source: trunk/src/sh_readconf.c@ 560

Last change on this file since 560 was 550, checked in by katerina, 5 years ago

Fix for ticket #442 (support for OpenBSD signify).
File size: 41.4 KB
RevLine 
[1]1/* SAMHAIN file system integrity testing */
2/* Copyright (C) 1999, 2000 Rainer Wichmann */
3/* */
4/* This program is free software; you can redistribute it */
5/* and/or modify */
6/* it under the terms of the GNU General Public License as */
7/* published by */
8/* the Free Software Foundation; either version 2 of the License, or */
9/* (at your option) any later version. */
10/* */
11/* This program is distributed in the hope that it will be useful, */
12/* but WITHOUT ANY WARRANTY; without even the implied warranty of */
13/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the */
14/* GNU General Public License for more details. */
15/* */
16/* You should have received a copy of the GNU General Public License */
17/* along with this program; if not, write to the Free Software */
18/* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
19
20#include "config_xor.h"
21
22
23#include <stdlib.h>
24#include <stdio.h>
25#include <string.h>
26#include <ctype.h>
27
28
29#include "samhain.h"
[265]30#include "sh_calls.h"
[1]31#include "sh_error.h"
[265]32#include "sh_extern.h"
[367]33#include "sh_unix.h"
[1]34#include "sh_files.h"
[481]35#include "sh_xfer.h"
[550]36#include "sh_sig.h"
[1]37#include "sh_hash.h"
[481]38#include "sh_dbIO.h"
[1]39#include "sh_ignore.h"
[265]40#include "sh_database.h"
41#include "sh_mail.h"
42#include "sh_modules.h"
43#include "sh_nmail.h"
[1]44#include "sh_prelink.h"
[181]45#ifdef HAVE_LIBPRELUDE
[1]46#include "sh_prelude.h"
47#endif
[265]48#include "sh_tiger.h"
49#include "sh_tools.h"
50#include "sh_utils.h"
[310]51#include "sh_restrict.h"
[481]52#include "sh_socket.h"
[1]53
[22]54extern int set_reverse_lookup (const char * c);
[1]55
56#undef FIL__
57#define FIL__ _("sh_readconf.c")
58
59typedef enum {
60 SH_SECTION_NONE,
61 SH_SECTION_LOG,
62 SH_SECTION_MISC,
63 SH_SECTION_ATTRIBUTES,
64 SH_SECTION_READONLY,
65 SH_SECTION_LOGFILES,
66 SH_SECTION_LOGGROW,
67 SH_SECTION_NOIGNORE,
68 SH_SECTION_ALLIGNORE,
69 SH_SECTION_USER0,
70 SH_SECTION_USER1,
[27]71 SH_SECTION_USER2,
72 SH_SECTION_USER3,
73 SH_SECTION_USER4,
[1]74 SH_SECTION_PRELINK,
75#if defined (SH_WITH_MAIL)
76 SH_SECTION_MAIL,
77#endif
78#if defined (SH_WITH_CLIENT)
79 SH_SECTION_CLT,
80#endif
81#ifdef WITH_EXTERNAL
82 SH_SECTION_EXTERNAL,
83#endif
84#ifdef WITH_DATABASE
85 SH_SECTION_DATABASE,
86#endif
87#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
88 SH_SECTION_OTHER,
89#endif
90#ifdef SH_WITH_SERVER
91 SH_SECTION_CLIENTS,
92 SH_SECTION_SRV,
93#endif
94 SH_SECTION_THRESHOLD
95} ShSectionType;
96
97typedef struct str_ListSections {
[170]98 const char * name;
[1]99 int type;
100} sh_str_ListSections;
101
102struct str_ListSections tab_ListSections[] = {
103 { N_("[Log]"), SH_SECTION_LOG},
104 { N_("[Misc]"), SH_SECTION_MISC},
105 { N_("[Attributes]"), SH_SECTION_ATTRIBUTES},
106 { N_("[ReadOnly]"), SH_SECTION_READONLY},
107 { N_("[LogFiles]"), SH_SECTION_LOGFILES},
108 { N_("[GrowingLogFiles]"), SH_SECTION_LOGGROW},
109 { N_("[IgnoreAll]"), SH_SECTION_ALLIGNORE},
110 { N_("[IgnoreNone]"), SH_SECTION_NOIGNORE},
111 { N_("[User0]"), SH_SECTION_USER0},
112 { N_("[User1]"), SH_SECTION_USER1},
[27]113 { N_("[User2]"), SH_SECTION_USER2},
114 { N_("[User3]"), SH_SECTION_USER3},
115 { N_("[User4]"), SH_SECTION_USER4},
[1]116 { N_("[Prelink]"), SH_SECTION_PRELINK},
117#ifdef WITH_EXTERNAL
118 { N_("[External]"), SH_SECTION_EXTERNAL},
119#endif
120#ifdef WITH_DATABASE
121 { N_("[Database]"), SH_SECTION_DATABASE},
122#endif
123 { N_("[EventSeverity]"), SH_SECTION_THRESHOLD},
124#ifdef SH_WITH_SERVER
125 { N_("[Clients]"), SH_SECTION_CLIENTS},
126 { N_("[Server]"), SH_SECTION_SRV},
127#endif
128#if defined (SH_WITH_CLIENT)
129 { N_("[Client]"), SH_SECTION_CLT},
130#endif
131#if defined (SH_WITH_MAIL)
132 { N_("[Mail]"), SH_SECTION_MAIL},
133#endif
134 { NULL, SH_SECTION_NONE}
135};
136
[211]137static char * sh_readconf_expand_value (const char * str)
138{
[347]139#ifdef SH_EVAL_SHELL
[481]140 char * tmp = sh_util_strdup(str);
[211]141 char * out;
[481]142 char * tmp_orig = tmp;
[211]143
144 while (tmp && isspace((int)*tmp)) ++tmp;
145
[383]146 if (tmp && tmp[0] == '$' && tmp[1] == '(')
[211]147 {
148 size_t len = strlen(tmp);
149 while (isspace((int) tmp[len-1])) { tmp[len-1] = '\0'; --len; }
150 if (tmp[len-1] == ')')
151 {
152 tmp[len-1] = '\0';
153 out = sh_ext_popen_str(&tmp[2]);
[481]154 SH_FREE(tmp_orig);
[211]155 return out;
156 }
157 }
[481]158 SH_FREE(tmp_orig);
[347]159#endif
[211]160 return sh_util_strdup(str);
161}
162
[197]163enum {
164 SH_RC_ANY = 0,
165 SH_RC_HOST = 1,
166 SH_RC_SYSTEM = 2,
167 SH_RC_FILE = 3,
168 SH_RC_IFACE = 4,
[347]169#ifdef SH_EVAL_SHELL
[197]170 SH_RC_CMD = 5
[347]171#endif
[197]172};
173
174
175static int sh_readconf_cond_match(char * str, int line)
176{
177 int match = 0;
178 int negate = 1;
179 int cond_type = SH_RC_ANY;
180 char myident[3*SH_MINIBUF+3];
181 struct stat buf;
182
183 char * p = str;
184
185 if (*p == '!') { negate = 0; ++p; }
186 if (*p == '$') {
187 cond_type = SH_RC_SYSTEM; ++p; /* [!]$system */
188 }
