1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD 3 * 4 * Copyright (c) 2022 Alexander V. Chernikov <melifaro@FreeBSD.org> 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25 * SUCH DAMAGE. 26 */ 27 28 #include <sys/cdefs.h> 29 __FBSDID("$FreeBSD$"); 30 #include "opt_inet.h" 31 #include "opt_inet6.h" 32 #include <sys/types.h> 33 #include <sys/malloc.h> 34 #include <sys/socket.h> 35 #include <sys/sockio.h> 36 #include <sys/syslog.h> 37 #include <sys/socketvar.h> 38 39 #include <net/ethernet.h> 40 #include <net/if.h> 41 #include <net/if_dl.h> 42 #include <net/if_media.h> 43 #include <net/if_var.h> 44 #include <net/if_clone.h> 45 #include <net/if_vlan_var.h> 46 #include <net/route.h> 47 #include <net/route/nhop.h> 48 #include <net/route/route_ctl.h> 49 #include <netlink/netlink.h> 50 #include <netlink/netlink_ctl.h> 51 #include <netlink/netlink_route.h> 52 #include <netlink/route/route_var.h> 53 54 #include <netinet6/scope6_var.h> /* scope deembedding */ 55 56 #define DEBUG_MOD_NAME nl_iface_drivers 57 #define DEBUG_MAX_LEVEL LOG_DEBUG3 58 #include <netlink/netlink_debug.h> 59 _DECLARE_DEBUG(LOG_DEBUG); 60 61 /* 62 * Generic modification interface handler. 63 * Responsible for changing network stack interface attributes 64 * such as state, mtu or description. 65 */ 66 static int 67 modify_generic(struct ifnet *ifp, struct nl_parsed_link *lattrs, 68 const struct nlattr_bmask *bm, struct nlpcb *nlp, struct nl_pstate *npt) 69 { 70 int error; 71 72 if (lattrs->ifla_ifalias != NULL) { 73 if (nlp_has_priv(nlp, PRIV_NET_SETIFDESCR)) { 74 int len = strlen(lattrs->ifla_ifalias) + 1; 75 char *buf = if_allocdescr(len, M_WAITOK); 76 77 memcpy(buf, lattrs->ifla_ifalias, len); 78 if_setdescr(ifp, buf); 79 getmicrotime(&ifp->if_lastchange); 80 } else { 81 nlmsg_report_err_msg(npt, "Not enough privileges to set descr"); 82 return (EPERM); 83 } 84 } 85 86 if ((lattrs->ifi_change & IFF_UP) && (lattrs->ifi_flags & IFF_UP) == 0) { 87 /* Request to down the interface */ 88 if_down(ifp); 89 } 90 91 if (lattrs->ifla_mtu > 0) { 92 if (nlp_has_priv(nlp, PRIV_NET_SETIFMTU)) { 93 struct ifreq ifr = { .ifr_mtu = lattrs->ifla_mtu }; 94 error = ifhwioctl(SIOCSIFMTU, ifp, (char *)&ifr, curthread); 95 } else { 96 nlmsg_report_err_msg(npt, "Not enough privileges to set mtu"); 97 return (EPERM); 98 } 99 } 100 101 if (lattrs->ifi_change & IFF_PROMISC) { 102 error = ifpromisc(ifp, lattrs->ifi_flags & IFF_PROMISC); 103 if (error != 0) { 104 nlmsg_report_err_msg(npt, "unable to set promisc"); 105 return (error); 106 } 107 } 108 109 return (0); 110 } 111 112 /* 113 * Saves the resulting ifindex and ifname to report them 114 * to userland along with the operation result. 115 * NLA format: 116 * NLMSGERR_ATTR_COOKIE(nested) 117 * IFLA_NEW_IFINDEX(u32) 118 * IFLA_IFNAME(string) 119 */ 120 static void 121 store_cookie(struct nl_pstate *npt, struct ifnet *ifp) 122 { 123 int ifname_len = strlen(if_name(ifp)); 124 uint32_t ifindex = (uint32_t)ifp->if_index; 125 126 int nla_len = sizeof(struct nlattr) * 3 + 127 sizeof(ifindex) + NL_ITEM_ALIGN(ifname_len + 1); 128 struct nlattr *nla_cookie = npt_alloc(npt, nla_len); 129 130 /* Nested TLV */ 131 nla_cookie->nla_len = nla_len; 132 nla_cookie->nla_type = NLMSGERR_ATTR_COOKIE; 133 134 struct nlattr *nla = nla_cookie + 1; 135 nla->nla_len = sizeof(struct nlattr) + sizeof(ifindex); 136 nla->nla_type = IFLA_NEW_IFINDEX; 137 memcpy(NLA_DATA(nla), &ifindex, sizeof(ifindex)); 138 139 nla = NLA_NEXT(nla); 140 nla->nla_len = sizeof(struct nlattr) + ifname_len + 1; 141 nla->nla_type = IFLA_IFNAME; 142 strlcpy(NLA_DATA(nla), if_name(ifp), ifname_len + 1); 143 144 nlmsg_report_cookie(npt, nla_cookie); 145 } 146 147 /* 148 * Generic creation interface handler. 149 * Responsible for creating interfaces w/o parameters and setting 150 * misc attributes such as state, mtu or description. 