1/*-
2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3 *
4 * Copyright (c) 2003, 2004 Silicon Graphics International Corp.
5 * Copyright (c) 1997-2007 Kenneth D. Merry
6 * Copyright (c) 2012 The FreeBSD Foundation
7 * Copyright (c) 2017 Jakub Wojciech Klama <jceel@FreeBSD.org>
8 * All rights reserved.
9 *
10 * Portions of this software were developed by Edward Tomasz Napierala
11 * under sponsorship from the FreeBSD Foundation.
12 *
13 * Redistribution and use in source and binary forms, with or without
14 * modification, are permitted provided that the following conditions
15 * are met:
16 * 1. Redistributions of source code must retain the above copyright
17 *    notice, this list of conditions, and the following disclaimer,
18 *    without modification.
19 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
20 *    substantially similar to the "NO WARRANTY" disclaimer below
21 *    ("Disclaimer") and any redistribution must be conditioned upon
22 *    including a substantially similar Disclaimer requirement for further
23 *    binary redistribution.
24 *
25 * NO WARRANTY
26 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
27 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
28 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR
29 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
30 * HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
34 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
35 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
36 * POSSIBILITY OF SUCH DAMAGES.
37 *
38 */
39
40#include <sys/cdefs.h>
41__FBSDID("$FreeBSD$");
42
43#include <sys/param.h>
44#include <sys/capsicum.h>
45#include <sys/callout.h>
46#include <sys/ioctl.h>
47#include <sys/linker.h>
48#include <sys/module.h>
49#include <sys/queue.h>
50#include <sys/sbuf.h>
51#include <sys/nv.h>
52#include <sys/stat.h>
53#include <assert.h>
54#include <bsdxml.h>
55#include <capsicum_helpers.h>
56#include <ctype.h>
57#include <errno.h>
58#include <fcntl.h>
59#include <stdint.h>
60#include <stdio.h>
61#include <stdlib.h>
62#include <string.h>
63#include <strings.h>
64#include <cam/scsi/scsi_all.h>
65#include <cam/scsi/scsi_message.h>
66#include <cam/ctl/ctl.h>
67#include <cam/ctl/ctl_io.h>
68#include <cam/ctl/ctl_backend.h>
69#include <cam/ctl/ctl_ioctl.h>
70#include <cam/ctl/ctl_util.h>
71#include <cam/ctl/ctl_scsi_all.h>
72
73#include "ctld.h"
74
75#ifdef ICL_KERNEL_PROXY
76#include <netdb.h>
77#endif
78
79#define	NVLIST_BUFSIZE	1024
80
81extern bool proxy_mode;
82
83static int	ctl_fd = 0;
84
85void
86kernel_init(void)
87{
88	int retval, saved_errno;
89
90	ctl_fd = open(CTL_DEFAULT_DEV, O_RDWR);
91	if (ctl_fd < 0 && errno == ENOENT) {
92		saved_errno = errno;
93		retval = kldload("ctl");
94		if (retval != -1)
95			ctl_fd = open(CTL_DEFAULT_DEV, O_RDWR);
96		else
97			errno = saved_errno;
98	}
99	if (ctl_fd < 0)
100		log_err(1, "failed to open %s", CTL_DEFAULT_DEV);
101#ifdef	WANT_ISCSI
102	else {
103		saved_errno = errno;
104		if (modfind("cfiscsi") == -1 && kldload("cfiscsi") == -1)
105			log_warn("couldn't load cfiscsi");
106		errno = saved_errno;
107	}
108#endif
109}
110
111/*
112 * Name/value pair used for per-LUN attributes.
113 */
114struct cctl_lun_nv {
115	char *name;
116	char *value;
117	STAILQ_ENTRY(cctl_lun_nv) links;
118};
119
120/*
121 * Backend LUN information.
122 */
123struct cctl_lun {
124	uint64_t lun_id;
125	char *backend_type;
126	uint8_t device_type;
127	uint64_t size_blocks;
128	uint32_t blocksize;
129	char *serial_number;
130	char *device_id;
131	char *ctld_name;
132	STAILQ_HEAD(,cctl_lun_nv) attr_list;
133	STAILQ_ENTRY(cctl_lun) links;
134};
135
136struct cctl_port {
137	uint32_t port_id;
138	char *port_frontend;
139	char *port_name;
140	int pp;
141	int vp;
142	int cfiscsi_state;
143	char *cfiscsi_target;
144	uint16_t cfiscsi_portal_group_tag;
145	char *ctld_portal_group_name;
146	STAILQ_HEAD(,cctl_lun_nv) attr_list;
147	STAILQ_ENTRY(cctl_port) links;
148};
149
150struct cctl_devlist_data {
151	int num_luns;
152	STAILQ_HEAD(,cctl_lun) lun_list;
153	struct cctl_lun *cur_lun;
154	int num_ports;
155	STAILQ_HEAD(,cctl_port) port_list;
156	struct cctl_port *cur_port;
157	int level;
158	struct sbuf *cur_sb[32];
159};
160
161static void
162cctl_start_element(void *user_data, const char *name, const char **attr)
163{
164	int i;
165	struct cctl_devlist_data *devlist;
166	struct cctl_lun *cur_lun;
167
168	devlist = (struct cctl_devlist_data *)user_data;
169	cur_lun = devlist->cur_lun;
170	devlist->level++;
171	if ((u_int)devlist->level >= (sizeof(devlist->cur_sb) /
172	    sizeof(devlist->cur_sb[0])))
173		log_errx(1, "%s: too many nesting levels, %zd max", __func__,
174		     sizeof(devlist->cur_sb) / sizeof(devlist->cur_sb[0]));
175
176	devlist->cur_sb[devlist->level] = sbuf_new_auto();
177	if (devlist->cur_sb[devlist->level] == NULL)
178		log_err(1, "%s: unable to allocate sbuf", __func__);
179
180	if (strcmp(name, "lun") == 0) {
181		if (cur_lun != NULL)
