lpd.c revision 1.49 1 1.49 itojun /* $NetBSD: lpd.c,v 1.49 2003/10/16 06:30:11 itojun Exp $ */
2 1.7 mrg
3 1.1 cgd /*
4 1.4 cgd * Copyright (c) 1983, 1993, 1994
5 1.4 cgd * The Regents of the University of California. All rights reserved.
6 1.4 cgd *
7 1.1 cgd *
8 1.1 cgd * Redistribution and use in source and binary forms, with or without
9 1.1 cgd * modification, are permitted provided that the following conditions
10 1.1 cgd * are met:
11 1.1 cgd * 1. Redistributions of source code must retain the above copyright
12 1.1 cgd * notice, this list of conditions and the following disclaimer.
13 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
14 1.1 cgd * notice, this list of conditions and the following disclaimer in the
15 1.1 cgd * documentation and/or other materials provided with the distribution.
16 1.46 agc * 3. Neither the name of the University nor the names of its contributors
17 1.1 cgd * may be used to endorse or promote products derived from this software
18 1.1 cgd * without specific prior written permission.
19 1.1 cgd *
20 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.1 cgd * SUCH DAMAGE.
31 1.1 cgd */
32 1.1 cgd
33 1.11 mikel #include <sys/cdefs.h>
34 1.11 mikel
35 1.1 cgd #ifndef lint
36 1.11 mikel __COPYRIGHT("@(#) Copyright (c) 1983, 1993, 1994\n\
37 1.11 mikel The Regents of the University of California. All rights reserved.\n");
38 1.1 cgd #endif /* not lint */
39 1.1 cgd
40 1.1 cgd #ifndef lint
41 1.10 mikel #if 0
42 1.12 mrg static char sccsid[] = "@(#)lpd.c 8.7 (Berkeley) 5/10/95";
43 1.10 mikel #else
44 1.49 itojun __RCSID("$NetBSD: lpd.c,v 1.49 2003/10/16 06:30:11 itojun Exp $");
45 1.10 mikel #endif
46 1.1 cgd #endif /* not lint */
47 1.1 cgd
48 1.1 cgd /*
49 1.1 cgd * lpd -- line printer daemon.
50 1.1 cgd *
51 1.1 cgd * Listen for a connection and perform the requested operation.
52 1.1 cgd * Operations are:
53 1.1 cgd * \1printer\n
54 1.1 cgd * check the queue for jobs and print any found.
55 1.1 cgd * \2printer\n
56 1.1 cgd * receive a job from another machine and queue it.
57 1.1 cgd * \3printer [users ...] [jobs ...]\n
58 1.1 cgd * return the current state of the queue (short form).
59 1.1 cgd * \4printer [users ...] [jobs ...]\n
60 1.1 cgd * return the current state of the queue (long form).
61 1.1 cgd * \5printer person [users ...] [jobs ...]\n
62 1.1 cgd * remove jobs from the queue.
63 1.1 cgd *
64 1.1 cgd * Strategy to maintain protected spooling area:
65 1.1 cgd * 1. Spooling area is writable only by daemon and spooling group
66 1.1 cgd * 2. lpr runs setuid root and setgrp spooling group; it uses
67 1.1 cgd * root to access any file it wants (verifying things before
68 1.1 cgd * with an access call) and group id to know how it should
69 1.1 cgd * set up ownership of files in the spooling area.
70 1.1 cgd * 3. Files in spooling area are owned by root, group spooling
71 1.1 cgd * group, with mode 660.
72 1.1 cgd * 4. lpd, lpq and lprm run setuid daemon and setgrp spooling group to
73 1.1 cgd * access files and printer. Users can't get to anything
74 1.1 cgd * w/o help of lpq and lprm programs.
