-/* SmoothWall helper program - restartsnort\r
- *\r
- * This program is distributed under the terms of the GNU General Public\r
- * Licence. See the file COPYING for details.\r
- *\r
- * (c) Lawrence Manning, 2001\r
- * Restarting snort.\r
- * \r
- * $Id: restartsnort.c,v 1.8.2.3 2005/10/16 12:36:14 rkerr Exp $\r
- * \r
- */\r
- \r
-#include <stdio.h>\r
-#include <string.h>\r
-#include <stdlib.h>\r
-#include <unistd.h>\r
-#include <sys/types.h>\r
-#include <sys/stat.h>\r
-#include <string.h>\r
-#include <fcntl.h>\r
-#include <signal.h>\r
-#include "libsmooth.h"\r
-#include "setuid.h"\r
-\r
-struct keyvalue *kv = NULL;\r
-FILE *varsfile = NULL;\r
-\r
-void exithandler(void)\r
-{\r
- if (varsfile)\r
- fclose (varsfile);\r
-\r
- if (kv)\r
- freekeyvalues(kv);\r
-}\r
-\r
-int killsnort(char *interface)\r
-{\r
- int fd;\r
- char pidname[STRING_SIZE] = "";\r
- char buffer[STRING_SIZE] = "";\r
- int pid;\r
-\r
- sprintf(pidname, "/var/run/snort_%s.pid", interface);\r
-\r
- if ((fd = open(pidname, O_RDONLY)) != -1)\r
- {\r
- if (read(fd, buffer, STRING_SIZE - 1) == -1)\r
- fprintf(stderr, "Couldn't read from pid file\n");\r
- else\r
- {\r
- pid = atoi(buffer);\r
- if (pid <= 1)\r
- fprintf(stderr, "Bad pid value\n");\r
- else\r
- {\r
- if (kill(pid, SIGTERM) == -1)\r
- fprintf(stderr, "Unable to send SIGTERM\n");\r
- close (fd);\r
- return 0;\r
- }\r
- }\r
- close(fd);\r
- }\r
- return 1;\r
-}\r
-\r
-int main(int argc, char *argv[])\r
-{\r
- int fd = -1;\r
- FILE *ifacefile, *ipfile, *dns1file, *dns2file;\r
- char iface[STRING_SIZE] = "";\r
- char locip[STRING_SIZE] = "";\r
- char dns1[STRING_SIZE] = "";\r
- char dns2[STRING_SIZE] = "";\r
- char command[STRING_SIZE] = "";\r
- char greendev[STRING_SIZE] = "";\r
- char orangedev[STRING_SIZE] = "";\r
- char bluedev[STRING_SIZE] = "";\r
- char greenip[STRING_SIZE] = "";\r
- char orangeip[STRING_SIZE] = "";\r
- char blueip[STRING_SIZE] = "";\r
- struct stat st;\r
- int i;\r
- int restartred = 0, restartgreen = 0, restartblue = 0, restartorange = 0;\r
- \r
- if (!(initsetuid()))\r
- exit(1);\r
- \r
- atexit(exithandler);\r
-\r
- for (i=0; i<argc; i++) {\r
- if (!strcmp(argv[i], "red"))\r
- restartred = 1;\r
- if (!strcmp(argv[i], "orange"))\r
- restartorange = 1;\r
- if (!strcmp(argv[i], "blue"))\r
- restartblue = 1;\r
- if (!strcmp(argv[i], "green"))\r
- restartgreen = 1;\r
- }\r
- \r
- kv = initkeyvalues();\r
- if (!(readkeyvalues(kv, CONFIG_ROOT "/ethernet/settings")))\r
- exit(1);\r
-\r
- if (! findkey(kv, "GREEN_DEV", greendev)) {\r
- fprintf(stderr, "Couldn't find GREEN device\n");\r
- exit(1);\r
- }\r
- if (! strlen (greendev) > 0) {\r
- fprintf(stderr, "Couldn't find GREEN device\n");\r
- exit(1);\r
- }\r
- if (!VALID_DEVICE(greendev))\r
- {\r
- fprintf(stderr, "Bad GREEN_DEV: %s\n", greendev);\r
- exit(1);\r
- }\r