182			log_errx(1, "%s: improper lun element nesting",
183			    __func__);
184
185		cur_lun = calloc(1, sizeof(*cur_lun));
186		if (cur_lun == NULL)
187			log_err(1, "%s: cannot allocate %zd bytes", __func__,
188			    sizeof(*cur_lun));
189
190		devlist->num_luns++;
191		devlist->cur_lun = cur_lun;
192
193		STAILQ_INIT(&cur_lun->attr_list);
194		STAILQ_INSERT_TAIL(&devlist->lun_list, cur_lun, links);
195
196		for (i = 0; attr[i] != NULL; i += 2) {
197			if (strcmp(attr[i], "id") == 0) {
198				cur_lun->lun_id = strtoull(attr[i+1], NULL, 0);
199			} else {
200				log_errx(1, "%s: invalid LUN attribute %s = %s",
201				     __func__, attr[i], attr[i+1]);
202			}
203		}
204	}
205}
206
207static void
208cctl_end_element(void *user_data, const char *name)
209{
210	struct cctl_devlist_data *devlist;
211	struct cctl_lun *cur_lun;
212	char *str;
213
214	devlist = (struct cctl_devlist_data *)user_data;
215	cur_lun = devlist->cur_lun;
216
217	if ((cur_lun == NULL)
218	 && (strcmp(name, "ctllunlist") != 0))
219		log_errx(1, "%s: cur_lun == NULL! (name = %s)", __func__, name);
220
221	if (devlist->cur_sb[devlist->level] == NULL)
222		log_errx(1, "%s: no valid sbuf at level %d (name %s)", __func__,
223		     devlist->level, name);
224
225	sbuf_finish(devlist->cur_sb[devlist->level]);
226	str = checked_strdup(sbuf_data(devlist->cur_sb[devlist->level]));
227
228	if (strlen(str) == 0) {
229		free(str);
230		str = NULL;
231	}
232
233	sbuf_delete(devlist->cur_sb[devlist->level]);
234	devlist->cur_sb[devlist->level] = NULL;
235	devlist->level--;
236
237	if (strcmp(name, "backend_type") == 0) {
238		cur_lun->backend_type = str;
239		str = NULL;
240	} else if (strcmp(name, "lun_type") == 0) {
241		if (str == NULL)
242			log_errx(1, "%s: %s missing its argument", __func__, name);
243		cur_lun->device_type = strtoull(str, NULL, 0);
244	} else if (strcmp(name, "size") == 0) {
245		if (str == NULL)
246			log_errx(1, "%s: %s missing its argument", __func__, name);
247		cur_lun->size_blocks = strtoull(str, NULL, 0);
248	} else if (strcmp(name, "blocksize") == 0) {
249		if (str == NULL)
250			log_errx(1, "%s: %s missing its argument", __func__, name);
251		cur_lun->blocksize = strtoul(str, NULL, 0);
252	} else if (strcmp(name, "serial_number") == 0) {
253		cur_lun->serial_number = str;
254		str = NULL;
255	} else if (strcmp(name, "device_id") == 0) {
256		cur_lun->device_id = str;
257		str = NULL;
258	} else if (strcmp(name, "ctld_name") == 0) {
259		cur_lun->ctld_name = str;
260		str = NULL;
261	} else if (strcmp(name, "lun") == 0) {
262		devlist->cur_lun = NULL;
263	} else if (strcmp(name, "ctllunlist") == 0) {
264		/* Nothing. */
265	} else {
266		struct cctl_lun_nv *nv;
267
268		nv = calloc(1, sizeof(*nv));
269		if (nv == NULL)
270			log_err(1, "%s: can't allocate %zd bytes for nv pair",
271			    __func__, sizeof(*nv));
272
273		nv->name = checked_strdup(name);
274
275		nv->value = str;
276		str = NULL;
277		STAILQ_INSERT_TAIL(&cur_lun->attr_list, nv, links);
278	}
279
280	free(str);
281}
282
283static void
284cctl_start_pelement(void *user_data, const char *name, const char **attr)
285{
286	int i;
287	struct cctl_devlist_data *devlist;
288	struct cctl_port *cur_port;
289
290	devlist = (struct cctl_devlist_data *)user_data;
291	cur_port = devlist->cur_port;
292	devlist->level++;
293	if ((u_int)devlist->level >= (sizeof(devlist->cur_sb) /
294	    sizeof(devlist->cur_sb[0])))
295		log_errx(1, "%s: too many nesting levels, %zd max", __func__,
296		     sizeof(devlist->cur_sb) / sizeof(devlist->cur_sb[0]));
297
298	devlist->cur_sb[devlist->level] = sbuf_new_auto();
299	if (devlist->cur_sb[devlist->level] == NULL)
300		log_err(1, "%s: unable to allocate sbuf", __func__);
301
302	if (strcmp(name, "targ_port") == 0) {
303		if (cur_port != NULL)
304			log_errx(1, "%s: improper port element nesting (%s)",
305			    __func__, name);
306
307		cur_port = calloc(1, sizeof(*cur_port));
308		if (cur_port == NULL)
309			log_err(1, "%s: cannot allocate %zd bytes", __func__,
310			    sizeof(*cur_port));
311
312		devlist->num_ports++;
313		devlist->cur_port = cur_port;
314
315		STAILQ_INIT(&cur_port->attr_list);
316		STAILQ_INSERT_TAIL(&devlist->port_list, cur_port, links);
317
318		for (i = 0; attr[i] != NULL; i += 2) {
319			if (strcmp(attr[i], "id") == 0) {
320				cur_port->port_id = strtoul(attr[i+1], NULL, 0);
321			} else {
322				log_errx(1, "%s: invalid LUN attribute %s = %s",
323				     __func__, attr[i], attr[i+1]);
324			}
325		}
326	}
327}
328
329static void
330cctl_end_pelement(void *user_data, const char *name)
331{
332	struct cctl_devlist_data *devlist;
333	struct cctl_port *cur_port;
334	char *str;
335
336	devlist = (struct cctl_devlist_data *)user_data;
337	cur_port = devlist->cur_port;
338
339	if ((cur_port == NULL)
340	 && (strcmp(name, "ctlportlist") != 0))
341		log_errx(1, "%s: cur_port == NULL! (name = %s)", __func__, name);
342
343	if (devlist->cur_sb[devlist->level] == NULL)
344		log_errx(1, "%s: no valid sbuf at level %d (name %s)", __func__,
