xref: /illumos-gate/usr/src/lib/libnsl/rpc/svc_generic.c (revision 5d0bc3ededb82d77f7c33d8f58e517a837ba5140)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 
22 /*
23  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 /*	Copyright (c) 1988 AT&T */
28 /*	All Rights Reserved   */
29 
30 #pragma ident	"%Z%%M%	%I%	%E% SMI"
31 
32 /*
33  * svc_generic.c, Server side for RPC.
34  *
35  */
36 
37 #include "mt.h"
38 #include <stdlib.h>
39 #include <sys/socket.h>
40 #include <netinet/in.h>
41 #include <netinet/tcp.h>
42 #include <netinet/udp.h>
43 #include <inttypes.h>
44 #include "rpc_mt.h"
45 #include <stdio.h>
46 #include <rpc/rpc.h>
47 #include <sys/types.h>
48 #include <errno.h>
49 #include <syslog.h>
50 #include <rpc/nettype.h>
51 #include <malloc.h>
52 #include <string.h>
53 #include <stropts.h>
54 #include <tsol/label.h>
55 #include <nfs/nfs.h>
56 #include <nfs/nfs_acl.h>
57 #include <rpcsvc/mount.h>
58 #include <rpcsvc/nsm_addr.h>
59 #include <rpcsvc/rquota.h>
60 #include <rpcsvc/sm_inter.h>
61 #include <rpcsvc/nlm_prot.h>
62 
63 extern int __svc_vc_setflag(SVCXPRT *, int);
64 
65 extern SVCXPRT *svc_dg_create_private(int, uint_t, uint_t);
66 extern SVCXPRT *svc_vc_create_private(int, uint_t, uint_t);
67 extern SVCXPRT *svc_fd_create_private(int, uint_t, uint_t);
68 
69 extern bool_t __svc_add_to_xlist(SVCXPRT_LIST **, SVCXPRT *, mutex_t *);
70 extern void __svc_free_xlist(SVCXPRT_LIST **, mutex_t *);
71 
72 extern bool_t __rpc_try_doors(const char *, bool_t *);
73 
74 /*
75  * The highest level interface for server creation.
76  * It tries for all the nettokens in that particular class of token
77  * and returns the number of handles it can create and/or find.
78  *
79  * It creates a link list of all the handles it could create.
80  * If svc_create() is called multiple times, it uses the handle
81  * created earlier instead of creating a new handle every time.
82  */
83 
84 /* VARIABLES PROTECTED BY xprtlist_lock: xprtlist */
85 
86 SVCXPRT_LIST *_svc_xprtlist = NULL;
87 extern mutex_t xprtlist_lock;
88 
89 static SVCXPRT * svc_tli_create_common(int, const struct netconfig *,
90     const struct t_bind *, uint_t, uint_t, boolean_t);
91 
92 boolean_t
93 is_multilevel(rpcprog_t prognum)
94 {
95 	/* This is a list of identified multilevel service provider */
96 	if ((prognum == MOUNTPROG) || (prognum == NFS_PROGRAM) ||
97 	    (prognum == NFS_ACL_PROGRAM) || (prognum == NLM_PROG) ||
98 	    (prognum == NSM_ADDR_PROGRAM) || (prognum == RQUOTAPROG) ||
99 	    (prognum == SM_PROG))
100 		return (B_TRUE);
101 
102 	return (B_FALSE);
103 }
104 
105 void
106 __svc_free_xprtlist(void)
107 {
108 	__svc_free_xlist(&_svc_xprtlist, &xprtlist_lock);
109 }
110 
111 int
112 svc_create(void (*dispatch)(), const rpcprog_t prognum, const rpcvers_t versnum,
113 							const char *nettype)
114 {
115 	SVCXPRT_LIST *l;
116 	int num = 0;
117 	SVCXPRT *xprt;
118 	struct netconfig *nconf;
119 	void *handle;
120 	bool_t try_others;
121 
122 	/*
123 	 * Check if service should register over doors transport.
