Blame


1 8a35f56c 2022-07-16 thomas /*
2 8a35f56c 2022-07-16 thomas * Copyright (c) 2020-2021 Tracey Emery <tracey@traceyemery.net>
3 8a35f56c 2022-07-16 thomas * Copyright (c) 2015 Reyk Floeter <reyk@openbsd.org>
4 8a35f56c 2022-07-16 thomas *
5 8a35f56c 2022-07-16 thomas * Permission to use, copy, modify, and distribute this software for any
6 8a35f56c 2022-07-16 thomas * purpose with or without fee is hereby granted, provided that the above
7 8a35f56c 2022-07-16 thomas * copyright notice and this permission notice appear in all copies.
8 8a35f56c 2022-07-16 thomas *
9 8a35f56c 2022-07-16 thomas * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 8a35f56c 2022-07-16 thomas * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 8a35f56c 2022-07-16 thomas * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 8a35f56c 2022-07-16 thomas * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 8a35f56c 2022-07-16 thomas * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 8a35f56c 2022-07-16 thomas * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 8a35f56c 2022-07-16 thomas * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 8a35f56c 2022-07-16 thomas */
17 8a35f56c 2022-07-16 thomas
18 8a35f56c 2022-07-16 thomas #include <sys/types.h>
19 8b925c6c 2022-07-16 thomas #include <sys/queue.h>
20 8a35f56c 2022-07-16 thomas #include <sys/time.h>
21 8a35f56c 2022-07-16 thomas #include <sys/uio.h>
22 8a35f56c 2022-07-16 thomas #include <sys/socket.h>
23 8a35f56c 2022-07-16 thomas
24 8a35f56c 2022-07-16 thomas #include <net/if.h>
25 8a35f56c 2022-07-16 thomas #include <netinet/in.h>
26 8a35f56c 2022-07-16 thomas
27 8a35f56c 2022-07-16 thomas #include <stdio.h>
28 8a35f56c 2022-07-16 thomas #include <stdlib.h>
29 8a35f56c 2022-07-16 thomas #include <termios.h>
30 8a35f56c 2022-07-16 thomas #include <unistd.h>
31 8a35f56c 2022-07-16 thomas #include <limits.h>
32 8a35f56c 2022-07-16 thomas #include <string.h>
33 8a35f56c 2022-07-16 thomas #include <event.h>
34 8a35f56c 2022-07-16 thomas #include <fcntl.h>
35 8a35f56c 2022-07-16 thomas #include <errno.h>
36 8a35f56c 2022-07-16 thomas
37 8a35f56c 2022-07-16 thomas #include "got_opentemp.h"
38 8a35f56c 2022-07-16 thomas
39 ff36aeea 2022-07-16 thomas #include "got_compat.h"
40 ff36aeea 2022-07-16 thomas
41 8a35f56c 2022-07-16 thomas #include "proc.h"
42 8a35f56c 2022-07-16 thomas #include "gotwebd.h"
43 8a35f56c 2022-07-16 thomas
44 8a35f56c 2022-07-16 thomas int
45 8a35f56c 2022-07-16 thomas config_init(struct gotwebd *env)
46 8a35f56c 2022-07-16 thomas {
47 8a35f56c 2022-07-16 thomas struct privsep *ps = env->gotwebd_ps;
48 8a35f56c 2022-07-16 thomas unsigned int what;
49 8a35f56c 2022-07-16 thomas
50 8a35f56c 2022-07-16 thomas /* Global configuration. */
51 8a35f56c 2022-07-16 thomas if (privsep_process == PROC_GOTWEBD)
52 8a35f56c 2022-07-16 thomas env->prefork_gotwebd = GOTWEBD_NUMPROC;
53 8a35f56c 2022-07-16 thomas
