xref: /netbsd-src/usr.sbin/rpcbind/rpcbind.c (revision 946379e7b37692fc43f68eb0d1c10daa0a7f3b6c) 
1 /*	$NetBSD: rpcbind.c,v 1.23 2015/11/08 16:36:28 christos Exp $	*/
2 
3 /*
4  * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
5  * unrestricted use provided that this legend is included on all tape
6  * media and as a part of the software program in whole or part.  Users
7  * may copy or modify Sun RPC without charge, but are not authorized
8  * to license or distribute it to anyone else except as part of a product or
9  * program developed by the user.
10  *
11  * SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
12  * WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
13  * PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
14  *
15  * Sun RPC is provided with no support and without any obligation on the
16  * part of Sun Microsystems, Inc. to assist in its use, correction,
17  * modification or enhancement.
18  *
19  * SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
20  * INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
21  * OR ANY PART THEREOF.
22  *
23  * In no event will Sun Microsystems, Inc. be liable for any lost revenue
24  * or profits or other special, indirect and consequential damages, even if
25  * Sun has been advised of the possibility of such damages.
26  *
27  * Sun Microsystems, Inc.
28  * 2550 Garcia Avenue
29  * Mountain View, California  94043
30  */
31 /*
32  * Copyright (c) 1984 - 1991 by Sun Microsystems, Inc.
33  */
34 
35 /* #ident	"@(#)rpcbind.c	1.19	94/04/25 SMI" */
36 
37 #if 0
38 #ifndef lint
39 static	char sccsid[] = "@(#)rpcbind.c 1.35 89/04/21 Copyr 1984 Sun Micro";
40 #endif
41 #endif
42 
43 /*
44  * rpcbind.c
45  * Implements the program, version to address mapping for rpc.
46  *
47  */
48 
49 #include <sys/types.h>
50 #include <sys/stat.h>
51 #include <sys/errno.h>
52 #include <sys/time.h>
53 #include <sys/resource.h>
54 #include <sys/wait.h>
55 #include <sys/signal.h>
56 #include <sys/socket.h>
57 #include <sys/un.h>
58 #include <rpc/rpc.h>
59 #ifdef PORTMAP
60 #include <netinet/in.h>
61 #endif
62 #include <netdb.h>
63 #include <stdio.h>
64 #include <netconfig.h>
65 #include <stdlib.h>
66 #include <unistd.h>
67 #include <syslog.h>
68 #include <err.h>
69 #include <util.h>
70 #include <pwd.h>
71 #include <string.h>
72 #include <errno.h>
73 #include "rpcbind.h"
74 
75 #ifdef RPCBIND_RUMP
76 #include <semaphore.h>
77 
78 #include <rump/rump.h>
79 #include <rump/rump_syscalls.h>
80 
81 #include "svc_fdset.h"
82 
83 extern sem_t gensem;
84 #define DEBUGGING 1
85 #else
86 #define DEBUGGING 0
87 #endif
88 
89 /* Global variables */
90 int debugging = DEBUGGING;	/* Tell me what's going on */
91 int doabort = 0;	/* When debugging, do an abort on errors */
92 rpcblist_ptr list_rbl;	/* A list of version 3/4 rpcbind services */
93 
94 /* who to suid to if -s is given */
95 #define RUN_AS  "daemon"
96 
97 int runasdaemon = 0;
98 int insecure = 0;
99 int oldstyle_local = 0;
100 int verboselog = 0;
101 
102 #ifdef WARMSTART
103 /* Local Variable */
104 static int warmstart = 0;	/* Grab a old copy of registrations */
105 #endif
106 
107 #ifdef PORTMAP
108 struct pmaplist *list_pml;	/* A list of version 2 rpcbind services */
109 const char *udptrans;		/* Name of UDP transport */
110 const char *tcptrans;		/* Name of TCP transport */
