]>
git.ipfire.org Git - thirdparty/glibc.git/blob - inet/rcmd.c
2 * Copyright (C) 1998 WIDE Project.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * Copyright (c) 1983, 1993, 1994
31 * The Regents of the University of California. All rights reserved.
33 * Redistribution and use in source and binary forms, with or without
34 * modification, are permitted provided that the following conditions
36 * 1. Redistributions of source code must retain the above copyright
37 * notice, this list of conditions and the following disclaimer.
38 * 2. Redistributions in binary form must reproduce the above copyright
39 * notice, this list of conditions and the following disclaimer in the
40 * documentation and/or other materials provided with the distribution.
41 * 4. Neither the name of the University nor the names of its contributors
42 * may be used to endorse or promote products derived from this software
43 * without specific prior written permission.
45 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
46 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
47 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
48 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
49 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
50 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
51 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
52 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
53 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
54 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
58 #if defined(LIBC_SCCS) && !defined(lint)
59 static char sccsid
[] = "@(#)rcmd.c 8.3 (Berkeley) 3/26/94";
60 #endif /* LIBC_SCCS and not lint */
62 #include <sys/param.h>
64 #include <sys/socket.h>
67 #include <netinet/in.h>
68 #include <arpa/inet.h>
78 #include <stdio_ext.h>
88 int __ivaliduser (FILE *, u_int32_t
, const char *, const char *);
89 static int __validuser2_sa (FILE *, struct sockaddr
*, size_t,
90 const char *, const char *, const char *);
91 static int ruserok2_sa (struct sockaddr
*ra
, size_t ralen
,
92 int superuser
, const char *ruser
,
93 const char *luser
, const char *rhost
);
94 static int ruserok_sa (struct sockaddr
*ra
, size_t ralen
,
95 int superuser
, const char *ruser
,
97 int iruserok_af (const void *raddr
, int superuser
, const char *ruser
,
98 const char *luser
, sa_family_t af
);
99 int iruserok (u_int32_t raddr
, int superuser
, const char *ruser
,
102 static char ahostbuf
[NI_MAXHOST
];
105 rcmd_af(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
, af
)
108 const char *locuser
, *remuser
, *cmd
;
112 char paddr
[INET6_ADDRSTRLEN
];
113 struct addrinfo hints
, *res
, *ai
;
114 struct sockaddr_storage from
;
115 struct pollfd pfd
[2];
118 int s
, lport
, timo
, error
;
124 if (af
!= AF_INET
&& af
!= AF_INET6
&& af
!= AF_UNSPEC
)
126 __set_errno (EAFNOSUPPORT
);
132 memset(&hints
, '\0', sizeof(hints
));
133 hints
.ai_flags
= AI_CANONNAME
;
134 hints
.ai_family
= af
;
135 hints
.ai_socktype
= SOCK_STREAM
;
136 (void)__snprintf(num
, sizeof(num
), "%d", ntohs(rport
));
137 error
= getaddrinfo(*ahost
, num
, &hints
, &res
);
140 if (_IO_fwide (stderr
