driver_privsep.c 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874
  1. /*
  2. * WPA Supplicant - privilege separated driver interface
  3. * Copyright (c) 2007-2009, Jouni Malinen <j@w1.fi>
  4. *
  5. * This program is free software; you can redistribute it and/or modify
  6. * it under the terms of the GNU General Public License version 2 as
  7. * published by the Free Software Foundation.
  8. *
  9. * Alternatively, this software may be distributed under the terms of BSD
  10. * license.
  11. *
  12. * See README and COPYING for more details.
  13. */
  14. #include "includes.h"
  15. #include <sys/un.h>
  16. #include "common.h"
  17. #include "driver.h"
  18. #include "eloop.h"
  19. #include "privsep_commands.h"
  20. struct wpa_driver_privsep_data {
  21. void *ctx;
  22. u8 own_addr[ETH_ALEN];
  23. int priv_socket;
  24. char *own_socket_path;
  25. int cmd_socket;
  26. char *own_cmd_path;
  27. struct sockaddr_un priv_addr;
  28. char ifname[16];
  29. };
  30. static int wpa_priv_reg_cmd(struct wpa_driver_privsep_data *drv, int cmd)
  31. {
  32. int res;
  33. res = sendto(drv->priv_socket, &cmd, sizeof(cmd), 0,
  34. (struct sockaddr *) &drv->priv_addr,
  35. sizeof(drv->priv_addr));
  36. if (res < 0)
  37. perror("sendto");
  38. return res < 0 ? -1 : 0;
  39. }
  40. static int wpa_priv_cmd(struct wpa_driver_privsep_data *drv, int cmd,
  41. const void *data, size_t data_len,
  42. void *reply, size_t *reply_len)
  43. {
  44. struct msghdr msg;
  45. struct iovec io[2];
  46. io[0].iov_base = &cmd;
  47. io[0].iov_len = sizeof(cmd);
  48. io[1].iov_base = (u8 *) data;
  49. io[1].iov_len = data_len;
  50. os_memset(&msg, 0, sizeof(msg));
  51. msg.msg_iov = io;
  52. msg.msg_iovlen = data ? 2 : 1;
  53. msg.msg_name = &drv->priv_addr;
  54. msg.msg_namelen = sizeof(drv->priv_addr);
  55. if (sendmsg(drv->cmd_socket, &msg, 0) < 0) {
  56. perror("sendmsg(cmd_socket)");
  57. return -1;
  58. }
  59. if (reply) {
  60. fd_set rfds;
  61. struct timeval tv;
  62. int res;
  63. FD_ZERO(&rfds);
  64. FD_SET(drv->cmd_socket, &rfds);
  65. tv.tv_sec = 5;
  66. tv.tv_usec = 0;
  67. res = select(drv->cmd_socket + 1, &rfds, NULL, NULL, &tv);
  68. if (res < 0 && errno != EINTR) {
  69. perror("select");
  70. return -1;
  71. }
  72. if (FD_ISSET(drv->cmd_socket, &rfds)) {
  73. res = recv(drv->cmd_socket, reply, *reply_len, 0);
  74. if (res < 0) {
  75. perror("recv");
  76. return -1;
  77. }
  78. *reply_len = res;
  79. } else {
  80. wpa_printf(MSG_DEBUG, "PRIVSEP: Timeout while waiting "
  81. "for reply (cmd=%d)", cmd);
  82. return -1;
  83. }
  84. }
  85. return 0;
  86. }
  87. static int wpa_driver_privsep_set_wpa(void *priv, int enabled)
  88. {
  89. struct wpa_driver_privsep_data *drv = priv;
  90. wpa_printf(MSG_DEBUG, "%s: enabled=%d", __func__, enabled);
  91. return wpa_priv_cmd(drv, PRIVSEP_CMD_SET_WPA, &enabled,
  92. sizeof(enabled), NULL, NULL);
  93. }
  94. static int wpa_driver_privsep_scan(void *priv, const u8 *ssid, size_t ssid_len)
  95. {
  96. struct wpa_driver_privsep_data *drv = priv;
  97. wpa_printf(MSG_DEBUG, "%s: priv=%p", __func__, priv);
