1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 22 /* 23 * Copyright 2010 Sun Microsystems, Inc. All rights reserved. 24 * Use is subject to license terms. 25 */ 26 27 #include <errno.h> 28 #include <fcntl.h> 29 #include <inetcfg.h> 30 #include <libdllink.h> 31 #include <libintl.h> 32 #include <libnwam.h> 33 #include <locale.h> 34 #include <priv.h> 35 #include <pthread.h> 36 #include <signal.h> 37 #include <stdio.h> 38 #include <stdlib.h> 39 #include <string.h> 40 #include <sys/stat.h> 41 #include <sys/types.h> 42 #include <sys/wait.h> 43 #include <unistd.h> 44 45 #include <libnwam.h> 46 #include "conditions.h" 47 #include "events.h" 48 #include "llp.h" 49 #include "ncp.h" 50 #include "objects.h" 51 #include "util.h" 52 53 /* 54 * nwamd - NetWork Auto-Magic Daemon 55 */ 56 57 boolean_t fg = B_FALSE; 58 dladm_handle_t dld_handle = NULL; 59 boolean_t shutting_down = B_FALSE; 60 61 sigset_t original_sigmask; 62 static sigset_t sigwaitset; 63 64 static void nwamd_refresh(void); 65 static void graceful_shutdown(void); 66 67 /* 68 * nwamd 69 * 70 * This is the Network Auto-Magic daemon. For further high level information 71 * see the Network Auto-Magic project and the Approachability communities 72 * on opensolaris.org, nwamd(1M), and the README in the source directory. 73 * 74 * The general structure of the code is as a set of event source threads 75 * which feed events into the event handling thread. Some of these events 76 * are internal-only (e.g UPGRADE), but some also involve propogation 77 * to external listeners (who register via a door call into the daemon). 78 * 79 * signal management 80 * Due to being threaded, a simple set of signal handlers would not work 81 * very well for nwamd. Instead nwamd blocks signals in all but the 82 * signal handling thread at startup. 83 * 84 */ 85 86 /* 87 * In this file there are several utility functions which might otherwise 88 * belong in util.c, but since they are only called from main(), they can 89 * live here as static functions: 90 * - nlog set-up 91 * - daemonizing 92 * - looking up SMF(5) properties 93 * - signal handling 94 * - managing privileges(5) 95 */ 96 97 static void 98 start_logging(void) 99 { 100 openlog("nwamd", LOG_PID | LOG_NDELAY, LOG_DAEMON); 101 } 102 103 static void 104 daemonize(void) 105 { 106 pid_t pid; 107 108 /* 109 * A little bit of magic here. By the first fork+setsid, we 110 * disconnect from our current controlling terminal and become 111 * a session group leader. By forking again without calling 112 * setsid again, we make certain that we are not the session 113 * group leader and can never reacquire a controlling terminal. 114 */ 115 if ((pid = fork()) == (pid_t)-1) 116 pfail("fork 1 failed"); 117 if (pid != 0) { 118 (void) wait(NULL); 119 nlog(LOG_DEBUG, "child %ld exited, daemonizing", pid); 120 _exit(0); 121 } 122 if (setsid() == (pid_t)-1) 123 pfail("setsid"); 124 if ((pid = fork()) == (pid_t)-1) 125 pfail("fork 2 failed"); 126 if (pid != 0) { 127 _exit(0); 128 } 129 (void) chdir("/"); 130 (void) umask(022); 131 } 132 133 /* ARGSUSED */ 134 static void * 135 sighandler(void *arg) 136 { 137 uint64_t propval; 138 int sig; 139 uid_t uid = getuid(); 140 141 while (!shutting_down) { 142 sig = sigwait(&sigwaitset); 143 nlog(LOG_DEBUG, "signal %s caught", strsignal(sig)); 144 145 /* 146 * Signal handling is different if the Phase 1 manifest 147 * have not been yet been imported. The two if-statements 148 * below highlight this. Signals must be handled 149 * differently because there is no event handling thread 150 * and event queue. 151 * 152 * When manifest-import imports the Phase 1 manifest, it 153 * refreshes NWAM. The NWAM Phase 1 properties must be 154 * available. If not, NWAM receveid a signal too soon. 155 * "ncu_wait_time" is a Phase 1 SMF property that did not 156 * exist in Phase 0/0.5. 