lpd.c revision 1.51 1 1.51 lukem /* $NetBSD: lpd.c,v 1.51 2005/06/02 05:57:03 lukem Exp $ */
2 1.7 mrg
3 1.1 cgd /*
4 1.4 cgd * Copyright (c) 1983, 1993, 1994
5 1.4 cgd * The Regents of the University of California. All rights reserved.
6 1.4 cgd *
7 1.1 cgd *
8 1.1 cgd * Redistribution and use in source and binary forms, with or without
9 1.1 cgd * modification, are permitted provided that the following conditions
10 1.1 cgd * are met:
11 1.1 cgd * 1. Redistributions of source code must retain the above copyright
12 1.1 cgd * notice, this list of conditions and the following disclaimer.
13 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
14 1.1 cgd * notice, this list of conditions and the following disclaimer in the
15 1.1 cgd * documentation and/or other materials provided with the distribution.
16 1.46 agc * 3. Neither the name of the University nor the names of its contributors
17 1.1 cgd * may be used to endorse or promote products derived from this software
18 1.1 cgd * without specific prior written permission.
19 1.1 cgd *
20 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.1 cgd * SUCH DAMAGE.
31 1.1 cgd */
32 1.1 cgd
33 1.11 mikel #include <sys/cdefs.h>
34 1.11 mikel
35 1.1 cgd #ifndef lint
36 1.11 mikel __COPYRIGHT("@(#) Copyright (c) 1983, 1993, 1994\n\
37 1.11 mikel The Regents of the University of California. All rights reserved.\n");
38 1.1 cgd #endif /* not lint */
39 1.1 cgd
40 1.1 cgd #ifndef lint
41 1.10 mikel #if 0
42 1.12 mrg static char sccsid[] = "@(#)lpd.c 8.7 (Berkeley) 5/10/95";
43 1.10 mikel #else
44 1.51 lukem __RCSID("$NetBSD: lpd.c,v 1.51 2005/06/02 05:57:03 lukem Exp $");
45 1.10 mikel #endif
46 1.1 cgd #endif /* not lint */
47 1.1 cgd
48 1.1 cgd /*
49 1.1 cgd * lpd -- line printer daemon.
50 1.1 cgd *
51 1.1 cgd * Listen for a connection and perform the requested operation.
52 1.1 cgd * Operations are:
53 1.1 cgd * \1printer\n
54 1.1 cgd * check the queue for jobs and print any found.
55 1.1 cgd * \2printer\n
56 1.1 cgd * receive a job from another machine and queue it.
57 1.1 cgd * \3printer [users ...] [jobs ...]\n
58 1.1 cgd * return the current state of the queue (short form).
59 1.1 cgd * \4printer [users ...] [jobs ...]\n
60 1.1 cgd * return the current state of the queue (long form).
61 1.1 cgd * \5printer person [users ...] [jobs ...]\n
62 1.1 cgd * remove jobs from the queue.
63 1.1 cgd *
64 1.1 cgd * Strategy to maintain protected spooling area:
65 1.1 cgd * 1. Spooling area is writable only by daemon and spooling group
66 1.1 cgd * 2. lpr runs setuid root and setgrp spooling group; it uses
67 1.1 cgd * root to access any file it wants (verifying things before
68 1.1 cgd * with an access call) and group id to know how it should
69 1.1 cgd * set up ownership of files in the spooling area.
70 1.1 cgd * 3. Files in spooling area are owned by root, group spooling
71 1.1 cgd * group, with mode 660.
72 1.1 cgd * 4. lpd, lpq and lprm run setuid daemon and setgrp spooling group to
73 1.1 cgd * access files and printer. Users can't get to anything
74 1.1 cgd * w/o help of lpq and lprm programs.
