| /* |
| * Copyright 2018 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| * |
| * main.c - main function |
| */ |
| |
| #include <arpa/inet.h> |
| #include <errno.h> |
| #include <netinet/in.h> |
| #include <stdint.h> |
| #include <stdlib.h> |
| #include <string.h> |
| #include <sys/capability.h> |
| #include <unistd.h> |
| |
| #include <netid_client.h> // For MARK_UNSET. |
| |
| #include "clatd.h" |
| #include "common.h" |
| #include "config.h" |
| #include "logging.h" |
| #include "setif.h" |
| |
| #define DEVICEPREFIX "v4-" |
| |
| /* function: stop_loop |
| * signal handler: stop the event loop |
| */ |
| static void stop_loop() { running = 0; }; |
| |
| /* function: print_help |
| * in case the user is running this on the command line |
| */ |
| void print_help() { |
| printf("android-clat arguments:\n"); |
| printf("-i [uplink interface]\n"); |
| printf("-p [plat prefix]\n"); |
| printf("-4 [IPv4 address]\n"); |
| printf("-6 [IPv6 address]\n"); |
| printf("-m [socket mark]\n"); |
| printf("-t [tun file descriptor number]\n"); |
| } |
| |
| /* function: main |
| * allocate and setup the tun device, then run the event loop |
| */ |
| int main(int argc, char **argv) { |
| struct tun_data tunnel; |
| int opt; |
| char *uplink_interface = NULL, *plat_prefix = NULL, *mark_str = NULL; |
| char *v4_addr = NULL, *v6_addr = NULL, *tunfd_str = NULL; |
| uint32_t mark = MARK_UNSET; |
| unsigned len; |
| |
| while ((opt = getopt(argc, argv, "i:p:4:6:m:t:h")) != -1) { |
| switch (opt) { |
| case 'i': |
| uplink_interface = optarg; |
| break; |
| case 'p': |
| plat_prefix = optarg; |
| break; |
| case '4': |
| v4_addr = optarg; |
| break; |
| case '6': |
| v6_addr = optarg; |
| break; |
| case 'm': |
| mark_str = optarg; |
| break; |
| case 't': |
| tunfd_str = optarg; |
| break; |
| case 'h': |
| print_help(); |
| exit(0); |
| default: |
| logmsg(ANDROID_LOG_FATAL, "Unknown option -%c. Exiting.", (char)optopt); |
| exit(1); |
| } |
| } |
| |
| if (uplink_interface == NULL) { |
| logmsg(ANDROID_LOG_FATAL, "clatd called without an interface"); |
| exit(1); |
| } |
| |
| if (mark_str != NULL && !parse_unsigned(mark_str, &mark)) { |
| logmsg(ANDROID_LOG_FATAL, "invalid mark %s", mark_str); |
| exit(1); |
| } |
| |
| if (tunfd_str != NULL && !parse_int(tunfd_str, &tunnel.fd4)) { |
| logmsg(ANDROID_LOG_FATAL, "invalid tunfd %s", tunfd_str); |
| exit(1); |
| } |
| if (!tunnel.fd4) { |
| logmsg(ANDROID_LOG_FATAL, "no tunfd specified on commandline."); |
| exit(1); |
| } |
| |
| len = snprintf(tunnel.device4, sizeof(tunnel.device4), "%s%s", DEVICEPREFIX, uplink_interface); |
| if (len >= sizeof(tunnel.device4)) { |
| logmsg(ANDROID_LOG_FATAL, "interface name too long '%s'", tunnel.device4); |
| exit(1); |
| } |
| |
| logmsg(ANDROID_LOG_INFO, "Starting clat version %s on %s mark=%s plat=%s v4=%s v6=%s", |
| CLATD_VERSION, uplink_interface, mark_str ? mark_str : "(none)", |
| plat_prefix ? plat_prefix : "(none)", v4_addr ? v4_addr : "(none)", |
| v6_addr ? v6_addr : "(none)"); |
| |
| // run under a regular user but keep needed capabilities |
| drop_root_but_keep_caps(); |
| |
| // open our raw sockets before dropping privs |
| open_sockets(&tunnel, mark); |
| |
| // keeps only admin capability |
| set_capability(1 << CAP_NET_ADMIN); |
| |
| configure_interface(uplink_interface, plat_prefix, v4_addr, v6_addr, &tunnel, mark); |
| |
| // Drop all remaining capabilities. |
| set_capability(0); |
| |
| // Loop until someone sends us a signal or brings down the tun interface. |
| if (signal(SIGTERM, stop_loop) == SIG_ERR) { |
| logmsg(ANDROID_LOG_FATAL, "sigterm handler failed: %s", strerror(errno)); |
| exit(1); |
| } |
| |
| event_loop(&tunnel); |
| |
| logmsg(ANDROID_LOG_INFO, "Shutting down clat on %s", uplink_interface); |
| del_anycast_address(tunnel.write_fd6, &Global_Clatd_Config.ipv6_local_subnet); |
| |
| close(tunnel.write_fd6); |
| close(tunnel.read_fd6); |
| close(tunnel.fd4); |
| |
| if (running) { |
| logmsg(ANDROID_LOG_INFO, "Clatd on %s waiting for SIGTERM", uplink_interface); |
| while (running) sleep(60); |
| logmsg(ANDROID_LOG_INFO, "Clatd on %s received SIGTERM", uplink_interface); |
| } else { |
| logmsg(ANDROID_LOG_INFO, "Clatd on %s already received SIGTERM", uplink_interface); |
| } |
| return 0; |
| } |