111 const char *udp_uaddr;		/* Universal UDP address */
112 const char *tcp_uaddr;		/* Universal TCP address */
113 #endif
114 static const char servname[] = "sunrpc";
115 
116 const char rpcbind_superuser[] = "superuser";
117 const char rpcbind_unknown[] = "unknown";
118 
119 static int init_transport(struct netconfig *);
120 static void rbllist_add(rpcprog_t, rpcvers_t, struct netconfig *,
121     struct netbuf *);
122 __dead static void terminate(int);
123 #ifndef RPCBIND_RUMP
124 static void parseargs(int, char *[]);
125 
126 int
127 main(int argc, char *argv[])
128 #else
129 int rpcbind_main(void *);
130 int
131 rpcbind_main(void *arg)
132 #endif
133 {
134 	struct netconfig *nconf;
135 	void *nc_handle;	/* Net config handle */
136 	struct rlimit rl;
137 	int maxrec = RPC_MAXDATASIZE;
138 
139 #ifdef RPCBIND_RUMP
140 	svc_fdset_init(SVC_FDSET_MT);
141 #else
142 	parseargs(argc, argv);
143 #endif
144 
145 	if (getrlimit(RLIMIT_NOFILE, &rl) == -1)
146 		err(EXIT_FAILURE, "getrlimit(RLIMIT_NOFILE)");
147 
148 	if (rl.rlim_cur < 128) {
149 		if (rl.rlim_max <= 128)
150 			rl.rlim_cur = rl.rlim_max;
151 		else
152 			rl.rlim_cur = 128;
153 		if (setrlimit(RLIMIT_NOFILE, &rl) < 0)
154 			err(EXIT_FAILURE, "setrlimit(RLIMIT_NOFILE)");
155 	}
156 	nc_handle = setnetconfig(); 	/* open netconfig file */
157 	if (nc_handle == NULL)
158 		errx(EXIT_FAILURE, "could not read /etc/netconfig");
159 #ifdef PORTMAP
160 	udptrans = "";
161 	tcptrans = "";
162 #endif
163 
164 	nconf = getnetconfigent("local");
165 	if (nconf == NULL)
166 		errx(EXIT_FAILURE, "can't find local transport");
167 
168 	rpc_control(RPC_SVC_CONNMAXREC_SET, &maxrec);
169 
170 	init_transport(nconf);
171 
172 	while ((nconf = getnetconfig(nc_handle))) {
173 		if (nconf->nc_flag & NC_VISIBLE)
174 			init_transport(nconf);
175 	}
176 	endnetconfig(nc_handle);
177 
178 	/* catch the usual termination signals for graceful exit */
179 	(void) signal(SIGCHLD, reap);
180 	(void) signal(SIGINT, terminate);
181 	(void) signal(SIGTERM, terminate);
182 	(void) signal(SIGQUIT, terminate);
183 	/* ignore others that could get sent */
184 	(void) signal(SIGPIPE, SIG_IGN);
185 #ifndef RPCBIND_RUMP
186 	(void) signal(SIGHUP, SIG_IGN);
187 #endif
188 	(void) signal(SIGUSR1, SIG_IGN);
189 	(void) signal(SIGUSR2, SIG_IGN);
190 #ifdef WARMSTART
191 	if (warmstart) {
192 		read_warmstart();
193 	}
194 #endif
195 	if (debugging) {
196 		printf("rpcbind debugging enabled.");
197 		if (doabort) {
198 			printf("  Will abort on errors!\n");
199 		} else {
200 			printf("\n");
201 		}
202 	} else {
203 		if (daemon(0, 0))
204 			err(EXIT_FAILURE, "fork failed");
205 	}
206 
207 	openlog("rpcbind", 0, LOG_DAEMON);
208 	pidfile(NULL);
209 
210 	if (runasdaemon) {
211 		struct passwd *p;
212 
213 		if((p = getpwnam(RUN_AS)) == NULL) {
214 			syslog(LOG_ERR, "cannot get uid of daemon: %m");
215 			exit(EXIT_FAILURE);
216 		}
217 		if (setuid(p->pw_uid) == -1) {
218 			syslog(LOG_ERR, "setuid to daemon failed: %m");
219 			exit(EXIT_FAILURE);
220 		}
221 	}
222 
223 	network_init();
224 
225 #ifdef RPCBIND_RUMP
226 	sem_post(&gensem);
227 #endif
228 	my_svc_run();
229 	syslog(LOG_ERR, "svc_run returned unexpectedly");
230 	rpcbind_abort();
231 	/* NOTREACHED */
232 
233 	return EXIT_SUCCESS;
234 }
235 
236 /*
237  * Adds the entry into the rpcbind database.
