src/network/networkd.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2 /***
   3   This file is part of systemd.
   4
   5   Copyright 2013 Tom Gundersen <teg@jklm.no>
   6
   7   systemd is free software; you can redistribute it and/or modify it
   8   under the terms of the GNU Lesser General Public License as published by
   9   the Free Software Foundation; either version 2.1 of the License, or
  10   (at your option) any later version.
  11
  12   systemd is distributed in the hope that it will be useful, but
  13   WITHOUT ANY WARRANTY; without even the implied warranty of
  14   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  15   Lesser General Public License for more details.
  16
  17   You should have received a copy of the GNU Lesser General Public License
  18   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  19 ***/
  20
  21 #include "sd-daemon.h"
  22 #include "sd-event.h"
  23
  24 #include "capability-util.h"
  25 #include "networkd-conf.h"
  26 #include "networkd-manager.h"
  27 #include "signal-util.h"
  28 #include "user-util.h"
  29
  30 int main(int argc, char *argv[]) {
  31         sd_event *event = NULL;
  32         _cleanup_manager_free_ Manager *m = NULL;
  33         const char *user = "systemd-network";
  34         uid_t uid;
  35         gid_t gid;
  36         int r;
  37
  38         log_set_target(LOG_TARGET_AUTO);
  39         log_parse_environment();
  40         log_open();
  41
  42         umask(0022);
  43
  44         if (argc != 1) {
  45                 log_error("This program takes no arguments.");
  46                 r = -EINVAL;
  47                 goto out;
  48         }
  49
  50         r = get_user_creds(&user, &uid, &gid, NULL, NULL);
  51         if (r < 0) {
  52                 log_error_errno(r, "Cannot resolve user name %s: %m", user);
  53                 goto out;
  54         }
  55
  56         /* Always create the directories people can create inotify
  57          * watches in. */
  58         r = mkdir_safe_label("/run/systemd/netif", 0755, uid, gid, false);
  59         if (r < 0)
  60                 log_warning_errno(r, "Could not create runtime directory: %m");
  61
  62         r = mkdir_safe_label("/run/systemd/netif/links", 0755, uid, gid, false);
  63         if (r < 0)
  64                 log_warning_errno(r, "Could not create runtime directory 'links': %m");
  65
  66         r = mkdir_safe_label("/run/systemd/netif/leases", 0755, uid, gid, false);
  67         if (r < 0)
  68                 log_warning_errno(r, "Could not create runtime directory 'leases': %m");
  69
  70         r = mkdir_safe_label("/run/systemd/netif/lldp", 0755, uid, gid, false);
  71         if (r < 0)
  72                 log_warning_errno(r, "Could not create runtime directory 'lldp': %m");
  73
  74         /* Drop privileges, but only if we have been started as root. If we are not running as root we assume all
  75          * privileges are already dropped. */
  76         if (geteuid() == 0) {
  77                 r = drop_privileges(uid, gid,
  78                                     (1ULL << CAP_NET_ADMIN) |
  79                                     (1ULL << CAP_NET_BIND_SERVICE) |
  80                                     (1ULL << CAP_NET_BROADCAST) |
  81                                     (1ULL << CAP_NET_RAW));
  82                 if (r < 0)
  83                         goto out;
  84         }
  85
  86         assert_se(sigprocmask_many(SIG_BLOCK, NULL, SIGTERM, SIGINT, -1) >= 0);
  87
  88         r = sd_event_default(&event);
  89         if (r < 0)
  90                 goto out;
  91
  92         sd_event_set_watchdog(event, true);
  93         sd_event_add_signal(event, NULL, SIGTERM, NULL, NULL);
  94         sd_event_add_signal(event, NULL, SIGINT, NULL, NULL);
  95
  96         r = manager_new(&m, event);
  97         if (r < 0) {
  98                 log_error_errno(r, "Could not create manager: %m");
  99                 goto out;
 100         }
 101
 102         r = manager_connect_bus(m);
 103         if (r < 0) {
 104                 log_error_errno(r, "Could not connect to bus: %m");
 105                 goto out;
 106         }
 107
 108         r = manager_parse_config_file(m);
 109         if (r < 0)
 110                 log_warning_errno(r, "Failed to parse configuration file: %m");
 111
 112         r = manager_load_config(m);
 113         if (r < 0) {
 114                 log_error_errno(r, "Could not load configuration files: %m");
 115                 goto out;
 116         }
 117
 118         r = manager_rtnl_enumerate_links(m);
 119         if (r < 0) {
 120                 log_error_errno(r, "Could not enumerate links: %m");
 121                 goto out;
 122         }
 123
 124         r = manager_rtnl_enumerate_addresses(m);
 125         if (r < 0) {
 126                 log_error_errno(r, "Could not enumerate addresses: %m");
 127                 goto out;
 128         }
 129
 130         r = manager_rtnl_enumerate_routes(m);
 131         if (r < 0) {
 132                 log_error_errno(r, "Could not enumerate routes: %m");
 133                 goto out;
 134         }
 135
 136         r = manager_rtnl_enumerate_rules(m);
 137         if (r < 0) {
 138                 log_error_errno(r, "Could not enumerate rules: %m");
 139                 goto out;
 140         }
 141
 142         r = manager_start(m);
 143         if (r < 0) {
 144                 log_error_errno(r, "Could not start manager: %m");
 145                 goto out;
 146         }
 147
 148         log_info("Enumeration completed");
 149
 150         sd_notify(false,
 151                   "READY=1\n"
 152                   "STATUS=Processing requests...");
 153
 154         r = sd_event_loop(event);
 155         if (r < 0) {
 156                 log_error_errno(r, "Event loop failed: %m");
 157                 goto out;
 158         }
 159 out:
 160         sd_notify(false,
 161                   "STOPPING=1\n"
 162                   "STATUS=Shutting down...");
 163
 164         sd_event_unref(event);
 165
 166         return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
 167 }