xref: /freebsd/contrib/tcp_wrappers/scaffold.c (revision 14f102eacc8434a5a1f96466752578a4167140c9)
12aef6930SMark Murray  /*
22aef6930SMark Murray   * Routines for testing only. Not really industrial strength.
32aef6930SMark Murray   *
42aef6930SMark Murray   * Author: Wietse Venema, Eindhoven University of Technology, The Netherlands.
58053080cSYoshinobu Inoue   *
68053080cSYoshinobu Inoue   * $FreeBSD$
72aef6930SMark Murray   */
82aef6930SMark Murray 
92aef6930SMark Murray #ifndef lint
102aef6930SMark Murray static char sccs_id[] = "@(#) scaffold.c 1.6 97/03/21 19:27:24";
112aef6930SMark Murray #endif
122aef6930SMark Murray 
132aef6930SMark Murray /* System libraries. */
142aef6930SMark Murray 
152aef6930SMark Murray #include <sys/types.h>
162aef6930SMark Murray #include <sys/stat.h>
172aef6930SMark Murray #include <sys/socket.h>
182aef6930SMark Murray #include <netinet/in.h>
192aef6930SMark Murray #include <arpa/inet.h>
202aef6930SMark Murray #include <netdb.h>
212aef6930SMark Murray #include <stdio.h>
222aef6930SMark Murray #include <syslog.h>
232aef6930SMark Murray #include <setjmp.h>
247d2d393cSBrooks Davis #include <stdlib.h>
252aef6930SMark Murray #include <string.h>
2674812c2bSSean Bruno #include <stdlib.h>
272aef6930SMark Murray 
282aef6930SMark Murray #ifndef INADDR_NONE
292aef6930SMark Murray #define	INADDR_NONE	(-1)		/* XXX should be 0xffffffff */
302aef6930SMark Murray #endif
312aef6930SMark Murray 
322aef6930SMark Murray /* Application-specific. */
332aef6930SMark Murray 
342aef6930SMark Murray #include "tcpd.h"
352aef6930SMark Murray #include "scaffold.h"
362aef6930SMark Murray 
372aef6930SMark Murray  /*
382aef6930SMark Murray   * These are referenced by the options module and by rfc931.c.
392aef6930SMark Murray   */
402aef6930SMark Murray int     allow_severity = SEVERITY;
412aef6930SMark Murray int     deny_severity = LOG_WARNING;
422aef6930SMark Murray 
43b208ff84SHajimu UMEMOTO #ifndef INET6
442aef6930SMark Murray /* dup_hostent - create hostent in one memory block */
452aef6930SMark Murray 
dup_hostent(struct hostent * hp)46*14f102eaSEd Maste static struct hostent *dup_hostent(struct hostent *hp)
472aef6930SMark Murray {
482aef6930SMark Murray     struct hostent_block {
492aef6930SMark Murray 	struct hostent host;
502aef6930SMark Murray 	char   *addr_list[1];
512aef6930SMark Murray     };
522aef6930SMark Murray     struct hostent_block *hb;
532aef6930SMark Murray     int     count;
542aef6930SMark Murray     char   *data;
552aef6930SMark Murray     char   *addr;
562aef6930SMark Murray 
572aef6930SMark Murray     for (count = 0; hp->h_addr_list[count] != 0; count++)
582aef6930SMark Murray 	 /* void */ ;
592aef6930SMark Murray 
602aef6930SMark Murray     if ((hb = (struct hostent_block *) malloc(sizeof(struct hostent_block)
612aef6930SMark Murray 			 + (hp->h_length + sizeof(char *)) * count)) == 0) {
622aef6930SMark Murray 	fprintf(stderr, "Sorry, out of memory\n");
632aef6930SMark Murray 	exit(1);
642aef6930SMark Murray     }
652aef6930SMark Murray     memset((char *) &hb->host, 0, sizeof(hb->host));
662aef6930SMark Murray     hb->host.h_length = hp->h_length;
672aef6930SMark Murray     hb->host.h_addr_list = hb->addr_list;
