517 lines
16 KiB
C
517 lines
16 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
|
|
#include "alloc-util.h"
|
|
#include "conf-parser.h"
|
|
#include "def.h"
|
|
#include "extract-word.h"
|
|
#include "hexdecoct.h"
|
|
#include "parse-util.h"
|
|
#include "resolved-conf.h"
|
|
#include "resolved-dnssd.h"
|
|
#include "resolved-manager.h"
|
|
#include "resolved-dns-search-domain.h"
|
|
#include "resolved-dns-stub.h"
|
|
#include "dns-domain.h"
|
|
#include "socket-netlink.h"
|
|
#include "specifier.h"
|
|
#include "string-table.h"
|
|
#include "string-util.h"
|
|
#include "strv.h"
|
|
#include "utf8.h"
|
|
|
|
DEFINE_CONFIG_PARSE_ENUM(config_parse_dns_stub_listener_mode, dns_stub_listener_mode, DnsStubListenerMode, "Failed to parse DNS stub listener mode setting");
|
|
|
|
static int manager_add_dns_server_by_string(Manager *m, DnsServerType type, const char *word) {
|
|
_cleanup_free_ char *server_name = NULL;
|
|
union in_addr_union address;
|
|
int family, r, ifindex = 0;
|
|
uint16_t port;
|
|
DnsServer *s;
|
|
|
|
assert(m);
|
|
assert(word);
|
|
|
|
r = in_addr_port_ifindex_name_from_string_auto(word, &family, &address, &port, &ifindex, &server_name);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
/* Silently filter out 0.0.0.0 and 127.0.0.53 (our own stub DNS listener) */
|
|
if (!dns_server_address_valid(family, &address))
|
|
return 0;
|
|
|
|
/* By default, the port number is determined with the transaction feature level.
|
|
* See dns_transaction_port() and dns_server_port(). */
|
|
if (IN_SET(port, 53, 853))
|
|
port = 0;
|
|
|
|
/* Filter out duplicates */
|
|
s = dns_server_find(manager_get_first_dns_server(m, type), family, &address, port, ifindex, server_name);
|
|
if (s) {
|
|
/* Drop the marker. This is used to find the servers that ceased to exist, see
|
|
* manager_mark_dns_servers() and manager_flush_marked_dns_servers(). */
|
|
dns_server_move_back_and_unmark(s);
|
|
return 0;
|
|
}
|
|
|
|
return dns_server_new(m, NULL, type, NULL, family, &address, port, ifindex, server_name);
|
|
}
|
|
|
|
int manager_parse_dns_server_string_and_warn(Manager *m, DnsServerType type, const char *string) {
|
|
int r;
|
|
|
|
assert(m);
|
|
assert(string);
|
|
|
|
for (;;) {
|
|
_cleanup_free_ char *word = NULL;
|
|
|
|
r = extract_first_word(&string, &word, NULL, 0);
|
|
if (r < 0)
|
|
return r;
|
|
if (r == 0)
|
|
break;
|
|
|
|
r = manager_add_dns_server_by_string(m, type, word);
|
|
if (r < 0)
|
|
log_warning_errno(r, "Failed to add DNS server address '%s', ignoring: %m", word);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int manager_add_search_domain_by_string(Manager *m, const char *domain) {
|
|
DnsSearchDomain *d;
|
|
bool route_only;
|
|
int r;
|
|
|
|
assert(m);
|
|
assert(domain);
|
|
|
|
route_only = *domain == '~';
|
|
if (route_only)
|
|
domain++;
|
|
|
|
if (dns_name_is_root(domain) || streq(domain, "*")) {
|
|
route_only = true;
|
|
domain = ".";
|
|
}
|
|
|
|
r = dns_search_domain_find(m->search_domains, domain, &d);
|
|
if (r < 0)
|
|
return r;
|
|
if (r > 0)
|
|
dns_search_domain_move_back_and_unmark(d);
|
|
else {
|
|
r = dns_search_domain_new(m, &d, DNS_SEARCH_DOMAIN_SYSTEM, NULL, domain);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
d->route_only = route_only;
|
|
return 0;
|
|
}
|
|
|
|
int manager_parse_search_domains_and_warn(Manager *m, const char *string) {
|
|
int r;
|
|
|
|
assert(m);
|
|
assert(string);
|
|
|
|
for (;;) {
|
|
_cleanup_free_ char *word = NULL;
|
|
|
|
r = extract_first_word(&string, &word, NULL, EXTRACT_UNQUOTE);
|
|
if (r < 0)
|
|
return r;
|
|
if (r == 0)
|
|
break;
|
|
|
|
r = manager_add_search_domain_by_string(m, word);
|
|
if (r < 0)
|
|
log_warning_errno(r, "Failed to add search domain '%s', ignoring: %m", word);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_dns_servers(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Manager *m = userdata;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(m);
|
|
|
|
if (isempty(rvalue))
|
|
