2 * Copyright (C) 1998 WIDE Project.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * Copyright (c) 1983, 1993, 1994
31 * The Regents of the University of California. All rights reserved.
33 * Redistribution and use in source and binary forms, with or without
34 * modification, are permitted provided that the following conditions
36 * 1. Redistributions of source code must retain the above copyright
37 * notice, this list of conditions and the following disclaimer.
38 * 2. Redistributions in binary form must reproduce the above copyright
39 * notice, this list of conditions and the following disclaimer in the
40 * documentation and/or other materials provided with the distribution.
41 * 4. Neither the name of the University nor the names of its contributors
42 * may be used to endorse or promote products derived from this software
43 * without specific prior written permission.
45 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
46 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
47 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
48 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
49 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
50 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
51 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
52 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
53 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
54 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
58 #if defined(LIBC_SCCS) && !defined(lint)
59 static char sccsid
[] = "@(#)rcmd.c 8.3 (Berkeley) 3/26/94";
60 #endif /* LIBC_SCCS and not lint */
62 #include <sys/param.h>
64 #include <sys/socket.h>
67 #include <netinet/in.h>
68 #include <arpa/inet.h>
84 int __ivaliduser (FILE *, u_int32_t
, const char *, const char *);
85 static int __validuser2_sa (FILE *, struct sockaddr
*, size_t,
86 const char *, const char *, const char *);
87 static int ruserok2_sa (struct sockaddr
*ra
, size_t ralen
,
88 int superuser
, const char *ruser
,
89 const char *luser
, const char *rhost
);
90 static int ruserok_sa (struct sockaddr
*ra
, size_t ralen
,
91 int superuser
, const char *ruser
,
93 int iruserok_af (const void *raddr
, int superuser
, const char *ruser
,
94 const char *luser
, sa_family_t af
);
95 int iruserok (u_int32_t raddr
, int superuser
, const char *ruser
,
98 static char ahostbuf
[NI_MAXHOST
];
101 rcmd_af(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
, af
)
104 const char *locuser
, *remuser
, *cmd
;
108 char paddr
[INET6_ADDRSTRLEN
];
109 struct addrinfo hints
, *res
, *ai
;
110 struct sockaddr_storage from
;
111 struct pollfd pfd
[2];
114 int s
, lport
, timo
, error
;
120 if (af
!= AF_INET
&& af
!= AF_INET6
)
122 __set_errno (EAFNOSUPPORT
);
128 memset(&hints
, '\0', sizeof(hints
));
129 hints
.ai_flags
= AI_CANONNAME
;
130 hints
.ai_family
= af
;
131 hints
.ai_socktype
= SOCK_STREAM
;
132 (void)__snprintf(num
, sizeof(num
), "%d", ntohs(rport
));
133 error
= getaddrinfo(*ahost
, num
, &hints
, &res
);
135 fprintf(stderr
, "rcmd: getaddrinfo: %s\n",
136 gai_strerror(error
));
140 pfd
[0].events
= POLLIN
;
141 pfd
[1].events
= POLLIN
;
143 if (res
->ai_canonname
){
144 strncpy(ahostbuf
, res
->ai_canonname
, sizeof(ahostbuf
));
145 ahostbuf
[sizeof(ahostbuf
)-1] = '\0';
152 oldmask
= __sigblock(sigmask(SIGURG
));
153 for (timo
= 1, lport
= IPPORT_RESERVED
- 1;;) {
154 s
= rresvport_af(&lport
, ai
->ai_family
);
158 _("rcmd: socket: All ports in use\n"));
160 fprintf(stderr
, "rcmd: socket: %m\n");
161 __sigsetmask(oldmask
);
165 __fcntl(s
, F_SETOWN
, pid
);
166 if (__connect(s
, ai
->ai_addr
, ai
->ai_addrlen
) >= 0)
169 if (errno
== EADDRINUSE
) {
173 if (errno
== ECONNREFUSED
)
175 if (ai
->ai_next
!= NULL
) {
178 getnameinfo(ai
->ai_addr
, ai
->ai_addrlen
,
179 paddr
, sizeof(paddr
),
182 fprintf(stderr
, "connect to address %s: ", paddr
);
183 __set_errno (oerrno
);
186 getnameinfo(ai
->ai_addr
, ai
->ai_addrlen
,
187 paddr
, sizeof(paddr
),
190 fprintf(stderr
, "Trying %s...\n", paddr
);
193 if (refused
&& timo
