IPv6: Remove local ULA if there is an external one
[project/netifd.git] / system-linux.c
1 /*
2 * netifd - network interface daemon
3 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
5 * Copyright (C) 2013 Steven Barth <steven@midlink.org>
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2
9 * as published by the Free Software Foundation
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 */
16 #define _GNU_SOURCE
17
18 #include <sys/socket.h>
19 #include <sys/ioctl.h>
20 #include <sys/stat.h>
21 #include <sys/syscall.h>
22
23 #include <net/if.h>
24 #include <net/if_arp.h>
25
26 #include <arpa/inet.h>
27 #include <netinet/in.h>
28
29 #include <linux/rtnetlink.h>
30 #include <linux/sockios.h>
31 #include <linux/ip.h>
32 #include <linux/if_vlan.h>
33 #include <linux/if_bridge.h>
34 #include <linux/if_tunnel.h>
35 #include <linux/ethtool.h>
36 #include <linux/fib_rules.h>
37
38 #include <unistd.h>
39 #include <string.h>
40 #include <fcntl.h>
41 #include <glob.h>
42 #include <time.h>
43
44 #include <netlink/msg.h>
45 #include <netlink/attr.h>
46 #include <netlink/socket.h>
47 #include <libubox/uloop.h>
48
49 #include "netifd.h"
50 #include "device.h"
51 #include "system.h"
52
53 struct event_socket {
54 struct uloop_fd uloop;
55 struct nl_sock *sock;
56 struct nl_cb *cb;
57 };
58
59 static int sock_ioctl = -1;
60 static struct nl_sock *sock_rtnl = NULL;
61
62 static int cb_rtnl_event(struct nl_msg *msg, void *arg);
63 static void handle_hotplug_event(struct uloop_fd *u, unsigned int events);
64
65 static char dev_buf[256];
66
67 static void
68 handler_nl_event(struct uloop_fd *u, unsigned int events)
69 {
70 struct event_socket *ev = container_of(u, struct event_socket, uloop);
71 nl_recvmsgs(ev->sock, ev->cb);
72 }
73
74 static struct nl_sock *
75 create_socket(int protocol, int groups)
76 {
77 struct nl_sock *sock;
78
79 sock = nl_socket_alloc();
80 if (!sock)
81 return NULL;
82
83 if (groups)
84 nl_join_groups(sock, groups);
85
86 if (nl_connect(sock, protocol))
87 return NULL;
88
89 return sock;
90 }
91
92 static bool
93 create_raw_event_socket(struct event_socket *ev, int protocol, int groups,
94 uloop_fd_handler cb)
95 {
96 ev->sock = create_socket(protocol, groups);
97 if (!ev->sock)
98 return false;
99
100 ev->uloop.fd = nl_socket_get_fd(ev->sock);
101 ev->uloop.cb = cb;
102 uloop_fd_add(&ev->uloop, ULOOP_READ | ULOOP_EDGE_TRIGGER);
103 return true;
104 }
105
106 static bool
107 create_event_socket(struct event_socket *ev, int protocol,
108 int (*cb)(struct nl_msg *msg, void *arg))
109 {
110 // Prepare socket for link events
111 ev->cb = nl_cb_alloc(NL_CB_DEFAULT);
112 if (!ev->cb)
113 return false;
114
115 nl_cb_set(ev->cb, NL_CB_VALID, NL_CB_CUSTOM, cb, NULL);
116
117 return create_raw_event_socket(ev, protocol, 0, handler_nl_event);
118 }
119
120 int system_init(void)
121 {
122 static struct event_socket rtnl_event;
123 static struct event_socket hotplug_event;
124
125 sock_ioctl = socket(AF_LOCAL, SOCK_DGRAM, 0);
126 fcntl(sock_ioctl, F_SETFD, fcntl(sock_ioctl, F_GETFD) | FD_CLOEXEC);
127
128 // Prepare socket for routing / address control
129 sock_rtnl = create_socket(NETLINK_ROUTE, 0);
130 if (!sock_rtnl)
131 return -1;
132
133 if (!create_event_socket(&rtnl_event, NETLINK_ROUTE, cb_rtnl_event))
134 return -1;
135
136 if (!create_raw_event_socket(&hotplug_event, NETLINK_KOBJECT_UEVENT, 1,
137 handle_hotplug_event))
138 return -1;
139
140 // Receive network link events form kernel
141 nl_socket_add_membership(rtnl_event.sock, RTNLGRP_LINK);
142
143 return 0;
144 }
145
146 static void system_set_sysctl(const char *path, const char *val)
147 {
148 int fd;
149
150 fd = open(path, O_WRONLY);
151 if (fd < 0)
152 return;
153
154 write(fd, val, strlen(val));
155 close(fd);
156 }
157
158 static void system_set_dev_sysctl(const char *path, const char *device, const char *val)
159 {
160 snprintf(dev_buf, sizeof(dev_buf), path, device);
161 system_set_sysctl(dev_buf, val);
162 }
163
164 static void system_set_disable_ipv6(struct device *dev, const char *val)
165 {
166 system_set_dev_sysctl("/proc/sys/net/ipv6/conf/%s/disable_ipv6", dev->ifname, val);
167 }
168
169 // Evaluate netlink messages
170 static int cb_rtnl_event(struct nl_msg *msg, void *arg)
171 {
172 struct nlmsghdr *nh = nlmsg_hdr(msg);
173 struct ifinfomsg *ifi = NLMSG_DATA(nh);
174 struct nlattr *nla[__IFLA_MAX];
175
176 if (nh->nlmsg_type != RTM_DELLINK && nh->nlmsg_type != RTM_NEWLINK)
