Do user switch after SSL keys are initialized
[umurmur.git] / src / main.c
index 344f6bd88af326437ac54cda453294293ff6f487..d98fb6aca3a89b42fa3d4fbe2d21d51cd74208ec 100644 (file)
@@ -1,5 +1,5 @@
-/* Copyright (C) 2009-2012, Martin Johansson <martin@fatbob.nu>
-   Copyright (C) 2005-2012, Thorvald Natvig <thorvald@natvig.com>
+/* Copyright (C) 2009-2014, Martin Johansson <martin@fatbob.nu>
+   Copyright (C) 2005-2014, Thorvald Natvig <thorvald@natvig.com>
 
    All rights reserved.
 
 #include "client.h"
 #include "conf.h"
 #include "version.h"
+#include "config.h"
+#include "sharedmemory.h"
+#include "ban.h"
 
 char system_string[64], version_string[64];
 int bindport;
+int bindport6;
 char *bindaddr;
+char *bindaddr6;
 
 void lockfile(const char *pidfile)
 {
@@ -68,7 +73,7 @@ void lockfile(const char *pidfile)
         * unmodified if we cannot lock it.
         */
        lfp = open(pidfile, O_WRONLY|O_CREAT, 0640);
-       
+
        if (lfp < 0)
                Log_fatal("Cannot open PID-file %s for writing", pidfile);
 
@@ -152,33 +157,33 @@ static void switch_user(void)
 
        if (setuid(pwd->pw_uid))
                Log_fatal("setuid() failed: %s", strerror(errno));
-       
+
        if (!grp)
                grp = getgrgid(gid);
        if (!grp)
                Log_fatal("getgrgid() failed: %s", strerror(errno));
-       
+
        Log_info("Switch to user '%s' group '%s'", pwd->pw_name, grp->gr_name);
 }
 
 void signal_handler(int sig)
 {
        switch(sig) {
-       case SIGHUP:
-               Log_info("HUP signal received.");
-               Log_reset();
-               break;
-       case SIGTERM:
-               Log_info("TERM signal. Shutting down.");
-               Server_shutdown();
-               break;
+               case SIGHUP:
+                       Log_info("HUP signal received.");
+                       Log_reset();
+                       break;
+               case SIGTERM:
+                       Log_info("TERM signal. Shutting down.");
+                       Server_shutdown();
+                       break;
        }
 }
 
 void daemonize()
 {
        int i;
-       
+
        if (getppid() == 1)
                return; /* already a daemon */
        i = fork();
@@ -188,19 +193,23 @@ void daemonize()
        }
        if ( i > 0)
                exit(0); /* parent exits */
-       
+
        /* child (daemon) continues */
        setsid(); /* obtain a new process group */
        for (i = getdtablesize(); i >= 0; --i)
                close(i); /* close all descriptors */
-       
+
+#ifdef USE_GNUTLS
+        gnutls_global_init();
+#endif
+
        i = open("/dev/null",O_RDWR);
        (void)dup(i);
        (void)dup(i);
-       
+
        umask(027); /* set newly created file permissions */
        (void)chdir("/");
-               
+
 }
 
 #ifdef POSIX_PRIORITY_SCHEDULING
@@ -220,7 +229,7 @@ void setscheduler()
 void printhelp()
 {
        printf("uMurmur version %s ('%s'). Mumble protocol %d.%d.%d\n", UMURMUR_VERSION,
-              UMURMUR_CODENAME, PROTVER_MAJOR, PROTVER_MINOR, PROTVER_PATCH);
+               UMURMUR_CODENAME, PROTVER_MAJOR, PROTVER_MINOR, PROTVER_PATCH);
        printf("Usage: umurmurd [-d] [-r] [-h] [-p <pidfile>] [-t] [-c <conf file>] [-a <addr>] [-b <port>]\n");
        printf("       -d             - Do not daemonize - run in foreground.\n");
 #ifdef POSIX_PRIORITY_SCHEDULING
@@ -230,7 +239,9 @@ void printhelp()
        printf("       -c <conf file> - Specify configuration file (default %s)\n", DEFAULT_CONFIG);
        printf("       -t             - Test config. Error message to stderr + non-zero exit code on error\n");
        printf("       -a <address>   - Bind to IP address\n");
+       printf("       -A <address>   - Bind to IPv6 address\n");
        printf("       -b <port>      - Bind to port\n");
+       printf("       -B <port>      - Bind to port (IPv6)\n");
        printf("       -h             - Print this help\n");
        exit(0);
 }
@@ -245,115 +256,128 @@ int main(int argc, char **argv)
        char *conffile = NULL, *pidfile = NULL;
        int c;
        struct utsname utsbuf;
-       
+
        /* Arguments */
 #ifdef POSIX_PRIORITY_SCHEDULING
-       while ((c = getopt(argc, argv, "drp:c:a:b:ht")) != EOF) {
+       while ((c = getopt(argc, argv, "drp:c:a:A:b:B:ht")) != EOF) {
 #else
-       while ((c = getopt(argc, argv, "dp:c:a:b:ht")) != EOF) {
+               while ((c = getopt(argc, argv, "dp:c:a:A:b:B:ht")) != EOF) {
 #endif
-               switch(c) {
-               case 'c':
-                       conffile = optarg;
-                       break;
-               case 'p':
-                       pidfile = optarg;
-                       break;
-               case 'a':
-                       bindaddr = optarg;
-                       break;
-               case 'b':
-                       bindport = atoi(optarg);
-                       break;
-               case 'd':
-                       nodaemon = true;
-                       break;
-               case 'h':
-                       printhelp();
-                       break;
-               case 't':
-                       testconfig = true;
-                       break;
+                       switch(c) {
+                               case 'c':
+                                       conffile = optarg;
+                                       break;
+                               case 'p':
+                                       pidfile = optarg;
+                                       break;
+                               case 'a':
+                                       bindaddr = optarg;
+                                       break;
+                               case 'A':
+                                       bindaddr6 = optarg;
+                                       break;
+                               case 'b':
+                                       bindport = atoi(optarg);
+                                       break;
+                               case 'B':
+                                       bindport6 = atoi(optarg);
+                                       break;
+                               case 'd':
+                                       nodaemon = true;
+                                       break;
+                               case 'h':
+                                       printhelp();
+                                       break;
+                               case 't':
+                                       testconfig = true;
+                                       break;
 #ifdef POSIX_PRIORITY_SCHEDULING
-               case 'r':
-                       realtime = true;
-                       break;
+                               case 'r':
+                                       realtime = true;
+                                       break;
 #endif
-               default:
-                       fprintf(stderr, "Unrecognized option\n");
-                       printhelp();
-                       break;
+                               default:
+                                       fprintf(stderr, "Unrecognized option\n");
+                                       printhelp();
+                                       break;
+                       }
                }
-       }
 
