1f7e6344dSDag-Erling Smørgrav /*-
2f7e6344dSDag-Erling Smørgrav * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3*f3b0ac34SDag-Erling Smørgrav * Copyright (c) 2004-2013 Dag-Erling Smørgrav
4f7e6344dSDag-Erling Smørgrav * All rights reserved.
5f7e6344dSDag-Erling Smørgrav *
6f7e6344dSDag-Erling Smørgrav * This software was developed for the FreeBSD Project by ThinkSec AS and
7f7e6344dSDag-Erling Smørgrav * Network Associates Laboratories, the Security Research Division of
8f7e6344dSDag-Erling Smørgrav * Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035
9f7e6344dSDag-Erling Smørgrav * ("CBOSS"), as part of the DARPA CHATS research program.
10f7e6344dSDag-Erling Smørgrav *
11f7e6344dSDag-Erling Smørgrav * Redistribution and use in source and binary forms, with or without
12f7e6344dSDag-Erling Smørgrav * modification, are permitted provided that the following conditions
13f7e6344dSDag-Erling Smørgrav * are met:
14f7e6344dSDag-Erling Smørgrav * 1. Redistributions of source code must retain the above copyright
15f7e6344dSDag-Erling Smørgrav * notice, this list of conditions and the following disclaimer.
16f7e6344dSDag-Erling Smørgrav * 2. Redistributions in binary form must reproduce the above copyright
17f7e6344dSDag-Erling Smørgrav * notice, this list of conditions and the following disclaimer in the
18f7e6344dSDag-Erling Smørgrav * documentation and/or other materials provided with the distribution.
19f7e6344dSDag-Erling Smørgrav * 3. The name of the author may not be used to endorse or promote
20f7e6344dSDag-Erling Smørgrav * products derived from this software without specific prior written
21f7e6344dSDag-Erling Smørgrav * permission.
22f7e6344dSDag-Erling Smørgrav *
23f7e6344dSDag-Erling Smørgrav * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24f7e6344dSDag-Erling Smørgrav * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25f7e6344dSDag-Erling Smørgrav * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26f7e6344dSDag-Erling Smørgrav * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27f7e6344dSDag-Erling Smørgrav * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28f7e6344dSDag-Erling Smørgrav * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29f7e6344dSDag-Erling Smørgrav * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30f7e6344dSDag-Erling Smørgrav * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31f7e6344dSDag-Erling Smørgrav * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32f7e6344dSDag-Erling Smørgrav * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33f7e6344dSDag-Erling Smørgrav * SUCH DAMAGE.
34f7e6344dSDag-Erling Smørgrav */
35f7e6344dSDag-Erling Smørgrav
36f7e6344dSDag-Erling Smørgrav #ifdef HAVE_CONFIG_H
37f7e6344dSDag-Erling Smørgrav # include "config.h"
38f7e6344dSDag-Erling Smørgrav #endif
39f7e6344dSDag-Erling Smørgrav
40f7e6344dSDag-Erling Smørgrav #include <dlfcn.h>
41f7e6344dSDag-Erling Smørgrav #include <stdlib.h>
42f7e6344dSDag-Erling Smørgrav #include <string.h>
43f7e6344dSDag-Erling Smørgrav
44f7e6344dSDag-Erling Smørgrav #include <security/pam_appl.h>
45f7e6344dSDag-Erling Smørgrav
46f7e6344dSDag-Erling Smørgrav #include "openpam_impl.h"
47f7e6344dSDag-Erling Smørgrav
48f7e6344dSDag-Erling Smørgrav /*
49f7e6344dSDag-Erling Smørgrav * Locate a matching dynamic or static module.
50f7e6344dSDag-Erling Smørgrav */
51f7e6344dSDag-Erling Smørgrav
52f7e6344dSDag-Erling Smørgrav pam_module_t *
openpam_load_module(const char * modulename)53ce77a8d6SDag-Erling Smørgrav openpam_load_module(const char *modulename)
54f7e6344dSDag-Erling Smørgrav {
55f7e6344dSDag-Erling Smørgrav pam_module_t *module;
56f7e6344dSDag-Erling Smørgrav
57ce77a8d6SDag-Erling Smørgrav module = openpam_dynamic(modulename);
58f7e6344dSDag-Erling Smørgrav openpam_log(PAM_LOG_DEBUG, "%s dynamic %s",
59ce77a8d6SDag-Erling Smørgrav (module == NULL) ? "no" : "using", modulename);
60f7e6344dSDag-Erling Smørgrav
61f7e6344dSDag-Erling Smørgrav #ifdef OPENPAM_STATIC_MODULES
62f7e6344dSDag-Erling Smørgrav /* look for a static module */
63ce77a8d6SDag-Erling Smørgrav if (module == NULL && strchr(modulename, '/') == NULL) {
64ce77a8d6SDag-Erling Smørgrav module = openpam_static(modulename);
65f7e6344dSDag-Erling Smørgrav openpam_log(PAM_LOG_DEBUG, "%s static %s",
66ce77a8d6SDag-Erling Smørgrav (module == NULL) ? "no" : "using", modulename);
67f7e6344dSDag-Erling Smørgrav }
68f7e6344dSDag-Erling Smørgrav #endif
69f7e6344dSDag-Erling Smørgrav if (module == NULL) {
70ce77a8d6SDag-Erling Smørgrav openpam_log(PAM_LOG_ERROR, "no %s found", modulename);
71f7e6344dSDag-Erling Smørgrav return (NULL);
72f7e6344dSDag-Erling Smørgrav }
73f7e6344dSDag-Erling Smørgrav return (module);
74f7e6344dSDag-Erling Smørgrav }
75f7e6344dSDag-Erling Smørgrav
76f7e6344dSDag-Erling Smørgrav
77f7e6344dSDag-Erling Smørgrav /*
78f7e6344dSDag-Erling Smørgrav * Release a module.