124 	 */
125 	if (__rpc_try_doors(nettype, &try_others)) {
126 		if (svc_door_create(dispatch, prognum, versnum, 0) == NULL)
127 			(void) syslog(LOG_ERR,
128 				"svc_create: could not register over doors");
129 		else
130 			num++;
131 	}
132 	if (!try_others)
133 		return (num);
134 	if ((handle = __rpc_setconf((char *)nettype)) == NULL) {
135 		(void) syslog(LOG_ERR, "svc_create: unknown protocol");
136 		return (0);
137 	}
138 	while (nconf = __rpc_getconf(handle)) {
139 		(void) mutex_lock(&xprtlist_lock);
140 		for (l = _svc_xprtlist; l; l = l->next) {
141 			if (strcmp(l->xprt->xp_netid, nconf->nc_netid) == 0) {
142 				/* Found an old one, use it */
143 				(void) rpcb_unset(prognum, versnum, nconf);
144 				if (svc_reg(l->xprt, prognum, versnum,
145 					dispatch, nconf) == FALSE)
146 					(void) syslog(LOG_ERR,
147 		"svc_create: could not register prog %d vers %d on %s",
148 					prognum, versnum, nconf->nc_netid);
149 				else
150 					num++;
151 				break;
152 			}
153 		}
154 		(void) mutex_unlock(&xprtlist_lock);
155 		if (l == NULL) {
156 			/* It was not found. Now create a new one */
157 			xprt = svc_tp_create(dispatch, prognum, versnum, nconf);
158 			if (xprt) {
159 				if (!__svc_add_to_xlist(&_svc_xprtlist, xprt,
160 							&xprtlist_lock)) {
161 					(void) syslog(LOG_ERR,
162 						"svc_create: no memory");
163 					return (0);
164 				}
165 				num++;
166 			}
167 		}
168 	}
169 	__rpc_endconf(handle);
170 	/*
171 	 * In case of num == 0; the error messages are generated by the
172 	 * underlying layers; and hence not needed here.
173 	 */
174 	return (num);
175 }
176 
177 /*
178  * The high level interface to svc_tli_create().
179  * It tries to create a server for "nconf" and registers the service
180  * with the rpcbind. It calls svc_tli_create();
181  */
182 SVCXPRT *
183 svc_tp_create(void (*dispatch)(), const rpcprog_t prognum,
184 			const rpcvers_t versnum, const struct netconfig *nconf)
185 {
186 	SVCXPRT *xprt;
187 	boolean_t anon_mlp = B_FALSE;
188 
189 	if (nconf == NULL) {
190 		(void) syslog(LOG_ERR,
191 	"svc_tp_create: invalid netconfig structure for prog %d vers %d",
192 				prognum, versnum);
193 		return (NULL);
194 	}
195 
196 	/* Some programs need to allocate MLP for multilevel services */
197 	if (is_system_labeled() && is_multilevel(prognum))
198 		anon_mlp = B_TRUE;
199 	xprt = svc_tli_create_common(RPC_ANYFD, nconf, NULL, 0, 0, anon_mlp);
200 	if (xprt == NULL)
201 		return (NULL);
202 	(void) rpcb_unset(prognum, versnum, (struct netconfig *)nconf);
203 	if (svc_reg(xprt, prognum, versnum, dispatch, nconf) == FALSE) {
204 		(void) syslog(LOG_ERR,
205 		"svc_tp_create: Could not register prog %d vers %d on %s",
206 				prognum, versnum, nconf->nc_netid);
207 		SVC_DESTROY(xprt);
208 		return (NULL);
209 	}
210 	return (xprt);
211 }
212 
213 SVCXPRT *
214 svc_tli_create(const int fd, const struct netconfig *nconf,
215     const struct t_bind *bindaddr, const uint_t sendsz, const uint_t recvsz)
216 {
217 	return (svc_tli_create_common(fd, nconf, bindaddr, sendsz, recvsz, 0));
218 }
219 
220 /*
221  * If fd is RPC_ANYFD, then it opens a fd for the given transport
222  * provider (nconf cannot be NULL then). If the t_state is T_UNBND and
223  * bindaddr is NON-NULL, it performs a t_bind using the bindaddr. For
224  * NULL bindadr and Connection oriented transports, the value of qlen
225  * is set arbitrarily.
226  *
227  * If sendsz or recvsz are zero, their default values are chosen.