345		     devlist->level, name);
346
347	sbuf_finish(devlist->cur_sb[devlist->level]);
348	str = checked_strdup(sbuf_data(devlist->cur_sb[devlist->level]));
349
350	if (strlen(str) == 0) {
351		free(str);
352		str = NULL;
353	}
354
355	sbuf_delete(devlist->cur_sb[devlist->level]);
356	devlist->cur_sb[devlist->level] = NULL;
357	devlist->level--;
358
359	if (strcmp(name, "frontend_type") == 0) {
360		cur_port->port_frontend = str;
361		str = NULL;
362	} else if (strcmp(name, "port_name") == 0) {
363		cur_port->port_name = str;
364		str = NULL;
365	} else if (strcmp(name, "physical_port") == 0) {
366		if (str == NULL)
367			log_errx(1, "%s: %s missing its argument", __func__, name);
368		cur_port->pp = strtoul(str, NULL, 0);
369	} else if (strcmp(name, "virtual_port") == 0) {
370		if (str == NULL)
371			log_errx(1, "%s: %s missing its argument", __func__, name);
372		cur_port->vp = strtoul(str, NULL, 0);
373	} else if (strcmp(name, "cfiscsi_target") == 0) {
374		cur_port->cfiscsi_target = str;
375		str = NULL;
376	} else if (strcmp(name, "cfiscsi_state") == 0) {
377		if (str == NULL)
378			log_errx(1, "%s: %s missing its argument", __func__, name);
379		cur_port->cfiscsi_state = strtoul(str, NULL, 0);
380	} else if (strcmp(name, "cfiscsi_portal_group_tag") == 0) {
381		if (str == NULL)
382			log_errx(1, "%s: %s missing its argument", __func__, name);
383		cur_port->cfiscsi_portal_group_tag = strtoul(str, NULL, 0);
384	} else if (strcmp(name, "ctld_portal_group_name") == 0) {
385		cur_port->ctld_portal_group_name = str;
386		str = NULL;
387	} else if (strcmp(name, "targ_port") == 0) {
388		devlist->cur_port = NULL;
389	} else if (strcmp(name, "ctlportlist") == 0) {
390		/* Nothing. */
391	} else {
392		struct cctl_lun_nv *nv;
393
394		nv = calloc(1, sizeof(*nv));
395		if (nv == NULL)
396			log_err(1, "%s: can't allocate %zd bytes for nv pair",
397			    __func__, sizeof(*nv));
398
399		nv->name = checked_strdup(name);
400
401		nv->value = str;
402		str = NULL;
403		STAILQ_INSERT_TAIL(&cur_port->attr_list, nv, links);
404	}
405
406	free(str);
407}
408
409static void
410cctl_char_handler(void *user_data, const XML_Char *str, int len)
411{
412	struct cctl_devlist_data *devlist;
413
414	devlist = (struct cctl_devlist_data *)user_data;
415
416	sbuf_bcat(devlist->cur_sb[devlist->level], str, len);
417}
418
419struct conf *
420conf_new_from_kernel(void)
421{
422	struct conf *conf = NULL;
423	struct target *targ;
424	struct portal_group *pg;
425	struct pport *pp;
426	struct port *cp;
427	struct lun *cl;
428	struct option *o;
429	struct ctl_lun_list list;
430	struct cctl_devlist_data devlist;
431	struct cctl_lun *lun;
432	struct cctl_port *port;
433	XML_Parser parser;
434	char *str, *name;
435	int len, retval;
436
437	bzero(&devlist, sizeof(devlist));
438	STAILQ_INIT(&devlist.lun_list);
439	STAILQ_INIT(&devlist.port_list);
440
441	log_debugx("obtaining previously configured CTL luns from the kernel");
442
443	str = NULL;
444	len = 4096;
445retry:
446	str = realloc(str, len);
447	if (str == NULL)
448		log_err(1, "realloc");
449
450	bzero(&list, sizeof(list));
451	list.alloc_len = len;
452	list.status = CTL_LUN_LIST_NONE;
453	list.lun_xml = str;
454
455	if (ioctl(ctl_fd, CTL_LUN_LIST, &list) == -1) {
456		log_warn("error issuing CTL_LUN_LIST ioctl");
457		free(str);
458		return (NULL);
459	}
460
461	if (list.status == CTL_LUN_LIST_ERROR) {
462		log_warnx("error returned from CTL_LUN_LIST ioctl: %s",
463		    list.error_str);
464		free(str);
465		return (NULL);
466	}
467
468	if (list.status == CTL_LUN_LIST_NEED_MORE_SPACE) {
469		len = len << 1;
470		goto retry;
471	}
472
473	parser = XML_ParserCreate(NULL);
474	if (parser == NULL) {
475		log_warnx("unable to create XML parser");
476		free(str);
477		return (NULL);
478	}
479
480	XML_SetUserData(parser, &devlist);
481	XML_SetElementHandler(parser, cctl_start_element, cctl_end_element);
482	XML_SetCharacterDataHandler(parser, cctl_char_handler);
483
484	retval = XML_Parse(parser, str, strlen(str), 1);
485	XML_ParserFree(parser);
486	free(str);
487	if (retval != 1) {
488		log_warnx("XML_Parse failed");
489		return (NULL);
490	}
491
492	str = NULL;
493	len = 4096;
494retry_port:
495	str = realloc(str, len);
496	if (str == NULL)
497		log_err(1, "realloc");
498
499	bzero(&list, sizeof(list));
500	list.alloc_len = len;
501	list.status = CTL_LUN_LIST_NONE;
502	list.lun_xml = str;
503
504	if (ioctl(ctl_fd, CTL_PORT_LIST, &list) == -1) {
505		log_warn("error issuing CTL_PORT_LIST ioctl");
506		free(str);
507		return (NULL);
508	}
509
510	if (list.status == CTL_LUN_LIST_ERROR) {
511		log_warnx("error returned from CTL_PORT_LIST ioctl: %s",
512		    list.error_str);
513		free(str);
514		return (NULL);
515	}
516
517	if (list.status == CTL_LUN_LIST_NEED_MORE_SPACE) {
518		len = len << 1;
519		goto retry_port;
520	}
521
522	parser = XML_ParserCreate(NULL);
523	if (parser == NULL) {
524		log_warnx("unable to create XML parser");
525		free(str);
