configfile.h

Go to the documentation of this file.

/*----------------------------------------------------------------------------
 secwatch - Copyright (C) 2006 Nic Stevens -- See COPYING for license details
------------------------------------------------------------------------------
 config.h - prototypes, macros, and declarations for the configuration of
 secwatch. 
-----------------------------------------------------------------------------*/
#ifndef _CONFIG_H

enum {false=0,true}; // Define true and false constants

typedef enum {ci_pathname, ci_integer,ci_boolean, ci_logpri, ci_logfac, ci_text,ci_flist} ci_type;

typedef struct _cfgitem {
     char *name;                // Name of variable
     ci_type type;              // type of variable (ci_type, see above)
     union {                    // Hold the values in various formats
          char **a;             // array of char ptrs
          char *s;              // string of text
          int i;                // integer
     } val;
} cfgitem_t;

#ifndef SO_OBJECT
extern cfgitem_t config[];
#endif

int readConfig(char * file, char *ebuf, size_t ebsiz);
char * confVarPath(char *name, int *eptr);
char * confVarText(char *name, int *eptr);
int confVarSyslog(char *name, int *eptr);
int confVarBool(char *name, int *eptr);
int confVarInt(char *name, int *eptr);
char ** confVarFlist(char *name, int *eptr);
char *fixupPathName(char *val, char *path);
int getBooleanValue(char *s, int *v);

#ifdef CONFIG_DECL
#define LOCAL

LOCAL cfgitem_t *  _configTabEntry(char *name);


LOCAL char * _defrej[] = {"inprej","outrej","fwdrej",NULL}; // basic firewall rejects
LOCAL char * _defalw[] = {"inpalw","outalw","fwdalw",NULL}; // basic firewall allows

cfgitem_t config[] = {
     {"patterns",       ci_pathname,    "/usr/local/etc/secwatch.patterns"},
     {"pidfile",        ci_pathname,    "/var/run/secwatch.pid"},
     {"iplist",         ci_pathname,    "/var/run/secwatch.iplist"},
     {"logfiles",       ci_text,        "/var/log/secure,/var/log/messages"},
     {"maxatt",         ci_integer,     5},
     {"maxage",         ci_integer,     15},
     {"fork",           ci_boolean,     true},
     {"mailto",         ci_text,        "secwatch"},
     {"mailfrom",       ci_text,        "secwatch"},
     {"sendmail",       ci_pathname,    "/usr/sbin/sendmail"},
     {"logpri",         ci_logpri,      LOG_INFO},
     {"logfac",         ci_logfac,      LOG_DAEMON},
     {"fwreject",       ci_flist,       _defrej},
     {"inprej",         ci_text,        "/sbin/iptables -I INPUT -s $i -j DROP"},
     {"outrej",         ci_text,        "/sbin/iptables -I OUTPUT -d $i -j DROP"},
     {"fwdrej",         ci_text,        "/sbin/iptables -I FORWARD -d $i -j DROP"},
     {"fwallow",        ci_flist,       _defalw},
     {"inpalw",         ci_text,        "/sbin/iptables -D INPUT -s $i -j DROP"},
     {"outalw",         ci_text,        "/sbin/iptables -D OUTPUT -d $i -j DROP"},
     {"fwdalw",         ci_text,        "/sbin/iptables -D FORWARD -d $i -j DROP"},
     {NULL,             0,              0}
};

#endif // CONFIG_DECL

#endif // _CONFIG_H

---