1 /* 2 * Copyright (c) 1989, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * This code is derived from software contributed to Berkeley by 6 * Tony Nardo of the Johns Hopkins University/Applied Physics Lab. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 3. All advertising materials mentioning features or use of this software 17 * must display the following acknowledgement: 18 * This product includes software developed by the University of 19 * California, Berkeley and its contributors. 20 * 4. Neither the name of the University nor the names of its contributors 21 * may be used to endorse or promote products derived from this software 22 * without specific prior written permission. 23 * 24 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 27 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 28 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 29 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 30 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 31 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 32 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 33 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 34 * SUCH DAMAGE. 35 */ 36 37 #if 0 38 #ifndef lint 39 static char sccsid[] = "@(#)util.c 8.3 (Berkeley) 4/28/95"; 40 #endif 41 #endif 42 43 #include <sys/cdefs.h> 44 __FBSDID("$FreeBSD$"); 45 46 #include <sys/param.h> 47 #include <sys/socket.h> 48 #include <sys/stat.h> 49 #include <ctype.h> 50 #include <db.h> 51 #include <err.h> 52 #include <errno.h> 53 #include <fcntl.h> 54 #include <paths.h> 55 #include <pwd.h> 56 #include <stdio.h> 57 #include <stdlib.h> 58 #include <string.h> 59 #define _ULOG_POSIX_NAMES 60 #include <ulog.h> 61 #include <unistd.h> 62 #include "finger.h" 63 #include "pathnames.h" 64 65 static void find_idle_and_ttywrite(WHERE *); 66 static void userinfo(PERSON *, struct passwd *); 67 static WHERE *walloc(PERSON *); 68 69 int 70 match(struct passwd *pw, const char *user) 71 { 72 char *p, *t; 73 char name[1024]; 74 75 if (!strcasecmp(pw->pw_name, user)) 76 return(1); 77 78 /* 79 * XXX 80 * Why do we skip asterisks!?!? 81 */ 82 (void)strncpy(p = tbuf, pw->pw_gecos, sizeof(tbuf)); 83 tbuf[sizeof(tbuf) - 1] = '\0'; 84 if (*p == '*') 85 ++p; 86 87 /* Ampersands get replaced by the login name. */ 88 if ((p = strtok(p, ",")) == NULL) 89 return(0); 90 91 for (t = name; t < &name[sizeof(name) - 1] && (*t = *p) != '\0'; ++p) { 92 if (*t == '&') { 93 (void)strncpy(t, pw->pw_name, 94 sizeof(name) - (t - name)); 95 name[sizeof(name) - 1] = '\0'; 96 while (t < &name[sizeof(name) - 1] && *++t) 97 continue; 98 } else { 99 ++t; 100 } 101 } 102 *t = '\0'; 103 for (t = name; (p = strtok(t, "\t ")) != NULL; t = NULL) 104 if (!strcasecmp(p, user)) 105 return(1); 106 return(0); 107 } 108 109 void 110 enter_lastlog(PERSON *pn) 111 { 112 WHERE *w; 113 struct ulog_utmpx *ut; 114 char doit = 0; 115 116 ulog_setutxfile(UTXI_USER, NULL); 117 ut = ulog_getutxuser(pn->name); 118 if ((w = pn->whead) == NULL) 119 doit = 1; 120 else if (ut != NULL && ut->ut_type == USER_PROCESS) { 121 /* if last login is earlier than some current login */ 122 for (; !doit && w != NULL; w = w->next) 123 if (w->info == LOGGEDIN && 124 w->loginat < ut->ut_tv.tv_sec) 125 doit = 1; 126 /* 127 * and if it's not any of the current logins 128 * can't use time comparison because there may be a small 129 * discrepancy since login calls time() twice 130 */ 131 for (w = pn->whead; doit && w != NULL; w = w->next) 132 if (w->info == LOGGEDIN && 133 strcmp(w->tty, ut->ut_line) == 0) 134 doit = 0; 135 } 136 if (ut != NULL && doit) { 137 w = walloc(pn); 138 w->info = LASTLOG; 139 strcpy(w->tty, ut->ut_line); 140 strcpy(w->host, ut->ut_host); 141 w->loginat = ut->ut_tv.tv_sec; 142 } 143 ulog_endutxent(); 144 } 145 146 void 147 enter_where(struct utmpx *ut, PERSON *pn) 148 { 149 WHERE *w; 150 151 w = walloc(pn); 152 w->info = LOGGEDIN; 153 strcpy(w->tty, ut->ut_line); 154 strcpy(w->host, ut->ut_host); 155 w->loginat = ut->ut_tv.tv_sec; 156 find_idle_and_ttywrite(w); 157 } 158 159 PERSON * 160 enter_person(struct passwd *pw) 161 { 162 DBT data, key; 163 PERSON *pn; 164 165 if (db == NULL && 166 (db = dbopen(NULL, O_RDWR, 0, DB_BTREE, NULL)) == NULL) 167 err(1, NULL); 168 169 key.data = pw->pw_name; 170 key.size = strlen(pw->pw_name); 171 172 switch ((*db->get)(db, &key, &data, 0)) { 173 case 0: 174 memmove(&pn, data.data, sizeof pn); 175 return (pn); 176 default: 177 case -1: 178 err(1, "db get"); 179 /* NOTREACHED */ 180 case 1: 181 ++entries; 182 pn = palloc(); 183 userinfo(pn, pw); 184 pn->whead = NULL; 185 186 data.size = sizeof(PERSON *); 187 data.data = &pn; 188 if ((*db->put)(db, &key, &data, 0)) 189 err(1, "db put"); 190 return (pn); 191 } 192 } 193 194 PERSON * 195 find_person(char *name) 196 { 197 struct passwd *pw; 198 199 DBT data, key; 200 PERSON *p; 201 202 if (!db) 203 return(NULL); 204 205 if ((pw = getpwnam(name)) && hide(pw)) 206 return(NULL); 207 208 key.data = name; 209 key.size = strlen(name); 210 211 if ((*db->get)(db, &key, &data, 0)) 212 return (NULL); 213 memmove(&p, data.data, sizeof p); 214 return (p); 215 } 216 217 PERSON * 218 palloc(void) 219 { 220 PERSON *p; 221 222 if ((p = malloc(sizeof(PERSON))) == NULL) 223 err(1, NULL); 224 return(p); 225 } 226 227 static WHERE * 228 walloc(PERSON *pn) 229 { 230 WHERE *w; 231 232 if ((w = malloc(sizeof(WHERE))) == NULL) 233 err(1, NULL); 234 if (pn->whead == NULL) 235 pn->whead = pn->wtail = w; 236 else { 237 pn->wtail->next = w; 238 pn->wtail = w; 239 } 240 w->next = NULL; 241 return(w); 242 } 243 244 char * 245 prphone(char *num) 246 { 247 char *p; 248 int len; 249 static char pbuf[20]; 250 251 /* don't touch anything if the user has their own formatting */ 252 for (p = num; *p; ++p) 253 if (!isdigit(*p)) 254 return(num); 255 len = p - num; 256 p = pbuf; 257 switch(len) { 258 case 11: /* +0-123-456-7890 */ 259 *p++ = '+'; 260 *p++ = *num++; 261 *p++ = '-'; 262 /* FALLTHROUGH */ 263 case 10: /* 012-345-6789 */ 264 *p++ = *num++; 265 *p++ = *num++; 266 *p++ = *num++; 267 *p++ = '-'; 268 /* FALLTHROUGH */ 269 case 7: /* 012-3456 */ 270 *p++ = *num++; 271 *p++ = *num++; 272 *p++ = *num++; 273 break; 274 case 5: /* x0-1234 */ 275 case 4: /* x1234 */ 276 *p++ = 'x'; 277 *p++ = *num++; 278 break; 279 default: 280 return(num); 281 } 282 if (len != 4) { 283 *p++ = '-'; 284 *p++ = *num++; 285 } 286 *p++ = *num++; 