682aef6930SMark Murray     hb->host.h_addr_list[count] = 0;
692aef6930SMark Murray     data = (char *) (hb->host.h_addr_list + count + 1);
702aef6930SMark Murray 
712aef6930SMark Murray     for (count = 0; (addr = hp->h_addr_list[count]) != 0; count++) {
722aef6930SMark Murray 	hb->host.h_addr_list[count] = data + hp->h_length * count;
732aef6930SMark Murray 	memcpy(hb->host.h_addr_list[count], addr, hp->h_length);
742aef6930SMark Murray     }
752aef6930SMark Murray     return (&hb->host);
762aef6930SMark Murray }
778053080cSYoshinobu Inoue #endif
788053080cSYoshinobu Inoue 
792aef6930SMark Murray /* find_inet_addr - find all addresses for this host, result to free() */
802aef6930SMark Murray 
81b208ff84SHajimu UMEMOTO #ifdef INET6
find_inet_addr(char * host)82*14f102eaSEd Maste struct addrinfo *find_inet_addr(char *host)
83b208ff84SHajimu UMEMOTO {
84b208ff84SHajimu UMEMOTO     struct addrinfo hints, *res;
85b208ff84SHajimu UMEMOTO 
86b208ff84SHajimu UMEMOTO     memset(&hints, 0, sizeof(hints));
87b208ff84SHajimu UMEMOTO     hints.ai_family = PF_UNSPEC;
88b208ff84SHajimu UMEMOTO     hints.ai_socktype = SOCK_STREAM;
89b208ff84SHajimu UMEMOTO     hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
90b208ff84SHajimu UMEMOTO     if (getaddrinfo(host, NULL, &hints, &res) == 0)
91b208ff84SHajimu UMEMOTO 	return (res);
92b208ff84SHajimu UMEMOTO 
93b208ff84SHajimu UMEMOTO     memset(&hints, 0, sizeof(hints));
94b208ff84SHajimu UMEMOTO     hints.ai_family = PF_UNSPEC;
95b208ff84SHajimu UMEMOTO     hints.ai_socktype = SOCK_STREAM;
96b208ff84SHajimu UMEMOTO     hints.ai_flags = AI_PASSIVE | AI_CANONNAME;
97b208ff84SHajimu UMEMOTO     if (getaddrinfo(host, NULL, &hints, &res) != 0) {
98b208ff84SHajimu UMEMOTO 	tcpd_warn("%s: host not found", host);
99b208ff84SHajimu UMEMOTO 	return (0);
100b208ff84SHajimu UMEMOTO     }
101b208ff84SHajimu UMEMOTO     if (res->ai_family != AF_INET6 && res->ai_family != AF_INET) {
102b208ff84SHajimu UMEMOTO 	tcpd_warn("%d: not an internet host", res->ai_family);
103b208ff84SHajimu UMEMOTO 	freeaddrinfo(res);
104b208ff84SHajimu UMEMOTO 	return (0);
105b208ff84SHajimu UMEMOTO     }
106b208ff84SHajimu UMEMOTO     if (!res->ai_canonname) {
107b208ff84SHajimu UMEMOTO 	tcpd_warn("%s: hostname alias", host);
108b208ff84SHajimu UMEMOTO 	tcpd_warn("(cannot obtain official name)", res->ai_canonname);
109b208ff84SHajimu UMEMOTO     } else if (STR_NE(host, res->ai_canonname)) {
110b208ff84SHajimu UMEMOTO 	tcpd_warn("%s: hostname alias", host);
111b208ff84SHajimu UMEMOTO 	tcpd_warn("(official name: %.*s)", STRING_LENGTH, res->ai_canonname);
112b208ff84SHajimu UMEMOTO     }
113b208ff84SHajimu UMEMOTO     return (res);
114b208ff84SHajimu UMEMOTO }
115b208ff84SHajimu UMEMOTO #else
find_inet_addr(char * host)116*14f102eaSEd Maste struct hostent *find_inet_addr(char *host)
1172aef6930SMark Murray {
1182aef6930SMark Murray     struct in_addr addr;
1192aef6930SMark Murray     struct hostent *hp;
1202aef6930SMark Murray     static struct hostent h;
1212aef6930SMark Murray     static char *addr_list[2];
1222aef6930SMark Murray 
1232aef6930SMark Murray     /*
1242aef6930SMark Murray      * Host address: translate it to internal form.
