2 * Copyright (C) 1998 WIDE Project.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * Copyright (c) 1983, 1993, 1994
31 * The Regents of the University of California. All rights reserved.
33 * Redistribution and use in source and binary forms, with or without
34 * modification, are permitted provided that the following conditions
36 * 1. Redistributions of source code must retain the above copyright
37 * notice, this list of conditions and the following disclaimer.
38 * 2. Redistributions in binary form must reproduce the above copyright
39 * notice, this list of conditions and the following disclaimer in the
40 * documentation and/or other materials provided with the distribution.
41 * 4. Neither the name of the University nor the names of its contributors
42 * may be used to endorse or promote products derived from this software
43 * without specific prior written permission.
45 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
46 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
47 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
48 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
49 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
50 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
51 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
52 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
53 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
54 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
58 #if defined(LIBC_SCCS) && !defined(lint)
59 static char sccsid
[] = "@(#)rcmd.c 8.3 (Berkeley) 3/26/94";
60 #endif /* LIBC_SCCS and not lint */
62 #include <sys/param.h>
64 #include <sys/socket.h>
67 #include <netinet/in.h>
68 #include <arpa/inet.h>
78 #include <stdio_ext.h>
85 int __ivaliduser (FILE *, u_int32_t
, const char *, const char *);
86 static int __validuser2_sa (FILE *, struct sockaddr
*, size_t,
87 const char *, const char *, const char *);
88 static int ruserok2_sa (struct sockaddr
*ra
, size_t ralen
,
89 int superuser
, const char *ruser
,
90 const char *luser
, const char *rhost
);
91 static int ruserok_sa (struct sockaddr
*ra
, size_t ralen
,
92 int superuser
, const char *ruser
,
94 int iruserok_af (const void *raddr
, int superuser
, const char *ruser
,
95 const char *luser
, sa_family_t af
);
96 int iruserok (u_int32_t raddr
, int superuser
, const char *ruser
,
99 static char ahostbuf
[NI_MAXHOST
];
102 rcmd_af(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
, af
)
105 const char *locuser
, *remuser
, *cmd
;
109 char paddr
[INET6_ADDRSTRLEN
];
110 struct addrinfo hints
, *res
, *ai
;
111 struct sockaddr_storage from
;
112 struct pollfd pfd
[2];
115 int s
, lport
, timo
, error
;
121 if (af
!= AF_INET
&& af
!= AF_INET6
&& af
!= AF_UNSPEC
)
123 __set_errno (EAFNOSUPPORT
);
129 memset(&hints
, '\0', sizeof(hints
));
130 hints
.ai_flags
= AI_CANONNAME
;
131 hints
.ai_family
= af
;
132 hints
.ai_socktype
= SOCK_STREAM
;
133 (void)__snprintf(num
, sizeof(num
), "%d", ntohs(rport
));
134 error
= getaddrinfo(*ahost
, num
, &hints
, &res
);
136 fprintf(stderr
, "rcmd: getaddrinfo: %s\n",
137 gai_strerror(error
));
141 pfd
[0].events
= POLLIN
;
142 pfd
[1].events
= POLLIN
;
144 if (res
->ai_canonname
){
145 strncpy(ahostbuf
, res
->ai_canonname
, sizeof(ahostbuf
));
146 ahostbuf
[sizeof(ahostbuf
)-1] = '\0';
153 oldmask
= __sigblock(sigmask(SIGURG
));
154 for (timo
= 1, lport
= IPPORT_RESERVED
- 1;;) {
155 s
= rresvport_af(&lport
, ai
->ai_family
);
159 _("rcmd: socket: All ports in use\n"));
161 fprintf(stderr
, "rcmd: socket: %m\n");
162 __sigsetmask(oldmask
);
166 __fcntl(s
, F_SETOWN
, pid
);
167 if (__connect(s
, ai
->ai_addr
, ai
->ai_addrlen
) >= 0)
170 if (errno
== EADDRINUSE
) {
174 if (errno
== ECONNREFUSED
)
176 if (ai
->ai_next
!= NULL
) {
179 getnameinfo(ai
->ai_addr
, ai
->ai_addrlen
,
180 paddr
, sizeof(paddr
),
183 fprintf(stderr
, "connect to address %s: ", paddr
);
184 __set_errno (oerrno
);
187 getnameinfo(ai
->ai_addr
, ai
->ai_addrlen
,
188 paddr
, sizeof(paddr
),
191 fprintf(stderr
, "Trying %s...\n", paddr
);
194 if (refused
&& timo
<= 16) {
202 (void)fprintf(stderr
