1 /* $NetBSD: nfsd.c,v 1.63 2014/12/05 19:24:41 christos Exp $ */ 2 3 /* 4 * Copyright (c) 1989, 1993, 1994 5 * The Regents of the University of California. All rights reserved. 6 * 7 * This code is derived from software contributed to Berkeley by 8 * Rick Macklem at The University of Guelph. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 3. Neither the name of the University nor the names of its contributors 19 * may be used to endorse or promote products derived from this software 20 * without specific prior written permission. 21 * 22 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 23 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 * SUCH DAMAGE. 33 */ 34 35 #include <sys/cdefs.h> 36 #ifndef lint 37 __COPYRIGHT("@(#) Copyright (c) 1989, 1993, 1994\ 38 The Regents of the University of California. All rights reserved."); 39 #endif /* not lint */ 40 41 #ifndef lint 42 #if 0 43 static char sccsid[] = "@(#)nfsd.c 8.9 (Berkeley) 3/29/95"; 44 #else 45 __RCSID("$NetBSD: nfsd.c,v 1.63 2014/12/05 19:24:41 christos Exp $"); 46 #endif 47 #endif /* not lint */ 48 49 #include <sys/param.h> 50 #include <sys/ioctl.h> 51 #include <sys/stat.h> 52 #include <sys/wait.h> 53 #include <sys/uio.h> 54 #include <sys/ucred.h> 55 #include <sys/mount.h> 56 #include <sys/socket.h> 57 #include <sys/socketvar.h> 58 #include <poll.h> 59 60 #include <rpc/rpc.h> 61 #include <rpc/pmap_clnt.h> 62 #include <rpc/pmap_prot.h> 63 64 #include <nfs/rpcv2.h> 65 #include <nfs/nfsproto.h> 66 #include <nfs/nfs.h> 67 68 #include <err.h> 69 #include <errno.h> 70 #include <fcntl.h> 71 #include <grp.h> 72 #include <paths.h> 73 #include <pwd.h> 74 #include <pthread.h> 75 #include <signal.h> 76 #include <stdio.h> 77 #include <stdlib.h> 78 #include <string.h> 79 #include <syslog.h> 80 #include <unistd.h> 81 #include <netdb.h> 82 83 /* Global defs */ 84 #ifdef DEBUG 85 #define syslog(e, s, args...) \ 86 do { \ 87 fprintf(stderr,(s), ## args); \ 88 fprintf(stderr, "\n"); \ 89 } while (/*CONSTCOND*/0) 90 static int debug = 1; 91 #else 92 static int debug = 0; 93 #endif 94 95 static void nonfs(int); 96 __dead static void usage(void); 97 98 static void * 99 worker(void *dummy) 100 { 101 struct nfsd_srvargs nsd; 102 int nfssvc_flag; 103 104 pthread_setname_np(pthread_self(), "slave", NULL); 105 nfssvc_flag = NFSSVC_NFSD; 106 memset(&nsd, 0, sizeof(nsd)); 107 while (nfssvc(nfssvc_flag, &nsd) < 0) { 108 if (errno != ENEEDAUTH) { 109 syslog(LOG_ERR, "nfssvc: %m"); 110 exit(1); 111 } 112 nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHINFAIL; 113 } 114 115 return NULL; 116 } 117 118 struct conf { 119 struct addrinfo *ai; 120 struct netconfig *nc; 121 struct netbuf nb; 122 struct pollfd pfd; 123 }; 124 125 #define NFS_UDP4 0 126 #define NFS_TCP4 1 127 #define NFS_UDP6 2 128 #define NFS_TCP6 3 129 130 static int cfg_family[] = { PF_INET, PF_INET, PF_INET6, PF_INET6 }; 131 static const char *cfg_netconf[] = { "udp", "tcp", "udp6", "tcp6" }; 132 static int cfg_socktype[] = { 133 SOCK_DGRAM, SOCK_STREAM, SOCK_DGRAM, SOCK_STREAM }; 134 static int cfg_protocol[] = { 135 IPPROTO_UDP, IPPROTO_TCP, IPPROTO_UDP, IPPROTO_TCP }; 136 137 static int 138 tryconf(struct conf *cfg, int t, int reregister) 139 { 140 struct addrinfo hints; 141 int ecode; 142 143 memset(&hints, 0, sizeof hints); 144 hints.ai_flags = AI_PASSIVE; 145 hints.ai_family = cfg_family[t]; 146 hints.ai_socktype = cfg_socktype[t]; 147 hints.ai_protocol = cfg_protocol[t]; 148 149 ecode = getaddrinfo(NULL, "nfs", &hints, &cfg->ai); 150 if (ecode != 0) { 151 syslog(LOG_ERR, "getaddrinfo %s: %s", cfg_netconf[t], 152 gai_strerror(ecode)); 153 return -1; 154 } 155 156 cfg->nc = getnetconfigent(cfg_netconf[t]); 157 158 if (cfg->nc == NULL) { 159 syslog(LOG_ERR, "getnetconfigent %s failed: %m", 160 cfg_netconf[t]); 161 goto out; 162 } 163 164 cfg->nb.buf = cfg->ai->ai_addr; 165 cfg->nb.len = cfg->nb.maxlen = cfg->ai->ai_addrlen; 166 if (reregister) 167 if (!rpcb_set(RPCPROG_NFS, 2, cfg->nc, &cfg->nb)) { 168 syslog(LOG_ERR, "rpcb_set %s failed", cfg_netconf[t]); 169 goto out1; 170 } 171 return 0; 172 out1: 173 freenetconfigent(cfg->nc); 174 cfg->nc = NULL; 175 out: 176 freeaddrinfo(cfg->ai); 177 cfg->ai = NULL; 178 return -1; 179 } 180 181 static int 182 setupsock(struct conf *cfg, struct pollfd *set, int p) 183 { 184 int sock; 185 struct nfsd_args nfsdargs; 186 struct addrinfo *ai = cfg->ai; 187 int on = 1; 188 189 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol); 190 191 if (sock == -1) { 192 syslog(LOG_ERR, "can't create %s socket: %m", cfg_netconf[p]); 193 return -1; 194 } 195 if (cfg_family[p] == PF_INET6) { 196 if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &on, 197 sizeof(on)) == -1) { 198 syslog(LOG_ERR, "can't set v6-only binding for %s " 199 "socket: %m", cfg_netconf[p]); 200 goto out; 201 } 202 } 203 204 if (cfg_protocol[p] == IPPROTO_TCP) { 205 if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &on, 206 sizeof(on)) == -1) { 207 syslog(LOG_ERR, "setsockopt SO_REUSEADDR for %s: %m", 208 cfg_netconf[p]); 209 goto out; 210 } 211 } 212 213 if (bind(sock, ai->ai_addr, ai->ai_addrlen) == -1) { 214 syslog(LOG_ERR, "can't bind %s addr: %m", cfg_netconf[p]); 215 goto out; 216 } 217 218 if (cfg_protocol[p] == IPPROTO_TCP) { 219 if (listen(sock, 5) == -1) { 220 syslog(LOG_ERR, "listen failed"); 221 goto out; 222 } 223 } 224 225 if (!rpcb_set(RPCPROG_NFS, 2, cfg->nc, &cfg->nb) || 226 !rpcb_set(RPCPROG_NFS, 3, cfg->nc, &cfg->nb)) { 227 syslog(LOG_ERR, "can't register with %s portmap", 228 cfg_netconf[p]); 229 goto out; 230 } 231 232 233 if (cfg_protocol[p] == IPPROTO_TCP) 234 set->fd = sock; 235 else { 236 nfsdargs.sock = sock; 237 nfsdargs.name = NULL; 238 nfsdargs.namelen = 0; 239 if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) { 240 syslog(LOG_ERR, "can't add %s socket", cfg_netconf[p]); 241 goto out; 242 } 243 (void)close(sock); 244 } 245 return 0; 246 out: 247 (void)close(sock); 248 return -1; 249 } 250 251 /* 252 * The functions daemon2_fork() and daemon2_detach() below provide 253 * functionality similar to daemon(3) but split into two phases. 254 * daemon2_fork() is called early, before creating resources that 255 * cannot be inherited across a fork, such as threads or kqueues. 256 * When the daemon is ready to provide service, daemon2_detach() 257 * is called to complete the daemonization and signal the parent 258 * process to exit. 259 * 260 * These functions could potentially be moved to a library and 261 * shared by other daemons. 262 * 263 * The return value from daemon2_fork() is a file descriptor to 264 * be passed as the first argument to daemon2_detach(). 265 */ 266 267 static int 268 daemon2_fork(void) 269 { 270 int i; 271 int fd; 272 int r; 273 pid_t pid; 274 int detach_msg_pipe[2]; 275 276 /* 277 * Set up a pipe for singalling the parent, making sure the 278 * write end does not get allocated one of the file 279 * descriptors that may be closed in daemon2_detach(). The 280 * read end does not need such protection. 