1252aef6930SMark Murray      */
1262aef6930SMark Murray     if ((addr.s_addr = dot_quad_addr(host)) != INADDR_NONE) {
1272aef6930SMark Murray 	h.h_addr_list = addr_list;
1282aef6930SMark Murray 	h.h_addr_list[0] = (char *) &addr;
1292aef6930SMark Murray 	h.h_length = sizeof(addr);
1302aef6930SMark Murray 	return (dup_hostent(&h));
1312aef6930SMark Murray     }
1322aef6930SMark Murray 
1332aef6930SMark Murray     /*
1342aef6930SMark Murray      * Map host name to a series of addresses. Watch out for non-internet
1352aef6930SMark Murray      * forms or aliases. The NOT_INADDR() is here in case gethostbyname() has
1362aef6930SMark Murray      * been "enhanced" to accept numeric addresses. Make a copy of the
1372aef6930SMark Murray      * address list so that later gethostbyXXX() calls will not clobber it.
1382aef6930SMark Murray      */
1392aef6930SMark Murray     if (NOT_INADDR(host) == 0) {
1402aef6930SMark Murray 	tcpd_warn("%s: not an internet address", host);
1412aef6930SMark Murray 	return (0);
1422aef6930SMark Murray     }
1432aef6930SMark Murray     if ((hp = gethostbyname(host)) == 0) {
1442aef6930SMark Murray 	tcpd_warn("%s: host not found", host);
1452aef6930SMark Murray 	return (0);
1462aef6930SMark Murray     }
1472aef6930SMark Murray     if (hp->h_addrtype != AF_INET) {
1482aef6930SMark Murray 	tcpd_warn("%d: not an internet host", hp->h_addrtype);
1492aef6930SMark Murray 	return (0);
1502aef6930SMark Murray     }
1512aef6930SMark Murray     if (STR_NE(host, hp->h_name)) {
1522aef6930SMark Murray 	tcpd_warn("%s: hostname alias", host);
1532aef6930SMark Murray 	tcpd_warn("(official name: %.*s)", STRING_LENGTH, hp->h_name);
1542aef6930SMark Murray     }
1552aef6930SMark Murray     return (dup_hostent(hp));
1562aef6930SMark Murray }
157b208ff84SHajimu UMEMOTO #endif
1582aef6930SMark Murray 
1592aef6930SMark Murray /* check_dns - give each address thorough workout, return address count */
1602aef6930SMark Murray 
check_dns(char * host)161*14f102eaSEd Maste int     check_dns(char *host)
1622aef6930SMark Murray {
1632aef6930SMark Murray     struct request_info request;
1648053080cSYoshinobu Inoue #ifdef INET6
1658053080cSYoshinobu Inoue     struct sockaddr_storage sin;
166b208ff84SHajimu UMEMOTO     struct addrinfo *hp, *res;
1678053080cSYoshinobu Inoue #else
1682aef6930SMark Murray     struct sockaddr_in sin;
1692aef6930SMark Murray     struct hostent *hp;
170b208ff84SHajimu UMEMOTO #endif
1712aef6930SMark Murray     int     count;
1722aef6930SMark Murray     char   *addr;
1732aef6930SMark Murray 
1742aef6930SMark Murray     if ((hp = find_inet_addr(host)) == 0)
1752aef6930SMark Murray 	return (0);
1762aef6930SMark Murray     request_init(&request, RQ_CLIENT_SIN, &sin, 0);
1772aef6930SMark Murray     sock_methods(&request);
178b208ff84SHajimu UMEMOTO #ifndef INET6
1792aef6930SMark Murray     memset((char *) &sin, 0, sizeof(sin));
1802aef6930SMark Murray     sin.sin_family = AF_INET;
1818053080cSYoshinobu Inoue #endif
1822aef6930SMark Murray 
1838053080cSYoshinobu Inoue #ifdef INET6
184b208ff84SHajimu UMEMOTO     for (res = hp, count = 0; res; res = res->ai_next, count++) {
185b208ff84SHajimu UMEMOTO 	memcpy(&sin, res->ai_addr, res->ai_addrlen);
1868053080cSYoshinobu Inoue #else
187b208ff84SHajimu UMEMOTO     for (count = 0; (addr = hp->h_addr_list[count]) != 0; count++) {
1882aef6930SMark Murray 	memcpy((char *) &sin.sin_addr, addr, sizeof(sin.sin_addr));
1898053080cSYoshinobu Inoue #endif
1902aef6930SMark Murray 
1912aef6930SMark Murray 	/*
1922aef6930SMark Murray 	 * Force host name and address conversions. Use the request structure
1932aef6930SMark Murray 	 * as a cache. Detect hostname lookup problems. Any name/name or
1942aef6930SMark Murray 	 * name/address conflicts will be reported while eval_hostname() does
1952aef6930SMark Murray 	 * its job.