75 1.1 cgd */
76 1.1 cgd
77 1.4 cgd #include <sys/param.h>
78 1.4 cgd #include <sys/wait.h>
79 1.4 cgd #include <sys/types.h>
80 1.4 cgd #include <sys/socket.h>
81 1.4 cgd #include <sys/un.h>
82 1.4 cgd #include <sys/stat.h>
83 1.12 mrg #include <sys/file.h>
84 1.39 mycroft #include <sys/poll.h>
85 1.4 cgd #include <netinet/in.h>
86 1.4 cgd
87 1.18 mrg #include <err.h>
88 1.4 cgd #include <netdb.h>
89 1.4 cgd #include <unistd.h>
90 1.4 cgd #include <syslog.h>
91 1.4 cgd #include <signal.h>
92 1.4 cgd #include <errno.h>
93 1.4 cgd #include <fcntl.h>
94 1.4 cgd #include <dirent.h>
95 1.30 mjl #include <stdarg.h>
96 1.4 cgd #include <stdio.h>
97 1.4 cgd #include <stdlib.h>
98 1.4 cgd #include <string.h>
99 1.4 cgd #include <ctype.h>
100 1.11 mikel #include <arpa/inet.h>
101 1.11 mikel
102 1.38 itojun #ifdef LIBWRAP
103 1.38 itojun #include <tcpd.h>
104 1.38 itojun #endif
105 1.38 itojun
106 1.1 cgd #include "lp.h"
107 1.4 cgd #include "lp.local.h"
108 1.1 cgd #include "pathnames.h"
109 1.4 cgd #include "extern.h"
110 1.1 cgd
111 1.21 itojun /* XXX from libc/net/rcmd.c */
112 1.35 wiz extern int __ivaliduser_sa(FILE *, struct sockaddr *, socklen_t,
113 1.35 wiz const char *, const char *);
114 1.21 itojun
115 1.38 itojun #ifdef LIBWRAP
116 1.38 itojun int allow_severity = LOG_AUTH|LOG_INFO;
117 1.38 itojun int deny_severity = LOG_AUTH|LOG_WARNING;
118 1.38 itojun #endif
119 1.38 itojun
120 1.1 cgd int lflag; /* log requests flag */
121 1.18 mrg int rflag; /* allow of for remote printers */
122 1.8 perry int sflag; /* secure (no inet) flag */
123 1.1 cgd int from_remote; /* from remote socket */
124 1.23 scw char **blist; /* list of addresses to bind(2) to */
125 1.23 scw int blist_size;
126 1.23 scw int blist_addrs;
127 1.1 cgd
128 1.39 mycroft int main(int, char **);
129 1.39 mycroft static void reapchild(int);
130 1.39 mycroft static void mcleanup(int);
131 1.39 mycroft static void doit(void);
132 1.39 mycroft static void startup(void);
133 1.39 mycroft static void chkhost(struct sockaddr *, int);
134 1.39 mycroft static int ckqueue(char *);
135 1.39 mycroft static void usage(void);
136 1.39 mycroft static struct pollfd *socksetup(int, int, const char *, int *);
137 1.1 cgd
138 1.5 hpeyerl uid_t uid, euid;
139 1.18 mrg int child_count;
140 1.5 hpeyerl
141 1.30 mjl #define LPD_NOPORTCHK 0001 /* skip reserved-port check */
142 1.30 mjl
143 1.4 cgd int
144 1.30 mjl main(int argc, char **argv)
145 1.1 cgd {
146 1.41 mycroft struct sockaddr_storage from;
147 1.41 mycroft socklen_t fromlen;
148 1.22 mrg sigset_t nmask, omask;
149 1.39 mycroft int lfd, errs, i, f, nfds;
150 1.39 mycroft struct pollfd *socks;
151 1.32 wiz int child_max = 32; /* more than enough to hose the system */
152 1.30 mjl int options = 0, check_options = 0;
153 1.26 itojun struct servent *sp;
154 1.26 itojun const char *port = "printer";
155 1.48 itojun char **newblist;
156 1.1 cgd
157 1.5 hpeyerl euid = geteuid(); /* these shouldn't be different */
158 1.5 hpeyerl uid = getuid();
159 1.1 cgd gethostname(host, sizeof(host));
160 1.16 mrg host[sizeof(host) - 1] = '\0';
161 1.1 cgd name = argv[0];
162 1.1 cgd
163 1.13 mrg errs = 0;
164 1.34 hubertf while ((i = getopt(argc, argv, "b:dln:srw:W")) != -1)
165 1.13 mrg switch (i) {
166 1.23 scw case 'b':
167 1.23 scw if (blist_addrs >= blist_size) {
168 1.48 itojun newblist = realloc(blist,
169 1.48 itojun blist_size + sizeof(char *) * 4);
170 1.48 itojun if (newblist == NULL)
171 1.48 itojun err(1, "cant allocate bind addr list");
172 1.48 itojun blist = newblist;
173 1.23 scw blist_size += sizeof(char *) * 4;
174 1.23 scw }
175 1.23 scw blist[blist_addrs++] = strdup(optarg);
176 1.23 scw break;
177 1.13 mrg case 'd':
178 1.13 mrg options |= SO_DEBUG;
179 1.13 mrg break;
180 1.13 mrg case 'l':
181 1.13 mrg lflag++;
182 1.14 mrg break;
183 1.18 mrg case 'n':
184 1.18 mrg child_max = atoi(optarg);
185 1.18 mrg if (child_max < 0 || child_max > 1024)
186 1.18 mrg errx(1, "invalid number of children: %s",
187 1.18 mrg optarg);
188 1.18 mrg break;
189 1.18 mrg case 'r':
190 1.18 mrg rflag++;
191 1.18 mrg break;
192 1.14 mrg case 's':
193 1.14 mrg sflag++;
194 1.13 mrg break;
195 1.18 mrg case 'w':
196 1.18 mrg wait_time = atoi(optarg);
197 1.18 mrg if (wait_time < 0)
198 1.18 mrg errx(1, "wait time must be postive: %s",
199 1.18 mrg optarg);
200 1.18 mrg if (wait_time < 30)
201 1.18 mrg warnx("warning: wait time less than 30 seconds");
202 1.18 mrg break;
203 1.30 mjl case 'W':/* allow connections coming from a non-reserved port */
204 1.30 mjl /* (done by some lpr-implementations for MS-Windows) */
205 1.30 mjl check_options |= LPD_NOPORTCHK;
206 1.30 mjl break;
207 1.13 mrg default:
208 1.13 mrg errs++;
209 1.13 mrg }
210 1.13 mrg argc -= optind;
211 1.13 mrg argv += optind;
212 1.22 mrg if (errs)
213 1.13 mrg usage();
214 1.1 cgd
215 1.22 mrg switch (argc) {
216 1.22 mrg case 1:
217 1.22 mrg if ((i = atoi(argv[0])) == 0)
218 1.22 mrg usage();
219 1.22 mrg if (i < 0 || i > USHRT_MAX)
220 1.22 mrg errx(1, "port # %d is invalid", i);
221 1.22 mrg
222 1.26 itojun port = argv[0];
223 1.22 mrg break;
224 1.22 mrg case 0:
225 1.26 itojun sp = getservbyname(port, "tcp");
226 1.22 mrg if (sp == NULL)
227 1.26 itojun errx(1, "%s/tcp: unknown service", port);
228 1.22 mrg break;
229 1.22 mrg default:
230 1.22 mrg usage();
231 1.22 mrg }
232 1.22 mrg
233 1.1 cgd #ifndef DEBUG
234 1.1 cgd /*
235 1.1 cgd * Set up standard environment by detaching from the parent.
