2 13b2bc37 2022-10-23 stsp * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
4 13b2bc37 2022-10-23 stsp * Permission to use, copy, modify, and distribute this software for any
5 13b2bc37 2022-10-23 stsp * purpose with or without fee is hereby granted, provided that the above
6 13b2bc37 2022-10-23 stsp * copyright notice and this permission notice appear in all copies.
8 13b2bc37 2022-10-23 stsp * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 13b2bc37 2022-10-23 stsp * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 13b2bc37 2022-10-23 stsp * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 13b2bc37 2022-10-23 stsp * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 13b2bc37 2022-10-23 stsp * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 13b2bc37 2022-10-23 stsp * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 13b2bc37 2022-10-23 stsp * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 13b2bc37 2022-10-23 stsp #include <sys/queue.h>
18 13b2bc37 2022-10-23 stsp #include <sys/tree.h>
19 13b2bc37 2022-10-23 stsp #include <sys/time.h>
20 13b2bc37 2022-10-23 stsp #include <sys/types.h>
21 13b2bc37 2022-10-23 stsp #include <sys/stat.h>
22 13b2bc37 2022-10-23 stsp #include <sys/socket.h>
23 13b2bc37 2022-10-23 stsp #include <sys/un.h>
24 13b2bc37 2022-10-23 stsp #include <sys/wait.h>
26 13b2bc37 2022-10-23 stsp #include <fcntl.h>
27 13b2bc37 2022-10-23 stsp #include <err.h>
28 13b2bc37 2022-10-23 stsp #include <errno.h>
29 13b2bc37 2022-10-23 stsp #include <event.h>
30 13b2bc37 2022-10-23 stsp #include <limits.h>
31 13b2bc37 2022-10-23 stsp #include <pwd.h>
32 13b2bc37 2022-10-23 stsp #include <imsg.h>
33 13b2bc37 2022-10-23 stsp #include <sha1.h>
34 13b2bc37 2022-10-23 stsp #include <signal.h>
35 13b2bc37 2022-10-23 stsp #include <siphash.h>
36 13b2bc37 2022-10-23 stsp #include <stdarg.h>
37 13b2bc37 2022-10-23 stsp #include <stdio.h>
38 13b2bc37 2022-10-23 stsp #include <stdlib.h>
39 13b2bc37 2022-10-23 stsp #include <string.h>
40 13b2bc37 2022-10-23 stsp #include <syslog.h>
41 13b2bc37 2022-10-23 stsp #include <unistd.h>
43 13b2bc37 2022-10-23 stsp #include "got_error.h"
44 13b2bc37 2022-10-23 stsp #include "got_opentemp.h"
45 13b2bc37 2022-10-23 stsp #include "got_path.h"
46 13b2bc37 2022-10-23 stsp #include "got_repository.h"
47 13b2bc37 2022-10-23 stsp #include "got_object.h"
48 13b2bc37 2022-10-23 stsp #include "got_reference.h"
50 13b2bc37 2022-10-23 stsp #include "got_lib_delta.h"
51 13b2bc37 2022-10-23 stsp #include "got_lib_object.h"
52 13b2bc37 2022-10-23 stsp #include "got_lib_object_cache.h"
53 13b2bc37 2022-10-23 stsp #include "got_lib_sha1.h"
54 13b2bc37 2022-10-23 stsp #include "got_lib_gitproto.h"
55 13b2bc37 2022-10-23 stsp #include "got_lib_pack.h"
56 13b2bc37 2022-10-23 stsp #include "got_lib_repository.h"
58 13b2bc37 2022-10-23 stsp #include "gotd.h"
59 13b2bc37 2022-10-23 stsp #include "log.h"
60 d93ecf7d 2022-12-14 stsp #include "listen.h"
61 0ccf3acb 2022-11-16 stsp #include "auth.h"
62 ae7c1b78 2023-01-10 stsp #include "session.h"
63 13b2bc37 2022-10-23 stsp #include "repo_read.h"
64 13b2bc37 2022-10-23 stsp #include "repo_write.h"
66 13b2bc37 2022-10-23 stsp #ifndef nitems
67 13b2bc37 2022-10-23 stsp #define nitems(_a) (sizeof((_a)) / sizeof((_a)[0]))
70 13b2bc37 2022-10-23 stsp struct gotd_client {
71 13b2bc37 2022-10-23 stsp STAILQ_ENTRY(gotd_client) entry;
72 13b2bc37 2022-10-23 stsp enum gotd_client_state state;
73 13b2bc37 2022-10-23 stsp struct gotd_client_capability *capabilities;
74 13b2bc37 2022-10-23 stsp size_t ncapa_alloc;
75 13b2bc37 2022-10-23 stsp size_t ncapabilities;
76 13b2bc37 2022-10-23 stsp uint32_t id;
78 13b2bc37 2022-10-23 stsp int delta_cache_fd;
79 13b2bc37 2022-10-23 stsp struct gotd_imsgev iev;
80 13b2bc37 2022-10-23 stsp struct event tmo;
83 13b2bc37 2022-10-23 stsp struct gotd_child_proc *repo_read;
84 13b2bc37 2022-10-23 stsp struct gotd_child_proc *repo_write;
85 5e25db14 2022-12-29 stsp struct gotd_child_proc *auth;
86 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *session;
87 5e25db14 2022-12-29 stsp int required_auth;
88 13b2bc37 2022-10-23 stsp char *packfile_path;
89 13b2bc37 2022-10-23 stsp char *packidx_path;
91 13b2bc37 2022-10-23 stsp STAILQ_HEAD(gotd_clients, gotd_client);
93 13b2bc37 2022-10-23 stsp static struct gotd_clients gotd_clients[GOTD_CLIENT_TABLE_SIZE];
94 13b2bc37 2022-10-23 stsp static SIPHASH_KEY clients_hash_key;
95 13b2bc37 2022-10-23 stsp volatile int client_cnt;
96 ef4e2f01 2022-12-29 stsp static struct timeval auth_timeout = { 5, 0 };
97 13b2bc37 2022-10-23 stsp static struct gotd gotd;
99 13b2bc37 2022-10-23 stsp void gotd_sighdlr(int sig, short event, void *arg);
100 f1752522 2022-10-29 stsp static void gotd_shutdown(void);
101 ae7c1b78 2023-01-10 stsp static const struct got_error *start_session_child(struct gotd_client *,
102 ae7c1b78 2023-01-10 stsp struct gotd_repo *, char *, const char *, int, int);
103 b50a2b46 2022-12-29 stsp static const struct got_error *start_repo_child(struct gotd_client *,
104 b50a2b46 2022-12-29 stsp enum gotd_procid, struct gotd_repo *, char *, const char *, int, int);
105 5e25db14 2022-12-29 stsp static const struct got_error *start_auth_child(struct gotd_client *, int,
106 5e25db14 2022-12-29 stsp struct gotd_repo *, char *, const char *, int, int);
107 b50a2b46 2022-12-29 stsp static void kill_proc(struct gotd_child_proc *, int);
109 13b2bc37 2022-10-23 stsp __dead static void
112 88dec179 2022-10-24 stsp fprintf(stderr, "usage: %s [-dv] [-f config-file]\n", getprogname());
117 13b2bc37 2022-10-23 stsp unix_socket_listen(const char *unix_socket_path, uid_t uid, gid_t gid)
119 13b2bc37 2022-10-23 stsp struct sockaddr_un sun;
120 13b2bc37 2022-10-23 stsp int fd = -1;
121 13b2bc37 2022-10-23 stsp mode_t old_umask, mode;
123 13b2bc37 2022-10-23 stsp fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK| SOCK_CLOEXEC, 0);
124 13b2bc37 2022-10-23 stsp if (fd == -1) {
125 13b2bc37 2022-10-23 stsp log_warn("socket");
129 13b2bc37 2022-10-23 stsp sun.sun_family = AF_UNIX;
130 13b2bc37 2022-10-23 stsp if (strlcpy(sun.sun_path, unix_socket_path,
131 13b2bc37 2022-10-23 stsp sizeof(sun.sun_path)) >= sizeof(sun.sun_path)) {
132 13b2bc37 2022-10-23 stsp log_warnx("%s: name too long", unix_socket_path);
137 13b2bc37 2022-10-23 stsp if (unlink(unix_socket_path) == -1) {
138 13b2bc37 2022-10-23 stsp if (errno != ENOENT) {
139 13b2bc37 2022-10-23 stsp log_warn("unlink %s", unix_socket_path);
145 13b2bc37 2022-10-23 stsp old_umask = umask(S_IXUSR|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH);
146 6f854dde 2023-01-04 stsp mode = S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH;
148 13b2bc37 2022-10-23 stsp if (bind(fd, (struct sockaddr *)&sun, sizeof(sun)) == -1) {
149 13b2bc37 2022-10-23 stsp log_warn("bind: %s", unix_socket_path);
151 13b2bc37 2022-10-23 stsp umask(old_umask);
155 13b2bc37 2022-10-23 stsp umask(old_umask);
157 13b2bc37 2022-10-23 stsp if (chmod(unix_socket_path, mode) == -1) {
158 13b2bc37 2022-10-23 stsp log_warn("chmod %o %s", mode, unix_socket_path);
160 13b2bc37 2022-10-23 stsp unlink(unix_socket_path);
164 13b2bc37 2022-10-23 stsp if (chown(unix_socket_path, uid, gid) == -1) {
165 13b2bc37 2022-10-23 stsp log_warn("chown %s uid=%d gid=%d", unix_socket_path, uid, gid);
167 13b2bc37 2022-10-23 stsp unlink(unix_socket_path);
171 13b2bc37 2022-10-23 stsp if (listen(fd, GOTD_UNIX_SOCKET_BACKLOG) == -1) {
172 13b2bc37 2022-10-23 stsp log_warn("listen");
174 13b2bc37 2022-10-23 stsp unlink(unix_socket_path);
181 13b2bc37 2022-10-23 stsp static uint64_t
182 13b2bc37 2022-10-23 stsp client_hash(uint32_t client_id)
184 13b2bc37 2022-10-23 stsp return SipHash24(&clients_hash_key, &client_id, sizeof(client_id));
187 13b2bc37 2022-10-23 stsp static void
188 13b2bc37 2022-10-23 stsp add_client(struct gotd_client *client)
190 13b2bc37 2022-10-23 stsp uint64_t slot = client_hash(client->id) % nitems(gotd_clients);
191 13b2bc37 2022-10-23 stsp STAILQ_INSERT_HEAD(&gotd_clients[slot], client, entry);
192 13b2bc37 2022-10-23 stsp client_cnt++;
195 13b2bc37 2022-10-23 stsp static struct gotd_client *
196 13b2bc37 2022-10-23 stsp find_client(uint32_t client_id)
198 13b2bc37 2022-10-23 stsp uint64_t slot;
199 13b2bc37 2022-10-23 stsp struct gotd_client *c;
201 13b2bc37 2022-10-23 stsp slot = client_hash(client_id) % nitems(gotd_clients);
202 13b2bc37 2022-10-23 stsp STAILQ_FOREACH(c, &gotd_clients[slot], entry) {
203 13b2bc37 2022-10-23 stsp if (c->id == client_id)
207 13b2bc37 2022-10-23 stsp return NULL;
210 13b2bc37 2022-10-23 stsp static struct gotd_child_proc *
211 ae7c1b78 2023-01-10 stsp get_client_repo_proc(struct gotd_client *client)
213 13b2bc37 2022-10-23 stsp if (client->repo_read && client->repo_write) {
214 13b2bc37 2022-10-23 stsp fatalx("uid %d is reading and writing in the same session",
215 13b2bc37 2022-10-23 stsp client->euid);
216 13b2bc37 2022-10-23 stsp /* NOTREACHED */
219 13b2bc37 2022-10-23 stsp if (client->repo_read)
220 13b2bc37 2022-10-23 stsp return client->repo_read;
221 13b2bc37 2022-10-23 stsp else if (client->repo_write)
222 13b2bc37 2022-10-23 stsp return client->repo_write;
224 b50a2b46 2022-12-29 stsp return NULL;
227 b50a2b46 2022-12-29 stsp static struct gotd_client *
228 b50a2b46 2022-12-29 stsp find_client_by_proc_fd(int fd)
230 b50a2b46 2022-12-29 stsp uint64_t slot;
232 b50a2b46 2022-12-29 stsp for (slot = 0; slot < nitems(gotd_clients); slot++) {
233 b50a2b46 2022-12-29 stsp struct gotd_client *c;
235 b50a2b46 2022-12-29 stsp STAILQ_FOREACH(c, &gotd_clients[slot], entry) {
236 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *proc = get_client_repo_proc(c);
237 b50a2b46 2022-12-29 stsp if (proc && proc->iev.ibuf.fd == fd)
239 5e25db14 2022-12-29 stsp if (c->auth && c->auth->iev.ibuf.fd == fd)
241 ae7c1b78 2023-01-10 stsp if (c->session && c->session->iev.ibuf.fd == fd)
246 13b2bc37 2022-10-23 stsp return NULL;
250 13b2bc37 2022-10-23 stsp client_is_reading(struct gotd_client *client)
252 13b2bc37 2022-10-23 stsp return client->repo_read != NULL;
256 13b2bc37 2022-10-23 stsp client_is_writing(struct gotd_client *client)
258 13b2bc37 2022-10-23 stsp return client->repo_write != NULL;
261 13b2bc37 2022-10-23 stsp static const struct got_error *
262 13b2bc37 2022-10-23 stsp ensure_client_is_not_writing(struct gotd_client *client)
264 13b2bc37 2022-10-23 stsp if (client_is_writing(client)) {
265 13b2bc37 2022-10-23 stsp return got_error_fmt(GOT_ERR_BAD_PACKET,
266 13b2bc37 2022-10-23 stsp "uid %d made a read-request but is writing to "
267 13b2bc37 2022-10-23 stsp "a repository", client->euid);
270 13b2bc37 2022-10-23 stsp return NULL;
273 13b2bc37 2022-10-23 stsp static const struct got_error *
274 13b2bc37 2022-10-23 stsp ensure_client_is_not_reading(struct gotd_client *client)
276 13b2bc37 2022-10-23 stsp if (client_is_reading(client)) {
277 13b2bc37 2022-10-23 stsp return got_error_fmt(GOT_ERR_BAD_PACKET,
278 13b2bc37 2022-10-23 stsp "uid %d made a write-request but is reading from "
279 13b2bc37 2022-10-23 stsp "a repository", client->euid);
282 13b2bc37 2022-10-23 stsp return NULL;
285 b50a2b46 2022-12-29 stsp static void
286 5e25db14 2022-12-29 stsp wait_for_child(pid_t child_pid)
289 b50a2b46 2022-12-29 stsp int status;
291 5e25db14 2022-12-29 stsp log_debug("waiting for child PID %ld to terminate",
292 5e25db14 2022-12-29 stsp (long)child_pid);
295 5e25db14 2022-12-29 stsp pid = waitpid(child_pid, &status, WNOHANG);
