xref: /freebsd/contrib/openpam/lib/libpam/openpam_load.c (revision 3ba4c8c81a28de3e00ccf6d7f92c6f8e58bef456)
1f7e6344dSDag-Erling Smørgrav /*-
2f7e6344dSDag-Erling Smørgrav  * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3*f3b0ac34SDag-Erling Smørgrav  * Copyright (c) 2004-2013 Dag-Erling Smørgrav
4f7e6344dSDag-Erling Smørgrav  * All rights reserved.
5f7e6344dSDag-Erling Smørgrav  *
6f7e6344dSDag-Erling Smørgrav  * This software was developed for the FreeBSD Project by ThinkSec AS and
7f7e6344dSDag-Erling Smørgrav  * Network Associates Laboratories, the Security Research Division of
8f7e6344dSDag-Erling Smørgrav  * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
9f7e6344dSDag-Erling Smørgrav  * ("CBOSS"), as part of the DARPA CHATS research program.
10f7e6344dSDag-Erling Smørgrav  *
11f7e6344dSDag-Erling Smørgrav  * Redistribution and use in source and binary forms, with or without
12f7e6344dSDag-Erling Smørgrav  * modification, are permitted provided that the following conditions
13f7e6344dSDag-Erling Smørgrav  * are met:
14f7e6344dSDag-Erling Smørgrav  * 1. Redistributions of source code must retain the above copyright
15f7e6344dSDag-Erling Smørgrav  *    notice, this list of conditions and the following disclaimer.
16f7e6344dSDag-Erling Smørgrav  * 2. Redistributions in binary form must reproduce the above copyright
17f7e6344dSDag-Erling Smørgrav  *    notice, this list of conditions and the following disclaimer in the
18f7e6344dSDag-Erling Smørgrav  *    documentation and/or other materials provided with the distribution.
19f7e6344dSDag-Erling Smørgrav  * 3. The name of the author may not be used to endorse or promote
20f7e6344dSDag-Erling Smørgrav  *    products derived from this software without specific prior written
21f7e6344dSDag-Erling Smørgrav  *    permission.
22f7e6344dSDag-Erling Smørgrav  *
23f7e6344dSDag-Erling Smørgrav  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24f7e6344dSDag-Erling Smørgrav  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25f7e6344dSDag-Erling Smørgrav  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26f7e6344dSDag-Erling Smørgrav  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27f7e6344dSDag-Erling Smørgrav  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28f7e6344dSDag-Erling Smørgrav  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29f7e6344dSDag-Erling Smørgrav  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30f7e6344dSDag-Erling Smørgrav  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31f7e6344dSDag-Erling Smørgrav  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32f7e6344dSDag-Erling Smørgrav  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33f7e6344dSDag-Erling Smørgrav  * SUCH DAMAGE.
34f7e6344dSDag-Erling Smørgrav  */
35f7e6344dSDag-Erling Smørgrav 
36f7e6344dSDag-Erling Smørgrav #ifdef HAVE_CONFIG_H
37f7e6344dSDag-Erling Smørgrav # include "config.h"
38f7e6344dSDag-Erling Smørgrav #endif
39f7e6344dSDag-Erling Smørgrav 
40f7e6344dSDag-Erling Smørgrav #include <dlfcn.h>
41f7e6344dSDag-Erling Smørgrav #include <stdlib.h>
42f7e6344dSDag-Erling Smørgrav #include <string.h>
43f7e6344dSDag-Erling Smørgrav 
44f7e6344dSDag-Erling Smørgrav #include <security/pam_appl.h>
45f7e6344dSDag-Erling Smørgrav 
46f7e6344dSDag-Erling Smørgrav #include "openpam_impl.h"
47f7e6344dSDag-Erling Smørgrav 
48f7e6344dSDag-Erling Smørgrav /*
49f7e6344dSDag-Erling Smørgrav  * Locate a matching dynamic or static module.
50f7e6344dSDag-Erling Smørgrav  */
51f7e6344dSDag-Erling Smørgrav 
52f7e6344dSDag-Erling Smørgrav pam_module_t *
openpam_load_module(const char * modulename)53ce77a8d6SDag-Erling Smørgrav openpam_load_module(const char *modulename)
54f7e6344dSDag-Erling Smørgrav {
55f7e6344dSDag-Erling Smørgrav 	pam_module_t *module;
56f7e6344dSDag-Erling Smørgrav 
57ce77a8d6SDag-Erling Smørgrav 	module = openpam_dynamic(modulename);
58f7e6344dSDag-Erling Smørgrav 	openpam_log(PAM_LOG_DEBUG, "%s dynamic %s",
59ce77a8d6SDag-Erling Smørgrav 	    (module == NULL) ? "no" : "using", modulename);
60f7e6344dSDag-Erling Smørgrav 
61f7e6344dSDag-Erling Smørgrav #ifdef OPENPAM_STATIC_MODULES
62f7e6344dSDag-Erling Smørgrav 	/* look for a static module */
63ce77a8d6SDag-Erling Smørgrav 	if (module == NULL && strchr(modulename, '/') == NULL) {
64ce77a8d6SDag-Erling Smørgrav 		module = openpam_static(modulename);
65f7e6344dSDag-Erling Smørgrav 		openpam_log(PAM_LOG_DEBUG, "%s static %s",
66ce77a8d6SDag-Erling Smørgrav 		    (module == NULL) ? "no" : "using", modulename);
67f7e6344dSDag-Erling Smørgrav 	}
68f7e6344dSDag-Erling Smørgrav #endif
69f7e6344dSDag-Erling Smørgrav 	if (module == NULL) {
70ce77a8d6SDag-Erling Smørgrav 		openpam_log(PAM_LOG_ERROR, "no %s found", modulename);
71f7e6344dSDag-Erling Smørgrav 		return (NULL);
72f7e6344dSDag-Erling Smørgrav 	}
73f7e6344dSDag-Erling Smørgrav 	return (module);
74f7e6344dSDag-Erling Smørgrav }
75f7e6344dSDag-Erling Smørgrav 
76f7e6344dSDag-Erling Smørgrav 
77f7e6344dSDag-Erling Smørgrav /*
78f7e6344dSDag-Erling Smørgrav  * Release a module.