177 goto out;
178
179 nlmsg_parse(nh, sizeof(*ifi), nla, __IFLA_MAX - 1, NULL);
180 if (!nla[IFLA_IFNAME])
181 goto out;
182
183 struct device *dev = device_get(RTA_DATA(nla[IFLA_IFNAME]), false);
184 if (!dev)
185 goto out;
186
187 dev->ifindex = ifi->ifi_index;
188 /* TODO: parse link status */
189
190 out:
191 return 0;
192 }
193
194 static void
195 handle_hotplug_msg(char *data, int size)
196 {
197 const char *subsystem = NULL, *interface = NULL;
198 char *cur, *end, *sep;
199 struct device *dev;
200 int skip;
201 bool add;
202
203 if (!strncmp(data, "add@", 4))
204 add = true;
205 else if (!strncmp(data, "remove@", 7))
206 add = false;
207 else
208 return;
209
210 skip = strlen(data) + 1;
211 end = data + size;
212
213 for (cur = data + skip; cur < end; cur += skip) {
214 skip = strlen(cur) + 1;
215
216 sep = strchr(cur, '=');
217 if (!sep)
218 continue;
219
220 *sep = 0;
221 if (!strcmp(cur, "INTERFACE"))
222 interface = sep + 1;
223 else if (!strcmp(cur, "SUBSYSTEM")) {
224 subsystem = sep + 1;
225 if (strcmp(subsystem, "net") != 0)
226 return;
227 }
228 if (subsystem && interface)
229 goto found;
230 }
231 return;
232
233 found:
234 dev = device_get(interface, false);
235 if (!dev)
236 return;
237
238 if (dev->type != &simple_device_type)
239 return;
240
241 if (add && system_if_force_external(dev->ifname))
242 return;
243
244 device_set_present(dev, add);
245 }
246
247 static void
248 handle_hotplug_event(struct uloop_fd *u, unsigned int events)
249 {
250 struct event_socket *ev = container_of(u, struct event_socket, uloop);
251 struct sockaddr_nl nla;
252 unsigned char *buf = NULL;
253 int size;
254
255 while ((size = nl_recv(ev->sock, &nla, &buf, NULL)) > 0) {
256 if (nla.nl_pid == 0)
257 handle_hotplug_msg((char *) buf, size);
258
259 free(buf);
260 }
261 }
262
263 static int system_rtnl_call(struct nl_msg *msg)
264 {
265 int ret;
266
267 ret = nl_send_auto_complete(sock_rtnl, msg);
268 nlmsg_free(msg);
269
270 if (ret < 0)
271 return ret;
272
273 return nl_wait_for_ack(sock_rtnl);
274 }
275
276 int system_bridge_delbr(struct device *bridge)
277 {
278 return ioctl(sock_ioctl, SIOCBRDELBR, bridge->ifname);
279 }
280
281 static int system_bridge_if(const char *bridge, struct device *dev, int cmd, void *data)
282 {
283 struct ifreq ifr;
284
285 memset(&ifr, 0, sizeof(ifr));
286 if (dev)
287 ifr.ifr_ifindex = dev->ifindex;
288 else
289 ifr.ifr_data = data;
290 strncpy(ifr.ifr_name, bridge, sizeof(ifr.ifr_name));
291 return ioctl(sock_ioctl, cmd, &ifr);
292 }
293
294 static bool system_is_bridge(const char *name, char *buf, int buflen)
295 {
296 struct stat st;
297
298 snprintf(buf, buflen, "/sys/devices/virtual/net/%s/bridge", name);
299 if (stat(buf, &st) < 0)
300 return false;
301
302 return true;
303 }
304
305 static char *system_get_bridge(const char *name, char *buf, int buflen)
306 {
307 char *path;
308 ssize_t len;
309 glob_t gl;
310
311 snprintf(buf, buflen, "/sys/devices/virtual/net/*/brif/%s/bridge", name);
312 if (glob(buf, GLOB_NOSORT, NULL, &gl) < 0)
313 return NULL;
314
315 if (gl.gl_pathc == 0)
316 return NULL;
317
318 len = readlink(gl.gl_pathv[0], buf, buflen);
319 if (len < 0)
320 return NULL;
321
322 buf[len] = 0;
323 path = strrchr(buf, '/');
324 if (!path)
325 return NULL;
326
327 return path + 1;
328 }
329
330 int system_bridge_addif(struct device *bridge, struct device *dev)
331 {
332 char *oldbr;
333
334 system_set_disable_ipv6(dev, "1");
335 oldbr = system_get_bridge(dev->ifname, dev_buf, sizeof(dev_buf));
336 if (oldbr && !strcmp(oldbr, bridge->ifname))
337 return 0;
338
339 return system_bridge_if(bridge->ifname, dev, SIOCBRADDIF, NULL);
340 }
341
342 int system_bridge_delif(struct device *bridge, struct device *dev)
343 {
344 system_set_disable_ipv6(dev, "0");
345 return system_bridge_if(bridge->ifname, dev, SIOCBRDELIF, NULL);
346 }
347
348 static int system_if_resolve(struct device *dev)
349 {
350 struct ifreq ifr;
351 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name));
352 if (!ioctl(sock_ioctl, SIOCGIFINDEX, &ifr))
353 return ifr.ifr_ifindex;
354 else
355 return 0;
356 }
357
358 static int system_if_flags(const char *ifname, unsigned add, unsigned rem)
359 {
360 struct ifreq ifr;
361
362 memset(&ifr, 0, sizeof(ifr));
363 strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name));
364 ioctl(sock_ioctl, SIOCGIFFLAGS, &ifr);
365 ifr.ifr_flags |= add;
366 ifr.ifr_flags &= ~rem;
367 return ioctl(sock_ioctl, SIOCSIFFLAGS, &ifr);