296 b50a2b46 2022-12-29 stsp if (pid == -1) {
297 b50a2b46 2022-12-29 stsp if (errno != EINTR && errno != ECHILD)
298 b50a2b46 2022-12-29 stsp fatal("wait");
299 b50a2b46 2022-12-29 stsp } else if (WIFSIGNALED(status)) {
300 b50a2b46 2022-12-29 stsp log_warnx("child PID %ld terminated; signal %d",
301 b50a2b46 2022-12-29 stsp (long)pid, WTERMSIG(status));
303 b50a2b46 2022-12-29 stsp } while (pid != -1 || (pid == -1 && errno == EINTR));
306 ae7c1b78 2023-01-10 stsp static void
307 ae7c1b78 2023-01-10 stsp proc_done(struct gotd_child_proc *proc)
309 ae7c1b78 2023-01-10 stsp event_del(&proc->iev.ev);
310 ae7c1b78 2023-01-10 stsp msgbuf_clear(&proc->iev.ibuf.w);
311 ae7c1b78 2023-01-10 stsp close(proc->iev.ibuf.fd);
312 ae7c1b78 2023-01-10 stsp kill_proc(proc, 0);
313 ae7c1b78 2023-01-10 stsp wait_for_child(proc->pid);
314 ae7c1b78 2023-01-10 stsp free(proc);
317 13b2bc37 2022-10-23 stsp static void
318 5e25db14 2022-12-29 stsp kill_auth_proc(struct gotd_client *client)
320 5e25db14 2022-12-29 stsp struct gotd_child_proc *proc;
322 5e25db14 2022-12-29 stsp if (client->auth == NULL)
325 5e25db14 2022-12-29 stsp proc = client->auth;
326 5e25db14 2022-12-29 stsp client->auth = NULL;
328 ae7c1b78 2023-01-10 stsp proc_done(proc);
331 5e25db14 2022-12-29 stsp static void
332 ae7c1b78 2023-01-10 stsp kill_session_proc(struct gotd_client *client)
334 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *proc;
336 ae7c1b78 2023-01-10 stsp if (client->session == NULL)
339 ae7c1b78 2023-01-10 stsp proc = client->session;
340 ae7c1b78 2023-01-10 stsp client->session = NULL;
342 ae7c1b78 2023-01-10 stsp proc_done(proc);
345 ae7c1b78 2023-01-10 stsp static void
346 13b2bc37 2022-10-23 stsp disconnect(struct gotd_client *client)
348 13b2bc37 2022-10-23 stsp struct gotd_imsg_disconnect idisconnect;
349 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *proc = get_client_repo_proc(client);
350 b50a2b46 2022-12-29 stsp struct gotd_child_proc *listen_proc = &gotd.listen_proc;
351 13b2bc37 2022-10-23 stsp uint64_t slot;
353 13b2bc37 2022-10-23 stsp log_debug("uid %d: disconnecting", client->euid);
355 5e25db14 2022-12-29 stsp kill_auth_proc(client);
356 ae7c1b78 2023-01-10 stsp kill_session_proc(client);
358 13b2bc37 2022-10-23 stsp idisconnect.client_id = client->id;
359 f1752522 2022-10-29 stsp if (proc) {
360 f1752522 2022-10-29 stsp if (gotd_imsg_compose_event(&proc->iev,
361 f1752522 2022-10-29 stsp GOTD_IMSG_DISCONNECT, PROC_GOTD, -1,
362 f1752522 2022-10-29 stsp &idisconnect, sizeof(idisconnect)) == -1)
363 f1752522 2022-10-29 stsp log_warn("imsg compose DISCONNECT");
365 b50a2b46 2022-12-29 stsp msgbuf_clear(&proc->iev.ibuf.w);
366 b50a2b46 2022-12-29 stsp close(proc->iev.ibuf.fd);
367 b50a2b46 2022-12-29 stsp kill_proc(proc, 0);
368 5e25db14 2022-12-29 stsp wait_for_child(proc->pid);
369 b50a2b46 2022-12-29 stsp free(proc);
370 b50a2b46 2022-12-29 stsp proc = NULL;
373 d93ecf7d 2022-12-14 stsp if (gotd_imsg_compose_event(&listen_proc->iev,
374 d93ecf7d 2022-12-14 stsp GOTD_IMSG_DISCONNECT, PROC_GOTD, -1,
375 d93ecf7d 2022-12-14 stsp &idisconnect, sizeof(idisconnect)) == -1)
376 d93ecf7d 2022-12-14 stsp log_warn("imsg compose DISCONNECT");
378 13b2bc37 2022-10-23 stsp slot = client_hash(client->id) % nitems(gotd_clients);
379 13b2bc37 2022-10-23 stsp STAILQ_REMOVE(&gotd_clients[slot], client, gotd_client, entry);
380 13b2bc37 2022-10-23 stsp imsg_clear(&client->iev.ibuf);
381 13b2bc37 2022-10-23 stsp event_del(&client->iev.ev);
382 13b2bc37 2022-10-23 stsp evtimer_del(&client->tmo);
383 ae7c1b78 2023-01-10 stsp if (client->fd != -1)
384 ae7c1b78 2023-01-10 stsp close(client->fd);
385 ae7c1b78 2023-01-10 stsp else if (client->iev.ibuf.fd != -1)
386 ae7c1b78 2023-01-10 stsp close(client->iev.ibuf.fd);
387 13b2bc37 2022-10-23 stsp if (client->delta_cache_fd != -1)
388 13b2bc37 2022-10-23 stsp close(client->delta_cache_fd);
389 13b2bc37 2022-10-23 stsp if (client->packfile_path) {
390 13b2bc37 2022-10-23 stsp if (unlink(client->packfile_path) == -1 && errno != ENOENT)
391 13b2bc37 2022-10-23 stsp log_warn("unlink %s: ", client->packfile_path);
392 13b2bc37 2022-10-23 stsp free(client->packfile_path);
394 13b2bc37 2022-10-23 stsp if (client->packidx_path) {
395 13b2bc37 2022-10-23 stsp if (unlink(client->packidx_path) == -1 && errno != ENOENT)
396 13b2bc37 2022-10-23 stsp log_warn("unlink %s: ", client->packidx_path);
397 13b2bc37 2022-10-23 stsp free(client->packidx_path);
399 13b2bc37 2022-10-23 stsp free(client->capabilities);
400 13b2bc37 2022-10-23 stsp free(client);
401 13b2bc37 2022-10-23 stsp client_cnt--;
404 13b2bc37 2022-10-23 stsp static void
405 13b2bc37 2022-10-23 stsp disconnect_on_error(struct gotd_client *client, const struct got_error *err)
407 13b2bc37 2022-10-23 stsp struct imsgbuf ibuf;
409 13b2bc37 2022-10-23 stsp log_warnx("uid %d: %s", client->euid, err->msg);
410 ae7c1b78 2023-01-10 stsp if (err->code != GOT_ERR_EOF && client->fd != -1) {
411 13b2bc37 2022-10-23 stsp imsg_init(&ibuf, client->fd);
412 13b2bc37 2022-10-23 stsp gotd_imsg_send_error(&ibuf, 0, PROC_GOTD, err);
413 13b2bc37 2022-10-23 stsp imsg_clear(&ibuf);
415 13b2bc37 2022-10-23 stsp disconnect(client);
418 f1752522 2022-10-29 stsp static const struct got_error *
419 f1752522 2022-10-29 stsp send_repo_info(struct gotd_imsgev *iev, struct gotd_repo *repo)
421 f1752522 2022-10-29 stsp const struct got_error *err = NULL;
422 f1752522 2022-10-29 stsp struct gotd_imsg_info_repo irepo;
424 f1752522 2022-10-29 stsp memset(&irepo, 0, sizeof(irepo));
426 f1752522 2022-10-29 stsp if (strlcpy(irepo.repo_name, repo->name, sizeof(irepo.repo_name))
427 f1752522 2022-10-29 stsp >= sizeof(irepo.repo_name))
428 f1752522 2022-10-29 stsp return got_error_msg(GOT_ERR_NO_SPACE, "repo name too long");
429 f1752522 2022-10-29 stsp if (strlcpy(irepo.repo_path, repo->path, sizeof(irepo.repo_path))
430 f1752522 2022-10-29 stsp >= sizeof(irepo.repo_path))
431 f1752522 2022-10-29 stsp return got_error_msg(GOT_ERR_NO_SPACE, "repo path too long");
433 f1752522 2022-10-29 stsp if (gotd_imsg_compose_event(iev, GOTD_IMSG_INFO_REPO, PROC_GOTD, -1,
434 f1752522 2022-10-29 stsp &irepo, sizeof(irepo)) == -1) {
435 f1752522 2022-10-29 stsp err = got_error_from_errno("imsg compose INFO_REPO");
437 f1752522 2022-10-29 stsp return err;
440 f1752522 2022-10-29 stsp return NULL;
443 f1752522 2022-10-29 stsp static const struct got_error *
444 f1752522 2022-10-29 stsp send_capability(struct gotd_client_capability *capa, struct gotd_imsgev* iev)
446 f1752522 2022-10-29 stsp const struct got_error *err = NULL;
447 f1752522 2022-10-29 stsp struct gotd_imsg_capability icapa;
448 f1752522 2022-10-29 stsp size_t len;
449 f1752522 2022-10-29 stsp struct ibuf *wbuf;
451 f1752522 2022-10-29 stsp memset(&icapa, 0, sizeof(icapa));
453 f1752522 2022-10-29 stsp icapa.key_len = strlen(capa->key);
454 f1752522 2022-10-29 stsp len = sizeof(icapa) + icapa.key_len;
455 f1752522 2022-10-29 stsp if (capa->value) {
456 f1752522 2022-10-29 stsp icapa.value_len = strlen(capa->value);
457 f1752522 2022-10-29 stsp len += icapa.value_len;
460 f1752522 2022-10-29 stsp wbuf = imsg_create(&iev->ibuf, GOTD_IMSG_CAPABILITY, 0, 0, len);
461 f1752522 2022-10-29 stsp if (wbuf == NULL) {
462 f1752522 2022-10-29 stsp err = got_error_from_errno("imsg_create CAPABILITY");
463 f1752522 2022-10-29 stsp return err;
466 f1752522 2022-10-29 stsp if (imsg_add(wbuf, &icapa, sizeof(icapa)) == -1)
467 f1752522 2022-10-29 stsp return got_error_from_errno("imsg_add CAPABILITY");
468 f1752522 2022-10-29 stsp if (imsg_add(wbuf, capa->key, icapa.key_len) == -1)
469 f1752522 2022-10-29 stsp return got_error_from_errno("imsg_add CAPABILITY");
470 f1752522 2022-10-29 stsp if (capa->value) {
471 f1752522 2022-10-29 stsp if (imsg_add(wbuf, capa->value, icapa.value_len) == -1)
472 f1752522 2022-10-29 stsp return got_error_from_errno("imsg_add CAPABILITY");
475 f1752522 2022-10-29 stsp wbuf->fd = -1;
476 f1752522 2022-10-29 stsp imsg_close(&iev->ibuf, wbuf);
478 f1752522 2022-10-29 stsp gotd_imsg_event_add(iev);
480 f1752522 2022-10-29 stsp return NULL;
483 f1752522 2022-10-29 stsp static const struct got_error *
484 f1752522 2022-10-29 stsp send_client_info(struct gotd_imsgev *iev, struct gotd_client *client)
486 f1752522 2022-10-29 stsp const struct got_error *err = NULL;
487 f1752522 2022-10-29 stsp struct gotd_imsg_info_client iclient;
488 f1752522 2022-10-29 stsp struct gotd_child_proc *proc;
491 f1752522 2022-10-29 stsp memset(&iclient, 0, sizeof(iclient));
492 f1752522 2022-10-29 stsp iclient.euid = client->euid;
493 f1752522 2022-10-29 stsp iclient.egid = client->egid;
495 ae7c1b78 2023-01-10 stsp proc = get_client_repo_proc(client);
496 f1752522 2022-10-29 stsp if (proc) {
497 eec68231 2022-12-14 stsp if (strlcpy(iclient.repo_name, proc->repo_path,
498 f1752522 2022-10-29 stsp sizeof(iclient.repo_name)) >= sizeof(iclient.repo_name)) {
499 f1752522 2022-10-29 stsp return got_error_msg(GOT_ERR_NO_SPACE,
500 f1752522 2022-10-29 stsp "repo name too long");
502 f1752522 2022-10-29 stsp if (client_is_writing(client))
503 f1752522 2022-10-29 stsp iclient.is_writing = 1;
505 ae7c1b78 2023-01-10 stsp iclient.repo_child_pid = proc->pid;
508 f1752522 2022-10-29 stsp iclient.state = client->state;
509 ae7c1b78 2023-01-10 stsp if (client->session)
510 ae7c1b78 2023-01-10 stsp iclient.session_child_pid = client->session->pid;
511 f1752522 2022-10-29 stsp iclient.ncapabilities = client->ncapabilities;
513 f1752522 2022-10-29 stsp if (gotd_imsg_compose_event(iev, GOTD_IMSG_INFO_CLIENT, PROC_GOTD, -1,
514 f1752522 2022-10-29 stsp &iclient, sizeof(iclient)) == -1) {
515 f1752522 2022-10-29 stsp err = got_error_from_errno("imsg compose INFO_CLIENT");
517 f1752522 2022-10-29 stsp return err;
520 f1752522 2022-10-29 stsp for (i = 0; i < client->ncapabilities; i++) {
521 f1752522 2022-10-29 stsp struct gotd_client_capability *capa;
522 f1752522 2022-10-29 stsp capa = &client->capabilities[i];
523 f1752522 2022-10-29 stsp err = send_capability(capa, iev);
525 f1752522 2022-10-29 stsp return err;
528 f1752522 2022-10-29 stsp return NULL;
531 f1752522 2022-10-29 stsp static const struct got_error *
532 f1752522 2022-10-29 stsp send_info(struct gotd_client *client)
534 f1752522 2022-10-29 stsp const struct got_error *err = NULL;
535 f1752522 2022-10-29 stsp struct gotd_imsg_info info;
536 f1752522 2022-10-29 stsp uint64_t slot;
537 f1752522 2022-10-29 stsp struct gotd_repo *repo;
539 78433331 2023-01-04 stsp if (client->euid != 0)
540 78433331 2023-01-04 stsp return got_error_set_errno(EPERM, "info");
542 f1752522 2022-10-29 stsp info.pid = gotd.pid;
543 f1752522 2022-10-29 stsp info.verbosity = gotd.verbosity;
544 f1752522 2022-10-29 stsp info.nrepos = gotd.nrepos;
545 f1752522 2022-10-29 stsp info.nclients = client_cnt - 1;
547 f1752522 2022-10-29 stsp if (gotd_imsg_compose_event(&client->iev, GOTD_IMSG_INFO, PROC_GOTD, -1,
548 f1752522 2022-10-29 stsp &info, sizeof(info)) == -1) {
549 f1752522 2022-10-29 stsp err = got_error_from_errno("imsg compose INFO");
551 f1752522 2022-10-29 stsp return err;
554 f1752522 2022-10-29 stsp TAILQ_FOREACH(repo, &gotd.repos, entry) {
555 f1752522 2022-10-29 stsp err = send_repo_info(&client->iev, repo);
557 f1752522 2022-10-29 stsp return err;
560 f1752522 2022-10-29 stsp for (slot = 0; slot < nitems(gotd_clients); slot++) {
561 f1752522 2022-10-29 stsp struct gotd_client *c;
562 f1752522 2022-10-29 stsp STAILQ_FOREACH(c, &gotd_clients[slot], entry) {
