1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
3 #include "format-util.h"
5 #include "process-util.h"
6 #include "rlimit-util.h"
8 #include "terminal-util.h"
9 #include "user-record-show.h"
10 #include "user-util.h"
13 const char *user_record_state_color(const char *state
) {
14 if (STR_IN_SET(state
, "unfixated", "absent"))
16 else if (streq(state
, "active"))
17 return ansi_highlight_green();
18 else if (STR_IN_SET(state
, "locked", "dirty"))
19 return ansi_highlight_yellow();
24 void user_record_show(UserRecord
*hr
, bool show_full_group_info
) {
25 const char *hd
, *ip
, *shell
;
31 printf(" User name: %s\n",
32 user_record_user_name_and_realm(hr
));
37 color
= user_record_state_color(hr
->state
);
39 printf(" State: %s%s%s\n",
40 strempty(color
), hr
->state
, color
? ansi_normal() : "");
43 printf(" Disposition: %s\n", user_disposition_to_string(user_record_disposition(hr
)));
45 if (hr
->last_change_usec
!= USEC_INFINITY
) {
46 printf(" Last Change: %s\n", FORMAT_TIMESTAMP(hr
->last_change_usec
));
48 if (hr
->last_change_usec
> now(CLOCK_REALTIME
))
49 printf(" %sModification time lies in the future, system clock wrong?%s\n",
50 ansi_highlight_yellow(), ansi_normal());
53 if (hr
->last_password_change_usec
!= USEC_INFINITY
&&
54 hr
->last_password_change_usec
!= hr
->last_change_usec
)
55 printf(" Last Passw.: %s\n", FORMAT_TIMESTAMP(hr
->last_password_change_usec
));
57 r
= user_record_test_blocked(hr
);
61 printf(" Login OK: %sno%s (record is locked)\n", ansi_highlight_red(), ansi_normal());
65 printf(" Login OK: %sno%s (record not valid yet))\n", ansi_highlight_red(), ansi_normal());
69 printf(" Login OK: %sno%s (record not valid anymore))\n", ansi_highlight_red(), ansi_normal());
76 if (r
< 0 && r
!= -ESTALE
) {
78 printf(" Login OK: %sno%s (%m)\n", ansi_highlight_red(), ansi_normal());
82 if (is_nologin_shell(user_record_shell(hr
))) {
83 printf(" Login OK: %sno%s (nologin shell)\n", ansi_highlight_red(), ansi_normal());
87 y
= user_record_ratelimit_next_try(hr
);
88 if (y
!= USEC_INFINITY
&& y
> now(CLOCK_REALTIME
)) {
89 printf(" Login OK: %sno%s (ratelimit)\n", ansi_highlight_red(), ansi_normal());
93 printf(" Login OK: %syes%s\n", ansi_highlight_green(), ansi_normal());
97 r
= user_record_test_password_change_required(hr
);
101 printf(" Password OK: %schange now%s\n", ansi_highlight_yellow(), ansi_normal());
105 printf(" Password OK: %sexpired%s (change now!)\n", ansi_highlight_yellow(), ansi_normal());
109 printf(" Password OK: %sexpired%s (for good)\n", ansi_highlight_red(), ansi_normal());
113 printf(" Password OK: %sexpires soon%s\n", ansi_highlight_yellow(), ansi_normal());
117 printf(" Password OK: %sno timestamp%s\n", ansi_highlight_red(), ansi_normal());
121 printf(" Password OK: %schange not permitted%s\n", ansi_highlight_yellow(), ansi_normal());
125 printf(" Password OK: %slast password change in future%s\n", ansi_highlight_yellow(), ansi_normal());
131 printf(" Password OK: %sno%s (%m)\n", ansi_highlight_yellow(), ansi_normal());
135 printf(" Password OK: %syes%s\n", ansi_highlight_green(), ansi_normal());
139 if (uid_is_valid(hr
->uid
))
140 printf(" UID: " UID_FMT
"\n", hr
->uid
);
141 if (gid_is_valid(hr
->gid
)) {
142 if (show_full_group_info
) {
