#include <sys/param.h>
#include <sys/mount.h>
#include <sys/queue.h>
#include <sys/socket.h>
#include <sys/stat.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <err.h>
#include <errno.h>
#include <fcntl.h>
#include <pwd.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <syslog.h>
#include <unistd.h>
#include <netdb.h>
#include "rpcsvc/nlm_prot.h"
#include <nfs/rpcv2.h>
#include <nfs/nfsproto.h>
#include <nfs/nfs_lock.h>
#include <nfs/nfs.h>
#include "lockd.h"
#include "lockd_lock.h"
#define nfslockdans(_v, _ansp) \
((_ansp)->la_version = (_v), \
nfsclnt(NFSCLNT_LOCKDANS, (_ansp)))
typedef struct __owner {
pid_t pid;
time_t tod;
} OWNER;
static OWNER owner;
static char hostname[MAXHOSTNAMELEN + 1];
static void client_cleanup(void);
static void set_auth(CLIENT *cl, struct xucred *ucred);
int lock_request(LOCKD_MSG *);
int cancel_request(LOCKD_MSG *);
int test_request(LOCKD_MSG *);
void show(LOCKD_MSG *);
int unlock_request(LOCKD_MSG *);
#define d_calls (debug_level > 1)
#define d_args (debug_level > 2)
static const char *
from_addr(saddr)
struct sockaddr *saddr;
{
static char inet_buf[INET6_ADDRSTRLEN];
if (getnameinfo(saddr, saddr->sa_len, inet_buf, sizeof(inet_buf),
NULL, 0, NI_NUMERICHOST) == 0)
return inet_buf;
return "???";
}
void
client_kern_wait(void)
{
if (nfsclnt(NFSCLNT_LOCKDWAIT, NULL))
warn("nfsclnt_lockdwait");
}
void
client_cleanup(void)
{
(void) nfsclnt(NFSCLNT_LOCKDFD, (struct lockd_ans *)-1);
exit(-1);
}
pid_t
client_request(void)
{
LOCKD_MSG msg;
fd_set rdset;
int fd, nr, ret;
pid_t child;
mode_t old_umask;
(void)unlink(_PATH_LCKFIFO);
old_umask = umask(S_IXGRP|S_IXOTH);
if (mkfifo(_PATH_LCKFIFO, S_IWUSR | S_IRUSR)) {
syslog(LOG_ERR, "mkfifo: %s: %m", _PATH_LCKFIFO);
exit (1);
}
umask(old_umask);
switch (child = fork()) {
case -1:
err(1, "fork");
case 0:
break;
default:
return (child);
}
signal(SIGHUP, (sig_t)client_cleanup);
signal(SIGTERM, (sig_t)client_cleanup);
(void)time(&owner.tod);
owner.pid = getpid();
if ((fd = open(_PATH_LCKFIFO, O_RDONLY | O_NONBLOCK)) == -1) {
syslog(LOG_ERR, "open: %s: %m", _PATH_LCKFIFO);
_exit (1);
}
(void)unlink(_PATH_LCKFIFO);
if (nfsclnt(NFSCLNT_LOCKDFD, (struct lockd_ans *)fd)) {
syslog(LOG_ERR, "nfsclnt_fd: %d: %m", fd);
_exit (1);
}
for (;;) {
FD_ZERO(&rdset);
FD_SET(fd, &rdset);
(void)select(fd + 1, &rdset, NULL, NULL, NULL);
if (hostname[0] == '\0')
(void)gethostname(hostname, sizeof(hostname) - 1);
if ((nr = read(fd, &msg, sizeof(msg))) == sizeof(msg)) {
if (d_args)
show(&msg);
if (msg.lm_version != LOCKD_MSG_VERSION) {
syslog(LOG_ERR,
"unknown msg type: %d", msg.lm_version);
}
switch (msg.lm_fl.l_type) {
case F_RDLCK:
case F_WRLCK:
if (msg.lm_flags & LOCKD_MSG_TEST)
ret = test_request(&msg);
else if (msg.lm_flags & LOCKD_MSG_CANCEL)
ret = cancel_request(&msg);
else
ret = lock_request(&msg);
break;
case F_UNLCK:
ret = unlock_request(&msg);
break;
default:
ret = 1;
syslog(LOG_ERR,
"unknown lock type: %d", msg.lm_fl.l_type);
break;
}
if (ret) {
struct lockd_ans ans;
