Assume manpages are compressed with zst

[pw-darwin.git] / adduser / adduser.sh

diff --git a/adduser/adduser.sh b/adduser/adduser.sh
index be779bb737352535391bc39187b4cb6f38d11739..b9abd81e9eca9380e63e9cdfa86d907d342cb6e8 100644 (file)
--- a/adduser/adduser.sh
+++ b/adduser/adduser.sh
@@ -1,5 +1,7 @@
 #!/bin/sh
 #
 #!/bin/sh
 #

+# SPDX-License-Identifier: BSD-2-Clause-FreeBSD
+#

 # Copyright (c) 2002-2004 Michael Telahun Makonnen. All rights reserved.
 #
 # Redistribution and use in source and binary forms, with or without
 # Copyright (c) 2002-2004 Michael Telahun Makonnen. All rights reserved.
 #
 # Redistribution and use in source and binary forms, with or without


@@ -28,20 +30,20 @@
 #
 
 # err msg
 #
 
 # err msg

-#       Display $msg on stderr, unless we're being quiet.
-# 
+#      Display $msg on stderr, unless we're being quiet.
+#

 err() {
        if [ -z "$quietflag" ]; then
 err() {
        if [ -z "$quietflag" ]; then

-               echo 1>&2 ${THISCMD}: ERROR: $*
+               echo 1>&2 ${THISCMD}: ERROR: $*

        fi
 }
 
 # info msg
        fi
 }
 
 # info msg

-#       Display $msg on stdout, unless we're being quiet.
-# 
+#      Display $msg on stdout, unless we're being quiet.
+#

 info() {
        if [ -z "$quietflag" ]; then
 info() {
        if [ -z "$quietflag" ]; then

-               echo ${THISCMD}: INFO: $*
+               echo ${THISCMD}: INFO: $*

        fi
 }
 
        fi
 }
 


@@ -50,7 +52,7 @@ info() {
 #      is not, output the value of the next higher uid that is available.
 #      If a uid is not specified, output the first available uid, as indicated
 #      by pw(8).
 #      is not, output the value of the next higher uid that is available.
 #      If a uid is not specified, output the first available uid, as indicated
 #      by pw(8).

-# 
+#

 get_nextuid () {
        _uid=$1
        _nextuid=
 get_nextuid () {
        _uid=$1
        _nextuid=


@@ -81,6 +83,7 @@ show_usage() {
        echo "  -E              disable this account after creation"
        echo "  -G              additional groups to add accounts to"
        echo "  -L              login class of the user"
        echo "  -E              disable this account after creation"
        echo "  -G              additional groups to add accounts to"
        echo "  -L              login class of the user"

+       echo "  -M              file permission for home directory"

        echo "  -N              do not read configuration file"
        echo "  -S              a nonexistent shell is not an error"
        echo "  -d              home directory"
        echo "  -N              do not read configuration file"
        echo "  -S              a nonexistent shell is not an error"
        echo "  -d              home directory"


@@ -113,25 +116,38 @@ valid_shells() {
                esac
        done
 
                esac
        done
 

-       # /sbin/nologin is a special case
+       # /usr/sbin/nologin is a special case

        [ -x "${NOLOGIN_PATH}" ] && echo -n " ${NOLOGIN}"
 }
 
 # fullpath_from_shell shell
        [ -x "${NOLOGIN_PATH}" ] && echo -n " ${NOLOGIN}"
 }
 
 # fullpath_from_shell shell

-#      Given $shell, the basename component of a valid shell, get the
+#      Given $shell, which is either the full path to a shell or
+#      the basename component of a valid shell, get the

 #      full path to the shell from the /etc/shells file.
 #
 fullpath_from_shell() {
        _shell=$1
        [ -z "$_shell" ] && return 1
 
 #      full path to the shell from the /etc/shells file.
 #
 fullpath_from_shell() {
        _shell=$1
        [ -z "$_shell" ] && return 1
 

+       # /usr/sbin/nologin is a special case; it needs to be handled
+       # before the cat | while loop, since a 'return' from within
+       # a subshell will not terminate the function's execution, and
+       # the path to the nologin shell might be printed out twice.
+       #
+       if [ "$_shell" = "${NOLOGIN}" -o \
+           "$_shell" = "${NOLOGIN_PATH}" ]; then
+               echo ${NOLOGIN_PATH}
+               return 0;
+       fi
+

        cat ${ETCSHELLS} |
        while read _path _junk ; do
                case "$_path" in
                \#*|'')
                        ;;
                *)
        cat ${ETCSHELLS} |
        while read _path _junk ; do
                case "$_path" in
                \#*|'')
                        ;;
                *)

