don't let user force core dump; KNF some Kerberos stuff;

[unix-history] / usr / src / usr.bin / login / login.c

diff --git a/usr/src/usr.bin/login/login.c b/usr/src/usr.bin/login/login.c
index 5acc52f..76339b0 100644 (file)
--- a/usr/src/usr.bin/login/login.c
+++ b/usr/src/usr.bin/login/login.c
@@ -22,11 +22,12 @@ char copyright[] =
 #endif /* not lint */
 
 #ifndef lint
 #endif /* not lint */
 
 #ifndef lint

-static char sccsid[] = "@(#)login.c    5.33 (Berkeley) %G%";
+static char sccsid[] = "@(#)login.c    5.38 (Berkeley) %G%";

 #endif /* not lint */
 
 /*
  * login [ name ]
 #endif /* not lint */
 
 /*
  * login [ name ]

+ * login -r hostname   (for rlogind)

  * login -h hostname   (for telnetd, etc.)
  * login -f name       (for pre-authenticated login: datakit, xterm, etc.)
  */
  * login -h hostname   (for telnetd, etc.)
  * login -f name       (for pre-authenticated login: datakit, xterm, etc.)
  */


@@ -50,16 +51,11 @@ static char sccsid[] = "@(#)login.c 5.33 (Berkeley) %G%";
 #include <setjmp.h>
 #include <stdio.h>
 #include <strings.h>
 #include <setjmp.h>
 #include <stdio.h>
 #include <strings.h>

+#include <tzfile.h>
+#include "pathnames.h"

 
 #define        TTYGRPNAME      "tty"           /* name of group to own ttys */
 
 
 #define        TTYGRPNAME      "tty"           /* name of group to own ttys */
 

-#define        MOTDFILE        "/etc/motd"
-#define        MAILDIR         "/usr/spool/mail"
-#define        NOLOGIN         "/etc/nologin"
-#define        HUSHLOGIN       ".hushlogin"
-#define        LASTLOG         "/usr/adm/lastlog"
-#define        BSHELL          "/bin/sh"
-

 /*
  * This bounds the time given to login.  Not a define so it can
  * be patched on machines where it's too small.
 /*
  * This bounds the time given to login.  Not a define so it can
  * be patched on machines where it's too small.


@@ -78,20 +74,32 @@ struct      ltchars ltc = {
        CSUSP, CDSUSP, CRPRNT, CFLUSH, CWERASE, CLNEXT
 };
 
        CSUSP, CDSUSP, CRPRNT, CFLUSH, CWERASE, CLNEXT
 };
 

+char *months[] =
+       { "Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug",
+         "Sep", "Oct", "Nov", "Dec" };
+
+char *months[] =
+       { "Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug",
+         "Sep", "Oct", "Nov", "Dec" };
+

 main(argc, argv)
        int argc;
        char **argv;
 {
        extern int errno, optind;
        extern char *optarg, **environ;
 main(argc, argv)
        int argc;
        char **argv;
 {
        extern int errno, optind;
        extern char *optarg, **environ;

+       struct timeval tp;
+       struct tm *ttp;
+       struct timeval tp;
+       struct tm *ttp;

        struct group *gr;
        register int ch;
        register char *p;
        struct group *gr;
        register int ch;
        register char *p;

-       int ask, fflag, hflag, pflag, cnt;
+       int ask, fflag, hflag, pflag, rflag, cnt;

        int quietlog, passwd_req, ioctlval, timedout();
        char *domain, *salt, *envinit[1], *ttyn, *pp;
        char tbuf[MAXPATHLEN + 2];
        int quietlog, passwd_req, ioctlval, timedout();
        char *domain, *salt, *envinit[1], *ttyn, *pp;
        char tbuf[MAXPATHLEN + 2];

-       char *ttyname(), *stypeof(), *crypt(), *getpass();
+       char *ctime(), *ttyname(), *stypeof(), *crypt(), *getpass();

        time_t time();
        off_t lseek();
 
        time_t time();
        off_t lseek();
 


