rework the password subsystem

date and time created 91/02/12 21:34:43 by bostic

SCCS-vsn: usr.sbin/vipw/pw_util.c 5.1

diff --git a/usr/src/usr.sbin/vipw/pw_util.c b/usr/src/usr.sbin/vipw/pw_util.c
new file mode 100644 (file)
index 0000000..7388649
--- /dev/null
+++ b/usr/src/usr.sbin/vipw/pw_util.c
@@ -0,0 +1,179 @@
+/*-
+ * Copyright (c) 1990 The Regents of the University of California.
+ * All rights reserved.
+ *
+ * %sccs.include.redist.c%
+ */
+
+#ifndef lint
+static char sccsid[] = "@(#)pw_util.c  5.1 (Berkeley) %G%";
+#endif /* not lint */
+
+/*
+ * This file is used by all the "password" programs; vipw(8), chpass(1),
+ * and passwd(1).
+ */
+
+#include <sys/param.h>
+#include <sys/wait.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+#include <signal.h>
+#include <fcntl.h>
+#include <pwd.h>
+#include <errno.h>
+#include <stdio.h>
+#include <paths.h>
+#include <string.h>
+#include <stdlib.h>
+
+extern char *progname;
+extern char *tempname;
+
+pw_init()
+{
+       struct rlimit rlim;
+       sigset_t set;
+
+       /* Unlimited cpu, file size. */
+       rlim.rlim_cur = rlim.rlim_max = RLIM_INFINITY;
+       (void)setrlimit(RLIMIT_CPU, &rlim);
+       (void)setrlimit(RLIMIT_FSIZE, &rlim);
+
+       /* Don't drop core (not really necessary, but GP's). */
+       rlim.rlim_cur = rlim.rlim_max = 0;
+       (void)setrlimit(RLIMIT_CORE, &rlim);
+
+       /* Turn off usual signals. */
+       sigemptyset(&set);
+       (void)sigaddset(&set, SIGTSTP);
+       (void)sigaddset(&set, SIGHUP);
+       (void)sigaddset(&set, SIGINT);
+       (void)sigaddset(&set, SIGQUIT);
+       (void)sigaddset(&set, SIGTERM);
+       (void)sigprocmask(SIG_BLOCK, &set, (sigset_t *)NULL);
+
+       /* Create with exact permissions. */
+       (void)umask(0);
+}
+
+static int lockfd;
+pw_lock()
+{
+       /* 
+        * If the master password file doesn't exist, the system is hosed.
+        * Might as well try to build one.
+        * Open should allow flock'ing the file; see 4.4BSD.    XXX
+        */
+       lockfd = open(_PATH_MASTERPASSWD, O_RDONLY, 0);
+       if (lockfd < 0) {
+               (void)fprintf(stderr, "%s: %s: %s\n",
+                   progname, _PATH_MASTERPASSWD, strerror(errno));
+               exit(1);
+       }
+       if (flock(lockfd, LOCK_EX)) {
+               (void)fprintf(stderr,
+                   "%s: the password db is busy.\n", progname);
+               exit(1);
+       }
+       return(lockfd);
+}
+
+pw_tmp()
+{
+       static char path[MAXPATHLEN] = _PATH_MASTERPASSWD;
+       int fd;
+       char *p;
+
+       if (p = rindex(path, '/'))
+               ++p;
+       else
+               p = path;
+       (void)sprintf(p, "%s.XXXXXX", progname);
+       if ((fd = mkstemp(path)) == -1) {
+               (void)fprintf(stderr,
+                   "%s: %s: %s\n", progname, path, strerror(errno));
+               exit(1);
+       }
+       tempname = path;
+       return(fd);
+}
+
+pw_mkdb()
+{
+       union wait pstat;
+       pid_t pid;
+
+       (void)printf("%s: rebuilding the database...\n", progname);
+       (void)fflush(stdout);
+       if (!(pid = vfork())) {
+               execl(_PATH_PWD_MKDB, "pwd_mkdb", "-p", tempname, NULL);
+               pw_error(_PATH_PWD_MKDB, 1, 1);
+       }
+       pid = waitpid(pid, (int *)&pstat, 0);
+       if (pid == -1 || pstat.w_status)
+               return(0);
+       (void)printf("%s: done\n", progname);
+       return(1);
+}
+
+pw_edit(notsetuid)
+       int notsetuid;
+{
+       union wait pstat;
+       pid_t pid;
+       char *p, *editor;
+
+       if (!(editor = getenv("EDITOR")))
+               editor = _PATH_VI;
+       if (p = rindex(editor, '/'))
+               ++p;
+       else 
+               p = editor;
+
+       if (!(pid = vfork())) {
+               if (notsetuid) {
+                       (void)setgid(getgid());
+                       (void)setuid(getuid());
+               }
+               execlp(editor, p, tempname, NULL);
+               pw_error(editor, 1, 1);
+       }
+       pid = waitpid(pid, (int *)&pstat, 0);
+       return (pid == -1 ? 1 : pstat.w_status);
+}
+
+pw_prompt()
+{
+       register int c;
+
+       for (;;) {
+               (void)printf("re-edit the password file? [y]: ");
+               (void)fflush(stdout);
+               c = getchar();
+               if (c != EOF && c != (int)'\n')
+                       while (getchar() != (int)'\n');
+               if (c == (int)'n')
+                       pw_error((char *)NULL, 0, 0);
+               break;
+       }
+}
+
+pw_error(name, err, eval)
+       char *name;
+       int err, eval;
+{
+       int sverrno;
+
+       if (err) {
+               sverrno = errno;
+               (void)fprintf(stderr, "%s: ", progname);
+               if (name)
+                       (void)fprintf(stderr, "%s: ", name);
+               (void)fprintf(stderr, "%s\n", strerror(sverrno));
+       }
+       (void)fprintf(stderr,
+           "%s: %s unchanged\n", progname, _PATH_MASTERPASSWD);
+       (void)unlink(tempname);
+       exit(eval);
+}