src/ngircd/ngircd.c

   1 /*
   2  * ngIRCd -- The Next Generation IRC Daemon
   3  * Copyright (c)2001-2012 Alexander Barton (alex@barton.de) and Contributors.
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  * Please read the file COPYING, README and AUTHORS for more information.
  10  */
  11
  12 #include "portab.h"
  13
  14 /**
  15  * @file
  16  * The main program, including the C function main() which is called
  17  * by the loader of the operating system.
  18  */
  19
  20 #include "imp.h"
  21 #include <assert.h>
  22 #include <errno.h>
  23 #include <stdio.h>
  24 #include <stdlib.h>
  25 #include <signal.h>
  26 #include <string.h>
  27 #include <unistd.h>
  28 #include <time.h>
  29 #include <sys/types.h>
  30 #include <sys/stat.h>
  31 #include <fcntl.h>
  32 #include <pwd.h>
  33 #include <grp.h>
  34
  35 #if defined(DEBUG) && defined(HAVE_MTRACE)
  36 #include <mcheck.h>
  37 #endif
  38
  39 #include "defines.h"
  40 #include "conn.h"
  41 #include "class.h"
  42 #include "conf-ssl.h"
  43 #include "channel.h"
  44 #include "conf.h"
  45 #include "lists.h"
  46 #include "log.h"
  47 #include "parse.h"
  48 #include "sighandlers.h"
  49 #include "io.h"
  50 #include "irc.h"
  51
  52 #include "exp.h"
  53 #include "ngircd.h"
  54
  55
  56 static void Show_Version PARAMS(( void ));
  57 static void Show_Help PARAMS(( void ));
  58
  59 static void Pidfile_Create PARAMS(( pid_t pid ));
  60 static void Pidfile_Delete PARAMS(( void ));
  61
  62 static void Fill_Version PARAMS(( void ));
  63
  64 static void Random_Init PARAMS(( void ));
  65
  66 static void Setup_FDStreams PARAMS(( int fd ));
  67
  68 static bool NGIRCd_Init PARAMS(( bool ));
  69
  70
  71 /**
  72  * The main() function of ngIRCd.
  73  *
  74  * Here all starts: this function is called by the operating system loader,
  75  * it is the first portion of code executed of ngIRCd.
  76  *
  77  * @param argc The number of arguments passed to ngIRCd on the command line.
  78  * @param argv An array containing all the arguments passed to ngIRCd.
  79  * @return Global exit code of ngIRCd, zero on success.
  80  */
  81 GLOBAL int
  82 main(int argc, const char *argv[])
  83 {
  84         bool ok, configtest = false;
  85         bool NGIRCd_NoDaemon = false;
  86         int i;
  87         size_t n;
  88
  89 #if defined(DEBUG) && defined(HAVE_MTRACE)
  90         /* enable GNU libc memory tracing when running in debug mode
  91          * and functionality available */
  92         mtrace();
  93 #endif
  94
  95         umask(0077);
  96
  97         NGIRCd_SignalQuit = NGIRCd_SignalRestart = false;
  98         NGIRCd_Passive = false;
  99 #ifdef DEBUG
 100         NGIRCd_Debug = false;
 101 #endif
 102 #ifdef SNIFFER
 103         NGIRCd_Sniffer = false;
 104 #endif
 105         strlcpy(NGIRCd_ConfFile, SYSCONFDIR, sizeof(NGIRCd_ConfFile));
 106         strlcat(NGIRCd_ConfFile, CONFIG_FILE, sizeof(NGIRCd_ConfFile));
 107
 108         Fill_Version();
 109
 110         /* parse conmmand line */
 111         for (i = 1; i < argc; i++) {
 112                 ok = false;
 113                 if (argv[i][0] == '-' && argv[i][1] == '-') {
 114                         /* long option */
 115                         if (strcmp(argv[i], "--config") == 0) {
 116                                 if (i + 1 < argc) {
 117                                         /* Ok, there's an parameter left */
 118                                         strlcpy(NGIRCd_ConfFile, argv[i+1],
 119                                                 sizeof(NGIRCd_ConfFile));
 120                                         /* next parameter */
 121                                         i++; ok = true;
 122                                 }
 123                         }
 124                         if (strcmp(argv[i], "--configtest") == 0) {
 125                                 configtest = true;
 126                                 ok = true;
 127                         }
 128 #ifdef DEBUG
 129                         if (strcmp(argv[i], "--debug") == 0) {
 130                                 NGIRCd_Debug = true;
 131                                 ok = true;
 132                         }
 133 #endif
 134                         if (strcmp(argv[i], "--help") == 0) {
 135                                 Show_Version();
 136                                 puts(""); Show_Help( ); puts( "" );
 137                                 exit(1);