238  * If PORTMAP, then for UDP and TCP, it adds the entries for version 2 also
239  * Returns 0 if succeeds, else fails
240  */
241 static int
242 init_transport(struct netconfig *nconf)
243 {
244 	int fd;
245 	struct t_bind taddr;
246 	struct addrinfo hints, *res = NULL;
247 	struct __rpc_sockinfo si;
248 	SVCXPRT	*my_xprt;
249 	int status;	/* bound checking ? */
250 	int aicode;
251 	int addrlen;
252 	struct sockaddr *sa;
253 	struct sockaddr_un sun;
254 	const int one = 1;
255 
256 	if ((nconf->nc_semantics != NC_TPI_CLTS) &&
257 		(nconf->nc_semantics != NC_TPI_COTS) &&
258 		(nconf->nc_semantics != NC_TPI_COTS_ORD))
259 		return 1;	/* not my type */
260 #ifdef RPCBIND_DEBUG
261 	if (debugging) {
262 		int i;
263 		char **s;
264 
265 		(void)fprintf(stderr, "%s: %ld lookup routines :\n",
266 		    nconf->nc_netid, nconf->nc_nlookups);
267 		for (i = 0, s = nconf->nc_lookups; i < nconf->nc_nlookups;
268 		     i++, s++)
269 			(void)fprintf(stderr, "[%d] - %s\n", i, *s);
270 	}
271 #endif
272 
273 	/*
274 	 * XXX - using RPC library internal functions.
275 	 */
276 	if ((fd = __rpc_nconf2fd(nconf)) < 0) {
277 		if (errno == EAFNOSUPPORT)
278 			return 1;
279 		warn("Cannot create socket for `%s'", nconf->nc_netid);
280 		return 1;
281 	}
282 
283 	if (!__rpc_nconf2sockinfo(nconf, &si)) {
284 		warnx("Cannot get information for `%s'", nconf->nc_netid);
285 		return 1;
286 	}
287 
288 	if (si.si_af == AF_INET6) {
289 		/*
290 		 * We're doing host-based access checks here, so don't allow
291 		 * v4-in-v6 to confuse things.
