2 * Copyright (C) 2006-2012 Tobias Brunner
3 * Copyright (C) 2005-2009 Martin Willi
4 * Copyright (C) 2006 Daniel Roethlisberger
5 * Copyright (C) 2005 Jan Hutter
6 * Hochschule fuer Technik Rapperswil
8 * This program is free software; you can redistribute it and/or modify it
9 * under the terms of the GNU General Public License as published by the
10 * Free Software Foundation; either version 2 of the License, or (at your
11 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
13 * This program is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
15 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
23 #include <sys/types.h>
24 #include <sys/utsname.h>
34 #include <utils/backtrace.h>
35 #include <threading/thread.h>
38 #include <private/android_filesystem_config.h> /* for AID_VPN */
42 * PID file, in which charon stores its process id
44 #define PID_FILE IPSEC_PIDDIR "/charon.pid"
47 * Default user and group
50 #define IPSEC_USER NULL
54 #define IPSEC_GROUP NULL
58 * Global reference to PID file (required to truncate, if undeletable)
60 static FILE *pidfile
= NULL
;
63 * Log levels as defined via command line arguments
65 static level_t levels
[DBG_MAX
];
68 * Whether to only use syslog when logging
70 static bool use_syslog
= FALSE
;
73 * hook in library for debugging messages
75 extern void (*dbg
) (debug_t group
, level_t level
, char *fmt
, ...);
78 * Logging hook for library logs, using stderr output
80 static void dbg_stderr(debug_t group
, level_t level
, char *fmt
, ...)
87 fprintf(stderr
, "00[%N] ", debug_names
, group
);
88 vfprintf(stderr
, fmt
, args
);
89 fprintf(stderr
, "\n");
95 * Run the daemon and handle unix signals
101 /* handle SIGINT, SIGHUP ans SIGTERM in this handler */
103 sigaddset(&set
, SIGINT
);
104 sigaddset(&set
, SIGHUP
);
105 sigaddset(&set
, SIGTERM
);
106 sigprocmask(SIG_BLOCK
, &set
, NULL
);
112 sig
= sigwaitinfo(&set
, NULL
);
115 DBG1(DBG_DMN
, "waiting for signal failed: %s", strerror(errno
));
122 DBG1(DBG_DMN
, "signal of type SIGHUP received. Reloading "
124 if (lib
->settings
->load_files(lib
->settings
, lib
->conf
, FALSE
))
126 charon
->load_loggers(charon
, levels
, !use_syslog
);
127 lib
->plugins
->reload(lib
->plugins
, NULL
);
131 DBG1(DBG_DMN
, "reloading config failed, keeping old");
137 DBG1(DBG_DMN
, "signal of type SIGINT received. Shutting down");
138 charon
->bus
->alert(charon
->bus
, ALERT_SHUTDOWN_SIGNAL
, sig
);
143 DBG1(DBG_DMN
, "signal of type SIGTERM received. Shutting down");
144 charon
->bus
->alert(charon
->bus
, ALERT_SHUTDOWN_SIGNAL
, sig
);
149 DBG1(DBG_DMN
, "unknown signal %d received. Ignored", sig
);
159 static bool lookup_uid_gid()
163 name
= lib
->settings
->get_str(lib
->settings
, "charon.user", IPSEC_USER
);
164 if (name
&& !lib
->caps
->resolve_uid(lib
->caps
, name
))
168 name
= lib
->settings
->get_str(lib
->settings
, "charon.group", IPSEC_GROUP
);
169 if (name
&& !lib
->caps
->resolve_gid(lib
->caps
, name
))
174 lib
->caps
->set_uid(lib
->caps
, AID_VPN
);
180 * Handle SIGSEGV/SIGILL signals raised by threads
182 static void segv_handler(int signal
)
184 backtrace_t
*backtrace