281 */ 282 for (i = 0; i < 3; i++) { 283 r = pipe2(detach_msg_pipe, O_CLOEXEC|O_NOSIGPIPE); 284 if (r < 0) 285 return -1; 286 if (detach_msg_pipe[1] <= STDERR_FILENO && 287 (fd = open(_PATH_DEVNULL, O_RDWR, 0)) != -1) { 288 (void)dup2(fd, detach_msg_pipe[0]); 289 (void)dup2(fd, detach_msg_pipe[1]); 290 if (fd > STDERR_FILENO) 291 (void)close(fd); 292 continue; 293 } 294 break; 295 } 296 297 pid = fork(); 298 switch (pid) { 299 case -1: 300 return -1; 301 case 0: 302 /* child */ 303 (void)close(detach_msg_pipe[0]); 304 return detach_msg_pipe[1]; 305 default: 306 break; 307 } 308 309 /* Parent */ 310 (void)close(detach_msg_pipe[1]); 311 312 for (;;) { 313 ssize_t nread; 314 char dummy; 315 nread = read(detach_msg_pipe[0], &dummy, 1); 316 if (nread < 0) { 317 if (errno == EINTR) 318 continue; 319 _exit(1); 320 } else if (nread == 0) { 321 _exit(1); 322 } else { /* nread > 0 */ 323 _exit(0); 324 } 325 } 326 } 327 328 static int 329 daemon2_detach(int parentfd, int nochdir, int noclose) 330 { 331 int fd; 332 333 if (setsid() == -1) 334 return -1; 335 336 if (!nochdir) 337 (void)chdir("/"); 338 339 if (!noclose && (fd = open(_PATH_DEVNULL, O_RDWR, 0)) != -1) { 340 (void)dup2(fd, STDIN_FILENO); 341 (void)dup2(fd, STDOUT_FILENO); 342 (void)dup2(fd, STDERR_FILENO); 343 if (fd > STDERR_FILENO) 344 (void)close(fd); 345 } 346 347 while (1) { 348 ssize_t r = write(parentfd, "", 1); 349 if (r < 0) { 350 if (errno == EINTR) 351 continue; 352 else if (errno == EPIPE) 353 break; 354 else 355 return -1; 356 } else if (r == 0) { 357 /* Should not happen */ 358 return -1; 359 } else { 360 break; 361 } 362 } 363 364 (void)close(parentfd); 365 366 return 0; 367 } 368 369 /* 370 * Nfs server daemon mostly just a user context for nfssvc() 371 * 372 * 1 - do file descriptor and signal cleanup 373 * 2 - create the nfsd thread(s) 374 * 3 - create server socket(s) 375 * 4 - register socket with portmap 376 * 377 * For connectionless protocols, just pass the socket into the kernel via 378 * nfssvc(). 379 * For connection based sockets, loop doing accepts. When you get a new 380 * socket from accept, pass the msgsock into the kernel via nfssvc(). 381 * The arguments are: 382 * -r - reregister with portmapper 383 * -t - support only tcp nfs clients 384 * -u - support only udp nfs clients 385 * -n num how many threads to create. 386 * -4 - use only ipv4 387 * -6 - use only ipv6 388 */ 389 int 390 main(int argc, char *argv[]) 391 { 392 struct conf cfg[4]; 393 struct pollfd set[__arraycount(cfg)]; 394 int ch, connect_type_cnt; 395 size_t i, nfsdcnt; 396 int reregister; 397 int tcpflag, udpflag; 398 int ip6flag, ip4flag; 399 int s, compat; 400 int parent_fd = -1; 401 402 #define DEFNFSDCNT 4 403 nfsdcnt = DEFNFSDCNT; 404 compat = reregister = 0; 405 tcpflag = udpflag = 1; 406 ip6flag = ip4flag = 1; 407 #define GETOPT "46n:rtu" 408 #define USAGE "[-46rtu] [-n num_servers]" 409 while ((ch = getopt(argc, argv, GETOPT)) != -1) { 410 switch (ch) { 411 case '6': 412 ip6flag = 1; 413 ip4flag = 0; 414 s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_UDP); 415 if (s < 0 && (errno == EPROTONOSUPPORT || 416 errno == EPFNOSUPPORT || errno == EAFNOSUPPORT)) 417 ip6flag = 0; 418 else 419 close(s); 420 break; 421 case '4': 422 ip6flag = 0; 423 ip4flag = 1; 424 s = socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP); 425 if (s < 0 && (errno == EPROTONOSUPPORT || 426 