1 /* $KAME: rtsold.c,v 1.67 2003/05/17 18:16:15 itojun Exp $ */
4 * SPDX-License-Identifier: BSD-3-Clause
6 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the project nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include <sys/param.h>
35 #include <sys/capsicum.h>
36 #include <sys/event.h>
37 #include <sys/ioctl.h>
38 #include <sys/socket.h>
41 #include <net/if_dl.h>
43 #include <netinet/in.h>
44 #include <netinet/icmp6.h>
45 #include <netinet/in_var.h>
46 #include <arpa/inet.h>
48 #include <netinet6/nd6.h>
50 #include <capsicum_helpers.h>
64 #include <libcasper.h>
65 #include <casper/cap_syslog.h>
70 #define RTSOL_DUMPFILE "/var/run/rtsold.dump"
72 struct timespec tm_max;
73 static int log_upto = 999;
76 int Fflag = 0; /* force setting sysctl parameters */
81 const char *managedconf_script;
82 const char *otherconf_script;
83 const char *alwaysconf_script;
84 const char *resolvconf_script = "/sbin/resolvconf";
86 cap_channel_t *capllflags, *capscript, *capsendmsg, *capsyslog;
88 /* protocol constants */
89 #define MAX_RTR_SOLICITATION_DELAY 1 /* second */
90 #define RTR_SOLICITATION_INTERVAL 4 /* seconds */
91 #define MAX_RTR_SOLICITATIONS 3 /* times */
94 * implementation dependent constants in seconds
95 * XXX: should be configurable
97 #define PROBE_INTERVAL 60
99 /* static variables and functions */
100 static int mobile_node = 0;
101 static int no_solicitation_delay = 0;
103 static sig_atomic_t do_dump, do_exit;
104 static struct pidfh *pfh;
106 static char **autoifprobe(void);
107 static int ifconfig(char *ifname);
108 static int init_capabilities(void);
109 static int make_packet(struct ifinfo *);
110 static struct timespec *rtsol_check_timer(void);
112 static void set_dumpfile(int);
113 static void set_exit(int);
114 static void usage(const char *progname);
117 main(int argc, char **argv)
119 struct kevent events[2];
122 struct timespec *timeout;
123 const char *opts, *pidfilepath, *progname;
124 int ch, error, kq, once, rcvsock, rtsock;
126 progname = basename(argv[0]);
127 if (strcmp(progname, "rtsold") == 0) {
128 opts = "adDfFim1M:O:A:p:R:u";
132 opts = "adDFiM:O:A:R:u";
137 while ((ch = getopt(argc, argv, opts)) != -1) {
155 no_solicitation_delay = 1;
164 managedconf_script = optarg;
167 otherconf_script = optarg;
170 alwaysconf_script = optarg;
173 pidfilepath = optarg;
176 resolvconf_script = optarg;
188 if ((!aflag && argc == 0) || (aflag && argc != 0))
191 /* Generate maximum time in timespec. */
192 tm_max.tv_sec = (-1) & ~((time_t)1 << ((sizeof(tm_max.tv_sec) * 8) - 1));
193 tm_max.tv_nsec = (-1) & ~((long)1 << ((sizeof(tm_max.tv_nsec) * 8) - 1));
197 log_upto = LOG_DEBUG;
201 log_upto = LOG_NOTICE;
203 if (managedconf_script != NULL && *managedconf_script != '/')
204 errx(1, "configuration script (%s) must be an absolute path",
206 if (otherconf_script != NULL && *otherconf_script != '/')
207 errx(1, "configuration script (%s) must be an absolute path",
209 if (alwaysconf_script != NULL && *alwaysconf_script != '/')
210 errx(1, "configuration script (%s) must be an absolute path",
212 if (*resolvconf_script != '/')
213 errx(1, "configuration script (%s) must be an absolute path",
217 pfh = pidfile_open(pidfilepath, 0644, NULL);
219 errx(1, "failed to open pidfile: %s", strerror(errno));
220 if (daemon(0, 0) != 0)
221 errx(1, "failed to daemonize");
224 if ((error = init_capabilities()) != 0)
225 err(1, "failed to initialize capabilities");
228 cap_openlog(capsyslog, progname, LOG_NDELAY | LOG_PID,
231 (void)cap_setlogmask(capsyslog, LOG_UPTO(log_upto));
232 (void)signal(SIGTERM, set_exit);
233 (void)signal(SIGINT, set_exit);
234 (void)signal(SIGUSR1, set_dumpfile);
235 dumpfp = rtsold_init_dumpfile(RTSOL_DUMPFILE);
241 warnmsg(LOG_ERR, __func__, "failed to create a kqueue: %s",
246 /* Open global sockets and register for read events. */
247 if ((rtsock = rtsock_open()) < 0) {