-                       if [ "`basename $_path`" = "$_shell" ]; then
+                       if [ "$_path" = "$_shell" -o \
+                           "`basename $_path`" = "$_shell" ]; then

                                echo $_path
                                return 0
                        fi
                                echo $_path
                                return 0
                        fi


@@ -139,12 +155,6 @@ fullpath_from_shell() {
                esac
        done
 
                esac
        done
 

-       # /sbin/nologin is a special case
-       if [ "$_shell" = "${NOLOGIN}" ]; then
-               echo ${NOLOGIN_PATH}
-               return 0;
-       fi
-

        return 1
 }
 
        return 1
 }
 


@@ -155,8 +165,7 @@ fullpath_from_shell() {
 #      the path is invalid or it is not executable it
 #      will emit an informational message saying so.
 #
 #      the path is invalid or it is not executable it
 #      will emit an informational message saying so.
 #

-shell_exists()
-{
+shell_exists() {

        _sh="$1"
        _shellchk="${GREPCMD} '^$_sh$' ${ETCSHELLS} > /dev/null 2>&1"
 
        _sh="$1"
        _shellchk="${GREPCMD} '^$_sh$' ${ETCSHELLS} > /dev/null 2>&1"
 


@@ -183,6 +192,7 @@ save_config() {
        echo "# NOTE: only *some* variables are saved." >> ${ADDUSERCONF}
        echo "# Last Modified on `${DATECMD}`."         >> ${ADDUSERCONF}
        echo ''                         >> ${ADDUSERCONF}
        echo "# NOTE: only *some* variables are saved." >> ${ADDUSERCONF}
        echo "# Last Modified on `${DATECMD}`."         >> ${ADDUSERCONF}
        echo ''                         >> ${ADDUSERCONF}

+       echo "defaultHomePerm=$uhomeperm" >> ${ADDUSERCONF}

        echo "defaultLgroup=$ulogingroup" >> ${ADDUSERCONF}
        echo "defaultclass=$uclass"     >> ${ADDUSERCONF}
        echo "defaultgroups=$ugroups"   >> ${ADDUSERCONF}
        echo "defaultLgroup=$ulogingroup" >> ${ADDUSERCONF}
        echo "defaultclass=$uclass"     >> ${ADDUSERCONF}
        echo "defaultgroups=$ugroups"   >> ${ADDUSERCONF}


@@ -192,6 +202,7 @@ save_config() {
        echo "udotdir=$udotdir"         >> ${ADDUSERCONF}
        echo "msgfile=$msgfile"         >> ${ADDUSERCONF}
        echo "disableflag=$disableflag" >> ${ADDUSERCONF}
        echo "udotdir=$udotdir"         >> ${ADDUSERCONF}
        echo "msgfile=$msgfile"         >> ${ADDUSERCONF}
        echo "disableflag=$disableflag" >> ${ADDUSERCONF}

+       echo "uidstart=$uidstart"       >> ${ADDUSERCONF}

 }
 
 # add_user
 }
 
 # add_user


@@ -239,7 +250,12 @@ add_user() {
                if [ "$uhome" = "$NOHOME" ]; then
                        _home='-d "$uhome"'
                else
                if [ "$uhome" = "$NOHOME" ]; then
                        _home='-d "$uhome"'
                else

-                       _home='-m -d "$uhome"'
+                       # Use home directory permissions if specified
+                       if [ -n "$uhomeperm" ]; then
+                               _home='-m -d "$uhome" -M "$uhomeperm"'
+                       else
+                               _home='-m -d "$uhome"'
+                       fi

                fi
        elif [ -n "$Dflag" -a -n "$uhome" ]; then
                _home='-d "$uhome"'
                fi
        elif [ -n "$Dflag" -a -n "$uhome" ]; then
                _home='-d "$uhome"'


@@ -339,13 +355,19 @@ get_user() {
                        _input="`echo "$fileline" | cut -f1 -d:`"
                fi
 
                        _input="`echo "$fileline" | cut -f1 -d:`"
                fi
 

-               # There *must* be a username. If this is an interactive
-               # session give the user an opportunity to retry.
+               # There *must* be a username, and it must not exist. If
+               # this is an interactive session give the user an
+               # opportunity to retry.

