1f7e6344dSDag-Erling Smørgrav /*- 2f7e6344dSDag-Erling Smørgrav * Copyright (c) 2002-2003 Networks Associates Technology, Inc. 3f7e6344dSDag-Erling Smørgrav * Copyright (c) 2004-2011 Dag-Erling Smørgrav 4f7e6344dSDag-Erling Smørgrav * All rights reserved. 5f7e6344dSDag-Erling Smørgrav * 6f7e6344dSDag-Erling Smørgrav * This software was developed for the FreeBSD Project by ThinkSec AS and 7f7e6344dSDag-Erling Smørgrav * Network Associates Laboratories, the Security Research Division of 8f7e6344dSDag-Erling Smørgrav * Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 9f7e6344dSDag-Erling Smørgrav * ("CBOSS"), as part of the DARPA CHATS research program. 10f7e6344dSDag-Erling Smørgrav * 11f7e6344dSDag-Erling Smørgrav * Redistribution and use in source and binary forms, with or without 12f7e6344dSDag-Erling Smørgrav * modification, are permitted provided that the following conditions 13f7e6344dSDag-Erling Smørgrav * are met: 14f7e6344dSDag-Erling Smørgrav * 1. Redistributions of source code must retain the above copyright 15f7e6344dSDag-Erling Smørgrav * notice, this list of conditions and the following disclaimer. 16f7e6344dSDag-Erling Smørgrav * 2. Redistributions in binary form must reproduce the above copyright 17f7e6344dSDag-Erling Smørgrav * notice, this list of conditions and the following disclaimer in the 18f7e6344dSDag-Erling Smørgrav * documentation and/or other materials provided with the distribution. 19f7e6344dSDag-Erling Smørgrav * 3. The name of the author may not be used to endorse or promote 20f7e6344dSDag-Erling Smørgrav * products derived from this software without specific prior written 21f7e6344dSDag-Erling Smørgrav * permission. 22f7e6344dSDag-Erling Smørgrav * 23f7e6344dSDag-Erling Smørgrav * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 24f7e6344dSDag-Erling Smørgrav * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25f7e6344dSDag-Erling Smørgrav * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26f7e6344dSDag-Erling Smørgrav * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 27f7e6344dSDag-Erling Smørgrav * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28f7e6344dSDag-Erling Smørgrav * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29f7e6344dSDag-Erling Smørgrav * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30f7e6344dSDag-Erling Smørgrav * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31f7e6344dSDag-Erling Smørgrav * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32f7e6344dSDag-Erling Smørgrav * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33f7e6344dSDag-Erling Smørgrav * SUCH DAMAGE. 34f7e6344dSDag-Erling Smørgrav * 35*ce77a8d6SDag-Erling Smørgrav * $Id: openpam_load.c 664 2013-03-17 10:56:15Z des $ 36f7e6344dSDag-Erling Smørgrav */ 37f7e6344dSDag-Erling Smørgrav 38f7e6344dSDag-Erling Smørgrav #ifdef HAVE_CONFIG_H 39f7e6344dSDag-Erling Smørgrav # include "config.h" 40f7e6344dSDag-Erling Smørgrav #endif 41f7e6344dSDag-Erling Smørgrav 42f7e6344dSDag-Erling Smørgrav #include <dlfcn.h> 43f7e6344dSDag-Erling Smørgrav #include <stdlib.h> 44f7e6344dSDag-Erling Smørgrav #include <string.h> 45f7e6344dSDag-Erling Smørgrav 46f7e6344dSDag-Erling Smørgrav #include <security/pam_appl.h> 47f7e6344dSDag-Erling Smørgrav 48f7e6344dSDag-Erling Smørgrav #include "openpam_impl.h" 49f7e6344dSDag-Erling Smørgrav 50f7e6344dSDag-Erling Smørgrav /* 51f7e6344dSDag-Erling Smørgrav * Locate a matching dynamic or static module. 