xref: /titanic_50/usr/src/cmd/cron/permit.c (revision 7c478bd95313f5f23a4c958a745db2134aa03244)
1*7c478bd9Sstevel@tonic-gate /*
2*7c478bd9Sstevel@tonic-gate  * CDDL HEADER START
3*7c478bd9Sstevel@tonic-gate  *
4*7c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*7c478bd9Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
6*7c478bd9Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
7*7c478bd9Sstevel@tonic-gate  * with the License.
8*7c478bd9Sstevel@tonic-gate  *
9*7c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*7c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
11*7c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
12*7c478bd9Sstevel@tonic-gate  * and limitations under the License.
13*7c478bd9Sstevel@tonic-gate  *
14*7c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
15*7c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*7c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
17*7c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
18*7c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
19*7c478bd9Sstevel@tonic-gate  *
20*7c478bd9Sstevel@tonic-gate  * CDDL HEADER END
21*7c478bd9Sstevel@tonic-gate  */
22*7c478bd9Sstevel@tonic-gate /*	Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T	*/
23*7c478bd9Sstevel@tonic-gate /*	  All Rights Reserved  	*/
24*7c478bd9Sstevel@tonic-gate 
25*7c478bd9Sstevel@tonic-gate 
26*7c478bd9Sstevel@tonic-gate /*
27*7c478bd9Sstevel@tonic-gate  * Copyright (c) 2000 by Sun Microsystems, Inc.
28*7c478bd9Sstevel@tonic-gate  * All rights reserved.
29*7c478bd9Sstevel@tonic-gate  */
30*7c478bd9Sstevel@tonic-gate 
31*7c478bd9Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"	/* SVr4.0 1.6 */
32*7c478bd9Sstevel@tonic-gate 
33*7c478bd9Sstevel@tonic-gate #include <sys/types.h>
34*7c478bd9Sstevel@tonic-gate #include <sys/stat.h>
35*7c478bd9Sstevel@tonic-gate #include <stdio.h>
36*7c478bd9Sstevel@tonic-gate #include <string.h>
37*7c478bd9Sstevel@tonic-gate #include <ctype.h>
38*7c478bd9Sstevel@tonic-gate #include <pwd.h>
39*7c478bd9Sstevel@tonic-gate #include "cron.h"
40*7c478bd9Sstevel@tonic-gate 
41*7c478bd9Sstevel@tonic-gate struct stat globstat;
42*7c478bd9Sstevel@tonic-gate #define	exists(file)	(stat(file, &globstat) == 0)
43*7c478bd9Sstevel@tonic-gate #define	ROOT	"root"
44*7c478bd9Sstevel@tonic-gate 
45*7c478bd9Sstevel@tonic-gate int per_errno;	/* status info from getuser */
46*7c478bd9Sstevel@tonic-gate static int within(char *, char *);
47*7c478bd9Sstevel@tonic-gate 
48*7c478bd9Sstevel@tonic-gate 
49*7c478bd9Sstevel@tonic-gate char *
50*7c478bd9Sstevel@tonic-gate getuser(uid)
51*7c478bd9Sstevel@tonic-gate uid_t uid;
52*7c478bd9Sstevel@tonic-gate {
53*7c478bd9Sstevel@tonic-gate 	struct passwd *nptr;
54*7c478bd9Sstevel@tonic-gate 
55*7c478bd9Sstevel@tonic-gate 	if ((nptr = getpwuid(uid)) == NULL) {
56*7c478bd9Sstevel@tonic-gate 		per_errno = 1;
57*7c478bd9Sstevel@tonic-gate 		return (NULL);
