Add utility functions for checking if a given kernel module is loaded,

[pw-darwin.git] / libutil / login_cap.c

diff --git a/libutil/login_cap.c b/libutil/login_cap.c
index 633da20005ee74ca63a367e2075b7151cce0e311..6d965e307c3457f06ddfae69801d5602fb1a572b 100644 (file)
--- a/libutil/login_cap.c
+++ b/libutil/login_cap.c
@@ -24,25 +24,25 @@
  *    conditions are met.
  *
  * Low-level routines relating to the user capabilities database
  *    conditions are met.
  *
  * Low-level routines relating to the user capabilities database

- *
- *     $Id: login_cap.c,v 1.11 1997/02/27 00:24:05 ache Exp $

  */
 
  */
 

-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <unistd.h>
+#include <sys/cdefs.h>
+__FBSDID("$FreeBSD$");

 
 #include <sys/types.h>
 #include <sys/time.h>
 #include <sys/resource.h>
 #include <sys/param.h>
 
 #include <sys/types.h>
 #include <sys/time.h>
 #include <sys/resource.h>
 #include <sys/param.h>

-#include <pwd.h>
+#include <errno.h>
+#include <fcntl.h>

 #include <libutil.h>
 #include <libutil.h>

-#include <syslog.h>

 #include <login_cap.h>
 #include <login_cap.h>

+#include <pwd.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <syslog.h>
+#include <unistd.h>

 
 /*
  * allocstr()
 
 /*
  * allocstr()


@@ -59,10 +59,10 @@ static int lc_object_count = 0;
 static size_t internal_stringsz = 0;
 static char * internal_string = NULL;
 static size_t internal_arraysz = 0;
 static size_t internal_stringsz = 0;
 static char * internal_string = NULL;
 static size_t internal_arraysz = 0;

-static char ** internal_array = NULL;
+static const char ** internal_array = NULL;

 
 static char *
 
 static char *

-allocstr(char *str)
+allocstr(const char *str)

 {
     char    *p;
 
 {
     char    *p;
 


@@ -77,10 +77,10 @@ allocstr(char *str)
 }
 
 
 }
 
 

-static char **
+static const char **

 allocarray(size_t sz)
 {
 allocarray(size_t sz)
 {

-    char    **p;
+    static const char    **p;

 
     if (sz <= internal_arraysz)
        p = internal_array;
 
     if (sz <= internal_arraysz)
        p = internal_array;


@@ -94,34 +94,35 @@ allocarray(size_t sz)
 
 /*
  * arrayize()
 
 /*
  * arrayize()

- * Turn a simple string <str> seperated by any of
+ * Turn a simple string <str> separated by any of

  * the set of <chars> into an array.  The last element
  * of the array will be NULL, as is proper.
  * Free using freearraystr()
  */
 
  * the set of <chars> into an array.  The last element
  * of the array will be NULL, as is proper.
  * Free using freearraystr()
  */
 

-static char **
-arrayize(char *str, const char *chars, int *size)
+static const char **
+arrayize(const char *str, const char *chars, int *size)

 {
     int            i;
 {
     int            i;

-    char    *ptr;
-    char    **res = NULL;
+    char *ptr;
+    const char *cptr;
+    const char **res = NULL;

 
     /* count the sub-strings */
 
     /* count the sub-strings */

-    for (i = 0, ptr = str; *ptr; i++) {
-       int count = strcspn(ptr, chars);
-       ptr += count;
-       if (*ptr)
-           ++ptr;
+    for (i = 0, cptr = str; *cptr; i++) {
+       int count = strcspn(cptr, chars);
+       cptr += count;
+       if (*cptr)
+           ++cptr;

     }
 
     }
 

-    i = 0;

     /* alloc the array */
     if ((ptr = allocstr(str)) != NULL) {
        if ((res = allocarray(++i)) == NULL)
     /* alloc the array */
     if ((ptr = allocstr(str)) != NULL) {
        if ((res = allocarray(++i)) == NULL)

-           free(str);
+           free((void *)(uintptr_t)(const void *)str);

        else {
            /* now split the string */
        else {
            /* now split the string */

+           i = 0;

            while (*ptr) {
                int count = strcspn(ptr, chars);
                res[i++] = ptr;
            while (*ptr) {
                int count = strcspn(ptr, chars);
                res[i++] = ptr;


@@ -152,6 +153,7 @@ login_close(login_cap_t * lc)
     if (lc) {
        free(lc->lc_style);
        free(lc->lc_class);
     if (lc) {
        free(lc->lc_style);
        free(lc->lc_class);

