op public repos

Blame

Date:: Tue Jan 3 09:09:56 2023 UTC
Message:: introduce connection options to gotd.conf Allow administrators to tweak the default authentication and request timeouts if needed, and to tweak the limit of concurrent connections for specific user accounts. with several tweaks from and ok op@
Actions:: History | Blob | Raw File
  1 0ccf3acb 2022-11-16 stsp /*
  2 0ccf3acb 2022-11-16 stsp  * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
  3 0ccf3acb 2022-11-16 stsp  * Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
  4 0ccf3acb 2022-11-16 stsp  *
  5 0ccf3acb 2022-11-16 stsp  * Permission to use, copy, modify, and distribute this software for any
  6 0ccf3acb 2022-11-16 stsp  * purpose with or without fee is hereby granted, provided that the above
  7 0ccf3acb 2022-11-16 stsp  * copyright notice and this permission notice appear in all copies.
  8 0ccf3acb 2022-11-16 stsp  *
  9 0ccf3acb 2022-11-16 stsp  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 10 0ccf3acb 2022-11-16 stsp  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 11 0ccf3acb 2022-11-16 stsp  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 12 0ccf3acb 2022-11-16 stsp  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 13 0ccf3acb 2022-11-16 stsp  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 14 0ccf3acb 2022-11-16 stsp  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 15 0ccf3acb 2022-11-16 stsp  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 16 0ccf3acb 2022-11-16 stsp  */
 17 0ccf3acb 2022-11-16 stsp 
 18 0ccf3acb 2022-11-16 stsp #include <sys/types.h>
 19 365cf0f3 2022-12-29 stsp #include <sys/socket.h>
 20 0ccf3acb 2022-11-16 stsp #include <sys/queue.h>
 21 0ccf3acb 2022-11-16 stsp #include <sys/uio.h>
 22 0ccf3acb 2022-11-16 stsp 
 23 0ccf3acb 2022-11-16 stsp #include <errno.h>
 24 0ccf3acb 2022-11-16 stsp #include <event.h>
 25 0ccf3acb 2022-11-16 stsp #include <limits.h>
 26 0ccf3acb 2022-11-16 stsp #include <pwd.h>
 27 0ccf3acb 2022-11-16 stsp #include <grp.h>
 28 0ccf3acb 2022-11-16 stsp #include <sha1.h>
 29 5e25db14 2022-12-29 stsp #include <signal.h>
 30 0ccf3acb 2022-11-16 stsp #include <stdint.h>
 31 0ccf3acb 2022-11-16 stsp #include <stdio.h>
 32 0ccf3acb 2022-11-16 stsp #include <stdlib.h>
 33 5e25db14 2022-12-29 stsp #include <string.h>
 34 0ccf3acb 2022-11-16 stsp #include <imsg.h>
 35 ddbe612c 2022-11-17 stsp #include <unistd.h>
 36 0ccf3acb 2022-11-16 stsp 
 37 0ccf3acb 2022-11-16 stsp #include "got_error.h"
 38 5e25db14 2022-12-29 stsp #include "got_path.h"
 39 0ccf3acb 2022-11-16 stsp 
 40 0ccf3acb 2022-11-16 stsp #include "gotd.h"
 41 ddbe612c 2022-11-17 stsp #include "log.h"
 42 0ccf3acb 2022-11-16 stsp #include "auth.h"
 43 0ccf3acb 2022-11-16 stsp 
 44 5e25db14 2022-12-29 stsp static struct gotd_auth {
 45 5e25db14 2022-12-29 stsp 	pid_t pid;
 46 5e25db14 2022-12-29 stsp 	const char *title;
 47 5e25db14 2022-12-29 stsp 	struct gotd_repo *repo;
 48 5e25db14 2022-12-29 stsp } gotd_auth;
 49 5e25db14 2022-12-29 stsp 
 50 5e25db14 2022-12-29 stsp static void auth_shutdown(void);
 51 5e25db14 2022-12-29 stsp 
 52 5e25db14 2022-12-29 stsp static void
 53 5e25db14 2022-12-29 stsp auth_sighdlr(int sig, short event, void *arg)
 54 5e25db14 2022-12-29 stsp {
 55 5e25db14 2022-12-29 stsp 	/*
 56 5e25db14 2022-12-29 stsp 	 * Normal signal handler rules don't apply because libevent
 57 5e25db14 2022-12-29 stsp 	 * decouples for us.