563 f1752522 2022-10-29 stsp if (c->id == client->id)
565 f1752522 2022-10-29 stsp err = send_client_info(&client->iev, c);
567 f1752522 2022-10-29 stsp return err;
571 f1752522 2022-10-29 stsp return NULL;
574 f1752522 2022-10-29 stsp static const struct got_error *
575 f1752522 2022-10-29 stsp stop_gotd(struct gotd_client *client)
578 f1752522 2022-10-29 stsp if (client->euid != 0)
579 f1752522 2022-10-29 stsp return got_error_set_errno(EPERM, "stop");
581 f1752522 2022-10-29 stsp gotd_shutdown();
582 f1752522 2022-10-29 stsp /* NOTREACHED */
583 0ccf3acb 2022-11-16 stsp return NULL;
586 0ccf3acb 2022-11-16 stsp static struct gotd_repo *
587 0ccf3acb 2022-11-16 stsp find_repo_by_name(const char *repo_name)
589 0ccf3acb 2022-11-16 stsp struct gotd_repo *repo;
590 0ccf3acb 2022-11-16 stsp size_t namelen;
592 0ccf3acb 2022-11-16 stsp TAILQ_FOREACH(repo, &gotd.repos, entry) {
593 0ccf3acb 2022-11-16 stsp namelen = strlen(repo->name);
594 0ccf3acb 2022-11-16 stsp if (strncmp(repo->name, repo_name, namelen) != 0)
596 0ccf3acb 2022-11-16 stsp if (repo_name[namelen] == '\0' ||
597 0ccf3acb 2022-11-16 stsp strcmp(&repo_name[namelen], ".git") == 0)
598 0ccf3acb 2022-11-16 stsp return repo;
601 13b2bc37 2022-10-23 stsp return NULL;
604 13b2bc37 2022-10-23 stsp static const struct got_error *
605 ae7c1b78 2023-01-10 stsp start_client_authentication(struct gotd_client *client, struct imsg *imsg)
607 13b2bc37 2022-10-23 stsp const struct got_error *err;
608 13b2bc37 2022-10-23 stsp struct gotd_imsg_list_refs ireq;
609 0ccf3acb 2022-11-16 stsp struct gotd_repo *repo = NULL;
610 13b2bc37 2022-10-23 stsp size_t datalen;
612 13b2bc37 2022-10-23 stsp log_debug("list-refs request from uid %d", client->euid);
614 ae7c1b78 2023-01-10 stsp if (client->state != GOTD_STATE_EXPECT_LIST_REFS)
615 ae7c1b78 2023-01-10 stsp return got_error_msg(GOT_ERR_BAD_REQUEST,
616 ae7c1b78 2023-01-10 stsp "unexpected list-refs request received");
618 13b2bc37 2022-10-23 stsp datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
619 13b2bc37 2022-10-23 stsp if (datalen != sizeof(ireq))
620 13b2bc37 2022-10-23 stsp return got_error(GOT_ERR_PRIVSEP_LEN);
622 13b2bc37 2022-10-23 stsp memcpy(&ireq, imsg->data, datalen);
624 13b2bc37 2022-10-23 stsp if (ireq.client_is_reading) {
625 13b2bc37 2022-10-23 stsp err = ensure_client_is_not_writing(client);
627 13b2bc37 2022-10-23 stsp return err;
628 0ccf3acb 2022-11-16 stsp repo = find_repo_by_name(ireq.repo_name);
629 0ccf3acb 2022-11-16 stsp if (repo == NULL)
630 0ccf3acb 2022-11-16 stsp return got_error(GOT_ERR_NOT_GIT_REPO);
631 5e25db14 2022-12-29 stsp err = start_auth_child(client, GOTD_AUTH_READ, repo,
632 b50a2b46 2022-12-29 stsp gotd.argv0, gotd.confpath, gotd.daemonize,
633 b50a2b46 2022-12-29 stsp gotd.verbosity);
635 b50a2b46 2022-12-29 stsp return err;
637 13b2bc37 2022-10-23 stsp err = ensure_client_is_not_reading(client);
639 0ccf3acb 2022-11-16 stsp return err;
640 0ccf3acb 2022-11-16 stsp repo = find_repo_by_name(ireq.repo_name);
641 0ccf3acb 2022-11-16 stsp if (repo == NULL)
642 0ccf3acb 2022-11-16 stsp return got_error(GOT_ERR_NOT_GIT_REPO);
643 5e25db14 2022-12-29 stsp err = start_auth_child(client,
644 5e25db14 2022-12-29 stsp GOTD_AUTH_READ | GOTD_AUTH_WRITE,
645 5e25db14 2022-12-29 stsp repo, gotd.argv0, gotd.confpath, gotd.daemonize,
646 b50a2b46 2022-12-29 stsp gotd.verbosity);
648 b50a2b46 2022-12-29 stsp return err;
651 ae7c1b78 2023-01-10 stsp evtimer_add(&client->tmo, &auth_timeout);
653 ae7c1b78 2023-01-10 stsp /* Flow continues upon authentication successs/failure or timeout. */
654 13b2bc37 2022-10-23 stsp return NULL;
657 13b2bc37 2022-10-23 stsp static void
658 13b2bc37 2022-10-23 stsp gotd_request(int fd, short events, void *arg)
660 13b2bc37 2022-10-23 stsp struct gotd_imsgev *iev = arg;
661 13b2bc37 2022-10-23 stsp struct imsgbuf *ibuf = &iev->ibuf;
662 13b2bc37 2022-10-23 stsp struct gotd_client *client = iev->handler_arg;
663 13b2bc37 2022-10-23 stsp const struct got_error *err = NULL;
664 13b2bc37 2022-10-23 stsp struct imsg imsg;
667 13b2bc37 2022-10-23 stsp if (events & EV_WRITE) {
668 13b2bc37 2022-10-23 stsp while (ibuf->w.queued) {
669 13b2bc37 2022-10-23 stsp n = msgbuf_write(&ibuf->w);
670 13b2bc37 2022-10-23 stsp if (n == -1 && errno == EPIPE) {
672 13b2bc37 2022-10-23 stsp * The client has closed its socket.
673 13b2bc37 2022-10-23 stsp * This can happen when Git clients are
674 13b2bc37 2022-10-23 stsp * done sending pack file data.
676 13b2bc37 2022-10-23 stsp msgbuf_clear(&ibuf->w);
678 13b2bc37 2022-10-23 stsp } else if (n == -1 && errno != EAGAIN) {
679 13b2bc37 2022-10-23 stsp err = got_error_from_errno("imsg_flush");
680 13b2bc37 2022-10-23 stsp disconnect_on_error(client, err);
683 13b2bc37 2022-10-23 stsp if (n == 0) {
684 13b2bc37 2022-10-23 stsp /* Connection closed. */
685 13b2bc37 2022-10-23 stsp err = got_error(GOT_ERR_EOF);
686 13b2bc37 2022-10-23 stsp disconnect_on_error(client, err);
691 f1752522 2022-10-29 stsp /* Disconnect gotctl(8) now that messages have been sent. */
692 f1752522 2022-10-29 stsp if (!client_is_reading(client) && !client_is_writing(client)) {
693 f1752522 2022-10-29 stsp disconnect(client);
698 13b2bc37 2022-10-23 stsp if ((events & EV_READ) == 0)
701 13b2bc37 2022-10-23 stsp memset(&imsg, 0, sizeof(imsg));
703 13b2bc37 2022-10-23 stsp while (err == NULL) {
704 13b2bc37 2022-10-23 stsp err = gotd_imsg_recv(&imsg, ibuf, 0);
706 13b2bc37 2022-10-23 stsp if (err->code == GOT_ERR_PRIVSEP_READ)
707 13b2bc37 2022-10-23 stsp err = NULL;
711 13b2bc37 2022-10-23 stsp evtimer_del(&client->tmo);
713 13b2bc37 2022-10-23 stsp switch (imsg.hdr.type) {
714 f1752522 2022-10-29 stsp case GOTD_IMSG_INFO:
715 f1752522 2022-10-29 stsp err = send_info(client);
717 f1752522 2022-10-29 stsp case GOTD_IMSG_STOP:
718 f1752522 2022-10-29 stsp err = stop_gotd(client);
720 13b2bc37 2022-10-23 stsp case GOTD_IMSG_LIST_REFS:
721 ae7c1b78 2023-01-10 stsp err = start_client_authentication(client, &imsg);
724 ae7c1b78 2023-01-10 stsp log_debug("unexpected imsg %d", imsg.hdr.type);
725 13b2bc37 2022-10-23 stsp err = got_error(GOT_ERR_PRIVSEP_MSG);
729 13b2bc37 2022-10-23 stsp imsg_free(&imsg);
733 13b2bc37 2022-10-23 stsp if (err->code != GOT_ERR_EOF ||
734 13b2bc37 2022-10-23 stsp client->state != GOTD_STATE_EXPECT_PACKFILE)
735 13b2bc37 2022-10-23 stsp disconnect_on_error(client, err);
737 13b2bc37 2022-10-23 stsp gotd_imsg_event_add(&client->iev);
741 13b2bc37 2022-10-23 stsp static void
742 ae7c1b78 2023-01-10 stsp gotd_auth_timeout(int fd, short events, void *arg)
744 13b2bc37 2022-10-23 stsp struct gotd_client *client = arg;
746 ae7c1b78 2023-01-10 stsp log_debug("disconnecting uid %d due to authentication timeout",
747 ae7c1b78 2023-01-10 stsp client->euid);
748 13b2bc37 2022-10-23 stsp disconnect(client);
751 d93ecf7d 2022-12-14 stsp static const struct got_error *
752 d93ecf7d 2022-12-14 stsp recv_connect(uint32_t *client_id, struct imsg *imsg)
754 d93ecf7d 2022-12-14 stsp const struct got_error *err = NULL;
755 d93ecf7d 2022-12-14 stsp struct gotd_imsg_connect iconnect;
756 d93ecf7d 2022-12-14 stsp size_t datalen;
757 13b2bc37 2022-10-23 stsp int s = -1;
758 13b2bc37 2022-10-23 stsp struct gotd_client *client = NULL;
760 d93ecf7d 2022-12-14 stsp *client_id = 0;
762 d93ecf7d 2022-12-14 stsp datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
763 d93ecf7d 2022-12-14 stsp if (datalen != sizeof(iconnect))
764 d93ecf7d 2022-12-14 stsp return got_error(GOT_ERR_PRIVSEP_LEN);
765 d93ecf7d 2022-12-14 stsp memcpy(&iconnect, imsg->data, sizeof(iconnect));
767 d93ecf7d 2022-12-14 stsp s = imsg->fd;
768 13b2bc37 2022-10-23 stsp if (s == -1) {
769 d93ecf7d 2022-12-14 stsp err = got_error(GOT_ERR_PRIVSEP_NO_FD);
773 d93ecf7d 2022-12-14 stsp if (find_client(iconnect.client_id)) {
774 d93ecf7d 2022-12-14 stsp err = got_error_msg(GOT_ERR_CLIENT_ID, "duplicate client ID");
778 13b2bc37 2022-10-23 stsp client = calloc(1, sizeof(*client));
779 13b2bc37 2022-10-23 stsp if (client == NULL) {
780 d93ecf7d 2022-12-14 stsp err = got_error_from_errno("calloc");
784 d93ecf7d 2022-12-14 stsp *client_id = iconnect.client_id;
786 13b2bc37 2022-10-23 stsp client->state = GOTD_STATE_EXPECT_LIST_REFS;
787 d93ecf7d 2022-12-14 stsp client->id = iconnect.client_id;
788 13b2bc37 2022-10-23 stsp client->fd = s;
790 13b2bc37 2022-10-23 stsp client->delta_cache_fd = -1;
791 365cf0f3 2022-12-29 stsp /* The auth process will verify UID/GID for us. */
792 365cf0f3 2022-12-29 stsp client->euid = iconnect.euid;
793 365cf0f3 2022-12-29 stsp client->egid = iconnect.egid;
795 13b2bc37 2022-10-23 stsp imsg_init(&client->iev.ibuf, client->fd);
796 13b2bc37 2022-10-23 stsp client->iev.handler = gotd_request;
797 13b2bc37 2022-10-23 stsp client->iev.events = EV_READ;
798 13b2bc37 2022-10-23 stsp client->iev.handler_arg = client;
800 13b2bc37 2022-10-23 stsp event_set(&client->iev.ev, client->fd, EV_READ, gotd_request,
801 13b2bc37 2022-10-23 stsp &client->iev);
802 13b2bc37 2022-10-23 stsp gotd_imsg_event_add(&client->iev);
804 ae7c1b78 2023-01-10 stsp evtimer_set(&client->tmo, gotd_auth_timeout, client);
806 13b2bc37 2022-10-23 stsp add_client(client);
807 13b2bc37 2022-10-23 stsp log_debug("%s: new client uid %d connected on fd %d", __func__,
808 13b2bc37 2022-10-23 stsp client->euid, client->fd);
811 b50a2b46 2022-12-29 stsp struct gotd_child_proc *listen_proc = &gotd.listen_proc;
812 d93ecf7d 2022-12-14 stsp struct gotd_imsg_disconnect idisconnect;
814 d93ecf7d 2022-12-14 stsp idisconnect.client_id = client->id;
815 d93ecf7d 2022-12-14 stsp if (gotd_imsg_compose_event(&listen_proc->iev,
816 d93ecf7d 2022-12-14 stsp GOTD_IMSG_DISCONNECT, PROC_GOTD, -1,
817 d93ecf7d 2022-12-14 stsp &idisconnect, sizeof(idisconnect)) == -1)
818 d93ecf7d 2022-12-14 stsp log_warn("imsg compose DISCONNECT");
820 d93ecf7d 2022-12-14 stsp if (s != -1)
824 d93ecf7d 2022-12-14 stsp return err;
827 13b2bc37 2022-10-23 stsp static const char *gotd_proc_names[PROC_MAX] = {
832 13b2bc37 2022-10-23 stsp "repo_read",
833 13b2bc37 2022-10-23 stsp "repo_write"
836 13b2bc37 2022-10-23 stsp static void
837 13b2bc37 2022-10-23 stsp kill_proc(struct gotd_child_proc *proc, int fatal)
839 13b2bc37 2022-10-23 stsp if (fatal) {
840 13b2bc37 2022-10-23 stsp log_warnx("sending SIGKILL to PID %d", proc->pid);
841 13b2bc37 2022-10-23 stsp kill(proc->pid, SIGKILL);
843 13b2bc37 2022-10-23 stsp kill(proc->pid, SIGTERM);
846 13b2bc37 2022-10-23 stsp static void
847 13b2bc37 2022-10-23 stsp gotd_shutdown(void)
849 13b2bc37 2022-10-23 stsp struct gotd_child_proc *proc;
850 b50a2b46 2022-12-29 stsp uint64_t slot;
852 ae7c1b78 2023-01-10 stsp log_debug("shutting down");
853 b50a2b46 2022-12-29 stsp for (slot = 0; slot < nitems(gotd_clients); slot++) {
854 b50a2b46 2022-12-29 stsp struct gotd_client *c, *tmp;
856 b50a2b46 2022-12-29 stsp STAILQ_FOREACH_SAFE(c, &gotd_clients[slot], entry, tmp)
857 b50a2b46 2022-12-29 stsp disconnect(c);
860 b50a2b46 2022-12-29 stsp proc = &gotd.listen_proc;
861 b50a2b46 2022-12-29 stsp msgbuf_clear(&proc->iev.ibuf.w);
862 b50a2b46 2022-12-29 stsp close(proc->iev.ibuf.fd);
863 b50a2b46 2022-12-29 stsp kill_proc(proc, 0);
864 5e25db14 2022-12-29 stsp wait_for_child(proc->pid);
866 13b2bc37 2022-10-23 stsp log_info("terminating");
871 13b2bc37 2022-10-23 stsp gotd_sighdlr(int sig, short event, void *arg)
874 13b2bc37 2022-10-23 stsp * Normal signal handler rules don't apply because libevent
875 13b2bc37 2022-10-23 stsp * decouples for us.
