src/ngircd/ngircd.c

   1 /*
   2  * ngIRCd -- The Next Generation IRC Daemon
   3  * Copyright (c)2001-2022 Alexander Barton (alex@barton.de) and Contributors.
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  * Please read the file COPYING, README and AUTHORS for more information.
  10  */
  11
  12 #define GLOBAL_INIT
  13 #include "portab.h"
  14
  15 /**
  16  * @file
  17  * The main program, including the C function main() which is called
  18  * by the loader of the operating system.
  19  */
  20
  21 #include <assert.h>
  22 #include <errno.h>
  23 #include <stdio.h>
  24 #include <stdlib.h>
  25 #include <string.h>
  26 #include <unistd.h>
  27 #include <time.h>
  28 #include <sys/types.h>
  29 #include <sys/stat.h>
  30 #include <fcntl.h>
  31 #include <pwd.h>
  32 #include <grp.h>
  33
  34 #if defined(DEBUG) && defined(HAVE_MTRACE)
  35 #include <mcheck.h>
  36 #endif
  37
  38 #include "conn.h"
  39 #include "class.h"
  40 #include "channel.h"
  41 #include "conf.h"
  42 #include "log.h"
  43 #include "sighandlers.h"
  44 #include "io.h"
  45
  46 #include "ngircd.h"
  47
  48 static void Show_Version PARAMS(( void ));
  49 static void Show_Help PARAMS(( void ));
  50
  51 static void Pidfile_Create PARAMS(( pid_t pid ));
  52 static void Pidfile_Delete PARAMS(( void ));
  53
  54 static void Fill_Version PARAMS(( void ));
  55
  56 static void Random_Init PARAMS(( void ));
  57
  58 static void Setup_FDStreams PARAMS(( int fd ));
  59
  60 static bool NGIRCd_Init PARAMS(( bool ));
  61
  62
  63 /**
  64  * The main() function of ngIRCd.
  65  *
  66  * Here all starts: this function is called by the operating system loader,
  67  * it is the first portion of code executed of ngIRCd.
  68  *
  69  * @param argc The number of arguments passed to ngIRCd on the command line.
  70  * @param argv An array containing all the arguments passed to ngIRCd.
  71  * @return Global exit code of ngIRCd, zero on success.
  72  */
  73 GLOBAL int
  74 main(int argc, const char *argv[])
  75 {
  76         bool ok, configtest = false;
  77         bool NGIRCd_NoDaemon = false;
  78         int i;
  79         size_t n;
  80
  81 #if defined(DEBUG) && defined(HAVE_MTRACE)
  82         /* enable GNU libc memory tracing when running in debug mode
  83          * and functionality available */
  84         mtrace();
  85 #endif
  86
  87         umask(0077);
  88
  89         NGIRCd_SignalQuit = NGIRCd_SignalRestart = false;
  90         NGIRCd_Passive = false;
  91         NGIRCd_Debug = false;
  92 #ifdef SNIFFER
  93         NGIRCd_Sniffer = false;
  94 #endif
  95         strlcpy(NGIRCd_ConfFile, SYSCONFDIR, sizeof(NGIRCd_ConfFile));
  96         strlcat(NGIRCd_ConfFile, CONFIG_FILE, sizeof(NGIRCd_ConfFile));
  97
  98         Fill_Version();
  99
 100         /* parse conmmand line */
 101         for (i = 1; i < argc; i++) {
 102                 ok = false;
 103                 if (argv[i][0] == '-' && argv[i][1] == '-') {
 104                         /* long option */
 105                         if (strcmp(argv[i], "--config") == 0) {
 106                                 if (i + 1 < argc) {
 107                                         /* Ok, there's an parameter left */
 108                                         strlcpy(NGIRCd_ConfFile, argv[i+1],
 109                                                 sizeof(NGIRCd_ConfFile));
 110                                         /* next parameter */
 111                                         i++; ok = true;
 112                                 }
 113                         }
 114                         if (strcmp(argv[i], "--configtest") == 0) {
 115                                 configtest = true;
 116                                 ok = true;
 117                         }
 118                         if (strcmp(argv[i], "--debug") == 0) {
 119                                 NGIRCd_Debug = true;
 120                                 ok = true;
 121                         }
 122                         if (strcmp(argv[i], "--help") == 0) {
 123                                 Show_Version();
 124                                 puts(""); Show_Help( ); puts( "" );
 125                                 exit(0);
 126                         }
 127                         if (strcmp(argv[i], "--nodaemon") == 0) {
 128                                 NGIRCd_NoDaemon = true;
