| 1 |
|
|---|
| 2 |
|
|---|
| 3 |
|
|---|
| 4 |
|
|---|
| 5 |
|
|---|
| 6 |
|
|---|
| 7 |
|
|---|
| 8 |
|
|---|
| 9 |
|
|---|
| 10 |
|
|---|
| 11 |
|
|---|
| 12 |
|
|---|
| 13 |
|
|---|
| 14 |
|
|---|
| 15 |
|
|---|
| 16 |
|
|---|
| 17 |
|
|---|
| 18 |
|
|---|
| 19 |
|
|---|
| 20 |
#ifdef HAVE_CONFIG_H |
|---|
| 21 |
# include <config.h> |
|---|
| 22 |
#endif |
|---|
| 23 |
|
|---|
| 24 |
#include "vserver.h" |
|---|
| 25 |
#include "util.h" |
|---|
| 26 |
|
|---|
| 27 |
#include <lib/internal.h> |
|---|
| 28 |
|
|---|
| 29 |
#include <stdio.h> |
|---|
| 30 |
#include <stdlib.h> |
|---|
| 31 |
#include <string.h> |
|---|
| 32 |
#include <netdb.h> |
|---|
| 33 |
#include <sys/socket.h> |
|---|
| 34 |
#include <sys/ioctl.h> |
|---|
| 35 |
#include <net/if.h> |
|---|
| 36 |
#include <unistd.h> |
|---|
| 37 |
#include <errno.h> |
|---|
| 38 |
#include <getopt.h> |
|---|
| 39 |
#include <fcntl.h> |
|---|
| 40 |
#include <netinet/in.h> |
|---|
| 41 |
#include <arpa/inet.h> |
|---|
| 42 |
|
|---|
| 43 |
#define ENSC_WRAPPERS_PREFIX "chbind: " |
|---|
| 44 |
#define ENSC_WRAPPERS_IO 1 |
|---|
| 45 |
#define ENSC_WRAPPERS_UNISTD 1 |
|---|
| 46 |
#define ENSC_WRAPPERS_VSERVER 1 |
|---|
| 47 |
#include "wrappers.h" |
|---|
| 48 |
|
|---|
| 49 |
#define CMD_HELP 0x1000 |
|---|
| 50 |
#define CMD_VERSION 0x1001 |
|---|
| 51 |
|
|---|
| 52 |
#define CMD_SILENT 0x2000 |
|---|
| 53 |
#define CMD_IP 0x2001 |
|---|
| 54 |
#define CMD_BCAST 0x2002 |
|---|
| 55 |
#define CMD_NID 0x2003 |
|---|
| 56 |
|
|---|
| 57 |
int wrapper_exit_code = 255; |
|---|
| 58 |
|
|---|
| 59 |
|
|---|
| 60 |
static struct option const |
|---|
| 61 |
CMDLINE_OPTIONS[] = { |
|---|
| 62 |
{ "help", no_argument, 0, CMD_HELP }, |
|---|
| 63 |
{ "version", no_argument, 0, CMD_VERSION }, |
|---|
| 64 |
{ "silent", no_argument, 0, CMD_SILENT }, |
|---|
| 65 |
{ "ip", required_argument, 0, CMD_IP }, |
|---|
| 66 |
{ "bcast", required_argument, 0, CMD_BCAST }, |
|---|
| 67 |
{ "nid", required_argument, 0, CMD_NID }, |
|---|
| 68 |
{ 0,0,0,0 } |
|---|
| 69 |
}; |
|---|
| 70 |
|
|---|
| 71 |
static void |
|---|
| 72 |
showHelp(int fd, char const *cmd, int res) |
|---|
| 73 |
{ |
|---|
| 74 |
WRITE_MSG(fd, "Usage:\n "); |
|---|
| 75 |
WRITE_STR(fd, cmd); |
|---|
| 76 |
WRITE_MSG(fd, |
|---|
| 77 |
" [--silent] [--nid <nid>] [--ip <ip_num>[/<mask>]] [--bcast <broadcast>] [--] <commands> <args>*\n\n" |
