dcavalca / rpms / linuxptp

Forked from rpms/linuxptp 2 years ago
Clone
1a36a3
Patches backported from the upstream repository.
1a36a3
1a36a3
commit acc045034dd0db9dd4c4aca4b26528f8fed2ae78
1a36a3
Author: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
Date:   Thu Feb 11 16:47:08 2021 +0100
1a36a3
1a36a3
    port: Ignore non-management messages on UDS port.
1a36a3
    
1a36a3
    Drop non-management messages on the UDS port early in the processing to
1a36a3
    prevent them from changing the port or clock state.
1a36a3
    
1a36a3
    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
1a36a3
diff --git a/port.c b/port.c
1a36a3
index fa49663..3fd06b1 100644
1a36a3
--- a/port.c
1a36a3
+++ b/port.c
1a36a3
@@ -56,6 +56,7 @@ enum syfu_event {
1a36a3
 };
1a36a3
 
1a36a3
 static int port_is_ieee8021as(struct port *p);
1a36a3
+static int port_is_uds(struct port *p);
1a36a3
 static void port_nrate_initialize(struct port *p);
1a36a3
 
1a36a3
 static int announce_compare(struct ptp_message *m1, struct ptp_message *m2)
1a36a3
@@ -691,6 +692,9 @@ static int port_ignore(struct port *p, struct ptp_message *m)
1a36a3
 {
1a36a3
 	struct ClockIdentity c1, c2;
1a36a3
 
1a36a3
+	if (port_is_uds(p) && msg_type(m) != MANAGEMENT) {
1a36a3
+		return 1;
1a36a3
+	}
1a36a3
 	if (incapable_ignore(p, m)) {
1a36a3
 		return 1;
1a36a3
 	}
1a36a3
@@ -771,6 +775,11 @@ static int port_is_ieee8021as(struct port *p)
1a36a3
 	return p->follow_up_info ? 1 : 0;
1a36a3
 }
1a36a3
 
1a36a3
+static int port_is_uds(struct port *p)
1a36a3
+{
1a36a3
+	return transport_type(p->trp) == TRANS_UDS;
1a36a3
+}
1a36a3
+
1a36a3
 static void port_management_send_error(struct port *p, struct port *ingress,
1a36a3
 				       struct ptp_message *msg, int error_id)
1a36a3
 {
1a36a3
1a36a3
commit 72ec806fa62a87cb7e5444e27fa6bdcbfe4e27ca
1a36a3
Author: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
Date:   Thu Feb 11 16:47:09 2021 +0100
1a36a3
1a36a3
    clock: Don't allow COMMAND action on non-UDS port.
1a36a3
    
1a36a3
    No COMMAND actions are currently supported, but check the port early in
1a36a3
    clock_manage() before reaching port_manage().
1a36a3
    
1a36a3
    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
1a36a3
diff --git a/clock.c b/clock.c
1a36a3
index a66d189..a6947bc 100644
1a36a3
--- a/clock.c
1a36a3
+++ b/clock.c
1a36a3
@@ -1423,6 +1423,11 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 			return changed;
1a36a3
 		break;
1a36a3
 	case COMMAND:
1a36a3
+		if (p != c->uds_port) {
1a36a3
+			/* Sorry, only allowed on the UDS port. */
1a36a3
+			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
+			return changed;
1a36a3
+		}
1a36a3
 		break;
1a36a3
 	default:
1a36a3
 		return changed;
1a36a3
1a36a3
commit 2b45d80eadcb81c8bdf45baf98dabeebd912b1b0
1a36a3
Author: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
Date:   Thu Feb 11 16:47:10 2021 +0100
1a36a3
1a36a3
    clock: Rename UDS variables to read-write.
1a36a3
    
1a36a3
    In preparation for a new read-only UDS port, rename variables of the
1a36a3
    current UDS port to make it clear it is read-write, as opposed to
1a36a3
    read-only.
1a36a3
    