54 8a35f56c 2022-07-16 thomas ps->ps_what[PROC_GOTWEBD] = CONFIG_ALL;
55 8a35f56c 2022-07-16 thomas ps->ps_what[PROC_SOCKS] = CONFIG_SOCKS;
56 8a35f56c 2022-07-16 thomas
57 8a35f56c 2022-07-16 thomas /* Other configuration. */
58 8a35f56c 2022-07-16 thomas what = ps->ps_what[privsep_process];
59 8a35f56c 2022-07-16 thomas if (what & CONFIG_SOCKS) {
60 8a35f56c 2022-07-16 thomas env->server_cnt = 0;
61 90d63d47 2022-08-16 thomas TAILQ_INIT(&env->servers);
62 90d63d47 2022-08-16 thomas TAILQ_INIT(&env->sockets);
63 8a35f56c 2022-07-16 thomas }
64 8a35f56c 2022-07-16 thomas return 0;
65 8a35f56c 2022-07-16 thomas }
66 8a35f56c 2022-07-16 thomas
67 8a35f56c 2022-07-16 thomas int
68 8a35f56c 2022-07-16 thomas config_getcfg(struct gotwebd *env, struct imsg *imsg)
69 8a35f56c 2022-07-16 thomas {
70 8a35f56c 2022-07-16 thomas /* nothing to do but tell gotwebd configuration is done */
71 8a35f56c 2022-07-16 thomas if (privsep_process != PROC_GOTWEBD)
72 8a35f56c 2022-07-16 thomas proc_compose(env->gotwebd_ps, PROC_GOTWEBD,
73 8a35f56c 2022-07-16 thomas IMSG_CFG_DONE, NULL, 0);
74 8a35f56c 2022-07-16 thomas
75 8a35f56c 2022-07-16 thomas return 0;
76 8a35f56c 2022-07-16 thomas }
77 8a35f56c 2022-07-16 thomas
78 8a35f56c 2022-07-16 thomas int
79 8a35f56c 2022-07-16 thomas config_setserver(struct gotwebd *env, struct server *srv)
80 8a35f56c 2022-07-16 thomas {
81 8a35f56c 2022-07-16 thomas struct server ssrv;
82 8a35f56c 2022-07-16 thomas struct privsep *ps = env->gotwebd_ps;
83 8a35f56c 2022-07-16 thomas
84 8a35f56c 2022-07-16 thomas memcpy(&ssrv, srv, sizeof(ssrv));
85 8a35f56c 2022-07-16 thomas proc_compose(ps, PROC_SOCKS, IMSG_CFG_SRV, &ssrv, sizeof(ssrv));
86 8a35f56c 2022-07-16 thomas return 0;
87 8a35f56c 2022-07-16 thomas }
88 8a35f56c 2022-07-16 thomas
89 8a35f56c 2022-07-16 thomas int
90 8a35f56c 2022-07-16 thomas config_getserver(struct gotwebd *env, struct imsg *imsg)
91 8a35f56c 2022-07-16 thomas {
92 8a35f56c 2022-07-16 thomas struct server *srv;
93 8a35f56c 2022-07-16 thomas uint8_t *p = imsg->data;
94 8a35f56c 2022-07-16 thomas
95 8a35f56c 2022-07-16 thomas IMSG_SIZE_CHECK(imsg, &srv);
96 8a35f56c 2022-07-16 thomas
97 8a35f56c 2022-07-16 thomas srv = calloc(1, sizeof(*srv));
98 8a35f56c 2022-07-16 thomas if (srv == NULL)
99 8a35f56c 2022-07-16 thomas fatalx("%s: calloc", __func__);
100 8a35f56c 2022-07-16 thomas memcpy(srv, p, sizeof(*srv));
101 8a35f56c 2022-07-16 thomas
102 8a35f56c 2022-07-16 thomas if (IMSG_DATA_SIZE(imsg) != sizeof(*srv)) {
103 8a35f56c 2022-07-16 thomas log_debug("%s: imsg size error", __func__);
104 8a35f56c 2022-07-16 thomas free(srv);
105 8a35f56c 2022-07-16 thomas return 1;
106 8a35f56c 2022-07-16 thomas }
107 8a35f56c 2022-07-16 thomas
108 8a35f56c 2022-07-16 thomas /* log server info */
109 8a35f56c 2022-07-16 thomas log_debug("%s: server=%s fcgi_socket=%s unix_socket=%s", __func__,
110 8a35f56c 2022-07-16 thomas srv->name, srv->fcgi_socket ? "yes" : "no", srv->unix_socket ?
