summaryrefslogtreecommitdiffstats
path: root/src/if.c
Commit message (Collapse)AuthorAge
* A belated welcome to 2021Roy Marples2021-01-31
|
* hooks: add NOCARRIER_ROAMING reasonRoy Marples2020-12-27
| | | | | | | | | | | | | | | | | | | | | This is given when the OS supports the concept of wireless roaming or the IP setup can be persisted when the carrier drops. When this happens, routes are moved to a higher metric (if supported) to support non preferred but non roaming routes. The `interface_order` hook variable will now order the interfaces according to priority and move roaming interfaces to the back of the list. If resolvconf is present then it is called with the -C option to deprecate DNS and if carrier comes back it is called again with the -c option to activate it once more. As part of this change, default route metrics have been changed to support a larger number of interfaces. base metric 1000 (was 200) wireless offset 2000 (was 100) IPv4LL offset 1000000 (was 10000) roaming offset 2000000
* BSD: LINK_UNKNOWN is traditionally treated as LINK_UPRoy Marples2020-10-16
|
* Linux: fix compileRoy Marples2020-10-07
|
* if: always log about unsupported interface types in debugRoy Marples2020-10-07
|
* dhcpcd: Simplify the link handling even moreRoy Marples2020-10-07
| | | | | | | Move the IS_LINK_UP macro to if_is_link_up function to reduce binary size. Rather than DHCPCD_LINK option controlling the carrier state, use it in if_is_link_up to determine the outcome.
* Wireless must be down if unknown.Roy Marples2020-10-06
|
* BSD: struct if_data->ifi_link_state is the single source of truthRoy Marples2020-09-28
| | | | | | | | | | | | | | | | | | | | | | | | Vastly improve and simplify link detection on BSD. dhcpcd either examines the whole system via getifaddrs(3) or reacts to events via route(4). In both cases we have struct if_data which has ifi_link_state. Armed with this knowledge, we no longer need SIOCGIFDATA or SIOCGIFMEDIA. To solve the issue of newly attached interfaces having LINK_STATE_UNKNOWN or some interfaces not even changing it, we only change the local knowledge of interface flags when reports them by getifaddrs(3) or route(4) when we change them. For example, if we set IFF_UP and it succeeds we don't set this internally until reported by the kernel as above. This keeps flags and link state in sync with each other. The hope is that the kernel can set the real link state before it reports IFF_UP. As such, we no longer require the poll option or need to enter a tight loop for old interfaces.
* if: Always warn about ignored interfaces.Roy Marples2020-09-23
|
* BSD: Detect initial link state in ifa_dataRoy Marples2020-09-22
| | | | | | | | | | | Not all interfaces report media state to get the link state. However, link state is available from getifaddrs(3) ifa_data for AF_LINK addresses. Testing shows that link state is also sent correctly via route(4) messages for the same interface. This makes pppoe(4) interfaces more reliable on FreeBSD and OpenBSD.
* Try and track link state better, regardless of if we're usingRoy Marples2020-09-21
| | | | the interface or not.
* Linux: detect network namespace and deny udev in oneRoy Marples2020-09-19
| | | | | | | | | | udev says whether an interface name is stable or not. In a network namespace, udev claims the interface does not exist. This makes sense because udev only operates in the root namespace. As such disable udev in a network namespace. While here correctly spell initialise.
* privsep: Fix prior for FreeBSD.Roy Marples2020-09-05
|
* if: introduce xsocketpair, similar to xsocketRoy Marples2020-09-05
| | | | | Old systems don't have SOCK_CLOEXEC, etc, this makes it easy. While here, right limit the sockets.
* Linux: restore fix when no address is returned by getifaddrs(3)Roy Marples2020-06-24
| | | | Suck sucky sucky, but it fixes PPP links again.
* linux: ignore unsupported interfaces by default, such as sit0Roy Marples2020-06-22
|
* dhcpcd: Add an option to poll the interface carrier stateRoy Marples2020-06-18
| | | | | Only to be used if the interface does not report carrier state changes for whatever reason.
* Linux: fix compile on old onesRoy Marples2020-06-10
|
* privsep: Limit rights generically rather than Capsicum specifcRoy Marples2020-06-05
| | | | | | | | | You never know when another sandbox tech comes around. While here, add limits for every socket in the unpriviledged processes. Some were absent before. Also, note that RLIMIT_NOFILE breaks our control socket so temporary disable that.
* privsep: Only use freeifaddrs if not using privsepRoy Marples2020-06-05
|
* Linux: make resource limits work by using getifaddrs over privsepRoy Marples2020-06-05
|
* Linux: resource limits don't easily work here either....Roy Marples2020-06-05
|
* OpenBSD: disable setting resource limits as we have pledge.Roy Marples2020-06-05
|
* if: Keep the PF_LINK socket open throughoutRoy Marples2020-06-05
| | | | Saves opening it and closing it each time we discover interfaces.