368 }
369
370 struct clear_data {
371 struct nl_msg *msg;
372 struct device *dev;
373 int type;
374 int size;
375 int af;
376 };
377
378
379 static bool check_ifaddr(struct nlmsghdr *hdr, int ifindex)
380 {
381 struct ifaddrmsg *ifa = NLMSG_DATA(hdr);
382
383 return ifa->ifa_index == ifindex;
384 }
385
386 static bool check_route(struct nlmsghdr *hdr, int ifindex)
387 {
388 struct rtmsg *r = NLMSG_DATA(hdr);
389 struct nlattr *tb[__RTA_MAX];
390
391 if (r->rtm_protocol == RTPROT_KERNEL &&
392 r->rtm_family == AF_INET6)
393 return false;
394
395 nlmsg_parse(hdr, sizeof(struct rtmsg), tb, __RTA_MAX - 1, NULL);
396 if (!tb[RTA_OIF])
397 return false;
398
399 return *(int *)RTA_DATA(tb[RTA_OIF]) == ifindex;
400 }
401
402 static bool check_rule(struct nlmsghdr *hdr, int ifindex)
403 {
404 return true;
405 }
406
407 static int cb_clear_event(struct nl_msg *msg, void *arg)
408 {
409 struct clear_data *clr = arg;
410 struct nlmsghdr *hdr = nlmsg_hdr(msg);
411 bool (*cb)(struct nlmsghdr *, int ifindex);
412 int type;
413
414 switch(clr->type) {
415 case RTM_GETADDR:
416 type = RTM_DELADDR;
417 if (hdr->nlmsg_type != RTM_NEWADDR)
418 return NL_SKIP;
419
420 cb = check_ifaddr;
421 break;
422 case RTM_GETROUTE:
423 type = RTM_DELROUTE;
424 if (hdr->nlmsg_type != RTM_NEWROUTE)
425 return NL_SKIP;
426
427 cb = check_route;
428 break;
429 case RTM_GETRULE:
430 type = RTM_DELRULE;
431 if (hdr->nlmsg_type != RTM_NEWRULE)
432 return NL_SKIP;
433
434 cb = check_rule;
435 break;
436 default:
437 return NL_SKIP;
438 }
439
440 if (!cb(hdr, clr->dev ? clr->dev->ifindex : 0))
441 return NL_SKIP;
442
443 if (type == RTM_DELRULE)
444 D(SYSTEM, "Remove a rule\n");
445 else
446 D(SYSTEM, "Remove %s from device %s\n",
447 type == RTM_DELADDR ? "an address" : "a route",
448 clr->dev->ifname);
449 memcpy(nlmsg_hdr(clr->msg), hdr, hdr->nlmsg_len);
450 hdr = nlmsg_hdr(clr->msg);
451 hdr->nlmsg_type = type;
452 hdr->nlmsg_flags = NLM_F_REQUEST;
453
454 if (!nl_send_auto_complete(sock_rtnl, clr->msg))
455 nl_wait_for_ack(sock_rtnl);
456
457 return NL_SKIP;
458 }
459
460 static int
461 cb_finish_event(struct nl_msg *msg, void *arg)
462 {
463 int *pending = arg;
464 *pending = 0;
465 return NL_STOP;
466 }
467
468 static int
469 error_handler(struct sockaddr_nl *nla, struct nlmsgerr *err, void *arg)
470 {
471 int *pending = arg;
472 *pending = err->error;
473 return NL_STOP;
474 }
475
476 static void
477 system_if_clear_entries(struct device *dev, int type, int af)
478 {
479 struct clear_data clr;
480 struct nl_cb *cb = nl_cb_alloc(NL_CB_DEFAULT);
481 struct rtmsg rtm = {
482 .rtm_family = af,
483 .rtm_flags = RTM_F_CLONED,
484 };
485 int flags = NLM_F_DUMP;
486 int pending = 1;
487
488 clr.af = af;
489 clr.dev = dev;
490 clr.type = type;
491 switch (type) {
492 case RTM_GETADDR:
493 case RTM_GETRULE:
494 clr.size = sizeof(struct rtgenmsg);
495 break;
496 case RTM_GETROUTE:
497 clr.size = sizeof(struct rtmsg);
498 break;
499 default:
500 return;
501 }
502
503 if (!cb)
504 return;
505
506 clr.msg = nlmsg_alloc_simple(type, flags);
507 if (!clr.msg)
508 goto out;
509
510 nlmsg_append(clr.msg, &rtm, clr.size, 0);
511 nl_cb_set(cb, NL_CB_VALID, NL_CB_CUSTOM, cb_clear_event, &clr);
512 nl_cb_set(cb, NL_CB_FINISH, NL_CB_CUSTOM, cb_finish_event, &pending);
513 nl_cb_err(cb, NL_CB_CUSTOM, error_handler, &pending);
514
515 nl_send_auto_complete(sock_rtnl, clr.msg);
516 while (pending > 0)
517 nl_recvmsgs(sock_rtnl, cb);
518
519 nlmsg_free(clr.msg);
520 out:
521 nl_cb_put(cb);
522 }
523
524 /*
525 * Clear bridge (membership) state and bring down device
526 */
527 void system_if_clear_state(struct device *dev)
528 {
529 static char buf[256];
530 char *bridge;
531
532 if (dev->external)
533 return;
534
535 dev->ifindex = system_if_resolve(dev);
536 if (!dev->ifindex)
537 return;
538
539 system_if_flags(dev->ifname, 0, IFF_UP);
540
541 if (system_is_bridge(dev->ifname, buf, sizeof(buf))) {
542 D(SYSTEM, "Delete existing bridge named '%s'\n", dev->ifname);
543 system_bridge_delbr(dev);
544 return;
545 }
546
547 bridge = system_get_bridge(dev->ifname, buf, sizeof(buf));
548 if (bridge) {
549 D(SYSTEM, "Remove device '%s' from bridge '%s'\n", dev->ifname, bridge);
550 system_bridge_if(bridge, dev, SIOCBRDELIF, NULL);
551 }
552
553 system_if_clear_entries(dev, RTM_GETROUTE, AF_INET);
554 system_if_clear_entries(dev, RTM_GETADDR, AF_INET);
555 system_if_clear_entries(dev, RTM_GETROUTE, AF_INET6);
