a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#!/sbin/sh
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# CDDL HEADER START
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# The contents of this file are subject to the terms of the
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# Common Development and Distribution License (the "License").
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# You may not use this file except in compliance with the License.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# or http://www.opensolaris.org/os/licensing.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# See the License for the specific language governing permissions
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# and limitations under the License.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# When distributing Covered Code, include this CDDL HEADER in each
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# If applicable, add the following below this CDDL HEADER, with the
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# fields enclosed by brackets "[]" replaced with your own identifying
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# information: Portions Copyright [yyyy] [name of copyright owner]
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# CDDL HEADER END
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen# Copyright 2009 Sun Microsystems, Inc. All rights reserved.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# Use is subject to license terms.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
7ddce99911fbb5e44b38ac65e991a22e42267ee9Hans Rosenfeld# Copyright 2016 Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
7ddce99911fbb5e44b38ac65e991a22e42267ee9Hans Rosenfeld#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire. /lib/svc/share/smf_include.sh
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire. /lib/svc/share/routing_include.sh
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen. /lib/svc/share/ipf_include.sh
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
f4b3ec61df05330d25f55a36b975b4d7519fdeb1dhsmf_configure_ip || exit $SMF_EXIT_OK
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyencreate_ipf_rules()
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen{
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen FMRI=$1
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen file=`fmri_to_file ${FMRI} $IPF_SUFFIX`
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen #
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen # route:default is enabled iff route discovery is required. Allow
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen # incoming icmp from routers for successful discovery.
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen echo "# $FMRI" >$file
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen gen_IRDP_rules $file
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen #
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen # A potential router so apply policy to RIP, 520 udp
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen #
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen policy=`get_policy $FMRI`
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen iana_name=`svcprop -p $FW_CONTEXT_PG/name ${FMRI} 2>/dev/null`
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tport=`$SERVINFO -p -t -s $iana_name 2>/dev/null`
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen uport=`$SERVINFO -p -u -s $iana_name 2>/dev/null`
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen if [ -n "$tport" ]; then
7ddce99911fbb5e44b38ac65e991a22e42267ee9Hans Rosenfeld generate_rules $FMRI $policy "tcp" $tport $file
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen fi
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen if [ -n "$uport" ]; then
7ddce99911fbb5e44b38ac65e991a22e42267ee9Hans Rosenfeld generate_rules $FMRI $policy "udp" $uport $file
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen fi
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen}
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenif [ -n "$1" -a "$1" = "ipfilter" ]; then
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen create_ipf_rules $2
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen exit "$SMF_EXIT_OK"
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenfi
eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguiredaemon_args=`get_daemon_args $SMF_FMRI`
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireoptions="AdghmnqsStvVzT:F:P:"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# Handle upgrade - routing/daemon-args property must be mapped to properties
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# in routeadm property group. Note that the SMF-incompatible -t option is not
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# supported, since it requires that in.routed run in the foreground.
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireif [ -n "$daemon_args" ]; then
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "A" ignore_auth false true
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_ordered_multivalue_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "F" minimize_routes
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "g" offer_default_route true false
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "h" advertise_host_routes false true
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "m" advertise_host_routes_primary true false
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "n" install_routes false true
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_ordered_multivalue_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "P" parameters
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
794ca8fa32f239770e58f592fc80eceff7ec92f0amaguire "$options" "q" quiet_mode true false
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
794ca8fa32f239770e58f592fc80eceff7ec92f0amaguire "$options" "s" supply_routes true false
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "S" default_routes_only true false
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_value_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "T" log_file
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "v" debug true false
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire set_daemon_boolean_property "$SMF_FMRI" "$daemon_args" \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire "$options" "z" debug true
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire clear_daemon_args $SMF_FMRI
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguirefi
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire# Assemble arguments to daemon from properties
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire#
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="`get_daemon_option_from_boolean_property $SMF_FMRI ignore_auth \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire A false`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire offer_default_route g true`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire advertise_host_routes h false`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire advertise_host_routes_primary m true`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire install_routes n false`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
794ca8fa32f239770e58f592fc80eceff7ec92f0amaguire quiet_mode q true`"
794ca8fa32f239770e58f592fc80eceff7ec92f0amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire supply_routes s true`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire default_routes_only S true`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args`get_daemon_option_from_boolean_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire debug z true`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireif [ -n "$args" ]; then
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire args="-${args}"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguirefi
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args `get_daemon_ordered_multivalue_option_from_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire minimize_routes F`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args `get_daemon_ordered_multivalue_option_from_property \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire $SMF_FMRI parameters P`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireargs="$args `get_daemon_option_from_property $SMF_FMRI \
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire log_file T`"
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire/usr/sbin/in.routed $args
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire[ "$?" = 0 ] || exit $SMF_EXIT_ERR_FATAL
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguire
a192e900f6d2b0e1a822e3252c0dfd795ed49d76amaguireexit "$SMF_EXIT_OK"