+       free(lc->lc_cap);

        free(lc);
        if (--lc_object_count == 0) {
            free(internal_string);
        free(lc);
        if (--lc_object_count == 0) {
            free(internal_string);


@@ -170,9 +172,10 @@ login_close(login_cap_t * lc)
  * login_getclassbyname() get the login class by its name.
  * If the name given is NULL or empty, the default class
  * LOGIN_DEFCLASS (ie. "default") is fetched. If the
  * login_getclassbyname() get the login class by its name.
  * If the name given is NULL or empty, the default class
  * LOGIN_DEFCLASS (ie. "default") is fetched. If the

- * 'dir' argument contains a non-NULL non-empty string,
- * then the file _FILE_LOGIN_CONF is picked up from that
- * directory instead of the system login database.
+ * 'pwd' argument is non-NULL and contains an non-NULL
+ * dir entry, then the file _FILE_LOGIN_CONF is picked
+ * up from that directory and used before the system
+ * login database.

  * Return a filled-out login_cap_t structure, including
  * class name, and the capability record buffer.
  */
  * Return a filled-out login_cap_t structure, including
  * class name, and the capability record buffer.
  */


@@ -183,13 +186,30 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
     login_cap_t        *lc;
   
     if ((lc = malloc(sizeof(login_cap_t))) != NULL) {
     login_cap_t        *lc;
   
     if ((lc = malloc(sizeof(login_cap_t))) != NULL) {

-       int         r, i = 0;
+       int         r, me, i = 0;
+       uid_t euid = 0;
+       gid_t egid = 0;

        const char  *msg = NULL;
        const char  *msg = NULL;

-       const char  *dir = (pwd == NULL) ? NULL : pwd->pw_dir;
+       const char  *dir;

        char        userpath[MAXPATHLEN];
 
        static char *login_dbarray[] = { NULL, NULL, NULL };
 
        char        userpath[MAXPATHLEN];
 
        static char *login_dbarray[] = { NULL, NULL, NULL };
 

+       me = (name != NULL && strcmp(name, LOGIN_MECLASS) == 0);
+       dir = (!me || pwd == NULL) ? NULL : pwd->pw_dir;
+       /*
+        * Switch to user mode before checking/reading its ~/.login_conf
+        * - some NFSes have root read access disabled.
+        *
+        * XXX: This fails to configure additional groups.
+        */
+       if (dir) {
+           euid = geteuid();
+           egid = getegid();
+           (void)setegid(pwd->pw_gid);
+           (void)seteuid(pwd->pw_uid);
+       }
+

        if (dir && snprintf(userpath, MAXPATHLEN, "%s/%s", dir,
                            _FILE_LOGIN_CONF) < MAXPATHLEN) {
            login_dbarray[i] = userpath;
        if (dir && snprintf(userpath, MAXPATHLEN, "%s/%s", dir,
                            _FILE_LOGIN_CONF) < MAXPATHLEN) {
            login_dbarray[i] = userpath;


@@ -206,9 +226,9 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
        if (name == NULL || *name == '\0')
            name = LOGIN_DEFCLASS;
 
        if (name == NULL || *name == '\0')
            name = LOGIN_DEFCLASS;
 

-       switch (cgetent(&lc->lc_cap, login_dbarray, (char*)name)) {
+       switch (cgetent(&lc->lc_cap, login_dbarray, name)) {

        case -1:                /* Failed, entry does not exist */
        case -1:                /* Failed, entry does not exist */

-           if (strcmp(name, LOGIN_MECLASS) == 0)
+           if (me)

                break;  /* Don't retry default on 'me' */
            if (i == 0)
                r = -1;
                break;  /* Don't retry default on 'me' */
            if (i == 0)
                r = -1;


@@ -224,11 +244,15 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
            /* fall-back to default class */
            name = LOGIN_DEFCLASS;
            msg = "%s: no default/fallback class '%s'";
            /* fall-back to default class */
            name = LOGIN_DEFCLASS;
            msg = "%s: no default/fallback class '%s'";

-           if (cgetent(&lc->lc_cap, login_dbarray, (char*)name) != 0 && r >= 0)
+           if (cgetent(&lc->lc_cap, login_dbarray, name) != 0 && r >= 0)

                break;
                break;

-           /* Fallthru - just return system defaults */
+           /* FALLTHROUGH - just return system defaults */

        case 0:         /* success! */
            if ((lc->lc_class = strdup(name)) != NULL) {
        case 0:         /* success! */
            if ((lc->lc_class = strdup(name)) != NULL) {

+               if (dir) {
+                   (void)seteuid(euid);
+                   (void)setegid(egid);
+               }

                ++lc_object_count;
                return lc;
            }
                ++lc_object_count;
                return lc;
            }


