9
9
* "browse_callback", and parts of "main".
11
11
* Everything else is
12
* Copyright © 2008-2018 Teddy Hogeborn
13
* Copyright © 2008-2018 Björn Påhlsson
15
* This file is part of Mandos.
17
* Mandos is free software: you can redistribute it and/or modify it
18
* under the terms of the GNU General Public License as published by
19
* the Free Software Foundation, either version 3 of the License, or
20
* (at your option) any later version.
22
* Mandos is distributed in the hope that it will be useful, but
12
* Copyright © 2008-2016 Teddy Hogeborn
13
* Copyright © 2008-2016 Björn Påhlsson
15
* This program is free software: you can redistribute it and/or
16
* modify it under the terms of the GNU General Public License as
17
* published by the Free Software Foundation, either version 3 of the
18
* License, or (at your option) any later version.
20
* This program is distributed in the hope that it will be useful, but
23
21
* WITHOUT ANY WARRANTY; without even the implied warranty of
24
22
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
25
23
* General Public License for more details.
27
25
* You should have received a copy of the GNU General Public License
28
* along with Mandos. If not, see <http://www.gnu.org/licenses/>.
26
* along with this program. If not, see
27
* <http://www.gnu.org/licenses/>.
30
29
* Contact the authors at <mandos@recompile.se>.
48
47
strtof(), abort() */
49
48
#include <stdbool.h> /* bool, false, true */
50
49
#include <string.h> /* strcmp(), strlen(), strerror(),
51
asprintf(), strncpy(), strsignal()
50
asprintf(), strncpy() */
53
51
#include <sys/ioctl.h> /* ioctl */
54
52
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
55
53
sockaddr_in6, PF_INET6,
420
418
if(result == NULL){
421
419
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
423
if(result->unsupported_algorithm != NULL) {
424
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
425
result->unsupported_algorithm);
421
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
422
result->unsupported_algorithm);
427
423
fprintf_plus(stderr, "Wrong key usage: %u\n",
428
424
result->wrong_key_usage);
429
425
if(result->file_name != NULL){
827
818
/* Set effective uid to 0, return errno */
828
819
__attribute__((warn_unused_result))
829
int raise_privileges(void){
830
int old_errno = errno;
820
error_t raise_privileges(void){
821
error_t old_errno = errno;
822
error_t ret_errno = 0;
832
823
if(seteuid(0) == -1){
835
826
errno = old_errno;
839
830
/* Set effective and real user ID to 0. Return errno. */
840
831
__attribute__((warn_unused_result))
841
int raise_privileges_permanently(void){
842
int old_errno = errno;
843
int ret = raise_privileges();
832
error_t raise_privileges_permanently(void){
833
error_t old_errno = errno;
834
error_t ret_errno = raise_privileges();
845
836
errno = old_errno;
848
839
if(setuid(0) == -1){
851
842
errno = old_errno;
855
846
/* Set effective user ID to unprivileged saved user ID */
856
847
__attribute__((warn_unused_result))
857
int lower_privileges(void){
858
int old_errno = errno;
848
error_t lower_privileges(void){
849
error_t old_errno = errno;
850
error_t ret_errno = 0;
860
851
if(seteuid(uid) == -1){
863
854
errno = old_errno;
867
858
/* Lower privileges permanently */
868
859
__attribute__((warn_unused_result))
869
int lower_privileges_permanently(void){
870
int old_errno = errno;
860
error_t lower_privileges_permanently(void){
861
error_t old_errno = errno;
862
error_t ret_errno = 0;
872
863
if(setuid(uid) == -1){
875
866
errno = old_errno;
879
870
/* Helper function to add_local_route() and delete_local_route() */
1086
1077
bool match = false;
1088
1079
char *interface = NULL;
1089
while((interface = argz_next(mc->interfaces,
1090
mc->interfaces_size,
1080
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
1092
1082
if(if_nametoindex(interface) == (unsigned int)if_index){
1247
1237
with an explicit route added with the server's address.