556 system_if_clear_entries(dev, RTM_GETADDR, AF_INET6);
557 system_set_disable_ipv6(dev, "0");
558 }
559
560 static inline unsigned long
561 sec_to_jiffies(int val)
562 {
563 return (unsigned long) val * 100;
564 }
565
566 int system_bridge_addbr(struct device *bridge, struct bridge_config *cfg)
567 {
568 unsigned long args[4] = {};
569
570 if (ioctl(sock_ioctl, SIOCBRADDBR, bridge->ifname) < 0)
571 return -1;
572
573 args[0] = BRCTL_SET_BRIDGE_STP_STATE;
574 args[1] = !!cfg->stp;
575 system_bridge_if(bridge->ifname, NULL, SIOCDEVPRIVATE, &args);
576
577 args[0] = BRCTL_SET_BRIDGE_FORWARD_DELAY;
578 args[1] = sec_to_jiffies(cfg->forward_delay);
579 system_bridge_if(bridge->ifname, NULL, SIOCDEVPRIVATE, &args);
580
581 system_set_dev_sysctl("/sys/devices/virtual/net/%s/bridge/multicast_snooping",
582 bridge->ifname, cfg->igmp_snoop ? "1" : "0");
583
584 if (cfg->flags & BRIDGE_OPT_AGEING_TIME) {
585 args[0] = BRCTL_SET_AGEING_TIME;
586 args[1] = sec_to_jiffies(cfg->ageing_time);
587 system_bridge_if(bridge->ifname, NULL, SIOCDEVPRIVATE, &args);
588 }
589
590 if (cfg->flags & BRIDGE_OPT_HELLO_TIME) {
591 args[0] = BRCTL_SET_BRIDGE_HELLO_TIME;
592 args[1] = sec_to_jiffies(cfg->hello_time);
593 system_bridge_if(bridge->ifname, NULL, SIOCDEVPRIVATE, &args);
594 }
595
596 if (cfg->flags & BRIDGE_OPT_MAX_AGE) {
597 args[0] = BRCTL_SET_BRIDGE_MAX_AGE;
598 args[1] = sec_to_jiffies(cfg->max_age);
599 system_bridge_if(bridge->ifname, NULL, SIOCDEVPRIVATE, &args);
600 }
601
602 return 0;
603 }
604
605 static int system_vlan(struct device *dev, int id)
606 {
607 struct vlan_ioctl_args ifr = {
608 .cmd = SET_VLAN_NAME_TYPE_CMD,
609 .u.name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD,
610 };
611
612 ioctl(sock_ioctl, SIOCSIFVLAN, &ifr);
613
614 if (id < 0) {
615 ifr.cmd = DEL_VLAN_CMD;
616 ifr.u.VID = 0;
617 } else {
618 ifr.cmd = ADD_VLAN_CMD;
619 ifr.u.VID = id;
620 }
621 strncpy(ifr.device1, dev->ifname, sizeof(ifr.device1));
622 return ioctl(sock_ioctl, SIOCSIFVLAN, &ifr);
623 }
624
625 int system_vlan_add(struct device *dev, int id)
626 {
627 return system_vlan(dev, id);
628 }
629
630 int system_vlan_del(struct device *dev)
631 {
632 return system_vlan(dev, -1);
633 }
634
635 static void
636 system_if_get_settings(struct device *dev, struct device_settings *s)
637 {
638 struct ifreq ifr;
639
640 memset(&ifr, 0, sizeof(ifr));
641 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name));
642
643 if (ioctl(sock_ioctl, SIOCGIFMTU, &ifr) == 0) {
644 s->mtu = ifr.ifr_mtu;
645 s->flags |= DEV_OPT_MTU;
646 }
647
648 if (ioctl(sock_ioctl, SIOCGIFTXQLEN, &ifr) == 0) {
649 s->txqueuelen = ifr.ifr_qlen;
650 s->flags |= DEV_OPT_TXQUEUELEN;
651 }
652
653 if (ioctl(sock_ioctl, SIOCGIFHWADDR, &ifr) == 0) {
654 memcpy(s->macaddr, &ifr.ifr_hwaddr.sa_data, sizeof(s->macaddr));
655 s->flags |= DEV_OPT_MACADDR;
656 }
657 }
658
659 void
660 system_if_apply_settings(struct device *dev, struct device_settings *s)
661 {
662 struct ifreq ifr;
663
664 memset(&ifr, 0, sizeof(ifr));
665 strncpy(ifr.ifr_name, dev->ifname, sizeof(ifr.ifr_name));
666 if (s->flags & DEV_OPT_MTU) {
667 ifr.ifr_mtu = s->mtu;
668 if (ioctl(sock_ioctl, SIOCSIFMTU, &ifr) < 0)
669 s->flags &= ~DEV_OPT_MTU;
670 }
671 if (s->flags & DEV_OPT_TXQUEUELEN) {
672 ifr.ifr_qlen = s->txqueuelen;
673 if (ioctl(sock_ioctl, SIOCSIFTXQLEN, &ifr) < 0)
674 s->flags &= ~DEV_OPT_TXQUEUELEN;
675 }
676 if ((s->flags & DEV_OPT_MACADDR) && !dev->external) {
677 ifr.ifr_hwaddr.sa_family = ARPHRD_ETHER;
678 memcpy(&ifr.ifr_hwaddr.sa_data, s->macaddr, sizeof(s->macaddr));
679 if (ioctl(sock_ioctl, SIOCSIFHWADDR, &ifr) < 0)
680 s->flags &= ~DEV_OPT_MACADDR;
681 }
682 }
683
684 int system_if_up(struct device *dev)
685 {
686 system_if_get_settings(dev, &dev->orig_settings);
687 system_if_apply_settings(dev, &dev->settings);
688 dev->ifindex = system_if_resolve(dev);
689 return system_if_flags(dev->ifname, IFF_UP, 0);
690 }
691
692 int system_if_down(struct device *dev)
693 {
694 int ret = system_if_flags(dev->ifname, 0, IFF_UP);
695 dev->orig_settings.flags &= dev->settings.flags;
696 system_if_apply_settings(dev, &dev->orig_settings);
697 return ret;
698 }
699
700 int system_if_check(struct device *dev)
701 {
702 device_set_present(dev, (system_if_resolve(dev) > 0));
703 return 0;
704 }
705
706 struct device *
707 system_if_get_parent(struct device *dev)
708 {
709 char buf[64], *devname;
710 int ifindex, iflink, len;
711 FILE *f;
712
