123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686 |
- /*
- * konfd.c
- *
- * The konfd daemon to store user configuration commands.
- *
- */
- #ifdef HAVE_CONFIG_H
- #include "config.h"
- #endif /* HAVE_CONFIG_H */
- #include <stdio.h>
- #include <stdlib.h>
- #include <unistd.h>
- #include <sys/types.h>
- #include <sys/stat.h>
- #include <fcntl.h>
- #include <sys/wait.h>
- #include <errno.h>
- #include <assert.h>
- #include <sys/socket.h>
- #include <sys/un.h>
- #include <string.h>
- #include <sys/select.h>
- #include <signal.h>
- #include <syslog.h>
- #ifdef HAVE_GETOPT_H
- #include <getopt.h>
- #endif
- #ifdef HAVE_PWD_H
- #include <pwd.h>
- #endif
- #ifdef HAVE_GRP_H
- #include <grp.h>
- #endif
- #include "clish/internal.h"
- #include "konf/tree.h"
- #include "konf/query.h"
- #include "konf/buf.h"
- #include "lub/argv.h"
- #include "lub/string.h"
- #ifndef VERSION
- #define VERSION 1.2.2
- #endif
- #define QUOTE(t) #t
- #define version(v) printf("%s\n", v)
- #define KONFD_PIDFILE "/var/run/konfd.pid"
- /* UNIX socket path */
- #ifndef UNIX_PATH_MAX
- #define UNIX_PATH_MAX 108
- #endif
- /* OpenBSD has no MSG_NOSIGNAL flag */
- #ifndef MSG_NOSIGNAL
- #define MSG_NOSIGNAL 0
- #endif
- #define MAXMSG 1024
- /* Global signal vars */
- static volatile int sigterm = 0;
- static void sighandler(int signo);
- static void help(int status, const char *argv0);
- static char * process_query(int sock, konf_tree_t * conf, char *str);
- int answer_send(int sock, char *command);
- static int dump_running_config(int sock, konf_tree_t *conf, konf_query_t *query);
- int daemonize(int nochdir, int noclose);
- struct options *opts_init(void);
- void opts_free(struct options *opts);
- static int opts_parse(int argc, char *argv[], struct options *opts);
- /* Command line options */
- struct options {
- char *socket_path;
- char *pidfile;
- char *chroot;
- int debug; /* Don't daemonize in debug mode */
- uid_t uid;
- gid_t gid;
- };
- /*--------------------------------------------------------- */
- int main(int argc, char **argv)
- {
- int retval = -1;
- unsigned i;
- char *str;
- konf_tree_t *conf;
- lub_bintree_t bufs;
- konf_buf_t *tbuf;
- struct options *opts = NULL;
- int pidfd = -1;
- /* Network vars */
- int sock = -1;
- struct sockaddr_un laddr;
- struct sockaddr_un raddr;
- fd_set active_fd_set, read_fd_set;
- const int reuseaddr = 1;
- /* Signal vars */
- struct sigaction sig_act, sigpipe_act;
- sigset_t sig_set, sigpipe_set;
- /* Initialize syslog */
- openlog(argv[0], LOG_CONS, LOG_DAEMON);
- /* Parse command line options */
- opts = opts_init();
- if (opts_parse(argc, argv, opts))
- goto err;
- /* Fork the daemon */
- if (!opts->debug) {
- /* Daemonize */
- if (daemonize(0, 0) < 0) {
- syslog(LOG_ERR, "Can't daemonize\n");
- goto err;
- }
- /* Write pidfile */
- if ((pidfd = open(opts->pidfile,
- O_WRONLY | O_CREAT | O_EXCL | O_TRUNC,
- S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH)) < 0) {
- syslog(LOG_WARNING, "Can't open pidfile %s: %s",
- opts->pidfile, strerror(errno));
- } else {
- char str[20];
- snprintf(str, sizeof(str), "%u\n", getpid());
- if (write(pidfd, str, strlen(str)) < 0)
- syslog(LOG_WARNING, "Can't write to %s: %s",
- opts->pidfile, strerror(errno));
- close(pidfd);
- }
- }
- /* Create listen socket */
- if ((sock = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) {