1249
1239
Avahi bug reference:
1250
https://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1240
http://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1251
1241
https://bugs.debian.org/587961
1643
1623
__attribute__((nonnull, warn_unused_result))
1644
1624
bool get_flags(const char *ifname, struct ifreq *ifr){
1648
1628
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1651
1631
perror_plus("socket");
1655
1635
strncpy(ifr->ifr_name, ifname, IF_NAMESIZE);
1657
1637
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1661
1641
perror_plus("ioctl SIOCGIFFLAGS");
1664
if((close(s) == -1) and debug){
1666
perror_plus("close");
1671
if((close(s) == -1) and debug){
1673
perror_plus("close");
1942
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1944
perror_plus("open(\"/dev/null\", O_RDONLY)");
1947
1912
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1948
1913
runnable_hook, alphasort);
1949
1914
if(numhooks == -1){
1950
1915
perror_plus("scandir");
1954
1918
struct dirent *direntry;
1920
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1922
perror_plus("open(\"/dev/null\", O_RDONLY)");
1956
1925
for(int i = 0; i < numhooks; i++){
1957
1926
direntry = direntries[i];
2104
2073
__attribute__((nonnull, warn_unused_result))
2105
int bring_up_interface(const char *const interface,
2107
int old_errno = errno;
2074
error_t bring_up_interface(const char *const interface,
2076
error_t old_errno = errno;
2109
2078
struct ifreq network;
2110
2079
unsigned int if_index = if_nametoindex(interface);
2122
2091
if(not interface_is_up(interface)){
2124
int ioctl_errno = 0;
2092
error_t ret_errno = 0, ioctl_errno = 0;
2125
2093
if(not get_flags(interface, &network)){
2126
2094
ret_errno = errno;
2127
2095
fprintf_plus(stderr, "Failed to get flags for interface "
2215
2183
/* Sleep checking until interface is running.
2216
2184
Check every 0.25s, up to total time of delay */
2217
for(int i = 0; i < delay * 4; i++){
2185
for(int i=0; i < delay * 4; i++){
2218
2186
if(interface_is_running(interface)){
2232
2200
__attribute__((nonnull, warn_unused_result))
2233
int take_down_interface(const char *const interface){
2234
int old_errno = errno;
2201
error_t take_down_interface(const char *const interface){
2202
error_t old_errno = errno;
2235
2203
struct ifreq network;
2236
2204
unsigned int if_index = if_nametoindex(interface);
2237
2205
if(if_index == 0){
2242
2210
if(interface_is_up(interface)){
2244
int ioctl_errno = 0;
2211
error_t ret_errno = 0, ioctl_errno = 0;
2245
2212
if(not get_flags(interface, &network) and debug){
2246
2213
ret_errno = errno;
2247
2214
fprintf_plus(stderr, "Failed to get flags for interface "
2497
2464
.args_doc = "",
2498
2465
.doc = "Mandos client -- Get and decrypt"
2499
2466
" passwords from a Mandos server" };
2500
ret_errno = argp_parse(&argp, argc, argv,
2501
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2467
ret = argp_parse(&argp, argc, argv,
2468
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2508
2475
perror_plus("argp_parse");
2509
2476
exitcode = EX_OSERR;
2518
2485
/* Work around Debian bug #633582:
2519
<https://bugs.debian.org/633582> */
2486
<http://bugs.debian.org/633582> */
2521
2488
/* Re-raise privileges */
2522
ret = raise_privileges();
2489
ret_errno = raise_privileges();
2525
2492
perror_plus("Failed to raise privileges");
2527
2494
struct stat st;
2928
2895
/* Allocate a new server */
2929
2896
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2930
&config, NULL, NULL, &ret);
2897
&config, NULL, NULL, &ret_errno);
2932
2899
/* Free the Avahi configuration data */
2933
2900
avahi_server_config_free(&config);
2936
2903
/* Check if creating the Avahi server object succeeded */
2937
2904
if(mc.server == NULL){
2938
2905
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
2939
avahi_strerror(ret));
2906
avahi_strerror(ret_errno));
2940
2907
exitcode = EX_UNAVAILABLE;
2980
if(signal_received){
2981
fprintf_plus(stderr, "%s exiting due to signal %d: %s\n",
2982
argv[0], signal_received,
2983
strsignal(signal_received));
2985
fprintf_plus(stderr, "%s exiting\n", argv[0]);
2947
fprintf_plus(stderr, "%s exiting\n", argv[0]);
2989
2950
/* Cleanup things */
3041
3002
/* Take down the network interfaces which were brought up */
3043
3004
char *interface = NULL;
3044
while((interface = argz_next(interfaces_to_take_down,
3045
interfaces_to_take_down_size,
3047
ret = take_down_interface(interface);
3005
while((interface=argz_next(interfaces_to_take_down,
3006
interfaces_to_take_down_size,
3008
ret_errno = take_down_interface(interface);
3050
3011
perror_plus("Failed to take down interface");
3101
3061
clean_dir_at(dir_fd, direntries[i]->d_name, level+1);
3104
if((dret == -1) and (errno != ENOENT)){
3105
3065
fprintf_plus(stderr, "unlink(\"%s/%s\"): %s\n", dirname,
3106
3066
direntries[i]->d_name, strerror(errno));
3112
3072
/* need to clean even if 0 because man page doesn't specify */
3113
3073
free(direntries);
3074
if(numentries == -1){
3075
perror_plus("scandirat");
3114
3077
dret = unlinkat(base, dirname, AT_REMOVEDIR);
3115
3078
if(dret == -1 and errno != ENOENT){
3116
3079
perror_plus("rmdir");