2 * Copyright (C) 1998 WIDE Project.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * Copyright (c) 1983, 1993, 1994
31 * The Regents of the University of California. All rights reserved.
33 * Redistribution and use in source and binary forms, with or without
34 * modification, are permitted provided that the following conditions
36 * 1. Redistributions of source code must retain the above copyright
37 * notice, this list of conditions and the following disclaimer.
38 * 2. Redistributions in binary form must reproduce the above copyright
39 * notice, this list of conditions and the following disclaimer in the
40 * documentation and/or other materials provided with the distribution.
41 * 4. Neither the name of the University nor the names of its contributors
42 * may be used to endorse or promote products derived from this software
43 * without specific prior written permission.
45 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
46 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
47 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
48 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
49 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
50 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
51 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
52 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
53 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
54 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
58 #if defined(LIBC_SCCS) && !defined(lint)
59 static char sccsid[] = "@(#)rcmd.c 8.3 (Berkeley) 3/26/94";
60 #endif /* LIBC_SCCS and not lint */
62 #include <sys/param.h>
64 #include <sys/socket.h>
67 #include <netinet/in.h>
68 #include <arpa/inet.h>
78 #include <stdio_ext.h>
88 int __ivaliduser (FILE *, u_int32_t, const char *, const char *);
89 static int __validuser2_sa (FILE *, struct sockaddr *, size_t,
90 const char *, const char *, const char *);
91 static int ruserok2_sa (struct sockaddr *ra, size_t ralen,
92 int superuser, const char *ruser,
93 const char *luser, const char *rhost);
94 static int ruserok_sa (struct sockaddr *ra, size_t ralen,
95 int superuser, const char *ruser,
97 int iruserok_af (const void *raddr, int superuser, const char *ruser,
98 const char *luser, sa_family_t af);
99 int iruserok (u_int32_t raddr, int superuser, const char *ruser,
102 libc_hidden_proto (iruserok_af)
104 libc_freeres_ptr(static char *ahostbuf);
107 rcmd_af(ahost, rport, locuser, remuser, cmd, fd2p, af)
110 const char *locuser, *remuser, *cmd;
114 char paddr[INET6_ADDRSTRLEN];
115 struct addrinfo hints, *res, *ai;
116 struct sockaddr_storage from;
117 struct pollfd pfd[2];
120 int s, lport, timo, error;
126 if (af != AF_INET && af != AF_INET6 && af != AF_UNSPEC)
128 __set_errno (EAFNOSUPPORT);
134 memset(&hints, '\0', sizeof(hints));
135 hints.ai_flags = AI_CANONNAME;
136 hints.ai_family = af;
137 hints.ai_socktype = SOCK_STREAM;
138 (void)__snprintf(num, sizeof(num), "%d", ntohs(rport));
139 error = getaddrinfo(*ahost, num, &hints, &res);
142 if (_IO_fwide (stderr, 0) > 0)
143 __fwprintf(stderr, L"rcmd: getaddrinfo: %s\n",
144 gai_strerror(error));
147 fprintf(stderr, "rcmd: getaddrinfo: %s\n",
148 gai_strerror(error));
152 pfd[0].events = POLLIN;
153 pfd[1].events = POLLIN;
155 if (res->ai_canonname){
157 ahostbuf = strdup (res->ai_canonname);
158 if (ahostbuf == NULL) {
160 if (_IO_fwide (stderr, 0) > 0)
161 __fwprintf(stderr, L"%s",
162 _("rcmd: Cannot allocate memory\n"));
165 fputs(_("rcmd: Cannot allocate memory\n"),
174 oldmask = __sigblock(sigmask(SIGURG));
175 for (timo = 1, lport = IPPORT_RESERVED - 1;;) {
178 s = rresvport_af(&lport, ai->ai_family);
180 if (errno == EAGAIN) {
182 if (_IO_fwide (stderr, 0) > 0)
183 __fwprintf(stderr, L"%s",