248 warnmsg(LOG_ERR, __func__, "failed to open routing socket");
251 if ((rcvsock = recvsockopen()) < 0) {
252 warnmsg(LOG_ERR, __func__, "failed to open receive socket");
255 EV_SET(&events[0], rtsock, EVFILT_READ, EV_ADD, 0, 0, NULL);
256 EV_SET(&events[1], rcvsock, EVFILT_READ, EV_ADD, 0, 0, NULL);
257 if (kevent(kq, events, 2, NULL, 0, NULL) < 0) {
258 warnmsg(LOG_ERR, __func__, "kevent(): %s", strerror(errno));
262 /* Probe network interfaces and set up tracking info. */
264 warnmsg(LOG_ERR, __func__, "failed to initialize interfaces");
268 argv = autoifprobe();
269 while (argv && *argv) {
270 if (ifconfig(*argv)) {
271 warnmsg(LOG_ERR, __func__,
272 "failed to initialize %s", *argv);
278 /* Write to our pidfile. */
279 if (pfh != NULL && pidfile_write(pfh) != 0) {
280 warnmsg(LOG_ERR, __func__,
281 "failed to open pidfile: %s", strerror(errno));
285 /* Enter capability mode. */
286 caph_cache_catpages();
287 if (caph_enter_casper() != 0) {
288 warnmsg(LOG_ERR, __func__, "caph_enter(): %s", strerror(errno));
294 /* Handle SIGTERM, SIGINT. */
300 /* Handle SIGUSR1. */
306 timeout = rtsol_check_timer();
309 /* if we have no timeout, we are done (or failed) */
313 /* if all interfaces have got RA packet, we are done */
314 TAILQ_FOREACH(ifi, &ifinfo_head, ifi_next) {
315 if (ifi->state != IFS_DOWN && ifi->racnt == 0)
322 error = kevent(kq, NULL, 0, &events[0], 1, timeout);
324 if (error < 0 && errno != EINTR)
325 warnmsg(LOG_ERR, __func__, "kevent(): %s",
330 if (events[0].ident == (uintptr_t)rtsock)
331 rtsock_input(rtsock);
333 rtsol_input(rcvsock);
340 init_capabilities(void)
343 const char *const scripts[] =
344 { resolvconf_script, managedconf_script, otherconf_script,
346 cap_channel_t *capcasper;
349 capcasper = cap_init();
350 if (capcasper == NULL)
353 capllflags = cap_service_open(capcasper, "rtsold.llflags");
354 if (capllflags == NULL)
357 capscript = cap_service_open(capcasper, "rtsold.script");
358 if (capscript == NULL)
360 limits = nvlist_create(0);
361 for (size_t i = 0; i < nitems(scripts); i++)
362 if (scripts[i] != NULL)
363 nvlist_append_string_array(limits, "scripts",
365 if (cap_limit_set(capscript, limits) != 0)
368 capsendmsg = cap_service_open(capcasper, "rtsold.sendmsg");
369 if (capsendmsg == NULL)
373 capsyslog = cap_service_open(capcasper, "system.syslog");
374 if (capsyslog == NULL)
378 cap_close(capcasper);
379 #endif /* WITH_CASPER */
384 ifconfig(char *ifname)
387 struct sockaddr_dl *sdl;
391 if ((sdl = if_nametosdl(ifname)) == NULL) {
392 warnmsg(LOG_ERR, __func__,
393 "failed to get link layer information for %s", ifname);
396 if (find_ifinfo(sdl->sdl_index)) {
397 warnmsg(LOG_ERR, __func__,
398 "interface %s was already configured", ifname);
403 struct in6_ndireq nd;
406 if ((s = socket(AF_INET6, SOCK_DGRAM, 0)) < 0) {
407 warnmsg(LOG_ERR, __func__, "socket() failed.");
410 memset(&nd, 0, sizeof(nd));
411 strlcpy(nd.ifname, ifname, sizeof(nd.ifname));
412 if (ioctl(s, SIOCGIFINFO_IN6, (caddr_t)&nd) < 0) {
413 warnmsg(LOG_ERR, __func__,
414 "cannot get accept_rtadv flag");
418 nd.ndi.flags |= ND6_IFF_ACCEPT_RTADV;
419 if (ioctl(s, SIOCSIFINFO_IN6, (caddr_t)&nd) < 0) {
420 warnmsg(LOG_ERR, __func__,
421 "cannot set accept_rtadv flag");
428 if ((ifi = malloc(sizeof(*ifi))) == NULL) {
429 warnmsg(LOG_ERR, __func__, "memory allocation failed");
432 memset(ifi, 0, sizeof(*ifi));
434 ifi->ifi_rdnss = IFI_DNSOPT_STATE_NOINFO;
435 ifi->ifi_dnssl = IFI_DNSOPT_STATE_NOINFO;
436 TAILQ_INIT(&ifi->ifi_rainfo);
437 strlcpy(ifi->ifname, ifname, sizeof(ifi->ifname));
439 /* construct a router solicitation message */
440 if (make_packet(ifi))
443 /* set link ID of this interface. */
445 if (inet_zoneid(AF_INET6, 2, ifname, &ifi->linkid))
448 /* XXX: assume interface IDs as link IDs */
449 ifi->linkid = ifi->sdl->sdl_index;
453 * check if the interface is available.
