xref: /openbsd/sbin/pflogd/privsep_fdpass.c (revision 14434de6)
1*14434de6Skrw /*	$OpenBSD: privsep_fdpass.c,v 1.8 2014/11/18 20:51:00 krw Exp $	*/
20296baa5Scanacar 
30296baa5Scanacar /*
40296baa5Scanacar  * Copyright 2001 Niels Provos <provos@citi.umich.edu>
50296baa5Scanacar  * All rights reserved.
60296baa5Scanacar  *
70296baa5Scanacar  * Copyright (c) 2002 Matthieu Herrb
80296baa5Scanacar  * All rights reserved.
90296baa5Scanacar  *
100296baa5Scanacar  * Redistribution and use in source and binary forms, with or without
110296baa5Scanacar  * modification, are permitted provided that the following conditions
120296baa5Scanacar  * are met:
130296baa5Scanacar  *
140296baa5Scanacar  *    - Redistributions of source code must retain the above copyright
150296baa5Scanacar  *      notice, this list of conditions and the following disclaimer.
160296baa5Scanacar  *    - Redistributions in binary form must reproduce the above
170296baa5Scanacar  *      copyright notice, this list of conditions and the following
180296baa5Scanacar  *      disclaimer in the documentation and/or other materials provided
190296baa5Scanacar  *      with the distribution.
200296baa5Scanacar  *
210296baa5Scanacar  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
220296baa5Scanacar  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
230296baa5Scanacar  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
240296baa5Scanacar  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
250296baa5Scanacar  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
260296baa5Scanacar  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
270296baa5Scanacar  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
280296baa5Scanacar  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
290296baa5Scanacar  * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
300296baa5Scanacar  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
310296baa5Scanacar  * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
320296baa5Scanacar  * POSSIBILITY OF SUCH DAMAGE.
330296baa5Scanacar  */
34f4faee91Sderaadt 
35f4faee91Sderaadt #include <sys/types.h>
360296baa5Scanacar #include <sys/uio.h>
370296baa5Scanacar #include <sys/socket.h>
380296baa5Scanacar #include <sys/stat.h>
390296baa5Scanacar #include <err.h>
400296baa5Scanacar #include <errno.h>
410296baa5Scanacar #include <fcntl.h>
420296baa5Scanacar #include <signal.h>
430296baa5Scanacar #include <stdio.h>
440296baa5Scanacar #include <stdlib.h>
450296baa5Scanacar #include <string.h>
460296baa5Scanacar #include <unistd.h>
470296baa5Scanacar #include "pflogd.h"
480296baa5Scanacar 
490296baa5Scanacar void
send_fd(int sock,int fd)500296baa5Scanacar send_fd(int sock, int fd)
510296baa5Scanacar {
520296baa5Scanacar 	struct msghdr msg;
530827ab61Sderaadt 	union {
540827ab61Sderaadt 		struct cmsghdr hdr;
550827ab61Sderaadt 		char buf[CMSG_SPACE(sizeof(int))];
560827ab61Sderaadt 	} cmsgbuf;
570296baa5Scanacar 	struct cmsghdr *cmsg;
580296baa5Scanacar 	struct iovec vec;
