1 /*-
2 * Copyright (c) 2012-2017 Dag-Erling Smørgrav
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. The name of the author may not be used to endorse or promote
14 * products derived from this software without specific prior written
15 * permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30 #ifdef HAVE_CONFIG_H
31 # include "config.h"
32 #endif
33
34 #include <security/pam_appl.h>
35 #include <security/openpam.h>
36
37 #include "openpam_impl.h"
38
39 /*
40 * OpenPAM extension
41 *
42 * Query the state of an optional feature.
43 */
44
45 int
openpam_get_feature(int feature,int * onoff)46 openpam_get_feature(int feature, int *onoff)
47 {
48
49 ENTERF(feature);
50 if (feature < 0 || feature >= OPENPAM_NUM_FEATURES)
51 RETURNC(PAM_BAD_FEATURE);
52 *onoff = openpam_features[feature].onoff;
53 RETURNC(PAM_SUCCESS);
54 }
55
56 /*
57 * Error codes:
58 *
59 * PAM_BAD_FEATURE
60 */
61
62 /**
63 * EXPERIMENTAL
64 *
65 * The =openpam_get_feature function stores the current state of the
66 * specified feature in the variable pointed to by its =onoff argument.
67 *
68 * The following features are recognized:
69 *
70 * =OPENPAM_RESTRICT_SERVICE_NAME:
71 * Disallow path separators in service names.
72 * This feature is enabled by default.
73 * Disabling it allows the application to specify the path to
74 * the desired policy file directly.
75 *
76 * =OPENPAM_VERIFY_POLICY_FILE:
77 * Verify the ownership and permissions of the policy file
78 * and the path leading up to it.
79 * This feature is enabled by default.
80 *
81 * =OPENPAM_RESTRICT_MODULE_NAME:
82 * Disallow path separators in module names.
83 * This feature is disabled by default.
84 * Enabling it prevents the use of modules in non-standard
85 * locations.
86 *
87 * =OPENPAM_VERIFY_MODULE_FILE:
88 * Verify the ownership and permissions of each loadable
89 * module and the path leading up to it.
90 * This feature is enabled by default.
91 *
92 *
93 * >openpam_set_feature
94 *
95 * AUTHOR DES
96 */
97