878 13b2bc37 2022-10-23 stsp switch (sig) {
879 13b2bc37 2022-10-23 stsp case SIGHUP:
880 13b2bc37 2022-10-23 stsp log_info("%s: ignoring SIGHUP", __func__);
882 13b2bc37 2022-10-23 stsp case SIGUSR1:
883 13b2bc37 2022-10-23 stsp log_info("%s: ignoring SIGUSR1", __func__);
885 13b2bc37 2022-10-23 stsp case SIGTERM:
886 13b2bc37 2022-10-23 stsp case SIGINT:
887 13b2bc37 2022-10-23 stsp gotd_shutdown();
890 13b2bc37 2022-10-23 stsp fatalx("unexpected signal");
894 13b2bc37 2022-10-23 stsp static const struct got_error *
895 13b2bc37 2022-10-23 stsp ensure_proc_is_reading(struct gotd_client *client,
896 13b2bc37 2022-10-23 stsp struct gotd_child_proc *proc)
898 13b2bc37 2022-10-23 stsp if (!client_is_reading(client)) {
899 13b2bc37 2022-10-23 stsp kill_proc(proc, 1);
900 13b2bc37 2022-10-23 stsp return got_error_fmt(GOT_ERR_BAD_PACKET,
901 13b2bc37 2022-10-23 stsp "PID %d handled a read-request for uid %d but this "
902 13b2bc37 2022-10-23 stsp "user is not reading from a repository", proc->pid,
903 13b2bc37 2022-10-23 stsp client->euid);
906 13b2bc37 2022-10-23 stsp return NULL;
909 13b2bc37 2022-10-23 stsp static const struct got_error *
910 13b2bc37 2022-10-23 stsp ensure_proc_is_writing(struct gotd_client *client,
911 13b2bc37 2022-10-23 stsp struct gotd_child_proc *proc)
913 13b2bc37 2022-10-23 stsp if (!client_is_writing(client)) {
914 13b2bc37 2022-10-23 stsp kill_proc(proc, 1);
915 13b2bc37 2022-10-23 stsp return got_error_fmt(GOT_ERR_BAD_PACKET,
916 13b2bc37 2022-10-23 stsp "PID %d handled a write-request for uid %d but this "
917 13b2bc37 2022-10-23 stsp "user is not writing to a repository", proc->pid,
918 13b2bc37 2022-10-23 stsp client->euid);
921 13b2bc37 2022-10-23 stsp return NULL;
925 13b2bc37 2022-10-23 stsp verify_imsg_src(struct gotd_client *client, struct gotd_child_proc *proc,
926 13b2bc37 2022-10-23 stsp struct imsg *imsg)
928 13b2bc37 2022-10-23 stsp const struct got_error *err;
929 13b2bc37 2022-10-23 stsp struct gotd_child_proc *client_proc;
930 13b2bc37 2022-10-23 stsp int ret = 0;
932 d93ecf7d 2022-12-14 stsp if (proc->type == PROC_REPO_READ || proc->type == PROC_REPO_WRITE) {
933 ae7c1b78 2023-01-10 stsp client_proc = get_client_repo_proc(client);
934 d93ecf7d 2022-12-14 stsp if (client_proc == NULL)
935 d93ecf7d 2022-12-14 stsp fatalx("no process found for uid %d", client->euid);
936 d93ecf7d 2022-12-14 stsp if (proc->pid != client_proc->pid) {
937 d93ecf7d 2022-12-14 stsp kill_proc(proc, 1);
938 d93ecf7d 2022-12-14 stsp log_warnx("received message from PID %d for uid %d, "
939 d93ecf7d 2022-12-14 stsp "while PID %d is the process serving this user",
940 d93ecf7d 2022-12-14 stsp proc->pid, client->euid, client_proc->pid);
944 ae7c1b78 2023-01-10 stsp if (proc->type == PROC_SESSION) {
945 ae7c1b78 2023-01-10 stsp if (client->session == NULL) {
946 ae7c1b78 2023-01-10 stsp log_warnx("no session found for uid %d", client->euid);
949 ae7c1b78 2023-01-10 stsp if (proc->pid != client->session->pid) {
950 ae7c1b78 2023-01-10 stsp kill_proc(proc, 1);
951 ae7c1b78 2023-01-10 stsp log_warnx("received message from PID %d for uid %d, "
952 ae7c1b78 2023-01-10 stsp "while PID %d is the process serving this user",
953 ae7c1b78 2023-01-10 stsp proc->pid, client->euid, client->session->pid);
958 13b2bc37 2022-10-23 stsp switch (imsg->hdr.type) {
959 13b2bc37 2022-10-23 stsp case GOTD_IMSG_ERROR:
962 d93ecf7d 2022-12-14 stsp case GOTD_IMSG_CONNECT:
963 d93ecf7d 2022-12-14 stsp if (proc->type != PROC_LISTEN) {
964 d93ecf7d 2022-12-14 stsp err = got_error_fmt(GOT_ERR_BAD_PACKET,
965 d93ecf7d 2022-12-14 stsp "new connection for uid %d from PID %d "
966 d93ecf7d 2022-12-14 stsp "which is not the listen process",
967 5e25db14 2022-12-29 stsp proc->pid, client->euid);
971 5e25db14 2022-12-29 stsp case GOTD_IMSG_ACCESS_GRANTED:
972 5e25db14 2022-12-29 stsp if (proc->type != PROC_AUTH) {
973 5e25db14 2022-12-29 stsp err = got_error_fmt(GOT_ERR_BAD_PACKET,
974 5e25db14 2022-12-29 stsp "authentication of uid %d from PID %d "
975 5e25db14 2022-12-29 stsp "which is not the auth process",
976 d93ecf7d 2022-12-14 stsp proc->pid, client->euid);
980 ae7c1b78 2023-01-10 stsp case GOTD_IMSG_CLIENT_SESSION_READY:
981 ae7c1b78 2023-01-10 stsp if (proc->type != PROC_SESSION) {
982 ae7c1b78 2023-01-10 stsp err = got_error_fmt(GOT_ERR_BAD_PACKET,
983 ae7c1b78 2023-01-10 stsp "unexpected \"ready\" signal from PID %d",
984 ae7c1b78 2023-01-10 stsp proc->pid);
988 b50a2b46 2022-12-29 stsp case GOTD_IMSG_REPO_CHILD_READY:
989 b50a2b46 2022-12-29 stsp if (proc->type != PROC_REPO_READ &&
990 b50a2b46 2022-12-29 stsp proc->type != PROC_REPO_WRITE) {
991 b50a2b46 2022-12-29 stsp err = got_error_fmt(GOT_ERR_BAD_PACKET,
992 b50a2b46 2022-12-29 stsp "unexpected \"ready\" signal from PID %d",
993 b50a2b46 2022-12-29 stsp proc->pid);
997 13b2bc37 2022-10-23 stsp case GOTD_IMSG_PACKFILE_DONE:
998 13b2bc37 2022-10-23 stsp err = ensure_proc_is_reading(client, proc);
1000 13b2bc37 2022-10-23 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1004 13b2bc37 2022-10-23 stsp case GOTD_IMSG_PACKFILE_INSTALL:
1005 13b2bc37 2022-10-23 stsp case GOTD_IMSG_REF_UPDATES_START:
1006 13b2bc37 2022-10-23 stsp case GOTD_IMSG_REF_UPDATE:
1007 13b2bc37 2022-10-23 stsp err = ensure_proc_is_writing(client, proc);
1009 13b2bc37 2022-10-23 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1014 13b2bc37 2022-10-23 stsp log_debug("%s: unexpected imsg %d", __func__, imsg->hdr.type);
1018 13b2bc37 2022-10-23 stsp return ret;
1021 13b2bc37 2022-10-23 stsp static const struct got_error *
1022 ae7c1b78 2023-01-10 stsp connect_repo_child(struct gotd_client *client,
1023 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *repo_proc)
1025 b50a2b46 2022-12-29 stsp static const struct got_error *err;
1026 ae7c1b78 2023-01-10 stsp struct gotd_imsgev *session_iev = &client->session->iev;
1027 ae7c1b78 2023-01-10 stsp struct gotd_imsg_connect_repo_child ireq;
1028 ae7c1b78 2023-01-10 stsp int pipe[2];
1030 ae7c1b78 2023-01-10 stsp if (client->state != GOTD_STATE_EXPECT_LIST_REFS)
1031 ae7c1b78 2023-01-10 stsp return got_error_msg(GOT_ERR_BAD_REQUEST,
1032 ae7c1b78 2023-01-10 stsp "unexpected repo child ready signal received");
1034 ae7c1b78 2023-01-10 stsp if (socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK,
1035 ae7c1b78 2023-01-10 stsp PF_UNSPEC, pipe) == -1)
1036 ae7c1b78 2023-01-10 stsp fatal("socketpair");
1038 ae7c1b78 2023-01-10 stsp memset(&ireq, 0, sizeof(ireq));
1039 ae7c1b78 2023-01-10 stsp ireq.client_id = client->id;
1040 ae7c1b78 2023-01-10 stsp ireq.proc_id = repo_proc->type;
1042 ae7c1b78 2023-01-10 stsp /* Pass repo child pipe to session child process. */
1043 ae7c1b78 2023-01-10 stsp if (gotd_imsg_compose_event(session_iev, GOTD_IMSG_CONNECT_REPO_CHILD,
1044 ae7c1b78 2023-01-10 stsp PROC_GOTD, pipe[0], &ireq, sizeof(ireq)) == -1) {
1045 ae7c1b78 2023-01-10 stsp err = got_error_from_errno("imsg compose CONNECT_REPO_CHILD");
1046 ae7c1b78 2023-01-10 stsp close(pipe[0]);
1047 ae7c1b78 2023-01-10 stsp close(pipe[1]);
1048 ae7c1b78 2023-01-10 stsp return err;
1051 ae7c1b78 2023-01-10 stsp /* Pass session child pipe to repo child process. */
1052 ae7c1b78 2023-01-10 stsp if (gotd_imsg_compose_event(&repo_proc->iev,
1053 ae7c1b78 2023-01-10 stsp GOTD_IMSG_CONNECT_REPO_CHILD, PROC_GOTD, pipe[1], NULL, 0) == -1) {
1054 ae7c1b78 2023-01-10 stsp err = got_error_from_errno("imsg compose CONNECT_REPO_CHILD");
1055 ae7c1b78 2023-01-10 stsp close(pipe[1]);
1056 ae7c1b78 2023-01-10 stsp return err;
1059 13b2bc37 2022-10-23 stsp return NULL;
1062 13b2bc37 2022-10-23 stsp static void
1063 b50a2b46 2022-12-29 stsp gotd_dispatch_listener(int fd, short event, void *arg)
1065 13b2bc37 2022-10-23 stsp struct gotd_imsgev *iev = arg;
1066 13b2bc37 2022-10-23 stsp struct imsgbuf *ibuf = &iev->ibuf;
1067 b50a2b46 2022-12-29 stsp struct gotd_child_proc *proc = &gotd.listen_proc;
1068 b50a2b46 2022-12-29 stsp ssize_t n;
1069 b50a2b46 2022-12-29 stsp int shut = 0;