|---|
| 78 |
"Please report bugs to " PACKAGE_BUGREPORT "\n"); |
|---|
| 79 |
|
|---|
| 80 |
exit(res); |
|---|
| 81 |
} |
|---|
| 82 |
|
|---|
| 83 |
static void |
|---|
| 84 |
showVersion() |
|---|
| 85 |
{ |
|---|
| 86 |
WRITE_MSG(1, |
|---|
| 87 |
"chbind " VERSION " -- bind to an ip and execute a program\n" |
|---|
| 88 |
"This program is part of " PACKAGE_STRING "\n\n" |
|---|
| 89 |
"Copyright (C) 2003,2004 Enrico Scholz\n" |
|---|
| 90 |
VERSION_COPYRIGHT_DISCLAIMER); |
|---|
| 91 |
exit(0); |
|---|
| 92 |
} |
|---|
| 93 |
|
|---|
| 94 |
|
|---|
| 95 |
|
|---|
| 96 |
|
|---|
| 97 |
|
|---|
| 98 |
|
|---|
| 99 |
|
|---|
| 100 |
|
|---|
| 101 |
static bool |
|---|
| 102 |
existsDevice(char const *dev_raw) |
|---|
| 103 |
{ |
|---|
| 104 |
size_t buf_size=8192; |
|---|
| 105 |
char dev[strlen(dev_raw)+2]; |
|---|
| 106 |
|
|---|
| 107 |
strcpy(dev, dev_raw); |
|---|
| 108 |
strcat(dev, ":"); |
|---|
| 109 |
for (;;) { |
|---|
| 110 |
char buf[buf_size]; |
|---|
| 111 |
char * pos; |
|---|
| 112 |
bool too_small; |
|---|
| 113 |
int fd=open("/proc/net/dev", O_RDONLY); |
|---|
| 114 |
|
|---|
| 115 |
if (fd==-1) return false; |
|---|
| 116 |
too_small = EreadAll(fd, buf, buf_size); |
|---|
| 117 |
close(fd); |
|---|
| 118 |
|
|---|
| 119 |
if (too_small) { |
|---|
| 120 |
buf_size *= 2; |
|---|
| 121 |
continue; |
|---|
| 122 |
} |
|---|
| 123 |
|
|---|
| 124 |
pos = strstr(buf, dev); |
|---|
| 125 |
return (pos && (pos==buf || pos[-1]==' ' || pos[-1]=='\n')); |
|---|
| 126 |
} |
|---|
| 127 |
} |
|---|
| 128 |
|
|---|
| 129 |
static int ifconfig_ioctl( |
|---|
| 130 |
int fd, |
|---|
| 131 |
const char *ifname, |
|---|
| 132 |
int cmd, |
|---|
| 133 |
struct ifreq *ifr) |
|---|
| 134 |
{ |
|---|
| 135 |
strcpy(ifr->ifr_name, ifname); |
|---|
| 136 |
return ioctl(fd, cmd,ifr); |
|---|
| 137 |
} |
|---|
| 138 |
|
|---|
| 139 |
|
|---|
| 140 |
|
|---|
| 141 |
|
|---|
| 142 |
|
|---|
| 143 |
|
|---|
| 144 |
int ifconfig_getaddr ( |
|---|
| 145 |
const char *ifname, |
|---|
| 146 |
uint32_t *addr, |
|---|
| 147 |
uint32_t *mask, |
|---|
| 148 |
uint32_t *bcast) |
|---|
| 149 |
{ |
|---|
| 150 |
int ret = -1; |
|---|
| 151 |
if (existsDevice(ifname)){ |
|---|
| 152 |
int skfd = socket(AF_INET, SOCK_DGRAM, 0); |
|---|
| 153 |
*addr = 0; |
|---|
| 154 |
*bcast = 0xffffffff; |
|---|
| 155 |
if (skfd != -1){ |
|---|
| 156 |
struct ifreq ifr; |
|---|
