1 /* $NetBSD: rpcbind.c,v 1.3 2002/11/08 00:16:40 fvdl Exp $ */
2 /* $FreeBSD$ */
3
4 /*-
5 * SPDX-License-Identifier: BSD-3-Clause
6 *
7 * Copyright (c) 2009, Sun Microsystems, Inc.
8 * All rights reserved.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions are met:
12 * - Redistributions of source code must retain the above copyright notice,
13 * this list of conditions and the following disclaimer.
14 * - Redistributions in binary form must reproduce the above copyright notice,
15 * this list of conditions and the following disclaimer in the documentation
16 * and/or other materials provided with the distribution.
17 * - Neither the name of Sun Microsystems, Inc. nor the names of its
18 * contributors may be used to endorse or promote products derived
19 * from this software without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
22 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
25 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
31 * POSSIBILITY OF SUCH DAMAGE.
32 */
33 /*
34 * Copyright (c) 1984 - 1991 by Sun Microsystems, Inc.
35 */
36
37 /* #ident "@(#)rpcbind.c 1.19 94/04/25 SMI" */
38
39 #if 0
40 #ifndef lint
41 static char sccsid[] = "@(#)rpcbind.c 1.35 89/04/21 Copyr 1984 Sun Micro";
42 #endif
43 #endif
44
45 /*
46 * rpcbind.c
47 * Implements the program, version to address mapping for rpc.
48 *
49 */
50
51 #include <sys/types.h>
52 #include <sys/stat.h>
53 #include <sys/errno.h>
54 #include <sys/time.h>
55 #include <sys/resource.h>
56 #include <sys/wait.h>
57 #include <sys/signal.h>
58 #include <sys/socket.h>
59 #include <sys/un.h>
60 #include <rpc/rpc.h>
61 #include <rpc/rpc_com.h>
62 #ifdef PORTMAP
63 #include <netinet/in.h>
64 #endif
65 #include <arpa/inet.h>
66 #include <fcntl.h>
67 #include <netdb.h>
68 #include <stdio.h>
69 #include <netconfig.h>
70 #include <stdlib.h>
71 #include <unistd.h>
72 #include <syslog.h>
73 #include <err.h>
74 #include <pwd.h>
75 #include <string.h>
76 #include <errno.h>
77 #include "rpcbind.h"
78
79 /* Global variables */
80 int debugging = 0; /* Tell me what's going on */
81 int doabort = 0; /* When debugging, do an abort on errors */
82 int terminate_rfd; /* Pipefd to wake on signal */
83 volatile sig_atomic_t doterminate = 0; /* Terminal signal received */
84 rpcblist_ptr list_rbl; /* A list of version 3/4 rpcbind services */
85 int rpcbindlockfd;
86
87 /* who to suid to if -s is given */
88 #define RUN_AS "daemon"
89
90 #define RPCBINDDLOCK "/var/run/rpcbind.lock"
91
92 static int runasdaemon = 0;
93 int insecure = 0;
94 int oldstyle_local = 0;
95 #ifdef LIBWRAP
96 int libwrap = 0;
97 #endif
98 int verboselog = 0;
99
100 static char **hosts = NULL;
101 static struct sockaddr **bound_sa;
102 static int ipv6_only = 0;
103 static int nhosts = 0;
104 static int on = 1;
105 static int terminate_wfd;
106
107 #ifdef WARMSTART
108 /* Local Variable */
109 static int warmstart = 0; /* Grab an old copy of registrations. */
110 #endif
111
112 #ifdef PORTMAP
113 struct pmaplist *list_pml; /* A list of version 2 rpcbind services */
114 char *udptrans; /* Name of UDP transport */
115 char *tcptrans; /* Name of TCP transport */
116 char *udp_uaddr; /* Universal UDP address */
117 char *tcp_uaddr; /* Universal TCP address */
118 #endif
119 static char servname[] = "rpcbind";
120 static char superuser[] = "superuser";
121
122 int main(int, char *[]);
123
124 static int init_transport(struct netconfig *);