  98. return wpa_priv_cmd(drv, PRIVSEP_CMD_SCAN, ssid, ssid_len,
  99. NULL, NULL);
  100. }
  101. static struct wpa_scan_results *
  102. wpa_driver_privsep_get_scan_results2(void *priv)
  103. {
  104. struct wpa_driver_privsep_data *drv = priv;
  105. int res, num;
  106. u8 *buf, *pos, *end;
  107. size_t reply_len = 60000;
  108. struct wpa_scan_results *results;
  109. struct wpa_scan_res *r;
  110. buf = os_malloc(reply_len);
  111. if (buf == NULL)
  112. return NULL;
  113. res = wpa_priv_cmd(drv, PRIVSEP_CMD_GET_SCAN_RESULTS,
  114. NULL, 0, buf, &reply_len);
  115. if (res < 0) {
  116. os_free(buf);
  117. return NULL;
  118. }
  119. wpa_printf(MSG_DEBUG, "privsep: Received %lu bytes of scan results",
  120. (unsigned long) reply_len);
  121. if (reply_len < sizeof(int)) {
  122. wpa_printf(MSG_DEBUG, "privsep: Invalid scan result len %lu",
  123. (unsigned long) reply_len);
  124. os_free(buf);
  125. return NULL;
  126. }
  127. pos = buf;
  128. end = buf + reply_len;
  129. os_memcpy(&num, pos, sizeof(int));
  130. if (num < 0 || num > 1000) {
  131. os_free(buf);
  132. return NULL;
  133. }
  134. pos += sizeof(int);
  135. results = os_zalloc(sizeof(*results));
  136. if (results == NULL) {
  137. os_free(buf);
  138. return NULL;
  139. }
  140. results->res = os_zalloc(num * sizeof(struct wpa_scan_res *));
  141. if (results->res == NULL) {
  142. os_free(results);
  143. os_free(buf);
  144. return NULL;
  145. }
  146. while (results->num < (size_t) num && pos + sizeof(int) < end) {
  147. int len;
  148. os_memcpy(&len, pos, sizeof(int));
  149. pos += sizeof(int);
  150. if (len < 0 || len > 10000 || pos + len > end)
  151. break;
  152. r = os_malloc(len);
  153. if (r == NULL)
  154. break;
  155. os_memcpy(r, pos, len);
  156. pos += len;
  157. if (sizeof(*r) + r->ie_len > (size_t) len) {
  158. os_free(r);
  159. break;
  160. }
  161. results->res[results->num++] = r;
  162. }
  163. os_free(buf);
  164. return results;
  165. }
  166. static int wpa_driver_privsep_set_key(void *priv, wpa_alg alg, const u8 *addr,
  167. int key_idx, int set_tx,
  168. const u8 *seq, size_t seq_len,
  169. const u8 *key, size_t key_len)
  170. {
  171. struct wpa_driver_privsep_data *drv = priv;
  172. struct privsep_cmd_set_key cmd;
  173. wpa_printf(MSG_DEBUG, "%s: priv=%p alg=%d key_idx=%d set_tx=%d",
  174. __func__, priv, alg, key_idx, set_tx);
  175. os_memset(&cmd, 0, sizeof(cmd));
  176. cmd.alg = alg;
  177. if (addr)
  178. os_memcpy(cmd.addr, addr, ETH_ALEN);
  179. else
  180. os_memset(cmd.addr, 0xff, ETH_ALEN);
  181. cmd.key_idx = key_idx;
  182. cmd.set_tx = set_tx;
  183. if (seq && seq_len > 0 && seq_len < sizeof(cmd.seq)) {
  184. os_memcpy(cmd.seq, seq, seq_len);
  185. cmd.seq_len = seq_len;
  186. }
  187. if (key && key_len > 0 && key_len < sizeof(cmd.key)) {
  188. os_memcpy(cmd.key, key, key_len);
  189. cmd.key_len = key_len;
  190. }
  191. return wpa_priv_cmd(drv, PRIVSEP_CMD_SET_KEY, &cmd, sizeof(cmd),
  192. NULL, NULL);
  193. }
  194. static int wpa_driver_privsep_associate(
  195. void *priv, struct wpa_driver_associate_params *params)