236 1.1 cgd */
237 1.1 cgd daemon(0, 0);
238 1.1 cgd #endif
239 1.1 cgd
240 1.1 cgd openlog("lpd", LOG_PID, LOG_LPR);
241 1.4 cgd syslog(LOG_INFO, "restarted");
242 1.9 mrg (void)umask(0);
243 1.1 cgd lfd = open(_PATH_MASTERLOCK, O_WRONLY|O_CREAT, 0644);
244 1.1 cgd if (lfd < 0) {
245 1.1 cgd syslog(LOG_ERR, "%s: %m", _PATH_MASTERLOCK);
246 1.1 cgd exit(1);
247 1.1 cgd }
248 1.1 cgd if (flock(lfd, LOCK_EX|LOCK_NB) < 0) {
249 1.40 mycroft if (errno == EWOULDBLOCK) { /* active daemon present */
250 1.40 mycroft syslog(LOG_ERR, "%s is locked; another lpd is running",
251 1.40 mycroft _PATH_MASTERLOCK);
252 1.1 cgd exit(0);
253 1.40 mycroft }
254 1.1 cgd syslog(LOG_ERR, "%s: %m", _PATH_MASTERLOCK);
255 1.1 cgd exit(1);
256 1.1 cgd }
257 1.1 cgd ftruncate(lfd, 0);
258 1.1 cgd /*
259 1.1 cgd * write process id for others to know
260 1.1 cgd */
261 1.9 mrg (void)snprintf(line, sizeof(line), "%u\n", getpid());
262 1.1 cgd f = strlen(line);
263 1.1 cgd if (write(lfd, line, f) != f) {
264 1.1 cgd syslog(LOG_ERR, "%s: %m", _PATH_MASTERLOCK);
265 1.1 cgd exit(1);
266 1.1 cgd }
267 1.1 cgd signal(SIGCHLD, reapchild);
268 1.1 cgd /*
269 1.1 cgd * Restart all the printers.
270 1.1 cgd */
271 1.1 cgd startup();
272 1.22 mrg
273 1.22 mrg sigemptyset(&nmask);
274 1.22 mrg sigaddset(&nmask, SIGHUP);
275 1.22 mrg sigaddset(&nmask, SIGINT);
276 1.22 mrg sigaddset(&nmask, SIGQUIT);
277 1.22 mrg sigaddset(&nmask, SIGTERM);
278 1.22 mrg sigprocmask(SIG_BLOCK, &nmask, &omask);
279 1.22 mrg
280 1.1 cgd signal(SIGHUP, mcleanup);
281 1.1 cgd signal(SIGINT, mcleanup);
282 1.1 cgd signal(SIGQUIT, mcleanup);
283 1.1 cgd signal(SIGTERM, mcleanup);
284 1.39 mycroft
285 1.39 mycroft socks = socksetup(PF_UNSPEC, options, port, &nfds);
286 1.39 mycroft
287 1.22 mrg sigprocmask(SIG_SETMASK, &omask, (sigset_t *)0);
288 1.1 cgd
289 1.24 scw if (blist != NULL) {
290 1.24 scw for (i = 0; i < blist_addrs; i++)
291 1.24 scw free(blist[i]);
292 1.23 scw free(blist);
293 1.24 scw }
294 1.23 scw
295 1.1 cgd /*
296 1.1 cgd * Main loop: accept, do a request, continue.