75 1.1 cgd */
76 1.1 cgd
77 1.4 cgd #include <sys/param.h>
78 1.4 cgd #include <sys/wait.h>
79 1.4 cgd #include <sys/types.h>
80 1.4 cgd #include <sys/socket.h>
81 1.4 cgd #include <sys/un.h>
82 1.4 cgd #include <sys/stat.h>
83 1.12 mrg #include <sys/file.h>
84 1.39 mycroft #include <sys/poll.h>
85 1.4 cgd #include <netinet/in.h>
86 1.4 cgd
87 1.18 mrg #include <err.h>
88 1.4 cgd #include <netdb.h>
89 1.4 cgd #include <unistd.h>
90 1.4 cgd #include <syslog.h>
91 1.4 cgd #include <signal.h>
92 1.4 cgd #include <errno.h>
93 1.4 cgd #include <fcntl.h>
94 1.4 cgd #include <dirent.h>
95 1.30 mjl #include <stdarg.h>
96 1.4 cgd #include <stdio.h>
97 1.4 cgd #include <stdlib.h>
98 1.4 cgd #include <string.h>
99 1.4 cgd #include <ctype.h>
100 1.11 mikel #include <arpa/inet.h>
101 1.11 mikel
102 1.38 itojun #ifdef LIBWRAP
103 1.38 itojun #include <tcpd.h>
104 1.38 itojun #endif
105 1.38 itojun
106 1.1 cgd #include "lp.h"
107 1.4 cgd #include "lp.local.h"
108 1.1 cgd #include "pathnames.h"
109 1.4 cgd #include "extern.h"
110 1.1 cgd
111 1.21 itojun /* XXX from libc/net/rcmd.c */
112 1.35 wiz extern int __ivaliduser_sa(FILE *, struct sockaddr *, socklen_t,
113 1.35 wiz const char *, const char *);
114 1.21 itojun
115 1.38 itojun #ifdef LIBWRAP
116 1.38 itojun int allow_severity = LOG_AUTH|LOG_INFO;
117 1.38 itojun int deny_severity = LOG_AUTH|LOG_WARNING;
118 1.38 itojun #endif
119 1.38 itojun
120 1.1 cgd int lflag; /* log requests flag */
121 1.18 mrg int rflag; /* allow of for remote printers */
122 1.8 perry int sflag; /* secure (no inet) flag */
123 1.1 cgd int from_remote; /* from remote socket */
124 1.23 scw char **blist; /* list of addresses to bind(2) to */
125 1.23 scw int blist_size;
126 1.23 scw int blist_addrs;
127 1.1 cgd
128 1.39 mycroft int main(int, char **);
129 1.39 mycroft static void reapchild(int);
130 1.39 mycroft static void mcleanup(int);
131 1.39 mycroft static void doit(void);
132 1.39 mycroft static void startup(void);
133 1.39 mycroft static void chkhost(struct sockaddr *, int);
134 1.39 mycroft static int ckqueue(char *);
135 1.39 mycroft static void usage(void);
136 1.39 mycroft static struct pollfd *socksetup(int, int, const char *, int *);
137 1.1 cgd
138 1.5 hpeyerl uid_t uid, euid;
139 1.18 mrg int child_count;
140 1.5 hpeyerl
141 1.30 mjl #define LPD_NOPORTCHK 0001 /* skip reserved-port check */
142 1.30 mjl
143 1.4 cgd int
144 1.30 mjl main(int argc, char **argv)
145 1.1 cgd {
146 1.41 mycroft struct sockaddr_storage from;
147 1.41 mycroft socklen_t fromlen;
148 1.22 mrg sigset_t nmask, omask;
149 1.39 mycroft int lfd, errs, i, f, nfds;
150 1.39 mycroft struct pollfd *socks;
151 1.32 wiz int child_max = 32; /* more than enough to hose the system */
152 1.30 mjl int options = 0, check_options = 0;
153 1.26 itojun struct servent *sp;
154 1.26 itojun const char *port = "printer";
155 1.48 itojun char **newblist;
156 1.1 cgd
157 1.5 hpeyerl euid = geteuid(); /* these shouldn't be different */
158 1.5 hpeyerl uid = getuid();
159 1.1 cgd gethostname(host, sizeof(host));
160 1.16 mrg host[sizeof(host) - 1] = '\0';
161 1.1 cgd name = argv[0];
162 1.1 cgd
163 1.13 mrg errs = 0;
164 1.34 hubertf while ((i = getopt(argc, argv, "b:dln:srw:W")) != -1)
165 1.13 mrg switch (i) {
166 1.23 scw case 'b':
167 1.23 scw if (blist_addrs >= blist_size) {
168 1.48 itojun newblist = realloc(blist,
169 1.48 itojun blist_size + sizeof(char *) * 4);
170 1.48 itojun if (newblist == NULL)
171 1.48 itojun err(1, "cant allocate bind addr list");
172 1.48 itojun blist = newblist;
173 1.23 scw blist_size += sizeof(char *) * 4;
174 1.23 scw }
175 1.23 scw blist[blist_addrs++] = strdup(optarg);
176 1.23 scw break;
177 1.13 mrg case 'd':
178 1.13 mrg options |= SO_DEBUG;
179 1.13 mrg break;
180 1.13 mrg case 'l':
181 1.13 mrg lflag++;
182 1.14 mrg break;
183 1.18 mrg case 'n':
184 1.18 mrg child_max = atoi(optarg);
185 1.18 mrg if (child_max < 0 || child_max > 1024)
186 1.18 mrg errx(1, "invalid number of children: %s",
187 1.18 mrg optarg);
188 1.18 mrg break;
189 1.18 mrg case 'r':
190 1.18 mrg rflag++;
191 1.18 mrg break;
192 1.14 mrg case 's':
193 1.14 mrg sflag++;
194 1.13 mrg break;
195 1.18 mrg case 'w':
196 1.18 mrg wait_time = atoi(optarg);
197 1.18 mrg if (wait_time < 0)
198 1.18 mrg errx(1, "wait time must be postive: %s",
199 1.18 mrg optarg);
200 1.18 mrg if (wait_time < 30)
201 1.18 mrg warnx("warning: wait time less than 30 seconds");
202 1.18 mrg break;
203 1.30 mjl case 'W':/* allow connections coming from a non-reserved port */
204 1.30 mjl /* (done by some lpr-implementations for MS-Windows) */
205 1.30 mjl check_options |= LPD_NOPORTCHK;
206 1.30 mjl break;
207 1.13 mrg default:
208 1.13 mrg errs++;
209 1.13 mrg }
210 1.13 mrg argc -= optind;
211 1.13 mrg argv += optind;
212 1.22 mrg if (errs)
213 1.13 mrg usage();
214 1.1 cgd
215 1.22 mrg switch (argc) {
216 1.22 mrg case 1:
217 1.22 mrg if ((i = atoi(argv[0])) == 0)
218 1.22 mrg usage();
219 1.22 mrg if (i < 0 || i > USHRT_MAX)
220 1.22 mrg errx(1, "port # %d is invalid", i);
221 1.22 mrg
222 1.26 itojun port = argv[0];
223 1.22 mrg break;
224 1.22 mrg case 0:
225 1.26 itojun sp = getservbyname(port, "tcp");
226 1.22 mrg if (sp == NULL)
227 1.26 itojun errx(1, "%s/tcp: unknown service", port);
228 1.22 mrg break;
229 1.22 mrg default:
230 1.22 mrg usage();
231 1.22 mrg }
232 1.22 mrg
233 1.1 cgd #ifndef DEBUG
234 1.1 cgd /*
235 1.1 cgd * Set up standard environment by detaching from the parent.
