2 * firewall3 - 3rd OpenWrt UCI firewall implementation
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
22 const struct fw3_option fw3_include_opts[] = {
23 FW3_OPT("enabled", bool, include, enabled),
25 FW3_OPT("path", string, include, path),
26 FW3_OPT("type", include_type, include, type),
27 FW3_OPT("family", family, include, family),
34 fw3_load_includes(struct fw3_state *state, struct uci_package *p)
36 struct uci_section *s;
37 struct uci_element *e;
38 struct fw3_include *include;
40 INIT_LIST_HEAD(&state->includes);
42 uci_foreach_element(&p->sections, e)
44 s = uci_to_section(e);
46 if (strcmp(s->type, "include"))
49 include = malloc(sizeof(*include));
54 memset(include, 0, sizeof(*include));
56 include->name = e->name;
57 include->enabled = true;
59 fw3_parse_options(include, fw3_include_opts, s);
61 if (!include->enabled)
63 fw3_free_include(include);
69 warn_elem(e, "must specify a path");
70 fw3_free_include(include);
74 if (include->type == FW3_INC_TYPE_RESTORE && !include->family)
75 warn_elem(e, "does not specify a family, include will get loaded "
76 "with both iptables-restore and ip6tables-restore!");
78 list_add_tail(&include->list, &state->includes);
85 print_include(enum fw3_family family, struct fw3_include *include)
90 if (!fw3_is_family(include, family))
93 info(" * Loading include '%s'", include->path);
95 if (!(f = fopen(include->path, "r")))
97 info(" ! Skipping due to open error: %s", strerror(errno));
101 while (fgets(line, sizeof(line), f))
108 fw3_print_includes(enum fw3_family family, struct fw3_state *state)
110 struct fw3_include *include;
112 list_for_each_entry(include, &state->includes, list)
113 if (include->type == FW3_INC_TYPE_RESTORE)
114 print_include(family, include);
119 run_include(struct fw3_include *include)
125 "echo \"You cannot use UCI in firewall includes!\" >&2; "
129 char buf[PATH_MAX + sizeof(tmpl)];
131 info(" * Running script '%s'", include->path);
133 if (stat(include->path, &s))
135 info(" ! Skipping due to path error: %s", strerror(errno));
139 snprintf(buf, sizeof(buf), tmpl, include->path);
143 info(" ! Failed with exit code %u", WEXITSTATUS(rv));
147 fw3_run_includes(struct fw3_state *state)
149 struct fw3_include *include;
151 list_for_each_entry(include, &state->includes, list)
152 if (include->type == FW3_INC_TYPE_SCRIPT)
153 run_include(include);