1070 b50a2b46 2022-12-29 stsp struct imsg imsg;
1072 b50a2b46 2022-12-29 stsp if (proc->iev.ibuf.fd != fd)
1073 b50a2b46 2022-12-29 stsp fatalx("%s: unexpected fd %d", __func__, fd);
1075 b50a2b46 2022-12-29 stsp if (event & EV_READ) {
1076 b50a2b46 2022-12-29 stsp if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
1077 b50a2b46 2022-12-29 stsp fatal("imsg_read error");
1078 b50a2b46 2022-12-29 stsp if (n == 0) {
1079 b50a2b46 2022-12-29 stsp /* Connection closed. */
1081 b50a2b46 2022-12-29 stsp goto done;
1085 b50a2b46 2022-12-29 stsp if (event & EV_WRITE) {
1086 b50a2b46 2022-12-29 stsp n = msgbuf_write(&ibuf->w);
1087 b50a2b46 2022-12-29 stsp if (n == -1 && errno != EAGAIN)
1088 b50a2b46 2022-12-29 stsp fatal("msgbuf_write");
1089 b50a2b46 2022-12-29 stsp if (n == 0) {
1090 b50a2b46 2022-12-29 stsp /* Connection closed. */
1092 b50a2b46 2022-12-29 stsp goto done;
1096 b50a2b46 2022-12-29 stsp for (;;) {
1097 b50a2b46 2022-12-29 stsp const struct got_error *err = NULL;
1098 b50a2b46 2022-12-29 stsp struct gotd_client *client = NULL;
1099 b50a2b46 2022-12-29 stsp uint32_t client_id = 0;
1100 b50a2b46 2022-12-29 stsp int do_disconnect = 0;
1102 b50a2b46 2022-12-29 stsp if ((n = imsg_get(ibuf, &imsg)) == -1)
1103 b50a2b46 2022-12-29 stsp fatal("%s: imsg_get error", __func__);
1104 b50a2b46 2022-12-29 stsp if (n == 0) /* No more messages. */
1107 b50a2b46 2022-12-29 stsp switch (imsg.hdr.type) {
1108 b50a2b46 2022-12-29 stsp case GOTD_IMSG_ERROR:
1109 b50a2b46 2022-12-29 stsp do_disconnect = 1;
1110 b50a2b46 2022-12-29 stsp err = gotd_imsg_recv_error(&client_id, &imsg);
1112 b50a2b46 2022-12-29 stsp case GOTD_IMSG_CONNECT:
1113 b50a2b46 2022-12-29 stsp err = recv_connect(&client_id, &imsg);
1116 b50a2b46 2022-12-29 stsp log_debug("unexpected imsg %d", imsg.hdr.type);
1120 b50a2b46 2022-12-29 stsp client = find_client(client_id);
1121 b50a2b46 2022-12-29 stsp if (client == NULL) {
1122 b50a2b46 2022-12-29 stsp log_warnx("%s: client not found", __func__);
1123 b50a2b46 2022-12-29 stsp imsg_free(&imsg);
1128 b50a2b46 2022-12-29 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1130 b50a2b46 2022-12-29 stsp if (do_disconnect) {
1132 b50a2b46 2022-12-29 stsp disconnect_on_error(client, err);
1134 b50a2b46 2022-12-29 stsp disconnect(client);
1137 b50a2b46 2022-12-29 stsp imsg_free(&imsg);
1140 b50a2b46 2022-12-29 stsp if (!shut) {
1141 b50a2b46 2022-12-29 stsp gotd_imsg_event_add(iev);
1143 b50a2b46 2022-12-29 stsp /* This pipe is dead. Remove its event handler */
1144 b50a2b46 2022-12-29 stsp event_del(&iev->ev);
1145 b50a2b46 2022-12-29 stsp event_loopexit(NULL);
1149 b50a2b46 2022-12-29 stsp static void
1150 5e25db14 2022-12-29 stsp gotd_dispatch_auth_child(int fd, short event, void *arg)
1152 5e25db14 2022-12-29 stsp const struct got_error *err = NULL;
1153 5e25db14 2022-12-29 stsp struct gotd_imsgev *iev = arg;
1154 5e25db14 2022-12-29 stsp struct imsgbuf *ibuf = &iev->ibuf;
1155 5e25db14 2022-12-29 stsp struct gotd_client *client;
1156 5e25db14 2022-12-29 stsp struct gotd_repo *repo = NULL;
1157 5e25db14 2022-12-29 stsp ssize_t n;
1158 5e25db14 2022-12-29 stsp int shut = 0;
1159 5e25db14 2022-12-29 stsp struct imsg imsg;
1160 5e25db14 2022-12-29 stsp uint32_t client_id = 0;
1161 5e25db14 2022-12-29 stsp int do_disconnect = 0;
1163 5e25db14 2022-12-29 stsp client = find_client_by_proc_fd(fd);
1164 5e25db14 2022-12-29 stsp if (client == NULL)
1165 5e25db14 2022-12-29 stsp fatalx("cannot find client for fd %d", fd);
1167 5e25db14 2022-12-29 stsp if (client->auth == NULL)
1168 5e25db14 2022-12-29 stsp fatalx("cannot find auth child process for fd %d", fd);
1170 5e25db14 2022-12-29 stsp if (event & EV_READ) {
1171 5e25db14 2022-12-29 stsp if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
1172 5e25db14 2022-12-29 stsp fatal("imsg_read error");
1173 5e25db14 2022-12-29 stsp if (n == 0) {
1174 5e25db14 2022-12-29 stsp /* Connection closed. */
1176 5e25db14 2022-12-29 stsp goto done;
1180 5e25db14 2022-12-29 stsp if (event & EV_WRITE) {
1181 5e25db14 2022-12-29 stsp n = msgbuf_write(&ibuf->w);
1182 5e25db14 2022-12-29 stsp if (n == -1 && errno != EAGAIN)
1183 5e25db14 2022-12-29 stsp fatal("msgbuf_write");
1184 5e25db14 2022-12-29 stsp if (n == 0) {
1185 5e25db14 2022-12-29 stsp /* Connection closed. */
1188 5e25db14 2022-12-29 stsp goto done;
1191 5e25db14 2022-12-29 stsp if (client->auth->iev.ibuf.fd != fd)
1192 5e25db14 2022-12-29 stsp fatalx("%s: unexpected fd %d", __func__, fd);
1194 5e25db14 2022-12-29 stsp if ((n = imsg_get(ibuf, &imsg)) == -1)
1195 5e25db14 2022-12-29 stsp fatal("%s: imsg_get error", __func__);
1196 5e25db14 2022-12-29 stsp if (n == 0) /* No more messages. */
1199 5e25db14 2022-12-29 stsp evtimer_del(&client->tmo);
1201 5e25db14 2022-12-29 stsp switch (imsg.hdr.type) {
1202 5e25db14 2022-12-29 stsp case GOTD_IMSG_ERROR:
1203 5e25db14 2022-12-29 stsp do_disconnect = 1;
1204 5e25db14 2022-12-29 stsp err = gotd_imsg_recv_error(&client_id, &imsg);
1206 5e25db14 2022-12-29 stsp case GOTD_IMSG_ACCESS_GRANTED:
1209 5e25db14 2022-12-29 stsp do_disconnect = 1;
1210 5e25db14 2022-12-29 stsp log_debug("unexpected imsg %d", imsg.hdr.type);
1214 5e25db14 2022-12-29 stsp if (!verify_imsg_src(client, client->auth, &imsg)) {
1215 5e25db14 2022-12-29 stsp do_disconnect = 1;
1216 5e25db14 2022-12-29 stsp log_debug("dropping imsg type %d from PID %d",
1217 5e25db14 2022-12-29 stsp imsg.hdr.type, client->auth->pid);
1219 5e25db14 2022-12-29 stsp imsg_free(&imsg);
1221 5e25db14 2022-12-29 stsp if (do_disconnect) {
1223 5e25db14 2022-12-29 stsp disconnect_on_error(client, err);
1225 5e25db14 2022-12-29 stsp disconnect(client);
1226 5e25db14 2022-12-29 stsp goto done;
1229 5e25db14 2022-12-29 stsp repo = find_repo_by_name(client->auth->repo_name);
1230 5e25db14 2022-12-29 stsp if (repo == NULL) {
1231 5e25db14 2022-12-29 stsp err = got_error(GOT_ERR_NOT_GIT_REPO);
1232 5e25db14 2022-12-29 stsp goto done;
1234 5e25db14 2022-12-29 stsp kill_auth_proc(client);
1236 5e25db14 2022-12-29 stsp log_info("authenticated uid %d for repository %s\n",
1237 5e25db14 2022-12-29 stsp client->euid, repo->name);
1239 ae7c1b78 2023-01-10 stsp err = start_session_child(client, repo, gotd.argv0,
1240 7fdc3e58 2022-12-30 mark gotd.confpath, gotd.daemonize, gotd.verbosity);
1242 ae7c1b78 2023-01-10 stsp goto done;
1245 5e25db14 2022-12-29 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1247 5e25db14 2022-12-29 stsp /* We might have killed the auth process by now. */
1248 5e25db14 2022-12-29 stsp if (client->auth != NULL) {
1249 5e25db14 2022-12-29 stsp if (!shut) {
1250 5e25db14 2022-12-29 stsp gotd_imsg_event_add(iev);
1252 5e25db14 2022-12-29 stsp /* This pipe is dead. Remove its event handler */
1253 5e25db14 2022-12-29 stsp event_del(&iev->ev);
1258 ae7c1b78 2023-01-10 stsp static const struct got_error *
1259 ae7c1b78 2023-01-10 stsp connect_session(struct gotd_client *client)
1261 ae7c1b78 2023-01-10 stsp const struct got_error *err = NULL;
1262 ae7c1b78 2023-01-10 stsp struct gotd_imsg_connect iconnect;
1265 ae7c1b78 2023-01-10 stsp memset(&iconnect, 0, sizeof(iconnect));
1267 ae7c1b78 2023-01-10 stsp s = dup(client->fd);
1268 ae7c1b78 2023-01-10 stsp if (s == -1)
1269 ae7c1b78 2023-01-10 stsp return got_error_from_errno("dup");
1271 ae7c1b78 2023-01-10 stsp iconnect.client_id = client->id;
1272 ae7c1b78 2023-01-10 stsp iconnect.euid = client->euid;
1273 ae7c1b78 2023-01-10 stsp iconnect.egid = client->egid;
1275 ae7c1b78 2023-01-10 stsp if (gotd_imsg_compose_event(&client->session->iev, GOTD_IMSG_CONNECT,
1276 ae7c1b78 2023-01-10 stsp PROC_GOTD, s, &iconnect, sizeof(iconnect)) == -1) {
1277 ae7c1b78 2023-01-10 stsp err = got_error_from_errno("imsg compose CONNECT");
1279 ae7c1b78 2023-01-10 stsp return err;
1283 ae7c1b78 2023-01-10 stsp * We are no longer interested in messages from this client.
1284 ae7c1b78 2023-01-10 stsp * Further client requests will be handled by the session process.