79f7e6344dSDag-Erling Smørgrav  * XXX highly thread-unsafe
80f7e6344dSDag-Erling Smørgrav  */
81f7e6344dSDag-Erling Smørgrav 
82f7e6344dSDag-Erling Smørgrav static void
openpam_release_module(pam_module_t * module)83f7e6344dSDag-Erling Smørgrav openpam_release_module(pam_module_t *module)
84f7e6344dSDag-Erling Smørgrav {
85*f3b0ac34SDag-Erling Smørgrav 
86f7e6344dSDag-Erling Smørgrav 	if (module == NULL)
87f7e6344dSDag-Erling Smørgrav 		return;
88f7e6344dSDag-Erling Smørgrav 	if (module->dlh == NULL)
89f7e6344dSDag-Erling Smørgrav 		/* static module */
90f7e6344dSDag-Erling Smørgrav 		return;
91f7e6344dSDag-Erling Smørgrav 	dlclose(module->dlh);
92f7e6344dSDag-Erling Smørgrav 	openpam_log(PAM_LOG_DEBUG, "releasing %s", module->path);
93f7e6344dSDag-Erling Smørgrav 	FREE(module->path);
94f7e6344dSDag-Erling Smørgrav 	FREE(module);
95f7e6344dSDag-Erling Smørgrav }
96f7e6344dSDag-Erling Smørgrav 
97f7e6344dSDag-Erling Smørgrav 
98f7e6344dSDag-Erling Smørgrav /*
99f7e6344dSDag-Erling Smørgrav  * Destroy a chain, freeing all its links and releasing the modules
100f7e6344dSDag-Erling Smørgrav  * they point to.
101f7e6344dSDag-Erling Smørgrav  */
102f7e6344dSDag-Erling Smørgrav 
103f7e6344dSDag-Erling Smørgrav static void
openpam_destroy_chain(pam_chain_t * chain)104f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(pam_chain_t *chain)
105f7e6344dSDag-Erling Smørgrav {
106*f3b0ac34SDag-Erling Smørgrav 
107f7e6344dSDag-Erling Smørgrav 	if (chain == NULL)
108f7e6344dSDag-Erling Smørgrav 		return;
109f7e6344dSDag-Erling Smørgrav 	openpam_destroy_chain(chain->next);
110f7e6344dSDag-Erling Smørgrav 	chain->next = NULL;
111f7e6344dSDag-Erling Smørgrav 	FREEV(chain->optc, chain->optv);
112f7e6344dSDag-Erling Smørgrav 	openpam_release_module(chain->module);
113f7e6344dSDag-Erling Smørgrav 	chain->module = NULL;
114f7e6344dSDag-Erling Smørgrav 	FREE(chain);
115f7e6344dSDag-Erling Smørgrav }
116f7e6344dSDag-Erling Smørgrav 
117f7e6344dSDag-Erling Smørgrav 
118f7e6344dSDag-Erling Smørgrav /*
119f7e6344dSDag-Erling Smørgrav  * Clear the chains and release the modules
120f7e6344dSDag-Erling Smørgrav  */
121f7e6344dSDag-Erling Smørgrav 
122f7e6344dSDag-Erling Smørgrav void
openpam_clear_chains(pam_chain_t * policy[])123f7e6344dSDag-Erling Smørgrav openpam_clear_chains(pam_chain_t *policy[])
124f7e6344dSDag-Erling Smørgrav {
125f7e6344dSDag-Erling Smørgrav 	int i;
126f7e6344dSDag-Erling Smørgrav 
127f7e6344dSDag-Erling Smørgrav 	for (i = 0; i < PAM_NUM_FACILITIES; ++i) {
128f7e6344dSDag-Erling Smørgrav 		openpam_destroy_chain(policy[i]);
129f7e6344dSDag-Erling Smørgrav 		policy[i] = NULL;
130f7e6344dSDag-Erling Smørgrav 	}
131f7e6344dSDag-Erling Smørgrav }
132f7e6344dSDag-Erling Smørgrav 
133f7e6344dSDag-Erling Smørgrav /*
134f7e6344dSDag-Erling Smørgrav  * NOPARSE
135f7e6344dSDag-Erling Smørgrav  */
136