, 0) > 0)
141 __fwprintf(stderr
, L
"rcmd: getaddrinfo: %s\n",
142 gai_strerror(error
));
145 fprintf(stderr
, "rcmd: getaddrinfo: %s\n",
146 gai_strerror(error
));
150 pfd
[0].events
= POLLIN
;
151 pfd
[1].events
= POLLIN
;
153 if (res
->ai_canonname
){
154 strncpy(ahostbuf
, res
->ai_canonname
, sizeof(ahostbuf
));
155 ahostbuf
[sizeof(ahostbuf
)-1] = '\0';
162 oldmask
= __sigblock(sigmask(SIGURG
));
163 for (timo
= 1, lport
= IPPORT_RESERVED
- 1;;) {
166 s
= rresvport_af(&lport
, ai
->ai_family
);
168 if (errno
== EAGAIN
) {
170 if (_IO_fwide (stderr
, 0) > 0)
171 __fwprintf(stderr
, L
"%s",
172 _("rcmd: socket: All ports in use\n"));
175 fputs(_("rcmd: socket: All ports in use\n"),
179 if (_IO_fwide (stderr
, 0) > 0)
181 L
"rcmd: socket: %m\n");
184 fprintf(stderr
, "rcmd: socket: %m\n");
186 __sigsetmask(oldmask
);
190 __fcntl(s
, F_SETOWN
, pid
);
191 if (__connect(s
, ai
->ai_addr
, ai
->ai_addrlen
) >= 0)
194 if (errno
== EADDRINUSE
) {
198 if (errno
== ECONNREFUSED
)
200 if (ai
->ai_next
!= NULL
) {
204 getnameinfo(ai
->ai_addr
, ai
->ai_addrlen
,
205 paddr
, sizeof(paddr
),
209 if (__asprintf (&buf
, _("connect to address %s: "),
213 if (_IO_fwide (stderr
, 0) > 0)
214 __fwprintf(stderr
, L
"%s", buf
);
220 __set_errno (oerrno
);
223 getnameinfo(ai
->ai_addr
, ai
->ai_addrlen
,
224 paddr
, sizeof(paddr
),
227 if (__asprintf (&buf
, _("Trying %s...\n"), paddr
) >= 0)
230 if (_IO_fwide (stderr
, 0) > 0)
231 __fwprintf (stderr
, L
"%s", buf
);
239 if (refused
&& timo
<= 16) {
248 if (_IO_fwide (stderr
, 0) > 0)
249 (void)__fwprintf(stderr
, L
"%s: %s\n", *ahost
,
251 errbuf
, sizeof (errbuf
)));
254 (void)fprintf(stderr
, "%s: %s\n", *ahost
,
256 errbuf
, sizeof (errbuf
)));
257 __sigsetmask(oldmask
);
266 int s2
= rresvport_af(&lport
, ai
->ai_family
), s3
;
267 socklen_t len
= ai
->ai_addrlen
;
272 (void)__snprintf(num
, sizeof(num
), "%d", lport
);
273 if (__write(s
, num
, strlen(num
)+1) != (ssize_t
)strlen(num
)+1) {
276 if (__asprintf (&buf
, _("\
277 rcmd: write (setting up stderr): %m\n")) >= 0)
280 if (_IO_fwide (stderr
, 0) > 0)
281 __fwprintf(stderr
, L
"%s", buf
);
293 if (__poll (pfd
, 2, -1) < 1 || (pfd
[1].revents
& POLLIN
) == 0){
297 && __asprintf(&buf
, _("\
298 rcmd: poll (setting up stderr): %m\n")) >= 0)
300 && __asprintf(&buf
, _("\
301 poll: protocol failure in circuit setup\n")) >= 0))
304 if (_IO_fwide (stderr
, 0) > 0)
305 __fwprintf (stderr
, L
"%s", buf
);
314 s3
= accept(s2
, (struct sockaddr
*)&from
, &len
);
315 switch (from
.ss_family
) {
317 rport
= ntohs(((struct sockaddr_in
*)&from
)->sin_port
);
320 rport
= ntohs(((struct sockaddr_in6
*)&from
)->sin6_port
);
329 if (_IO_fwide (stderr
, 0) > 0)
330 (void)__fwprintf(stderr
,
331 L
"rcmd: accept: %m\n");
334 (void)fprintf(stderr
,
335 "rcmd: accept: %m\n");
341 if (rport
>= IPPORT_RESERVED
|| rport
< IPPORT_RESERVED
/ 2){
344 if (__asprintf(&buf
, _("\
345 socket: protocol failure in circuit setup\n")) >= 0)
348 if (_IO_fwide (stderr
, 0) > 0)
349 __fwprintf (stderr
, L
"%s", buf
);
358 (void)__write(s
, locuser
, strlen(locuser
)+1);
359 (void)__write(s
, remuser
, strlen(remuser
)+1);
360 (void)__write(s