- syslog(LOG_ERR, "Can't create listen socket: %s\n",
- strerror(errno));
- goto err;
- }
- if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR,
- &reuseaddr, sizeof(reuseaddr))) {
- syslog(LOG_ERR, "Can't set socket options: %s\n", strerror(errno));
- goto err;
- }
- laddr.sun_family = AF_UNIX;
- strncpy(laddr.sun_path, opts->socket_path, UNIX_PATH_MAX);
- laddr.sun_path[UNIX_PATH_MAX - 1] = '\0';
- if (bind(sock, (struct sockaddr *)&laddr, sizeof(laddr))) {
- syslog(LOG_ERR, "Can't bind socket: %s\n",
- strerror(errno));
- goto err;
- }
- if (chown(opts->socket_path, opts->uid, opts->gid)) {
- syslog(LOG_ERR, "Can't chown UNIX socket: %s\n",
- strerror(errno));
- goto err;
- }
- listen(sock, 5);
- /* Change GID */
- if (opts->gid != getgid()) {
- if (setgid(opts->gid)) {
- syslog(LOG_ERR, "Can't set GID to %u: %s",
- opts->gid, strerror(errno));
- goto err;
- }
- }
- #ifdef HAVE_CHROOT
- /* Chroot */
- if (opts->chroot) {
- if (chroot(opts->chroot) < 0) {
- syslog(LOG_ERR, "Can't chroot to %s: %s",
- opts->chroot, strerror(errno));
- goto err;
- }
- }
- #endif
- /* Change UID */
- if (opts->uid != getuid()) {
- if (setuid(opts->uid)) {
- syslog(LOG_ERR, "Can't set UID to %u: %s",
- opts->uid, strerror(errno));
- goto err;
- }
- }
- /* Create configuration tree */
- conf = konf_tree_new("", 0);
- /* Initialize the tree of buffers */
- lub_bintree_init(&bufs,
- konf_buf_bt_offset(),
- konf_buf_bt_compare, konf_buf_bt_getkey);
- /* Set signal handler */
- sigemptyset(&sig_set);
- sigaddset(&sig_set, SIGTERM);
- sigaddset(&sig_set, SIGINT);
- sigaddset(&sig_set, SIGQUIT);
- sig_act.sa_flags = 0;
- sig_act.sa_mask = sig_set;
- sig_act.sa_handler = &sighandler;
- sigaction(SIGTERM, &sig_act, NULL);
- sigaction(SIGINT, &sig_act, NULL);
- sigaction(SIGQUIT, &sig_act, NULL);
- /* Ignore SIGPIPE */
- sigemptyset(&sigpipe_set);
- sigaddset(&sigpipe_set, SIGPIPE);
- sigpipe_act.sa_flags = 0;
- sigpipe_act.sa_mask = sigpipe_set;
- sigpipe_act.sa_handler = SIG_IGN;
- sigaction(SIGPIPE, &sigpipe_act, NULL);
- /* Initialize the set of active sockets. */
- FD_ZERO(&active_fd_set);
- FD_SET(sock, &active_fd_set);
- /* Main loop */
- while (!sigterm) {
- int num;
- /* Block until input arrives on one or more active sockets. */
- read_fd_set = active_fd_set;
- num = select(FD_SETSIZE, &read_fd_set, NULL, NULL, NULL);
- if (num < 0) {
- if (EINTR == errno)
- continue;
- break;
- }
- if (0 == num)
- continue;
- /* Service all the sockets with input pending. */
- for (i = 0; i < FD_SETSIZE; ++i) {
- if (!FD_ISSET(i, &read_fd_set))
- continue;
- if (i == sock) {
- /* Connection request on listen socket. */
- int new;
- socklen_t size = sizeof(raddr);
- new = accept(sock,
- (struct sockaddr *)&raddr, &size);
- if (new < 0) {
- fprintf(stderr, "accept");
- continue;
- }
- #ifdef DEBUG
- fprintf(stderr, "Connection established %u\n", new);
- #endif
- konf_buftree_remove(&bufs, new);
- tbuf = konf_buf_new(new);
- /* insert it into the binary tree for this conf */
- lub_bintree_insert(&bufs, tbuf);
- FD_SET(new, &active_fd_set);
- } else {
- int nbytes;
- /* Data arriving on an already-connected socket. */
- if ((nbytes = konf_buftree_read(&bufs, i)) <= 0) {
- close(i);
- FD_CLR(i, &active_fd_set);
- konf_buftree_remove(&bufs, i);
- continue;
- }
- while ((str = konf_buftree_parse(&bufs, i))) {
- char *answer;
- if (!(answer = process_query(i, conf, str)))