 129                                 ok = true;
 130                         }
 131                         if (strcmp(argv[i], "--passive") == 0) {
 132                                 NGIRCd_Passive = true;
 133                                 ok = true;
 134                         }
 135 #ifdef SNIFFER
 136                         if (strcmp(argv[i], "--sniffer") == 0) {
 137                                 NGIRCd_Sniffer = true;
 138                                 ok = true;
 139                         }
 140 #endif
 141                         if (strcmp(argv[i], "--version") == 0) {
 142                                 Show_Version();
 143                                 exit(0);
 144                         }
 145                 }
 146                 else if(argv[i][0] == '-' && argv[i][1] != '-') {
 147                         /* short option */
 148                         for (n = 1; n < strlen(argv[i]); n++) {
 149                                 ok = false;
 150                                 if (argv[i][n] == 'd') {
 151                                         NGIRCd_Debug = true;
 152                                         ok = true;
 153                                 }
 154                                 if (argv[i][n] == 'f') {
 155                                         if (!argv[i][n+1] && i+1 < argc) {
 156                                                 /* Ok, next character is a blank */
 157                                                 strlcpy(NGIRCd_ConfFile, argv[i+1],
 158                                                         sizeof(NGIRCd_ConfFile));
 159
 160                                                 /* go to the following parameter */
 161                                                 i++;
 162                                                 n = strlen(argv[i]);
 163                                                 ok = true;
 164                                         }
 165                                 }
 166
 167                                 if (argv[i][n] == 'h') {
 168                                         Show_Version();
 169                                         puts(""); Show_Help(); puts("");
 170                                         exit(1);
 171                                 }
 172
 173                                 if (argv[i][n] == 'n') {
 174                                         NGIRCd_NoDaemon = true;
 175                                         ok = true;
 176                                 }
 177                                 if (argv[i][n] == 'p') {
 178                                         NGIRCd_Passive = true;
 179                                         ok = true;
 180                                 }
 181 #ifdef SNIFFER
 182                                 if (argv[i][n] == 's') {
 183                                         NGIRCd_Sniffer = true;
 184                                         ok = true;
 185                                 }
 186 #endif
 187                                 if (argv[i][n] == 't') {
 188                                         configtest = true;
 189                                         ok = true;
 190                                 }
 191
 192                                 if (argv[i][n] == 'V') {
 193                                         Show_Version();
 194                                         exit(1);
 195                                 }
 196
 197                                 if (!ok) {
 198                                         fprintf(stderr,
 199                                                 "%s: invalid option \"-%c\"!\n",
 200                                                 PACKAGE_NAME, argv[i][n]);
 201                                         fprintf(stderr,
 202                                                 "Try \"%s --help\" for more information.\n",
 203                                                 PACKAGE_NAME);
 204                                         exit(2);
 205                                 }
 206                         }
 207
 208                 }
 209                 if (!ok) {
 210                         fprintf(stderr, "%s: invalid option \"%s\"!\n",
 211                                 PACKAGE_NAME, argv[i]);
 212                         fprintf(stderr, "Try \"%s --help\" for more information.\n",