 58 5e25db14 2022-12-29 stsp 	 */
 59 5e25db14 2022-12-29 stsp 
 60 5e25db14 2022-12-29 stsp 	switch (sig) {
 61 5e25db14 2022-12-29 stsp 	case SIGHUP:
 62 5e25db14 2022-12-29 stsp 		break;
 63 5e25db14 2022-12-29 stsp 	case SIGUSR1:
 64 5e25db14 2022-12-29 stsp 		break;
 65 5e25db14 2022-12-29 stsp 	case SIGTERM:
 66 5e25db14 2022-12-29 stsp 	case SIGINT:
 67 5e25db14 2022-12-29 stsp 		auth_shutdown();
 68 5e25db14 2022-12-29 stsp 		/* NOTREACHED */
 69 5e25db14 2022-12-29 stsp 		break;
 70 5e25db14 2022-12-29 stsp 	default:
 71 5e25db14 2022-12-29 stsp 		fatalx("unexpected signal");
 72 5e25db14 2022-12-29 stsp 	}
 73 5e25db14 2022-12-29 stsp }
 74 5e25db14 2022-12-29 stsp 
 75 40b85cca 2023-01-03 stsp int
 76 40b85cca 2023-01-03 stsp gotd_auth_parseuid(const char *s, uid_t *uid)
 77 0ccf3acb 2022-11-16 stsp {
 78 0ccf3acb 2022-11-16 stsp 	struct passwd *pw;
 79 0ccf3acb 2022-11-16 stsp 	const char *errstr;
 80 0ccf3acb 2022-11-16 stsp 
 81 0ccf3acb 2022-11-16 stsp 	if ((pw = getpwnam(s)) != NULL) {
 82 0ccf3acb 2022-11-16 stsp 		*uid = pw->pw_uid;
 83 0ccf3acb 2022-11-16 stsp 		if (*uid == UID_MAX)
 84 0ccf3acb 2022-11-16 stsp 			return -1;
 85 0ccf3acb 2022-11-16 stsp 		return 0;
 86 0ccf3acb 2022-11-16 stsp 	}
 87 0ccf3acb 2022-11-16 stsp 	*uid = strtonum(s, 0, UID_MAX - 1, &errstr);
 88 0ccf3acb 2022-11-16 stsp 	if (errstr)
 89 0ccf3acb 2022-11-16 stsp 		return -1;
 90 0ccf3acb 2022-11-16 stsp 	return 0;
 91 0ccf3acb 2022-11-16 stsp }
 92 0ccf3acb 2022-11-16 stsp 
 93 0ccf3acb 2022-11-16 stsp static int
 94 0ccf3acb 2022-11-16 stsp uidcheck(const char *s, uid_t desired)
 95 0ccf3acb 2022-11-16 stsp {
 96 0ccf3acb 2022-11-16 stsp 	uid_t uid;
 97 0ccf3acb 2022-11-16 stsp 
 98 40b85cca 2023-01-03 stsp 	if (gotd_auth_parseuid(s, &uid) != 0)
 99 0ccf3acb 2022-11-16 stsp 		return -1;
100 0ccf3acb 2022-11-16 stsp 	if (uid != desired)
101 0ccf3acb 2022-11-16 stsp 		return -1;
102 0ccf3acb 2022-11-16 stsp 	return 0;
103 0ccf3acb 2022-11-16 stsp }
104 0ccf3acb 2022-11-16 stsp 
105 0ccf3acb 2022-11-16 stsp static int
106 0ccf3acb 2022-11-16 stsp parsegid(const char *s, gid_t *gid)
107 0ccf3acb 2022-11-16 stsp {
108 0ccf3acb 2022-11-16 stsp 	struct group *gr;
109 0ccf3acb 2022-11-16 stsp 	const char *errstr;
110 0ccf3acb 2022-11-16 stsp 
111 0ccf3acb 2022-11-16 stsp 	if ((gr = getgrnam(s)) != NULL) {
112 0ccf3acb 2022-11-16 stsp 		*gid = gr->gr_gid;
113 0ccf3acb 2022-11-16 stsp 		if (*gid == GID_MAX)
114 0ccf3acb 2022-11-16 stsp 			return -1;
115 0ccf3acb 2022-11-16 stsp 		return 0;
116 0ccf3acb 2022-11-16 stsp 	}
117 0ccf3acb 2022-11-16 stsp 	*gid = strtonum(s, 0, GID_MAX - 1, &errstr);
118 0ccf3acb 2022-11-16 stsp 	if (errstr)
119 0ccf3acb 2022-11-16 stsp 		return -1;
120 0ccf3acb 2022-11-16 stsp 	return 0;
121 0ccf3acb 2022-11-16 stsp }
122 0ccf3acb 2022-11-16 stsp 