125 static void rbllist_add(rpcprog_t, rpcvers_t, struct netconfig *,
126 struct netbuf *);
127 static void terminate(int);
128 static void parseargs(int, char *[]);
129 static void update_bound_sa(void);
130
131 int
main(int argc,char * argv[])132 main(int argc, char *argv[])
133 {
134 struct netconfig *nconf;
135 void *nc_handle; /* Net config handle */
136 struct rlimit rl;
137 int maxrec = RPC_MAXDATASIZE;
138 int error, fds[2];
139
140 parseargs(argc, argv);
141
142 update_bound_sa();
143
144 /* Check that another rpcbind isn't already running. */
145 if ((rpcbindlockfd = (open(RPCBINDDLOCK,
146 O_RDONLY|O_CREAT, 0444))) == -1)
147 err(1, "%s", RPCBINDDLOCK);
148
149 if(flock(rpcbindlockfd, LOCK_EX|LOCK_NB) == -1 && errno == EWOULDBLOCK)
150 errx(1, "another rpcbind is already running. Aborting");
151
152 getrlimit(RLIMIT_NOFILE, &rl);
153 if (rl.rlim_cur < 128) {
154 if (rl.rlim_max <= 128)
155 rl.rlim_cur = rl.rlim_max;
156 else
157 rl.rlim_cur = 128;
158 setrlimit(RLIMIT_NOFILE, &rl);
159 }
160 openlog("rpcbind", LOG_CONS, LOG_DAEMON);
161 if (geteuid()) { /* This command allowed only to root */
162 fprintf(stderr, "Sorry. You are not superuser\n");
163 exit(1);
164 }
165 nc_handle = setnetconfig(); /* open netconfig file */
166 if (nc_handle == NULL) {
167 syslog(LOG_ERR, "could not read /etc/netconfig");
168 exit(1);
169 }
170 #ifdef PORTMAP
171 udptrans = "";
172 tcptrans = "";
173 #endif
174
175 nconf = getnetconfigent("local");
176 if (nconf == NULL)
177 nconf = getnetconfigent("unix");
178 if (nconf == NULL) {
179 syslog(LOG_ERR, "%s: can't find local transport\n", argv[0]);
180 exit(1);
181 }
182
183 rpc_control(RPC_SVC_CONNMAXREC_SET, &maxrec);
184
185 init_transport(nconf);
186
187 while ((nconf = getnetconfig(nc_handle))) {
188 if (nconf->nc_flag & NC_VISIBLE) {
189 if (ipv6_only == 1 && strcmp(nconf->nc_protofmly,
190 "inet") == 0) {
191 /* DO NOTHING */
192 } else
193 init_transport(nconf);
194 }
195 }
196 endnetconfig(nc_handle);
197
198 /*
199 * Allocate pipe fd to wake main thread from signal handler in non-racy
200 * way.
201 */
202 error = pipe(fds);
203 if (error != 0)
204 err(1, "pipe failed");
205 terminate_rfd = fds[0];
206 terminate_wfd = fds[1];
207
208 /* catch the usual termination signals for graceful exit */
209 (void) signal(SIGCHLD, reap);
210 (void) signal(SIGINT, terminate);
211 (void) signal(SIGTERM, terminate);
212 (void) signal(SIGQUIT, terminate);
213 /* ignore others that could get sent */
214 (void) signal(SIGPIPE, SIG_IGN);
215 (void) signal(SIGHUP, SIG_IGN);
216 (void) signal(SIGUSR1, SIG_IGN);
217 (void) signal(SIGUSR2, SIG_IGN);
218 #ifdef WARMSTART
219 if (warmstart) {
220 read_warmstart();
221 }
222 #endif
223 if (debugging) {
224 printf("rpcbind debugging enabled.");
225 if (doabort) {
226 printf(" Will abort on errors!\n");
227 } else {
228 printf("\n");
229 }
230 } else {
231 if (daemon(0, 0))
232 err(1, "fork failed");
233 }
234
235 if (runasdaemon) {
236 struct passwd *p;
237
238 if((p = getpwnam(RUN_AS)) == NULL) {
239 syslog(LOG_ERR, "cannot get uid of daemon: %m");
240 exit(1);
241 }
242 if (setuid(p->pw_uid) == -1) {
243 syslog(LOG_ERR, "setuid to daemon failed: %m");
244 exit(1);
245 }
246 }
247
248 network_init();
249
250 my_svc_run();
251 syslog(LOG_ERR, "svc_run returned unexpectedly");
252 rpcbind_abort();
253 /* NOTREACHED */
254
255 return 0;
256 }
257
258 /*
259 * Adds the entry into the rpcbind database.
