1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved.
23 * Use is subject to license terms.
24 */
25
26 /*
27 * Copyright (c) 2012, Joyent, Inc. All rights reserved.
28 */
29
30 #include <assert.h>
31 #include <door.h>
32 #include <errno.h>
33 #include <fcntl.h>
34 #include <limits.h>
35 #include <priv.h>
36 #include <procfs.h>
37 #include <pthread.h>
38 #include <signal.h>
39 #include <stdarg.h>
40 #include <stdio.h>
41 #include <stdio_ext.h>
42 #include <stdlib.h>
43 #include <string.h>
44 #include <syslog.h>
45 #include <sys/corectl.h>
46 #include <sys/resource.h>
47 #include <sys/stat.h>
48 #include <sys/wait.h>
49 #include <ucontext.h>
50 #include <unistd.h>
51
52 #include "configd.h"
53
54 /*
55 * This file manages the overall startup and shutdown of configd, as well
56 * as managing its door thread pool and per-thread datastructures.
57 *
58 * 1. Per-thread Datastructures
59 * -----------------------------
60 * Each configd thread has an associated thread_info_t which contains its
61 * current state. A pointer is kept to this in TSD, keyed by thread_info_key.
62 * The thread_info_ts for all threads in configd are kept on a single global
63 * list, thread_list. After creation, the state in the thread_info structure
64 * is only modified by the associated thread, so no locking is needed. A TSD
65 * destructor removes the thread_info from the global list and frees it at
66 * pthread_exit() time.
67 *
68 * Threads access their per-thread data using thread_self()
69 *
70 * The thread_list is protected by thread_lock, a leaf lock.
71 *
72 * 2. Door Thread Pool Management
73 * ------------------------------
74 * Whenever door_return(3door) returns from the kernel and there are no
75 * other configd threads waiting for requests, libdoor automatically
76 * invokes a function registered with door_server_create(), to request a new
77 * door server thread. The default function just creates a thread that calls
78 * door_return(3door). Unfortunately, since it can take a while for the new
79 * thread to *get* to door_return(3door), a stream of requests can cause a
80 * large number of threads to be created, even though they aren't all needed.
81 *
82 * In our callback, new_server_needed(), we limit ourself to two new threads
83 * at a time -- this logic is handled in reserve_new_thread(). This keeps
84 * us from creating an absurd number of threads in response to peaking load.
85 */
86 static pthread_key_t thread_info_key;
87 static pthread_attr_t thread_attr;
88
89 static pthread_mutex_t thread_lock = PTHREAD_MUTEX_INITIALIZER;
90 int num_started; /* number actually running */
91 int num_servers; /* number in-progress or running */
92 static uu_list_pool_t *thread_pool;
93 uu_list_t *thread_list;
94
95 static thread_info_t main_thread_info;
96
97 static int finished;
98
99 static pid_t privileged_pid = 0;
100 static int privileged_psinfo_fd = -1;
101
102 static int privileged_user = 0;
103
104 static priv_set_t *privileged_privs;
105
106 static int log_to_syslog = 0;
107
108 int is_main_repository = 1;
109
110 int max_repository_backups = 4;
111
112 #define CONFIGD_MAX_FDS 262144
113
114 const char *
115 _umem_options_init(void)
116 {
117 /*
118 * Like svc.startd, we set our UMEM_OPTIONS to indicate that we do not
119 * wish to have per-CPU magazines to reduce our memory footprint. And
120 * as with svc.startd, if svc.configd is so MT-hot that this becomes a
121 * scalability problem, there are deeper issues...
