1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
/*
* Copyright (c) 2003 Can Erkin Acar
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
#ifndef _PRIVSEP_H_
#define _PRIVSEP_H_
#include <pcap-int.h>
#define TCPDUMP_MAGIC 0xa1b2c3d4
enum cmd_types {
PRIV_OPEN_BPF, /* open a bpf descriptor */
PRIV_OPEN_DUMP, /* open dump file for reading */
PRIV_OPEN_PFOSFP, /* open pf.os(5) fingerprint db for reading */
PRIV_OPEN_OUTPUT, /* open output file */
PRIV_SETFILTER, /* set a bpf read filter */
PRIV_GETHOSTBYADDR, /* resolve numeric address into hostname */
PRIV_ETHER_NTOHOST, /* translate ethernet address into host name */
PRIV_GETRPCBYNUMBER, /* translate rpc number into name */
PRIV_GETSERVENTRIES, /* get the service entries table */
PRIV_GETPROTOENTRIES, /* get the ip protocol entries table */
PRIV_LOCALTIME, /* return localtime */
PRIV_INIT_DONE, /* signal that the initialization is done */
PRIV_PCAP_STATS /* get pcap_stats() results */
};
struct ether_addr;
/* Privilege separation */
int priv_init(int, char **);
__dead void priv_exec(int, char **);
void priv_init_done(void);
int setfilter(int, int, char *);
int pcap_live(const char *, int, int, u_int, u_int);
struct bpf_program *priv_pcap_setfilter(pcap_t *, int, u_int32_t);
pcap_t *priv_pcap_live(const char *, int, int, int, char *, u_int,
u_int);
pcap_t *priv_pcap_offline(const char *, char *);
size_t priv_gethostbyaddr(char *, size_t, int, char *, size_t);
size_t priv_ether_ntohost(char *, size_t, struct ether_addr *);
size_t priv_getrpcbynumber(int, char *, size_t);
struct tm *priv_localtime(const time_t *);
/* Start getting service entries */
void priv_getserventries(void);
/* Retrieve a single service entry, should be called repeatedly after
calling priv_getserventries() until it returns zero */
size_t priv_getserventry(char *, size_t, int *, char *, size_t);
/* Start getting ip protocol entries */
void priv_getprotoentries(void);
/* Retrieve a single protocol entry, should be called repeatedly after
calling priv_getprotoentries() until it returns zero */
size_t priv_getprotoentry(char *, size_t, int *);
/* Retrieve pf.os(5) fingerprints file descriptor */
int priv_open_pfosfp();
/* Return the pcap statistics upon completion */
int priv_pcap_stats(struct pcap_stat *);
pcap_dumper_t *priv_pcap_dump_open(pcap_t *, char *);
/* File descriptor send/recv */
void send_fd(int, int);
int receive_fd(int);
/* communications over the channel */
int may_read(int, void *, size_t);
void must_read(int, void *, size_t);
void must_write(int, const void *, size_t);
size_t read_block(int, char *, size_t, const char *);
size_t read_string(int, char *, size_t, const char *);
void write_block(int, size_t, const char *);
void write_command(int, int);
void write_string(int, const char *);
void write_zero(int);
extern int priv_fd;
#endif
|