                #
                if [ -z "$_input" ]; then
                        err "You must enter a username!"
                        [ -z "$fflag" ] && continue
                fi
                #
                if [ -z "$_input" ]; then
                        err "You must enter a username!"
                        [ -z "$fflag" ] && continue
                fi

+               ${PWCMD} usershow $_input > /dev/null 2>&1
+               if [ "$?" -eq 0 ]; then
+                       err "User exists!"
+                       [ -z "$fflag" ] && continue
+               fi

                break
        done
        username="$_input"
                break
        done
        username="$_input"


@@ -372,7 +394,7 @@ get_gecos() {
 
 # get_shell
 #      Get the account's shell. Works in interactive and batch mode. It
 
 # get_shell
 #      Get the account's shell. Works in interactive and batch mode. It

-#      accepts only the base name of the shell, NOT the full path.
+#      accepts either the base name of the shell or the full path.

 #      If an invalid shell is entered it will simply use the default shell.
 #
 get_shell() {
 #      If an invalid shell is entered it will simply use the default shell.
 #
 get_shell() {


@@ -435,6 +457,29 @@ get_homedir() {
        fi
 }
 
        fi
 }
 

+# get_homeperm
+#      Reads the account's home directory permissions.
+#
+get_homeperm() {
+       uhomeperm=$defaultHomePerm
+       _input=
+       _prompt=
+
+       if [ -n "$uhomeperm" ]; then
+               _prompt="Home directory permissions [${uhomeperm}]: "
+       else
+               _prompt="Home directory permissions (Leave empty for default): "
+       fi
+       if [ -z "$fflag" ]; then
+               echo -n "$_prompt"
+               read _input
+       fi
+
+       if [ -n "$_input" ]; then
+               uhomeperm="$_input"
+       fi
+}
+

 # get_uid
 #      Reads a numeric userid in an interactive or batch session. Automatically
 #      allocates one if it is not specified.
 # get_uid
 #      Reads a numeric userid in an interactive or batch session. Automatically
 #      allocates one if it is not specified.


@@ -444,10 +489,8 @@ get_uid() {
        _input=
        _prompt=
 
        _input=
        _prompt=
 

-       # No need to take down uids for a configuration saving run.
-       [ -n "$configflag" ] && return
-

        if [ -n "$uuid" ]; then
        if [ -n "$uuid" ]; then

+               uuid=`get_nextuid $uuid`

                _prompt="Uid [$uuid]: "
        else
                _prompt="Uid (Leave empty for default): "
                _prompt="Uid [$uuid]: "
        else
                _prompt="Uid (Leave empty for default): "


@@ -581,21 +624,23 @@ input_from_file() {
        while read -r fileline ; do
                case "$fileline" in
                \#*|'')
        while read -r fileline ; do
                case "$fileline" in
                \#*|'')

-                       return 0

                        ;;
                        ;;

-               esac
-
-               get_user || continue
-               get_gecos
-               get_uid
-               get_logingroup
-               get_class
-               get_shell
-               get_homedir
-               get_password
-               get_expire_dates
+               *)
+                       get_user || continue
+                       get_gecos
+                       get_uid
+                       get_logingroup
+                       get_class
+                       get_shell
+                       get_homedir
+                       get_homeperm
+                       get_password
+                       get_expire_dates
+                       ugroups="$defaultgroups"

 
 

-               add_user
+                       add_user
+                       ;;
+               esac

        done
 }
 
        done
 }
 


@@ -604,7 +649,6 @@ input_from_file() {
 #      the user database.
 #
 input_interactive() {
 #      the user database.
 #
 input_interactive() {

-

        _disable=
        _pass=
        _passconfirm=
        _disable=
        _pass=
        _passconfirm=


@@ -658,6 +702,7 @@ input_interactive() {
        get_class
        get_shell
        get_homedir
        get_class
        get_shell
        get_homedir

+       get_homeperm

 
        while : ; do
                echo -n "Use password-based authentication? [$_usepass]: "
 
        while : ; do
                echo -n "Use password-based authentication? [$_usepass]: "


@@ -688,10 +733,10 @@ input_interactive() {
                                        trap 'stty echo; exit' 0 1 2 3 15
                                        stty -echo
                                        echo -n "Enter password: "
                                        trap 'stty echo; exit' 0 1 2 3 15
                                        stty -echo
                                        echo -n "Enter password: "

-                                       read -r upass
+                                       IFS= read -r upass

                                        echo''
                                        echo -n "Enter password again: "
                                        echo''
                                        echo -n "Enter password again: "

-                                       read -r _passconfirm
+                                       IFS= read -r _passconfirm

                                        echo ''
                                        stty echo
                                        # if user entered a blank password
                                        echo ''
                                        stty echo
                                        # if user entered a blank password