111 8a35f56c 2022-07-16 thomas "yes" : "no");
112 8a35f56c 2022-07-16 thomas
113 90d63d47 2022-08-16 thomas TAILQ_INSERT_TAIL(&env->servers, srv, entry);
114 8a35f56c 2022-07-16 thomas
115 8a35f56c 2022-07-16 thomas return 0;
116 8a35f56c 2022-07-16 thomas }
117 8a35f56c 2022-07-16 thomas
118 8a35f56c 2022-07-16 thomas int
119 8a35f56c 2022-07-16 thomas config_setsock(struct gotwebd *env, struct socket *sock)
120 8a35f56c 2022-07-16 thomas {
121 8a35f56c 2022-07-16 thomas struct privsep *ps = env->gotwebd_ps;
122 8a35f56c 2022-07-16 thomas struct socket_conf s;
123 8a35f56c 2022-07-16 thomas int id;
124 8a35f56c 2022-07-16 thomas int fd = -1, n, m;
125 8a35f56c 2022-07-16 thomas struct iovec iov[6];
126 8a35f56c 2022-07-16 thomas size_t c;
127 8a35f56c 2022-07-16 thomas unsigned int what;
128 8a35f56c 2022-07-16 thomas
129 8a35f56c 2022-07-16 thomas /* open listening sockets */
130 8a35f56c 2022-07-16 thomas if (sockets_privinit(env, sock) == -1)
131 8a35f56c 2022-07-16 thomas return -1;
132 8a35f56c 2022-07-16 thomas
133 8a35f56c 2022-07-16 thomas for (id = 0; id < PROC_MAX; id++) {
134 8a35f56c 2022-07-16 thomas what = ps->ps_what[id];
135 8a35f56c 2022-07-16 thomas
136 8a35f56c 2022-07-16 thomas if ((what & CONFIG_SOCKS) == 0 || id == privsep_process)
137 8a35f56c 2022-07-16 thomas continue;
138 8a35f56c 2022-07-16 thomas
139 8a35f56c 2022-07-16 thomas memcpy(&s, &sock->conf, sizeof(s));
140 8a35f56c 2022-07-16 thomas
141 8a35f56c 2022-07-16 thomas c = 0;
142 8a35f56c 2022-07-16 thomas iov[c].iov_base = &s;
143 8a35f56c 2022-07-16 thomas iov[c++].iov_len = sizeof(s);
144 8a35f56c 2022-07-16 thomas
145 8a35f56c 2022-07-16 thomas if (id == PROC_SOCKS) {
146 8a35f56c 2022-07-16 thomas /* XXX imsg code will close the fd after 1st call */
147 8a35f56c 2022-07-16 thomas n = -1;
148 8a35f56c 2022-07-16 thomas proc_range(ps, id, &n, &m);
149 8a35f56c 2022-07-16 thomas for (n = 0; n < m; n++) {
150 8a35f56c 2022-07-16 thomas if (sock->fd == -1)
151 8a35f56c 2022-07-16 thomas fd = -1;
152 8a35f56c 2022-07-16 thomas else if ((fd = dup(sock->fd)) == -1)
153 8a35f56c 2022-07-16 thomas return 1;
154 8a35f56c 2022-07-16 thomas if (proc_composev_imsg(ps, id, n, IMSG_CFG_SOCK,
155 8a35f56c 2022-07-16 thomas -1, fd, iov, c) != 0) {
156 8a35f56c 2022-07-16 thomas log_warn("%s: failed to compose "
157 8a35f56c 2022-07-16 thomas "IMSG_CFG_SOCK imsg",
158 8a35f56c 2022-07-16 thomas __func__);
159 8a35f56c 2022-07-16 thomas return 1;
160 8a35f56c 2022-07-16 thomas }
161 8a35f56c 2022-07-16 thomas if (proc_flush_imsg(ps, id, n) == -1) {
162 8a35f56c 2022-07-16 thomas log_warn("%s: failed to flush "
163 8a35f56c 2022-07-16 thomas "IMSG_CFG_SOCK imsg",
164 8a35f56c 2022-07-16 thomas __func__);
165 8a35f56c 2022-07-16 thomas return 1;
166 8a35f56c 2022-07-16 thomas }
167 8a35f56c 2022-07-16 thomas }
