-/* @(#) $Id$ */
-
/* Copyright (C) 2009 Trend Micro Inc.
* All right reserved.
*
* Foundation
*/
-
-
#include "shared.h"
#include "remoted.h"
+/* Prototypes */
+static void help_remoted(void) __attribute__((noreturn));
+
+
+/* Print help statement */
+static void help_remoted()
+{
+ print_header();
+ print_out(" %s: -[Vhdtf] [-u user] [-g group] [-c config] [-D dir]", ARGV0);
+ print_out(" -V Version and license message");
+ print_out(" -h This help message");
+ print_out(" -d Execute in debug mode. This parameter");
+ print_out(" can be specified multiple times");
+ print_out(" to increase the debug level.");
+ print_out(" -t Test configuration");
+ print_out(" -f Run in foreground");
+ print_out(" -u <user> User to run as (default: %s)", REMUSER);
+ print_out(" -g <group> Group to run as (default: %s)", GROUPGLOBAL);
+ print_out(" -c <config> Configuration file to use (default: %s)", DEFAULTCPATH);
+ print_out(" -D <dir> Directory to chroot into (default: %s)", DEFAULTDIR);
+ print_out(" ");
+ exit(1);
+}
int main(int argc, char **argv)
{
- int i = 0,c = 0;
- int uid = 0, gid = 0;
- int test_config = 0,run_foreground = 0;
-
- char *cfg = DEFAULTCPATH;
- char *dir = DEFAULTDIR;
- char *user = REMUSER;
- char *group = GROUPGLOBAL;
-
-
- /* Setting the name -- must be done ASAP */
+ int i = 0, c = 0;
+ uid_t uid;
+ gid_t gid;
+ int debug_level = 0;
+ int test_config = 0, run_foreground = 0;
+
+ const char *cfg = DEFAULTCPATH;
+ const char *dir = DEFAULTDIR;
+ const char *user = REMUSER;
+ const char *group = GROUPGLOBAL;
+
+ /* Set the name */
OS_SetName(ARGV0);
-
- while((c = getopt(argc, argv, "Vdthfu:g:c:D:")) != -1){
- switch(c){
+ while ((c = getopt(argc, argv, "Vdthfu:g:c:D:")) != -1) {
+ switch (c) {
case 'V':
print_version();
break;
case 'h':
- help(ARGV0);
+ help_remoted();
break;
case 'd':
nowDebug();
+ debug_level = 1;
break;
case 'f':
run_foreground = 1;
break;
case 'u':
- if(!optarg)
- ErrorExit("%s: -u needs an argument",ARGV0);
+ if (!optarg) {
+ ErrorExit("%s: -u needs an argument", ARGV0);
+ }
user = optarg;
break;
case 'g':
- if(!optarg)
- ErrorExit("%s: -g needs an argument",ARGV0);
+ if (!optarg) {
+ ErrorExit("%s: -g needs an argument", ARGV0);
+ }
group = optarg;
- break;
+ break;
case 't':
- test_config = 1;
+ test_config = 1;
break;
case 'c':
- if (!optarg)
+ if (!optarg) {
ErrorExit("%s: -c need an argument", ARGV0);
+ }
cfg = optarg;
break;
case 'D':
- if(!optarg)
- ErrorExit("%s: -D needs an argument",ARGV0);
+ if (!optarg) {
+ ErrorExit("%s: -D needs an argument", ARGV0);
+ }
dir = optarg;
+ break;
+ default:
+ help_remoted();
+ break;
+ }
+ }
+
+ /* Check current debug_level
+ * Command line setting takes precedence
+ */
+ if (debug_level == 0) {
+ /* Get debug level */
+ debug_level = getDefine_Int("remoted", "debug", 0, 2);
+ while (debug_level != 0) {
+ nowDebug();
+ debug_level--;
}
}
- debug1(STARTED_MSG,ARGV0);
-
-
+ debug1(STARTED_MSG, ARGV0);
+
/* Return 0 if not configured */
- if(RemotedConfig(cfg, &logr) < 0)
- {
+ if (RemotedConfig(cfg, &logr) < 0) {
ErrorExit(CONFIG_ERROR, ARGV0, cfg);
}
-
/* Exit if test_config is set */
- if(test_config)
+ if (test_config) {
+ exit(0);
+ }
+
+ if (logr.conn == NULL) {
+ /* Not configured */
exit(0);
+ }
+
+ /* Don't exit when client.keys empty (if set) */
+ if (getDefine_Int("remoted", "pass_empty_keyfile", 0, 1)) {
+ OS_PassEmptyKeyfile();
+ }
+
-
/* Check if the user and group given are valid */
uid = Privsep_GetUser(user);
gid = Privsep_GetGroup(group);
- if((uid < 0)||(gid < 0))
+ if (uid == (uid_t) - 1 || gid == (gid_t) - 1) {
ErrorExit(USER_ERROR, ARGV0, user, group);
+ }
+ /* Setup random */
+ srandom_init();
/* pid before going daemon */
i = getpid();
-
- if(!run_foreground)
- {
+ if (!run_foreground) {
nowDaemon();
goDaemon();
}
-
- /* Setting new group */
- if(Privsep_SetGroup(gid) < 0)
- ErrorExit(SETGID_ERROR, ARGV0, group);
-
- /* Going on chroot */
- if(Privsep_Chroot(dir) < 0)
- ErrorExit(CHROOT_ERROR,ARGV0,dir);
-
+ /* Set new group */
+ if (Privsep_SetGroup(gid) < 0) {
+ ErrorExit(SETGID_ERROR, ARGV0, group, errno, strerror(errno));
+ }
+ /* chroot */
+ if (Privsep_Chroot(dir) < 0) {
+ ErrorExit(CHROOT_ERROR, ARGV0, dir, errno, strerror(errno));
+ }
nowChroot();
+ /* Start the signal manipulation */
+ StartSIG(ARGV0);
- /* Starting the signal manipulation */
- StartSIG(ARGV0);
-
-
- /* Creating some randoness */
- #ifdef __OpenBSD__
- srandomdev();
- #else
- srandom( time(0) + getpid()+ i);
- #endif
-
random();
-
/* Start up message */
verbose(STARTUP_MSG, ARGV0, (int)getpid());
-
- /* Really starting the program. */
- i = 0;
- while(logr.conn[i] != 0)
- {
- /* Forking for each connection handler */
- if(fork() == 0)
- {
+ /* Really start the program */
+ i = 0;
+ while (logr.conn[i] != 0) {
+ /* Fork for each connection handler */
+ if (fork() == 0) {
/* On the child */
- debug1("%s: DEBUG: Forking remoted: '%d'.",ARGV0, i);
+ debug1("%s: DEBUG: Forking remoted: '%d'.", ARGV0, i);
HandleRemote(i, uid);
- }
- else
- {
+ } else {
i++;
continue;
}
}
-
- /* Done over here */
- return(0);
+ return (0);
}
-
-/* EOF */