17b93fadfSCorey Bryant /*
27b93fadfSCorey Bryant * QEMU Bridge Helper
37b93fadfSCorey Bryant *
47b93fadfSCorey Bryant * Copyright IBM, Corp. 2011
57b93fadfSCorey Bryant *
67b93fadfSCorey Bryant * Authors:
77b93fadfSCorey Bryant * Anthony Liguori <aliguori@us.ibm.com>
87b93fadfSCorey Bryant * Richa Marwaha <rmarwah@linux.vnet.ibm.com>
97b93fadfSCorey Bryant * Corey Bryant <coreyb@linux.vnet.ibm.com>
107b93fadfSCorey Bryant *
117b93fadfSCorey Bryant * This work is licensed under the terms of the GNU GPL, version 2. See
127b93fadfSCorey Bryant * the COPYING file in the top-level directory.
13436e3530SMarkus Armbruster */
14436e3530SMarkus Armbruster
15436e3530SMarkus Armbruster /*
16436e3530SMarkus Armbruster * Known shortcomings:
17436e3530SMarkus Armbruster * - There is no manual page
18436e3530SMarkus Armbruster * - The syntax of the ACL file is not documented anywhere
19436e3530SMarkus Armbruster * - parse_acl_file() doesn't report fopen() failure properly, fails
20436e3530SMarkus Armbruster * to check ferror() after fgets() failure, arbitrarily truncates
21436e3530SMarkus Armbruster * long lines, handles whitespace inconsistently, error messages
22436e3530SMarkus Armbruster * don't point to the offending file and line, errors in included
23436e3530SMarkus Armbruster * files are reported, but otherwise ignored, ...
247b93fadfSCorey Bryant */
257b93fadfSCorey Bryant
26d38ea87aSPeter Maydell #include "qemu/osdep.h"
277b93fadfSCorey Bryant
287b93fadfSCorey Bryant
297b93fadfSCorey Bryant #include <sys/ioctl.h>
307b93fadfSCorey Bryant #include <sys/socket.h>
317b93fadfSCorey Bryant #include <sys/un.h>
327b93fadfSCorey Bryant #include <sys/prctl.h>
337b93fadfSCorey Bryant
347b93fadfSCorey Bryant #include <net/if.h>
357b93fadfSCorey Bryant
367b93fadfSCorey Bryant #include <linux/sockios.h>
377b93fadfSCorey Bryant
3834309d2bSCorey Bryant #ifndef SIOCBRADDIF
3934309d2bSCorey Bryant #include <linux/if_bridge.h>
4034309d2bSCorey Bryant #endif
4134309d2bSCorey Bryant
421de7afc9SPaolo Bonzini #include "qemu/queue.h"
43*f761b41aSPaolo Bonzini #include "qemu/cutils.h"
44bdef79a2SCorey Bryant
457b93fadfSCorey Bryant #include "net/tap-linux.h"
467b93fadfSCorey Bryant
47a358bca2SPaolo Bonzini #ifdef CONFIG_LIBCAP_NG
4847e98658SCorey Bryant #include <cap-ng.h>
4947e98658SCorey Bryant #endif
5047e98658SCorey Bryant
51bdef79a2SCorey Bryant #define DEFAULT_ACL_FILE CONFIG_QEMU_CONFDIR "/bridge.conf"
52bdef79a2SCorey Bryant
53bdef79a2SCorey Bryant enum {
54bdef79a2SCorey Bryant ACL_ALLOW = 0,
55bdef79a2SCorey Bryant ACL_ALLOW_ALL,
56bdef79a2SCorey Bryant ACL_DENY,
57bdef79a2SCorey Bryant ACL_DENY_ALL,
58bdef79a2SCorey Bryant };
59bdef79a2SCorey Bryant
60bdef79a2SCorey Bryant typedef struct ACLRule {