* Fix some clang analyzer issuesRoy Marples2020-05-30
|
* Solaris: driver names have numbersRoy Marples2020-05-29
| | | | So we can't use the BSD/Linux methodology
* Check AF_PACKET is definedRoy Marples2020-05-27
|
* Fix compile for prior on NetBSDRoy Marples2020-05-19
|
* privsep: Enable Capsicum for all processes.Roy Marples2020-05-19
| | | | | | | | | | | | | | | | | Except for the priviledged process. This is quite an in-depth change: * ARP is now one process per address * BPF flags are now returned via privsep * BPF write filters are locked when supported * The root process sends to the network The last step is done by opening RAW sockets and then sending a UDP header (where applicable) to avoid binding to an address which is already in use by the reader sockets. This is slightly wasteful for OS's without sandboxing but does have the very nice side effect of not needing a source address to unicast DHCPs replies from which makes the code smaller.
* privsep: Add a generic wrapper for getifaddrs(3)Roy Marples2020-05-13
| | | | | | | | Although this is only for Capsicum, the getifaddrs interface is quite portable although not POSIX. With this final change, the Master process can now enter Capsicum Capabilites Mode and this completes the Capsicum integration.
* privsep: Implement pledge(2) support as found on OpenBSDRoy Marples2020-05-10
|
* if: Be more descriptive on error for getifaddrsRoy Marples2020-05-07
|
* Remove unsed define.Roy Marples2020-04-23
|
* Rename ifp->family -> ifp->hwtype so it's less confusingRoy Marples2020-04-23
|
* if: ensure interface flags persist when setting a flagRoy Marples2020-04-20
| | | | Otherwise we stupidly drop IFF_MULTICAST on Linux.
* if: Decode vlid from the interface nameRoy Marples2020-02-15
| | | | This just clarifies the former fix
* if: . is part of the interface name, not an aliasRoy Marples2020-02-15
|
* net: If if_learnaddrs fails unexpectedly, log address and interfaceRoy Marples2020-02-14
| | | | This will greatly aid debugging.
* Be pedantic and move syslog.h into the right placeRoy Marples2020-02-11
|
* logerr: Use macros to call log functionsSergey Nikiforov2020-02-11
| | | | | | This allows downstream implementions to inject their own data into the log message and/or supply new logging targets whilst preserving macros such as __FILE__ and __LINE__.
* dhcpcd: randomise hardware address on start if no carrierRoy Marples2020-02-07
| | | | For more anonymity.
* compat: Fix a typo in pidfile when O_CLOEXEC is not definedPetr Gotthard2020-02-05
| | | | While here, include fcntl.h in if.c for older environments.
* if: decode XEN vif1.2 and xvif1i2 as vif1:2Roy Marples2020-02-04
|
* if: Don't use a variable length bufferRoy Marples2020-01-26
| | | | Otherwise SSP complains.
* if: Fix hardware address randomisationRoy Marples2020-01-15
| | | | And copy back the actual length of it, not the whole buffer.
* Implement Anonymity Profiles for DHCP Clients, RFC 7844Roy Marples2020-01-15
| | | | | | | | | | | | | | This works by randomising the hardware address when carrier is down and using this to construct a DUID LL which is used over any saved DUID. IAID is defaulted to zero and hostname + FQDN are disabled. Then every possible option is masked out except for essential ones. It's possible to request options *after* anonymous option which will enable it. This is RFC compliant and allows 100% flexability in letting the user decide what, if any, details leek out. This is disabled by default. Only works on NetBSD, other OS coming shortly.
* ioctl: The POSIX signature differs from BSD and glibcRoy Marples2020-01-08
| | | | | | | | | | BSD and glibc have the signature for request as unsigned long. musl and Solaris have a signed int. As such, we need to detect this at compile time and adjust the signature of our internal ioctl functions to match. To keep the onwire format the same, memcpy the request to the unsigned long request and back again, thus preserving the signedness.
* Welcome to 2020!Roy Marples2020-01-03
|
* privsep: Add support for priviledge separationRoy Marples2019-11-28
| | | | | | | | | | | | | | | | | | | | | | | | Not enabled by default - enable with ./configure --enable-privsep Requires a user added to the system - default _dhcpcd Several processes will be spawned off the main state engine: a privileged actioneer and a generic network proxy. Only the privileged actioneer process will retain root permissions. When required, the privileged actioneer will also spawn BPF listeners for BOOTP (DHCP) and ARP. The BOOTP BPF listener should be a short lived process. On kernels with RFC 5227 support, the ARP BPF listener will only be used for ARPing and announcing a preferred address and will also be a short lived process. When not running in master mode, an address listener will be spawned for each address (with the exception of RA dervived addresses) dhcpcd cares about. TODO: * Solaris support. * ARP BPF address filtering.
* BSD: Use IP_RECVIFRoy Marples2019-10-25
| | | | | | | | | IP_RECVIF is supported on all BSD platforms as well as Solaris, so it's more widely available than IP_PKTINFO. This allows us to ensure that all platforms can retrieve the receving interface from UDP network packets and thus make the code paths a lot easier.
generated by cgit v1.2.3 (git 2.25.1) at 2021-03-13 23:25:28 +0000