mirror of
https://gitlab.nic.cz/labs/bird.git
synced 2024-11-17 16:48:43 +00:00
c429d4a4ba
In usual configuration, such export is already restricted with the aid of the direct protocol but there are some races that can circumvent it. This makes it harder to break kernel device routes. Also adds an option to disable this restriction.
98 lines
2.4 KiB
Plaintext
98 lines
2.4 KiB
Plaintext
/*
|
|
* BIRD -- UNIX Kernel Syncer Configuration
|
|
*
|
|
* (c) 1998--2000 Martin Mares <mj@ucw.cz>
|
|
*
|
|
* Can be freely distributed and used under the terms of the GNU GPL.
|
|
*/
|
|
|
|
CF_HDR
|
|
|
|
#include "lib/krt.h"
|
|
|
|
CF_DEFINES
|
|
|
|
#define THIS_KRT ((struct krt_config *) this_proto)
|
|
#define THIS_KIF ((struct kif_config *) this_proto)
|
|
|
|
CF_DECLS
|
|
|
|
CF_KEYWORDS(KERNEL, PERSIST, SCAN, TIME, LEARN, DEVICE, ROUTES)
|
|
|
|
CF_GRAMMAR
|
|
|
|
/* Kernel syncer protocol */
|
|
|
|
CF_ADDTO(proto, kern_proto '}')
|
|
|
|
kern_proto_start: proto_start KERNEL {
|
|
#ifndef CONFIG_MULTIPLE_TABLES
|
|
if (cf_krt)
|
|
cf_error("Kernel protocol already defined");
|
|
#endif
|
|
cf_krt = this_proto = proto_config_new(&proto_unix_kernel, sizeof(struct krt_config));
|
|
this_proto->preference = DEF_PREF_INHERITED;
|
|
THIS_KRT->scan_time = 60;
|
|
THIS_KRT->learn = THIS_KRT->persist = 0;
|
|
krt_scan_construct(THIS_KRT);
|
|
krt_set_construct(THIS_KRT);
|
|
}
|
|
;
|
|
|
|
CF_ADDTO(kern_proto, kern_proto_start proto_name '{')
|
|
CF_ADDTO(kern_proto, kern_proto proto_item ';')
|
|
CF_ADDTO(kern_proto, kern_proto kern_item ';')
|
|
|
|
kern_item:
|
|
PERSIST bool { THIS_KRT->persist = $2; }
|
|
| SCAN TIME expr {
|
|
/* Scan time of 0 means scan on startup only */
|
|
THIS_KRT->scan_time = $3;
|
|
}
|
|
| LEARN bool {
|
|
THIS_KRT->learn = $2;
|
|
#ifndef KRT_ALLOW_LEARN
|
|
if ($2)
|
|
cf_error("Learning of kernel routes not supported in this configuration");
|
|
#endif
|
|
}
|
|
| DEVICE ROUTES bool { THIS_KRT->devroutes = $3; }
|
|
;
|
|
|
|
/* Kernel interface protocol */
|
|
|
|
CF_ADDTO(proto, kif_proto '}')
|
|
|
|
kif_proto_start: proto_start DEVICE {
|
|
if (cf_kif)
|
|
cf_error("Kernel device protocol already defined");
|
|
cf_kif = this_proto = proto_config_new(&proto_unix_iface, sizeof(struct kif_config));
|
|
this_proto->preference = DEF_PREF_DIRECT;
|
|
THIS_KIF->scan_time = 60;
|
|
init_list(&THIS_KIF->primary);
|
|
krt_if_construct(THIS_KIF);
|
|
}
|
|
;
|
|
|
|
CF_ADDTO(kif_proto, kif_proto_start proto_name '{')
|
|
CF_ADDTO(kif_proto, kif_proto proto_item ';')
|
|
CF_ADDTO(kif_proto, kif_proto kif_item ';')
|
|
|
|
kif_item:
|
|
SCAN TIME expr {
|
|
/* Scan time of 0 means scan on startup only */
|
|
THIS_KIF->scan_time = $3;
|
|
}
|
|
| PRIMARY text_or_none prefix_or_ipa {
|
|
struct kif_primary_item *kpi = cfg_alloc(sizeof (struct kif_primary_item));
|
|
kpi->pattern = $2;
|
|
kpi->prefix = $3.addr;
|
|
kpi->pxlen = $3.len;
|
|
add_tail(&THIS_KIF->primary, &kpi->n);
|
|
}
|
|
;
|
|
|
|
CF_CODE
|
|
|
|
CF_END
|