- answer = strdup("-e");
- free(str);
- answer_send(i, answer);
- free(answer);
- }
- }
- }
- }
- /* Free resources */
- konf_tree_delete(conf);
- /* delete each buf */
- while ((tbuf = lub_bintree_findfirst(&bufs))) {
- /* remove the buf from the tree */
- lub_bintree_remove(&bufs, tbuf);
- /* release the instance */
- konf_buf_delete(tbuf);
- }
- retval = 0;
- err:
- /* Close listen socket */
- if (sock >= 0) {
- close(sock);
- unlink(opts->socket_path);
- }
- /* Remove pidfile */
- if (pidfd >= 0) {
- if (unlink(opts->pidfile) < 0) {
- syslog(LOG_ERR, "Can't remove pid-file %s: %s\n",
- opts->pidfile, strerror(errno));
- }
- }
- /* Free command line options */
- opts_free(opts);
- return retval;
- }
- /*--------------------------------------------------------- */
- static char * process_query(int sock, konf_tree_t * conf, char *str)
- {
- unsigned i;
- int res;
- konf_tree_t *iconf;
- konf_tree_t *tmpconf;
- konf_query_t *query;
- char *retval = NULL;
- konf_query_op_t ret = KONF_QUERY_OP_ERROR;
- #ifdef DEBUG
- fprintf(stderr, "----------------------\n");
- fprintf(stderr, "REQUEST: %s\n", str);
- #endif
- /* Parse query */
- query = konf_query_new();
- res = konf_query_parse_str(query, str);
- if (res < 0) {
- konf_query_free(query);
- return NULL;
- }
- #ifdef DEBUG
- konf_query_dump(query);
- #endif
- /* Go through the pwd */
- iconf = conf;
- for (i = 0; i < konf_query__get_pwdc(query); i++) {
- if (!(iconf = konf_tree_find_conf(iconf,
- konf_query__get_pwd(query, i), 0, 0))) {
- iconf = NULL;
- break;
- }
- }
- if (!iconf) {
- fprintf(stderr, "Unknown path\n");
- konf_query_free(query);
- return NULL;
- }
- switch (konf_query__get_op(query)) {
- case KONF_QUERY_OP_SET:
- if (konf_query__get_unique(query)) {
- int exist = 0;
- exist = konf_tree_del_pattern(iconf,
- konf_query__get_line(query),
- konf_query__get_unique(query),
- konf_query__get_pattern(query),
- konf_query__get_priority(query),
- konf_query__get_seq(query),
- konf_query__get_seq_num(query));
- if (exist > 0) {
- ret = KONF_QUERY_OP_OK;
- break;
- }
- }
- tmpconf = konf_tree_new_conf(iconf,
- konf_query__get_line(query), konf_query__get_priority(query),
- konf_query__get_seq(query), konf_query__get_seq_num(query));
- if (!tmpconf)
- break;
- konf_tree__set_splitter(tmpconf, konf_query__get_splitter(query));
- konf_tree__set_depth(tmpconf, konf_query__get_pwdc(query));
- ret = KONF_QUERY_OP_OK;
- break;
- case KONF_QUERY_OP_UNSET:
- if (konf_tree_del_pattern(iconf,
- NULL,
- BOOL_TRUE,
- konf_query__get_pattern(query),
- konf_query__get_priority(query),
- konf_query__get_seq(query),
- konf_query__get_seq_num(query)) < 0)
- break;
- ret = KONF_QUERY_OP_OK;
- break;
- case KONF_QUERY_OP_DUMP:
- if (dump_running_config(sock, iconf, query))
- break;
- ret = KONF_QUERY_OP_OK;
- break;
- default:
- break;
- }
- #ifdef DEBUG
- /* Print whole tree */
- konf_tree_fprintf(conf, stderr, NULL, -1, BOOL_TRUE, 0);
- #endif
- /* Free resources */
- konf_query_free(query);
- switch (ret) {
- case KONF_QUERY_OP_OK:
- lub_string_cat(&retval, "-o");
- break;
- case KONF_QUERY_OP_ERROR:
- lub_string_cat(&retval, "-e");
- break;
- default:
- lub_string_cat(&retval, "-e");
- break;
- };
- return retval;
- }
- /*--------------------------------------------------------- */
- /*
- * Signal handler for temination signals (like SIGTERM, SIGINT, ...)