454 * also check if SIOCGIFMEDIA ioctl is OK on the interface.
457 ifi->active = interface_status(ifi);
458 if (!ifi->mediareqok) {
460 * probe routers periodically even if the link status
463 ifi->probeinterval = PROBE_INTERVAL;
466 /* activate interface: interface_up returns 0 on success */
467 flags = interface_up(ifi->ifname);
469 ifi->state = IFS_DELAY;
470 else if (flags == IFS_TENTATIVE)
471 ifi->state = IFS_TENTATIVE;
473 ifi->state = IFS_DOWN;
475 rtsol_timer_update(ifi);
477 TAILQ_INSERT_TAIL(&ifinfo_head, ifi, ifi_next);
487 find_rainfo(struct ifinfo *ifi, struct sockaddr_in6 *sin6)
491 TAILQ_FOREACH(rai, &ifi->ifi_rainfo, rai_next)
492 if (memcmp(&rai->rai_saddr.sin6_addr, &sin6->sin6_addr,
493 sizeof(rai->rai_saddr.sin6_addr)) == 0)
500 find_ifinfo(int ifindex)
504 TAILQ_FOREACH(ifi, &ifinfo_head, ifi_next) {
505 if (ifi->sdl->sdl_index == ifindex)
512 make_packet(struct ifinfo *ifi)
514 size_t packlen = sizeof(struct nd_router_solicit), lladdroptlen = 0;
515 struct nd_router_solicit *rs;
518 if ((lladdroptlen = lladdropt_length(ifi->sdl)) == 0) {
519 warnmsg(LOG_INFO, __func__,
520 "link-layer address option has null length"
521 " on %s. Treat as not included.", ifi->ifname);
523 packlen += lladdroptlen;
524 ifi->rs_datalen = packlen;
526 /* allocate buffer */
527 if ((buf = malloc(packlen)) == NULL) {
528 warnmsg(LOG_ERR, __func__,
529 "memory allocation failed for %s", ifi->ifname);
534 /* fill in the message */
535 rs = (struct nd_router_solicit *)buf;
536 rs->nd_rs_type = ND_ROUTER_SOLICIT;
539 rs->nd_rs_reserved = 0;
542 /* fill in source link-layer address option */
544 lladdropt_fill(ifi->sdl, (struct nd_opt_hdr *)buf);
549 static struct timespec *
550 rtsol_check_timer(void)
552 static struct timespec returnval;
553 struct timespec now, rtsol_timer;
556 struct ra_opt *rao, *raotmp;
559 clock_gettime(CLOCK_MONOTONIC_FAST, &now);
561 rtsol_timer = tm_max;
563 TAILQ_FOREACH(ifi, &ifinfo_head, ifi_next) {
564 if (TS_CMP(&ifi->expire, &now, <=)) {
565 warnmsg(LOG_DEBUG, __func__, "timer expiration on %s, "
566 "state = %d", ifi->ifname, ifi->state);
568 while((rai = TAILQ_FIRST(&ifi->ifi_rainfo)) != NULL) {
569 /* Remove all RA options. */
570 TAILQ_REMOVE(&ifi->ifi_rainfo, rai, rai_next);
571 while ((rao = TAILQ_FIRST(&rai->rai_ra_opt)) !=
573 TAILQ_REMOVE(&rai->rai_ra_opt, rao,
575 if (rao->rao_msg != NULL)
581 switch (ifi->state) {
584 /* interface_up returns 0 on success */
585 flags = interface_up(ifi->ifname);
587 ifi->state = IFS_DELAY;
588 else if (flags == IFS_TENTATIVE)
589 ifi->state = IFS_TENTATIVE;
591 ifi->state = IFS_DOWN;
595 int oldstatus = ifi->active;
598 ifi->active = interface_status(ifi);
600 if (oldstatus != ifi->active) {
601 warnmsg(LOG_DEBUG, __func__,
602 "%s status is changed"
605 oldstatus, ifi->active);
607 ifi->state = IFS_DELAY;
608 } else if (ifi->probeinterval &&
610 ifi->timer.tv_sec) <= 0) {
611 /* probe timer expired */
615 ifi->state = IFS_PROBE;
619 * If we need a probe, clear the previous
620 * status wrt the "managed/other" configuration.
