Exit when we can't write to a configured pid file

This is probably what the user wants, according to 20119.

diff --git a/changes/feature20119_1 b/changes/feature20119_1
new file mode 100644 (file)
index 0000000..69914f2
--- /dev/null
+++ b/changes/feature20119_1
@@ -0,0 +1,3 @@
+  o Minor features (startup, safety):
+    - When configured to write a PID file, Tor now exits if it is unable to
+      do so.  Previously, it would warn and continue. Closes ticket 20119.

diff --git a/src/common/util.c b/src/common/util.c
index 31d42a3e5c1dc5ae69e98f621da9b83c1cea8b4b..36d0f4d0683b05ea7a06f40868bd88260e74bb27 100644 (file)
--- a/src/common/util.c
+++ b/src/common/util.c
@@ -3691,8 +3691,9 @@ finish_daemon(const char *cp)
 #endif
 
 /** Write the current process ID, followed by NL, into <b>filename</b>.
+ * Return 0 on success, -1 on failure.
  */
-void
+int
 write_pidfile(const char *filename)
 {
   FILE *pidfile;
@@ -3700,13 +3701,19 @@ write_pidfile(const char *filename)
   if ((pidfile = fopen(filename, "w")) == NULL) {
     log_warn(LD_FS, "Unable to open \"%s\" for writing: %s", filename,
              strerror(errno));
+    return -1;
   } else {
 #ifdef _WIN32
-    fprintf(pidfile, "%d\n", (int)_getpid());
+    int pid = (int)_getpid();
 #else
-    fprintf(pidfile, "%d\n", (int)getpid());
+    int pid = (int)getpid();
 #endif
-    fclose(pidfile);
+    int rv = 0;
+    if (fprintf(pidfile, "%d\n", pid) < 0)
+      rv = -1;
+    if (fclose(pidfile) < 0)
+      rv = -1;
+    return rv;
   }
 }
 

diff --git a/src/common/util.h b/src/common/util.h
index f50cf043a42906407172d786a38e99284b212223..073fb82aed7c2c78eaf19ab69a69fb9ca692521d 100644 (file)
--- a/src/common/util.h
+++ b/src/common/util.h
@@ -389,7 +389,7 @@ int path_is_relative(const char *filename);
 /* Process helpers */
 void start_daemon(void);
 void finish_daemon(const char *desired_cwd);
-void write_pidfile(const char *filename);
+int write_pidfile(const char *filename);
 
 /* Port forwarding */
 void tor_check_port_forwarding(const char *filename,

diff --git a/src/or/config.c b/src/or/config.c
index eb89d6f5eeb141cfc95c7a36651036e72ce6609b..872bbbd6467199a1ce60d0ab03f4e4db57c42377 100644 (file)
--- a/src/or/config.c
+++ b/src/or/config.c
@@ -1772,9 +1772,13 @@ options_act(const or_options_t *old_options)
   }
 
   /* Write our PID to the PID file. If we do not have write permissions we
-   * will log a warning */
+   * will log a warning and exit. */
   if (options->PidFile && !sandbox_is_active()) {
-    write_pidfile(options->PidFile);
+    if (write_pidfile(options->PidFile) < 0) {
+      log_err(LD_CONFIG, "Unable to write PIDFile %s",
+              escaped(options->PidFile));
+      return -1;
+    }
   }
 
   /* Register addressmap directives */