1 /* vi: set sw=4 ts=4: */
5 * Adapted to busybox by Thomas Lundquist <thomasez@zelow.no>
6 * Original Author: Tomi Ollila <too@iki.fi>
7 * http://www.guru-group.fi/~too/sw/
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
32 #include <sys/syslog.h>
37 #include <sys/syslog.h>
38 #include <sys/types.h>
41 #include <sys/socket.h>
42 #include <netinet/in.h>
44 #include <arpa/inet.h>
49 #define IDENT_PORT 113
51 #define MAXIDLETIME 45
53 static const char ident_substr[] = " : USERID : UNIX : ";
54 static const int ident_substr_len = sizeof(ident_substr) - 1;
55 #define PIDFILE "/var/run/identd.pid"
58 * We have to track the 'first connection socket' so that we
59 * don't go around closing file descriptors for non-clients.
61 * descriptor setup normally
63 * 1 = syslog fd (hopefully -- otherwise this won't work)
64 * 2 = connection socket after detached from tty. standard error before that
65 * 3 - 2 + MAXCONNS = rest connection sockets
67 * To try to make sure that syslog fd is what is "requested", the that fd
68 * is closed before openlog() call. It can only severely fail if fd 0
69 * is initially closed.
74 * FD of the connection is always the index of the connection structure
75 * in `conns' array + FCS
83 /* When using global variables, bind those at least to a structure. */
85 const char *identuser;
93 static void reply(int s, char *buf);
94 static void replyError(int s, char *buf);
96 static const char *nobodystr = "nobody"; /* this needs to be declared like this */
97 static char *bind_ip_address = "0.0.0.0";
99 static inline void movefd(int from, int to)
107 static void inetbind(void)
110 struct sockaddr_in addr;
111 int len = sizeof(addr);
115 if ((se = getservbyname("identd", "tcp")) == NULL)
120 if ((s = socket(AF_INET, SOCK_STREAM, 0)) < 0)
121 bb_perror_msg_and_die("Cannot create server socket");
123 setsockopt(s, SOL_SOCKET, SO_REUSEADDR, &one, sizeof(one));
125 memset(&addr, 0, sizeof(addr));
126 addr.sin_addr.s_addr = inet_addr(bind_ip_address);
127 addr.sin_family = AF_INET;
128 addr.sin_port = htons(port);
130 if (bind(s, (struct sockaddr *)&addr, len) < 0)
131 bb_perror_msg_and_die("Cannot bind() port %i", IDENT_PORT);
133 if (listen(s, 5) < 0)
134 bb_perror_msg_and_die("Cannot listen() on port %i", IDENT_PORT);
139 static void delpidfile(void)
142 * Usually nobody has no write/delete access to directory /var/run/
143 * therefore if file cannot be deleted, it is truncated
145 if (unlink(PIDFILE) < 0)
146 close(open(PIDFILE, O_WRONLY|O_CREAT|O_TRUNC, 0644));
149 static void handlexitsigs(int signum)
155 /* May succeed. If not, won't care. */
156 static inline void writepid(uid_t nobody, uid_t nogrp)
159 int fd = open(PIDFILE, O_WRONLY|O_CREAT|O_TRUNC, 0664);
164 snprintf(buf, 23, "%d\n", getpid());
165 write(fd, buf, strlen(buf));
166 fchown(fd, nobody, nogrp);
169 /* should this handle ILL, ... (see signal(7)) */
170 signal(SIGTERM, handlexitsigs);
171 signal(SIGINT, handlexitsigs);
172 signal(SIGQUIT, handlexitsigs);
175 /* return 0 as parent, 1 as child */
176 static int godaemon(void)
183 bb_perror_msg_and_die("Could not fork");
186 pw = getpwnam(nobodystr);
188 bb_error_msg_and_die("Cannot find uid/gid of user '%s'", nobodystr);
191 writepid(nobody, nogrp);
195 if (setgid(nogrp)) bb_error_msg_and_die("Could not setgid()");
196 if (setegid(nogrp)) bb_error_msg_and_die("Could not setegid()");
197 if (setuid(nobody)) bb_error_msg_and_die("Could not setuid()");
198 if (seteuid(nobody)) bb_error_msg_and_die("Could not seteuid()");
202 signal(SIGHUP, SIG_IGN);
203 signal(SIGPIPE, SIG_IGN); /* connection closed when writing (raises ???) */
207 openlog(bb_applet_name, 0, LOG_DAEMON);
214 static void deleteConn(int s)
223 * Most of the time there is 0 connections. Most often that there
224 * is connections, there is just one connection. When this one connection
225 * closes, i == G.conncnt = 0 -> no copying.