1a36a3
    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
1a36a3
diff --git a/clock.c b/clock.c
1a36a3
index a6947bc..d013b19 100644
1a36a3
--- a/clock.c
1a36a3
+++ b/clock.c
1a36a3
@@ -95,7 +95,7 @@ struct clock {
1a36a3
 	struct foreign_clock *best;
1a36a3
 	struct ClockIdentity best_id;
1a36a3
 	LIST_HEAD(ports_head, port) ports;
1a36a3
-	struct port *uds_port;
1a36a3
+	struct port *uds_rw_port;
1a36a3
 	struct pollfd *pollfd;
1a36a3
 	int pollfd_valid;
1a36a3
 	int nports; /* does not include the UDS port */
1a36a3
@@ -129,7 +129,7 @@ struct clock {
1a36a3
 	struct clock_stats stats;
1a36a3
 	int stats_interval;
1a36a3
 	struct clockcheck *sanity_check;
1a36a3
-	struct interface *udsif;
1a36a3
+	struct interface *uds_rw_if;
1a36a3
 	LIST_HEAD(clock_subscribers_head, clock_subscriber) subscribers;
1a36a3
 	struct monitor *slave_event_monitor;
1a36a3
 };
1a36a3
@@ -245,7 +245,7 @@ void clock_send_notification(struct clock *c, struct ptp_message *msg,
1a36a3
 {
1a36a3
 	unsigned int event_pos = event / 8;
1a36a3
 	uint8_t mask = 1 << (event % 8);
1a36a3
-	struct port *uds = c->uds_port;
1a36a3
+	struct port *uds = c->uds_rw_port;
1a36a3
 	struct clock_subscriber *s;
1a36a3
 
1a36a3
 	LIST_FOREACH(s, &c->subscribers, list) {
1a36a3
@@ -267,13 +267,13 @@ void clock_destroy(struct clock *c)
1a36a3
 {
1a36a3
 	struct port *p, *tmp;
1a36a3
 
1a36a3
-	interface_destroy(c->udsif);
1a36a3
+	interface_destroy(c->uds_rw_if);
1a36a3
 	clock_flush_subscriptions(c);
1a36a3
 	LIST_FOREACH_SAFE(p, &c->ports, list, tmp) {
1a36a3
 		clock_remove_port(c, p);
1a36a3
 	}
1a36a3
 	monitor_destroy(c->slave_event_monitor);
1a36a3
-	port_close(c->uds_port);
1a36a3
+	port_close(c->uds_rw_port);
1a36a3
 	free(c->pollfd);
1a36a3
 	if (c->clkid != CLOCK_REALTIME) {
1a36a3
 		phc_close(c->clkid);
1a36a3
@@ -442,7 +442,7 @@ static int clock_management_fill_response(struct clock *c, struct port *p,
1a36a3
 		datalen = sizeof(*gsn);
1a36a3
 		break;
1a36a3
 	case TLV_SUBSCRIBE_EVENTS_NP:
1a36a3
-		if (p != c->uds_port) {
1a36a3
+		if (p != c->uds_rw_port) {
1a36a3
 			/* Only the UDS port allowed. */
1a36a3
 			break;
1a36a3
 		}
1a36a3
@@ -784,7 +784,7 @@ static int forwarding(struct clock *c, struct port *p)
1a36a3
 	default:
1a36a3
 		break;
1a36a3
 	}
1a36a3
-	if (p == c->uds_port && ps != PS_FAULTY) {
1a36a3
+	if (p == c->uds_rw_port && ps != PS_FAULTY) {
1a36a3
 		return 1;
1a36a3
 	}
1a36a3
 	return 0;
1a36a3
@@ -1044,20 +1044,20 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 
1a36a3
 	/* Configure the UDS. */
1a36a3
 	uds_ifname = config_get_string(config, NULL, "uds_address");
1a36a3
-	c->udsif = interface_create(uds_ifname);
1a36a3
-	if (config_set_section_int(config, interface_name(c->udsif),
1a36a3
+	c->uds_rw_if = interface_create(uds_ifname);
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_rw_if),
1a36a3
 				   "announceReceiptTimeout", 0)) {
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
-	if (config_set_section_int(config, interface_name(c->udsif),
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_rw_if),
1a36a3
 				    "delay_mechanism", DM_AUTO)) {
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
-	if (config_set_section_int(config, interface_name(c->udsif),
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_rw_if),
1a36a3
 				    "network_transport", TRANS_UDS)) {
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
-	if (config_set_section_int(config, interface_name(c->udsif),
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_rw_if),
1a36a3
 				   "delay_filter_length", 1)) {
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
@@ -1180,14 +1180,15 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 	}
1a36a3
 
