/* * Copyright 2018 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * main.c - main function */ #include #include #include #include #include #include #include #include #include // For MARK_UNSET. #include "clatd.h" #include "common.h" #include "config.h" #include "logging.h" #include "setif.h" #define DEVICEPREFIX "v4-" /* function: stop_loop * signal handler: stop the event loop */ static void stop_loop() { running = 0; }; /* function: print_help * in case the user is running this on the command line */ void print_help() { printf("android-clat arguments:\n"); printf("-i [uplink interface]\n"); printf("-p [plat prefix]\n"); printf("-4 [IPv4 address]\n"); printf("-6 [IPv6 address]\n"); printf("-m [socket mark]\n"); printf("-t [tun file descriptor number]\n"); } /* function: main * allocate and setup the tun device, then run the event loop */ int main(int argc, char **argv) { struct tun_data tunnel; int opt; char *uplink_interface = NULL, *plat_prefix = NULL, *mark_str = NULL; char *v4_addr = NULL, *v6_addr = NULL, *tunfd_str = NULL; uint32_t mark = MARK_UNSET; unsigned len; while ((opt = getopt(argc, argv, "i:p:4:6:m:t:h")) != -1) { switch (opt) { case 'i': uplink_interface = optarg; break; case 'p': plat_prefix = optarg; break; case '4': v4_addr = optarg; break; case '6': v6_addr = optarg; break; case 'm': mark_str = optarg; break; case 't': tunfd_str = optarg; break; case 'h': print_help(); exit(0); default: logmsg(ANDROID_LOG_FATAL, "Unknown option -%c. Exiting.", (char)optopt); exit(1); } } if (uplink_interface == NULL) { logmsg(ANDROID_LOG_FATAL, "clatd called without an interface"); exit(1); } if (mark_str != NULL && !parse_unsigned(mark_str, &mark)) { logmsg(ANDROID_LOG_FATAL, "invalid mark %s", mark_str); exit(1); } if (tunfd_str != NULL && !parse_int(tunfd_str, &tunnel.fd4)) { logmsg(ANDROID_LOG_FATAL, "invalid tunfd %s", tunfd_str); exit(1); } if (!tunnel.fd4) { logmsg(ANDROID_LOG_FATAL, "no tunfd specified on commandline."); exit(1); } len = snprintf(tunnel.device4, sizeof(tunnel.device4), "%s%s", DEVICEPREFIX, uplink_interface); if (len >= sizeof(tunnel.device4)) { logmsg(ANDROID_LOG_FATAL, "interface name too long '%s'", tunnel.device4); exit(1); } logmsg(ANDROID_LOG_INFO, "Starting clat version %s on %s mark=%s plat=%s v4=%s v6=%s", CLATD_VERSION, uplink_interface, mark_str ? mark_str : "(none)", plat_prefix ? plat_prefix : "(none)", v4_addr ? v4_addr : "(none)", v6_addr ? v6_addr : "(none)"); // run under a regular user but keep needed capabilities drop_root_but_keep_caps(); // open our raw sockets before dropping privs open_sockets(&tunnel, mark); // keeps only admin capability set_capability(1 << CAP_NET_ADMIN); configure_interface(uplink_interface, plat_prefix, v4_addr, v6_addr, &tunnel, mark); // Drop all remaining capabilities. set_capability(0); // Loop until someone sends us a signal or brings down the tun interface. if (signal(SIGTERM, stop_loop) == SIG_ERR) { logmsg(ANDROID_LOG_FATAL, "sigterm handler failed: %s", strerror(errno)); exit(1); } event_loop(&tunnel); logmsg(ANDROID_LOG_INFO, "Shutting down clat on %s", uplink_interface); del_anycast_address(tunnel.write_fd6, &Global_Clatd_Config.ipv6_local_subnet); close(tunnel.write_fd6); close(tunnel.read_fd6); close(tunnel.fd4); if (running) { logmsg(ANDROID_LOG_INFO, "Clatd on %s waiting for SIGTERM", uplink_interface); while (running) sleep(60); logmsg(ANDROID_LOG_INFO, "Clatd on %s received SIGTERM", uplink_interface); } else { logmsg(ANDROID_LOG_INFO, "Clatd on %s already received SIGTERM", uplink_interface); } return 0; }