236 1.1 cgd */
237 1.1 cgd daemon(0, 0);
238 1.1 cgd #endif
239 1.1 cgd
240 1.1 cgd openlog("lpd", LOG_PID, LOG_LPR);
241 1.4 cgd syslog(LOG_INFO, "restarted");
242 1.9 mrg (void)umask(0);
243 1.1 cgd lfd = open(_PATH_MASTERLOCK, O_WRONLY|O_CREAT, 0644);
244 1.1 cgd if (lfd < 0) {
245 1.1 cgd syslog(LOG_ERR, "%s: %m", _PATH_MASTERLOCK);
246 1.1 cgd exit(1);
247 1.1 cgd }
248 1.1 cgd if (flock(lfd, LOCK_EX|LOCK_NB) < 0) {
249 1.40 mycroft if (errno == EWOULDBLOCK) { /* active daemon present */
250 1.40 mycroft syslog(LOG_ERR, "%s is locked; another lpd is running",
251 1.40 mycroft _PATH_MASTERLOCK);
252 1.1 cgd exit(0);
253 1.40 mycroft }
254 1.1 cgd syslog(LOG_ERR, "%s: %m", _PATH_MASTERLOCK);
255 1.1 cgd exit(1);
256 1.1 cgd }
257 1.1 cgd ftruncate(lfd, 0);
258 1.1 cgd /*
259 1.1 cgd * write process id for others to know
260 1.1 cgd */
261 1.9 mrg (void)snprintf(line, sizeof(line), "%u\n", getpid());
262 1.1 cgd f = strlen(line);
263 1.1 cgd if (write(lfd, line, f) != f) {
264 1.1 cgd syslog(LOG_ERR, "%s: %m", _PATH_MASTERLOCK);
265 1.1 cgd exit(1);
266 1.1 cgd }
267 1.1 cgd signal(SIGCHLD, reapchild);
268 1.1 cgd /*
269 1.1 cgd * Restart all the printers.
270 1.1 cgd */
271 1.1 cgd startup();
272 1.22 mrg
273 1.22 mrg sigemptyset(&nmask);
274 1.22 mrg sigaddset(&nmask, SIGHUP);
275 1.22 mrg sigaddset(&nmask, SIGINT);
276 1.22 mrg sigaddset(&nmask, SIGQUIT);
277 1.22 mrg sigaddset(&nmask, SIGTERM);
278 1.22 mrg sigprocmask(SIG_BLOCK, &nmask, &omask);
279 1.22 mrg
280 1.1 cgd signal(SIGHUP, mcleanup);
281 1.1 cgd signal(SIGINT, mcleanup);
282 1.1 cgd signal(SIGQUIT, mcleanup);
283 1.1 cgd signal(SIGTERM, mcleanup);
284 1.39 mycroft
285 1.39 mycroft socks = socksetup(PF_UNSPEC, options, port, &nfds);
286 1.39 mycroft
287 1.22 mrg sigprocmask(SIG_SETMASK, &omask, (sigset_t *)0);
288 1.1 cgd
289 1.24 scw if (blist != NULL) {
290 1.24 scw for (i = 0; i < blist_addrs; i++)
291 1.24 scw free(blist[i]);
292 1.23 scw free(blist);
293 1.24 scw }
294 1.23 scw
295 1.1 cgd /*
296 1.1 cgd * Main loop: accept, do a request, continue.