297 1.1 cgd */
298 1.41 mycroft memset(&from, 0, sizeof(from));
299 1.1 cgd for (;;) {
300 1.41 mycroft int rv, s;
301 1.18 mrg /* "short" so it overflows in about 2 hours */
302 1.39 mycroft struct timespec sleeptime = {10, 0};
303 1.18 mrg
304 1.18 mrg while (child_max < child_count) {
305 1.18 mrg syslog(LOG_WARNING,
306 1.39 mycroft "too many children, sleeping for %ld seconds",
307 1.42 lukem (long)sleeptime.tv_sec);
308 1.39 mycroft nanosleep(&sleeptime, NULL);
309 1.39 mycroft sleeptime.tv_sec <<= 1;
310 1.39 mycroft if (sleeptime.tv_sec <= 0) {
311 1.18 mrg syslog(LOG_CRIT, "sleeptime overflowed! help!");
312 1.39 mycroft sleeptime.tv_sec = 10;
313 1.18 mrg }
314 1.18 mrg }
315 1.1 cgd
316 1.39 mycroft rv = poll(socks, nfds, INFTIM);
317 1.39 mycroft if (rv <= 0) {
318 1.39 mycroft if (rv < 0 && errno != EINTR)
319 1.39 mycroft syslog(LOG_WARNING, "poll: %m");
320 1.1 cgd continue;
321 1.1 cgd }
322 1.39 mycroft for (i = 0; i < nfds; i++)
323 1.39 mycroft if (socks[i].revents & POLLIN) {
324 1.41 mycroft fromlen = sizeof(from);
325 1.41 mycroft s = accept(socks[i].fd,
326 1.41 mycroft (struct sockaddr *)&from, &fromlen);
327 1.39 mycroft break;
328 1.39 mycroft }
329 1.1 cgd if (s < 0) {
330 1.1 cgd if (errno != EINTR)
331 1.1 cgd syslog(LOG_WARNING, "accept: %m");
332 1.1 cgd continue;
333 1.1 cgd }
334 1.18 mrg
335 1.18 mrg switch (fork()) {
336 1.18 mrg case 0:
337 1.1 cgd signal(SIGCHLD, SIG_IGN);
338 1.1 cgd signal(SIGHUP, SIG_IGN);
339 1.1 cgd signal(SIGINT, SIG_IGN);
340 1.1 cgd signal(SIGQUIT, SIG_IGN);
341 1.1 cgd signal(SIGTERM, SIG_IGN);
342 1.39 mycroft for (i = 0; i < nfds; i++)
343 1.39 mycroft (void)close(socks[i].fd);
344 1.44 thorpej dup2(s, STDOUT_FILENO);
345 1.9 mrg (void)close(s);
346 1.41 mycroft if (from.ss_family != AF_LOCAL) {
347 1.20 itojun /* for both AF_INET and AF_INET6 */
348 1.1 cgd from_remote = 1;
349 1.41 mycroft chkhost((struct sockaddr *)&from, check_options);
350 1.1 cgd } else
351 1.1 cgd from_remote = 0;
352 1.1 cgd doit();
353 1.1 cgd exit(0);
354 1.18 mrg case -1:
355 1.18 mrg syslog(LOG_WARNING, "fork: %m, sleeping for 10 seconds...");
356 1.18 mrg sleep(10);
357 1.18 mrg continue;
358 1.18 mrg default:
359 1.18 mrg child_count++;
360 1.1 cgd }
361 1.9 mrg (void)close(s);
362 1.1 cgd }
363 1.1 cgd }
364 1.1 cgd
365 1.4 cgd static void
366 1.30 mjl reapchild(int signo)
367 1.1 cgd {
368 1.1 cgd union wait status;
369 1.1 cgd
370 1.1 cgd while (wait3((int *)&status, WNOHANG, 0) > 0)
371 1.18 mrg child_count--;
372 1.1 cgd }
373 1.1 cgd
374 1.4 cgd static void
375 1.30 mjl mcleanup(int signo)
376 1.1 cgd {
377 1.1 cgd if (lflag)
378 1.1 cgd syslog(LOG_INFO, "exiting");
379 1.1 cgd unlink(_PATH_SOCKETNAME);
380 1.1 cgd exit(0);
381 1.1 cgd }
382 1.1 cgd
383 1.1 cgd /*
384 1.1 cgd * Stuff for handling job specifications
385 1.1 cgd */
386 1.1 cgd char *user[MAXUSERS]; /* users to process */
387 1.1 cgd int users; /* # of users in user array */
388 1.1 cgd int requ[MAXREQUESTS]; /* job number of spool entries */
389 1.1 cgd int requests; /* # of spool requests */
390 1.1 cgd char *person; /* name of person doing lprm */
391 1.1 cgd
392 1.20 itojun char fromb[NI_MAXHOST]; /* buffer for client's machine name */
393 1.4 cgd char cbuf[BUFSIZ]; /* command line buffer */
394 1.1 cgd char *cmdnames[] = {
395 1.1 cgd "null",
396 1.1 cgd "printjob",
397 1.1 cgd "recvjob",
398 1.1 cgd "displayq short",
399 1.1 cgd "displayq long",
400 1.1 cgd "rmjob"
401 1.1 cgd };
402 1.1 cgd
403 1.4 cgd static void
404 1.30 mjl doit(void)
405 1.1 cgd {
406 1.13 mrg char *cp;
407 1.13 mrg int n;
408 1.1 cgd