1a36a3
 	/* Create the UDS interface. */
1a36a3
-	c->uds_port = port_open(phc_device, phc_index, timestamping, 0, c->udsif, c);
1a36a3
-	if (!c->uds_port) {
1a36a3
+	c->uds_rw_port = port_open(phc_device, phc_index, timestamping, 0,
1a36a3
+				   c->uds_rw_if, c);
1a36a3
+	if (!c->uds_rw_port) {
1a36a3
 		pr_err("failed to open the UDS port");
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
 	clock_fda_changed(c);
1a36a3
 
1a36a3
-	c->slave_event_monitor = monitor_create(config, c->uds_port);
1a36a3
+	c->slave_event_monitor = monitor_create(config, c->uds_rw_port);
1a36a3
 	if (!c->slave_event_monitor) {
1a36a3
 		pr_err("failed to create slave event monitor");
1a36a3
 		return NULL;
1a36a3
@@ -1206,7 +1207,7 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 	LIST_FOREACH(p, &c->ports, list) {
1a36a3
 		port_dispatch(p, EV_INITIALIZE, 0);
1a36a3
 	}
1a36a3
-	port_dispatch(c->uds_port, EV_INITIALIZE, 0);
1a36a3
+	port_dispatch(c->uds_rw_port, EV_INITIALIZE, 0);
1a36a3
 
1a36a3
 	return c;
1a36a3
 }
1a36a3
@@ -1314,7 +1315,7 @@ static void clock_check_pollfd(struct clock *c)
1a36a3
 		clock_fill_pollfd(dest, p);
1a36a3
 		dest += N_CLOCK_PFD;
1a36a3
 	}
1a36a3
-	clock_fill_pollfd(dest, c->uds_port);
1a36a3
+	clock_fill_pollfd(dest, c->uds_rw_port);
1a36a3
 	c->pollfd_valid = 1;
1a36a3
 }
1a36a3
 
1a36a3
@@ -1331,7 +1332,7 @@ static int clock_do_forward_mgmt(struct clock *c,
1a36a3
 		return 0;
1a36a3
 
