source: trunk/src/samhain.c@ 39

Last change on this file since 39 was 34, checked in by rainer, 19 years ago

Code cleanup and minor fixes
File size: 45.9 KB
RevLine 
[1]1/* SAMHAIN file system integrity testing */
2/* Copyright (C) 1999, 2000 Rainer Wichmann */
3/* */
4/* This program is free software; you can redistribute it */
5/* and/or modify */
6/* it under the terms of the GNU General Public License as */
7/* published by */
8/* the Free Software Foundation; either version 2 of the License, or */
9/* (at your option) any later version. */
10/* */
11/* This program is distributed in the hope that it will be useful, */
12/* but WITHOUT ANY WARRANTY; without even the implied warranty of */
13/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the */
14/* GNU General Public License for more details. */
15/* */
16/* You should have received a copy of the GNU General Public License */
17/* along with this program; if not, write to the Free Software */
18/* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
19
20#include "config_xor.h"
21
22
23#include <stdio.h>
24#include <stdlib.h>
25#include <string.h>
26#include <unistd.h>
27#include <fcntl.h>
28
29/* samhainctl */
30#include <sys/types.h>
31#include <sys/stat.h>
32#include <sys/wait.h>
33#include <signal.h>
34#include <errno.h>
35
36
37#if TIME_WITH_SYS_TIME
38#include <sys/time.h>
39#include <time.h>
40#else
41#if HAVE_SYS_TIME_H
42#include <sys/time.h>
43#else
44#include <time.h>
45#endif
46#endif
47
48#ifdef HAVE_MEMORY_H
49#include <memory.h>
50#endif
51
52#ifdef HAVE_SETPRIORITY
53#include <sys/resource.h>
54#endif
55
56#ifndef HAVE_LSTAT
57#define lstat stat
58#endif
59
60/* for FLT_EPSILON
61 */
62#include <float.h>
63
64#include "samhain.h"
65#include "sh_files.h"
66#include "sh_utils.h"
67#include "sh_error.h"
68#include "sh_unix.h"
69#include "sh_getopt.h"
70#include "sh_readconf.h"
71#include "sh_hash.h"
72
73#include "sh_mail.h"
74
75#include "sh_tiger.h"
76#include "sh_gpg.h"
77#include "sh_mem.h"
78#include "sh_forward.h"
79#include "sh_tools.h"
80#include "sh_hash.h"
81#if defined(WITH_EXTERNAL)
82#include "sh_extern.h"
83#endif
84#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
85#include "sh_modules.h"
86#include "sh_ignore.h"
87#include "sh_prelink.h"
88#endif
89
90#undef FIL__
91#define FIL__ _("samhain.c")
92
93
94/**************************************************
95 *
96 * Needed to compile the key into the code.
97 *
98 **************************************************/
99
100extern UINT32 ErrFlag[2];
101#include "sh_MK.h"
102
103/**************************************************
104 *
105 * Variables for signal handling.
106 *
107 **************************************************/
108
109volatile int sig_raised;
110volatile int sig_urgent;
111volatile int sig_debug_switch; /* SIGUSR1 */
112volatile int sig_suspend_switch; /* SIGUSR2 */
113volatile int sh_global_suspend_flag;
114volatile int sig_fresh_trail; /* SIGIOT */
115volatile int sig_config_read_again; /* SIGHUP */
116volatile int sig_terminate; /* SIGQUIT */
117volatile int sig_termfast; /* SIGTERM */
118volatile int sig_force_check; /* SIGTTOU */
119long int eintr__result;
120char sh_sig_msg[SH_MINIBUF];
121
122
123#ifdef SH_STEALTH
124/**************************************************
125 *
126 * The following set of functions is required for
127 * the 'stealth' mode.
128 *
129 **************************************************/
130
131#ifndef SH_MAX_GLOBS
132#define SH_MAX_GLOBS 16
133#endif
134
135#ifndef GLOB_LEN
136#define GLOB_LEN 511
137#endif
138
139char * globber(const char * str)
140{
141 size_t i;
142 size_t j;
143
144 static size_t items = 0;
145 static size_t count = 0;
146 static char glob[SH_MAX_GLOBS * (GLOB_LEN+1)];
147
148 if (str == NULL)
149 return NULL;
150 else
151 j = strlen(str);
152
153 ++items;
154
155 ASSERT((j <= GLOB_LEN), _("j <= GLOB_LEN"))
156
157 if (j > GLOB_LEN)
158 j = GLOB_LEN;
159
160 /* Overwrap the buffer.
161 */
162 if ( (count + j) >= (SH_MAX_GLOBS * (GLOB_LEN+1)))
163 {
164 count = 0;
165 items = 0;
166 }
167
168 for (i = 0; i < j; ++i)
169 {
170 if (str[i] != '\n' && str[i] != '\t' && str[i] != '\r' && str[i] != '"')
171 glob[count + i] = str[i] ^ XOR_CODE;
172 else
173 glob[count + i] = str[i];
174 }
175 glob[count + j] = '\0';
176
177 i = count;
178 count = count + j + 1;
179 return &glob[i];
180}
181
182void sh_do_encode (char * str, int len)
183{
184 register int i;
185
186 /* this is a symmetric operation
187 */
188 for (i = 0; i < len; ++i)
189 {
190 str[i] = str[i] ^ XOR_CODE;
191 }
192 return;
193}
194
195#endif
196
197/**************************************************
198 *
199 * Global variables.
200 *
201 **************************************************/
202
203sh_struct sh;
204/*@null@*/ sh_key_t * skey = NULL;
205
206extern unsigned char TcpFlag[8][PW_LEN+1];
207
208/**************************************************
209 *
210 * Initializing.
211 *
212 **************************************************/
213
214static int is_samhainctl_init = S_FALSE;
215
216static
217void sh_init (void)
218{
219 unsigned char * dez = NULL;
220 int i;
221#if defined(SH_WITH_MAIL)
222 char * p;
223 char q[SH_PATHBUF];
224#endif
225
226 SL_ENTER(_("sh_init"));
227
228#ifdef MKA_09
229 ErrFlag[0] |= (1 << 8);
230#endif
231#ifdef MKA_10
232 ErrFlag[0] |= (1 << 9);
233#endif
234#ifdef MKA_11
235 ErrFlag[0] |= (1 << 10);
236#endif
237#ifdef MKA_12
238 ErrFlag[0] |= (1 << 11);
239#endif
240#ifdef MKA_13
241 ErrFlag[0] |= (1 << 12);
242#endif
243#ifdef MKA_14
244 ErrFlag[0] |= (1 << 13);
245#endif
246#ifdef MKA_15
247 ErrFlag[0] |= (1 << 14);
248#endif
249#ifdef MKA_16
250 ErrFlag[0] |= (1 << 15);
251#endif
252
253 /* Signal handling.
254 */
255 sig_raised = 0;
256 sig_config_read_again = 0; /* SIGHUP */
257 sig_debug_switch = 0; /* SIGUSR1 */
258 sig_suspend_switch = 0; /* SIGUSR2 */
259 sh_global_suspend_flag = 0; /* SIGUSR2 */
260 sig_fresh_trail = 0; /* SIGIOT */
261 sig_terminate = 0; /* SIGQUIT */
262 sig_termfast = 0; /* SIGTERM */
263 sig_force_check = 0; /* SIGTTOU */
264 strcpy ( sh_sig_msg, _("None"));
265
266#ifdef MKB_01
267 ErrFlag[1] |= (1 << 0);
268#endif
269#ifdef MKB_02
270 ErrFlag[1] |= (1 << 1);
271#endif
272#ifdef MKB_03
273 ErrFlag[1] |= (1 << 2);
274#endif
275#ifdef MKB_04
276 ErrFlag[1] |= (1 << 3);
277#endif
278#ifdef MKB_05
279 ErrFlag[1] |= (1 << 4);
280#endif
281#ifdef MKB_06
282 ErrFlag[1] |= (1 << 5);
283#endif
284#ifdef MKB_07
285 ErrFlag[1] |= (1 << 6);
286#endif
287#ifdef MKB_08
288 ErrFlag[1] |= (1 << 7);
289#endif
290
291#if defined(SH_WITH_SERVER) && !defined(SH_WITH_CLIENT)
292 strncpy(sh.prg_name, _("Yule"), 8);
293 sh.prg_name[4] = '\0';
294#else
295 strncpy(sh.prg_name, _("Samhain"), 8);
296 sh.prg_name[7] = '\0';
297#endif
298
299 /* The flags.