168 8a35f56c 2022-07-16 thomas }
169 8a35f56c 2022-07-16 thomas }
170 8a35f56c 2022-07-16 thomas
171 8a35f56c 2022-07-16 thomas /* Close socket early to prevent fd exhaustion in gotwebd. */
172 8a35f56c 2022-07-16 thomas if (sock->fd != -1) {
173 8a35f56c 2022-07-16 thomas close(sock->fd);
174 8a35f56c 2022-07-16 thomas sock->fd = -1;
175 8a35f56c 2022-07-16 thomas }
176 8a35f56c 2022-07-16 thomas
177 8a35f56c 2022-07-16 thomas return 0;
178 8a35f56c 2022-07-16 thomas }
179 8a35f56c 2022-07-16 thomas
180 8a35f56c 2022-07-16 thomas int
181 8a35f56c 2022-07-16 thomas config_getsock(struct gotwebd *env, struct imsg *imsg)
182 8a35f56c 2022-07-16 thomas {
183 8a35f56c 2022-07-16 thomas struct socket *sock = NULL;
184 8a35f56c 2022-07-16 thomas struct socket_conf sock_conf;
185 8a35f56c 2022-07-16 thomas uint8_t *p = imsg->data;
186 8a35f56c 2022-07-16 thomas int i;
187 8a35f56c 2022-07-16 thomas
188 8a35f56c 2022-07-16 thomas IMSG_SIZE_CHECK(imsg, &sock_conf);
189 8a35f56c 2022-07-16 thomas memcpy(&sock_conf, p, sizeof(sock_conf));
190 8a35f56c 2022-07-16 thomas
191 8a35f56c 2022-07-16 thomas if (IMSG_DATA_SIZE(imsg) != sizeof(sock_conf)) {
192 8a35f56c 2022-07-16 thomas log_debug("%s: imsg size error", __func__);
193 8a35f56c 2022-07-16 thomas return 1;
194 8a35f56c 2022-07-16 thomas }
195 8a35f56c 2022-07-16 thomas
196 8a35f56c 2022-07-16 thomas /* create a new socket */
197 8a35f56c 2022-07-16 thomas if ((sock = calloc(1, sizeof(*sock))) == NULL) {
198 8a35f56c 2022-07-16 thomas if (imsg->fd != -1)
199 8a35f56c 2022-07-16 thomas close(imsg->fd);
200 8a35f56c 2022-07-16 thomas return 1;
201 8a35f56c 2022-07-16 thomas }
202 8a35f56c 2022-07-16 thomas
203 8a35f56c 2022-07-16 thomas memcpy(&sock->conf, &sock_conf, sizeof(sock->conf));
204 8a35f56c 2022-07-16 thomas sock->fd = imsg->fd;
205 8a35f56c 2022-07-16 thomas
206 90d63d47 2022-08-16 thomas TAILQ_INSERT_TAIL(&env->sockets, sock, entry);
207 8a35f56c 2022-07-16 thomas
208 8a35f56c 2022-07-16 thomas for (i = 0; i < PRIV_FDS__MAX; i++)
209 8a35f56c 2022-07-16 thomas sock->priv_fd[i] = -1;
210 8a35f56c 2022-07-16 thomas
211 e80b37ed 2022-07-22 thomas for (i = 0; i < GOTWEB_PACK_NUM_TEMPFILES; i++)
212 8a35f56c 2022-07-16 thomas sock->pack_fds[i] = -1;
213 8a35f56c 2022-07-16 thomas
214 8a35f56c 2022-07-16 thomas /* log new socket info */
215 720c2b05 2022-08-16 thomas log_debug("%s: name=%s id=%d server=%s af_type=%s socket_path=%s",
216 8a35f56c 2022-07-16 thomas __func__, sock->conf.name, sock->conf.id, sock->conf.srv_name,
217 720c2b05 2022-08-16 thomas sock->conf.af_type == AF_UNIX ? "unix" :
218 720c2b05 2022-08-16 thomas (sock->conf.af_type == AF_INET ? "inet" :
219 720c2b05 2022-08-16 thomas (sock->conf.af_type == AF_INET6 ? "inet6" : "unknown")),
220 8a35f56c 2022-07-16 thomas strlen(sock->conf.unix_socket_name) ?
