xref: /dflybsd-src/contrib/openpam/lib/libpam/openpam_load.c (revision 7031abe4d1ef8c309d4113438494530b74f3f3fe)
1*10b5fe87SSascha Wildner /*-
2*10b5fe87SSascha Wildner  * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3*10b5fe87SSascha Wildner  * Copyright (c) 2004-2013 Dag-Erling Smørgrav
4*10b5fe87SSascha Wildner  * All rights reserved.
5*10b5fe87SSascha Wildner  *
6*10b5fe87SSascha Wildner  * This software was developed for the FreeBSD Project by ThinkSec AS and
7*10b5fe87SSascha Wildner  * Network Associates Laboratories, the Security Research Division of
8*10b5fe87SSascha Wildner  * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
9*10b5fe87SSascha Wildner  * ("CBOSS"), as part of the DARPA CHATS research program.
10*10b5fe87SSascha Wildner  *
11*10b5fe87SSascha Wildner  * Redistribution and use in source and binary forms, with or without
12*10b5fe87SSascha Wildner  * modification, are permitted provided that the following conditions
13*10b5fe87SSascha Wildner  * are met:
14*10b5fe87SSascha Wildner  * 1. Redistributions of source code must retain the above copyright
15*10b5fe87SSascha Wildner  *    notice, this list of conditions and the following disclaimer.
16*10b5fe87SSascha Wildner  * 2. Redistributions in binary form must reproduce the above copyright
17*10b5fe87SSascha Wildner  *    notice, this list of conditions and the following disclaimer in the
18*10b5fe87SSascha Wildner  *    documentation and/or other materials provided with the distribution.
19*10b5fe87SSascha Wildner  * 3. The name of the author may not be used to endorse or promote
20*10b5fe87SSascha Wildner  *    products derived from this software without specific prior written
21*10b5fe87SSascha Wildner  *    permission.
22*10b5fe87SSascha Wildner  *
23*10b5fe87SSascha Wildner  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24*10b5fe87SSascha Wildner  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*10b5fe87SSascha Wildner  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*10b5fe87SSascha Wildner  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27*10b5fe87SSascha Wildner  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*10b5fe87SSascha Wildner  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*10b5fe87SSascha Wildner  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*10b5fe87SSascha Wildner  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*10b5fe87SSascha Wildner  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*10b5fe87SSascha Wildner  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*10b5fe87SSascha Wildner  * SUCH DAMAGE.
34*10b5fe87SSascha Wildner  *
35*10b5fe87SSascha Wildner  * $OpenPAM: openpam_load.c 938 2017-04-30 21:34:42Z des $
36*10b5fe87SSascha Wildner  */
37*10b5fe87SSascha Wildner 
38*10b5fe87SSascha Wildner #ifdef HAVE_CONFIG_H
39*10b5fe87SSascha Wildner # include "config.h"
40*10b5fe87SSascha Wildner #endif
41*10b5fe87SSascha Wildner 
42*10b5fe87SSascha Wildner #include <dlfcn.h>
43*10b5fe87SSascha Wildner #include <stdlib.h>
44*10b5fe87SSascha Wildner #include <string.h>
45*10b5fe87SSascha Wildner 
46*10b5fe87SSascha Wildner #include <security/pam_appl.h>
47*10b5fe87SSascha Wildner 
48*10b5fe87SSascha Wildner #include "openpam_impl.h"
49*10b5fe87SSascha Wildner 
50*10b5fe87SSascha Wildner /*
51*10b5fe87SSascha Wildner  * Locate a matching dynamic or static module.
52*10b5fe87SSascha Wildner  */
53*10b5fe87SSascha Wildner 
54*10b5fe87SSascha Wildner pam_module_t *
openpam_load_module(const char * modulename)55*10b5fe87SSascha Wildner openpam_load_module(const char *modulename)
56*10b5fe87SSascha Wildner {
57*10b5fe87SSascha Wildner 	pam_module_t *module;
58*10b5fe87SSascha Wildner 
59*10b5fe87SSascha Wildner 	module = openpam_dynamic(modulename);
60*10b5fe87SSascha Wildner 	openpam_log(PAM_LOG_DEBUG, "%s dynamic %s",
61*10b5fe87SSascha Wildner 	    (module == NULL) ? "no" : "using", modulename);
62*10b5fe87SSascha Wildner 
63*10b5fe87SSascha Wildner #ifdef OPENPAM_STATIC_MODULES
64*10b5fe87SSascha Wildner 	/* look for a static module */
65*10b5fe87SSascha Wildner 	if (module == NULL && strchr(modulename, '/') == NULL) {
66*10b5fe87SSascha Wildner 		module = openpam_static(modulename);
67*10b5fe87SSascha Wildner 		openpam_log(PAM_LOG_DEBUG, "%s static %s",
68*10b5fe87SSascha Wildner 		    (module == NULL) ? "no" : "using", modulename);
69*10b5fe87SSascha Wildner 	}
70*10b5fe87SSascha Wildner #endif
71*10b5fe87SSascha Wildner 	if (module == NULL) {
72*10b5fe87SSascha Wildner 		openpam_log(PAM_LOG_ERROR, "no %s found", modulename);
73*10b5fe87SSascha Wildner 		return (NULL);
74*10b5fe87SSascha Wildner 	}
75*10b5fe87SSascha Wildner 	return (module);
76*10b5fe87SSascha Wildner }
77*10b5fe87SSascha Wildner 
78*10b5fe87SSascha Wildner 
79*10b5fe87SSascha Wildner /*
80*10b5fe87SSascha Wildner  * Release a module.