1a36a3
 	/* Don't forward any requests to the UDS port. */
1a36a3
-	if (out == c->uds_port) {
1a36a3
+	if (out == c->uds_rw_port) {
1a36a3
 		switch (management_action(msg)) {
1a36a3
 		case GET:
1a36a3
 		case SET:
1a36a3
@@ -1362,7 +1363,7 @@ static void clock_forward_mgmt_msg(struct clock *c, struct port *p, struct ptp_m
1a36a3
 				pr_err("port %d: management forward failed",
1a36a3
 				       port_number(piter));
1a36a3
 		}
1a36a3
-		if (clock_do_forward_mgmt(c, p, c->uds_port, msg, &msg_ready))
1a36a3
+		if (clock_do_forward_mgmt(c, p, c->uds_rw_port, msg, &msg_ready))
1a36a3
 			pr_err("uds port: management forward failed");
1a36a3
 		if (msg_ready) {
1a36a3
 			msg_post_recv(msg, pdulen);
1a36a3
@@ -1414,7 +1415,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 			clock_management_send_error(p, msg, TLV_WRONG_LENGTH);
1a36a3
 			return changed;
1a36a3
 		}
1a36a3
-		if (p != c->uds_port) {
1a36a3
+		if (p != c->uds_rw_port) {
1a36a3
 			/* Sorry, only allowed on the UDS port. */
1a36a3
 			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
 			return changed;
1a36a3
@@ -1423,7 +1424,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 			return changed;
1a36a3
 		break;
1a36a3
 	case COMMAND:
1a36a3
-		if (p != c->uds_port) {
1a36a3
+		if (p != c->uds_rw_port) {
1a36a3
 			/* Sorry, only allowed on the UDS port. */
1a36a3
 			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
 			return changed;
1a36a3
@@ -1435,7 +1436,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 
1a36a3
 	switch (mgt->id) {
1a36a3
 	case TLV_PORT_PROPERTIES_NP:
1a36a3
-		if (p != c->uds_port) {
1a36a3
+		if (p != c->uds_rw_port) {
1a36a3
 			/* Only the UDS port allowed. */
1a36a3
 			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
 			return 0;
1a36a3
@@ -1500,7 +1501,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 
1a36a3
 void clock_notify_event(struct clock *c, enum notification event)
1a36a3
 {
1a36a3
-	struct port *uds = c->uds_port;
1a36a3
+	struct port *uds = c->uds_rw_port;
1a36a3
 	struct PortIdentity pid = port_identity(uds);
1a36a3
 	struct ptp_message *msg;
1a36a3
 	int id;
1a36a3
@@ -1604,7 +1605,7 @@ int clock_poll(struct clock *c)
1a36a3
 	/* Check the UDS port. */
1a36a3
 	for (i = 0; i < N_POLLFD; i++) {
1a36a3
 		if (cur[i].revents & (POLLIN|POLLPRI)) {
1a36a3
-			event = port_event(c->uds_port, i);
1a36a3
+			event = port_event(c->uds_rw_port, i);
1a36a3
 			if (EV_STATE_DECISION_EVENT == event) {
1a36a3
 				c->sde = 1;
1a36a3
 			}
1a36a3
1a36a3
commit 1f74a16502b55ce8eaed3d7488542e5469ac8263
1a36a3
Author: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
Date:   Thu Feb 11 16:47:11 2021 +0100
1a36a3
1a36a3
    clock: Add read-only UDS port for monitoring.
1a36a3
    
1a36a3
    Add a second UDS port to allow untrusted applications to monitor ptp4l.
1a36a3
    On this "read-only" UDS port disable non-GET actions and forwarding.
1a36a3
    The path can be configured with the uds_ro_address option (default is
1a36a3
    /var/run/ptp4lro).
1a36a3
    
1a36a3
    Forwarding is disabled to limit the access to the local ptp4l instance.
1a36a3
    
1a36a3
    Subscriptions are not enabled to prevent the applications from making a
1a36a3
    large number of subscriptions or interfere with applications that have
1a36a3
    access to the read-write UDS port.
1a36a3
    
1a36a3
    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
1a36a3
diff --git a/clock.c b/clock.c
1a36a3
index d013b19..8592d29 100644
1a36a3
--- a/clock.c
1a36a3
+++ b/clock.c
1a36a3
@@ -96,9 +96,10 @@ struct clock {
1a36a3
 	struct ClockIdentity best_id;
1a36a3
 	LIST_HEAD(ports_head, port) ports;
1a36a3
 	struct port *uds_rw_port;
1a36a3
+	struct port *uds_ro_port;
1a36a3
 	struct pollfd *pollfd;
1a36a3
 	int pollfd_valid;
1a36a3
-	int nports; /* does not include the UDS port */
1a36a3
+	int nports; /* does not include the two UDS ports */
1a36a3
 	int last_port_number;
1a36a3
 	int sde;
1a36a3
 	int free_running;
1a36a3
@@ -130,6 +131,7 @@ struct clock {
1a36a3
 	int stats_interval;
1a36a3
 	struct clockcheck *sanity_check;
1a36a3
 	struct interface *uds_rw_if;
1a36a3
+	struct interface *uds_ro_if;
1a36a3
 	LIST_HEAD(clock_subscribers_head, clock_subscriber) subscribers;
1a36a3
 	struct monitor *slave_event_monitor;
1a36a3
 };
1a36a3
@@ -268,12 +270,14 @@ void clock_destroy(struct clock *c)
1a36a3
 	struct port *p, *tmp;
1a36a3
 