, "%s: %s\n", *ahost
, strerror(errno
));
203 __sigsetmask(oldmask
);
212 int s2
= rresvport_af(&lport
, ai
->ai_family
), s3
;
213 socklen_t len
= ai
->ai_addrlen
;
218 (void)__snprintf(num
, sizeof(num
), "%d", lport
);
219 if (__write(s
, num
, strlen(num
)+1) != (ssize_t
)strlen(num
)+1) {
220 (void)fprintf(stderr
,
221 _("rcmd: write (setting up stderr): %m\n"));
228 if (__poll (pfd
, 2, -1) < 1 || (pfd
[1].revents
& POLLIN
) == 0){
230 (void)fprintf(stderr
,
231 _("rcmd: poll (setting up stderr): %m\n"));
233 (void)fprintf(stderr
,
234 _("poll: protocol failure in circuit setup\n"));
238 s3
= accept(s2
, (struct sockaddr
*)&from
, &len
);
239 switch (from
.ss_family
) {
241 rport
= ntohs(((struct sockaddr_in
*)&from
)->sin_port
);
244 rport
= ntohs(((struct sockaddr_in6
*)&from
)->sin6_port
);
252 (void)fprintf(stderr
,
253 "rcmd: accept: %m\n");
259 if (rport
>= IPPORT_RESERVED
|| rport
< IPPORT_RESERVED
/ 2){
260 (void)fprintf(stderr
,
261 _("socket: protocol failure in circuit setup\n"));
265 (void)__write(s
, locuser
, strlen(locuser
)+1);
266 (void)__write(s
, remuser
, strlen(remuser
)+1);
267 (void)__write(s
, cmd
, strlen(cmd
)+1);
268 n
= __read(s
, &c
, 1);
271 (void)fprintf(stderr
, _("rcmd: %s: short read"),
274 (void)fprintf(stderr
, "rcmd: %s: %m\n", *ahost
);
278 while (__read(s
, &c
, 1) == 1) {
279 (void)__write(STDERR_FILENO
, &c
, 1);
285 __sigsetmask(oldmask
);
290 (void)__close(*fd2p
);
293 __sigsetmask(oldmask
);
299 rcmd(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
)
302 const char *locuser
, *remuser
, *cmd
;
305 return rcmd_af (ahost
, rport
, locuser
, remuser
, cmd
, fd2p
, AF_INET
);
309 rresvport_af(alport
, family
)
313 struct sockaddr_storage ss
;
320 len
= sizeof(struct sockaddr_in
);
321 sport
= &((struct sockaddr_in
*)&ss
)->sin_port
;
324 len
= sizeof(struct sockaddr_in6
);
325 sport
= &((struct sockaddr_in6
*)&ss
)->sin6_port
;
328 __set_errno (EAFNOSUPPORT
);
331 s
= __socket(family
, SOCK_STREAM
, 0);
335 memset (&ss
, '\0', sizeof(ss
));
339 ss
.ss_family
= family
;
342 *sport
= htons((uint16_t) *alport
);
343 if (bind(s
, (struct sockaddr
*)&ss
, len
) >= 0)
345 if (errno
!= EADDRINUSE
) {
350 if (*alport
== IPPORT_RESERVED
/2)
354 __set_errno (EAGAIN
);
362 return rresvport_af(alport
, AF_INET
);
365 int __check_rhosts_file
= 1;
369 ruserok_af(rhost
, superuser
, ruser
, luser
, af
)
370 const char *rhost
, *ruser
, *luser
;
374 struct addrinfo hints
, *res
, *res0
;
378 memset (&hints
, '\0', sizeof(hints
));
379 hints
.ai_family
= af
;
380 gai
= getaddrinfo(rhost
, NULL
, &hints
, &res0
);
384 for (res
=res0
; res
; res
=res
->ai_next
)
385 if (ruserok2_sa(res
->ai_addr
, res
->ai_addrlen
,
386 superuser
, ruser
, luser
, rhost
) == 0){
394 ruserok(rhost
, superuser
, ruser
, luser
)
395 const char *rhost
, *ruser
, *luser
;
398 return ruserok_af(rhost
, superuser
, ruser
, luser
, AF_INET
);
401 /* Extremely paranoid file open function. */
403 iruserfopen (const char *file
, uid_t okuser
)
409 /* If not a regular file, if owned by someone other than user or
410 root, if writeable by anyone but the owner, or if hardlinked
413 if (__lxstat64 (_STAT_VER
, file
, &st
))
414 cp
= _("lstat failed");
415 else if (!S_ISREG (st
.st_mode
))
416 cp
= _("not regular file");
419 res
= fopen (file
, "r");
421 cp
= _("cannot open");
422 else if (__fxstat64 (_STAT_VER
, fileno (res
), &st
) < 0)
423 cp
= _("fstat failed");
424 else if (st
.st_uid
&& st
.st_uid
!= okuser
)
426 else if (st
.st_mode
& (S_IWGRP
|S_IWOTH
))
427 cp
= _("writeable by other than owner");
428 else if (st
.st_nlink
> 1)
429 cp
= _("hard linked somewhere");
432 /* If there were any problems, quit. */
441 /* No threads use this stream. */
442 __fsetlocking (res
, FSETLOCKING_BYCALLER
);
448 * New .rhosts strategy: We are passed an ip address. We spin through
449 * hosts.equiv and .rhosts looking for a match. When the .rhosts only
450 * has ip addresses, we don't have to trust a nameserver. When it
451 * contains hostnames, we spin through the list of addresses the nameserver
452 * gives us and look for a match.