228  */
229 SVCXPRT *
230 svc_tli_create_common(const int ofd, const struct netconfig *nconf,
231 	const struct t_bind *bindaddr, const uint_t sendsz,
232 	const uint_t recvsz, boolean_t mlp_flag)
233 {
234 	SVCXPRT *xprt = NULL;		/* service handle */
235 	struct t_info tinfo;		/* transport info */
236 	struct t_bind *tres = NULL;	/* bind info */
237 	bool_t madefd = FALSE;		/* whether fd opened here  */
238 	int state;			/* state of the transport provider */
239 	int fd = ofd;
240 
241 	if (fd == RPC_ANYFD) {
242 		if (nconf == NULL) {
243 			(void) syslog(LOG_ERR,
244 			    "svc_tli_create: invalid netconfig");
245 			return (NULL);
246 		}
247 		fd = t_open(nconf->nc_device, O_RDWR, &tinfo);
248 		if (fd == -1) {
249 			char errorstr[100];
250 
251 			__tli_sys_strerror(errorstr, sizeof (errorstr),
252 					t_errno, errno);
253 			(void) syslog(LOG_ERR,
254 			"svc_tli_create: could not open connection for %s: %s",
255 					nconf->nc_netid, errorstr);
256 			return (NULL);
257 		}
258 		madefd = TRUE;
259 		state = T_UNBND;
260 	} else {
261 		/*
262 		 * It is an open descriptor. Sync it & get the transport info.
263 		 */
264 		if ((state = t_sync(fd)) == -1) {
265 			char errorstr[100];
266 
267 			__tli_sys_strerror(errorstr, sizeof (errorstr),
268 					t_errno, errno);
269 			(void) syslog(LOG_ERR,
270 		"svc_tli_create: could not do t_sync: %s",
271 					errorstr);
272 			return (NULL);
273 		}
274 		if (t_getinfo(fd, &tinfo) == -1) {
275 			char errorstr[100];
276 
277 			__tli_sys_strerror(errorstr, sizeof (errorstr),
278 					t_errno, errno);
279 			(void) syslog(LOG_ERR,
280 		"svc_tli_create: could not get transport information: %s",
281 				    errorstr);
282 			return (NULL);
283 		}
284 		/* Enable options of returning the ip's for udp */
285 		if (nconf) {
286 		    int ret = 0;
287 		    if (strcmp(nconf->nc_netid, "udp6") == 0) {
288 			ret = __rpc_tli_set_options(fd, IPPROTO_IPV6,
289 					IPV6_RECVPKTINFO, 1);
290 			if (ret < 0) {
291 			    char errorstr[100];
292 
293 			    __tli_sys_strerror(errorstr, sizeof (errorstr),
294 					t_errno, errno);
295 			    (void) syslog(LOG_ERR,
296 				"svc_tli_create: IPV6_RECVPKTINFO(1): %s",
297 					errorstr);
298 			    return (NULL);
299 			}
300 		    } else if (strcmp(nconf->nc_netid, "udp") == 0) {
301 			ret = __rpc_tli_set_options(fd, IPPROTO_IP,
302 					IP_RECVDSTADDR, 1);
303 			if (ret < 0) {
304 			    char errorstr[100];
305 
306 			    __tli_sys_strerror(errorstr, sizeof (errorstr),
307 					t_errno, errno);
308 			    (void) syslog(LOG_ERR,
309 				"svc_tli_create: IP_RECVDSTADDR(1): %s",
310 					errorstr);
311 			    return (NULL);
312 			}
313 		    }
314 		}
315 	}
316 
317 	/*
318 	 * If the fd is unbound, try to bind it.
319 	 * In any case, try to get its bound info in tres
320 	 */
321 /* LINTED pointer alignment */
322 	tres = (struct t_bind *)t_alloc(fd, T_BIND, T_ADDR);
323 	if (tres == NULL) {
324 		(void) syslog(LOG_ERR, "svc_tli_create: No memory!");
325 		goto freedata;
326 	}
327 
328 	switch (state) {
329 		bool_t tcp, exclbind;
330 	case T_UNBND:
331 		/* If this is a labeled system, then ask for an MLP */
332 		if (is_system_labeled() &&
333 		    (strcmp(nconf->nc_protofmly, NC_INET) == 0 ||
334 		    strcmp(nconf->nc_protofmly, NC_INET6) == 0)) {
335 			(void) __rpc_tli_set_options(fd, SOL_SOCKET,
336 			    SO_RECVUCRED, 1);
337 			if (mlp_flag)
338 				(void) __rpc_tli_set_options(fd, SOL_SOCKET,
339 				    SO_ANON_MLP, 1);
340 		}
341 
342 		/*
343 		 * {TCP,UDP}_EXCLBIND has the following properties
344 		 *    - an fd bound to port P via IPv4 will prevent an IPv6
345 		 *    bind to port P (and vice versa)
346 		 *    - an fd bound to a wildcard IP address for port P will
347 		 *    prevent a more specific IP address bind to port P
348 		 *    (see {tcp,udp}.c for details)
349 		 *
350 		 * We use the latter property to prevent hijacking of RPC
351 		 * services that reside at non-privileged ports.