297 1.1 cgd */
298 1.41 mycroft memset(&from, 0, sizeof(from));
299 1.1 cgd for (;;) {
300 1.41 mycroft int rv, s;
301 1.18 mrg /* "short" so it overflows in about 2 hours */
302 1.39 mycroft struct timespec sleeptime = {10, 0};
303 1.18 mrg
304 1.18 mrg while (child_max < child_count) {
305 1.18 mrg syslog(LOG_WARNING,
306 1.39 mycroft "too many children, sleeping for %ld seconds",
307 1.42 lukem (long)sleeptime.tv_sec);
308 1.39 mycroft nanosleep(&sleeptime, NULL);
309 1.39 mycroft sleeptime.tv_sec <<= 1;
310 1.39 mycroft if (sleeptime.tv_sec <= 0) {
311 1.18 mrg syslog(LOG_CRIT, "sleeptime overflowed! help!");
312 1.39 mycroft sleeptime.tv_sec = 10;
313 1.18 mrg }
314 1.18 mrg }
315 1.1 cgd
316 1.39 mycroft rv = poll(socks, nfds, INFTIM);
317 1.39 mycroft if (rv <= 0) {
318 1.39 mycroft if (rv < 0 && errno != EINTR)
319 1.39 mycroft syslog(LOG_WARNING, "poll: %m");
320 1.1 cgd continue;
321 1.1 cgd }
322 1.51 lukem s = -1;
323 1.39 mycroft for (i = 0; i < nfds; i++)
324 1.39 mycroft if (socks[i].revents & POLLIN) {
325 1.41 mycroft fromlen = sizeof(from);
326 1.41 mycroft s = accept(socks[i].fd,
327 1.41 mycroft (struct sockaddr *)&from, &fromlen);
328 1.39 mycroft break;
329 1.39 mycroft }
330 1.1 cgd if (s < 0) {
331 1.1 cgd if (errno != EINTR)
332 1.1 cgd syslog(LOG_WARNING, "accept: %m");
333 1.1 cgd continue;
334 1.1 cgd }
335 1.18 mrg
336 1.18 mrg switch (fork()) {
337 1.18 mrg case 0:
338 1.1 cgd signal(SIGCHLD, SIG_IGN);
339 1.1 cgd signal(SIGHUP, SIG_IGN);
340 1.1 cgd signal(SIGINT, SIG_IGN);
341 1.1 cgd signal(SIGQUIT, SIG_IGN);
342 1.1 cgd signal(SIGTERM, SIG_IGN);
343 1.39 mycroft for (i = 0; i < nfds; i++)
344 1.39 mycroft (void)close(socks[i].fd);
345 1.44 thorpej dup2(s, STDOUT_FILENO);
346 1.9 mrg (void)close(s);
347 1.41 mycroft if (from.ss_family != AF_LOCAL) {
348 1.20 itojun /* for both AF_INET and AF_INET6 */
349 1.1 cgd from_remote = 1;
350 1.41 mycroft chkhost((struct sockaddr *)&from, check_options);
351 1.1 cgd } else
352 1.1 cgd from_remote = 0;
353 1.1 cgd doit();
354 1.1 cgd exit(0);
355 1.18 mrg case -1:
356 1.18 mrg syslog(LOG_WARNING, "fork: %m, sleeping for 10 seconds...");
357 1.18 mrg sleep(10);
358 1.18 mrg continue;
359 1.18 mrg default:
360 1.18 mrg child_count++;
361 1.1 cgd }
362 1.9 mrg (void)close(s);
363 1.1 cgd }
364 1.1 cgd }
365 1.1 cgd
366 1.4 cgd static void
367 1.30 mjl reapchild(int signo)
368 1.1 cgd {
369 1.1 cgd union wait status;
370 1.1 cgd
371 1.1 cgd while (wait3((int *)&status, WNOHANG, 0) > 0)
372 1.18 mrg child_count--;
373 1.1 cgd }
374 1.1 cgd
375 1.4 cgd static void
376 1.30 mjl mcleanup(int signo)
377 1.1 cgd {
378 1.1 cgd if (lflag)
379 1.1 cgd syslog(LOG_INFO, "exiting");
380 1.1 cgd unlink(_PATH_SOCKETNAME);
381 1.1 cgd exit(0);
382 1.1 cgd }
383 1.1 cgd
384 1.1 cgd /*
385 1.1 cgd * Stuff for handling job specifications
386 1.1 cgd */
387 1.1 cgd char *user[MAXUSERS]; /* users to process */
388 1.1 cgd int users; /* # of users in user array */
389 1.1 cgd int requ[MAXREQUESTS]; /* job number of spool entries */
390 1.1 cgd int requests; /* # of spool requests */
391 1.1 cgd char *person; /* name of person doing lprm */
392 1.1 cgd
393 1.20 itojun char fromb[NI_MAXHOST]; /* buffer for client's machine name */
394 1.4 cgd char cbuf[BUFSIZ]; /* command line buffer */
395 1.1 cgd char *cmdnames[] = {
396 1.1 cgd "null",
397 1.1 cgd "printjob",
398 1.1 cgd "recvjob",
399 1.1 cgd "displayq short",
400 1.1 cgd "displayq long",
401 1.1 cgd "rmjob"
402 1.1 cgd };
403 1.1 cgd
404 1.4 cgd static void
405 1.30 mjl doit(void)
406 1.1 cgd {
407 1.13 mrg char *cp;
408 1.13 mrg int n;
409 1.1 cgd
410 1.1 cgd for (;;) {