189 else { /* *p == '@' */
190
191 ++p; while (isspace((int)*p)) ++p;
192
[272]193 if (0 != strncasecmp(p, _("if "), 3)) {
[197]194 cond_type = SH_RC_HOST; /* [!]$host */
195 }
196
197 else {
198
199 p += 3; while (isspace((int)*p)) ++p; /* skip the 'if\s+' */
200
[272]201 if (0 == strncasecmp(p, _("not "), 4))
[197]202 {
203 p += 4; while (isspace((int)*p)) ++p;
204 negate = 0;
[432]205 match = 1;
[197]206 }
207 else if (0 == strncmp(p, _("!"), 1))
208 {
209 ++p; while (isspace((int)*p)) ++p;
210 negate = 0;
[432]211 match = 1;
[197]212 }
213
[272]214 if (0 == strncasecmp(p, _("file_exists "), 12))
[197]215 {
216 p += 12; cond_type = SH_RC_FILE;
217 }
[272]218 else if (0 == strncasecmp(p, _("interface_exists "), 17))
[197]219 {
220 p += 17; cond_type = SH_RC_IFACE;
221 }
[272]222 else if (0 == strncasecmp(p, _("hostname_matches "), 17))
[197]223 {
224 p += 17; cond_type = SH_RC_HOST;
225 }
[272]226 else if (0 == strncasecmp(p, _("system_matches "), 15))
[197]227 {
228 p += 15; cond_type = SH_RC_SYSTEM;
229 }
[347]230#ifdef SH_EVAL_SHELL
[272]231 else if (0 == strncasecmp(p, _("command_succeeds "), 17))
[197]232 {
233 p += 17; cond_type = SH_RC_CMD;
234 }
[347]235#endif
[197]236 else
237 {
238 char errbuf[SH_ERRBUF_SIZE];
239 sl_snprintf(errbuf, sizeof(errbuf),
240 _("Unsupported test at line %d of configuration file"),
241 line);
242 sh_error_handle(SH_ERR_ERR, FIL__, __LINE__, 0, MSG_E_SUBGEN,
243 errbuf,
244 _("sh_readconf_cond_match"));
245 return 0;
246 }
247 }
248 }
249
250 while (isspace((int)*p)) ++p;
251
252 switch (cond_type)
253 {
254 case SH_RC_HOST:
255 if (sl_strncmp (p, sh.host.name, strlen(sh.host.name)) == 0
256#ifdef HAVE_REGEX_H
257 || sh_util_regcmp (p, sh.host.name) == 0
258#endif
259 )
260 match = negate;
261 break;
262 case SH_RC_SYSTEM:
263 /*
264 * The system type, release, and machine.
265 */
266 sl_snprintf(myident, sizeof(myident), _("%s:%s:%s"),
267 sh.host.system, /* flawfinder: ignore */
268 sh.host.release, sh.host.machine);
269
[279]270 if (sl_strncmp (p, myident, strlen(myident)) == 0
[197]271#ifdef HAVE_REGEX_H
272 || sh_util_regcmp (p, myident) == 0
273#endif
274 )
275 match = negate;
276 break;
277 case SH_RC_FILE:
278 if (0 == retry_lstat(FIL__, __LINE__, p, &buf))
279 match = negate;
280 break;
281 case SH_RC_IFACE:
282 if (sh_tools_iface_is_present(p))
283 match = negate;
284 break;
[347]285#ifdef SH_EVAL_SHELL
[197]286 case SH_RC_CMD:
287 if (0 == sh_unix_run_command(p))
288 match = negate;
289 break;
[347]290#endif
[197]291 default:
[432]292 /* do nothing */;
[197]293 }
294 return match;
295}
296
297static int sh_readconf_is_end (char * str)
298{
299 int retval = 0;
300
301 if (str[0] == '@' || str[0] == '$')
302 {
303 char * p = str;
304 ++p; while (isspace((int)*p)) ++p;
[199]305 if (
[272]306 (0 == strncasecmp (p, _("end"), 3) && (p[3] == '\0' || isspace((int)p[3]))) ||
307 (0 == strncasecmp (p, _("fi"), 2) && (p[2] == '\0' || isspace((int)p[2])))
[199]308 )
[197]309 {
310 return 1;
311 }
312 }
313 return retval;
314}
[1]315
[199]316static int sh_readconf_is_else (char * str)
317{
318 int retval = 0;
319
320 if (str[0] == '@')
321 {
322 char * p = str;
323 ++p; while (isspace((int)*p)) ++p;
[272]324 if ( 0 == strncasecmp (p, _("else"), 4) && (p[4] == '\0' || isspace((int)p[4])) )
[199]325 {
326 return 1;
327 }
328 }
329 return retval;
330}
331
[1]332static int sh_readconfig_line (char * line);
333
334static ShSectionType read_mode = SH_SECTION_NONE;
335
336static int conf_line = 0;
337
338/* --- Read the configuration file. ---
339 */
340int sh_readconf_read (void)
341{
342#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
343 /* This is for modules.
344 */
345 int modnum;
346#endif
347
348 int i;
349
350 SL_TICKET fd = -1;
351#if defined(SH_STEALTH) && !defined(SH_STEALTH_MICRO)
352 SL_TICKET fdTmp = -1;
353#endif
[550]354#if defined(WITH_SIG)
355 SL_TICKET fdSIG = -1;
[347]356#endif
[1]357 char * tmp;
358
[286]359#define SH_LINE_IN 16384
360 char * line_in;
[1]361 char * line;
362
363 /* This is for nested conditionals.
364 */
[197]365 int cond_depth = 0;
366 int cond_excl = 0;
367
[1]368 int local_file = 1;
369 char local_flag = 'R';
370
[550]371#if defined(WITH_SIG)
[1]372 int signed_content = S_FALSE;
373 int true_content = S_FALSE;
374#endif
375#if defined(SH_STEALTH) && !defined(SH_STEALTH_MICRO)
376 int hidden_count = 0;
377#endif
378 uid_t euid;
[133]379 char hashbuf[KEYBUF_SIZE];
[1]380
381 SL_ENTER(_("sh_readconf_read"));
382
383 /* --- Open config file, exit on failure. ---
384 */
385#if defined(SH_WITH_CLIENT)
386 if (0 == sl_strcmp(file_path('C', 'R'), _("REQ_FROM_SERVER")))
387 {
388 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_D_START);
389
[481]390 fd = sh_xfer_request_file(_("CONF"));
[1]391
392 if (!SL_ISERROR(fd))
[286]393 {
394 local_file = 0;
395 }
[1]396 else if (sh.flag.checkSum != SH_CHECK_INIT)
[286]397 {
[481]398 sh_error_handle((-1), FIL__, __LINE__, 0, MSG_TCP_FBAD);
[286]399 aud_exit (FIL__, __LINE__, EXIT_FAILURE);
400 }
[1]401 else
402 {
[481]403 sh_error_handle(SH_ERR_WARN, FIL__, __LINE__, 0, MSG_TCP_FBAD);
[1]404 sh_error_handle ((-1), FIL__, __LINE__, fd, MSG_D_FAIL);
405 local_file = 1;
406 local_flag = 'I';
407 }
408 }
409#endif
410
411 /* Use a local configuration file.
