2 Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013
3 Ben Kibbey <bjk@luxsci.net>
5 This file is part of pwmd.
7 Pwmd is free software: you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation, either version 2 of the License, or
10 (at your option) any later version.
12 Pwmd is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with Pwmd. If not, see <http://www.gnu.org/licenses/>.
26 #include <sys/types.h>
32 #include "pwmd-error.h"
36 #include "util-misc.h"
38 #include "util-slist.h"
39 #include "util-string.h"
42 #define DEFAULT_PINENTRY_TIMEOUT "30"
44 #define INVALID_VALUE(file, line) do { \
46 log_write(_("%s(%i): invalid value for parameter."), file, line); \
51 PARAM_INT
, PARAM_CHARP
, PARAM_LONG
, PARAM_LONGLONG
, PARAM_CHARPP
,
52 PARAM_BOOL
, PARAM_ULONG
, PARAM_ULONGLONG
55 static struct config_params_s
61 { "backup", PARAM_BOOL
, "true"},
62 { "socket_path", PARAM_CHARP
, NULL
},
63 { "socket_perms", PARAM_CHARP
, NULL
},
64 { "passphrase", PARAM_CHARP
, NULL
},
65 { "passphrase_file", PARAM_CHARP
, NULL
},
66 { "agent_env_file", PARAM_CHARP
, NULL
},
67 { "log_path", PARAM_CHARP
, "~/.pwmd/log"},
68 { "enable_logging", PARAM_BOOL
, "0"},
69 { "log_level", PARAM_INT
, "0"},
70 { "disable_mlockall", PARAM_BOOL
, "true"},
71 { "cache_timeout", PARAM_INT
, "-1"},
72 { "cache_push", PARAM_CHARPP
, NULL
},
73 { "disable_list_and_dump", PARAM_BOOL
, "false"},
74 { "recursion_depth", PARAM_INT
, "100"},
75 { "syslog", PARAM_BOOL
, "false"},
76 { "xfer_progress", PARAM_INT
, "8196"},
77 { "allowed", PARAM_CHARPP
, NULL
},
78 { "keyparam", PARAM_CHARP
, "(genkey (rsa (nbits 4:2048)))"},
79 { "cipher", PARAM_CHARP
, "aes256"},
80 { "kill_scd", PARAM_BOOL
, "false"},
81 { "cipher_iterations", PARAM_ULONGLONG
, "0"},
82 { "cipher_progress", PARAM_LONG
, DEFAULT_ITERATION_PROGRESS
},
83 { "priority", PARAM_INT
, INVALID_PRIORITY
},
84 { "keepalive_interval", PARAM_INT
, "5"},
85 { "tcp_port", PARAM_INT
, "6466"},
86 { "enable_tcp", PARAM_BOOL
, "false"},
87 { "tcp_require_key", PARAM_BOOL
, "false"},
88 { "tcp_wait", PARAM_INT
, "0"},
89 { "tcp_bind", PARAM_CHARP
, "any"},
90 { "tcp_interface", PARAM_CHARP
, NULL
},
91 { "tls_timeout", PARAM_INT
, "300"},
92 { "tls_cipher_suite", PARAM_CHARP
, "SECURE256"},
93 { "tls_access", PARAM_CHARPP
, NULL
},
94 { "pinentry_path", PARAM_CHARP
, PINENTRY_PATH
},
95 { "pinentry_timeout", PARAM_INT
, DEFAULT_PINENTRY_TIMEOUT
},
96 { "use_agent", PARAM_BOOL
, "false"},
97 { "require_save_key", PARAM_BOOL
, "true"},
112 unsigned long ultype
;
113 unsigned long long ulltype
;
120 struct slist_s
*params
;
123 static struct section_s
*config_find_section (struct slist_s
*config
,
125 static int new_param (struct section_s
*section
, const char *filename
,
126 int lineno
, const char *name
, const char *value
,
128 static void free_section (struct section_s
*s
);
129 static int set_defaults (struct slist_s
**config
);
132 section_remove_param (struct section_s
*section
, const char *name
)
134 unsigned i
, t
= slist_length (section
->params
);
136 for (i
= 0; i
< t
; i
++)
138 struct param_s
*p
= slist_nth_data (section
->params
, i
);
143 if (!strcmp (p
->name
, name
))
148 xfree (p
->value
.cptype
);
151 strv_free (p
->value
.cpptype
);
155 section
->params
= slist_remove (section
->params
, p
);
166 MUTEX_LOCK (&rcfile_mutex
);
167 unsigned i
, t
= slist_length (global_config
);
169 for (i
= 0; i
< t
; i
++)
171 struct section_s
*s
= slist_nth_data (global_config
, i
);
175 section_remove_param (s
, "passphrase");
178 MUTEX_UNLOCK (&rcfile_mutex
);
181 static struct param_s
*
182 config_has_param (struct section_s
*s
, const char *what
)
184 unsigned i
, t
= slist_length (s
->params
);
186 for (i
= 0; i
< t
; i
++)
188 struct param_s
*p
= slist_nth_data (s
->params
, i
);
192 if (!strcmp (p
->name
, what
))
199 static struct param_s