| 157 |
if (ifconfig_ioctl(skfd,ifname,SIOCGIFADDR, &ifr) >= 0){ |
|---|
| 158 |
struct sockaddr_in *sin = (struct sockaddr_in*)&ifr.ifr_addr; |
|---|
| 159 |
*addr = sin->sin_addr.s_addr; |
|---|
| 160 |
ret = 0; |
|---|
| 161 |
} |
|---|
| 162 |
if (ifconfig_ioctl(skfd,ifname,SIOCGIFNETMASK, &ifr) >= 0){ |
|---|
| 163 |
struct sockaddr_in *sin = (struct sockaddr_in*)&ifr.ifr_addr; |
|---|
| 164 |
*mask = sin->sin_addr.s_addr; |
|---|
| 165 |
ret = 0; |
|---|
| 166 |
} |
|---|
| 167 |
if (ifconfig_ioctl(skfd,ifname,SIOCGIFBRDADDR, &ifr) >= 0){ |
|---|
| 168 |
struct sockaddr_in *sin = (struct sockaddr_in*)&ifr.ifr_addr; |
|---|
| 169 |
*bcast = sin->sin_addr.s_addr; |
|---|
| 170 |
ret = 0; |
|---|
| 171 |
} |
|---|
| 172 |
close (skfd); |
|---|
| 173 |
} |
|---|
| 174 |
} |
|---|
| 175 |
return ret; |
|---|
| 176 |
} |
|---|
| 177 |
|
|---|
| 178 |
static void |
|---|
| 179 |
readIP(char const *str, struct vc_ip_mask_pair *ip, uint32_t *bcast) |
|---|
| 180 |
{ |
|---|
| 181 |
if (ifconfig_getaddr(str, &ip->ip, &ip->mask, bcast)==-1) { |
|---|
| 182 |
char *pt; |
|---|
| 183 |
char tmpopt[strlen(str)+1]; |
|---|
| 184 |
struct hostent *h; |
|---|
| 185 |
|
|---|
| 186 |
strcpy(tmpopt,str); |
|---|
| 187 |
pt = strchr(tmpopt,'/'); |
|---|
| 188 |
|
|---|
| 189 |
if (pt==0) |
|---|
| 190 |
ip->mask = ntohl(0xffffff00); |
|---|
| 191 |
else { |
|---|
| 192 |
*pt++ = '\0'; |
|---|
| 193 |
|
|---|
| 194 |
|
|---|
| 195 |
if (strchr(pt,'.')==0) { |
|---|
| 196 |
int sz = atoi(pt); |
|---|
| 197 |
; |
|---|
| 198 |
for (ip->mask = 0; sz>0; --sz) { |
|---|
| 199 |
ip->mask >>= 1; |
|---|
| 200 |
ip->mask |= 0x80000000; |
|---|
| 201 |
} |
|---|
| 202 |
ip->mask = ntohl(ip->mask); |
|---|
| 203 |
} |
|---|
| 204 |
else { |
|---|
| 205 |
struct hostent *h = gethostbyname (pt); |
|---|
| 206 |
if (h==0) { |
|---|
| 207 |
WRITE_MSG(2, "Invalid netmask '"); |
|---|
| 208 |
WRITE_STR(2, pt); |
|---|
| 209 |
WRITE_MSG(2, "'\n"); |
|---|
| 210 |
exit(wrapper_exit_code); |
|---|
| 211 |
} |
|---|
| 212 |
|
|---|
| 213 |
memcpy (&ip->mask, h->h_addr, sizeof(ip->mask)); |
|---|
| 214 |
} |
|---|
| 215 |
} |
|---|
| 216 |
|
|---|
| 217 |
h = gethostbyname (tmpopt); |
|---|
| 218 |
if (h==0) { |
|---|
| 219 |
WRITE_MSG(2, "Invalid IP number or host name '"); |
|---|
| 220 |
WRITE_STR(2, tmpopt); |
|---|
| 221 |
WRITE_MSG(2, "'\n"); |
|---|
| 222 |
exit(wrapper_exit_code); |
