1*7c478bd9Sstevel@tonic-gate /*
2*7c478bd9Sstevel@tonic-gate * CDDL HEADER START
3*7c478bd9Sstevel@tonic-gate *
4*7c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*7c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*7c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*7c478bd9Sstevel@tonic-gate * with the License.
8*7c478bd9Sstevel@tonic-gate *
9*7c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*7c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*7c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
12*7c478bd9Sstevel@tonic-gate * and limitations under the License.
13*7c478bd9Sstevel@tonic-gate *
14*7c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*7c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*7c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*7c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*7c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*7c478bd9Sstevel@tonic-gate *
20*7c478bd9Sstevel@tonic-gate * CDDL HEADER END
21*7c478bd9Sstevel@tonic-gate */
22*7c478bd9Sstevel@tonic-gate /*
23*7c478bd9Sstevel@tonic-gate * Copyright 2003 Sun Microsystems, Inc. All rights reserved.
24*7c478bd9Sstevel@tonic-gate * Use is subject to license terms.
25*7c478bd9Sstevel@tonic-gate */
26*7c478bd9Sstevel@tonic-gate
27*7c478bd9Sstevel@tonic-gate #include <errno.h>
28*7c478bd9Sstevel@tonic-gate #include <sys/types.h>
29*7c478bd9Sstevel@tonic-gate #include <nfs/nfs_sec.h>
30*7c478bd9Sstevel@tonic-gate #include <strings.h>
31*7c478bd9Sstevel@tonic-gate #include "libfsmgt.h"
32*7c478bd9Sstevel@tonic-gate
33*7c478bd9Sstevel@tonic-gate /*
34*7c478bd9Sstevel@tonic-gate * Public methods
35*7c478bd9Sstevel@tonic-gate */
36*7c478bd9Sstevel@tonic-gate
37*7c478bd9Sstevel@tonic-gate /*
38*7c478bd9Sstevel@tonic-gate * Method: nfssec_free_secmode_list
39*7c478bd9Sstevel@tonic-gate *
40*7c478bd9Sstevel@tonic-gate * Description: Frees the space allocated for the security mode list array.
41*7c478bd9Sstevel@tonic-gate *
42*7c478bd9Sstevel@tonic-gate * Parameters:
43*7c478bd9Sstevel@tonic-gate * - char **seclist - the array to be freed.
44*7c478bd9Sstevel@tonic-gate * - int num_elements - the number of elements in the array.
45*7c478bd9Sstevel@tonic-gate *
46*7c478bd9Sstevel@tonic-gate * Returns:
47*7c478bd9Sstevel@tonic-gate * - Nothing
48*7c478bd9Sstevel@tonic-gate */
49*7c478bd9Sstevel@tonic-gate void
nfssec_free_secmode_list(char ** seclist,int num_elements)50*7c478bd9Sstevel@tonic-gate nfssec_free_secmode_list(char **seclist, int num_elements)
51*7c478bd9Sstevel@tonic-gate {
52*7c478bd9Sstevel@tonic-gate fileutil_free_string_array(seclist, num_elements);
53*7c478bd9Sstevel@tonic-gate } /* nfssec_free_secmode_list */
54*7c478bd9Sstevel@tonic-gate
55*7c478bd9Sstevel@tonic-gate /*
56*7c478bd9Sstevel@tonic-gate * Method: nfssec_get_default_secmode
57*7c478bd9Sstevel@tonic-gate *
58*7c478bd9Sstevel@tonic-gate * Description: Retrieves the default security mode for NFS.
59*7c478bd9Sstevel@tonic-gate *
60*7c478bd9Sstevel@tonic-gate * Parameters:
61*7c478bd9Sstevel@tonic-gate * - int *errp - the error indicator. This will be set to a non-zero
62*7c478bd9Sstevel@tonic-gate * value upon error.
63*7c478bd9Sstevel@tonic-gate *
64*7c478bd9Sstevel@tonic-gate * Returns:
65*7c478bd9Sstevel@tonic-gate * - char * - the NFS security mode name.
66*7c478bd9Sstevel@tonic-gate * - NULL if an error occurred.
67*7c478bd9Sstevel@tonic-gate *
68*7c478bd9Sstevel@tonic-gate * Note: Caller must free the space allocated for the return value.