409 1.1 cgd for (;;) {
410 1.1 cgd cp = cbuf;
411 1.1 cgd do {
412 1.1 cgd if (cp >= &cbuf[sizeof(cbuf) - 1])
413 1.1 cgd fatal("Command line too long");
414 1.31 mjl if ((n = read(STDOUT_FILENO, cp, 1)) != 1) {
415 1.1 cgd if (n < 0)
416 1.1 cgd fatal("Lost connection");
417 1.1 cgd return;
418 1.1 cgd }
419 1.1 cgd } while (*cp++ != '\n');
420 1.1 cgd *--cp = '\0';
421 1.1 cgd cp = cbuf;
422 1.1 cgd if (lflag) {
423 1.18 mrg if (*cp >= '\1' && *cp <= '\5') {
424 1.1 cgd syslog(LOG_INFO, "%s requests %s %s",
425 1.10 mikel from, cmdnames[(int)*cp], cp+1);
426 1.18 mrg setproctitle("serving %s: %s %s", from,
427 1.18 mrg cmdnames[(int)*cp], cp+1);
428 1.18 mrg }
429 1.1 cgd else
430 1.1 cgd syslog(LOG_INFO, "bad request (%d) from %s",
431 1.1 cgd *cp, from);
432 1.1 cgd }
433 1.1 cgd switch (*cp++) {
434 1.1 cgd case '\1': /* check the queue and print any jobs there */
435 1.1 cgd printer = cp;
436 1.29 mrg if (*printer == '\0')
437 1.29 mrg printer = DEFLP;
438 1.1 cgd printjob();
439 1.1 cgd break;
440 1.1 cgd case '\2': /* receive files to be queued */
441 1.1 cgd if (!from_remote) {
442 1.1 cgd syslog(LOG_INFO, "illegal request (%d)", *cp);
443 1.1 cgd exit(1);
444 1.1 cgd }
445 1.1 cgd printer = cp;
446 1.29 mrg if (*printer == '\0')
447 1.29 mrg printer = DEFLP;
448 1.1 cgd recvjob();
449 1.1 cgd break;
450 1.1 cgd case '\3': /* display the queue (short form) */
451 1.1 cgd case '\4': /* display the queue (long form) */
452 1.1 cgd printer = cp;
453 1.29 mrg if (*printer == '\0')
454 1.29 mrg printer = DEFLP;
455 1.1 cgd while (*cp) {
456 1.1 cgd if (*cp != ' ') {
457 1.1 cgd cp++;
458 1.1 cgd continue;
459 1.1 cgd }
460 1.1 cgd *cp++ = '\0';
461 1.1 cgd while (isspace(*cp))
462 1.1 cgd cp++;
463 1.1 cgd if (*cp == '\0')
464 1.1 cgd break;
465 1.1 cgd if (isdigit(*cp)) {
466 1.1 cgd if (requests >= MAXREQUESTS)
467 1.1 cgd fatal("Too many requests");
468 1.1 cgd requ[requests++] = atoi(cp);
469 1.1 cgd } else {
470 1.1 cgd if (users >= MAXUSERS)
471 1.1 cgd fatal("Too many users");
472 1.1 cgd user[users++] = cp;
473 1.1 cgd }
474 1.1 cgd }
475 1.1 cgd displayq(cbuf[0] - '\3');
476 1.1 cgd exit(0);
477 1.1 cgd case '\5': /* remove a job from the queue */
478 1.1 cgd if (!from_remote) {
479 1.1 cgd syslog(LOG_INFO, "illegal request (%d)", *cp);
480 1.1 cgd exit(1);
481 1.1 cgd }
482 1.1 cgd printer = cp;
483 1.29 mrg if (*printer == '\0')
484 1.29 mrg printer = DEFLP;
485 1.1 cgd while (*cp && *cp != ' ')
486 1.1 cgd cp++;
487 1.1 cgd if (!*cp)
488 1.1 cgd break;
489 1.1 cgd *cp++ = '\0';
490 1.1 cgd person = cp;
491 1.1 cgd while (*cp) {
492 1.1 cgd if (*cp != ' ') {
493 1.1 cgd cp++;
494 1.1 cgd continue;
495 1.1 cgd }
496 1.1 cgd *cp++ = '\0';
497 1.1 cgd while (isspace(*cp))
498 1.1 cgd cp++;
499 1.1 cgd if (*cp == '\0')
500 1.1 cgd break;
501 1.1 cgd if (isdigit(*cp)) {
502 1.1 cgd if (requests >= MAXREQUESTS)
503 1.1 cgd fatal("Too many requests");
504 1.1 cgd requ[requests++] = atoi(cp);
505 1.1 cgd } else {
506 1.1 cgd if (users >= MAXUSERS)
507 1.1 cgd fatal("Too many users");
508 1.1 cgd user[users++] = cp;
509 1.1 cgd }
510 1.1 cgd }
511 1.1 cgd rmjob();
512 1.1 cgd break;
513 1.1 cgd }
514 1.1 cgd fatal("Illegal service request");
515 1.1 cgd }
516 1.1 cgd }
517 1.1 cgd
518 1.1 cgd /*
519 1.1 cgd * Make a pass through the printcap database and start printing any
520 1.1 cgd * files left from the last time the machine went down.
521 1.1 cgd */
522 1.4 cgd static void
523 1.30 mjl startup(void)
524 1.1 cgd {
525 1.4 cgd char *buf;
526 1.13 mrg char *cp;
527 1.1 cgd
528 1.1 cgd /*
529 1.1 cgd * Restart the daemons.