300 */
301 if (is_samhainctl_init == S_FALSE)
302 sh.flag.checkSum = SH_CHECK_NONE;
303 sh.flag.update = S_FALSE;
304 sh.flag.opts = S_FALSE;
305 if (is_samhainctl_init == S_FALSE)
306 sh.flag.isdaemon = S_FALSE;
307 sh.flag.isserver = S_FALSE;
308 sh.flag.islocked = S_FALSE;
309 sh.flag.smsg = S_FALSE;
310 sh.flag.log_start = S_TRUE;
311 sh.flag.reportonce = S_TRUE;
312 sh.flag.fulldetail = S_FALSE;
313 sh.flag.audit = S_FALSE;
314 sh.flag.nice = 0;
315 sh.flag.aud_mask = 0xFFFFFFFFUL;
316 sh.flag.client_severity = S_FALSE;
317 sh.flag.client_class = S_FALSE;
318 sh.flag.hidefile = S_FALSE;
319 sh.flag.loop = S_FALSE;
320
321#ifdef MKB_09
322 ErrFlag[1] |= (1 << 8);
323#endif
324#ifdef MKB_10
325 ErrFlag[1] |= (1 << 9);
326#endif
327#ifdef MKB_11
328 ErrFlag[1] |= (1 << 10);
329#endif
330#ifdef MKB_12
331 ErrFlag[1] |= (1 << 11);
332#endif
333#ifdef MKB_13
334 ErrFlag[1] |= (1 << 12);
335#endif
336#ifdef MKB_14
337 ErrFlag[1] |= (1 << 13);
338#endif
339#ifdef MKB_15
340 ErrFlag[1] |= (1 << 14);
341#endif
342#ifdef MKB_16
343 ErrFlag[1] |= (1 << 15);
344#endif
345
346 /* The stats.
347 */
348 sh.statistics.bytes_speed = 0;
349 sh.statistics.bytes_hashed = 0;
350 sh.statistics.mail_success = 0;
351 sh.statistics.mail_failed = 0;
352 sh.statistics.time_start = time(NULL);
353 sh.statistics.time_check = (time_t) 0;
354
355#ifdef MKC_01
356 ErrFlag[0] |= (1 << 16);
357#endif
358#ifdef MKC_02
359 ErrFlag[0] |= (1 << 17);
360#endif
361#ifdef MKC_03
362 ErrFlag[0] |= (1 << 18);
363#endif
364#ifdef MKC_04
365 ErrFlag[0] |= (1 << 19);
366#endif
367#ifdef MKC_05
368 ErrFlag[0] |= (1 << 20);
369#endif
370#ifdef MKC_06
371 ErrFlag[0] |= (1 << 21);
372#endif
373#ifdef MKC_07
374 ErrFlag[0] |= (1 << 22);
375#endif
376#ifdef MKC_08
377 ErrFlag[0] |= (1 << 23);
378#endif
379
380
381 /* The local host.
382 */
383 (void) sl_strlcpy (sh.host.name, _("localhost"), SH_MINIBUF);
[22]384 sh.host.system[0] = '\0'; /* flawfinder: ignore *//* ff bug */
[1]385 sh.host.release[0] = '\0';
386 sh.host.machine[0] = '\0';
387
388#ifdef MKC_09
389 ErrFlag[0] |= (1 << 24);
390#endif
391#ifdef MKC_10
392 ErrFlag[0] |= (1 << 25);
393#endif
394#ifdef MKC_11
395 ErrFlag[0] |= (1 << 26);
396#endif
397#ifdef MKC_12
398 ErrFlag[0] |= (1 << 27);
399#endif
400#ifdef MKC_13
401 ErrFlag[0] |= (1 << 28);
402#endif
403#ifdef MKC_14
404 ErrFlag[0] |= (1 << 29);
405#endif
406#ifdef MKC_15
407 ErrFlag[0] |= (1 << 30);
408#endif
409#ifdef MKC_16
410 ErrFlag[0] |= (1UL << 31);
411#endif
412
413 /* The paths.
414 */
415 (void) sl_strlcpy (sh.conf.path, DEFAULT_CONFIGFILE, SH_PATHBUF);
416 sh.conf.hash[0] = '\0';
417 (void) sl_strlcpy (sh.data.path, DEFAULT_DATA_FILE, SH_PATHBUF);
418 sh.data.hash[0] = '\0';
419 sh.exec.path[0] = '\0';
420 sh.exec.hash[0] = '\0';
421
422#ifdef MKD_01
423 ErrFlag[1] |= (1 << 16);
424#endif
425#ifdef MKD_02
426 ErrFlag[1] |= (1 << 17);
427#endif
428#ifdef MKD_03
429 ErrFlag[1] |= (1 << 18);
430#endif
431#ifdef MKD_04
432 ErrFlag[1] |= (1 << 19);
433#endif
434#ifdef MKD_05
435 ErrFlag[1] |= (1 << 20);
436#endif
437#ifdef MKD_06
438 ErrFlag[1] |= (1 << 21);
439#endif
440#ifdef MKD_07
441 ErrFlag[1] |= (1 << 22);
442#endif
443#ifdef MKD_08
444 ErrFlag[1] |= (1 << 23);
445#endif
446
447 /* The addresses.
448 */
449#if defined(SH_WITH_MAIL)
450 if (0 == strcmp (DEFAULT_MAILADDRESS, _("NULL")))
451 {
452 (void) sl_strncpy(q, DEFAULT_MAILADDRESS, SH_PATHBUF);
453 p = strtok (q, ", \t");
454 if (p)
455 {
456 (void) sh_mail_setaddress_int (p);
457 while (NULL != (p = strtok (NULL, ", \t")))
458 (void) sh_mail_setaddress_int (p);
459 }
460 }
461#endif
462
463 if (0 == strcmp (ALT_TIMESERVER, _("NULL")))
464 sh.srvtime.alt[0] = '\0';
465 else
466 (void) sl_strlcpy (sh.srvtime.alt, ALT_TIMESERVER, SH_PATHBUF);
467 if (0 == strcmp (DEFAULT_TIMESERVER, _("NULL")))
468 sh.srvtime.name[0] = '\0';
469 else
470 (void) sl_strlcpy (sh.srvtime.name, DEFAULT_TIMESERVER, SH_PATHBUF);
471
472
473 if (0 == strcmp (ALT_LOGSERVER, _("NULL")))
474 sh.srvexport.alt[0] = '\0';
475 else
476 (void) sl_strlcpy (sh.srvexport.alt, ALT_LOGSERVER, SH_PATHBUF);
477 if (0 == strcmp (DEFAULT_LOGSERVER, _("NULL")))
478 sh.srvexport.name[0] = '\0';
479 else
480 (void) sl_strlcpy (sh.srvexport.name, DEFAULT_LOGSERVER, SH_PATHBUF);
481
482
483 if (0 == strcmp (DEFAULT_ERRLOCK, _("NULL")))
484 sh.srvlog.alt[0] = '\0';
485 else
486 (void) sl_strlcpy (sh.srvlog.alt, DEFAULT_ERRLOCK, SH_PATHBUF);
487 if (0 == strcmp (DEFAULT_ERRFILE, _("NULL")))
488 sh.srvlog.name[0] = '\0';
489 else
490 (void) sl_strlcpy (sh.srvlog.name, DEFAULT_ERRFILE, SH_PATHBUF);
491
492 if (0 == strcmp (ALT_CONSOLE, _("NULL")))
493 sh.srvcons.alt[0] = '\0';
494 else
495 (void) sl_strlcpy (sh.srvcons.alt, ALT_CONSOLE, SH_PATHBUF);
496#ifndef DEFAULT_CONSOLE
497 (void) sl_strlcpy (sh.srvcons.name, _("/dev/console"), SH_PATHBUF);
498#else
499 if (0 == strcmp (DEFAULT_CONSOLE, _("NULL")))
500 (void) sl_strlcpy (sh.srvcons.name, _("/dev/console"), SH_PATHBUF);
501 else
502 (void) sl_strlcpy (sh.srvcons.name, DEFAULT_CONSOLE, SH_PATHBUF);
503#endif
504
505#ifdef MKD_09
506 ErrFlag[1] |= (1 << 24);
507#endif
508#ifdef MKD_10
509 ErrFlag[1] |= (1 << 25);
510#endif
511#ifdef MKD_11
512 ErrFlag[1] |= (1 << 26);
513#endif
514#ifdef MKD_12
515 ErrFlag[1] |= (1 << 27);
516#endif
517#ifdef MKD_13
518 ErrFlag[1] |= (1 << 28);
519#endif
520#ifdef MKD_14
521 ErrFlag[1] |= (1 << 29);
522#endif
523#ifdef MKD_15
524 ErrFlag[1] |= (1 << 30);
525#endif
526#ifdef MKD_16
527 ErrFlag[1] |= (1UL << 31);
528#endif
529
530
531 /* The timers.