122 */
123 return ("nomagazines"); /* UMEM_OPTIONS setting */
124 }
125
126 /*
127 * Thanks, Mike
128 */
129 void
130 abort_handler(int sig, siginfo_t *sip, ucontext_t *ucp)
131 {
132 struct sigaction act;
133
134 (void) sigemptyset(&act.sa_mask);
135 act.sa_handler = SIG_DFL;
136 act.sa_flags = 0;
137 (void) sigaction(sig, &act, NULL);
138
139 (void) printstack(2);
140
141 if (sip != NULL && SI_FROMUSER(sip))
142 (void) pthread_kill(pthread_self(), sig);
143 (void) sigfillset(&ucp->uc_sigmask);
144 (void) sigdelset(&ucp->uc_sigmask, sig);
145 ucp->uc_flags |= UC_SIGMASK;
146 (void) setcontext(ucp);
147 }
148
149 /*
150 * Don't want to have more than a couple thread creates outstanding
151 */
152 static int
153 reserve_new_thread(void)
154 {
155 (void) pthread_mutex_lock(&thread_lock);
156 assert(num_started >= 0);
157 if (num_servers > num_started + 1) {
158 (void) pthread_mutex_unlock(&thread_lock);
159 return (0);
160 }
161 ++num_servers;
162 (void) pthread_mutex_unlock(&thread_lock);
163 return (1);
164 }
165
166 static void
167 thread_info_free(thread_info_t *ti)
168 {
169 uu_list_node_fini(ti, &ti->ti_node, thread_pool);
170 if (ti->ti_ucred != NULL)
171 uu_free(ti->ti_ucred);
172 uu_free(ti);
173 }
174
175 static void
176 thread_exiting(void *arg)
177 {
178 thread_info_t *ti = arg;
179
180 if (ti != NULL)
181 log_enter(&ti->ti_log);
182
183 (void) pthread_mutex_lock(&thread_lock);
184 if (ti != NULL) {
185 num_started--;
186 uu_list_remove(thread_list, ti);
187 }
188 assert(num_servers > 0);
189 --num_servers;
190
191 if (num_servers == 0) {
192 configd_critical("no door server threads\n");
193 abort();
194 }
195 (void) pthread_mutex_unlock(&thread_lock);
196
197 if (ti != NULL && ti != &main_thread_info)
198 thread_info_free(ti);
199 }
200
201 void
202 thread_newstate(thread_info_t *ti, thread_state_t newstate)
203 {
204 ti->ti_ucred_read = 0; /* invalidate cached ucred */
205 if (newstate != ti->ti_state) {
206 ti->ti_prev_state = ti->ti_state;
207 ti->ti_state = newstate;
208 ti->ti_lastchange = gethrtime();
209 }
210 }
211
212 thread_info_t *
213 thread_self(void)
214 {
215 return (pthread_getspecific(thread_info_key));
216 }
217
218 /*
219 * get_ucred() returns NULL if it was unable to get the credential
220 * information.
221 */
222 ucred_t *
223 get_ucred(void)
224 {
225 thread_info_t *ti = thread_self();
226 ucred_t **ret = &ti->ti_ucred;
227
228 if (ti->ti_ucred_read)
229 return (*ret); /* cached value */
230
231 if (door_ucred(ret) != 0)
232 return (NULL);
233 ti->ti_ucred_read = 1;
234
235 return (*ret);
236 }
237
238 int
239 ucred_is_privileged(ucred_t *uc)
240 {
241 const priv_set_t *ps;
242
243 if ((ps = ucred_getprivset(uc, PRIV_EFFECTIVE)) != NULL) {
244 if (priv_isfullset(ps))
245 return (1); /* process has all privs */
246
247 if (privileged_privs != NULL &&
248 priv_issubset(privileged_privs, ps))
249 return (1); /* process has zone privs */
250 }
251
252 return (0);
253 }
254
255 /*
256 * The purpose of this function is to get the audit session data for use in
257 * generating SMF audit events. We use a single audit session per client.
258 *
259 * get_audit_session() may return NULL. It is legal to use a NULL pointer
260 * in subsequent calls to adt_* functions.