1962aef6930SMark Murray 	 */
1972aef6930SMark Murray 	request_set(&request, RQ_CLIENT_ADDR, "", RQ_CLIENT_NAME, "", 0);
1982aef6930SMark Murray 	if (STR_EQ(eval_hostname(request.client), unknown))
1992aef6930SMark Murray 	    tcpd_warn("host address %s->name lookup failed",
2002aef6930SMark Murray 		      eval_hostaddr(request.client));
2012aef6930SMark Murray     }
202b208ff84SHajimu UMEMOTO #ifdef INET6
203b208ff84SHajimu UMEMOTO     freeaddrinfo(hp);
204b208ff84SHajimu UMEMOTO #else
2052aef6930SMark Murray     free((char *) hp);
206b208ff84SHajimu UMEMOTO #endif
2072aef6930SMark Murray     return (count);
2082aef6930SMark Murray }
2092aef6930SMark Murray 
2102aef6930SMark Murray /* dummy function to intercept the real shell_cmd() */
2112aef6930SMark Murray 
2122aef6930SMark Murray /* ARGSUSED */
2132aef6930SMark Murray 
214*14f102eaSEd Maste void    shell_cmd(char *command)
2152aef6930SMark Murray {
2162aef6930SMark Murray     if (hosts_access_verbose)
2172aef6930SMark Murray 	printf("command: %s", command);
2182aef6930SMark Murray }
2192aef6930SMark Murray 
2202aef6930SMark Murray /* dummy function  to intercept the real clean_exit() */
2212aef6930SMark Murray 
2222aef6930SMark Murray /* ARGSUSED */
2232aef6930SMark Murray 
224*14f102eaSEd Maste void    clean_exit(struct request_info *request)
2252aef6930SMark Murray {
2262aef6930SMark Murray     exit(0);
2272aef6930SMark Murray }
2282aef6930SMark Murray 
2292aef6930SMark Murray /* check_path - examine accessibility */
2302aef6930SMark Murray 
231*14f102eaSEd Maste int     check_path(char *path, struct stat *st)
2322aef6930SMark Murray {
2332aef6930SMark Murray     struct stat stbuf;
2342aef6930SMark Murray     char    buf[BUFSIZ];
2352aef6930SMark Murray 
2362aef6930SMark Murray     if (stat(path, st) < 0)
2372aef6930SMark Murray 	return (-1);
2382aef6930SMark Murray #ifdef notdef
2392aef6930SMark Murray     if (st->st_uid != 0)
2402aef6930SMark Murray 	tcpd_warn("%s: not owned by root", path);
2412aef6930SMark Murray     if (st->st_mode & 020)
2422aef6930SMark Murray 	tcpd_warn("%s: group writable", path);
2432aef6930SMark Murray #endif
2442aef6930SMark Murray     if (st->st_mode & 002)
2452aef6930SMark Murray 	tcpd_warn("%s: world writable", path);
2462aef6930SMark Murray     if (path[0] == '/' && path[1] != 0) {
2472aef6930SMark Murray 	strrchr(strcpy(buf, path), '/')[0] = 0;
2482aef6930SMark Murray 	(void) check_path(buf[0] ? buf : "/", &stbuf);
2492aef6930SMark Murray     }
2502aef6930SMark Murray     return (0);
2512aef6930SMark Murray }
252