*
200 config_get_param (struct slist_s
*config
,
201 const char *section
, const char *what
, int *exists
)
203 unsigned i
, t
= slist_length (config
);
207 for (i
= 0; i
< t
; i
++)
210 struct section_s
*s
= slist_nth_data (config
, i
);
215 if (strcmp (s
->name
, section
))
218 p
= config_has_param (s
, what
);
229 static struct section_s
*
230 new_section (struct slist_s
**config
, const char *name
)
233 struct section_s
*s
= xcalloc (1, sizeof (struct section_s
));
238 s
->name
= str_dup (name
);
241 log_write ("%s", pwmd_strerror (ENOMEM
));
246 tmp
= slist_append (*config
, s
);
249 log_write ("%s", pwmd_strerror (ENOMEM
));
260 config_set_string_param (struct slist_s
**config
, const char *section
,
261 const char *name
, const char *value
)
263 struct section_s
*s
= config_find_section (*config
, section
);
267 s
= new_section (config
, section
);
272 return new_param (s
, NULL
, 0, name
, value
, PARAM_CHARP
);
276 config_get_string_param (struct slist_s
*config
, const char *section
,
277 const char *what
, int *exists
)
279 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
280 return *exists
&& p
->value
.cptype
? str_dup (p
->value
.cptype
) : NULL
;
284 config_set_int_param (struct slist_s
**config
, const char *section
,
285 const char *name
, const char *value
)
287 struct section_s
*s
= config_find_section (*config
, section
);
291 s
= new_section (config
, section
);
296 return new_param (s
, NULL
, 0, name
, value
, PARAM_INT
);
300 config_get_int_param (struct slist_s
*config
, const char *section
,
301 const char *what
, int *exists
)
303 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
304 return *exists
? p
->value
.itype
: -1;
308 config_set_bool_param (struct slist_s
**config
, const char *section
,
309 const char *name
, const char *value
)
311 struct section_s
*s
= config_find_section (*config
, section
);
315 s
= new_section (config
, section
);
320 return new_param (s
, NULL
, 0, name
, value
, PARAM_BOOL
);
324 config_get_bool_param (struct slist_s
*config
, const char *section
,
325 const char *what
, int *exists
)
327 return config_get_int_param (config
, section
, what
, exists
);
331 config_set_long_param (struct slist_s
**config
, const char *section
,
332 const char *name
, const char *value
)
334 struct section_s
*s
= config_find_section (*config
, section
);
338 s
= new_section (config
, section
);
343 return new_param (s
, NULL
, 0, name
, value
, PARAM_LONG
);
347 config_get_ulong_param (struct slist_s
*config
, const char *section
,
348 const char *what
, int *exists
)
350 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
351 return *exists
? p
->value
.ultype
: 0;
355 config_get_long_param (struct slist_s
*config
, const char *section
,
356 const char *what
, int *exists
)
358 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
359 return *exists
? p
->value
.ltype
: -1;
363 config_set_longlong_param (struct slist_s
**config
, const char *section
,
364 const char *name
, const char *value
)
366 struct section_s
*s
= config_find_section (*config
, section
);
370 s
= new_section (config
, section
);
375 return new_param (s
, NULL
, 0, name
, value
, PARAM_LONGLONG
);
379 config_get_longlong_param (struct slist_s
*config
,
380 const char *section
, const char *what
, int *exists
)
382 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
383 return *exists
? p
->value
.lltype
: -1;
387 config_get_ulonglong_param (struct slist_s
*config
,
389 const char *what
, int *exists
)
391 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
392 return *exists
? p
->value
.ulltype
: 0;
396 config_set_list_param (struct slist_s
**config
, const char *section
,
397 const char *name
, const char *value
)
399 struct section_s
*s
= config_find_section (*config
, section
);
403 s
= new_section (config
, section
);
408 return new_param (s
