sys/net/ipfw/ip_fw2_glue.c

   1 /*
   2  * Copyright (c) 2008 The DragonFly Project.  All rights reserved.
   3  *
   4  * This code is derived from software contributed to The DragonFly Project
   5  * by Sepherosa Ziehau <sepherosa@gmail.com>
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  *
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in
  15  *    the documentation and/or other materials provided with the
  16  *    distribution.
  17  * 3. Neither the name of The DragonFly Project nor the names of its
  18  *    contributors may be used to endorse or promote products derived
  19  *    from this software without specific, prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  22  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  23  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  24  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
  25  * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
  26  * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
  27  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  28  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
  29  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  30  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
  31  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  32  * SUCH DAMAGE.
  33  *
  34  * $DragonFly: src/sys/net/ipfw/ip_fw2_glue.c,v 1.2 2008/08/02 03:32:38 sephe Exp $
  35  */
  36
  37 #include <sys/param.h>
  38 #include <sys/socketvar.h>
  39
  40 #include <net/if.h>
  41 #include <net/netisr.h>
  42 #include <net/netmsg2.h>
  43
  44 #include <netinet/in.h>
  45
  46 #include <net/ipfw/ip_fw2.h>
  47
  48 static void     ip_fw_sockopt_dispatch(struct netmsg *);
  49
  50 int
  51 ip_fw_sockopt(struct sockopt *sopt)
  52 {
  53         struct netmsg smsg;
  54
  55         /*
  56          * Disallow modifications in really-really secure mode, but still allow
  57          * the logging counters to be reset.
  58          */
  59         if (sopt->sopt_name == IP_FW_ADD ||
  60             (sopt->sopt_dir == SOPT_SET && sopt->sopt_name != IP_FW_RESETLOG)) {
  61                 if (securelevel >= 3)
  62                         return EPERM;
  63         }
  64
  65         netmsg_init(&smsg, &curthread->td_msgport, 0, ip_fw_sockopt_dispatch);
  66         smsg.nm_lmsg.u.ms_resultp = sopt;
  67         return lwkt_domsg(IPFW_CFGPORT, &smsg.nm_lmsg, 0);
  68 }
  69
  70 static void
  71 ip_fw_sockopt_dispatch(struct netmsg *nmsg)
  72 {
  73         struct lwkt_msg *msg = &nmsg->nm_lmsg;
  74         struct sockopt *sopt = msg->u.ms_resultp;
  75         int error;
  76
  77         KKASSERT(mycpuid == 0);
  78
  79         if (IPFW_LOADED)
  80                 error = ip_fw_ctl_ptr(sopt);
  81         else
  82                 error = ENOPROTOOPT;
  83         lwkt_replymsg(msg, error);
  84 }