261 */
262 adt_session_data_t *
263 get_audit_session(void)
264 {
265 thread_info_t *ti = thread_self();
266
267 return (ti->ti_active_client->rc_adt_session);
268 }
269
270 static void *
271 thread_start(void *arg)
272 {
273 thread_info_t *ti = arg;
274
275 (void) pthread_setcancelstate(PTHREAD_CANCEL_DISABLE, NULL);
276
277 (void) pthread_mutex_lock(&thread_lock);
278 num_started++;
279 (void) uu_list_insert_after(thread_list, uu_list_last(thread_list),
280 ti);
281 (void) pthread_mutex_unlock(&thread_lock);
282 (void) pthread_setspecific(thread_info_key, ti);
283
284 thread_newstate(ti, TI_DOOR_RETURN);
285
286 /*
287 * Start handling door calls
288 */
289 (void) door_return(NULL, 0, NULL, 0);
290 return (arg);
291 }
292
293 static void
294 new_thread_needed(door_info_t *dip)
295 {
296 thread_info_t *ti;
297
298 sigset_t new, old;
299
300 assert(dip == NULL);
301
302 if (!reserve_new_thread())
303 return;
304
305 if ((ti = uu_zalloc(sizeof (*ti))) == NULL)
306 goto fail;
307
308 uu_list_node_init(ti, &ti->ti_node, thread_pool);
309 ti->ti_state = TI_CREATED;
310 ti->ti_prev_state = TI_CREATED;
311
312 if ((ti->ti_ucred = uu_zalloc(ucred_size())) == NULL)
313 goto fail;
314
315 (void) sigfillset(&new);
316 (void) pthread_sigmask(SIG_SETMASK, &new, &old);
317 if ((errno = pthread_create(&ti->ti_thread, &thread_attr, thread_start,
318 ti)) != 0) {
319 (void) pthread_sigmask(SIG_SETMASK, &old, NULL);
320 goto fail;
321 }
322
323 (void) pthread_sigmask(SIG_SETMASK, &old, NULL);
324 return;
325
326 fail:
327 /*
328 * Since the thread_info structure was never linked onto the
329 * thread list, thread_exiting() can't handle the cleanup.
330 */
331 thread_exiting(NULL);
332 if (ti != NULL)
333 thread_info_free(ti);
334 }
335
336 int
337 create_connection(ucred_t *uc, repository_door_request_t *rp,
338 size_t rp_size, int *out_fd)
339 {
340 int flags;
341 int privileged = 0;
342 uint32_t debugflags = 0;
343 psinfo_t info;
344
345 if (privileged_pid != 0) {
346 /*
347 * in privileged pid mode, we only allow connections from
348 * our original parent -- the psinfo read verifies that
349 * it is the same process which we started with.
350 */
351 if (ucred_getpid(uc) != privileged_pid ||
352 read(privileged_psinfo_fd, &info, sizeof (info)) !=
353 sizeof (info))
354 return (REPOSITORY_DOOR_FAIL_PERMISSION_DENIED);
355
356 privileged = 1; /* he gets full privileges */
357 } else if (privileged_user != 0) {
358 /*
359 * in privileged user mode, only one particular user is
360 * allowed to connect to us, and he can do anything.
361 */
362 if (ucred_geteuid(uc) != privileged_user)
363 return (REPOSITORY_DOOR_FAIL_PERMISSION_DENIED);
364
365 privileged = 1;
366 }
367
368 /*
369 * Check that rp, of size rp_size, is large enough to
370 * contain field 'f'. If so, write the value into *out, and return 1.
371 * Otherwise, return 0.
372 */
373 #define GET_ARG(rp, rp_size, f, out) \
374 (((rp_size) >= offsetofend(repository_door_request_t, f)) ? \
375 ((*(out) = (rp)->f), 1) : 0)
376
377 if (!GET_ARG(rp, rp_size, rdr_flags, &flags))
378 return (REPOSITORY_DOOR_FAIL_BAD_REQUEST);
379
380 #if (REPOSITORY_DOOR_FLAG_ALL != REPOSITORY_DOOR_FLAG_DEBUG)
381 #error Need to update flag checks
382 #endif
383
384 if (flags & ~REPOSITORY_DOOR_FLAG_ALL)
385 return (REPOSITORY_DOOR_FAIL_BAD_FLAG);
386
387 if (flags & REPOSITORY_DOOR_FLAG_DEBUG)
388 if (!GET_ARG(rp, rp_size, rdr_debug, &debugflags))
389 return (REPOSITORY_DOOR_FAIL_BAD_REQUEST);
390 #undef GET_ARG
391
392 return (create_client(ucred_getpid(uc), debugflags, privileged,
393 out_fd));
394 }
395
396 void
397 configd_vlog(int severity, const char *prefix, const char *message,
398 va_list args)
399 {
400 if (log_to_syslog)
401 vsyslog(severity, message, args);
402 else {
403 flockfile(stderr);
404 if (prefix != NULL)
405 (void) fprintf(stderr, "%s", prefix);
406 (void) vfprintf(stderr, message, args);
407 if (message[0] == 0 || message[strlen(message) - 1] != '\n')
408 (void) fprintf(stderr, "\n");
409 funlockfile(stderr);
410 }
411 }
412
413 void
414 configd_vcritical(const char *message, va_list args)
415 {
416 configd_vlog(LOG_CRIT, "svc.configd: Fatal error: ", message, args);
417 }
418
419 void
420 configd_critical(const char *message, ...)