@@ -768,6 +813,7 @@ input_interactive() {
        printf "%-10s : %s\n" "Class" "$uclass"
        printf "%-10s : %s %s\n" "Groups" "${ulogingroup:-$username}" "$ugroups"
        printf "%-10s : %s\n" "Home" "$uhome"
        printf "%-10s : %s\n" "Class" "$uclass"
        printf "%-10s : %s %s\n" "Groups" "${ulogingroup:-$username}" "$ugroups"
        printf "%-10s : %s\n" "Home" "$uhome"

+       printf "%-10s : %s\n" "Home Mode" "$uhomeperm"

        printf "%-10s : %s\n" "Shell" "$ushell"
        printf "%-10s : %s\n" "Locked" "$_disable"
        while : ; do
        printf "%-10s : %s\n" "Shell" "$ushell"
        printf "%-10s : %s\n" "Locked" "$_disable"
        while : ; do


@@ -789,7 +835,7 @@ input_interactive() {
        return 0
 }
 
        return 0
 }
 

-#### END SUBROUTINE DEFENITION ####
+#### END SUBROUTINE DEFINITION ####

 
 THISCMD=`/usr/bin/basename $0`
 DEFAULTSHELL=/bin/sh
 
 THISCMD=`/usr/bin/basename $0`
 DEFAULTSHELL=/bin/sh


@@ -799,7 +845,7 @@ MAILCMD="${MAILCMD:-mail}"
 ETCSHELLS="${ETCSHELLS:-/etc/shells}"
 NOHOME="/nonexistent"
 NOLOGIN="nologin"
 ETCSHELLS="${ETCSHELLS:-/etc/shells}"
 NOHOME="/nonexistent"
 NOLOGIN="nologin"

-NOLOGIN_PATH="/sbin/nologin"
+NOLOGIN_PATH="/usr/sbin/nologin"

 GREPCMD="/usr/bin/grep"
 DATECMD="/bin/date"
 
 GREPCMD="/usr/bin/grep"
 DATECMD="/bin/date"
 


@@ -812,6 +858,7 @@ ugecos=
 ulogingroup=
 uclass=
 uhome=
 ulogingroup=
 uclass=
 uhome=

+uhomeperm=

 upass=
 ushell=
 udotdir=/usr/share/skel
 upass=
 ushell=
 udotdir=/usr/share/skel


@@ -830,7 +877,7 @@ disableflag=
 Dflag=
 Sflag=
 readconfig="yes"
 Dflag=
 Sflag=
 readconfig="yes"

-homeprefix="/home"
+homeprefix="/var"

 randompass=
 fileline=
 savedpwtype=
 randompass=
 fileline=
 savedpwtype=


@@ -838,9 +885,10 @@ defaultclass=
 defaultLgroup=
 defaultgroups=
 defaultshell="${DEFAULTSHELL}"
 defaultLgroup=
 defaultgroups=
 defaultshell="${DEFAULTSHELL}"

+defaultHomePerm=

 
 # Make sure the user running this program is root. This isn't a security
 
 # Make sure the user running this program is root. This isn't a security

-# measure as much as it is a usefull method of reminding the user to
+# measure as much as it is a useful method of reminding the user to

 # 'su -' before he/she wastes time entering data that won't be saved.
 #
 procowner=${procowner:-`/usr/bin/id -u`}
 # 'su -' before he/she wastes time entering data that won't be saved.
 #
 procowner=${procowner:-`/usr/bin/id -u`}


@@ -849,7 +897,7 @@ if [ "$procowner" != "0" ]; then
        exit 1
 fi
 
        exit 1
 fi
 

-# Overide from our conf file
+# Override from our conf file

 # Quickly go through the commandline line to see if we should read
 # from our configuration file. The actual parsing of the commandline
 # arguments happens after we read in our configuration file (commandline
 # Quickly go through the commandline line to see if we should read
 # from our configuration file. The actual parsing of the commandline
 # arguments happens after we read in our configuration file (commandline


@@ -869,7 +917,7 @@ if [ -n "$readconfig" ]; then
        fi
 fi 
 
        fi
 fi 
 

-# Proccess command-line options
+# Process command-line options

 #
 for _switch ; do
        case $_switch in
 #
 for _switch ; do
        case $_switch in


@@ -926,6 +974,10 @@ for _switch ; do
                esac
                shift; shift
                ;;
                esac
                shift; shift
                ;;

+       -M)
+               defaultHomePerm=$2
+               shift; shift
+               ;;

        -N)
                readconfig=
                shift
        -N)
                readconfig=
                shift