loop search\n");
2181
2524
}
2182
2183
ret = avahi_loop_with_timeout(mc.simple_poll,
2184
(int)(retry_interval * 1000));
2525
2526
ret = avahi_loop_with_timeout(simple_poll,
2527
(int)(retry_interval * 1000), &mc);
2185
2528
if(debug){
2186
fprintf(stderr, "Mandos plugin mandos-client: "
2187
"avahi_loop_with_timeout exited %s\n",
2188
(ret == 0) ? "successfully" : "with error");
2529
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
2530
(ret == 0) ? "successfully" : "with error");
2189
2531
}
2190
2532
2191
2533
end:
2192
2534
2193
2535
if(debug){
2194
fprintf(stderr, "Mandos plugin mandos-client: "
2195
"%s exiting\n", argv[0]);
2536
fprintf_plus(stderr, "%s exiting\n", argv[0]);
2196
2537
}
2197
2538
2198
2539
/* Cleanup things */
2540
free(mc.interfaces);
2541
2199
2542
if(sb != NULL)
2200
2543
avahi_s_service_browser_free(sb);
2201
2544
2202
2545
if(mc.server != NULL)
2203
2546
avahi_server_free(mc.server);
2204
2547
2205
if(mc.simple_poll != NULL)
2206
avahi_simple_poll_free(mc.simple_poll);
2548
if(simple_poll != NULL)
2549
avahi_simple_poll_free(simple_poll);
2207
2550
2208
2551
if(gnutls_initialized){
2209
2552
gnutls_certificate_free_credentials(mc.cred);
2214
2557
if(gpgme_initialized){
2215
2558
gpgme_release(mc.ctx);
2216
2559
}
2217
2560
2218
2561
/* Cleans up the circular linked list of Mandos servers the client
2219
2562
has seen */
2220
2563
if(mc.current_server != NULL){
2221
2564
mc.current_server->prev->next = NULL;
2222
2565
while(mc.current_server != NULL){
2223
2566
server *next = mc.current_server->next;
2567
#ifdef __GNUC__
2568
#pragma GCC diagnostic push
2569
#pragma GCC diagnostic ignored "-Wcast-qual"
2570
#endif
2571
free((char *)(mc.current_server->ip));
2572
#ifdef __GNUC__
2573
#pragma GCC diagnostic pop
2574
#endif
2224
2575
free(mc.current_server);
2225
2576
mc.current_server = next;
2226
2577
}
2227
2578
}
2228
2579
2229
/* XXX run network hooks "stop" here */
2230
2231
/* Take down the network interface */
2232
if(take_down_interface){
2233
/* Re-raise priviliges */
2234
errno = 0;
2235
ret = seteuid(0);
2236
if(ret == -1){
2237
perror_plus("seteuid");
2580
/* Re-raise privileges */
2581
{
2582
ret_errno = raise_privileges();
2583
if(ret_errno != 0){
2584
errno = ret_errno;
2585
perror_plus("Failed to raise privileges");
2586
} else {
2587
2588
/* Run network hooks */
2589
run_network_hooks("stop", interfaces_hooks != NULL ?
2590
interfaces_hooks : "", delay);
2591
2592
/* Take down the network interfaces which were brought up */
2593
{
2594
char *interface = NULL;
2595
while((interface=argz_next(interfaces_to_take_down,
2596
interfaces_to_take_down_size,
2597
interface))){
2598
ret_errno = take_down_interface(interface);
2599
if(ret_errno != 0){
2600
errno = ret_errno;
2601
perror_plus("Failed to take down interface");
2602
}
2603
}
2604
if(debug and (interfaces_to_take_down == NULL)){
2605
fprintf_plus(stderr, "No interfaces needed to be taken"
2606
" down\n");
2607
}
2608
}
2238
2609
}
2239
if(geteuid() == 0){
2240
ret = ioctl(sd, SIOCGIFFLAGS, &network);
2241
if(ret == -1){
2242
perror_plus("ioctl SIOCGIFFLAGS");
2243
} else if(network.ifr_flags & IFF_UP){
2244
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2245
ret = ioctl(sd, SIOCSIFFLAGS, &network);
2246
if(ret == -1){
2247
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2248
}
2249
}
2250
ret = (int)TEMP_FAILURE_RETRY(close(sd));
2251
if(ret == -1){
2252
perror_plus("close");
2253
}
2254
/* Lower privileges permanently */
2255
errno = 0;
2256
ret = setuid(uid);
2257
if(ret == -1){
2258
perror_plus("setuid");
2259
}
2610
2611
ret_errno = lower_privileges_permanently();
2612
if(ret_errno != 0){
2613
errno = ret_errno;
2614
perror_plus("Failed to lower privileges permanently");
2260
2615
}
2261
2616
}
2262
2617
2618
free(interfaces_to_take_down);
2619
free(interfaces_hooks);
2620
2263
2621
/* Removes the GPGME temp directory and all files inside */
2264
if(tempdir_created){
2622
if(tempdir != NULL){
2265
2623
struct dirent **direntries = NULL;
2266
struct dirent *direntry = NULL;
2267
int numentries = scandir(tempdir, &direntries, notdotentries,
2268
alphasort);
2269
if (numentries > 0){
2270
for(int i = 0; i < numentries; i++){
2271
direntry = direntries[i];
2272
char *fullname = NULL;
2273
ret = asprintf(&fullname, "%s/%s", tempdir,
2274
direntry->d_name);
2275
if(ret < 0){
2276
perror_plus("asprintf");
2277
continue;
2278
}
2279
ret = remove(fullname);
2280
if(ret == -1){
2281
fprintf(stderr, "Mandos plugin mandos-client: "
2282
"remove(\"%s\"): %s\n", fullname, strerror(errno));
2283
}
2284
free(fullname);
2624
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |
2625
O_NOFOLLOW));
2626
if(tempdir_fd == -1){
2627
perror_plus("open");
2628
} else {
2629
#ifdef __GLIBC__
2630
#if __GLIBC_PREREQ(2, 15)
2631
int numentries = scandirat(tempdir_fd, ".", &direntries,
2632
notdotentries, alphasort);
2633
#else /* not __GLIBC_PREREQ(2, 15) */
2634
int numentries = scandir(tempdir, &direntries, notdotentries,
2635
alphasort);
2636
#endif /* not __GLIBC_PREREQ(2, 15) */
2637
#else /* not __GLIBC__ */
2638
int numentries = scandir(tempdir, &direntries, notdotentries,
2639
alphasort);
2640
#endif /* not __GLIBC__ */
2641
if(numentries >= 0){
2642
for(int i = 0; i < numentries; i++){
2643
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2644
if(ret == -1){
2645
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2646
" \"%s\", 0): %s\n", tempdir,
2647
direntries[i]->d_name, strerror(errno));
2648
}
2649
free(direntries[i]);
2650
}
2651
2652
/* need to clean even if 0 because man page doesn't specify */
2653
free(direntries);
2654
if(numentries == -1){
2655
perror_plus("scandir");
2656
}
2657
ret = rmdir(tempdir);
2658
if(ret == -1 and errno != ENOENT){
2659
perror_plus("rmdir");
2660
}
2285
2661
}
2286
}
2287
2288
/* need to clean even if 0 because man page doesn't specify */
2289
free(direntries);
2290
if (numentries == -1){
2291
perror_plus("scandir");
2292
}
2293
ret = rmdir(tempdir);
2294
if(ret == -1 and errno != ENOENT){
2295
perror_plus("rmdir");
2662
TEMP_FAILURE_RETRY(close(tempdir_fd));
2296
2663
}
2297
2664
}
2298
2665
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0