1286 ae7c1b78 2023-01-10 stsp msgbuf_clear(&client->iev.ibuf.w);
1287 ae7c1b78 2023-01-10 stsp imsg_clear(&client->iev.ibuf);
1288 ae7c1b78 2023-01-10 stsp event_del(&client->iev.ev);
1289 ae7c1b78 2023-01-10 stsp client->fd = -1; /* will be closed via copy in client->iev.ibuf.fd */
1291 ae7c1b78 2023-01-10 stsp return NULL;
1294 5e25db14 2022-12-29 stsp static void
1295 ae7c1b78 2023-01-10 stsp gotd_dispatch_client_session(int fd, short event, void *arg)
1297 b50a2b46 2022-12-29 stsp struct gotd_imsgev *iev = arg;
1298 b50a2b46 2022-12-29 stsp struct imsgbuf *ibuf = &iev->ibuf;
1299 13b2bc37 2022-10-23 stsp struct gotd_child_proc *proc = NULL;
1300 b50a2b46 2022-12-29 stsp struct gotd_client *client = NULL;
1301 13b2bc37 2022-10-23 stsp ssize_t n;
1302 13b2bc37 2022-10-23 stsp int shut = 0;
1303 13b2bc37 2022-10-23 stsp struct imsg imsg;
1305 ae7c1b78 2023-01-10 stsp client = find_client_by_proc_fd(fd);
1306 ae7c1b78 2023-01-10 stsp if (client == NULL)
1307 ae7c1b78 2023-01-10 stsp fatalx("cannot find client for fd %d", fd);
1309 13b2bc37 2022-10-23 stsp if (event & EV_READ) {
1310 13b2bc37 2022-10-23 stsp if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
1311 13b2bc37 2022-10-23 stsp fatal("imsg_read error");
1312 13b2bc37 2022-10-23 stsp if (n == 0) {
1313 13b2bc37 2022-10-23 stsp /* Connection closed. */
1315 13b2bc37 2022-10-23 stsp goto done;
1319 13b2bc37 2022-10-23 stsp if (event & EV_WRITE) {
1320 13b2bc37 2022-10-23 stsp n = msgbuf_write(&ibuf->w);
1321 13b2bc37 2022-10-23 stsp if (n == -1 && errno != EAGAIN)
1322 13b2bc37 2022-10-23 stsp fatal("msgbuf_write");
1323 13b2bc37 2022-10-23 stsp if (n == 0) {
1324 13b2bc37 2022-10-23 stsp /* Connection closed. */
1326 13b2bc37 2022-10-23 stsp goto done;
1330 ae7c1b78 2023-01-10 stsp proc = client->session;
1331 ae7c1b78 2023-01-10 stsp if (proc == NULL)
1332 ae7c1b78 2023-01-10 stsp fatalx("cannot find session child process for fd %d", fd);
1334 ae7c1b78 2023-01-10 stsp for (;;) {
1335 ae7c1b78 2023-01-10 stsp const struct got_error *err = NULL;
1336 ae7c1b78 2023-01-10 stsp uint32_t client_id = 0;
1337 ae7c1b78 2023-01-10 stsp int do_disconnect = 0, do_start_repo_child = 0;
1339 ae7c1b78 2023-01-10 stsp if ((n = imsg_get(ibuf, &imsg)) == -1)
1340 ae7c1b78 2023-01-10 stsp fatal("%s: imsg_get error", __func__);
1341 ae7c1b78 2023-01-10 stsp if (n == 0) /* No more messages. */
1344 ae7c1b78 2023-01-10 stsp switch (imsg.hdr.type) {
1345 ae7c1b78 2023-01-10 stsp case GOTD_IMSG_ERROR:
1346 ae7c1b78 2023-01-10 stsp do_disconnect = 1;
1347 ae7c1b78 2023-01-10 stsp err = gotd_imsg_recv_error(&client_id, &imsg);
1349 ae7c1b78 2023-01-10 stsp case GOTD_IMSG_CLIENT_SESSION_READY:
1350 ae7c1b78 2023-01-10 stsp if (client->state != GOTD_STATE_EXPECT_LIST_REFS) {
1351 ae7c1b78 2023-01-10 stsp err = got_error(GOT_ERR_PRIVSEP_MSG);
1354 ae7c1b78 2023-01-10 stsp do_start_repo_child = 1;
1356 ae7c1b78 2023-01-10 stsp case GOTD_IMSG_DISCONNECT:
1357 ae7c1b78 2023-01-10 stsp do_disconnect = 1;
1360 ae7c1b78 2023-01-10 stsp log_debug("unexpected imsg %d", imsg.hdr.type);
1364 ae7c1b78 2023-01-10 stsp if (!verify_imsg_src(client, proc, &imsg)) {
1365 ae7c1b78 2023-01-10 stsp log_debug("dropping imsg type %d from PID %d",
1366 ae7c1b78 2023-01-10 stsp imsg.hdr.type, proc->pid);
1367 ae7c1b78 2023-01-10 stsp imsg_free(&imsg);
1371 ae7c1b78 2023-01-10 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1373 ae7c1b78 2023-01-10 stsp if (do_start_repo_child) {
1374 ae7c1b78 2023-01-10 stsp struct gotd_repo *repo;
1376 ae7c1b78 2023-01-10 stsp repo = find_repo_by_name(client->session->repo_name);
1377 ae7c1b78 2023-01-10 stsp if (repo != NULL) {
1378 ae7c1b78 2023-01-10 stsp enum gotd_procid proc_type;
1380 ae7c1b78 2023-01-10 stsp if (client->required_auth & GOTD_AUTH_WRITE)
1381 ae7c1b78 2023-01-10 stsp proc_type = PROC_REPO_WRITE;
1383 ae7c1b78 2023-01-10 stsp proc_type = PROC_REPO_READ;
1385 ae7c1b78 2023-01-10 stsp err = start_repo_child(client, proc_type, repo,
1386 ae7c1b78 2023-01-10 stsp gotd.argv0, gotd.confpath, gotd.daemonize,
1387 ae7c1b78 2023-01-10 stsp gotd.verbosity);
1389 ae7c1b78 2023-01-10 stsp err = got_error(GOT_ERR_NOT_GIT_REPO);
1391 ae7c1b78 2023-01-10 stsp if (err) {
1392 ae7c1b78 2023-01-10 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1393 ae7c1b78 2023-01-10 stsp do_disconnect = 1;
1397 ae7c1b78 2023-01-10 stsp if (do_disconnect) {
1399 ae7c1b78 2023-01-10 stsp disconnect_on_error(client, err);
1401 ae7c1b78 2023-01-10 stsp disconnect(client);
1404 ae7c1b78 2023-01-10 stsp imsg_free(&imsg);
1407 ae7c1b78 2023-01-10 stsp if (!shut) {
1408 ae7c1b78 2023-01-10 stsp gotd_imsg_event_add(iev);
1410 ae7c1b78 2023-01-10 stsp /* This pipe is dead. Remove its event handler */
1411 ae7c1b78 2023-01-10 stsp event_del(&iev->ev);
1412 ae7c1b78 2023-01-10 stsp disconnect(client);
1416 ae7c1b78 2023-01-10 stsp static void
1417 ae7c1b78 2023-01-10 stsp gotd_dispatch_repo_child(int fd, short event, void *arg)
1419 ae7c1b78 2023-01-10 stsp struct gotd_imsgev *iev = arg;
1420 ae7c1b78 2023-01-10 stsp struct imsgbuf *ibuf = &iev->ibuf;
1421 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *proc = NULL;
1422 ae7c1b78 2023-01-10 stsp struct gotd_client *client;
1423 ae7c1b78 2023-01-10 stsp ssize_t n;
1424 ae7c1b78 2023-01-10 stsp int shut = 0;
1425 ae7c1b78 2023-01-10 stsp struct imsg imsg;
1427 b50a2b46 2022-12-29 stsp client = find_client_by_proc_fd(fd);
1428 b50a2b46 2022-12-29 stsp if (client == NULL)
1429 b50a2b46 2022-12-29 stsp fatalx("cannot find client for fd %d", fd);
1431 ae7c1b78 2023-01-10 stsp if (event & EV_READ) {
1432 ae7c1b78 2023-01-10 stsp if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
1433 ae7c1b78 2023-01-10 stsp fatal("imsg_read error");
1434 ae7c1b78 2023-01-10 stsp if (n == 0) {
1435 ae7c1b78 2023-01-10 stsp /* Connection closed. */
1437 ae7c1b78 2023-01-10 stsp goto done;
1441 ae7c1b78 2023-01-10 stsp if (event & EV_WRITE) {
1442 ae7c1b78 2023-01-10 stsp n = msgbuf_write(&ibuf->w);
1443 ae7c1b78 2023-01-10 stsp if (n == -1 && errno != EAGAIN)
1444 ae7c1b78 2023-01-10 stsp fatal("msgbuf_write");
1445 ae7c1b78 2023-01-10 stsp if (n == 0) {
1446 ae7c1b78 2023-01-10 stsp /* Connection closed. */
1448 ae7c1b78 2023-01-10 stsp goto done;
1452 ae7c1b78 2023-01-10 stsp proc = get_client_repo_proc(client);
1453 13b2bc37 2022-10-23 stsp if (proc == NULL)
1454 13b2bc37 2022-10-23 stsp fatalx("cannot find child process for fd %d", fd);
1456 13b2bc37 2022-10-23 stsp for (;;) {
1457 13b2bc37 2022-10-23 stsp const struct got_error *err = NULL;
1458 13b2bc37 2022-10-23 stsp uint32_t client_id = 0;
1459 13b2bc37 2022-10-23 stsp int do_disconnect = 0;
1461 13b2bc37 2022-10-23 stsp if ((n = imsg_get(ibuf, &imsg)) == -1)
1462 13b2bc37 2022-10-23 stsp fatal("%s: imsg_get error", __func__);
1463 13b2bc37 2022-10-23 stsp if (n == 0) /* No more messages. */
1466 13b2bc37 2022-10-23 stsp switch (imsg.hdr.type) {
1467 13b2bc37 2022-10-23 stsp case GOTD_IMSG_ERROR:
1468 13b2bc37 2022-10-23 stsp do_disconnect = 1;
1469 13b2bc37 2022-10-23 stsp err = gotd_imsg_recv_error(&client_id, &imsg);
1471 b50a2b46 2022-12-29 stsp case GOTD_IMSG_REPO_CHILD_READY:
1472 ae7c1b78 2023-01-10 stsp err = connect_session(client);
1475 ae7c1b78 2023-01-10 stsp err = connect_repo_child(client, proc);
1478 13b2bc37 2022-10-23 stsp log_debug("unexpected imsg %d", imsg.hdr.type);
1482 13b2bc37 2022-10-23 stsp if (!verify_imsg_src(client, proc, &imsg)) {
1483 13b2bc37 2022-10-23 stsp log_debug("dropping imsg type %d from PID %d",
1484 13b2bc37 2022-10-23 stsp imsg.hdr.type, proc->pid);
1485 13b2bc37 2022-10-23 stsp imsg_free(&imsg);
1489 13b2bc37 2022-10-23 stsp log_warnx("uid %d: %s", client->euid, err->msg);
1491 13b2bc37 2022-10-23 stsp if (do_disconnect) {
1493 13b2bc37 2022-10-23 stsp disconnect_on_error(client, err);
1495 13b2bc37 2022-10-23 stsp disconnect(client);
1498 13b2bc37 2022-10-23 stsp imsg_free(&imsg);
1501 13b2bc37 2022-10-23 stsp if (!shut) {
1502 13b2bc37 2022-10-23 stsp gotd_imsg_event_add(iev);
1504 13b2bc37 2022-10-23 stsp /* This pipe is dead. Remove its event handler */
1505 13b2bc37 2022-10-23 stsp event_del(&iev->ev);
1506 ae7c1b78 2023-01-10 stsp disconnect(client);
1510 13b2bc37 2022-10-23 stsp static pid_t
1511 eec68231 2022-12-14 stsp start_child(enum gotd_procid proc_id, const char *repo_path,
1512 585362fd 2022-10-31 op char *argv0, const char *confpath, int fd, int daemonize, int verbosity)
1514 585362fd 2022-10-31 op char *argv[11];
1515 13b2bc37 2022-10-23 stsp int argc = 0;
1516 13b2bc37 2022-10-23 stsp pid_t pid;
1518 13b2bc37 2022-10-23 stsp switch (pid = fork()) {
1520 13b2bc37 2022-10-23 stsp fatal("cannot fork");
1524 13b2bc37 2022-10-23 stsp close(fd);
1525 13b2bc37 2022-10-23 stsp return pid;
1528 8c6fc146 2022-11-17 stsp if (fd != GOTD_FILENO_MSG_PIPE) {
1529 8c6fc146 2022-11-17 stsp if (dup2(fd, GOTD_FILENO_MSG_PIPE) == -1)
1530 13b2bc37 2022-10-23 stsp fatal("cannot setup imsg fd");
1531 13b2bc37 2022-10-23 stsp } else if (fcntl(fd, F_SETFD, 0) == -1)
1532 13b2bc37 2022-10-23 stsp fatal("cannot setup imsg fd");
1534 13b2bc37 2022-10-23 stsp argv[argc++] = argv0;
1535 13b2bc37 2022-10-23 stsp switch (proc_id) {
1536 d93ecf7d 2022-12-14 stsp case PROC_LISTEN:
1537 d93ecf7d 2022-12-14 stsp argv[argc++] = (char *)"-L";
1539 5e25db14 2022-12-29 stsp case PROC_AUTH:
1540 5e25db14 2022-12-29 stsp argv[argc++] = (char *)"-A";
1542 ae7c1b78 2023-01-10 stsp case PROC_SESSION:
1543 ae7c1b78 2023-01-10 stsp argv[argc++] = (char *)"-S";
1545 13b2bc37 2022-10-23 stsp case PROC_REPO_READ:
1546 13b2bc37 2022-10-23 stsp argv[argc++] = (char *)"-R";
1548 13b2bc37 2022-10-23 stsp case PROC_REPO_WRITE:
1549 13b2bc37 2022-10-23 stsp argv[argc++] = (char *)"-W";
1552 13b2bc37 2022-10-23 stsp fatalx("invalid process id %d", proc_id);
1555 585362fd 2022-10-31 op argv[argc++] = (char *)"-f";
1556 585362fd 2022-10-31 op argv[argc++] = (char *)confpath;
1558 eec68231 2022-12-14 stsp if (repo_path) {
1559 d93ecf7d 2022-12-14 stsp argv[argc++] = (char *)"-P";
1560 eec68231 2022-12-14 stsp argv[argc++] = (char *)repo_path;
1563 13b2bc37 2022-10-23 stsp if (!daemonize)
1564 13b2bc37 2022-10-23 stsp argv[argc++] = (char *)"-d";
1565 13b2bc37 2022-10-23 stsp if (verbosity > 0)
1566 13b2bc37 2022-10-23 stsp argv[argc++] = (char *)"-v";
1567 13b2bc37 2022-10-23 stsp if (verbosity > 1)
1568 13b2bc37 2022-10-23 stsp argv[argc++] = (char *)"-v";
1569 13b2bc37 2022-10-23 stsp argv[argc++] = NULL;
1571 13b2bc37 2022-10-23 stsp execvp(argv0, argv);
1572 13b2bc37 2022-10-23 stsp fatal("execvp");
1575 13b2bc37 2022-10-23 stsp static void
1576 d93ecf7d 2022-12-14 stsp start_listener(char *argv0, const char *confpath, int daemonize, int verbosity)
1578 b50a2b46 2022-12-29 stsp struct gotd_child_proc *proc = &gotd.listen_proc;
1580 d93ecf7d 2022-12-14 stsp proc->type = PROC_LISTEN;
