1 /* Copyright (C) 1989,91,93,1996-2002, 2003 Free Software Foundation, Inc.
2 This file is part of the GNU C Library.
4 The GNU C Library is free software; you can redistribute it and/or
5 modify it under the terms of the GNU Lesser General Public
6 License as published by the Free Software Foundation; either
7 version 2.1 of the License, or (at your option) any later version.
9 The GNU C Library is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 Lesser General Public License for more details.
14 You should have received a copy of the GNU Lesser General Public
15 License along with the GNU C Library; if not, write to the Free
16 Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
26 #include <sys/param.h>
27 #include <sys/types.h>
30 /* Type of the lookup function. */
31 typedef enum nss_status (*initgroups_dyn_function) (const char *, gid_t,
32 long int *, long int *,
33 gid_t **, long int, int *);
34 /* Prototype for the setgrent functions we use here. */
35 typedef enum nss_status (*set_function) (void);
37 /* Prototype for the endgrent functions we use here. */
38 typedef enum nss_status (*end_function) (void);
40 /* Prototype for the setgrent functions we use here. */
41 typedef enum nss_status (*get_function) (struct group *, char *,
44 /* The lookup function for the first entry of this service. */
45 extern int __nss_group_lookup (service_user **nip, const char *name,
47 extern void *__nss_lookup_function (service_user *ni, const char *fct_name);
49 extern service_user *__nss_group_database attribute_hidden;
51 static enum nss_status
52 compat_call (service_user *nip, const char *user, gid_t group, long int *start,
53 long int *size, gid_t **groupsp, long int limit, int *errnop)
56 size_t buflen = __sysconf (_SC_GETGR_R_SIZE_MAX);
58 enum nss_status status;
59 set_function setgrent_fct;
60 get_function getgrent_fct;
61 end_function endgrent_fct;
62 gid_t *groups = *groupsp;
64 getgrent_fct = __nss_lookup_function (nip, "getgrent_r");
65 if (getgrent_fct == NULL)
66 return NSS_STATUS_UNAVAIL;
68 setgrent_fct = __nss_lookup_function (nip, "setgrent");
71 status = DL_CALL_FCT (setgrent_fct, ());
72 if (status != NSS_STATUS_SUCCESS)
76 endgrent_fct = __nss_lookup_function (nip, "endgrent");
78 tmpbuf = __alloca (buflen);
82 while ((status = DL_CALL_FCT (getgrent_fct,
83 (&grpbuf, tmpbuf, buflen, errnop)),
84 status == NSS_STATUS_TRYAGAIN)
88 tmpbuf = __alloca (buflen);
91 if (status != NSS_STATUS_SUCCESS)
94 if (grpbuf.gr_gid != group)
98 for (m = grpbuf.gr_mem; *m != NULL; ++m)
99 if (strcmp (*m, user) == 0)
101 /* Matches user. Insert this group. */
102 if (__builtin_expect (*start == *size, 0))
104 /* Need a bigger buffer. */
108 if (limit > 0 && *size == limit)
109 /* We reached the maximum. */
115 newsize = MIN (limit, 2 * *size);
117 newgroups = realloc (groups, newsize * sizeof (*groups));
118 if (newgroups == NULL)
120 *groupsp = groups = newgroups;
124 groups[*start] = grpbuf.gr_gid;
131 while (status == NSS_STATUS_SUCCESS);
135 DL_CALL_FCT (endgrent_fct, ());
137 return NSS_STATUS_SUCCESS;
141 internal_getgrouplist (const char *user, gid_t group, long int *size,
142 gid_t **groupsp, long int limit)
144 service_user *nip = NULL;
145 initgroups_dyn_function fct;
146 enum nss_status status = NSS_STATUS_UNAVAIL;
148 /* Start is one, because we have the first group as parameter. */
153 if (__nss_group_database != NULL)
156 nip = __nss_group_database;
159 no_more = __nss_database_lookup ("group", NULL,
160 "compat [NOTFOUND=return] files", &nip);
164 fct = __nss_lookup_function (nip, "initgroups_dyn");
168 status = compat_call (nip, user, group, &start, size, groupsp,
171 if (nss_next_action (nip, NSS_STATUS_UNAVAIL) != NSS_ACTION_CONTINUE)
175 status = DL_CALL_FCT (fct, (user, group, &start, size, groupsp,
178 /* This is really only for debugging. */
179 if (NSS_STATUS_TRYAGAIN > status || status > NSS_STATUS_RETURN)
180 __libc_fatal ("illegal status in internal_getgrouplist");
182 if (status != NSS_STATUS_SUCCESS
183 && nss_next_action (nip, status) == NSS_ACTION_RETURN)
186 if (nip->next == NULL)
195 /* Store at most *NGROUPS members of the group set for USER into
196 *GROUPS. Also include GROUP. The actual number of groups found is
197 returned in *NGROUPS. Return -1 if the if *NGROUPS is too small. */
199 getgrouplist (const char *user, gid_t group, gid_t *groups, int *ngroups)
202 long int size = *ngroups;
205 newgroups = (gid_t *) malloc (size * sizeof (gid_t));
206 if (__builtin_expect (newgroups == NULL, 0))
207 /* No more memory. */
210 result = internal_getgrouplist (user, group, &size, &newgroups, -1);
212 memcpy (groups, newgroups, MIN (*ngroups, result) * sizeof (gid_t));
214 if (result > *ngroups)
226 /* Initialize the group set for the current user
227 by reading the group database and using all groups
228 of which USER is a member. Also include GROUP. */
230 initgroups (const char *user, gid_t group)
232 #if defined NGROUPS_MAX && NGROUPS_MAX == 0
234 /* No extra groups allowed. */
244 /* We always use sysconf even if NGROUPS_MAX is defined. That way, the
245 limit can be raised in the kernel configuration without having to
247 long int limit = __sysconf (_SC_NGROUPS_MAX);
253 /* No fixed limit on groups. Pick a starting buffer size. */
257 groups = (gid_t *) malloc (size * sizeof (gid_t));
258 if (__builtin_expect (groups == NULL, 0))
259 /* No more memory. */
262 ngroups = internal_getgrouplist (user, group, &size, &groups, limit);
264 /* Try to set the maximum number of groups the kernel can handle. */
266 result = setgroups (ngroups, groups);
267 while (result == -1 && errno == EINVAL && --ngroups > 0);