412 */
413 if (local_file == 1)
414 {
415 if (0 != tf_trust_check (file_path('C', local_flag), SL_YESPRIV))
416 {
417 sl_get_euid(&euid);
418 dlog(1, FIL__, __LINE__,
419 _("The configuration file: %s is untrusted, i.e. an\nuntrusted user owns or can write to some directory in the path.\n"),
420 ( (NULL == file_path('C', local_flag))
421 ? _("(null)") : file_path('C', local_flag) ));
422 sh_error_handle ((-1), FIL__, __LINE__, EACCES, MSG_TRUST,
423 (long) euid,
424 ( (NULL == file_path('C', local_flag))
425 ? _("(null)") : file_path('C', local_flag) )
426 );
427 aud_exit (FIL__, __LINE__, EXIT_FAILURE);
428 }
[248]429 if (SL_ISERROR(fd = sl_open_read(FIL__, __LINE__,
430 file_path('C',local_flag),SL_YESPRIV)))
[1]431 {
432 sl_get_euid(&euid);
433 dlog(1, FIL__, __LINE__,
434 _("Could not open the local configuration file for reading because\nof the following error: %s (errnum = %ld)\nIf this is a permission problem, you need to change file permissions\nto make the file readable for the effective UID: %d\n"),
435 sl_get_errmsg(), fd, (int) euid);
436 sh_error_handle ((-1), FIL__, __LINE__, fd, MSG_NOACCESS,
437 (long) euid,
438 ( (NULL == file_path('C', local_flag))
439 ? _("(null)") : file_path('C', local_flag) )
440 );
441 aud_exit (FIL__, __LINE__, EXIT_FAILURE);
442 }
443 }
444
445 /* Compute the checksum of the open file.
446 */
447 sl_strlcpy(sh.conf.hash,
[248]448 sh_tiger_hash(file_path('C',local_flag), fd, TIGER_NOLIM,
449 hashbuf, sizeof(hashbuf)),
[1]450 KEY_LEN+1);
451 sl_rewind (fd);
452
[286]453 line_in = SH_ALLOC(SH_LINE_IN);
454
[1]455#if defined(SH_STEALTH) && !defined(SH_STEALTH_MICRO)
456 /* extract the data and copy to temporary file
457 */
458 fdTmp = open_tmp();
[194]459
460 sh_unix_getline_stealth (0, NULL, 0); /* initialize */
461
[286]462 while ( sh_unix_getline_stealth (fd, line_in, SH_LINE_IN-2) > 0) {
[1]463 hidden_count++;
464 if (line_in[0] == '\n')
465 {
466 sl_write(fdTmp, line_in, 1);
467 }
468 else
469 {
470 sl_write_line(fdTmp, line_in, sl_strlen(line_in));
471 }
[550]472#if defined(WITH_SIG)
473 if (S_TRUE == sh_sig_data_end(line_in))
[1]474 break;
475#else
476 if (0 == sl_strncmp(line_in, _("[EOF]"), 5))
477 break;
478#endif
[286]479 if (hidden_count > 1048576) /* arbitrary safeguard, 1024*1024 */
[1]480 break;
481 }
482 sl_close(fd);
483 fd = fdTmp;
484 sl_rewind (fd);
485#endif
486
[550]487#if defined(WITH_SIG)
[1]488
[347]489 /* extract the data and copy to temporary file
490 */
[550]491 fdSIG = sh_sig_extract_signed(fd);
[347]492
493 sl_close(fd);
[550]494 fd = fdSIG;
[347]495
496 /* Validate signature of open file.
497 */
[550]498 if (0 != sh_sig_check_signature (fd, SIG_CONF))
[347]499 {
500 SH_FREE(line_in);
[481]501 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EXIT_ABORT1, sh.prg_name);
[347]502 aud_exit (FIL__, __LINE__, EXIT_FAILURE);
503 }
504 sl_rewind (fd);
505#endif
506
507
[1]508 /* --- Start reading lines. ---
509 */
510 conf_line = 0;
511
[286]512 while ( sh_unix_getline (fd, line_in, SH_LINE_IN-2) > 0) {
[1]513
514 ++conf_line;
515
516 line = &(line_in[0]);
517
518 /* fprintf(stderr, "<%s>\n", line); */
519
520 /* Sun May 27 18:40:05 CEST 2001
521 */
[550]522#if defined(WITH_SIG)
[1]523 if (signed_content == S_FALSE)
524 {
[550]525 if (S_TRUE == sh_sig_msg_start(line))
[1]526 signed_content = S_TRUE;
527 else
528 continue;
529 }
[550]530 else /* if (signed_content == S_TRUE) */
[1]531 {
[550]532 if (S_TRUE == sh_sig_msg_end(line))
[1]533 break;
[550]534 else if (S_TRUE == sh_sig_msg_start(line))
[1]535 {
536 sh_error_handle((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
537 _("second signed message in file"),
538 _("sh_readconf_read"));
539 dlog(1, FIL__, __LINE__,
540 _("There seems to be more than one signed message in the configuration\nfile. Please make sure there is only one signed message.\n"));
541 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EXIT_ABORT1,
542 sh.prg_name);
[286]543 SH_FREE(line_in);
[1]544 aud_exit (FIL__, __LINE__,EXIT_FAILURE);
545 }
546 }
[550]547
548 if (true_content == S_FALSE) /* continue if in header */
549 {
550 if (S_TRUE == sh_sig_msg_startdata(line))
551 true_content = S_TRUE;
552 else
553 continue;
554 }
[1]555#endif
556
557 /* Skip leading white space.
558 */
[197]559 while (isspace((int)*line)) ++line;
[1]560
[197]561
[1]562 /* Skip header etc.
563 */
564 if (line[0] == '#' || line[0] == '\0' || line[0] == ';' ||
565 (line[0] == '/' && line[1] == '/'))
566 continue;
567
568 /* Clip off trailing white space.