143 _cleanup_(group_record_unrefp
) GroupRecord
*gr
= NULL
;
145 r
= groupdb_by_gid(hr
->gid
, 0, &gr
);
148 printf(" GID: " GID_FMT
" (unresolvable: %m)\n", hr
->gid
);
150 printf(" GID: " GID_FMT
" (%s)\n", hr
->gid
, gr
->group_name
);
152 printf(" GID: " GID_FMT
"\n", hr
->gid
);
153 } else if (uid_is_valid(hr
->uid
)) /* Show UID as GID if not separately configured */
154 printf(" GID: " GID_FMT
"\n", (gid_t
) hr
->uid
);
156 if (show_full_group_info
) {
157 _cleanup_(userdb_iterator_freep
) UserDBIterator
*iterator
= NULL
;
159 r
= membershipdb_by_user(hr
->user_name
, 0, &iterator
);
162 printf(" Aux. Groups: (can't acquire: %m)\n");
164 const char *prefix
= " Aux. Groups:";
167 _cleanup_free_
char *group
= NULL
;
169 r
= membershipdb_iterator_get(iterator
, NULL
, &group
);
174 printf("%s (can't iterate: %m)\n", prefix
);
178 printf("%s %s\n", prefix
, group
);
184 if (hr
->real_name
&& !streq(hr
->real_name
, hr
->user_name
))
185 printf(" Real Name: %s\n", hr
->real_name
);
187 hd
= user_record_home_directory(hr
);
189 printf(" Directory: %s\n", hd
);
191 storage
= user_record_storage(hr
);
192 if (storage
>= 0) /* Let's be political, and clarify which storage we like, and which we don't. About CIFS we don't complain. */
193 printf(" Storage: %s%s\n", user_storage_to_string(storage
),
194 storage
== USER_LUKS
? " (strong encryption)" :
195 storage
== USER_FSCRYPT
? " (weak encryption)" :
196 IN_SET(storage
, USER_DIRECTORY
, USER_SUBVOLUME
) ? " (no encryption)" : "");
198 ip
= user_record_image_path(hr
);
199 if (ip
&& !streq_ptr(ip
, hd
))
200 printf(" Image Path: %s\n", ip
);
202 b
= user_record_removable(hr
);
204 printf(" Removable: %s\n", yes_no(b
));
206 shell
= user_record_shell(hr
);
208 printf(" Shell: %s\n", shell
);
210 if (hr
->email_address
)
211 printf(" Email: %s\n", hr
->email_address
);
213 printf(" Location: %s\n", hr
->location
);
214 if (hr
->password_hint
)
215 printf(" Passw. Hint: %s\n", hr
->password_hint
);
217 printf(" Icon Name: %s\n", hr
->icon_name
);
220 printf(" Time Zone: %s\n", hr
->time_zone
);
222 if (hr
->preferred_language
)
223 printf(" Language: %s\n", hr
->preferred_language
);
225 if (!strv_isempty(hr
->environment
)) {
228 STRV_FOREACH(i
, hr
->environment
) {
229 printf(i
== hr
->environment
?
230 " Environment: %s\n" :
236 printf(" Locked: %s\n", yes_no(hr
->locked
));
238 if (hr
->not_before_usec
!= UINT64_MAX
)
239 printf(" Not Before: %s\n", FORMAT_TIMESTAMP(hr
->not_before_usec
));
241 if (hr
->not_after_usec
!= UINT64_MAX
)
242 printf(" Not After: %s\n", FORMAT_TIMESTAMP(hr
->not_after_usec
));
244 if (hr
->umask
!= MODE_INVALID
)
245 printf(" UMask: 0%03o\n", hr
->umask
);
247 if (nice_is_valid(hr
->nice_level
))
248 printf(" Nice: %i\n", hr
->nice_level
);
250 for (int j
= 0; j
< _RLIMIT_MAX
; j
++) {
252 printf(" Limit: RLIMIT_%s=%" PRIu64
":%" PRIu64
"\n",
253 rlimit_to_string(j
), (uint64_t) hr
->rlimits
[j
]->rlim_cur
, (uint64_t) hr
->rlimits
[j
]->rlim_max
);
256 if (hr
->tasks_max
!= UINT64_MAX
)
257 printf(" Tasks Max: %" PRIu64
"\n", hr
->tasks_max
);
259 if (hr
->memory_high
!= UINT64_MAX
)
260 printf(" Memory High: %s\n", FORMAT_BYTES(hr
->memory_high
));
262 if (hr
->memory_max
!= UINT64_MAX
)
263 printf(" Memory Max: %s\n", FORMAT_BYTES(hr