157 */ 158 if (uid == 0 && 159 nwamd_lookup_count_property(OUR_FMRI, OUR_PG, 160 OUR_NCU_WAIT_TIME_PROP_NAME, &propval) != 0) { 161 nlog(LOG_ERR, "WARN: Phase 1 properties not available. " 162 "Ignoring signal ..."); 163 continue; 164 } 165 166 /* 167 * The Phase 1 manifest has been imported. If the 168 * "version" property exists (it is added by nwamd upon 169 * upgrade to Phase 1), then it means that we have already 170 * successfully run nwam before. If it doesn't, then we 171 * arrived here just after the new manifest was imported. 172 * manifest-import refreshes nwam after the import. Exit 173 * nwamd so that svc.startd(1M) can start nwamd correctly 174 * as specified in the imported manifest. 175 */ 176 if (uid == 0 && 177 nwamd_lookup_count_property(OUR_FMRI, OUR_PG, 178 OUR_VERSION_PROP_NAME, &propval) != 0) { 179 if (sig == SIGHUP) { 180 pfail("WARN: Phase 1 properties available, " 181 "but NWAM has not been upgraded. " 182 "Exiting to let svc.startd restart NWAM"); 183 } else { 184 nlog(LOG_ERR, "WARN: Ignoring signal as NWAM " 185 "has not been upgraded yet"); 186 continue; 187 } 188 } 189 190 switch (sig) { 191 case SIGTHAW: 192 case SIGHUP: 193 /* 194 * Resumed from suspend or refresh. Clear up all 195 * objects so their states start from scratch; 196 * then refresh(). 197 */ 198 nwamd_fini_enms(); 199 nwamd_fini_ncus(); 200 nwamd_fini_locs(); 201 nwamd_refresh(); 202 break; 203 case SIGUSR1: 204 /* 205 * Undocumented "log ncu list" signal. 206 */ 207 nwamd_log_ncus(); 208 break; 209 case SIGTERM: 210 nlog(LOG_DEBUG, "%s received, shutting down", 211 strsignal(sig)); 212 graceful_shutdown(); 213 break; 214 default: 215 nlog(LOG_DEBUG, "unexpected signal %s received, " 216 "ignoring", strsignal(sig)); 217 break; 218 } 219 } 220 return (NULL); 221 } 222 223 static void 224 init_signalhandling(void) 225 { 226 pthread_attr_t attr; 227 pthread_t sighand; 228 int err; 229 230 (void) pthread_attr_init(&attr); 231 (void) pthread_attr_setdetachstate(&attr, PTHREAD_CREATE_DETACHED); 232 if (err = pthread_create(&sighand, &attr, sighandler, NULL)) { 233 nlog(LOG_ERR, "pthread_create system: %s", strerror(err)); 234 exit(EXIT_FAILURE); 235 } else { 236 nlog(LOG_DEBUG, "signal handler thread: %d", sighand); 237 } 238 (void) pthread_attr_destroy(&attr); 239 } 240 241 /* 242 * Construct the set of signals that we explicitly want to deal with. 243 * We block these while we're still single-threaded; this block will 244 * be inherited by all the threads we create. When we are ready to 245 * start handling signals, we will start the signal handling thread, 246 * which will sigwait() this same set of signals, and will thus receive 247 * and handle any that are sent to the process. 248 */ 249 static void 250 block_signals(void) 251 { 252 (void) sigemptyset(&sigwaitset); 253 (void) sigaddset(&sigwaitset, SIGHUP); 254 (void) sigaddset(&sigwaitset, SIGUSR1); 255 (void) sigaddset(&sigwaitset, SIGUSR2); 256 (void) sigaddset(&sigwaitset, SIGTERM); 257 (void) sigaddset(&sigwaitset, SIGTHAW); 258 (void) pthread_sigmask(SIG_BLOCK, &sigwaitset, &original_sigmask); 259 } 260 261 /* 262 * Look up nwamd property values and set daemon variables appropriately. 263 * This function will be called on startup and via the signal handling 264 * thread on receiving a HUP (which occurs when the nwam service is 265 * refreshed). 