411 1.1 cgd cp = cbuf;
412 1.1 cgd do {
413 1.1 cgd if (cp >= &cbuf[sizeof(cbuf) - 1])
414 1.1 cgd fatal("Command line too long");
415 1.31 mjl if ((n = read(STDOUT_FILENO, cp, 1)) != 1) {
416 1.1 cgd if (n < 0)
417 1.1 cgd fatal("Lost connection");
418 1.1 cgd return;
419 1.1 cgd }
420 1.1 cgd } while (*cp++ != '\n');
421 1.1 cgd *--cp = '\0';
422 1.1 cgd cp = cbuf;
423 1.1 cgd if (lflag) {
424 1.18 mrg if (*cp >= '\1' && *cp <= '\5') {
425 1.1 cgd syslog(LOG_INFO, "%s requests %s %s",
426 1.10 mikel from, cmdnames[(int)*cp], cp+1);
427 1.18 mrg setproctitle("serving %s: %s %s", from,
428 1.18 mrg cmdnames[(int)*cp], cp+1);
429 1.18 mrg }
430 1.1 cgd else
431 1.1 cgd syslog(LOG_INFO, "bad request (%d) from %s",
432 1.1 cgd *cp, from);
433 1.1 cgd }
434 1.1 cgd switch (*cp++) {
435 1.1 cgd case '\1': /* check the queue and print any jobs there */
436 1.1 cgd printer = cp;
437 1.29 mrg if (*printer == '\0')
438 1.29 mrg printer = DEFLP;
439 1.1 cgd printjob();
440 1.1 cgd break;
441 1.1 cgd case '\2': /* receive files to be queued */
442 1.1 cgd if (!from_remote) {
443 1.1 cgd syslog(LOG_INFO, "illegal request (%d)", *cp);
444 1.1 cgd exit(1);
445 1.1 cgd }
446 1.1 cgd printer = cp;
447 1.29 mrg if (*printer == '\0')
448 1.29 mrg printer = DEFLP;
449 1.1 cgd recvjob();
450 1.1 cgd break;
451 1.1 cgd case '\3': /* display the queue (short form) */
452 1.1 cgd case '\4': /* display the queue (long form) */
453 1.1 cgd printer = cp;
454 1.29 mrg if (*printer == '\0')
455 1.29 mrg printer = DEFLP;
456 1.1 cgd while (*cp) {
457 1.1 cgd if (*cp != ' ') {
458 1.1 cgd cp++;
459 1.1 cgd continue;
460 1.1 cgd }
461 1.1 cgd *cp++ = '\0';
462 1.50 dsl while (isspace((unsigned char)*cp))
463 1.1 cgd cp++;
464 1.1 cgd if (*cp == '\0')
465 1.1 cgd break;
466 1.50 dsl if (isdigit((unsigned char)*cp)) {
467 1.1 cgd if (requests >= MAXREQUESTS)
468 1.1 cgd fatal("Too many requests");
469 1.1 cgd requ[requests++] = atoi(cp);
470 1.1 cgd } else {
471 1.1 cgd if (users >= MAXUSERS)
472 1.1 cgd fatal("Too many users");
473 1.1 cgd user[users++] = cp;
474 1.1 cgd }
475 1.1 cgd }
476 1.1 cgd displayq(cbuf[0] - '\3');
477 1.1 cgd exit(0);
478 1.1 cgd case '\5': /* remove a job from the queue */
479 1.1 cgd if (!from_remote) {
480 1.1 cgd syslog(LOG_INFO, "illegal request (%d)", *cp);
481 1.1 cgd exit(1);
482 1.1 cgd }
483 1.1 cgd printer = cp;
484 1.29 mrg if (*printer == '\0')
485 1.29 mrg printer = DEFLP;
486 1.1 cgd while (*cp && *cp != ' ')
487 1.1 cgd cp++;
488 1.1 cgd if (!*cp)
489 1.1 cgd break;
490 1.1 cgd *cp++ = '\0';
491 1.1 cgd person = cp;
492 1.1 cgd while (*cp) {
493 1.1 cgd if (*cp != ' ') {
494 1.1 cgd cp++;
495 1.1 cgd continue;
496 1.1 cgd }
497 1.1 cgd *cp++ = '\0';
498 1.50 dsl while (isspace((unsigned char)*cp))
499 1.1 cgd cp++;
500 1.1 cgd if (*cp == '\0')
501 1.1 cgd break;
502 1.50 dsl if (isdigit((unsigned char)*cp)) {
503 1.1 cgd if (requests >= MAXREQUESTS)
504 1.1 cgd fatal("Too many requests");
505 1.1 cgd requ[requests++] = atoi(cp);
506 1.1 cgd } else {
507 1.1 cgd if (users >= MAXUSERS)
508 1.1 cgd fatal("Too many users");
509 1.1 cgd user[users++] = cp;
510 1.1 cgd }
511 1.1 cgd }
512 1.1 cgd rmjob();
513 1.1 cgd break;
514 1.1 cgd }
515 1.1 cgd fatal("Illegal service request");
516 1.1 cgd }
517 1.1 cgd }
518 1.1 cgd
519 1.1 cgd /*
520 1.1 cgd * Make a pass through the printcap database and start printing any
521 1.1 cgd * files left from the last time the machine went down.
522 1.1 cgd */
523 1.4 cgd static void
524 1.30 mjl startup(void)
525 1.1 cgd {
526 1.4 cgd char *buf;
527 1.13 mrg char *cp;
528 1.1 cgd
529 1.1 cgd /*
530 1.1 cgd * Restart the daemons.