/* Empty assignment means clear the list */
|
|
dns_server_unlink_all(manager_get_first_dns_server(m, ltype));
|
|
else {
|
|
/* Otherwise, add to the list */
|
|
r = manager_parse_dns_server_string_and_warn(m, ltype, rvalue);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to parse DNS server string '%s', ignoring.", rvalue);
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
/* If we have a manual setting, then we stop reading
|
|
* /etc/resolv.conf */
|
|
if (ltype == DNS_SERVER_SYSTEM)
|
|
m->read_resolv_conf = false;
|
|
if (ltype == DNS_SERVER_FALLBACK)
|
|
m->need_builtin_fallbacks = false;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_search_domains(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
Manager *m = userdata;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(m);
|
|
|
|
if (isempty(rvalue))
|
|
/* Empty assignment means clear the list */
|
|
dns_search_domain_unlink_all(m->search_domains);
|
|
else {
|
|
/* Otherwise, add to the list */
|
|
r = manager_parse_search_domains_and_warn(m, rvalue);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to parse search domains string '%s', ignoring.", rvalue);
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
/* If we have a manual setting, then we stop reading
|
|
* /etc/resolv.conf */
|
|
m->read_resolv_conf = false;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_dnssd_service_name(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
static const Specifier specifier_table[] = {
|
|
{ 'a', specifier_architecture, NULL },
|
|
{ 'b', specifier_boot_id, NULL },
|
|
{ 'B', specifier_os_build_id, NULL },
|
|
{ 'H', specifier_host_name, NULL }, /* We will use specifier_dnssd_host_name(). */
|
|
{ 'm', specifier_machine_id, NULL },
|
|
{ 'o', specifier_os_id, NULL },
|
|
{ 'v', specifier_kernel_release, NULL },
|
|
{ 'w', specifier_os_version_id, NULL },
|
|
{ 'W', specifier_os_variant_id, NULL },
|
|
{}
|
|
};
|
|
DnssdService *s = userdata;
|
|
_cleanup_free_ char *name = NULL;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(s);
|
|
|
|
if (isempty(rvalue)) {
|
|
s->name_template = mfree(s->name_template);
|
|
return 0;
|
|
}
|
|
|
|
r = specifier_printf(rvalue, specifier_table, NULL, &name);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Invalid service instance name template '%s', ignoring assignment: %m", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
if (!dns_service_name_is_valid(name)) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, 0,
|
|
"Service instance name template '%s' renders to invalid name '%s'. Ignoring assignment.",
|
|
rvalue, name);
|
|
return 0;
|
|
}
|
|
|
|
return free_and_strdup_warn(&s->name_template, rvalue);
|
|
}
|
|
|
|
int config_parse_dnssd_service_type(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
DnssdService *s = userdata;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(s);
|
|
|
|
if (isempty(rvalue)) {
|
|
s->type = mfree(s->type);
|
|
return 0;
|
|
}
|
|
|
|
if (!dnssd_srv_type_is_valid(rvalue)) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, 0, "Service type is invalid. Ignoring.");
|
|
return 0;
|
|
}
|
|
|
|
r = free_and_strdup(&s->type, rvalue);
|
|
if (r < 0)
|
|
return log_oom();
|
|
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_dnssd_txt(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
_cleanup_(dnssd_txtdata_freep) DnssdTxtData *txt_data = NULL;
|
|
DnssdService *s = userdata;
|
|
DnsTxtItem *last = NULL;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(s);
|
|
|
|
if (isempty(rvalue)) {
|
|
/* Flush out collected items */
|
|
s->txt_data_items = dnssd_txtdata_free_all(s->txt_data_items);
|
|
return 0;
|
|
}
|
|
|
|
txt_data = new0(DnssdTxtData, 1);
|
|
if (!txt_data)
|
|
return log_oom();
|
|
|
|
for (;;) {
|
|
_cleanup_free_ char *word = NULL, *key = NULL, *value = NULL;
|
|
_cleanup_free_ void *decoded = NULL;
|
|
size_t length = 0;
|
|
DnsTxtItem *i;
|
|
int r;
|
|
|
|
r = extract_first_word(&rvalue, &word, NULL,
|
|
EXTRACT_UNQUOTE|EXTRACT_CUNESCAPE|EXTRACT_CUNESCAPE_RELAX);