184 _("rcmd: socket: All ports in use\n"));
187 fputs(_("rcmd: socket: All ports in use\n"),
191 if (_IO_fwide (stderr, 0) > 0)
193 L"rcmd: socket: %m\n");
196 fprintf(stderr, "rcmd: socket: %m\n");
198 __sigsetmask(oldmask);
202 __fcntl(s, F_SETOWN, pid);
203 if (__connect(s, ai->ai_addr, ai->ai_addrlen) >= 0)
206 if (errno == EADDRINUSE) {
210 if (errno == ECONNREFUSED)
212 if (ai->ai_next != NULL) {
216 getnameinfo(ai->ai_addr, ai->ai_addrlen,
217 paddr, sizeof(paddr),
221 if (__asprintf (&buf, _("connect to address %s: "),
225 if (_IO_fwide (stderr, 0) > 0)
226 __fwprintf(stderr, L"%s", buf);
232 __set_errno (oerrno);
235 getnameinfo(ai->ai_addr, ai->ai_addrlen,
236 paddr, sizeof(paddr),
239 if (__asprintf (&buf, _("Trying %s...\n"), paddr) >= 0)
242 if (_IO_fwide (stderr, 0) > 0)
243 __fwprintf (stderr, L"%s", buf);
251 if (refused && timo <= 16) {
260 if (_IO_fwide (stderr, 0) > 0)
261 (void)__fwprintf(stderr, L"%s: %s\n", *ahost,
263 errbuf, sizeof (errbuf)));
266 (void)fprintf(stderr, "%s: %s\n", *ahost,
268 errbuf, sizeof (errbuf)));
269 __sigsetmask(oldmask);
278 int s2 = rresvport_af(&lport, ai->ai_family), s3;
279 socklen_t len = ai->ai_addrlen;
284 (void)__snprintf(num, sizeof(num), "%d", lport);
285 if (__write(s, num, strlen(num)+1) != (ssize_t)strlen(num)+1) {
288 if (__asprintf (&buf, _("\
289 rcmd: write (setting up stderr): %m\n")) >= 0)
292 if (_IO_fwide (stderr, 0) > 0)
293 __fwprintf(stderr, L"%s", buf);
305 if (__poll (pfd, 2, -1) < 1 || (pfd[1].revents & POLLIN) == 0){
309 && __asprintf(&buf, _("\
310 rcmd: poll (setting up stderr): %m\n")) >= 0)
312 && __asprintf(&buf, _("\
313 poll: protocol failure in circuit setup\n")) >= 0))
316 if (_IO_fwide (stderr, 0) > 0)
317 __fwprintf (stderr, L"%s", buf);
326 s3 = accept(s2, (struct sockaddr *)&from, &len);
327 switch (from.ss_family) {
329 rport = ntohs(((struct sockaddr_in *)&from)->sin_port);
332 rport = ntohs(((struct sockaddr_in6 *)&from)->sin6_port);
341 if (_IO_fwide (stderr, 0) > 0)
342 (void)__fwprintf(stderr,
343 L"rcmd: accept: %m\n");
346 (void)fprintf(stderr,
347 "rcmd: accept: %m\n");
353 if (rport >= IPPORT_RESERVED || rport < IPPORT_RESERVED / 2){
356 if (__asprintf(&buf, _("\
357 socket: protocol failure in circuit setup\n")) >= 0)
360 if (_IO_fwide (stderr, 0) > 0)
361 __fwprintf (stderr, L"%s", buf);
370 (void)__write(s, locuser, strlen(locuser)+1);
371 (void)__write(s, remuser, strlen(remuser)+1);
372 (void)__write(s, cmd, strlen(cmd)+1);
373 n = __read(s, &c, 1);
378 && __asprintf(&buf, _("rcmd: %s: short read"),
381 && __asprintf(&buf, "rcmd: %s: %m\n", *ahost) >= 0))
384 if (_IO_fwide (stderr, 0) > 0)
385 __fwprintf (stderr, L"%s", buf);
394 while (__read(s, &c, 1) == 1) {
395 (void)__write(STDERR_FILENO, &c, 1);
401 __sigsetmask(oldmask);
406 (void)__close(*fd2p);
409 __sigsetmask(oldmask);
413 libc_hidden_def (rcmd_af)
416 rcmd(ahost, rport, locuser, remuser, cmd, fd2p)
419 const char *locuser, *remuser, *cmd;
422 return rcmd_af (ahost, rport, locuser, remuser, cmd, fd2p, AF_INET);
426 rresvport_af(alport, family)
430 struct sockaddr_storage ss;
437 len = sizeof(struct sockaddr_in);
438 sport = &((struct sockaddr_in *)&ss)->sin_port;
441 len = sizeof(struct sockaddr_in6);
442 sport = &((struct sockaddr_in6 *)&ss)->sin6_port;
445 __set_errno (EAFNOSUPPORT);
448 s = __socket(family, SOCK_STREAM, 0);
452 memset (&ss, '\0', sizeof(ss));
456 ss.ss_family = family;
459 *sport = htons((uint16_t) *alport);
460 if (__bind(s, (struct sockaddr *)&ss, len) >= 0)
462 if (errno != EADDRINUSE) {
467 if (*alport == IPPORT_RESERVED/2)
471 __set_errno (EAGAIN);
474 libc_hidden_def (rresvport_af)
480 return rresvport_af(alport, AF_INET);
483 int __check_rhosts_file = 1;
487 ruserok_af(rhost, superuser, ruser, luser, af)
