1 /* $NetBSD: openpam_get_feature.c,v 1.4 2023/06/30 21:46:20 christos Exp $ */
2
3 /*-
4 * Copyright (c) 2012-2017 Dag-Erling Smørgrav
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. The name of the author may not be used to endorse or promote
16 * products derived from this software without specific prior written
17 * permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * SUCH DAMAGE.
30 */
31
32 #ifdef HAVE_CONFIG_H
33 # include "config.h"
34 #endif
35
36 #include <sys/cdefs.h>
37 __RCSID("$NetBSD: openpam_get_feature.c,v 1.4 2023/06/30 21:46:20 christos Exp $");
38
39 #include <security/pam_appl.h>
40 #include <security/openpam.h>
41
42 #include "openpam_impl.h"
43
44 /*
45 * OpenPAM extension
46 *
47 * Query the state of an optional feature.
48 */
49
50 int
openpam_get_feature(int feature,int * onoff)51 openpam_get_feature(int feature, int *onoff)
52 {
53
54 ENTERF(feature);
55 if (feature < 0 || feature >= OPENPAM_NUM_FEATURES)
56 RETURNC(PAM_BAD_FEATURE);
57 *onoff = openpam_features[feature].onoff;
58 RETURNC(PAM_SUCCESS);
59 }
60
61 /*
62 * Error codes:
63 *
64 * PAM_BAD_FEATURE
65 */
66
67 /**
68 * EXPERIMENTAL
69 *
70 * The =openpam_get_feature function stores the current state of the
71 * specified feature in the variable pointed to by its =onoff argument.
72 *
73 * The following features are recognized:
74 *
75 * =OPENPAM_RESTRICT_SERVICE_NAME:
76 * Disallow path separators in service names.
77 * This feature is enabled by default.
78 * Disabling it allows the application to specify the path to
79 * the desired policy file directly.
80 *
81 * =OPENPAM_VERIFY_POLICY_FILE:
82 * Verify the ownership and permissions of the policy file
83 * and the path leading up to it.
84 * This feature is enabled by default.
85 *
86 * =OPENPAM_RESTRICT_MODULE_NAME:
87 * Disallow path separators in module names.
88 * This feature is disabled by default.
89 * Enabling it prevents the use of modules in non-standard
90 * locations.
91 *
92 * =OPENPAM_VERIFY_MODULE_FILE:
93 * Verify the ownership and permissions of each loadable
94 * module and the path leading up to it.
95 * This feature is enabled by default.
96 *
97 *
98 * >openpam_set_feature
99 *
100 * AUTHOR DES
101 */
102