1*7c478bd9Sstevel@tonic-gate /* 2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START 3*7c478bd9Sstevel@tonic-gate * 4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*7c478bd9Sstevel@tonic-gate * with the License. 8*7c478bd9Sstevel@tonic-gate * 9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 12*7c478bd9Sstevel@tonic-gate * and limitations under the License. 13*7c478bd9Sstevel@tonic-gate * 14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*7c478bd9Sstevel@tonic-gate * 20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END 21*7c478bd9Sstevel@tonic-gate */ 22*7c478bd9Sstevel@tonic-gate /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */ 23*7c478bd9Sstevel@tonic-gate /* All Rights Reserved */ 24*7c478bd9Sstevel@tonic-gate 25*7c478bd9Sstevel@tonic-gate 26*7c478bd9Sstevel@tonic-gate /* 27*7c478bd9Sstevel@tonic-gate * Copyright (c) 2000 by Sun Microsystems, Inc. 28*7c478bd9Sstevel@tonic-gate * All rights reserved. 29*7c478bd9Sstevel@tonic-gate */ 30*7c478bd9Sstevel@tonic-gate 31*7c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" /* SVr4.0 1.6 */ 32*7c478bd9Sstevel@tonic-gate 33*7c478bd9Sstevel@tonic-gate #include <sys/types.h> 34*7c478bd9Sstevel@tonic-gate #include <sys/stat.h> 35*7c478bd9Sstevel@tonic-gate #include <stdio.h> 36*7c478bd9Sstevel@tonic-gate #include <string.h> 37*7c478bd9Sstevel@tonic-gate #include <ctype.h> 38*7c478bd9Sstevel@tonic-gate #include <pwd.h> 39*7c478bd9Sstevel@tonic-gate #include "cron.h" 40*7c478bd9Sstevel@tonic-gate 41*7c478bd9Sstevel@tonic-gate struct stat globstat; 42*7c478bd9Sstevel@tonic-gate #define exists(file) (stat(file, &globstat) == 0) 43*7c478bd9Sstevel@tonic-gate #define ROOT "root" 44*7c478bd9Sstevel@tonic-gate 45*7c478bd9Sstevel@tonic-gate int per_errno; /* status info from getuser */ 46*7c478bd9Sstevel@tonic-gate static int within(char *, char *); 47*7c478bd9Sstevel@tonic-gate 48*7c478bd9Sstevel@tonic-gate 49*7c478bd9Sstevel@tonic-gate char * 50*7c478bd9Sstevel@tonic-gate getuser(uid) 51*7c478bd9Sstevel@tonic-gate uid_t uid; 52*7c478bd9Sstevel@tonic-gate { 53*7c478bd9Sstevel@tonic-gate struct passwd *nptr; 54*7c478bd9Sstevel@tonic-gate 55*7c478bd9Sstevel@tonic-gate if ((nptr = getpwuid(uid)) == NULL) { 56*7c478bd9Sstevel@tonic-gate per_errno = 1; 57*7c478bd9Sstevel@tonic-gate return (NULL); 58*7c478bd9Sstevel@tonic-gate } 59*7c478bd9Sstevel@tonic-gate if ((strcmp(nptr->pw_shell, SHELL) != 0) && 60*7c478bd9Sstevel@tonic-gate (strcmp(nptr->pw_shell, "") != 0)) { 61*7c478bd9Sstevel@tonic-gate per_errno = 2; 62*7c478bd9Sstevel@tonic-gate /* 63*7c478bd9Sstevel@tonic-gate * return NULL if you want crontab and at to abort 64*7c478bd9Sstevel@tonic-gate * when the users login shell is not /usr/bin/sh otherwise 65*7c478bd9Sstevel@tonic-gate * return pw_name 66*7c478bd9Sstevel@tonic-gate */ 67*7c478bd9Sstevel@tonic-gate return (nptr->pw_name); 68*7c478bd9Sstevel@tonic-gate } 69*7c478bd9Sstevel@tonic-gate return (nptr->pw_name); 70*7c478bd9Sstevel@tonic-gate } 71*7c478bd9Sstevel@tonic-gate 72*7c478bd9Sstevel@tonic-gate int 73*7c478bd9Sstevel@tonic-gate allowed(user, allow, deny) 74*7c478bd9Sstevel@tonic-gate char *user, *allow, *deny; 75*7c478bd9Sstevel@tonic-gate { 76*7c478bd9Sstevel@tonic-gate if (exists(allow)) { 77*7c478bd9Sstevel@tonic-gate if (within(user, allow)) { 78*7c478bd9Sstevel@tonic-gate return (1); 79*7c478bd9Sstevel@tonic-gate } else { 80*7c478bd9Sstevel@tonic-gate return (0); 81*7c478bd9Sstevel@tonic-gate } 82*7c478bd9Sstevel@tonic-gate } else if (exists(deny)) { 83*7c478bd9Sstevel@tonic-gate if (within(user, deny)) { 84*7c478bd9Sstevel@tonic-gate return (0); 85*7c478bd9Sstevel@tonic-gate } else { 86*7c478bd9Sstevel@tonic-gate return (1); 87*7c478bd9Sstevel@tonic-gate } 88*7c478bd9Sstevel@tonic-gate } else if (chkauthattr(CRONUSER_AUTH, user)) { 89*7c478bd9Sstevel@tonic-gate return (1); 90*7c478bd9Sstevel@tonic-gate } else { 91*7c478bd9Sstevel@tonic-gate return (0); 92*7c478bd9Sstevel@tonic-gate } 93*7c478bd9Sstevel@tonic-gate } 94*7c478bd9Sstevel@tonic-gate 95*7c478bd9Sstevel@tonic-gate static int 96*7c478bd9Sstevel@tonic-gate within(username, filename) 97*7c478bd9Sstevel@tonic-gate char *username, *filename; 98*7c478bd9Sstevel@tonic-gate { 99*7c478bd9Sstevel@tonic-gate char line[UNAMESIZE]; 100*7c478bd9Sstevel@tonic-gate FILE *cap; 101*7c478bd9Sstevel@tonic-gate int i; 102*7c478bd9Sstevel@tonic-gate 103*7c478bd9Sstevel@tonic-gate if ((cap = fopen(filename, "r")) == NULL) 104*7c478bd9Sstevel@tonic-gate return (0); 105*7c478bd9Sstevel@tonic-gate while (fgets(line, UNAMESIZE, cap) != NULL) { 106*7c478bd9Sstevel@tonic-gate for (i = 0; line[i] != '\0'; i++) { 107*7c478bd9Sstevel@tonic-gate if (isspace(line[i])) { 108*7c478bd9Sstevel@tonic-gate line[i] = '\0'; 109*7c478bd9Sstevel@tonic-gate break; } 110*7c478bd9Sstevel@tonic-gate } 111*7c478bd9Sstevel@tonic-gate if (strcmp(line, username) == 0) { 112*7c478bd9Sstevel@tonic-gate fclose(cap); 113*7c478bd9Sstevel@tonic-gate return (1); 114*7c478bd9Sstevel@tonic-gate } 115*7c478bd9Sstevel@tonic-gate } 116*7c478bd9Sstevel@tonic-gate fclose(cap); 117*7c478bd9Sstevel@tonic-gate return (0); 118*7c478bd9Sstevel@tonic-gate } 119