1a36a3
 	interface_destroy(c->uds_rw_if);
1a36a3
+	interface_destroy(c->uds_ro_if);
1a36a3
 	clock_flush_subscriptions(c);
1a36a3
 	LIST_FOREACH_SAFE(p, &c->ports, list, tmp) {
1a36a3
 		clock_remove_port(c, p);
1a36a3
 	}
1a36a3
 	monitor_destroy(c->slave_event_monitor);
1a36a3
 	port_close(c->uds_rw_port);
1a36a3
+	port_close(c->uds_ro_port);
1a36a3
 	free(c->pollfd);
1a36a3
 	if (c->clkid != CLOCK_REALTIME) {
1a36a3
 		phc_close(c->clkid);
1a36a3
@@ -443,7 +447,7 @@ static int clock_management_fill_response(struct clock *c, struct port *p,
1a36a3
 		break;
1a36a3
 	case TLV_SUBSCRIBE_EVENTS_NP:
1a36a3
 		if (p != c->uds_rw_port) {
1a36a3
-			/* Only the UDS port allowed. */
1a36a3
+			/* Only the UDS-RW port allowed. */
1a36a3
 			break;
1a36a3
 		}
1a36a3
 		sen = (struct subscribe_events_np *)tlv->data;
1a36a3
@@ -774,6 +778,10 @@ static int clock_utc_correct(struct clock *c, tmv_t ingress)
1a36a3
 static int forwarding(struct clock *c, struct port *p)
1a36a3
 {
1a36a3
 	enum port_state ps = port_state(p);
1a36a3
+
1a36a3
+	if (p == c->uds_ro_port)
1a36a3
+		return 0;
1a36a3
+
1a36a3
 	switch (ps) {
1a36a3
 	case PS_MASTER:
1a36a3
 	case PS_GRAND_MASTER:
1a36a3
@@ -818,7 +826,7 @@ static int clock_add_port(struct clock *c, const char *phc_device,
1a36a3
 {
1a36a3
 	struct port *p, *piter, *lastp = NULL;
1a36a3
 
1a36a3
-	if (clock_resize_pollfd(c, c->nports + 1)) {
1a36a3
+	if (clock_resize_pollfd(c, c->nports + 2)) {
1a36a3
 		return -1;
1a36a3
 	}
1a36a3
 	p = port_open(phc_device, phc_index, timestamping,
1a36a3
@@ -1043,6 +1051,7 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 	}
1a36a3
 
1a36a3
 	/* Configure the UDS. */
1a36a3
+
1a36a3
 	uds_ifname = config_get_string(config, NULL, "uds_address");
1a36a3
 	c->uds_rw_if = interface_create(uds_ifname);
1a36a3
 	if (config_set_section_int(config, interface_name(c->uds_rw_if),
1a36a3
@@ -1062,6 +1071,25 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
 
1a36a3
+	uds_ifname = config_get_string(config, NULL, "uds_ro_address");
1a36a3
+	c->uds_ro_if = interface_create(uds_ifname);
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_ro_if),
1a36a3
+				   "announceReceiptTimeout", 0)) {
1a36a3
+		return NULL;
1a36a3
+	}
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_ro_if),
1a36a3
+				   "delay_mechanism", DM_AUTO)) {
1a36a3
+		return NULL;
1a36a3
+	}
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_ro_if),
1a36a3
+				   "network_transport", TRANS_UDS)) {
1a36a3
+		return NULL;
1a36a3
+	}
1a36a3
+	if (config_set_section_int(config, interface_name(c->uds_ro_if),
1a36a3
+				   "delay_filter_length", 1)) {
1a36a3
+		return NULL;
1a36a3
+	}
1a36a3
+
1a36a3
 	c->config = config;
1a36a3
 	c->free_running = config_get_int(config, NULL, "free_running");
1a36a3
 	c->freq_est_interval = config_get_int(config, NULL, "freq_est_interval");
1a36a3
@@ -1179,11 +1207,18 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
 