|
|
if (r == 0)
|
|
break;
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r, "Invalid syntax, ignoring: %s", rvalue);
|
|
return 0;
|
|
}
|
|
|
|
r = split_pair(word, "=", &key, &value);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r == -EINVAL)
|
|
key = TAKE_PTR(word);
|
|
|
|
if (!ascii_is_valid(key)) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, 0, "Invalid key, ignoring: %s", key);
|
|
continue;
|
|
}
|
|
|
|
switch (ltype) {
|
|
|
|
case DNS_TXT_ITEM_DATA:
|
|
if (value) {
|
|
r = unbase64mem(value, strlen(value), &decoded, &length);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Invalid base64 encoding, ignoring: %s", value);
|
|
continue;
|
|
}
|
|
}
|
|
|
|
r = dnssd_txt_item_new_from_data(key, decoded, length, &i);
|
|
if (r < 0)
|
|
return log_oom();
|
|
break;
|
|
|
|
case DNS_TXT_ITEM_TEXT:
|
|
r = dnssd_txt_item_new_from_string(key, value, &i);
|
|
if (r < 0)
|
|
return log_oom();
|
|
break;
|
|
|
|
default:
|
|
assert_not_reached("Unknown type of Txt config");
|
|
}
|
|
|
|
LIST_INSERT_AFTER(items, txt_data->txt, last, i);
|
|
last = i;
|
|
}
|
|
|
|
if (!LIST_IS_EMPTY(txt_data->txt)) {
|
|
LIST_PREPEND(items, s->txt_data_items, txt_data);
|
|
TAKE_PTR(txt_data);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int config_parse_dns_stub_listener_extra(
|
|
const char *unit,
|
|
const char *filename,
|
|
unsigned line,
|
|
const char *section,
|
|
unsigned section_line,
|
|
const char *lvalue,
|
|
int ltype,
|
|
const char *rvalue,
|
|
void *data,
|
|
void *userdata) {
|
|
|
|
_cleanup_free_ DnsStubListenerExtra *stub = NULL;
|
|
Manager *m = userdata;
|
|
const char *p;
|
|
int r;
|
|
|
|
assert(filename);
|
|
assert(lvalue);
|
|
assert(rvalue);
|
|
assert(data);
|
|
|
|
if (isempty(rvalue)) {
|
|
m->dns_extra_stub_listeners = ordered_set_free(m->dns_extra_stub_listeners);
|
|
return 0;
|
|
}
|
|
|
|
r = dns_stub_listener_extra_new(m, &stub);
|
|
if (r < 0)
|
|
return log_oom();
|
|
|
|
p = startswith(rvalue, "udp:");
|
|
if (p)
|
|
stub->mode = DNS_STUB_LISTENER_UDP;
|
|
else {
|
|
p = startswith(rvalue, "tcp:");
|
|
if (p)
|
|
stub->mode = DNS_STUB_LISTENER_TCP;
|
|
else {
|
|
stub->mode = DNS_STUB_LISTENER_YES;
|
|
p = rvalue;
|
|
}
|
|
}
|
|
|
|
r = in_addr_port_ifindex_name_from_string_auto(p, &stub->family, &stub->address, &stub->port, NULL, NULL);
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to parse address in %s=%s, ignoring assignment: %m",
|
|
lvalue, rvalue);
|
|
return 0;
|
|
}
|
|
|
|
r = ordered_set_ensure_put(&m->dns_extra_stub_listeners, &dns_stub_listener_extra_hash_ops, stub);
|
|
if (r == -ENOMEM)
|
|
return log_oom();
|
|
if (r < 0) {
|
|
log_syntax(unit, LOG_WARNING, filename, line, r,
|
|
"Failed to store %s=%s, ignoring assignment: %m", lvalue, rvalue);
|
|
return 0;
|
|
}
|
|
|
|
TAKE_PTR(stub);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int manager_parse_config_file(Manager *m) {
|
|
int r;
|
|
|
|
assert(m);
|
|
|
|
r = config_parse_many_nulstr(
|
|
PKGSYSCONFDIR "/resolved.conf",
|
|
CONF_PATHS_NULSTR("systemd/resolved.conf.d"),
|
|
"Resolve\0",
|
|
config_item_perf_lookup, resolved_gperf_lookup,
|
|
CONFIG_PARSE_WARN,
|
|
m,
|
|
NULL);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (m->need_builtin_fallbacks) {
|
|
r = manager_parse_dns_server_string_and_warn(m, DNS_SERVER_FALLBACK, DNS_SERVERS);
|
|
if (r < 0)
|
|
return r;
|
|
}
|
|
|
|
#if ! HAVE_GCRYPT
|
|
if (m->dnssec_mode != DNSSEC_NO) {
|
|
log_warning("DNSSEC option cannot be enabled or set to allow-downgrade when systemd-resolved is built without gcrypt support. Turning off DNSSEC support.");
|
|
m->dnssec_mode = DNSSEC_NO;
|
|
}
|
|
#endif
|
|
|
|
#if ! ENABLE_DNS_OVER_TLS
|
|
if (m->dns_over_tls_mode != DNS_OVER_TLS_NO) {
|
|
log_warning("DNS-over-TLS option cannot be enabled or set to opportunistic when systemd-resolved is built without DNS-over-TLS support. Turning off DNS-over-TLS support.");
|
|
m->dns_over_tls_mode = DNS_OVER_TLS_NO;
|
|
}
|
|
#endif
|
|
return 0;
|
|
|
|
}
|