Forbid adding duplicate users with the name of "0".

[pw-darwin.git] / chpass / edit.c

diff --git a/chpass/edit.c b/chpass/edit.c
index b62b40f4211235899cfdd4dbc0fe95cb013fa1c2..849d5d9acff7873979420b8529424224515479c2 100644 (file)
--- a/chpass/edit.c
+++ b/chpass/edit.c
@@ -29,10 +29,12 @@
  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  * SUCH DAMAGE.
  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  * SUCH DAMAGE.

+ *
+ * $FreeBSD$

  */
 
 #ifndef lint
  */
 
 #ifndef lint

-static char sccsid[] = "@(#)edit.c     8.3 (Berkeley) 4/2/94";
+static const char sccsid[] = "@(#)edit.c       8.3 (Berkeley) 4/2/94";

 #endif /* not lint */
 
 #include <sys/param.h>
 #endif /* not lint */
 
 #include <sys/param.h>


@@ -41,6 +43,7 @@ static char sccsid[] = "@(#)edit.c    8.3 (Berkeley) 4/2/94";
 #include <ctype.h>
 #include <err.h>
 #include <errno.h>
 #include <ctype.h>
 #include <err.h>
 #include <errno.h>

+#include <md5.h>

 #include <paths.h>
 #include <pwd.h>
 #include <stdio.h>
 #include <paths.h>
 #include <pwd.h>
 #include <stdio.h>


@@ -52,6 +55,9 @@ static char sccsid[] = "@(#)edit.c    8.3 (Berkeley) 4/2/94";
 #include <pw_util.h>
 
 #include "chpass.h"
 #include <pw_util.h>
 
 #include "chpass.h"

+#ifdef YP
+#include "pw_yp.h"
+#endif /* YP */

 
 extern char *tempname;
 
 
 extern char *tempname;
 


@@ -60,17 +66,23 @@ edit(pw)
        struct passwd *pw;
 {
        struct stat begin, end;
        struct passwd *pw;
 {
        struct stat begin, end;

+       char *begin_sum, *end_sum;

 
        for (;;) {
                if (stat(tempname, &begin))
                        pw_error(tempname, 1, 1);
 
        for (;;) {
                if (stat(tempname, &begin))
                        pw_error(tempname, 1, 1);

+               begin_sum = MD5File(tempname, (char *)NULL);

                pw_edit(1);
                if (stat(tempname, &end))
                        pw_error(tempname, 1, 1);
                pw_edit(1);
                if (stat(tempname, &end))
                        pw_error(tempname, 1, 1);

-               if (begin.st_mtime == end.st_mtime) {
+               end_sum = MD5File(tempname, (char *)NULL);
+               if ((begin.st_mtime == end.st_mtime) &&
+                   (strcmp(begin_sum, end_sum) == 0)) {

                        warnx("no changes made");
                        pw_error(NULL, 0, 0);
                }
                        warnx("no changes made");
                        pw_error(NULL, 0, 0);
                }

+               free(begin_sum);
+               free(end_sum);

                if (verify(pw))
                        break;
                pw_prompt();
                if (verify(pw))
                        break;
                pw_prompt();


@@ -94,12 +106,18 @@ display(fd, pw)
                pw_error(tempname, 1, 1);
 
        (void)fprintf(fp,
                pw_error(tempname, 1, 1);
 
        (void)fprintf(fp,

+#ifdef YP
+           "#Changing %s information for %s.\n", _use_yp ? "NIS" : "user database", pw->pw_name);
+       if (!uid && (!_use_yp || suser_override)) {
+#else

            "#Changing user database information for %s.\n", pw->pw_name);
        if (!uid) {
            "#Changing user database information for %s.\n", pw->pw_name);
        if (!uid) {

+#endif /* YP */

                (void)fprintf(fp, "Login: %s\n", pw->pw_name);
                (void)fprintf(fp, "Password: %s\n", pw->pw_passwd);
                (void)fprintf(fp, "Login: %s\n", pw->pw_name);
                (void)fprintf(fp, "Password: %s\n", pw->pw_passwd);

-               (void)fprintf(fp, "Uid [#]: %d\n", pw->pw_uid);
-               (void)fprintf(fp, "Gid [# or name]: %d\n", pw->pw_gid);
+               (void)fprintf(fp, "Uid [#]: %lu\n", (unsigned long)pw->pw_uid);
+               (void)fprintf(fp, "Gid [# or name]: %lu\n",
+                   (unsigned long)pw->pw_gid);

