1*10b5fe87SSascha Wildner /*-
2*10b5fe87SSascha Wildner * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3*10b5fe87SSascha Wildner * Copyright (c) 2004-2013 Dag-Erling Smørgrav
4*10b5fe87SSascha Wildner * All rights reserved.
5*10b5fe87SSascha Wildner *
6*10b5fe87SSascha Wildner * This software was developed for the FreeBSD Project by ThinkSec AS and
7*10b5fe87SSascha Wildner * Network Associates Laboratories, the Security Research Division of
8*10b5fe87SSascha Wildner * Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035
9*10b5fe87SSascha Wildner * ("CBOSS"), as part of the DARPA CHATS research program.
10*10b5fe87SSascha Wildner *
11*10b5fe87SSascha Wildner * Redistribution and use in source and binary forms, with or without
12*10b5fe87SSascha Wildner * modification, are permitted provided that the following conditions
13*10b5fe87SSascha Wildner * are met:
14*10b5fe87SSascha Wildner * 1. Redistributions of source code must retain the above copyright
15*10b5fe87SSascha Wildner * notice, this list of conditions and the following disclaimer.
16*10b5fe87SSascha Wildner * 2. Redistributions in binary form must reproduce the above copyright
17*10b5fe87SSascha Wildner * notice, this list of conditions and the following disclaimer in the
18*10b5fe87SSascha Wildner * documentation and/or other materials provided with the distribution.
19*10b5fe87SSascha Wildner * 3. The name of the author may not be used to endorse or promote
20*10b5fe87SSascha Wildner * products derived from this software without specific prior written
21*10b5fe87SSascha Wildner * permission.
22*10b5fe87SSascha Wildner *
23*10b5fe87SSascha Wildner * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24*10b5fe87SSascha Wildner * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*10b5fe87SSascha Wildner * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*10b5fe87SSascha Wildner * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27*10b5fe87SSascha Wildner * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*10b5fe87SSascha Wildner * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*10b5fe87SSascha Wildner * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*10b5fe87SSascha Wildner * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*10b5fe87SSascha Wildner * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*10b5fe87SSascha Wildner * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*10b5fe87SSascha Wildner * SUCH DAMAGE.
34*10b5fe87SSascha Wildner *
35*10b5fe87SSascha Wildner * $OpenPAM: openpam_load.c 938 2017-04-30 21:34:42Z des $
36*10b5fe87SSascha Wildner */
37*10b5fe87SSascha Wildner
38*10b5fe87SSascha Wildner #ifdef HAVE_CONFIG_H
39*10b5fe87SSascha Wildner # include "config.h"
40*10b5fe87SSascha Wildner #endif
41*10b5fe87SSascha Wildner
42*10b5fe87SSascha Wildner #include <dlfcn.h>
43*10b5fe87SSascha Wildner #include <stdlib.h>
44*10b5fe87SSascha Wildner #include <string.h>
45*10b5fe87SSascha Wildner
46*10b5fe87SSascha Wildner #include <security/pam_appl.h>
47*10b5fe87SSascha Wildner
48*10b5fe87SSascha Wildner #include "openpam_impl.h"
49*10b5fe87SSascha Wildner
50*10b5fe87SSascha Wildner /*
51*10b5fe87SSascha Wildner * Locate a matching dynamic or static module.
52*10b5fe87SSascha Wildner */
53*10b5fe87SSascha Wildner
54*10b5fe87SSascha Wildner pam_module_t *
openpam_load_module(const char * modulename)55*10b5fe87SSascha Wildner openpam_load_module(const char *modulename)
56*10b5fe87SSascha Wildner {
57*10b5fe87SSascha Wildner pam_module_t *module;
58*10b5fe87SSascha Wildner
59*10b5fe87SSascha Wildner module = openpam_dynamic(modulename);
60*10b5fe87SSascha Wildner openpam_log(PAM_LOG_DEBUG, "%s dynamic %s",
61*10b5fe87SSascha Wildner (module == NULL) ? "no" : "using", modulename);
62*10b5fe87SSascha Wildner
63*10b5fe87SSascha Wildner #ifdef OPENPAM_STATIC_MODULES
64*10b5fe87SSascha Wildner /* look for a static module */
65*10b5fe87SSascha Wildner if (module == NULL && strchr(modulename, '/') == NULL) {
66*10b5fe87SSascha Wildner module = openpam_static(modulename);
67*10b5fe87SSascha Wildner openpam_log(PAM_LOG_DEBUG, "%s static %s",
68*10b5fe87SSascha Wildner (module == NULL) ? "no" : "using", modulename);
69*10b5fe87SSascha Wildner }
70*10b5fe87SSascha Wildner #endif
71*10b5fe87SSascha Wildner if (module == NULL) {
72*10b5fe87SSascha Wildner openpam_log(PAM_LOG_ERROR, "no %s found", modulename);
73*10b5fe87SSascha Wildner return (NULL);
74*10b5fe87SSascha Wildner }
75*10b5fe87SSascha Wildner return (module);
76*10b5fe87SSascha Wildner }
77*10b5fe87SSascha Wildner
78*10b5fe87SSascha Wildner
79*10b5fe87SSascha Wildner /*
80*10b5fe87SSascha Wildner * Release a module.