 213                                 PACKAGE_NAME);
 214                         exit(2);
 215                 }
 216         }
 217
 218         /* Debug level for "VERSION" command */
 219         NGIRCd_DebugLevel[0] = '\0';
 220         if (NGIRCd_Debug)
 221                 strcpy(NGIRCd_DebugLevel, "1");
 222 #ifdef SNIFFER
 223         if (NGIRCd_Sniffer) {
 224                 NGIRCd_Debug = true;
 225                 strcpy(NGIRCd_DebugLevel, "2");
 226         }
 227 #endif
 228
 229         if (configtest) {
 230                 Show_Version(); puts("");
 231                 exit(Conf_Test());
 232         }
 233
 234         while (!NGIRCd_SignalQuit) {
 235                 /* Initialize global variables */
 236                 NGIRCd_Start = time(NULL);
 237                 (void)strftime(NGIRCd_StartStr, 64,
 238                                "%a %b %d %Y at %H:%M:%S (%Z)",
 239                                localtime(&NGIRCd_Start));
 240
 241                 NGIRCd_SignalRestart = false;
 242                 NGIRCd_SignalQuit = false;
 243
 244                 Log_Init(!NGIRCd_NoDaemon);
 245                 Random_Init();
 246                 Conf_Init();
 247                 Log_ReInit();
 248
 249                 /* Initialize the "main program":
 250                  * chroot environment, user and group ID, ... */
 251                 if (!NGIRCd_Init(NGIRCd_NoDaemon)) {
 252                         Log(LOG_ALERT, "Fatal: Initialization failed, exiting!");
 253                         exit(1);
 254                 }
 255
 256                 if (!io_library_init(CONNECTION_POOL)) {
 257                         Log(LOG_ALERT,
 258                             "Fatal: Could not initialize IO routines: %s",
 259                             strerror(errno));
 260                         exit(1);
 261                 }
 262
 263                 if (!Signals_Init()) {
 264                         Log(LOG_ALERT,
 265                             "Fatal: Could not set up signal handlers: %s",
 266                             strerror(errno));
 267                         exit(1);
 268                 }
 269
 270                 Channel_Init();
 271                 Conn_Init();
 272                 Class_Init();
 273                 Client_Init();
 274
 275                 /* Create protocol and server identification. The syntax
 276                  * used by ngIRCd in PASS commands and the known "extended
 277                  * flags" are described in doc/Protocol.txt. */
 278 #ifdef IRCPLUS
 279                 snprintf(NGIRCd_ProtoID, sizeof NGIRCd_ProtoID, "%s%s %s|%s:%s",
 280                          PROTOVER, PROTOIRCPLUS, PACKAGE_NAME, PACKAGE_VERSION,
 281                          IRCPLUSFLAGS);
 282 #ifdef ZLIB
 283                 strlcat(NGIRCd_ProtoID, "Z", sizeof NGIRCd_ProtoID);
 284 #endif
 285                 if (Conf_OperCanMode)
 286                         strlcat(NGIRCd_ProtoID, "o", sizeof NGIRCd_ProtoID);
 287 #else /* IRCPLUS */
 288                 snprintf(NGIRCd_ProtoID, sizeof NGIRCd_ProtoID, "%s%s %s|%s",
 289                          PROTOVER, PROTOIRC, PACKAGE_NAME, PACKAGE_VERSION);
 290 #endif /* IRCPLUS */
 291                 strlcat(NGIRCd_ProtoID, " P", sizeof NGIRCd_ProtoID);
 292 #ifdef ZLIB
 293                 strlcat(NGIRCd_ProtoID, "Z", sizeof NGIRCd_ProtoID);
 294 #endif
 295                 LogDebug("Protocol and server ID is \"%s\".", NGIRCd_ProtoID);
 296
 297                 Channel_InitPredefined();
 298
 299                 if (Conn_InitListeners() < 1) {
 300                         Log(LOG_ALERT,
 301                             "Server isn't listening on a single port!" );
 302                         Log(LOG_ALERT,
 303                             "%s exiting due to fatal errors!", PACKAGE_NAME);
 304                         Pidfile_Delete();
 305                         exit(1);
 306                 }
 307
 308                 /* Main Run Loop */
 309                 Conn_Handler();
 310
 311                 Conn_Exit();
 312                 Client_Exit();
 313                 Channel_Exit();
 314                 Class_Exit();
 315                 Log_Exit();
 316                 Signals_Exit();
 317         }
 318         Pidfile_Delete();
 319
 320         return 0;
 321 } /* main */
 322
 323
 324 /**
 325  * Generate ngIRCd "version strings".