421 {
422 va_list args;
423 va_start(args, message);
424 configd_vcritical(message, args);
425 va_end(args);
426 }
427
428 void
429 configd_info(const char *message, ...)
430 {
431 va_list args;
432 va_start(args, message);
433 configd_vlog(LOG_INFO, "svc.configd: ", message, args);
434 va_end(args);
435 }
436
437 static void
438 usage(const char *prog, int ret)
439 {
440 (void) fprintf(stderr,
441 "usage: %s [-np] [-d door_path] [-r repository_path]\n"
442 " [-t nonpersist_repository]\n", prog);
443 exit(ret);
444 }
445
446 /*ARGSUSED*/
447 static void
448 handler(int sig, siginfo_t *info, void *data)
449 {
450 finished = 1;
451 }
452
453 static int pipe_fd = -1;
454
455 static int
456 daemonize_start(void)
457 {
458 char data;
459 int status;
460
461 int filedes[2];
462 pid_t pid;
463
464 (void) close(0);
465 (void) dup2(2, 1); /* stderr only */
466
467 if (pipe(filedes) < 0)
468 return (-1);
469
470 if ((pid = fork1()) < 0)
471 return (-1);
472
473 if (pid != 0) {
474 /*
475 * parent
476 */
477 struct sigaction act;
478
479 act.sa_sigaction = SIG_DFL;
480 (void) sigemptyset(&act.sa_mask);
481 act.sa_flags = 0;
482
483 (void) sigaction(SIGPIPE, &act, NULL); /* ignore SIGPIPE */
484
485 (void) close(filedes[1]);
486 if (read(filedes[0], &data, 1) == 1) {
487 /* presume success */
488 _exit(CONFIGD_EXIT_OKAY);
489 }
490
491 status = -1;
492 (void) wait4(pid, &status, 0, NULL);
493 if (WIFEXITED(status))
494 _exit(WEXITSTATUS(status));
495 else
496 _exit(-1);
497 }
498
499 /*
500 * child
501 */
502 pipe_fd = filedes[1];
503 (void) close(filedes[0]);
504
505 /*
506 * generic Unix setup
507 */
508 (void) setsid();
509 (void) umask(0077);
510
511 return (0);
512 }
513
514 static void
515 daemonize_ready(void)
516 {
517 char data = '\0';
518
519 /*
520 * wake the parent
521 */
522 (void) write(pipe_fd, &data, 1);
523 (void) close(pipe_fd);
524 }
525
526 const char *
527 regularize_path(const char *dir, const char *base, char *tmpbuf)
528 {
529 if (base == NULL)
530 return (NULL);
531 if (base[0] == '/')
532 return (base);
533
534 if (snprintf(tmpbuf, PATH_MAX, "%s/%s", dir, base) >= PATH_MAX) {
535 (void) fprintf(stderr, "svc.configd: %s/%s: path too long\n",
536 dir, base);
537 exit(CONFIGD_EXIT_BAD_ARGS);
538 }
539
540 return (tmpbuf);
541 }
542
543 int
544 main(int argc, char *argv[])
545 {
546 thread_info_t *ti = &main_thread_info;
547
548 char pidpath[sizeof ("/proc/" "/psinfo") + 10];
549
550 struct rlimit fd_new;
551
552 const char *endptr;
553 sigset_t myset;
554 int c;
555 int ret;
556 int fd;
557
558 char curdir[PATH_MAX];
559 char dbtmp[PATH_MAX];
560 char npdbtmp[PATH_MAX];
561 char doortmp[PATH_MAX];
562
563 const char *dbpath = NULL;
564 const char *npdbpath = NULL;
565 const char *doorpath = REPOSITORY_DOOR_NAME;
566 struct sigaction act;
567
568 int daemonize = 1; /* default to daemonizing */
569 int have_npdb = 1;
570
571 closefrom(3); /* get rid of extraneous fds */
572
573 if (getcwd(curdir, sizeof (curdir)) == NULL) {
574 (void) fprintf(stderr,
575 "%s: unable to get current directory: %s\n",
576 argv[0], strerror(errno));
577 exit(CONFIGD_EXIT_INIT_FAILED);
578 }
579
580 while ((c = getopt(argc, argv, "Dnpd:r:t:")) != -1) {
581 switch (c) {
582 case 'n':
583 daemonize = 0;
584 break;
585 case 'd':
586 doorpath = regularize_path(curdir, optarg, doortmp);
587 have_npdb = 0; /* default to no non-persist */
588 break;
589 case 'p':
590 log_to_syslog = 0; /* don't use syslog */
591
592 /*
593 * If our parent exits while we're opening its /proc
594 * psinfo, we're vulnerable to a pid wrapping. To
595 * protect against that, re-check our ppid after
596 * opening it.