532 */
533 sh.fileCheck.alarm_last = 0;
534 sh.fileCheck.alarm_interval = 600; /* ten minutes */
535
536 sh.mailTime.alarm_last = 0;
537 sh.mailTime.alarm_interval = 86400;
538
539 sh.mailNum.alarm_last = 0;
540 sh.mailNum.alarm_interval = 10;
541
542 sh.looptime = 60;
543
544 /* The struct to hold privileged information.
545 */
546 skey = (sh_key_t *) malloc (sizeof(sh_key_t));
547 if (skey == NULL)
548 {
549 perror(_("sh_init"));
550 _exit (EXIT_FAILURE);
551 }
552
553 skey->mlock_failed = SL_FALSE;
554 skey->rngI = BAD;
555 /* properly initialized later
556 */
557 skey->rng0[0] = 0x03; skey->rng0[1] = 0x09; skey->rng0[2] = 0x17;
558 skey->rng1[0] = 0x03; skey->rng1[1] = 0x09; skey->rng1[2] = 0x17;
559 skey->rng2[0] = 0x03; skey->rng2[1] = 0x09; skey->rng2[2] = 0x17;
560
561 for (i = 0; i < KEY_BYT; ++i)
562 skey->poolv[i] = '\0';
563
564 skey->poolc = 0;
565
566 skey->ErrFlag[0] = ErrFlag[0];
567 ErrFlag[0] = 0;
568 skey->ErrFlag[1] = ErrFlag[1];
569 ErrFlag[1] = 0;
570
571 dez = &(TcpFlag[POS_TF-1][0]);
572 for (i = 0; i < PW_LEN; ++i)
573 {
574 skey->pw[i] = (char) (*dez);
575 (*dez) = '\0';
576 ++dez;
577 }
578
579 skey->sh_sockpass[0] = '\0';
580 skey->sigkey_old[0] = '\0';
581 skey->sigkey_new[0] = '\0';
582 skey->mailkey_old[0] = '\0';
583 skey->mailkey_new[0] = '\0';
[22]584 skey->crypt[0] = '\0'; /* flawfinder: ignore *//* ff bug */
[1]585 skey->session[0] = '\0';
586 skey->vernam[0] = '\0';
587
588
589 sh_unix_memlock();
590 SL_RET0(_("sh_init"));
591}
592
593
594#if defined(HAVE_MLOCK) && !defined(HAVE_BROKEN_MLOCK)
595#include <sys/mman.h>
596#endif
597
598#if defined(SH_USE_XML)
599extern int sh_log_file (char * message, char * inet_peer);
600#endif
601
602/*******************************************************
603 *
604 * Exit Handler
605 *
606 *******************************************************/
607static void exit_handler(void)
608{
609 /* --- Clean up modules, if any. ---
610 */
611#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
612 int modnum;
613#endif
614#if defined(SH_WITH_SERVER)
615 extern int sh_socket_remove ();
616#endif
617
618 SL_ENTER(_("exit_handler"));
619
620#if defined(SH_WITH_SERVER)
621 sh_socket_remove ();
622#endif
623
624#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
625 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
626 {
627 if (modList[modnum].initval == GOOD)
628 (void) modList[modnum].mod_cleanup();
629 }
630#endif
631
632 /* --- Push out all pending messages. ---
633 */
634#if defined(SH_WITH_MAIL)
635 if (sh.mailNum.alarm_last > 0)
636 {
637 (void) sh_mail_msg (NULL);
638 }
639#endif
640
641 /* --- Write the server stat. ---
642 */
643#if defined(SH_WITH_SERVER)
644 sh_forward_html_write();
645#endif
646
647 /* --- Clean up memory to check for problems. ---
648 */
649#ifdef MEM_DEBUG
650#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
651 sh_files_deldirstack ();
652 sh_files_delfilestack ();
653 sh_hash_hashdelete();
654#endif
655#if defined(SH_WITH_SERVER)
656 sh_forward_free_all ();
657#endif
658 delete_cache();
659 sh_mem_stat();
660#endif
661
662#ifdef MEM_DEBUG
663 sh_unix_count_mlock();
664#endif
665
666 /* --- Checksum of executable. ---
667 */
668 (void) sh_unix_self_check();
669
670
671 /* --- Exit Message. ---
672 */
673 sh_error_handle ((-1), FIL__, __LINE__, sh.flag.exit, MSG_EXIT_NORMAL,
674 sh.prg_name, sh_sig_msg);
675#ifdef SH_USE_XML
676 (void) sh_log_file (NULL, NULL);
677#endif
678
679
680 /* --- Restrict error logging to stderr. ---
681 */
682#ifdef WITH_MESSAGE_QUEUE
683 close_ipc ();
684#endif
685 sh_error_only_stderr (S_TRUE);
686
687
688 /* --- Remove lock, delete critical information. ---
689 */
690 (void) sh_unix_rm_lock_file (sh.srvlog.name);
691 (void) sh_unix_rm_pid_file ();
692 if (skey != NULL)
693 memset (skey, (int) '\0', sizeof(sh_key_t));
694
695 /* --- Exit. ---
696 */
697 SL_RET0(_("exit_handler"));
698}
699
700/***********************************************************
701 *
702 */
703#ifndef SIGHUP
704#define SIGHUP 1
705#endif
706#ifndef SIGTERM
707#define SIGTERM 15
708#endif
709#ifndef SIGKILL
710#define SIGKILL 9
711#endif
712
713#if defined(__linux__) || defined(sun) || defined(__sun) || defined(__sun__)
714#include <dirent.h>
715static pid_t * procdirSamhain ()
716{
717 pid_t * pidlist = malloc(sizeof(pid_t) * 65535);
718 struct dirent * d;
719 DIR * dp;
720 long ino;
721 struct stat buf;
722 int i = 0;
723 pid_t pid, mypid = getpid();
724 char * tail;
725 char exef[128];
726
[22]727 if (!pidlist)
728 return NULL;
729
[1]730 for (i = 0; i < 65535; ++i) pidlist[i] = 0;
731 i = 0;
732
733 if (0 != stat(SH_INSTALL_PATH, &buf))
[22]734 {
735 free(pidlist);
736 return NULL;
737 }
[1]738
739 ino = (long) buf.st_ino;
740
741 if (NULL == (dp = opendir("/proc")))
[22]742 {
743 free(pidlist);
744 return NULL;
745 }
[1]746 while (NULL != (d = readdir(dp)) && i < 65535)
747 {
748 if (0 != strcmp(d->d_name, ".") && 0 != strcmp(d->d_name, ".."))