->memory_max
));
265 if (hr
->cpu_weight
!= UINT64_MAX
)
266 printf(" CPU Weight: %" PRIu64
"\n", hr
->cpu_weight
);
268 if (hr
->io_weight
!= UINT64_MAX
)
269 printf(" IO Weight: %" PRIu64
"\n", hr
->io_weight
);
271 if (hr
->access_mode
!= MODE_INVALID
)
272 printf(" Access Mode: 0%03oo\n", user_record_access_mode(hr
));
274 if (storage
== USER_LUKS
) {
275 printf("LUKS Discard: online=%s offline=%s\n", yes_no(user_record_luks_discard(hr
)), yes_no(user_record_luks_offline_discard(hr
)));
277 if (!sd_id128_is_null(hr
->luks_uuid
))
278 printf(" LUKS UUID: " SD_ID128_UUID_FORMAT_STR
"\n", SD_ID128_FORMAT_VAL(hr
->luks_uuid
));
279 if (!sd_id128_is_null(hr
->partition_uuid
))
280 printf(" Part UUID: " SD_ID128_UUID_FORMAT_STR
"\n", SD_ID128_FORMAT_VAL(hr
->partition_uuid
));
281 if (!sd_id128_is_null(hr
->file_system_uuid
))
282 printf(" FS UUID: " SD_ID128_UUID_FORMAT_STR
"\n", SD_ID128_FORMAT_VAL(hr
->file_system_uuid
));
284 if (hr
->file_system_type
)
285 printf(" File System: %s\n", user_record_file_system_type(hr
));
288 printf(" LUKS Cipher: %s\n", hr
->luks_cipher
);
289 if (hr
->luks_cipher_mode
)
290 printf(" Cipher Mode: %s\n", hr
->luks_cipher_mode
);
291 if (hr
->luks_volume_key_size
!= UINT64_MAX
)
292 printf(" Volume Key: %" PRIu64
"bit\n", hr
->luks_volume_key_size
* 8);
294 if (hr
->luks_pbkdf_type
)
295 printf(" PBKDF Type: %s\n", hr
->luks_pbkdf_type
);
296 if (hr
->luks_pbkdf_hash_algorithm
)
297 printf(" PBKDF Hash: %s\n", hr
->luks_pbkdf_hash_algorithm
);
298 if (hr
->luks_pbkdf_time_cost_usec
!= UINT64_MAX
)
299 printf(" PBKDF Time: %s\n", FORMAT_TIMESPAN(hr
->luks_pbkdf_time_cost_usec
, 0));
300 if (hr
->luks_pbkdf_memory_cost
!= UINT64_MAX
)
301 printf(" PBKDF Bytes: %s\n", FORMAT_BYTES(hr
->luks_pbkdf_memory_cost
));
303 if (hr
->luks_pbkdf_parallel_threads
!= UINT64_MAX
)
304 printf("PBKDF Thread: %" PRIu64
"\n", hr
->luks_pbkdf_parallel_threads
);
306 } else if (storage
== USER_CIFS
) {
308 if (hr
->cifs_service
)
309 printf("CIFS Service: %s\n", hr
->cifs_service
);
312 if (hr
->cifs_user_name
)
313 printf(" CIFS User: %s\n", user_record_cifs_user_name(hr
));
315 printf(" CIFS Domain: %s\n", hr
->cifs_domain
);
317 if (storage
!= USER_CLASSIC
)
318 printf(" Mount Flags: %s %s %s\n",
319 hr
->nosuid
? "nosuid" : "suid",
320 hr
->nodev
? "nodev" : "dev",
321 hr
->noexec
? "noexec" : "exec");
323 if (hr
->skeleton_directory
)
324 printf(" Skel. Dir.: %s\n", user_record_skeleton_directory(hr
));
326 if (hr
->disk_size
!= UINT64_MAX
)
327 printf(" Disk Size: %s\n", FORMAT_BYTES(hr
->disk_size
));
329 if (hr
->disk_usage
!= UINT64_MAX
) {
330 if (hr
->disk_size
!= UINT64_MAX
) {
333 permille
= (unsigned) DIV_ROUND_UP(hr
->disk_usage
* 1000U, hr
->disk_size
); /* Round up! */
334 printf(" Disk Usage: %s (= %u.%01u%%)\n",
335 FORMAT_BYTES(hr
->disk_usage
),
336 permille
/ 10, permille
% 10);
338 printf(" Disk Usage: %s\n", FORMAT_BYTES(hr
->disk_usage
));
341 if (hr
->disk_free
!= UINT64_MAX
) {
342 if (hr
->disk_size
!= UINT64_MAX
) {
343 const char *color_on
, *color_off
;
346 permille
= (unsigned) ((hr
->disk_free
* 1000U) / hr
->disk_size
); /* Round down! */
348 /* Color the output red or yellow if we are below 10% resp. 25% free. Because 10% and