597 */
598 privileged_pid = getppid();
599 (void) snprintf(pidpath, sizeof (pidpath),
600 "/proc/%d/psinfo", privileged_pid);
601 if ((fd = open(pidpath, O_RDONLY)) < 0 ||
602 getppid() != privileged_pid) {
603 (void) fprintf(stderr,
604 "%s: unable to get parent info\n", argv[0]);
605 exit(CONFIGD_EXIT_BAD_ARGS);
606 }
607 privileged_psinfo_fd = fd;
608 break;
609 case 'r':
610 dbpath = regularize_path(curdir, optarg, dbtmp);
611 is_main_repository = 0;
612 break;
613 case 't':
614 npdbpath = regularize_path(curdir, optarg, npdbtmp);
615 is_main_repository = 0;
616 break;
617 default:
618 usage(argv[0], CONFIGD_EXIT_BAD_ARGS);
619 break;
620 }
621 }
622
623 /*
624 * If we're not running as root, allow our euid full access, and
625 * everyone else no access.
626 */
627 if (privileged_pid == 0 && geteuid() != 0) {
628 privileged_user = geteuid();
629 }
630
631 privileged_privs = priv_str_to_set("zone", "", &endptr);
632 if (endptr != NULL && privileged_privs != NULL) {
633 priv_freeset(privileged_privs);
634 privileged_privs = NULL;
635 }
636
637 openlog("svc.configd", LOG_PID | LOG_CONS, LOG_DAEMON);
638 (void) setlogmask(LOG_UPTO(LOG_NOTICE));
639
640 /*
641 * if a non-persist db is specified, always enable it
642 */
643 if (npdbpath)
644 have_npdb = 1;
645
646 if (optind != argc)
647 usage(argv[0], CONFIGD_EXIT_BAD_ARGS);
648
649 if (daemonize) {
650 if (getuid() == 0)
651 (void) chdir("/");
652 if (daemonize_start() < 0) {
653 (void) perror("unable to daemonize");
654 exit(CONFIGD_EXIT_INIT_FAILED);
655 }
656 }
657 if (getuid() == 0)
658 (void) core_set_process_path(CONFIGD_CORE,
659 strlen(CONFIGD_CORE) + 1, getpid());
660
661 /*
662 * this should be enabled once we can drop privileges and still get
663 * a core dump.