526		return (NULL);
527	}
528
529	XML_SetUserData(parser, &devlist);
530	XML_SetElementHandler(parser, cctl_start_pelement, cctl_end_pelement);
531	XML_SetCharacterDataHandler(parser, cctl_char_handler);
532
533	retval = XML_Parse(parser, str, strlen(str), 1);
534	XML_ParserFree(parser);
535	free(str);
536	if (retval != 1) {
537		log_warnx("XML_Parse failed");
538		return (NULL);
539	}
540
541	conf = conf_new();
542
543	name = NULL;
544	STAILQ_FOREACH(port, &devlist.port_list, links) {
545		if (strcmp(port->port_frontend, "ha") == 0)
546			continue;
547		free(name);
548		if (port->pp == 0 && port->vp == 0) {
549			name = checked_strdup(port->port_name);
550		} else if (port->vp == 0) {
551			retval = asprintf(&name, "%s/%d",
552			    port->port_name, port->pp);
553			if (retval <= 0)
554				log_err(1, "asprintf");
555		} else {
556			retval = asprintf(&name, "%s/%d/%d",
557			    port->port_name, port->pp, port->vp);
558			if (retval <= 0)
559				log_err(1, "asprintf");
560		}
561
562		if (port->cfiscsi_target == NULL) {
563			log_debugx("CTL port %u \"%s\" wasn't managed by ctld; ",
564			    port->port_id, name);
565			pp = pport_find(conf, name);
566			if (pp == NULL) {
567#if 0
568				log_debugx("found new kernel port %u \"%s\"",
569				    port->port_id, name);
570#endif
571				pp = pport_new(conf, name, port->port_id);
572				if (pp == NULL) {
573					log_warnx("pport_new failed");
574					continue;
575				}
576			}
577			continue;
578		}
579		if (port->cfiscsi_state != 1) {
580			log_debugx("CTL port %ju is not active (%d); ignoring",
581			    (uintmax_t)port->port_id, port->cfiscsi_state);
582			continue;
583		}
584
585		targ = target_find(conf, port->cfiscsi_target);
586		if (targ == NULL) {
587#if 0
588			log_debugx("found new kernel target %s for CTL port %ld",
589			    port->cfiscsi_target, port->port_id);
590#endif
591			targ = target_new(conf, port->cfiscsi_target);
592			if (targ == NULL) {
593				log_warnx("target_new failed");
594				continue;
595			}
596		}
597
598		if (port->ctld_portal_group_name == NULL)
599			continue;
600		pg = portal_group_find(conf, port->ctld_portal_group_name);
601		if (pg == NULL) {
602#if 0
603			log_debugx("found new kernel portal group %s for CTL port %ld",
604			    port->ctld_portal_group_name, port->port_id);
605#endif
606			pg = portal_group_new(conf, port->ctld_portal_group_name);
607			if (pg == NULL) {
608				log_warnx("portal_group_new failed");
609				continue;
610			}
611		}
612		pg->pg_tag = port->cfiscsi_portal_group_tag;
613		cp = port_new(conf, targ, pg);
614		if (cp == NULL) {
615			log_warnx("port_new failed");
616			continue;
617		}
618		cp->p_ctl_port = port->port_id;
619	}
620	free(name);
621
622	STAILQ_FOREACH(lun, &devlist.lun_list, links) {
623		struct cctl_lun_nv *nv;
624
625		if (lun->ctld_name == NULL) {
626			log_debugx("CTL lun %ju wasn't managed by ctld; "
627			    "ignoring", (uintmax_t)lun->lun_id);
628			continue;
629		}
630
631		cl = lun_find(conf, lun->ctld_name);
632		if (cl != NULL) {
633			log_warnx("found CTL lun %ju \"%s\", "
634			    "also backed by CTL lun %d; ignoring",
635			    (uintmax_t)lun->lun_id, lun->ctld_name,
636			    cl->l_ctl_lun);
637			continue;
638		}
639
640		log_debugx("found CTL lun %ju \"%s\"",
641		    (uintmax_t)lun->lun_id, lun->ctld_name);
642
643		cl = lun_new(conf, lun->ctld_name);
644		if (cl == NULL) {
645			log_warnx("lun_new failed");
646			continue;
647		}
648		lun_set_backend(cl, lun->backend_type);
649		lun_set_device_type(cl, lun->device_type);
650		lun_set_blocksize(cl, lun->blocksize);
651		lun_set_device_id(cl, lun->device_id);
652		lun_set_serial(cl, lun->serial_number);
653		lun_set_size(cl, lun->size_blocks * cl->l_blocksize);
654		lun_set_ctl_lun(cl, lun->lun_id);
655
656		STAILQ_FOREACH(nv, &lun->attr_list, links) {
657			if (strcmp(nv->name, "file") == 0 ||
658			    strcmp(nv->name, "dev") == 0) {
659				lun_set_path(cl, nv->value);
660				continue;
661			}
662			o = option_new(&cl->l_options, nv->name, nv->value);
663			if (o == NULL)
664				log_warnx("unable to add CTL lun option %s "
665				    "for CTL lun %ju \"%s\"",
666				    nv->name, (uintmax_t) lun->lun_id,
667				    cl->l_name);
668		}
669	}
670
671	return (conf);
672}
673
674int
675kernel_lun_add(struct lun *lun)
676{
677	struct option *o;
678	struct ctl_lun_req req;
679	int error;
680
681	bzero(&req, sizeof(req));
682
683	strlcpy(req.backend, lun->l_backend, sizeof(req.backend));
684	req.reqtype = CTL_LUNREQ_CREATE;
685
686	req.reqdata.create.blocksize_bytes = lun->l_blocksize;
687
688	if (lun->l_size != 0)
689		req.reqdata.create.lun_size_bytes = lun->l_size;
690
691	if (lun->l_ctl_lun >= 0) {
692		req.reqdata.create.req_lun_id = lun->l_ctl_lun;
693		req.reqdata.create.flags |= CTL_LUN_FLAG_ID_REQ;
694	}
695
696	req.reqdata.create.flags |= CTL_LUN_FLAG_DEV_TYPE;
697	req.reqdata.create.device_type = lun->l_device_type;
698
699	if (lun->l_serial != NULL) {