569 */
570 tmp = line + sl_strlen( line ); --tmp;
571 while( isspace((int) *tmp ) && tmp >= line ) *tmp-- = '\0';
572
573
[197]574 /* --- an @host/@if/$system directive -------------- */
575
576 if (line[0] == '@' || (line[0] == '!' && line[1] == '@') ||
577 line[0] == '$' || (line[0] == '!' && line[1] == '$'))
578 {
579 if (sh_readconf_is_end(line))
580 {
581 if (0 == cond_depth) {
582 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALD,
583 _("config file"),
584 (long) conf_line);
585 }
586 else {
587 if (cond_excl == cond_depth)
588 cond_excl = 0;
589 --cond_depth;
590 }
591 }
[199]592 else if (sh_readconf_is_else(line))
593 {
594 if (0 == cond_depth) {
595 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALD,
596 _("config file"),
597 (long) conf_line);
598 }
599 else if (cond_excl == cond_depth) {
600 cond_excl = 0;
601 }
602 else if (cond_excl == 0) {
603 cond_excl = cond_depth;
604 }
605 }
[197]606 else
607 {
608 if (sh_readconf_cond_match(line, conf_line)) {
609 ++cond_depth;
610 }
611 else {
612 ++cond_depth;
613 if (cond_excl == 0)
614 cond_excl = cond_depth;
615 }
616 }
617 continue;
618 }
619
[432]620 /* fprintf(stderr, "%d %s\n", cond_excl, line); */
621
[197]622 /****************************************************
623 *
624 * Only carry on if this section is intended for us
625 *
626 ****************************************************/
627
628 if (cond_excl != 0) {
629 continue;
630 }
631
[1]632 /* ------- starts a section ------------ */
633
[197]634 else if (line[0] == '[')
[1]635 {
636 read_mode = SH_SECTION_NONE;
637
[272]638 if (0 == sl_strncasecmp (line, _("[EOF]"), 5)) {
[197]639 goto nopel;
640 }
[1]641
642 i = 0;
643
644 while (tab_ListSections[i].name != 0)
645 {
[272]646 if (sl_strncasecmp (line, _(tab_ListSections[i].name),
647 sl_strlen(tab_ListSections[i].name)) == 0)
[1]648 {
649 read_mode = tab_ListSections[i].type;
650 break;
651 }
652 ++i;
653 }
654
655#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
656 if (read_mode == SH_SECTION_NONE)
657 {
658 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
659 {
[272]660 if (0 == sl_strncasecmp (line, _(modList[modnum].conf_section),
661 sl_strlen(modList[modnum].conf_section)) )
[1]662 read_mode = SH_SECTION_OTHER;
663 }
664 }
665#endif
666 if (read_mode == SH_SECTION_NONE)
667 {
668 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALHEAD,
669 (long) conf_line);
670 }
671 }
672
673 /* --- an %schedule directive ------------ */
674
675 else if (line[0] == '%' || (line[0] == '!' && line[1] == '%'))
676 {
677#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
[272]678 if (line[0] == '!' && 0 == sl_strcasecmp(&(line[2]), _("SCHEDULE_TWO")))
[1]679 set_dirList(1);
[272]680 else if (0 == sl_strcasecmp(&(line[1]), _("SCHEDULE_TWO")))
[1]681 set_dirList(2);
682#else
683 ;
684#endif
685 }
686
687 /* ------ no new section -------------- */
688
689
[197]690 else if (read_mode != SH_SECTION_NONE)
[1]691 {
692 if (0 != sh_readconfig_line (line))
693 {
694 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALCONF,
695 (long) conf_line);
696 }
697 }
[197]698 } /* while getline() */
[1]699
700 nopel:
701
[197]702 if (0 != cond_depth)
[1]703 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALDD,
704 _("config file"),
705 (long) conf_line);
706
707 sl_close (fd);
708
709 sh_error_fixup();
710
711 read_mode = SH_SECTION_NONE; /* reset b/o sighup reload */
712
[286]713 SH_FREE(line_in);
[1]714 SL_RETURN( 0, _("sh_readconf_read"));
715}
716
[22]717int sh_readconf_set_path (char * which, const char * what)
[1]718{
719 int len;
720 SL_ENTER( _("sh_readconf_set_path"));
721
722 if (which == NULL || what == NULL)
723 {
724 TPT((0, FIL__, __LINE__ , _("msg=<Input error>\n")));
725 SL_RETURN( -1, _("sh_readconf_set_path"));
726 }
727
728 if (0 == sl_strcmp(what, _("AUTO")))
729 {
730 len = sl_strlen(which);
731 if ( (len + sl_strlen(sh.host.name) + 2) > SH_PATHBUF)
732 {
733 TPT((0, FIL__, __LINE__ , _("msg=<Path too large: %s:%s>\n"),
734 which, sh.host.name));
735 SL_RETURN( -1, _("sh_readconf_set_path"));
736 }
737 else
738 {
739 which[len] = ':'; which[len+1] = '\0';
740 sl_strlcat(which, sh.host.name, SH_PATHBUF);
741 }
742 }
743 else /* not auto */
744 {
745 if (sl_strlen(what) > (SH_PATHBUF-1))
746 {
747 TPT((0, FIL__, __LINE__ , _("msg=<Path too large: %s>\n"), what));
748 SL_RETURN( -1, _("sh_readconf_set_path"));
749 }
750 else
751 {
752 sl_strlcpy(which, what, SH_PATHBUF);
753 }
754 }
755 SL_RETURN( 0, _("sh_readconf_set_path"));
756}
757
[22]758int sh_readconf_set_database_path (const char * what)
[1]759{
760 return (sh_readconf_set_path(sh.data.path, what));
761}
762
[22]763int sh_readconf_set_logfile_path (const char * what)
[1]764{
765 return (sh_readconf_set_path(sh.srvlog.name, what));
766}
767
[22]768int sh_readconf_set_lockfile_path (const char * what)
[1]769{
770 return( sh_readconf_set_path(sh.srvlog.alt, what));
771}
772
773
774
775
776typedef enum {
777 SET_MAILTIME,
778 SET_FILETIME
779} ShTimerItem;
780
781
[22]782int sh_readconf_setTime (const char * str, ShTimerItem what)
[1]783{
784 unsigned long i = atoi (str);
785
786 SL_ENTER( _("sh_readconf_setTime"));
787
788 if (i < LONG_MAX)
789 {
790 if (what == SET_MAILTIME)
791 {
792 TPT((0, FIL__, __LINE__, _("msg=<Set mail timer to %ld>\n"), i));
793 sh.mailTime.alarm_interval = i;
794 }
795 else if (what == SET_FILETIME)
796 {
797 TPT((0, FIL__, __LINE__, _("msg=<Set filecheck timer to %ld>\n"),i));
798 sh.fileCheck.alarm_interval = i;
799 }
800
801 SL_RETURN( 0, _("sh_readconf_setTime"));
802 }
803 else
804 {
805 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALL,
806 _("set timer"), (long) i);
807 SL_RETURN( (-1), _("sh_readconf_setTime"));
808 }
809}
810
[22]811int sh_readconf_setMailtime (const char * c)
[1]812{
813 return sh_readconf_setTime (c, SET_MAILTIME);
814}
815
[22]816int sh_readconf_setFiletime (const char * c)
[1]817{
