1*86d7f5d3SJohn Marino /*-
2*86d7f5d3SJohn Marino * Copyright (c) 1999 Robert N. M. Watson
3*86d7f5d3SJohn Marino * All rights reserved.
4*86d7f5d3SJohn Marino *
5*86d7f5d3SJohn Marino * Redistribution and use in source and binary forms, with or without
6*86d7f5d3SJohn Marino * modification, are permitted provided that the following conditions
7*86d7f5d3SJohn Marino * are met:
8*86d7f5d3SJohn Marino * 1. Redistributions of source code must retain the above copyright
9*86d7f5d3SJohn Marino * notice, this list of conditions and the following disclaimer.
10*86d7f5d3SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
11*86d7f5d3SJohn Marino * notice, this list of conditions and the following disclaimer in the
12*86d7f5d3SJohn Marino * documentation and/or other materials provided with the distribution.
13*86d7f5d3SJohn Marino *
14*86d7f5d3SJohn Marino * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15*86d7f5d3SJohn Marino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16*86d7f5d3SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17*86d7f5d3SJohn Marino * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18*86d7f5d3SJohn Marino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19*86d7f5d3SJohn Marino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20*86d7f5d3SJohn Marino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21*86d7f5d3SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22*86d7f5d3SJohn Marino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23*86d7f5d3SJohn Marino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24*86d7f5d3SJohn Marino * SUCH DAMAGE.
25*86d7f5d3SJohn Marino *
26*86d7f5d3SJohn Marino *$FreeBSD: src/lib/libposix1e/acl_valid.c,v 1.4 2000/01/28 20:07:00 rwatson Exp $
27*86d7f5d3SJohn Marino *$DragonFly: src/lib/libposix1e/acl_valid.c,v 1.3 2005/08/04 17:27:09 drhodus Exp $
28*86d7f5d3SJohn Marino */
29*86d7f5d3SJohn Marino /*
30*86d7f5d3SJohn Marino * acl_valid -- POSIX.1e ACL check routine
31*86d7f5d3SJohn Marino */
32*86d7f5d3SJohn Marino
33*86d7f5d3SJohn Marino #include <sys/types.h>
34*86d7f5d3SJohn Marino #include <sys/acl.h>
35*86d7f5d3SJohn Marino #include <sys/errno.h>
36*86d7f5d3SJohn Marino
37*86d7f5d3SJohn Marino #include "acl_support.h"
38*86d7f5d3SJohn Marino
39*86d7f5d3SJohn Marino /*
40*86d7f5d3SJohn Marino * acl_valid: accepts an ACL, returns 0 on valid ACL, -1 for invalid,
41*86d7f5d3SJohn Marino * and errno set to EINVAL.
42*86d7f5d3SJohn Marino *
43*86d7f5d3SJohn Marino * Implemented by calling the acl_check routine in acl_support, which
44*86d7f5d3SJohn Marino * requires ordering. We call acl_support's acl_sort to make this
45*86d7f5d3SJohn Marino * true. POSIX.1e allows acl_valid() to reorder the ACL as it sees fit.
46*86d7f5d3SJohn Marino *
47*86d7f5d3SJohn Marino * This call is deprecated, as it doesn't ask whether the ACL is valid
48*86d7f5d3SJohn Marino * for a particular target. However, this call is standardized, unlike
49*86d7f5d3SJohn Marino * the other two forms.
50*86d7f5d3SJohn Marino */
51*86d7f5d3SJohn Marino int
acl_valid(acl_t acl)52*86d7f5d3SJohn Marino acl_valid(acl_t acl)
53*86d7f5d3SJohn Marino {
54*86d7f5d3SJohn Marino int error;
55*86d7f5d3SJohn Marino
56*86d7f5d3SJohn Marino acl_sort(acl);
57*86d7f5d3SJohn Marino error = acl_check(acl);
58*86d7f5d3SJohn Marino if (error) {
59*86d7f5d3SJohn Marino errno = error;
60*86d7f5d3SJohn Marino return (-1);
61*86d7f5d3SJohn Marino } else {
62*86d7f5d3SJohn Marino return (0);
63*86d7f5d3SJohn Marino }
64*86d7f5d3SJohn Marino }
65*86d7f5d3SJohn Marino
66*86d7f5d3SJohn Marino
67*86d7f5d3SJohn Marino int
acl_valid_file_np(const char * pathp,acl_type_t type,acl_t acl)68*86d7f5d3SJohn Marino acl_valid_file_np(const char *pathp, acl_type_t type, acl_t acl)
69*86d7f5d3SJohn Marino {
70*86d7f5d3SJohn Marino int error;
71*86d7f5d3SJohn Marino
72*86d7f5d3SJohn Marino if (acl_posix1e(acl, type)) {
73*86d7f5d3SJohn Marino error = acl_sort(acl);
74*86d7f5d3SJohn Marino if (error) {
75*86d7f5d3SJohn Marino errno = error;
76*86d7f5d3SJohn Marino return (-1);
77*86d7f5d3SJohn Marino }
78*86d7f5d3SJohn Marino }
79*86d7f5d3SJohn Marino
80*86d7f5d3SJohn Marino return (__acl_aclcheck_file(pathp, type, acl));
81*86d7f5d3SJohn Marino }
82*86d7f5d3SJohn Marino
83*86d7f5d3SJohn Marino
84*86d7f5d3SJohn Marino int
acl_valid_fd_np(int fd,acl_type_t type,acl_t acl)85*86d7f5d3SJohn Marino acl_valid_fd_np(int fd, acl_type_t type, acl_t acl)
86*86d7f5d3SJohn Marino {
87*86d7f5d3SJohn Marino int error;
88*86d7f5d3SJohn Marino
89*86d7f5d3SJohn Marino if (acl_posix1e(acl, type)) {
90*86d7f5d3SJohn Marino error = acl_sort(acl);
91*86d7f5d3SJohn Marino if (error) {
92*86d7f5d3SJohn Marino errno = error;
93*86d7f5d3SJohn Marino return (-1);
94*86d7f5d3SJohn Marino }
95*86d7f5d3SJohn Marino }
96*86d7f5d3SJohn Marino
97*86d7f5d3SJohn Marino return (__acl_aclcheck_fd(fd, type, acl));
98*86d7f5d3SJohn Marino }
99