Annotation of embedaddon/ipguard/system.c, revision 1.1
1.1 ! misho 1: /* system.c
! 2: *
! 3: * Copyright (c) 2010 SeaD <sead at deep.perm.ru>
! 4: *
! 5: * Redistribution and use in source and binary forms, with or without
! 6: * modification, are permitted provided that the following conditions
! 7: * are met:
! 8: * 1. Redistributions of source code must retain the above copyright
! 9: * notice, this list of conditions and the following disclaimer.
! 10: * 2. Redistributions in binary form must reproduce the above copyright
! 11: * notice, this list of conditions and the following disclaimer in the
! 12: * documentation and/or other materials provided with the distribution.
! 13: *
! 14: * THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
! 15: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
! 16: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
! 17: * ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
! 18: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
! 19: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
! 20: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
! 21: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
! 22: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
! 23: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
! 24: * SUCH DAMAGE.
! 25: *
! 26: * $Id: system.c,v 1.15 2010/07/12 03:46:36 sead Exp $
! 27: *
! 28: */
! 29:
! 30: #include <pwd.h>
! 31: #include <signal.h>
! 32: #include <paths.h>
! 33: #include <fcntl.h>
! 34: #include <sys/stat.h>
! 35: #include <sys/types.h>
! 36:
! 37: #ifdef __linux__
! 38: # include <time.h>
! 39: #endif /* __linux__ */
! 40:
! 41: #include "ipguard.h"
! 42:
! 43: static int SIGNAL = 0;
! 44: static FILE *log_fp = NULL, *pid_fp = NULL;
! 45:
! 46: void exit_ipguard(int reason) {
! 47: if (verbose) {
! 48: snprintf(s, 64, "Exit on reason %d (pid: %u)", reason, getpid());
! 49: log_str(NOTICE, s, "");
! 50: }
! 51: packet_destroy();
! 52: pid_unlink();
! 53: log_close();
! 54: exit(reason);
! 55: }
! 56:
! 57: void sig_init(void) {
! 58: if (signal(SIGINT, sig_func) == SIG_ERR) {
! 59: log_str(ERROR, "signal(SIGINT):", strerror(errno));
! 60: exit(EXIT_FAILURE);
! 61: }
! 62: if (signal(SIGTERM, sig_func) == SIG_ERR) {
! 63: log_str(ERROR, "signal(SIGTERM):", strerror(errno));
! 64: exit(EXIT_FAILURE);
! 65: }
! 66: if (signal(SIGHUP, sig_func) == SIG_ERR) {
! 67: log_str(ERROR, "signal(SIGHUP):", strerror(errno));
! 68: exit(EXIT_FAILURE);
! 69: }
! 70: if (signal(SIGUSR1, sig_func) == SIG_ERR) {
! 71: log_str(ERROR, "signal(SIGUSR1):", strerror(errno));
! 72: exit(EXIT_FAILURE);
! 73: }
! 74: if (signal(SIGUSR2, sig_func) == SIG_ERR) {
! 75: log_str(ERROR, "signal(SIGUSR2):", strerror(errno));
! 76: exit(EXIT_FAILURE);
! 77: }
! 78: }
! 79:
! 80: void sig_func(int signal) {
! 81: if (verbose) {
! 82: snprintf(s, 4, "%d", signal);
! 83: log_str(NOTICE, "SIGNAL received", s);
! 84: }
! 85: SIGNAL = signal;
! 86: if ((SIGNAL == SIGINT) || (SIGNAL == SIGTERM)) exit_ipguard(SIGNAL);
! 87: }
! 88:
! 89: void sig_catch(void) {
! 90: switch (SIGNAL) {
! 91: case SIGHUP: ethers_reinit(); if (!getuid()) log_reopen(); SIGNAL = 0; break;