79f7e6344dSDag-Erling Smørgrav * XXX highly thread-unsafe
80f7e6344dSDag-Erling Smørgrav */
81f7e6344dSDag-Erling Smørgrav
82f7e6344dSDag-Erling Smørgrav static void
openpam_release_module(pam_module_t * module)83f7e6344dSDag-Erling Smørgrav openpam_release_module(pam_module_t *module)
84f7e6344dSDag-Erling Smørgrav {
85*f3b0ac34SDag-Erling Smørgrav
86f7e6344dSDag-Erling Smørgrav if (module == NULL)
87f7e6344dSDag-Erling Smørgrav return;
88f7e6344dSDag-Erling Smørgrav if (module->dlh == NULL)
89f7e6344dSDag-Erling Smørgrav /* static module */
90f7e6344dSDag-Erling Smørgrav return;
91f7e6344dSDag-Erling Smørgrav dlclose(module->dlh);
92f7e6344dSDag-Erling Smørgrav openpam_log(PAM_LOG_DEBUG, "releasing %s", module->path);
93f7e6344dSDag-Erling Smørgrav FREE(module->path);
94f7e6344dSDag-Erling Smørgrav FREE(module);
95f7e6344dSDag-Erling Smørgrav }
96f7e6344dSDag-Erling Smørgrav
97f7e6344dSDag-Erling Smørgrav
98f7e6344dSDag-Erling Smørgrav /*
99f7e6344dSDag-Erling Smørgrav * Destroy a chain, freeing all its links and releasing the modules
100f7e6344dSDag-Erling Smørgrav * they point to.
101f7e6344dSDag-Erling Smørgrav */
102f7e6344dSDag-Erling Smørgrav
103f7e6344dSDag-Erling Smørgrav static void
openpam_destroy_chain(pam_chain_t * chain)104f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(pam_chain_t *chain)
105f7e6344dSDag-Erling Smørgrav {
106*f3b0ac34SDag-Erling Smørgrav
107f7e6344dSDag-Erling Smørgrav if (chain == NULL)
108f7e6344dSDag-Erling Smørgrav return;
109f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(chain->next);
110f7e6344dSDag-Erling Smørgrav chain->next = NULL;
111f7e6344dSDag-Erling Smørgrav FREEV(chain->optc, chain->optv);
112f7e6344dSDag-Erling Smørgrav openpam_release_module(chain->module);
113f7e6344dSDag-Erling Smørgrav chain->module = NULL;
114f7e6344dSDag-Erling Smørgrav FREE(chain);
115f7e6344dSDag-Erling Smørgrav }
116f7e6344dSDag-Erling Smørgrav
117f7e6344dSDag-Erling Smørgrav
118f7e6344dSDag-Erling Smørgrav /*
119f7e6344dSDag-Erling Smørgrav * Clear the chains and release the modules
120f7e6344dSDag-Erling Smørgrav */
121f7e6344dSDag-Erling Smørgrav
122f7e6344dSDag-Erling Smørgrav void
openpam_clear_chains(pam_chain_t * policy[])123f7e6344dSDag-Erling Smørgrav openpam_clear_chains(pam_chain_t *policy[])
124f7e6344dSDag-Erling Smørgrav {
125f7e6344dSDag-Erling Smørgrav int i;
126f7e6344dSDag-Erling Smørgrav
127f7e6344dSDag-Erling Smørgrav for (i = 0; i < PAM_NUM_FACILITIES; ++i) {
128f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(policy[i]);
129f7e6344dSDag-Erling Smørgrav policy[i] = NULL;
130f7e6344dSDag-Erling Smørgrav }
131f7e6344dSDag-Erling Smørgrav }
132f7e6344dSDag-Erling Smørgrav
133f7e6344dSDag-Erling Smørgrav /*
134f7e6344dSDag-Erling Smørgrav * NOPARSE
135f7e6344dSDag-Erling Smørgrav */
136