1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
|
/*
* ipforward value get function for solaris.
* Copyright (C) 1997 Kunihiro Ishiguro
*
* This file is part of GNU Zebra.
*
* GNU Zebra is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2, or (at your option) any
* later version.
*
* GNU Zebra is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with GNU Zebra; see the file COPYING. If not, write to the Free
* Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
* 02111-1307, USA.
*/
#include <zebra.h>
#include "log.h"
#include "prefix.h"
#include "privs.h"
#include "zebra/ipforward.h"
/*
** Solaris should define IP_DEV_NAME in <inet/ip.h>, but we'll save
** configure.in changes for another day. We can use the same device
** for both IPv4 and IPv6.
*/
/* #include <inet/ip.h> */
#ifndef IP_DEV_NAME
#define IP_DEV_NAME "/dev/ip"
#endif
extern struct zebra_privs_t zserv_privs;
/* This is a limited ndd style function that operates one integer
** value only. Errors return -1. ND_SET commands return 0 on
** success. ND_GET commands return the value on success (which could
** be -1 and be confused for an error). The parameter is the string
** name of the parameter being referenced.
*/
static int
solaris_nd(const int cmd, const char* parameter, const int value)
{
#define ND_BUFFER_SIZE 1024
int fd;
char nd_buf[ND_BUFFER_SIZE];
struct strioctl strioctl;
const char* device = IP_DEV_NAME;
int retval;
memset(nd_buf, '\0', ND_BUFFER_SIZE);
/*
** ND_SET takes a NULL delimited list of strings further terminated
** buy a NULL. ND_GET returns a list in a similar layout, although
** here we only use the first result.
*/
if (cmd == ND_SET)
snprintf(nd_buf, ND_BUFFER_SIZE, "%s%c%d%c", parameter, '\0', value,'\0');
else if (cmd == ND_GET)
snprintf(nd_buf, ND_BUFFER_SIZE, "%s", parameter);
else {
zlog_err("internal error - inappropriate command given to "
"solaris_nd()%s:%d", __FILE__, __LINE__);
return -1;
}
strioctl.ic_cmd = cmd;
strioctl.ic_timout = 0;
strioctl.ic_len = ND_BUFFER_SIZE;
strioctl.ic_dp = nd_buf;
if ( zserv_privs.change (ZPRIVS_RAISE) )
zlog_err ("solaris_nd: Can't raise privileges");
if ((fd = open (device, O_RDWR)) < 0)
{
zlog_warn("failed to open device %s - %s", device, safe_strerror(errno));
if ( zserv_privs.change (ZPRIVS_LOWER) )
zlog_err ("solaris_nd: Can't lower privileges");
return -1;
}
if (ioctl (fd, I_STR, &strioctl) < 0)
{
int save_errno = errno;
if ( zserv_privs.change (ZPRIVS_LOWER) )
zlog_err ("solaris_nd: Can't lower privileges");
close (fd);
zlog_warn("ioctl I_STR failed on device %s - %s",
device, safe_strerror(save_errno));
return -1;
}
close(fd);
if ( zserv_privs.change (ZPRIVS_LOWER) )
zlog_err ("solaris_nd: Can't lower privileges");
if (cmd == ND_GET)
{
errno = 0;
retval = atoi(nd_buf);
if (errno)
{
zlog_warn("failed to convert returned value to integer - %s",
safe_strerror(errno));
retval = -1;
}
}
else
{
retval = 0;
}
return retval;
}
static int
solaris_nd_set(const char* parameter, const int value) {
return solaris_nd(ND_SET, parameter, value);
}
static int
solaris_nd_get(const char* parameter) {
return solaris_nd(ND_GET, parameter, 0);
}
int
ipforward(void)
{
return solaris_nd_get("ip_forwarding");
}
int
ipforward_on (void)
{
(void) solaris_nd_set("ip_forwarding", 1);
return ipforward();
}
int
ipforward_off (void)
{
(void) solaris_nd_set("ip_forwarding", 0);
return ipforward();
}
#ifdef HAVE_IPV6
int ipforward_ipv6(void)
{
return solaris_nd_get("ip6_forwarding");
}
int
ipforward_ipv6_on (void)
{
(void) solaris_nd_set("ip6_forwarding", 1);
return ipforward_ipv6();
}
int
ipforward_ipv6_off (void)
{
(void) solaris_nd_set("ip6_forwarding", 0);
return ipforward_ipv6();
}
#endif /* HAVE_IPV6 */
|
