Blame


1 b0a6bcf7 2022-09-13 op /*
2 b0a6bcf7 2022-09-13 op * Copyright (c) 2022 Omar Polo <op@omarpolo.com>
3 b0a6bcf7 2022-09-13 op * Copyright (c) 2011 - 2015 Reyk Floeter <reyk@openbsd.org>
4 b0a6bcf7 2022-09-13 op *
5 b0a6bcf7 2022-09-13 op * Permission to use, copy, modify, and distribute this software for any
6 b0a6bcf7 2022-09-13 op * purpose with or without fee is hereby granted, provided that the above
7 b0a6bcf7 2022-09-13 op * copyright notice and this permission notice appear in all copies.
8 b0a6bcf7 2022-09-13 op *
9 b0a6bcf7 2022-09-13 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 b0a6bcf7 2022-09-13 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 b0a6bcf7 2022-09-13 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 b0a6bcf7 2022-09-13 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 b0a6bcf7 2022-09-13 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 b0a6bcf7 2022-09-13 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 b0a6bcf7 2022-09-13 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 b0a6bcf7 2022-09-13 op */
17 b0a6bcf7 2022-09-13 op
18 b0a6bcf7 2022-09-13 op #include <sys/types.h>
19 b0a6bcf7 2022-09-13 op #include <sys/queue.h>
20 b0a6bcf7 2022-09-13 op #include <sys/socket.h>
21 b0a6bcf7 2022-09-13 op #include <sys/un.h>
22 b0a6bcf7 2022-09-13 op #include <sys/tree.h>
23 b0a6bcf7 2022-09-13 op #include <sys/time.h>
24 b0a6bcf7 2022-09-13 op #include <sys/uio.h>
25 b0a6bcf7 2022-09-13 op
26 b0a6bcf7 2022-09-13 op #include <sys/stat.h> /* umask */
27 b0a6bcf7 2022-09-13 op #include <sys/un.h> /* sockaddr_un */
28 b0a6bcf7 2022-09-13 op
29 b0a6bcf7 2022-09-13 op #include <errno.h>
30 b0a6bcf7 2022-09-13 op #include <event.h>
31 b0a6bcf7 2022-09-13 op #include <limits.h>
32 b0a6bcf7 2022-09-13 op #include <pwd.h>
33 b0a6bcf7 2022-09-13 op #include <unistd.h>
34 b0a6bcf7 2022-09-13 op #include <stdlib.h>
35 b0a6bcf7 2022-09-13 op #include <stdio.h>
36 b0a6bcf7 2022-09-13 op #include <string.h>
37 b0a6bcf7 2022-09-13 op #include <imsg.h>
38 b0a6bcf7 2022-09-13 op
39 b0a6bcf7 2022-09-13 op #include "proc.h"
40 b0a6bcf7 2022-09-13 op #include "log.h"
41 b0a6bcf7 2022-09-13 op #include "xmalloc.h"
42 b0a6bcf7 2022-09-13 op
43 b0a6bcf7 2022-09-13 op #include "galileo.h"
44 b0a6bcf7 2022-09-13 op
45 b0a6bcf7 2022-09-13 op int
46 b0a6bcf7 2022-09-13 op config_init(struct galileo *env)
47 b0a6bcf7 2022-09-13 op {
48 b0a6bcf7 2022-09-13 op /* Global configuration */
49 b0a6bcf7 2022-09-13 op if (privsep_process == PROC_PARENT)
50 b0a6bcf7 2022-09-13 op env->sc_prefork = PROXY_NUMPROC;
51 b0a6bcf7 2022-09-13 op
52 b0a6bcf7 2022-09-13 op /* Other configuration. */