530 1.1 cgd */
531 1.4 cgd while (cgetnext(&buf, printcapdb) > 0) {
532 1.12 mrg if (ckqueue(buf) <= 0) {
533 1.12 mrg free(buf);
534 1.12 mrg continue; /* no work to do for this printer */
535 1.12 mrg }
536 1.1 cgd for (cp = buf; *cp; cp++)
537 1.1 cgd if (*cp == '|' || *cp == ':') {
538 1.1 cgd *cp = '\0';
539 1.1 cgd break;
540 1.1 cgd }
541 1.12 mrg if (lflag)
542 1.12 mrg syslog(LOG_INFO, "work for %s", buf);
543 1.18 mrg switch (fork()) {
544 1.18 mrg case -1:
545 1.1 cgd syslog(LOG_WARNING, "startup: cannot fork");
546 1.4 cgd mcleanup(0);
547 1.18 mrg case 0:
548 1.4 cgd printer = buf;
549 1.18 mrg setproctitle("working on printer %s", printer);
550 1.4 cgd cgetclose();
551 1.1 cgd printjob();
552 1.12 mrg /* NOTREACHED */
553 1.18 mrg default:
554 1.18 mrg child_count++;
555 1.18 mrg free(buf);
556 1.1 cgd }
557 1.12 mrg }
558 1.12 mrg }
559 1.12 mrg
560 1.12 mrg /*
561 1.12 mrg * Make sure there's some work to do before forking off a child
562 1.12 mrg */
563 1.12 mrg static int
564 1.30 mjl ckqueue(char *cap)
565 1.12 mrg {
566 1.13 mrg struct dirent *d;
567 1.12 mrg DIR *dirp;
568 1.12 mrg char *spooldir;
569 1.12 mrg
570 1.12 mrg if (cgetstr(cap, "sd", &spooldir) == -1)
571 1.12 mrg spooldir = _PATH_DEFSPOOL;
572 1.47 itojun if ((dirp = opendir(spooldir)) == NULL) {
573 1.47 itojun if (spooldir != _PATH_DEFSPOOL)
574 1.47 itojun free(spooldir);
575 1.12 mrg return (-1);
576 1.47 itojun }
577 1.12 mrg while ((d = readdir(dirp)) != NULL) {
578 1.12 mrg if (d->d_name[0] != 'c' || d->d_name[1] != 'f')
579 1.12 mrg continue; /* daemon control files only */
580 1.12 mrg closedir(dirp);
581 1.47 itojun if (spooldir != _PATH_DEFSPOOL)
582 1.47 itojun free(spooldir);
583 1.12 mrg return (1); /* found something */
584 1.1 cgd }
585 1.12 mrg closedir(dirp);
586 1.47 itojun if (spooldir != _PATH_DEFSPOOL)
587 1.47 itojun free(spooldir);
588 1.12 mrg return (0);
589 1.1 cgd }
590 1.1 cgd
591 1.1 cgd #define DUMMY ":nobody::"
592 1.1 cgd
593 1.1 cgd /*
594 1.1 cgd * Check to see if the from host has access to the line printer.
595 1.1 cgd */
596 1.4 cgd static void
597 1.30 mjl chkhost(struct sockaddr *f, int check_opts)
598 1.1 cgd {
599 1.20 itojun struct addrinfo hints, *res, *r;
600 1.13 mrg FILE *hostf;
601 1.38 itojun int good = 0;
602 1.20 itojun char host[NI_MAXHOST], ip[NI_MAXHOST];
603 1.20 itojun char serv[NI_MAXSERV];
604 1.20 itojun int error;
605 1.38 itojun #ifdef LIBWRAP
606 1.38 itojun struct request_info req;
607 1.38 itojun #endif
608 1.20 itojun
609 1.20 itojun error = getnameinfo(f, f->sa_len, NULL, 0, serv, sizeof(serv),
610 1.20 itojun NI_NUMERICSERV);
611 1.30 mjl if (error)
612 1.37 grant fatal("Malformed from address: %s", gai_strerror(error));
613 1.4 cgd
614 1.30 mjl if (!(check_opts & LPD_NOPORTCHK) &&
615 1.30 mjl atoi(serv) >= IPPORT_RESERVED)
616 1.30 mjl fatal("Connect from invalid port (%s)", serv);
617 1.30 mjl
618 1.4 cgd /* Need real hostname for temporary filenames */
619 1.20 itojun error = getnameinfo(f, f->sa_len, host, sizeof(host), NULL, 0,
620 1.20 itojun NI_NAMEREQD);
621 1.20 itojun if (error) {
622 1.20 itojun error = getnameinfo(f, f->sa_len, host, sizeof(host), NULL, 0,
623 1.20 itojun NI_NUMERICHOST);
624 1.20 itojun if (error)
625 1.20 itojun fatal("Host name for your address unknown");
626 1.20 itojun else
627 1.20 itojun fatal("Host name for your address (%s) unknown", host);
628 1.20 itojun }
629 1.1 cgd
630 1.45 itojun (void)strlcpy(fromb, host, sizeof(fromb));
631 1.1 cgd from = fromb;
