1 /*- 2 * Copyright (c) 1988, 1993, 1994 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. All advertising materials mentioning features or use of this software 14 * must display the following acknowledgement: 15 * This product includes software developed by the University of 16 * California, Berkeley and its contributors. 17 * 4. Neither the name of the University nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 #ifndef lint 35 static char copyright[] = 36 "@(#) Copyright (c) 1988, 1993, 1994\n\ 37 The Regents of the University of California. All rights reserved.\n"; 38 #endif /* not lint */ 39 40 #ifndef lint 41 static char sccsid[] = "From: @(#)chpass.c 8.4 (Berkeley) 4/2/94"; 42 static char rcsid[] = 43 "$Id: chpass.c,v 1.5 1996/02/23 14:33:05 wpaul Exp $"; 44 #endif /* not lint */ 45 46 #include <sys/param.h> 47 #include <sys/stat.h> 48 #include <sys/signal.h> 49 #include <sys/time.h> 50 #include <sys/resource.h> 51 52 #include <ctype.h> 53 #include <err.h> 54 #include <errno.h> 55 #include <fcntl.h> 56 #include <pwd.h> 57 #include <stdio.h> 58 #include <stdlib.h> 59 #include <string.h> 60 #include <unistd.h> 61 62 #include <pw_scan.h> 63 #include <pw_util.h> 64 #include "pw_copy.h" 65 #ifdef YP 66 #include <rpcsvc/yp.h> 67 int yp_errno = YP_TRUE; 68 #include "pw_yp.h" 69 #endif 70 71 #include "chpass.h" 72 #include "pathnames.h" 73 74 char *tempname; 75 uid_t uid; 76 77 void baduser __P((void)); 78 void usage __P((void)); 79 80 int 81 main(argc, argv) 82 int argc; 83 char **argv; 84 { 85 enum { NEWSH, LOADENTRY, EDITENTRY, NEWPW } op; 86 struct passwd *pw, lpw; 87 int ch, pfd, tfd; 88 char *arg; 89 #ifdef YP 90 int force_local = 0; 91 int force_yp = 0; 92 #endif 93 94 op = EDITENTRY; 95 #ifdef YP 96 while ((ch = getopt(argc, argv, "a:p:s:d:h:oly")) != EOF) 97 #else 98 while ((ch = getopt(argc, argv, "a:p:s:")) != EOF) 99 #endif 100 switch(ch) { 101 case 'a': 102 op = LOADENTRY; 103 arg = optarg; 104 break; 105 case 's': 106 op = NEWSH; 107 arg = optarg; 108 break; 109 case 'p': 110 op = NEWPW; 111 arg = optarg; 112 break; 113 #ifdef YP 114 case 'h': 115 #ifdef PARAMOID 116 if (getuid()) { 117 warnx("Only the superuser can use the -d flag"); 118 } else { 119 #endif 120 yp_server = optarg; 121 #ifdef PARANOID 122 } 123 #endif 124 break; 125 case 'd': 126 #ifdef PARANOID 127 if (getuid()) { 128 warnx("Only the superuser can use the -d flag"); 129 } else { 130 #endif 131 yp_domain = optarg; 132 if (yp_server == NULL) 133 yp_server = "localhost"; 134 #ifdef PARANOID 135 } 136 #endif 137 break; 138 case 'l': 139 if (getuid()) { 140 warnx("Only the superuser can use the -h flag"); 141 } else { 142 force_local = 1; 143 } 144 break; 145 case 'y': 146 _use_yp = force_yp = 1; 147 break; 148 case 'o': 149 force_old++; 150 break; 151 #endif 152 case '?': 153 default: 154 usage(); 155 } 156 argc -= optind; 157 argv += optind; 158 159 uid = getuid(); 160 161 if (op == EDITENTRY || op == NEWSH || op == NEWPW) 162 switch(argc) { 163 #ifdef YP 164 case 0: 165 GETPWUID(uid) 166 get_yp_master(1); /* XXX just to set the suser flag */ 167 break; 168 case 1: 169 GETPWNAM(*argv) 170 get_yp_master(1); /* XXX just to set the suser flag */ 171 #else 172 case 0: 173 if (!(pw = getpwuid(uid))) 174 errx(1, "unknown user: uid %u", uid); 175 break; 176 case 1: 177 if (!(pw = getpwnam(*argv))) 178 errx(1, "unknown user: %s", *argv); 179 #endif 180 if (uid && uid != pw->pw_uid) 181 baduser(); 182 break; 183 default: 184 usage(); 185 } 186 if (op == NEWSH) { 187 /* protect p_shell -- it thinks NULL is /bin/sh */ 188 if (!arg[0]) 189 usage(); 190 if (p_shell(arg, pw, (ENTRY *)NULL)) 191 pw_error((char *)NULL, 0, 1); 192 } 193 194 if (op == LOADENTRY) { 195 if (uid) 196 baduser(); 197 pw = &lpw; 198 if (!pw_scan(arg, pw)) 199 exit(1); 200 } 201 202 if (op == NEWPW) { 203 if (uid) 204 baduser(); 205 206 if(strchr(arg, ':')) { 207 errx(1, "invalid format for password"); 208 } 209 pw->pw_passwd = arg; 210 } 211 212 /* 213 * The temporary file/file descriptor usage is a little tricky here. 214 * 1: We start off with two fd's, one for the master password 215 * file (used to lock everything), and one for a temporary file. 216 * 2: Display() gets an fp for the temporary file, and copies the 217 * user's information into it. It then gives the temporary file 218 * to the user and closes the fp, closing the underlying fd. 219 * 3: The user edits the temporary file some number of times. 220 * 4: Verify() gets an fp for the temporary file, and verifies the 221 * contents. It can't use an fp derived from the step #2 fd, 222 * because the user's editor may have created a new instance of 223 * the file. Once the file is verified, its contents are stored 224 * in a password structure. The verify routine closes the fp, 225 * closing the underlying fd. 226 * 5: Delete the temporary file. 227 * 6: Get a new temporary file/fd. Pw_copy() gets an fp for it 228 * file and copies the master password file into it, replacing 229 * the user record with a new one. We can't use the first 230 * temporary file for this because it was owned by the user. 231 * Pw_copy() closes its fp, flushing the data and closing the 232 * underlying file descriptor. We can't close the master 233 * password fp, or we'd lose the lock. 234 * 7: Call pw_mkdb() (which renames the temporary file) and exit. 235 * The exit closes the master passwd fp/fd. 236 */ 237 pw_init(); 238 pfd = pw_lock(); 239 tfd = pw_tmp(); 240 241 if (op == EDITENTRY) { 242 display(tfd, pw); 243 edit(pw); 244 (void)unlink(tempname); 245 tfd = pw_tmp(); 246 } 247 248 #ifdef YP 249 if (_use_yp) { 250 yp_submit(pw); 251 (void)unlink(tempname); 252 } else { 253 #endif /* YP */ 254 pw_copy(pfd, tfd, pw); 255 256 if (!pw_mkdb()) 257 pw_error((char *)NULL, 0, 1); 258 #ifdef YP 259 } 260 #endif /* YP */ 261 exit(0); 262 } 263 264 void 265 baduser() 266 { 267 errx(1, "%s", strerror(EACCES)); 268 } 269 270 void 271 usage() 272 { 273 274 (void)fprintf(stderr, 275 #ifdef YP 276 "usage: chpass [-l] [-y] [-d domain [-h host]] [-a list] [-p encpass] [-s shell] [user]\n"); 277 #else 278 "usage: chpass [-a list] [-p encpass] [-s shell] [user]\n"); 279 #endif 280 exit(1); 281 } 282