454 * Returns 0 if ok, -1 if not ok.
457 ruserok2_sa (ra
, ralen
, superuser
, ruser
, luser
, rhost
)
461 const char *ruser
, *luser
, *rhost
;
467 hostf
= iruserfopen (_PATH_HEQUIV
, 0);
471 isbad
= __validuser2_sa (hostf
, ra
, ralen
, luser
, ruser
, rhost
);
478 if (__check_rhosts_file
|| superuser
)
481 struct passwd pwdbuf
, *pwd
;
483 size_t buflen
= __sysconf (_SC_GETPW_R_SIZE_MAX
);
484 char *buffer
= __alloca (buflen
);
487 if (__getpwnam_r (luser
, &pwdbuf
, buffer
, buflen
, &pwd
) != 0
491 dirlen
= strlen (pwd
->pw_dir
);
492 pbuf
= alloca (dirlen
+ sizeof "/.rhosts");
493 __mempcpy (__mempcpy (pbuf
, pwd
->pw_dir
, dirlen
),
494 "/.rhosts", sizeof "/.rhosts");
496 /* Change effective uid while reading .rhosts. If root and
497 reading an NFS mounted file system, can't read files that
498 are protected read/write owner only. */
500 seteuid (pwd
->pw_uid
);
501 hostf
= iruserfopen (pbuf
, pwd
->pw_uid
);
505 isbad
= __validuser2_sa (hostf
, ra
, ralen
, luser
, ruser
, rhost
);
515 * ruserok_sa() is now discussed on ipng, so
516 * currently disabled for external use
518 static int ruserok_sa(ra
, ralen
, superuser
, ruser
, luser
)
522 const char *ruser
, *luser
;
524 return ruserok2_sa(ra
, ralen
, superuser
, ruser
, luser
, "-");
527 /* This is the exported version. */
529 iruserok_af (raddr
, superuser
, ruser
, luser
, af
)
532 const char *ruser
, *luser
;
535 struct sockaddr_storage ra
;
538 memset (&ra
, '\0', sizeof(ra
));
541 ((struct sockaddr_in
*)&ra
)->sin_family
= AF_INET
;
542 memcpy (&(((struct sockaddr_in
*)&ra
)->sin_addr
), raddr
,
543 sizeof(struct in_addr
));
544 ralen
= sizeof(struct sockaddr_in
);
547 ((struct sockaddr_in6
*)&ra
)->sin6_family
= AF_INET6
;
548 memcpy (&(((struct sockaddr_in6
*)&ra
)->sin6_addr
), raddr
,
549 sizeof(struct in6_addr
));
550 ralen
= sizeof(struct sockaddr_in6
);
555 return ruserok_sa ((struct sockaddr
*)&ra
, ralen
, superuser
, ruser
, luser
);
558 iruserok (raddr
, superuser
, ruser
, luser
)
561 const char *ruser
, *luser
;
563 return iruserok_af (&raddr
, superuser
, ruser
, luser
, AF_INET
);
568 * Don't make static, used by lpd(8).
570 * This function is not used anymore. It is only present because lpd(8)
571 * calls it (!?!). We simply call __invaliduser2() with an illegal rhost
572 * argument. This means that netgroups won't work in .rhost/hosts.equiv
573 * files. If you want lpd to work with netgroups, fix lpd to use ruserok()
575 * Returns 0 if ok, -1 if not ok.