818 return sh_readconf_setTime (c, SET_FILETIME);
819}
820
[22]821int sh_readconf_set_nice (const char * c)
[1]822{
823 long val;
824
825 SL_ENTER(_("sh_readconf_set_nice"));
826
827 val = strtol (c, (char **)NULL, 10);
828 if (val < -20 || val > 20)
829 {
830 SL_RETURN((-1), _("sh_readconf_set_nice"));
831 }
832
833 val = (val < -19 ? -19 : val);
834 val = (val > 19 ? 19 : val);
835
836 sh.flag.nice = val;
837 SL_RETURN((0), _("sh_readconf_set_nice"));
838}
839
[481]840
841#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
842static int sh_readconf_set_delay (const char * c)
843{
844 unsigned long i = atol (c);
845
846 if (i > INT_MAX)
847 return -i;
848 sh.delayload = (int) i;
849 return 0;
850}
851#endif
852
[1]853#ifdef FANCY_LIBCAP
[22]854int sh_readconf_setCaps(const char * c)
[1]855{
856 int i;
857 SL_ENTER(_("sh_readconf_setCaps"));
858
859 i = sh_util_flagval(c, &sl_useCaps);
860 SL_RETURN((i), _("sh_readconf_setCaps"));
861}
862#endif
863
864typedef struct _cfg_options {
[170]865 const char * optname;
[1]866 ShSectionType section;
867 ShSectionType alt_section;
[22]868 int (*func)(const char * opt);
[1]869} cfg_options;
870
871#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
[22]872extern int sh_set_schedule_one(const char * str);
873extern int sh_set_schedule_two(const char * str);
[488]874extern int sh_set_silent_full (const char * str);
[1]875#endif
876#if defined (SH_WITH_SERVER)
[22]877extern int sh_socket_use (const char * c);
878extern int sh_socket_uid (const char * c);
879extern int sh_socket_password (const char * c);
[1]880#endif
881
882cfg_options ext_table[] = {
883#if defined(WITH_EXTERNAL)
884 { N_("opencommand"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
885 sh_ext_setcommand },
[164]886 { N_("closecommand"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
887 sh_ext_close_command },
[1]888 { N_("setcommandline"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
889 sh_ext_add_argv },
890 { N_("setchecksum"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
891 sh_ext_checksum },
892 { N_("setdefault"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
893 sh_ext_add_default },
894 { N_("setenviron"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
895 sh_ext_add_environ },
896 { N_("setdeadtime"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
897 sh_ext_deadtime },
898 { N_("settype"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
899 sh_ext_type },
900 { N_("setcredentials"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
901 sh_ext_priv },
902 { N_("setfilternot"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
903 sh_ext_add_not },
904 { N_("setfilterand"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
905 sh_ext_add_and },
906 { N_("setfilteror"), SH_SECTION_EXTERNAL, SH_SECTION_NONE,
907 sh_ext_add_or },
908 { N_("externalseverity"),SH_SECTION_LOG, SH_SECTION_EXTERNAL,
[22]909 sh_error_set_external },
[1]910 { N_("externalclass"), SH_SECTION_LOG, SH_SECTION_EXTERNAL,
911 sh_error_external_mask },
912#endif
913
914#if defined(WITH_DATABASE)
915 { N_("usepersistent"), SH_SECTION_DATABASE, SH_SECTION_NONE,
916 sh_database_use_persistent },
917 { N_("setdbname"), SH_SECTION_DATABASE, SH_SECTION_NONE,
918 sh_database_set_database },
919 { N_("setdbtable"), SH_SECTION_DATABASE, SH_SECTION_NONE,
920 sh_database_set_table },
921 { N_("setdbhost"), SH_SECTION_DATABASE, SH_SECTION_NONE,
922 sh_database_set_host },
923 { N_("setdbuser"), SH_SECTION_DATABASE, SH_SECTION_NONE,
924 sh_database_set_user },
925 { N_("setdbpassword"), SH_SECTION_DATABASE, SH_SECTION_NONE,
926 sh_database_set_password },
927 { N_("addtodbhash"), SH_SECTION_DATABASE, SH_SECTION_NONE,
928 sh_database_add_to_hash },
929 { N_("databaseseverity"),SH_SECTION_LOG, SH_SECTION_DATABASE,
930 sh_error_set_database },
931 { N_("databaseclass"), SH_SECTION_LOG, SH_SECTION_DATABASE,
932 sh_error_database_mask },
933 { N_("setdbservertstamp"), SH_SECTION_DATABASE, SH_SECTION_NONE,
934 set_enter_wrapper },
935#endif
936
[22]937
[1]938#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
939 { N_("dir"), SH_SECTION_ATTRIBUTES, SH_SECTION_NONE,
940 sh_files_pushdir_attr },
941 { N_("file"), SH_SECTION_ATTRIBUTES, SH_SECTION_NONE,
942 sh_files_pushfile_attr },
943 { N_("dir"), SH_SECTION_READONLY, SH_SECTION_NONE,
944 sh_files_pushdir_ro },
945 { N_("file"), SH_SECTION_READONLY, SH_SECTION_NONE,
946 sh_files_pushfile_ro },
947 { N_("dir"), SH_SECTION_LOGFILES, SH_SECTION_NONE,
948 sh_files_pushdir_log },
949 { N_("file"), SH_SECTION_LOGFILES, SH_SECTION_NONE,
950 sh_files_pushfile_log },
951 { N_("dir"), SH_SECTION_LOGGROW, SH_SECTION_NONE,
952 sh_files_pushdir_glog },
953 { N_("file"), SH_SECTION_LOGGROW, SH_SECTION_NONE,
954 sh_files_pushfile_glog },
955 { N_("dir"), SH_SECTION_NOIGNORE, SH_SECTION_NONE,
956 sh_files_pushdir_noig },
957 { N_("file"), SH_SECTION_NOIGNORE, SH_SECTION_NONE,
958 sh_files_pushfile_noig },
959 { N_("dir"), SH_SECTION_ALLIGNORE, SH_SECTION_NONE,
960 sh_files_pushdir_allig },
961 { N_("file"), SH_SECTION_ALLIGNORE, SH_SECTION_NONE,
962 sh_files_pushfile_allig },
963
964 { N_("dir"), SH_SECTION_USER0, SH_SECTION_NONE,
965 sh_files_pushdir_user0 },
966 { N_("file"), SH_SECTION_USER0, SH_SECTION_NONE,
967 sh_files_pushfile_user0 },
968 { N_("dir"), SH_SECTION_USER1, SH_SECTION_NONE,
969 sh_files_pushdir_user1 },
970 { N_("file"), SH_SECTION_USER1, SH_SECTION_NONE,
971 sh_files_pushfile_user1 },
[27]972 { N_("dir"), SH_SECTION_USER2, SH_SECTION_NONE,
973 sh_files_pushdir_user2 },
974 { N_("file"), SH_SECTION_USER2, SH_SECTION_NONE,
975 sh_files_pushfile_user2 },
976 { N_("dir"), SH_SECTION_USER3, SH_SECTION_NONE,
977 sh_files_pushdir_user3 },
978 { N_("file"), SH_SECTION_USER3, SH_SECTION_NONE,
979 sh_files_pushfile_user3 },
980 { N_("dir"), SH_SECTION_USER4, SH_SECTION_NONE,
981 sh_files_pushdir_user4 },
982 { N_("file"), SH_SECTION_USER4, SH_SECTION_NONE,