349 * 25% can be a lot of space still, let's additionally make some absolute
350 * restrictions: 1G and 2G */
351 if (permille
<= 100U &&
352 hr
->disk_free
< 1024U*1024U*1024U /* 1G */) {
353 color_on
= ansi_highlight_red();
354 color_off
= ansi_normal();
355 } else if (permille
<= 250U &&
356 hr
->disk_free
< 2U*1024U*1024U*1024U /* 2G */) {
357 color_on
= ansi_highlight_yellow();
358 color_off
= ansi_normal();
360 color_on
= color_off
= "";
362 printf(" Disk Free: %s%s (= %u.%01u%%)%s\n",
364 FORMAT_BYTES(hr
->disk_free
),
365 permille
/ 10, permille
% 10,
368 printf(" Disk Free: %s\n", FORMAT_BYTES(hr
->disk_free
));
371 if (hr
->disk_floor
!= UINT64_MAX
)
372 printf(" Disk Floor: %s\n", FORMAT_BYTES(hr
->disk_floor
));
374 if (hr
->disk_ceiling
!= UINT64_MAX
)
375 printf("Disk Ceiling: %s\n", FORMAT_BYTES(hr
->disk_ceiling
));
377 if (hr
->good_authentication_counter
!= UINT64_MAX
)
378 printf(" Good Auth.: %" PRIu64
"\n", hr
->good_authentication_counter
);
380 if (hr
->last_good_authentication_usec
!= UINT64_MAX
)
381 printf(" Last Good: %s\n", FORMAT_TIMESTAMP(hr
->last_good_authentication_usec
));
383 if (hr
->bad_authentication_counter
!= UINT64_MAX
)
384 printf(" Bad Auth.: %" PRIu64
"\n", hr
->bad_authentication_counter
);
386 if (hr
->last_bad_authentication_usec
!= UINT64_MAX
)
387 printf(" Last Bad: %s\n", FORMAT_TIMESTAMP(hr
->last_bad_authentication_usec
));
389 t
= user_record_ratelimit_next_try(hr
);
390 if (t
!= USEC_INFINITY
) {
391 usec_t n
= now(CLOCK_REALTIME
);
394 printf(" Next Try: anytime\n");
396 printf(" Next Try: %sin %s%s\n",
397 ansi_highlight_red(),
398 FORMAT_TIMESPAN(t
- n
, USEC_PER_SEC
),
402 if (storage
!= USER_CLASSIC
)
403 printf(" Auth. Limit: %" PRIu64
" attempts per %s\n", user_record_ratelimit_burst(hr
),
404 FORMAT_TIMESPAN(user_record_ratelimit_interval_usec(hr
), 0));
406 if (hr
->enforce_password_policy
>= 0)
407 printf(" Passwd Pol.: %s\n", yes_no(hr
->enforce_password_policy
));
409 if (hr
->password_change_min_usec
!= UINT64_MAX
||
410 hr
->password_change_max_usec
!= UINT64_MAX
||
411 hr
->password_change_warn_usec
!= UINT64_MAX
||
412 hr
->password_change_inactive_usec
!= UINT64_MAX
) {
414 printf(" Passwd Chg.:");
416 if (hr
->password_change_min_usec
!= UINT64_MAX
) {
417 printf(" min %s", FORMAT_TIMESPAN(hr
->password_change_min_usec
, 0));
419 if (hr
->password_change_max_usec
!= UINT64_MAX
)
423 if (hr
->password_change_max_usec
!= UINT64_MAX
)
424 printf(" max %s", FORMAT_TIMESPAN(hr
->password_change_max_usec
, 0));
426 if (hr
->password_change_warn_usec
!= UINT64_MAX
)
427 printf("/warn %s", FORMAT_TIMESPAN(hr
->password_change_warn_usec
, 0));
429 if (hr
->password_change_inactive_usec
!= UINT64_MAX
)
430 printf("/inactive %s", FORMAT_TIMESPAN(hr
->password_change_inactive_usec
, 0));
435 if (hr
->password_change_now
>= 0)
436 printf("Pas. Ch. Now: %s\n", yes_no(hr
->password_change_now
));
438 if (hr
->drop_caches
>= 0 || user_record_drop_caches(hr
))
439 printf(" Drop Caches: %s\n", yes_no(user_record_drop_caches(hr
)));
441 if (!strv_isempty(hr
->ssh_authorized_keys
))
442 printf("SSH Pub. Key: %zu\n", strv_length(hr
->ssh_authorized_keys
));
444 if (!strv_isempty(hr
->pkcs11_token_uri
)) {
447 STRV_FOREACH(i
, hr
->pkcs11_token_uri
)
448 printf(i
== hr
->pkcs11_token_uri
?