@@ -247,6 +271,10 @@ login_getclassbyname(char const *name, const struct passwd *pwd)
            msg = "%s: unexpected cgetent() error '%s': %m";
            break;
        }
            msg = "%s: unexpected cgetent() error '%s': %m";
            break;
        }

+       if (dir) {
+           (void)seteuid(euid);
+           (void)setegid(egid);
+       }

        if (msg != NULL)
            syslog(LOG_ERR, msg, "login_getclass", name);
        free(lc);
        if (msg != NULL)
            syslog(LOG_ERR, msg, "login_getclass", name);
        free(lc);


@@ -313,12 +341,12 @@ login_getuserclass(const struct passwd *pwd)
 /*
  * login_getcapstr()
  * Given a login_cap entry, and a capability name, return the
 /*
  * login_getcapstr()
  * Given a login_cap entry, and a capability name, return the

- * value defined for that capability, a defualt if not found, or
+ * value defined for that capability, a default if not found, or

  * an error string on error.
  */
 
  * an error string on error.
  */
 

-char *
-login_getcapstr(login_cap_t *lc, const char *cap, char *def, char *error)
+const char *
+login_getcapstr(login_cap_t *lc, const char *cap, const char *def, const char *error)

 {
     char    *res;
     int            ret;
 {
     char    *res;
     int            ret;


@@ -326,7 +354,7 @@ login_getcapstr(login_cap_t *lc, const char *cap, char *def, char *error)
     if (lc == NULL || cap == NULL || lc->lc_cap == NULL || *cap == '\0')
        return def;
 
     if (lc == NULL || cap == NULL || lc->lc_cap == NULL || *cap == '\0')
        return def;
 

-    if ((ret = cgetstr(lc->lc_cap, (char *)cap, &res)) == -1)
+    if ((ret = cgetstr(lc->lc_cap, cap, &res)) == -1)

        return def;
     return (ret >= 0) ? res : error;
 }
        return def;
     return (ret >= 0) ? res : error;
 }


@@ -339,14 +367,14 @@ login_getcapstr(login_cap_t *lc, const char *cap, char *def, char *error)
  * strings.
  */
 
  * strings.
  */
 

-char **
+const char **

 login_getcaplist(login_cap_t *lc, const char *cap, const char *chars)
 {
 login_getcaplist(login_cap_t *lc, const char *cap, const char *chars)
 {

-    char    *lstring;
+    const char *lstring;

 
     if (chars == NULL)
        chars = ", \t";
 
     if (chars == NULL)
        chars = ", \t";

-    if ((lstring = login_getcapstr(lc, (char*)cap, NULL, NULL)) != NULL)
+    if ((lstring = login_getcapstr(lc, cap, NULL, NULL)) != NULL)

        return arrayize(lstring, chars, NULL);
     return NULL;
 }
        return arrayize(lstring, chars, NULL);
     return NULL;
 }


@@ -360,22 +388,22 @@ login_getcaplist(login_cap_t *lc, const char *cap, const char *chars)
  * If there is an error of any kind, return <error>.
  */
 
  * If there is an error of any kind, return <error>.
  */
 

-char *
-login_getpath(login_cap_t *lc, const char *cap, char * error)
+const char *
+login_getpath(login_cap_t *lc, const char *cap, const char *error)

 {
 {

-    char    *str;
-
-    if ((str = login_getcapstr(lc, (char*)cap, NULL, NULL)) == NULL)
-       str = error;
-    else {
-       char *ptr = str;
-
-       while (*ptr) {
-           int count = strcspn(ptr, ", \t");
-           ptr += count;
-           if (*ptr)
-               *ptr++ = ':';
-       }
+    const char *str;
+    char *ptr;
+    int count;
+
+    str = login_getcapstr(lc, cap, NULL, NULL);
+    if (str == NULL)
+       return error;
+    ptr = __DECONST(char *, str); /* XXXX Yes, very dodgy */
+    while (*ptr) {
+       count = strcspn(ptr, ", \t");
+       ptr += count;
+       if (*ptr)
+           *ptr++ = ':';

     }
     return str;
 }
     }
     return str;
 }


@@ -509,7 +537,7 @@ login_getcaptime(login_cap_t *lc, const char *cap, rlim_t def, rlim_t error)
      * If there's an error, return <error>.
      */
 
      * If there's an error, return <error>.
      */
 

-    if ((r = cgetstr(lc->lc_cap, (char *)cap, &res)) == -1)
+    if ((r = cgetstr(lc->lc_cap, cap, &res)) == -1)

        return def;
     else if (r < 0) {
        errno = ERANGE;
        return def;
     else if (r < 0) {
        errno = ERANGE;