                (void)fprintf(fp, "Change [month day year]: %s\n",
                    ttoa(pw->pw_change));
                (void)fprintf(fp, "Expire [month day year]: %s\n",
                (void)fprintf(fp, "Change [month day year]: %s\n",
                    ttoa(pw->pw_change));
                (void)fprintf(fp, "Expire [month day year]: %s\n",


@@ -110,11 +128,19 @@ display(fd, pw)
                    *pw->pw_shell ? pw->pw_shell : _PATH_BSHELL);
        }
        /* Only admin can change "restricted" shells. */
                    *pw->pw_shell ? pw->pw_shell : _PATH_BSHELL);
        }
        /* Only admin can change "restricted" shells. */

+#if 0

        else if (ok_shell(pw->pw_shell))
                /*
                 * Make shell a restricted field.  Ugly with a
                 * necklace, but there's not much else to do.
                 */
        else if (ok_shell(pw->pw_shell))
                /*
                 * Make shell a restricted field.  Ugly with a
                 * necklace, but there's not much else to do.
                 */

+#else
+       else if ((!list[E_SHELL].restricted && ok_shell(pw->pw_shell)) || !uid)
+               /*
+                * If change not restrict (table.c) and standard shell
+                *      OR if root, then allow editing of shell.
+                */
+#endif

                (void)fprintf(fp, "Shell: %s\n",
                    *pw->pw_shell ? pw->pw_shell : _PATH_BSHELL);
        else
                (void)fprintf(fp, "Shell: %s\n",
                    *pw->pw_shell ? pw->pw_shell : _PATH_BSHELL);
        else


@@ -122,28 +148,33 @@ display(fd, pw)
        bp = pw->pw_gecos;
 
        p = strsep(&bp, ",");
        bp = pw->pw_gecos;
 
        p = strsep(&bp, ",");

-       if (p)
-         list[E_NAME].save = strdup(p);
-       if (!list[E_NAME].restricted)
-         (void)fprintf(fp, "Full Name: %s\n", p ? p : "");
-       
+       p = strdup(p ? p : "");
+       list[E_NAME].save = p;
+       if (!list[E_NAME].restricted || !uid)
+         (void)fprintf(fp, "Full Name: %s\n", p);
+

         p = strsep(&bp, ",");
         p = strsep(&bp, ",");

-       if (p)
-         list[E_LOCATE].save = strdup(p);
-       if (!list[E_LOCATE].restricted)
-         (void)fprintf(fp, "Location: %s\n", p ? p : "");
-       
+       p = strdup(p ? p : "");
+       list[E_LOCATE].save = p;
+       if (!list[E_LOCATE].restricted || !uid)
+         (void)fprintf(fp, "Office Location: %s\n", p);
+

         p = strsep(&bp, ",");
         p = strsep(&bp, ",");

-       if (p)
-         list[E_BPHONE].save = strdup(p);
-       if (!list[E_BPHONE].restricted)
-         (void)fprintf(fp, "Office Phone: %s\n", p ? p : "");
-       
+       p = strdup(p ? p : "");
+       list[E_BPHONE].save = p;
+       if (!list[E_BPHONE].restricted || !uid)
+         (void)fprintf(fp, "Office Phone: %s\n", p);
+

         p = strsep(&bp, ",");
         p = strsep(&bp, ",");

-       if (p)
-         list[E_HPHONE].save = strdup(p);
-       if (!list[E_HPHONE].restricted)
-         (void)fprintf(fp, "Home Phone: %s\n", p ? p : "");
+       p = strdup(p ? p : "");
+       list[E_HPHONE].save = p;
+       if (!list[E_HPHONE].restricted || !uid)
+         (void)fprintf(fp, "Home Phone: %s\n", p);
+
+       bp = strdup(bp ? bp : "");
+       list[E_OTHER].save = bp;
+       if (!list[E_OTHER].restricted || !uid)
+         (void)fprintf(fp, "Other information: %s\n", bp);

 
        (void)fchown(fd, getuid(), getgid());
        (void)fclose(fp);
 
        (void)fchown(fd, getuid(), getgid());
        (void)fclose(fp);


@@ -157,8 +188,8 @@ verify(pw)
        char *p;
        struct stat sb;
        FILE *fp;
        char *p;
        struct stat sb;
        FILE *fp;

