xref: /freebsd/crypto/heimdal/lib/krb5/log.c (revision 6a068746777241722b2b32c5d0bc443a2a64d80b)
1 /*
2  * Copyright (c) 1997-2006 Kungliga Tekniska Högskolan
3  * (Royal Institute of Technology, Stockholm, Sweden).
4  * All rights reserved.
5  *
6  * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  *
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  *
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  *
19  * 3. Neither the name of the Institute nor the names of its contributors
20  *    may be used to endorse or promote products derived from this software
21  *    without specific prior written permission.
22  *
23  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33  * SUCH DAMAGE.
34  */
35 
36 #include "krb5_locl.h"
37 #include <vis.h>
38 
39 struct facility {
40     int min;
41     int max;
42     krb5_log_log_func_t log_func;
43     krb5_log_close_func_t close_func;
44     void *data;
45 };
46 
47 static struct facility*
log_realloc(krb5_log_facility * f)48 log_realloc(krb5_log_facility *f)
49 {
50     struct facility *fp;
51     fp = realloc(f->val, (f->len + 1) * sizeof(*f->val));
52     if(fp == NULL)
53 	return NULL;
54     f->len++;
55     f->val = fp;
56     fp += f->len - 1;
57     return fp;
58 }
59 
60 struct s2i {
61     const char *s;
62     int val;
63 };
64 
65 #define L(X) { #X, LOG_ ## X }
66 
67 static struct s2i syslogvals[] = {
68     L(EMERG),
69     L(ALERT),
70     L(CRIT),
71     L(ERR),
72     L(WARNING),
73     L(NOTICE),
74     L(INFO),
75     L(DEBUG),
76 
77     L(AUTH),
78 #ifdef LOG_AUTHPRIV
79     L(AUTHPRIV),
80 #endif
81 #ifdef LOG_CRON
82     L(CRON),
83 #endif
84     L(DAEMON),
85 #ifdef LOG_FTP
86     L(FTP),
87 #endif
88     L(KERN),
89     L(LPR),
90     L(MAIL),
91 #ifdef LOG_NEWS
92     L(NEWS),
93 #endif
94     L(SYSLOG),
95     L(USER),
96 #ifdef LOG_UUCP
97     L(UUCP),
98 #endif
99     L(LOCAL0),
100     L(LOCAL1),
101     L(LOCAL2),
102     L(LOCAL3),
103     L(LOCAL4),
104     L(LOCAL5),
105     L(LOCAL6),
106     L(LOCAL7),
107     { NULL, -1 }
108 };
109 
110 static int
find_value(const char * s,struct s2i * table)111 find_value(const char *s, struct s2i *table)
112 {
113     while(table->s && strcasecmp(table->s, s))
114 	table++;
115     return table->val;
116 }
117 
118 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_initlog(krb5_context context,const char * program,krb5_log_facility ** fac)119 krb5_initlog(krb5_context context,
120 	     const char *program,
121 	     krb5_log_facility **fac)
122 {
123     krb5_log_facility *f = calloc(1, sizeof(*f));
124     if(f == NULL) {
125 	krb5_set_error_message(context, ENOMEM,
126 			       N_("malloc: out of memory", ""));
127 	return ENOMEM;
128     }
129     f->program = strdup(program);
130     if(f->program == NULL){
131 	free(f);
132 	krb5_set_error_message(context, ENOMEM,
133 			       N_("malloc: out of memory", ""));
134 	return ENOMEM;
135     }
136     *fac = f;
137     return 0;
138 }
139 
140 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_addlog_func(krb5_context context,krb5_log_facility * fac,int min,int max,krb5_log_log_func_t log_func,krb5_log_close_func_t close_func,void * data)141 krb5_addlog_func(krb5_context context,
142 		 krb5_log_facility *fac,
143 		 int min,
144 		 int max,
145 		 krb5_log_log_func_t log_func,
146 		 krb5_log_close_func_t close_func,
147 		 void *data)
148 {
149     struct facility *fp = log_realloc(fac);
150     if(fp == NULL) {
151 	krb5_set_error_message(context, ENOMEM,
152 			       N_("malloc: out of memory", ""));
153 	return ENOMEM;
154     }
155     fp->min = min;
156     fp->max = max;