713 snprintf(buf, sizeof(buf), "/sys/class/net/%s/iflink", dev->ifname);
714 f = fopen(buf, "r");
715 if (!f)
716 return NULL;
717
718 len = fread(buf, 1, sizeof(buf) - 1, f);
719 fclose(f);
720
721 if (len <= 0)
722 return NULL;
723
724 buf[len] = 0;
725 iflink = strtoul(buf, NULL, 0);
726 ifindex = system_if_resolve(dev);
727 if (!iflink || iflink == ifindex)
728 return NULL;
729
730 devname = if_indextoname(iflink, buf);
731 if (!devname)
732 return NULL;
733
734 return device_get(devname, true);
735 }
736
737 static bool
738 read_string_file(int dir_fd, const char *file, char *buf, int len)
739 {
740 bool ret = false;
741 char *c;
742 int fd;
743
744 fd = openat(dir_fd, file, O_RDONLY);
745 if (fd < 0)
746 return false;
747
748 retry:
749 len = read(fd, buf, len - 1);
750 if (len < 0) {
751 if (errno == EINTR)
752 goto retry;
753 } else if (len > 0) {
754 buf[len] = 0;
755
756 c = strchr(buf, '\n');
757 if (c)
758 *c = 0;
759
760 ret = true;
761 }
762
763 close(fd);
764
765 return ret;
766 }
767
768 static bool
769 read_uint64_file(int dir_fd, const char *file, uint64_t *val)
770 {
771 char buf[64];
772 bool ret = false;
773
774 ret = read_string_file(dir_fd, file, buf, sizeof(buf));
775 if (ret)
776 *val = strtoull(buf, NULL, 0);
777
778 return ret;
779 }
780
781 /* Assume advertised flags == supported flags */
782 static const struct {
783 uint32_t mask;
784 const char *name;
785 } ethtool_link_modes[] = {
786 { ADVERTISED_10baseT_Half, "10H" },
787 { ADVERTISED_10baseT_Full, "10F" },
788 { ADVERTISED_100baseT_Half, "100H" },
789 { ADVERTISED_100baseT_Full, "100F" },
790 { ADVERTISED_1000baseT_Half, "1000H" },
791 { ADVERTISED_1000baseT_Full, "1000F" },
792 };
793
794 static void system_add_link_modes(struct blob_buf *b, __u32 mask)
795 {
796 int i;
797 for (i = 0; i < ARRAY_SIZE(ethtool_link_modes); i++) {
798 if (mask & ethtool_link_modes[i].mask)
799 blobmsg_add_string(b, NULL, ethtool_link_modes[i].name);
800 }
801 }
802
803 bool
804 system_if_force_external(const char *ifname)
805 {
806 char buf[64];
807 struct stat s;
808
809 snprintf(buf, sizeof(buf), "/sys/class/net/%s/phy80211", ifname);
810 return stat(buf, &s) == 0;
811 }
812
813 int
814 system_if_dump_info(struct device *dev, struct blob_buf *b)
815 {
816 struct ethtool_cmd ecmd;
817 struct ifreq ifr;
818 char buf[64], *s;
819 void *c;
820 int dir_fd;
821 uint64_t val = 0;
822
823 snprintf(buf, sizeof(buf), "/sys/class/net/%s", dev->ifname);
824 dir_fd = open(buf, O_DIRECTORY);
825
826 if (read_uint64_file(dir_fd, "carrier", &val))
827 blobmsg_add_u8(b, "link", !!val);
828
829 memset(&ecmd, 0, sizeof(ecmd));
830 memset(&ifr, 0, sizeof(ifr));
831 strcpy(ifr.ifr_name, dev->ifname);
832 ifr.ifr_data = (caddr_t) &ecmd;
833 ecmd.cmd = ETHTOOL_GSET;
834
835 if (ioctl(sock_ioctl, SIOCETHTOOL, &ifr) == 0) {
836 c = blobmsg_open_array(b, "link-advertising");
837 system_add_link_modes(b, ecmd.advertising);
838 blobmsg_close_array(b, c);
839
840 c = blobmsg_open_array(b, "link-supported");
841 system_add_link_modes(b, ecmd.supported);
842 blobmsg_close_array(b, c);
843
844 s = blobmsg_alloc_string_buffer(b, "speed", 8);
845 snprintf(s, 8, "%d%c", ethtool_cmd_speed(&ecmd),
846 ecmd.duplex == DUPLEX_HALF ? 'H' : 'F');
847 blobmsg_add_string_buffer(b);
848 }
849
850 close(dir_fd);
851 return 0;
852 }
853
854 int
855 system_if_dump_stats(struct device *dev, struct blob_buf *b)
856 {
857 const char *const counters[] = {
858 "collisions", "rx_frame_errors", "tx_compressed",
859 "multicast", "rx_length_errors", "tx_dropped",
860 "rx_bytes", "rx_missed_errors", "tx_errors",
861 "rx_compressed", "rx_over_errors", "tx_fifo_errors",
862 "rx_crc_errors", "rx_packets", "tx_heartbeat_errors",
863 "rx_dropped", "tx_aborted_errors", "tx_packets",
864 "rx_errors", "tx_bytes", "tx_window_errors",
865 "rx_fifo_errors", "tx_carrier_errors",
866 };
867 char buf[64];
868 int stats_dir;
869 int i;
870 uint64_t val = 0;
871
872 snprintf(buf, sizeof(buf), "/sys/class/net/%s/statistics", dev->ifname);
873 stats_dir = open(buf, O_DIRECTORY);
874 if (stats_dir < 0)
875 return -1;
876
877 for (i = 0; i < ARRAY_SIZE(counters); i++)
878 if (read_uint64_file(stats_dir, counters[i], &val))
879 blobmsg_add_u64(b, counters[i], val);
880
881 close(stats_dir);
882 return 0;
883 }
884
885 static int system_addr(struct device *dev, struct device_addr *addr, int cmd)
886 {
887 bool v4 = ((addr->flags & DEVADDR_FAMILY) == DEVADDR_INET4);