700		strncpy(req.reqdata.create.serial_num, lun->l_serial,
701			sizeof(req.reqdata.create.serial_num));
702		req.reqdata.create.flags |= CTL_LUN_FLAG_SERIAL_NUM;
703	}
704
705	if (lun->l_device_id != NULL) {
706		strncpy(req.reqdata.create.device_id, lun->l_device_id,
707			sizeof(req.reqdata.create.device_id));
708		req.reqdata.create.flags |= CTL_LUN_FLAG_DEVID;
709	}
710
711	if (lun->l_path != NULL) {
712		o = option_find(&lun->l_options, "file");
713		if (o != NULL) {
714			option_set(o, lun->l_path);
715		} else {
716			o = option_new(&lun->l_options, "file", lun->l_path);
717			assert(o != NULL);
718		}
719	}
720
721	o = option_find(&lun->l_options, "ctld_name");
722	if (o != NULL) {
723		option_set(o, lun->l_name);
724	} else {
725		o = option_new(&lun->l_options, "ctld_name", lun->l_name);
726		assert(o != NULL);
727	}
728
729	o = option_find(&lun->l_options, "scsiname");
730	if (o == NULL && lun->l_scsiname != NULL) {
731		o = option_new(&lun->l_options, "scsiname", lun->l_scsiname);
732		assert(o != NULL);
733	}
734
735	if (!TAILQ_EMPTY(&lun->l_options)) {
736		req.args_nvl = nvlist_create(0);
737		if (req.args_nvl == NULL) {
738			log_warn("error allocating nvlist");
739			return (1);
740		}
741
742		TAILQ_FOREACH(o, &lun->l_options, o_next)
743			nvlist_add_string(req.args_nvl, o->o_name, o->o_value);
744
745		req.args = nvlist_pack(req.args_nvl, &req.args_len);
746		if (req.args == NULL) {
747			log_warn("error packing nvlist");
748			return (1);
749		}
750	}
751
752	error = ioctl(ctl_fd, CTL_LUN_REQ, &req);
753	nvlist_destroy(req.args_nvl);
754
755	if (error != 0) {
756		log_warn("error issuing CTL_LUN_REQ ioctl");
757		return (1);
758	}
759
760	switch (req.status) {
761	case CTL_LUN_ERROR:
762		log_warnx("LUN creation error: %s", req.error_str);
763		return (1);
764	case CTL_LUN_WARNING:
765		log_warnx("LUN creation warning: %s", req.error_str);
766		break;
767	case CTL_LUN_OK:
768		break;
769	default:
770		log_warnx("unknown LUN creation status: %d",
771		    req.status);
772		return (1);
773	}
774
775	lun_set_ctl_lun(lun, req.reqdata.create.req_lun_id);
776	return (0);
777}
778
779int
780kernel_lun_modify(struct lun *lun)
781{
782	struct option *o;
783	struct ctl_lun_req req;
784	int error;
785
786	bzero(&req, sizeof(req));
787
788	strlcpy(req.backend, lun->l_backend, sizeof(req.backend));
789	req.reqtype = CTL_LUNREQ_MODIFY;
790
791	req.reqdata.modify.lun_id = lun->l_ctl_lun;
792	req.reqdata.modify.lun_size_bytes = lun->l_size;
793
794	if (lun->l_path != NULL) {
795		o = option_find(&lun->l_options, "file");
796		if (o != NULL) {
797			option_set(o, lun->l_path);
798		} else {
799			o = option_new(&lun->l_options, "file", lun->l_path);
800			assert(o != NULL);
801		}
802	}
803
804	o = option_find(&lun->l_options, "ctld_name");
805	if (o != NULL) {
806		option_set(o, lun->l_name);
807	} else {
808		o = option_new(&lun->l_options, "ctld_name", lun->l_name);
809		assert(o != NULL);
810	}
811
812	o = option_find(&lun->l_options, "scsiname");
813	if (o == NULL && lun->l_scsiname != NULL) {
814		o = option_new(&lun->l_options, "scsiname", lun->l_scsiname);
815		assert(o != NULL);
816	}
817
818	if (!TAILQ_EMPTY(&lun->l_options)) {
819		req.args_nvl = nvlist_create(0);
820		if (req.args_nvl == NULL) {
821			log_warn("error allocating nvlist");
822			return (1);
823		}
824
825		TAILQ_FOREACH(o, &lun->l_options, o_next)
826			nvlist_add_string(req.args_nvl, o->o_name, o->o_value);
827
828		req.args = nvlist_pack(req.args_nvl, &req.args_len);
829		if (req.args == NULL) {
830			log_warn("error packing nvlist");
831			return (1);
832		}
833	}
834
835	error = ioctl(ctl_fd, CTL_LUN_REQ, &req);
836	nvlist_destroy(req.args_nvl);
837
838	if (error != 0) {
839		log_warn("error issuing CTL_LUN_REQ ioctl");
840		return (1);
841	}
842
843	switch (req.status) {
844	case CTL_LUN_ERROR:
845		log_warnx("LUN modification error: %s", req.error_str);
846		return (1);
847	case CTL_LUN_WARNING:
848		log_warnx("LUN modification warning: %s", req.error_str);
849		break;
850	case CTL_LUN_OK:
851		break;
852	default:
853		log_warnx("unknown LUN modification status: %d",
854		    req.status);
855		return (1);
856	}
857
858	return (0);
859}
860
861int
862kernel_lun_remove(struct lun *lun)
863{
864	struct ctl_lun_req req;
865
866	bzero(&req, sizeof(req));
867
868	strlcpy(req.backend, lun->l_backend, sizeof(req.backend));
869	req.reqtype = CTL_LUNREQ_RM;
870
871	req.reqdata.rm.lun_id = lun->l_ctl_lun;
872
873	if (ioctl(ctl_fd, CTL_LUN_REQ, &req) == -1) {
874		log_warn("error issuing CTL_LUN_REQ ioctl");
875		return (1);
876	}
877
878	switch (req.status) {
879	case CTL_LUN_ERROR:
880		log_warnx("LUN removal error: %s", req.error_str);
881		return (1);
882	case CTL_LUN_WARNING:
883		log_warnx("LUN removal warning: %s", req.error_str);
884		break;
885	case CTL_LUN_OK:
886		break;
887	default:
888		log_warnx("unknown LUN removal status: %d", req.status);
889		return (1);
890	}
891
892	return (0);
893}
894
895void
896kernel_handoff(struct connection *conn)