- if (!(findkey(kv, "GREEN_ADDRESS", greenip))) {\r
- fprintf(stderr, "Couldn't find GREEN address\n");\r
- exit(1);\r
- }\r
- if (!VALID_IP(greenip)) {\r
- fprintf(stderr, "Bad GREEN_ADDRESS: %s\n", greenip);\r
- exit(1);\r
- }\r
-\r
- if (findkey(kv, "ORANGE_DEV", orangedev) && strlen (orangedev) > 0) {\r
- if (!VALID_DEVICE(orangedev))\r
- {\r
- fprintf(stderr, "Bad ORANGE_DEV: %s\n", orangedev);\r
- exit(1);\r
- }\r
- if (!(findkey(kv, "ORANGE_ADDRESS", orangeip))) {\r
- fprintf(stderr, "Couldn't find ORANGE address\n");\r
- exit(1);\r
- }\r
- if (!VALID_IP(orangeip)) {\r
- fprintf(stderr, "Bad ORANGE_ADDRESS: %s\n", orangeip);\r
- exit(1);\r
- }\r
- }\r
-\r
- if (findkey(kv, "BLUE_DEV", bluedev) && strlen (bluedev) > 0) {\r
- if (!VALID_DEVICE(bluedev))\r
- {\r
- fprintf(stderr, "Bad BLUE_DEV: %s\n", bluedev);\r
- exit(1);\r
- }\r
- if (!(findkey(kv, "BLUE_ADDRESS", blueip))) {\r
- fprintf(stderr, "Couldn't find BLUE address\n");\r
- exit(1);\r
- }\r
- if (!VALID_IP(blueip)) {\r
- fprintf(stderr, "Bad BLUE_ADDRESS: %s\n", blueip);\r
- exit(1);\r
- }\r
- }\r
-\r
- stat(CONFIG_ROOT "/red/active", &st);\r
-\r
- if (S_ISREG(st.st_mode)) {\r
- if (!(ifacefile = fopen(CONFIG_ROOT "/red/iface", "r")))\r
- {\r
- fprintf(stderr, "Couldn't open iface file\n");\r
- exit(0);\r
- }\r
-\r
- if (fgets(iface, STRING_SIZE, ifacefile))\r
- {\r
- if (iface[strlen(iface) - 1] == '\n')\r
- iface[strlen(iface) - 1] = '\0';\r
- }\r
- fclose(ifacefile);\r
- if (!VALID_DEVICE(iface))\r
- {\r
- fprintf(stderr, "Bad iface: %s\n", iface);\r
- exit(0);\r
- }\r
-\r
- if (!(ipfile = fopen(CONFIG_ROOT "/red/local-ipaddress", "r")))\r
- {\r
- fprintf(stderr, "Couldn't open local ip file\n");\r
- exit(0);\r
- }\r
- if (fgets(locip, STRING_SIZE, ipfile))\r
- {\r
- if (locip[strlen(locip) - 1] == '\n')\r
- locip[strlen(locip) - 1] = '\0';\r
- }\r
- fclose (ipfile);\r
- if (strlen(locip) && !VALID_IP(locip))\r
- {\r
- fprintf(stderr, "Bad local IP: %s\n", locip);\r
- exit(1);\r
- }\r
- \r
- if (!(dns1file = fopen(CONFIG_ROOT "/red/dns1", "r")))\r
- {\r
- fprintf(stderr, "Couldn't open dns1 file\n");\r
- exit(0);\r
- }\r
- if (fgets(dns1, STRING_SIZE, dns1file))\r
- {\r
- if (dns1[strlen(dns1) - 1] == '\n')\r
- dns1[strlen(dns1) - 1] = '\0';\r
- }\r
- fclose (dns1file);\r
- if (strlen(dns1) && !VALID_IP(dns1))\r
- {\r
- fprintf(stderr, "Bad DNS1 IP: %s\n", dns1);\r
- exit(1);\r
- }\r
- \r
- if (!(dns2file = fopen(CONFIG_ROOT "/red/dns2", "r")))\r
- {\r
- fprintf(stderr, "Couldn't open dns2 file\n");\r
- exit(1);\r
- }\r
- if (fgets(dns2, STRING_SIZE, dns2file))\r
- {\r
- if (dns2[strlen(dns2) - 1] == '\n')\r
- dns2[strlen(dns2) - 1] = '\0';\r
- }\r
- fclose (dns2file);\r
- if (strlen(dns2) && !VALID_IP(dns2))\r
- {\r
- fprintf(stderr, "Bad DNS2 IP: %s\n", dns2);\r
- exit(1);\r
- }\r
- }\r
-\r
- if (restartred)\r
- killsnort(iface);\r