488 const char *rhost, *ruser, *luser;
492 struct addrinfo hints, *res, *res0;
496 memset (&hints, '\0', sizeof(hints));
497 hints.ai_family = af;
498 gai = getaddrinfo(rhost, NULL, &hints, &res0);
502 for (res=res0; res; res=res->ai_next)
503 if (ruserok2_sa(res->ai_addr, res->ai_addrlen,
504 superuser, ruser, luser, rhost) == 0){
511 libc_hidden_def (ruserok_af)
514 ruserok(rhost, superuser, ruser, luser)
515 const char *rhost, *ruser, *luser;
518 return ruserok_af(rhost, superuser, ruser, luser, AF_INET);
521 /* Extremely paranoid file open function. */
523 iruserfopen (const char *file, uid_t okuser)
529 /* If not a regular file, if owned by someone other than user or
530 root, if writeable by anyone but the owner, or if hardlinked
533 if (__lxstat64 (_STAT_VER, file, &st))
534 cp = _("lstat failed");
535 else if (!S_ISREG (st.st_mode))
536 cp = _("not regular file");
539 res = fopen (file, "r");
541 cp = _("cannot open");
542 else if (__fxstat64 (_STAT_VER, fileno (res), &st) < 0)
543 cp = _("fstat failed");
544 else if (st.st_uid && st.st_uid != okuser)
546 else if (st.st_mode & (S_IWGRP|S_IWOTH))
547 cp = _("writeable by other than owner");
548 else if (st.st_nlink > 1)
549 cp = _("hard linked somewhere");
552 /* If there were any problems, quit. */
561 /* No threads use this stream. */
562 __fsetlocking (res, FSETLOCKING_BYCALLER);
568 * New .rhosts strategy: We are passed an ip address. We spin through
569 * hosts.equiv and .rhosts looking for a match. When the .rhosts only
570 * has ip addresses, we don't have to trust a nameserver. When it
571 * contains hostnames, we spin through the list of addresses the nameserver
572 * gives us and look for a match.
574 * Returns 0 if ok, -1 if not ok.
577 ruserok2_sa (ra, ralen, superuser, ruser, luser, rhost)
581 const char *ruser, *luser, *rhost;
587 hostf = iruserfopen (_PATH_HEQUIV, 0);
591 isbad = __validuser2_sa (hostf, ra, ralen, luser, ruser, rhost);
598 if (__check_rhosts_file || superuser)
601 struct passwd pwdbuf, *pwd;
603 size_t buflen = __sysconf (_SC_GETPW_R_SIZE_MAX);
604 char *buffer = __alloca (buflen);
607 if (__getpwnam_r (luser, &pwdbuf, buffer, buflen, &pwd) != 0
611 dirlen = strlen (pwd->pw_dir);
612 pbuf = alloca (dirlen + sizeof "/.rhosts");
613 __mempcpy (__mempcpy (pbuf, pwd->pw_dir, dirlen),
614 "/.rhosts", sizeof "/.rhosts");
616 /* Change effective uid while reading .rhosts. If root and
617 reading an NFS mounted file system, can't read files that
618 are protected read/write owner only. */
620 seteuid (pwd->pw_uid);
621 hostf = iruserfopen (pbuf, pwd->pw_uid);
625 isbad = __validuser2_sa (hostf, ra, ralen, luser, ruser, rhost);
635 * ruserok_sa() is now discussed on ipng, so
636 * currently disabled for external use
638 static int ruserok_sa(ra, ralen, superuser, ruser, luser)
642 const char *ruser, *luser;
644 return ruserok2_sa(ra, ralen, superuser, ruser, luser, "-");
647 /* This is the exported version. */
649 iruserok_af (raddr, superuser, ruser, luser, af)
652 const char *ruser, *luser;
655 struct sockaddr_storage ra;
658 memset (&ra, '\0', sizeof(ra));
661 ((struct sockaddr_in *)&ra)->sin_family = AF_INET;
662 memcpy (&(((struct sockaddr_in *)&ra)->sin_addr), raddr,
663 sizeof(struct in_addr));
664 ralen = sizeof(struct sockaddr_in);
667 ((struct sockaddr_in6 *)&ra)->sin6_family = AF_INET6;
668 memcpy (&(((struct sockaddr_in6 *)&ra)->sin6_addr), raddr,
669 sizeof(struct in6_addr));
670 ralen = sizeof(struct sockaddr_in6);
675 return ruserok_sa ((struct sockaddr *)&ra, ralen, superuser, ruser, luser);
677 libc_hidden_def (iruserok_af)
680 iruserok (raddr, superuser, ruser, luser)
683 const char *ruser, *luser;
685 return iruserok_af (&raddr, superuser, ruser, luser, AF_INET);
690 * Don't make static, used by lpd(8).