888 int alen = v4 ? 4 : 16;
889 unsigned int flags = 0;
890 struct ifaddrmsg ifa = {
891 .ifa_family = (alen == 4) ? AF_INET : AF_INET6,
892 .ifa_prefixlen = addr->mask,
893 .ifa_index = dev->ifindex,
894 };
895
896 struct nl_msg *msg;
897 if (cmd == RTM_NEWADDR)
898 flags |= NLM_F_CREATE | NLM_F_REPLACE;
899
900 msg = nlmsg_alloc_simple(cmd, flags);
901 if (!msg)
902 return -1;
903
904 nlmsg_append(msg, &ifa, sizeof(ifa), 0);
905 nla_put(msg, IFA_LOCAL, alen, &addr->addr);
906 if (v4) {
907 if (addr->broadcast)
908 nla_put_u32(msg, IFA_BROADCAST, addr->broadcast);
909 if (addr->point_to_point)
910 nla_put_u32(msg, IFA_ADDRESS, addr->point_to_point);
911 } else {
912 time_t now = system_get_rtime();
913 struct ifa_cacheinfo cinfo = {0xffffffffU, 0xffffffffU, 0, 0};
914
915 if (addr->preferred_until) {
916 int preferred = addr->preferred_until - now;
917 if (preferred < 0)
918 preferred = 0;
919
920 cinfo.ifa_prefered = preferred;
921 }
922
923 if (addr->valid_until) {
924 int valid = addr->valid_until - now;
925 if (valid <= 0)
926 return -1;
927
928 cinfo.ifa_valid = valid;
929 }
930
931 nla_put(msg, IFA_CACHEINFO, sizeof(cinfo), &cinfo);
932 }
933
934 return system_rtnl_call(msg);
935 }
936
937 int system_add_address(struct device *dev, struct device_addr *addr)
938 {
939 return system_addr(dev, addr, RTM_NEWADDR);
940 }
941
942 int system_del_address(struct device *dev, struct device_addr *addr)
943 {
944 return system_addr(dev, addr, RTM_DELADDR);
945 }
946
947 static int system_rt(struct device *dev, struct device_route *route, int cmd)
948 {
949 int alen = ((route->flags & DEVADDR_FAMILY) == DEVADDR_INET4) ? 4 : 16;
950 bool have_gw;
951 unsigned int flags = 0;
952
953 if (alen == 4)
954 have_gw = !!route->nexthop.in.s_addr;
955 else
956 have_gw = route->nexthop.in6.s6_addr32[0] ||
957 route->nexthop.in6.s6_addr32[1] ||
958 route->nexthop.in6.s6_addr32[2] ||
959 route->nexthop.in6.s6_addr32[3];
960
961 unsigned char scope = (cmd == RTM_DELROUTE) ? RT_SCOPE_NOWHERE :
962 (have_gw) ? RT_SCOPE_UNIVERSE : RT_SCOPE_LINK;
963
964 unsigned int table = (route->flags & DEVROUTE_TABLE) ? route->table : RT_TABLE_MAIN;
965
966 struct rtmsg rtm = {
967 .rtm_family = (alen == 4) ? AF_INET : AF_INET6,
968 .rtm_dst_len = route->mask,
969 .rtm_table = (table < 256) ? table : RT_TABLE_UNSPEC,
970 .rtm_protocol = (route->flags & DEVADDR_KERNEL) ? RTPROT_KERNEL : RTPROT_STATIC,
971 .rtm_scope = scope,
972 .rtm_type = (cmd == RTM_DELROUTE) ? 0: RTN_UNICAST,
973 };
974 struct nl_msg *msg;
975
976 if (cmd == RTM_NEWROUTE) {
977 flags |= NLM_F_CREATE | NLM_F_REPLACE;
978
979 if (!dev) { // Add null-route
980 rtm.rtm_scope = RT_SCOPE_UNIVERSE;
981 rtm.rtm_type = RTN_UNREACHABLE;
982 }
983 }
984
985 msg = nlmsg_alloc_simple(cmd, flags);
986 if (!msg)
987 return -1;
988
989 nlmsg_append(msg, &rtm, sizeof(rtm), 0);
990
991 if (route->mask)
992 nla_put(msg, RTA_DST, alen, &route->addr);
993
994 if (route->metric > 0)
995 nla_put_u32(msg, RTA_PRIORITY, route->metric);
996
997 if (have_gw)
998 nla_put(msg, RTA_GATEWAY, alen, &route->nexthop);
999
1000 if (dev)
1001 nla_put_u32(msg, RTA_OIF, dev->ifindex);
1002
1003 if (table >= 256)
1004 nla_put_u32(msg, RTA_TABLE, table);
1005
1006 return system_rtnl_call(msg);
1007 }
1008
1009 int system_add_route(struct device *dev, struct device_route *route)
1010 {
1011 return system_rt(dev, route, RTM_NEWROUTE);
1012 }
1013
1014 int system_del_route(struct device *dev, struct device_route *route)
1015 {
1016 return system_rt(dev, route, RTM_DELROUTE);
1017 }
1018
1019 int system_flush_routes(void)
1020 {
1021 const char *names[] = {
1022 "/proc/sys/net/ipv4/route/flush",
1023 "/proc/sys/net/ipv6/route/flush"
1024 };
1025 int fd, i;
1026
1027 for (i = 0; i < ARRAY_SIZE(names); i++) {
1028 fd = open(names[i], O_WRONLY);
1029 if (fd < 0)
1030 continue;
1031
1032 write(fd, "-1", 2);
1033 close(fd);
1034 }
1035 return 0;
1036 }
1037
1038 bool system_resolve_rt_table(const char *name, unsigned int *id)
1039 {
1040 FILE *f;
1041 char *e, buf[128];
1042 unsigned int n, table = RT_TABLE_UNSPEC;
1043
1044 /* first try to parse table as number */
1045 if ((n = strtoul(name, &e, 0)) > 0 && !*e)
1046 table = n;
1047
1048 /* handle well known aliases */
1049 else if (!strcmp(name, "default"))
1050 table = RT_TABLE_DEFAULT;
1051 else if (!strcmp(name, "main"))
1052 table = RT_TABLE_MAIN;
1053 else if (!strcmp(name, "local"))
1054 table = RT_TABLE_LOCAL;
1055