61bdef79a2SCorey Bryant int type;
62bdef79a2SCorey Bryant char iface[IFNAMSIZ];
63bdef79a2SCorey Bryant QSIMPLEQ_ENTRY(ACLRule) entry;
64bdef79a2SCorey Bryant } ACLRule;
65bdef79a2SCorey Bryant
66bdef79a2SCorey Bryant typedef QSIMPLEQ_HEAD(ACLList, ACLRule) ACLList;
67bdef79a2SCorey Bryant
usage(void)687b93fadfSCorey Bryant static void usage(void)
697b93fadfSCorey Bryant {
707b93fadfSCorey Bryant fprintf(stderr,
717b93fadfSCorey Bryant "Usage: qemu-bridge-helper [--use-vnet] --br=bridge --fd=unixfd\n");
727b93fadfSCorey Bryant }
737b93fadfSCorey Bryant
parse_acl_file(const char * filename,ACLList * acl_list)74bdef79a2SCorey Bryant static int parse_acl_file(const char *filename, ACLList *acl_list)
75bdef79a2SCorey Bryant {
76bdef79a2SCorey Bryant FILE *f;
77bdef79a2SCorey Bryant char line[4096];
78bdef79a2SCorey Bryant ACLRule *acl_rule;
79bdef79a2SCorey Bryant
80bdef79a2SCorey Bryant f = fopen(filename, "r");
81bdef79a2SCorey Bryant if (f == NULL) {
82bdef79a2SCorey Bryant return -1;
83bdef79a2SCorey Bryant }
84bdef79a2SCorey Bryant
85bdef79a2SCorey Bryant while (fgets(line, sizeof(line), f) != NULL) {
86bdef79a2SCorey Bryant char *ptr = line;
87bdef79a2SCorey Bryant char *cmd, *arg, *argend;
88bdef79a2SCorey Bryant
89b8c3511dSMarkus Armbruster while (g_ascii_isspace(*ptr)) {
90bdef79a2SCorey Bryant ptr++;
91bdef79a2SCorey Bryant }
92bdef79a2SCorey Bryant
93bdef79a2SCorey Bryant /* skip comments and empty lines */
94bdef79a2SCorey Bryant if (*ptr == '#' || *ptr == 0) {
95bdef79a2SCorey Bryant continue;
96bdef79a2SCorey Bryant }
97bdef79a2SCorey Bryant
98bdef79a2SCorey Bryant cmd = ptr;
99bdef79a2SCorey Bryant arg = strchr(cmd, ' ');
100bdef79a2SCorey Bryant if (arg == NULL) {
101bdef79a2SCorey Bryant arg = strchr(cmd, '\t');
102bdef79a2SCorey Bryant }
103bdef79a2SCorey Bryant
104bdef79a2SCorey Bryant if (arg == NULL) {
105bdef79a2SCorey Bryant fprintf(stderr, "Invalid config line:\n %s\n", line);
1063283dde4SPrasad J Pandit goto err;
107bdef79a2SCorey Bryant }
108bdef79a2SCorey Bryant
109bdef79a2SCorey Bryant *arg = 0;
110bdef79a2SCorey Bryant arg++;
111b8c3511dSMarkus Armbruster while (g_ascii_isspace(*arg)) {
112bdef79a2SCorey Bryant arg++;
113bdef79a2SCorey Bryant }
114bdef79a2SCorey Bryant
115bdef79a2SCorey Bryant argend = arg + strlen(arg);
116b8c3511dSMarkus Armbruster while (arg != argend && g_ascii_isspace(*(argend - 1))) {
117bdef79a2SCorey Bryant argend--;
118bdef79a2SCorey Bryant }
119bdef79a2SCorey Bryant *argend = 0;
120bdef79a2SCorey Bryant
1216f5d8671SPrasad J Pandit if (!g_str_equal(cmd, "include") && strlen(arg) >= IFNAMSIZ) {
1226f5d8671SPrasad J Pandit fprintf(stderr, "name `%s' too long: %zu\n", arg, strlen(arg));