, NULL
, 0, name
, value
, PARAM_CHARPP
);
412 config_get_list_param (struct slist_s
*config
, const char *section
,
413 const char *what
, int *exists
)
415 struct param_s
*p
= config_get_param (config
, section
, what
, exists
);
416 return *exists
&& p
->value
.cpptype
? strv_dup (p
->value
.cpptype
) : NULL
;
420 config_get_string (const char *section
, const char *what
)
423 const char *where
= section
? section
: "global";
426 MUTEX_LOCK (&rcfile_mutex
);
427 val
= config_get_string_param (global_config
, where
, what
, &exists
);
428 if (!exists
&& strcmp (section
? section
: "", "global"))
429 val
= config_get_string_param (global_config
, "global", what
, &exists
);
431 MUTEX_UNLOCK (&rcfile_mutex
);
436 config_get_list (const char *section
, const char *what
)
439 const char *where
= section
? section
: "global";
442 MUTEX_LOCK (&rcfile_mutex
);
443 val
= config_get_list_param (global_config
, where
, what
, &exists
);
444 if (!exists
&& strcmp (section
? section
: "", "global"))
445 val
= config_get_list_param (global_config
, "global", what
, &exists
);
447 MUTEX_UNLOCK (&rcfile_mutex
);
452 config_get_integer (const char *section
, const char *what
)
455 const char *where
= section
? section
: "global";
458 MUTEX_LOCK (&rcfile_mutex
);
459 val
= config_get_int_param (global_config
, where
, what
, &exists
);
460 if (!exists
&& strcmp (section
? section
: "", "global"))
461 val
= config_get_int_param (global_config
, "global", what
, &exists
);
463 MUTEX_UNLOCK (&rcfile_mutex
);
468 config_get_longlong (const char *section
, const char *what
)
471 const char *where
= section
? section
: "global";
474 MUTEX_LOCK (&rcfile_mutex
);
475 val
= config_get_longlong_param (global_config
, where
, what
, &exists
);
476 if (!exists
&& strcmp (section
? section
: "", "global"))
477 val
= config_get_longlong_param (global_config
, "global", what
, &exists
);
479 MUTEX_UNLOCK (&rcfile_mutex
);
484 config_get_ulonglong (const char *section
, const char *what
)
486 unsigned long long val
= 0;
487 const char *where
= section
? section
: "global";
490 MUTEX_LOCK (&rcfile_mutex
);
491 val
= config_get_ulonglong_param (global_config
, where
, what
, &exists
);
492 if (!exists
&& strcmp (section
? section
: "", "global"))
493 val
= config_get_ulonglong_param (global_config
, "global", what
, &exists
);
495 MUTEX_UNLOCK (&rcfile_mutex
);
500 config_get_long (const char *section
, const char *what
)
503 const char *where
= section
? section
: "global";
506 MUTEX_LOCK (&rcfile_mutex
);
507 val
= config_get_long_param (global_config
, where
, what
, &exists
);
508 if (!exists
&& strcmp (section
? section
: "", "global"))
509 val
= config_get_long_param (global_config
, "global", what
, &exists
);
511 MUTEX_UNLOCK (&rcfile_mutex
);
516 config_get_ulong (const char *section
, const char *what
)
518 unsigned long val
= 0;
519 const char *where
= section
? section
: "global";
522 MUTEX_LOCK (&rcfile_mutex
);
523 val
= config_get_ulong_param (global_config
, where
, what
, &exists
);
524 if (!exists
&& strcmp (section
? section
: "", "global"))
525 val
= config_get_ulong_param (global_config
, "global", what
, &exists
);
527 MUTEX_UNLOCK (&rcfile_mutex
);
532 config_get_boolean (const char *section
, const char *what
)
534 return config_get_integer (section
, what
);
538 config_get_value (const char *section
, const char *what
)
540 const char *where
= section
? section
: "global";
547 unsigned long long ullval
;
552 MUTEX_LOCK (&rcfile_mutex
);
554 for (i
= 0; config_params
[i
].name
; i
++)
556 if (!strcmp (config_params
[i
].name
, what
))
558 switch (config_params
[i
].type
)
562 ival
= config_get_int_param (global_config
, where
, what
,
564 if (!exists
&& strcmp (section
? section
: "", "global"))
565 ival
= config_get_int_param (global_config
, "global", what
,
567 result
