#include <string.h>

#include <unistd.h>

#include <errno.h>

#include <sys/stat.h>

#include <stddef.h>

#include "macro.h"

#include "util.h"

#include "mkdir.h"

#include "missing.h"

#include "selinux-util.h"

#include "socket-util.h"

int socket_address_listen(

const SocketAddress *a,

int flags,

int backlog,

SocketAddressBindIPv6Only only,

const char *bind_to_device,

bool reuse_port,

bool free_bind,

bool transparent,

mode_t directory_mode,

mode_t socket_mode,

const char *label) {

_cleanup_close_ int fd = -1;

int r, one;

assert(a);

r = socket_address_verify(a);

if (r < 0)

return r;

if (socket_address_family(a) == AF_INET6 && !socket_ipv6_is_supported())

return -EAFNOSUPPORT;

if (label) {

r = mac_selinux_create_socket_prepare(label);

if (r < 0)

return r;

}

fd = socket(socket_address_family(a), a->type | flags, a->protocol);

r = fd < 0 ? -errno : 0;

if (label)

mac_selinux_create_socket_clear();

if (r < 0)

return r;

if (socket_address_family(a) == AF_INET6 && only != SOCKET_ADDRESS_DEFAULT) {

int flag = only == SOCKET_ADDRESS_IPV6_ONLY;

if (setsockopt(fd, IPPROTO_IPV6, IPV6_V6ONLY, &flag, sizeof(flag)) < 0)

return -errno;

}

if (socket_address_family(a) == AF_INET || socket_address_family(a) == AF_INET6) {

if (bind_to_device)

if (setsockopt(fd, SOL_SOCKET, SO_BINDTODEVICE, bind_to_device, strlen(bind_to_device)+1) < 0)

return -errno;

if (reuse_port) {

one = 1;

if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &one, sizeof(one)) < 0)

log_warning_errno(errno, "SO_REUSEPORT failed: %m");

}

if (free_bind) {

one = 1;

if (setsockopt(fd, IPPROTO_IP, IP_FREEBIND, &one, sizeof(one)) < 0)

log_warning_errno(errno, "IP_FREEBIND failed: %m");

}

if (transparent) {

one = 1;

if (setsockopt(fd, IPPROTO_IP, IP_TRANSPARENT, &one, sizeof(one)) < 0)

log_warning_errno(errno, "IP_TRANSPARENT failed: %m");

}

}

one = 1;

if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &one, sizeof(one)) < 0)

return -errno;

if (socket_address_family(a) == AF_UNIX && a->sockaddr.un.sun_path[0] != 0) {

mode_t old_mask;

/* Create parents */

mkdir_parents_label(a->sockaddr.un.sun_path, directory_mode);

/* Enforce the right access mode for the socket */

old_mask = umask(~ socket_mode);

r = mac_selinux_bind(fd, &a->sockaddr.sa, a->size);

if (r < 0 && errno == EADDRINUSE) {

/* Unlink and try again */

unlink(a->sockaddr.un.sun_path);

r = bind(fd, &a->sockaddr.sa, a->size);

}

umask(old_mask);

} else

r = bind(fd, &a->sockaddr.sa, a->size);

if (r < 0)

return -errno;

if (socket_address_can_accept(a))

if (listen(fd, backlog) < 0)

return -errno;

r = fd;

fd = -1;

return r;

}

int make_socket_fd(int log_level, const char* address, int flags) {

SocketAddress a;

int fd, r;

r = socket_address_parse(&a, address);

if (r < 0) {

log_error("Failed to parse socket address \"%s\": %s",

address, strerror(-r));

return r;

}

fd = socket_address_listen(&a, flags, SOMAXCONN, SOCKET_ADDRESS_DEFAULT,

NULL, false, false, false, 0755, 0644, NULL);

if (fd < 0 || log_get_max_level() >= log_level) {

_cleanup_free_ char *p = NULL;

r = socket_address_print(&a, &p);

if (r < 0)

return log_error_errno(r, "socket_address_print(): %m");

if (fd < 0)

log_error_errno(fd, "Failed to listen on %s: %m", p);

else

log_full(log_level, "Listening on %s", p);

}

return fd;

}