@@ -104,6 +112,7 @@ main(argc, argv)
 
        /*
         * -p is used by getty to tell login not to destroy the environment
 
        /*
         * -p is used by getty to tell login not to destroy the environment

+        * -r is used by rlogind to cause the autologin protocol;

         * -f is used to skip a second login authentication 
         * -h is used by other servers to pass the name of the remote
         *    host to login so that it may be placed in utmp and wtmp
         * -f is used to skip a second login authentication 
         * -h is used by other servers to pass the name of the remote
         *    host to login so that it may be placed in utmp and wtmp


@@ -111,19 +120,29 @@ main(argc, argv)
        (void)gethostname(tbuf, sizeof(tbuf));
        domain = index(tbuf, '.');
 
        (void)gethostname(tbuf, sizeof(tbuf));
        domain = index(tbuf, '.');
 

-       fflag = hflag = pflag = 0;
+       fflag = hflag = pflag = rflag = 0;

        passwd_req = 1;
        passwd_req = 1;

-       while ((ch = getopt(argc, argv, "fh:p")) != EOF)
+       while ((ch = getopt(argc, argv, "fh:pr:")) != EOF)

                switch (ch) {
                case 'f':
                switch (ch) {
                case 'f':

+                       if (rflag) {
+                               fprintf(stderr,
+                                   "login: only one of -r and -f allowed.\n");
+                               exit(1);
+                       }

                        fflag = 1;
                        break;
                case 'h':
                        if (getuid()) {
                        fflag = 1;
                        break;
                case 'h':
                        if (getuid()) {

-                               fprintf(stderr,
+                               (void)fprintf(stderr,

                                    "login: -h for super-user only.\n");
                                exit(1);
                        }
                                    "login: -h for super-user only.\n");
                                exit(1);
                        }

+                       if (rflag) {
+                               fprintf(stderr,
+                                   "login: only one of -r and -h allowed.\n");
+                               exit(1);
+                       }

                        hflag = 1;
                        if (domain && (p = index(optarg, '.')) &&
                            strcasecmp(p, domain) == 0)
                        hflag = 1;
                        if (domain && (p = index(optarg, '.')) &&
                            strcasecmp(p, domain) == 0)


@@ -133,9 +152,33 @@ main(argc, argv)
                case 'p':
                        pflag = 1;
                        break;
                case 'p':
                        pflag = 1;
                        break;

+               case 'r':
+                       if (hflag || fflag) {
+                               fprintf(stderr,
+                                   "login: -f and -h not allowed with -r.\n");
+                               exit(1);
+                       }
+                       if (getuid()) {
+                               fprintf(stderr,
+                                   "login: -r for super-user only.\n");
+                               exit(1);
+                       }
+                       /* "-r hostname" must be last args */
+                       if (optind != argc) {
+                               fprintf(stderr, "Syntax error.\n");
+                               exit(1);
+                       }
+                       rflag = 1;
+                       passwd_req = (doremotelogin(optarg) == -1);
+                       if (domain && (p = index(optarg, '.')) &&
+                           !strcmp(p, domain))
+                               *p = '\0';
+                       hostname = optarg;
+                       break;

                case '?':
                default:
                case '?':
                default:

-                       fprintf(stderr, "usage: login [-fp] [username]\n");
+                       (void)fprintf(stderr,
+                           "usage: login [-fp] [username]\n");

                        exit(1);
                }
        argc -= optind;
                        exit(1);
                }
        argc -= optind;


@@ -145,12 +188,21 @@ main(argc, argv)
                ask = 0;
        } else
                ask = 1;
                ask = 0;
        } else
                ask = 1;