-\r
- if (restartblue)\r
- killsnort(bluedev);\r
- \r
- if (restartorange)\r
- killsnort(orangedev);\r
-\r
- if (restartgreen)\r
- killsnort(greendev);\r
- \r
- if (!(varsfile = fopen("/etc/snort/vars", "w")))\r
- {\r
- fprintf(stderr, "Couldn't create vars file\n");\r
- exit(1);\r
- }\r
- if (strlen(blueip)) {\r
- if (strlen(orangeip)) {\r
- if (strlen(locip)) {\r
- fprintf(varsfile, "var HOME_NET [%s,%s,%s,%s]\n", greenip, orangeip, blueip, locip);\r
- } else {\r
- fprintf(varsfile, "var HOME_NET [%s,%s,%s]\n", greenip, orangeip, blueip);\r
- }\r
- } else {\r
- if (strlen(locip)) {\r
- fprintf(varsfile, "var HOME_NET [%s,%s,%s]\n", greenip, blueip, locip);\r
- } else {\r
- fprintf(varsfile, "var HOME_NET [%s,%s]\n", greenip, blueip);\r
- }\r
- }\r
- } else {\r
- if (strlen(orangeip)) {\r
- if (strlen(locip)) {\r
- fprintf(varsfile, "var HOME_NET [%s,%s,%s]\n", greenip, orangeip, locip);\r
- } else {\r
- fprintf(varsfile, "var HOME_NET [%s,%s]\n", greenip, orangeip);\r
- }\r
- } else {\r
- if (strlen(locip)) {\r
- fprintf(varsfile, "var HOME_NET [%s,%s]\n", greenip, locip);\r
- } else {\r
- fprintf(varsfile, "var HOME_NET [%s]\n", greenip);\r
- }\r
- }\r
- }\r
- if (strlen(dns1))\r
- {\r
- if (strlen(dns2))\r
- fprintf(varsfile, "var DNS_SERVERS [%s,%s]\n", dns1, dns2);\r
- else\r
- fprintf(varsfile, "var DNS_SERVERS %s\n", dns1);\r
- } else {\r
- fprintf(varsfile, "var DNS_SERVERS []\n");\r
- }\r
- fclose(varsfile);\r
- varsfile = NULL;\r
- \r
- if (restartred && strlen(iface) && (fd = open(CONFIG_ROOT "/snort/enable", O_RDONLY)) != -1)\r
- {\r
- close(fd);\r
- snprintf(command, STRING_SIZE -1,\r
- "/usr/sbin/snort -c /etc/snort/snort.conf -D -u snort -g snort -d -e -o -p -b -A fast -m 022 -i %s",\r
- iface);\r
- safe_system(command);\r
- }\r
- if (restartblue && strlen(bluedev) && (fd = open(CONFIG_ROOT "/snort/enable_blue", O_RDONLY)) != -1 && bluedev)\r
- {\r
- close(fd);\r
- snprintf(command, STRING_SIZE -1,\r
- "/usr/sbin/snort -c /etc/snort/snort.conf -D -u snort -g snort -d -e -o -p -b -A fast -m 022 -i %s",\r
- bluedev);\r
- safe_system(command);\r
- }\r
- if (restartorange && strlen(orangedev) && (fd = open(CONFIG_ROOT "/snort/enable_orange", O_RDONLY)) != -1 && orangedev)\r
- {\r
- close(fd);\r
- snprintf(command, STRING_SIZE -1,\r
- "/usr/sbin/snort -c /etc/snort/snort.conf -D -u snort -g snort -d -e -o -p -b -A fast -m 022 -i %s",\r
- orangedev);\r
- safe_system(command);\r
- }\r
- if (restartgreen && (fd = open(CONFIG_ROOT "/snort/enable_green", O_RDONLY)) != -1)\r
- {\r
- close(fd);\r
- snprintf(command, STRING_SIZE -1,\r
- "/usr/sbin/snort -c /etc/snort/snort.conf -D -u snort -g snort -d -e -o -p -b -A fast -m 022 -i %s",\r
- greendev);\r
- safe_system(command);\r
- }\r
-\r
- return 0;\r
-}\r
projects / people / pmueller / ipfire-2.x.git / commitdiff