632 1.1 cgd
633 1.20 itojun /* need address in stringform for comparison (no DNS lookup here) */
634 1.20 itojun error = getnameinfo(f, f->sa_len, host, sizeof(host), NULL, 0,
635 1.20 itojun NI_NUMERICHOST);
636 1.20 itojun if (error)
637 1.20 itojun fatal("Cannot print address");
638 1.20 itojun
639 1.13 mrg /* Check for spoof, ala rlogind */
640 1.20 itojun memset(&hints, 0, sizeof(hints));
641 1.20 itojun hints.ai_family = PF_UNSPEC;
642 1.20 itojun hints.ai_socktype = SOCK_DGRAM; /*dummy*/
643 1.20 itojun error = getaddrinfo(fromb, NULL, &hints, &res);
644 1.20 itojun if (error) {
645 1.20 itojun fatal("hostname for your address (%s) unknown: %s", host,
646 1.20 itojun gai_strerror(error));
647 1.20 itojun }
648 1.20 itojun good = 0;
649 1.20 itojun for (r = res; good == 0 && r; r = r->ai_next) {
650 1.20 itojun error = getnameinfo(r->ai_addr, r->ai_addrlen, ip, sizeof(ip),
651 1.20 itojun NULL, 0, NI_NUMERICHOST);
652 1.20 itojun if (!error && !strcmp(host, ip))
653 1.13 mrg good = 1;
654 1.13 mrg }
655 1.20 itojun if (res)
656 1.20 itojun freeaddrinfo(res);
657 1.13 mrg if (good == 0)
658 1.20 itojun fatal("address for your hostname (%s) not matched", host);
659 1.38 itojun
660 1.18 mrg setproctitle("serving %s", from);
661 1.38 itojun
662 1.38 itojun #ifdef LIBWRAP
663 1.44 thorpej request_init(&req, RQ_DAEMON, "lpd", RQ_CLIENT_SIN, f,
664 1.44 thorpej RQ_FILE, STDOUT_FILENO, NULL);
665 1.38 itojun fromhost(&req);
666 1.38 itojun if (!hosts_access(&req))
667 1.38 itojun goto denied;
668 1.38 itojun #endif
669 1.38 itojun
670 1.1 cgd hostf = fopen(_PATH_HOSTSEQUIV, "r");
671 1.1 cgd if (hostf) {
672 1.21 itojun if (__ivaliduser_sa(hostf, f, f->sa_len, DUMMY, DUMMY) == 0) {
673 1.9 mrg (void)fclose(hostf);
674 1.1 cgd return;
675 1.1 cgd }
676 1.9 mrg (void)fclose(hostf);
677 1.1 cgd }
678 1.38 itojun hostf = fopen(_PATH_HOSTSLPD, "r");
679 1.38 itojun if (hostf) {
680 1.38 itojun if (__ivaliduser_sa(hostf, f, f->sa_len, DUMMY, DUMMY) == 0) {
681 1.38 itojun (void)fclose(hostf);
682 1.38 itojun return;
683 1.38 itojun }
684 1.38 itojun (void)fclose(hostf);
685 1.1 cgd }
686 1.38 itojun #ifdef LIBWRAP
687 1.38 itojun denied:
688 1.38 itojun #endif
689 1.1 cgd fatal("Your host does not have line printer access");
690 1.4 cgd /*NOTREACHED*/
691 1.13 mrg }
692 1.13 mrg
693 1.30 mjl
694 1.13 mrg static void
695 1.30 mjl usage(void)
696 1.13 mrg {
697 1.13 mrg
698 1.30 mjl fprintf(stderr, "usage: %s [-dlrsW] [-b bind-address] [-n maxchild] "
699 1.28 simonb "[-w maxwait] [port]\n", getprogname());
700 1.13 mrg exit(1);
701 1.20 itojun }
702 1.20 itojun
703 1.20 itojun /* setup server socket for specified address family */
704 1.20 itojun /* if af is PF_UNSPEC more than one socket may be returned */
705 1.20 itojun /* the returned list is dynamically allocated, so caller needs to free it */
706 1.39 mycroft struct pollfd *
707 1.39 mycroft socksetup(int af, int options, const char *port, int *nfds)
708 1.20 itojun {
709 1.39 mycroft struct sockaddr_un un;
710 1.20 itojun struct addrinfo hints, *res, *r;
711 1.39 mycroft int error, s, blidx = 0, n;
712 1.48 itojun struct pollfd *socks, *newsocks;
713 1.20 itojun const int on = 1;
714 1.20 itojun
715 1.39 mycroft *nfds = 0;
716 1.39 mycroft
717 1.48 itojun socks = malloc(1 * sizeof(socks[0]));
718 1.39 mycroft if (!socks) {
719 1.39 mycroft syslog(LOG_ERR, "couldn't allocate memory for sockets");
720 1.39 mycroft mcleanup(0);
721 1.39 mycroft }
722 1.39 mycroft