749 {
750 errno = 0;
751 pid = (pid_t) strtol (d->d_name, &tail, 0);
752 if (*tail != '\0' || errno != 0)
753 continue;
754 if (pid == mypid)
755 continue;
756#if defined(__linux__)
757 sprintf(exef, _("/proc/%d/exe"), (int) pid); /* known to fit */
758#else
759 sprintf(exef, _("/proc/%d/object/a.out"), /* known to fit */
760 (int) pid);
761#endif
762 if (0 == stat(exef, &buf) && ino == (long) buf.st_ino)
763 { pidlist[i] = (pid_t) pid; ++i; }
764 }
765 }
766 closedir(dp);
767 return pidlist;
768}
769#else
770static pid_t * procdirSamhain ()
771{
772 return NULL;
773}
774#endif
775
776static int killprocSamhain (pid_t pid)
777{
778 int i;
779
780 /* fprintf(stderr, "Killing %d\n", pid); */
781 if (pid > 0 && 0 == kill (pid, SIGTERM))
782 {
783 for (i = 0; i < 16; ++i)
784 {
785 (void) retry_msleep(1, 0);
786 if (0 != kill (pid, 0) && errno == ESRCH)
787 return (0);
788 }
789
790 (void) kill (pid, SIGKILL);
791 return (0);
792 }
793 if (pid > 0)
794 {
795 if (errno == ESRCH)
796 return 7;
797 if (errno == EPERM)
798 return 4;
799 return 1;
800 }
801 else
802 return (7);
803}
804
805static pid_t pidofSamhain (int flag)
806{
807 FILE * fp;
808 char line[256];
809 char * tail;
810 char * p;
811 pid_t pid;
812 long inpid;
813 struct stat buf;
814
815 fp = fopen (DEFAULT_ERRLOCK, "r");
816
817 if (!fp)
818 { if (errno != ENOENT) perror(_("fopen")); return 0; }
[34]819 if (NULL == fgets(line, sizeof(line), fp))
[1]820 { perror(_("fgets")); (void) fclose(fp); return 0; }
821 (void) fclose(fp);
822 p = line;
823 while (*p == ' ' || *p == '\f' || *p == '\n' ||
824 *p == '\r' || *p == '\t' || *p == '\v')
825 ++p;
826 errno = 0;
827 inpid = strtol (p, &tail, 0);
828 if (p == tail || errno != 0)
829 { perror(_("strtol")); return 0; }
830
831 pid = (pid_t) inpid;
832 if (inpid != (long) pid)
833 { perror(_("strtol")); return 0; }
834
835 /* remove stale pid file
836 */
837 if (flag == 1 && pid > 0 && 0 != kill(pid, 0) && errno == ESRCH)
838 {
839 if /*@-unrecog@*/ (0 == lstat (DEFAULT_ERRLOCK, &buf))/*@+unrecog@*/
840 {
841 if /*@-usedef@*/(S_ISREG(buf.st_mode))/*@+usedef@*/
842 {
843 (void) unlink(DEFAULT_ERRLOCK);
844 }
845 }
846 else
847 {
848 perror(_("lstat")); return 0;
849 }
850 pid = 0;
851 }
852 return pid;
853}
854
855/* 1: start 2:stop 3:reload 4:status
856 */
857/*@-exitarg@*/
858static int samhainctl(int ctl, int * argc, char * argv[])
859{
860 char * fullpath;
861 pid_t pid;
862 int status;
863 int res;
864 pid_t respid;
865 int times;
866 char * argp[32];
867 pid_t * pidlist;
868 int i;
869
870
[22]871 fullpath = strdup (SH_INSTALL_PATH);
[1]872 if (fullpath == NULL)
[22]873 { perror(_("strdup")); exit (1); }
[1]874
[22]875 argp[0] = strdup (SH_INSTALL_PATH);
[1]876 if (argp[0] == NULL)
[22]877 { perror(_("strdup")); exit (1); }
[1]878
879 for (times = 1; times < 32; ++times) argp[times] = NULL;
880
881 res = (*argc > 32) ? 32 : *argc;
882
883 for (times = 2; times < res; ++times)
884 {
[22]885 argp[times-1] = strdup (argv[times]);
[1]886 if (argp[times-1] == NULL)
[22]887 { perror(_("strdup")); exit (1); }
[1]888 }
889
890 if (ctl == 1)
891 {
892 pid = pidofSamhain(1);
893
894 if (pid != 0 && 0 == kill (pid, 0)) /* already started */
895 exit (0);
896
897 pid = fork();
898 switch (pid) {
899 case ((pid_t) -1):
900 perror(_("fork"));
901 exit (1);
902 case 0:
903 if (0 != close (0))
904 {
905 _exit(4);
906 }
[22]907 (void) execv(fullpath, argp); /* flawfinder: ignore *//* wtf? */
[1]908 if (errno == EPERM)
909 _exit(4);
910 else if (errno == ENOENT)
911 _exit(5);
912 _exit (1);
913 default:
914 times = 0;
915 while (times < 64) {
916 respid = waitpid(pid, &status, WNOHANG|WUNTRACED);
917 if ((pid_t)-1 == respid)
918 {
919 perror(_("waitpid"));
920 exit (1);
921 }
922 else if (pid == respid)
923 {
924 if (0 != WIFEXITED(status))
925 {
926 res = WEXITSTATUS(status);
927 exit (res == 0 ? 0 : res );
928 }
929 else
930 exit (1);
931 }
932 ++times;
933 (void) retry_msleep(1, 0);
934 }
935 exit (1);
936 }
937 }
938
939 pid = pidofSamhain(0);
940
941 if (ctl == 2) /* stop */
942 {
943 pidlist = procdirSamhain ();
944 if (pid == 0 && NULL == pidlist) /* pid file not found */
[22]945 {
946 free(fullpath);
947 return (0);
948 }
[1]949
950 status = 0;
951 if (pid != 0)
952 status = killprocSamhain(pid);
953 if (pidlist != NULL)
954 {
955 i = 0;
956 while (i < 65535 && pidlist[i] != 0)
957 {
958 if (pidlist[i] != pid)
959 status = killprocSamhain(pidlist[i]);
960 ++i;
961 }
962 }
[22]963 free(fullpath);
[1]964 if (status == 7)
965 return 0;
966 else
967 return status;
968 }
969
970 if (ctl == 3) /* reload */
971 {
972 if (pid == 0)
973 exit (7);
974 if (0 == kill (pid, SIGHUP))
975 exit (0);
976 else
977 {
978 if (errno == EPERM)
979 exit (4);
980 if (errno == ESRCH)
981 exit (7);
982 exit (1);
983 }
984 }
985
986 if (ctl == 4) /* status */
987 {
988 if (pid == 0)
989 exit (3);
990 if (0 == kill (pid, 0))
991 exit (0);
992 else
993 {
994 if (errno == EPERM)
995 exit (4);
996 if (errno == ESRCH)
997 exit (1);
998 }
999 }
[22]1000 free(fullpath); /* silence smatch false positive */
[1]1001 exit (1); /* no exit handler installed yet */
1002 /*@notreached@*/
1003 return (0);
1004}
1005/*@+exitarg@*/
1006
1007#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1008#include "sh_schedule.h"
1009static sh_schedule_t * FileSchedOne = NULL;
1010static sh_schedule_t * FileSchedTwo = NULL;
1011
1012/* free a linked list of schedules
1013 */
1014static sh_schedule_t * free_sched (sh_schedule_t * isched)
1015{
1016 sh_schedule_t * current = isched;
1017 sh_schedule_t * next = NULL;
1018
1019 while (current != NULL)
1020 {
1021 next = current->next;
1022 SH_FREE(current);
1023 current = next;
1024 }
1025 return NULL;
1026}
1027
1028/* Add a new schedule to the linked list of schedules
1029 */
[22]1030static sh_schedule_t * sh_set_schedule_int (const char * str,
[1]1031 sh_schedule_t * FileSchedIn,
1032 /*@out@*/ int * status)
1033{
1034 sh_schedule_t * FileSched;
1035
1036 SL_ENTER(_("sh_set_schedule_int"));
1037
1038 if (0 == sl_strncmp(str, _("NULL"), 4))
1039 {
1040 (void) free_sched(FileSchedIn);
1041 FileSchedIn = NULL;
1042 *status = 0;
1043 return 0;
1044 }
1045
1046 FileSched = SH_ALLOC(sizeof(sh_schedule_t));
1047 *status = create_sched(str, FileSched);
1048 if (*status != 0)
1049 {
1050 SH_FREE(FileSched);
1051 FileSched = NULL;
1052 SL_RETURN(FileSchedIn , _("sh_set_schedule_int"));
1053 }
1054 FileSched->next = FileSchedIn;
1055 SL_RETURN(FileSched , _("sh_set_schedule_int"));
1056}
1057
1058/* Add a new schedule to the linked list FileSchedOne
1059 */
[22]1060int sh_set_schedule_one (const char * str)
[1]1061{
1062 int status;
1063 FileSchedOne = sh_set_schedule_int (str, FileSchedOne, &status);
1064 return status;
1065}
1066
1067/* Add a new schedule to the linked list FileSchedTwo
