2 * Copyright (c) 1983, 1993, 1994
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 * must display the following acknowledgement:
15 * This product includes software developed by the University of
16 * California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #if defined(LIBC_SCCS) && !defined(lint)
35 static char sccsid
[] = "@(#)rcmd.c 8.3 (Berkeley) 3/26/94";
36 #endif /* LIBC_SCCS and not lint */
38 #include <sys/param.h>
39 #include <sys/socket.h>
42 #include <netinet/in.h>
43 #include <arpa/inet.h>
56 int __ivaliduser
__P((FILE *, u_int32_t
, const char *, const char *));
57 static int __icheckhost
__P((u_int32_t
, char *));
60 rcmd(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
)
63 const char *locuser
, *remuser
, *cmd
;
67 struct sockaddr_in sin
, from
;
75 hp
= gethostbyname(*ahost
);
81 oldmask
= sigblock(sigmask(SIGURG
));
82 for (timo
= 1, lport
= IPPORT_RESERVED
- 1;;) {
83 s
= rresvport(&lport
);
87 _("rcmd: socket: All ports in use\n"));
89 (void)fprintf(stderr
, "rcmd: socket: %s\n",
94 fcntl(s
, F_SETOWN
, pid
);
95 sin
.sin_family
= hp
->h_addrtype
;
96 bcopy(hp
->h_addr_list
[0], &sin
.sin_addr
,
97 MIN (sizeof (sin
.sin_addr
), hp
->h_length
));
99 if (connect(s
, (struct sockaddr
*)&sin
, sizeof(sin
)) >= 0)
102 if (errno
== EADDRINUSE
) {
106 if (errno
== ECONNREFUSED
&& timo
<= 16) {
111 if (hp
->h_addr_list
[1] != NULL
) {
114 (void)fprintf(stderr
, _("connect to address %s: "),
115 inet_ntoa(sin
.sin_addr
));
116 __set_errno (oerrno
);
119 bcopy(hp
->h_addr_list
[0], &sin
.sin_addr
,
120 MIN (sizeof (sin
.sin_addr
), hp
->h_length
));
121 (void)fprintf(stderr
, _("Trying %s...\n"),
122 inet_ntoa(sin
.sin_addr
));
125 (void)fprintf(stderr
, "%s: %s\n", hp
->h_name
, strerror(errno
));
135 int s2
= rresvport(&lport
), s3
;
136 int len
= sizeof(from
);
141 (void)snprintf(num
, sizeof(num
), "%d", lport
);
142 if (write(s
, num
, strlen(num
)+1) != strlen(num
)+1) {
143 (void)fprintf(stderr
,
144 _("rcmd: write (setting up stderr): %s\n"),
153 if (select(1 + (s
> s2
? s
: s2
), &reads
, 0, 0, 0) < 1 ||
154 !FD_ISSET(s2
, &reads
)) {
156 (void)fprintf(stderr
,
157 _("rcmd: select (setting up stderr): %s\n"),
160 (void)fprintf(stderr
,
161 _("select: protocol failure in circuit setup\n"));
165 s3
= accept(s2
, (struct sockaddr
*)&from
, &len
);
168 (void)fprintf(stderr
,
169 "rcmd: accept: %s\n", strerror(errno
));
174 from
.sin_port
= ntohs((u_short
)from
.sin_port
);
175 if (from
.sin_family
!= AF_INET
||
176 from
.sin_port
>= IPPORT_RESERVED
||
177 from
.sin_port
< IPPORT_RESERVED
/ 2) {
178 (void)fprintf(stderr
,
179 _("socket: protocol failure in circuit setup\n"));
183 (void)write(s
, locuser
, strlen(locuser
)+1);
184 (void)write(s
, remuser
, strlen(remuser
)+1);
185 (void)write(s
, cmd
, strlen(cmd
)+1);
186 if (read(s
, &c
, 1) != 1) {
187 (void)fprintf(stderr
,
188 "rcmd: %s: %s\n", *ahost
, strerror(errno
));
192 while (read(s
, &c
, 1) == 1) {
193 (void)write(STDERR_FILENO
, &c
, 1);
214 struct sockaddr_in sin
;
217 sin
.sin_family
= AF_INET
;
218 sin
.sin_addr
.s_addr
= INADDR_ANY
;
219 s
= socket(AF_INET
, SOCK_STREAM
, 0);
223 sin
.sin_port
= htons((u_short
)*alport
);
224 if (bind(s
, (struct sockaddr
*)&sin
, sizeof(sin
)) >= 0)
226 if (errno
!= EADDRINUSE
) {
231 if (*alport
== IPPORT_RESERVED
/2) {
233 __set_errno (EAGAIN
); /* close */
239 int __check_rhosts_file
= 1;
243 ruserok(rhost
, superuser
, ruser
, luser
)
244 const char *rhost
, *ruser
, *luser
;
251 if ((hp
= gethostbyname(rhost
)) == NULL
)
253 for (ap
= hp
->h_addr_list
; *ap
; ++ap
) {
254 bcopy(*ap
, &addr
, sizeof(addr
));
255 if (iruserok(addr
, superuser
, ruser
, luser
) == 0)
262 * New .rhosts strategy: We are passed an ip address. We spin through
263 * hosts.equiv and .rhosts looking for a match. When the .rhosts only
264 * has ip addresses, we don't have to trust a nameserver. When it
265 * contains hostnames, we spin through the list of addresses the nameserver
266 * gives us and look for a match.