ans.la_xid = msg.lm_xid;
ans.la_errno = ENOTSUP;
if (nfslockdans(LOCKD_ANS_VERSION, &ans)) {
syslog(LOG_DEBUG, "process %lu: %m",
(u_long)msg.lm_fl.l_pid);
}
}
} else if (nr == -1) {
if (errno != EAGAIN) {
syslog(LOG_ERR, "read: %s: %m", _PATH_LCKFIFO);
goto err;
}
} else if (nr != 0) {
syslog(LOG_ERR,
"%s: discard %d bytes", _PATH_LCKFIFO, nr);
}
}
err:
(void) nfsclnt(NFSCLNT_LOCKDFD, (struct lockd_ans *)-1);
_exit (1);
return 0;
}
void
set_auth(cl, xucred)
CLIENT *cl;
struct xucred *xucred;
{
if (cl->cl_auth != NULL)
cl->cl_auth->ah_ops->ah_destroy(cl->cl_auth);
cl->cl_auth = authunix_create(hostname,
xucred->cr_uid,
xucred->cr_groups[0],
xucred->cr_ngroups - 1,
&xucred->cr_groups[1]);
}
int
test_request(LOCKD_MSG *msg)
{
CLIENT *cli;
struct timeval timeout = {0, 0};
char dummy;
if (d_calls)
syslog(LOG_DEBUG, "test request: %s: %s to %s",
(msg->lm_flags & LOCKD_MSG_NFSV3) ? "V4" : "V1/3",
msg->lm_fl.l_type == F_WRLCK ? "write" : "read",
from_addr((struct sockaddr *)&msg->lm_addr));
if (msg->lm_flags & LOCKD_MSG_NFSV3) {
struct nlm4_testargs arg4;
arg4.cookie.n_bytes = (char *)&msg->lm_xid;
arg4.cookie.n_len = sizeof(msg->lm_xid);
arg4.exclusive = msg->lm_fl.l_type == F_WRLCK ? 1 : 0;
arg4.alock.caller_name = hostname;
arg4.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg4.alock.fh.n_len = msg->lm_fh_len;
arg4.alock.oh.n_bytes = (char *)&owner;
arg4.alock.oh.n_len = sizeof(owner);
arg4.alock.svid = msg->lm_fl.l_pid;
arg4.alock.l_offset = msg->lm_fl.l_start;
arg4.alock.l_len = msg->lm_fl.l_len;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr,
NLM_VERS4)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM4_TEST_MSG,
xdr_nlm4_testargs, &arg4, xdr_void, &dummy, timeout);
} else {
struct nlm_testargs arg;
arg.cookie.n_bytes = (char *)&msg->lm_xid;
arg.cookie.n_len = sizeof(msg->lm_xid);
arg.exclusive = msg->lm_fl.l_type == F_WRLCK ? 1 : 0;
arg.alock.caller_name = hostname;
arg.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg.alock.fh.n_len = msg->lm_fh_len;
arg.alock.oh.n_bytes = (char *)&owner;
arg.alock.oh.n_len = sizeof(owner);
arg.alock.svid = msg->lm_fl.l_pid;
arg.alock.l_offset = msg->lm_fl.l_start;
arg.alock.l_len = msg->lm_fl.l_len;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr,
NLM_VERS)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM_TEST_MSG,
xdr_nlm_testargs, &arg, xdr_void, &dummy, timeout);
}
return (0);
}
int
lock_request(LOCKD_MSG *msg)
{
CLIENT *cli;
struct nlm4_lockargs arg4;
struct nlm_lockargs arg;
struct timeval timeout = {0, 0};
char dummy;
if (d_calls)
syslog(LOG_DEBUG, "lock request: %s: %s to %s",
(msg->lm_flags & LOCKD_MSG_NFSV3) ? "V4" : "V1/3",
msg->lm_fl.l_type == F_WRLCK ? "write" : "read",
from_addr((struct sockaddr *)&msg->lm_addr));
monitor_lock_host_by_addr((struct sockaddr *)&msg->lm_addr);
if (msg->lm_flags & LOCKD_MSG_NFSV3) {
arg4.cookie.n_bytes = (char *)&msg->lm_xid;
arg4.cookie.n_len = sizeof(msg->lm_xid);
arg4.block = (msg->lm_flags & LOCKD_MSG_BLOCK) ? 1 : 0;