@@ -557,8 +585,10 @@ login_getcaptime(login_cap_t *lc, const char *cap, rlim_t def, rlim_t error)
            break;
        case 'w': case 'W':     /* weeks */
            mult = 60L * 60L * 24L * 7L;
            break;
        case 'w': case 'W':     /* weeks */
            mult = 60L * 60L * 24L * 7L;

+           break;

        case 'y': case 'Y':     /* 365-day years */
            mult = 60L * 60L * 24L * 365L;
        case 'y': case 'Y':     /* 365-day years */
            mult = 60L * 60L * 24L * 365L;

+           break;

        default:
            goto invalid;
        }
        default:
            goto invalid;
        }


@@ -594,10 +624,10 @@ login_getcapnum(login_cap_t *lc, const char *cap, rlim_t def, rlim_t error)
     /*
      * For BSDI compatibility, try for the tag=<val> first
      */
     /*
      * For BSDI compatibility, try for the tag=<val> first
      */

-    if ((r = cgetstr(lc->lc_cap, (char *)cap, &res)) == -1) {
+    if ((r = cgetstr(lc->lc_cap, cap, &res)) == -1) {

        long    lval;
        /* string capability not present, so try for tag#<val> as numeric */
        long    lval;
        /* string capability not present, so try for tag#<val> as numeric */

-       if ((r = cgetnum(lc->lc_cap, (char *)cap, &lval)) == -1)
+       if ((r = cgetnum(lc->lc_cap, cap, &lval)) == -1)

            return def; /* Not there, so return default */
        else if (r >= 0)
            return (rlim_t)lval;
            return def; /* Not there, so return default */
        else if (r >= 0)
            return (rlim_t)lval;


@@ -643,7 +673,7 @@ login_getcapsize(login_cap_t *lc, const char *cap, rlim_t def, rlim_t error)
     if (lc == NULL || lc->lc_cap == NULL)
        return def;
 
     if (lc == NULL || lc->lc_cap == NULL)
        return def;
 

-    if ((r = cgetstr(lc->lc_cap, (char *)cap, &res)) == -1)
+    if ((r = cgetstr(lc->lc_cap, cap, &res)) == -1)

        return def;
     else if (r < 0) {
        errno = ERANGE;
        return def;
     else if (r < 0) {
        errno = ERANGE;


@@ -711,7 +741,7 @@ login_getcapbool(login_cap_t *lc, const char *cap, int def)
 {
     if (lc == NULL || lc->lc_cap == NULL)
        return def;
 {
     if (lc == NULL || lc->lc_cap == NULL)
        return def;

-    return (cgetcap(lc->lc_cap, (char *)cap, ':') != NULL);
+    return (cgetcap(lc->lc_cap, cap, ':') != NULL);

 }
 
 
 }
 
 


@@ -735,18 +765,18 @@ login_getcapbool(login_cap_t *lc, const char *cap, int def)
  *     login_getstyle(lc, "skey", "network");
  */
 
  *     login_getstyle(lc, "skey", "network");
  */
 

-char *
-login_getstyle(login_cap_t *lc, char *style, const char *auth)
+const char *
+login_getstyle(login_cap_t *lc, const char *style, const char *auth)

 {
     int            i;
 {
     int            i;

-    char    **authtypes = NULL;
+    const char **authtypes = NULL;

     char    *auths= NULL;
     char    realauth[64];
 
     char    *auths= NULL;
     char    realauth[64];
 

-    static char *defauthtypes[] = { LOGIN_DEFSTYLE, NULL };
+    static const char *defauthtypes[] = { LOGIN_DEFSTYLE, NULL };

 
     if (auth != NULL && *auth != '\0') {
 
     if (auth != NULL && *auth != '\0') {

-       if (snprintf(realauth, sizeof realauth, "auth-%s", auth) < sizeof realauth)
+       if (snprintf(realauth, sizeof realauth, "auth-%s", auth) < (int)sizeof(realauth))

            authtypes = login_getcaplist(lc, realauth, NULL);
     }
 
            authtypes = login_getcaplist(lc, realauth, NULL);
     }
 


@@ -757,7 +787,7 @@ login_getstyle(login_cap_t *lc, char *style, const char *auth)
        authtypes = defauthtypes;
 
     /*
        authtypes = defauthtypes;
 
     /*

-     * We have at least one authtype now; auths is a comma-seperated
+     * We have at least one authtype now; auths is a comma-separated

      * (or space-separated) list of authentication types.  We have to
      * convert from this to an array of char*'s; authtypes then gets this.
      */
      * (or space-separated) list of authentication types.  We have to
      * convert from this to an array of char*'s; authtypes then gets this.
      */