 326  *
 327  * The ngIRCd version information is generated once and then stored in the
 328  * NGIRCd_Version and NGIRCd_VersionAddition string variables for further
 329  * usage, for example by the IRC command "VERSION" and the --version command
 330  * line switch.
 331  */
 332 static void
 333 Fill_Version(void)
 334 {
 335         NGIRCd_VersionAddition[0] = '\0';
 336
 337 #ifdef ICONV
 338         if (NGIRCd_VersionAddition[0])
 339                 strlcat(NGIRCd_VersionAddition, "+",
 340                         sizeof NGIRCd_VersionAddition);
 341         strlcat(NGIRCd_VersionAddition, "CHARCONV",
 342                 sizeof NGIRCd_VersionAddition);
 343 #endif
 344         if (NGIRCd_VersionAddition[0])
 345                 strlcat(NGIRCd_VersionAddition, "+",
 346                         sizeof NGIRCd_VersionAddition);
 347         strlcat(NGIRCd_VersionAddition, "DEBUG",
 348                 sizeof NGIRCd_VersionAddition);
 349 #ifdef IDENTAUTH
 350         if (NGIRCd_VersionAddition[0])
 351                 strlcat(NGIRCd_VersionAddition, "+",
 352                         sizeof NGIRCd_VersionAddition);
 353         strlcat(NGIRCd_VersionAddition, "IDENT",
 354                 sizeof NGIRCd_VersionAddition);
 355 #endif
 356 #ifdef WANT_IPV6
 357         if (NGIRCd_VersionAddition[0])
 358                 strlcat(NGIRCd_VersionAddition, "+",
 359                         sizeof(NGIRCd_VersionAddition));
 360         strlcat(NGIRCd_VersionAddition, "IPv6",
 361                 sizeof(NGIRCd_VersionAddition));
 362 #endif
 363 #ifdef IRCPLUS
 364         if (NGIRCd_VersionAddition[0])
 365                 strlcat(NGIRCd_VersionAddition, "+",
 366                         sizeof NGIRCd_VersionAddition);
 367         strlcat(NGIRCd_VersionAddition, "IRCPLUS",
 368                 sizeof NGIRCd_VersionAddition);
 369 #endif
 370 #ifdef PAM
 371         if (NGIRCd_VersionAddition[0])
 372                 strlcat(NGIRCd_VersionAddition, "+",
 373                         sizeof NGIRCd_VersionAddition);
 374         strlcat(NGIRCd_VersionAddition, "PAM",
 375                 sizeof NGIRCd_VersionAddition);
 376 #endif
 377 #ifdef STRICT_RFC
 378         if (NGIRCd_VersionAddition[0])
 379                 strlcat(NGIRCd_VersionAddition, "+",
 380                         sizeof NGIRCd_VersionAddition);
 381         strlcat(NGIRCd_VersionAddition, "RFC",
 382                 sizeof NGIRCd_VersionAddition);
 383 #endif
 384 #ifdef SNIFFER
 385         if (NGIRCd_VersionAddition[0])
 386                 strlcat(NGIRCd_VersionAddition, "+",
 387                         sizeof NGIRCd_VersionAddition);
 388         strlcat(NGIRCd_VersionAddition, "SNIFFER",
 389                 sizeof NGIRCd_VersionAddition);
 390 #endif
 391 #ifdef SSL_SUPPORT
 392         if (NGIRCd_VersionAddition[0])
 393                 strlcat(NGIRCd_VersionAddition, "+",
 394                         sizeof NGIRCd_VersionAddition);
 395         strlcat(NGIRCd_VersionAddition, "SSL",
 396                 sizeof NGIRCd_VersionAddition);
 397 #endif
 398 #ifdef SYSLOG
 399         if (NGIRCd_VersionAddition[0])
 400                 strlcat(NGIRCd_VersionAddition, "+",
 401                         sizeof NGIRCd_VersionAddition);
 402         strlcat(NGIRCd_VersionAddition, "SYSLOG",
 403                 sizeof NGIRCd_VersionAddition);
 404 #endif
 405 #ifdef TCPWRAP
 406         if (NGIRCd_VersionAddition[0])
 407                 strlcat(NGIRCd_VersionAddition, "+",