 138                         }
 139                         if (strcmp(argv[i], "--nodaemon") == 0) {
 140                                 NGIRCd_NoDaemon = true;
 141                                 ok = true;
 142                         }
 143                         if (strcmp(argv[i], "--passive") == 0) {
 144                                 NGIRCd_Passive = true;
 145                                 ok = true;
 146                         }
 147 #ifdef SNIFFER
 148                         if (strcmp(argv[i], "--sniffer") == 0) {
 149                                 NGIRCd_Sniffer = true;
 150                                 ok = true;
 151                         }
 152 #endif
 153                         if (strcmp(argv[i], "--version") == 0) {
 154                                 Show_Version();
 155                                 exit(1);
 156                         }
 157                 }
 158                 else if(argv[i][0] == '-' && argv[i][1] != '-') {
 159                         /* short option */
 160                         for (n = 1; n < strlen(argv[i]); n++) {
 161                                 ok = false;
 162 #ifdef DEBUG
 163                                 if (argv[i][n] == 'd') {
 164                                         NGIRCd_Debug = true;
 165                                         ok = true;
 166                                 }
 167 #endif
 168                                 if (argv[i][n] == 'f') {
 169                                         if (!argv[i][n+1] && i+1 < argc) {
 170                                                 /* Ok, next character is a blank */
 171                                                 strlcpy(NGIRCd_ConfFile, argv[i+1],
 172                                                         sizeof(NGIRCd_ConfFile));
 173
 174                                                 /* go to the following parameter */
 175                                                 i++;
 176                                                 n = strlen(argv[i]);
 177                                                 ok = true;
 178                                         }
 179                                 }
 180
 181                                 if (argv[i][n] == 'h') {
 182                                         Show_Version();
 183                                         puts(""); Show_Help(); puts("");
 184                                         exit(1);
 185                                 }
 186
 187                                 if (argv[i][n] == 'n') {
 188                                         NGIRCd_NoDaemon = true;
 189                                         ok = true;
 190                                 }
 191                                 if (argv[i][n] == 'p') {
 192                                         NGIRCd_Passive = true;
 193                                         ok = true;
 194                                 }
 195 #ifdef SNIFFER
 196                                 if (argv[i][n] == 's') {
 197                                         NGIRCd_Sniffer = true;
 198                                         ok = true;
 199                                 }
 200 #endif
 201                                 if (argv[i][n] == 't') {
 202                                         configtest = true;
 203                                         ok = true;
 204                                 }
 205
 206                                 if (argv[i][n] == 'V') {
 207                                         Show_Version();
 208                                         exit(1);
 209                                 }
 210
 211                                 if (!ok) {
 212                                         printf("%s: invalid option \"-%c\"!\n",
 213                                                PACKAGE_NAME, argv[i][n]);
 214                                         printf("Try \"%s --help\" for more information.\n",
 215                                                PACKAGE_NAME);
 216                                         exit(1);
 217                                 }
 218                         }
 219
 220                 }
 221                 if (!ok) {
 222                         printf("%s: invalid option \"%s\"!\n",
 223                                PACKAGE_NAME, argv[i]);
 224                         printf("Try \"%s --help\" for more information.\n",
 225                                PACKAGE_NAME);
 226                         exit(1);
