From 80077787f8f21da1efd8dc27a4c5767ab47a1df6 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 9 Oct 2018 00:03:28 +0200 Subject: src: remove json support We have better json support in libnftables these days. Signed-off-by: Pablo Neira Ayuso --- examples/nft-ruleset-parse-file.c | 467 -------------------------------------- 1 file changed, 467 deletions(-) delete mode 100644 examples/nft-ruleset-parse-file.c (limited to 'examples/nft-ruleset-parse-file.c') diff --git a/examples/nft-ruleset-parse-file.c b/examples/nft-ruleset-parse-file.c deleted file mode 100644 index be0994f..0000000 --- a/examples/nft-ruleset-parse-file.c +++ /dev/null @@ -1,467 +0,0 @@ -/* - * (C) 2014 by Alvaro Neira Ayuso - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by - * the Free Software Foundation; either version 2 of the License, or - * (at your option) any later version. - */ - -#include -#include -#include -#include /* for offsetof */ -#include -#include -#include -#include -#include -#include -#include - -#include -#include -#include - -#include -#include -#include -#include -#include -#include - -struct mnl_nlmsg_batch *batch; -uint32_t seq; - -static int nftnl_ruleset_set_elems(const struct nftnl_parse_ctx *ctx) -{ - struct nftnl_set_elems_iter *iter_elems; - uint16_t nl_type, nl_flags; - uint32_t cmd; - struct nlmsghdr *nlh; - struct nftnl_set *set; - - cmd = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_CMD); - - set = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_SET); - if (set == NULL) - return -1; - - switch (cmd) { - case NFTNL_CMD_ADD: - nl_type = NFT_MSG_NEWSETELEM; - nl_flags = NLM_F_CREATE|NLM_F_EXCL|NLM_F_ACK; - break; - case NFTNL_CMD_DELETE: - nl_type = NFT_MSG_DELSETELEM; - /* This will generate an ACK message for each request. When - * removing NLM_F_ACK, the kernel will only report when things - * go wrong - */ - nl_flags = NLM_F_ACK; - break; - default: - goto err; - } - - iter_elems = nftnl_set_elems_iter_create(set); - if (iter_elems == NULL) - goto err; - - nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch), nl_type, - nftnl_set_get_u32(set, - NFTNL_SET_FAMILY), - nl_flags, seq++); - - nftnl_set_elems_nlmsg_build_payload_iter(nlh, iter_elems); - mnl_nlmsg_batch_next(batch); - - nftnl_set_elems_iter_destroy(iter_elems); - return 0; -err: - return -1; -} - -static int nftnl_ruleset_parse_set(const struct nftnl_parse_ctx *ctx) -{ - - struct nlmsghdr *nlh; - uint16_t nl_type, nl_flags; - struct nftnl_set *set; - uint32_t cmd; - int ret; - - cmd = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_CMD); - - set = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_SET); - if (set == NULL) - return -1; - - switch (cmd) { - case NFTNL_CMD_ADD: - nl_type = NFT_MSG_NEWSET; - nl_flags = NLM_F_CREATE|NLM_F_ACK; - break; - case NFTNL_CMD_DELETE: - nl_type = NFT_MSG_DELSET; - nl_flags = NLM_F_ACK; - break; - default: - goto err; - } - - nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch), - nl_type, - nftnl_set_get_u32(set, - NFTNL_SET_FAMILY), - nl_flags, - seq++); - - nftnl_set_nlmsg_build_payload(nlh, set); - mnl_nlmsg_batch_next(batch); - - ret = nftnl_ruleset_set_elems(ctx); - return ret; -err: - return -1; -} - -static int nftnl_ruleset_rule_build_msg(const struct nftnl_parse_ctx *ctx, - uint32_t cmd, struct nftnl_rule *rule) -{ - struct nlmsghdr *nlh; - uint16_t nl_type, nl_flags; - - switch (cmd) { - case NFTNL_CMD_ADD: - nl_type = NFT_MSG_NEWRULE; - nl_flags = NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK; - nftnl_rule_unset(rule, NFTNL_RULE_HANDLE); - break; - case NFTNL_CMD_DELETE: - nl_type = NFT_MSG_DELRULE; - nl_flags = NLM_F_ACK; - break; - case NFTNL_CMD_REPLACE: - nl_type = NFT_MSG_NEWRULE; - nl_flags = NLM_F_REPLACE|NLM_F_ACK; - break; - case NFTNL_CMD_INSERT: - nl_type = NFT_MSG_NEWRULE; - nl_flags = NLM_F_CREATE|NLM_F_ACK; - nftnl_rule_unset(rule, NFTNL_RULE_HANDLE); - break; - default: - return -1; - } - - nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch), - nl_type, - nftnl_rule_get_u32(rule, - NFTNL_RULE_FAMILY), - nl_flags, - seq++); - - nftnl_rule_nlmsg_build_payload(nlh, rule); - mnl_nlmsg_batch_next(batch); - - return 0; -} - -static int nftnl_ruleset_rule(const struct nftnl_parse_ctx *ctx) -{ - struct nftnl_rule *rule; - int ret; - uint32_t cmd; - - cmd = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_CMD); - - rule = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_RULE); - if (rule == NULL) - return -1; - - ret = nftnl_ruleset_rule_build_msg(ctx, cmd, rule); - - return ret; -} - -static int nftnl_ruleset_flush_rules(const struct nftnl_parse_ctx *ctx) -{ - struct nftnl_rule *nlr; - struct nftnl_table *nlt; - struct nftnl_chain *nlc; - uint32_t type; - int ret; - - nlr = nftnl_rule_alloc(); - if (nlr == NULL) - return -1; - - type = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_TYPE); - switch (type) { - case NFTNL_RULESET_TABLE: - nlt = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_TABLE); - nftnl_rule_set(nlr, NFTNL_RULE_TABLE, - nftnl_table_get(nlt, NFTNL_TABLE_NAME)); - nftnl_rule_set(nlr, NFTNL_RULE_FAMILY, - nftnl_table_get(nlt, NFTNL_TABLE_FAMILY)); - break; - case NFTNL_RULESET_CHAIN: - nlc = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_CHAIN); - nftnl_rule_set(nlr, NFTNL_RULE_TABLE, - nftnl_chain_get(nlc, - NFTNL_CHAIN_TABLE)); - nftnl_rule_set(nlr, NFTNL_RULE_CHAIN, - nftnl_chain_get(nlc, - NFTNL_CHAIN_NAME)); - nftnl_rule_set(nlr, NFTNL_RULE_FAMILY, - nftnl_chain_get(nlc, NFTNL_TABLE_FAMILY)); - break; - default: - goto err; - } - - ret = nftnl_ruleset_rule_build_msg(ctx, NFTNL_CMD_DELETE, nlr); - nftnl_rule_free(nlr); - - return ret; -err: - nftnl_rule_free(nlr); - return -1; -} - -static int nftnl_ruleset_chain(const struct nftnl_parse_ctx *ctx) -{ - struct nlmsghdr *nlh; - uint16_t nl_type, nl_flags; - uint32_t cmd; - struct nftnl_chain *chain; - - cmd = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_CMD); - - chain = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_CHAIN); - if (chain == NULL) - return -1; - - switch (cmd) { - case NFTNL_CMD_ADD: - nl_type = NFT_MSG_NEWCHAIN; - nl_flags = NLM_F_CREATE|NLM_F_ACK; - break; - case NFTNL_CMD_DELETE: - nl_type = NFT_MSG_DELCHAIN; - nl_flags = NLM_F_ACK; - break; - case NFTNL_CMD_FLUSH: - return nftnl_ruleset_flush_rules(ctx); - default: - goto err; - } - - nftnl_chain_unset(chain, NFTNL_CHAIN_HANDLE); - nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch), - nl_type, - nftnl_chain_get_u32(chain, - NFTNL_CHAIN_FAMILY), - nl_flags, - seq++); - - nftnl_chain_nlmsg_build_payload(nlh, chain); - mnl_nlmsg_batch_next(batch); - - return 0; -err: - return -1; -} - -static int nftnl_ruleset_table_build_msg(const struct nftnl_parse_ctx *ctx, - uint32_t cmd, struct nftnl_table *table) -{ - struct nlmsghdr *nlh; - uint16_t nl_type, nl_flags; - - switch (cmd) { - case NFTNL_CMD_ADD: - nl_type = NFT_MSG_NEWTABLE; - nl_flags = NLM_F_CREATE|NLM_F_ACK; - break; - case NFTNL_CMD_DELETE: - nl_type = NFT_MSG_DELTABLE; - nl_flags = NLM_F_ACK; - break; - case NFTNL_CMD_FLUSH: - return nftnl_ruleset_flush_rules(ctx); - default: - return -1; - } - - nlh = nftnl_table_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch), - nl_type, - nftnl_table_get_u32(table, - NFTNL_TABLE_FAMILY), - nl_flags, - seq++); - - nftnl_table_nlmsg_build_payload(nlh, table); - mnl_nlmsg_batch_next(batch); - - return 0; -} - -static int nftnl_ruleset_table(const struct nftnl_parse_ctx *ctx) -{ - struct nftnl_table *table; - uint32_t cmd; - int ret; - - cmd = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_CMD); - - table = nftnl_ruleset_ctx_get(ctx, NFTNL_RULESET_CTX_TABLE); - if (table == NULL) - return -1; - - ret = nftnl_ruleset_table_build_msg(ctx, cmd, table); - - return ret; -} - -static int nftnl_ruleset_flush_ruleset(const struct nftnl_parse_ctx *ctx) -{ - struct nftnl_table *table; - int ret; - - table = nftnl_table_alloc(); - if (table == NULL) - return -1; - - ret = nftnl_ruleset_table_build_msg(ctx, NFTNL_CMD_DELETE, table); - nftnl_table_free(table); - - return ret; -} - -static int ruleset_elems_cb(const struct nftnl_parse_ctx *ctx) -{ - uint32_t type; - int ret; - - type = nftnl_ruleset_ctx_get_u32(ctx, NFTNL_RULESET_CTX_TYPE); - - switch (type) { - case NFTNL_RULESET_TABLE: - ret = nftnl_ruleset_table(ctx); - break; - case NFTNL_RULESET_CHAIN: - ret = nftnl_ruleset_chain(ctx); - break; - case NFTNL_RULESET_RULE: - ret = nftnl_ruleset_rule(ctx); - break; - case NFTNL_RULESET_SET: - ret = nftnl_ruleset_parse_set(ctx); - break; - case NFTNL_RULESET_SET_ELEMS: - ret = nftnl_ruleset_set_elems(ctx); - break; - case NFTNL_RULESET_RULESET: - ret = nftnl_ruleset_flush_ruleset(ctx); - break; - default: - return -1; - } - - nftnl_ruleset_ctx_free(ctx); - return ret; -} - -int main(int argc, char *argv[]) -{ - struct nftnl_parse_err *err; - const char *filename; - FILE *fp; - int ret = -1, len, portid; - uint32_t ruleset_seq; - char buf[MNL_SOCKET_BUFFER_SIZE]; - struct mnl_socket *nl; - - if (argc < 2) { - printf("Usage: %s \n", argv[0]); - exit(EXIT_FAILURE); - } - - fp = fopen(argv[1], "r"); - if (fp == NULL) { - printf("unable to open file %s: %s\n", argv[1], - strerror(errno)); - exit(EXIT_FAILURE); - } - - err = nftnl_parse_err_alloc(); - if (err == NULL) { - perror("error"); - exit(EXIT_FAILURE); - } - - seq = time(NULL); - batch = mnl_nlmsg_batch_start(buf, sizeof(buf)); - - nftnl_batch_begin(mnl_nlmsg_batch_current(batch), seq++); - mnl_nlmsg_batch_next(batch); - ruleset_seq = seq; - - filename = argv[1]; - len = strlen(filename); - if (len >= 5 && strcmp(&filename[len - 5], ".json") == 0) - ret = nftnl_ruleset_parse_file_cb(NFTNL_PARSE_JSON, fp, err, NULL, - &ruleset_elems_cb); - else { - printf("the filename %s does not have a trailing .json\n", - filename); - exit(EXIT_FAILURE); - } - - if (ret < 0) { - nftnl_parse_perror("fail", err); - exit(EXIT_FAILURE); - } - - fclose(fp); - - nftnl_batch_end(mnl_nlmsg_batch_current(batch), seq++); - mnl_nlmsg_batch_next(batch); - - nl = mnl_socket_open(NETLINK_NETFILTER); - if (nl == NULL) { - perror("mnl_socket_open"); - exit(EXIT_FAILURE); - } - - if (mnl_socket_bind(nl, 0, MNL_SOCKET_AUTOPID) < 0) { - perror("mnl_socket_bind"); - exit(EXIT_FAILURE); - } - portid = mnl_socket_get_portid(nl); - - if (mnl_socket_sendto(nl, mnl_nlmsg_batch_head(batch), - mnl_nlmsg_batch_size(batch)) < 0) { - perror("mnl_socket_send"); - exit(EXIT_FAILURE); - } - - mnl_nlmsg_batch_stop(batch); - - ret = mnl_socket_recvfrom(nl, buf, sizeof(buf)); - while (ret > 0) { - ret = mnl_cb_run(buf, ret, ruleset_seq, portid, NULL, NULL); - if (ret <= 0) - break; - ret = mnl_socket_recvfrom(nl, buf, sizeof(buf)); - } - if (ret == -1) { - perror("error"); - exit(EXIT_FAILURE); - } - - mnl_socket_close(nl); - return EXIT_SUCCESS; -} -- cgit v1.2.3