352 		 */
353 		tcp = nconf ? (strcmp(nconf->nc_proto, NC_TCP) == 0) : 0;
354 		if (nconf &&
355 		    (tcp || (strcmp(nconf->nc_proto, NC_UDP) == 0)) &&
356 		    rpc_control(__RPC_SVC_EXCLBIND_GET, &exclbind)) {
357 			if (exclbind) {
358 				if (__rpc_tli_set_options(fd,
359 					tcp ? IPPROTO_TCP : IPPROTO_UDP,
360 					tcp ? TCP_EXCLBIND : UDP_EXCLBIND,
361 							1) < 0) {
362 					syslog(LOG_ERR,
363 			    "svc_tli_create: can't set EXCLBIND [netid='%s']",
364 					    nconf->nc_netid);
365 					goto freedata;
366 				}
367 			}
368 		}
369 		if (bindaddr) {
370 			if (t_bind(fd, (struct t_bind *)bindaddr,
371 								tres) == -1) {
372 				char errorstr[100];
373 
374 				__tli_sys_strerror(errorstr, sizeof (errorstr),
375 						t_errno, errno);
376 				(void) syslog(LOG_ERR,
377 					"svc_tli_create: could not bind: %s",
378 					    errorstr);
379 				goto freedata;
380 			}
381 			/*
382 			 * Should compare the addresses only if addr.len
383 			 * was non-zero
384 			 */
385 			if (bindaddr->addr.len &&
386 				(memcmp(bindaddr->addr.buf, tres->addr.buf,
387 					(int)tres->addr.len) != 0)) {
388 				(void) syslog(LOG_ERR,
389 		"svc_tli_create: could not bind to requested address: %s",
390 						"address mismatch");
391 				goto freedata;
392 			}
393 		} else {
394 			tres->qlen = 64; /* Chosen Arbitrarily */
395 			tres->addr.len = 0;
396 			if (t_bind(fd, tres, tres) == -1) {
397 				char errorstr[100];
398 
399 				__tli_sys_strerror(errorstr, sizeof (errorstr),
400 						t_errno, errno);
401 				(void) syslog(LOG_ERR,
402 					"svc_tli_create: could not bind: %s",
403 						errorstr);
404 				goto freedata;
405 			}
406 		}
407 
408 		/* Enable options of returning the ip's for udp */
409 		if (nconf) {
410 		    int ret = 0;
411 		    if (strcmp(nconf->nc_netid, "udp6") == 0) {
412 			ret = __rpc_tli_set_options(fd, IPPROTO_IPV6,
413 					IPV6_RECVPKTINFO, 1);
414 			if (ret < 0) {
415 			    char errorstr[100];
416 
417 			    __tli_sys_strerror(errorstr, sizeof (errorstr),
418 					t_errno, errno);
419 			    (void) syslog(LOG_ERR,
420 				"svc_tli_create: IPV6_RECVPKTINFO(2): %s",
421 					errorstr);
422 			    goto freedata;
423 			}
424 		    } else if (strcmp(nconf->nc_netid, "udp") == 0) {
425 			ret = __rpc_tli_set_options(fd, IPPROTO_IP,
426 					IP_RECVDSTADDR, 1);
427 			if (ret < 0) {
428 			    char errorstr[100];
429 
430 			    __tli_sys_strerror(errorstr, sizeof (errorstr),
431 					t_errno, errno);
432 			    (void) syslog(LOG_ERR,
433 				"svc_tli_create: IP_RECVDSTADDR(2): %s",
434 					errorstr);
435 			    goto freedata;
436 			}
437 		    }
438 		}
439 		break;
440 
441 	case T_IDLE:
442 		if (bindaddr) {
443 			/* Copy the entire stuff in tres */
444 			if (tres->addr.maxlen < bindaddr->addr.len) {
445 				(void) syslog(LOG_ERR,
446 				"svc_tli_create: illegal netbuf length");
447 				goto freedata;
448 			}
449 			tres->addr.len = bindaddr->addr.len;
450 			(void) memcpy(tres->addr.buf, bindaddr->addr.buf,
451 					(int)tres->addr.len);
452 		} else
453 			if (t_getname(fd, &(tres->addr), LOCALNAME) == -1)
454 				tres->addr.len = 0;
455 		break;
456 	case T_INREL:
457 		(void) t_rcvrel(fd);
458 		(void) t_sndrel(fd);
459 		(void) syslog(LOG_ERR,
460 			"svc_tli_create: other side wants to\
461 release connection");
462 		goto freedata;
463 
464 	case T_INCON:
465 		/* Do nothing here. Assume this is handled in rendezvous */
466 		break;
467 	case T_DATAXFER:
468 		/*
469 		 * This takes care of the case where a fd
470 		 * is passed on which a connection has already
471 		 * been accepted.
