[GIT SERIES v4] secnet: polypath

[Ian Jackson]

The following series is available for review here:
  http://www.chiark.greenend.org.uk/ucgi/~ian/git/secnet.git/
  git://git.chiark.greenend.org.uk/~ian/secnet.git
in the following rev-list:
  base.polypath.v4..proposed.polypath.v4

This is hopefully the final version of my polypath series.  It depends
on my previously posted v3 IPv6 series.

I have been running this code on zealot for a little while now and it
seems to be working well.  I have just set it up on xenophobe (where I
don't expect many of the changes to make much difference).

Barring objections I will push all three of my outstanding series to
master soon, fix up the Debian packaging and changelog etc., and call
the result something like 0.4.0~alpha1.

    1  hackypar: Fix coding style
    2  udp: Use <bsd/sys/queue.h> for notify lists
    3  main loop: Use <bsd/sys/queue.h> for poll interest list
    4  poll: Introduce and use BEFOREPOLL_WANT_FDS
    5  realloc: Provide safe_realloc_ary
    6  poll: Make handling of fds array actually dynamic
    7  poll: Avoid duplicate array index counting
    8  poll: Abolish max_nfds
    9  poll: Support deregistration from the main event loop
   10  poll: Document reentrancy restriction on before()
   11  logging: Provide lg_perror and lg_vperror
   12  comm: Rename a lot of state pointer variables
   13  comm: Use BUF_GET_BYTES
   14  comm: Break out common code in comm
   15  comm: Break out some common udp parts
   16  comm: Formalise interface to udp sockets
   17  comm: Make udp_make_socket be able to tolerate failures
   18  comm: Provide udp_socks_deregister
   19  logging: Provide lg_exitstatus
   20  logging: Use lg_exitstatus
   21  slip: Report unexpected kinds of death from userv
   22  udp: Report authbind exit status as errno value if it seems appropri
   23  udp: Break out udp_destroy_socket
   24  process: Introduce afterfork()
   25  Introduce setnonblock()
   26  fds: Make many fds nonblocking
   27  util: Provide async_linebuf_read
   28  slip: Remove an incorrect XXX comment
   29  cleanup: Replace a few calls to malloc/realloc with safe_malloc
   30  udp: Introduce some `us' convenience variables, etc.
   31  util.h etc.: Provide MAX_RAW and MIN_RAW; etc.
   32  netlink: Use MIN rather than ?:
   33  udp: Log transmission and reception errors, at least some of the tim
   34  Makefile.in: Move settings of various directories above CFLAGS etc.
   35  transform-cbcmac: Move max_[seq]_skew into params struct
   36  transform: Break out SEQNUM_KEYED_FIELDS and SEQNUM_PARAMS_FIELDS
   37  transform: Discard previously-received packets
   38  secnet: provide will_droppriv
   39  util: Use BSD queue.h for phase hook lists
   40  buffer: Provide buffer_destroy
   41  util: Break out pollbadbit()
   42  polypath: Provide polypath comm module
   43  polypath: Provide Linux interface monitor
   44  test-example: Provide a polypath test
   45  process: Clear SHUTDOWN hooks in afterfork()
   46  polypath: Reorganise to break up ifaddr handling
   47  polypath: Break up child process handling
   48  polypath: Close parent's socket in child
   49  fds etc.: Support non-forking persistent children
   50  logging: Persistent children include pid in their log messages
   51  polypath: Log pid of long-running interface monitor
   52  polypath: Provide privsep mode
   53  test-example: Reorder a config to better test CHILDPERSIST
   54  test-example: Set `system/userid'
   55  udp, polypath: Make specifying port optional
   56  test-example: Test not specifying a port
   57  udp, polypath: Log `experiencing success receiving', etc.
   58  NEW etc.: Provide size-safe wrappers for safe_malloc et al.
   59  NEW etc.: Use NEW in all obvious places
   60  NEW etc.: Use NEW_ARY
   61  NEW etc.: Replace most calls to safe_realloc_ary
   62  NEW etc.: Use NEW at non-formulaic call sites

 Makefile.in                       |   22 +-
 README                            |   75 +++-
 comm-common.c                     |   54 +++
 comm-common.h                     |  123 ++++++
 conffile.c                        |   20 +-
 conffile.fl                       |    2 +-
 conffile.y                        |    2 +-
 dh.c                              |    2 +-
 hackypar.c                        |  134 +++---
 ipaddr.c                          |   28 +-
 log.c                             |  100 ++++-
 md5.c                             |    4 +-
 modules.c                         |    1 +
 netlink.c                         |    9 +-
 polypath-interface-monitor-linux  |   82 ++++
 polypath.c                        |  848 +++++++++++++++++++++++++++++++++++++
 process.c                         |   57 +--
 random.c                          |    2 +-
 resolver.c                        |    6 +-
 rsa.c                             |    4 +-
 secnet.c                          |   99 +++--
 secnet.h                          |   98 ++++-
 sha1.c                            |    4 +-
 site.c                            |   31 +-
 slip.c                            |   65 +--
 test-example/common.conf          |    1 +
 test-example/inside-polypath.conf |   20 +
 transform-cbcmac.c                |   33 +-
 transform-common.h                |   71 +++-
 transform-eax.c                   |   19 +-
 tun.c                             |   10 +-
 udp.c                             |  413 ++++++++++--------
 util.c                            |  177 +++++++-
 util.h                            |   75 ++++
 34 files changed, 2208 insertions(+), 483 deletions(-)

--