292 		 */
293 		if (setsockopt(fd, IPPROTO_IPV6, IPV6_V6ONLY, &one,
294 		    sizeof one) < 0) {
295 			warn("Can't make socket ipv6 only");
296 			return 1;
297 		}
298 	}
299 
300 
301 	if (!strcmp(nconf->nc_netid, "local")) {
302 		(void)memset(&sun, 0, sizeof sun);
303 		sun.sun_family = AF_LOCAL;
304 #ifdef RPCBIND_RUMP
305 		(void)rump_sys_unlink(_PATH_RPCBINDSOCK);
306 #else
307 		(void)unlink(_PATH_RPCBINDSOCK);
308 #endif
309 		(void)strlcpy(sun.sun_path, _PATH_RPCBINDSOCK,
310 		    sizeof(sun.sun_path));
311 		sun.sun_len = SUN_LEN(&sun);
312 		addrlen = sizeof(struct sockaddr_un);
313 		sa = (struct sockaddr *)&sun;
314 	} else {
315 		/* Get rpcbind's address on this transport */
316 
317 		(void)memset(&hints, 0, sizeof hints);
318 		hints.ai_flags = AI_PASSIVE;
319 		hints.ai_family = si.si_af;
320 		hints.ai_socktype = si.si_socktype;
321 		hints.ai_protocol = si.si_proto;
322 		if ((aicode = getaddrinfo(NULL, servname, &hints, &res)) != 0) {
323 			warnx("Cannot get local address for `%s' (%s)",
324 			    nconf->nc_netid, gai_strerror(aicode));
325 			return 1;
326 		}
327 		addrlen = res->ai_addrlen;
328 		sa = (struct sockaddr *)res->ai_addr;
329 	}
330 
331 	if (bind(fd, sa, addrlen) < 0) {
332 		warn("Cannot bind `%s'", nconf->nc_netid);
333 		if (res != NULL)
334 			freeaddrinfo(res);
335 		return 1;
336 	}
337 #ifndef RPCBIND_RUMP
338 	if (sa->sa_family == AF_LOCAL)
339 		if (chmod(sun.sun_path, S_IRWXU|S_IRWXG|S_IRWXO) == -1)
340 			warn("Cannot chmod `%s'", sun.sun_path);
341 #endif
342 
343 	/* Copy the address */
344 	taddr.addr.len = taddr.addr.maxlen = addrlen;
345 	taddr.addr.buf = malloc(addrlen);
346 	if (taddr.addr.buf == NULL) {
347 		warn("Cannot allocate memory for `%s' address",
348 		    nconf->nc_netid);
349 		if (res != NULL)
350 			freeaddrinfo(res);
351 		return 1;
352 	}
353 	(void)memcpy(taddr.addr.buf, sa, addrlen);
354 #ifdef RPCBIND_DEBUG
355 	if (debugging) {
356 		/* for debugging print out our universal address */
357 		char *uaddr;
358 		struct netbuf nb;
359 
360 		nb.buf = sa;
361 		nb.len = nb.maxlen = sa->sa_len;
362 		uaddr = taddr2uaddr(nconf, &nb);
363 		(void)fprintf(stderr, "rpcbind: my address is %s fd=%d\n",
364 		    uaddr, fd);
365 		(void)free(uaddr);
366 	}
367 #endif
368 
369 	if (res != NULL)
370 		freeaddrinfo(res);
371 
372 	if (nconf->nc_semantics != NC_TPI_CLTS)
373 		listen(fd, SOMAXCONN);
374 
375 	my_xprt = (SVCXPRT *)svc_tli_create(fd, nconf, &taddr, RPC_MAXDATASIZE,
376 	    RPC_MAXDATASIZE);
377 	if (my_xprt == NULL) {
378 		warnx("Could not create service for `%s'", nconf->nc_netid);
379 		goto error;
380 	}
381 
382 #ifdef PORTMAP
383 	/*
384 	 * Register both the versions for tcp/ip, udp/ip and local.