1068 */
[22]1069int sh_set_schedule_two (const char * str)
[1]1070{
1071 int status;
1072 FileSchedTwo = sh_set_schedule_int (str, FileSchedTwo, &status);
1073 return status;
1074}
1075
1076#endif
1077
1078/*******************************************************
1079 *
1080 * Main program
1081 *
1082 *******************************************************/
[18]1083#if !defined(SH_CUTEST)
[1]1084int main(int argc, char * argv[])
[18]1085#else
1086int undef_main(int argc, char * argv[])
1087#endif
[1]1088{
1089#if defined(INET_SYSLOG)
1090 extern int create_syslog_socket (int flag);
1091#endif
1092#if defined(SH_WITH_SERVER)
1093 extern int sh_create_tcp_socket();
1094#endif
1095
1096#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1097 int modnum;
1098 time_t runtim;
1099 float st_1, st_2;
1100 int status;
1101 long cct = 0; /* main loop iterations */
1102
1103 int flag_check_1 = 0;
1104 int flag_check_2 = 0;
1105
1106 int check_done = 0;
1107#endif
1108
1109 time_t told;
1110 time_t tcurrent;
1111 size_t tzlen;
1112 char * tzptr;
1113 int res;
1114
1115#if defined (SH_STEALTH_NOCL)
[34]1116 char command_line[256];
[1]1117 int my_argc = 0;
1118 char * my_argv[32];
1119#endif
1120
1121 SL_ENTER(_("main"));
1122
1123 if (argc >= 2 && 0 != getuid() &&
1124 (0 == strcmp(argv[1], _("start")) ||
1125 0 == strcmp(argv[1], _("stop")) ||
1126 0 == strcmp(argv[1], _("reload")) ||
1127 0 == strcmp(argv[1], _("force-reload")) ||
1128 0 == strcmp(argv[1], _("status")) ||
1129 0 == strcmp(argv[1], _("restart"))))
1130 {
1131 return 4;
1132 }
1133
1134 if (argc >= 2 && 0 == getuid())
1135 {
1136 /* return codes:
1137 * 0 Success
1138 * 1 Can not send signal / start program
1139 * 2 Pid file does not exist
1140 */
1141 if (0 == strcmp(argv[1], _("start")))
1142 {
1143 (void) samhainctl (1, &argc, argv); /* does not return */
1144 }
1145 else if (0 == strcmp(argv[1], _("stop")))
1146 return (samhainctl (2, &argc, argv));
1147 else if (0 == strcmp(argv[1], _("reload")))
1148 (void) samhainctl (3, &argc, argv); /* does not return */
1149 else if (0 == strcmp(argv[1], _("force-reload")))
1150 (void) samhainctl (3, &argc, argv); /* does not return */
1151 else if (0 == strcmp(argv[1], _("status")))
1152 (void) samhainctl (4, &argc, argv); /* does not return */
1153 else if (0 == strcmp(argv[1], _("restart")))
1154 {
1155 res = samhainctl (2, &argc, argv);
1156 if (res == 0 || res == 7)
1157 {
1158 (void) samhainctl (1, &argc, argv); /* does not return */
1159 }
1160 else
1161 return (res);
1162 }
1163 }
1164
1165 /* if fd 0 is closed, presume that we want to be daemon and
1166 * run in check mode
1167 */
1168 if ((-1) == retry_fcntl(FIL__, __LINE__, 0, F_GETFL, 0) &&
1169 errno == EBADF)
1170 {
1171 sh.flag.opts = S_TRUE;
1172 (void) sh_unix_setdeamon(NULL);
1173#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1174 sh.flag.checkSum = SH_CHECK_CHECK;
1175 /* (void) sh_util_setchecksum(_("check")); */
1176#endif
1177 is_samhainctl_init = S_TRUE;
1178 sh.flag.opts = S_FALSE;
1179 }
1180
1181
1182 /* --- Install the exit handler. ---
1183 */
1184 (void) atexit(exit_handler);
1185
1186 /* --- Zero the mailer key, and fill it. ---
1187 */
1188 memset (ErrFlag, 0, 2*sizeof(UINT32));
1189
1190#ifdef MKA_01
1191 ErrFlag[0] |= (1 << 0);
1192#endif
1193#ifdef MKA_02
1194 ErrFlag[0] |= (1 << 1);
1195#endif
1196#ifdef MKA_03
1197 ErrFlag[0] |= (1 << 2);
1198#endif
1199#ifdef MKA_04
1200 ErrFlag[0] |= (1 << 3);
1201#endif
1202#ifdef MKA_05
1203 ErrFlag[0] |= (1 << 4);
1204#endif
1205#ifdef MKA_06
1206 ErrFlag[0] |= (1 << 5);
1207#endif
1208#ifdef MKA_07
1209 ErrFlag[0] |= (1 << 6);
1210#endif
1211#ifdef MKA_08
1212 ErrFlag[0] |= (1 << 7);
1213#endif
1214
1215#if defined(SCREW_IT_UP)
1216 BREAKEXIT(sh_sigtrap_prepare);
1217 (void) sh_sigtrap_prepare();
1218#endif
1219
1220 /* Save the timezone.
1221 */
[22]1222 if (NULL != (tzptr = getenv("TZ"))) /* flawfinder: ignore */
[1]1223 {
1224 tzlen = strlen(tzptr);
[22]1225 if (tzlen < 1024)
1226 {
1227 sh.timezone = malloc (tzlen + 1);
1228 if (sh.timezone != NULL)
1229 (void) sl_strlcpy (sh.timezone, tzptr, tzlen + 1);
1230 }
1231 else
1232 sh.timezone = NULL;
[1]1233 }
1234 else
1235 sh.timezone = NULL;
1236
1237
1238 /* -------- INIT --------
1239 */
1240
1241 /* Restrict error logging to stderr.
1242 */
1243 sh_error_only_stderr (S_TRUE);
1244
1245 BREAKEXIT(sh_derr);
1246 (void) sh_derr();
1247
1248 /* Check that first three descriptors are open.
1249 */
1250 if ( retry_fcntl(FIL__, __LINE__, 0, F_GETFL, 0) == (-1))
1251 (void) aud_open(FIL__, __LINE__, SL_NOPRIV, _("/dev/null"), O_RDWR, 0);
1252 if ( retry_fcntl(FIL__, __LINE__, 1, F_GETFL, 0) == (-1))
1253 (void) aud_open(FIL__, __LINE__, SL_NOPRIV, _("/dev/null"), O_RDWR, 1);
1254 if ( retry_fcntl(FIL__, __LINE__, 2, F_GETFL, 0) == (-1))
1255 (void) aud_open(FIL__, __LINE__, SL_NOPRIV, _("/dev/null"), O_RDWR, 2);
1256
1257 /* --- Set default values. ---
1258 */
1259 BREAKEXIT(sh_init);
1260 sh_init (); /* we are still privileged here, so we can mlock skey */
1261#if (defined (SH_WITH_SERVER) && !defined (SH_WITH_CLIENT))
1262 sh.flag.isserver = S_TRUE;
1263#endif
1264
1265 /* --- Get local hostname. ---
1266 */
1267 BREAKEXIT(sh_unix_localhost);
1268 sh_unix_localhost();
1269
1270 /* --- Read the command line. ---
1271 */
1272 sh.flag.opts = S_TRUE;
1273
1274#if !defined(SH_STEALTH_NOCL)
[20]1275 sh_argc_store = argc;
1276 sh_argv_store = argv;
[1]1277 (void) sh_getopt_get (argc, argv);
1278#else
1279 if (argc > 1 && argv[1] != NULL &&
1280 strlen(argv[1]) > 0 && strlen(NOCL_CODE) > 0)
1281 {
[34]1282 if ( 0 == strcmp(argv[1], NOCL_CODE) )
[1]1283 {
1284 my_argv[0] = argv[0]; ++my_argc;
1285 command_line[0] = '\0';
[34]1286 (void*) fgets (command_line, sizeof(command_line), stdin);
1287 command_line[sizeof(command_line)-1] = '\0';
[1]1288 do {
1289 my_argv[my_argc] =
1290 strtok( (my_argc == 1) ? command_line : NULL, " \n");
1291 if (my_argv[my_argc] != NULL) {
1292 ++my_argc;
1293 } else {
1294 break;
1295 }
1296 } while (my_argc < 32);
[20]1297
1298 sh_argc_store = my_argc;
1299 sh_argv_store = my_argv;
1300
[1]1301 (void) sh_getopt_get (my_argc, my_argv);
1302 }
1303 else
1304 {
1305 /* discard command line */
1306 /* _exit(EXIT_FAILURE) */ ;
1307 }
1308 }
1309#endif
1310 sh.flag.opts = S_FALSE;
1311
1312
1313 /* close all other files
1314 */
1315 sh_unix_closeall(3, -1); /* after processing CL options */
1316
1317
1318 /* --- Get user info. ---
1319 */
1320 TPT((0, FIL__, __LINE__, _("msg=<Get user name.>\n")))
1321 if (0 != sh_unix_getUser ())
1322 {
1323 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EXIT_ABORT1,
1324 sh.prg_name);
1325 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1326 }
1327
1328
1329 /* *****************************
1330 *
1331 * Read the configuration file.