+       if (rflag)
+               ask = 0;

 
        ioctlval = 0;
        (void)ioctl(0, TIOCLSET, &ioctlval);
        (void)ioctl(0, TIOCNXCL, 0);
        (void)fcntl(0, F_SETFL, ioctlval);
        (void)ioctl(0, TIOCGETP, &sgttyb);
 
        ioctlval = 0;
        (void)ioctl(0, TIOCLSET, &ioctlval);
        (void)ioctl(0, TIOCNXCL, 0);
        (void)fcntl(0, F_SETFL, ioctlval);
        (void)ioctl(0, TIOCGETP, &sgttyb);

+
+       /*
+        * If talking to an rlogin process, propagate the terminal type and
+        * baud rate across the network.
+        */
+       if (rflag)
+               doremoteterm(&sgttyb);

        sgttyb.sg_erase = CERASE;
        sgttyb.sg_kill = CKILL;
        (void)ioctl(0, TIOCSLTC, &ltc);
        sgttyb.sg_erase = CERASE;
        sgttyb.sg_kill = CKILL;
        (void)ioctl(0, TIOCSLTC, &ltc);


@@ -226,7 +278,7 @@ main(argc, argv)
                if (pwd && !strcmp(p, pwd->pw_passwd))
                        break;
 
                if (pwd && !strcmp(p, pwd->pw_passwd))
                        break;
 

-               printf("Login incorrect\n");
+               (void)printf("Login incorrect\n");

                failures++;
                /* we allow 10 tries, but after 3 we start backing off */
                if (++cnt > 3) {
                failures++;
                /* we allow 10 tries, but after 3 we start backing off */
                if (++cnt > 3) {


@@ -252,18 +304,18 @@ main(argc, argv)
                            hostname);
                else
                        syslog(LOG_NOTICE, "ROOT LOGIN REFUSED ON %s", tty);
                            hostname);
                else
                        syslog(LOG_NOTICE, "ROOT LOGIN REFUSED ON %s", tty);

-               printf("Login incorrect\n");
+               (void)printf("Login incorrect\n");

                sleepexit(1);
        }
 
        if (quota(Q_SETUID, pwd->pw_uid, 0, 0) < 0 && errno != EINVAL) {
                switch(errno) {
                case EUSERS:
                sleepexit(1);
        }
 
        if (quota(Q_SETUID, pwd->pw_uid, 0, 0) < 0 && errno != EINVAL) {
                switch(errno) {
                case EUSERS:

-                       fprintf(stderr,
+                       (void)fprintf(stderr,

                "Too many users logged on already.\nTry again later.\n");
                        break;
                case EPROCLIM:
                "Too many users logged on already.\nTry again later.\n");
                        break;
                case EPROCLIM:

-                       fprintf(stderr,
+                       (void)fprintf(stderr,

                            "You have too many processes running.\n");
                        break;
                default:
                            "You have too many processes running.\n");
                        break;
                default:


@@ -273,13 +325,61 @@ main(argc, argv)
        }
 
        if (chdir(pwd->pw_dir) < 0) {
        }
 
        if (chdir(pwd->pw_dir) < 0) {

-               printf("No directory %s!\n", pwd->pw_dir);
+               (void)printf("No directory %s!\n", pwd->pw_dir);

                if (chdir("/"))
                        exit(0);
                pwd->pw_dir = "/";
                if (chdir("/"))
                        exit(0);
                pwd->pw_dir = "/";

-               printf("Logging in with home = \"/\".\n");
+               (void)printf("Logging in with home = \"/\".\n");