266 */ 267 static void 268 lookup_daemon_properties(void) 269 { 270 char *active_ncp_tmp; 271 char *scan_level_tmp; 272 273 (void) nwamd_lookup_boolean_property(OUR_FMRI, OUR_PG, 274 OUR_DEBUG_PROP_NAME, &debug); 275 (void) nwamd_lookup_boolean_property(OUR_FMRI, OUR_PG, 276 OUR_AUTOCONF_PROP_NAME, &wireless_autoconf); 277 (void) nwamd_lookup_boolean_property(OUR_FMRI, OUR_PG, 278 OUR_STRICT_BSSID_PROP_NAME, &wireless_strict_bssid); 279 280 (void) pthread_mutex_lock(&active_ncp_mutex); 281 if ((active_ncp_tmp = malloc(NWAM_MAX_NAME_LEN)) == NULL || 282 nwamd_lookup_string_property(OUR_FMRI, OUR_PG, 283 OUR_ACTIVE_NCP_PROP_NAME, active_ncp_tmp, NWAM_MAX_NAME_LEN) != 0) { 284 (void) strlcpy(active_ncp, NWAM_NCP_NAME_AUTOMATIC, 285 NWAM_MAX_NAME_LEN); 286 } else { 287 (void) strlcpy(active_ncp, active_ncp_tmp, NWAM_MAX_NAME_LEN); 288 } 289 (void) pthread_mutex_unlock(&active_ncp_mutex); 290 free(active_ncp_tmp); 291 292 if (nwamd_lookup_count_property(OUR_FMRI, OUR_PG, 293 OUR_CONDITION_CHECK_INTERVAL_PROP_NAME, 294 &condition_check_interval) != 0) 295 condition_check_interval = CONDITION_CHECK_INTERVAL_DEFAULT; 296 297 if ((scan_level_tmp = malloc(NWAM_MAX_NAME_LEN)) == NULL || 298 nwamd_lookup_string_property(OUR_FMRI, OUR_PG, 299 OUR_WIRELESS_SCAN_LEVEL_PROP_NAME, scan_level_tmp, 300 NWAM_MAX_NAME_LEN) != 0) { 301 wireless_scan_level = WIRELESS_SCAN_LEVEL_DEFAULT; 302 } else { 303 if (dladm_wlan_str2strength(scan_level_tmp, 304 &wireless_scan_level) != DLADM_STATUS_OK) 305 wireless_scan_level = DLADM_WLAN_STRENGTH_VERY_WEAK; 306 } 307 free(scan_level_tmp); 308 309 if (nwamd_lookup_count_property(OUR_FMRI, OUR_PG, 310 OUR_WIRELESS_SCAN_INTERVAL_PROP_NAME, &wireless_scan_interval) != 0) 311 wireless_scan_interval = WIRELESS_SCAN_INTERVAL_DEFAULT; 312 313 if (nwamd_lookup_count_property(OUR_FMRI, OUR_PG, 314 OUR_NCU_WAIT_TIME_PROP_NAME, &ncu_wait_time) != 0) 315 ncu_wait_time = NCU_WAIT_TIME_DEFAULT; 316 317 nlog(LOG_DEBUG, "Read daemon configuration properties."); 318 } 319 320 /* 321 * Re-read the SMF properties. 322 * Reset ncu priority group (since the NCUs will have to walk 323 * through their state machines again) and schedule a check 324 * Re-read objects from libnwam. 325 * Also, run condition checking for locations and ENMs. 326 */ 327 static void 328 nwamd_refresh(void) 329 { 330 lookup_daemon_properties(); 331 332 (void) pthread_mutex_lock(&active_ncp_mutex); 333 current_ncu_priority_group = INVALID_PRIORITY_GROUP; 334 (void) pthread_mutex_unlock(&active_ncp_mutex); 335 336 nwamd_init_ncus(); 337 nwamd_init_enms(); 338 nwamd_init_locs(); 339 340 nwamd_create_ncu_check_event(0); 341 nwamd_create_triggered_condition_check_event(0); 342 } 343 344 static void 345 graceful_shutdown(void) 346 { 347 nwamd_event_t event; 348 349 shutting_down = B_TRUE; 350 nwamd_event_sources_fini(); 351 nwamd_door_fini(); 352 nwamd_fini_enms(); 353 nwamd_fini_ncus(); 354 nwamd_fini_locs(); 355 356 event = nwamd_event_init_shutdown(); 357 if (event == NULL) 358 pfail("nwamd could not create shutdown event, exiting"); 359 nwamd_event_enqueue(event); 360 } 361 362 int 363 main(int argc, char *argv[]) 364 { 365 int c; 366 uint64_t version; 367 nwamd_event_t event; 368 dladm_status_t rc; 369 uid_t uid = getuid(); 370 371 /* 372 * Block the signals we care about (and which might cause us to 373 * exit based on default disposition) until we're ready to start 374 * handling them properly...see init_signalhandling() below. 375 */ 376 block_signals(); 377 378 /* 379 * In the first boot after upgrade, manifest-import hasn't run yet. 380 * Thus, the NWAM Phase 1 SMF properties are not available yet. In 381 * Phase 0/0.5, nwamd ran as root. Thus in this case, just 382 * daemonize() nwamd. When manifest-import imports the Phase 1 383 * manifest, NWAM is refreshed. Also, setup signal handling to 384 * catch the refresh signal. Kill nwamd then and let svc.startd(1M) 385 * start nwamd again (this time correctly as netadm). 