385 	 */
386 	if ((strcmp(nconf->nc_protofmly, NC_INET) == 0 &&
387 		(strcmp(nconf->nc_proto, NC_TCP) == 0 ||
388 		strcmp(nconf->nc_proto, NC_UDP) == 0)) ||
389 		strcmp(nconf->nc_netid, "local") == 0) {
390 		struct pmaplist *pml;
391 
392 		if (!svc_register(my_xprt, PMAPPROG, PMAPVERS,
393 			pmap_service, 0)) {
394 			warn("Could not register on `%s'", nconf->nc_netid);
395 			goto error;
396 		}
397 		pml = malloc(sizeof (struct pmaplist));
398 		if (pml == NULL) {
399 			warn("Cannot allocate memory");
400 			goto error;
401 		}
402 		pml->pml_map.pm_prog = PMAPPROG;
403 		pml->pml_map.pm_vers = PMAPVERS;
404 		pml->pml_map.pm_port = PMAPPORT;
405 		if (strcmp(nconf->nc_proto, NC_TCP) == 0) {
406 			if (tcptrans[0]) {
407 				warnx(
408 				    "Cannot have more than one TCP transport");
409 				free(pml);
410 				goto error;
411 			}
412 			tcptrans = strdup(nconf->nc_netid);
413 			if (tcptrans == NULL) {
414 				free(pml);
415 				warn("Cannot allocate memory");
416 				goto error;
417 			}
418 			pml->pml_map.pm_prot = IPPROTO_TCP;
419 
420 			/* Let's snarf the universal address */
421 			/* "h1.h2.h3.h4.p1.p2" */
422 			tcp_uaddr = taddr2uaddr(nconf, &taddr.addr);
423 		} else if (strcmp(nconf->nc_proto, NC_UDP) == 0) {
424 			if (udptrans[0]) {
425 				free(pml);
426 				warnx(
427 				"Cannot have more than one UDP transport");
428 				goto error;
429 			}
430 			udptrans = strdup(nconf->nc_netid);
431 			if (udptrans == NULL) {
432 				free(pml);
433 				warn("Cannot allocate memory");
434 				goto error;
435 			}
436 			pml->pml_map.pm_prot = IPPROTO_UDP;
437 
438 			/* Let's snarf the universal address */
439 			/* "h1.h2.h3.h4.p1.p2" */
440 			udp_uaddr = taddr2uaddr(nconf, &taddr.addr);
441 		}
442 		pml->pml_next = list_pml;
443 		list_pml = pml;
444 
445 		/* Add version 3 information */
446 		pml = malloc(sizeof (struct pmaplist));
447 		if (pml == NULL) {
448 			warn("Cannot allocate memory");
449 			goto error;
450 		}
451 		pml->pml_map = list_pml->pml_map;
452 		pml->pml_map.pm_vers = RPCBVERS;
453 		pml->pml_next = list_pml;
454 		list_pml = pml;
455 
456 		/* Add version 4 information */
457 		pml = malloc(sizeof (struct pmaplist));
458 		if (pml == NULL) {
459 			warn("Cannot allocate memory");
460 			goto error;
461 		}
462 		pml->pml_map = list_pml->pml_map;
463 		pml->pml_map.pm_vers = RPCBVERS4;
464 		pml->pml_next = list_pml;
465 		list_pml = pml;
466 
467 		/* Also add version 2 stuff to rpcbind list */
468 		rbllist_add(PMAPPROG, PMAPVERS, nconf, &taddr.addr);
469 	}
470 #endif
471 
472 	/* version 3 registration */
473 	if (!svc_reg(my_xprt, RPCBPROG, RPCBVERS, rpcb_service_3, NULL)) {
474 		warn("Could not register %s version 3", nconf->nc_netid);
475 		goto error;
476 	}
477 	rbllist_add(RPCBPROG, RPCBVERS, nconf, &taddr.addr);
478 
479 	/* version 4 registration */
480 	if (!svc_reg(my_xprt, RPCBPROG, RPCBVERS4, rpcb_service_4, NULL)) {
481 		warn("Could not register %s version 4", nconf->nc_netid);
482 		goto error;
483 	}
484 	rbllist_add(RPCBPROG, RPCBVERS4, nconf, &taddr.addr);
485 
486 	/* decide if bound checking works for this transport */
487 	status = add_bndlist(nconf, &taddr.addr);
488 #ifdef RPCBIND_DEBUG
489 	if (debugging) {
490 		if (status < 0) {
491 			fprintf(stderr, "Error in finding bind status for %s\n",
492 				nconf->nc_netid);
493 		} else if (status == 0) {
494 			fprintf(stderr, "check binding for %s\n",
495 				nconf->nc_netid);
496 		} else if (status > 0) {
497 			fprintf(stderr, "No check binding for %s\n",
498 				nconf->nc_netid);
499 		}
500 	}
501 #else
502 	__USE(status);
503 #endif
504 	/*
505 	 * rmtcall only supported on CLTS transports for now.