  196. {
  197. struct wpa_driver_privsep_data *drv = priv;
  198. struct privsep_cmd_associate *data;
  199. int res;
  200. size_t buflen;
  201. wpa_printf(MSG_DEBUG, "%s: priv=%p freq=%d pairwise_suite=%d "
  202. "group_suite=%d key_mgmt_suite=%d auth_alg=%d mode=%d",
  203. __func__, priv, params->freq, params->pairwise_suite,
  204. params->group_suite, params->key_mgmt_suite,
  205. params->auth_alg, params->mode);
  206. buflen = sizeof(*data) + params->wpa_ie_len;
  207. data = os_zalloc(buflen);
  208. if (data == NULL)
  209. return -1;
  210. if (params->bssid)
  211. os_memcpy(data->bssid, params->bssid, ETH_ALEN);
  212. os_memcpy(data->ssid, params->ssid, params->ssid_len);
  213. data->ssid_len = params->ssid_len;
  214. data->freq = params->freq;
  215. data->pairwise_suite = params->pairwise_suite;
  216. data->group_suite = params->group_suite;
  217. data->key_mgmt_suite = params->key_mgmt_suite;
  218. data->auth_alg = params->auth_alg;
  219. data->mode = params->mode;
  220. data->wpa_ie_len = params->wpa_ie_len;
  221. if (params->wpa_ie)
  222. os_memcpy(data + 1, params->wpa_ie, params->wpa_ie_len);
  223. /* TODO: add support for other assoc parameters */
  224. res = wpa_priv_cmd(drv, PRIVSEP_CMD_ASSOCIATE, data, buflen,
  225. NULL, NULL);
  226. os_free(data);
  227. return res;
  228. }
  229. static int wpa_driver_privsep_get_bssid(void *priv, u8 *bssid)
  230. {
  231. struct wpa_driver_privsep_data *drv = priv;
  232. int res;
  233. size_t len = ETH_ALEN;
  234. res = wpa_priv_cmd(drv, PRIVSEP_CMD_GET_BSSID, NULL, 0, bssid, &len);
  235. if (res < 0 || len != ETH_ALEN)
  236. return -1;
  237. return 0;
  238. }
  239. static int wpa_driver_privsep_get_ssid(void *priv, u8 *ssid)
  240. {
  241. struct wpa_driver_privsep_data *drv = priv;
  242. int res, ssid_len;
  243. u8 reply[sizeof(int) + 32];
  244. size_t len = sizeof(reply);
  245. res = wpa_priv_cmd(drv, PRIVSEP_CMD_GET_SSID, NULL, 0, reply, &len);
  246. if (res < 0 || len < sizeof(int))
  247. return -1;
  248. os_memcpy(&ssid_len, reply, sizeof(int));
  249. if (ssid_len < 0 || ssid_len > 32 || sizeof(int) + ssid_len > len) {
  250. wpa_printf(MSG_DEBUG, "privsep: Invalid get SSID reply");
  251. return -1;
  252. }
  253. os_memcpy(ssid, &reply[sizeof(int)], ssid_len);
  254. return ssid_len;
  255. }
  256. static int wpa_driver_privsep_deauthenticate(void *priv, const u8 *addr,
  257. int reason_code)
  258. {
  259. //struct wpa_driver_privsep_data *drv = priv;
  260. wpa_printf(MSG_DEBUG, "%s addr=" MACSTR " reason_code=%d",
  261. __func__, MAC2STR(addr), reason_code);
  262. wpa_printf(MSG_DEBUG, "%s - TODO", __func__);
  263. return 0;
  264. }
  265. static int wpa_driver_privsep_disassociate(void *priv, const u8 *addr,
  266. int reason_code)
  267. {
  268. //struct wpa_driver_privsep_data *drv = priv;
  269. wpa_printf(MSG_DEBUG, "%s addr=" MACSTR " reason_code=%d",
  270. __func__, MAC2STR(addr), reason_code);
  271. wpa_printf(MSG_DEBUG, "%s - TODO", __func__);
  272. return 0;
  273. }
  274. static void wpa_driver_privsep_event_assoc(void *ctx, wpa_event_type event,