1056 /* try to look up name in /etc/iproute2/rt_tables */
1057 else if ((f = fopen("/etc/iproute2/rt_tables", "r")) != NULL)
1058 {
1059 while (fgets(buf, sizeof(buf) - 1, f) != NULL)
1060 {
1061 if ((e = strtok(buf, " \t\n")) == NULL || *e == '#')
1062 continue;
1063
1064 n = strtoul(e, NULL, 10);
1065 e = strtok(NULL, " \t\n");
1066
1067 if (e && !strcmp(e, name))
1068 {
1069 table = n;
1070 break;
1071 }
1072 }
1073
1074 fclose(f);
1075 }
1076
1077 if (table == RT_TABLE_UNSPEC)
1078 return false;
1079
1080 /* do not consider main table special */
1081 if (table == RT_TABLE_MAIN)
1082 table = RT_TABLE_UNSPEC;
1083
1084 *id = table;
1085 return true;
1086 }
1087
1088 static int system_iprule(struct iprule *rule, int cmd)
1089 {
1090 int alen = ((rule->flags & IPRULE_FAMILY) == IPRULE_INET4) ? 4 : 16;
1091
1092 struct nl_msg *msg;
1093 struct rtmsg rtm = {
1094 .rtm_family = (alen == 4) ? AF_INET : AF_INET6,
1095 .rtm_protocol = RTPROT_STATIC,
1096 .rtm_scope = RT_SCOPE_UNIVERSE,
1097 .rtm_table = RT_TABLE_UNSPEC,
1098 .rtm_type = RTN_UNSPEC,
1099 .rtm_flags = 0,
1100 };
1101
1102 if (cmd == RTM_NEWRULE) {
1103 rtm.rtm_type = RTN_UNICAST;
1104 rtm.rtm_flags |= NLM_F_REPLACE | NLM_F_EXCL;
1105 }
1106
1107 if (rule->invert)
1108 rtm.rtm_flags |= FIB_RULE_INVERT;
1109
1110 if (rule->flags & IPRULE_SRC)
1111 rtm.rtm_src_len = rule->src_mask;
1112
1113 if (rule->flags & IPRULE_DEST)
1114 rtm.rtm_dst_len = rule->dest_mask;
1115
1116 if (rule->flags & IPRULE_TOS)
1117 rtm.rtm_tos = rule->tos;
1118
1119 if (rule->flags & IPRULE_LOOKUP) {
1120 if (rule->lookup < 256)
1121 rtm.rtm_table = rule->lookup;
1122 }
1123
1124 if (rule->flags & IPRULE_ACTION)
1125 rtm.rtm_type = rule->action;
1126 else if (rule->flags & IPRULE_GOTO)
1127 rtm.rtm_type = FR_ACT_GOTO;
1128 else if (!(rule->flags & (IPRULE_LOOKUP | IPRULE_ACTION | IPRULE_GOTO)))
1129 rtm.rtm_type = FR_ACT_NOP;
1130
1131 msg = nlmsg_alloc_simple(cmd, NLM_F_REQUEST);
1132
1133 if (!msg)
1134 return -1;
1135
1136 nlmsg_append(msg, &rtm, sizeof(rtm), 0);
1137
1138 if (rule->flags & IPRULE_IN)
1139 nla_put(msg, FRA_IFNAME, strlen(rule->in_dev) + 1, rule->in_dev);
1140
1141 if (rule->flags & IPRULE_OUT)
1142 nla_put(msg, FRA_OIFNAME, strlen(rule->out_dev) + 1, rule->out_dev);
1143
1144 if (rule->flags & IPRULE_SRC)
1145 nla_put(msg, FRA_SRC, alen, &rule->src_addr);
1146
1147 if (rule->flags & IPRULE_DEST)
1148 nla_put(msg, FRA_DST, alen, &rule->dest_addr);
1149
1150 if (rule->flags & IPRULE_PRIORITY)
1151 nla_put_u32(msg, FRA_PRIORITY, rule->priority);
1152 else if (cmd == RTM_NEWRULE)
1153 nla_put_u32(msg, FRA_PRIORITY, rule->order);
1154
1155 if (rule->flags & IPRULE_FWMARK)
1156 nla_put_u32(msg, FRA_FWMARK, rule->fwmark);
1157
1158 if (rule->flags & IPRULE_FWMASK)
1159 nla_put_u32(msg, FRA_FWMASK, rule->fwmask);
1160
1161 if (rule->flags & IPRULE_LOOKUP) {
1162 if (rule->lookup >= 256)
1163 nla_put_u32(msg, FRA_TABLE, rule->lookup);
1164 }
1165
1166 if (rule->flags & IPRULE_GOTO)
1167 nla_put_u32(msg, FRA_GOTO, rule->gotoid);
1168
1169 return system_rtnl_call(msg);
1170 }
1171
1172 int system_add_iprule(struct iprule *rule)
1173 {
1174 return system_iprule(rule, RTM_NEWRULE);
1175 }
1176
1177 int system_del_iprule(struct iprule *rule)
1178 {
1179 return system_iprule(rule, RTM_DELRULE);
1180 }
1181
1182 int system_flush_iprules(void)
1183 {
1184 int rv = 0;
1185 struct iprule rule;
1186
1187 system_if_clear_entries(NULL, RTM_GETRULE, AF_INET);
1188 system_if_clear_entries(NULL, RTM_GETRULE, AF_INET6);
1189
1190 memset(&rule, 0, sizeof(rule));
1191
1192
1193 rule.flags = IPRULE_INET4 | IPRULE_PRIORITY | IPRULE_LOOKUP;
1194
1195 rule.priority = 0;
1196 rule.lookup = RT_TABLE_LOCAL;
1197 rv |= system_iprule(&rule, RTM_NEWRULE);
1198
1199 rule.priority = 32766;
1200 rule.lookup = RT_TABLE_MAIN;
1201 rv |= system_iprule(&rule, RTM_NEWRULE);
1202
1203 rule.priority = 32767;
1204 rule.lookup = RT_TABLE_DEFAULT;
1205 rv |= system_iprule(&rule, RTM_NEWRULE);
1206
1207
1208 rule.flags = IPRULE_INET6 | IPRULE_PRIORITY | IPRULE_LOOKUP;
1209
1210 rule.priority = 0;
1211 rule.lookup = RT_TABLE_LOCAL;
1212 rv |= system_iprule(&rule, RTM_NEWRULE);
1213
1214 rule.priority = 32766;
1215 rule.lookup = RT_TABLE_MAIN;
1216 rv |= system_iprule(&rule, RTM_NEWRULE);
1217
1218 return rv;
1219 }
1220
1221 bool system_resolve_iprule_action(const char *action, unsigned int *id)
1222 {
1223 char *e;
1224 unsigned int n;
1225
1226 if (!strcmp(action, "local"))