664 */
665 #if 0
666 /* turn off basic privileges we do not need */
667 (void) priv_set(PRIV_OFF, PRIV_PERMITTED, PRIV_FILE_LINK_ANY,
668 PRIV_PROC_EXEC, PRIV_PROC_FORK, PRIV_PROC_SESSION, NULL);
669 #endif
670
671 /* not that we can exec, but to be safe, shut them all off... */
672 (void) priv_set(PRIV_SET, PRIV_INHERITABLE, NULL);
673
674 (void) sigfillset(&act.sa_mask);
675
676 /* signals to ignore */
677 act.sa_sigaction = SIG_IGN;
678 act.sa_flags = 0;
679 (void) sigaction(SIGPIPE, &act, NULL);
680 (void) sigaction(SIGALRM, &act, NULL);
681 (void) sigaction(SIGUSR1, &act, NULL);
682 (void) sigaction(SIGUSR2, &act, NULL);
683 (void) sigaction(SIGPOLL, &act, NULL);
684
685 /* signals to abort on */
686 act.sa_sigaction = (void (*)(int, siginfo_t *, void *))&abort_handler;
687 act.sa_flags = SA_SIGINFO;
688
689 (void) sigaction(SIGABRT, &act, NULL);
690
691 /* signals to handle */
692 act.sa_sigaction = &handler;
693 act.sa_flags = SA_SIGINFO;
694
695 (void) sigaction(SIGHUP, &act, NULL);
696 (void) sigaction(SIGINT, &act, NULL);
697 (void) sigaction(SIGTERM, &act, NULL);
698
699 (void) sigemptyset(&myset);
700 (void) sigaddset(&myset, SIGHUP);
701 (void) sigaddset(&myset, SIGINT);
702 (void) sigaddset(&myset, SIGTERM);
703
704 if ((errno = pthread_attr_init(&thread_attr)) != 0) {
705 (void) perror("initializing");
706 exit(CONFIGD_EXIT_INIT_FAILED);
707 }
708
709 /*
710 * Set the hard and soft limits to CONFIGD_MAX_FDS.
711 */
712 fd_new.rlim_max = fd_new.rlim_cur = CONFIGD_MAX_FDS;
713 (void) setrlimit(RLIMIT_NOFILE, &fd_new);
714
715 #ifndef NATIVE_BUILD /* Allow building on snv_38 and earlier; remove later. */
716 (void) enable_extended_FILE_stdio(-1, -1);
717 #endif
718
719 if ((ret = backend_init(dbpath, npdbpath, have_npdb)) !=
720 CONFIGD_EXIT_OKAY)
721 exit(ret);
722
723 if (!client_init())
724 exit(CONFIGD_EXIT_INIT_FAILED);
725
726 if (!rc_node_init())
727 exit(CONFIGD_EXIT_INIT_FAILED);
728
729 (void) pthread_attr_setdetachstate(&thread_attr,
730 PTHREAD_CREATE_DETACHED);
731 (void) pthread_attr_setscope(&thread_attr, PTHREAD_SCOPE_SYSTEM);
732
733 if ((errno = pthread_key_create(&thread_info_key,
734 thread_exiting)) != 0) {
735 perror("pthread_key_create");
736 exit(CONFIGD_EXIT_INIT_FAILED);
737 }
738
739 if ((thread_pool = uu_list_pool_create("thread_pool",
740 sizeof (thread_info_t), offsetof(thread_info_t, ti_node),
741 NULL, UU_LIST_POOL_DEBUG)) == NULL) {
742 configd_critical("uu_list_pool_create: %s\n",
743 uu_strerror(uu_error()));
744 exit(CONFIGD_EXIT_INIT_FAILED);
745 }
746
747 if ((thread_list = uu_list_create(thread_pool, NULL, 0)) == NULL) {
748 configd_critical("uu_list_create: %s\n",
749 uu_strerror(uu_error()));
750 exit(CONFIGD_EXIT_INIT_FAILED);
751 }
752
753 (void) memset(ti, '\0', sizeof (*ti));
754 uu_list_node_init(ti, &ti->ti_node, thread_pool);
755 (void) uu_list_insert_before(thread_list, uu_list_first(thread_list),
756 ti);
757
758 ti->ti_thread = pthread_self();
759 ti->ti_state = TI_SIGNAL_WAIT;
760 ti->ti_prev_state = TI_SIGNAL_WAIT;
761
762 (void) pthread_setspecific(thread_info_key, ti);
763
764 (void) door_server_create(new_thread_needed);
765
766 if (!setup_main_door(doorpath)) {
767 configd_critical("Setting up main door failed.\n");
768 exit(CONFIGD_EXIT_DOOR_INIT_FAILED);
769 }
770
771 if (daemonize)
772 daemonize_ready();
773
774 (void) pthread_sigmask(SIG_BLOCK, &myset, NULL);
775 while (!finished) {
776 int sig = sigwait(&myset);
777 if (sig > 0) {
778 break;
779 }
780 }
781
782 backend_fini();
783
784 return (CONFIGD_EXIT_OKAY);
785 }