]>
Commit | Line | Data |
---|---|---|
d6c9574f | 1 | /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/ |
0213c3f8 LP |
2 | |
3 | /*** | |
4 | This file is part of systemd. | |
5 | ||
6 | Copyright 2010 Lennart Poettering | |
7 | ||
8 | systemd is free software; you can redistribute it and/or modify it | |
9 | under the terms of the GNU General Public License as published by | |
10 | the Free Software Foundation; either version 2 of the License, or | |
11 | (at your option) any later version. | |
12 | ||
13 | systemd is distributed in the hope that it will be useful, but | |
14 | WITHOUT ANY WARRANTY; without even the implied warranty of | |
15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
16 | General Public License for more details. | |
17 | ||
18 | You should have received a copy of the GNU General Public License | |
19 | along with systemd; If not, see <http://www.gnu.org/licenses/>. | |
20 | ***/ | |
21 | ||
22 | #include <sys/socket.h> | |
23 | #include <sys/un.h> | |
7cfdbb3c LP |
24 | #include <arpa/inet.h> |
25 | #include <netinet/in.h> | |
0213c3f8 LP |
26 | |
27 | #ifdef HAVE_LIBWRAP | |
28 | #include <tcpd.h> | |
29 | #endif | |
30 | ||
31 | #include "tcpwrap.h" | |
32 | #include "log.h" | |
33 | ||
34 | bool socket_tcpwrap(int fd, const char *name) { | |
35 | #ifdef HAVE_LIBWRAP | |
36 | struct request_info req; | |
37 | union { | |
38 | struct sockaddr sa; | |
39 | struct sockaddr_in in; | |
40 | struct sockaddr_in6 in6; | |
41 | struct sockaddr_un un; | |
42 | struct sockaddr_storage storage; | |
43 | } sa_union; | |
44 | socklen_t l = sizeof(sa_union); | |
45 | ||
46 | if (getsockname(fd, &sa_union.sa, &l) < 0) | |
47 | return true; | |
48 | ||
49 | if (sa_union.sa.sa_family != AF_INET && | |
50 | sa_union.sa.sa_family != AF_INET6) | |
51 | return true; | |
52 | ||
53 | request_init(&req, | |
54 | RQ_DAEMON, name, | |
55 | RQ_FILE, fd, | |
56 | NULL); | |
57 | ||
58 | fromhost(&req); | |
59 | ||
60 | if (!hosts_access(&req)) { | |
61 | log_warning("Connection refused by tcpwrap."); | |
62 | return false; | |
63 | } | |
64 | ||
65 | log_debug("Connection accepted by tcpwrap."); | |
66 | #endif | |
67 | return true; | |
68 | } |