arg4.exclusive = msg->lm_fl.l_type == F_WRLCK ? 1 : 0;
arg4.alock.caller_name = hostname;
arg4.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg4.alock.fh.n_len = msg->lm_fh_len;
arg4.alock.oh.n_bytes = (char *)&owner;
arg4.alock.oh.n_len = sizeof(owner);
arg4.alock.svid = msg->lm_fl.l_pid;
arg4.alock.l_offset = msg->lm_fl.l_start;
arg4.alock.l_len = msg->lm_fl.l_len;
arg4.reclaim = 0;
arg4.state = nsm_state;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr,
NLM_VERS4)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM4_LOCK_MSG,
xdr_nlm4_lockargs, &arg4, xdr_void, &dummy, timeout);
} else {
arg.cookie.n_bytes = (char *)&msg->lm_xid;
arg.cookie.n_len = sizeof(msg->lm_xid);
arg.block = (msg->lm_flags & LOCKD_MSG_BLOCK) ? 1 : 0;
arg.exclusive = msg->lm_fl.l_type == F_WRLCK ? 1 : 0;
arg.alock.caller_name = hostname;
arg.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg.alock.fh.n_len = msg->lm_fh_len;
arg.alock.oh.n_bytes = (char *)&owner;
arg.alock.oh.n_len = sizeof(owner);
arg.alock.svid = msg->lm_fl.l_pid;
arg.alock.l_offset = msg->lm_fl.l_start;
arg.alock.l_len = msg->lm_fl.l_len;
arg.reclaim = 0;
arg.state = nsm_state;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr,
NLM_VERS)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM_LOCK_MSG,
xdr_nlm_lockargs, &arg, xdr_void, &dummy, timeout);
}
return (0);
}
int
cancel_request(LOCKD_MSG *msg)
{
CLIENT *cli;
struct nlm4_cancargs arg4;
struct nlm_cancargs arg;
struct timeval timeout = {0, 0};
char dummy;
if (d_calls)
syslog(LOG_DEBUG, "cancel request: %s: %s to %s",
(msg->lm_flags & LOCKD_MSG_NFSV3) ? "V4" : "V1/3",
msg->lm_fl.l_type == F_WRLCK ? "write" : "read",
from_addr((struct sockaddr *)&msg->lm_addr));
if (msg->lm_flags & LOCKD_MSG_NFSV3) {
arg4.cookie.n_bytes = (char *)&msg->lm_xid;
arg4.cookie.n_len = sizeof(msg->lm_xid);
arg4.block = (msg->lm_flags & LOCKD_MSG_BLOCK) ? 1 : 0;
arg4.exclusive = msg->lm_fl.l_type == F_WRLCK ? 1 : 0;
arg4.alock.caller_name = hostname;
arg4.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg4.alock.fh.n_len = msg->lm_fh_len;
arg4.alock.oh.n_bytes = (char *)&owner;
arg4.alock.oh.n_len = sizeof(owner);
arg4.alock.svid = msg->lm_fl.l_pid;
arg4.alock.l_offset = msg->lm_fl.l_start;
arg4.alock.l_len = msg->lm_fl.l_len;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr, NLM_VERS4)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM4_CANCEL_MSG,
xdr_nlm4_cancargs, &arg4, xdr_void, &dummy, timeout);
} else {
arg.cookie.n_bytes = (char *)&msg->lm_xid;
arg.cookie.n_len = sizeof(msg->lm_xid);
arg.block = (msg->lm_flags & LOCKD_MSG_BLOCK) ? 1 : 0;
arg.exclusive = msg->lm_fl.l_type == F_WRLCK ? 1 : 0;
arg.alock.caller_name = hostname;
arg.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg.alock.fh.n_len = msg->lm_fh_len;
arg.alock.oh.n_bytes = (char *)&owner;
arg.alock.oh.n_len = sizeof(owner);
arg.alock.svid = msg->lm_fl.l_pid;
arg.alock.l_offset = msg->lm_fl.l_start;