= str_asprintf ("%i", ival
);
570 cpval
= config_get_string_param (global_config
, where
, what
,
572 if (!exists
&& strcmp (section
? section
: "", "global"))
574 config_get_string_param (global_config
, "global", what
,
579 lval
= config_get_long_param (global_config
, where
, what
,
581 if (!exists
&& strcmp (section
? section
: "", "global"))
582 lval
= config_get_long_param (global_config
, "global", what
,
584 result
= str_asprintf ("%li", lval
);
587 ulval
= config_get_ulong_param (global_config
, where
, what
,
589 if (!exists
&& strcmp (section
? section
: "", "global"))
590 ulval
= config_get_ulong_param (global_config
, "global", what
,
592 result
= str_asprintf ("%lu", ulval
);
595 llval
= config_get_longlong_param (global_config
, where
, what
,
597 if (!exists
&& strcmp (section
? section
: "", "global"))
598 llval
= config_get_longlong_param (global_config
, "global",
600 result
= str_asprintf ("%lli", llval
);
602 case PARAM_ULONGLONG
:
603 ullval
= config_get_ulonglong_param (global_config
, where
, what
,
605 if (!exists
&& strcmp (section
? section
: "", "global"))
606 ullval
= config_get_ulonglong_param (global_config
, "global",
608 result
= str_asprintf ("%llu", ullval
);
611 cppval
= config_get_list_param (global_config
, where
, what
,
613 if (!exists
&& strcmp (section
? section
: "", "global"))
614 cppval
= config_get_list_param (global_config
, "global", what
,
618 result
= strv_join (",", cppval
);
626 MUTEX_UNLOCK (&rcfile_mutex
);
631 set_defaults (struct slist_s
**config
)
638 for (i
= 0; config_params
[i
].name
; i
++)
640 switch (config_params
[i
].type
)
643 config_get_bool_param (*config
, "global", config_params
[i
].name
,
647 if (config_set_bool_param
648 (config
, "global", config_params
[i
].name
,
649 config_params
[i
].value
))
654 config_get_int_param (*config
, "global", config_params
[i
].name
,
658 if (config_set_int_param
659 (config
, "global", config_params
[i
].name
,
660 config_params
[i
].value
))
665 s
= config_get_string_param (*config
, "global",
666 config_params
[i
].name
, &exists
);
668 if (!exists
&& config_params
[i
].value
)
670 if (config_set_string_param (config
, "global",
671 config_params
[i
].name
,
672 config_params
[i
].value
))
677 list
= config_get_list_param (*config
, "global",
678 config_params
[i
].name
, &exists
);
680 if (!exists
&& config_params
[i
].value
)
682 if (config_set_list_param (config
, "global",
683 config_params
[i
].name
,
684 config_params
[i
].value
))
689 config_get_long_param (*config
, "global", config_params
[i
].name
,
693 if (config_set_long_param
694 (config
, "global", config_params
[i
].name
,
695 config_params
[i
].value
))
700 config_get_longlong_param (*config
, "global", config_params
[i
].name
,
704 if (config_set_longlong_param (config
, "global",
705 config_params
[i
].name
,
706 config_params
[i
].value
))
713 list
= config_get_list_param (*config
, "global", "allowed", &exists
);
717 if (config_set_list_param
718 (config
, "global", "allowed", get_username ()))
722 max_recursion_depth
= config_get_int_param (*config
, "global",
723 "recursion_depth", &exists
);
724 disable_list_and_dump
= config_get_bool_param (*config
, "global",
725 "disable_list_and_dump",
729 config_get_bool_param (*config
, "global", "disable_mlockall", &exists
);
737 static struct section_s
*
738 config_find_section (struct slist_s
*config
, const char *name
)
740 unsigned i
, t
= slist_length (config
);
742 for (i
= 0; i
< t
; i
++)
744 struct section_s
*s
= slist_nth_data (config
, i
);
746 if (!strcmp (s
->name
, name
))
753 /* Append a new parameter to the list of parameters for a file
754 * section. When an existing parameter of the same name exists, its
758 new_param (struct section_s
*section
, const char *filename
, int lineno
,
759 const char *name
, const char *value
, int type