723 1.39 mycroft s = socket(AF_LOCAL, SOCK_STREAM, 0);
724 1.39 mycroft if (s < 0) {
725 1.39 mycroft syslog(LOG_ERR, "socket(): %m");
726 1.39 mycroft exit(1);
727 1.39 mycroft }
728 1.39 mycroft memset(&un, 0, sizeof(un));
729 1.39 mycroft un.sun_family = AF_LOCAL;
730 1.39 mycroft strncpy(un.sun_path, _PATH_SOCKETNAME, sizeof(un.sun_path) - 1);
731 1.39 mycroft un.sun_len = SUN_LEN(&un);
732 1.39 mycroft (void)umask(07);
733 1.39 mycroft (void)unlink(_PATH_SOCKETNAME);
734 1.39 mycroft if (bind(s, (struct sockaddr *)&un, un.sun_len) < 0) {
735 1.39 mycroft syslog(LOG_ERR, "bind(): %m");
736 1.39 mycroft exit(1);
737 1.39 mycroft }
738 1.39 mycroft (void)umask(0);
739 1.39 mycroft listen(s, 5);
740 1.39 mycroft socks[*nfds].fd = s;
741 1.39 mycroft socks[*nfds].events = POLLIN;
742 1.39 mycroft (*nfds)++;
743 1.39 mycroft
744 1.39 mycroft if (sflag && !blist_addrs)
745 1.39 mycroft return (socks);
746 1.39 mycroft
747 1.23 scw do {
748 1.23 scw memset(&hints, 0, sizeof(hints));
749 1.23 scw hints.ai_flags = AI_PASSIVE;
750 1.23 scw hints.ai_family = af;
751 1.23 scw hints.ai_socktype = SOCK_STREAM;
752 1.23 scw error = getaddrinfo((blist_addrs == 0) ? NULL : blist[blidx],
753 1.26 itojun port ? port : "printer", &hints, &res);
754 1.23 scw if (error) {
755 1.23 scw if (blist_addrs)
756 1.23 scw syslog(LOG_ERR, "%s: %s", blist[blidx],
757 1.25 itojun gai_strerror(error));
758 1.23 scw else
759 1.25 itojun syslog(LOG_ERR, "%s", gai_strerror(error));
760 1.23 scw mcleanup(0);
761 1.23 scw }
762 1.20 itojun
763 1.23 scw /* Count max number of sockets we may open */
764 1.39 mycroft for (r = res, n = 0; r; r = r->ai_next, n++)
765 1.23 scw ;
766 1.49 itojun newsocks = realloc(socks, (*nfds + n) * sizeof(socks[0]));
767 1.48 itojun if (!newsocks) {
768 1.23 scw syslog(LOG_ERR, "couldn't allocate memory for sockets");
769 1.23 scw mcleanup(0);
770 1.20 itojun }
771 1.48 itojun socks = newsocks;
772 1.23 scw
773 1.23 scw for (r = res; r; r = r->ai_next) {
774 1.39 mycroft s = socket(r->ai_family, r->ai_socktype,
775 1.39 mycroft r->ai_protocol);
776 1.39 mycroft if (s < 0) {
777 1.23 scw syslog(LOG_DEBUG, "socket(): %m");
778 1.23 scw continue;
779 1.23 scw }
780 1.23 scw if (options & SO_DEBUG)
781 1.39 mycroft if (setsockopt(s, SOL_SOCKET, SO_DEBUG,
782 1.23 scw &on, sizeof(on)) < 0) {
783 1.23 scw syslog(LOG_ERR,
784 1.23 scw "setsockopt (SO_DEBUG): %m");
785 1.39 mycroft close(s);
786 1.23 scw continue;
787 1.23 scw }
788 1.39 mycroft if (setsockopt(s, SOL_SOCKET, SO_REUSEPORT, &on,
789 1.38 itojun sizeof(on)) < 0) {
790 1.38 itojun syslog(LOG_ERR,
791 1.38 itojun "setsockopt (SO_REUSEPORT): %m");
792 1.43 itojun close(s);
793 1.43 itojun continue;
794 1.43 itojun }
795 1.43 itojun if (r->ai_family == AF_INET6 && setsockopt(s,
796 1.43 itojun IPPROTO_IPV6, IPV6_V6ONLY, &on, sizeof(on)) < 0) {
797 1.43 itojun syslog(LOG_ERR,
798 1.43 itojun "setsockopt (IPV6_V6ONLY): %m");
799 1.39 mycroft close(s);
800 1.38 itojun continue;
801 1.38 itojun }
802 1.39 mycroft if (bind(s, r->ai_addr, r->ai_addrlen) < 0) {
803 1.23 scw syslog(LOG_DEBUG, "bind(): %m");
804 1.39 mycroft close(s);
805 1.20 itojun continue;
806 1.20 itojun }
807 1.39 mycroft listen(s, 5);
808 1.39 mycroft socks[*nfds].fd = s;
809 1.39 mycroft socks[*nfds].events = POLLIN;
810 1.39 mycroft (*nfds)++;
811 1.20 itojun }
812 1.20 itojun
813 1.23 scw if (res)
814 1.23 scw freeaddrinfo(res);
815 1.23 scw } while (++blidx < blist_addrs);
816 1.20 itojun
817 1.39 mycroft return (socks);
818 1.1 cgd }
819