1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved.
23 * Copyright (c) 2017, Joyent, Inc.
24 */
25
26 #include <stdlib.h>
27 #include "files_common.h"
28 #include <time.h>
29 #include <exec_attr.h>
30 #include <strings.h>
31 #include <sys/stat.h>
32 #include <sys/mman.h>
33 #include <ctype.h>
34 #include <synch.h>
35 #include <sys/types.h>
36 #include <sys/uio.h>
37 #include <unistd.h>
38
39 /*
40 * files/getexecattr.c -- "files" backend for nsswitch "exec_attr" database
41 *
42 * _execattr_files_read_line and _execattr_files_XY_all code based on
43 * nss_files_read_line and nss_files_XY_all respectively, from files_common.c
44 */
45
46
47 /* externs from libnsl */
48 extern int _doexeclist(nss_XbyY_args_t *);
49 extern int _readbufline(char *, int, char *, int, int *);
50 extern char *_exec_wild_id(char *, const char *);
51 extern void _exec_cleanup(nss_status_t, nss_XbyY_args_t *);
52
53 /*
54 * _exec_files_XY_all wants to cache data from the attribute file.
55 */
56 static char *exec_f_buf;
57 static time_t exec_read_time;
58
59 void
getexecattr_fini(void)60 getexecattr_fini(void)
61 {
62 free(exec_f_buf);
63 exec_f_buf = NULL;
64 }
65
66
67 /*
68 * check_match: returns 1 if matching entry found, else returns 0.
69 */
70 static int
check_match(nss_XbyY_args_t * argp,const char * line,int linelen)71 check_match(nss_XbyY_args_t *argp, const char *line, int linelen)
72 {
73 const char *limit, *linep, *keyp;
74 _priv_execattr *_priv_exec = (_priv_execattr *)(argp->key.attrp);
75 const char *exec_field[6];
76 int i;
77
78 exec_field[0] = _priv_exec->name; /* name */
79 exec_field[1] = _priv_exec->policy; /* policy */
80 exec_field[2] = _priv_exec->type; /* type */
81 exec_field[3] = NULL; /* res1 */
82 exec_field[4] = NULL; /* res2 */
83 exec_field[5] = _priv_exec->id; /* id */
84 /* No need to check attr field */
85
86 linep = line;
87 limit = line + linelen;
88
89 for (i = 0; i < 6; i++) {
90 keyp = exec_field[i];
91 if (keyp) {
92 /* compare field */
93 while (*keyp && linep < limit &&
94 *linep != ':' && *keyp == *linep) {
95 keyp++;
96 linep++;
97 }
98 if (*keyp || linep == limit || *linep != ':')
99 return (0);
100 } else {
101 /* skip field */
102 while (linep < limit && *linep != ':')
103 linep++;
104 }
105 linep++;
106 }
107 return (1);
108 }
109
110
111 static nss_status_t
_exec_files_XY_all(files_backend_ptr_t be,nss_XbyY_args_t * argp,int getby_flag)112 _exec_files_XY_all(files_backend_ptr_t be,
113 nss_XbyY_args_t *argp,
114 int getby_flag)
115 {
116 int parse_stat = 0;
117 int lastlen = 0;
118 int exec_fd = 0;
119 int f_size = 0;
120 time_t f_time = 0;
121 char *first;
122 char *last;
123 struct stat f_stat;
124 nss_status_t res = NSS_NOTFOUND;
125 _priv_execattr *_priv_exec = (_priv_execattr *)(argp->key.attrp);
126 static rwlock_t exec_lock;
127
128 if (((be->buf == NULL) &&
129 ((be->buf = (char *)calloc(1, be->minbuf)) == NULL)) ||
130 (be->filename == NULL) ||
131 (rw_rdlock(&exec_lock) != 0)) {
132 return (NSS_UNAVAIL);
133 }
134
135 /*
136 * check the size and the time stamp on the file
137 */
138 if (stat(be->filename, &f_stat) != 0) {
139 (void) _nss_files_endent(be, 0);
140 (void) rw_unlock(&exec_lock);
141 return (NSS_UNAVAIL);
142 }
143
144 f_size = f_stat.st_size;
145 f_time = f_stat.st_mtime;
146
147 while (f_time > exec_read_time || exec_f_buf == NULL) {
148 /*
149 * file has been modified since we last read it
150 * or we never read it or memory allocation
151 * failed before.
152 * read it into the buffer with rw lock.