, cmd
, strlen(cmd
)+1);
361 n
= __read(s
, &c
, 1);
366 && __asprintf(&buf
, _("rcmd: %s: short read"),
369 && __asprintf(&buf
, "rcmd: %s: %m\n", *ahost
) >= 0))
372 if (_IO_fwide (stderr
, 0) > 0)
373 __fwprintf (stderr
, L
"%s", buf
);
382 while (__read(s
, &c
, 1) == 1) {
383 (void)__write(STDERR_FILENO
, &c
, 1);
389 __sigsetmask(oldmask
);
394 (void)__close(*fd2p
);
397 __sigsetmask(oldmask
);
401 libc_hidden_def (rcmd_af
)
404 rcmd(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
)
407 const char *locuser
, *remuser
, *cmd
;
410 return rcmd_af (ahost
, rport
, locuser
, remuser
, cmd
, fd2p
, AF_INET
);
414 rresvport_af(alport
, family
)
418 struct sockaddr_storage ss
;
425 len
= sizeof(struct sockaddr_in
);
426 sport
= &((struct sockaddr_in
*)&ss
)->sin_port
;
429 len
= sizeof(struct sockaddr_in6
);
430 sport
= &((struct sockaddr_in6
*)&ss
)->sin6_port
;
433 __set_errno (EAFNOSUPPORT
);
436 s
= __socket(family
, SOCK_STREAM
, 0);
440 memset (&ss
, '\0', sizeof(ss
));
444 ss
.ss_family
= family
;
447 *sport
= htons((uint16_t) *alport
);
448 if (__bind(s
, (struct sockaddr
*)&ss
, len
) >= 0)
450 if (errno
!= EADDRINUSE
) {
455 if (*alport
== IPPORT_RESERVED
/2)
459 __set_errno (EAGAIN
);
462 libc_hidden_def (rresvport_af
)
468 return rresvport_af(alport
, AF_INET
);
471 int __check_rhosts_file
= 1;
475 ruserok_af(rhost
, superuser
, ruser
, luser
, af
)
476 const char *rhost
, *ruser
, *luser
;
480 struct addrinfo hints
, *res
, *res0
;
484 memset (&hints
, '\0', sizeof(hints
));
485 hints
.ai_family
= af
;
486 gai
= getaddrinfo(rhost
, NULL
, &hints
, &res0
);
490 for (res
=res0
; res
; res
=res
->ai_next
)
491 if (ruserok2_sa(res
->ai_addr
, res
->ai_addrlen
,
492 superuser
, ruser
, luser
, rhost
) == 0){
499 libc_hidden_def (ruserok_af
)
502 ruserok(rhost
, superuser
, ruser
, luser
)
503 const char *rhost
, *ruser
, *luser
;
506 return ruserok_af(rhost
, superuser
, ruser
, luser
, AF_INET
);
509 /* Extremely paranoid file open function. */
511 iruserfopen (const char *file
, uid_t okuser
)
517 /* If not a regular file, if owned by someone other than user or
518 root, if writeable by anyone but the owner, or if hardlinked
521 if (__lxstat64 (_STAT_VER
, file
, &st
))
522 cp
= _("lstat failed");
523 else if (!S_ISREG (st
.st_mode
))
524 cp
= _("not regular file");
527 res
= fopen (file
, "r");
529 cp
= _("cannot open");
530 else if (__fxstat64 (_STAT_VER
, fileno (res
), &st
) < 0)
531 cp
= _("fstat failed");
532 else if (st
.st_uid
&& st
.st_uid
!= okuser
)
534 else if (st
.st_mode
& (S_IWGRP
|S_IWOTH
))
535 cp
= _("writeable by other than owner");
536 else if (st
.st_nlink
> 1)
537 cp
= _("hard linked somewhere");
540 /* If there were any problems, quit. */
549 /* No threads use this stream. */
550 __fsetlocking (res
, FSETLOCKING_BYCALLER
);
556 * New .rhosts strategy: We are passed an ip address. We spin through
557 * hosts.equiv and .rhosts looking for a match. When the .rhosts only
558 * has ip addresses, we don't have to trust a nameserver. When it
559 * contains hostnames, we spin through the list of addresses the nameserver
560 * gives us and look for a match.