983 sh_files_pushfile_user4 },
[1]984 { N_("dir"), SH_SECTION_PRELINK, SH_SECTION_NONE,
985 sh_files_pushdir_prelink },
986 { N_("file"), SH_SECTION_PRELINK, SH_SECTION_NONE,
987 sh_files_pushfile_prelink },
988
[481]989 { N_("ignoreadded"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]990 sh_ignore_add_new },
[481]991 { N_("ignoremissing"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]992 sh_ignore_add_del },
[481]993 { N_("ignoremodified"), SH_SECTION_MISC, SH_SECTION_NONE,
[425]994 sh_ignore_add_mod },
[1]995
[481]996 { N_("skipchecksum"), SH_SECTION_MISC, SH_SECTION_NONE,
[310]997 sh_restrict_define },
[481]998 { N_("filetype"), SH_SECTION_MISC, SH_SECTION_NONE,
[310]999 sh_restrict_add_ftype },
1000
1001
[1]1002 { N_("filecheckscheduleone"), SH_SECTION_MISC, SH_SECTION_NONE,
1003 sh_set_schedule_one },
1004 { N_("filecheckscheduletwo"), SH_SECTION_MISC, SH_SECTION_NONE,
1005 sh_set_schedule_two },
1006
[481]1007 { N_("usehardlinkcheck"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1008 sh_files_check_hardlinks },
[481]1009 { N_("usersrccheck"), SH_SECTION_MISC, SH_SECTION_NONE,
[254]1010 sh_files_use_rsrc },
[481]1011 { N_("hardlinkoffset"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1012 sh_files_hle_reg },
[68]1013#if defined(USE_XATTR)
[481]1014 { N_("useselinuxcheck"), SH_SECTION_MISC, SH_SECTION_NONE,
[68]1015 sh_unix_setcheckselinux },
1016#endif
1017#if defined(USE_ACL)
[481]1018 { N_("useaclcheck"), SH_SECTION_MISC, SH_SECTION_NONE,
[68]1019 sh_unix_setcheckacl },
1020#endif
[514]1021#if !defined(SH_COMPILE_STATIC) && defined(__linux__) && defined(HAVE_AUPARSE_H) && defined(HAVE_AUPARSE_LIB)
1022 { N_("setauditdflags"), SH_SECTION_MISC, SH_SECTION_NONE,
1023 sh_audit_set_flags },
1024#endif
[481]1025 { N_("loosedircheck"), SH_SECTION_MISC, SH_SECTION_NONE,
[205]1026 sh_hash_loosedircheck },
[481]1027 { N_("addokchars"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1028 sh_util_obscure_ok },
[481]1029 { N_("filenamesareutf8"), SH_SECTION_MISC, SH_SECTION_NONE,
[68]1030 sh_util_obscure_utf8 },
[481]1031 { N_("setrecursionlevel"), SH_SECTION_MISC, SH_SECTION_NONE,
[22]1032 sh_files_setrecursion },
[481]1033 { N_("checksumtest"), SH_SECTION_MISC, SH_SECTION_NONE,
[22]1034 sh_util_setchecksum },
[481]1035 { N_("reportonlyonce"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1036 sh_files_reportonce },
[481]1037 { N_("reportfulldetail"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1038 sh_files_fulldetail },
[481]1039 { N_("uselocaltime"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1040 sh_unix_uselocaltime },
1041
[481]1042 { N_("setnicelevel"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1043 sh_readconf_set_nice },
1044
[481]1045 { N_("startuploaddelay"), SH_SECTION_MISC, SH_SECTION_NONE,
1046 sh_readconf_set_delay },
1047
[1]1048#if defined(FANCY_LIBCAP)
[481]1049 { N_("usecaps"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1050 sh_readconf_setCaps },
1051#endif
1052
[481]1053 { N_("reportcheckflags"), SH_SECTION_MISC, SH_SECTION_NONE,
1054 set_report_checkflags },
1055
1056 { N_("setdropcache"), SH_SECTION_MISC, SH_SECTION_NONE,
[196]1057 sl_set_drop_cache },
1058
[481]1059 { N_("setiolimit"), SH_SECTION_MISC, SH_SECTION_NONE,
[1]1060 sh_unix_set_io_limit },
1061
1062 { N_("versionstring"), SH_SECTION_MISC, SH_SECTION_NONE,
[481]1063 sh_dbIO_version_string },
[1]1064
1065 { N_("digestalgo"), SH_SECTION_MISC, SH_SECTION_NONE,
1066 sh_tiger_hashtype },
1067
1068 { N_("redefreadonly"), SH_SECTION_MISC, SH_SECTION_NONE,
1069 sh_files_redef_readonly },
1070
1071 { N_("redeflogfiles"), SH_SECTION_MISC, SH_SECTION_NONE,
1072 sh_files_redef_logfiles },
1073
1074 { N_("redefgrowinglogfiles"), SH_SECTION_MISC, SH_SECTION_NONE,
1075 sh_files_redef_loggrow },
1076
1077 { N_("redefattributes"), SH_SECTION_MISC, SH_SECTION_NONE,
1078 sh_files_redef_attributes },
1079
1080 { N_("redefignorenone"), SH_SECTION_MISC, SH_SECTION_NONE,
1081 sh_files_redef_noignore },
1082
1083 { N_("redefignoreall"), SH_SECTION_MISC, SH_SECTION_NONE,
1084 sh_files_redef_allignore },
1085
1086 { N_("redefuser0"), SH_SECTION_MISC, SH_SECTION_NONE,
1087 sh_files_redef_user0 },
1088
1089 { N_("redefuser1"), SH_SECTION_MISC, SH_SECTION_NONE,
1090 sh_files_redef_user1 },
1091
[27]1092 { N_("redefuser2"), SH_SECTION_MISC, SH_SECTION_NONE,
1093 sh_files_redef_user2 },
1094
1095 { N_("redefuser3"), SH_SECTION_MISC, SH_SECTION_NONE,
1096 sh_files_redef_user3 },
1097
1098 { N_("redefuser4"), SH_SECTION_MISC, SH_SECTION_NONE,
1099 sh_files_redef_user4 },
1100
[1]1101 { N_("redefprelink"), SH_SECTION_MISC, SH_SECTION_NONE,
1102 sh_files_redef_prelink },
1103
1104
1105 { N_("setprelinkpath"), SH_SECTION_MISC, SH_SECTION_NONE,
1106 sh_prelink_set_path },
1107 { N_("setprelinkchecksum"), SH_SECTION_MISC, SH_SECTION_NONE,
1108 sh_prelink_set_hash },
[22]1109
[488]1110 { N_("setfullsilent"), SH_SECTION_MISC, SH_SECTION_NONE,
1111 sh_set_silent_full },
1112
[1]1113 /* client or standalone
1114 */
1115#endif
1116
1117#ifdef SH_WITH_SERVER
1118#ifdef INET_SYSLOG
1119 { N_("setudpactive"), SH_SECTION_SRV, SH_SECTION_MISC,
1120 set_syslog_active },
1121#endif
1122 { N_("setusesocket"), SH_SECTION_SRV, SH_SECTION_MISC,
1123 sh_socket_use },
1124 { N_("setsocketallowuid"), SH_SECTION_SRV, SH_SECTION_MISC,
1125 sh_socket_uid },
1126 { N_("setsocketpassword"), SH_SECTION_SRV, SH_SECTION_MISC,
1127 sh_socket_password },
1128 { N_("setstripdomain"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1129 sh_xfer_set_strip },
[1]1130 { N_("useseparatelogs"), SH_SECTION_SRV, SH_SECTION_MISC,
1131 set_flag_sep_log },
1132 { N_("setchrootdir"), SH_SECTION_SRV, SH_SECTION_MISC,
[22]1133 sh_unix_set_chroot },
[1]1134 { N_("setclienttimelimit"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1135 sh_xfer_set_time_limit },
[219]1136 { N_("setconnectiontimeout"),SH_SECTION_SRV, SH_SECTION_MISC,