1332 *
1333 * *****************************/
1334
1335 TPT((0, FIL__, __LINE__, _("msg=<Read the configuration file.>\n")))
1336 BREAKEXIT(sh_readconf_read);
1337 (void) sh_readconf_read ();
1338
1339#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1340 if (sh.flag.checkSum == SH_CHECK_NONE)
1341 {
1342 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
1343 _("No action specified: init, update, or check"),
1344 _("main"));
1345 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EXIT_ABORT1,
1346 sh.prg_name);
1347 aud_exit (FIL__, __LINE__, EXIT_FAILURE);
1348 }
1349#endif
1350
1351 /* do not append to database if run SUID
1352 */
1353 if ((sh.flag.checkSum == SH_CHECK_INIT) && (0 != sl_is_suid()))
1354 {
1355 (void) dlog(1, FIL__, __LINE__,
1356 _("Cannot initialize database when running with SUID credentials.\nYou need to run this with the user ID %d.\nYour current user ID is %d."),
1357 (int) geteuid(), (int) sh.real.uid);
1358 sh_error_handle ((-1), FIL__, __LINE__, EACCES, MSG_ACCESS,
1359 (long) sh.real.uid, sh.data.path);
1360 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1361 }
1362
1363 /* avoid daemon mode for initialization
1364 */
1365 if (sh.flag.checkSum == SH_CHECK_INIT)
1366 {
1367 sh.flag.isdaemon = S_FALSE;
1368 sh.flag.loop = S_FALSE;
1369 }
1370
1371 /* initialize signal handling etc
1372 */
1373 if (sh.flag.isdaemon == S_TRUE)
1374 sh_error_only_stderr (BAD);
1375
1376 if (sh_unix_init(sh.flag.isdaemon) == -1)
1377 {
1378 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EXIT_ABORT1,
1379 sh.prg_name);
1380 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1381 }
1382
1383 /* --- drop privileges eventually ---
1384 */
1385#if defined(SH_WITH_SERVER)
1386 sh_create_tcp_socket ();
1387#if defined(INET_SYSLOG)
1388 create_syslog_socket (S_TRUE);
1389#endif
1390 SL_REQUIRE(sl_policy_get_real(DEFAULT_IDENT) == SL_ENONE,
1391 _("sl_policy_get_real(DEFAULT_IDENT) == SL_ENONE"));
1392#else
1393 SL_REQUIRE(sl_policy_get_user(DEFAULT_IDENT) == SL_ENONE,
1394 _("sl_policy_get_user(DEFAULT_IDENT) == SL_ENONE"));
1395#endif
1396
1397 /* --- Get user info (again). ---
1398 */
1399 TPT((0, FIL__, __LINE__, _("msg=<Get user name.>\n")))
1400 if (0 != sh_unix_getUser ())
1401 {
1402 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EXIT_ABORT1,
1403 sh.prg_name);
1404 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1405 }
1406
1407 /* --- now check whether we really wanted it; if not, close ---
1408 */
1409#if defined(INET_SYSLOG) && defined(SH_WITH_SERVER)
1410 create_syslog_socket (S_FALSE);
1411#endif
1412
1413
1414 /* checksum of database
1415 */
1416#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1417 TPT((0, FIL__, __LINE__, _("msg=<Get checksum of the database.>\n")))
1418 if (sh.flag.checkSum == SH_CHECK_CHECK)
1419 {
1420 if (0 == sl_strcmp(file_path('D', 'R'), _("REQ_FROM_SERVER")))
1421 {
1422 /* fetch the file from server to get checksum
1423 */
1424 sh_hash_init ();
1425 /* sh_hash_hashdelete (); */
1426 }
1427 else
1428 {
1429 (void) sl_strlcpy(sh.data.hash,
1430 sh_tiger_hash (file_path('D', 'R'),
1431 TIGER_FILE, 0),
1432 KEY_LEN+1);
1433 }
1434 }
1435#endif
1436
1437
1438 /* --- Enable full error logging ---
1439 */
1440 sh_error_only_stderr (S_FALSE);
1441
1442 /****************************************************
1443 *
1444 * SERVER
1445 *
1446 ****************************************************/
1447
1448#if defined(SH_WITH_SERVER) && !defined(SH_WITH_CLIENT)
1449
1450#if (defined(WITH_GPG) || defined(WITH_PGP))
1451 /* do nothing -- we exit earlier if error
1452 if (0 != sh_gpg_check_sign (1))
1453 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1454 */
1455#else
1456 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_START_1H,
1457 sh.prg_name, (long) sh.real.uid,
1458 (sh.flag.hidefile == S_TRUE) ?
1459 _("(hidden)") : file_path('C','R'),
1460 sh.conf.hash);
1461#endif
1462
1463#else
1464
1465 /****************************************************
1466 *
1467 * CLIENT/STANDALONE
1468 *
1469 ****************************************************/
1470
1471 BREAKEXIT(sh_error_handle);
1472
1473 if (sh.flag.checkSum == SH_CHECK_CHECK)
1474 {
1475#if (defined(WITH_GPG) || defined(WITH_PGP))
1476 /* do nothing -- we exit earlier if error
1477 if (0 != sh_gpg_check_sign (2))
1478 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1479 */
1480 ;
1481#else
1482 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_START_2H,
1483 sh.prg_name, (long) sh.real.uid,
1484 (sh.flag.hidefile == S_TRUE) ? _("(hidden)") : file_path('C', 'R'), sh.conf.hash,
1485 (sh.flag.hidefile == S_TRUE) ? _("(hidden)") : file_path('D', 'R'), sh.data.hash);
1486#endif
1487 }
1488 else
1489 {
1490#if (defined(WITH_GPG) || defined(WITH_PGP))
1491 /* do nothing -- we exit earlier if error
1492 if (0 != sh_gpg_check_sign (1))
1493 aud_exit(FIL__, __LINE__, EXIT_FAILURE);
1494 */
1495 ;
1496#else
1497 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_START_1H,
1498 sh.prg_name, (long) sh.real.uid,
1499 (sh.flag.hidefile == S_TRUE) ? _("(hidden)") : file_path('C', 'R'), sh.conf.hash);
1500#endif
1501 }
1502#endif
1503
1504
1505 if ((skey == NULL) || (skey->mlock_failed == SL_TRUE))
1506 sh_error_handle ((-1), FIL__, __LINE__, EPERM, MSG_MLOCK);
1507
1508 /* timer
1509 */
1510 tcurrent = time (NULL);
1511 told = tcurrent;
1512 sh.mailTime.alarm_last = told;
1513
1514
1515 /****************************************************
1516 *
1517 * SERVER
1518 *
1519 ****************************************************/
1520
1521#if defined(SH_WITH_SERVER)
1522 TPT((0, FIL__, __LINE__, _("msg=<Start server.>\n")))
1523
1524#if defined (SH_WITH_CLIENT)
1525 if (sh.flag.isserver == S_TRUE)
1526 {
1527 sh_receive();
1528 TPT((0, FIL__, __LINE__, _("msg=<End server.>\n")))
1529 aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
1530 }
1531#else
1532 sh_receive();
1533 TPT((0, FIL__, __LINE__, _("msg=<End server.>\n")))
1534 aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
1535#endif
1536
1537#endif
1538
1539 /****************************************************
1540 *
1541 * CLIENT/STANDALONE
1542 *
1543 ****************************************************/