<= 16) {
201 (void)fprintf(stderr
, "%s: %s\n", *ahost
, strerror(errno
));
202 __sigsetmask(oldmask
);
211 int s2
= rresvport_af(&lport
, ai
->ai_family
), s3
;
212 socklen_t len
= ai
->ai_addrlen
;
217 (void)__snprintf(num
, sizeof(num
), "%d", lport
);
218 if (__write(s
, num
, strlen(num
)+1) != (ssize_t
)strlen(num
)+1) {
219 (void)fprintf(stderr
,
220 _("rcmd: write (setting up stderr): %m\n"));
227 if (__poll (pfd
, 2, -1) < 1 || (pfd
[1].revents
& POLLIN
) == 0){
229 (void)fprintf(stderr
,
230 _("rcmd: poll (setting up stderr): %m\n"));
232 (void)fprintf(stderr
,
233 _("poll: protocol failure in circuit setup\n"));
237 s3
= accept(s2
, (struct sockaddr
*)&from
, &len
);
238 switch (from
.ss_family
) {
240 rport
= ntohs(((struct sockaddr_in
*)&from
)->sin_port
);
243 rport
= ntohs(((struct sockaddr_in6
*)&from
)->sin6_port
);
251 (void)fprintf(stderr
,
252 "rcmd: accept: %m\n");
258 if (rport
>= IPPORT_RESERVED
|| rport
< IPPORT_RESERVED
/ 2){
259 (void)fprintf(stderr
,
260 _("socket: protocol failure in circuit setup\n"));
264 (void)__write(s
, locuser
, strlen(locuser
)+1);
265 (void)__write(s
, remuser
, strlen(remuser
)+1);
266 (void)__write(s
, cmd
, strlen(cmd
)+1);
267 n
= __read(s
, &c
, 1);
270 (void)fprintf(stderr
, _("rcmd: %s: short read"),
273 (void)fprintf(stderr
, "rcmd: %s: %m\n", *ahost
);
277 while (__read(s
, &c
, 1) == 1) {
278 (void)__write(STDERR_FILENO
, &c
, 1);
284 __sigsetmask(oldmask
);
289 (void)__close(*fd2p
);
292 __sigsetmask(oldmask
);
298 rcmd(ahost
, rport
, locuser
, remuser
, cmd
, fd2p
)
301 const char *locuser
, *remuser
, *cmd
;
304 return rcmd_af (ahost
, rport
, locuser
, remuser
, cmd
, fd2p
, AF_INET
);
308 rresvport_af(alport
, family
)
312 struct sockaddr_storage ss
;
319 len
= sizeof(struct sockaddr_in
);
320 sport
= &((struct sockaddr_in
*)&ss
)->sin_port
;
323 len
= sizeof(struct sockaddr_in6
);
324 sport
= &((struct sockaddr_in6
*)&ss
)->sin6_port
;
327 __set_errno (EAFNOSUPPORT
);
330 s
= __socket(family
, SOCK_STREAM
, 0);
334 memset (&ss
, '\0', sizeof(ss
));
338 ss
.ss_family
= family
;
341 *sport
= htons((uint16_t) *alport
);
342 if (bind(s
, (struct sockaddr
*)&ss
, len
) >= 0)
344 if (errno
!= EADDRINUSE
) {
349 if (*alport
== IPPORT_RESERVED
/2)
353 __set_errno (EAGAIN
);
361 return rresvport_af(alport
, AF_INET
);
364 int __check_rhosts_file
= 1;
368 ruserok_af(rhost
, superuser
, ruser
, luser
, af
)
369 const char *rhost
, *ruser
, *luser
;
373 struct addrinfo hints
, *res
, *res0
;
377 memset (&hints
, '\0', sizeof(hints
));
378 hints
.ai_family
= af
;
379 gai
= getaddrinfo(rhost
, NULL
, &hints
, &res0
);
383 for (res
=res0
; res
; res
=res
->ai_next
)
384 if (ruserok2_sa(res
->ai_addr
, res
->ai_addrlen
,
385 superuser
, ruser
, luser
, rhost
) == 0){
393 ruserok(rhost
, superuser
, ruser
, luser
)
394 const char *rhost
, *ruser
, *luser
;
397 return ruserok_af(rhost
, superuser
, ruser
, luser
, AF_INET
);
400 /* Extremely paranoid file open function. */
402 iruserfopen (const char *file
, uid_t okuser
)
408 /* If not a regular file, if owned by someone other than user or
409 root, if writeable by anyone but the owner, or if hardlinked
412 if (__lxstat64 (_STAT_VER
, file
, &st
))
413 cp
= _("lstat failed");
414 else if (!S_ISREG (st
.st_mode
))
415 cp
= _("not regular file");
418 res
= fopen (file
, "r");
420 cp
= _("cannot open");
421 else if (__fxstat64 (_STAT_VER
, fileno (res
), &st
) < 0)
422 cp
= _("fstat failed");
423 else if (st
.st_uid
&& st
.st_uid
!= okuser
)
425 else if (st
.st_mode
& (S_IWGRP
|S_IWOTH
))
426 cp
= _("writeable by other than owner");
427 else if (st
.st_nlink
> 1)
428 cp
= _("hard linked somewhere");
431 /* If there were any problems, quit. */
444 * New .rhosts strategy: We are passed an ip address. We spin through
445 * hosts.equiv and .rhosts looking for a match. When the .rhosts only
446 * has ip addresses, we don't have to trust a nameserver. When it
447 * contains hostnames, we spin through the list of addresses the nameserver
448 * gives us and look for a match.
