commit 738b0152abd6562520e087070ddc79446507e5cb Author: Alan T. DeKok <aland@freeradius.org> Date: Mon Oct 6 11:33:41 2008 +0200 Move socket listening code to plugin modules. This makes the server core a fair bit simpler, and allows for the creation of many new kinds of listening sockets. The next step is to delete the RAD_LISTEN_TYPE_* names, as they're no longer really needed. The goal is to move much of src/main/event.c into the plugin modules, so that the server core isn't are of the underlying protocols. Files changed: src/include/dhcp.h | 71 + src/include/libradius.h | 2 + src/include/radiusd.h | 87 ++- src/include/smodule.h | 130 -- src/include/stats.h | 5 +- src/include/vmps.h | 20 + src/include/vqp.h | 35 + src/lib/Makefile | 4 +- src/lib/dhcp.c | 1185 ++++++++++++++++ src/lib/vqp.c | 684 +++++++++ src/main/Makefile.in | 11 +- src/main/acct.c | 183 +++ src/main/auth.c | 692 +++++++++ src/main/command.c | 1856 ++++++++++++++++++++++++ src/main/detail.c | 836 +++++++++++ src/main/dhcpd.c | 177 +++ src/main/event.c | 54 +- src/main/listen.c | 699 +++++++++- src/main/session.c | 53 +- src/main/stats.c | 447 ++++++- src/main/threads.c | 57 +- src/main/vmps.c | 115 ++ src/modules/Makefile | 3 +- src/modules/frs_acct/Makefile | 11 - src/modules/frs_acct/frs_acct.c | 324 ----- src/modules/frs_auth/Makefile | 11 - src/modules/frs_auth/frs_auth.c | 857 ------------ src/modules/frs_control/Makefile | 11 - src/modules/frs_control/frs_control.c | 1863 ------------------------- src/modules/frs_detail/Makefile | 11 - src/modules/frs_detail/frs_detail.c | 989 ------------- src/modules/frs_dhcp/Makefile | 11 - src/modules/frs_dhcp/dhcp.c | 1185 ---------------- src/modules/frs_dhcp/dhcp.h | 71 - src/modules/frs_dhcp/frs_dhcp.c | 188 --- src/modules/frs_proxy/Makefile | 11 - src/modules/frs_proxy/frs_proxy.c | 130 -- src/modules/frs_status/Makefile | 11 - src/modules/frs_status/frs_status.c | 628 --------- src/modules/frs_vmps/Makefile | 11 - src/modules/frs_vmps/frs_vmps.c | 122 -- src/modules/frs_vmps/vqp.c | 691 --------- src/modules/frs_vmps/vqp.h | 35 - src/modules/rlm_eap/types/rlm_eap_peap/peap.c | 2 +- src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c | 2 +- 45 files changed, 7093 insertions(+), 7488 deletions(-) ====================================================================== commit 2bf8033089c0e67dd6d9b0529e70cbd5f405e631 Author: Alan T. DeKok <aland@freeradius.org> Date: Sun Sep 28 09:07:22 2008 +0200 Temporarily drop permissions See "suid demystified" paper. We drop permissions, but keep a saved UID. Then we restore permissions while binding to sockets. This lets us run as an unprivileged user, but still bind to privileged ports. TO DO: add '-u user -g group -R chroot' to command-line options, and switch UIDs *immediately* on start. This minimizes the amount of code that runs as root. TO DO: move suidup/down calls to wrap the bind() calls, and the BINDTODEVICE calls, to even further minimize the code. Files changed: src/main/event.c | 59 ------------------------------------------------- src/main/mainconfig.c | 26 ++++----------------- 2 files changed, 5 insertions(+), 80 deletions(-) ====================================================================== commit 85359d03d71adf0c118dc72240f2f5de2616b0ca Author: Alan T. DeKok <aland@freeradius.org> Date: Sat Oct 4 10:39:52 2008 +0200 Use SUN_LEN, which fixes portability issues Files changed: src/main/command.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit 4c547eab62f5b42cad5c41831c9bfbdc24ea562d Author: Alan T. DeKok <aland@freeradius.org> Date: Sun Oct 5 10:38:19 2008 +0200 Moved to libtool 2.2.4 Lots of weird changes, including stupid things... Files changed: Makefile | 2 +- acinclude.m4 | 60 - aclocal.m4 | 112 +- config.guess | 24 +- config.sub | 38 +- configure |17362 ++++++++++++++++++---------------- configure.in | 10 +- libltdl/Makefile.am | 172 +- libltdl/Makefile.in | 520 +- libltdl/README | 27 - libltdl/acinclude.m4 | 6818 ++++++++++++++ libltdl/aclocal.m4 | 6814 +------------- libltdl/argz.c | 254 - libltdl/argz_.h | 71 - libltdl/config-h.in | 108 +- libltdl/config.guess | 1471 +++ libltdl/config.sub | 1599 ++++ libltdl/config/compile | 142 - libltdl/config/config.guess | 1526 --- libltdl/config/config.sub | 1658 ---- libltdl/config/depcomp | 589 -- libltdl/config/install-sh | 519 - libltdl/config/ltmain.sh | 7874 ---------------- libltdl/config/missing | 367 - libltdl/configure |20823 +++++++++++++++++++++++++++++------------ libltdl/configure.ac | 90 +- libltdl/install-sh | 401 + libltdl/libltdl/lt__alloc.h | 58 - libltdl/libltdl/lt__dirent.h | 87 - libltdl/libltdl/lt__glibc.h | 83 - libltdl/libltdl/lt__private.h | 148 - libltdl/libltdl/lt__strl.h | 53 - libltdl/libltdl/lt_dlloader.h | 90 - libltdl/libltdl/lt_error.h | 85 - libltdl/libltdl/lt_system.h | 154 - libltdl/libltdl/slist.h | 94 - libltdl/loaders/dld_link.c | 158 - libltdl/loaders/dlopen.c | 242 - libltdl/loaders/dyld.c | 511 - libltdl/loaders/load_add_on.c | 167 - libltdl/loaders/loadlibrary.c | 251 - libltdl/loaders/preopen.c | 375 - libltdl/loaders/shl_load.c | 222 - libltdl/lt__alloc.c | 95 - libltdl/lt__dirent.c | 107 - libltdl/lt__strl.c | 127 - libltdl/lt_dlloader.c | 210 - libltdl/lt_error.c | 110 - libltdl/ltdl.c | 4033 ++++++-- libltdl/ltdl.h | 388 +- libltdl/ltmain.sh | 6863 ++++++++++++++ libltdl/m4/argz.m4 | 79 - libltdl/m4/libtool.m4 | 7309 --------------- libltdl/m4/ltdl.m4 | 824 -- libltdl/m4/ltoptions.m4 | 368 - libltdl/m4/ltsugar.m4 | 123 - libltdl/m4/ltversion.m4 | 23 - libltdl/m4/lt~obsolete.m4 | 92 - libltdl/missing | 353 + libltdl/slist.c | 375 - ltmain.sh | 7907 +++++++--------- src/include/autoconf.h.in | 108 - 62 files changed, 48680 insertions(+), 53043 deletions(-) ======================================================================