562 * Returns 0 if ok, -1 if not ok.
565 ruserok2_sa (ra
, ralen
, superuser
, ruser
, luser
, rhost
)
569 const char *ruser
, *luser
, *rhost
;
575 hostf
= iruserfopen (_PATH_HEQUIV
, 0);
579 isbad
= __validuser2_sa (hostf
, ra
, ralen
, luser
, ruser
, rhost
);
586 if (__check_rhosts_file
|| superuser
)
589 struct passwd pwdbuf
, *pwd
;
591 size_t buflen
= __sysconf (_SC_GETPW_R_SIZE_MAX
);
592 char *buffer
= __alloca (buflen
);
595 if (__getpwnam_r (luser
, &pwdbuf
, buffer
, buflen
, &pwd
) != 0
599 dirlen
= strlen (pwd
->pw_dir
);
600 pbuf
= alloca (dirlen
+ sizeof "/.rhosts");
601 __mempcpy (__mempcpy (pbuf
, pwd
->pw_dir
, dirlen
),
602 "/.rhosts", sizeof "/.rhosts");
604 /* Change effective uid while reading .rhosts. If root and
605 reading an NFS mounted file system, can't read files that
606 are protected read/write owner only. */
608 seteuid (pwd
->pw_uid
);
609 hostf
= iruserfopen (pbuf
, pwd
->pw_uid
);
613 isbad
= __validuser2_sa (hostf
, ra
, ralen
, luser
, ruser
, rhost
);
623 * ruserok_sa() is now discussed on ipng, so
624 * currently disabled for external use
626 static int ruserok_sa(ra
, ralen
, superuser
, ruser
, luser
)
630 const char *ruser
, *luser
;
632 return ruserok2_sa(ra
, ralen
, superuser
, ruser
, luser
, "-");
635 /* This is the exported version. */
637 iruserok_af (raddr
, superuser
, ruser
, luser
, af
)
640 const char *ruser
, *luser
;
643 struct sockaddr_storage ra
;
646 memset (&ra
, '\0', sizeof(ra
));
649 ((struct sockaddr_in
*)&ra
)->sin_family
= AF_INET
;
650 memcpy (&(((struct sockaddr_in
*)&ra
)->sin_addr
), raddr
,
651 sizeof(struct in_addr
));
652 ralen
= sizeof(struct sockaddr_in
);
655 ((struct sockaddr_in6
*)&ra
)->sin6_family
= AF_INET6
;
656 memcpy (&(((struct sockaddr_in6
*)&ra
)->sin6_addr
), raddr
,
657 sizeof(struct in6_addr
));
658 ralen
= sizeof(struct sockaddr_in6
);
663 return ruserok_sa ((struct sockaddr
*)&ra
, ralen
, superuser
, ruser
, luser
);
666 iruserok (raddr
, superuser
, ruser
, luser
)
669 const char *ruser
, *luser
;
671 return iruserok_af (&raddr
, superuser
, ruser
, luser
, AF_INET
);
676 * Don't make static, used by lpd(8).
678 * This function is not used anymore. It is only present because lpd(8)
679 * calls it (!?!). We simply call __invaliduser2() with an illegal rhost
680 * argument. This means that netgroups won't work in .rhost/hosts.equiv
681 * files. If you want lpd to work with netgroups, fix lpd to use ruserok()
683 * Returns 0 if ok, -1 if not ok.