897{
898	struct ctl_iscsi req;
899
900	bzero(&req, sizeof(req));
901
902	req.type = CTL_ISCSI_HANDOFF;
903	strlcpy(req.data.handoff.initiator_name,
904	    conn->conn_initiator_name, sizeof(req.data.handoff.initiator_name));
905	strlcpy(req.data.handoff.initiator_addr,
906	    conn->conn_initiator_addr, sizeof(req.data.handoff.initiator_addr));
907	if (conn->conn_initiator_alias != NULL) {
908		strlcpy(req.data.handoff.initiator_alias,
909		    conn->conn_initiator_alias, sizeof(req.data.handoff.initiator_alias));
910	}
911	memcpy(req.data.handoff.initiator_isid, conn->conn_initiator_isid,
912	    sizeof(req.data.handoff.initiator_isid));
913	strlcpy(req.data.handoff.target_name,
914	    conn->conn_target->t_name, sizeof(req.data.handoff.target_name));
915	if (conn->conn_portal->p_portal_group->pg_offload != NULL) {
916		strlcpy(req.data.handoff.offload,
917		    conn->conn_portal->p_portal_group->pg_offload,
918		    sizeof(req.data.handoff.offload));
919	}
920#ifdef ICL_KERNEL_PROXY
921	if (proxy_mode)
922		req.data.handoff.connection_id = conn->conn_socket;
923	else
924		req.data.handoff.socket = conn->conn_socket;
925#else
926	req.data.handoff.socket = conn->conn_socket;
927#endif
928	req.data.handoff.portal_group_tag =
929	    conn->conn_portal->p_portal_group->pg_tag;
930	if (conn->conn_header_digest == CONN_DIGEST_CRC32C)
931		req.data.handoff.header_digest = CTL_ISCSI_DIGEST_CRC32C;
932	if (conn->conn_data_digest == CONN_DIGEST_CRC32C)
933		req.data.handoff.data_digest = CTL_ISCSI_DIGEST_CRC32C;
934	req.data.handoff.cmdsn = conn->conn_cmdsn;
935	req.data.handoff.statsn = conn->conn_statsn;
936	req.data.handoff.max_recv_data_segment_length =
937	    conn->conn_max_recv_data_segment_length;
938	req.data.handoff.max_send_data_segment_length =
939	    conn->conn_max_send_data_segment_length;
940	req.data.handoff.max_burst_length = conn->conn_max_burst_length;
941	req.data.handoff.first_burst_length = conn->conn_first_burst_length;
942	req.data.handoff.immediate_data = conn->conn_immediate_data;
943
944	if (ioctl(ctl_fd, CTL_ISCSI, &req) == -1) {
945		log_err(1, "error issuing CTL_ISCSI ioctl; "
946		    "dropping connection");
947	}
948
949	if (req.status != CTL_ISCSI_OK) {
950		log_errx(1, "error returned from CTL iSCSI handoff request: "
951		    "%s; dropping connection", req.error_str);
952	}
953}
954
955void
956kernel_limits(const char *offload, int *max_recv_dsl, int *max_send_dsl,
957    int *max_burst_length, int *first_burst_length)
958{
959	struct ctl_iscsi req;
960	struct ctl_iscsi_limits_params *cilp;
961
962	bzero(&req, sizeof(req));
963
964	req.type = CTL_ISCSI_LIMITS;
965	cilp = (struct ctl_iscsi_limits_params *)&(req.data.limits);
966	if (offload != NULL) {
967		strlcpy(cilp->offload, offload, sizeof(cilp->offload));
968	}
969
970	if (ioctl(ctl_fd, CTL_ISCSI, &req) == -1) {
971		log_err(1, "error issuing CTL_ISCSI ioctl; "
972		    "dropping connection");
973	}
974
975	if (req.status != CTL_ISCSI_OK) {
976		log_errx(1, "error returned from CTL iSCSI limits request: "
977		    "%s; dropping connection", req.error_str);
978	}
979
980	if (cilp->max_recv_data_segment_length != 0) {
981		*max_recv_dsl = cilp->max_recv_data_segment_length;
982		*max_send_dsl = cilp->max_recv_data_segment_length;
983	}
984	if (cilp->max_send_data_segment_length != 0)
985		*max_send_dsl = cilp->max_send_data_segment_length;
986	if (cilp->max_burst_length != 0)
987		*max_burst_length = cilp->max_burst_length;
988	if (cilp->first_burst_length != 0)
989		*first_burst_length = cilp->first_burst_length;
990	if (*max_burst_length < *first_burst_length)
991		*first_burst_length = *max_burst_length;
992
993	if (offload != NULL) {
994		log_debugx("Kernel limits for offload \"%s\" are "
995		    "MaxRecvDataSegment=%d, max_send_dsl=%d, "
996		    "MaxBurstLength=%d, FirstBurstLength=%d",
997		    offload, *max_recv_dsl, *max_send_dsl, *max_burst_length,
998		    *first_burst_length);
999	} else {
1000		log_debugx("Kernel limits are "
1001		    "MaxRecvDataSegment=%d, max_send_dsl=%d, "
1002		    "MaxBurstLength=%d, FirstBurstLength=%d",
1003		    *max_recv_dsl, *max_send_dsl, *max_burst_length,
1004		    *first_burst_length);
1005	}
1006}
1007
1008int
1009kernel_port_add(struct port *port)
1010{
1011	struct option *o;
1012	struct ctl_port_entry entry;
1013	struct ctl_req req;
1014	struct ctl_lun_map lm;
1015	struct target *targ = port->p_target;
1016	struct portal_group *pg = port->p_portal_group;
1017	char result_buf[NVLIST_BUFSIZE];
1018	int error, i;
1019
1020	/* Create iSCSI port. */
1021	if (port->p_portal_group || port->p_ioctl_port) {
1022		bzero(&req, sizeof(req));
1023		req.reqtype = CTL_REQ_CREATE;
1024
1025		if (port->p_portal_group) {
1026			strlcpy(req.driver, "iscsi", sizeof(req.driver));
1027			req.args_nvl = nvlist_create(0);
1028			nvlist_add_string(req.args_nvl, "cfiscsi_target",
1029			    targ->t_name);
1030			nvlist_add_string(req.args_nvl,