531 1.1 cgd */
532 1.4 cgd while (cgetnext(&buf, printcapdb) > 0) {
533 1.12 mrg if (ckqueue(buf) <= 0) {
534 1.12 mrg free(buf);
535 1.12 mrg continue; /* no work to do for this printer */
536 1.12 mrg }
537 1.1 cgd for (cp = buf; *cp; cp++)
538 1.1 cgd if (*cp == '|' || *cp == ':') {
539 1.1 cgd *cp = '\0';
540 1.1 cgd break;
541 1.1 cgd }
542 1.12 mrg if (lflag)
543 1.12 mrg syslog(LOG_INFO, "work for %s", buf);
544 1.18 mrg switch (fork()) {
545 1.18 mrg case -1:
546 1.1 cgd syslog(LOG_WARNING, "startup: cannot fork");
547 1.4 cgd mcleanup(0);
548 1.18 mrg case 0:
549 1.4 cgd printer = buf;
550 1.18 mrg setproctitle("working on printer %s", printer);
551 1.4 cgd cgetclose();
552 1.1 cgd printjob();
553 1.12 mrg /* NOTREACHED */
554 1.18 mrg default:
555 1.18 mrg child_count++;
556 1.18 mrg free(buf);
557 1.1 cgd }
558 1.12 mrg }
559 1.12 mrg }
560 1.12 mrg
561 1.12 mrg /*
562 1.12 mrg * Make sure there's some work to do before forking off a child
563 1.12 mrg */
564 1.12 mrg static int
565 1.30 mjl ckqueue(char *cap)
566 1.12 mrg {
567 1.13 mrg struct dirent *d;
568 1.12 mrg DIR *dirp;
569 1.12 mrg char *spooldir;
570 1.12 mrg
571 1.12 mrg if (cgetstr(cap, "sd", &spooldir) == -1)
572 1.12 mrg spooldir = _PATH_DEFSPOOL;
573 1.47 itojun if ((dirp = opendir(spooldir)) == NULL) {
574 1.47 itojun if (spooldir != _PATH_DEFSPOOL)
575 1.47 itojun free(spooldir);
576 1.12 mrg return (-1);
577 1.47 itojun }
578 1.12 mrg while ((d = readdir(dirp)) != NULL) {
579 1.12 mrg if (d->d_name[0] != 'c' || d->d_name[1] != 'f')
580 1.12 mrg continue; /* daemon control files only */
581 1.12 mrg closedir(dirp);
582 1.47 itojun if (spooldir != _PATH_DEFSPOOL)
583 1.47 itojun free(spooldir);
584 1.12 mrg return (1); /* found something */
585 1.1 cgd }
586 1.12 mrg closedir(dirp);
587 1.47 itojun if (spooldir != _PATH_DEFSPOOL)
588 1.47 itojun free(spooldir);
589 1.12 mrg return (0);
590 1.1 cgd }
591 1.1 cgd
592 1.1 cgd #define DUMMY ":nobody::"
593 1.1 cgd
594 1.1 cgd /*
595 1.1 cgd * Check to see if the from host has access to the line printer.
596 1.1 cgd */
597 1.4 cgd static void
598 1.30 mjl chkhost(struct sockaddr *f, int check_opts)
599 1.1 cgd {
600 1.20 itojun struct addrinfo hints, *res, *r;
601 1.13 mrg FILE *hostf;
602 1.38 itojun int good = 0;
603 1.20 itojun char host[NI_MAXHOST], ip[NI_MAXHOST];
604 1.20 itojun char serv[NI_MAXSERV];
605 1.20 itojun int error;
606 1.38 itojun #ifdef LIBWRAP
607 1.38 itojun struct request_info req;
608 1.38 itojun #endif
609 1.20 itojun
610 1.20 itojun error = getnameinfo(f, f->sa_len, NULL, 0, serv, sizeof(serv),
611 1.20 itojun NI_NUMERICSERV);
612 1.30 mjl if (error)
613 1.37 grant fatal("Malformed from address: %s", gai_strerror(error));
614 1.4 cgd
615 1.30 mjl if (!(check_opts & LPD_NOPORTCHK) &&
616 1.30 mjl atoi(serv) >= IPPORT_RESERVED)
617 1.30 mjl fatal("Connect from invalid port (%s)", serv);
618 1.30 mjl
619 1.4 cgd /* Need real hostname for temporary filenames */
620 1.20 itojun error = getnameinfo(f, f->sa_len, host, sizeof(host), NULL, 0,
621 1.20 itojun NI_NAMEREQD);
622 1.20 itojun if (error) {
623 1.20 itojun error = getnameinfo(f, f->sa_len, host, sizeof(host), NULL, 0,
624 1.20 itojun NI_NUMERICHOST);
625 1.20 itojun if (error)
626 1.20 itojun fatal("Host name for your address unknown");
627 1.20 itojun else
628 1.20 itojun fatal("Host name for your address (%s) unknown", host);
629 1.20 itojun }
630 1.1 cgd
631 1.45 itojun (void)strlcpy(fromb, host, sizeof(fromb));
632 1.1 cgd from = fromb;