260 * If PORTMAP, then for UDP and TCP, it adds the entries for version 2 also
261 * Returns 0 if succeeds, else fails
262 */
263 static int
init_transport(struct netconfig * nconf)264 init_transport(struct netconfig *nconf)
265 {
266 int fd;
267 struct t_bind taddr;
268 struct addrinfo hints, *res = NULL;
269 struct __rpc_sockinfo si;
270 SVCXPRT *my_xprt;
271 int status; /* bound checking ? */
272 int aicode;
273 int addrlen;
274 int nhostsbak;
275 int bound;
276 struct sockaddr *sa;
277 u_int32_t host_addr[4]; /* IPv4 or IPv6 */
278 struct sockaddr_un sun;
279 mode_t oldmask;
280
281 if ((nconf->nc_semantics != NC_TPI_CLTS) &&
282 (nconf->nc_semantics != NC_TPI_COTS) &&
283 (nconf->nc_semantics != NC_TPI_COTS_ORD))
284 return (1); /* not my type */
285 #ifdef ND_DEBUG
286 if (debugging) {
287 int i;
288 char **s;
289
290 (void)fprintf(stderr, "%s: %ld lookup routines :\n",
291 nconf->nc_netid, nconf->nc_nlookups);
292 for (i = 0, s = nconf->nc_lookups; i < nconf->nc_nlookups;
293 i++, s++)
294 fprintf(stderr, "[%d] - %s\n", i, *s);
295 }
296 #endif
297
298 /*
299 * XXX - using RPC library internal functions.
300 */
301 if ((strcmp(nconf->nc_netid, "local") == 0) ||
302 (strcmp(nconf->nc_netid, "unix") == 0)) {
303 /*
304 * For other transports we call this later, for each socket we
305 * like to bind.
306 */
307 if ((fd = __rpc_nconf2fd(nconf)) < 0) {
308 int non_fatal = 0;
309 if (errno == EAFNOSUPPORT)
310 non_fatal = 1;
311 syslog(non_fatal?LOG_DEBUG:LOG_ERR, "cannot create socket for %s",
312 nconf->nc_netid);
313 return (1);
314 }
315 }
316
317 if (!__rpc_nconf2sockinfo(nconf, &si)) {
318 syslog(LOG_ERR, "cannot get information for %s",
319 nconf->nc_netid);
320 return (1);
321 }
322
323 if ((strcmp(nconf->nc_netid, "local") == 0) ||
324 (strcmp(nconf->nc_netid, "unix") == 0)) {
325 memset(&sun, 0, sizeof sun);
326 sun.sun_family = AF_LOCAL;
327 unlink(_PATH_RPCBINDSOCK);
328 strcpy(sun.sun_path, _PATH_RPCBINDSOCK);
329 sun.sun_len = SUN_LEN(&sun);
330 addrlen = sizeof (struct sockaddr_un);
331 sa = (struct sockaddr *)&sun;
332 } else {
333 /* Get rpcbind's address on this transport */
334
335 memset(&hints, 0, sizeof hints);
336 hints.ai_flags = AI_PASSIVE;
337 hints.ai_family = si.si_af;
338 hints.ai_socktype = si.si_socktype;
339 hints.ai_protocol = si.si_proto;
340 }
341
342 if ((strcmp(nconf->nc_netid, "local") != 0) &&
343 (strcmp(nconf->nc_netid, "unix") != 0)) {
344 /*
345 * If no hosts were specified, just bind to INADDR_ANY.