[481]1137 sh_xfer_set_timeout },
[1]1138 { N_("useclientseverity"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1139 sh_xfer_use_clt_sev },
[1]1140 { N_("useclientclass"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1141 sh_xfer_use_clt_class },
[1]1142 { N_("severitylookup"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1143 sh_xfer_lookup_level },
[1]1144 { N_("setclientfromaccept"), SH_SECTION_SRV, SH_SECTION_MISC,
1145 set_socket_peer },
1146 { N_("setserverport"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1147 sh_xfer_set_port },
[1]1148 { N_("setserverinterface"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1149 sh_xfer_set_interface },
[1]1150 { N_("client"), SH_SECTION_CLIENTS, SH_SECTION_NONE,
[481]1151 sh_xfer_register_client },
[1]1152#endif
1153
[27]1154#if defined(SH_WITH_CLIENT) || defined(SH_WITH_SERVER)
[1]1155 { N_("exportseverity"), SH_SECTION_LOG, SH_SECTION_NONE,
[22]1156 sh_error_setexport },
[1]1157 { N_("exportclass"), SH_SECTION_LOG, SH_SECTION_NONE,
1158 sh_error_export_mask },
[27]1159#if defined(SH_WITH_SERVER)
1160 { N_("setlogserver"), SH_SECTION_SRV, SH_SECTION_MISC,
[481]1161 sh_xfer_set_logserver },
[27]1162#else
[1]1163 { N_("setlogserver"), SH_SECTION_CLT, SH_SECTION_MISC,
[481]1164 sh_xfer_set_logserver },
[219]1165 { N_("setthrottle"), SH_SECTION_CLT, SH_SECTION_MISC,
[481]1166 sh_xfer_set_throttle_delay},
1167 { N_("setdeltaretrycount"), SH_SECTION_CLT, SH_SECTION_MISC,
1168 set_delta_retry_count},
1169 { N_("setdeltaretryinterval"),SH_SECTION_CLT, SH_SECTION_MISC,
1170 set_delta_retry_interval},
[1]1171#endif
[27]1172#endif
[1]1173 { N_("setfilechecktime"), SH_SECTION_MISC, SH_SECTION_NONE,
1174 sh_readconf_setFiletime },
1175 { N_("setlooptime"), SH_SECTION_MISC, SH_SECTION_NONE,
[22]1176 sh_util_setlooptime },
[1]1177
1178#ifdef SH_WITH_MAIL
1179 { N_("mailseverity"), SH_SECTION_LOG, SH_SECTION_NONE,
[22]1180 sh_error_setseverity },
[1]1181 { N_("mailclass"), SH_SECTION_LOG, SH_SECTION_NONE,
1182 sh_error_mail_mask },
1183 { N_("setmailtime"), SH_SECTION_MAIL, SH_SECTION_MISC,
1184 sh_readconf_setMailtime },
1185 { N_("setmailnum"), SH_SECTION_MAIL, SH_SECTION_MISC,
1186 sh_mail_setNum },
1187 { N_("setmailrelay"), SH_SECTION_MAIL, SH_SECTION_MISC,
1188 sh_mail_set_relay },
[216]1189 { N_("setmailport"), SH_SECTION_MAIL, SH_SECTION_MISC,
1190 sh_mail_set_port },
[1]1191 { N_("mailsingle"), SH_SECTION_MAIL, SH_SECTION_MISC,
1192 sh_mail_setFlag },
1193 { N_("mailsubject"), SH_SECTION_MAIL, SH_SECTION_MISC,
1194 set_mail_subject },
1195 { N_("setmailsender"), SH_SECTION_MAIL, SH_SECTION_MISC,
1196 sh_mail_set_sender },
[215]1197 { N_("setmailalias"), SH_SECTION_MAIL, SH_SECTION_MISC,
1198 sh_nmail_add_alias },
[214]1199 { N_("setmailaddress"), SH_SECTION_MAIL, SH_SECTION_MISC,
1200 sh_nmail_add_recipient },
1201 { N_("closeaddress"), SH_SECTION_MAIL, SH_SECTION_MISC,
1202 sh_nmail_close_recipient },
1203 { N_("setaddrseverity"), SH_SECTION_MAIL, SH_SECTION_MISC,
1204 sh_nmail_set_severity },
[1]1205 { N_("setmailfilternot"), SH_SECTION_MAIL, SH_SECTION_MISC,
[214]1206 sh_nmail_add_not },
[1]1207 { N_("setmailfilterand"), SH_SECTION_MAIL, SH_SECTION_MISC,
[214]1208 sh_nmail_add_and },
[1]1209 { N_("setmailfilteror"), SH_SECTION_MAIL, SH_SECTION_MISC,
[214]1210 sh_nmail_add_or },
[1]1211#endif
1212 { N_("setbindaddress"), SH_SECTION_MISC, SH_SECTION_NONE,
[22]1213 sh_calls_set_bind_addr },
[1]1214 { N_("daemon"), SH_SECTION_MISC, SH_SECTION_NONE,
[22]1215 sh_unix_setdeamon },
[1]1216 { N_("samhainpath"), SH_SECTION_MISC, SH_SECTION_NONE,
1217 sh_unix_self_hash },
1218 { N_("trusteduser"), SH_SECTION_MISC, SH_SECTION_NONE,
1219 tf_add_trusted_user },
1220 { N_("settimeserver"), SH_SECTION_MISC, SH_SECTION_NONE,
1221 sh_unix_settimeserver },
1222
1223 { N_("printseverity"), SH_SECTION_LOG, SH_SECTION_NONE,
[22]1224 sh_error_setprint },
[1]1225 { N_("printclass"), SH_SECTION_LOG, SH_SECTION_NONE,
1226 sh_error_print_mask },
1227
1228 { N_("logseverity"), SH_SECTION_LOG, SH_SECTION_NONE,
[22]1229 sh_error_setlog },
[1]1230 { N_("logclass"), SH_SECTION_LOG, SH_SECTION_NONE,
1231 sh_error_log_mask },
1232
1233 { N_("syslogseverity"), SH_SECTION_LOG, SH_SECTION_NONE,
[22]1234 sh_error_set_syslog },
[1]1235 { N_("syslogclass"), SH_SECTION_LOG, SH_SECTION_NONE,
1236 sh_error_syslog_mask },
1237#ifdef HAVE_LIBPRELUDE
1238 { N_("preludeseverity"), SH_SECTION_LOG, SH_SECTION_NONE,
[22]1239 sh_error_set_prelude },
[1]1240 { N_("preludeclass"), SH_SECTION_LOG, SH_SECTION_NONE,
1241 sh_error_prelude_mask },
1242 { N_("preludeprofile"), SH_SECTION_MISC, SH_SECTION_NONE,
1243 sh_prelude_set_profile },
1244 { N_("preludemaptoinfo"), SH_SECTION_MISC, SH_SECTION_NONE,
1245 sh_prelude_map_info },
1246 { N_("preludemaptolow"), SH_SECTION_MISC, SH_SECTION_NONE,
1247 sh_prelude_map_low },
1248 { N_("preludemaptomedium"), SH_SECTION_MISC, SH_SECTION_NONE,
1249 sh_prelude_map_medium },
1250 { N_("preludemaptohigh"), SH_SECTION_MISC, SH_SECTION_NONE,
1251 sh_prelude_map_high },
1252#endif
1253
1254 { N_("logcalls"), SH_SECTION_LOG, SH_SECTION_NONE,
1255 sh_aud_set_functions },
1256
1257 { N_("messageheader"), SH_SECTION_MISC, SH_SECTION_NONE,
1258 sh_error_ehead },
1259
1260 { N_("setconsole"), SH_SECTION_MISC, SH_SECTION_NONE,
1261 sh_log_set_console },
1262
[405]1263 { N_("setreportfile"), SH_SECTION_MISC, SH_SECTION_NONE,
1264 sh_efile_path },
[410]1265 { N_("setreportgroup"), SH_SECTION_MISC, SH_SECTION_NONE,
1266 sh_efile_group },
[405]1267
[1]1268#ifdef WITH_MESSAGE_QUEUE
1269 { N_("messagequeueactive"),SH_SECTION_MISC, SH_SECTION_NONE,
1270 enable_msgq },
1271#endif
1272
1273 { N_("setreverselookup"), SH_SECTION_MISC, SH_SECTION_NONE,
1274 set_reverse_lookup },
1275
1276 { N_("setdatabasepath"), SH_SECTION_MISC, SH_SECTION_NONE,
1277 sh_readconf_set_database_path },
1278
1279 { N_("setlogfilepath"), SH_SECTION_MISC, SH_SECTION_NONE,