1a36a3
-	/* Create the UDS interface. */
1a36a3
+	/* Create the UDS interfaces. */
1a36a3
+
1a36a3
 	c->uds_rw_port = port_open(phc_device, phc_index, timestamping, 0,
1a36a3
 				   c->uds_rw_if, c);
1a36a3
 	if (!c->uds_rw_port) {
1a36a3
-		pr_err("failed to open the UDS port");
1a36a3
+		pr_err("failed to open the UDS-RW port");
1a36a3
+		return NULL;
1a36a3
+	}
1a36a3
+	c->uds_ro_port = port_open(phc_device, phc_index, timestamping, 0,
1a36a3
+				   c->uds_ro_if, c);
1a36a3
+	if (!c->uds_ro_port) {
1a36a3
+		pr_err("failed to open the UDS-RO port");
1a36a3
 		return NULL;
1a36a3
 	}
1a36a3
 	clock_fda_changed(c);
1a36a3
@@ -1208,6 +1243,7 @@ struct clock *clock_create(enum clock_type type, struct config *config,
1a36a3
 		port_dispatch(p, EV_INITIALIZE, 0);
1a36a3
 	}
1a36a3
 	port_dispatch(c->uds_rw_port, EV_INITIALIZE, 0);
1a36a3
+	port_dispatch(c->uds_ro_port, EV_INITIALIZE, 0);
1a36a3
 
1a36a3
 	return c;
1a36a3
 }
1a36a3
@@ -1278,9 +1314,9 @@ static int clock_resize_pollfd(struct clock *c, int new_nports)
1a36a3
 {
1a36a3
 	struct pollfd *new_pollfd;
1a36a3
 
1a36a3
-	/* Need to allocate one whole extra block of fds for UDS. */
1a36a3
+	/* Need to allocate two whole extra blocks of fds for UDS ports. */
1a36a3
 	new_pollfd = realloc(c->pollfd,
1a36a3
-			     (new_nports + 1) * N_CLOCK_PFD *
1a36a3
+			     (new_nports + 2) * N_CLOCK_PFD *
1a36a3
 			     sizeof(struct pollfd));
1a36a3
 	if (!new_pollfd) {
1a36a3
 		return -1;
1a36a3
@@ -1316,6 +1352,8 @@ static void clock_check_pollfd(struct clock *c)
1a36a3
 		dest += N_CLOCK_PFD;
1a36a3
 	}
1a36a3
 	clock_fill_pollfd(dest, c->uds_rw_port);
1a36a3
+	dest += N_CLOCK_PFD;
1a36a3
+	clock_fill_pollfd(dest, c->uds_ro_port);
1a36a3
 	c->pollfd_valid = 1;
1a36a3
 }
1a36a3
 
1a36a3
@@ -1331,7 +1369,8 @@ static int clock_do_forward_mgmt(struct clock *c,
1a36a3
 	if (in == out || !forwarding(c, out))
1a36a3
 		return 0;
1a36a3
 
1a36a3
-	/* Don't forward any requests to the UDS port. */
1a36a3
+	/* Don't forward any requests to the UDS-RW port
1a36a3
+	   (the UDS-RO port doesn't allow any forwarding). */
1a36a3
 	if (out == c->uds_rw_port) {
1a36a3
 		switch (management_action(msg)) {
1a36a3
 		case GET:
1a36a3
@@ -1416,7 +1455,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 			return changed;
1a36a3
 		}
1a36a3
 		if (p != c->uds_rw_port) {
1a36a3
-			/* Sorry, only allowed on the UDS port. */
1a36a3
+			/* Sorry, only allowed on the UDS-RW port. */
1a36a3
 			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
 			return changed;
1a36a3
 		}
1a36a3
@@ -1425,7 +1464,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 		break;
1a36a3
 	case COMMAND:
1a36a3
 		if (p != c->uds_rw_port) {
1a36a3
-			/* Sorry, only allowed on the UDS port. */
1a36a3
+			/* Sorry, only allowed on the UDS-RW port. */
1a36a3
 			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
 			return changed;
1a36a3
 		}
1a36a3
@@ -1437,7 +1476,7 @@ int clock_manage(struct clock *c, struct port *p, struct ptp_message *msg)
1a36a3
 	switch (mgt->id) {
1a36a3
 	case TLV_PORT_PROPERTIES_NP:
1a36a3
 		if (p != c->uds_rw_port) {
1a36a3
-			/* Only the UDS port allowed. */
1a36a3
+			/* Only the UDS-RW port allowed. */
1a36a3
 			clock_management_send_error(p, msg, TLV_NOT_SUPPORTED);
1a36a3
 			return 0;
1a36a3
 		}
1a36a3
@@ -1548,7 +1587,7 @@ int clock_poll(struct clock *c)
1a36a3
 	struct port *p;
1a36a3
 