346 * Otherwise make sure 127.0.0.1 is added to the list.
347 */
348 nhostsbak = nhosts + 1;
349 hosts = realloc(hosts, nhostsbak * sizeof(char *));
350 if (nhostsbak == 1)
351 hosts[0] = "*";
352 else {
353 if (hints.ai_family == AF_INET) {
354 hosts[nhostsbak - 1] = "127.0.0.1";
355 } else if (hints.ai_family == AF_INET6) {
356 hosts[nhostsbak - 1] = "::1";
357 } else
358 return 1;
359 }
360
361 /*
362 * Bind to specific IPs if asked to
363 */
364 bound = 0;
365 while (nhostsbak > 0) {
366 --nhostsbak;
367 /*
368 * XXX - using RPC library internal functions.
369 */
370 if ((fd = __rpc_nconf2fd(nconf)) < 0) {
371 int non_fatal = 0;
372 if (errno == EAFNOSUPPORT &&
373 nconf->nc_semantics != NC_TPI_CLTS)
374 non_fatal = 1;
375 syslog(non_fatal ? LOG_DEBUG : LOG_ERR,
376 "cannot create socket for %s", nconf->nc_netid);
377 return (1);
378 }
379 switch (hints.ai_family) {
380 case AF_INET:
381 if (inet_pton(AF_INET, hosts[nhostsbak],
382 host_addr) == 1) {
383 hints.ai_flags &= AI_NUMERICHOST;
384 } else {
385 /*
386 * Skip if we have an AF_INET6 address.
387 */
388 if (inet_pton(AF_INET6,
389 hosts[nhostsbak], host_addr) == 1) {
390 close(fd);
391 continue;
392 }
393 }
394 break;
395 case AF_INET6:
396 if (inet_pton(AF_INET6, hosts[nhostsbak],
397 host_addr) == 1) {
398 hints.ai_flags &= AI_NUMERICHOST;
399 } else {
400 /*
401 * Skip if we have an AF_INET address.
402 */
403 if (inet_pton(AF_INET, hosts[nhostsbak],
404 host_addr) == 1) {
405 close(fd);
406 continue;
407 }
408 }
409 if (setsockopt(fd, IPPROTO_IPV6,
410 IPV6_V6ONLY, &on, sizeof on) < 0) {
411 syslog(LOG_ERR,
412 "can't set v6-only binding for "
413 "ipv6 socket: %m");
414 continue;
415 }
416 break;
417 default:
418 break;
419 }
420
421 /*
422 * If no hosts were specified, just bind to INADDR_ANY
423 */
424 if (strcmp("*", hosts[nhostsbak]) == 0)
425 hosts[nhostsbak] = NULL;
426 if ((strcmp(nconf->nc_netid, "local") != 0) &&
427 (strcmp(nconf->nc_netid, "unix") != 0)) {
428 if ((aicode = getaddrinfo(hosts[nhostsbak],
429 servname, &hints, &res)) != 0) {
430 syslog(LOG_ERR,
431 "cannot get local address for %s: %s",
432 nconf->nc_netid, gai_strerror(aicode));
433 continue;
434 }
435 addrlen = res->ai_addrlen;
436 sa = (struct sockaddr *)res->ai_addr;
437 }
438 oldmask = umask(S_IXUSR|S_IXGRP|S_IXOTH);
439 if (bind(fd, sa, addrlen) != 0) {
440 syslog(LOG_ERR, "cannot bind %s on %s: %m",
441 (hosts[nhostsbak] == NULL) ? "*" :
442 hosts[nhostsbak], nconf->nc_netid);
443 if (res != NULL)