450 * Returns 0 if ok, -1 if not ok.
453 ruserok2_sa (ra
, ralen
, superuser
, ruser
, luser
, rhost
)
457 const char *ruser
, *luser
, *rhost
;
463 hostf
= iruserfopen (_PATH_HEQUIV
, 0);
467 isbad
= __validuser2_sa (hostf
, ra
, ralen
, luser
, ruser
, rhost
);
474 if (__check_rhosts_file
|| superuser
)
477 struct passwd pwdbuf
, *pwd
;
479 size_t buflen
= __sysconf (_SC_GETPW_R_SIZE_MAX
);
480 char *buffer
= __alloca (buflen
);
483 if (__getpwnam_r (luser
, &pwdbuf
, buffer
, buflen
, &pwd
) != 0
487 dirlen
= strlen (pwd
->pw_dir
);
488 pbuf
= alloca (dirlen
+ sizeof "/.rhosts");
489 __mempcpy (__mempcpy (pbuf
, pwd
->pw_dir
, dirlen
),
490 "/.rhosts", sizeof "/.rhosts");
492 /* Change effective uid while reading .rhosts. If root and
493 reading an NFS mounted file system, can't read files that
494 are protected read/write owner only. */
496 seteuid (pwd
->pw_uid
);
497 hostf
= iruserfopen (pbuf
, pwd
->pw_uid
);
501 isbad
= __validuser2_sa (hostf
, ra
, ralen
, luser
, ruser
, rhost
);
511 * ruserok_sa() is now discussed on ipng, so
512 * currently disabled for external use
514 static int ruserok_sa(ra
, ralen
, superuser
, ruser
, luser
)
518 const char *ruser
, *luser
;
520 return ruserok2_sa(ra
, ralen
, superuser
, ruser
, luser
, "-");
523 /* This is the exported version. */
525 iruserok_af (raddr
, superuser
, ruser
, luser
, af
)
528 const char *ruser
, *luser
;
531 struct sockaddr_storage ra
;
534 memset (&ra
, '\0', sizeof(ra
));
537 ((struct sockaddr_in
*)&ra
)->sin_family
= AF_INET
;
538 memcpy (&(((struct sockaddr_in
*)&ra
)->sin_addr
), raddr
,
539 sizeof(struct in_addr
));
540 ralen
= sizeof(struct sockaddr_in
);
543 ((struct sockaddr_in6
*)&ra
)->sin6_family
= AF_INET6
;
544 memcpy (&(((struct sockaddr_in6
*)&ra
)->sin6_addr
), raddr
,
545 sizeof(struct in6_addr
));
546 ralen
= sizeof(struct sockaddr_in6
);
551 return ruserok_sa ((struct sockaddr
*)&ra
, ralen
, superuser
, ruser
, luser
);
554 iruserok (raddr
, superuser
, ruser
, luser
)
557 const char *ruser
, *luser
;
559 return iruserok_af (&raddr
, superuser
, ruser
, luser
, AF_INET
);
564 * Don't make static, used by lpd(8).
566 * This function is not used anymore. It is only present because lpd(8)
567 * calls it (!?!). We simply call __invaliduser2() with an illegal rhost
568 * argument. This means that netgroups won't work in .rhost/hosts.equiv
569 * files. If you want lpd to work with netgroups, fix lpd to use ruserok()
571 * Returns 0 if ok, -1 if not ok.