- */
- static void sighandler(int signo)
- {
- sigterm = 1;
- }
- /*--------------------------------------------------------- */
- int answer_send(int sock, char *command)
- {
- return send(sock, command, strlen(command) + 1, MSG_NOSIGNAL);
- }
- /*--------------------------------------------------------- */
- static int dump_running_config(int sock, konf_tree_t *conf, konf_query_t *query)
- {
- FILE *fd;
- char *filename;
- int dupsock = -1;
- if ((filename = konf_query__get_path(query))) {
- if (!(fd = fopen(filename, "w")))
- return -1;
- } else {
- if ((dupsock = dup(sock)) < 0)
- return -1;
- fd = fdopen(dupsock, "w");
- }
- if (!filename) {
- fprintf(fd, "-t\n");
- #ifdef DEBUG
- fprintf(stderr, "ANSWER: -t\n");
- #endif
- }
- konf_tree_fprintf(conf,
- fd,
- konf_query__get_pattern(query),
- konf_query__get_pwdc(query) - 1,
- konf_query__get_seq(query),
- 0);
- if (!filename) {
- fprintf(fd, "\n");
- #ifdef DEBUG
- fprintf(stderr, "SEND DATA: \n");
- #endif
- }
- fclose(fd);
- return 0;
- }
- /*--------------------------------------------------------- */
- /* Implement own simple daemon() to don't use Non-POSIX */
- int daemonize(int nochdir, int noclose)
- {
- int fd;
- int pid;
- pid = fork();
- if (-1 == pid)
- return -1;
- if (pid > 0)
- _exit(0); /* Exit parent */
- if (setsid() == -1)
- return -1;
- if (!nochdir)
- chdir("/");
- if (!noclose) {
- fd = open("/dev/null", O_RDWR, 0);
- if (fd < 0)
- return -1;
- dup2(fd, STDIN_FILENO);
- dup2(fd, STDOUT_FILENO);
- dup2(fd, STDERR_FILENO);
- if (fd > 2)
- close(fd);
- }
- return 0;
- }
- /*--------------------------------------------------------- */
- /* Initialize option structure by defaults */
- struct options *opts_init(void)
- {
- struct options *opts = NULL;
- opts = malloc(sizeof(*opts));
- assert(opts);
- opts->debug = 0; /* daemonize by default */
- opts->socket_path = strdup(KONFD_SOCKET_PATH);
- opts->pidfile = strdup(KONFD_PIDFILE);
- opts->chroot = NULL;
- opts->uid = getuid();
- opts->gid = getgid();
- return opts;
- }
- /*--------------------------------------------------------- */
- /* Free option structure */
- void opts_free(struct options *opts)
- {
- if (opts->socket_path)
- free(opts->socket_path);
- if (opts->pidfile)
- free(opts->pidfile);
- if (opts->chroot)
- free(opts->chroot);
- free(opts);
- }
- /*--------------------------------------------------------- */
- /* Parse command line options */
- static int opts_parse(int argc, char *argv[], struct options *opts)
- {
- static const char *shortopts = "hvs:p:u:g:dr:";
- #ifdef HAVE_GETOPT_H
- static const struct option longopts[] = {
- {"help", 0, NULL, 'h'},
- {"version", 0, NULL, 'v'},
- {"socket", 1, NULL, 's'},
- {"pid", 1, NULL, 'p'},