444 freeaddrinfo(res);
445 continue;
446 } else
447 bound = 1;
448 (void)umask(oldmask);
449
450 /* Copy the address */
451 taddr.addr.len = taddr.addr.maxlen = addrlen;
452 taddr.addr.buf = malloc(addrlen);
453 if (taddr.addr.buf == NULL) {
454 syslog(LOG_ERR,
455 "cannot allocate memory for %s address",
456 nconf->nc_netid);
457 if (res != NULL)
458 freeaddrinfo(res);
459 return 1;
460 }
461 memcpy(taddr.addr.buf, sa, addrlen);
462 #ifdef ND_DEBUG
463 if (debugging) {
464 /*
465 * for debugging print out our universal
466 * address
467 */
468 char *uaddr;
469 struct netbuf nb;
470
471 nb.buf = sa;
472 nb.len = nb.maxlen = sa->sa_len;
473 uaddr = taddr2uaddr(nconf, &nb);
474 (void)fprintf(stderr,
475 "rpcbind : my address is %s\n", uaddr);
476 (void)free(uaddr);
477 }
478 #endif
479
480 if (nconf->nc_semantics != NC_TPI_CLTS)
481 listen(fd, SOMAXCONN);
482
483 my_xprt = (SVCXPRT *)svc_tli_create(fd, nconf, &taddr,
484 RPC_MAXDATASIZE, RPC_MAXDATASIZE);
485 if (my_xprt == (SVCXPRT *)NULL) {
486 syslog(LOG_ERR, "%s: could not create service",
487 nconf->nc_netid);
488 goto error;
489 }
490 }
491 if (!bound)
492 return 1;
493 } else {
494 oldmask = umask(S_IXUSR|S_IXGRP|S_IXOTH);
495 if (bind(fd, sa, addrlen) < 0) {
496 syslog(LOG_ERR, "cannot bind %s: %m", nconf->nc_netid);
497 if (res != NULL)
498 freeaddrinfo(res);
499 return 1;
500 }
501 (void) umask(oldmask);
502
503 /* Copy the address */
504 taddr.addr.len = taddr.addr.maxlen = addrlen;
505 taddr.addr.buf = malloc(addrlen);
506 if (taddr.addr.buf == NULL) {
507 syslog(LOG_ERR, "cannot allocate memory for %s address",
508 nconf->nc_netid);
509 if (res != NULL)
510 freeaddrinfo(res);
511 return 1;
512 }
513 memcpy(taddr.addr.buf, sa, addrlen);
514 #ifdef ND_DEBUG
515 if (debugging) {
516 /* for debugging print out our universal address */
517 char *uaddr;
518 struct netbuf nb;
519
520 nb.buf = sa;
521 nb.len = nb.maxlen = sa->sa_len;
522 uaddr = taddr2uaddr(nconf, &nb);
523 (void) fprintf(stderr, "rpcbind : my address is %s\n",
524 uaddr);
525 (void) free(uaddr);
526 }
527 #endif
528
529 if (nconf->nc_semantics != NC_TPI_CLTS)
530 listen(fd, SOMAXCONN);
531
532 my_xprt = (SVCXPRT *)svc_tli_create(fd, nconf, &taddr,
533 RPC_MAXDATASIZE, RPC_MAXDATASIZE);
534 if (my_xprt == (SVCXPRT *)NULL) {
535 syslog(LOG_ERR, "%s: could not create service",
536 nconf->nc_netid);
537 goto error;
538 }
539 }
540
541 #ifdef PORTMAP
542 /*
543 * Register both the versions for tcp/ip, udp/ip and local.