 227                 }
 228         }
 229
 230         /* Debug level for "VERSION" command */
 231         NGIRCd_DebugLevel[0] = '\0';
 232 #ifdef DEBUG
 233         if (NGIRCd_Debug)
 234                 strcpy(NGIRCd_DebugLevel, "1");
 235 #endif
 236 #ifdef SNIFFER
 237         if (NGIRCd_Sniffer) {
 238                 NGIRCd_Debug = true;
 239                 strcpy(NGIRCd_DebugLevel, "2");
 240         }
 241 #endif
 242
 243         if (configtest) {
 244                 Show_Version(); puts("");
 245                 exit(Conf_Test());
 246         }
 247
 248         while (!NGIRCd_SignalQuit) {
 249                 /* Initialize global variables */
 250                 NGIRCd_Start = time(NULL);
 251                 (void)strftime(NGIRCd_StartStr, 64,
 252                                "%a %b %d %Y at %H:%M:%S (%Z)",
 253                                localtime(&NGIRCd_Start));
 254
 255                 NGIRCd_SignalRestart = false;
 256                 NGIRCd_SignalQuit = false;
 257
 258                 /* Initialize modules, part I */
 259                 Log_Init(!NGIRCd_NoDaemon);
 260                 Random_Init();
 261                 Conf_Init();
 262                 Log_ReInit();
 263
 264                 /* Initialize the "main program": chroot environment, user and
 265                  * group ID, ... */
 266                 if (!NGIRCd_Init(NGIRCd_NoDaemon)) {
 267                         Log(LOG_ALERT, "Fatal: Initialization failed");
 268                         exit(1);
 269                 }
 270
 271                 /* Initialize modules, part II: these functions are eventually
 272                  * called with already dropped privileges ... */
 273                 Channel_Init();
 274                 Client_Init();
 275                 Conn_Init();
 276                 Class_Init();
 277
 278                 if (!io_library_init(CONNECTION_POOL)) {
 279                         Log(LOG_ALERT,
 280                             "Fatal: Could not initialize IO routines: %s",
 281                             strerror(errno));
 282                         exit(1);
 283                 }
 284
 285                 if (!Signals_Init()) {
 286                         Log(LOG_ALERT,
 287                             "Fatal: Could not set up signal handlers: %s",
 288                             strerror(errno));
 289                         exit(1);
 290                 }
 291
 292                 /* Create protocol and server identification. The syntax
 293                  * used by ngIRCd in PASS commands and the known "extended
 294                  * flags" are described in doc/Protocol.txt. */
 295 #ifdef IRCPLUS
 296                 snprintf(NGIRCd_ProtoID, sizeof NGIRCd_ProtoID, "%s%s %s|%s:%s",
 297                          PROTOVER, PROTOIRCPLUS, PACKAGE_NAME, PACKAGE_VERSION,
 298                          IRCPLUSFLAGS);
 299 #ifdef ZLIB
 300                 strcat(NGIRCd_ProtoID, "Z");
 301 #endif
 302                 if (Conf_OperCanMode)
 303                         strcat(NGIRCd_ProtoID, "o");
 304 #else /* IRCPLUS */
 305                 snprintf(NGIRCd_ProtoID, sizeof NGIRCd_ProtoID, "%s%s %s|%s",
 306                          PROTOVER, PROTOIRC, PACKAGE_NAME, PACKAGE_VERSION);
 307 #endif /* IRCPLUS */
 308                 strlcat(NGIRCd_ProtoID, " P", sizeof NGIRCd_ProtoID);
 309 #ifdef ZLIB
 310                 strlcat(NGIRCd_ProtoID, "Z", sizeof NGIRCd_ProtoID);
 311 #endif
 312                 LogDebug("Protocol and server ID is \"%s\".", NGIRCd_ProtoID);
 313
 314                 Channel_InitPredefined();
 315
 316                 if (Conn_InitListeners() < 1) {
 317                         Log(LOG_ALERT,
 318                             "Server isn't listening on a single port!" );
 319                         Log(LOG_ALERT,
 320                             "%s exiting due to fatal errors!", PACKAGE_NAME);
 321                         Pidfile_Delete();
 322                         exit(1);
 323                 }
 324
 325                 /* Main Run Loop */
 326                 Conn_Handler();
 327
 328                 Conn_Exit();
 329                 Client_Exit();
 330                 Channel_Exit();
 331                 Class_Exit();
 332                 Log_Exit();
 333                 Signals_Exit();
 334         }
 335         Pidfile_Delete();
 336
 337         return 0;
 338 } /* main */
 339
 340
 341 /**
 342  * Generate ngIRCd "version strings".