        }
 
        }
 

+#define        TWOWEEKS        (14*24*60*60)
+       if (pwd->pw_change || pwd->pw_expire)
+               (void)gettimeofday(&tp, (struct timezone *)NULL);
+       if (pwd->pw_change)
+               if (tp.tv_sec >= pwd->pw_change) {
+                       printf("Sorry -- your password has expired.\n");
+                       sleepexit(1);
+               }
+               else if (tp.tv_sec - pwd->pw_change < TWOWEEKS) {
+                       ttp = localtime(&pwd->pw_change);
+                       printf("Warning: your password expires on %s %d, 19%d\n",
+                           months[ttp->tm_mon], ttp->tm_mday, ttp->tm_year);
+               }
+       if (pwd->pw_expire)
+               if (tp.tv_sec >= pwd->pw_expire) {
+                       printf("Sorry -- your account has expired.\n");
+                       sleepexit(1);
+               }
+               else if (tp.tv_sec - pwd->pw_expire < TWOWEEKS) {
+                       ttp = localtime(&pwd->pw_expire);
+                       printf("Warning: your account expires on %s %d, 19%d\n",
+                           months[ttp->tm_mon], ttp->tm_mday, ttp->tm_year);
+               }
+
+#define        TWOWEEKS        (14*24*60*60)
+       if (pwd->pw_change || pwd->pw_expire)
+               (void)gettimeofday(&tp, (struct timezone *)NULL);
+       if (pwd->pw_change)
+               if (tp.tv_sec >= pwd->pw_change) {
+                       (void)printf("Sorry -- your password has expired.\n");
+                       sleepexit(1);
+               }
+               else if (tp.tv_sec - pwd->pw_change < TWOWEEKS && !quietlog) {
+                       ttp = localtime(&pwd->pw_change);
+                       (void)printf("Warning: your password expires on %s %d, %d\n",
+                           months[ttp->tm_mon], ttp->tm_mday, TM_YEAR_BASE + ttp->tm_year);
+               }
+       if (pwd->pw_expire)
+               if (tp.tv_sec >= pwd->pw_expire) {
+                       (void)printf("Sorry -- your account has expired.\n");
+                       sleepexit(1);
+               }
+               else if (tp.tv_sec - pwd->pw_expire < TWOWEEKS && !quietlog) {
+                       ttp = localtime(&pwd->pw_expire);
+                       (void)printf("Warning: your account expires on %s %d, %d\n",
+                           months[ttp->tm_mon], ttp->tm_mday, TM_YEAR_BASE + ttp->tm_year);
+               }
+

        /* nothing else left to fail -- really log in */
        {
                struct utmp utmp;
        /* nothing else left to fail -- really log in */
        {
                struct utmp utmp;


@@ -293,10 +393,9 @@ main(argc, argv)
                login(&utmp);
        }
 
                login(&utmp);
        }
 

-       quietlog = access(HUSHLOGIN, F_OK) == 0;

        dolastlog(quietlog);
 
        dolastlog(quietlog);
 

-       if (!hflag) {                                   /* XXX */
+       if (!hflag && !rflag) {                                 /* XXX */

                static struct winsize win = { 0, 0, 0, 0 };
 
                (void)ioctl(0, TIOCSWINSZ, &win);
                static struct winsize win = { 0, 0, 0, 0 };
 
                (void)ioctl(0, TIOCSWINSZ, &win);


@@ -310,12 +409,11 @@ main(argc, argv)
        initgroups(username, pwd->pw_gid);
 
        quota(Q_DOWARN, pwd->pw_uid, (dev_t)-1, 0);
        initgroups(username, pwd->pw_gid);
 
        quota(Q_DOWARN, pwd->pw_uid, (dev_t)-1, 0);

-       (void)setuid(pwd->pw_uid);

 
        if (*pwd->pw_shell == '\0')
 
        if (*pwd->pw_shell == '\0')

-               pwd->pw_shell = BSHELL;
+               pwd->pw_shell = _PATH_BSHELL;

        /* turn on new line discipline for the csh */
        /* turn on new line discipline for the csh */

-       else if (!strcmp(pwd->pw_shell, "/bin/csh")) {
+       else if (!strcmp(pwd->pw_shell, _PATH_CSHELL)) {

                ioctlval = NTTYDISC;
                (void)ioctl(0, TIOCSETD, &ioctlval);
        }
                ioctlval = NTTYDISC;
                (void)ioctl(0, TIOCSETD, &ioctlval);
        }


@@ -344,9 +442,9 @@ main(argc, argv)
                struct stat st;
 
                motd();
                struct stat st;
 
                motd();