123 0ccf3acb 2022-11-16 stsp static int
124 0ccf3acb 2022-11-16 stsp match_identifier(const char *identifier, gid_t *groups, int ngroups,
125 0ccf3acb 2022-11-16 stsp     uid_t euid, gid_t egid)
126 0ccf3acb 2022-11-16 stsp {
127 0ccf3acb 2022-11-16 stsp 	int i;
128 0ccf3acb 2022-11-16 stsp 
129 0ccf3acb 2022-11-16 stsp 	if (identifier[0] == ':') {
130 0ccf3acb 2022-11-16 stsp 		gid_t rgid;
131 0ccf3acb 2022-11-16 stsp 		if (parsegid(identifier + 1, &rgid) == -1)
132 0ccf3acb 2022-11-16 stsp 			return 0;
133 ddbe612c 2022-11-17 stsp 		if (rgid == egid)
134 ddbe612c 2022-11-17 stsp 			return 1;
135 0ccf3acb 2022-11-16 stsp 		for (i = 0; i < ngroups; i++) {
136 ddbe612c 2022-11-17 stsp 			if (rgid == groups[i])
137 0ccf3acb 2022-11-16 stsp 				break;
138 0ccf3acb 2022-11-16 stsp 		}
139 0ccf3acb 2022-11-16 stsp 		if (i == ngroups)
140 0ccf3acb 2022-11-16 stsp 			return 0;
141 0ccf3acb 2022-11-16 stsp 	} else if (uidcheck(identifier, euid) != 0)
142 0ccf3acb 2022-11-16 stsp 		return 0;
143 0ccf3acb 2022-11-16 stsp 
144 0ccf3acb 2022-11-16 stsp 	return 1;
145 0ccf3acb 2022-11-16 stsp }
146 0ccf3acb 2022-11-16 stsp 
147 5e25db14 2022-12-29 stsp static const struct got_error *
148 5e25db14 2022-12-29 stsp auth_check(struct gotd_access_rule_list *rules, const char *repo_name,
149 ddbe612c 2022-11-17 stsp     uid_t euid, gid_t egid, int required_auth)
150 0ccf3acb 2022-11-16 stsp {
151 0ccf3acb 2022-11-16 stsp 	struct gotd_access_rule *rule;
152 0ccf3acb 2022-11-16 stsp 	enum gotd_access access = GOTD_ACCESS_DENIED;
153 ddbe612c 2022-11-17 stsp 	struct passwd *pw;
154 ddbe612c 2022-11-17 stsp 	gid_t groups[NGROUPS_MAX];
155 ddbe612c 2022-11-17 stsp 	int ngroups = NGROUPS_MAX;
156 0ccf3acb 2022-11-16 stsp 
157 ddbe612c 2022-11-17 stsp 	pw = getpwuid(euid);
158 e18d071f 2022-11-20 stsp 	if (pw == NULL) {
159 e18d071f 2022-11-20 stsp 		if (errno)
160 e18d071f 2022-11-20 stsp 			return got_error_from_errno("getpwuid");
161 e18d071f 2022-11-20 stsp 		else
162 e18d071f 2022-11-20 stsp 			return got_error_set_errno(EACCES, repo_name);
163 e18d071f 2022-11-20 stsp 	}
164 ddbe612c 2022-11-17 stsp 
165 ddbe612c 2022-11-17 stsp 	if (getgrouplist(pw->pw_name, pw->pw_gid, groups, &ngroups) == -1)
166 ddbe612c 2022-11-17 stsp 		log_warnx("group membership list truncated");
167 ddbe612c 2022-11-17 stsp 
168 0ccf3acb 2022-11-16 stsp 	STAILQ_FOREACH(rule, rules, entry) {
169 0ccf3acb 2022-11-16 stsp 		if (!match_identifier(rule->identifier, groups, ngroups,
170 0ccf3acb 2022-11-16 stsp 		    euid, egid))
171 0ccf3acb 2022-11-16 stsp 			continue;
172 0ccf3acb 2022-11-16 stsp 
173 0ccf3acb 2022-11-16 stsp 		access = rule->access;
174 0ccf3acb 2022-11-16 stsp 		if (rule->access == GOTD_ACCESS_PERMITTED &&
175 0ccf3acb 2022-11-16 stsp 		    (rule->authorization & required_auth) != required_auth)
176 0ccf3acb 2022-11-16 stsp 			access = GOTD_ACCESS_DENIED;