  275. u8 *buf, size_t len)
  276. {
  277. union wpa_event_data data;
  278. int inc_data = 0;
  279. u8 *pos, *end;
  280. int ie_len;
  281. os_memset(&data, 0, sizeof(data));
  282. pos = buf;
  283. end = buf + len;
  284. if (end - pos < (int) sizeof(int))
  285. return;
  286. os_memcpy(&ie_len, pos, sizeof(int));
  287. pos += sizeof(int);
  288. if (ie_len < 0 || ie_len > end - pos)
  289. return;
  290. if (ie_len) {
  291. data.assoc_info.req_ies = pos;
  292. data.assoc_info.req_ies_len = ie_len;
  293. pos += ie_len;
  294. inc_data = 1;
  295. }
  296. wpa_supplicant_event(ctx, event, inc_data ? &data : NULL);
  297. }
  298. static void wpa_driver_privsep_event_interface_status(void *ctx, u8 *buf,
  299. size_t len)
  300. {
  301. union wpa_event_data data;
  302. int ievent;
  303. if (len < sizeof(int) ||
  304. len - sizeof(int) > sizeof(data.interface_status.ifname))
  305. return;
  306. os_memcpy(&ievent, buf, sizeof(int));
  307. os_memset(&data, 0, sizeof(data));
  308. data.interface_status.ievent = ievent;
  309. os_memcpy(data.interface_status.ifname, buf + sizeof(int),
  310. len - sizeof(int));
  311. wpa_supplicant_event(ctx, EVENT_INTERFACE_STATUS, &data);
  312. }
  313. static void wpa_driver_privsep_event_michael_mic_failure(
  314. void *ctx, u8 *buf, size_t len)
  315. {
  316. union wpa_event_data data;
  317. if (len != sizeof(int))
  318. return;
  319. os_memset(&data, 0, sizeof(data));
  320. os_memcpy(&data.michael_mic_failure.unicast, buf, sizeof(int));
  321. wpa_supplicant_event(ctx, EVENT_MICHAEL_MIC_FAILURE, &data);
  322. }
  323. static void wpa_driver_privsep_event_pmkid_candidate(void *ctx, u8 *buf,
  324. size_t len)
  325. {
  326. union wpa_event_data data;
  327. if (len != sizeof(struct pmkid_candidate))
  328. return;
  329. os_memset(&data, 0, sizeof(data));
  330. os_memcpy(&data.pmkid_candidate, buf, len);
  331. wpa_supplicant_event(ctx, EVENT_PMKID_CANDIDATE, &data);
  332. }
  333. static void wpa_driver_privsep_event_stkstart(void *ctx, u8 *buf, size_t len)
  334. {
  335. union wpa_event_data data;
  336. if (len != ETH_ALEN)
  337. return;
  338. os_memset(&data, 0, sizeof(data));
  339. os_memcpy(data.stkstart.peer, buf, ETH_ALEN);
  340. wpa_supplicant_event(ctx, EVENT_STKSTART, &data);
  341. }
  342. static void wpa_driver_privsep_event_ft_response(void *ctx, u8 *buf,
  343. size_t len)
  344. {
  345. union wpa_event_data data;
  346. if (len < sizeof(int) + ETH_ALEN)
  347. return;
  348. os_memset(&data, 0, sizeof(data));
  349. os_memcpy(&data.ft_ies.ft_action, buf, sizeof(int));
  350. os_memcpy(data.ft_ies.target_ap, buf + sizeof(int), ETH_ALEN);
  351. data.ft_ies.ies = buf + sizeof(int) + ETH_ALEN;
  352. data.ft_ies.ies_len = len - sizeof(int) - ETH_ALEN;
  353. wpa_supplicant_event(ctx, EVENT_FT_RESPONSE, &data);
  354. }
  355. static void wpa_driver_privsep_event_rx_eapol(void *ctx, u8 *buf, size_t len)
  356. {
  357. if (len < ETH_ALEN)
  358. return;
  359. wpa_supplicant_rx_eapol(ctx, buf, buf + ETH_ALEN, len - ETH_ALEN);
  360. }
  361. static void wpa_driver_privsep_event_sta_rx(void *ctx, u8 *buf, size_t len)