1582 d93ecf7d 2022-12-14 stsp if (socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK,
1583 d93ecf7d 2022-12-14 stsp PF_UNSPEC, proc->pipe) == -1)
1584 d93ecf7d 2022-12-14 stsp fatal("socketpair");
1586 d93ecf7d 2022-12-14 stsp proc->pid = start_child(proc->type, NULL, argv0, confpath,
1587 d93ecf7d 2022-12-14 stsp proc->pipe[1], daemonize, verbosity);
1588 d93ecf7d 2022-12-14 stsp imsg_init(&proc->iev.ibuf, proc->pipe[0]);
1589 b50a2b46 2022-12-29 stsp proc->iev.handler = gotd_dispatch_listener;
1590 d93ecf7d 2022-12-14 stsp proc->iev.events = EV_READ;
1591 d93ecf7d 2022-12-14 stsp proc->iev.handler_arg = NULL;
1594 b50a2b46 2022-12-29 stsp static const struct got_error *
1595 ae7c1b78 2023-01-10 stsp start_session_child(struct gotd_client *client, struct gotd_repo *repo,
1596 ae7c1b78 2023-01-10 stsp char *argv0, const char *confpath, int daemonize, int verbosity)
1598 ae7c1b78 2023-01-10 stsp struct gotd_child_proc *proc;
1600 ae7c1b78 2023-01-10 stsp proc = calloc(1, sizeof(*proc));
1601 ae7c1b78 2023-01-10 stsp if (proc == NULL)
1602 ae7c1b78 2023-01-10 stsp return got_error_from_errno("calloc");
1604 ae7c1b78 2023-01-10 stsp proc->type = PROC_SESSION;
1605 ae7c1b78 2023-01-10 stsp if (strlcpy(proc->repo_name, repo->name,
1606 ae7c1b78 2023-01-10 stsp sizeof(proc->repo_name)) >= sizeof(proc->repo_name))
1607 ae7c1b78 2023-01-10 stsp fatalx("repository name too long: %s", repo->name);
1608 ae7c1b78 2023-01-10 stsp log_debug("starting client uid %d session for repository %s",
1609 ae7c1b78 2023-01-10 stsp client->euid, repo->name);
1610 ae7c1b78 2023-01-10 stsp if (strlcpy(proc->repo_path, repo->path, sizeof(proc->repo_path)) >=
1611 ae7c1b78 2023-01-10 stsp sizeof(proc->repo_path))
1612 ae7c1b78 2023-01-10 stsp fatalx("repository path too long: %s", repo->path);
1613 ae7c1b78 2023-01-10 stsp if (socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK,
1614 ae7c1b78 2023-01-10 stsp PF_UNSPEC, proc->pipe) == -1)
1615 ae7c1b78 2023-01-10 stsp fatal("socketpair");
1616 ae7c1b78 2023-01-10 stsp proc->pid = start_child(proc->type, proc->repo_path, argv0,
1617 ae7c1b78 2023-01-10 stsp confpath, proc->pipe[1], daemonize, verbosity);
1618 ae7c1b78 2023-01-10 stsp imsg_init(&proc->iev.ibuf, proc->pipe[0]);
1619 ae7c1b78 2023-01-10 stsp log_debug("proc %s %s is on fd %d",
1620 ae7c1b78 2023-01-10 stsp gotd_proc_names[proc->type], proc->repo_path,
1621 ae7c1b78 2023-01-10 stsp proc->pipe[0]);
1622 ae7c1b78 2023-01-10 stsp proc->iev.handler = gotd_dispatch_client_session;
1623 ae7c1b78 2023-01-10 stsp proc->iev.events = EV_READ;
1624 ae7c1b78 2023-01-10 stsp proc->iev.handler_arg = NULL;
1625 ae7c1b78 2023-01-10 stsp event_set(&proc->iev.ev, proc->iev.ibuf.fd, EV_READ,
1626 ae7c1b78 2023-01-10 stsp gotd_dispatch_client_session, &proc->iev);
1627 ae7c1b78 2023-01-10 stsp gotd_imsg_event_add(&proc->iev);
1629 ae7c1b78 2023-01-10 stsp client->session = proc;
1630 ae7c1b78 2023-01-10 stsp return NULL;
1633 ae7c1b78 2023-01-10 stsp static const struct got_error *
1634 b50a2b46 2022-12-29 stsp start_repo_child(struct gotd_client *client, enum gotd_procid proc_type,
1635 b50a2b46 2022-12-29 stsp struct gotd_repo *repo, char *argv0, const char *confpath,
1636 585362fd 2022-10-31 op int daemonize, int verbosity)
1638 13b2bc37 2022-10-23 stsp struct gotd_child_proc *proc;
1640 b50a2b46 2022-12-29 stsp if (proc_type != PROC_REPO_READ && proc_type != PROC_REPO_WRITE)
1641 b50a2b46 2022-12-29 stsp return got_error_msg(GOT_ERR_NOT_IMPL, "bad process type");
1643 b50a2b46 2022-12-29 stsp proc = calloc(1, sizeof(*proc));
1644 b50a2b46 2022-12-29 stsp if (proc == NULL)
1645 b50a2b46 2022-12-29 stsp return got_error_from_errno("calloc");
1647 b50a2b46 2022-12-29 stsp proc->type = proc_type;
1648 b50a2b46 2022-12-29 stsp if (strlcpy(proc->repo_name, repo->name,
1649 b50a2b46 2022-12-29 stsp sizeof(proc->repo_name)) >= sizeof(proc->repo_name))
1650 b50a2b46 2022-12-29 stsp fatalx("repository name too long: %s", repo->name);
1651 b50a2b46 2022-12-29 stsp log_debug("starting %s for repository %s",
1652 b50a2b46 2022-12-29 stsp proc->type == PROC_REPO_READ ? "reader" : "writer", repo->name);
1653 9b7f22a6 2023-01-08 stsp if (strlcpy(proc->repo_path, repo->path, sizeof(proc->repo_path)) >=
1654 9b7f22a6 2023-01-08 stsp sizeof(proc->repo_path))
1655 9b7f22a6 2023-01-08 stsp fatalx("repository path too long: %s", repo->path);
1656 b50a2b46 2022-12-29 stsp if (socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK,
1657 b50a2b46 2022-12-29 stsp PF_UNSPEC, proc->pipe) == -1)
1658 b50a2b46 2022-12-29 stsp fatal("socketpair");
1659 b50a2b46 2022-12-29 stsp proc->pid = start_child(proc->type, proc->repo_path, argv0,
1660 b50a2b46 2022-12-29 stsp confpath, proc->pipe[1], daemonize, verbosity);
1661 b50a2b46 2022-12-29 stsp imsg_init(&proc->iev.ibuf, proc->pipe[0]);
1662 b50a2b46 2022-12-29 stsp log_debug("proc %s %s is on fd %d",
1663 b50a2b46 2022-12-29 stsp gotd_proc_names[proc->type], proc->repo_path,
1664 b50a2b46 2022-12-29 stsp proc->pipe[0]);
1665 b50a2b46 2022-12-29 stsp proc->iev.handler = gotd_dispatch_repo_child;
1666 b50a2b46 2022-12-29 stsp proc->iev.events = EV_READ;
1667 b50a2b46 2022-12-29 stsp proc->iev.handler_arg = NULL;
1668 b50a2b46 2022-12-29 stsp event_set(&proc->iev.ev, proc->iev.ibuf.fd, EV_READ,
1669 b50a2b46 2022-12-29 stsp gotd_dispatch_repo_child, &proc->iev);
1670 b50a2b46 2022-12-29 stsp gotd_imsg_event_add(&proc->iev);
1672 b50a2b46 2022-12-29 stsp if (proc->type == PROC_REPO_READ)
1673 b50a2b46 2022-12-29 stsp client->repo_read = proc;
1675 b50a2b46 2022-12-29 stsp client->repo_write = proc;
1677 5e25db14 2022-12-29 stsp return NULL;
1680 5e25db14 2022-12-29 stsp static const struct got_error *
1681 5e25db14 2022-12-29 stsp start_auth_child(struct gotd_client *client, int required_auth,
1682 5e25db14 2022-12-29 stsp struct gotd_repo *repo, char *argv0, const char *confpath,
1683 5e25db14 2022-12-29 stsp int daemonize, int verbosity)
1685 365cf0f3 2022-12-29 stsp const struct got_error *err = NULL;
1686 5e25db14 2022-12-29 stsp struct gotd_child_proc *proc;
1687 5e25db14 2022-12-29 stsp struct gotd_imsg_auth iauth;
1690 5e25db14 2022-12-29 stsp memset(&iauth, 0, sizeof(iauth));
1692 365cf0f3 2022-12-29 stsp fd = dup(client->fd);
1693 365cf0f3 2022-12-29 stsp if (fd == -1)
1694 365cf0f3 2022-12-29 stsp return got_error_from_errno("dup");
1696 5e25db14 2022-12-29 stsp proc = calloc(1, sizeof(*proc));
1697 365cf0f3 2022-12-29 stsp if (proc == NULL) {
1698 365cf0f3 2022-12-29 stsp err = got_error_from_errno("calloc");
1699 365cf0f3 2022-12-29 stsp close(fd);
1700 365cf0f3 2022-12-29 stsp return err;
1703 5e25db14 2022-12-29 stsp proc->type = PROC_AUTH;
1704 5e25db14 2022-12-29 stsp if (strlcpy(proc->repo_name, repo->name,
1705 5e25db14 2022-12-29 stsp sizeof(proc->repo_name)) >= sizeof(proc->repo_name))
1706 5e25db14 2022-12-29 stsp fatalx("repository name too long: %s", repo->name);
1707 5e25db14 2022-12-29 stsp log_debug("starting auth for uid %d repository %s",
1708 5e25db14 2022-12-29 stsp client->euid, repo->name);
1709 9b7f22a6 2023-01-08 stsp if (strlcpy(proc->repo_path, repo->path, sizeof(proc->repo_path)) >=
1710 9b7f22a6 2023-01-08 stsp sizeof(proc->repo_path))
1711 9b7f22a6 2023-01-08 stsp fatalx("repository path too long: %s", repo->path);
1712 5e25db14 2022-12-29 stsp if (socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK,
1713 5e25db14 2022-12-29 stsp PF_UNSPEC, proc->pipe) == -1)
1714 5e25db14 2022-12-29 stsp fatal("socketpair");
1715 5e25db14 2022-12-29 stsp proc->pid = start_child(proc->type, proc->repo_path, argv0,
1716 5e25db14 2022-12-29 stsp confpath, proc->pipe[1], daemonize, verbosity);
1717 5e25db14 2022-12-29 stsp imsg_init(&proc->iev.ibuf, proc->pipe[0]);
1718 5e25db14 2022-12-29 stsp log_debug("proc %s %s is on fd %d",
1719 5e25db14 2022-12-29 stsp gotd_proc_names[proc->type], proc->repo_path,
1720 5e25db14 2022-12-29 stsp proc->pipe[0]);
1721 5e25db14 2022-12-29 stsp proc->iev.handler = gotd_dispatch_auth_child;
1722 5e25db14 2022-12-29 stsp proc->iev.events = EV_READ;
1723 5e25db14 2022-12-29 stsp proc->iev.handler_arg = NULL;
1724 5e25db14 2022-12-29 stsp event_set(&proc->iev.ev, proc->iev.ibuf.fd, EV_READ,
1725 5e25db14 2022-12-29 stsp gotd_dispatch_auth_child, &proc->iev);
1726 5e25db14 2022-12-29 stsp gotd_imsg_event_add(&proc->iev);
1728 5e25db14 2022-12-29 stsp iauth.euid = client->euid;
1729 5e25db14 2022-12-29 stsp iauth.egid = client->egid;
1730 5e25db14 2022-12-29 stsp iauth.required_auth = required_auth;
1731 5e25db14 2022-12-29 stsp iauth.client_id = client->id;
1732 5e25db14 2022-12-29 stsp if (gotd_imsg_compose_event(&proc->iev, GOTD_IMSG_AUTHENTICATE,
1733 365cf0f3 2022-12-29 stsp PROC_GOTD, fd, &iauth, sizeof(iauth)) == -1) {
1734 5e25db14 2022-12-29 stsp log_warn("imsg compose AUTHENTICATE");
1735 365cf0f3 2022-12-29 stsp close(fd);
1736 365cf0f3 2022-12-29 stsp /* Let the auth_timeout handler tidy up. */
1739 5e25db14 2022-12-29 stsp client->auth = proc;
1740 5e25db14 2022-12-29 stsp client->required_auth = required_auth;
1741 b50a2b46 2022-12-29 stsp return NULL;
1744 eec68231 2022-12-14 stsp static void
1745 eec68231 2022-12-14 stsp apply_unveil_repo_readonly(const char *repo_path)
1747 eec68231 2022-12-14 stsp if (unveil(repo_path, "r") == -1)
1748 eec68231 2022-12-14 stsp fatal("unveil %s", repo_path);
1750 44587340 2022-12-30 stsp if (unveil(NULL, NULL) == -1)
1751 44587340 2022-12-30 stsp fatal("unveil");
1754 44587340 2022-12-30 stsp static void
1755 ae7c1b78 2023-01-10 stsp apply_unveil_repo_readwrite(const char *repo_path)
1757 ae7c1b78 2023-01-10 stsp if (unveil(repo_path, "rwc") == -1)
1758 ae7c1b78 2023-01-10 stsp fatal("unveil %s", repo_path);
1760 ae7c1b78 2023-01-10 stsp if (unveil(GOT_TMPDIR_STR, "rwc") == -1)
1761 ae7c1b78 2023-01-10 stsp fatal("unveil %s", GOT_TMPDIR_STR);
1763 ae7c1b78 2023-01-10 stsp if (unveil(NULL, NULL) == -1)
1764 ae7c1b78 2023-01-10 stsp fatal("unveil");
1767 ae7c1b78 2023-01-10 stsp static void
1768 44587340 2022-12-30 stsp apply_unveil_none(void)
1770 44587340 2022-12-30 stsp if (unveil("/", "") == -1)
1771 44587340 2022-12-30 stsp fatal("unveil");
1773 eec68231 2022-12-14 stsp if (unveil(NULL, NULL) == -1)
1774 eec68231 2022-12-14 stsp fatal("unveil");
1777 13b2bc37 2022-10-23 stsp static void
1778 ae7c1b78 2023-01-10 stsp apply_unveil_selfexec(void)
1780 b50a2b46 2022-12-29 stsp if (unveil(gotd.argv0, "x") == -1)
1781 b50a2b46 2022-12-29 stsp fatal("unveil %s", gotd.argv0);
1783 13b2bc37 2022-10-23 stsp if (unveil(NULL, NULL) == -1)
1784 13b2bc37 2022-10-23 stsp fatal("unveil");
1788 13b2bc37 2022-10-23 stsp main(int argc, char **argv)
1790 13b2bc37 2022-10-23 stsp const struct got_error *error = NULL;
1791 13b2bc37 2022-10-23 stsp int ch, fd = -1, daemonize = 1, verbosity = 0, noaction = 0;
1792 13b2bc37 2022-10-23 stsp const char *confpath = GOTD_CONF_PATH;