 343  *
 344  * The ngIRCd version information is generated once and then stored in the
 345  * NGIRCd_Version and NGIRCd_VersionAddition string variables for further
 346  * usage, for example by the IRC command "VERSION" and the --version command
 347  * line switch.
 348  */
 349 static void
 350 Fill_Version(void)
 351 {
 352         NGIRCd_VersionAddition[0] = '\0';
 353
 354 #ifdef DEBUG
 355         if (NGIRCd_VersionAddition[0])
 356                 strlcat(NGIRCd_VersionAddition, "+",
 357                         sizeof NGIRCd_VersionAddition);
 358         strlcat(NGIRCd_VersionAddition, "DEBUG",
 359                 sizeof NGIRCd_VersionAddition);
 360 #endif
 361 #ifdef IDENTAUTH
 362         if (NGIRCd_VersionAddition[0])
 363                 strlcat(NGIRCd_VersionAddition, "+",
 364                         sizeof NGIRCd_VersionAddition);
 365         strlcat(NGIRCd_VersionAddition, "IDENT",
 366                 sizeof NGIRCd_VersionAddition);
 367 #endif
 368 #ifdef WANT_IPV6
 369         if (NGIRCd_VersionAddition[0])
 370                 strlcat(NGIRCd_VersionAddition, "+",
 371                         sizeof(NGIRCd_VersionAddition));
 372         strlcat(NGIRCd_VersionAddition, "IPv6",
 373                 sizeof(NGIRCd_VersionAddition));
 374 #endif
 375 #ifdef IRCPLUS
 376         if (NGIRCd_VersionAddition[0])
 377                 strlcat(NGIRCd_VersionAddition, "+",
 378                         sizeof NGIRCd_VersionAddition);
 379         strlcat(NGIRCd_VersionAddition, "IRCPLUS",
 380                 sizeof NGIRCd_VersionAddition);
 381 #endif
 382 #ifdef PAM
 383         if (NGIRCd_VersionAddition[0])
 384                 strlcat(NGIRCd_VersionAddition, "+",
 385                         sizeof NGIRCd_VersionAddition);
 386         strlcat(NGIRCd_VersionAddition, "PAM",
 387                 sizeof NGIRCd_VersionAddition);
 388 #endif
 389 #ifdef STRICT_RFC
 390         if (NGIRCd_VersionAddition[0])
 391                 strlcat(NGIRCd_VersionAddition, "+",
 392                         sizeof NGIRCd_VersionAddition);
 393         strlcat(NGIRCd_VersionAddition, "RFC",
 394                 sizeof NGIRCd_VersionAddition);
 395 #endif
 396 #ifdef SNIFFER
 397         if (NGIRCd_VersionAddition[0])
 398                 strlcat(NGIRCd_VersionAddition, "+",
 399                         sizeof NGIRCd_VersionAddition);
 400         strlcat(NGIRCd_VersionAddition, "SNIFFER",
 401                 sizeof NGIRCd_VersionAddition);
 402 #endif
 403 #ifdef SSL_SUPPORT
 404         if (NGIRCd_VersionAddition[0])
 405                 strlcat(NGIRCd_VersionAddition, "+",
 406                         sizeof NGIRCd_VersionAddition);
 407         strlcat(NGIRCd_VersionAddition, "SSL",
 408                 sizeof NGIRCd_VersionAddition);
 409 #endif
 410 #ifdef SYSLOG
 411         if (NGIRCd_VersionAddition[0])
 412                 strlcat(NGIRCd_VersionAddition, "+",
 413                         sizeof NGIRCd_VersionAddition);
 414         strlcat(NGIRCd_VersionAddition, "SYSLOG",
 415                 sizeof NGIRCd_VersionAddition);
 416 #endif
