X-Git-Url: http://git.madism.org/?a=blobdiff_plain;f=postlicyd%2Fmain-postlicyd.c;h=bf68941e198ca48bf4623b43d566cf0fd9b5586c;hb=81227d766b6cd49042c042ac18c66bd9ec661d47;hp=677307095e965bb2cea8a06509d2b23d8f8af4b2;hpb=ae0c2eb5d2ea501fd9e458fc138696c268a14569;p=apps%2Fpfixtools.git

diff --git a/postlicyd/main-postlicyd.c b/postlicyd/main-postlicyd.c
index 6773070..bf68941 100644
--- a/postlicyd/main-postlicyd.c
+++ b/postlicyd/main-postlicyd.c
@@ -45,13 +45,16 @@
 #include "postlicyd.h"
 
 #define DAEMON_NAME             "postlicyd"
-#define DAEMON_VERSION          "0.2"
+#define DAEMON_VERSION          "0.3"
 #define DEFAULT_PORT            10000
 #define RUNAS_USER              "nobody"
 #define RUNAS_GROUP             "nogroup"
 
 DECLARE_MAIN
 
+static config_t *config = NULL;
+
+
 static void *query_starter(server_t* server)
 {
     query_context_t *context = p_new(query_context_t, 1);
@@ -68,87 +71,132 @@ static void query_stopper(void *data)
     }
 }
 
-static bool config_refresh(void *config)
+static bool config_refresh(void *mconfig)
 {
-    return config_reload(config);
+    if (filter_running > 0) {
+        sighup = true;
+        sleep(1);
+        return true;
+    }
+    return config_reload(mconfig);
 }
 
-__attribute__((format(printf,2,0)))
-static void policy_answer(server_t *pcy, const char *fmt, ...)
+static void policy_answer(server_t *pcy, const char *message)
 {
-    va_list args;
     query_context_t *context = pcy->data;
     const query_t* query = &context->query;
 
     buffer_addstr(&pcy->obuf, "action=");
-    va_start(args, fmt);
-    buffer_addvf(&pcy->obuf, fmt, args);
-    va_end(args);
+    buffer_ensure(&pcy->obuf, m_strlen(message) + 64);
+
+    ssize_t size = array_size(pcy->obuf) - array_len(pcy->obuf);
+    ssize_t format_size = query_format(array_ptr(pcy->obuf, array_len(pcy->obuf)),
+                                       size, message, query);
+    if (format_size == -1) {
+        buffer_addstr(&pcy->obuf, message);
+    } else if (format_size > size) {
+        buffer_ensure(&pcy->obuf, format_size + 1);
+        query_format(array_ptr(pcy->obuf, array_len(pcy->obuf)),
+                     array_size(pcy->obuf) - array_len(pcy->obuf),
+                     message, query);
+        array_len(pcy->obuf) += format_size;
+    } else {
+        array_len(pcy->obuf) += format_size;
+    }
     buffer_addstr(&pcy->obuf, "\n\n");
     buffer_consume(&pcy->ibuf, query->eoq - pcy->ibuf.data);
     epoll_modify(pcy->fd, EPOLLIN | EPOLLOUT, pcy);
 }
 