- {"user", 1, NULL, 'u'},
- {"group", 1, NULL, 'g'},
- {"debug", 0, NULL, 'd'},
- {"chroot", 1, NULL, 'r'},
- {NULL, 0, NULL, 0}
- };
- #endif
- optind = 0;
- while(1) {
- int opt;
- #ifdef HAVE_GETOPT_H
- opt = getopt_long(argc, argv, shortopts, longopts, NULL);
- #else
- opt = getopt(argc, argv, shortopts);
- #endif
- if (-1 == opt)
- break;
- switch (opt) {
- case 's':
- if (opts->socket_path)
- free(opts->socket_path);
- opts->socket_path = strdup(optarg);
- break;
- case 'p':
- if (opts->pidfile)
- free(opts->pidfile);
- opts->pidfile = strdup(optarg);
- break;
- case 'r':
- #ifdef HAVE_CHROOT
- if (opts->chroot)
- free(opts->chroot);
- opts->chroot = strdup(optarg);
- #else
- syslog(LOG_ERR, "The --chroot option is not supported\n");
- return -1;
- #endif
- break;
- case 'd':
- opts->debug = 1;
- break;
- case 'u': {
- #ifdef HAVE_PWD_H
- struct passwd *pwd = getpwnam(optarg);
- if (!pwd) {
- syslog(LOG_ERR, "Can't identify user \"%s\"\n",
- optarg);
- return -1;
- }
- opts->uid = pwd->pw_uid;
- #else
- syslog(LOG_ERR, "The --user option is not supported\n");
- return -1;
- #endif
- break;
- }
- case 'g': {
- #ifdef HAVE_GRP_H
- struct group *grp = getgrnam(optarg);
- if (!grp) {
- syslog(LOG_ERR, "Can't identify group \"%s\"\n",
- optarg);
- return -1;
- }
- opts->gid = grp->gr_gid;
- #else
- syslog(LOG_ERR, "The --group option is not supported\n");
- return -1;
- #endif
- break;
- }
- case 'h':
- help(0, argv[0]);
- exit(0);
- break;
- case 'v':
- version(VERSION);
- exit(0);
- break;
- default:
- help(-1, argv[0]);
- exit(-1);
- break;
- }
- }
- return 0;
- }
- /*--------------------------------------------------------- */
- /* Print help message */
- static void help(int status, const char *argv0)
- {
- const char *name = NULL;
- if (!argv0)
- return;
- /* Find the basename */
- name = strrchr(argv0, '/');
- if (name)
- name++;
- else
- name = argv0;
- if (status != 0) {
- fprintf(stderr, "Try `%s -h' for more information.\n",
- name);
- } else {
- printf("Usage: %s [options]\n", name);
- printf("Daemon to store user configuration (i.e. commands). "
- "The part of the klish project.\n");
- printf("Options:\n");
- printf("\t-v, --version\tPrint version.\n");
- printf("\t-h, --help\tPrint this help.\n");
- printf("\t-d, --debug\tDebug mode. Don't daemonize.\n");
- printf("\t-s <path>, --socket=<path>\tSpecify the UNIX socket "
- "filesystem path to listen on.\n");
- printf("\t-p <path>, --pid=<path>\tFile to save daemon's PID to.\n");
- printf("\t-r <path>, --chroot=<path>\tDirectory to chroot.\n");
- printf("\t-u <user>, --user=<user>\tExecute process as"
- " specified user.\n");
- printf("\t-g <group>, --group=<group>\tExecute process as"
- " specified group.\n");
- }
- }
|