1 /* $NetBSD: authunix_prot.c,v 1.12 2000/01/22 22:19:17 mycroft Exp $ */ 2 3 /*- 4 * SPDX-License-Identifier: BSD-3-Clause 5 * 6 * Copyright (c) 2009, Sun Microsystems, Inc. 7 * All rights reserved. 8 * 9 * Redistribution and use in source and binary forms, with or without 10 * modification, are permitted provided that the following conditions are met: 11 * - Redistributions of source code must retain the above copyright notice, 12 * this list of conditions and the following disclaimer. 13 * - Redistributions in binary form must reproduce the above copyright notice, 14 * this list of conditions and the following disclaimer in the documentation 15 * and/or other materials provided with the distribution. 16 * - Neither the name of Sun Microsystems, Inc. nor the names of its 17 * contributors may be used to endorse or promote products derived 18 * from this software without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 21 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE 24 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 25 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 26 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 27 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 28 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 30 * POSSIBILITY OF SUCH DAMAGE. 31 */ 32 33 #include <sys/cdefs.h> 34 /* 35 * authunix_prot.c 36 * XDR for UNIX style authentication parameters for RPC 37 * 38 * Copyright (C) 1984, Sun Microsystems, Inc. 39 */ 40 41 #include <sys/param.h> 42 #include <sys/jail.h> 43 #include <sys/kernel.h> 44 #include <sys/systm.h> 45 #include <sys/ucred.h> 46 47 #include <rpc/types.h> 48 #include <rpc/xdr.h> 49 #include <rpc/auth.h> 50 51 #include <rpc/rpc_com.h> 52 53 /* gids compose part of a credential; there may not be more than 16 of them */ 54 #define NGRPS 16 55 56 /* 57 * XDR for unix authentication parameters. 58 */ 59 bool_t 60 xdr_authunix_parms(XDR *xdrs, uint32_t *time, struct xucred *cred) 61 { 62 uint32_t namelen; 63 uint32_t ngroups, i; 64 uint32_t junk; 65 char hostbuf[MAXHOSTNAMELEN]; 66 67 if (xdrs->x_op == XDR_ENCODE) { 68 /* 69 * Restrict name length to 255 according to RFC 1057. 70 */ 71 getcredhostname(NULL, hostbuf, sizeof(hostbuf)); 72 namelen = strlen(hostbuf); 73 if (namelen > 255) 74 namelen = 255; 75 } else { 76 namelen = 0; 77 } 78 junk = 0; 79 80 if (!xdr_uint32_t(xdrs, time) 81 || !xdr_uint32_t(xdrs, &namelen)) 82 return (FALSE); 83 84 /* 85 * Ignore the hostname on decode. 86 */ 87 if (xdrs->x_op == XDR_ENCODE) { 88 if (!xdr_opaque(xdrs, hostbuf, namelen)) 89 return (FALSE); 90 } else { 91 xdr_setpos(xdrs, xdr_getpos(xdrs) + RNDUP(namelen)); 92 } 93 94 if (!xdr_uint32_t(xdrs, &cred->cr_uid)) 95 return (FALSE); 96 if (!xdr_uint32_t(xdrs, &cred->cr_gid)) 97 return (FALSE); 98 99 if (xdrs->x_op == XDR_ENCODE) { 100 /* 101 * Note that this is a `struct xucred`, which maintains its 102 * historical layout of preserving the egid in cr_ngroups and 103 * cr_groups[0] == egid. 104 */ 105 ngroups = cred->cr_ngroups - 1; 106 if (ngroups > NGRPS) 107 ngroups = NGRPS; 108 } 109 110 if (!xdr_uint32_t(xdrs, &ngroups)) 111 return (FALSE); 112 for (i = 0; i < ngroups; i++) { 113 if (i < ngroups_max) { 114 if (!xdr_uint32_t(xdrs, &cred->cr_groups[i + 1])) 115 return (FALSE); 116 } else { 117 if (!xdr_uint32_t(xdrs, &junk)) 118 return (FALSE); 119 } 120 } 121 122 if (xdrs->x_op == XDR_DECODE) { 123 if (ngroups > ngroups_max) 124 cred->cr_ngroups = ngroups_max + 1; 125 else 126 cred->cr_ngroups = ngroups + 1; 127 } 128 129 return (TRUE); 130 } 131