 408                         sizeof NGIRCd_VersionAddition);
 409         strlcat(NGIRCd_VersionAddition, "TCPWRAP",
 410                 sizeof NGIRCd_VersionAddition);
 411 #endif
 412 #ifdef ZLIB
 413         if (NGIRCd_VersionAddition[0])
 414                 strlcat(NGIRCd_VersionAddition, "+",
 415                         sizeof NGIRCd_VersionAddition);
 416         strlcat(NGIRCd_VersionAddition, "ZLIB",
 417                 sizeof NGIRCd_VersionAddition);
 418 #endif
 419         if (NGIRCd_VersionAddition[0])
 420                 strlcat(NGIRCd_VersionAddition, "-",
 421                         sizeof(NGIRCd_VersionAddition));
 422
 423         strlcat(NGIRCd_VersionAddition, HOST_CPU,
 424                 sizeof(NGIRCd_VersionAddition));
 425         strlcat(NGIRCd_VersionAddition, "/", sizeof(NGIRCd_VersionAddition));
 426         strlcat(NGIRCd_VersionAddition, HOST_VENDOR,
 427                 sizeof(NGIRCd_VersionAddition));
 428         strlcat(NGIRCd_VersionAddition, "/", sizeof(NGIRCd_VersionAddition));
 429         strlcat(NGIRCd_VersionAddition, HOST_OS,
 430                 sizeof(NGIRCd_VersionAddition));
 431
 432         snprintf(NGIRCd_Version, sizeof NGIRCd_Version, "%s %s-%s",
 433                  PACKAGE_NAME, PACKAGE_VERSION, NGIRCd_VersionAddition);
 434 } /* Fill_Version */
 435
 436
 437 /**
 438  * Display copyright and version information of ngIRCd on the console.
 439  */
 440 static void
 441 Show_Version( void )
 442 {
 443         puts( NGIRCd_Version );
 444         puts( "Copyright (c)2001-2022 Alexander Barton (<alex@barton.de>) and Contributors." );
 445         puts( "Homepage: <http://ngircd.barton.de/>\n" );
 446         puts( "This is free software; see the source for copying conditions. There is NO" );
 447         puts( "warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." );
 448 } /* Show_Version */
 449
 450
 451 /**
 452  * Display a short help text on the console.
 453  * This help depends on the configuration of the executable and only shows
 454  * options that are actually enabled.
 455  */
 456 static void
 457 Show_Help( void )
 458 {
 459         puts( "  -d, --debug        log extra debug messages" );
 460         puts( "  -f, --config <f>   use file <f> as configuration file" );
 461         puts( "  -n, --nodaemon     don't fork and don't detach from controlling terminal" );
 462         puts( "  -p, --passive      disable automatic connections to other servers" );
 463 #ifdef SNIFFER
 464         puts( "  -s, --sniffer      enable network sniffer and display all IRC traffic" );
 465 #endif
 466         puts( "  -t, --configtest   read, validate and display configuration; then exit" );
 467         puts( "  -V, --version      output version information and exit" );
 468         puts( "  -h, --help         display this help and exit" );
 469 } /* Show_Help */
 470
 471
 472 /**
 473  * Delete the file containing the process ID (PID).
 474  */
 475 static void
 476 Pidfile_Delete( void )
 477 {
 478         /* Pidfile configured? */
 479         if( ! Conf_PidFile[0] ) return;
 480
 481         LogDebug( "Removing PID file (%s) ...", Conf_PidFile );
 482
 483         if( unlink( Conf_PidFile ))
 484                 Log( LOG_ERR, "Error unlinking PID file (%s): %s", Conf_PidFile, strerror( errno ));
 485 } /* Pidfile_Delete */
 486
 487
 488 /**
 489  * Create the file containing the process ID of ngIRCd ("PID file").