 417 #ifdef TCPWRAP
 418         if (NGIRCd_VersionAddition[0])
 419                 strlcat(NGIRCd_VersionAddition, "+",
 420                         sizeof NGIRCd_VersionAddition);
 421         strlcat(NGIRCd_VersionAddition, "TCPWRAP",
 422                 sizeof NGIRCd_VersionAddition);
 423 #endif
 424 #ifdef ZLIB
 425         if (NGIRCd_VersionAddition[0])
 426                 strlcat(NGIRCd_VersionAddition, "+",
 427                         sizeof NGIRCd_VersionAddition);
 428         strlcat(NGIRCd_VersionAddition, "ZLIB",
 429                 sizeof NGIRCd_VersionAddition);
 430 #endif
 431         if (NGIRCd_VersionAddition[0])
 432                 strlcat(NGIRCd_VersionAddition, "-",
 433                         sizeof(NGIRCd_VersionAddition));
 434
 435         strlcat(NGIRCd_VersionAddition, HOST_CPU,
 436                 sizeof(NGIRCd_VersionAddition));
 437         strlcat(NGIRCd_VersionAddition, "/", sizeof(NGIRCd_VersionAddition));
 438         strlcat(NGIRCd_VersionAddition, HOST_VENDOR,
 439                 sizeof(NGIRCd_VersionAddition));
 440         strlcat(NGIRCd_VersionAddition, "/", sizeof(NGIRCd_VersionAddition));
 441         strlcat(NGIRCd_VersionAddition, HOST_OS,
 442                 sizeof(NGIRCd_VersionAddition));
 443
 444         snprintf(NGIRCd_Version, sizeof NGIRCd_Version, "%s %s-%s",
 445                  PACKAGE_NAME, PACKAGE_VERSION, NGIRCd_VersionAddition);
 446 } /* Fill_Version */
 447
 448
 449 /**
 450  * Display copyright and version information of ngIRCd on the console.
 451  */
 452 static void
 453 Show_Version( void )
 454 {
 455         puts( NGIRCd_Version );
 456         puts( "Copyright (c)2001-2012 Alexander Barton (<alex@barton.de>) and Contributors." );
 457         puts( "Homepage: <http://ngircd.barton.de/>\n" );
 458         puts( "This is free software; see the source for copying conditions. There is NO" );
 459         puts( "warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." );
 460 } /* Show_Version */
 461
 462
 463 /**
 464  * Display a short help text on the console.
 465  * This help depends on the configuration of the executable and only shows
 466  * options that are actually enabled.
 467  */
 468 static void
 469 Show_Help( void )
 470 {
 471 #ifdef DEBUG
 472         puts( "  -d, --debug        log extra debug messages" );
 473 #endif
 474         puts( "  -f, --config <f>   use file <f> as configuration file" );
 475         puts( "  -n, --nodaemon     don't fork and don't detach from controlling terminal" );
 476         puts( "  -p, --passive      disable automatic connections to other servers" );
 477 #ifdef SNIFFER
 478         puts( "  -s, --sniffer      enable network sniffer and display all IRC traffic" );
 479 #endif
 480         puts( "  -t, --configtest   read, validate and display configuration; then exit" );
 481         puts( "  -V, --version      output version information and exit" );
 482         puts( "  -h, --help         display this help and exit" );
 483 } /* Show_Help */
 484
 485
 486 /**
 487  * Delete the file containing the process ID (PID).