53 afb86b2c 2022-09-23 op TAILQ_INIT(&env->sc_proxies);
54 b0a6bcf7 2022-09-13 op
55 b0a6bcf7 2022-09-13 op env->sc_sock_fd = -1;
56 b0a6bcf7 2022-09-13 op
57 b0a6bcf7 2022-09-13 op return 0;
58 b0a6bcf7 2022-09-13 op }
59 b0a6bcf7 2022-09-13 op
60 b0a6bcf7 2022-09-13 op void
61 b0a6bcf7 2022-09-13 op config_purge(struct galileo *env)
62 b0a6bcf7 2022-09-13 op {
63 afb86b2c 2022-09-23 op struct proxy *p;
64 b0a6bcf7 2022-09-13 op
65 afb86b2c 2022-09-23 op while ((p = TAILQ_FIRST(&env->sc_proxies)) != NULL) {
66 afb86b2c 2022-09-23 op TAILQ_REMOVE(&env->sc_proxies, p, pr_entry);
67 afb86b2c 2022-09-23 op proxy_purge(p);
68 b0a6bcf7 2022-09-13 op }
69 b0a6bcf7 2022-09-13 op }
70 b0a6bcf7 2022-09-13 op
71 b0a6bcf7 2022-09-13 op int
72 afb86b2c 2022-09-23 op config_setproxy(struct galileo *env, struct proxy *p)
73 b0a6bcf7 2022-09-13 op {
74 b0a6bcf7 2022-09-13 op struct privsep *ps = env->sc_ps;
75 b0a6bcf7 2022-09-13 op
76 afb86b2c 2022-09-23 op if (proc_compose(ps, PROC_PROXY, IMSG_CFG_SRV, p, sizeof(*p)) == -1)
77 b0a6bcf7 2022-09-13 op fatal("proc_compose");
78 b0a6bcf7 2022-09-13 op return 0;
79 b0a6bcf7 2022-09-13 op }
80 b0a6bcf7 2022-09-13 op
81 b0a6bcf7 2022-09-13 op int
82 afb86b2c 2022-09-23 op config_getproxy(struct galileo *env, struct imsg *imsg)
83 b0a6bcf7 2022-09-13 op {
84 afb86b2c 2022-09-23 op struct proxy *proxy;
85 b0a6bcf7 2022-09-13 op
86 afb86b2c 2022-09-23 op proxy = xcalloc(1, sizeof(*proxy));
87 afb86b2c 2022-09-23 op if (IMSG_DATA_SIZE(imsg) != sizeof(*proxy))
88 b0a6bcf7 2022-09-13 op fatalx("%s: bad imsg size", __func__);
89 b0a6bcf7 2022-09-13 op
90 afb86b2c 2022-09-23 op memcpy(proxy, imsg->data, sizeof(*proxy));
91 b0a6bcf7 2022-09-13 op
92 26cd3e9d 2022-09-23 op log_debug("%s: proxy=%s -> %s:%s (%s)", __func__,
93 afb86b2c 2022-09-23 op proxy->pr_conf.host, proxy->pr_conf.proxy_addr,
94 afb86b2c 2022-09-23 op proxy->pr_conf.proxy_port, proxy->pr_conf.proxy_name);
95 b0a6bcf7 2022-09-13 op
96 afb86b2c 2022-09-23 op TAILQ_INSERT_TAIL(&env->sc_proxies, proxy, pr_entry);
97 b0a6bcf7 2022-09-13 op
98 b0a6bcf7 2022-09-13 op return 0;
99 b0a6bcf7 2022-09-13 op }
100 b0a6bcf7 2022-09-13 op
101 b0a6bcf7 2022-09-13 op int
102 b0a6bcf7 2022-09-13 op config_setsock(struct galileo *env)
103 b0a6bcf7 2022-09-13 op {
104 b0a6bcf7 2022-09-13 op struct privsep *ps = env->sc_ps;
105 b0a6bcf7 2022-09-13 op struct passwd *pw = ps->ps_pw;
106 b0a6bcf7 2022-09-13 op struct sockaddr_un sun;
107 b0a6bcf7 2022-09-13 op const char *path = GALILEO_SOCK;
108 b0a6bcf7 2022-09-13 op int id, fd, old_umask;
109 b0a6bcf7 2022-09-13 op
110 b0a6bcf7 2022-09-13 op /*
111 b0a6bcf7 2022-09-13 op * open listening socket.