1227 n = RTN_LOCAL;
1228 else if (!strcmp(action, "nat"))
1229 n = RTN_NAT;
1230 else if (!strcmp(action, "broadcast"))
1231 n = RTN_BROADCAST;
1232 else if (!strcmp(action, "anycast"))
1233 n = RTN_ANYCAST;
1234 else if (!strcmp(action, "multicast"))
1235 n = RTN_MULTICAST;
1236 else if (!strcmp(action, "prohibit"))
1237 n = RTN_PROHIBIT;
1238 else if (!strcmp(action, "unreachable"))
1239 n = RTN_UNREACHABLE;
1240 else if (!strcmp(action, "blackhole"))
1241 n = RTN_BLACKHOLE;
1242 else if (!strcmp(action, "xresolve"))
1243 n = RTN_XRESOLVE;
1244 else if (!strcmp(action, "unicast"))
1245 n = RTN_UNICAST;
1246 else if (!strcmp(action, "throw"))
1247 n = RTN_THROW;
1248 else {
1249 n = strtoul(action, &e, 0);
1250 if (!e || *e || e == action || n > 255)
1251 return false;
1252 }
1253
1254 *id = n;
1255 return true;
1256 }
1257
1258 time_t system_get_rtime(void)
1259 {
1260 struct timespec ts;
1261 struct timeval tv;
1262
1263 if (syscall(__NR_clock_gettime, CLOCK_MONOTONIC, &ts) == 0)
1264 return ts.tv_sec;
1265
1266 if (gettimeofday(&tv, NULL) == 0)
1267 return tv.tv_sec;
1268
1269 return 0;
1270 }
1271
1272 #ifndef IP_DF
1273 #define IP_DF 0x4000
1274 #endif
1275
1276 static void tunnel_parm_init(struct ip_tunnel_parm *p)
1277 {
1278 memset(p, 0, sizeof(*p));
1279 p->iph.version = 4;
1280 p->iph.ihl = 5;
1281 p->iph.frag_off = htons(IP_DF);
1282 }
1283
1284 static int tunnel_ioctl(const char *name, int cmd, void *p)
1285 {
1286 struct ifreq ifr;
1287
1288 memset(&ifr, 0, sizeof(ifr));
1289 strncpy(ifr.ifr_name, name, sizeof(ifr.ifr_name));
1290 ifr.ifr_ifru.ifru_data = p;
1291 return ioctl(sock_ioctl, cmd, &ifr);
1292 }
1293
1294 int system_del_ip_tunnel(const char *name)
1295 {
1296 struct ip_tunnel_parm p;
1297
1298 tunnel_parm_init(&p);
1299 return tunnel_ioctl(name, SIOCDELTUNNEL, &p);
1300 }
1301
1302 int system_update_ipv6_mtu(struct device *dev, int mtu)
1303 {
1304 int ret = -1;
1305 char buf[64];
1306 snprintf(buf, sizeof(buf), "/proc/sys/net/ipv6/conf/%s/mtu",
1307 dev->ifname);
1308
1309 int fd = open(buf, O_RDWR);
1310 ssize_t len = read(fd, buf, sizeof(buf) - 1);
1311 if (len < 0)
1312 goto out;
1313
1314 buf[len] = 0;
1315 ret = atoi(buf);
1316
1317 if (!mtu || ret <= mtu)
1318 goto out;
1319
1320 lseek(fd, 0, SEEK_SET);
1321 if (write(fd, buf, snprintf(buf, sizeof(buf), "%i", mtu)) <= 0)
1322 ret = -1;
1323
1324 out:
1325 close(fd);
1326 return ret;
1327 }
1328
1329 static int parse_ipaddr(struct blob_attr *attr, __be32 *addr)
1330 {
1331 if (!attr)
1332 return 1;
1333
1334 return inet_pton(AF_INET, blobmsg_data(attr), (void *) addr);
1335 }
1336
1337
1338 int system_add_ip_tunnel(const char *name, struct blob_attr *attr)
1339 {
1340 struct blob_attr *tb[__TUNNEL_ATTR_MAX];
1341 struct blob_attr *cur;
1342 struct ip_tunnel_parm p;
1343 const char *base, *str;
1344 bool is_sit;
1345
1346 system_del_ip_tunnel(name);
1347
1348 tunnel_parm_init(&p);
1349
1350 blobmsg_parse(tunnel_attr_list.params, __TUNNEL_ATTR_MAX, tb,
1351 blob_data(attr), blob_len(attr));
1352
1353 if (!(cur = tb[TUNNEL_ATTR_TYPE]))
1354 return -EINVAL;
1355 str = blobmsg_data(cur);
1356 is_sit = !strcmp(str, "sit");
1357
1358 if (is_sit) {
1359 p.iph.protocol = IPPROTO_IPV6;
1360 base = "sit0";
1361 } else
1362 return -EINVAL;
1363
1364 if (!parse_ipaddr(tb[TUNNEL_ATTR_LOCAL], &p.iph.saddr))
1365 return -EINVAL;
1366
1367 if (!parse_ipaddr(tb[TUNNEL_ATTR_REMOTE], &p.iph.daddr))
1368 return -EINVAL;
1369
1370 if ((cur = tb[TUNNEL_ATTR_TTL])) {
1371 unsigned int val = blobmsg_get_u32(cur);
1372
1373 if (val > 255)
1374 return -EINVAL;
1375
1376 p.iph.ttl = val;
1377 }
1378
1379 strncpy(p.name, name, sizeof(p.name));
1380 if (tunnel_ioctl(base, SIOCADDTUNNEL, &p) < 0)
1381 return -1;
1382
1383 #ifdef SIOCADD6RD
1384 cur = tb[TUNNEL_ATTR_6RD_PREFIX];
1385 if (cur && is_sit) {
1386 unsigned int mask;
1387 struct ip_tunnel_6rd p6;
1388
1389 memset(&p6, 0, sizeof(p6));
1390
1391 if (!parse_ip_and_netmask(AF_INET6, blobmsg_data(cur),
1392 &p6.prefix, &mask) || mask > 128)
1393 return -EINVAL;
1394 p6.prefixlen = mask;
1395
1396 if ((cur = tb[TUNNEL_ATTR_6RD_RELAY_PREFIX])) {
1397 if (!parse_ip_and_netmask(AF_INET, blobmsg_data(cur),
1398 &p6.relay_prefix, &mask) || mask > 32)
1399 return -EINVAL;
1400 p6.relay_prefixlen = mask;
1401 }
1402
1403 if (tunnel_ioctl(name, SIOCADD6RD, &p6) < 0) {
1404 system_del_ip_tunnel(name);
1405 return -1;
1406 }
1407 }
1408 #endif
1409
1410 return 0;
1411 }