! 92: case SIGUSR1: pair_dump(); if (buffer_num) buffer_dump(); stat_dump(); SIGNAL = 0; break;
! 93: case SIGUSR2: buffer_dump2ethers(); SIGNAL = 0; break;
! 94: }
! 95: }
! 96:
! 97: void log_open(void) {
! 98: if (!(log_fp = fopen(log_name, "a"))) {
! 99: fprintf(stderr, "fopen(%s): %s\n", log_name, strerror(errno));
! 100: exit(EXIT_FAILURE);
! 101: }
! 102: }
! 103:
! 104: void log_str(int pri, char *ent, char *err) {
! 105: char p[10];
! 106:
! 107: switch (pri) {
! 108: case ERROR: strncpy(p, "error", 10); break;
! 109: case WARNING: strncpy(p, "warning", 10); break;
! 110: case NOTICE: strncpy(p, "notice", 10); break;
! 111: case INFO: strncpy(p, "info", 10); break;
! 112: default: strncpy(p, "unknown", 10); break;
! 113: }
! 114: if (debug > 1) fprintf(stderr, "%s ", time_get());
! 115: if (debug) fprintf(stderr, "%s %s\n", ent, err);
! 116: fprintf(log_fp, "%s %s %s %s\n", time_get(), p, ent, err);
! 117: fflush(log_fp);
! 118: }
! 119:
! 120: void log_close(void) {
! 121: if (fclose(log_fp)) {
! 122: fprintf(stderr, "fclose(%s): %s\n", log_name, strerror(errno));
! 123: }
! 124: }
! 125:
! 126: void log_reopen(void) {
! 127: log_close(); log_open();
! 128: log_str(NOTICE, "Log file reopened:", log_name);
! 129: }
! 130:
! 131: void pid_check(void) {
! 132: struct stat ps;
! 133: int pid = 0;
! 134:
! 135: if (stat(pid_name, &ps) == -1) {
! 136: if (errno == ENOENT) return;
! 137: else {
! 138: snprintf(s, 128, "stat(%s):", pid_name);
! 139: log_str(ERROR, s, strerror(errno));
! 140: exit(EXIT_FAILURE);
! 141: }
! 142: } else {
! 143: if (!(pid_fp = fopen(pid_name, "r"))) {
! 144: snprintf(s, 128, "fopen(%s):", pid_name);
! 145: log_str(WARNING, s, strerror(errno));
! 146: }
! 147: fscanf(pid_fp, "%d", &pid);
! 148: fclose(pid_fp);
! 149: if (pid) {
! 150: if (kill(pid, 0)) {
! 151: snprintf(s, 64, "Removing stale pid: %u", pid);
! 152: log_str(WARNING, s, "");
! 153: pid_unlink();
! 154: } else {
! 155: snprintf(s, 64, "Already running, pid: %u", pid);
! 156: log_str(ERROR, s, "");
! 157: exit(EXIT_FAILURE);
! 158: }
! 159: } else {
! 160: snprintf(s, 64, "Wrong pid file found: %s", pid_name);
! 161: log_str(ERROR, s, "");
! 162: exit(EXIT_FAILURE);
! 163: }
! 164: }
! 165: }
! 166:
! 167: void pid_creat(void) {
! 168: pid_check();
! 169: if (!(pid_fp = fopen(pid_name, "w"))) {
! 170: snprintf(s, 128, "fopen(%s):", pid_name);
! 171: log_str(ERROR, s, strerror(errno));
! 172: exit(EXIT_FAILURE);
! 173: }
! 174: fprintf(pid_fp, "%d\n", getpid());
! 175: fclose(pid_fp);
! 176: }
! 177:
! 178: void pid_unlink(void) {
! 179: if (unlink(pid_name) == -1) {
! 180: snprintf(s, 128, "unlink(%s):", pid_name);
! 181: log_str(NOTICE, s, strerror(errno));
! 182: }
! 183: }
! 184:
! 185: void daemonize(void) {
! 186: int pid, null;
! 187:
! 188: if ((pid = fork()) == -1) {
! 189: log_str(ERROR, "fork():", strerror(errno));
! 190: exit(EXIT_FAILURE);
! 191: } else if (pid > 0) exit(EXIT_SUCCESS);
! 192:
! 193: if ((null = open(_PATH_DEVNULL, O_RDWR)) == -1) {
! 194: log_str(ERROR, "open(_PATH_DEVNULL):", strerror(errno));
! 195: exit(EXIT_FAILURE);