81*10b5fe87SSascha Wildner  * XXX highly thread-unsafe
82*10b5fe87SSascha Wildner  */
83*10b5fe87SSascha Wildner 
84*10b5fe87SSascha Wildner static void
openpam_release_module(pam_module_t * module)85*10b5fe87SSascha Wildner openpam_release_module(pam_module_t *module)
86*10b5fe87SSascha Wildner {
87*10b5fe87SSascha Wildner 
88*10b5fe87SSascha Wildner 	if (module == NULL)
89*10b5fe87SSascha Wildner 		return;
90*10b5fe87SSascha Wildner 	if (module->dlh == NULL)
91*10b5fe87SSascha Wildner 		/* static module */
92*10b5fe87SSascha Wildner 		return;
93*10b5fe87SSascha Wildner 	dlclose(module->dlh);
94*10b5fe87SSascha Wildner 	openpam_log(PAM_LOG_DEBUG, "releasing %s", module->path);
95*10b5fe87SSascha Wildner 	FREE(module->path);
96*10b5fe87SSascha Wildner 	FREE(module);
97*10b5fe87SSascha Wildner }
98*10b5fe87SSascha Wildner 
99*10b5fe87SSascha Wildner 
100*10b5fe87SSascha Wildner /*
101*10b5fe87SSascha Wildner  * Destroy a chain, freeing all its links and releasing the modules
102*10b5fe87SSascha Wildner  * they point to.
103*10b5fe87SSascha Wildner  */
104*10b5fe87SSascha Wildner 
105*10b5fe87SSascha Wildner static void
openpam_destroy_chain(pam_chain_t * chain)106*10b5fe87SSascha Wildner openpam_destroy_chain(pam_chain_t *chain)
107*10b5fe87SSascha Wildner {
108*10b5fe87SSascha Wildner 
109*10b5fe87SSascha Wildner 	if (chain == NULL)
110*10b5fe87SSascha Wildner 		return;
111*10b5fe87SSascha Wildner 	openpam_destroy_chain(chain->next);
112*10b5fe87SSascha Wildner 	chain->next = NULL;
113*10b5fe87SSascha Wildner 	FREEV(chain->optc, chain->optv);
114*10b5fe87SSascha Wildner 	openpam_release_module(chain->module);
115*10b5fe87SSascha Wildner 	chain->module = NULL;
116*10b5fe87SSascha Wildner 	FREE(chain);
117*10b5fe87SSascha Wildner }
118*10b5fe87SSascha Wildner 
119*10b5fe87SSascha Wildner 
120*10b5fe87SSascha Wildner /*
121*10b5fe87SSascha Wildner  * Clear the chains and release the modules
122*10b5fe87SSascha Wildner  */
123*10b5fe87SSascha Wildner 
124*10b5fe87SSascha Wildner void
openpam_clear_chains(pam_chain_t * policy[])125*10b5fe87SSascha Wildner openpam_clear_chains(pam_chain_t *policy[])
126*10b5fe87SSascha Wildner {
127*10b5fe87SSascha Wildner 	int i;
128*10b5fe87SSascha Wildner 
129*10b5fe87SSascha Wildner 	for (i = 0; i < PAM_NUM_FACILITIES; ++i) {
130*10b5fe87SSascha Wildner 		openpam_destroy_chain(policy[i]);
131*10b5fe87SSascha Wildner 		policy[i] = NULL;
132*10b5fe87SSascha Wildner 	}
133*10b5fe87SSascha Wildner }
134*10b5fe87SSascha Wildner 
135*10b5fe87SSascha Wildner /*
136*10b5fe87SSascha Wildner  * NOPARSE
137*10b5fe87SSascha Wildner  */
138