-       int len;
-       char buf[LINE_MAX];
+       int len, line;
+       static char buf[LINE_MAX];

 
        if (!(fp = fopen(tempname, "r")))
                pw_error(tempname, 1, 1);
 
        if (!(fp = fopen(tempname, "r")))
                pw_error(tempname, 1, 1);


@@ -168,17 +199,19 @@ verify(pw)
                warnx("corrupted temporary file");
                goto bad;
        }
                warnx("corrupted temporary file");
                goto bad;
        }

+       line = 0;

        while (fgets(buf, sizeof(buf), fp)) {
        while (fgets(buf, sizeof(buf), fp)) {

+               line++;

                if (!buf[0] || buf[0] == '#')
                        continue;
                if (!(p = strchr(buf, '\n'))) {
                if (!buf[0] || buf[0] == '#')
                        continue;
                if (!(p = strchr(buf, '\n'))) {

-                       warnx("line too long");
+                       warnx("line %d too long", line);

                        goto bad;
                }
                *p = '\0';
                for (ep = list;; ++ep) {
                        if (!ep->prompt) {
                        goto bad;
                }
                *p = '\0';
                for (ep = list;; ++ep) {
                        if (!ep->prompt) {

-                               warnx("unrecognized field");
+                               warnx("unrecognized field on line %d", line);

                                goto bad;
                        }
                        if (!strncasecmp(buf, ep->prompt, ep->len)) {
                                goto bad;
                        }
                        if (!strncasecmp(buf, ep->prompt, ep->len)) {


@@ -189,7 +222,7 @@ verify(pw)
                                        goto bad;
                                }
                                if (!(p = strchr(buf, ':'))) {
                                        goto bad;
                                }
                                if (!(p = strchr(buf, ':'))) {

-                                       warnx("line corrupted");
+                                       warnx("line %d corrupted", line);

                                        goto bad;
                                }
                                while (isspace(*++p));
                                        goto bad;
                                }
                                while (isspace(*++p));


@@ -211,19 +244,27 @@ bad:                                      (void)fclose(fp);
 
        /* Build the gecos field. */
        len = strlen(list[E_NAME].save) + strlen(list[E_BPHONE].save) +
 
        /* Build the gecos field. */
        len = strlen(list[E_NAME].save) + strlen(list[E_BPHONE].save) +

-           strlen(list[E_HPHONE].save) + strlen(list[E_LOCATE].save) + 4;
+           strlen(list[E_HPHONE].save) + strlen(list[E_LOCATE].save) +
+           strlen(list[E_OTHER].save) + 5;

        if (!(p = malloc(len)))
                err(1, NULL);
        if (!(p = malloc(len)))
                err(1, NULL);

-       (void)sprintf(pw->pw_gecos = p, "%s,%s,%s,%s", list[E_NAME].save,
-           list[E_LOCATE].save, list[E_BPHONE].save, list[E_HPHONE].save);
+       (void)sprintf(pw->pw_gecos = p, "%s,%s,%s,%s,%s", list[E_NAME].save,
+           list[E_LOCATE].save, list[E_BPHONE].save, list[E_HPHONE].save,
+           list[E_OTHER].save);
+
+       while ((len = strlen(pw->pw_gecos)) && pw->pw_gecos[len - 1] == ',')
+               pw->pw_gecos[len - 1] = '\0';

 
        if (snprintf(buf, sizeof(buf),
 
        if (snprintf(buf, sizeof(buf),

-           "%s:%s:%d:%d:%s:%ld:%ld:%s:%s:%s",
-           pw->pw_name, pw->pw_passwd, pw->pw_uid, pw->pw_gid, pw->pw_class,
-           pw->pw_change, pw->pw_expire, pw->pw_gecos, pw->pw_dir,
+           "%s:%s:%lu:%lu:%s:%ld:%ld:%s:%s:%s",
+           pw->pw_name, pw->pw_passwd, (unsigned long)pw->pw_uid, 
+           (unsigned long)pw->pw_gid, pw->pw_class, (long)pw->pw_change,
+           (long)pw->pw_expire, pw->pw_gecos, pw->pw_dir,

            pw->pw_shell) >= sizeof(buf)) {
                warnx("entries too long");
            pw->pw_shell) >= sizeof(buf)) {
                warnx("entries too long");

+               free(p);

                return (0);
        }
                return (0);
        }

-       return (pw_scan(buf, pw));
+       free(p);
+       return (__pw_scan(buf, pw, _PWSCAN_WARN|_PWSCAN_MASTER));

 }
 }