112 b0a6bcf7 2022-09-13 op *
113 b0a6bcf7 2022-09-13 op * XXX: move to server.c as server_privinit like httpd once we
114 b0a6bcf7 2022-09-13 op * support more than one listening socket.
115 b0a6bcf7 2022-09-13 op */
116 b0a6bcf7 2022-09-13 op if ((fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK, 0)) == -1) {
117 b0a6bcf7 2022-09-13 op log_warn("%s: socket", __func__);
118 b0a6bcf7 2022-09-13 op return (-1);
119 b0a6bcf7 2022-09-13 op }
120 b0a6bcf7 2022-09-13 op
121 b0a6bcf7 2022-09-13 op memset(&sun, 0, sizeof(sun));
122 b0a6bcf7 2022-09-13 op sun.sun_family = AF_UNIX;
123 b0a6bcf7 2022-09-13 op strlcpy(sun.sun_path, path, sizeof(sun.sun_path));
124 b0a6bcf7 2022-09-13 op
125 b0a6bcf7 2022-09-13 op if (unlink(path) == -1)
126 b0a6bcf7 2022-09-13 op if (errno != ENOENT) {
127 b0a6bcf7 2022-09-13 op log_warn("%s: unlink %s", __func__, path);
128 b0a6bcf7 2022-09-13 op close(fd);
129 b0a6bcf7 2022-09-13 op return (-1);
130 b0a6bcf7 2022-09-13 op }
131 b0a6bcf7 2022-09-13 op
132 b0a6bcf7 2022-09-13 op old_umask = umask(S_IXUSR|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH);
133 b0a6bcf7 2022-09-13 op if (bind(fd, (struct sockaddr *)&sun, sizeof(sun)) == -1) {
134 b0a6bcf7 2022-09-13 op log_warn("%s: bind: %s (%d)", __func__, path, geteuid());
135 b0a6bcf7 2022-09-13 op close(fd);
136 b0a6bcf7 2022-09-13 op umask(old_umask);
137 b0a6bcf7 2022-09-13 op return (-1);
138 b0a6bcf7 2022-09-13 op }
139 b0a6bcf7 2022-09-13 op umask(old_umask);
140 b0a6bcf7 2022-09-13 op
141 b0a6bcf7 2022-09-13 op if (chmod(path, S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP) == -1) {
142 b0a6bcf7 2022-09-13 op log_warn("%s: chmod", __func__);
143 b0a6bcf7 2022-09-13 op close(fd);
144 b0a6bcf7 2022-09-13 op (void)unlink(path);
145 b0a6bcf7 2022-09-13 op return (-1);
146 b0a6bcf7 2022-09-13 op }
147 b0a6bcf7 2022-09-13 op
148 b0a6bcf7 2022-09-13 op if (chown(path, pw->pw_uid, pw->pw_gid) == -1) {
149 b0a6bcf7 2022-09-13 op log_warn("%s: chown", __func__);
150 b0a6bcf7 2022-09-13 op close(fd);
151 b0a6bcf7 2022-09-13 op (void)unlink(path);
152 b0a6bcf7 2022-09-13 op return (-1);
153 b0a6bcf7 2022-09-13 op }
154 b0a6bcf7 2022-09-13 op
155 b0a6bcf7 2022-09-13 op if (listen(fd, 5) == -1) {
156 b0a6bcf7 2022-09-13 op log_warn("%s: listen", __func__);
157 b0a6bcf7 2022-09-13 op close(fd);
158 b0a6bcf7 2022-09-13 op (void)unlink(path);
159 b0a6bcf7 2022-09-13 op return (-1);
160 b0a6bcf7 2022-09-13 op }
161 b0a6bcf7 2022-09-13 op
162 b0a6bcf7 2022-09-13 op for (id = 0; id < PROC_MAX; ++id) {
163 b0a6bcf7 2022-09-13 op int n, m;