623 ifi->managedconfig = 0;
624 ifi->otherconfig = 0;
625 ifi->alwaysconfig = 0;
627 if (probe && mobile_node) {
628 error = cap_probe_defrouters(capsendmsg,
631 warnmsg(LOG_DEBUG, __func__,
632 "failed to probe routers: %d",
638 ifi->state = IFS_PROBE;
639 (void)cap_rssend(capsendmsg, ifi);
642 if (ifi->probes < MAX_RTR_SOLICITATIONS)
643 (void)cap_rssend(capsendmsg, ifi);
645 warnmsg(LOG_INFO, __func__,
646 "No answer after sending %d RSs",
649 ifi->state = IFS_IDLE;
653 rtsol_timer_update(ifi);
655 /* Expiration check for RA options. */
658 TAILQ_FOREACH(rai, &ifi->ifi_rainfo, rai_next) {
659 TAILQ_FOREACH_SAFE(rao, &rai->rai_ra_opt,
661 warnmsg(LOG_DEBUG, __func__,
662 "RA expiration timer: "
663 "type=%d, msg=%s, expire=%s",
664 rao->rao_type, (char *)rao->rao_msg,
665 sec2str(&rao->rao_expire));
666 if (TS_CMP(&now, &rao->rao_expire,
668 warnmsg(LOG_DEBUG, __func__,
669 "RA expiration timer: "
671 TAILQ_REMOVE(&rai->rai_ra_opt,
673 if (rao->rao_msg != NULL)
683 if (TS_CMP(&ifi->expire, &rtsol_timer, <))
684 rtsol_timer = ifi->expire;
687 if (TS_CMP(&rtsol_timer, &tm_max, ==)) {
688 warnmsg(LOG_DEBUG, __func__, "there is no timer");
690 } else if (TS_CMP(&rtsol_timer, &now, <))
691 /* this may occur when the interval is too small */
692 returnval.tv_sec = returnval.tv_nsec = 0;
694 TS_SUB(&rtsol_timer, &now, &returnval);
696 now.tv_sec += returnval.tv_sec;
697 now.tv_nsec += returnval.tv_nsec;
698 warnmsg(LOG_DEBUG, __func__, "New timer is %s",
705 rtsol_timer_update(struct ifinfo *ifi)
707 #define MILLION 1000000
708 #define DADRETRY 10 /* XXX: adhoc */
712 bzero(&ifi->timer, sizeof(ifi->timer));
714 switch (ifi->state) {
717 if (++ifi->dadcount > DADRETRY) {
719 ifi->timer.tv_sec = PROBE_INTERVAL;
721 ifi->timer.tv_sec = 1;
725 /* XXX should be configurable */
726 ifi->timer.tv_sec = 3;
728 ifi->timer = tm_max; /* stop timer(valid?) */
731 if (no_solicitation_delay)
734 interval = arc4random_uniform(MAX_RTR_SOLICITATION_DELAY * MILLION);
735 ifi->timer.tv_sec = interval / MILLION;
736 ifi->timer.tv_nsec = (interval % MILLION) * 1000;
739 if (ifi->probes < MAX_RTR_SOLICITATIONS)
740 ifi->timer.tv_sec = RTR_SOLICITATION_INTERVAL;
743 * After sending MAX_RTR_SOLICITATIONS solicitations,
744 * we're just waiting for possible replies; there
745 * will be no more solicitation. Thus, we change
746 * the timer value to MAX_RTR_SOLICITATION_DELAY based
747 * on RFC 2461, Section 6.3.7.