157     fp->log_func = log_func;
158     fp->close_func = close_func;
159     fp->data = data;
160     return 0;
161 }
162 
163 
164 struct _heimdal_syslog_data{
165     int priority;
166 };
167 
168 static void KRB5_CALLCONV
log_syslog(const char * timestr,const char * msg,void * data)169 log_syslog(const char *timestr,
170 	   const char *msg,
171 	   void *data)
172 
173 {
174     struct _heimdal_syslog_data *s = data;
175     syslog(s->priority, "%s", msg);
176 }
177 
178 static void KRB5_CALLCONV
close_syslog(void * data)179 close_syslog(void *data)
180 {
181     free(data);
182     closelog();
183 }
184 
185 static krb5_error_code
open_syslog(krb5_context context,krb5_log_facility * facility,int min,int max,const char * sev,const char * fac)186 open_syslog(krb5_context context,
187 	    krb5_log_facility *facility, int min, int max,
188 	    const char *sev, const char *fac)
189 {
190     struct _heimdal_syslog_data *sd = malloc(sizeof(*sd));
191     int i;
192 
193     if(sd == NULL) {
194 	krb5_set_error_message(context, ENOMEM,
195 			       N_("malloc: out of memory", ""));
196 	return ENOMEM;
197     }
198     i = find_value(sev, syslogvals);
199     if(i == -1)
200 	i = LOG_ERR;
201     sd->priority = i;
202     i = find_value(fac, syslogvals);
203     if(i == -1)
204 	i = LOG_AUTH;
205     sd->priority |= i;
206     roken_openlog(facility->program, LOG_PID | LOG_NDELAY, i);
207     return krb5_addlog_func(context, facility, min, max,
208 			    log_syslog, close_syslog, sd);
209 }
210 
211 struct file_data{
212     const char *filename;
213     const char *mode;
214     FILE *fd;
215     int keep_open;
216 };
217 
218 static void KRB5_CALLCONV
log_file(const char * timestr,const char * msg,void * data)219 log_file(const char *timestr,
220 	 const char *msg,
221 	 void *data)
222 {
223     struct file_data *f = data;
224     char *msgclean;
225     size_t len = strlen(msg);
226     if(f->keep_open == 0)
227 	f->fd = fopen(f->filename, f->mode);
228     if(f->fd == NULL)
229 	return;
230     /* make sure the log doesn't contain special chars */
231     msgclean = malloc((len + 1) * 4);
232     if (msgclean == NULL)
233 	goto out;
234     strvisx(msgclean, rk_UNCONST(msg), len, VIS_OCTAL);
235     fprintf(f->fd, "%s %s\n", timestr, msgclean);
236     free(msgclean);
237  out:
238     if(f->keep_open == 0) {
239 	fclose(f->fd);
240 	f->fd = NULL;
241     }
242 }
243 
244 static void KRB5_CALLCONV
close_file(void * data)245 close_file(void *data)
246 {
247     struct file_data *f = data;
248     if(f->keep_open && f->filename)
249 	fclose(f->fd);
250     free(data);
251 }
252 
253 static krb5_error_code
open_file(krb5_context context,krb5_log_facility * fac,int min,int max,const char * filename,const char * mode,FILE * f,int keep_open)254 open_file(krb5_context context, krb5_log_facility *fac, int min, int max,
255 	  const char *filename, const char *mode, FILE *f, int keep_open)
256 {
257     struct file_data *fd = malloc(sizeof(*fd));
258     if(fd == NULL) {
259 	krb5_set_error_message(context, ENOMEM,
260 			       N_("malloc: out of memory", ""));
261 	return ENOMEM;
262     }
263     fd->filename = filename;
264     fd->mode = mode;
265     fd->fd = f;
266     fd->keep_open = keep_open;
267 
268     return krb5_addlog_func(context, fac, min, max, log_file, close_file, fd);
269 }
270 
271 
272 
273 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_addlog_dest(krb5_context context,krb5_log_facility * f,const char * orig)274 krb5_addlog_dest(krb5_context context, krb5_log_facility *f, const char *orig)
275 {
276     krb5_error_code ret = 0;
277     int min = 0, max = -1, n;