633 1.1 cgd
634 1.20 itojun /* need address in stringform for comparison (no DNS lookup here) */
635 1.20 itojun error = getnameinfo(f, f->sa_len, host, sizeof(host), NULL, 0,
636 1.20 itojun NI_NUMERICHOST);
637 1.20 itojun if (error)
638 1.20 itojun fatal("Cannot print address");
639 1.20 itojun
640 1.13 mrg /* Check for spoof, ala rlogind */
641 1.20 itojun memset(&hints, 0, sizeof(hints));
642 1.20 itojun hints.ai_family = PF_UNSPEC;
643 1.20 itojun hints.ai_socktype = SOCK_DGRAM; /*dummy*/
644 1.20 itojun error = getaddrinfo(fromb, NULL, &hints, &res);
645 1.20 itojun if (error) {
646 1.20 itojun fatal("hostname for your address (%s) unknown: %s", host,
647 1.20 itojun gai_strerror(error));
648 1.20 itojun }
649 1.20 itojun good = 0;
650 1.20 itojun for (r = res; good == 0 && r; r = r->ai_next) {
651 1.20 itojun error = getnameinfo(r->ai_addr, r->ai_addrlen, ip, sizeof(ip),
652 1.20 itojun NULL, 0, NI_NUMERICHOST);
653 1.20 itojun if (!error && !strcmp(host, ip))
654 1.13 mrg good = 1;
655 1.13 mrg }
656 1.20 itojun if (res)
657 1.20 itojun freeaddrinfo(res);
658 1.13 mrg if (good == 0)
659 1.20 itojun fatal("address for your hostname (%s) not matched", host);
660 1.38 itojun
661 1.18 mrg setproctitle("serving %s", from);
662 1.38 itojun
663 1.38 itojun #ifdef LIBWRAP
664 1.44 thorpej request_init(&req, RQ_DAEMON, "lpd", RQ_CLIENT_SIN, f,
665 1.44 thorpej RQ_FILE, STDOUT_FILENO, NULL);
666 1.38 itojun fromhost(&req);
667 1.38 itojun if (!hosts_access(&req))
668 1.38 itojun goto denied;
669 1.38 itojun #endif
670 1.38 itojun
671 1.1 cgd hostf = fopen(_PATH_HOSTSEQUIV, "r");
672 1.1 cgd if (hostf) {
673 1.21 itojun if (__ivaliduser_sa(hostf, f, f->sa_len, DUMMY, DUMMY) == 0) {
674 1.9 mrg (void)fclose(hostf);
675 1.1 cgd return;
676 1.1 cgd }
677 1.9 mrg (void)fclose(hostf);
678 1.1 cgd }
679 1.38 itojun hostf = fopen(_PATH_HOSTSLPD, "r");
680 1.38 itojun if (hostf) {
681 1.38 itojun if (__ivaliduser_sa(hostf, f, f->sa_len, DUMMY, DUMMY) == 0) {
682 1.38 itojun (void)fclose(hostf);
683 1.38 itojun return;
684 1.38 itojun }
685 1.38 itojun (void)fclose(hostf);
686 1.1 cgd }
687 1.38 itojun #ifdef LIBWRAP
688 1.38 itojun denied:
689 1.38 itojun #endif
690 1.1 cgd fatal("Your host does not have line printer access");
691 1.4 cgd /*NOTREACHED*/
692 1.13 mrg }
693 1.13 mrg
694 1.30 mjl
695 1.13 mrg static void
696 1.30 mjl usage(void)
697 1.13 mrg {
698 1.13 mrg
699 1.30 mjl fprintf(stderr, "usage: %s [-dlrsW] [-b bind-address] [-n maxchild] "
700 1.28 simonb "[-w maxwait] [port]\n", getprogname());
701 1.13 mrg exit(1);
702 1.20 itojun }
703 1.20 itojun
704 1.20 itojun /* setup server socket for specified address family */
705 1.20 itojun /* if af is PF_UNSPEC more than one socket may be returned */
706 1.20 itojun /* the returned list is dynamically allocated, so caller needs to free it */
707 1.39 mycroft struct pollfd *
708 1.39 mycroft socksetup(int af, int options, const char *port, int *nfds)
709 1.20 itojun {
710 1.39 mycroft struct sockaddr_un un;
711 1.20 itojun struct addrinfo hints, *res, *r;
712 1.39 mycroft int error, s, blidx = 0, n;
713 1.48 itojun struct pollfd *socks, *newsocks;
714 1.20 itojun const int on = 1;
715 1.20 itojun
716 1.39 mycroft *nfds = 0;
717 1.39 mycroft
718 1.48 itojun socks = malloc(1 * sizeof(socks[0]));
719 1.39 mycroft if (!socks) {
720 1.39 mycroft syslog(LOG_ERR, "couldn't allocate memory for sockets");
721 1.39 mycroft mcleanup(0);
722 1.39 mycroft }
723 1.39 mycroft