153 */
154 (void) rw_unlock(&exec_lock);
155 if (rw_wrlock(&exec_lock) != 0) {
156 (void) _nss_files_endent(be, 0);
157 return (NSS_UNAVAIL);
158 }
159 if ((be->f = fopen(be->filename, "rF")) == 0) {
160 (void) _nss_files_endent(be, 0);
161 (void) rw_unlock(&exec_lock);
162 return (NSS_UNAVAIL);
163 }
164 exec_fd = fileno(be->f);
165 if (exec_f_buf != NULL)
166 free(exec_f_buf);
167 if ((exec_f_buf = malloc(f_size)) == NULL) {
168 (void) _nss_files_endent(be, 0);
169 (void) rw_unlock(&exec_lock);
170 return (NSS_UNAVAIL);
171 }
172 if (read(exec_fd, exec_f_buf, f_size) < f_size) {
173 free(exec_f_buf);
174 exec_f_buf = NULL;
175 (void) _nss_files_endent(be, 0);
176 (void) rw_unlock(&exec_lock);
177 return (NSS_UNAVAIL);
178 }
179 exec_read_time = f_time;
180 (void) rw_unlock(&exec_lock);
181 /*
182 * verify that the file did not change after
183 * we read it.
184 */
185 if (rw_rdlock(&exec_lock) != 0) {
186 free(exec_f_buf);
187 exec_f_buf = NULL;
188 (void) _nss_files_endent(be, 0);
189 return (NSS_UNAVAIL);
190 }
191 if (stat(be->filename, &f_stat) != 0) {
192 free(exec_f_buf);
193 exec_f_buf = NULL;
194 (void) _nss_files_endent(be, 0);
195 (void) rw_unlock(&exec_lock);
196 return (NSS_UNAVAIL);
197 }
198 f_size = f_stat.st_size;
199 f_time = f_stat.st_mtime;
200 }
201
202 res = NSS_NOTFOUND;
203 /*CONSTCOND*/
204 while (1) {
205 int linelen = 0;
206 char *instr = be->buf;
207
208 linelen = _readbufline(exec_f_buf, f_size, instr, be->minbuf,
209 &lastlen);
210 if (linelen < 0) {
211 /* End of file */
212 break;
213 }
214
215 /*
216 * If the entry doesn't contain the filter string then
217 * it can't be the entry we want, so don't bother looking
218 * more closely at it.
219 */
220 switch (getby_flag) {
221 case NSS_DBOP_EXECATTR_BYNAME:
222 if (strstr(instr, _priv_exec->name) == NULL)
223 continue;
224 break;
225 case NSS_DBOP_EXECATTR_BYID:
226 if (strstr(instr, _priv_exec->id) == NULL)
227 continue;
228 break;
229 case NSS_DBOP_EXECATTR_BYNAMEID:
230 if ((strstr(instr, _priv_exec->name) == NULL) ||
231 (strstr(instr, _priv_exec->id) == NULL))
232 continue;
233 break;
234 default:
235 break;
236 }
237 if (((_priv_exec->policy != NULL) &&
238 (strstr(instr, _priv_exec->policy) == NULL)) ||
239 ((_priv_exec->type != NULL) &&
240 (strstr(instr, _priv_exec->type) == NULL)))
241 continue;
242
243 /*
244 * Get rid of white spaces, comments etc.
245 */
246 if ((last = strchr(instr, '#')) == NULL)
247 last = instr + linelen;
248 *last-- = '\0'; /* Nuke '\n' or #comment */
249 /*
250 * Skip leading whitespace. Normally there isn't any,
251 * so it's not worth calling strspn().
252 */
253 for (first = instr; isspace(*first); first++)
254 ;
255 if (*first == '\0')
256 continue;
257 /*
258 * Found something non-blank on the line. Skip back
259 * over any trailing whitespace; since we know there's
260 * non-whitespace earlier in the line, checking for
261 * termination is easy.
262 */
263 while (isspace(*last))
264 --last;
265 linelen = last - first + 1;
266 if (first != instr)
267 instr = first;
268
269 /* Check the entry */
270 argp->returnval = NULL;
271 argp->returnlen = 0;
272 if (check_match(argp, instr, linelen) == 0)
273 continue;
274
275 /* Marshall the data */
276 parse_stat = (*argp->str2ent)(instr, linelen, argp->buf.result,
277 argp->buf.buffer, argp->buf.buflen);
278 if (parse_stat == NSS_STR_PARSE_SUCCESS) {
279 argp->returnval = (argp->buf.result != NULL)?
