xref: /illumos-gate/usr/src/cmd/policykit/polkit-is-privileged.c (revision bea83d026ee1bd1b2a2419e1d0232f107a5d7d9b)
1 /***************************************************************************
2  * CVSID: $Id$
3  *
4  * polkit-is-privileged.c : Determine if a user has privileges
5  *
6  * Copyright (C) 2006 David Zeuthen, <david@fubar.dk>
7  *
8  * This program is free software; you can redistribute it and/or modify
9  * it under the terms of the GNU General Public License as published by
10  * the Free Software Foundation; either version 2 of the License, or
11  * (at your option) any later version.
12  *
13  * This program is distributed in the hope that it will be useful,
14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16  * GNU General Public License for more details.
17  *
18  * You should have received a copy of the GNU General Public License
19  * along with this program; if not, write to the Free Software
20  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
21  *
22  **************************************************************************/
23 
24 
25 #ifdef HAVE_CONFIG_H
26 #  include <config.h>
27 #endif
28 
29 #include <stdio.h>
30 #include <stdlib.h>
31 #include <getopt.h>
32 #include <dbus/dbus.h>
33 
34 #include <libpolkit/libpolkit.h>
35 
36 static void
37 usage (int argc, char *argv[])
38 {
39 	fprintf (stderr, "polkit-is-privileged version " PACKAGE_VERSION "\n");
40 
41 	fprintf (stderr,
42 		 "\n"
43 		 "usage : %s -u <uid> -p <privilege> [-r <resource>]\n"
44 		 "        [-s <system-bus-connection-name>]", argv[0]);
45 	fprintf (stderr,
46 		 "\n"
47 		 "Options:\n"
48 		 "    -u, --user                    Username or user id\n"
49 		 "    -s, --system-bus-unique-name  Unique system bus connection name\n"
50 		 "    -r, --resource                Resource\n"
51 		 "    -p, --privilege               Privilege to test for\n"
52 		 "    -h, --help                    Show this information and exit\n"
53 		 "    -v, --verbose                 Verbose operation\n"
54 		 "    -V, --version                 Print version number\n"
55 		 "\n"
56 		 "Queries system policy whether a given user is allowed for a given\n"
57 		 "privilege for a given resource. The resource may be omitted.\n"
58 		 "\n");
59 }
60 
61 int
62 main (int argc, char *argv[])
63 {
64 	int rc;
65 	char *user = NULL;
66 	char *privilege = NULL;
67 	char *resource = NULL;
68 	char *system_bus_unique_name = NULL;
69 	static const struct option long_options[] = {
70 		{"user", required_argument, NULL, 'u'},
71 		{"system-bus-unique-name", required_argument, NULL, 's'},
72 		{"resource", required_argument, NULL, 'r'},
73 		{"privilege", required_argument, NULL, 'p'},
74 		{"help", no_argument, NULL, 'h'},
75 		{"verbose", no_argument, NULL, 'v'},
76 		{"version", no_argument, NULL, 'V'},
77 		{NULL, 0, NULL, 0}
78 	};
79 	LibPolKitContext *ctx = NULL;
80 	gboolean is_allowed;
81 	gboolean is_temporary;
82 	LibPolKitResult result;
83 	gboolean is_verbose = FALSE;
84 	DBusError error;
85 	DBusConnection *connection = NULL;
86 
87 	rc = 1;
88 
89 	while (TRUE) {
90 		int c;
91 
92 		c = getopt_long (argc, argv, "u:r:p:s:hVv", long_options, NULL);
93 
94 		if (c == -1)
95 			break;
96 
97 		switch (c) {
98 		case 's':
99 			system_bus_unique_name = g_strdup (optarg);
100 			break;
101 
102 		case 'u':
103 			user = g_strdup (optarg);
104 			break;
105 
106 		case 'r':
107 			resource = g_strdup (optarg);
108 			break;
109 
110 		case 'p':
111 			privilege = g_strdup (optarg);
112 			break;
113 
114 		case 'v':
115 			is_verbose = TRUE;
116 			break;
117 
118 		case 'h':
119 			usage (argc, argv);
120 			rc = 0;
121 			goto out;
122 
123 		case 'V':
124 			printf ("polkit-is-privileged version " PACKAGE_VERSION "\n");
125 			rc = 0;
126 			goto out;
127 
128 		default:
129 			usage (argc, argv);
130 			goto out;
131 		}
132 	}
133 
134 	if (user == NULL || privilege == NULL) {
135 		usage (argc, argv);
136 		return 1;
137 	}
138 
139 	if (is_verbose) {
140 		printf ("user      = '%s'\n", user);
141 		printf ("privilege = '%s'\n", privilege);
142 		if (resource != NULL)
143 			printf ("resource  = '%s'\n", resource);
144 	}
145 
146 #ifdef POLKITD_ENABLED
147 	dbus_error_init (&error);
148 	connection = dbus_bus_get (DBUS_BUS_SYSTEM, &error);
149 	if (connection == NULL) {
150 		g_warning ("Cannot connect to system message bus");
151 		return 1;
152 	}
153 #endif /* POLKITD_ENABLED */
154 
155 	ctx = libpolkit_new_context (connection);
156 	if (ctx == NULL) {
157 		g_warning ("Cannot get libpolkit context");
158 		goto out;
159 	}
160 
161 	result = libpolkit_is_uid_allowed_for_privilege (ctx,
162 							 system_bus_unique_name,
163 							 user,
164 							 privilege,
165 							 resource,
166 							 &is_allowed,
167 							 &is_temporary,
168 							 NULL);
169 	switch (result) {
170 	case LIBPOLKIT_RESULT_OK:
171 		rc = is_allowed ? 0 : 1;
172 		break;
173 
174 	case LIBPOLKIT_RESULT_ERROR:
175 		g_warning ("Error determing whether user is privileged.");
176 		break;
177 
178 	case LIBPOLKIT_RESULT_INVALID_CONTEXT:
179 		g_print ("Invalid context.\n");
180 		goto out;
181 
182 	case LIBPOLKIT_RESULT_NOT_PRIVILEGED:
183 		g_print ("Not privileged.\n");
184 
185 	case LIBPOLKIT_RESULT_NO_SUCH_PRIVILEGE:
186 		g_print ("No such privilege '%s'.\n", privilege);
187 		goto out;
188 
189 	case LIBPOLKIT_RESULT_NO_SUCH_USER:
190 		g_print ("No such user '%s'.\n", user);
191 		goto out;
192 	}
193 
194 	if (is_verbose) {
195 		printf ("result %d\n", result);
196 		printf ("is_allowed %d\n", is_allowed);
197 	}
198 
199 out:
200 	if (ctx != NULL)
201 		libpolkit_free_context (ctx);
202 
203 	return rc;
204 }
205 
206