692 * This function is not used anymore. It is only present because lpd(8)
693 * calls it (!?!). We simply call __invaliduser2() with an illegal rhost
694 * argument. This means that netgroups won't work in .rhost/hosts.equiv
695 * files. If you want lpd to work with netgroups, fix lpd to use ruserok()
697 * Returns 0 if ok, -1 if not ok.
700 __ivaliduser(hostf, raddr, luser, ruser)
703 const char *luser, *ruser;
705 struct sockaddr_in ra;
706 memset(&ra, '\0', sizeof(ra));
707 ra.sin_family = AF_INET;
708 ra.sin_addr.s_addr = raddr;
709 return __validuser2_sa(hostf, (struct sockaddr *)&ra, sizeof(ra),
714 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
717 __checkhost_sa (struct sockaddr *ra, size_t ralen, char *lhost,
720 struct addrinfo hints, *res0, *res;
721 char raddr[INET6_ADDRSTRLEN];
723 int negate=1; /* Multiply return with this to get -1 instead of 1 */
725 /* Check nis netgroup. */
726 if (strncmp ("+@", lhost, 2) == 0)
727 return innetgr (&lhost[2], rhost, NULL, NULL);
729 if (strncmp ("-@", lhost, 2) == 0)
730 return -innetgr (&lhost[2], rhost, NULL, NULL);
733 if (strncmp ("-", lhost,1) == 0) {
736 } else if (strcmp ("+",lhost) == 0) {
737 return 1; /* asking for trouble, but ok.. */
740 /* Try for raw ip address first. */
742 if (getnameinfo(ra, ralen,
743 raddr, sizeof(raddr), NULL, 0,
745 && strcmp(raddr, lhost) == 0)
748 /* Better be a hostname. */
750 memset(&hints, '\0', sizeof(hints));
751 hints.ai_family = ra->sa_family;
752 if (getaddrinfo(lhost, NULL, &hints, &res0) == 0){
753 /* Spin through ip addresses. */
754 for (res = res0; res; res = res->ai_next)
756 if (res->ai_family == ra->sa_family
757 && !memcmp(res->ai_addr, ra, res->ai_addrlen))
765 return negate * match;
768 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
771 __icheckuser (const char *luser, const char *ruser)
774 luser is user entry from .rhosts/hosts.equiv file
775 ruser is user id on remote host
779 if (strncmp ("+@", luser, 2) == 0)
780 return innetgr (&luser[2], NULL, ruser, NULL);
782 if (strncmp ("-@", luser,2) == 0)
783 return -innetgr (&luser[2], NULL, ruser, NULL);
786 if (strncmp ("-", luser, 1) == 0)
787 return -(strcmp (&luser[1], ruser) == 0);
790 if (strcmp ("+", luser) == 0)
793 /* simple string match */
794 return strcmp (ruser, luser) == 0;
798 * Returns 1 for blank lines (or only comment lines) and 0 otherwise
803 while (*p && isspace (*p)) {
807 return (*p == '\0' || *p == '#') ? 1 : 0 ;
811 * Returns 0 if positive match, -1 if _not_ ok.
814 __validuser2_sa(hostf, ra, ralen, luser, ruser, rhost)
818 const char *luser, *ruser, *rhost;
820 register const char *user;
827 while (__getline (&buf, &bufsize, hostf) > 0) {
828 buf[bufsize - 1] = '\0'; /* Make sure it's terminated. */
831 /* Skip empty or comment lines */
836 /* Skip lines that are too long. */
837 if (strchr (p, '\n') == NULL) {
838 int ch = getc_unlocked (hostf);
840 while (ch != '\n' && ch != EOF)
841 ch = getc_unlocked (hostf);
845 for (;*p && !isspace(*p); ++p) {
849 /* Next we want to find the permitted name for the remote user. */
850 if (*p == ' ' || *p == '\t') {
851 /* <nul> terminate hostname and skip spaces */
852 for (*p++='\0'; *p && isspace (*p); ++p);
854 user = p; /* this is the user's name */
855 while (*p && !isspace (*p))
856 ++p; /* find end of user's name */
860 *p = '\0'; /* <nul> terminate username (+host?) */
862 /* buf -> host(?) ; user -> username(?) */
864 /* First check host part */
865 hcheck = __checkhost_sa (ra, ralen, buf, rhost);
871 /* Then check user part */
875 ucheck = __icheckuser (user, ruser);
877 /* Positive 'host user' match? */
883 /* Negative 'host -user' match? */
887 /* Neither, go on looking for match */