1544#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1545
1546
1547 /* --- Initialize modules. ---
1548 */
1549 TPT((0, FIL__, __LINE__, _("msg=<Initialize modules.>\n")))
1550 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
1551 {
1552 if (0 != (status = modList[modnum].mod_init()))
1553 {
1554 if (status == (-1)) {
1555 sh_error_handle (SH_ERR_NOTICE, FIL__, __LINE__, status,
1556 MSG_MOD_FAIL,
1557 _(modList[modnum].name),
1558 status);
1559 } else {
1560 sh_error_handle ((-1), FIL__, __LINE__, status, MSG_MOD_FAIL,
1561 _(modList[modnum].name),
1562 status);
1563 }
1564 modList[modnum].initval = S_FALSE;
1565 }
1566 else
1567 {
1568 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_MOD_OK,
1569 _(modList[modnum].name));
1570 modList[modnum].initval = S_TRUE;
1571 }
1572 }
1573
1574 /* -------- TEST SETUP ---------
1575 */
1576 (void) sh_files_setrec();
1577 (void) sh_files_test_setup();
1578
1579
1580 /* -------- NICE LEVEL ---------
1581 */
1582 if (0 != sh.flag.nice)
1583 {
1584#ifdef HAVE_SETPRIORITY
1585 /*@-unrecog@*/
1586 (void) setpriority(PRIO_PROCESS, 0, sh.flag.nice);
1587 /*@+unrecog@*/
1588#else
1589 (void) nice(sh.flag.nice);
1590#endif
1591 }
1592
1593 /* -------- MAIN LOOP ---------
1594 */
1595 sh.statistics.bytes_speed = 0;
1596 sh.statistics.bytes_hashed = 0;
1597
1598 while (1 == 1)
1599 {
1600 ++cct;
1601
1602 BREAKEXIT(sh_error_handle);
1603
1604 TPT((0, FIL__, __LINE__, _("msg=<Start main loop.>, iter=<%ld>\n"), cct))
1605
1606 tcurrent = time (NULL);
1607
1608 if (sig_raised > 0)
1609 {
1610
1611 TPT((0, FIL__, __LINE__, _("msg=<Process a signal.>\n")))
1612
1613 if (sig_termfast == 1) /* SIGTERM */
1614 {
1615 TPT((0, FIL__, __LINE__, _("msg=<Terminate.>\n")));
1616 /* strncpy (sh_sig_msg, _("SIGTERM"), 20); */
1617 --sig_raised; --sig_urgent;
1618 aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
1619 }
1620
1621 if (sig_force_check == 1) /* SIGTTOU */
1622 {
1623 TPT((0, FIL__, __LINE__, _("msg=<Check run triggered.>\n")));
1624 flag_check_1 = 1;
1625 flag_check_2 = 1;
1626 sig_force_check = 0;
1627 --sig_raised;
1628 }
1629
1630 if (sig_config_read_again == 1) /* SIGHUP */
1631 {
1632 TPT((0, FIL__, __LINE__, _("msg=<Re-read configuration.>\n")))
1633 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_RECONF);
1634
1635#if defined(WITH_EXTERNAL)
1636 /* delete list of external tasks
1637 */
1638 (void) sh_ext_cleanup();
1639#endif
1640 /* delete the file list, make all database
1641 * entries visible (allignore = FALSE)
1642 */
1643 (void) sh_files_deldirstack ();
1644 (void) sh_files_delfilestack ();
1645 (void) sh_ignore_clean ();
1646 (void) hash_full_tree ();
1647
1648#if defined(SH_WITH_CLIENT)
1649 reset_count_dev_server();
1650#endif
1651#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
1652
1653
1654 FileSchedOne = free_sched(FileSchedOne);
1655 FileSchedTwo = free_sched(FileSchedTwo);
1656
1657 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
1658 {
1659 if (modList[modnum].initval == GOOD)
1660 (void) modList[modnum].mod_reconf();
1661 }
1662#endif
1663
1664#if defined(SH_WITH_MAIL)
1665 reset_count_dev_mail();
1666#endif
1667 reset_count_dev_console();
1668 reset_count_dev_time();
1669
1670 (void) sh_unix_maskreset();
1671
1672 /* Should this be included ???
1673 * (i.e. should we reload the database ?)
1674 */
1675#ifdef RELOAD_DATABASE
1676 sh_hash_hashdelete();
1677#endif
1678 (void) sl_trust_purge_user();
1679 (void) sh_files_hle_reg (NULL);
1680 (void) sh_prelink_run (NULL, NULL, 0);
1681
1682 /* --------------------------
1683 * --- READ CONFIGURATION ---
1684 * --------------------------
1685 */
1686 (void) sh_readconf_read ();
1687 sig_config_read_again = 0;
1688 (void) sh_files_setrec();
1689 (void) sh_files_test_setup();
1690 if (0 != sh.flag.nice)
1691 {
1692#ifdef HAVE_SETPRIORITY
1693 setpriority(PRIO_PROCESS, 0, sh.flag.nice);
1694#else
1695 nice(sh.flag.nice);
1696#endif
1697 }
1698
1699 if (sh.flag.checkSum == SH_CHECK_INIT)
1700 {
1701 sh.flag.isdaemon = S_FALSE;
1702 sh.flag.loop = S_FALSE;
1703 }
1704
1705 /* --- Initialize modules. ---
1706 */
1707 TPT((0, FIL__, __LINE__, _("msg=<Initialize modules.>\n")));
1708 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
1709 {
1710 if (0 != (status = modList[modnum].mod_init()))
1711 {
1712 if (status == (-1)) {
1713 sh_error_handle (SH_ERR_NOTICE, FIL__, __LINE__,
1714 status, MSG_MOD_FAIL,
1715 _(modList[modnum].name),
1716 status);
1717 } else {
1718 sh_error_handle ((-1), FIL__, __LINE__,
1719 status, MSG_MOD_FAIL,
1720 _(modList[modnum].name),
1721 status);
1722 }
1723 modList[modnum].initval = S_FALSE;
1724 }
1725 else
1726 {
1727 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_MOD_OK,
1728 _(modList[modnum].name));
1729 modList[modnum].initval = S_TRUE;
1730 }
1731 }
1732
1733 --sig_raised;
1734 }
1735
1736 if (sig_fresh_trail == 1) /* SIGIOT */
1737 {
1738 /* Logfile access
1739 */
1740#ifdef SH_USE_XML
1741 (void) sh_log_file (NULL, NULL);
1742#endif
1743 TPT((0, FIL__, __LINE__, _("msg=<Logfile stop/restart.>\n")));
1744 sh_error_only_stderr (S_TRUE);
1745 (void) sh_unix_rm_lock_file(sh.srvlog.name);
1746 (void) retry_msleep(3, 0);
1747 sh.flag.log_start = S_TRUE;
1748 sh_error_only_stderr (S_FALSE);
1749 sig_fresh_trail = 0;
1750 --sig_raised;
1751 }
1752
1753 if (sig_terminate == 1) /* SIGQUIT */
1754 {
1755 TPT((0, FIL__, __LINE__, _("msg=<Terminate.>\n")));
1756 strncpy (sh_sig_msg, _("Quit"), 20);
1757 --sig_raised; --sig_urgent;
1758 aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
1759 }
1760
1761 if (sig_debug_switch == 1) /* SIGUSR1 */
1762 {
1763 TPT((0, FIL__, __LINE__, _("msg=<Debug switch.>\n")));
1764 sh_error_dbg_switch();
1765 sig_debug_switch = 0;
1766 --sig_raised;
1767 }
1768
[19]1769 if (sig_suspend_switch > 0) /* SIGUSR2 */
[1]1770 {
1771 TPT((0, FIL__, __LINE__, _("msg=<Suspend switch.>\n")));
1772 if (sh_global_suspend_flag == 1) {
1773 sh_global_suspend_flag = 0;
1774 } else {
1775 sh_error_handle((-1), FIL__, __LINE__, 0, MSG_SUSPEND,
1776 sh.prg_name);
1777 sh_global_suspend_flag = 1;
1778 }
[19]1779 --sig_suspend_switch;
[1]1780 --sig_raised; --sig_urgent;
