]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolved.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
3 This file is part of systemd.
5 Copyright 2014 Tom Gundersen <teg@jklm.no>
11 #include "capability-util.h"
13 #include "resolved-conf.h"
14 #include "resolved-manager.h"
15 #include "resolved-resolv-conf.h"
16 #include "selinux-util.h"
17 #include "signal-util.h"
18 #include "user-util.h"
20 int main(int argc
, char *argv
[]) {
21 _cleanup_(manager_freep
) Manager
*m
= NULL
;
22 const char *user
= "systemd-resolve";
27 log_set_target(LOG_TARGET_AUTO
);
28 log_parse_environment();
32 log_error("This program takes no arguments.");
39 r
= mac_selinux_init();
41 log_error_errno(r
, "SELinux setup failed: %m");
45 r
= get_user_creds(&user
, &uid
, &gid
, NULL
, NULL
);
47 log_error_errno(r
, "Cannot resolve user name %s: %m", user
);
51 /* Always create the directory where resolv.conf will live */
52 r
= mkdir_safe_label("/run/systemd/resolve", 0755, uid
, gid
, MKDIR_WARN_MODE
);
54 log_error_errno(r
, "Could not create runtime directory: %m");
58 /* Drop privileges, but only if we have been started as root. If we are not running as root we assume all
59 * privileges are already dropped. */
62 /* Drop privileges, but keep three caps. Note that we drop those too, later on (see below) */
63 r
= drop_privileges(uid
, gid
,
64 (UINT64_C(1) << CAP_NET_RAW
)| /* needed for SO_BINDTODEVICE */
65 (UINT64_C(1) << CAP_NET_BIND_SERVICE
)| /* needed to bind on port 53 */
66 (UINT64_C(1) << CAP_SETPCAP
) /* needed in order to drop the caps later */);
71 assert_se(sigprocmask_many(SIG_BLOCK
, NULL
, SIGTERM
, SIGINT
, SIGUSR1
, SIGUSR2
, SIGRTMIN
+1, -1) >= 0);
75 log_error_errno(r
, "Could not create manager: %m");
81 log_error_errno(r
, "Failed to start manager: %m");
85 /* Write finish default resolv.conf to avoid a dangling symlink */
86 (void) manager_write_resolv_conf(m
);
88 /* Let's drop the remaining caps now */
89 r
= capability_bounding_set_drop(0, true);
91 log_error_errno(r
, "Failed to drop remaining caps: %m");
97 "STATUS=Processing requests...");
99 r
= sd_event_loop(m
->event
);
101 log_error_errno(r
, "Event loop failed: %m");
105 sd_event_get_exit_code(m
->event
, &r
);
110 "STATUS=Shutting down...");
112 return r
< 0 ? EXIT_FAILURE
: EXIT_SUCCESS
;