;
186 DBG1(DBG_DMN
, "thread %u received %d", thread_current_id(), signal
);
187 backtrace
= backtrace_create(2);
188 backtrace
->log(backtrace
, NULL
, TRUE
);
189 backtrace
->log(backtrace
, stderr
, TRUE
);
190 backtrace
->destroy(backtrace
);
192 DBG1(DBG_DMN
, "killing ourself, received critical signal");
197 * Check/create PID file, return TRUE if already running
199 static bool check_pidfile()
203 if (stat(PID_FILE
, &stb
) == 0)
205 pidfile
= fopen(PID_FILE
, "r");
211 memset(buf
, 0, sizeof(buf
));
212 if (fread(buf
, 1, sizeof(buf
), pidfile
))
214 buf
[sizeof(buf
) - 1] = '\0';
218 if (pid
&& kill(pid
, 0) == 0)
219 { /* such a process is running */
223 DBG1(DBG_DMN
, "removing pidfile '"PID_FILE
"', process not running");
227 /* create new pidfile */
228 pidfile
= fopen(PID_FILE
, "w");
233 fd
= fileno(pidfile
);
234 if (fd
== -1 || fcntl(fd
, F_SETFD
, FD_CLOEXEC
) == -1)
236 DBG1(DBG_LIB
, "setting FD_CLOEXEC for '"PID_FILE
"' failed: %s",
239 ignore_result(fchown(fileno(pidfile
),
240 lib
->caps
->get_uid(lib
->caps
),
241 lib
->caps
->get_gid(lib
->caps
)));
242 fprintf(pidfile
, "%d\n", getpid());
249 * Delete/truncate the PID file
251 static void unlink_pidfile()
253 /* because unlinking the PID file may fail, we truncate it to ensure the
254 * daemon can be properly restarted. one probable cause for this is the
255 * combination of not running as root and the effective user lacking
256 * permissions on the parent dir(s) of the PID file */
259 ignore_result(ftruncate(fileno(pidfile
), 0));
266 * print command line usage and exit
268 static void usage(const char *msg
)
270 if (msg
!= NULL
&& *msg
!= '\0')
272 fprintf(stderr
, "%s\n", msg
);
274 fprintf(stderr
, "Usage: charon\n"
278 " [--debug-<type> <level>]\n"
279 " <type>: log context type (dmn|mgr|ike|chd|job|cfg|knl|net|asn|enc|tnc|imc|imv|pts|tls|esp|lib)\n"
280 " <level>: log verbosity (-1 = silent, 0 = audit, 1 = control,\n"
281 " 2 = controlmore, 3 = raw, 4 = private)\n"
287 * Main function, starts the daemon.
289 int main(int argc
, char *argv
[])
291 struct sigaction action
;
292 int group
, status
= SS_RC_INITIALIZATION_FAILED
;
293 struct utsname utsname
;
295 /* logging for library during initialization, as we have no bus yet */
298 /* initialize library */
299 if (!library_init(NULL
, "charon"))
302 exit(SS_RC_LIBSTRONGSWAN_INTEGRITY
);
305 if (lib
->integrity
&&
306 !lib
->integrity
->check_file(lib
->integrity
, "charon", argv
[0]))
308 dbg_stderr(DBG_DMN
, 1, "integrity check of charon failed");
310 exit(SS_RC_DAEMON_INTEGRITY
);
313 if (!libhydra_init())
315 dbg_stderr(DBG_DMN
, 1, "initialization failed - aborting charon");
318 exit(SS_RC_INITIALIZATION_FAILED
);
321 if (!libcharon_init())
323 dbg_stderr(DBG_DMN
, 1, "initialization failed - aborting charon");
327 /* use CTRL loglevel for default */
328 for (group
= 0; group
< DBG_MAX
; group
++)
330 levels
[group
] = LEVEL_CTRL
;
333 /* handle arguments */
336 struct option long_opts
[] = {
337 { "help", no_argument
, NULL
, 'h' },
338 { "version", no_argument
, NULL
, 'v' },
339 { "use-syslog", no_argument
, NULL
, 'l' },