287 *p++ = *num++; 288 *p++ = *num++; 289 *p = '\0'; 290 return(pbuf); 291 } 292 293 static void 294 find_idle_and_ttywrite(WHERE *w) 295 { 296 struct stat sb; 297 time_t touched; 298 int error; 299 300 (void)snprintf(tbuf, sizeof(tbuf), "%s/%s", _PATH_DEV, w->tty); 301 302 error = stat(tbuf, &sb); 303 if (error < 0 && errno == ENOENT) { 304 /* 305 * The terminal listed is not actually a terminal (i.e., 306 * ":0"). This is a failure, so we'll skip printing 307 * out the idle time, which is non-ideal but better 308 * than a bogus warning and idle time. 309 */ 310 w->idletime = -1; 311 return; 312 } else if (error < 0) { 313 warn("%s", tbuf); 314 w->idletime = -1; 315 return; 316 } 317 touched = sb.st_atime; 318 if (touched < w->loginat) { 319 /* tty untouched since before login */ 320 touched = w->loginat; 321 } 322 w->idletime = now < touched ? 0 : now - touched; 323 324 #define TALKABLE 0220 /* tty is writable if 220 mode */ 325 w->writable = ((sb.st_mode & TALKABLE) == TALKABLE); 326 } 327 328 static void 329 userinfo(PERSON *pn, struct passwd *pw) 330 { 331 char *p, *t; 332 char *bp, name[1024]; 333 struct stat sb; 334 335 pn->realname = pn->office = pn->officephone = pn->homephone = NULL; 336 337 pn->uid = pw->pw_uid; 338 if ((pn->name = strdup(pw->pw_name)) == NULL) 339 err(1, "strdup failed"); 340 if ((pn->dir = strdup(pw->pw_dir)) == NULL) 341 err(1, "strdup failed"); 342 if ((pn->shell = strdup(pw->pw_shell)) == NULL) 343 err(1, "strdup failed"); 344 345 /* why do we skip asterisks!?!? */ 346 (void)strncpy(bp = tbuf, pw->pw_gecos, sizeof(tbuf)); 347 tbuf[sizeof(tbuf) - 1] = '\0'; 348 if (*bp == '*') 349 ++bp; 350 351 /* ampersands get replaced by the login name */ 352 if (!(p = strsep(&bp, ","))) 353 return; 354 for (t = name; t < &name[sizeof(name) - 1] && (*t = *p) != '\0'; ++p) { 355 if (*t == '&') { 356 (void)strncpy(t, pw->pw_name, 357 sizeof(name) - (t - name)); 358 name[sizeof(name) - 1] = '\0'; 359 if (islower(*t)) 360 *t = toupper(*t); 361 while (t < &name[sizeof(name) - 1] && *++t) 362 continue; 363 } else { 364 ++t; 365 } 366 } 367 *t = '\0'; 368 if ((pn->realname = strdup(name)) == NULL) 369 err(1, "strdup failed"); 370 pn->office = ((p = strsep(&bp, ",")) && *p) ? 371 strdup(p) : NULL; 372 pn->officephone = ((p = strsep(&bp, ",")) && *p) ? 373 strdup(p) : NULL; 374 pn->homephone = ((p = strsep(&bp, ",")) && *p) ? 375 strdup(p) : NULL; 376 (void)snprintf(tbuf, sizeof(tbuf), "%s/%s", _PATH_MAILDIR, pw->pw_name); 377 pn->mailrecv = -1; /* -1 == not_valid */ 378 if (stat(tbuf, &sb) < 0) { 379 if (errno != ENOENT) { 380 warn("%s", tbuf); 381 return; 382 } 383 } else if (sb.st_size != 0) { 384 pn->mailrecv = sb.st_mtime; 385 pn->mailread = sb.st_atime; 386 } 387 } 388 389 /* 390 * Is this user hiding from finger? 391 * If ~<user>/.nofinger exists, return 1 (hide), else return 0 (nohide). 392 * Nobody can hide from root. 393 */ 394 395 int 396 hide(struct passwd *pw) 397 { 398 struct stat st; 399 char buf[MAXPATHLEN]; 400 401 if (invoker_root || !pw->pw_dir) 402 return 0; 403 404 snprintf(buf, sizeof(buf), "%s/%s", pw->pw_dir, _PATH_NOFINGER); 405 406 if (stat(buf, &st) == 0) 407 return 1; 408 409 return 0; 410 } 411