X-Git-Url: http://git.archive.openwrt.org/?p=project%2Ffirewall3.git;a=blobdiff_plain;f=utils.c;h=c9ca2069af832b8cd48b101623f69791367b86be;hp=9899d4d5d507471848cf0f16b6937f6e467bee82;hb=275a37dbf280bd471ebb2c673267c49a81071bbb;hpb=8fee8f9c520c58d07772cc6bd8f65d9eb1776a56

diff --git a/utils.c b/utils.c
index 9899d4d..c9ca206 100644
--- a/utils.c
+++ b/utils.c
@@ -19,6 +19,10 @@
 #include "utils.h"
 #include "options.h"
 
+#include "zones.h"
+#include "ipsets.h"
+
+
 static int lock_fd = -1;
 static pid_t pipe_pid = -1;
 static FILE *pipe_fd = NULL;
@@ -295,70 +299,187 @@ fw3_has_table(bool ipv6, const char *table)
 	return seen;
 }
 
+
 bool
-fw3_check_statefile(bool test_exists)
+fw3_lock(void)
 {
-	struct stat s;
+	lock_fd = open(FW3_LOCKFILE, O_CREAT|O_WRONLY, S_IRUSR|S_IWUSR);
 
-	if (!stat(FW3_STATEFILE, &s))
+	if (lock_fd < 0)
 	{
-		if (test_exists)
-			return true;
-
-		warn("The firewall appears to be started already. "
-			 "If it is indeed empty, remove the %s file and retry.",
-			 FW3_STATEFILE);
-
+		warn("Cannot create lock file %s: %s", FW3_LOCKFILE, strerror(errno));
 		return false;
 	}
-	else if (test_exists)
+
+	if (flock(lock_fd, LOCK_EX))
 	{
-		warn("The firewall appears to stopped already.");
+		warn("Cannot acquire exclusive lock: %s", strerror(errno));
 		return false;
 	}
 
-	lock_fd = open(FW3_STATEFILE, O_CREAT | O_RDWR);
+	return true;
+}
 
+void
+fw3_unlock(void)
+{
 	if (lock_fd < 0)
+		return;
+
+	if (flock(lock_fd, LOCK_UN))
+		warn("Cannot release exclusive lock: %s", strerror(errno));
+
+	close(lock_fd);
+	unlink(FW3_LOCKFILE);
+
+	lock_fd = -1;
+}
+
+
+bool
+fw3_read_statefile(void *state)
+{
+	FILE *sf;
+
+	int n, type;
+	char line[128];
+	const char *p, *name;
+
+	uint16_t flags[2];
+
+	struct fw3_state *s = state;
+	struct fw3_zone *zone;
+	struct fw3_ipset *ipset;
+
+	sf = fopen(FW3_STATEFILE, "r");
+
+	if (!sf)
+		return false;
+
+	while (fgets(line, sizeof(line), sf))
 	{
-		warn("Unable to create %s file", FW3_STATEFILE);
-		goto fail;
+		p = strtok(line, " \t\n");
+
+		if (!p)
+			continue;
+
+		type = strtoul(p, NULL, 10);
+		name = strtok(NULL, " \t\n");
+
+		if (!name)
+			continue;
+
+		for (n = 0, p = strtok(NULL, " \t\n");
+		     n < ARRAY_SIZE(flags) && p != NULL;
+		     n++, p = strtok(NULL, " \t\n"))
+		{
+			flags[n] = strtoul(p, NULL, 10);
+		}
+
+		switch (type)
+		{
+		case FW3_TYPE_DEFAULTS:
+			s->running_defaults.flags = flags[0];
+			break;
+
+		case FW3_TYPE_ZONE:
+			if (!(zone = fw3_lookup_zone(state, name, false)))
+			{
+				zone = fw3_alloc_zone();
+
+				if (!zone)
+					continue;
+
+				zone->name = strdup(name);
+				list_add_tail(&zone->list, &s->zones);
+			}
+
+			zone->src_flags = flags[0];
+			zone->dst_flags = flags[1];
+			list_add_tail(&zone->running_list, &s->running_zones);
+			break;
+
+		case FW3_TYPE_IPSET:
+			if (!(ipset = fw3_lookup_ipset(state, name, false)))
+			{
+				ipset = fw3_alloc_ipset();
+
+				if (!ipset)
+					continue;
+
+				ipset->name = strdup(name);
+				list_add_tail(&ipset->list, &s->ipsets);
+			}
+
+			ipset->flags = flags[0];
+			list_add_tail(&ipset->running_list, &s->running_ipsets);
+			break;
+		}
 	}
 
-	if (flock(lock_fd, LOCK_EX))
+	fclose(sf);
+
+	return true;
+}
+
+void
+fw3_write_statefile(void *state)
+{
+	FILE *sf;
+	struct fw3_state *s = state;
+	struct fw3_defaults *d = &s->defaults;
+	struct fw3_zone *z;
+	struct fw3_ipset *i;
+
+	int mask = (1 << FW3_FAMILY_V4) | (1 << FW3_FAMILY_V6);
+
+	if (!(d->flags & mask))
 	{
-		warn("Unable to acquire exclusive lock on %s file", FW3_STATEFILE);
-		goto fail;
+		if (unlink(FW3_STATEFILE))
+			warn("Unable to remove state %s: %s",
+			     FW3_STATEFILE, strerror(errno));
 
+		return;
 	}
 
-	return true;
+	sf = fopen(FW3_STATEFILE, "w");
 
-fail:
-	if (lock_fd > -1)
+	if (!sf)
 	{
-		close(lock_fd);
-		lock_fd = -1;
+		warn("Cannot create state %s: %s", FW3_STATEFILE, strerror(errno));
+		return;
 	}
 
-	return false;
-}
+	fprintf(sf, "%u - %u\n", FW3_TYPE_DEFAULTS, d->flags);
 
-void
-fw3_remove_statefile(void)
-{
-	if (lock_fd > -1)
-		fw3_close_statefile();
+	list_for_each_entry(z, &s->running_zones, running_list)
+	{
+		fprintf(sf, "%u %s %u %u\n", FW3_TYPE_ZONE,
+		        z->name, z->src_flags, z->dst_flags);
+	}
 
-	if (unlink(FW3_STATEFILE))
-		warn("Unable to delete %s file", FW3_STATEFILE);
+	list_for_each_entry(i, &s->running_ipsets, running_list)
+	{
+		fprintf(sf, "%u %s %u\n", FW3_TYPE_IPSET, i->name, i->flags);
+	}
+
+	fclose(sf);
 }
 
+
+struct object_list_heads
+{
+	struct list_head list;
+	struct list_head running_list;
+};
+
 void
-fw3_close_statefile(void)
+fw3_set_running(void *object, struct list_head *dest)
 {
-	flock(lock_fd, LOCK_UN);
-	close(lock_fd);
+	struct object_list_heads *o = object;
 
-	lock_fd = -1;
+	if (dest && !o->running_list.next)
+		list_add_tail(&o->running_list, dest);
+	else if (!dest && o->running_list.next)
+		list_del(&o->running_list);
 }