1233283dde4SPrasad J Pandit goto err;
1246f5d8671SPrasad J Pandit }
1256f5d8671SPrasad J Pandit
126bdef79a2SCorey Bryant if (strcmp(cmd, "deny") == 0) {
127bdef79a2SCorey Bryant acl_rule = g_malloc(sizeof(*acl_rule));
128bdef79a2SCorey Bryant if (strcmp(arg, "all") == 0) {
129bdef79a2SCorey Bryant acl_rule->type = ACL_DENY_ALL;
130bdef79a2SCorey Bryant } else {
131bdef79a2SCorey Bryant acl_rule->type = ACL_DENY;
132bdef79a2SCorey Bryant snprintf(acl_rule->iface, IFNAMSIZ, "%s", arg);
133bdef79a2SCorey Bryant }
134bdef79a2SCorey Bryant QSIMPLEQ_INSERT_TAIL(acl_list, acl_rule, entry);
135bdef79a2SCorey Bryant } else if (strcmp(cmd, "allow") == 0) {
136bdef79a2SCorey Bryant acl_rule = g_malloc(sizeof(*acl_rule));
137bdef79a2SCorey Bryant if (strcmp(arg, "all") == 0) {
138bdef79a2SCorey Bryant acl_rule->type = ACL_ALLOW_ALL;
139bdef79a2SCorey Bryant } else {
140bdef79a2SCorey Bryant acl_rule->type = ACL_ALLOW;
141bdef79a2SCorey Bryant snprintf(acl_rule->iface, IFNAMSIZ, "%s", arg);
142bdef79a2SCorey Bryant }
143bdef79a2SCorey Bryant QSIMPLEQ_INSERT_TAIL(acl_list, acl_rule, entry);
144bdef79a2SCorey Bryant } else if (strcmp(cmd, "include") == 0) {
145bdef79a2SCorey Bryant /* ignore errors */
146bdef79a2SCorey Bryant parse_acl_file(arg, acl_list);
147bdef79a2SCorey Bryant } else {
148bdef79a2SCorey Bryant fprintf(stderr, "Unknown command `%s'\n", cmd);
1493283dde4SPrasad J Pandit goto err;
1503283dde4SPrasad J Pandit }
1513283dde4SPrasad J Pandit }
1523283dde4SPrasad J Pandit
1533283dde4SPrasad J Pandit fclose(f);
1543283dde4SPrasad J Pandit return 0;
1553283dde4SPrasad J Pandit
1563283dde4SPrasad J Pandit err:
157bdef79a2SCorey Bryant fclose(f);
158bdef79a2SCorey Bryant errno = EINVAL;
159bdef79a2SCorey Bryant return -1;
160bdef79a2SCorey Bryant
161bdef79a2SCorey Bryant }
162bdef79a2SCorey Bryant
has_vnet_hdr(int fd)1637b93fadfSCorey Bryant static bool has_vnet_hdr(int fd)
1647b93fadfSCorey Bryant {
1657b93fadfSCorey Bryant unsigned int features = 0;
1667b93fadfSCorey Bryant
1677b93fadfSCorey Bryant if (ioctl(fd, TUNGETFEATURES, &features) == -1) {
1687b93fadfSCorey Bryant return false;
1697b93fadfSCorey Bryant }
1707b93fadfSCorey Bryant
1717b93fadfSCorey Bryant if (!(features & IFF_VNET_HDR)) {
1727b93fadfSCorey Bryant return false;
1737b93fadfSCorey Bryant }
1747b93fadfSCorey Bryant
1757b93fadfSCorey Bryant return true;
1767b93fadfSCorey Bryant }
1777b93fadfSCorey Bryant
prep_ifreq(struct ifreq * ifr,const char * ifname)1787b93fadfSCorey Bryant static void prep_ifreq(struct ifreq *ifr, const char *ifname)
1797b93fadfSCorey Bryant {
1807b93fadfSCorey Bryant memset(ifr, 0, sizeof(*ifr));
1817b93fadfSCorey Bryant snprintf(ifr->ifr_name, IFNAMSIZ, "%s", ifname);
1827b93fadfSCorey Bryant }