  362. {
  363. #ifdef CONFIG_CLIENT_MLME
  364. struct ieee80211_rx_status *rx_status;
  365. if (len < sizeof(*rx_status))
  366. return;
  367. rx_status = (struct ieee80211_rx_status *) buf;
  368. buf += sizeof(*rx_status);
  369. len -= sizeof(*rx_status);
  370. wpa_supplicant_sta_rx(ctx, buf, len, rx_status);
  371. #endif /* CONFIG_CLIENT_MLME */
  372. }
  373. static void wpa_driver_privsep_receive(int sock, void *eloop_ctx,
  374. void *sock_ctx)
  375. {
  376. struct wpa_driver_privsep_data *drv = eloop_ctx;
  377. u8 *buf, *event_buf;
  378. size_t event_len;
  379. int res, event;
  380. enum privsep_event e;
  381. struct sockaddr_un from;
  382. socklen_t fromlen = sizeof(from);
  383. const size_t buflen = 2000;
  384. buf = os_malloc(buflen);
  385. if (buf == NULL)
  386. return;
  387. res = recvfrom(sock, buf, buflen, 0,
  388. (struct sockaddr *) &from, &fromlen);
  389. if (res < 0) {
  390. perror("recvfrom(priv_socket)");
  391. os_free(buf);
  392. return;
  393. }
  394. wpa_printf(MSG_DEBUG, "privsep_driver: received %u bytes", res);
  395. if (res < (int) sizeof(int)) {
  396. wpa_printf(MSG_DEBUG, "Too short event message (len=%d)", res);
  397. return;
  398. }
  399. os_memcpy(&event, buf, sizeof(int));
  400. event_buf = &buf[sizeof(int)];
  401. event_len = res - sizeof(int);
  402. wpa_printf(MSG_DEBUG, "privsep: Event %d received (len=%lu)",
  403. event, (unsigned long) event_len);
  404. e = event;
  405. switch (e) {
  406. case PRIVSEP_EVENT_SCAN_RESULTS:
  407. wpa_supplicant_event(drv->ctx, EVENT_SCAN_RESULTS, NULL);
  408. break;
  409. case PRIVSEP_EVENT_ASSOC:
  410. wpa_driver_privsep_event_assoc(drv->ctx, EVENT_ASSOC,
  411. event_buf, event_len);
  412. break;
  413. case PRIVSEP_EVENT_DISASSOC:
  414. wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
  415. break;
  416. case PRIVSEP_EVENT_ASSOCINFO:
  417. wpa_driver_privsep_event_assoc(drv->ctx, EVENT_ASSOCINFO,
  418. event_buf, event_len);
  419. break;
  420. case PRIVSEP_EVENT_MICHAEL_MIC_FAILURE:
  421. wpa_driver_privsep_event_michael_mic_failure(
  422. drv->ctx, event_buf, event_len);
  423. break;
  424. case PRIVSEP_EVENT_INTERFACE_STATUS:
  425. wpa_driver_privsep_event_interface_status(drv->ctx, event_buf,
  426. event_len);
  427. break;
  428. case PRIVSEP_EVENT_PMKID_CANDIDATE:
  429. wpa_driver_privsep_event_pmkid_candidate(drv->ctx, event_buf,
  430. event_len);
  431. break;
  432. case PRIVSEP_EVENT_STKSTART:
  433. wpa_driver_privsep_event_stkstart(drv->ctx, event_buf,
  434. event_len);
  435. break;
  436. case PRIVSEP_EVENT_FT_RESPONSE:
  437. wpa_driver_privsep_event_ft_response(drv->ctx, event_buf,
  438. event_len);
  439. break;
  440. case PRIVSEP_EVENT_RX_EAPOL:
  441. wpa_driver_privsep_event_rx_eapol(drv->ctx, event_buf,
  442. event_len);
  443. break;
  444. case PRIVSEP_EVENT_STA_RX:
  445. wpa_driver_privsep_event_sta_rx(drv->ctx, event_buf,
  446. event_len);
  447. break;
  448. }
  449. os_free(buf);
  450. }
  451. static void * wpa_driver_privsep_init(void *ctx, const char *ifname)
  452. {