221 8a35f56c 2022-07-16 thomas sock->conf.unix_socket_name : "none");
222 8a35f56c 2022-07-16 thomas
223 8a35f56c 2022-07-16 thomas return 0;
224 8a35f56c 2022-07-16 thomas }
225 8a35f56c 2022-07-16 thomas
226 8a35f56c 2022-07-16 thomas int
227 8a35f56c 2022-07-16 thomas config_setfd(struct gotwebd *env, struct socket *sock)
228 8a35f56c 2022-07-16 thomas {
229 8a35f56c 2022-07-16 thomas struct privsep *ps = env->gotwebd_ps;
230 8a35f56c 2022-07-16 thomas int id, s;
231 8a35f56c 2022-07-16 thomas int fd = -1, n, m, j;
232 8a35f56c 2022-07-16 thomas struct iovec iov[6];
233 8a35f56c 2022-07-16 thomas size_t c;
234 8a35f56c 2022-07-16 thomas unsigned int what;
235 8a35f56c 2022-07-16 thomas
236 8a35f56c 2022-07-16 thomas log_debug("%s: Allocating %d file descriptors",
237 e80b37ed 2022-07-22 thomas __func__, PRIV_FDS__MAX + GOTWEB_PACK_NUM_TEMPFILES);
238 8a35f56c 2022-07-16 thomas
239 e80b37ed 2022-07-22 thomas for (j = 0; j < PRIV_FDS__MAX + GOTWEB_PACK_NUM_TEMPFILES; j++) {
240 8a35f56c 2022-07-16 thomas for (id = 0; id < PROC_MAX; id++) {
241 8a35f56c 2022-07-16 thomas what = ps->ps_what[id];
242 8a35f56c 2022-07-16 thomas
243 8a35f56c 2022-07-16 thomas if ((what & CONFIG_SOCKS) == 0 || id == privsep_process)
244 8a35f56c 2022-07-16 thomas continue;
245 8a35f56c 2022-07-16 thomas
246 8a35f56c 2022-07-16 thomas s = sock->conf.id;
247 8a35f56c 2022-07-16 thomas c = 0;
248 8a35f56c 2022-07-16 thomas iov[c].iov_base = &s;
249 8a35f56c 2022-07-16 thomas iov[c++].iov_len = sizeof(s);
250 8a35f56c 2022-07-16 thomas
251 8a35f56c 2022-07-16 thomas if (id == PROC_SOCKS) {
252 8a35f56c 2022-07-16 thomas /*
253 8a35f56c 2022-07-16 thomas * XXX imsg code will close the fd
254 8a35f56c 2022-07-16 thomas * after 1st call
255 8a35f56c 2022-07-16 thomas */
256 8a35f56c 2022-07-16 thomas n = -1;
257 8a35f56c 2022-07-16 thomas proc_range(ps, id, &n, &m);
258 8a35f56c 2022-07-16 thomas for (n = 0; n < m; n++) {
259 8a35f56c 2022-07-16 thomas fd = got_opentempfd();
260 8a35f56c 2022-07-16 thomas if (fd == -1)
261 8a35f56c 2022-07-16 thomas return 1;
262 8a35f56c 2022-07-16 thomas if (proc_composev_imsg(ps, id, n,
263 8a35f56c 2022-07-16 thomas IMSG_CFG_FD, -1, fd, iov, c) != 0) {
264 8a35f56c 2022-07-16 thomas log_warn("%s: failed to compose "
265 8a35f56c 2022-07-16 thomas "IMSG_CFG_FD imsg",
266 8a35f56c 2022-07-16 thomas __func__);
267 8a35f56c 2022-07-16 thomas return 1;
268 8a35f56c 2022-07-16 thomas }
269 8a35f56c 2022-07-16 thomas if (proc_flush_imsg(ps, id, n) == -1) {