-static bool policy_process(server_t *pcy, const config_t *config)
+static const filter_t *next_filter(server_t *pcy, const filter_t *filter,
+                                   const query_t *query, const filter_hook_t *hook, bool *ok) {
+    if (hook != NULL) {
+        query_context_t *context = pcy->data;
+        if (hook->counter >= 0 && hook->counter < MAX_COUNTERS && hook->cost > 0) {
+            context->context.counters[hook->counter] += hook->cost;
+            debug("request client=%s, from=<%s>, to=<%s>: added %d to counter %d (now %u)",
+                  query->client_name,
+                  query->sender == NULL ? "undefined" : query->sender,
+                  query->recipient == NULL ? "undefined" : query->recipient,
+                  hook->cost, hook->counter, context->context.counters[hook->counter]);
+        }
+    }
+    if (hook == NULL) {
+        warn("request client=%s, from=<%s>, to=<%s>: aborted",
+             query->client_name,
+             query->sender == NULL ? "undefined" : query->sender,
+             query->recipient == NULL ? "undefined" : query->recipient);
+        *ok = false;
+        return NULL;
+    } else if (hook->async) {
+        debug("request client=%s, from=<%s>, to=<%s>: "
+              "asynchronous filter from filter %s",
+               query->client_name,
+               query->sender == NULL ? "undefined" : query->sender,
+               query->recipient == NULL ? "undefined" : query->recipient,
+               filter->name);
+        *ok = true;
+        return NULL;
+    } else if (hook->postfix) {
+        info("request client=%s, from=<%s>, to=<%s>: "
+             "awswer %s from filter %s: \"%s\"",
+             query->client_name,
+             query->sender == NULL ? "undefined" : query->sender,
+             query->recipient == NULL ? "undefined" : query->recipient,
+             htokens[hook->type], filter->name, hook->value);
+        policy_answer(pcy, hook->value);
+        *ok = true;
+        return NULL;
+    } else {
+        debug("request client=%s, from=<%s>, to=<%s>: "
+               "awswer %s from filter %s: next filter %s",
+               query->client_name,
+               query->sender == NULL ? "undefined" : query->sender,
+               query->recipient == NULL ? "undefined" : query->recipient,
+               htokens[hook->type], filter->name,
+               (array_ptr(config->filters, hook->filter_id))->name);
+        return array_ptr(config->filters, hook->filter_id);
+    }
+}
+
+static bool policy_process(server_t *pcy, const config_t *mconfig)
 {
     query_context_t *context = pcy->data;
     const query_t* query = &context->query;
     const filter_t *filter;
-    if (config->entry_points[query->state] == -1) {
+    if (mconfig->entry_points[query->state] == -1) {
         warn("no filter defined for current protocol_state (%d)", query->state);
         return false;
     }
     if (context->context.current_filter != NULL) {
         filter = context->context.current_filter;
     } else {
-        filter = array_ptr(config->filters, config->entry_points[query->state]);
+        filter = array_ptr(mconfig->filters, mconfig->entry_points[query->state]);
     }
+    context->context.current_filter = NULL;
     while (true) {
+        bool  ok = false;
         const filter_hook_t *hook = filter_run(filter, query, &context->context);
-        if (hook == NULL) {
-            warn("request client=%s, from=<%s>, to=<%s>: aborted",
-                 query->client_name,
-                 query->sender == NULL ? "undefined" : query->sender,
-                 query->recipient == NULL ? "undefined" : query->recipient);
-            return false;
-        } else if (hook->async) {
-            debug("request client=%s, from=<%s>, to=<%s>: "
-                  "asynchronous filter from filter %s",
-                   query->client_name,
-                   query->sender == NULL ? "undefined" : query->sender,
-                   query->recipient == NULL ? "undefined" : query->recipient,
-                   filter->name);
-            return true;
-        } else if (hook->postfix) {
-            info("request client=%s, from=<%s>, to=<%s>: "
-                 "awswer %s from filter %s: \"%s\"",
-                 query->client_name,
-                 query->sender == NULL ? "undefined" : query->sender,
-                 query->recipient == NULL ? "undefined" : query->recipient,
-                 htokens[hook->type], filter->name, hook->value);
-            policy_answer(pcy, "%s", hook->value);
-            return true;
-        } else {
-            debug("request client=%s, from=<%s>, to=<%s>: "
-                   "awswer %s from filter %s: next filter %s",
-                   query->client_name,
-                   query->sender == NULL ? "undefined" : query->sender,
-                   query->recipient == NULL ? "undefined" : query->recipient,
-                   htokens[hook->type], filter->name,
-                   (array_ptr(config->filters, hook->filter_id))->name);
-            filter = array_ptr(config->filters, hook->filter_id);
+        filter = next_filter(pcy, filter, query, hook, &ok);
+        if (filter == NULL) {
+            return ok;
         }
     }
 }
 
 static int policy_run(server_t *pcy, void* vconfig)
 {
+    if (sighup) {
+        return 0;
+    }
+
     int search_offs = MAX(0, (int)(pcy->ibuf.len - 1));
     int nb = buffer_read(&pcy->ibuf, pcy->fd, -1);
     const char *eoq;
     query_context_t *context = pcy->data;
     query_t  *query  = &context->query;
-    const config_t *config = vconfig;
+    context->server = pcy;
+    const config_t *mconfig = vconfig;
 
     if (nb < 0) {
         if (errno == EAGAIN || errno == EINTR)
@@ -168,19 +216,39 @@ static int policy_run(server_t *pcy, void* vconfig)
     if (!query_parse(pcy->data, pcy->ibuf.data))
         return -1;
     query->eoq = eoq + strlen("\n\n");
+    if (query->instance == NULL || strcmp(context->context.instance, query->instance) != 0) {
+        filter_context_clean(&context->context);
+        m_strcat(context->context.instance, 64, query->instance);
+    }
     epoll_modify(pcy->fd, 0, pcy);
-    return policy_process(pcy, config) ? 0 : -1;
+    return policy_process(pcy, mconfig) ? 0 : -1;
 }
 
-static bool policy_event(server_t *event, void *config)
+static void policy_async_handler(filter_context_t *context,
+                                 const filter_hook_t *hook)
 {
-    if (!policy_process(event, config)) {
-        server_release(event);
-        return true;
+    bool ok = false;
+    const filter_t *filter = context->current_filter;
+    query_context_t *qctx  = context->data;
+    query_t         *query = &qctx->query;
+    server_t        *server = qctx->server;
+
+    context->current_filter = next_filter(server, filter, query, hook, &ok);
+    if (context->current_filter != NULL) {
+        ok = policy_process(server, config);
+    }
+    if (!ok) {
+        server_release(server);
     }
-    return true;
 }
 
+static int postlicyd_init(void)
+{
+    filter_async_handler_register(policy_async_handler);
+    return 0;
+}
+module_init(postlicyd_init);
+
 int start_listener(int port)
 {
     return start_server(port, NULL, NULL);
@@ -256,7 +324,7 @@ int main(int argc, char *argv[])
         return EXIT_FAILURE;
     }
 
-    config_t *config = config_read(argv[optind]);
+    config = config_read(argv[optind]);
     if (config == NULL) {
         return EXIT_FAILURE;
     }
@@ -275,6 +343,6 @@ int main(int argc, char *argv[])
         return EXIT_FAILURE;
     } else {
         return server_loop(query_starter, query_stopper,
-                           policy_run, policy_event, config_refresh, config);
+                           policy_run, config_refresh, config);
     }
 }