1280 sh_readconf_set_logfile_path },
1281
1282 { N_("setlockfilepath"), SH_SECTION_MISC, SH_SECTION_NONE,
1283 sh_readconf_set_lockfile_path },
1284
1285 { N_("hidesetup"), SH_SECTION_MISC, SH_SECTION_NONE,
1286 sh_util_hidesetup },
1287
1288 { N_("syslogfacility"), SH_SECTION_LOG, SH_SECTION_MISC,
1289 sh_log_set_facility },
1290
[279]1291 { N_("syslogmapstampto"), SH_SECTION_LOG, SH_SECTION_MISC,
1292 sh_log_set_stamp_priority },
1293
[1]1294 { N_("mactype"), SH_SECTION_MISC, SH_SECTION_NONE,
1295 sh_util_sigtype },
1296
[315]1297 { N_("avoidblock"), SH_SECTION_MISC, SH_SECTION_NONE,
1298 sh_calls_set_sub },
1299
[411]1300#ifdef SCREW_IT_UP
1301 { N_("setsigtrapmaxduration"), SH_SECTION_MISC, SH_SECTION_MISC,
1302 sh_sigtrap_max_duration_set },
1303#endif
1304
[1]1305 { NULL, 0, 0, NULL}
1306};
1307
1308
1309
1310
1311static int sh_readconfig_line (char * line)
[164]1312{
1313 char * key;
[170]1314 const char * value;
[481]1315 char * value_dup;
[1]1316 char * tmp;
1317 int i;
1318 int good_opt = -1;
1319
1320#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1321 int modnum, modkey;
1322#endif
1323
[170]1324 static const char *dummy = N_("dummy");
[164]1325
[170]1326 static const char *closing[] = {
[164]1327 N_("closecommand"),
[214]1328 N_("closeaddress"),
[186]1329 N_("logmonendgroup"),
1330 N_("logmonendhost"),
[164]1331 NULL
1332 };
1333
[170]1334 static const char *ident[] = {
[1]1335 N_("severityreadonly"),
1336 N_("severitylogfiles"),
1337 N_("severitygrowinglogs"),
1338 N_("severityignorenone"),
1339 N_("severityignoreall"),
1340 N_("severityattributes"),
1341 N_("severitydirs"),
1342 N_("severityfiles"),
1343 N_("severitynames"),
1344 N_("severityuser0"),
1345 N_("severityuser1"),
[27]1346 N_("severityuser2"),
1347 N_("severityuser3"),
1348 N_("severityuser4"),
[1]1349 N_("severityprelink"),
1350 NULL
1351 };
1352
1353 static int identnum[] = {
1354 SH_ERR_T_RO,
1355 SH_ERR_T_LOGS,
1356 SH_ERR_T_GLOG,
1357 SH_ERR_T_NOIG,
1358 SH_ERR_T_ALLIG,
1359 SH_ERR_T_ATTR,
1360 SH_ERR_T_DIR,
1361 SH_ERR_T_FILE,
1362 SH_ERR_T_NAME,
1363 SH_ERR_T_USER0,
1364 SH_ERR_T_USER1,
[27]1365 SH_ERR_T_USER2,
1366 SH_ERR_T_USER3,
1367 SH_ERR_T_USER4,
[1]1368 SH_ERR_T_PRELINK,
1369 };
1370
1371 SL_ENTER(_("sh_readconf_line"));
1372
[164]1373 /* convert to lowercase */
1374
1375 tmp = line;
1376 while (*tmp != '=' && *tmp != '\0')
1377 {
1378 *tmp = tolower( (int) *tmp);
1379 ++tmp;
1380 }
1381
1382 key = line;
1383
[1]1384 /* interpret line */
1385
[164]1386 value = strchr(line, '=');
1387
1388 if (value == NULL || (*value) == '\0')
[1]1389 {
[164]1390 if (key != NULL)
[1]1391 {
[164]1392 i = 0;
1393 while (closing[i] != NULL)
1394 {
1395 if (sl_strncmp(key,_(closing[i]),sl_strlen(closing[i])-1) == 0)
1396 {
1397 value = dummy;
1398 goto ok_novalue;
1399 }
1400 ++i;
1401 }
1402
[1]1403 TPT(( 0, FIL__, __LINE__, _("msg=<ConfigFile: not key=value: %s>\n"),
1404 line));
1405 }
1406 SL_RETURN(good_opt, _("sh_readconf_line"));
1407 }
1408 else
[164]1409 ++value;
[1]1410
1411 /* skip leading whitespace
1412 */
[164]1413 while ((*value) == ' ' || (*value) == '\t')
1414 ++value;
[1]1415
[164]1416 if ((*value) == '\0') /* no value */
[1]1417 {
[164]1418 if (key != NULL)
[1]1419 {
1420 TPT(( 0, FIL__, __LINE__, _("msg=<ConfigFile: not key=value: %s>\n"),
1421 line));
1422 }
1423 SL_RETURN(good_opt, _("sh_readconf_line"));
1424 }
1425
[164]1426 ok_novalue:
[1]1427
1428 if (!sl_is_suid())
1429 {
1430 TPT(( 0, FIL__, __LINE__, _("msg=<ConfigFile: %s>\n"), line));
1431 }
1432
[211]1433 /* Expand shell expressions. This return allocated memory which we must free.
[347]1434 * If !defined(SH_EVAL_SHELL), this will reduce to a strdup.
[211]1435 */
[481]1436 value_dup = sh_readconf_expand_value(value);
[1]1437
[481]1438 if (!value_dup || (*value_dup) == '\0')
[211]1439 {
[481]1440 TPT(( 0, FIL__, __LINE__,
1441 _("msg=<ConfigFile: empty after shell expansion: %s>\n"),
[211]1442 line));
1443 SL_RETURN(good_opt, _("sh_readconf_line"));
1444 }
1445
[481]1446 value = value_dup;
1447
[1]1448#if defined (SH_WITH_CLIENT) || defined (SH_STANDALONE)
1449 if (read_mode == SH_SECTION_OTHER)
1450 {
1451 for (modnum = 0; modList[modnum].name != NULL; ++modnum)
1452 {
1453 for (modkey = 0; modList[modnum].conf_table[modkey].the_opt != NULL;
1454 ++modkey)
1455 {
[164]1456 if (sl_strncmp (key,
[1]1457 _(modList[modnum].conf_table[modkey].the_opt),
1458 sl_strlen(modList[modnum].conf_table[modkey].the_opt) ) == 0)
1459 {
1460 good_opt = 0;
[164]1461 if (0 != modList[modnum].conf_table[modkey].func(value))
[1]1462 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALS,
[164]1463 _(modList[modnum].conf_table[modkey].the_opt), value);
[1]1464 if (!sl_is_suid())
1465 {
1466 TPT(( 0, FIL__, __LINE__,
1467 _("msg=<line = %s, option = %s>\n"), line,
1468 _(modList[modnum].conf_table[modkey].the_opt)));
1469 }
1470 goto outburst;
1471 }
1472 }
1473 }
1474 }
1475 outburst:
1476#endif
1477
1478
1479 if (read_mode == SH_SECTION_THRESHOLD)
1480 {
1481 i = 0;
1482 while (ident[i] != NULL) {
[290]1483 if (sl_strncmp (key, _(ident[i]), sl_strlen(ident[i])) == 0)
[1]1484 {
1485 good_opt = 0;
[164]1486 sh_error_set_iv (identnum[i], value);
[1]1487 break;
1488 }
1489 ++i;
1490 }
1491 }
1492 else
1493 {
1494 i = 0;
1495 while (ext_table[i].optname != NULL)
1496 {
1497 if ((ext_table[i].section == read_mode ||
1498 ext_table[i].alt_section == read_mode) &&
[164]1499 sl_strncmp (key, _(ext_table[i].optname),
[1]1500 sl_strlen(ext_table[i].optname)) == 0)
1501 {
1502 good_opt = 0;
[164]1503 if (0 != ext_table[i].func (value))
[1]1504 sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_EINVALS,
[164]1505 _(ext_table[i].optname), value);
[1]1506 break;
1507 }
1508 ++i;
1509 }
1510 }
1511
[481]1512 SH_FREE(value_dup);
[211]1513
[1]1514 SL_RETURN(good_opt, _("sh_readconf_line"));
1515}
[481]1516
[1]1517
Note: See TracBrowser for help on using the repository browser.