 488  */
 489 static void
 490 Pidfile_Delete( void )
 491 {
 492         /* Pidfile configured? */
 493         if( ! Conf_PidFile[0] ) return;
 494
 495 #ifdef DEBUG
 496         Log( LOG_DEBUG, "Removing PID file (%s) ...", Conf_PidFile );
 497 #endif
 498
 499         if( unlink( Conf_PidFile ))
 500                 Log( LOG_ERR, "Error unlinking PID file (%s): %s", Conf_PidFile, strerror( errno ));
 501 } /* Pidfile_Delete */
 502
 503
 504 /**
 505  * Create the file containing the process ID of ngIRCd ("PID file").
 506  *
 507  * @param pid   The process ID to be stored in this file.
 508  */
 509 static void
 510 Pidfile_Create(pid_t pid)
 511 {
 512         int pidfd;
 513         char pidbuf[64];
 514         int len;
 515
 516         /* Pidfile configured? */
 517         if( ! Conf_PidFile[0] ) return;
 518
 519 #ifdef DEBUG
 520         Log( LOG_DEBUG, "Creating PID file (%s) ...", Conf_PidFile );
 521 #endif
 522
 523         pidfd = open( Conf_PidFile, O_RDWR|O_CREAT|O_EXCL, S_IRUSR|S_IWUSR|S_IRGRP|S_IROTH);
 524         if ( pidfd < 0 ) {
 525                 Log( LOG_ERR, "Error writing PID file (%s): %s", Conf_PidFile, strerror( errno ));
 526                 return;
 527         }
 528
 529         len = snprintf(pidbuf, sizeof pidbuf, "%ld\n", (long)pid);
 530         if (len < 0 || len >= (int)sizeof pidbuf) {
 531                 Log(LOG_ERR, "Error converting pid");
 532                 close(pidfd);
 533                 return;
 534         }
 535
 536         if (write(pidfd, pidbuf, (size_t)len) != (ssize_t)len)
 537                 Log( LOG_ERR, "Can't write PID file (%s): %s", Conf_PidFile, strerror( errno ));
 538
 539         if( close(pidfd) != 0 )
 540                 Log( LOG_ERR, "Error closing PID file (%s): %s", Conf_PidFile, strerror( errno ));
 541 } /* Pidfile_Create */
 542
 543
 544 /**
 545  * Redirect stdin, stdout and stderr to apropriate file handles.
 546  *
 547  * @param fd    The file handle stdin, stdout and stderr should be redirected to.
 548  */
 549 static void
 550 Setup_FDStreams(int fd)
 551 {
 552         if (fd < 0)
 553                 return;
 554
 555         fflush(stdout);
 556         fflush(stderr);
 557
 558         /* Create new stdin(0), stdout(1) and stderr(2) descriptors */
 559         dup2( fd, 0 ); dup2( fd, 1 ); dup2( fd, 2 );
 560 } /* Setup_FDStreams */
 561
 562
 563 /**
 564  * Get user and group ID of unprivileged "nobody" user.
 565  *
 566  * @param uid   User ID
 567  * @param gid   Group ID
 568  * @return      true on success.
 569  */
 570 static bool
 571 NGIRCd_getNobodyID(uid_t *uid, gid_t *gid )
 572 {
 573         struct passwd *pwd;
 574
 575 #ifdef __CYGWIN__
 576         /* Cygwin kludge.
 577          * It can return EINVAL instead of EPERM
 578          * so, if we are already unprivileged,
 579          * use id of current user.