268 * Returns 0 if ok, -1 if not ok.
271 iruserok(raddr
, superuser
, ruser
, luser
)
274 const char *ruser
, *luser
;
284 hostf
= superuser
? NULL
: fopen(_PATH_HEQUIV
, "r");
287 if (__ivaliduser(hostf
, raddr
, luser
, ruser
) == 0) {
293 if (first
== 1 && (__check_rhosts_file
|| superuser
)) {
298 if ((pwd
= getpwnam(luser
)) == NULL
)
301 dirlen
= strlen (pwd
->pw_dir
);
302 pbuf
= alloca (dirlen
+ sizeof "/.rhosts");
303 memcpy (pbuf
, pwd
->pw_dir
, dirlen
);
304 memcpy (pbuf
+ dirlen
, "/.rhosts", sizeof "/.rhosts");
307 * Change effective uid while opening .rhosts. If root and
308 * reading an NFS mounted file system, can't read files that
309 * are protected read/write owner only.
312 (void)seteuid(pwd
->pw_uid
);
313 hostf
= fopen(pbuf
, "r");
319 * If not a regular file, or is owned by someone other than
320 * user or root or if writeable by anyone but the owner, quit.
323 if (lstat(pbuf
, &sbuf
) < 0)
324 cp
= _(".rhosts lstat failed");
325 else if (!S_ISREG(sbuf
.st_mode
))
326 cp
= _(".rhosts not regular file");
327 else if (fstat(fileno(hostf
), &sbuf
) < 0)
328 cp
= _(".rhosts fstat failed");
329 else if (sbuf
.st_uid
&& sbuf
.st_uid
!= pwd
->pw_uid
)
330 cp
= _("bad .rhosts owner");
331 else if (sbuf
.st_mode
& (S_IWGRP
|S_IWOTH
))
332 cp
= _(".rhosts writeable by other than owner");
333 /* If there were any problems, quit. */
346 * Don't make static, used by lpd(8).
348 * Returns 0 if ok, -1 if not ok.
351 __ivaliduser(hostf
, raddr
, luser
, ruser
)
354 const char *luser
, *ruser
;
356 register char *user
, *p
;
362 while ((nread
= getline (&buf
, &bufsize
, hostf
)) > 0) {
363 buf
[bufsize
- 1] = '\0'; /* Make sure it's terminated. */
365 while (*p
!= '\n' && *p
!= ' ' && *p
!= '\t' && *p
!= '\0') {
366 *p
= isupper(*p
) ? tolower(*p
) : *p
;
369 if (*p
== ' ' || *p
== '\t') {
371 while (*p
== ' ' || *p
== '\t')
374 while (*p
!= '\n' && *p
!= ' ' &&
375 *p
!= '\t' && *p
!= '\0')
380 if (__icheckhost(raddr
, buf
) &&
381 strcmp(ruser
, *user
? user
: luser
) == 0) {
391 * Returns "true" if match, 0 if no match.
394 __icheckhost(raddr
, lhost
)
396 register char *lhost
;
398 register struct hostent
*hp
;
399 register u_int32_t laddr
;
402 /* Try for raw ip address first. */
403 if (isdigit(*lhost
) && (int32_t)(laddr
= inet_addr(lhost
)) != -1)
404 return (raddr
== laddr
);
406 /* Better be a hostname. */
407 if ((hp
= gethostbyname(lhost
)) == NULL
)
410 /* Spin through ip addresses. */
411 for (pp
= hp
->h_addr_list
; *pp
; ++pp
)
412 if (!bcmp(&raddr
, *pp
, sizeof(u_int32_t
)))