177 0ccf3acb 2022-11-16 stsp 	}
178 0ccf3acb 2022-11-16 stsp 
179 0ccf3acb 2022-11-16 stsp 	if (access == GOTD_ACCESS_DENIED)
180 0ccf3acb 2022-11-16 stsp 		return got_error_set_errno(EACCES, repo_name);
181 0ccf3acb 2022-11-16 stsp 
182 0ccf3acb 2022-11-16 stsp 	if (access == GOTD_ACCESS_PERMITTED)
183 0ccf3acb 2022-11-16 stsp 		return NULL;
184 0ccf3acb 2022-11-16 stsp 
185 0ccf3acb 2022-11-16 stsp 	/* should not happen, this would be a bug */
186 0ccf3acb 2022-11-16 stsp 	return got_error_msg(GOT_ERR_NOT_IMPL, "bad access rule");
187 0ccf3acb 2022-11-16 stsp }
188 5e25db14 2022-12-29 stsp 
189 5e25db14 2022-12-29 stsp static const struct got_error *
190 5e25db14 2022-12-29 stsp recv_authreq(struct imsg *imsg, struct gotd_imsgev *iev)
191 5e25db14 2022-12-29 stsp {
192 5e25db14 2022-12-29 stsp 	const struct got_error *err;
193 5e25db14 2022-12-29 stsp 	struct imsgbuf *ibuf = &iev->ibuf;
194 5e25db14 2022-12-29 stsp 	struct gotd_imsg_auth iauth;
195 5e25db14 2022-12-29 stsp 	size_t datalen;
196 365cf0f3 2022-12-29 stsp 	uid_t euid;
197 365cf0f3 2022-12-29 stsp 	gid_t egid;
198 5e25db14 2022-12-29 stsp 
199 5e25db14 2022-12-29 stsp 	log_debug("authentication request received");
200 5e25db14 2022-12-29 stsp 
201 5e25db14 2022-12-29 stsp 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
202 5e25db14 2022-12-29 stsp 	if (datalen != sizeof(iauth))
203 5e25db14 2022-12-29 stsp 		return got_error(GOT_ERR_PRIVSEP_LEN);
204 5e25db14 2022-12-29 stsp 
205 5e25db14 2022-12-29 stsp 	memcpy(&iauth, imsg->data, datalen);
206 365cf0f3 2022-12-29 stsp 
207 365cf0f3 2022-12-29 stsp 	if (imsg->fd == -1)
208 365cf0f3 2022-12-29 stsp 		return got_error(GOT_ERR_PRIVSEP_NO_FD);
209 365cf0f3 2022-12-29 stsp 
210 365cf0f3 2022-12-29 stsp 	if (getpeereid(imsg->fd, &euid, &egid) == -1)
211 365cf0f3 2022-12-29 stsp 		return got_error_from_errno("getpeerid");
212 5e25db14 2022-12-29 stsp 
213 365cf0f3 2022-12-29 stsp 	if (iauth.euid != euid)
214 365cf0f3 2022-12-29 stsp 		return got_error(GOT_ERR_UID);
215 365cf0f3 2022-12-29 stsp 	if (iauth.egid != egid)
216 365cf0f3 2022-12-29 stsp 		return got_error(GOT_ERR_GID);
217 365cf0f3 2022-12-29 stsp 
218 365cf0f3 2022-12-29 stsp 	log_debug("authenticating uid %d gid %d", euid, egid);
219 365cf0f3 2022-12-29 stsp 
220 5e25db14 2022-12-29 stsp 	err = auth_check(&gotd_auth.repo->rules, gotd_auth.repo->name,
221 5e25db14 2022-12-29 stsp 	    iauth.euid, iauth.egid, iauth.required_auth);
222 5e25db14 2022-12-29 stsp 	if (err) {
223 5e25db14 2022-12-29 stsp 		gotd_imsg_send_error(ibuf, PROC_AUTH, iauth.client_id, err);
224 5e25db14 2022-12-29 stsp 		return err;
225 5e25db14 2022-12-29 stsp 	}
226 5e25db14 2022-12-29 stsp 
227 5e25db14 2022-12-29 stsp 	if (gotd_imsg_compose_event(iev, GOTD_IMSG_ACCESS_GRANTED,
