xref: /freebsd/contrib/openpam/lib/libpam/openpam_load.c (revision ce77a8d6923d67accfee464f031330c83f551f9e)
1f7e6344dSDag-Erling Smørgrav /*-
2f7e6344dSDag-Erling Smørgrav  * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3f7e6344dSDag-Erling Smørgrav  * Copyright (c) 2004-2011 Dag-Erling Smørgrav
4f7e6344dSDag-Erling Smørgrav  * All rights reserved.
5f7e6344dSDag-Erling Smørgrav  *
6f7e6344dSDag-Erling Smørgrav  * This software was developed for the FreeBSD Project by ThinkSec AS and
7f7e6344dSDag-Erling Smørgrav  * Network Associates Laboratories, the Security Research Division of
8f7e6344dSDag-Erling Smørgrav  * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
9f7e6344dSDag-Erling Smørgrav  * ("CBOSS"), as part of the DARPA CHATS research program.
10f7e6344dSDag-Erling Smørgrav  *
11f7e6344dSDag-Erling Smørgrav  * Redistribution and use in source and binary forms, with or without
12f7e6344dSDag-Erling Smørgrav  * modification, are permitted provided that the following conditions
13f7e6344dSDag-Erling Smørgrav  * are met:
14f7e6344dSDag-Erling Smørgrav  * 1. Redistributions of source code must retain the above copyright
15f7e6344dSDag-Erling Smørgrav  *    notice, this list of conditions and the following disclaimer.
16f7e6344dSDag-Erling Smørgrav  * 2. Redistributions in binary form must reproduce the above copyright
17f7e6344dSDag-Erling Smørgrav  *    notice, this list of conditions and the following disclaimer in the
18f7e6344dSDag-Erling Smørgrav  *    documentation and/or other materials provided with the distribution.
19f7e6344dSDag-Erling Smørgrav  * 3. The name of the author may not be used to endorse or promote
20f7e6344dSDag-Erling Smørgrav  *    products derived from this software without specific prior written
21f7e6344dSDag-Erling Smørgrav  *    permission.
22f7e6344dSDag-Erling Smørgrav  *
23f7e6344dSDag-Erling Smørgrav  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24f7e6344dSDag-Erling Smørgrav  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25f7e6344dSDag-Erling Smørgrav  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26f7e6344dSDag-Erling Smørgrav  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27f7e6344dSDag-Erling Smørgrav  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28f7e6344dSDag-Erling Smørgrav  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29f7e6344dSDag-Erling Smørgrav  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30f7e6344dSDag-Erling Smørgrav  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31f7e6344dSDag-Erling Smørgrav  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32f7e6344dSDag-Erling Smørgrav  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33f7e6344dSDag-Erling Smørgrav  * SUCH DAMAGE.
34f7e6344dSDag-Erling Smørgrav  *
35*ce77a8d6SDag-Erling Smørgrav  * $Id: openpam_load.c 664 2013-03-17 10:56:15Z des $
36f7e6344dSDag-Erling Smørgrav  */
37f7e6344dSDag-Erling Smørgrav 
38f7e6344dSDag-Erling Smørgrav #ifdef HAVE_CONFIG_H
39f7e6344dSDag-Erling Smørgrav # include "config.h"
40f7e6344dSDag-Erling Smørgrav #endif
41f7e6344dSDag-Erling Smørgrav 
42f7e6344dSDag-Erling Smørgrav #include <dlfcn.h>
43f7e6344dSDag-Erling Smørgrav #include <stdlib.h>
44f7e6344dSDag-Erling Smørgrav #include <string.h>
45f7e6344dSDag-Erling Smørgrav 
46f7e6344dSDag-Erling Smørgrav #include <security/pam_appl.h>
47f7e6344dSDag-Erling Smørgrav 
48f7e6344dSDag-Erling Smørgrav #include "openpam_impl.h"
49f7e6344dSDag-Erling Smørgrav 
50f7e6344dSDag-Erling Smørgrav /*
51f7e6344dSDag-Erling Smørgrav  * Locate a matching dynamic or static module.