506 	 */
507 	if (nconf->nc_semantics == NC_TPI_CLTS) {
508 		status = create_rmtcall_fd(nconf);
509 
510 #ifdef RPCBIND_DEBUG
511 		if (debugging) {
512 			if (status < 0) {
513 				fprintf(stderr,
514 				    "Could not create rmtcall fd for %s\n",
515 					nconf->nc_netid);
516 			} else {
517 				fprintf(stderr, "rmtcall fd for %s is %d\n",
518 					nconf->nc_netid, status);
519 			}
520 		}
521 #endif
522 	}
523 	return (0);
524 error:
525 #ifdef RPCBIND_RUMP
526 	(void)rump_sys_close(fd);
527 #else
528 	(void)close(fd);
529 #endif
530 	return (1);
531 }
532 
533 static void
534 rbllist_add(rpcprog_t prog, rpcvers_t vers, struct netconfig *nconf,
535 	    struct netbuf *addr)
536 {
537 	rpcblist_ptr rbl;
538 
539 	rbl = malloc(sizeof(rpcblist));
540 	if (rbl == NULL) {
541 		warn("Out of memory");
542 		return;
543 	}
544 
545 	rbl->rpcb_map.r_prog = prog;
546 	rbl->rpcb_map.r_vers = vers;
547 	rbl->rpcb_map.r_netid = strdup(nconf->nc_netid);
548 	rbl->rpcb_map.r_addr = taddr2uaddr(nconf, addr);
549 	rbl->rpcb_map.r_owner = strdup(rpcbind_superuser);
550 	rbl->rpcb_next = list_rbl;	/* Attach to global list */
551 	list_rbl = rbl;
552 }
553 
554 /*
555  * Catch the signal and die
556  */
557 static void
558 terminate(int dummy)
559 {
560 #ifdef WARMSTART
561 	syslog(LOG_ERR,
562 		"rpcbind terminating on signal. Restart with \"rpcbind -w\"");
563 	write_warmstart();	/* Dump yourself */
564 #endif
565 #ifdef RPCBIND_RUMP
566 	exit(2);
567 #else
568 	exit(EXIT_FAILURE);
569 #endif
570 }
571 
572 void
573 rpcbind_abort()
574 {
575 #ifdef WARMSTART
576 	write_warmstart();	/* Dump yourself */
577 #endif
578 	abort();
579 }
580 
581 #ifndef RPCBIND_RUMP
582 /* get command line options */
583 static void
584 parseargs(int argc, char *argv[])
585 {
586 	int c;
587 
588 	while ((c = getopt(argc, argv, "dwailLs")) != -1) {
589 		switch (c) {
590 		case 'a':
591 			doabort = 1;	/* when debugging, do an abort on */
592 			break;		/* errors; for rpcbind developers */
593 					/* only! */
594 		case 'd':
595 			debugging = 1;
596 			break;
597 		case 'i':
598 			insecure = 1;
599 			break;
600 		case 'L':
601 			oldstyle_local = 1;
602 			break;
603 		case 'l':
604 			verboselog = 1;
605 			break;
606 		case 's':
607 			runasdaemon = 1;
608 			break;
609 #ifdef WARMSTART
610 		case 'w':
611 			warmstart = 1;
612 			break;
613 #endif
614 		default:	/* error */
615 			fprintf(stderr,	"usage: rpcbind [-Idwils]\n");
616 			exit(EXIT_FAILURE);
617 		}
618 	}
619 	if (doabort && !debugging) {
620 	    fprintf(stderr,
621 		"-a (abort) specified without -d (debugging) -- ignored.\n");
622 	    doabort = 0;
623 	}
624 }
625 #endif
626 
627 void
628 reap(int dummy)
629 {
630 	int save_errno = errno;
631 
632 	while (wait3(NULL, WNOHANG, NULL) > 0)
633 		;
634 	errno = save_errno;
635 }
636 
637 void
638 toggle_verboselog(int dummy)
639 {
640 	verboselog = !verboselog;
641 }
642