749 ifi->timer.tv_sec = MAX_RTR_SOLICITATION_DELAY;
752 warnmsg(LOG_ERR, __func__,
753 "illegal interface state(%d) on %s",
754 ifi->state, ifi->ifname);
758 /* reset the timer */
759 if (TS_CMP(&ifi->timer, &tm_max, ==)) {
760 ifi->expire = tm_max;
761 warnmsg(LOG_DEBUG, __func__,
762 "stop timer for %s", ifi->ifname);
764 clock_gettime(CLOCK_MONOTONIC_FAST, &now);
765 TS_ADD(&now, &ifi->timer, &ifi->expire);
767 now.tv_sec += ifi->timer.tv_sec;
768 now.tv_nsec += ifi->timer.tv_nsec;
769 warnmsg(LOG_DEBUG, __func__, "set timer for %s to %s",
770 ifi->ifname, sec2str(&now));
777 set_dumpfile(int sig __unused)
784 set_exit(int sig __unused)
791 usage(const char *progname)
794 if (strcmp(progname, "rtsold") == 0) {
795 fprintf(stderr, "usage: rtsold [-dDfFm1] [-O script-name] "
796 "[-M script-name ] [-A script-name ] "
797 "[-p pidfile] [-R script-name] interface ...\n");
798 fprintf(stderr, "usage: rtsold [-dDfFm1] [-O script-name] "
799 "[-M script-name ] [-A script-name ] "
800 "[-p pidfile] [-R script-name] -a\n");
802 fprintf(stderr, "usage: rtsol [-dDF] [-O script-name] "
803 "[-M script-name ] [-A script-name ] "
804 "[-p pidfile] [-R script-name] interface ...\n");
805 fprintf(stderr, "usage: rtsol [-dDF] [-O script-name] "
806 "[-M script-name ] [-A script-name ] "
807 "[-p pidfile] [-R script-name] -a\n");
813 warnmsg(int priority, const char *func, const char *msg, ...)
820 if (priority <= log_upto)
823 snprintf(buf, sizeof(buf), "<%s> %s", func, msg);
825 cap_vsyslog(capsyslog, priority, msg, ap);
831 * return a list of interfaces which is suitable to sending an RS.
836 static char **argv = NULL;
840 struct ifaddrs *ifap, *ifa;
841 struct in6_ndireq nd;
852 if (getifaddrs(&ifap) != 0)
855 if (!Fflag && (s = socket(AF_INET6, SOCK_DGRAM, 0)) < 0) {
856 warnmsg(LOG_ERR, __func__, "socket");
860 /* find an ethernet */
861 for (ifa = ifap; ifa; ifa = ifa->ifa_next) {
862 if ((ifa->ifa_flags & IFF_UP) == 0)
864 if ((ifa->ifa_flags & IFF_LOOPBACK) != 0)
866 if ((ifa->ifa_flags & IFF_MULTICAST) == 0)
869 if (ifa->ifa_addr->sa_family != AF_INET6)
873 for (i = 0; i < n; i++) {
874 if (strcmp(argv[i], ifa->ifa_name) == 0) {
883 * Skip the interfaces which IPv6 and/or accepting RA
887 memset(&nd, 0, sizeof(nd));
888 strlcpy(nd.ifname, ifa->ifa_name, sizeof(nd.ifname));
889 if (ioctl(s, SIOCGIFINFO_IN6, (caddr_t)&nd) < 0) {
890 warnmsg(LOG_ERR, __func__,
891 "ioctl(SIOCGIFINFO_IN6)");
894 if ((nd.ndi.flags & ND6_IFF_IFDISABLED))
896 if (!(nd.ndi.flags & ND6_IFF_ACCEPT_RTADV))
900 /* if we find multiple candidates, just warn. */
901 if (n != 0 && dflag > 1)
902 warnmsg(LOG_WARNING, __func__,
903 "multiple interfaces found");
905 a = realloc(argv, (n + 1) * sizeof(char *));
907 warnmsg(LOG_ERR, __func__, "realloc");
911 argv[n] = strdup(ifa->ifa_name);
913 warnmsg(LOG_ERR, __func__, "malloc");
920 a = realloc(argv, (n + 1) * sizeof(char *));
922 warnmsg(LOG_ERR, __func__, "realloc");
929 for (i = 0; i < n; i++)
930 warnmsg(LOG_WARNING, __func__, "probing %s",