1031			    "ctld_portal_group_name", pg->pg_name);
1032			nvlist_add_stringf(req.args_nvl,
1033			    "cfiscsi_portal_group_tag", "%u", pg->pg_tag);
1034
1035			if (targ->t_alias) {
1036				nvlist_add_string(req.args_nvl,
1037				    "cfiscsi_target_alias", targ->t_alias);
1038			}
1039
1040			TAILQ_FOREACH(o, &pg->pg_options, o_next)
1041				nvlist_add_string(req.args_nvl, o->o_name,
1042				    o->o_value);
1043		}
1044
1045		if (port->p_ioctl_port) {
1046			strlcpy(req.driver, "ioctl", sizeof(req.driver));
1047			req.args_nvl = nvlist_create(0);
1048			nvlist_add_stringf(req.args_nvl, "pp", "%d",
1049			    port->p_ioctl_pp);
1050			nvlist_add_stringf(req.args_nvl, "vp", "%d",
1051			    port->p_ioctl_vp);
1052		}
1053
1054		req.args = nvlist_pack(req.args_nvl, &req.args_len);
1055		if (req.args == NULL) {
1056			log_warn("error packing nvlist");
1057			return (1);
1058		}
1059
1060		req.result = result_buf;
1061		req.result_len = sizeof(result_buf);
1062		error = ioctl(ctl_fd, CTL_PORT_REQ, &req);
1063		nvlist_destroy(req.args_nvl);
1064
1065		if (error != 0) {
1066			log_warn("error issuing CTL_PORT_REQ ioctl");
1067			return (1);
1068		}
1069		if (req.status == CTL_LUN_ERROR) {
1070			log_warnx("error returned from port creation request: %s",
1071			    req.error_str);
1072			return (1);
1073		}
1074		if (req.status != CTL_LUN_OK) {
1075			log_warnx("unknown port creation request status %d",
1076			    req.status);
1077			return (1);
1078		}
1079
1080		req.result_nvl = nvlist_unpack(result_buf, req.result_len, 0);
1081		if (req.result_nvl == NULL) {
1082			log_warnx("error unpacking result nvlist");
1083			return (1);
1084		}
1085
1086		port->p_ctl_port = nvlist_get_number(req.result_nvl, "port_id");
1087		nvlist_destroy(req.result_nvl);
1088	} else if (port->p_pport) {
1089		port->p_ctl_port = port->p_pport->pp_ctl_port;
1090
1091		if (strncmp(targ->t_name, "naa.", 4) == 0 &&
1092		    strlen(targ->t_name) == 20) {
1093			bzero(&entry, sizeof(entry));
1094			entry.port_type = CTL_PORT_NONE;
1095			entry.targ_port = port->p_ctl_port;
1096			entry.flags |= CTL_PORT_WWNN_VALID;
1097			entry.wwnn = strtoull(targ->t_name + 4, NULL, 16);
1098			if (ioctl(ctl_fd, CTL_SET_PORT_WWNS, &entry) == -1)
1099				log_warn("CTL_SET_PORT_WWNS ioctl failed");
1100		}
1101	}
1102
1103	/* Explicitly enable mapping to block any access except allowed. */
1104	lm.port = port->p_ctl_port;
1105	lm.plun = UINT32_MAX;
1106	lm.lun = 0;
1107	error = ioctl(ctl_fd, CTL_LUN_MAP, &lm);
1108	if (error != 0)
1109		log_warn("CTL_LUN_MAP ioctl failed");
1110
1111	/* Map configured LUNs */
1112	for (i = 0; i < MAX_LUNS; i++) {
1113		if (targ->t_luns[i] == NULL)
1114			continue;
1115		lm.port = port->p_ctl_port;
1116		lm.plun = i;
1117		lm.lun = targ->t_luns[i]->l_ctl_lun;
1118		error = ioctl(ctl_fd, CTL_LUN_MAP, &lm);
1119		if (error != 0)
1120			log_warn("CTL_LUN_MAP ioctl failed");
1121	}
1122
1123	/* Enable port */
1124	bzero(&entry, sizeof(entry));
1125	entry.targ_port = port->p_ctl_port;
1126	error = ioctl(ctl_fd, CTL_ENABLE_PORT, &entry);
1127	if (error != 0) {
1128		log_warn("CTL_ENABLE_PORT ioctl failed");
1129		return (-1);
1130	}
1131
1132	return (0);
1133}
1134
1135int
1136kernel_port_update(struct port *port, struct port *oport)
1137{
1138	struct ctl_lun_map lm;
1139	struct target *targ = port->p_target;
1140	struct target *otarg = oport->p_target;
1141	int error, i;
1142	uint32_t olun;
1143
1144	/* Map configured LUNs and unmap others */
1145	for (i = 0; i < MAX_LUNS; i++) {
1146		lm.port = port->p_ctl_port;
1147		lm.plun = i;
1148		if (targ->t_luns[i] == NULL)
1149			lm.lun = UINT32_MAX;
1150		else
1151			lm.lun = targ->t_luns[i]->l_ctl_lun;
1152		if (otarg->t_luns[i] == NULL)
1153			olun = UINT32_MAX;
1154		else
1155			olun = otarg->t_luns[i]->l_ctl_lun;
1156		if (lm.lun == olun)
1157			continue;
1158		error = ioctl(ctl_fd, CTL_LUN_MAP, &lm);
1159		if (error != 0)
1160			log_warn("CTL_LUN_MAP ioctl failed");
1161	}
1162	return (0);
1163}
1164
1165int
1166kernel_port_remove(struct port *port)
1167{
1168	struct ctl_port_entry entry;
1169	struct ctl_lun_map lm;
1170	struct ctl_req req;
1171	struct target *targ = port->p_target;
1172	struct portal_group *pg = port->p_portal_group;
1173	int error;
1174
1175	/* Disable port */
1176	bzero(&entry, sizeof(entry));
1177	entry.targ_port = port->p_ctl_port;
1178	error = ioctl(ctl_fd, CTL_DISABLE_PORT, &entry);
1179	if (error != 0) {
1180		log_warn("CTL_DISABLE_PORT ioctl failed");
1181		return (-1);
1182	}
1183
1184	/* Remove iSCSI or ioctl port. */
1185	if (port->p_portal_group || port->p_ioctl_port) {
1186		bzero(&req, sizeof(req));
1187		strlcpy(req.driver, port->p_ioctl_port ? "ioctl" : "iscsi",
1188		    sizeof(req.driver));
1189		req.reqtype = CTL_REQ_REMOVE;
1190		req.args_nvl = nvlist_create(0);
1191		if (req.args_nvl == NULL)
1192			log_err(1, "nvlist_create");
1193
1194		if (port->p_ioctl_port)
1195			nvlist_add_stringf(req.args_nvl, "port_id", "%d",
1196			    port->p_ctl_port);