|---|
| 223 |
} |
|---|
| 224 |
|
|---|
| 225 |
memcpy (&ip->ip, h->h_addr,sizeof(ip->ip)); |
|---|
| 226 |
} |
|---|
| 227 |
} |
|---|
| 228 |
|
|---|
| 229 |
static void |
|---|
| 230 |
readBcast(char const *str, uint32_t *bcast) |
|---|
| 231 |
{ |
|---|
| 232 |
uint32_t tmp; |
|---|
| 233 |
if (ifconfig_getaddr(str, &tmp, &tmp, bcast)==-1){ |
|---|
| 234 |
struct hostent *h = gethostbyname (str); |
|---|
| 235 |
if (h==0){ |
|---|
| 236 |
WRITE_MSG(2, "Invalid broadcast number '"); |
|---|
| 237 |
WRITE_STR(2, optarg); |
|---|
| 238 |
WRITE_MSG(2, "'\n"); |
|---|
| 239 |
exit(wrapper_exit_code); |
|---|
| 240 |
} |
|---|
| 241 |
memcpy (bcast, h->h_addr,sizeof(*bcast)); |
|---|
| 242 |
} |
|---|
| 243 |
} |
|---|
| 244 |
|
|---|
| 245 |
int main (int argc, char *argv[]) |
|---|
| 246 |
{ |
|---|
| 247 |
size_t const nb_ipv4root = vc_get_nb_ipv4root(); |
|---|
| 248 |
bool is_silent = false; |
|---|
| 249 |
struct vc_ip_mask_pair ips[nb_ipv4root]; |
|---|
| 250 |
size_t nbaddrs = 0; |
|---|
| 251 |
uint32_t bcast = 0xffffffff; |
|---|
| 252 |
|
|---|
| 253 |
while (1) { |
|---|
| 254 |
int c = getopt_long(argc, argv, "+", CMDLINE_OPTIONS, 0); |
|---|
| 255 |
if (c==-1) break; |
|---|
| 256 |
|
|---|
| 257 |
switch (c) { |
|---|
| 258 |
case CMD_HELP : showHelp(1, argv[0], 0); |
|---|
| 259 |
case CMD_VERSION : showVersion(); |
|---|
| 260 |
case CMD_SILENT : is_silent = true; break; |
|---|
| 261 |
case CMD_BCAST : readBcast(optarg, &bcast); break; |
|---|
| 262 |
case CMD_NID : WRITE_MSG(2, "WARNING: --nid is not supported by this version\n"); break; |
|---|
| 263 |
case CMD_IP : |
|---|
| 264 |
if (nbaddrs>=nb_ipv4root) { |
|---|
| 265 |
WRITE_MSG(2, "Too many IP numbers, max 16\n"); |
|---|
| 266 |
exit(wrapper_exit_code); |
|---|
| 267 |
} |
|---|
| 268 |
readIP(optarg, ips+nbaddrs, &bcast); |
|---|
| 269 |
++nbaddrs; |
|---|
| 270 |
break; |
|---|
| 271 |
default : |
|---|
| 272 |
WRITE_MSG(2, "Try '"); |
|---|
| 273 |
WRITE_STR(2, argv[0]); |
|---|
| 274 |
WRITE_MSG(2, " --help' for more information.\n"); |
|---|
| 275 |
exit(wrapper_exit_code); |
|---|
| 276 |
break; |
|---|
| 277 |
} |
|---|
| 278 |
} |
|---|
| 279 |
|
|---|
| 280 |
if (optind==argc) { |
|---|
| 281 |
WRITE_MSG(2, "No command given; try '--help' for more information\n"); |
|---|
| 282 |
exit(wrapper_exit_code); |
|---|
| 283 |
} |
|---|
| 284 |
|
|---|
| 285 |