340 /* TODO: handle "debug-all" */
341 { "debug-dmn", required_argument
, &group
, DBG_DMN
},
342 { "debug-mgr", required_argument
, &group
, DBG_MGR
},
343 { "debug-ike", required_argument
, &group
, DBG_IKE
},
344 { "debug-chd", required_argument
, &group
, DBG_CHD
},
345 { "debug-job", required_argument
, &group
, DBG_JOB
},
346 { "debug-cfg", required_argument
, &group
, DBG_CFG
},
347 { "debug-knl", required_argument
, &group
, DBG_KNL
},
348 { "debug-net", required_argument
, &group
, DBG_NET
},
349 { "debug-asn", required_argument
, &group
, DBG_ASN
},
350 { "debug-enc", required_argument
, &group
, DBG_ENC
},
351 { "debug-tnc", required_argument
, &group
, DBG_TNC
},
352 { "debug-imc", required_argument
, &group
, DBG_IMC
},
353 { "debug-imv", required_argument
, &group
, DBG_IMV
},
354 { "debug-pts", required_argument
, &group
, DBG_PTS
},
355 { "debug-tls", required_argument
, &group
, DBG_TLS
},
356 { "debug-esp", required_argument
, &group
, DBG_ESP
},
357 { "debug-lib", required_argument
, &group
, DBG_LIB
},
361 int c
= getopt_long(argc
, argv
, "", long_opts
, NULL
);
371 printf("Linux strongSwan %s\n", VERSION
);
378 /* option is in group */
379 levels
[group
] = atoi(optarg
);
389 if (!lookup_uid_gid())
391 dbg_stderr(DBG_DMN
, 1, "invalid uid/gid - aborting charon");
395 charon
->load_loggers(charon
, levels
, !use_syslog
);
397 if (uname(&utsname
) != 0)
399 memset(&utsname
, 0, sizeof(utsname
));
401 DBG1(DBG_DMN
, "Starting IKE charon daemon (strongSwan "VERSION
", %s %s, %s)",
402 utsname
.sysname
, utsname
.release
, utsname
.machine
);
405 DBG1(DBG_DMN
, "integrity tests enabled:");
406 DBG1(DBG_DMN
, "lib 'libstrongswan': passed file and segment integrity tests");
407 DBG1(DBG_DMN
, "lib 'libhydra': passed file and segment integrity tests");
408 DBG1(DBG_DMN
, "lib 'libcharon': passed file and segment integrity tests");
409 DBG1(DBG_DMN
, "daemon 'charon': passed file integrity test");
412 /* initialize daemon */
413 if (!charon
->initialize(charon
,
414 lib
->settings
->get_str(lib
->settings
, "charon.load", PLUGINS
)))
416 DBG1(DBG_DMN
, "initialization failed - aborting charon");
419 lib
->plugins
->status(lib
->plugins
, LEVEL_CTRL
);
423 DBG1(DBG_DMN
, "charon already running (\""PID_FILE
"\" exists)");
427 if (!lib
->caps
->drop(lib
->caps
))
429 DBG1(DBG_DMN
, "capability dropping failed - aborting charon");
433 /* add handler for SEGV and ILL,
434 * INT, TERM and HUP are handled by sigwaitinfo() in run() */
435 action
.sa_handler
= segv_handler
;
437 sigemptyset(&action
.sa_mask
);
438 sigaddset(&action
.sa_mask
, SIGINT
);
439 sigaddset(&action
.sa_mask
, SIGTERM
);
440 sigaddset(&action
.sa_mask
, SIGHUP
);
441 sigaction(SIGSEGV
, &action
, NULL
);
442 sigaction(SIGILL
, &action
, NULL
);
443 sigaction(SIGBUS
, &action
, NULL
);
444 action
.sa_handler
= SIG_IGN
;
445 sigaction(SIGPIPE
, &action
, NULL
);
447 pthread_sigmask(SIG_SETMASK
, &action
.sa_mask
, NULL
);
449 /* start daemon (i.e. the threads in the thread-pool) */
450 charon
->start(charon
);
452 /* main thread goes to run loop */
455 /* normal termination, cleanup and exit */