1837b93fadfSCorey Bryant
send_fd(int c,int fd)1847b93fadfSCorey Bryant static int send_fd(int c, int fd)
1857b93fadfSCorey Bryant {
1867b93fadfSCorey Bryant char msgbuf[CMSG_SPACE(sizeof(fd))];
1877b93fadfSCorey Bryant struct msghdr msg = {
1887b93fadfSCorey Bryant .msg_control = msgbuf,
1897b93fadfSCorey Bryant .msg_controllen = sizeof(msgbuf),
1907b93fadfSCorey Bryant };
1917b93fadfSCorey Bryant struct cmsghdr *cmsg;
1927b93fadfSCorey Bryant struct iovec iov;
1937b93fadfSCorey Bryant char req[1] = { 0x00 };
1947b93fadfSCorey Bryant
1957b93fadfSCorey Bryant cmsg = CMSG_FIRSTHDR(&msg);
1967b93fadfSCorey Bryant cmsg->cmsg_level = SOL_SOCKET;
1977b93fadfSCorey Bryant cmsg->cmsg_type = SCM_RIGHTS;
1987b93fadfSCorey Bryant cmsg->cmsg_len = CMSG_LEN(sizeof(fd));
1997b93fadfSCorey Bryant msg.msg_controllen = cmsg->cmsg_len;
2007b93fadfSCorey Bryant
2017b93fadfSCorey Bryant iov.iov_base = req;
2027b93fadfSCorey Bryant iov.iov_len = sizeof(req);
2037b93fadfSCorey Bryant
2047b93fadfSCorey Bryant msg.msg_iov = &iov;
2057b93fadfSCorey Bryant msg.msg_iovlen = 1;
2067b93fadfSCorey Bryant memcpy(CMSG_DATA(cmsg), &fd, sizeof(fd));
2077b93fadfSCorey Bryant
2087b93fadfSCorey Bryant return sendmsg(c, &msg, 0);
2097b93fadfSCorey Bryant }
2107b93fadfSCorey Bryant
211a358bca2SPaolo Bonzini #ifdef CONFIG_LIBCAP_NG
drop_privileges(void)21247e98658SCorey Bryant static int drop_privileges(void)
21347e98658SCorey Bryant {
21447e98658SCorey Bryant /* clear all capabilities */
21547e98658SCorey Bryant capng_clear(CAPNG_SELECT_BOTH);
21647e98658SCorey Bryant
21747e98658SCorey Bryant if (capng_update(CAPNG_ADD, CAPNG_EFFECTIVE | CAPNG_PERMITTED,
21847e98658SCorey Bryant CAP_NET_ADMIN) < 0) {
21947e98658SCorey Bryant return -1;
22047e98658SCorey Bryant }
22147e98658SCorey Bryant
22247e98658SCorey Bryant /* change to calling user's real uid and gid, retaining supplemental
22347e98658SCorey Bryant * groups and CAP_NET_ADMIN */
22447e98658SCorey Bryant if (capng_change_id(getuid(), getgid(), CAPNG_CLEAR_BOUNDING)) {
22547e98658SCorey Bryant return -1;
22647e98658SCorey Bryant }
22747e98658SCorey Bryant
22847e98658SCorey Bryant return 0;
22947e98658SCorey Bryant }
23047e98658SCorey Bryant #endif
23147e98658SCorey Bryant
main(int argc,char ** argv)2327b93fadfSCorey Bryant int main(int argc, char **argv)
2337b93fadfSCorey Bryant {
2347b93fadfSCorey Bryant struct ifreq ifr;
23534309d2bSCorey Bryant #ifndef SIOCBRADDIF
23634309d2bSCorey Bryant unsigned long ifargs[4];
23734309d2bSCorey Bryant #endif
23834309d2bSCorey Bryant int ifindex;
239eb3f45c5SGonglei int fd = -1, ctlfd = -1, unixfd = -1;
2407b93fadfSCorey Bryant int use_vnet = 0;
2417b93fadfSCorey Bryant int mtu;
2427b93fadfSCorey Bryant const char *bridge = NULL;