52f7e6344dSDag-Erling Smørgrav */ 53f7e6344dSDag-Erling Smørgrav 54f7e6344dSDag-Erling Smørgrav pam_module_t * 55*ce77a8d6SDag-Erling Smørgrav openpam_load_module(const char *modulename) 56f7e6344dSDag-Erling Smørgrav { 57f7e6344dSDag-Erling Smørgrav pam_module_t *module; 58f7e6344dSDag-Erling Smørgrav 59*ce77a8d6SDag-Erling Smørgrav module = openpam_dynamic(modulename); 60f7e6344dSDag-Erling Smørgrav openpam_log(PAM_LOG_DEBUG, "%s dynamic %s", 61*ce77a8d6SDag-Erling Smørgrav (module == NULL) ? "no" : "using", modulename); 62f7e6344dSDag-Erling Smørgrav 63f7e6344dSDag-Erling Smørgrav #ifdef OPENPAM_STATIC_MODULES 64f7e6344dSDag-Erling Smørgrav /* look for a static module */ 65*ce77a8d6SDag-Erling Smørgrav if (module == NULL && strchr(modulename, '/') == NULL) { 66*ce77a8d6SDag-Erling Smørgrav module = openpam_static(modulename); 67f7e6344dSDag-Erling Smørgrav openpam_log(PAM_LOG_DEBUG, "%s static %s", 68*ce77a8d6SDag-Erling Smørgrav (module == NULL) ? "no" : "using", modulename); 69f7e6344dSDag-Erling Smørgrav } 70f7e6344dSDag-Erling Smørgrav #endif 71f7e6344dSDag-Erling Smørgrav if (module == NULL) { 72*ce77a8d6SDag-Erling Smørgrav openpam_log(PAM_LOG_ERROR, "no %s found", modulename); 73f7e6344dSDag-Erling Smørgrav return (NULL); 74f7e6344dSDag-Erling Smørgrav } 75f7e6344dSDag-Erling Smørgrav return (module); 76f7e6344dSDag-Erling Smørgrav } 77f7e6344dSDag-Erling Smørgrav 78f7e6344dSDag-Erling Smørgrav 79f7e6344dSDag-Erling Smørgrav /* 80f7e6344dSDag-Erling Smørgrav * Release a module. 81f7e6344dSDag-Erling Smørgrav * XXX highly thread-unsafe 82f7e6344dSDag-Erling Smørgrav */ 83f7e6344dSDag-Erling Smørgrav 84f7e6344dSDag-Erling Smørgrav static void 85f7e6344dSDag-Erling Smørgrav openpam_release_module(pam_module_t *module) 86f7e6344dSDag-Erling Smørgrav { 87f7e6344dSDag-Erling Smørgrav if (module == NULL) 88f7e6344dSDag-Erling Smørgrav return; 89f7e6344dSDag-Erling Smørgrav if (module->dlh == NULL) 90f7e6344dSDag-Erling Smørgrav /* static module */ 91f7e6344dSDag-Erling Smørgrav return; 92f7e6344dSDag-Erling Smørgrav dlclose(module->dlh); 93f7e6344dSDag-Erling Smørgrav openpam_log(PAM_LOG_DEBUG, "releasing %s", module->path); 94f7e6344dSDag-Erling Smørgrav FREE(module->path); 95f7e6344dSDag-Erling Smørgrav FREE(module); 96f7e6344dSDag-Erling Smørgrav } 97f7e6344dSDag-Erling Smørgrav 98f7e6344dSDag-Erling Smørgrav 99f7e6344dSDag-Erling Smørgrav /* 100f7e6344dSDag-Erling Smørgrav * Destroy a chain, freeing all its links and releasing the modules 101f7e6344dSDag-Erling Smørgrav * they point to. 102f7e6344dSDag-Erling Smørgrav */ 103f7e6344dSDag-Erling Smørgrav 104f7e6344dSDag-Erling Smørgrav static void 105f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(pam_chain_t *chain) 106f7e6344dSDag-Erling Smørgrav { 107f7e6344dSDag-Erling Smørgrav if (chain == NULL) 108f7e6344dSDag-Erling Smørgrav return; 109f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(chain->next); 110f7e6344dSDag-Erling Smørgrav chain->next = NULL; 111f7e6344dSDag-Erling Smørgrav FREEV(chain->optc, chain->optv); 112f7e6344dSDag-Erling Smørgrav openpam_release_module(chain->module); 113f7e6344dSDag-Erling Smørgrav chain->module = NULL; 114f7e6344dSDag-Erling Smørgrav FREE(chain); 115f7e6344dSDag-Erling Smørgrav } 116f7e6344dSDag-Erling Smørgrav 117f7e6344dSDag-Erling Smørgrav 118f7e6344dSDag-Erling Smørgrav /* 119f7e6344dSDag-Erling Smørgrav * Clear the chains and release the modules 120f7e6344dSDag-Erling Smørgrav */ 121f7e6344dSDag-Erling Smørgrav 122f7e6344dSDag-Erling Smørgrav void 123f7e6344dSDag-Erling Smørgrav openpam_clear_chains(pam_chain_t *policy[]) 124f7e6344dSDag-Erling Smørgrav { 125f7e6344dSDag-Erling Smørgrav int i; 126f7e6344dSDag-Erling Smørgrav 127f7e6344dSDag-Erling Smørgrav for (i = 0; i < PAM_NUM_FACILITIES; ++i) { 128f7e6344dSDag-Erling Smørgrav openpam_destroy_chain(policy[i]); 129f7e6344dSDag-Erling Smørgrav policy[i] = NULL; 130f7e6344dSDag-Erling Smørgrav } 131f7e6344dSDag-Erling Smørgrav } 132f7e6344dSDag-Erling Smørgrav 133f7e6344dSDag-Erling Smørgrav /* 134f7e6344dSDag-Erling Smørgrav * NOPARSE 135f7e6344dSDag-Erling Smørgrav */ 136