 490  *
 491  * @param pid   The process ID to be stored in this file.
 492  */
 493 static void
 494 Pidfile_Create(pid_t pid)
 495 {
 496         int pidfd;
 497         char pidbuf[64];
 498         int len;
 499
 500         /* Pidfile configured? */
 501         if( ! Conf_PidFile[0] ) return;
 502
 503         LogDebug( "Creating PID file (%s) ...", Conf_PidFile );
 504
 505         pidfd = open( Conf_PidFile, O_RDWR|O_CREAT|O_EXCL, S_IRUSR|S_IWUSR|S_IRGRP|S_IROTH);
 506         if ( pidfd < 0 ) {
 507                 Log( LOG_ERR, "Error writing PID file (%s): %s", Conf_PidFile, strerror( errno ));
 508                 return;
 509         }
 510
 511         len = snprintf(pidbuf, sizeof pidbuf, "%ld\n", (long)pid);
 512         if (len < 0 || len >= (int)sizeof pidbuf) {
 513                 Log(LOG_ERR, "Error converting process ID!");
 514                 close(pidfd);
 515                 return;
 516         }
 517
 518         if (write(pidfd, pidbuf, (size_t)len) != (ssize_t)len)
 519                 Log(LOG_ERR, "Can't write PID file (%s): %s!", Conf_PidFile,
 520                     strerror(errno));
 521
 522         if (close(pidfd) != 0)
 523                 Log(LOG_ERR, "Error closing PID file (%s): %s!", Conf_PidFile,
 524                     strerror(errno));
 525 } /* Pidfile_Create */
 526
 527
 528 /**
 529  * Redirect stdin, stdout and stderr to appropriate file handles.
 530  *
 531  * @param fd    The file handle stdin, stdout and stderr should be redirected to.
 532  */
 533 static void
 534 Setup_FDStreams(int fd)
 535 {
 536         if (fd < 0)
 537                 return;
 538
 539         fflush(stdout);
 540         fflush(stderr);
 541
 542         /* Create new stdin(0), stdout(1) and stderr(2) descriptors */
 543         dup2( fd, 0 ); dup2( fd, 1 ); dup2( fd, 2 );
 544 } /* Setup_FDStreams */
 545
 546
 547 #if !defined(SINGLE_USER_OS)
 548
 549 /**
 550  * Get user and group ID of unprivileged "nobody" user.
 551  *
 552  * @param uid   User ID
 553  * @param gid   Group ID
 554  * @return      true on success.
 555  */
 556 static bool
 557 NGIRCd_getNobodyID(uid_t *uid, gid_t *gid )
 558 {
 559         struct passwd *pwd;
 560
 561 #ifdef __CYGWIN__
 562         /* Cygwin kludge.
 563          * It can return EINVAL instead of EPERM
 564          * so, if we are already unprivileged,
 565          * use id of current user.
 566          */
 567         if (geteuid() && getuid()) {
 568                 *uid = getuid();
 569                 *gid = getgid();
 570                 return true;
 571         }
 572 #endif
 573
 574         pwd = getpwnam("nobody");
 575         if (!pwd)
 576                 return false;
 577
 578         if (!pwd->pw_uid || !pwd->pw_gid)
 579                 return false;
 580
 581         *uid = pwd->pw_uid;
 582         *gid = pwd->pw_gid;
 583         endpwent();
 584
 585         return true;
 586 } /* NGIRCd_getNobodyID */
 587
 588 #endif
 589
 590
 591 #ifdef HAVE_ARC4RANDOM
 592 static void
 593 Random_Init(void)
 594 {
 595
 596 }
 597 #else
 598 static bool
 599 Random_Init_Kern(const char *file)
 600 {
 601         unsigned int seed;
 602         bool ret = false;
 603         int fd = open(file, O_RDONLY);
 604         if (fd >= 0) {
 605                 if (read(fd, &seed, sizeof(seed)) == sizeof(seed))
 606                         ret = true;
 607                 close(fd);
 608                 srand(seed);
 609         }
 610         return ret;
 611 }
 612
 613 /**
 614  * Initialize libc rand(3) number generator
 615  */
 616 static void
 617 Random_Init(void)
 618 {
 619         if (Random_Init_Kern("/dev/urandom"))
 620                 return;
 621         if (Random_Init_Kern("/dev/random"))
 622                 return;
 623         if (Random_Init_Kern("/dev/arandom"))
 624                 return;
 625         srand(rand() ^ (unsigned)getpid() ^ (unsigned)time(NULL));
 626 }
 627 #endif
 628
 629
 630 /**
 631  * Initialize ngIRCd daemon.