errno == EPFNOSUPPORT || errno == EAFNOSUPPORT)) 427 ip4flag = 0; 428 else 429 close(s); 430 break; 431 case 'n': 432 nfsdcnt = atoi(optarg); 433 if (nfsdcnt < 1) { 434 warnx("nfsd count %zu; reset to %d", nfsdcnt, 435 DEFNFSDCNT); 436 nfsdcnt = DEFNFSDCNT; 437 } 438 break; 439 case 'r': 440 reregister = 1; 441 break; 442 case 't': 443 compat |= 2; 444 tcpflag = 1; 445 udpflag = 0; 446 break; 447 case 'u': 448 compat |= 1; 449 tcpflag = 0; 450 udpflag = 1; 451 break; 452 default: 453 case '?': 454 usage(); 455 } 456 } 457 argv += optind; 458 argc -= optind; 459 460 if (compat == 3) { 461 warnx("Old -tu options detected; enabling both udp and tcp."); 462 warnx("This is the default behavior now and you can remove"); 463 warnx("all options."); 464 tcpflag = udpflag = 1; 465 if (ip6flag == 1 && ip4flag == 0) 466 ip4flag = 1; 467 } 468 469 if (debug == 0) { 470 parent_fd = daemon2_fork(); 471 } 472 473 openlog("nfsd", LOG_PID, LOG_DAEMON); 474 475 memset(cfg, 0, sizeof(cfg)); 476 for (i = 0; i < __arraycount(cfg); i++) { 477 if (ip4flag == 0 && cfg_family[i] == PF_INET) 478 continue; 479 if (ip6flag == 0 && cfg_family[i] == PF_INET6) 480 continue; 481 if (tcpflag == 0 && cfg_protocol[i] == IPPROTO_TCP) 482 continue; 483 if (udpflag == 0 && cfg_protocol[i] == IPPROTO_UDP) 484 continue; 485 tryconf(&cfg[i], i, reregister); 486 } 487 488 for (i = 0; i < nfsdcnt; i++) { 489 pthread_t t; 490 int error; 491 492 error = pthread_create(&t, NULL, worker, NULL); 493 if (error) { 494 errno = error; 495 syslog(LOG_ERR, "pthread_create: %m"); 496 exit(1); 497 } 498 } 499 500 connect_type_cnt = 0; 501 for (i = 0; i < __arraycount(cfg); i++) { 502 set[i].fd = -1; 503 set[i].events = POLLIN; 504 set[i].revents = 0; 505 506 if (cfg[i].nc == NULL) 507 continue; 508 509 setupsock(&cfg[i], &set[i], i); 510 if (set[i].fd != -1) 511 connect_type_cnt++; 512 513 } 514 515 if (connect_type_cnt == 0) 516 exit(0); 517 518 pthread_setname_np(pthread_self(), "master", NULL); 519 520 if (debug == 0) { 521 daemon2_detach(parent_fd, 0, 0); 522 (void)signal(SIGHUP, SIG_IGN); 523 (void)signal(SIGINT, SIG_IGN); 524 (void)signal(SIGQUIT, SIG_IGN); 525 (void)signal(SIGSYS, nonfs); 526 } 527 528 /* 529 * Loop forever accepting connections and passing the sockets 530 * into the kernel for the mounts. 531 */ 532 for (;;) { 533 if (poll(set, __arraycount(set), INFTIM) == -1) { 534 syslog(LOG_ERR, "poll failed: %m"); 535 exit(1); 536 } 537 538 for (i = 0; i < __arraycount(set); i++) { 539 struct nfsd_args nfsdargs; 540 struct sockaddr_storage ss; 541 socklen_t len; 542 int msgsock; 543 int on = 1; 544 545 if ((set[i].revents & POLLIN) == 0) 546 continue; 547 len = sizeof(ss); 548 if ((msgsock = accept(set[i].fd, 549 (struct sockaddr *)&ss, &len)) == -1) { 550 int serrno = errno; 551 syslog(LOG_ERR, "accept failed: %m"); 552 if (serrno == EINTR || serrno == ECONNABORTED) 553 continue; 554 exit(1); 555 } 556 if (setsockopt(msgsock, SOL_SOCKET, SO_KEEPALIVE, &on, 557 sizeof(on)) == -1) 558 syslog(LOG_ERR, "setsockopt SO_KEEPALIVE: %m"); 559 nfsdargs.sock = msgsock; 560 nfsdargs.name = (void *)&ss; 561 nfsdargs.namelen = len; 562 nfssvc(NFSSVC_ADDSOCK, &nfsdargs); 563 (void)close(msgsock); 564 } 565 } 566 } 567 568 static void 569 usage(void) 570 { 571 (void)fprintf(stderr, "Usage: %s %s\n", getprogname(), USAGE); 572 exit(1); 573 } 574 575 static void 576 nonfs(int signo) 577 { 578 syslog(LOG_ERR, "missing system call: NFS not available."); 579 } 580