1 /* 2 * iptoken.c "ip token" 3 * 4 * This program is free software; you can redistribute it and/or 5 * modify it under the terms of the GNU General Public License 6 * as published by the Free Software Foundation; either version 7 * 2 of the License, or (at your option) any later version. 8 * 9 * Authors: Daniel Borkmann, <borkmann (at) redhat.com> 10 */ 11 12 #include <stdio.h> 13 #include <stdlib.h> 14 #include <stdbool.h> 15 #include <unistd.h> 16 #include <syslog.h> 17 #include <fcntl.h> 18 #include <string.h> 19 #include <sys/socket.h> 20 #include <netinet/in.h> 21 #include <netinet/ip.h> 22 #include <arpa/inet.h> 23 #include <linux/types.h> 24 #include <linux/if.h> 25 26 #include "rt_names.h" 27 #include "utils.h" 28 #include "ip_common.h" 29 30 extern struct rtnl_handle rth; 31 32 struct rtnl_dump_args { 33 FILE *fp; 34 int ifindex; 35 }; 36 37 static void usage(void) __attribute__((noreturn)); 38 39 static void usage(void) 40 { 41 fprintf(stderr, "Usage: ip token [ list | set | del | get ] [ TOKEN ] [ dev DEV ]\n"); 42 exit(-1); 43 } 44 45 static int print_token(const struct sockaddr_nl *who, struct nlmsghdr *n, void *arg) 46 { 47 struct rtnl_dump_args *args = arg; 48 FILE *fp = args->fp; 49 int ifindex = args->ifindex; 50 struct ifinfomsg *ifi = NLMSG_DATA(n); 51 int len = n->nlmsg_len; 52 struct rtattr *tb[IFLA_MAX + 1]; 53 struct rtattr *ltb[IFLA_INET6_MAX + 1]; 54 55 if (n->nlmsg_type != RTM_NEWLINK) 56 return -1; 57 58 len -= NLMSG_LENGTH(sizeof(*ifi)); 59 if (len < 0) 60 return -1; 61 62 if (ifi->ifi_family != AF_INET6) 63 return -1; 64 if (ifi->ifi_index == 0) 65 return -1; 66 if (ifindex > 0 && ifi->ifi_index != ifindex) 67 return 0; 68 if (ifi->ifi_flags & (IFF_LOOPBACK | IFF_NOARP)) 69 return 0; 70 71 parse_rtattr(tb, IFLA_MAX, IFLA_RTA(ifi), len); 72 if (!tb[IFLA_PROTINFO]) 73 return -1; 74 75 parse_rtattr_nested(ltb, IFLA_INET6_MAX, tb[IFLA_PROTINFO]); 76 if (!ltb[IFLA_INET6_TOKEN]) { 77 fprintf(stderr, "Seems there's no support for IPv6 token!\n"); 78 return -1; 79 } 80 81 fprintf(fp, "token %s dev %s\n", 82 format_host_rta(ifi->ifi_family, ltb[IFLA_INET6_TOKEN]), 83 ll_index_to_name(ifi->ifi_index)); 84 fflush(fp); 85 86 return 0; 87 } 88 89 static int iptoken_list(int argc, char **argv) 90 { 91 int af = AF_INET6; 92 struct rtnl_dump_args da = { .fp = stdout }; 93 94 while (argc > 0) { 95 if (strcmp(*argv, "dev") == 0) { 96 NEXT_ARG(); 97 if ((da.ifindex = ll_name_to_index(*argv)) == 0) 98 invarg("dev is invalid\n", *argv); 99 break; 100 } 101 argc--; argv++; 102 } 103 104 if (rtnl_wilddump_request(&rth, af, RTM_GETLINK) < 0) { 105 perror("Cannot send dump request"); 106 return -1; 107 } 108 109 if (rtnl_dump_filter(&rth, print_token, &da) < 0) { 110 fprintf(stderr, "Dump terminated\n"); 111 return -1; 112 } 113 114 return 0; 115 } 116 117 static int iptoken_set(int argc, char **argv, bool delete) 118 { 119 struct { 120 struct nlmsghdr n; 121 struct ifinfomsg ifi; 122 char buf[512]; 123 } req = { 124 .n.nlmsg_len = NLMSG_LENGTH(sizeof(struct ifinfomsg)), 125 .n.nlmsg_flags = NLM_F_REQUEST, 126 .n.nlmsg_type = RTM_SETLINK, 127 .ifi.ifi_family = AF_INET6, 128 }; 129 struct rtattr *afs, *afs6; 130 bool have_token = delete, have_dev = false; 131 inet_prefix addr = { .bytelen = 16, }; 132 133 while (argc > 0) { 134 if (strcmp(*argv, "dev") == 0) { 135 NEXT_ARG(); 136 if (!have_dev) { 137 if ((req.ifi.ifi_index = 138 ll_name_to_index(*argv)) == 0) 139 invarg("dev is invalid\n", *argv); 140 have_dev = true; 141 } 142 } else { 143 if (matches(*argv, "help") == 0) 144 usage(); 145 if (!have_token) { 146 get_prefix(&addr, *argv, req.ifi.ifi_family); 147 have_token = true; 148 } 149 } 150 argc--; argv++; 151 } 152 153 if (!have_token) { 154 fprintf(stderr, "Not enough information: token is required.\n"); 155 return -1; 156 } 157 if (!have_dev) { 158 fprintf(stderr, "Not enough information: \"dev\" argument is required.\n"); 159 return -1; 160 } 161 162 afs = addattr_nest(&req.n, sizeof(req), IFLA_AF_SPEC); 163 afs6 = addattr_nest(&req.n, sizeof(req), AF_INET6); 164 addattr_l(&req.n, sizeof(req), IFLA_INET6_TOKEN, 165 &addr.data, addr.bytelen); 166 addattr_nest_end(&req.n, afs6); 167 addattr_nest_end(&req.n, afs); 168 169 if (rtnl_talk(&rth, &req.n, NULL, 0) < 0) 170 return -2; 171 172 return 0; 173 } 174 175 int do_iptoken(int argc, char **argv) 176 { 177 ll_init_map(&rth); 178 179 if (argc < 1) { 180 return iptoken_list(0, NULL); 181 } else if (matches(argv[0], "list") == 0 || 182 matches(argv[0], "lst") == 0 || 183 matches(argv[0], "show") == 0) { 184 return iptoken_list(argc - 1, argv + 1); 185 } else if (matches(argv[0], "set") == 0 || 186 matches(argv[0], "add") == 0) { 187 return iptoken_set(argc - 1, argv + 1, false); 188 } else if (matches(argv[0], "delete") == 0) { 189 return iptoken_set(argc - 1, argv + 1, true); 190 } else if (matches(argv[0], "get") == 0) { 191 return iptoken_list(argc - 1, argv + 1); 192 } else if (matches(argv[0], "help") == 0) 193 usage(); 194 195 fprintf(stderr, "Command \"%s\" is unknown, try \"ip token help\".\n", *argv); 196 exit(-1); 197 } 198