69*7c478bd9Sstevel@tonic-gate */
70*7c478bd9Sstevel@tonic-gate char *
nfssec_get_default_secmode(int * errp)71*7c478bd9Sstevel@tonic-gate nfssec_get_default_secmode(int *errp)
72*7c478bd9Sstevel@tonic-gate {
73*7c478bd9Sstevel@tonic-gate seconfig_t secp, defsecp;
74*7c478bd9Sstevel@tonic-gate char *ret_val;
75*7c478bd9Sstevel@tonic-gate int err = 0;
76*7c478bd9Sstevel@tonic-gate
77*7c478bd9Sstevel@tonic-gate *errp = 0;
78*7c478bd9Sstevel@tonic-gate err = nfs_getseconfig_default(&secp);
79*7c478bd9Sstevel@tonic-gate if (err != 0) {
80*7c478bd9Sstevel@tonic-gate *errp = err;
81*7c478bd9Sstevel@tonic-gate return (NULL);
82*7c478bd9Sstevel@tonic-gate }
83*7c478bd9Sstevel@tonic-gate
84*7c478bd9Sstevel@tonic-gate err = nfs_getseconfig_bynumber(secp.sc_nfsnum, &defsecp);
85*7c478bd9Sstevel@tonic-gate if (err != 0) {
86*7c478bd9Sstevel@tonic-gate *errp = err;
87*7c478bd9Sstevel@tonic-gate return (NULL);
88*7c478bd9Sstevel@tonic-gate }
89*7c478bd9Sstevel@tonic-gate
90*7c478bd9Sstevel@tonic-gate ret_val = strdup(defsecp.sc_name);
91*7c478bd9Sstevel@tonic-gate if (ret_val == NULL) {
92*7c478bd9Sstevel@tonic-gate *errp = ENOMEM;
93*7c478bd9Sstevel@tonic-gate return (NULL);
94*7c478bd9Sstevel@tonic-gate }
95*7c478bd9Sstevel@tonic-gate
96*7c478bd9Sstevel@tonic-gate return (ret_val);
97*7c478bd9Sstevel@tonic-gate } /* nfssec_get_default_secmode */
98*7c478bd9Sstevel@tonic-gate
99*7c478bd9Sstevel@tonic-gate /*
100*7c478bd9Sstevel@tonic-gate * Method: nfssec_get_nfs_secmode_list
101*7c478bd9Sstevel@tonic-gate *
102*7c478bd9Sstevel@tonic-gate * Description: Retrieves a list of the supported NFS security modes from
103*7c478bd9Sstevel@tonic-gate * /etc/nfssec.conf.
104*7c478bd9Sstevel@tonic-gate *
105*7c478bd9Sstevel@tonic-gate * Parameters:
106*7c478bd9Sstevel@tonic-gate * - int *num_elements - integer pointer used to keep track of the number
107*7c478bd9Sstevel@tonic-gate * of elements in the array.
108*7c478bd9Sstevel@tonic-gate * - int *errp - the error indicator. This will be set to a non-zero
109*7c478bd9Sstevel@tonic-gate * value upon error.
110*7c478bd9Sstevel@tonic-gate *
111*7c478bd9Sstevel@tonic-gate * Returns:
112*7c478bd9Sstevel@tonic-gate * - char ** - The array containing the supported security mode names as
113*7c478bd9Sstevel@tonic-gate * elements.
114*7c478bd9Sstevel@tonic-gate * - NULL if an error occurred.
115*7c478bd9Sstevel@tonic-gate *
116*7c478bd9Sstevel@tonic-gate * Note: The space allocated for the return array must be freed by the caller
117*7c478bd9Sstevel@tonic-gate * using nfssec_free_secmode_list.
118*7c478bd9Sstevel@tonic-gate */
119*7c478bd9Sstevel@tonic-gate char **
nfssec_get_nfs_secmode_list(int * num_elements,int * errp)120*7c478bd9Sstevel@tonic-gate nfssec_get_nfs_secmode_list(int *num_elements, int *errp)
121*7c478bd9Sstevel@tonic-gate {
122*7c478bd9Sstevel@tonic-gate FILE *fp;
123*7c478bd9Sstevel@tonic-gate char **seclist = NULL;
124*7c478bd9Sstevel@tonic-gate int err = 0;
125*7c478bd9Sstevel@tonic-gate
126*7c478bd9Sstevel@tonic-gate *errp = 0;
127*7c478bd9Sstevel@tonic-gate if ((fp = fopen(NFSSEC_CONF, "r")) == NULL) {
128*7c478bd9Sstevel@tonic-gate /*
129*7c478bd9Sstevel@tonic-gate * The opening of nfssec.conf failed.
130*7c478bd9Sstevel@tonic-gate */
131*7c478bd9Sstevel@tonic-gate *errp = errno;
132*7c478bd9Sstevel@tonic-gate return (NULL);
133*7c478bd9Sstevel@tonic-gate }
134*7c478bd9Sstevel@tonic-gate
135*7c478bd9Sstevel@tonic-gate seclist = fileutil_get_first_column_data(fp, num_elements, &err);
136*7c478bd9Sstevel@tonic-gate (void) fclose(fp);
137*7c478bd9Sstevel@tonic-gate if (seclist == NULL) {
138*7c478bd9Sstevel@tonic-gate *errp = err;
139*7c478bd9Sstevel@tonic-gate return (NULL);
140*7c478bd9Sstevel@tonic-gate }
141*7c478bd9Sstevel@tonic-gate
142*7c478bd9Sstevel@tonic-gate return (seclist);
143*7c478bd9Sstevel@tonic-gate } /* nfssec_get_nfs_secmode_list */
144