544 */
545 if ((strcmp(nconf->nc_protofmly, NC_INET) == 0 &&
546 (strcmp(nconf->nc_proto, NC_TCP) == 0 ||
547 strcmp(nconf->nc_proto, NC_UDP) == 0)) ||
548 (strcmp(nconf->nc_netid, "unix") == 0) ||
549 (strcmp(nconf->nc_netid, "local") == 0)) {
550 struct pmaplist *pml;
551
552 if (!svc_register(my_xprt, PMAPPROG, PMAPVERS,
553 pmap_service, 0)) {
554 syslog(LOG_ERR, "could not register on %s",
555 nconf->nc_netid);
556 goto error;
557 }
558 pml = malloc(sizeof (struct pmaplist));
559 if (pml == NULL) {
560 syslog(LOG_ERR, "no memory!");
561 exit(1);
562 }
563 pml->pml_map.pm_prog = PMAPPROG;
564 pml->pml_map.pm_vers = PMAPVERS;
565 pml->pml_map.pm_port = PMAPPORT;
566 if (strcmp(nconf->nc_proto, NC_TCP) == 0) {
567 if (tcptrans[0]) {
568 free(pml);
569 pml = NULL;
570 syslog(LOG_ERR,
571 "cannot have more than one TCP transport");
572 goto error;
573 }
574 tcptrans = strdup(nconf->nc_netid);
575 pml->pml_map.pm_prot = IPPROTO_TCP;
576
577 /* Let's snarf the universal address */
578 /* "h1.h2.h3.h4.p1.p2" */
579 tcp_uaddr = taddr2uaddr(nconf, &taddr.addr);
580 } else if (strcmp(nconf->nc_proto, NC_UDP) == 0) {
581 if (udptrans[0]) {
582 syslog(LOG_ERR,
583 "cannot have more than one UDP transport");
584 goto error;
585 }
586 udptrans = strdup(nconf->nc_netid);
587 pml->pml_map.pm_prot = IPPROTO_UDP;
588
589 /* Let's snarf the universal address */
590 /* "h1.h2.h3.h4.p1.p2" */
591 udp_uaddr = taddr2uaddr(nconf, &taddr.addr);
592 } else if (strcmp(nconf->nc_netid, "local") == 0)
593 pml->pml_map.pm_prot = IPPROTO_ST;
594 else if (strcmp(nconf->nc_netid, "unix") == 0)
595 pml->pml_map.pm_prot = IPPROTO_ST;
596 pml->pml_next = list_pml;
597 list_pml = pml;
598
599 /* Add version 3 information */
600 pml = malloc(sizeof (struct pmaplist));
601 if (pml == NULL) {
602 syslog(LOG_ERR, "no memory!");
603 exit(1);
604 }
605 pml->pml_map = list_pml->pml_map;
606 pml->pml_map.pm_vers = RPCBVERS;
607 pml->pml_next = list_pml;
608 list_pml = pml;
609
610 /* Add version 4 information */
611 pml = malloc (sizeof (struct pmaplist));
612 if (pml == NULL) {
613 syslog(LOG_ERR, "no memory!");
614 exit(1);
615 }
616 pml->pml_map = list_pml->pml_map;
617 pml->pml_map.pm_vers = RPCBVERS4;
618 pml->pml_next = list_pml;
619 list_pml = pml;
620
621 /* Also add version 2 stuff to rpcbind list */
622 rbllist_add(PMAPPROG, PMAPVERS, nconf, &taddr.addr);
623 }
624 #endif
625
626 /* version 3 registration */
627 if (!svc_reg(my_xprt, RPCBPROG, RPCBVERS, rpcb_service_3, NULL)) {
628 syslog(LOG_ERR, "could not register %s version 3",
629 nconf->nc_netid);
630 goto error;
631 }
632 rbllist_add(RPCBPROG, RPCBVERS, nconf, &taddr.addr);
633
634 /* version 4 registration */
635 if (!svc_reg(my_xprt, RPCBPROG, RPCBVERS4, rpcb_service_4, NULL)) {
636 syslog(LOG_ERR, "could not register %s version 4",
637 nconf->nc_netid);
638 goto error;
639 }
640 rbllist_add(RPCBPROG, RPCBVERS4, nconf, &taddr.addr);
641
642 /* decide if bound checking works for this transport */
643 status = add_bndlist(nconf, &taddr.addr);
644 #ifdef BIND_DEBUG
645 if (debugging) {
646 if (status < 0) {
647 fprintf(stderr, "Error in finding bind status for %s\n",
648 nconf->nc_netid);
649 } else if (status == 0) {
650 fprintf(stderr, "check binding for %s\n",
651 nconf->nc_netid);
652 } else if (status > 0) {
653 fprintf(stderr, "No check binding for %s\n",
654 nconf->nc_netid);
655 }
656 }
657 #endif
658 /*
659 * rmtcall only supported on CLTS transports for now.