386 */ 387 if (uid == 0) { 388 nlog(LOG_ERR, "Warning: Phase 1 properties not available yet"); 389 390 daemonize(); 391 init_signalhandling(); 392 (void) pause(); 393 394 return (EXIT_SUCCESS); 395 } 396 397 if (uid != UID_NETADM) { 398 /* 399 * This shouldn't happen normally. On upgrade the service might 400 * need reloading. 401 */ 402 pfail("nwamd should run as uid %d, not uid %d\n", UID_NETADM, 403 uid); 404 } 405 406 (void) setlocale(LC_ALL, ""); 407 (void) textdomain(TEXT_DOMAIN); 408 409 start_logging(); 410 nlog(LOG_INFO, "nwamd pid %d started", getpid()); 411 412 while ((c = getopt(argc, argv, "fs:")) != -1) { 413 switch (c) { 414 case 'f': 415 fg = B_TRUE; 416 break; 417 default: 418 nlog(LOG_ERR, "unrecognized option %c", 419 optopt); 420 break; 421 } 422 } 423 424 lookup_daemon_properties(); 425 426 if (!fg) 427 daemonize(); 428 429 /* 430 * The dladm handle *must* be opened before privileges are dropped. 431 * The device privilege requirements, which are stored in 432 * /etc/security/device_policy, may not be loaded yet, as that's 433 * done by svc:/system/filesystem/root. If they are not loaded, 434 * then one must have *all* privs in order to open /dev/dld, which 435 * is one of the steps performed in dladm_open(). 436 */ 437 rc = dladm_open(&dld_handle); 438 if (rc != DLADM_STATUS_OK) { 439 char status_str[DLADM_STRSIZE]; 440 (void) dladm_status2str(rc, status_str); 441 pfail("failed to open dladm handle: %s", status_str); 442 } 443 444 /* 445 * Handle upgrade of legacy config. Absence of version property 446 * (which did not exist in phase 0 or 0.5) is the indication that 447 * we need to upgrade to phase 1 (version 1). 448 */ 449 if (nwamd_lookup_count_property(OUR_FMRI, OUR_PG, OUR_VERSION_PROP_NAME, 450 &version) != 0) 451 nwamd_handle_upgrade(NULL); 452 453 /* 454 * Initialize lists handling internal representations of objects. 455 */ 456 nwamd_object_lists_init(); 457 458 /* 459 * Start the event handling thread before starting event sources, 460 * including signal handling, so we are ready to handle incoming 461 * events. 462 */ 463 nwamd_event_queue_init(); 464 465 init_signalhandling(); 466 467 /* Enqueue init event */ 468 event = nwamd_event_init_init(); 469 if (event == NULL) 470 pfail("nwamd could not create init event, exiting"); 471 nwamd_event_enqueue(event); 472 /* 473 * Collect initial user configuration. 474 */ 475 476 /* 477 * Walk the physical interfaces and update the Automatic NCP to 478 * contain the IP and link NCUs for the interfaces that exist in 479 * the system. 480 */ 481 nwamd_walk_physical_configuration(); 482 483 /* 484 * We should initialize the door at the point that we can respond to 485 * user requests about the system but before we start actually process 486 * state changes or effecting the system. 487 */ 488 nwamd_door_init(); 489 490 /* 491 * Initialize data objects. 492 * 493 * Enabling an NCP involves refreshing nwam, which initializes the 494 * objects (ncu, enm, loc, known wlan). Thus, no need to 495 * explicitly initialize these objects here. The refresh also 496 * enqueues and NCU activation checking event. Location and ENM 497 * condition checking are triggered by changes in NCU states. 498 */ 499 (void) pthread_mutex_lock(&active_ncp_mutex); 500 if (nwamd_ncp_action(active_ncp, NWAM_ACTION_ENABLE) != 0) 501 pfail("Initial enable failed for active NCP %s", active_ncp); 502 (void) pthread_mutex_unlock(&active_ncp_mutex); 503 504 /* 505 * Enqueue an event to start periodic checking of activation conditions. 506 */ 507 nwamd_create_timed_condition_check_event(); 508 509 nwamd_drop_unneeded_privs(); 510 /* 511 * Start the various agents (hooks on fds, threads) which collect events 512 */ 513 nwamd_event_sources_init(); 514 515 /* 516 * nwamd_event_handler() only returns on shutdown. 517 */ 518 nwamd_event_handler(); 519 520 dladm_close(dld_handle); 521 522 return (EXIT_SUCCESS); 523 } 524