)
761 struct param_s
*param
= NULL
;
764 unsigned i
, t
= slist_length (section
->params
);
767 for (i
= 0; i
< t
; i
++)
769 struct param_s
*p
= slist_nth_data (section
->params
, i
);
773 if (!strcmp (name
, p
->name
))
783 param
= xcalloc (1, sizeof (struct param_s
));
786 log_write ("%s", pwmd_strerror (ENOMEM
));
790 param
->name
= str_dup (name
);
794 log_write ("%s", pwmd_strerror (ENOMEM
));
804 if (!strcasecmp (value
, "no") || !strcasecmp (value
, "0")
805 || !strcasecmp (value
, "false"))
806 param
->value
.itype
= 0;
807 else if (!strcasecmp (value
, "yes") || !strcasecmp (value
, "1")
808 || !strcasecmp (value
, "true"))
809 param
->value
.itype
= 1;
812 INVALID_VALUE (filename
, lineno
);
815 param
->type
= PARAM_INT
;
818 xfree (param
->value
.cptype
);
819 param
->value
.cptype
= value
? str_dup (value
) : NULL
;
820 if (value
&& !param
->value
.cptype
)
822 log_write ("%s", pwmd_strerror (ENOMEM
));
827 strv_free (param
->value
.cpptype
);
828 param
->value
.cpptype
= value
? str_split (value
, ",", 0) : NULL
;
829 if (value
&& !param
->value
.cpptype
)
831 log_write ("%s", pwmd_strerror (ENOMEM
));
836 param
->value
.itype
= strtol (value
, &e
, 10);
839 INVALID_VALUE (filename
, lineno
);
844 param
->value
.ltype
= strtol (value
, &e
, 10);
847 INVALID_VALUE (filename
, lineno
);
852 param
->value
.lltype
= strtoll (value
, &e
, 10);
855 INVALID_VALUE (filename
, lineno
);
859 case PARAM_ULONGLONG
:
860 param
->value
.ulltype
= strtoull (value
, &e
, 10);
863 INVALID_VALUE (filename
, lineno
);
868 param
->value
.ultype
= strtoul (value
, &e
, 10);
871 INVALID_VALUE (filename
, lineno
);
880 tmp
= slist_append (section
->params
, param
);
883 log_write ("%s", pwmd_strerror (ENOMEM
));
887 section
->params
= tmp
;
897 config_parse (const char *filename
)
899 struct slist_s
*tmpconfig
= NULL
, *tmp
;
900 struct section_s
*cur_section
= NULL
;
905 FILE *fp
= fopen (filename
, "r");
909 log_write ("%s: %s", filename
,
910 pwmd_strerror (gpg_error_from_syserror ()));
915 log_write (_("Using defaults!"));
919 for (; (s
= fgets (buf
, sizeof (buf
), fp
)); lineno
++)
921 char line
[LINE_MAX
] = { 0 };
932 /* New file section. */
935 struct section_s
*section
;
936 char *p
= strchr (++s
, ']');
940 log_write (_("%s(%i): unbalanced braces"), filename
,
945 len
= strlen (s
) - strlen (p
);
946 memcpy (line
, s
, len
);
949 section
= config_find_section (tmpconfig
, line
);
952 log_write (_("%s(%i): section '%s' already exists!"),
953 filename
, lineno
, line
);
957 if (!strcmp (line
, "global"))
960 section
= xcalloc (1, sizeof (struct section_s
));
961 section
->name
= str_dup (line
);
965 tmp
= slist_append (tmpconfig
, cur_section
);
968 log_write ("%s", pwmd_strerror (ENOMEM
));
975 cur_section
= section
;
981 log_write (_("%s(%i): parameter outside of section!"), filename
,
986 /* Parameters for each section. */
987 for (int m
= 0; config_params
[m
].name
; m
++)
989 size_t len
= strlen (config_params
[m
].name
);
991 if (!strncmp (s
, config_params
[m
].name
, len
))
995 while (*p
&& *p
== ' ')
998 if (!*p
|| *p
!= '=')
1002 while (*p
&& isspace (*p
))
1006 if (new_param (cur_section
, filename
, lineno
, s
, p
,
1007 config_params
[m
].type
))
1017 log_write (_("%s(%i): unknown parameter"), filename
, lineno
);
1029 tmp
= slist_append (tmpconfig
, cur_section
);
1032 log_write ("%s", pwmd_strerror (ENOMEM
));
1042 ("WARNING: %s: could not find a [global] configuration section!"),
1046 if (set_defaults (&tmpconfig
))
1053 config_free (tmpconfig
);
1054 free_section (cur_section
);
1059 free_section (struct section_s
*s
)
1066 struct param_s
*p
= slist_nth_data (s
->params
, 0);
1071 section_remove_param (s
, p
->name
);
1080 config_free (struct slist_s
*config
)
1084 struct section_s
*s
= slist_nth_data (config
, 0);
1089 config
= slist_remove (config
, s
);