578 __ivaliduser(hostf
, raddr
, luser
, ruser
)
581 const char *luser
, *ruser
;
583 struct sockaddr_in ra
;
584 memset(&ra
, '\0', sizeof(ra
));
585 ra
.sin_family
= AF_INET
;
586 ra
.sin_addr
.s_addr
= raddr
;
587 return __validuser2_sa(hostf
, (struct sockaddr
*)&ra
, sizeof(ra
),
592 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
595 __checkhost_sa (struct sockaddr
*ra
, size_t ralen
, char *lhost
,
598 struct addrinfo hints
, *res0
, *res
;
599 char raddr
[INET6_ADDRSTRLEN
];
601 int negate
=1; /* Multiply return with this to get -1 instead of 1 */
603 /* Check nis netgroup. */
604 if (strncmp ("+@", lhost
, 2) == 0)
605 return innetgr (&lhost
[2], rhost
, NULL
, NULL
);
607 if (strncmp ("-@", lhost
, 2) == 0)
608 return -innetgr (&lhost
[2], rhost
, NULL
, NULL
);
611 if (strncmp ("-", lhost
,1) == 0) {
614 } else if (strcmp ("+",lhost
) == 0) {
615 return 1; /* asking for trouble, but ok.. */
618 /* Try for raw ip address first. */
620 if (getnameinfo(ra
, ralen
,
621 raddr
, sizeof(raddr
), NULL
, 0,
623 && strcmp(raddr
, lhost
) == 0)
626 /* Better be a hostname. */
628 memset(&hints
, '\0', sizeof(hints
));
629 hints
.ai_family
= ra
->sa_family
;
630 if (getaddrinfo(lhost
, NULL
, &hints
, &res0
) == 0){
631 /* Spin through ip addresses. */
632 for (res
= res0
; res
; res
= res
->ai_next
)
634 if (res
->ai_family
== ra
->sa_family
635 && !memcmp(res
->ai_addr
, ra
, res
->ai_addrlen
))
643 return negate
* match
;
646 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
649 __icheckuser (const char *luser
, const char *ruser
)
652 luser is user entry from .rhosts/hosts.equiv file
653 ruser is user id on remote host
657 if (strncmp ("+@", luser
, 2) == 0)
658 return innetgr (&luser
[2], NULL
, ruser
, NULL
);
660 if (strncmp ("-@", luser
,2) == 0)
661 return -innetgr (&luser
[2], NULL
, ruser
, NULL
);
664 if (strncmp ("-", luser
, 1) == 0)
665 return -(strcmp (&luser
[1], ruser
) == 0);
668 if (strcmp ("+", luser
) == 0)
671 /* simple string match */
672 return strcmp (ruser
, luser
) == 0;
676 * Returns 1 for blank lines (or only comment lines) and 0 otherwise
681 while (*p
&& isspace (*p
)) {
685 return (*p
== '\0' || *p
== '#') ? 1 : 0 ;
689 * Returns 0 if positive match, -1 if _not_ ok.
692 __validuser2_sa(hostf
, ra
, ralen
, luser
, ruser
, rhost
)
696 const char *luser
, *ruser
, *rhost
;
698 register const char *user
;
705 while (__getline (&buf
, &bufsize
, hostf
) > 0) {
706 buf
[bufsize
- 1] = '\0'; /* Make sure it's terminated. */
709 /* Skip empty or comment lines */
714 /* Skip lines that are too long. */
715 if (strchr (p
, '\n') == NULL
) {
716 int ch
= getc_unlocked (hostf
);
718 while (ch
!= '\n' && ch
!= EOF
)
719 ch
= getc_unlocked (hostf
);
723 for (;*p
&& !isspace(*p
); ++p
) {
727 /* Next we want to find the permitted name for the remote user. */
728 if (*p
== ' ' || *p
== '\t') {
729 /* <nul> terminate hostname and skip spaces */
730 for (*p
++='\0'; *p
&& isspace (*p
); ++p
);
732 user
= p
; /* this is the user's name */
733 while (*p
&& !isspace (*p
))
734 ++p
; /* find end of user's name */
738 *p
= '\0'; /* <nul> terminate username (+host?) */
740 /* buf -> host(?) ; user -> username(?) */
742 /* First check host part */
743 hcheck
= __checkhost_sa (ra
, ralen
, buf
, rhost
);
749 /* Then check user part */
753 ucheck
= __icheckuser (user
, ruser
);
755 /* Positive 'host user' match? */
761 /* Negative 'host -user' match? */
765 /* Neither, go on looking for match */