src/libcharon/plugins/whitelist/whitelist_plugin.c

   1 /*
   2  * Copyright (C) 2011 Martin Willi
   3  * Copyright (C) 2011 revosec AG
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2 of the License, or (at your
   8  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  12  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  13  * for more details.
  14  */
  15
  16 #include "whitelist_plugin.h"
  17
  18 #include "whitelist_listener.h"
  19 #include "whitelist_control.h"
  20
  21 #include <daemon.h>
  22
  23 typedef struct private_whitelist_plugin_t private_whitelist_plugin_t;
  24
  25 /**
  26  * private data of whitelist plugin
  27  */
  28 struct private_whitelist_plugin_t {
  29
  30         /**
  31          * implements plugin interface
  32          */
  33         whitelist_plugin_t public;
  34
  35         /**
  36          * Listener checking whitelist entries during authorization
  37          */
  38         whitelist_listener_t *listener;
  39
  40         /**
  41          * Whitelist control socket
  42          */
  43         whitelist_control_t *control;
  44 };
  45
  46 METHOD(plugin_t, get_name, char*,
  47         private_whitelist_plugin_t *this)
  48 {
  49         return "whitelist";
  50 }
  51
  52 /**
  53  * Register listener
  54  */
  55 static bool plugin_cb(private_whitelist_plugin_t *this,
  56                                           plugin_feature_t *feature, bool reg, void *cb_data)
  57 {
  58         if (reg)
  59         {
  60                 charon->bus->add_listener(charon->bus, &this->listener->listener);
  61         }
  62         else
  63         {
  64                 charon->bus->remove_listener(charon->bus, &this->listener->listener);
  65         }
  66         return TRUE;
  67 }
  68
  69 METHOD(plugin_t, get_features, int,
  70         private_whitelist_plugin_t *this, plugin_feature_t *features[])
  71 {
  72         static plugin_feature_t f[] = {
  73                 PLUGIN_CALLBACK((plugin_feature_callback_t)plugin_cb, NULL),
  74                         PLUGIN_PROVIDE(CUSTOM, "whitelist"),
  75         };
  76         *features = f;
  77         return countof(f);
  78 }
  79
  80 METHOD(plugin_t, destroy, void,
  81         private_whitelist_plugin_t *this)
  82 {
  83         this->listener->destroy(this->listener);
  84         DESTROY_IF(this->control);
  85         free(this);
  86 }
  87
  88 /**
  89  * Plugin constructor
  90  */
  91 plugin_t *whitelist_plugin_create()
  92 {
  93         private_whitelist_plugin_t *this;
  94
  95         if (!lib->caps->keep(lib->caps, CAP_CHOWN))
  96         {       /* required to chown(2) control socket */
  97                 DBG1(DBG_CFG, "whitelist plugin requires CAP_CHOWN capability");
  98                 return NULL;
  99         }
 100
 101         INIT(this,
 102                 .public = {
 103                         .plugin = {
 104                                 .get_name = _get_name,
 105                                 .get_features = _get_features,
 106                                 .destroy = _destroy,
 107                         },
 108                 },
 109                 .listener = whitelist_listener_create(),
 110         );
 111         this->control = whitelist_control_create(this->listener);
 112
 113         return &this->public.plugin;
 114 }