]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
3 #include <netinet/in.h>
10 #include "capability-util.h"
11 #include "daemon-util.h"
12 #include "main-func.h"
14 #include "networkd-conf.h"
15 #include "networkd-manager.h"
16 #include "signal-util.h"
17 #include "user-util.h"
19 static int run(int argc
, char *argv
[]) {
20 _cleanup_(manager_freep
) Manager
*m
= NULL
;
21 _cleanup_(notify_on_cleanup
) const char *notify_message
= NULL
;
29 return log_error_errno(SYNTHETIC_ERRNO(EINVAL
), "This program takes no arguments.");
31 /* Drop privileges, but only if we have been started as root. If we are not running as root we assume all
32 * privileges are already dropped and we can't create our runtime directory. */
34 const char *user
= "systemd-network";
38 r
= get_user_creds(&user
, &uid
, &gid
, NULL
, NULL
, 0);
40 return log_error_errno(r
, "Cannot resolve user name %s: %m", user
);
42 /* Create runtime directory. This is not necessary when networkd is
43 * started with "RuntimeDirectory=systemd/netif", or after
44 * systemd-tmpfiles-setup.service. */
45 r
= mkdir_safe_label("/run/systemd/netif", 0755, uid
, gid
, MKDIR_WARN_MODE
);
47 log_warning_errno(r
, "Could not create runtime directory: %m");
49 r
= drop_privileges(uid
, gid
,
50 (1ULL << CAP_NET_ADMIN
) |
51 (1ULL << CAP_NET_BIND_SERVICE
) |
52 (1ULL << CAP_NET_BROADCAST
) |
53 (1ULL << CAP_NET_RAW
));
55 return log_error_errno(r
, "Failed to drop privileges: %m");
58 /* Always create the directories people can create inotify watches in.
59 * It is necessary to create the following subdirectories after drop_privileges()
60 * to support old kernels not supporting AmbientCapabilities=. */
61 r
= mkdir_safe_label("/run/systemd/netif/links", 0755, UID_INVALID
, GID_INVALID
, MKDIR_WARN_MODE
);
63 log_warning_errno(r
, "Could not create runtime directory 'links': %m");
65 r
= mkdir_safe_label("/run/systemd/netif/leases", 0755, UID_INVALID
, GID_INVALID
, MKDIR_WARN_MODE
);
67 log_warning_errno(r
, "Could not create runtime directory 'leases': %m");
69 r
= mkdir_safe_label("/run/systemd/netif/lldp", 0755, UID_INVALID
, GID_INVALID
, MKDIR_WARN_MODE
);
71 log_warning_errno(r
, "Could not create runtime directory 'lldp': %m");
73 assert_se(sigprocmask_many(SIG_BLOCK
, NULL
, SIGTERM
, SIGINT
, -1) >= 0);
77 return log_error_errno(r
, "Could not create manager: %m");
79 r
= manager_connect_bus(m
);
81 return log_error_errno(r
, "Could not connect to bus: %m");
83 r
= manager_parse_config_file(m
);
85 log_warning_errno(r
, "Failed to parse configuration file: %m");
87 r
= manager_load_config(m
);
89 return log_error_errno(r
, "Could not load configuration files: %m");
91 r
= manager_rtnl_enumerate_links(m
);
93 return log_error_errno(r
, "Could not enumerate links: %m");
95 r
= manager_rtnl_enumerate_addresses(m
);
97 return log_error_errno(r
, "Could not enumerate addresses: %m");
99 r
= manager_rtnl_enumerate_neighbors(m
);
101 return log_error_errno(r
, "Could not enumerate neighbors: %m");
103 r
= manager_rtnl_enumerate_routes(m
);
105 return log_error_errno(r
, "Could not enumerate routes: %m");
107 r
= manager_rtnl_enumerate_rules(m
);
109 return log_error_errno(r
, "Could not enumerate rules: %m");
111 r
= manager_rtnl_enumerate_nexthop(m
);
113 return log_error_errno(r
, "Could not enumerate nexthop: %m");
115 r
= manager_start(m
);
117 return log_error_errno(r
, "Could not start manager: %m");
119 log_info("Enumeration completed");
121 notify_message
= notify_start(NOTIFY_READY
, NOTIFY_STOPPING
);
123 r
= sd_event_loop(m
->event
);
125 return log_error_errno(r
, "Event loop failed: %m");
130 DEFINE_MAIN_FUNCTION(run
);