660 */
661 if (nconf->nc_semantics == NC_TPI_CLTS) {
662 status = create_rmtcall_fd(nconf);
663
664 #ifdef BIND_DEBUG
665 if (debugging) {
666 if (status < 0) {
667 fprintf(stderr,
668 "Could not create rmtcall fd for %s\n",
669 nconf->nc_netid);
670 } else {
671 fprintf(stderr, "rmtcall fd for %s is %d\n",
672 nconf->nc_netid, status);
673 }
674 }
675 #endif
676 }
677 return (0);
678 error:
679 close(fd);
680 return (1);
681 }
682
683 /*
684 * Create the list of addresses that we're bound to. Normally, this
685 * list is empty because we're listening on the wildcard address
686 * (nhost == 0). If -h is specified on the command line, then
687 * bound_sa will have a list of the addresses that the program binds
688 * to specifically. This function takes that list and converts them to
689 * struct sockaddr * and stores them in bound_sa.
690 */
691 static void
update_bound_sa(void)692 update_bound_sa(void)
693 {
694 struct addrinfo hints, *res = NULL;
695 int i;
696
697 if (nhosts == 0)
698 return;
699 bound_sa = malloc(sizeof(*bound_sa) * nhosts);
700 memset(&hints, 0, sizeof(hints));
701 hints.ai_family = PF_UNSPEC;
702 for (i = 0; i < nhosts; i++) {
703 if (getaddrinfo(hosts[i], NULL, &hints, &res) != 0)
704 continue;
705 bound_sa[i] = malloc(res->ai_addrlen);
706 memcpy(bound_sa[i], res->ai_addr, res->ai_addrlen);
707 }
708 }
709
710 /*
711 * Match the sa against the list of addresses we've bound to. If
712 * we've not specifically bound to anything, we match everything.
713 * Otherwise, if the IPv4 or IPv6 address matches one of the addresses
714 * in bound_sa, we return true. If not, we return false.
715 */
716 int
listen_addr(const struct sockaddr * sa)717 listen_addr(const struct sockaddr *sa)
718 {
719 int i;
720
721 /*
722 * If nhosts == 0, then there were no -h options on the
723 * command line, so all addresses are addresses we're
724 * listening to.