  453. struct wpa_driver_privsep_data *drv;
  454. drv = os_zalloc(sizeof(*drv));
  455. if (drv == NULL)
  456. return NULL;
  457. drv->ctx = ctx;
  458. drv->priv_socket = -1;
  459. drv->cmd_socket = -1;
  460. os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
  461. return drv;
  462. }
  463. static void wpa_driver_privsep_deinit(void *priv)
  464. {
  465. struct wpa_driver_privsep_data *drv = priv;
  466. if (drv->priv_socket >= 0) {
  467. wpa_priv_reg_cmd(drv, PRIVSEP_CMD_UNREGISTER);
  468. eloop_unregister_read_sock(drv->priv_socket);
  469. close(drv->priv_socket);
  470. }
  471. if (drv->own_socket_path) {
  472. unlink(drv->own_socket_path);
  473. os_free(drv->own_socket_path);
  474. }
  475. if (drv->cmd_socket >= 0) {
  476. eloop_unregister_read_sock(drv->cmd_socket);
  477. close(drv->cmd_socket);
  478. }
  479. if (drv->own_cmd_path) {
  480. unlink(drv->own_cmd_path);
  481. os_free(drv->own_cmd_path);
  482. }
  483. os_free(drv);
  484. }
  485. static int wpa_driver_privsep_set_param(void *priv, const char *param)
  486. {
  487. struct wpa_driver_privsep_data *drv = priv;
  488. const char *pos;
  489. char *own_dir, *priv_dir;
  490. static unsigned int counter = 0;
  491. size_t len;
  492. struct sockaddr_un addr;
  493. wpa_printf(MSG_DEBUG, "%s: param='%s'", __func__, param);
  494. if (param == NULL)
  495. pos = NULL;
  496. else
  497. pos = os_strstr(param, "own_dir=");
  498. if (pos) {
  499. char *end;
  500. own_dir = os_strdup(pos + 8);
  501. if (own_dir == NULL)
  502. return -1;
  503. end = os_strchr(own_dir, ' ');
  504. if (end)
  505. *end = '\0';
  506. } else {
  507. own_dir = os_strdup("/tmp");
  508. if (own_dir == NULL)
  509. return -1;
  510. }
  511. if (param == NULL)
  512. pos = NULL;
  513. else
  514. pos = os_strstr(param, "priv_dir=");
  515. if (pos) {
  516. char *end;
  517. priv_dir = os_strdup(pos + 9);
  518. if (priv_dir == NULL) {
  519. os_free(own_dir);
  520. return -1;
  521. }
  522. end = os_strchr(priv_dir, ' ');
  523. if (end)
  524. *end = '\0';
  525. } else {
  526. priv_dir = os_strdup("/var/run/wpa_priv");
  527. if (priv_dir == NULL) {
  528. os_free(own_dir);
  529. return -1;
  530. }
  531. }
  532. len = os_strlen(own_dir) + 50;
  533. drv->own_socket_path = os_malloc(len);
  534. if (drv->own_socket_path == NULL) {
  535. os_free(priv_dir);
  536. os_free(own_dir);
  537. return -1;
  538. }
  539. os_snprintf(drv->own_socket_path, len, "%s/wpa_privsep-%d-%d",
  540. own_dir, getpid(), counter++);
  541. len = os_strlen(own_dir) + 50;
  542. drv->own_cmd_path = os_malloc(len);
  543. if (drv->own_cmd_path == NULL) {
  544. os_free(drv->own_socket_path);
  545. drv->own_socket_path = NULL;
  546. os_free(priv_dir);
  547. os_free(own_dir);
  548. return -1;
  549. }
  550. os_snprintf(drv->own_cmd_path, len, "%s/wpa_privsep-%d-%d",
  551. own_dir, getpid(), counter++);
  552. os_free(own_dir);
  553. drv->priv_addr.sun_family = AF_UNIX;
  554. os_snprintf(drv->priv_addr.sun_path, sizeof(drv->priv_addr.sun_path),
  555. "%s/%s", priv_dir, drv->ifname);
  556. os_free(priv_dir);
  557. drv->priv_socket = socket(PF_UNIX, SOCK_DGRAM, 0);