#if !defined(VC_ENABLE_API_COMPAT) && !defined(VC_ENABLE_API_LEGACY) |
|---|
| 286 |
# warning building a dummy chbind-compat with no available APIs |
|---|
| 287 |
#endif |
|---|
| 288 |
|
|---|
| 289 |
#if defined(VC_ENABLE_API_COMPAT) || defined(VC_ENABLE_API_LEGACY) |
|---|
| 290 |
if (vc_set_ipv4root(bcast,nbaddrs,ips)!=0) { |
|---|
| 291 |
perror("chbind: vc_set_ipv4root()"); |
|---|
| 292 |
exit(wrapper_exit_code); |
|---|
| 293 |
} |
|---|
| 294 |
#else |
|---|
| 295 |
{ |
|---|
| 296 |
WRITE_MSG(2, "chbind: kernel does not provide network isolation\n"); |
|---|
| 297 |
exit(wrapper_exit_code); |
|---|
| 298 |
} |
|---|
| 299 |
#endif |
|---|
| 300 |
|
|---|
| 301 |
if (!is_silent) { |
|---|
| 302 |
size_t i; |
|---|
| 303 |
|
|---|
| 304 |
WRITE_MSG(1, "ipv4root is now"); |
|---|
| 305 |
for (i=0; i<nbaddrs; ++i) { |
|---|
| 306 |
WRITE_MSG(1, " "); |
|---|
| 307 |
WRITE_STR(1, inet_ntoa(*reinterpret_cast(struct in_addr *)(&ips[i].ip))); |
|---|
| 308 |
} |
|---|
| 309 |
WRITE_MSG(1, "\n"); |
|---|
| 310 |
} |
|---|
| 311 |
|
|---|
| 312 |
Eexecvp (argv[optind],argv+optind); |
|---|
| 313 |
return EXIT_SUCCESS; |
|---|
| 314 |
} |
|---|
| 315 |
|
|---|
| 316 |
#ifdef ENSC_TESTSUITE |
|---|
| 317 |
#include <assert.h> |
|---|
| 318 |
|
|---|
| 319 |
void test() |
|---|
| 320 |
{ |
|---|
| 321 |
struct vc_ip_mask_pair ip; |
|---|
| 322 |
uint32_t bcast; |
|---|
| 323 |
|
|---|
| 324 |
bcast = 0; |
|---|
| 325 |
readIP("1.2.3.4", &ip, &bcast); |
|---|
| 326 |
assert(ip.ip==ntohl(0x01020304) && ip.mask==ntohl(0xffffff00) && bcast==0); |
|---|
| 327 |
|
|---|
| 328 |
readIP("1.2.3.4/8", &ip, &bcast); |
|---|
| 329 |
assert(ip.ip==ntohl(0x01020304) && ip.mask==ntohl(0xff000000) && bcast==0); |
|---|
| 330 |
|
|---|
| 331 |
readIP("1.2.3.4/255.255.0.0", &ip, &bcast); |
|---|
| 332 |
assert(ip.ip==ntohl(0x01020304) && ip.mask==ntohl(0xffff0000) && bcast==0); |
|---|
| 333 |
|
|---|
| 334 |
readIP("localhost", &ip, &bcast); |
|---|
| 335 |
assert(ip.ip==ntohl(0x7f000001) && ip.mask==ntohl(0xffffff00) && bcast==0); |
|---|
| 336 |
|
|---|
| 337 |
#if 0 |
|---|
| 338 |
if (ifconfig_getaddr("lo", &tmp, &tmp, &tmp)!=-1) { |
|---|
| 339 |
readIP("lo", &ip, &bcast); |
|---|
| 340 |
assert(ip.ip==ntohl(0x7f000001) && ip.mask==ntohl(0xff000000) && bcast==ntohl(0x7fffffff)); |
|---|
| 341 |
} |
|---|
| 342 |
#endif |
|---|
| 343 |
} |
|---|
| 344 |
#endif |
|---|