278     char c;
279     const char *p = orig;
280 
281     n = sscanf(p, "%d%c%d/", &min, &c, &max);
282     if(n == 2){
283 	if(c == '/') {
284 	    if(min < 0){
285 		max = -min;
286 		min = 0;
287 	    }else{
288 		max = min;
289 	    }
290 	}
291     }
292     if(n){
293 	p = strchr(p, '/');
294 	if(p == NULL) {
295 	    krb5_set_error_message(context, HEIM_ERR_LOG_PARSE,
296 				   N_("failed to parse \"%s\"", ""), orig);
297 	    return HEIM_ERR_LOG_PARSE;
298 	}
299 	p++;
300     }
301     if(strcmp(p, "STDERR") == 0){
302 	ret = open_file(context, f, min, max, NULL, NULL, stderr, 1);
303     }else if(strcmp(p, "CONSOLE") == 0){
304 	ret = open_file(context, f, min, max, "/dev/console", "w", NULL, 0);
305     }else if(strncmp(p, "FILE", 4) == 0 && (p[4] == ':' || p[4] == '=')){
306 	char *fn;
307 	FILE *file = NULL;
308 	int keep_open = 0;
309 	fn = strdup(p + 5);
310 	if(fn == NULL) {
311 	    krb5_set_error_message(context, ENOMEM,
312 				   N_("malloc: out of memory", ""));
313 	    return ENOMEM;
314 	}
315 	if(p[4] == '='){
316 	    int i = open(fn, O_WRONLY | O_CREAT |
317 			 O_TRUNC | O_APPEND, 0666);
318 	    if(i < 0) {
319 		ret = errno;
320 		krb5_set_error_message(context, ret,
321 				       N_("open(%s) logile: %s", ""), fn,
322 				       strerror(ret));
323 		free(fn);
324 		return ret;
325 	    }
326 	    rk_cloexec(i);
327 	    file = fdopen(i, "a");
328 	    if(file == NULL){
329 		ret = errno;
330 		close(i);
331 		krb5_set_error_message(context, ret,
332 				       N_("fdopen(%s) logfile: %s", ""),
333 				       fn, strerror(ret));
334 		free(fn);
335 		return ret;
336 	    }
337 	    keep_open = 1;
338 	}
339 	ret = open_file(context, f, min, max, fn, "a", file, keep_open);
340     }else if(strncmp(p, "DEVICE", 6) == 0 && (p[6] == ':' || p[6] == '=')){
341 	ret = open_file(context, f, min, max, strdup(p + 7), "w", NULL, 0);
342     }else if(strncmp(p, "SYSLOG", 6) == 0 && (p[6] == '\0' || p[6] == ':')){
343 	char severity[128] = "";
344 	char facility[128] = "";
345 	p += 6;
346 	if(*p != '\0')
347 	    p++;
348 	if(strsep_copy(&p, ":", severity, sizeof(severity)) != -1)
349 	    strsep_copy(&p, ":", facility, sizeof(facility));
350 	if(*severity == '\0')
351 	    strlcpy(severity, "ERR", sizeof(severity));
352  	if(*facility == '\0')
353 	    strlcpy(facility, "AUTH", sizeof(facility));
354 	ret = open_syslog(context, f, min, max, severity, facility);
355     }else{
356 	ret = HEIM_ERR_LOG_PARSE; /* XXX */
357 	krb5_set_error_message (context, ret,
358 				N_("unknown log type: %s", ""), p);
359     }
360     return ret;
361 }
362 
363 
364 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_openlog(krb5_context context,const char * program,krb5_log_facility ** fac)365 krb5_openlog(krb5_context context,
366 	     const char *program,
367 	     krb5_log_facility **fac)
368 {
369     krb5_error_code ret;
370     char **p, **q;
371 
372     ret = krb5_initlog(context, program, fac);
373     if(ret)
374 	return ret;
375 
376     p = krb5_config_get_strings(context, NULL, "logging", program, NULL);
377     if(p == NULL)
378 	p = krb5_config_get_strings(context, NULL, "logging", "default", NULL);
379     if(p){
380 	for(q = p; *q && ret == 0; q++)
381 	    ret = krb5_addlog_dest(context, *fac, *q);
382 	krb5_config_free_strings(p);
383     }else
384 	ret = krb5_addlog_dest(context, *fac, "SYSLOG");
385     return ret;
386 }
387 
388 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_closelog(krb5_context context,krb5_log_facility * fac)389 krb5_closelog(krb5_context context,
390 	      krb5_log_facility *fac)
391 {
392     int i;