270 8a35f56c 2022-07-16 thomas log_warn("%s: failed to flush "
271 8a35f56c 2022-07-16 thomas "IMSG_CFG_FD imsg",
272 8a35f56c 2022-07-16 thomas __func__);
273 8a35f56c 2022-07-16 thomas return 1;
274 8a35f56c 2022-07-16 thomas }
275 8a35f56c 2022-07-16 thomas }
276 8a35f56c 2022-07-16 thomas }
277 8a35f56c 2022-07-16 thomas }
278 8a35f56c 2022-07-16 thomas
279 8a35f56c 2022-07-16 thomas /* Close fd early to prevent fd exhaustion in gotwebd. */
280 8a35f56c 2022-07-16 thomas if (fd != -1)
281 8a35f56c 2022-07-16 thomas close(fd);
282 8a35f56c 2022-07-16 thomas }
283 8a35f56c 2022-07-16 thomas return 0;
284 8a35f56c 2022-07-16 thomas }
285 8a35f56c 2022-07-16 thomas
286 8a35f56c 2022-07-16 thomas int
287 8a35f56c 2022-07-16 thomas config_getfd(struct gotwebd *env, struct imsg *imsg)
288 8a35f56c 2022-07-16 thomas {
289 8a35f56c 2022-07-16 thomas struct socket *sock;
290 8a35f56c 2022-07-16 thomas uint8_t *p = imsg->data;
291 8a35f56c 2022-07-16 thomas int sock_id, match = 0, i;
292 8a35f56c 2022-07-16 thomas
293 8a35f56c 2022-07-16 thomas IMSG_SIZE_CHECK(imsg, &sock_id);
294 8a35f56c 2022-07-16 thomas memcpy(&sock_id, p, sizeof(sock_id));
295 8a35f56c 2022-07-16 thomas
296 90d63d47 2022-08-16 thomas TAILQ_FOREACH(sock, &env->sockets, entry) {
297 e80b37ed 2022-07-22 thomas const int nfds = (GOTWEB_PACK_NUM_TEMPFILES + PRIV_FDS__MAX);
298 e80b37ed 2022-07-22 thomas for (i = 0; i < nfds; i++) {
299 8a35f56c 2022-07-16 thomas if (i < PRIV_FDS__MAX && sock->priv_fd[i] == -1) {
300 8a35f56c 2022-07-16 thomas log_debug("%s: assigning socket %d priv_fd %d",
301 8a35f56c 2022-07-16 thomas __func__, sock_id, imsg->fd);
302 8a35f56c 2022-07-16 thomas sock->priv_fd[i] = imsg->fd;
303 8a35f56c 2022-07-16 thomas match = 1;
304 8a35f56c 2022-07-16 thomas break;
305 8a35f56c 2022-07-16 thomas }
306 8a35f56c 2022-07-16 thomas if (sock->pack_fds[i - PRIV_FDS__MAX] == -1) {
307 8a35f56c 2022-07-16 thomas log_debug("%s: assigning socket %d pack_fd %d",
308 8a35f56c 2022-07-16 thomas __func__, sock_id, imsg->fd);
309 8a35f56c 2022-07-16 thomas sock->pack_fds[i - PRIV_FDS__MAX] = imsg->fd;
310 8a35f56c 2022-07-16 thomas match = 1;
311 8a35f56c 2022-07-16 thomas break;
312 8a35f56c 2022-07-16 thomas }
313 8a35f56c 2022-07-16 thomas }
314 8a35f56c 2022-07-16 thomas }
315 8a35f56c 2022-07-16 thomas
316 8a35f56c 2022-07-16 thomas if (match)
317 8a35f56c 2022-07-16 thomas return 0;
318 8a35f56c 2022-07-16 thomas else
319 8a35f56c 2022-07-16 thomas return 1;
320 8a35f56c 2022-07-16 thomas }