226 * When there is more than one connection, the oldest connections closes
227 * earlier on average. When this happens, the code below starts copying
228 * the connection structure w/ highest index to the place which which is
229 * just deleted. This means that the connection structures are no longer
230 * in chronological order. I'd quess this means that when there is more
231 * than 1 connection, on average every other connection structure needs
232 * to be copied over the time all these connections are deleted.
234 if (i != G.conncnt) {
235 memcpy(&conns[i], &conns[G.conncnt], sizeof(conns[0]));
236 movefd(G.conncnt + FCS, s);
239 FD_CLR(G.conncnt + FCS, &G.readfds);
242 static int closeOldest(void)
244 time_t min = conns[0].lasttime;
248 for (i = 1; i < MAXCONNS; i++)
249 if (conns[i].lasttime < min)
252 replyError(idx + FCS, "X-SERVER-TOO-BUSY");
258 static int checkInput(char *buf, int len, int l)
261 for (i = len; i < len + l; ++i)
267 int fakeidentd_main(int argc, char **argv)
269 memset(conns, 0, sizeof(conns));
270 memset(&G, 0, sizeof(G));
272 FD_SET(0, &G.readfds);
274 /* handle -b <ip> parameter */
275 bb_getopt_ulflags(argc, argv, "b:", &bind_ip_address);
276 /* handle optional REPLY STRING */
278 G.identuser = argv[optind];
280 G.identuser = nobodystr;
282 /* daemonize and have the parent return */
286 /* main loop where we process all events and never exit */
288 fd_set rfds = G.readfds;
289 struct timeval tv = { 15, 0 };
291 int tim = time(NULL);
293 select(G.conncnt + FCS, &rfds, NULL, NULL, G.conncnt? &tv: NULL);
295 for (i = G.conncnt - 1; i >= 0; i--) {
298 if (FD_ISSET(s, &rfds)) {
299 char *buf = conns[i].buf;
300 unsigned int len = conns[i].len;
303 if ((l = read(s, buf + len, sizeof(conns[0].buf) - len)) > 0) {
304 if (checkInput(buf, len, l)) {
307 } else if (len + l >= sizeof(conns[0].buf)) {
308 replyError(s, "X-INVALID-REQUEST");
317 conns[i].lasttime = tim;
323 /* implement as time_after() in linux kernel sources ... */
324 if (conns[i].lasttime + MAXIDLETIME <= tim) {
325 replyError(s, "X-TIMEOUT");
331 if (FD_ISSET(0, &rfds)) {
332 int s = accept(0, NULL, 0);
335 if (errno != EINTR) /* EINTR */
336 syslog(LOG_ERR, "accept: %s", strerror(errno));
338 if (G.conncnt == MAXCONNS)
343 movefd(s, i + FCS); /* move if not already there */
344 FD_SET(i + FCS, &G.readfds);
347 conns[i].lasttime = time(NULL);
350 } /* end of while(1) */
355 static int parseAddrs(char *ptr, char **myaddr, char **heraddr);
356 static void reply(int s, char *buf)
358 char *myaddr, *heraddr;
360 myaddr = heraddr = NULL;
362 if (parseAddrs(buf, &myaddr, &heraddr))
363 replyError(s, "X-INVALID-REQUEST");
366 iv[0].iov_base = myaddr; iv[0].iov_len = strlen(myaddr);
367 iv[1].iov_base = ", "; iv[1].iov_len = 2;
368 iv[2].iov_base = heraddr; iv[2].iov_len = strlen(heraddr);
369 iv[3].iov_base = (void *)ident_substr; iv[3].iov_len = ident_substr_len;
370 iv[4].iov_base = (void *)G.identuser; iv[4].iov_len = strlen(G.identuser);
371 iv[5].iov_base = "\r\n"; iv[5].iov_len = 2;
376 static void replyError(int s, char *buf)
379 iv[0].iov_base = "0, 0 : ERROR : "; iv[0].iov_len = 15;
380 iv[1].iov_base = buf; iv[1].iov_len = strlen(buf);
381 iv[2].iov_base = "\r\n"; iv[2].iov_len = 2;
385 static int chmatch(char c, char *chars)
387 for (; *chars; chars++)
393 static int skipchars(char **p, char *chars)
395 while (chmatch(**p, chars))
397 if (**p == '\r' || **p == '\n')
402 static int parseAddrs(char *ptr, char **myaddr, char **heraddr)
404 /* parse <port-on-server> , <port-on-client> */
406 if (!skipchars(&ptr, " \t"))
411 if (!skipchars(&ptr, "1234567890"))
414 if (!chmatch(*ptr, " \t,"))
419 if (!skipchars(&ptr, " \t,") )
424 skipchars(&ptr, "1234567890");
426 if (!chmatch(*ptr, " \n\r"))