725 */
726 if (nhosts == 0)
727 return 1;
728 for (i = 0; i < nhosts; i++) {
729 if (bound_sa[i] == NULL ||
730 sa->sa_family != bound_sa[i]->sa_family)
731 continue;
732 switch (sa->sa_family) {
733 case AF_INET:
734 if (memcmp(&SA2SINADDR(sa), &SA2SINADDR(bound_sa[i]),
735 sizeof(struct in_addr)) == 0)
736 return (1);
737 break;
738 #ifdef INET6
739 case AF_INET6:
740 if (memcmp(&SA2SIN6ADDR(sa), &SA2SIN6ADDR(bound_sa[i]),
741 sizeof(struct in6_addr)) == 0)
742 return (1);
743 break;
744 #endif
745 default:
746 break;
747 }
748 }
749 return (0);
750 }
751
752 static void
rbllist_add(rpcprog_t prog,rpcvers_t vers,struct netconfig * nconf,struct netbuf * addr)753 rbllist_add(rpcprog_t prog, rpcvers_t vers, struct netconfig *nconf,
754 struct netbuf *addr)
755 {
756 rpcblist_ptr rbl;
757
758 rbl = malloc(sizeof (rpcblist));
759 if (rbl == NULL) {
760 syslog(LOG_ERR, "no memory!");
761 exit(1);
762 }
763
764 rbl->rpcb_map.r_prog = prog;
765 rbl->rpcb_map.r_vers = vers;
766 rbl->rpcb_map.r_netid = strdup(nconf->nc_netid);
767 rbl->rpcb_map.r_addr = taddr2uaddr(nconf, addr);
768 rbl->rpcb_map.r_owner = strdup(superuser);
769 rbl->rpcb_next = list_rbl; /* Attach to global list */
770 list_rbl = rbl;
771 }
772
773 /*
774 * Catch the signal and die
775 */
776 static void
terminate(int signum)777 terminate(int signum)
778 {
779 char c = '\0';
780 ssize_t wr;
781
782 doterminate = signum;
783 wr = write(terminate_wfd, &c, 1);
784 if (wr < 1)
785 _exit(2);
786 }
787
788 void
rpcbind_abort(void)789 rpcbind_abort(void)
790 {
791 #ifdef WARMSTART
792 write_warmstart(); /* Dump yourself */
793 #endif
794 abort();
795 }
796
797 /* get command line options */
798 static void
parseargs(int argc,char * argv[])799 parseargs(int argc, char *argv[])
800 {
801 int c;
802
803 #ifdef WARMSTART
804 #define WSOP "w"
805 #else
806 #define WSOP ""
807 #endif
808 #ifdef LIBWRAP
809 #define WRAPOP "W"
810 #else
811 #define WRAPOP ""
812 #endif
813 while ((c = getopt(argc, argv, "6adh:iLls" WRAPOP WSOP)) != -1) {
814 switch (c) {
815 case '6':
816 ipv6_only = 1;
817 break;
818 case 'a':
819 doabort = 1; /* when debugging, do an abort on */
820 break; /* errors; for rpcbind developers */
821 /* only! */
822 case 'd':
823 debugging = 1;
824 break;
825 case 'h':
826 ++nhosts;
827 hosts = realloc(hosts, nhosts * sizeof(char *));
828 if (hosts == NULL)
829 errx(1, "Out of memory");
830 hosts[nhosts - 1] = strdup(optarg);
831 if (hosts[nhosts - 1] == NULL)
832 errx(1, "Out of memory");
833 break;
834 case 'i':
835 insecure = 1;
836 break;
837 case 'L':
838 oldstyle_local = 1;
839 break;
840 case 'l':
841 verboselog = 1;
842 break;
843 case 's':
844 runasdaemon = 1;
845 break;
846 #ifdef LIBWRAP
847 case 'W':
848 libwrap = 1;
849 break;
850 #endif
851 #ifdef WARMSTART
852 case 'w':
853 warmstart = 1;
854 break;
855 #endif
856 default: /* error */
857 fprintf(stderr,
858 "usage: rpcbind [-6adiLls%s%s] [-h bindip]\n",
859 WRAPOP, WSOP);
860 exit (1);
861 }
862 }
863 if (doabort && !debugging) {
864 fprintf(stderr,
865 "-a (abort) specified without -d (debugging) -- ignored.\n");
866 doabort = 0;
867 }
868 #undef WSOP
869 }
870
871 void
reap(int dummy __unused)872 reap(int dummy __unused)
873 {
874 int save_errno = errno;
875
876 while (wait3(NULL, WNOHANG, NULL) > 0)
877 ;
878 errno = save_errno;
879 }
880
881 void
toggle_verboselog(int dummy __unused)882 toggle_verboselog(int dummy __unused)
883 {
884 verboselog = !verboselog;
885 }
886