1a36a3
 	clock_check_pollfd(c);
1a36a3
-	cnt = poll(c->pollfd, (c->nports + 1) * N_CLOCK_PFD, -1);
1a36a3
+	cnt = poll(c->pollfd, (c->nports + 2) * N_CLOCK_PFD, -1);
1a36a3
 	if (cnt < 0) {
1a36a3
 		if (EINTR == errno) {
1a36a3
 			return 0;
1a36a3
@@ -1602,7 +1641,7 @@ int clock_poll(struct clock *c)
1a36a3
 		cur += N_CLOCK_PFD;
1a36a3
 	}
1a36a3
 
1a36a3
-	/* Check the UDS port. */
1a36a3
+	/* Check the UDS ports. */
1a36a3
 	for (i = 0; i < N_POLLFD; i++) {
1a36a3
 		if (cur[i].revents & (POLLIN|POLLPRI)) {
1a36a3
 			event = port_event(c->uds_rw_port, i);
1a36a3
@@ -1611,6 +1650,13 @@ int clock_poll(struct clock *c)
1a36a3
 			}
1a36a3
 		}
1a36a3
 	}
1a36a3
+	cur += N_CLOCK_PFD;
1a36a3
+	for (i = 0; i < N_POLLFD; i++) {
1a36a3
+		if (cur[i].revents & (POLLIN|POLLPRI)) {
1a36a3
+			event = port_event(c->uds_ro_port, i);
1a36a3
+			/* sde is not expected on the UDS-RO port */
1a36a3
+		}
1a36a3
+	}
1a36a3
 
1a36a3
 	if (c->sde) {
1a36a3
 		handle_state_decision_event(c);
1a36a3
diff --git a/config.c b/config.c
1a36a3
index d237de9..96a5351 100644
1a36a3
--- a/config.c
1a36a3
+++ b/config.c
1a36a3
@@ -323,6 +323,7 @@ struct config_item config_tab[] = {
1a36a3
 	PORT_ITEM_INT("udp_ttl", 1, 1, 255),
1a36a3
 	PORT_ITEM_INT("udp6_scope", 0x0E, 0x00, 0x0F),
1a36a3
 	GLOB_ITEM_STR("uds_address", "/var/run/ptp4l"),
1a36a3
+	GLOB_ITEM_STR("uds_ro_address", "/var/run/ptp4lro"),
1a36a3
 	PORT_ITEM_INT("unicast_listen", 0, 0, 1),
1a36a3
 	PORT_ITEM_INT("unicast_master_table", 0, 0, INT_MAX),
1a36a3
 	PORT_ITEM_INT("unicast_req_duration", 3600, 10, INT_MAX),
1a36a3
diff --git a/configs/default.cfg b/configs/default.cfg
1a36a3
index 8c19129..d5bab7d 100644
1a36a3
--- a/configs/default.cfg
1a36a3
+++ b/configs/default.cfg
1a36a3
@@ -90,6 +90,7 @@ p2p_dst_mac		01:80:C2:00:00:0E
1a36a3
 udp_ttl			1
1a36a3
 udp6_scope		0x0E
1a36a3
 uds_address		/var/run/ptp4l
1a36a3
+uds_ro_address		/var/run/ptp4lro
1a36a3
 #
1a36a3
 # Default interface options
1a36a3
 #
1a36a3
diff --git a/ptp4l.8 b/ptp4l.8
1a36a3
index b179b81..f9bd228 100644
1a36a3
--- a/ptp4l.8
1a36a3
+++ b/ptp4l.8
1a36a3
@@ -615,6 +615,12 @@ is only relevant with IPv6 transport.  See RFC 4291.  The default is
1a36a3
 Specifies the address of the UNIX domain socket for receiving local
1a36a3
 management messages. The default is /var/run/ptp4l.
1a36a3
 .TP
1a36a3
+.B uds_ro_address
1a36a3
+Specifies the address of the second UNIX domain socket for receiving local
1a36a3
+management messages, which is restricted to GET actions and does not forward
1a36a3
+messages to other ports. Access to this socket can be given to untrusted
1a36a3
+applications for monitoring purposes. The default is /var/run/ptp4lro.
1a36a3
+.TP
1a36a3
 .B dscp_event
1a36a3
 Defines the Differentiated Services Codepoint (DSCP) to be used for PTP
1a36a3
 event messages. Must be a value between 0 and 63. There are several media
1a36a3
1a36a3
commit d4c5343237588d265c605f3772337bc88cabe787
1a36a3
Author: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
Date:   Thu Feb 11 16:47:12 2021 +0100
1a36a3
1a36a3
    timemaster: Set uds_ro_address for ptp4l instances.
1a36a3
    