1781 }
1782 sig_raised = (sig_raised < 0) ? 0 : sig_raised;
1783 sig_urgent = (sig_urgent < 0) ? 0 : sig_urgent;
1784 TPT((0, FIL__, __LINE__, _("msg=<End signal processing.>\n")));
1785 }
1786
1787 if (sh_global_suspend_flag == 1)
1788 {
1789 (void) retry_msleep (1, 0);
1790 continue;
1791 }
1792
1793 /* see whether its time to check files
1794 */
[25]1795 if (sh.flag.checkSum == SH_CHECK_INIT ||
1796 (sh.flag.checkSum == SH_CHECK_CHECK &&
1797 (sh.flag.isdaemon == S_FALSE && sh.flag.loop == S_FALSE)))
[1]1798 {
1799 flag_check_1 = 1;
1800 if (FileSchedTwo != NULL)
1801 flag_check_2 = 1;
1802 }
1803 else if (sh.flag.checkSum == SH_CHECK_CHECK ||
1804 (sh.flag.update == S_TRUE &&
1805 (sh.flag.isdaemon == S_TRUE || sh.flag.loop == S_TRUE)))
1806 {
1807 if (FileSchedOne == NULL)
1808 {
1809 /* use interval if we have no schedule
1810 */
1811 if (tcurrent - sh.fileCheck.alarm_last >=
1812 sh.fileCheck.alarm_interval)
1813 flag_check_1 = 1;
1814 }
1815 else
1816 {
1817 flag_check_1 = test_sched(FileSchedOne);
1818 if (FileSchedTwo != NULL)
1819 flag_check_2 = test_sched(FileSchedTwo);
1820 if (flag_check_2 == 1)
1821 flag_check_1 = 1;
1822 }
1823 }
1824
1825 check_done = 0;
1826
1827 if (sh.flag.checkSum != SH_CHECK_NONE &&
1828 (flag_check_1 == 1 || flag_check_2 == 1))
1829 {
1830 /*
1831 * check directories and files
1832 * ORDER IS IMPORTANT -- DIRZ FIRST
1833 */
1834 sh.statistics.bytes_hashed = 0;
1835 sh.statistics.time_start = time (NULL);
1836 sh.statistics.dirs_checked = 0;
1837 sh.statistics.files_checked = 0;
1838
1839 TPT((0, FIL__, __LINE__, _("msg=<Check directories.>\n")))
1840 BREAKEXIT(sh_dirs_chk);
1841 if (flag_check_1 == 1)
1842 {
1843 (void) sh_dirs_chk (1);
1844#ifndef SH_PROFILE
1845 (void) chdir ("/");
1846#endif
1847 }
1848 if (flag_check_2 == 1)
1849 {
1850 (void) sh_dirs_chk (2);
1851#ifndef SH_PROFILE
1852 (void) chdir ("/");
1853#endif
1854 }
1855 TPT((0, FIL__, __LINE__, _("msg=<Check files.>\n")))
1856 BREAKEXIT(sh_files_chk);
1857 if (flag_check_1 == 1)
1858 (void) sh_files_chk ();
1859
1860 if (sig_urgent > 0)
1861 continue;
1862
1863 /*
1864 * check for files not visited
1865 */
1866 if (flag_check_2 == 1 || FileSchedTwo == NULL)
1867 {
1868 TPT((0, FIL__, __LINE__, _("msg=<Check for missing files.>\n")))
1869 sh_hash_unvisited (ShDFLevel[SH_ERR_T_FILE]);
1870 }
1871
1872 if (sig_urgent > 0)
1873 continue;
1874
1875 /* reset
1876 */
1877 TPT((0, FIL__, __LINE__, _("msg=<Reset status.>\n")))
1878 sh_dirs_reset ();
1879 if (sig_urgent > 0)
1880 continue;
1881
1882 sh_files_reset ();
1883 flag_check_1 = 0;
1884 flag_check_2 = 0;
1885 check_done = 1;
1886
1887 (void) sh_prelink_run (NULL, NULL, 0);
1888
1889 if (sig_urgent > 0)
1890 continue;
1891
1892 runtim = time(NULL) - sh.statistics.time_start;
1893 sh.statistics.time_check = runtim;
1894
1895 if ((sh.statistics.dirs_checked == 0) &&
1896 (sh.statistics.files_checked == 0))
1897 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_CHECK_0);
1898
1899 else
1900 {
1901 st_1 = (float) sh.statistics.bytes_hashed;
1902 st_2 = (float) runtim;
1903
1904
1905 if (st_1 > FLT_EPSILON && st_2 > FLT_EPSILON)
1906 st_1 = st_1/st_2;
1907 else if (st_1 > FLT_EPSILON)
1908 st_1 = (float) (st_1 * 1.0);
1909 else
1910 st_1 = 0.0;
1911
1912 sh.statistics.bytes_speed = (unsigned long) st_1;
1913
1914 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_CHECK_1,
1915 (long) runtim,
1916 0.001 * st_1);
1917 }
1918 sh.fileCheck.alarm_last = time (NULL);
1919
1920 if (sig_urgent > 0)
1921 continue;
1922
1923 /*
1924 * flush mail queue
1925 */
1926#if defined(SH_WITH_MAIL)
1927 TPT((0, FIL__, __LINE__, _("msg=<Flush mail queue.>\n")))
1928 (void) sh_mail_msg (NULL);
1929#endif
1930 }
1931
1932 if (sig_urgent > 0)
1933 continue;
1934
1935 /* execute modules
1936 */
1937 TPT((0, FIL__, __LINE__, _("msg=<Execute modules.>\n")))
1938 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
1939 {
1940 if (modList[modnum].initval == GOOD &&
1941 0 != modList[modnum].mod_timer(tcurrent))
1942 if (0 != (status = modList[modnum].mod_check()))
1943 sh_error_handle ((-1), FIL__, __LINE__, status, MSG_MOD_EXEC,
1944 _(modList[modnum].name), (long) status);
1945 }
1946
1947 /* 27.05.2002 avoid empty database
1948 * 22.10.2002 moved here b/o suid check initialization
1949 */
1950 if (sh.flag.checkSum == SH_CHECK_INIT)
1951 sh_hash_pushdata (NULL, NULL);
1952
1953 /* write out database
1954 */
1955 if (sh.flag.checkSum == SH_CHECK_CHECK &&
1956 sh.flag.update == S_TRUE &&
1957 check_done == 1)
1958 sh_hash_writeout ();
1959
1960 /* no loop if not daemon
1961 */
1962 if (sh.flag.isdaemon != S_TRUE && sh.flag.loop == S_FALSE)
1963 break;
1964 if (sig_urgent > 0)
1965 continue;
1966
1967 /* see whether its time to send mail
1968 */
1969#if defined(SH_WITH_MAIL)
1970 if (tcurrent - sh.mailTime.alarm_last >= sh.mailTime.alarm_interval)
1971 {
1972 TPT((0, FIL__, __LINE__, _("msg=<Flush mail queue.>\n")))
1973 (void) sh_mail_msg (NULL);
1974 sh.mailTime.alarm_last = time (NULL);
1975 }
1976#endif
1977 if (sig_urgent > 0)
1978 continue;
1979
1980 /* log the timestamp
1981 */
1982 if ((int)(tcurrent - told) >= sh.looptime )
1983 {
1984 TPT((0, FIL__, __LINE__, _("msg=<Log the timestamp.>\n")))
1985 told = tcurrent;
1986#ifdef MEM_DEBUG
1987 sh_mem_check();
1988 sh_unix_count_mlock();
1989#else
1990 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_STAMP);
1991#endif
1992 }
1993
1994 /* seed / re-seed the PRNG if required
1995 */
1996 (void) taus_seed();
1997
1998 if (sig_urgent > 0)
1999 continue;
2000
2001 /* go to sleep
2002 */
2003 (void) retry_msleep (1, 0);
2004
2005 BREAKEXIT(sh_derr);
2006 (void) sh_derr();
2007 }
2008
2009 /* ------ END -----------
2010 */
2011
2012
2013
2014 /*
2015 * cleanup
2016 */
2017 TPT((0, FIL__, __LINE__, _("msg=<Cleanup.>\n")));
2018 sh_hash_hashdelete();
2019
2020#if defined(SH_WITH_MAIL)
2021 if (sh.mailNum.alarm_last > 0)
2022 (void)sh_mail_msg (NULL);
2023#endif
2024
2025 /* #if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE) */
2026#endif
2027
2028 aud_exit (FIL__, __LINE__, EXIT_SUCCESS);
2029 SL_RETURN(0, _("main"));
2030}
Note: See TracBrowser for help on using the repository browser.