393     for(i = 0; i < fac->len; i++)
394 	(*fac->val[i].close_func)(fac->val[i].data);
395     free(fac->val);
396     free(fac->program);
397     fac->val = NULL;
398     fac->len = 0;
399     fac->program = NULL;
400     free(fac);
401     return 0;
402 }
403 
404 #undef __attribute__
405 #define __attribute__(X)
406 
407 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_vlog_msg(krb5_context context,krb5_log_facility * fac,char ** reply,int level,const char * fmt,va_list ap)408 krb5_vlog_msg(krb5_context context,
409 	      krb5_log_facility *fac,
410 	      char **reply,
411 	      int level,
412 	      const char *fmt,
413 	      va_list ap)
414      __attribute__((format (printf, 5, 0)))
415 {
416 
417     char *msg = NULL;
418     const char *actual = NULL;
419     char buf[64];
420     time_t t = 0;
421     int i;
422 
423     for(i = 0; fac && i < fac->len; i++)
424 	if(fac->val[i].min <= level &&
425 	   (fac->val[i].max < 0 || fac->val[i].max >= level)) {
426 	    if(t == 0) {
427 		t = time(NULL);
428 		krb5_format_time(context, t, buf, sizeof(buf), TRUE);
429 	    }
430 	    if(actual == NULL) {
431 		int ret = vasprintf(&msg, fmt, ap);
432 		if(ret < 0 || msg == NULL)
433 		    actual = fmt;
434 		else
435 		    actual = msg;
436 	    }
437 	    (*fac->val[i].log_func)(buf, actual, fac->val[i].data);
438 	}
439     if(reply == NULL)
440 	free(msg);
441     else
442 	*reply = msg;
443     return 0;
444 }
445 
446 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_vlog(krb5_context context,krb5_log_facility * fac,int level,const char * fmt,va_list ap)447 krb5_vlog(krb5_context context,
448 	  krb5_log_facility *fac,
449 	  int level,
450 	  const char *fmt,
451 	  va_list ap)
452      __attribute__((format (printf, 4, 0)))
453 {
454     return krb5_vlog_msg(context, fac, NULL, level, fmt, ap);
455 }
456 
457 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_log_msg(krb5_context context,krb5_log_facility * fac,int level,char ** reply,const char * fmt,...)458 krb5_log_msg(krb5_context context,
459 	     krb5_log_facility *fac,
460 	     int level,
461 	     char **reply,
462 	     const char *fmt,
463 	     ...)
464      __attribute__((format (printf, 5, 6)))
465 {
466     va_list ap;
467     krb5_error_code ret;
468 
469     va_start(ap, fmt);
470     ret = krb5_vlog_msg(context, fac, reply, level, fmt, ap);
471     va_end(ap);
472     return ret;
473 }
474 
475 
476 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_log(krb5_context context,krb5_log_facility * fac,int level,const char * fmt,...)477 krb5_log(krb5_context context,
478 	 krb5_log_facility *fac,
479 	 int level,
480 	 const char *fmt,
481 	 ...)
482      __attribute__((format (printf, 4, 5)))
483 {
484     va_list ap;
485     krb5_error_code ret;
486 
487     va_start(ap, fmt);
488     ret = krb5_vlog(context, fac, level, fmt, ap);
489     va_end(ap);
490     return ret;
491 }
492 
493 void KRB5_LIB_FUNCTION
_krb5_debug(krb5_context context,int level,const char * fmt,...)494 _krb5_debug(krb5_context context,
495 	    int level,
496 	    const char *fmt,
497 	    ...)
498     __attribute__((format (printf, 3, 4)))
499 {
500     va_list ap;
501 
502     if (context == NULL || context->debug_dest == NULL)
503 	return;
504 
505     va_start(ap, fmt);
506     krb5_vlog(context, context->debug_dest, level, fmt, ap);
507     va_end(ap);
508 }
509 
510 krb5_boolean KRB5_LIB_FUNCTION
_krb5_have_debug(krb5_context context,int level)511 _krb5_have_debug(krb5_context context, int level)
512 {
513     if (context == NULL || context->debug_dest == NULL)
514 	return 0 ;
515     return 1;
516 }
517