2437b93fadfSCorey Bryant char iface[IFNAMSIZ];
2447b93fadfSCorey Bryant int index;
245bdef79a2SCorey Bryant ACLRule *acl_rule;
246bdef79a2SCorey Bryant ACLList acl_list;
247bdef79a2SCorey Bryant int access_allowed, access_denied;
2487b93fadfSCorey Bryant int ret = EXIT_SUCCESS;
249*f761b41aSPaolo Bonzini g_autofree char *acl_file = NULL;
2507b93fadfSCorey Bryant
251a358bca2SPaolo Bonzini #ifdef CONFIG_LIBCAP_NG
25247e98658SCorey Bryant /* if we're run from an suid binary, immediately drop privileges preserving
25347e98658SCorey Bryant * cap_net_admin */
25447e98658SCorey Bryant if (geteuid() == 0 && getuid() != geteuid()) {
25547e98658SCorey Bryant if (drop_privileges() == -1) {
25647e98658SCorey Bryant fprintf(stderr, "failed to drop privileges\n");
25747e98658SCorey Bryant return 1;
25847e98658SCorey Bryant }
25947e98658SCorey Bryant }
26047e98658SCorey Bryant #endif
26147e98658SCorey Bryant
262*f761b41aSPaolo Bonzini qemu_init_exec_dir(argv[0]);
263*f761b41aSPaolo Bonzini
2647b93fadfSCorey Bryant /* parse arguments */
2657b93fadfSCorey Bryant for (index = 1; index < argc; index++) {
2667b93fadfSCorey Bryant if (strcmp(argv[index], "--use-vnet") == 0) {
2677b93fadfSCorey Bryant use_vnet = 1;
2687b93fadfSCorey Bryant } else if (strncmp(argv[index], "--br=", 5) == 0) {
2697b93fadfSCorey Bryant bridge = &argv[index][5];
2707b93fadfSCorey Bryant } else if (strncmp(argv[index], "--fd=", 5) == 0) {
2717b93fadfSCorey Bryant unixfd = atoi(&argv[index][5]);
2727b93fadfSCorey Bryant } else {
2737b93fadfSCorey Bryant usage();
2747b93fadfSCorey Bryant return EXIT_FAILURE;
2757b93fadfSCorey Bryant }
2767b93fadfSCorey Bryant }
2777b93fadfSCorey Bryant
2787b93fadfSCorey Bryant if (bridge == NULL || unixfd == -1) {
2797b93fadfSCorey Bryant usage();
2807b93fadfSCorey Bryant return EXIT_FAILURE;
2817b93fadfSCorey Bryant }
2826f5d8671SPrasad J Pandit if (strlen(bridge) >= IFNAMSIZ) {
2836f5d8671SPrasad J Pandit fprintf(stderr, "name `%s' too long: %zu\n", bridge, strlen(bridge));
2846f5d8671SPrasad J Pandit return EXIT_FAILURE;
2856f5d8671SPrasad J Pandit }
2867b93fadfSCorey Bryant
287bdef79a2SCorey Bryant /* parse default acl file */
288bdef79a2SCorey Bryant QSIMPLEQ_INIT(&acl_list);
289*f761b41aSPaolo Bonzini acl_file = get_relocated_path(DEFAULT_ACL_FILE);
290*f761b41aSPaolo Bonzini if (parse_acl_file(acl_file, &acl_list) == -1) {
291bdef79a2SCorey Bryant fprintf(stderr, "failed to parse default acl file `%s'\n",
292*f761b41aSPaolo Bonzini acl_file);
293bdef79a2SCorey Bryant ret = EXIT_FAILURE;
294bdef79a2SCorey Bryant goto cleanup;
295bdef79a2SCorey Bryant }
296bdef79a2SCorey Bryant
297bdef79a2SCorey Bryant /* validate bridge against acl -- default policy is to deny