280 argp->buf.result : argp->buf.buffer;
281 argp->returnlen = linelen;
282 res = NSS_SUCCESS;
283 if (IS_GET_ONE(_priv_exec->search_flag)) {
284 break;
285 } else if (_doexeclist(argp) == 0) {
286 res = NSS_UNAVAIL;
287 break;
288 }
289 } else if (parse_stat == NSS_STR_PARSE_ERANGE) {
290 argp->erange = 1;
291 break;
292 } /* else if (parse_stat == NSS_STR_PARSE_PARSE) don't care ! */
293 }
294
295 (void) _nss_files_endent(be, 0);
296 (void) rw_unlock(&exec_lock);
297
298 return (res);
299 }
300
301
302 /*
303 * If search for exact match for id failed, get_wild checks if we have
304 * a wild-card entry for that id.
305 */
306 static nss_status_t
get_wild(files_backend_ptr_t be,nss_XbyY_args_t * argp,int getby_flag)307 get_wild(files_backend_ptr_t be, nss_XbyY_args_t *argp, int getby_flag)
308 {
309 const char *orig_id = NULL;
310 char *old_id = NULL;
311 char *wild_id = NULL;
312 nss_status_t res = NSS_NOTFOUND;
313 _priv_execattr *_priv_exec = (_priv_execattr *)(argp->key.attrp);
314
315 orig_id = _priv_exec->id;
316 old_id = strdup(_priv_exec->id);
317 wild_id = old_id;
318 while ((wild_id = _exec_wild_id(wild_id, _priv_exec->type)) != NULL) {
319 _priv_exec->id = wild_id;
320 res = _exec_files_XY_all(be, argp, getby_flag);
321 if (res == NSS_SUCCESS)
322 break;
323 }
324 _priv_exec->id = orig_id;
325 if (old_id)
326 free(old_id);
327
328 return (res);
329 }
330
331
332 static nss_status_t
getbynam(files_backend_ptr_t be,void * a)333 getbynam(files_backend_ptr_t be, void *a)
334 {
335 nss_status_t res;
336 nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
337
338 res = _exec_files_XY_all(be, argp, NSS_DBOP_EXECATTR_BYNAME);
339
340 _exec_cleanup(res, argp);
341
342 return (res);
343 }
344
345
346 static nss_status_t
getbyid(files_backend_ptr_t be,void * a)347 getbyid(files_backend_ptr_t be, void *a)
348 {
349 nss_status_t res;
350 nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
351 /*LINTED*/
352 _priv_execattr *_priv_exec = (_priv_execattr *)(argp->key.attrp);
353
354 res = _exec_files_XY_all(be, argp, NSS_DBOP_EXECATTR_BYID);
355
356 if (res != NSS_SUCCESS)
357 res = get_wild(be, argp, NSS_DBOP_EXECATTR_BYID);
358
359 _exec_cleanup(res, argp);
360
361 return (res);
362 }
363
364
365 static nss_status_t
getbynameid(files_backend_ptr_t be,void * a)366 getbynameid(files_backend_ptr_t be, void *a)
367 {
368 nss_status_t res;
369 nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
370 /*LINTED*/
371 _priv_execattr *_priv_exec = (_priv_execattr *)(argp->key.attrp);
372
373 res = _exec_files_XY_all(be, argp, NSS_DBOP_EXECATTR_BYNAMEID);
374
375 if (res != NSS_SUCCESS)
376 res = get_wild(be, argp, NSS_DBOP_EXECATTR_BYNAMEID);
377
378 _exec_cleanup(res, argp);
379
380 return (res);
381 }
382
383
384 static files_backend_op_t execattr_ops[] = {
385 _nss_files_destr,
386 _nss_files_endent,
387 _nss_files_setent,
388 _nss_files_getent_netdb,
389 getbynam,
390 getbyid,
391 getbynameid
392 };
393
394 /*ARGSUSED*/
395 nss_backend_t *
_nss_files_exec_attr_constr(const char * dummy1,const char * dummy2,const char * dummy3,const char * dummy4,const char * dummy5,const char * dummy6,const char * dummy7)396 _nss_files_exec_attr_constr(const char *dummy1,
397 const char *dummy2,
398 const char *dummy3,
399 const char *dummy4,
400 const char *dummy5,
401 const char *dummy6,
402 const char *dummy7)
403 {
404 return (_nss_files_constr(execattr_ops,
405 sizeof (execattr_ops)/sizeof (execattr_ops[0]),
406 EXECATTR_FILENAME, NSS_LINELEN_EXECATTR, NULL));
407 }
408