574 __ivaliduser(hostf
, raddr
, luser
, ruser
)
577 const char *luser
, *ruser
;
579 struct sockaddr_in ra
;
580 memset(&ra
, '\0', sizeof(ra
));
581 ra
.sin_family
= AF_INET
;
582 ra
.sin_addr
.s_addr
= raddr
;
583 return __validuser2_sa(hostf
, (struct sockaddr
*)&ra
, sizeof(ra
),
588 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
591 __checkhost_sa (struct sockaddr
*ra
, size_t ralen
, char *lhost
,
594 struct addrinfo hints
, *res0
, *res
;
595 char raddr
[INET6_ADDRSTRLEN
];
597 int negate
=1; /* Multiply return with this to get -1 instead of 1 */
599 /* Check nis netgroup. */
600 if (strncmp ("+@", lhost
, 2) == 0)
601 return innetgr (&lhost
[2], rhost
, NULL
, NULL
);
603 if (strncmp ("-@", lhost
, 2) == 0)
604 return -innetgr (&lhost
[2], rhost
, NULL
, NULL
);
607 if (strncmp ("-", lhost
,1) == 0) {
610 } else if (strcmp ("+",lhost
) == 0) {
611 return 1; /* asking for trouble, but ok.. */
614 /* Try for raw ip address first. */
616 if (getnameinfo(ra
, ralen
,
617 raddr
, sizeof(raddr
), NULL
, 0,
619 && strcmp(raddr
, lhost
) == 0)
622 /* Better be a hostname. */
624 memset(&hints
, '\0', sizeof(hints
));
625 hints
.ai_family
= ra
->sa_family
;
626 if (getaddrinfo(lhost
, NULL
, &hints
, &res0
) == 0){
627 /* Spin through ip addresses. */
628 for (res
= res0
; res
; res
= res
->ai_next
)
630 if (res
->ai_family
== ra
->sa_family
631 && !memcmp(res
->ai_addr
, ra
, res
->ai_addrlen
))
639 return negate
* match
;
642 /* Returns 1 on positive match, 0 on no match, -1 on negative match. */
645 __icheckuser (const char *luser
, const char *ruser
)
648 luser is user entry from .rhosts/hosts.equiv file
649 ruser is user id on remote host
653 if (strncmp ("+@", luser
, 2) == 0)
654 return innetgr (&luser
[2], NULL
, ruser
, NULL
);
656 if (strncmp ("-@", luser
,2) == 0)
657 return -innetgr (&luser
[2], NULL
, ruser
, NULL
);
660 if (strncmp ("-", luser
, 1) == 0)
661 return -(strcmp (&luser
[1], ruser
) == 0);
664 if (strcmp ("+", luser
) == 0)
667 /* simple string match */
668 return strcmp (ruser
, luser
) == 0;
672 * Returns 1 for blank lines (or only comment lines) and 0 otherwise
677 while (*p
&& isspace (*p
)) {
681 return (*p
== '\0' || *p
== '#') ? 1 : 0 ;
685 * Returns 0 if positive match, -1 if _not_ ok.
688 __validuser2_sa(hostf
, ra
, ralen
, luser
, ruser
, rhost
)
692 const char *luser
, *ruser
, *rhost
;
694 register const char *user
;
701 while (__getline (&buf
, &bufsize
, hostf
) > 0) {
702 buf
[bufsize
- 1] = '\0'; /* Make sure it's terminated. */
705 /* Skip empty or comment lines */
710 /* Skip lines that are too long. */
711 if (strchr (p
, '\n') == NULL
) {
712 int ch
= getc_unlocked (hostf
);
714 while (ch
!= '\n' && ch
!= EOF
)
715 ch
= getc_unlocked (hostf
);
719 for (;*p
&& !isspace(*p
); ++p
) {
723 /* Next we want to find the permitted name for the remote user. */
724 if (*p
== ' ' || *p
== '\t') {
725 /* <nul> terminate hostname and skip spaces */
726 for (*p
++='\0'; *p
&& isspace (*p
); ++p
);
728 user
= p
; /* this is the user's name */
729 while (*p
&& !isspace (*p
))
730 ++p
; /* find end of user's name */
734 *p
= '\0'; /* <nul> terminate username (+host?) */
736 /* buf -> host(?) ; user -> username(?) */
738 /* First check host part */
739 hcheck
= __checkhost_sa (ra
, ralen
, buf
, rhost
);
745 /* Then check user part */
749 ucheck
= __icheckuser (user
, ruser
);
751 /* Positive 'host user' match? */
757 /* Negative 'host -user' match? */
761 /* Neither, go on looking for match */