arg.alock.l_len = msg->lm_fl.l_len;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr, NLM_VERS)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM_CANCEL_MSG,
xdr_nlm_cancargs, &arg, xdr_void, &dummy, timeout);
}
return (0);
}
int
unlock_request(LOCKD_MSG *msg)
{
CLIENT *cli;
struct nlm4_unlockargs arg4;
struct nlm_unlockargs arg;
struct timeval timeout = {0, 0};
char dummy;
if (d_calls)
syslog(LOG_DEBUG, "unlock request: %s: to %s",
(msg->lm_flags & LOCKD_MSG_NFSV3) ? "V4" : "V1/3",
from_addr((struct sockaddr *)&msg->lm_addr));
if (msg->lm_flags & LOCKD_MSG_NFSV3) {
arg4.cookie.n_bytes = (char *)&msg->lm_xid;
arg4.cookie.n_len = sizeof(msg->lm_xid);
arg4.alock.caller_name = hostname;
arg4.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg4.alock.fh.n_len = msg->lm_fh_len;
arg4.alock.oh.n_bytes = (char *)&owner;
arg4.alock.oh.n_len = sizeof(owner);
arg4.alock.svid = msg->lm_fl.l_pid;
arg4.alock.l_offset = msg->lm_fl.l_start;
arg4.alock.l_len = msg->lm_fl.l_len;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr,
NLM_VERS4)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM4_UNLOCK_MSG,
xdr_nlm4_unlockargs, &arg4, xdr_void, &dummy, timeout);
} else {
arg.cookie.n_bytes = (char *)&msg->lm_xid;
arg.cookie.n_len = sizeof(msg->lm_xid);
arg.alock.caller_name = hostname;
arg.alock.fh.n_bytes = (char *)&msg->lm_fh;
arg.alock.fh.n_len = msg->lm_fh_len;
arg.alock.oh.n_bytes = (char *)&owner;
arg.alock.oh.n_len = sizeof(owner);
arg.alock.svid = msg->lm_fl.l_pid;
arg.alock.l_offset = msg->lm_fl.l_start;
arg.alock.l_len = msg->lm_fl.l_len;
if ((cli = get_client(
(struct sockaddr *)&msg->lm_addr,
NLM_VERS)) == NULL)
return (1);
set_auth(cli, &msg->lm_cred);
(void)clnt_call(cli, NLM_UNLOCK_MSG,
xdr_nlm_unlockargs, &arg, xdr_void, &dummy, timeout);
}
return (0);
}
int
lock_answer(int version, netobj *netcookie, nlm4_lock *lock, int flags, int result)
{
struct lockd_ans ans;
ans.la_flags = 0;
if (flags & LOCK_ANSWER_GRANTED)
ans.la_flags |= LOCKD_ANS_GRANTED;
if (netcookie->n_len != sizeof(ans.la_xid)) {
if (lock == NULL) {
syslog(LOG_ERR, "inedible nlm cookie");
return -1;
}
ans.la_xid = 0;
ans.la_fh_len = lock->fh.n_len;
if (!lock->fh.n_len || (lock->fh.n_len > NFS_SMALLFH)) {
syslog(LOG_ERR, "bogus filehandle size %d in answer", lock->fh.n_len);
return -1;
}
memcpy(ans.la_fh, lock->fh.n_bytes, ans.la_fh_len);
ans.la_pid = lock->svid;
ans.la_start = lock->l_offset;
ans.la_len = lock->l_len;
ans.la_flags |= LOCKD_ANS_LOCK_INFO;
if (flags & LOCK_ANSWER_LOCK_EXCL)
ans.la_flags |= LOCKD_ANS_LOCK_EXCL;
} else {
memcpy(&ans.la_xid, netcookie->n_bytes, sizeof(ans.la_xid));
ans.la_fh_len = 0;
}
if (d_calls)
syslog(LOG_DEBUG, "lock answer: pid %lu: %s %d",
(unsigned long)ans.la_pid,
version == NLM_VERS4 ? "nlmv4" : "nlmv3",
result);
if (version == NLM_VERS4)
switch (result) {
case nlm4_granted:
ans.la_errno = 0;
if ((flags & LOCK_ANSWER_GRANTED) && lock &&
!(ans.la_flags & LOCKD_ANS_LOCK_INFO)) {
ans.la_fh_len = lock->fh.n_len;
if (!lock->fh.n_len || (lock->fh.n_len > NFS_SMALLFH)) {