 632  *
 633  * @param NGIRCd_NoDaemon Set to true if ngIRCd should run in the
 634  *              foreground (and not as a daemon).
 635  * @return true on success.
 636  */
 637 static bool
 638 NGIRCd_Init(bool NGIRCd_NoDaemon)
 639 {
 640         static bool initialized;
 641         bool chrooted = false;
 642         struct passwd *pwd;
 643         struct group *grp;
 644         int real_errno, fd = -1;
 645         pid_t pid;
 646
 647         if (initialized)
 648                 return true;
 649
 650         if (!NGIRCd_NoDaemon) {
 651                 /* open /dev/null before chroot() */
 652                 fd = open( "/dev/null", O_RDWR);
 653                 if (fd < 0)
 654                         Log(LOG_WARNING, "Could not open /dev/null: %s",
 655                             strerror(errno));
 656         }
 657
 658         /* SSL initialization */
 659         if (!ConnSSL_InitLibrary()) {
 660                 Log(LOG_ERR, "Error during SSL initialization!");
 661                 goto out;
 662         }
 663
 664         /* Change root */
 665         if (Conf_Chroot[0]) {
 666                 if (chdir(Conf_Chroot) != 0) {
 667                         Log(LOG_ERR, "Can't chdir() in ChrootDir (%s): %s!",
 668                             Conf_Chroot, strerror(errno));
 669                         goto out;
 670                 }
 671
 672                 if (chroot(Conf_Chroot) != 0) {
 673                         Log(LOG_ERR,
 674                             "Can't change root directory to \"%s\": %s!",
 675                             Conf_Chroot, strerror(errno));
 676                         goto out;
 677                 } else {
 678                         chrooted = true;
 679                         Log(LOG_INFO,
 680                             "Changed root and working directory to \"%s\".",
 681                             Conf_Chroot);
 682                 }
 683         }
 684
 685 #if !defined(SINGLE_USER_OS)
 686         /* Check user ID */
 687         if (Conf_UID == 0) {
 688                 pwd = getpwuid(0);
 689                 Log(LOG_INFO,
 690                     "ServerUID must not be %s(0), using \"nobody\" instead.",
 691                     pwd ? pwd->pw_name : "?");
 692                 if (!NGIRCd_getNobodyID(&Conf_UID, &Conf_GID)) {
 693                         Log(LOG_WARNING,
 694                             "Could not get user/group ID of user \"nobody\": %s",
 695                             errno ? strerror(errno) : "not found" );
 696                         goto out;
 697                 }
 698         }
 699
 700         /* Change group ID */
 701         if (getgid() != Conf_GID) {
 702                 if (setgid(Conf_GID) != 0) {
 703                         real_errno = errno;
 704                         grp = getgrgid(Conf_GID);
 705                         Log(LOG_ERR, "Can't change group ID to %s(%u): %s!",
 706                             grp ? grp->gr_name : "?", Conf_GID,
 707                             strerror(real_errno));
 708                         if (real_errno != EPERM)
 709                                 goto out;
 710                 }
 711 #ifdef HAVE_SETGROUPS
 712                 if (setgroups(0, NULL) != 0) {
 713                         real_errno = errno;
 714                         Log(LOG_ERR, "Can't drop supplementary group IDs: %s!",
 715                                         strerror(errno));
 716                         if (real_errno != EPERM)
 717                                 goto out;
 718                 }
 719 #else
 720                 Log(LOG_WARNING,
 721                     "Can't drop supplementary group IDs: setgroups(3) missing!");
 722 #endif
 723         }
 724 #endif
 725
 726         /* Change user ID */