81*10b5fe87SSascha Wildner * XXX highly thread-unsafe
82*10b5fe87SSascha Wildner */
83*10b5fe87SSascha Wildner
84*10b5fe87SSascha Wildner static void
openpam_release_module(pam_module_t * module)85*10b5fe87SSascha Wildner openpam_release_module(pam_module_t *module)
86*10b5fe87SSascha Wildner {
87*10b5fe87SSascha Wildner
88*10b5fe87SSascha Wildner if (module == NULL)
89*10b5fe87SSascha Wildner return;
90*10b5fe87SSascha Wildner if (module->dlh == NULL)
91*10b5fe87SSascha Wildner /* static module */
92*10b5fe87SSascha Wildner return;
93*10b5fe87SSascha Wildner dlclose(module->dlh);
94*10b5fe87SSascha Wildner openpam_log(PAM_LOG_DEBUG, "releasing %s", module->path);
95*10b5fe87SSascha Wildner FREE(module->path);
96*10b5fe87SSascha Wildner FREE(module);
97*10b5fe87SSascha Wildner }
98*10b5fe87SSascha Wildner
99*10b5fe87SSascha Wildner
100*10b5fe87SSascha Wildner /*
101*10b5fe87SSascha Wildner * Destroy a chain, freeing all its links and releasing the modules
102*10b5fe87SSascha Wildner * they point to.
103*10b5fe87SSascha Wildner */
104*10b5fe87SSascha Wildner
105*10b5fe87SSascha Wildner static void
openpam_destroy_chain(pam_chain_t * chain)106*10b5fe87SSascha Wildner openpam_destroy_chain(pam_chain_t *chain)
107*10b5fe87SSascha Wildner {
108*10b5fe87SSascha Wildner
109*10b5fe87SSascha Wildner if (chain == NULL)
110*10b5fe87SSascha Wildner return;
111*10b5fe87SSascha Wildner openpam_destroy_chain(chain->next);
112*10b5fe87SSascha Wildner chain->next = NULL;
113*10b5fe87SSascha Wildner FREEV(chain->optc, chain->optv);
114*10b5fe87SSascha Wildner openpam_release_module(chain->module);
115*10b5fe87SSascha Wildner chain->module = NULL;
116*10b5fe87SSascha Wildner FREE(chain);
117*10b5fe87SSascha Wildner }
118*10b5fe87SSascha Wildner
119*10b5fe87SSascha Wildner
120*10b5fe87SSascha Wildner /*
121*10b5fe87SSascha Wildner * Clear the chains and release the modules
122*10b5fe87SSascha Wildner */
123*10b5fe87SSascha Wildner
124*10b5fe87SSascha Wildner void
openpam_clear_chains(pam_chain_t * policy[])125*10b5fe87SSascha Wildner openpam_clear_chains(pam_chain_t *policy[])
126*10b5fe87SSascha Wildner {
127*10b5fe87SSascha Wildner int i;
128*10b5fe87SSascha Wildner
129*10b5fe87SSascha Wildner for (i = 0; i < PAM_NUM_FACILITIES; ++i) {
130*10b5fe87SSascha Wildner openpam_destroy_chain(policy[i]);
131*10b5fe87SSascha Wildner policy[i] = NULL;
132*10b5fe87SSascha Wildner }
133*10b5fe87SSascha Wildner }
134*10b5fe87SSascha Wildner
135*10b5fe87SSascha Wildner /*
136*10b5fe87SSascha Wildner * NOPARSE
137*10b5fe87SSascha Wildner */
138