164 b0a6bcf7 2022-09-13 op
165 b0a6bcf7 2022-09-13 op if (id == privsep_process || id != PROC_PROXY)
166 b0a6bcf7 2022-09-13 op continue;
167 b0a6bcf7 2022-09-13 op
168 b0a6bcf7 2022-09-13 op n = -1;
169 b0a6bcf7 2022-09-13 op proc_range(ps, id, &n, &m);
170 b0a6bcf7 2022-09-13 op for (n = 0; n < m; ++n) {
171 b0a6bcf7 2022-09-13 op int d;
172 b0a6bcf7 2022-09-13 op
173 b0a6bcf7 2022-09-13 op if ((d = dup(fd)) == -1) {
174 b0a6bcf7 2022-09-13 op log_warn("%s: dup", __func__);
175 b0a6bcf7 2022-09-13 op close(fd);
176 b0a6bcf7 2022-09-13 op return (-1);
177 b0a6bcf7 2022-09-13 op }
178 b0a6bcf7 2022-09-13 op
179 b0a6bcf7 2022-09-13 op if (proc_compose_imsg(ps, id, n, IMSG_CFG_SOCK,
180 b0a6bcf7 2022-09-13 op -1, d, NULL, 0) == -1) {
181 b0a6bcf7 2022-09-13 op log_warn("%s: failed to compose "
182 b0a6bcf7 2022-09-13 op "IMSG_CFG_SOCK", __func__);
183 b0a6bcf7 2022-09-13 op close(fd);
184 b0a6bcf7 2022-09-13 op return (-1);
185 b0a6bcf7 2022-09-13 op }
186 b0a6bcf7 2022-09-13 op if (proc_flush_imsg(ps, id, n) == -1) {
187 b0a6bcf7 2022-09-13 op log_warn("%s: failed to flush", __func__);
188 b0a6bcf7 2022-09-13 op close(fd);
189 b0a6bcf7 2022-09-13 op return (-1);
190 b0a6bcf7 2022-09-13 op }
191 b0a6bcf7 2022-09-13 op }
192 b0a6bcf7 2022-09-13 op }
193 b0a6bcf7 2022-09-13 op
194 cbd105ce 2022-09-23 op close(fd);
195 b0a6bcf7 2022-09-13 op return (0);
196 b0a6bcf7 2022-09-13 op }
197 b0a6bcf7 2022-09-13 op
198 b0a6bcf7 2022-09-13 op int
199 b0a6bcf7 2022-09-13 op config_getsock(struct galileo *env, struct imsg *imsg)
200 b0a6bcf7 2022-09-13 op {
201 b0a6bcf7 2022-09-13 op /* XXX: make it more like httpd/gotwebd' one */
202 b0a6bcf7 2022-09-13 op return imsg->fd;
203 b0a6bcf7 2022-09-13 op }
204 b0a6bcf7 2022-09-13 op
205 b0a6bcf7 2022-09-13 op int
206 b0a6bcf7 2022-09-13 op config_setreset(struct galileo *env)
207 b0a6bcf7 2022-09-13 op {
208 b0a6bcf7 2022-09-13 op struct privsep *ps = env->sc_ps;
209 b0a6bcf7 2022-09-13 op int id;
210 b0a6bcf7 2022-09-13 op
211 b0a6bcf7 2022-09-13 op for (id = 0; id < PROC_MAX; ++id)
212 b0a6bcf7 2022-09-13 op proc_compose(ps, id, IMSG_CTL_RESET, NULL, 0);
213 b0a6bcf7 2022-09-13 op
214 b0a6bcf7 2022-09-13 op return (0);
215 b0a6bcf7 2022-09-13 op }
216 b0a6bcf7 2022-09-13 op
217 b0a6bcf7 2022-09-13 op int
218 b0a6bcf7 2022-09-13 op config_getreset(struct galileo *env, struct imsg *imsg)
219 b0a6bcf7 2022-09-13 op {
220 b0a6bcf7 2022-09-13 op config_purge(env);
221 b0a6bcf7 2022-09-13 op
222 b0a6bcf7 2022-09-13 op return (0);
223 b0a6bcf7 2022-09-13 op }