1197		else {
1198			nvlist_add_string(req.args_nvl, "cfiscsi_target",
1199			    targ->t_name);
1200			nvlist_add_stringf(req.args_nvl,
1201			    "cfiscsi_portal_group_tag", "%u", pg->pg_tag);
1202		}
1203
1204		req.args = nvlist_pack(req.args_nvl, &req.args_len);
1205		if (req.args == NULL) {
1206			log_warn("error packing nvlist");
1207			return (1);
1208		}
1209
1210		error = ioctl(ctl_fd, CTL_PORT_REQ, &req);
1211		nvlist_destroy(req.args_nvl);
1212
1213		if (error != 0) {
1214			log_warn("error issuing CTL_PORT_REQ ioctl");
1215			return (1);
1216		}
1217		if (req.status == CTL_LUN_ERROR) {
1218			log_warnx("error returned from port removal request: %s",
1219			    req.error_str);
1220			return (1);
1221		}
1222		if (req.status != CTL_LUN_OK) {
1223			log_warnx("unknown port removal request status %d",
1224			    req.status);
1225			return (1);
1226		}
1227	} else {
1228		/* Disable LUN mapping. */
1229		lm.port = port->p_ctl_port;
1230		lm.plun = UINT32_MAX;
1231		lm.lun = UINT32_MAX;
1232		error = ioctl(ctl_fd, CTL_LUN_MAP, &lm);
1233		if (error != 0)
1234			log_warn("CTL_LUN_MAP ioctl failed");
1235	}
1236	return (0);
1237}
1238
1239#ifdef ICL_KERNEL_PROXY
1240void
1241kernel_listen(struct addrinfo *ai, bool iser, int portal_id)
1242{
1243	struct ctl_iscsi req;
1244
1245	bzero(&req, sizeof(req));
1246
1247	req.type = CTL_ISCSI_LISTEN;
1248	req.data.listen.iser = iser;
1249	req.data.listen.domain = ai->ai_family;
1250	req.data.listen.socktype = ai->ai_socktype;
1251	req.data.listen.protocol = ai->ai_protocol;
1252	req.data.listen.addr = ai->ai_addr;
1253	req.data.listen.addrlen = ai->ai_addrlen;
1254	req.data.listen.portal_id = portal_id;
1255
1256	if (ioctl(ctl_fd, CTL_ISCSI, &req) == -1)
1257		log_err(1, "error issuing CTL_ISCSI ioctl");
1258
1259	if (req.status != CTL_ISCSI_OK) {
1260		log_errx(1, "error returned from CTL iSCSI listen: %s",
1261		    req.error_str);
1262	}
1263}
1264
1265void
1266kernel_accept(int *connection_id, int *portal_id,
1267    struct sockaddr *client_sa, socklen_t *client_salen)
1268{
1269	struct ctl_iscsi req;
1270	struct sockaddr_storage ss;
1271
1272	bzero(&req, sizeof(req));
1273
1274	req.type = CTL_ISCSI_ACCEPT;
1275	req.data.accept.initiator_addr = (struct sockaddr *)&ss;
1276
1277	if (ioctl(ctl_fd, CTL_ISCSI, &req) == -1)
1278		log_err(1, "error issuing CTL_ISCSI ioctl");
1279
1280	if (req.status != CTL_ISCSI_OK) {
1281		log_errx(1, "error returned from CTL iSCSI accept: %s",
1282		    req.error_str);
1283	}
1284
1285	*connection_id = req.data.accept.connection_id;
1286	*portal_id = req.data.accept.portal_id;
1287	*client_salen = req.data.accept.initiator_addrlen;
1288	memcpy(client_sa, &ss, *client_salen);
1289}
1290
1291void
1292kernel_send(struct pdu *pdu)
1293{
1294	struct ctl_iscsi req;
1295
1296	bzero(&req, sizeof(req));
1297
1298	req.type = CTL_ISCSI_SEND;
1299	req.data.send.connection_id = pdu->pdu_connection->conn_socket;
1300	req.data.send.bhs = pdu->pdu_bhs;
1301	req.data.send.data_segment_len = pdu->pdu_data_len;
1302	req.data.send.data_segment = pdu->pdu_data;
1303
1304	if (ioctl(ctl_fd, CTL_ISCSI, &req) == -1) {
1305		log_err(1, "error issuing CTL_ISCSI ioctl; "
1306		    "dropping connection");
1307	}
1308
1309	if (req.status != CTL_ISCSI_OK) {
1310		log_errx(1, "error returned from CTL iSCSI send: "
1311		    "%s; dropping connection", req.error_str);
1312	}
1313}
1314
1315void
1316kernel_receive(struct pdu *pdu)
1317{
1318	struct connection *conn;
1319	struct ctl_iscsi req;
1320
1321	conn = pdu->pdu_connection;
1322	pdu->pdu_data = malloc(conn->conn_max_recv_data_segment_length);
1323	if (pdu->pdu_data == NULL)
1324		log_err(1, "malloc");
1325
1326	bzero(&req, sizeof(req));
1327
1328	req.type = CTL_ISCSI_RECEIVE;
1329	req.data.receive.connection_id = conn->conn_socket;
1330	req.data.receive.bhs = pdu->pdu_bhs;
1331	req.data.receive.data_segment_len =
1332	    conn->conn_max_recv_data_segment_length;
1333	req.data.receive.data_segment = pdu->pdu_data;
1334
1335	if (ioctl(ctl_fd, CTL_ISCSI, &req) == -1) {
1336		log_err(1, "error issuing CTL_ISCSI ioctl; "
1337		    "dropping connection");
1338	}
1339
1340	if (req.status != CTL_ISCSI_OK) {
1341		log_errx(1, "error returned from CTL iSCSI receive: "
1342		    "%s; dropping connection", req.error_str);
1343	}
1344
1345}
1346
1347#endif /* ICL_KERNEL_PROXY */
1348
1349/*
1350 * XXX: I CANT INTO LATIN
1351 */
1352void
1353kernel_capsicate(void)
1354{
1355	cap_rights_t rights;
1356	const unsigned long cmds[] = { CTL_ISCSI };
1357
1358	cap_rights_init(&rights, CAP_IOCTL);
1359	if (caph_rights_limit(ctl_fd, &rights) < 0)
1360		log_err(1, "cap_rights_limit");
1361
1362	if (caph_ioctls_limit(ctl_fd, cmds, nitems(cmds)) < 0)
1363		log_err(1, "cap_ioctls_limit");
1364
1365	if (caph_enter() < 0)
1366		log_err(1, "cap_enter");
1367
1368	if (cap_sandboxed())
1369		log_debugx("Capsicum capability mode enabled");
1370	else
1371		log_warnx("Capsicum capability mode not supported");
1372}
1373
1374