58*7c478bd9Sstevel@tonic-gate 	}
59*7c478bd9Sstevel@tonic-gate 	if ((strcmp(nptr->pw_shell, SHELL) != 0) &&
60*7c478bd9Sstevel@tonic-gate 	    (strcmp(nptr->pw_shell, "") != 0)) {
61*7c478bd9Sstevel@tonic-gate 		per_errno = 2;
62*7c478bd9Sstevel@tonic-gate 		/*
63*7c478bd9Sstevel@tonic-gate 		 * return NULL if you want crontab and at to abort
64*7c478bd9Sstevel@tonic-gate 		 * when the users login shell is not /usr/bin/sh otherwise
65*7c478bd9Sstevel@tonic-gate 		 * return pw_name
66*7c478bd9Sstevel@tonic-gate 		 */
67*7c478bd9Sstevel@tonic-gate 		return (nptr->pw_name);
68*7c478bd9Sstevel@tonic-gate 	}
69*7c478bd9Sstevel@tonic-gate 	return (nptr->pw_name);
70*7c478bd9Sstevel@tonic-gate }
71*7c478bd9Sstevel@tonic-gate 
72*7c478bd9Sstevel@tonic-gate int
73*7c478bd9Sstevel@tonic-gate allowed(user, allow, deny)
74*7c478bd9Sstevel@tonic-gate char *user, *allow, *deny;
75*7c478bd9Sstevel@tonic-gate {
76*7c478bd9Sstevel@tonic-gate 	if (exists(allow)) {
77*7c478bd9Sstevel@tonic-gate 		if (within(user, allow)) {
78*7c478bd9Sstevel@tonic-gate 			return (1);
79*7c478bd9Sstevel@tonic-gate 		} else {
80*7c478bd9Sstevel@tonic-gate 			return (0);
81*7c478bd9Sstevel@tonic-gate 		}
82*7c478bd9Sstevel@tonic-gate 	} else if (exists(deny)) {
83*7c478bd9Sstevel@tonic-gate 		if (within(user, deny)) {
84*7c478bd9Sstevel@tonic-gate 			return (0);
85*7c478bd9Sstevel@tonic-gate 		} else {
86*7c478bd9Sstevel@tonic-gate 			return (1);
87*7c478bd9Sstevel@tonic-gate 		}
88*7c478bd9Sstevel@tonic-gate 	} else if (chkauthattr(CRONUSER_AUTH, user)) {
89*7c478bd9Sstevel@tonic-gate 		return (1);
90*7c478bd9Sstevel@tonic-gate 	} else {
91*7c478bd9Sstevel@tonic-gate 		return (0);
92*7c478bd9Sstevel@tonic-gate 	}
93*7c478bd9Sstevel@tonic-gate }
94*7c478bd9Sstevel@tonic-gate 
95*7c478bd9Sstevel@tonic-gate static int
96*7c478bd9Sstevel@tonic-gate within(username, filename)
97*7c478bd9Sstevel@tonic-gate char *username, *filename;
98*7c478bd9Sstevel@tonic-gate {
99*7c478bd9Sstevel@tonic-gate 	char line[UNAMESIZE];
100*7c478bd9Sstevel@tonic-gate 	FILE *cap;
101*7c478bd9Sstevel@tonic-gate 	int i;
102*7c478bd9Sstevel@tonic-gate 
103*7c478bd9Sstevel@tonic-gate 	if ((cap = fopen(filename, "r")) == NULL)
104*7c478bd9Sstevel@tonic-gate 		return (0);
105*7c478bd9Sstevel@tonic-gate 	while (fgets(line, UNAMESIZE, cap) != NULL) {
106*7c478bd9Sstevel@tonic-gate 		for (i = 0; line[i] != '\0'; i++) {
107*7c478bd9Sstevel@tonic-gate 			if (isspace(line[i])) {
108*7c478bd9Sstevel@tonic-gate 				line[i] = '\0';
109*7c478bd9Sstevel@tonic-gate 				break; }
110*7c478bd9Sstevel@tonic-gate 		}
111*7c478bd9Sstevel@tonic-gate 		if (strcmp(line, username) == 0) {
112*7c478bd9Sstevel@tonic-gate 			fclose(cap);
113*7c478bd9Sstevel@tonic-gate 			return (1);
114*7c478bd9Sstevel@tonic-gate 		}
115*7c478bd9Sstevel@tonic-gate 	}
116*7c478bd9Sstevel@tonic-gate 	fclose(cap);
117*7c478bd9Sstevel@tonic-gate 	return (0);
118*7c478bd9Sstevel@tonic-gate }
119