228 5e25db14 2022-12-29 stsp 	    PROC_AUTH, -1, NULL, 0) == -1)
229 5e25db14 2022-12-29 stsp 		return got_error_from_errno("imsg compose ACCESS_GRANTED");
230 5e25db14 2022-12-29 stsp 
231 5e25db14 2022-12-29 stsp 	return NULL;
232 5e25db14 2022-12-29 stsp }
233 5e25db14 2022-12-29 stsp 
234 5e25db14 2022-12-29 stsp static void
235 5e25db14 2022-12-29 stsp auth_dispatch(int fd, short event, void *arg)
236 5e25db14 2022-12-29 stsp {
237 5e25db14 2022-12-29 stsp 	const struct got_error *err = NULL;
238 5e25db14 2022-12-29 stsp 	struct gotd_imsgev *iev = arg;
239 5e25db14 2022-12-29 stsp 	struct imsgbuf *ibuf = &iev->ibuf;
240 5e25db14 2022-12-29 stsp 	struct imsg imsg;
241 5e25db14 2022-12-29 stsp 	ssize_t n;
242 5e25db14 2022-12-29 stsp 	int shut = 0;
243 5e25db14 2022-12-29 stsp 
244 5e25db14 2022-12-29 stsp 	if (event & EV_READ) {
245 5e25db14 2022-12-29 stsp 		if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
246 5e25db14 2022-12-29 stsp 			fatal("imsg_read error");
247 5e25db14 2022-12-29 stsp 		if (n == 0)	/* Connection closed. */
248 5e25db14 2022-12-29 stsp 			shut = 1;
249 5e25db14 2022-12-29 stsp 	}
250 5e25db14 2022-12-29 stsp 
251 5e25db14 2022-12-29 stsp 	if (event & EV_WRITE) {
252 5e25db14 2022-12-29 stsp 		n = msgbuf_write(&ibuf->w);
253 5e25db14 2022-12-29 stsp 		if (n == -1 && errno != EAGAIN)
254 5e25db14 2022-12-29 stsp 			fatal("msgbuf_write");
255 5e25db14 2022-12-29 stsp 		if (n == 0)	/* Connection closed. */
256 5e25db14 2022-12-29 stsp 			shut = 1;
257 5e25db14 2022-12-29 stsp 	}
258 5e25db14 2022-12-29 stsp 
259 5e25db14 2022-12-29 stsp 	for (;;) {
260 5e25db14 2022-12-29 stsp 		if ((n = imsg_get(ibuf, &imsg)) == -1)
261 5e25db14 2022-12-29 stsp 			fatal("%s: imsg_get", __func__);
262 5e25db14 2022-12-29 stsp 		if (n == 0)	/* No more messages. */
263 5e25db14 2022-12-29 stsp 			break;
264 5e25db14 2022-12-29 stsp 
265 5e25db14 2022-12-29 stsp 		switch (imsg.hdr.type) {
266 5e25db14 2022-12-29 stsp 		case GOTD_IMSG_AUTHENTICATE:
267 5e25db14 2022-12-29 stsp 			err = recv_authreq(&imsg, iev);
268 5e25db14 2022-12-29 stsp 			if (err)
269 5e25db14 2022-12-29 stsp 				log_warnx("%s: %s", gotd_auth.title, err->msg);
270 5e25db14 2022-12-29 stsp 			break;
271 5e25db14 2022-12-29 stsp 		default:
272 5e25db14 2022-12-29 stsp 			log_debug("%s: unexpected imsg %d", gotd_auth.title,
273 5e25db14 2022-12-29 stsp 			    imsg.hdr.type);
274 5e25db14 2022-12-29 stsp 			break;
275 5e25db14 2022-12-29 stsp 		}
276 5e25db14 2022-12-29 stsp 
277 5e25db14 2022-12-29 stsp 		imsg_free(&imsg);
278 5e25db14 2022-12-29 stsp 	}
279 5e25db14 2022-12-29 stsp 
280 5e25db14 2022-12-29 stsp 	if (!shut) {
281 5e25db14 2022-12-29 stsp 		gotd_imsg_event_add(iev);
282 5e25db14 2022-12-29 stsp 	} else {
283 5e25db14 2022-12-29 stsp 		/* This pipe is dead. Remove its event handler */
284 5e25db14 2022-12-29 stsp 		event_del(&iev->ev);