  558. if (drv->priv_socket < 0) {
  559. perror("socket(PF_UNIX)");
  560. os_free(drv->own_socket_path);
  561. drv->own_socket_path = NULL;
  562. return -1;
  563. }
  564. os_memset(&addr, 0, sizeof(addr));
  565. addr.sun_family = AF_UNIX;
  566. os_strlcpy(addr.sun_path, drv->own_socket_path, sizeof(addr.sun_path));
  567. if (bind(drv->priv_socket, (struct sockaddr *) &addr, sizeof(addr)) <
  568. 0) {
  569. perror("bind(PF_UNIX)");
  570. close(drv->priv_socket);
  571. drv->priv_socket = -1;
  572. unlink(drv->own_socket_path);
  573. os_free(drv->own_socket_path);
  574. drv->own_socket_path = NULL;
  575. return -1;
  576. }
  577. eloop_register_read_sock(drv->priv_socket, wpa_driver_privsep_receive,
  578. drv, NULL);
  579. drv->cmd_socket = socket(PF_UNIX, SOCK_DGRAM, 0);
  580. if (drv->cmd_socket < 0) {
  581. perror("socket(PF_UNIX)");
  582. os_free(drv->own_cmd_path);
  583. drv->own_cmd_path = NULL;
  584. return -1;
  585. }
  586. os_memset(&addr, 0, sizeof(addr));
  587. addr.sun_family = AF_UNIX;
  588. os_strlcpy(addr.sun_path, drv->own_cmd_path, sizeof(addr.sun_path));
  589. if (bind(drv->cmd_socket, (struct sockaddr *) &addr, sizeof(addr)) < 0)
  590. {
  591. perror("bind(PF_UNIX)");
  592. close(drv->cmd_socket);
  593. drv->cmd_socket = -1;
  594. unlink(drv->own_cmd_path);
  595. os_free(drv->own_cmd_path);
  596. drv->own_cmd_path = NULL;
  597. return -1;
  598. }
  599. if (wpa_priv_reg_cmd(drv, PRIVSEP_CMD_REGISTER) < 0) {
  600. wpa_printf(MSG_ERROR, "Failed to register with wpa_priv");
  601. return -1;
  602. }
  603. return 0;
  604. }
  605. static int wpa_driver_privsep_get_capa(void *priv,
  606. struct wpa_driver_capa *capa)
  607. {
  608. struct wpa_driver_privsep_data *drv = priv;
  609. int res;
  610. size_t len = sizeof(*capa);
  611. res = wpa_priv_cmd(drv, PRIVSEP_CMD_GET_CAPA, NULL, 0, capa, &len);
  612. if (res < 0 || len != sizeof(*capa))
  613. return -1;
  614. return 0;
  615. }
  616. static const u8 * wpa_driver_privsep_get_mac_addr(void *priv)
  617. {
  618. struct wpa_driver_privsep_data *drv = priv;
  619. wpa_printf(MSG_DEBUG, "%s", __func__);
  620. return drv->own_addr;
  621. }
  622. static int wpa_driver_privsep_set_mode(void *priv, int mode)
  623. {
  624. struct wpa_driver_privsep_data *drv = priv;
  625. wpa_printf(MSG_DEBUG, "%s mode=%d", __func__, mode);
  626. return wpa_priv_cmd(drv, PRIVSEP_CMD_SET_MODE, &mode, sizeof(mode),
  627. NULL, NULL);
  628. }
  629. static int wpa_driver_privsep_set_country(void *priv, const char *alpha2)
  630. {
  631. struct wpa_driver_privsep_data *drv = priv;
  632. wpa_printf(MSG_DEBUG, "%s country='%s'", __func__, alpha2);
  633. return wpa_priv_cmd(drv, PRIVSEP_CMD_SET_COUNTRY, alpha2,
  634. os_strlen(alpha2), NULL, NULL);
  635. }
  636. struct wpa_driver_ops wpa_driver_privsep_ops = {
  637. "privsep",
  638. "wpa_supplicant privilege separated driver",
  639. wpa_driver_privsep_get_bssid,
  640. wpa_driver_privsep_get_ssid,
  641. wpa_driver_privsep_set_wpa,
  642. wpa_driver_privsep_set_key,
  643. wpa_driver_privsep_init,