298bdef79a2SCorey Bryant * according acl policy if we have a deny and allow both
299bdef79a2SCorey Bryant * then deny should always win over allow
300bdef79a2SCorey Bryant */
301bdef79a2SCorey Bryant access_allowed = 0;
302bdef79a2SCorey Bryant access_denied = 0;
303bdef79a2SCorey Bryant QSIMPLEQ_FOREACH(acl_rule, &acl_list, entry) {
304bdef79a2SCorey Bryant switch (acl_rule->type) {
305bdef79a2SCorey Bryant case ACL_ALLOW_ALL:
306bdef79a2SCorey Bryant access_allowed = 1;
307bdef79a2SCorey Bryant break;
308bdef79a2SCorey Bryant case ACL_ALLOW:
309bdef79a2SCorey Bryant if (strcmp(bridge, acl_rule->iface) == 0) {
310bdef79a2SCorey Bryant access_allowed = 1;
311bdef79a2SCorey Bryant }
312bdef79a2SCorey Bryant break;
313bdef79a2SCorey Bryant case ACL_DENY_ALL:
314bdef79a2SCorey Bryant access_denied = 1;
315bdef79a2SCorey Bryant break;
316bdef79a2SCorey Bryant case ACL_DENY:
317bdef79a2SCorey Bryant if (strcmp(bridge, acl_rule->iface) == 0) {
318bdef79a2SCorey Bryant access_denied = 1;
319bdef79a2SCorey Bryant }
320bdef79a2SCorey Bryant break;
321bdef79a2SCorey Bryant }
322bdef79a2SCorey Bryant }
323bdef79a2SCorey Bryant
324bdef79a2SCorey Bryant if ((access_allowed == 0) || (access_denied == 1)) {
325bdef79a2SCorey Bryant fprintf(stderr, "access denied by acl file\n");
326bdef79a2SCorey Bryant ret = EXIT_FAILURE;
327bdef79a2SCorey Bryant goto cleanup;
328bdef79a2SCorey Bryant }
329bdef79a2SCorey Bryant
3307b93fadfSCorey Bryant /* open a socket to use to control the network interfaces */
3317b93fadfSCorey Bryant ctlfd = socket(AF_INET, SOCK_STREAM, 0);
3327b93fadfSCorey Bryant if (ctlfd == -1) {
3337b93fadfSCorey Bryant fprintf(stderr, "failed to open control socket: %s\n", strerror(errno));
3347b93fadfSCorey Bryant ret = EXIT_FAILURE;
3357b93fadfSCorey Bryant goto cleanup;
3367b93fadfSCorey Bryant }
3377b93fadfSCorey Bryant
3387b93fadfSCorey Bryant /* open the tap device */
3397b93fadfSCorey Bryant fd = open("/dev/net/tun", O_RDWR);
3407b93fadfSCorey Bryant if (fd == -1) {
3417b93fadfSCorey Bryant fprintf(stderr, "failed to open /dev/net/tun: %s\n", strerror(errno));
3427b93fadfSCorey Bryant ret = EXIT_FAILURE;
3437b93fadfSCorey Bryant goto cleanup;
3447b93fadfSCorey Bryant }
3457b93fadfSCorey Bryant
3467b93fadfSCorey Bryant /* request a tap device, disable PI, and add vnet header support if
3477b93fadfSCorey Bryant * requested and it's available. */
3487b93fadfSCorey Bryant prep_ifreq(&ifr, "tap%d");
3497b93fadfSCorey Bryant ifr.ifr_flags = IFF_TAP|IFF_NO_PI;
3507b93fadfSCorey Bryant if (use_vnet && has_vnet_hdr(fd)) {
3517b93fadfSCorey Bryant ifr.ifr_flags |= IFF_VNET_HDR;
3527b93fadfSCorey Bryant }
3537b93fadfSCorey Bryant
