Einige Dateien hatten perm:755...

[people/pmueller/ipfire-2.x.git] / src / misc-progs / setuid.h

/* SmoothWall helper program - header file\r
 *\r
 * This program is distributed under the terms of the GNU General Public\r
 * Licence.  See the file COPYING for details.\r
 * Simple header file for all setuid progs.\r
 * \r
 * $Id: setuid.h,v 1.4.2.4 2005/11/20 23:20:13 franck78 Exp $\r
 * \r
 */\r
\r
#ifndef SETUID_H\r
#define SETUID_H 1\r
\r
#include <stdlib.h>\r
#include <sys/types.h>\r
\r
/* As nothing in setuid.c uses STRING_SIZE specifically there's no real reason\r
 * to redefine it if it already is set */\r
#ifndef STRING_SIZE\r
#define STRING_SIZE 256\r
#endif\r
#define LETTERS "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"\r
#define NUMBERS "0123456789"\r
#define LETTERS_NUMBERS LETTERS NUMBERS\r
#define IP_NUMBERS "./" NUMBERS\r
#define PORT_NUMBERS ":-" NUMBERS\r
#define VALID_FQDN LETTERS_NUMBERS ".-"\r
\r
\r
#define VALID_IP(ip) (strlen(ip) > 6 \\r
                   && strlen(ip) < 16 \\r
                   && strspn(ip, NUMBERS ".") == strlen(ip))\r
\r
#define VALID_IP_AND_MASK(ip) (strlen(ip) > 6 \\r
                            && strlen(ip) < 32 \\r
                            && strspn(ip, IP_NUMBERS) == strlen(ip))\r
\r
#define VALID_PORT(port) (strlen(port) \\r
                       && strlen(port) < 6 \\r
                       && strspn(port, NUMBERS) == strlen(port))\r
\r
#define VALID_PORT_RANGE(port) (strlen(port) \\r
                             && strlen(port) < 12 \\r
                             && strspn(port, PORT_NUMBERS) == strlen(port))\r
\r
#define VALID_SHORT_MASK(ip) (strlen(ip) > 1 \\r
                             && strlen(ip) < 3 \\r
                             && strspn(ip, NUMBERS) == strlen(ip))\r
\r
/* Can't find any info on valid characters/length hopefully these are\r
 * reasonable guesses */\r
#define VALID_DEVICE(dev) (strlen(dev) \\r
                        && strlen(dev) < 16 \\r
                        && strspn(dev, LETTERS_NUMBERS ":.") == strlen(dev))\r
\r
/* Again, can't find any hard and fast rules for protocol names, these\r
 * restrictions are based on the keywords currently listed in\r
 * <http://www.iana.org/assignments/protocol-numbers>\r
 * though currently the ipcop cgis will only pass tcp, udp or gre anyway */\r
#define VALID_PROTOCOL(prot) (strlen(prot) \\r
                          &&  strlen(prot) <16 \\r
                          &&  strspn(prot, LETTERS_NUMBERS "-") == strlen(prot))\r
\r
extern char * trusted_env[4];\r
\r
int system_core(char* command, uid_t uid, gid_t gid, char *error);\r
int safe_system(char* command);\r
int unpriv_system(char* command, uid_t uid, gid_t gid);\r
size_t strlcat(char *dst, const char *src, size_t len);\r
int initsetuid(void);\r
\r
/* check whether a file exists */\r
int file_exists(const char *fname);	    \r
int file_exists_w(const char *fname); //wildcard filename test	    \r
\r
// Backup restore\r
#define MOUNTPOINT "/home/httpd/html/backup"\r
#define BACKUP_KEY CONFIG_ROOT"/backup/backup.key"\r
\r
/* defines for config create/restore return status*/\r
#define ERR_ANY      1   // unspecified error\r
#define ERR_KEY      2   // error creating key file\r
#define ERR_TAR      3   // error creating .tar\r
#define ERR_GZ       4   // error creating .tar.gz\r
#define ERR_ENCRYPT  5   // error creating .dat\r
#define ERR_DECRYPT  6   // error decrypting .dat file\r
#define ERR_UNTARTST 7   // error (test) untarring .tar.gz\r
#define ERR_UNTAR    8   // error (real) untarring .tar.gz\r
#define ERR_DAT      9   // missing .dat file\r
\r
#endif\r