syslog(LOG_ERR, "bogus filehandle size %d in answer", lock->fh.n_len);
return -1;
}
memcpy(ans.la_fh, lock->fh.n_bytes, ans.la_fh_len);
ans.la_pid = lock->svid;
ans.la_start = lock->l_offset;
ans.la_len = lock->l_len;
ans.la_flags |= LOCKD_ANS_LOCK_INFO;
if (flags & LOCK_ANSWER_LOCK_EXCL)
ans.la_flags |= LOCKD_ANS_LOCK_EXCL;
}
break;
default:
ans.la_errno = EACCES;
break;
case nlm4_denied:
if (lock == NULL)
ans.la_errno = EACCES;
else {
ans.la_pid = lock->svid;
ans.la_start = lock->l_offset;
ans.la_len = lock->l_len;
ans.la_flags |= LOCKD_ANS_LOCK_INFO;
if (flags & LOCK_ANSWER_LOCK_EXCL)
ans.la_flags |= LOCKD_ANS_LOCK_EXCL;
ans.la_errno = 0;
}
break;
case nlm4_denied_nolocks:
ans.la_errno = ENOLCK;
break;
case nlm4_blocked:
ans.la_errno = EINPROGRESS;
break;
case nlm4_denied_grace_period:
ans.la_errno = EAGAIN;
break;
case nlm4_deadlck:
ans.la_errno = EDEADLK;
break;
case nlm4_rofs:
ans.la_errno = EROFS;
break;
case nlm4_stale_fh:
ans.la_errno = ESTALE;
break;
case nlm4_fbig:
ans.la_errno = EFBIG;
break;
case nlm4_failed:
ans.la_errno = EACCES;
break;
}
else
switch (result) {
case nlm_granted:
ans.la_errno = 0;
if ((flags & LOCK_ANSWER_GRANTED) && lock &&
!(ans.la_flags & LOCKD_ANS_LOCK_INFO)) {
ans.la_fh_len = lock->fh.n_len;
if (!lock->fh.n_len || (lock->fh.n_len > NFS_SMALLFH)) {
syslog(LOG_ERR, "bogus filehandle size %d in answer", lock->fh.n_len);
return -1;
}
memcpy(ans.la_fh, lock->fh.n_bytes, ans.la_fh_len);
ans.la_pid = lock->svid;
ans.la_start = lock->l_offset;
ans.la_len = lock->l_len;
ans.la_flags |= LOCKD_ANS_LOCK_INFO;
if (flags & LOCK_ANSWER_LOCK_EXCL)
ans.la_flags |= LOCKD_ANS_LOCK_EXCL;
}
break;
default:
ans.la_errno = EACCES;
break;
case nlm_denied:
if (lock == NULL)
ans.la_errno = EACCES;
else {
ans.la_pid = lock->svid;
ans.la_start = lock->l_offset;
ans.la_len = lock->l_len;
ans.la_flags |= LOCKD_ANS_LOCK_INFO;
if (flags & LOCK_ANSWER_LOCK_EXCL)
ans.la_flags |= LOCKD_ANS_LOCK_EXCL;
ans.la_errno = 0;
}
break;
case nlm_denied_nolocks:
ans.la_errno = ENOLCK;
break;
case nlm_blocked:
ans.la_errno = EINPROGRESS;
break;
case nlm_denied_grace_period:
ans.la_errno = EAGAIN;
break;
case nlm_deadlck:
ans.la_errno = EDEADLK;
break;
}
if (nfslockdans(LOCKD_ANS_VERSION, &ans)) {
syslog(LOG_DEBUG, "lock_answer(%d): process %lu: %m",
result, (u_long)ans.la_pid);
return -1;
}
return 0;
}
void
show(LOCKD_MSG *mp)
{
static char hex[] = "0123456789abcdef";
size_t len;
u_int8_t *p, *t, buf[NFS_SMALLFH*3+1];
syslog(LOG_DEBUG, "process ID: %lu\n", (long)mp->lm_fl.l_pid);
for (t = buf, p = (u_int8_t *)mp->lm_fh,
len = mp->lm_fh_len;
len > 0; ++p, --len) {
*t++ = '\\';
*t++ = hex[(*p & 0xf0) >> 4];
*t++ = hex[*p & 0x0f];
}
*t = '\0';
syslog(LOG_DEBUG, "fh_len %d, fh %s\n", mp->lm_fh_len, buf);
syslog(LOG_DEBUG, "start %qu; len %qu; pid %lu; type %d; whence %d\n",
mp->lm_fl.l_start, mp->lm_fl.l_len, (u_long)mp->lm_fl.l_pid,
mp->lm_fl.l_type, mp->lm_fl.l_whence);
syslog(LOG_DEBUG, "wait was %s\n", (mp->lm_flags & LOCKD_MSG_BLOCK) ? "set" : "not set");
}