 580          */
 581         if (geteuid() && getuid()) {
 582                 *uid = getuid();
 583                 *gid = getgid();
 584                 return true;
 585         }
 586 #endif
 587
 588         pwd = getpwnam("nobody");
 589         if (!pwd)
 590                 return false;
 591
 592         if (!pwd->pw_uid || !pwd->pw_gid)
 593                 return false;
 594
 595         *uid = pwd->pw_uid;
 596         *gid = pwd->pw_gid;
 597         endpwent();
 598
 599         return true;
 600 } /* NGIRCd_getNobodyID */
 601
 602
 603 static bool
 604 Random_Init_Kern(const char *file)
 605 {
 606         unsigned int seed;
 607         bool ret = false;
 608         int fd = open(file, O_RDONLY);
 609         if (fd >= 0) {
 610                 if (read(fd, &seed, sizeof(seed)) == sizeof(seed))
 611                         ret = true;
 612                 close(fd);
 613                 srand(seed);
 614         }
 615         return ret;
 616 }
 617
 618 /**
 619  * Initialize libc rand(3) number generator
 620  */
 621 static void
 622 Random_Init(void)
 623 {
 624         if (Random_Init_Kern("/dev/urandom"))
 625                 return;
 626         if (Random_Init_Kern("/dev/random"))
 627                 return;
 628         if (Random_Init_Kern("/dev/arandom"))
 629                 return;
 630         srand(rand() ^ (unsigned)getpid() ^ (unsigned)time(NULL));
 631 }
 632
 633
 634 /**
 635  * Initialize ngIRCd daemon.
 636  *
 637  * @param NGIRCd_NoDaemon Set to true if ngIRCd should run in the
 638  *              foreground (and not as a daemon).
 639  * @return true on success.
 640  */
 641 static bool
 642 NGIRCd_Init(bool NGIRCd_NoDaemon)
 643 {
 644         static bool initialized;
 645         bool chrooted = false;
 646         struct passwd *pwd;
 647         struct group *grp;
 648         int real_errno, fd = -1;
 649         pid_t pid;
 650
 651         if (initialized)
 652                 return true;
 653
 654         if (!NGIRCd_NoDaemon) {
 655                 /* open /dev/null before chroot() */
 656                 fd = open( "/dev/null", O_RDWR);
 657                 if (fd < 0)
 658                         Log(LOG_WARNING, "Could not open /dev/null: %s",
 659                             strerror(errno));
 660         }
 661
 662         /* SSL initialization */
 663         if (!ConnSSL_InitLibrary())
 664                 Log(LOG_WARNING,
 665                     "Warning: Error during SSL initialization, continuing ...");
 666
 667         /* Change root */
 668         if (Conf_Chroot[0]) {
 669                 if (chdir(Conf_Chroot) != 0) {
 670                         Log(LOG_ERR, "Can't chdir() in ChrootDir (%s): %s",
 671                             Conf_Chroot, strerror(errno));
 672                         goto out;
 673                 }
 674
 675                 if (chroot(Conf_Chroot) != 0) {
 676                         Log(LOG_ERR,
 677                             "Can't change root directory to \"%s\": %s",
 678                             Conf_Chroot, strerror(errno));
 679                         goto out;
 680                 } else {
 681                         chrooted = true;
 682                         Log(LOG_INFO,
 683                             "Changed root and working directory to \"%s\".",
 684                             Conf_Chroot);
 685                 }
 686         }
 687
 688         /* Check user ID */
 689         if (Conf_UID == 0) {
 690                 pwd = getpwuid(0);
 691                 Log(LOG_INFO,
 692                     "ServerUID must not be %s(0), using \"nobody\" instead.",
 693                     pwd ? pwd->pw_name : "?");
 694                 if (!NGIRCd_getNobodyID(&Conf_UID, &Conf_GID)) {
 695                         Log(LOG_WARNING,
 696                             "Could not get user/group ID of user \"nobody\": %s",
 697                             errno ? strerror(errno) : "not found" );
 698                         goto out;
 699                 }
 700         }
 701
 702         /* Change group ID */
 703         if (getgid() != Conf_GID) {
 704                 if (setgid(Conf_GID) != 0) {
 705                         real_errno = errno;