  644. wpa_driver_privsep_deinit,
  645. wpa_driver_privsep_set_param,
  646. NULL /* set_countermeasures */,
  647. NULL /* set_drop_unencrypted */,
  648. wpa_driver_privsep_scan,
  649. NULL /* get_scan_results */,
  650. wpa_driver_privsep_deauthenticate,
  651. wpa_driver_privsep_disassociate,
  652. wpa_driver_privsep_associate,
  653. NULL /* set_auth_alg */,
  654. NULL /* add_pmkid */,
  655. NULL /* remove_pmkid */,
  656. NULL /* flush_pmkid */,
  657. wpa_driver_privsep_get_capa,
  658. NULL /* poll */,
  659. NULL /* get_ifname */,
  660. wpa_driver_privsep_get_mac_addr,
  661. NULL /* send_eapol */,
  662. NULL /* set_operstate */,
  663. NULL /* mlme_setprotection */,
  664. NULL /* get_hw_feature_data */,
  665. NULL /* set_channel */,
  666. NULL /* set_ssid */,
  667. NULL /* set_bssid */,
  668. NULL /* send_mlme */,
  669. NULL /* mlme_add_sta */,
  670. NULL /* mlme_remove_sta */,
  671. NULL /* update_ft_ies */,
  672. NULL /* send_ft_action */,
  673. wpa_driver_privsep_get_scan_results2,
  674. NULL /* set_probe_req_ie */,
  675. wpa_driver_privsep_set_mode,
  676. wpa_driver_privsep_set_country,
  677. NULL /* global_init */,
  678. NULL /* global_deinit */,
  679. NULL /* init2 */,
  680. NULL /* get_interfaces */,
  681. NULL /* scan2 */,
  682. NULL /* authenticate */,
  683. NULL /* set_beacon */,
  684. NULL /* set_beacon_int */,
  685. NULL /* set_ieee8021x */,
  686. NULL /* set_privacy */,
  687. NULL /* hapd_set_key */,
  688. NULL /* get_seqnum */,
  689. NULL /* get_seqnum_igtk */,
  690. NULL /* flush */,
  691. NULL /* set_generic_elem */,
  692. NULL /* read_sta_data */,
  693. NULL /* hapd_send_eapol */,
  694. NULL /* sta_deauth */,
  695. NULL /* sta_disassoc */,
  696. NULL /* sta_remove */,
  697. NULL /* hapd_get_ssid */,
  698. NULL /* hapd_set_ssid */,
  699. NULL /* hapd_set_countermeasures */,
  700. NULL /* sta_add */,
  701. NULL /* get_inact_sec */,
  702. NULL /* sta_clear_stats */,
  703. NULL /* set_freq */,
  704. NULL /* set_rts */,
  705. NULL /* set_frag */,
  706. NULL /* set_retry */,
  707. NULL /* sta_set_flags */,
  708. NULL /* set_rate_sets */,
  709. NULL /* hapd_set_country */,
  710. NULL /* set_ieee80211d */,
  711. NULL /* hapd_set_beacon */,
  712. NULL /* set_internal_bridge */,
  713. NULL /* hapd_set_beacon_int */,
  714. NULL /* set_broadcast_ssid */,
  715. NULL /* set_cts_protect */,
  716. NULL /* set_preamble */,
  717. NULL /* set_short_slot_time */,
  718. NULL /* set_tx_queue_params */,
  719. NULL /* bss_add */,
  720. NULL /* bss_remove */,
  721. NULL /* valid_bss_mask */,
  722. NULL /* passive_scan */,
  723. NULL /* if_add */,
  724. NULL /* if_update */,
  725. NULL /* if_remove */,
  726. NULL /* set_sta_vlan */,
  727. NULL /* commit */,
  728. NULL /* send_ether */,
  729. NULL /* set_radius_acl_auth */,
  730. NULL /* set_radius_acl_expire */,
  731. NULL /* set_ht_params */,
  732. NULL /* set_wps_beacon_ie */,
  733. NULL /* set_wps_probe_resp_ie */,
  734. NULL /* get_neighbor_bss */
  735. };
  736. struct wpa_driver_ops *wpa_drivers[] =
  737. {
  738. &wpa_driver_privsep_ops,
  739. NULL
  740. };