-       if (testconfig) {
-               if (!Conf_ok(conffile))
-                       exit(1);
-               else
-                       exit(0);
-       }
-               
-       /* Initialize the config subsystem early;
-        * switch_user() will need to read some config variables as well as logging.
-        */
-       Conf_init(conffile);
-       
-       /* Logging to terminal if not daemonizing, otherwise to syslog or log file.
-        */
-       if (!nodaemon) {
-               daemonize();
-               Log_init(false);
-               if (pidfile != NULL)
-                       lockfile(pidfile);
+               if (testconfig) {
+                       if (!Conf_ok(conffile))
+                               exit(1);
+                       else
+                               exit(0);
+               }
 
-               switch_user();
+               /* Initialize the config subsystem early;
+                * switch_user() will need to read some config variables as well as logging.
+                */
+               Conf_init(conffile);
+
+               /* Logging to terminal if not daemonizing, otherwise to syslog or log file.
+               */
+               if (!nodaemon) {
+                       daemonize();
+                       Log_init(false);
+                       if (pidfile != NULL)
+                               lockfile(pidfile);
+               }
+               else Log_init(true);
+
+               signal(SIGCHLD, SIG_IGN); /* ignore child */
+               signal(SIGTSTP, SIG_IGN); /* ignore tty signals */
+               signal(SIGTTOU, SIG_IGN);
+               signal(SIGTTIN, SIG_IGN);
+               signal(SIGPIPE, SIG_IGN);
+               signal(SIGHUP, signal_handler); /* catch hangup signal */
+               signal(SIGTERM, signal_handler); /* catch kill signal */
+
+               /* Build system string */
+               if (uname(&utsbuf) == 0) {
+                       snprintf(system_string, 64, "%s %s", utsbuf.sysname, utsbuf.machine);
+                       snprintf(version_string, 64, "%s", utsbuf.release);
+               }
+               else {
+                       snprintf(system_string, 64, "unknown unknown");
+                       snprintf(version_string, 64, "unknown");
+               }
 
+               /* Initializing */
+               SSLi_init();
+               Chan_init();
+               Client_init();
+               Ban_init();
+
+#ifdef USE_SHAREDMEMORY_API
+    Sharedmemory_init( bindport, bindport6 );
+#endif
+
+#ifdef POSIX_PRIORITY_SCHEDULING
+               if (realtime)
+                       setscheduler();
+#endif
+
+               switch_user();
                /* Reopen log file. If user switch results in access denied, we catch
                 * it early.
                 */
-               Log_reset(); 
-       }
-       else Log_init(true);
-       
-       signal(SIGCHLD, SIG_IGN); /* ignore child */
-       signal(SIGTSTP, SIG_IGN); /* ignore tty signals */
-       signal(SIGTTOU, SIG_IGN);
-       signal(SIGTTIN, SIG_IGN);
-       signal(SIGPIPE, SIG_IGN);
-       signal(SIGHUP, signal_handler); /* catch hangup signal */
-       signal(SIGTERM, signal_handler); /* catch kill signal */
-       
-       /* Build system string */
-       if (uname(&utsbuf) == 0) {
-               snprintf(system_string, 64, "%s %s", utsbuf.sysname, utsbuf.machine);
-               snprintf(version_string, 64, "%s", utsbuf.release);
-       }
-       else {
-               snprintf(system_string, 64, "unknown unknown");
-               snprintf(version_string, 64, "unknown");
-       }
-       
-       /* Initializing */
-       SSLi_init();
-       Chan_init();
-       Client_init();
-       Ban_init();
+               Log_reset();
 
-#ifdef POSIX_PRIORITY_SCHEDULING
-       if (realtime)
-               setscheduler();
+               Server_run();
+
+#ifdef USE_SHAREDMEMORY_API
+    Sharedmemory_deinit();
 #endif
-       
-       Server_run();
-       
-       Ban_deinit();
-       SSLi_deinit();
-       Chan_free();
-       Log_free();
-       Conf_deinit();
-       
-       if (pidfile != NULL)
-               unlink(pidfile);
-       
-       return 0;
-}
+
+               Ban_deinit();
+               SSLi_deinit();
+               Chan_free();
+               Log_free();
+               Conf_deinit();
+
+               if (pidfile != NULL)
+                       unlink(pidfile);
+
+               return 0;
+       }