285 5e25db14 2022-12-29 stsp 		event_loopexit(NULL);
286 5e25db14 2022-12-29 stsp 	}
287 5e25db14 2022-12-29 stsp }
288 5e25db14 2022-12-29 stsp 
289 5e25db14 2022-12-29 stsp void
290 5e25db14 2022-12-29 stsp auth_main(const char *title, struct gotd_repolist *repos,
291 5e25db14 2022-12-29 stsp     const char *repo_path)
292 5e25db14 2022-12-29 stsp {
293 5e25db14 2022-12-29 stsp 	struct gotd_repo *repo = NULL;
294 5e25db14 2022-12-29 stsp 	struct gotd_imsgev iev;
295 5e25db14 2022-12-29 stsp 	struct event evsigint, evsigterm, evsighup, evsigusr1;
296 5e25db14 2022-12-29 stsp 
297 5e25db14 2022-12-29 stsp 	gotd_auth.title = title;
298 5e25db14 2022-12-29 stsp 	gotd_auth.pid = getpid();
299 5e25db14 2022-12-29 stsp 	TAILQ_FOREACH(repo, repos, entry) {
300 5e25db14 2022-12-29 stsp 		if (got_path_cmp(repo->path, repo_path,
301 5e25db14 2022-12-29 stsp 		    strlen(repo->path), strlen(repo_path)) == 0)
302 5e25db14 2022-12-29 stsp 			break;
303 5e25db14 2022-12-29 stsp 	}
304 5e25db14 2022-12-29 stsp 	if (repo == NULL)
305 5e25db14 2022-12-29 stsp 		fatalx("repository %s not found in config", repo_path);
306 5e25db14 2022-12-29 stsp 	gotd_auth.repo = repo;
307 5e25db14 2022-12-29 stsp 
308 5e25db14 2022-12-29 stsp 	signal_set(&evsigint, SIGINT, auth_sighdlr, NULL);
309 5e25db14 2022-12-29 stsp 	signal_set(&evsigterm, SIGTERM, auth_sighdlr, NULL);
310 5e25db14 2022-12-29 stsp 	signal_set(&evsighup, SIGHUP, auth_sighdlr, NULL);
311 5e25db14 2022-12-29 stsp 	signal_set(&evsigusr1, SIGUSR1, auth_sighdlr, NULL);
312 5e25db14 2022-12-29 stsp 	signal(SIGPIPE, SIG_IGN);
313 5e25db14 2022-12-29 stsp 
314 5e25db14 2022-12-29 stsp 	signal_add(&evsigint, NULL);
315 5e25db14 2022-12-29 stsp 	signal_add(&evsigterm, NULL);
316 5e25db14 2022-12-29 stsp 	signal_add(&evsighup, NULL);
317 5e25db14 2022-12-29 stsp 	signal_add(&evsigusr1, NULL);
318 5e25db14 2022-12-29 stsp 
319 5e25db14 2022-12-29 stsp 	imsg_init(&iev.ibuf, GOTD_FILENO_MSG_PIPE);
320 5e25db14 2022-12-29 stsp 	iev.handler = auth_dispatch;
321 5e25db14 2022-12-29 stsp 	iev.events = EV_READ;
322 5e25db14 2022-12-29 stsp 	iev.handler_arg = NULL;
323 5e25db14 2022-12-29 stsp 	event_set(&iev.ev, iev.ibuf.fd, EV_READ, auth_dispatch, &iev);
324 5e25db14 2022-12-29 stsp 	if (event_add(&iev.ev, NULL) == -1)
325 5e25db14 2022-12-29 stsp 		fatalx("event add");
326 5e25db14 2022-12-29 stsp 
327 5e25db14 2022-12-29 stsp 	event_dispatch();
328 5e25db14 2022-12-29 stsp 
329 5e25db14 2022-12-29 stsp 	auth_shutdown();
330 5e25db14 2022-12-29 stsp }
331 5e25db14 2022-12-29 stsp 
332 5e25db14 2022-12-29 stsp static void
333 5e25db14 2022-12-29 stsp auth_shutdown(void)
334 5e25db14 2022-12-29 stsp {
335 5e25db14 2022-12-29 stsp 	log_debug("%s: shutting down", gotd_auth.title);
336 5e25db14 2022-12-29 stsp 	exit(0);
337 5e25db14 2022-12-29 stsp }