-               (void)sprintf(tbuf, "%s/%s", MAILDIR, pwd->pw_name);
+               (void)sprintf(tbuf, "%s/%s", _PATH_MAILDIR, pwd->pw_name);

                if (stat(tbuf, &st) == 0 && st.st_size != 0)
                if (stat(tbuf, &st) == 0 && st.st_size != 0)

-                       printf("You have %smail.\n",
+                       (void)printf("You have %smail.\n",

                            (st.st_mtime > st.st_atime) ? "new " : "");
        }
 
                            (st.st_mtime > st.st_atime) ? "new " : "");
        }
 


@@ -358,9 +456,12 @@ main(argc, argv)
        tbuf[0] = '-';
        strcpy(tbuf + 1, (p = rindex(pwd->pw_shell, '/')) ?
            p + 1 : pwd->pw_shell);
        tbuf[0] = '-';
        strcpy(tbuf + 1, (p = rindex(pwd->pw_shell, '/')) ?
            p + 1 : pwd->pw_shell);

+
+       /* discard permissions last so can't get killed and drop core */
+       (void)setuid(pwd->pw_uid);
+

        execlp(pwd->pw_shell, tbuf, 0);
        execlp(pwd->pw_shell, tbuf, 0);

-       fprintf(stderr, "login: no shell: ");
-       perror(pwd->pw_shell);
+       (void)fprintf(stderr, "login: no shell: %s.\n", strerror(errno));

        exit(0);
 }
 
        exit(0);
 }
 


@@ -371,7 +472,7 @@ getloginname()
        static char nbuf[UT_NAMESIZE + 1];
 
        for (;;) {
        static char nbuf[UT_NAMESIZE + 1];
 
        for (;;) {

-               printf("login: ");
+               (void)printf("login: ");

                for (p = nbuf; (ch = getchar()) != '\n'; ) {
                        if (ch == EOF) {
                                badlogin(username);
                for (p = nbuf; (ch = getchar()) != '\n'; ) {
                        if (ch == EOF) {
                                badlogin(username);


@@ -382,7 +483,7 @@ getloginname()
                }
                if (p > nbuf)
                        if (nbuf[0] == '-')
                }
                if (p > nbuf)
                        if (nbuf[0] == '-')

-                               fprintf(stderr,
+                               (void)fprintf(stderr,

                                    "login names may not start with '-'.\n");
                        else {
                                *p = '\0';
                                    "login names may not start with '-'.\n");
                        else {
                                *p = '\0';


@@ -394,7 +495,7 @@ getloginname()
 
 timedout()
 {
 
 timedout()
 {

-       fprintf(stderr, "Login timed out after %d seconds\n", timeout);
+       (void)fprintf(stderr, "Login timed out after %d seconds\n", timeout);

        exit(0);
 }
 
        exit(0);
 }
 


@@ -414,7 +515,7 @@ motd()
        int (*oldint)(), sigint();
        char tbuf[8192];
 
        int (*oldint)(), sigint();
        char tbuf[8192];
 

-       if ((fd = open(MOTDFILE, O_RDONLY, 0)) < 0)
+       if ((fd = open(_PATH_MOTDFILE, O_RDONLY, 0)) < 0)

                return;
        oldint = signal(SIGINT, sigint);
        if (setjmp(motdinterrupt) == 0)
                return;
        oldint = signal(SIGINT, sigint);
        if (setjmp(motdinterrupt) == 0)


@@ -434,7 +535,7 @@ checknologin()
        register int fd, nchars;
        char tbuf[8192];
 
        register int fd, nchars;
        char tbuf[8192];
 

-       if ((fd = open(NOLOGIN, O_RDONLY, 0)) >= 0) {
+       if ((fd = open(_PATH_NOLOGIN, O_RDONLY, 0)) >= 0) {

                while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
                        (void)write(fileno(stdout), tbuf, nchars);
                sleepexit(0);
                while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
                        (void)write(fileno(stdout), tbuf, nchars);
                sleepexit(0);