! 196: }
! 197:
! 198: if (dup2(null, 0) == -1) {
! 199: log_str(ERROR, "dup2(STDIN):", strerror(errno));
! 200: exit(EXIT_FAILURE);
! 201: }
! 202: if (dup2(null, 1) == -1) {
! 203: log_str(ERROR, "dup2(STDOUT):", strerror(errno));
! 204: exit(EXIT_FAILURE);
! 205: }
! 206: if (dup2(null, 2) == -1) {
! 207: log_str(ERROR, "dup2(STDERR):", strerror(errno));
! 208: exit(EXIT_FAILURE);
! 209: }
! 210:
! 211: if (setsid() == -1) {
! 212: log_str(ERROR, "setsid():", strerror(errno));
! 213: exit(EXIT_FAILURE);
! 214: }
! 215:
! 216: if (chdir("/") == -1) {
! 217: log_str(ERROR, "chdir(/):", strerror(errno));
! 218: exit(EXIT_FAILURE);
! 219: }
! 220: }
! 221:
! 222: void set_user(void) {
! 223: struct passwd *pw;
! 224: int uid = 0, gid = 0;
! 225:
! 226: if ((pw = getpwnam(suser))) {
! 227: uid = pw->pw_uid;
! 228: gid = pw->pw_gid;
! 229: } else if (!(uid = atoi(suser))) {
! 230: pw = getpwuid(uid);
! 231: gid = pw->pw_gid;
! 232: } else {
! 233: log_str(ERROR, "Invalid user", suser);
! 234: exit(EXIT_FAILURE);
! 235: }
! 236:
! 237: if (setgid(gid) == -1) {
! 238: log_str(ERROR, "setgid():", strerror(errno));
! 239: exit(EXIT_FAILURE);
! 240: }
! 241: if (setuid(uid) == -1) {
! 242: log_str(ERROR, "setuid():", strerror(errno));
! 243: exit(EXIT_FAILURE);
! 244: }
! 245:
! 246: snprintf(s, 128, "%u/%u", uid, gid);
! 247: if (verbose) log_str(NOTICE, "Running as uid/gid:", s);
! 248: }
! 249:
! 250: void mac_rand(char *mac) {
! 251: char c[] = " ";
! 252: register int n;
! 253:
! 254: for (n = 0; n < 18; n++)
! 255: if (mac[n] == 'x') { snprintf(c, 2, "%1x", rand() % 16); mac[n] = c[0]; }
! 256: }
! 257:
! 258: void mac_regen(char *mac) {
! 259: static time_t count = 0;
! 260: time_t t;
! 261: char c[] = " ";
! 262: register int n;
! 263:
! 264: if ((t = time(&t)) < count) return;
! 265: count = t + fake_regen;
! 266:
! 267: if (debug > 1) fprintf(stderr, "FAKE REGEN: pre %-17s ", mac);
! 268:
! 269: for (n = 0; n < 18; n++)
! 270: if ((mac[n] >= '0' && mac[n] <= '9') ||
! 271: (mac[n] >= 'A' && mac[n] <= 'F') ||
! 272: (mac[n] >= 'a' && mac[n] <= 'f'))
! 273: { snprintf(c, 2, "%1x", rand() % 16); mac[n] = c[0]; }
! 274:
! 275: if (debug > 1) fprintf(stderr, "new %-17s\n", mac);
! 276: }
! 277:
! 278: char *time_get(void) {
! 279: static char cur_time[16];
! 280: time_t t;
! 281:
! 282: t = time(&t);
! 283: strncpy(cur_time, (char *) ctime(&t) + 4, 15);
! 284: cur_time[15] = '\0';
! 285: return cur_time;
! 286: }
! 287:
! 288: void ethers_stat(void) {
! 289: struct stat es;
! 290: static time_t ethers_mtime = 0, count = 0;
! 291: time_t t;
! 292:
! 293: if ((t = time(&t)) < count) return;
! 294: count = t + ethers_update;
! 295:
! 296: if (stat(ethers_name, &es) == -1) {
! 297: snprintf(s, 128, "stat(%s):", ethers_name);
! 298: log_str(WARNING, s, strerror(errno));
! 299: return;
! 300: }
! 301:
! 302: if (!ethers_mtime) ethers_mtime = es.st_mtime;
! 303:
! 304: if (ethers_mtime < es.st_mtime) {
! 305: ethers_reinit(); ethers_mtime = es.st_mtime;
! 306: }
! 307: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to system.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / ipguard