472 		 */
473 		if (t_getname(fd, &(tres->addr), LOCALNAME) == -1)
474 			tres->addr.len = 0;
475 		break;
476 	default:
477 		(void) syslog(LOG_ERR,
478 		    "svc_tli_create: connection in a wierd state (%d)", state);
479 		goto freedata;
480 	}
481 
482 	/*
483 	 * call transport specific function.
484 	 */
485 	switch (tinfo.servtype) {
486 		case T_COTS_ORD:
487 		case T_COTS:
488 			if (state == T_DATAXFER)
489 				xprt = svc_fd_create_private(fd, sendsz,
490 						recvsz);
491 			else
492 				xprt = svc_vc_create_private(fd, sendsz,
493 						recvsz);
494 			if (!nconf || !xprt)
495 				break;
496 			if ((tinfo.servtype == T_COTS_ORD) &&
497 				(state != T_DATAXFER) &&
498 				(strcmp(nconf->nc_protofmly, "inet") == 0))
499 				(void) __svc_vc_setflag(xprt, TRUE);
500 			break;
501 		case T_CLTS:
502 			xprt = svc_dg_create_private(fd, sendsz, recvsz);
503 			break;
504 		default:
505 			(void) syslog(LOG_ERR,
506 			    "svc_tli_create: bad service type");
507 			goto freedata;
508 	}
509 	if (xprt == NULL)
510 		/*
511 		 * The error messages here are spitted out by the lower layers:
512 		 * svc_vc_create(), svc_fd_create() and svc_dg_create().
513 		 */
514 		goto freedata;
515 
516 	/* fill in the other xprt information */
517 
518 	/* Assign the local bind address */
519 	xprt->xp_ltaddr = tres->addr;
520 	/* Fill in type of service */
521 	xprt->xp_type = tinfo.servtype;
522 	tres->addr.buf = NULL;
523 	(void) t_free((char *)tres, T_BIND);
524 	tres = NULL;
525 
526 	xprt->xp_rtaddr.len = 0;
527 	xprt->xp_rtaddr.maxlen = __rpc_get_a_size(tinfo.addr);
528 
529 	/* Allocate space for the remote bind info */
530 	if ((xprt->xp_rtaddr.buf = malloc(xprt->xp_rtaddr.maxlen)) == NULL) {
531 		(void) syslog(LOG_ERR, "svc_tli_create: No memory!");
532 		goto freedata;
533 	}
534 
535 	if (nconf) {
536 		xprt->xp_netid = strdup(nconf->nc_netid);
537 		if (xprt->xp_netid == NULL) {
538 			if (xprt->xp_rtaddr.buf)
539 				free(xprt->xp_rtaddr.buf);
540 			syslog(LOG_ERR, "svc_tli_create: strdup failed!");
541 			goto freedata;
542 		}
543 		xprt->xp_tp = strdup(nconf->nc_device);
544 		if (xprt->xp_tp == NULL) {
545 			if (xprt->xp_rtaddr.buf)
546 				free(xprt->xp_rtaddr.buf);
547 			if (xprt->xp_netid)
548 				free(xprt->xp_netid);
549 			syslog(LOG_ERR, "svc_tli_create: strdup failed!");
550 			goto freedata;
551 		}
552 	}
553 
554 /*
555  *	if (madefd && (tinfo.servtype == T_CLTS))
556  *		(void) ioctl(fd, I_POP, NULL);
557  */
558 	xprt_register(xprt);
559 	return (xprt);
560 
561 freedata:
562 	if (madefd)
563 		(void) t_close(fd);
564 	if (tres)
565 		(void) t_free((char *)tres, T_BIND);
566 	if (xprt) {
567 		if (!madefd) /* so that svc_destroy doesnt close fd */
568 			xprt->xp_fd = RPC_ANYFD;
569 		SVC_DESTROY(xprt);
570 	}
571 	return (NULL);
572 }
573