686 __ivaliduser(hostf
, raddr
, luser
, ruser
)
689 const char *luser
, *ruser
;
691 struct sockaddr_in ra
;
692 memset(&ra
, '\0', sizeof(ra
));
693 ra
.sin_family
= AF_INET
;
694 ra
.sin_addr
.s_addr
= raddr
;
695 return __validuser2_sa(hostf
, (struct sockaddr
*)&ra
, sizeof(ra
),
700 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
703 __checkhost_sa (struct sockaddr
*ra
, size_t ralen
, char *lhost
,
706 struct addrinfo hints
, *res0
, *res
;
707 char raddr
[INET6_ADDRSTRLEN
];
709 int negate
=1; /* Multiply return with this to get -1 instead of 1 */
711 /* Check nis netgroup. */
712 if (strncmp ("+@", lhost
, 2) == 0)
713 return innetgr (&lhost
[2], rhost
, NULL
, NULL
);
715 if (strncmp ("-@", lhost
, 2) == 0)
716 return -innetgr (&lhost
[2], rhost
, NULL
, NULL
);
719 if (strncmp ("-", lhost
,1) == 0) {
722 } else if (strcmp ("+",lhost
) == 0) {
723 return 1; /* asking for trouble, but ok.. */
726 /* Try for raw ip address first. */
728 if (getnameinfo(ra
, ralen
,
729 raddr
, sizeof(raddr
), NULL
, 0,
731 && strcmp(raddr
, lhost
) == 0)
734 /* Better be a hostname. */
736 memset(&hints
, '\0', sizeof(hints
));
737 hints
.ai_family
= ra
->sa_family
;
738 if (getaddrinfo(lhost
, NULL
, &hints
, &res0
) == 0){
739 /* Spin through ip addresses. */
740 for (res
= res0
; res
; res
= res
->ai_next
)
742 if (res
->ai_family
== ra
->sa_family
743 && !memcmp(res
->ai_addr
, ra
, res
->ai_addrlen
))
751 return negate
* match
;
754 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
757 __icheckuser (const char *luser
, const char *ruser
)
760 luser is user entry from .rhosts/hosts.equiv file
761 ruser is user id on remote host
765 if (strncmp ("+@", luser
, 2) == 0)
766 return innetgr (&luser
[2], NULL
, ruser
, NULL
);
768 if (strncmp ("-@", luser
,2) == 0)
769 return -innetgr (&luser
[2], NULL
, ruser
, NULL
);
772 if (strncmp ("-", luser
, 1) == 0)
773 return -(strcmp (&luser
[1], ruser
) == 0);
776 if (strcmp ("+", luser
) == 0)
779 /* simple string match */
780 return strcmp (ruser
, luser
) == 0;
784 * Returns 1 for blank lines (or only comment lines) and 0 otherwise
789 while (*p
&& isspace (*p
)) {
793 return (*p
== '\0' || *p
== '#') ? 1 : 0 ;
797 * Returns 0 if positive match, -1 if _not_ ok.
800 __validuser2_sa(hostf
, ra
, ralen
, luser
, ruser
, rhost
)
804 const char *luser
, *ruser
, *rhost
;
806 register const char *user
;
813 while (__getline (&buf
, &bufsize
, hostf
) > 0) {
814 buf
[bufsize
- 1] = '\0'; /* Make sure it's terminated. */
817 /* Skip empty or comment lines */
822 /* Skip lines that are too long. */
823 if (strchr (p
, '\n') == NULL
) {
824 int ch
= getc_unlocked (hostf
);
826 while (ch
!= '\n' && ch
!= EOF
)
827 ch
= getc_unlocked (hostf
);
831 for (;*p
&& !isspace(*p
); ++p
) {
835 /* Next we want to find the permitted name for the remote user. */
836 if (*p
== ' ' || *p
== '\t') {
837 /* <nul> terminate hostname and skip spaces */
838 for (*p
++='\0'; *p
&& isspace (*p
); ++p
);
840 user
= p
; /* this is the user's name */
841 while (*p
&& !isspace (*p
))
842 ++p
; /* find end of user's name */
846 *p
= '\0'; /* <nul> terminate username (+host?) */
848 /* buf -> host(?) ; user -> username(?) */
850 /* First check host part */
851 hcheck
= __checkhost_sa (ra
, ralen
, buf
, rhost
);
857 /* Then check user part */
861 ucheck
= __icheckuser (user
, ruser
);
863 /* Positive 'host user' match? */
869 /* Negative 'host -user' match? */
873 /* Neither, go on looking for match */