3547b93fadfSCorey Bryant if (ioctl(fd, TUNSETIFF, &ifr) == -1) {
3557b93fadfSCorey Bryant fprintf(stderr, "failed to create tun device: %s\n", strerror(errno));
3567b93fadfSCorey Bryant ret = EXIT_FAILURE;
3577b93fadfSCorey Bryant goto cleanup;
3587b93fadfSCorey Bryant }
3597b93fadfSCorey Bryant
3607b93fadfSCorey Bryant /* save tap device name */
3617b93fadfSCorey Bryant snprintf(iface, sizeof(iface), "%s", ifr.ifr_name);
3627b93fadfSCorey Bryant
3637b93fadfSCorey Bryant /* get the mtu of the bridge */
3647b93fadfSCorey Bryant prep_ifreq(&ifr, bridge);
3657b93fadfSCorey Bryant if (ioctl(ctlfd, SIOCGIFMTU, &ifr) == -1) {
3667b93fadfSCorey Bryant fprintf(stderr, "failed to get mtu of bridge `%s': %s\n",
3677b93fadfSCorey Bryant bridge, strerror(errno));
3687b93fadfSCorey Bryant ret = EXIT_FAILURE;
3697b93fadfSCorey Bryant goto cleanup;
3707b93fadfSCorey Bryant }
3717b93fadfSCorey Bryant
3727b93fadfSCorey Bryant /* save mtu */
3737b93fadfSCorey Bryant mtu = ifr.ifr_mtu;
3747b93fadfSCorey Bryant
3757b93fadfSCorey Bryant /* set the mtu of the interface based on the bridge */
3767b93fadfSCorey Bryant prep_ifreq(&ifr, iface);
3777b93fadfSCorey Bryant ifr.ifr_mtu = mtu;
3787b93fadfSCorey Bryant if (ioctl(ctlfd, SIOCSIFMTU, &ifr) == -1) {
3797b93fadfSCorey Bryant fprintf(stderr, "failed to set mtu of device `%s' to %d: %s\n",
3807b93fadfSCorey Bryant iface, mtu, strerror(errno));
3817b93fadfSCorey Bryant ret = EXIT_FAILURE;
3827b93fadfSCorey Bryant goto cleanup;
3837b93fadfSCorey Bryant }
3847b93fadfSCorey Bryant
385226ecabfSPaolo Bonzini /* Linux uses the lowest enslaved MAC address as the MAC address of
386226ecabfSPaolo Bonzini * the bridge. Set MAC address to a high value so that it doesn't
387226ecabfSPaolo Bonzini * affect the MAC address of the bridge.
388226ecabfSPaolo Bonzini */
389226ecabfSPaolo Bonzini if (ioctl(ctlfd, SIOCGIFHWADDR, &ifr) < 0) {
390226ecabfSPaolo Bonzini fprintf(stderr, "failed to get MAC address of device `%s': %s\n",
391226ecabfSPaolo Bonzini iface, strerror(errno));
392226ecabfSPaolo Bonzini ret = EXIT_FAILURE;
393226ecabfSPaolo Bonzini goto cleanup;
394226ecabfSPaolo Bonzini }
395226ecabfSPaolo Bonzini ifr.ifr_hwaddr.sa_data[0] = 0xFE;
396226ecabfSPaolo Bonzini if (ioctl(ctlfd, SIOCSIFHWADDR, &ifr) < 0) {
397226ecabfSPaolo Bonzini fprintf(stderr, "failed to set MAC address of device `%s': %s\n",
398226ecabfSPaolo Bonzini iface, strerror(errno));
399226ecabfSPaolo Bonzini ret = EXIT_FAILURE;
400226ecabfSPaolo Bonzini goto cleanup;
401226ecabfSPaolo Bonzini }
402226ecabfSPaolo Bonzini
4037b93fadfSCorey Bryant /* add the interface to the bridge */
4047b93fadfSCorey Bryant prep_ifreq(&ifr, bridge);
40534309d2bSCorey Bryant ifindex = if_nametoindex(iface);