 706                         grp = getgrgid(Conf_GID);
 707                         Log(LOG_ERR, "Can't change group ID to %s(%u): %s",
 708                             grp ? grp->gr_name : "?", Conf_GID,
 709                             strerror(errno));
 710                         if (real_errno != EPERM)
 711                                 goto out;
 712                 }
 713         }
 714
 715         /* Change user ID */
 716         if (getuid() != Conf_UID) {
 717                 if (setuid(Conf_UID) != 0) {
 718                         real_errno = errno;
 719                         pwd = getpwuid(Conf_UID);
 720                         Log(LOG_ERR, "Can't change user ID to %s(%u): %s",
 721                             pwd ? pwd->pw_name : "?", Conf_UID,
 722                             strerror(errno));
 723                         if (real_errno != EPERM)
 724                                 goto out;
 725                 }
 726         }
 727
 728         initialized = true;
 729
 730         /* Normally a child process is forked which isn't any longer
 731          * connected to ther controlling terminal. Use "--nodaemon"
 732          * to disable this "daemon mode" (useful for debugging). */
 733         if (!NGIRCd_NoDaemon) {
 734                 pid = fork();
 735                 if (pid > 0) {
 736                         /* "Old" process: exit. */
 737                         exit(0);
 738                 }
 739                 if (pid < 0) {
 740                         /* Error!? */
 741                         fprintf(stderr,
 742                                 "%s: Can't fork: %s!\nFatal error, exiting now ...\n",
 743                                 PACKAGE_NAME, strerror(errno));
 744                         exit(1);
 745                 }
 746
 747                 /* New child process */
 748 #ifdef HAVE_SETSID
 749                 (void)setsid();
 750 #else
 751                 setpgrp(0, getpid());
 752 #endif
 753                 if (chdir("/") != 0)
 754                         Log(LOG_ERR, "Can't change directory to '/': %s",
 755                                      strerror(errno));
 756
 757                 /* Detach stdin, stdout and stderr */
 758                 Setup_FDStreams(fd);
 759                 if (fd > 2)
 760                         close(fd);
 761         }
 762         pid = getpid();
 763
 764         Pidfile_Create(pid);
 765
 766         /* Check UID/GID we are running as, can be different from values
 767          * configured (e. g. if we were already started with a UID>0. */
 768         Conf_UID = getuid();
 769         Conf_GID = getgid();
 770
 771         pwd = getpwuid(Conf_UID);
 772         grp = getgrgid(Conf_GID);
 773
 774         Log(LOG_INFO, "Running as user %s(%ld), group %s(%ld), with PID %ld.",
 775             pwd ? pwd->pw_name : "unknown", (long)Conf_UID,
 776             grp ? grp->gr_name : "unknown", (long)Conf_GID, (long)pid);
 777
 778         if (chrooted) {
 779                 Log(LOG_INFO, "Running with root directory \"%s\".",
 780                     Conf_Chroot );
 781                 return true;
 782         } else
 783                 Log(LOG_INFO, "Not running with changed root directory.");
 784
 785         /* Change working directory to home directory of the user we are
 786          * running as (only when running in daemon mode and not in chroot) */
 787
 788         if (NGIRCd_NoDaemon)
 789                 return true;
 790
 791         if (pwd) {
 792                 if (chdir(pwd->pw_dir) == 0)
 793                         Log(LOG_DEBUG,
 794                             "Changed working directory to \"%s\" ...",
 795                             pwd->pw_dir);
 796                 else
 797                         Log(LOG_INFO,
 798                             "Notice: Can't change working directory to \"%s\": %s",
 799                             pwd->pw_dir, strerror(errno));
 800         } else
 801                 Log(LOG_ERR, "Can't get user informaton for UID %d!?", Conf_UID);
 802
 803         return true;
 804  out:
 805         if (fd > 2)
 806                 close(fd);
 807         return false;
 808 } /* NGIRCd_Init */
 809
 810
 811 /* -eof- */