 727         if (getuid() != Conf_UID) {
 728                 if (setuid(Conf_UID) != 0) {
 729                         real_errno = errno;
 730                         pwd = getpwuid(Conf_UID);
 731                         Log(LOG_ERR, "Can't change user ID to %s(%u): %s!",
 732                             pwd ? pwd->pw_name : "?", Conf_UID,
 733                             strerror(real_errno));
 734                         if (real_errno != EPERM)
 735                                 goto out;
 736                 }
 737         }
 738
 739         initialized = true;
 740
 741         /* Normally a child process is forked which isn't any longer
 742          * connected to ther controlling terminal. Use "--nodaemon"
 743          * to disable this "daemon mode" (useful for debugging). */
 744         if (!NGIRCd_NoDaemon) {
 745                 pid = fork();
 746                 if (pid > 0) {
 747                         /* "Old" process: exit. */
 748                         exit(0);
 749                 }
 750                 if (pid < 0) {
 751                         /* Error!? */
 752                         fprintf(stderr,
 753                                 "%s: Can't fork: %s!\nFatal error, exiting now ...\n",
 754                                 PACKAGE_NAME, strerror(errno));
 755                         exit(1);
 756                 }
 757
 758                 /* New child process */
 759 #ifdef HAVE_SETSID
 760                 (void)setsid();
 761 #else
 762                 setpgrp(0, getpid());
 763 #endif
 764                 if (chdir("/") != 0)
 765                         Log(LOG_ERR, "Can't change directory to '/': %s!",
 766                                      strerror(errno));
 767
 768                 /* Detach stdin, stdout and stderr */
 769                 Setup_FDStreams(fd);
 770                 if (fd > 2)
 771                         close(fd);
 772         }
 773         pid = getpid();
 774
 775         Pidfile_Create(pid);
 776
 777         /* Check UID/GID we are running as, can be different from values
 778          * configured (e. g. if we were already started with a UID>0. */
 779         Conf_UID = getuid();
 780         Conf_GID = getgid();
 781
 782         pwd = getpwuid(Conf_UID);
 783         grp = getgrgid(Conf_GID);
 784
 785         Log(LOG_INFO, "Running as user %s(%ld), group %s(%ld), with PID %ld.",
 786             pwd ? pwd->pw_name : "unknown", (long)Conf_UID,
 787             grp ? grp->gr_name : "unknown", (long)Conf_GID, (long)pid);
 788
 789         if (chrooted) {
 790                 Log(LOG_INFO, "Running with root directory \"%s\".",
 791                     Conf_Chroot );
 792                 return true;
 793         } else
 794                 Log(LOG_INFO, "Not running with changed root directory.");
 795
 796         /* Change working directory to home directory of the user we are
 797          * running as (only when running in daemon mode and not in chroot) */
 798
 799         if (NGIRCd_NoDaemon)
 800                 return true;
 801
 802         if (pwd) {
 803                 if (chdir(pwd->pw_dir) == 0)
 804                         LogDebug(
 805                             "Changed working directory to \"%s\" ...",
 806                             pwd->pw_dir);
 807                 else
 808                         Log(LOG_ERR,
 809                             "Can't change working directory to \"%s\": %s!",
 810                             pwd->pw_dir, strerror(errno));
 811         } else
 812                 Log(LOG_ERR, "Can't get user informaton for UID %d!?", Conf_UID);
 813
 814         return true;
 815  out:
 816         if (fd > 2)
 817                 close(fd);
 818         return false;
 819 } /* NGIRCd_Init */
 820
 821
 822 /* -eof- */