40634309d2bSCorey Bryant #ifndef SIOCBRADDIF
40734309d2bSCorey Bryant ifargs[0] = BRCTL_ADD_IF;
40834309d2bSCorey Bryant ifargs[1] = ifindex;
40934309d2bSCorey Bryant ifargs[2] = 0;
41034309d2bSCorey Bryant ifargs[3] = 0;
41134309d2bSCorey Bryant ifr.ifr_data = (void *)ifargs;
41234309d2bSCorey Bryant ret = ioctl(ctlfd, SIOCDEVPRIVATE, &ifr);
41334309d2bSCorey Bryant #else
41434309d2bSCorey Bryant ifr.ifr_ifindex = ifindex;
41534309d2bSCorey Bryant ret = ioctl(ctlfd, SIOCBRADDIF, &ifr);
41634309d2bSCorey Bryant #endif
41734309d2bSCorey Bryant if (ret == -1) {
4187b93fadfSCorey Bryant fprintf(stderr, "failed to add interface `%s' to bridge `%s': %s\n",
4197b93fadfSCorey Bryant iface, bridge, strerror(errno));
4207b93fadfSCorey Bryant ret = EXIT_FAILURE;
4217b93fadfSCorey Bryant goto cleanup;
4227b93fadfSCorey Bryant }
4237b93fadfSCorey Bryant
4247b93fadfSCorey Bryant /* bring the interface up */
4257b93fadfSCorey Bryant prep_ifreq(&ifr, iface);
4267b93fadfSCorey Bryant if (ioctl(ctlfd, SIOCGIFFLAGS, &ifr) == -1) {
4277b93fadfSCorey Bryant fprintf(stderr, "failed to get interface flags for `%s': %s\n",
4287b93fadfSCorey Bryant iface, strerror(errno));
4297b93fadfSCorey Bryant ret = EXIT_FAILURE;
4307b93fadfSCorey Bryant goto cleanup;
4317b93fadfSCorey Bryant }
4327b93fadfSCorey Bryant
4337b93fadfSCorey Bryant ifr.ifr_flags |= IFF_UP;
4347b93fadfSCorey Bryant if (ioctl(ctlfd, SIOCSIFFLAGS, &ifr) == -1) {
4357b93fadfSCorey Bryant fprintf(stderr, "failed to bring up interface `%s': %s\n",
4367b93fadfSCorey Bryant iface, strerror(errno));
4377b93fadfSCorey Bryant ret = EXIT_FAILURE;
4387b93fadfSCorey Bryant goto cleanup;
4397b93fadfSCorey Bryant }
4407b93fadfSCorey Bryant
4417b93fadfSCorey Bryant /* write fd to the domain socket */
4427b93fadfSCorey Bryant if (send_fd(unixfd, fd) == -1) {
4437b93fadfSCorey Bryant fprintf(stderr, "failed to write fd to unix socket: %s\n",
4447b93fadfSCorey Bryant strerror(errno));
4457b93fadfSCorey Bryant ret = EXIT_FAILURE;
4467b93fadfSCorey Bryant goto cleanup;
4477b93fadfSCorey Bryant }
4487b93fadfSCorey Bryant
4497b93fadfSCorey Bryant /* ... */
4507b93fadfSCorey Bryant
4517b93fadfSCorey Bryant /* profit! */
4527b93fadfSCorey Bryant
4537b93fadfSCorey Bryant cleanup:
454eb3f45c5SGonglei if (fd >= 0) {
455eb3f45c5SGonglei close(fd);
456eb3f45c5SGonglei }
457eb3f45c5SGonglei if (ctlfd >= 0) {
458eb3f45c5SGonglei close(ctlfd);
459eb3f45c5SGonglei }
460bdef79a2SCorey Bryant while ((acl_rule = QSIMPLEQ_FIRST(&acl_list)) != NULL) {
461bdef79a2SCorey Bryant QSIMPLEQ_REMOVE_HEAD(&acl_list, entry);
462bdef79a2SCorey Bryant g_free(acl_rule);
463bdef79a2SCorey Bryant }
464bdef79a2SCorey Bryant
4657b93fadfSCorey Bryant return ret;
4667b93fadfSCorey Bryant }
467