1793 13b2bc37 2022-10-23 stsp char *argv0 = argv[0];
1794 13b2bc37 2022-10-23 stsp char title[2048];
1795 13b2bc37 2022-10-23 stsp struct passwd *pw = NULL;
1796 13b2bc37 2022-10-23 stsp char *repo_path = NULL;
1797 13b2bc37 2022-10-23 stsp enum gotd_procid proc_id = PROC_GOTD;
1798 13b2bc37 2022-10-23 stsp struct event evsigint, evsigterm, evsighup, evsigusr1;
1799 13b2bc37 2022-10-23 stsp int *pack_fds = NULL, *temp_fds = NULL;
1801 13b2bc37 2022-10-23 stsp log_init(1, LOG_DAEMON); /* Log to stderr until daemonized. */
1803 ae7c1b78 2023-01-10 stsp while ((ch = getopt(argc, argv, "Adf:LnP:RSvW")) != -1) {
1804 13b2bc37 2022-10-23 stsp switch (ch) {
1806 5e25db14 2022-12-29 stsp proc_id = PROC_AUTH;
1809 13b2bc37 2022-10-23 stsp daemonize = 0;
1812 13b2bc37 2022-10-23 stsp confpath = optarg;
1815 d93ecf7d 2022-12-14 stsp proc_id = PROC_LISTEN;
1818 13b2bc37 2022-10-23 stsp noaction = 1;
1821 6f319063 2022-10-27 stsp repo_path = realpath(optarg, NULL);
1822 6f319063 2022-10-27 stsp if (repo_path == NULL)
1823 6f319063 2022-10-27 stsp fatal("realpath '%s'", optarg);
1826 13b2bc37 2022-10-23 stsp proc_id = PROC_REPO_READ;
1829 ae7c1b78 2023-01-10 stsp proc_id = PROC_SESSION;
1832 6f319063 2022-10-27 stsp if (verbosity < 3)
1833 6f319063 2022-10-27 stsp verbosity++;
1836 13b2bc37 2022-10-23 stsp proc_id = PROC_REPO_WRITE;
1843 13b2bc37 2022-10-23 stsp argc -= optind;
1844 13b2bc37 2022-10-23 stsp argv += optind;
1846 13b2bc37 2022-10-23 stsp if (argc != 0)
1849 b50a2b46 2022-12-29 stsp /* Require an absolute path in argv[0] for reliable re-exec. */
1850 b50a2b46 2022-12-29 stsp if (!got_path_is_absolute(argv0))
1851 b50a2b46 2022-12-29 stsp fatalx("bad path \"%s\": must be an absolute path", argv0);
1853 b50a2b46 2022-12-29 stsp if (geteuid() && (proc_id == PROC_GOTD || proc_id == PROC_LISTEN))
1854 13b2bc37 2022-10-23 stsp fatalx("need root privileges");
1856 13b2bc37 2022-10-23 stsp log_init(daemonize ? 0 : 1, LOG_DAEMON);
1857 13b2bc37 2022-10-23 stsp log_setverbose(verbosity);
1859 13b2bc37 2022-10-23 stsp if (parse_config(confpath, proc_id, &gotd) != 0)
1862 b50a2b46 2022-12-29 stsp gotd.argv0 = argv0;
1863 b50a2b46 2022-12-29 stsp gotd.daemonize = daemonize;
1864 b50a2b46 2022-12-29 stsp gotd.verbosity = verbosity;
1865 b50a2b46 2022-12-29 stsp gotd.confpath = confpath;
1867 13b2bc37 2022-10-23 stsp if (proc_id == PROC_GOTD &&
1868 13b2bc37 2022-10-23 stsp (gotd.nrepos == 0 || TAILQ_EMPTY(&gotd.repos)))
1869 13b2bc37 2022-10-23 stsp fatalx("no repository defined in configuration file");
1871 13b2bc37 2022-10-23 stsp pw = getpwnam(gotd.user_name);
1872 13b2bc37 2022-10-23 stsp if (pw == NULL)
1873 898c8f8f 2022-12-29 op fatalx("user %s not found", gotd.user_name);
1875 13b2bc37 2022-10-23 stsp if (pw->pw_uid == 0) {
1876 13b2bc37 2022-10-23 stsp fatalx("cannot run %s as %s: the user running %s "
1877 13b2bc37 2022-10-23 stsp "must not be the superuser",
1878 13b2bc37 2022-10-23 stsp getprogname(), pw->pw_name, getprogname());
1881 d93ecf7d 2022-12-14 stsp if (proc_id == PROC_LISTEN &&
1882 13b2bc37 2022-10-23 stsp !got_path_is_absolute(gotd.unix_socket_path))
1883 13b2bc37 2022-10-23 stsp fatalx("bad unix socket path \"%s\": must be an absolute path",
1884 13b2bc37 2022-10-23 stsp gotd.unix_socket_path);
1886 13b2bc37 2022-10-23 stsp if (noaction)
1889 b1142068 2022-12-05 stsp if (proc_id == PROC_GOTD) {
1890 d93ecf7d 2022-12-14 stsp gotd.pid = getpid();
1891 d93ecf7d 2022-12-14 stsp snprintf(title, sizeof(title), "%s", gotd_proc_names[proc_id]);
1892 d93ecf7d 2022-12-14 stsp start_listener(argv0, confpath, daemonize, verbosity);
1893 d93ecf7d 2022-12-14 stsp arc4random_buf(&clients_hash_key, sizeof(clients_hash_key));
1894 d93ecf7d 2022-12-14 stsp if (daemonize && daemon(1, 0) == -1)
1895 d93ecf7d 2022-12-14 stsp fatal("daemon");
1896 d93ecf7d 2022-12-14 stsp } else if (proc_id == PROC_LISTEN) {
1897 d93ecf7d 2022-12-14 stsp snprintf(title, sizeof(title), "%s", gotd_proc_names[proc_id]);
1898 b1142068 2022-12-05 stsp if (verbosity) {
1899 b1142068 2022-12-05 stsp log_info("socket: %s", gotd.unix_socket_path);
1900 b1142068 2022-12-05 stsp log_info("user: %s", pw->pw_name);
1903 13b2bc37 2022-10-23 stsp fd = unix_socket_listen(gotd.unix_socket_path, pw->pw_uid,
1904 6f854dde 2023-01-04 stsp pw->pw_gid);
1905 13b2bc37 2022-10-23 stsp if (fd == -1) {
1906 13b2bc37 2022-10-23 stsp fatal("cannot listen on unix socket %s",
1907 13b2bc37 2022-10-23 stsp gotd.unix_socket_path);
1909 eec68231 2022-12-14 stsp if (daemonize && daemon(0, 0) == -1)
1910 13b2bc37 2022-10-23 stsp fatal("daemon");
1911 5e25db14 2022-12-29 stsp } else if (proc_id == PROC_AUTH) {
1912 5e25db14 2022-12-29 stsp snprintf(title, sizeof(title), "%s %s",
1913 5e25db14 2022-12-29 stsp gotd_proc_names[proc_id], repo_path);
1914 5e25db14 2022-12-29 stsp if (daemonize && daemon(0, 0) == -1)
1915 5e25db14 2022-12-29 stsp fatal("daemon");
1916 ae7c1b78 2023-01-10 stsp } else if (proc_id == PROC_REPO_READ || proc_id == PROC_REPO_WRITE ||
1917 ae7c1b78 2023-01-10 stsp proc_id == PROC_SESSION) {
1918 13b2bc37 2022-10-23 stsp error = got_repo_pack_fds_open(&pack_fds);
1919 13b2bc37 2022-10-23 stsp if (error != NULL)
1920 13b2bc37 2022-10-23 stsp fatalx("cannot open pack tempfiles: %s", error->msg);
1921 13b2bc37 2022-10-23 stsp error = got_repo_temp_fds_open(&temp_fds);
1922 13b2bc37 2022-10-23 stsp if (error != NULL)
1923 13b2bc37 2022-10-23 stsp fatalx("cannot open pack tempfiles: %s", error->msg);
1924 13b2bc37 2022-10-23 stsp if (repo_path == NULL)
1925 13b2bc37 2022-10-23 stsp fatalx("repository path not specified");
1926 13b2bc37 2022-10-23 stsp snprintf(title, sizeof(title), "%s %s",
1927 13b2bc37 2022-10-23 stsp gotd_proc_names[proc_id], repo_path);
1928 eec68231 2022-12-14 stsp if (daemonize && daemon(0, 0) == -1)
1929 13b2bc37 2022-10-23 stsp fatal("daemon");
1931 13b2bc37 2022-10-23 stsp fatal("invalid process id %d", proc_id);
1933 13b2bc37 2022-10-23 stsp setproctitle("%s", title);
1934 13b2bc37 2022-10-23 stsp log_procinit(title);
1936 13b2bc37 2022-10-23 stsp /* Drop root privileges. */
1937 13b2bc37 2022-10-23 stsp if (setgid(pw->pw_gid) == -1)
1938 13b2bc37 2022-10-23 stsp fatal("setgid %d failed", pw->pw_gid);
1939 13b2bc37 2022-10-23 stsp if (setuid(pw->pw_uid) == -1)
1940 13b2bc37 2022-10-23 stsp fatal("setuid %d failed", pw->pw_uid);
1942 13b2bc37 2022-10-23 stsp event_init();
1944 13b2bc37 2022-10-23 stsp switch (proc_id) {
1945 13b2bc37 2022-10-23 stsp case PROC_GOTD:
1946 13b2bc37 2022-10-23 stsp #ifndef PROFILE
1947 ae7c1b78 2023-01-10 stsp /* "exec" promise will be limited to argv[0] via unveil(2). */
1948 ae7c1b78 2023-01-10 stsp if (pledge("stdio proc exec sendfd recvfd unveil", NULL) == -1)
1949 13b2bc37 2022-10-23 stsp err(1, "pledge");
1952 d93ecf7d 2022-12-14 stsp case PROC_LISTEN:
1953 d93ecf7d 2022-12-14 stsp #ifndef PROFILE
1954 77f619a8 2023-01-04 stsp if (pledge("stdio sendfd unix unveil", NULL) == -1)
1955 d93ecf7d 2022-12-14 stsp err(1, "pledge");
1958 77f619a8 2023-01-04 stsp * Ensure that AF_UNIX bind(2) cannot be used with any other
1959 77f619a8 2023-01-04 stsp * sockets by revoking all filesystem access via unveil(2).
1961 77f619a8 2023-01-04 stsp apply_unveil_none();
1963 40b85cca 2023-01-03 stsp listen_main(title, fd, gotd.connection_limits,
1964 40b85cca 2023-01-03 stsp gotd.nconnection_limits);
1965 d93ecf7d 2022-12-14 stsp /* NOTREACHED */
1967 5e25db14 2022-12-29 stsp case PROC_AUTH:
1968 5e25db14 2022-12-29 stsp #ifndef PROFILE
1969 44587340 2022-12-30 stsp if (pledge("stdio getpw recvfd unix unveil", NULL) == -1)
1970 5e25db14 2022-12-29 stsp err(1, "pledge");
1973 44587340 2022-12-30 stsp * We need the "unix" pledge promise for getpeername(2) only.
1974 44587340 2022-12-30 stsp * Ensure that AF_UNIX bind(2) cannot be used by revoking all
1975 44587340 2022-12-30 stsp * filesystem access via unveil(2). Access to password database
1976 44587340 2022-12-30 stsp * files will still work since "getpw" bypasses unveil(2).
1978 44587340 2022-12-30 stsp apply_unveil_none();
1980 5e25db14 2022-12-29 stsp auth_main(title, &gotd.repos, repo_path);
1981 5e25db14 2022-12-29 stsp /* NOTREACHED */
1983 ae7c1b78 2023-01-10 stsp case PROC_SESSION:
1984 ae7c1b78 2023-01-10 stsp #ifndef PROFILE
1986 ae7c1b78 2023-01-10 stsp * The "recvfd" promise is only needed during setup and
1987 ae7c1b78 2023-01-10 stsp * will be removed in a later pledge(2) call.
1989 ae7c1b78 2023-01-10 stsp if (pledge("stdio rpath wpath cpath recvfd sendfd fattr flock "
1990 ae7c1b78 2023-01-10 stsp "unveil", NULL) == -1)
1991 ae7c1b78 2023-01-10 stsp err(1, "pledge");
1993 ae7c1b78 2023-01-10 stsp apply_unveil_repo_readwrite(repo_path);
1994 ae7c1b78 2023-01-10 stsp session_main(title, repo_path, pack_fds, temp_fds,
1995 ae7c1b78 2023-01-10 stsp &gotd.request_timeout);
1996 ae7c1b78 2023-01-10 stsp /* NOTREACHED */
1998 13b2bc37 2022-10-23 stsp case PROC_REPO_READ:
1999 13b2bc37 2022-10-23 stsp #ifndef PROFILE
2000 eec68231 2022-12-14 stsp if (pledge("stdio rpath recvfd unveil", NULL) == -1)
2001 13b2bc37 2022-10-23 stsp err(1, "pledge");
2003 eec68231 2022-12-14 stsp apply_unveil_repo_readonly(repo_path);
2004 eec68231 2022-12-14 stsp repo_read_main(title, repo_path, pack_fds, temp_fds);
2005 13b2bc37 2022-10-23 stsp /* NOTREACHED */
2007 13b2bc37 2022-10-23 stsp case PROC_REPO_WRITE:
2008 13b2bc37 2022-10-23 stsp #ifndef PROFILE
2009 eec68231 2022-12-14 stsp if (pledge("stdio rpath recvfd unveil", NULL) == -1)
2010 13b2bc37 2022-10-23 stsp err(1, "pledge");
2012 eec68231 2022-12-14 stsp apply_unveil_repo_readonly(repo_path);
2013 eec68231 2022-12-14 stsp repo_write_main(title, repo_path, pack_fds, temp_fds);
2014 13b2bc37 2022-10-23 stsp /* NOTREACHED */
2017 13b2bc37 2022-10-23 stsp fatal("invalid process id %d", proc_id);
2020 13b2bc37 2022-10-23 stsp if (proc_id != PROC_GOTD)
2021 13b2bc37 2022-10-23 stsp fatal("invalid process id %d", proc_id);
2023 ae7c1b78 2023-01-10 stsp apply_unveil_selfexec();
2025 13b2bc37 2022-10-23 stsp signal_set(&evsigint, SIGINT, gotd_sighdlr, NULL);
2026 13b2bc37 2022-10-23 stsp signal_set(&evsigterm, SIGTERM, gotd_sighdlr, NULL);
2027 13b2bc37 2022-10-23 stsp signal_set(&evsighup, SIGHUP, gotd_sighdlr, NULL);
2028 13b2bc37 2022-10-23 stsp signal_set(&evsigusr1, SIGUSR1, gotd_sighdlr, NULL);
2029 13b2bc37 2022-10-23 stsp signal(SIGPIPE, SIG_IGN);
2031 13b2bc37 2022-10-23 stsp signal_add(&evsigint, NULL);
2032 13b2bc37 2022-10-23 stsp signal_add(&evsigterm, NULL);
2033 13b2bc37 2022-10-23 stsp signal_add(&evsighup, NULL);
2034 13b2bc37 2022-10-23 stsp signal_add(&evsigusr1, NULL);
2036 b50a2b46 2022-12-29 stsp gotd_imsg_event_add(&gotd.listen_proc.iev);
2038 13b2bc37 2022-10-23 stsp event_dispatch();
2040 13b2bc37 2022-10-23 stsp free(repo_path);
2041 ae7c1b78 2023-01-10 stsp gotd_shutdown();