@@ -446,19 +547,21 @@ dolastlog(quiet)
 {
        struct lastlog ll;
        int fd;
 {
        struct lastlog ll;
        int fd;

+       char *ctime();
+       char *ctime();

 
 

-       if ((fd = open(LASTLOG, O_RDWR, 0)) >= 0) {
+       if ((fd = open(_PATH_LASTLOG, O_RDWR, 0)) >= 0) {

                (void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
                if (!quiet) {
                        if (read(fd, (char *)&ll, sizeof(ll)) == sizeof(ll) &&
                            ll.ll_time != 0) {
                (void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
                if (!quiet) {
                        if (read(fd, (char *)&ll, sizeof(ll)) == sizeof(ll) &&
                            ll.ll_time != 0) {

-                               printf("Last login: %.*s ",
+                               (void)printf("Last login: %.*s ",

                                    24-5, (char *)ctime(&ll.ll_time));
                                if (*ll.ll_host != '\0')
                                    24-5, (char *)ctime(&ll.ll_time));
                                if (*ll.ll_host != '\0')

-                                       printf("from %.*s\n",
+                                       (void)printf("from %.*s\n",

                                            sizeof(ll.ll_host), ll.ll_host);
                                else
                                            sizeof(ll.ll_host), ll.ll_host);
                                else

-                                       printf("on %.*s\n",
+                                       (void)printf("on %.*s\n",

                                            sizeof(ll.ll_line), ll.ll_line);
                        }
                        (void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
                                            sizeof(ll.ll_line), ll.ll_line);
                        }
                        (void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);


@@ -508,7 +611,7 @@ getstr(buf, cnt, err)
                if (read(0, &ch, sizeof(ch)) != sizeof(ch))
                        exit(1);
                if (--cnt < 0) {
                if (read(0, &ch, sizeof(ch)) != sizeof(ch))
                        exit(1);
                if (--cnt < 0) {

-                       fprintf(stderr, "%s too long\r\n", err);
+                       (void)fprintf(stderr, "%s too long\r\n", err);

                        sleepexit(1);
                }
                *buf++ = ch;
                        sleepexit(1);
                }
                *buf++ = ch;


@@ -521,3 +624,46 @@ sleepexit(eval)
        sleep((u_int)5);
        exit(eval);
 }
        sleep((u_int)5);
        exit(eval);
 }

+
+doremotelogin(host)
+       char *host;
+{
+       static char lusername[UT_NAMESIZE+1];
+       char rusername[UT_NAMESIZE+1];
+
+       getstr(rusername, sizeof(rusername), "remuser");
+       getstr(lusername, sizeof(lusername), "locuser");
+       getstr(term, sizeof(term), "Terminal type");
+       username = lusername;
+       pwd = getpwnam(username);
+       if (pwd == NULL)
+               return(-1);
+       return(ruserok(host, (pwd->pw_uid == 0), rusername, username));
+}
+
+char *speeds[] = {
+       "0", "50", "75", "110", "134", "150", "200", "300", "600",
+       "1200", "1800", "2400", "4800", "9600", "19200", "38400",
+};
+#define        NSPEEDS (sizeof(speeds) / sizeof(speeds[0]))
+
+doremoteterm(tp)
+       struct sgttyb *tp;
+{
+       register char *cp = index(term, '/'), **cpp;
+       char *speed;
+
+       if (cp) {
+               *cp++ = '\0';
+               speed = cp;
+               cp = index(speed, '/');
+               if (cp)
+                       *cp++ = '\0';
+               for (cpp = speeds; cpp < &speeds[NSPEEDS]; cpp++)
+                       if (strcmp(*cpp, speed) == 0) {
+                               tp->sg_ispeed = tp->sg_ospeed = cpp-speeds;
+                               break;
+                       }
+       }
+       tp->sg_flags = ECHO|CRMOD|ANYP|XTABS;
+}