151 */ 152 static int 153 create_generic(struct nl_parsed_link *lattrs, const struct nlattr_bmask *bm, 154 struct nlpcb *nlp, struct nl_pstate *npt) 155 { 156 int error = 0; 157 158 struct ifc_data ifd = {}; 159 struct ifnet *ifp = NULL; 160 error = ifc_create_ifp(lattrs->ifla_ifname, &ifd, &ifp); 161 162 NLP_LOG(LOG_DEBUG2, nlp, "clone for %s returned %d", lattrs->ifla_ifname, error); 163 164 if (error == 0) { 165 struct epoch_tracker et; 166 167 NET_EPOCH_ENTER(et); 168 bool success = if_try_ref(ifp); 169 NET_EPOCH_EXIT(et); 170 if (!success) 171 return (EINVAL); 172 error = modify_generic(ifp, lattrs, bm, nlp, npt); 173 if (error == 0) 174 store_cookie(npt, ifp); 175 if_rele(ifp); 176 } 177 178 return (error); 179 } 180 181 struct nl_cloner generic_cloner = { 182 .name = "_default_", 183 .create_f = create_generic, 184 .modify_f = modify_generic, 185 }; 186 187 /* 188 * 189 * {len=76, type=RTM_NEWLINK, flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, seq=1662892737, pid=0}, 190 * {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, 191 * [ 192 * {{nla_len=8, nla_type=IFLA_LINK}, 2}, 193 * {{nla_len=12, nla_type=IFLA_IFNAME}, "xvlan22"}, 194 * {{nla_len=24, nla_type=IFLA_LINKINFO}, 195 * [ 196 * {{nla_len=8, nla_type=IFLA_INFO_KIND}, "vlan"...}, 197 * {{nla_len=12, nla_type=IFLA_INFO_DATA}, "\x06\x00\x01\x00\x16\x00\x00\x00"}]}]}, iov_len=76}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 76 198 */ 199 200 struct nl_parsed_vlan { 201 uint16_t vlan_id; 202 uint16_t vlan_proto; 203 struct ifla_vlan_flags vlan_flags; 204 }; 205 206 #define _OUT(_field) offsetof(struct nl_parsed_vlan, _field) 207 static const struct nlattr_parser nla_p_vlan[] = { 208 { .type = IFLA_VLAN_ID, .off = _OUT(vlan_id), .cb = nlattr_get_uint16 }, 209 { .type = IFLA_VLAN_FLAGS, .off = _OUT(vlan_flags), .cb = nlattr_get_nla }, 210 { .type = IFLA_VLAN_PROTOCOL, .off = _OUT(vlan_proto), .cb = nlattr_get_uint16 }, 211 }; 212 #undef _OUT 213 NL_DECLARE_ATTR_PARSER(vlan_parser, nla_p_vlan); 214 215 static int 216 create_vlan(struct nl_parsed_link *lattrs, const struct nlattr_bmask *bm, 217 struct nlpcb *nlp, struct nl_pstate *npt) 218 { 219 struct epoch_tracker et; 220 struct ifnet *ifp; 221 int error; 222 223 /* 224 * lattrs.ifla_ifname is the new interface name 225 * lattrs.ifi_index contains parent interface index 226 * lattrs.ifla_idata contains un-parsed vlan data 227 */ 228 229 struct nl_parsed_vlan attrs = { 230 .vlan_id = 0xFEFE, 231 .vlan_proto = ETHERTYPE_VLAN 232 }; 233 NLP_LOG(LOG_DEBUG3, nlp, "nested: %p len %d", lattrs->ifla_idata, lattrs->ifla_idata->nla_len); 234 235 if (lattrs->ifla_idata == NULL) { 236 NLMSG_REPORT_ERR_MSG(npt, "vlan id is required, guessing not supported"); 237 return (ENOTSUP); 238 } 239 240 error = nl_parse_nested(lattrs->ifla_idata, &vlan_parser, npt, &attrs); 241 if (error != 0) 242 return (error); 243 if (attrs.vlan_id > 4095) { 244 NLMSG_REPORT_ERR_MSG(npt, "Invalid VID: %d", attrs.vlan_id); 245 return (EINVAL); 246 } 247 if (attrs.vlan_proto != ETHERTYPE_VLAN && attrs.vlan_proto != ETHERTYPE_QINQ) { 248 NLMSG_REPORT_ERR_MSG(npt, "Unsupported ethertype: 0x%04X", attrs.vlan_proto); 249 return (ENOTSUP); 250 } 251 252 NET_EPOCH_ENTER(et); 253 ifp = ifnet_byindex_ref(lattrs->ifi_index); 254 NET_EPOCH_EXIT(et); 255 if (ifp == NULL) { 256 NLP_LOG(LOG_DEBUG, nlp, "unable to find parent interface %u", 257 lattrs->ifi_index); 258 return (ENOENT); 259 } 260 261 /* Waiting till if_clone changes lands */ 262 /* 263 struct vlanreq params = { 264 .vlr_tag = attrs.vlan_id, 265 .vlr_proto = attrs.vlan_proto, 266 }; 267 */ 268 int ifname_len = strlen(lattrs->ifla_ifname) + 1; 269 error = if_clone_create(lattrs->ifla_ifname, ifname_len, (char *)NULL); 270 271 NLP_LOG(LOG_DEBUG2, nlp, "clone for %s returned %d", lattrs->ifla_ifname, error); 272 273 if_rele(ifp); 274 return (error); 275 } 276 277 static int 278 dump_vlan(struct ifnet *ifp, struct nl_writer *nw) 279 { 280 return (0); 281 } 282 283 static struct nl_cloner vlan_cloner = { 284 .name = "vlan", 285 .create_f = create_vlan, 286 .modify_f = modify_generic, 287 .dump_f = dump_vlan, 288 289 }; 290 291 static const struct nlhdr_parser *all_parsers[] = { &vlan_parser }; 292 293 void 294 rtnl_iface_drivers_register(void) 295 { 296 rtnl_iface_add_cloner(&vlan_cloner); 297 NL_VERIFY_PARSERS(all_parsers); 298 } 299 300 301