590296baa5Scanacar 	int result = 0;
600296baa5Scanacar 	ssize_t n;
610296baa5Scanacar 
620296baa5Scanacar 	memset(&msg, 0, sizeof(msg));
630296baa5Scanacar 
640296baa5Scanacar 	if (fd >= 0) {
650827ab61Sderaadt 		msg.msg_control = (caddr_t)&cmsgbuf.buf;
66da15c7b9Sderaadt 		msg.msg_controllen = sizeof(cmsgbuf.buf);
670296baa5Scanacar 		cmsg = CMSG_FIRSTHDR(&msg);
680296baa5Scanacar 		cmsg->cmsg_len = CMSG_LEN(sizeof(int));
690296baa5Scanacar 		cmsg->cmsg_level = SOL_SOCKET;
700296baa5Scanacar 		cmsg->cmsg_type = SCM_RIGHTS;
710296baa5Scanacar 		*(int *)CMSG_DATA(cmsg) = fd;
720296baa5Scanacar 	} else {
730296baa5Scanacar 		result = errno;
740296baa5Scanacar 	}
750296baa5Scanacar 
760296baa5Scanacar 	vec.iov_base = &result;
770296baa5Scanacar 	vec.iov_len = sizeof(int);
780296baa5Scanacar 	msg.msg_iov = &vec;
790296baa5Scanacar 	msg.msg_iovlen = 1;
800296baa5Scanacar 
810296baa5Scanacar 	if ((n = sendmsg(sock, &msg, 0)) == -1)
820296baa5Scanacar 		warn("%s: sendmsg(%d)", __func__, sock);
830296baa5Scanacar 	if (n != sizeof(int))
840296baa5Scanacar 		warnx("%s: sendmsg: expected sent 1 got %ld",
850296baa5Scanacar 		    __func__, (long)n);
860296baa5Scanacar }
870296baa5Scanacar 
880296baa5Scanacar int
receive_fd(int sock)890296baa5Scanacar receive_fd(int sock)
900296baa5Scanacar {
910296baa5Scanacar 	struct msghdr msg;
920827ab61Sderaadt 	union {
930827ab61Sderaadt 		struct cmsghdr hdr;
940827ab61Sderaadt 		char buf[CMSG_SPACE(sizeof(int))];
950827ab61Sderaadt 	} cmsgbuf;
960296baa5Scanacar 	struct cmsghdr *cmsg;
970296baa5Scanacar 	struct iovec vec;
980296baa5Scanacar 	ssize_t n;
990296baa5Scanacar 	int result;
1000296baa5Scanacar 	int fd;
1010296baa5Scanacar 
1020296baa5Scanacar 	memset(&msg, 0, sizeof(msg));
1030296baa5Scanacar 	vec.iov_base = &result;
1040296baa5Scanacar 	vec.iov_len = sizeof(int);
1050296baa5Scanacar 	msg.msg_iov = &vec;
1060296baa5Scanacar 	msg.msg_iovlen = 1;
1070827ab61Sderaadt 	msg.msg_control = &cmsgbuf.buf;
108da15c7b9Sderaadt 	msg.msg_controllen = sizeof(cmsgbuf.buf);
1090296baa5Scanacar 
110a592c95fSderaadt 	if ((n = recvmsg(sock, &msg, 0)) == -1) {
1110296baa5Scanacar 		warn("%s: recvmsg", __func__);
112a592c95fSderaadt 		return -1;
113a592c95fSderaadt 	}
1140296baa5Scanacar 	if (n != sizeof(int))
1150296baa5Scanacar 		warnx("%s: recvmsg: expected received 1 got %ld",
1160296baa5Scanacar 		    __func__, (long)n);
1170296baa5Scanacar 	if (result == 0) {
1180296baa5Scanacar 		cmsg = CMSG_FIRSTHDR(&msg);
119ee42e03cSdjm 		if (cmsg == NULL) {
120ee42e03cSdjm 			warnx("%s: no message header", __func__);
121ee42e03cSdjm 			return -1;
122ee42e03cSdjm 		}
1230296baa5Scanacar 		if (cmsg->cmsg_type != SCM_RIGHTS)
1240296baa5Scanacar 			warnx("%s: expected type %d got %d", __func__,
1250296baa5Scanacar 			    SCM_RIGHTS, cmsg->cmsg_type);
1260296baa5Scanacar 		fd = (*(int *)CMSG_DATA(cmsg));
1270296baa5Scanacar 		return fd;
1280296baa5Scanacar 	} else {
1290296baa5Scanacar 		errno = result;
1300296baa5Scanacar 		return -1;
1310296baa5Scanacar 	}
1320296baa5Scanacar }
133