1a36a3
    This prevents conflicts on the new UDS-RO port.
1a36a3
    
1a36a3
    Signed-off-by: Miroslav Lichvar <mlichvar@redhat.com>
1a36a3
1a36a3
diff --git a/timemaster.c b/timemaster.c
1a36a3
index 00db59f..02408d6 100644
1a36a3
--- a/timemaster.c
1a36a3
+++ b/timemaster.c
1a36a3
@@ -712,7 +712,7 @@ static int add_ptp_source(struct ptp_domain *source,
1a36a3
 			  char **ntp_config, struct script *script)
1a36a3
 {
1a36a3
 	struct config_file *config_file;
1a36a3
-	char **command, *uds_path, **interfaces, *message_tag;
1a36a3
+	char **command, *uds_path, *uds_path2, **interfaces, *message_tag;
1a36a3
 	char ts_interface[IF_NAMESIZE];
1a36a3
 	int i, j, num_interfaces, *phc, *phcs, hw_ts, sw_ts;
1a36a3
 	struct sk_ts_info ts_info;
1a36a3
@@ -809,6 +809,8 @@ static int add_ptp_source(struct ptp_domain *source,
1a36a3
 
1a36a3
 		uds_path = string_newf("%s/ptp4l.%d.socket",
1a36a3
 				       config->rundir, *shm_segment);
1a36a3
+		uds_path2 = string_newf("%s/ptp4lro.%d.socket",
1a36a3
+					config->rundir, *shm_segment);
1a36a3
 
1a36a3
 		message_tag = string_newf("[%d", source->domain);
1a36a3
 		for (j = 0; interfaces[j]; j++)
1a36a3
@@ -832,8 +834,10 @@ static int add_ptp_source(struct ptp_domain *source,
1a36a3
 			       "slaveOnly 1\n"
1a36a3
 			       "domainNumber %d\n"
1a36a3
 			       "uds_address %s\n"
1a36a3
+			       "uds_ro_address %s\n"
1a36a3
 			       "message_tag %s\n",
1a36a3
-			       source->domain, uds_path, message_tag);
1a36a3
+			       source->domain, uds_path, uds_path2,
1a36a3
+			       message_tag);
1a36a3
 
1a36a3
 		if (phcs[i] >= 0) {
1a36a3
 			/* HW time stamping */
1a36a3
@@ -868,6 +872,7 @@ static int add_ptp_source(struct ptp_domain *source,
1a36a3
 
1a36a3
 		free(message_tag);
1a36a3
 		free(uds_path);
1a36a3
+		free(uds_path2);
1a36a3
 		free(interfaces);
1a36a3
 	}
1a36a3