449 "PKCS11 Token: %s\n" :
453 if (hr
->n_fido2_hmac_credential
> 0)
454 printf(" FIDO2 Token: %zu\n", hr
->n_fido2_hmac_credential
);
456 if (!strv_isempty(hr
->recovery_key_type
))
457 printf("Recovery Key: %zu\n", strv_length(hr
->recovery_key_type
));
459 k
= strv_length(hr
->hashed_password
);
461 printf(" Passwords: %snone%s\n",
462 user_record_disposition(hr
) == USER_REGULAR
? ansi_highlight_yellow() : ansi_normal(), ansi_normal());
464 printf(" Passwords: %zu\n", k
);
466 if (hr
->signed_locally
>= 0)
467 printf(" Local Sig.: %s\n", yes_no(hr
->signed_locally
));
469 if (hr
->stop_delay_usec
!= UINT64_MAX
)
470 printf(" Stop Delay: %s\n", FORMAT_TIMESPAN(hr
->stop_delay_usec
, 0));
472 if (hr
->auto_login
>= 0)
473 printf("Autom. Login: %s\n", yes_no(hr
->auto_login
));
475 if (hr
->kill_processes
>= 0)
476 printf(" Kill Proc.: %s\n", yes_no(hr
->kill_processes
));
479 printf(" Service: %s\n", hr
->service
);
482 void group_record_show(GroupRecord
*gr
, bool show_full_user_info
) {
485 printf(" Group name: %s\n",
486 group_record_group_name_and_realm(gr
));
488 printf(" Disposition: %s\n", user_disposition_to_string(group_record_disposition(gr
)));
490 if (gr
->last_change_usec
!= USEC_INFINITY
)
491 printf(" Last Change: %s\n", FORMAT_TIMESTAMP(gr
->last_change_usec
));
493 if (gid_is_valid(gr
->gid
))
494 printf(" GID: " GID_FMT
"\n", gr
->gid
);
496 if (show_full_user_info
) {
497 _cleanup_(userdb_iterator_freep
) UserDBIterator
*iterator
= NULL
;
499 r
= membershipdb_by_group(gr
->group_name
, 0, &iterator
);
502 printf(" Members: (can't acquire: %m)");
504 const char *prefix
= " Members:";
507 _cleanup_free_
char *user
= NULL
;
509 r
= membershipdb_iterator_get(iterator
, &user
, NULL
);
514 printf("%s (can't iterate: %m\n", prefix
);
518 printf("%s %s\n", prefix
, user
);
523 const char *prefix
= " Members:";
526 STRV_FOREACH(i
, gr
->members
) {
527 printf("%s %s\n", prefix
, *i
);
532 if (!strv_isempty(gr
->administrators
)) {
533 const char *prefix
= " Admins:";
536 STRV_FOREACH(i
, gr
->administrators
) {
537 printf("%s %s\n", prefix
, *i
);
542 if (gr
->description
&& !streq(gr
->description
, gr
->group_name
))
543 printf(" Description: %s\n", gr
->description
);
545 if (!strv_isempty(gr
->hashed_password
))
546 printf(" Passwords: %zu\n", strv_length(gr
->hashed_password
));
549 printf(" Service: %s\n", gr
->service
);