# HG changeset patch
# User Roy Marples <roy@marples.name>
# Date 1597937327 -3600
# Node ID 9edfc000a89b677781d679b381d614eeb0c9cf8d
# Parent  28a650d9372968e04fe8383218a697039598103b
privsep: Only the master process accepts signals

The master process dictates when processes should stop, which
allows for a clean shutdown when the admin issues `pkill dhcpcd`.

diff -r 28a650d93729 -r 9edfc000a89b src/eloop.c
--- a/src/eloop.c	Thu Aug 20 16:09:53 2020 +0100
+++ b/src/eloop.c	Thu Aug 20 16:28:47 2020 +0100
@@ -703,9 +703,10 @@
 		if (eloop->exitnow)
 			break;
 
-		if (_eloop_nsig != 0 && eloop->signal_cb != NULL) {
+		if (_eloop_nsig != 0) {
 			n = _eloop_sig[--_eloop_nsig];
-			eloop->signal_cb(n, eloop->signal_cb_ctx);
+			if (eloop->signal_cb != NULL)
+				eloop->signal_cb(n, eloop->signal_cb_ctx);
 			continue;
 		}
 
diff -r 28a650d93729 -r 9edfc000a89b src/privsep-bpf.c
--- a/src/privsep-bpf.c	Thu Aug 20 16:09:53 2020 +0100
+++ b/src/privsep-bpf.c	Thu Aug 20 16:28:47 2020 +0100
@@ -40,7 +40,6 @@
 #include <assert.h>
 #include <pwd.h>
 #include <errno.h>
-#include <signal.h>
 #include <stdlib.h>
 #include <string.h>
 #include <unistd.h>
@@ -170,17 +169,6 @@
 	return -1;
 }
 
-static void
-ps_bpf_signal_bpfcb(int sig, void *arg)
-{
-	struct dhcpcd_ctx *ctx = arg;
-
-	if (sig != SIGTERM)
-		return;
-
-	eloop_exit(ctx->eloop, EXIT_SUCCESS);
-}
-
 ssize_t
 ps_bpf_cmd(struct dhcpcd_ctx *ctx, struct ps_msghdr *psm, struct msghdr *msg)
 {
@@ -249,7 +237,7 @@
 	start = ps_dostart(ctx,
 	    &psp->psp_pid, &psp->psp_fd,
 	    ps_bpf_recvmsg, NULL, psp,
-	    ps_bpf_start_bpf, ps_bpf_signal_bpfcb,
+	    ps_bpf_start_bpf, NULL,
 	    PSF_DROPPRIVS);
 	switch (start) {
 	case -1:
diff -r 28a650d93729 -r 9edfc000a89b src/privsep-control.c
--- a/src/privsep-control.c	Thu Aug 20 16:09:53 2020 +0100
+++ b/src/privsep-control.c	Thu Aug 20 16:28:47 2020 +0100
@@ -27,7 +27,6 @@
  */
 
 #include <errno.h>
-#include <signal.h>
 #include <stdlib.h>
 #include <string.h>
 
@@ -95,18 +94,6 @@
 		logerr(__func__);
 }
 
-static void
-ps_ctl_signalcb(int sig, void *arg)
-{
-	struct dhcpcd_ctx *ctx = arg;
-
-	if (sig != SIGTERM)
-		return;
-
-	shutdown(ctx->ps_control_fd, SHUT_RDWR);
-	eloop_exit(ctx->eloop, EXIT_SUCCESS);
-}
-
 ssize_t
 ps_ctl_handleargs(struct fd_list *fd, char *data, size_t len)
 {
@@ -251,7 +238,7 @@
 
 	pid = ps_dostart(ctx, &ctx->ps_control_pid, &ctx->ps_control_fd,
 	    ps_ctl_recvmsg, ps_ctl_dodispatch, ctx,
-	    ps_ctl_startcb, ps_ctl_signalcb,
+	    ps_ctl_startcb, NULL,
 	    PSF_DROPPRIVS);
 
 	if (pid == -1)
diff -r 28a650d93729 -r 9edfc000a89b src/privsep-inet.c
--- a/src/privsep-inet.c	Thu Aug 20 16:09:53 2020 +0100
+++ b/src/privsep-inet.c	Thu Aug 20 16:28:47 2020 +0100
@@ -34,7 +34,6 @@
 
 #include <assert.h>
 #include <errno.h>
-#include <signal.h>
 #include <stdlib.h>
 #include <string.h>
 #include <unistd.h>
@@ -291,18 +290,6 @@
 		logerr(__func__);
 }
 
-static void
-ps_inet_signalcb(int sig, void *arg)
-{
-	struct dhcpcd_ctx *ctx = arg;
-
-	if (sig != SIGTERM)
-		return;
-
-	shutdown(ctx->ps_inet_fd, SHUT_RDWR);
-	eloop_exit(ctx->eloop, EXIT_SUCCESS);
-}
-
 ssize_t
 ps_inet_dispatch(void *arg, struct ps_msghdr *psm, struct msghdr *msg)
 {
@@ -347,7 +334,7 @@
 
 	pid = ps_dostart(ctx, &ctx->ps_inet_pid, &ctx->ps_inet_fd,
 	    ps_inet_recvmsg, ps_inet_dodispatch, ctx,
-	    ps_inet_startcb, ps_inet_signalcb,
+	    ps_inet_startcb, NULL,
 	    PSF_DROPPRIVS);
 
 #ifdef HAVE_CAPSICUM
@@ -576,7 +563,7 @@
 	start = ps_dostart(ctx,
 	    &psp->psp_pid, &psp->psp_fd,
 	    ps_inet_recvmsgpsp, NULL, psp,
-	    start_func, ps_inet_signalcb,
+	    start_func, NULL,
 	    PSF_DROPPRIVS);
 	switch (start) {
 	case -1:
diff -r 28a650d93729 -r 9edfc000a89b src/privsep-root.c
--- a/src/privsep-root.c	Thu Aug 20 16:09:53 2020 +0100
+++ b/src/privsep-root.c	Thu Aug 20 16:28:47 2020 +0100
@@ -693,22 +693,14 @@
 }
 
 static void
-ps_root_signalcb(int sig, void *arg)
+ps_root_signalcb(int sig, __unused void *arg)
 {
-	struct dhcpcd_ctx *ctx = arg;
 
 	if (sig == SIGCHLD) {
 		while (waitpid(-1, NULL, WNOHANG) > 0)
 			;
 		return;
 	}
-
-	if (sig != SIGTERM)
-		return;
-
-	shutdown(ctx->ps_root_fd, SHUT_RDWR);
-	shutdown(ctx->ps_data_fd, SHUT_RDWR);
-	eloop_exit(ctx->eloop, EXIT_SUCCESS);
 }
 
 int (*handle_interface)(void *, int, const char *);
diff -r 28a650d93729 -r 9edfc000a89b src/privsep.c
--- a/src/privsep.c	Thu Aug 20 16:09:53 2020 +0100
+++ b/src/privsep.c	Thu Aug 20 16:28:47 2020 +0100
@@ -34,6 +34,7 @@
  * Spawn an unpriv process to send/receive common network data.
  * Then drop all privs and start running.
  * Every process aside from the privileged actioneer is chrooted.
+ * All privsep processes ignore signals - only the master process accepts them.
  *
  * dhcpcd will maintain the config file in the chroot, no need to handle
  * this in a script or something.