724 1.39 mycroft s = socket(AF_LOCAL, SOCK_STREAM, 0);
725 1.39 mycroft if (s < 0) {
726 1.39 mycroft syslog(LOG_ERR, "socket(): %m");
727 1.39 mycroft exit(1);
728 1.39 mycroft }
729 1.39 mycroft memset(&un, 0, sizeof(un));
730 1.39 mycroft un.sun_family = AF_LOCAL;
731 1.39 mycroft strncpy(un.sun_path, _PATH_SOCKETNAME, sizeof(un.sun_path) - 1);
732 1.39 mycroft un.sun_len = SUN_LEN(&un);
733 1.39 mycroft (void)umask(07);
734 1.39 mycroft (void)unlink(_PATH_SOCKETNAME);
735 1.39 mycroft if (bind(s, (struct sockaddr *)&un, un.sun_len) < 0) {
736 1.39 mycroft syslog(LOG_ERR, "bind(): %m");
737 1.39 mycroft exit(1);
738 1.39 mycroft }
739 1.39 mycroft (void)umask(0);
740 1.39 mycroft listen(s, 5);
741 1.39 mycroft socks[*nfds].fd = s;
742 1.39 mycroft socks[*nfds].events = POLLIN;
743 1.39 mycroft (*nfds)++;
744 1.39 mycroft
745 1.39 mycroft if (sflag && !blist_addrs)
746 1.39 mycroft return (socks);
747 1.39 mycroft
748 1.23 scw do {
749 1.23 scw memset(&hints, 0, sizeof(hints));
750 1.23 scw hints.ai_flags = AI_PASSIVE;
751 1.23 scw hints.ai_family = af;
752 1.23 scw hints.ai_socktype = SOCK_STREAM;
753 1.23 scw error = getaddrinfo((blist_addrs == 0) ? NULL : blist[blidx],
754 1.26 itojun port ? port : "printer", &hints, &res);
755 1.23 scw if (error) {
756 1.23 scw if (blist_addrs)
757 1.23 scw syslog(LOG_ERR, "%s: %s", blist[blidx],
758 1.25 itojun gai_strerror(error));
759 1.23 scw else
760 1.25 itojun syslog(LOG_ERR, "%s", gai_strerror(error));
761 1.23 scw mcleanup(0);
762 1.23 scw }
763 1.20 itojun
764 1.23 scw /* Count max number of sockets we may open */
765 1.39 mycroft for (r = res, n = 0; r; r = r->ai_next, n++)
766 1.23 scw ;
767 1.49 itojun newsocks = realloc(socks, (*nfds + n) * sizeof(socks[0]));
768 1.48 itojun if (!newsocks) {
769 1.23 scw syslog(LOG_ERR, "couldn't allocate memory for sockets");
770 1.23 scw mcleanup(0);
771 1.20 itojun }
772 1.48 itojun socks = newsocks;
773 1.23 scw
774 1.23 scw for (r = res; r; r = r->ai_next) {
775 1.39 mycroft s = socket(r->ai_family, r->ai_socktype,
776 1.39 mycroft r->ai_protocol);
777 1.39 mycroft if (s < 0) {
778 1.23 scw syslog(LOG_DEBUG, "socket(): %m");
779 1.23 scw continue;
780 1.23 scw }
781 1.23 scw if (options & SO_DEBUG)
782 1.39 mycroft if (setsockopt(s, SOL_SOCKET, SO_DEBUG,
783 1.23 scw &on, sizeof(on)) < 0) {
784 1.23 scw syslog(LOG_ERR,
785 1.23 scw "setsockopt (SO_DEBUG): %m");
786 1.39 mycroft close(s);
787 1.23 scw continue;
788 1.23 scw }
789 1.39 mycroft if (setsockopt(s, SOL_SOCKET, SO_REUSEPORT, &on,
790 1.38 itojun sizeof(on)) < 0) {
791 1.38 itojun syslog(LOG_ERR,
792 1.38 itojun "setsockopt (SO_REUSEPORT): %m");
793 1.43 itojun close(s);
794 1.43 itojun continue;
795 1.43 itojun }
796 1.43 itojun if (r->ai_family == AF_INET6 && setsockopt(s,
797 1.43 itojun IPPROTO_IPV6, IPV6_V6ONLY, &on, sizeof(on)) < 0) {
798 1.43 itojun syslog(LOG_ERR,
799 1.43 itojun "setsockopt (IPV6_V6ONLY): %m");
800 1.39 mycroft close(s);
801 1.38 itojun continue;
802 1.38 itojun }
803 1.39 mycroft if (bind(s, r->ai_addr, r->ai_addrlen) < 0) {
804 1.23 scw syslog(LOG_DEBUG, "bind(): %m");
805 1.39 mycroft close(s);
806 1.20 itojun continue;
807 1.20 itojun }
808 1.39 mycroft listen(s, 5);
809 1.39 mycroft socks[*nfds].fd = s;
810 1.39 mycroft socks[*nfds].events = POLLIN;
811 1.39 mycroft (*nfds)++;
812 1.20 itojun }
813 1.20 itojun
814 1.23 scw if (res)
815 1.23 scw freeaddrinfo(res);
816 1.23 scw } while (++blidx < blist_addrs);
817 1.20 itojun
818 1.39 mycroft return (socks);
819 1.1 cgd }
820