52f7e6344dSDag-Erling Smørgrav  */
53f7e6344dSDag-Erling Smørgrav 
54f7e6344dSDag-Erling Smørgrav pam_module_t *
55*ce77a8d6SDag-Erling Smørgrav openpam_load_module(const char *modulename)
56f7e6344dSDag-Erling Smørgrav {
57f7e6344dSDag-Erling Smørgrav 	pam_module_t *module;
58f7e6344dSDag-Erling Smørgrav 
59*ce77a8d6SDag-Erling Smørgrav 	module = openpam_dynamic(modulename);
60f7e6344dSDag-Erling Smørgrav 	openpam_log(PAM_LOG_DEBUG, "%s dynamic %s",
61*ce77a8d6SDag-Erling Smørgrav 	    (module == NULL) ? "no" : "using", modulename);
62f7e6344dSDag-Erling Smørgrav 
63f7e6344dSDag-Erling Smørgrav #ifdef OPENPAM_STATIC_MODULES
64f7e6344dSDag-Erling Smørgrav 	/* look for a static module */
65*ce77a8d6SDag-Erling Smørgrav 	if (module == NULL && strchr(modulename, '/') == NULL) {
66*ce77a8d6SDag-Erling Smørgrav 		module = openpam_static(modulename);
67f7e6344dSDag-Erling Smørgrav 		openpam_log(PAM_LOG_DEBUG, "%s static %s",
68*ce77a8d6SDag-Erling Smørgrav 		    (module == NULL) ? "no" : "using", modulename);
69f7e6344dSDag-Erling Smørgrav 	}
70f7e6344dSDag-Erling Smørgrav #endif
71f7e6344dSDag-Erling Smørgrav 	if (module == NULL) {
72*ce77a8d6SDag-Erling Smørgrav 		openpam_log(PAM_LOG_ERROR, "no %s found", modulename);
73f7e6344dSDag-Erling Smørgrav 		return (NULL);
74f7e6344dSDag-Erling Smørgrav 	}
75f7e6344dSDag-Erling Smørgrav 	return (module);
76f7e6344dSDag-Erling Smørgrav }
77f7e6344dSDag-Erling Smørgrav 
78f7e6344dSDag-Erling Smørgrav 
79f7e6344dSDag-Erling Smørgrav /*
80f7e6344dSDag-Erling Smørgrav  * Release a module.
81f7e6344dSDag-Erling Smørgrav  * XXX highly thread-unsafe
82f7e6344dSDag-Erling Smørgrav  */
83f7e6344dSDag-Erling Smørgrav 
84f7e6344dSDag-Erling Smørgrav static void
85f7e6344dSDag-Erling Smørgrav openpam_release_module(pam_module_t *module)
86f7e6344dSDag-Erling Smørgrav {
87f7e6344dSDag-Erling Smørgrav 	if (module == NULL)
88f7e6344dSDag-Erling Smørgrav 		return;
89f7e6344dSDag-Erling Smørgrav 	if (module->dlh == NULL)
90f7e6344dSDag-Erling Smørgrav 		/* static module */
91f7e6344dSDag-Erling Smørgrav 		return;
92f7e6344dSDag-Erling Smørgrav 	dlclose(module->dlh);
93f7e6344dSDag-Erling Smørgrav 	openpam_log(PAM_LOG_DEBUG, "releasing %s", module->path);
94f7e6344dSDag-Erling Smørgrav 	FREE(module->path);
95f7e6344dSDag-Erling Smørgrav 	FREE(module);
96f7e6344dSDag-Erling Smørgrav }
97f7e6344dSDag-Erling Smørgrav 
98f7e6344dSDag-Erling Smørgrav 
99f7e6344dSDag-Erling Smørgrav /*
100f7e6344dSDag-Erling Smørgrav  * Destroy a chain, freeing all its links and releasing the modules
101f7e6344dSDag-Erling Smørgrav  * they point to.
102f7e6344dSDag-Erling Smørgrav  */
103f7e6344dSDag-Erling Smørgrav 
104f7e6344dSDag-Erling Smørgrav static void
105f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(pam_chain_t *chain)
106f7e6344dSDag-Erling Smørgrav {
107f7e6344dSDag-Erling Smørgrav 	if (chain == NULL)
108f7e6344dSDag-Erling Smørgrav 		return;
109f7e6344dSDag-Erling Smørgrav 	openpam_destroy_chain(chain->next);
110f7e6344dSDag-Erling Smørgrav 	chain->next = NULL;
111f7e6344dSDag-Erling Smørgrav 	FREEV(chain->optc, chain->optv);
112f7e6344dSDag-Erling Smørgrav 	openpam_release_module(chain->module);
113f7e6344dSDag-Erling Smørgrav 	chain->module = NULL;
114f7e6344dSDag-Erling Smørgrav 	FREE(chain);
115f7e6344dSDag-Erling Smørgrav }
116f7e6344dSDag-Erling Smørgrav 
117f7e6344dSDag-Erling Smørgrav 
118f7e6344dSDag-Erling Smørgrav /*
119f7e6344dSDag-Erling Smørgrav  * Clear the chains and release the modules
120f7e6344dSDag-Erling Smørgrav  */
121f7e6344dSDag-Erling Smørgrav 
122f7e6344dSDag-Erling Smørgrav void
123f7e6344dSDag-Erling Smørgrav openpam_clear_chains(pam_chain_t *policy[])
124f7e6344dSDag-Erling Smørgrav {
125f7e6344dSDag-Erling Smørgrav 	int i;
126f7e6344dSDag-Erling Smørgrav 
127f7e6344dSDag-Erling Smørgrav 	for (i = 0; i < PAM_NUM_FACILITIES; ++i) {
128f7e6344dSDag-Erling Smørgrav 		openpam_destroy_chain(policy[i]);
129f7e6344dSDag-Erling Smørgrav 		policy[i] = NULL;
130f7e6344dSDag-Erling Smørgrav 	}
131f7e6344dSDag-Erling Smørgrav }
132f7e6344dSDag-Erling Smørgrav 
133f7e6344dSDag-Erling Smørgrav /*
134f7e6344dSDag-Erling Smørgrav  * NOPARSE
135f7e6344dSDag-Erling Smørgrav  */
136