1*0d9d0fd8Schristos.\" $NetBSD: openpam_get_feature.3,v 1.8 2023/06/30 21:46:20 christos Exp $ 223e44a77Schristos.\" 38fa0fefeSchristos.\" Generated from openpam_get_feature.c by gendoc.pl 4*0d9d0fd8Schristos.Dd June 27, 2023 523e44a77Schristos.Dt OPENPAM_GET_FEATURE 3 623e44a77Schristos.Os 723e44a77Schristos.Sh NAME 823e44a77Schristos.Nm openpam_get_feature 923e44a77Schristos.Nd query the state of an optional feature 1023e44a77Schristos.Sh SYNOPSIS 1123e44a77Schristos.In sys/types.h 1223e44a77Schristos.In security/pam_appl.h 1323e44a77Schristos.In security/openpam.h 1423e44a77Schristos.Ft "int" 1523e44a77Schristos.Fn openpam_get_feature "int feature" "int *onoff" 1623e44a77Schristos.Sh DESCRIPTION 1723e44a77Schristos.Bf Sy 188fa0fefeSchristosThis function is experimental and may be modified or removed in a future release without prior warning. 1923e44a77Schristos.Ef 2023e44a77Schristos.Pp 2123e44a77SchristosThe 2223e44a77Schristos.Fn openpam_get_feature 2323e44a77Schristosfunction stores the current state of the 2423e44a77Schristosspecified feature in the variable pointed to by its 2523e44a77Schristos.Fa onoff 2623e44a77Schristosargument. 2723e44a77Schristos.Pp 2823e44a77SchristosThe following features are recognized: 2923e44a77Schristos.Bl -tag -width 18n 3023e44a77Schristos.It Dv OPENPAM_RESTRICT_SERVICE_NAME 3123e44a77SchristosDisallow path separators in service names. 3223e44a77SchristosThis feature is enabled by default. 3323e44a77SchristosDisabling it allows the application to specify the path to 3423e44a77Schristosthe desired policy file directly. 3523e44a77Schristos.It Dv OPENPAM_VERIFY_POLICY_FILE 3623e44a77SchristosVerify the ownership and permissions of the policy file 3723e44a77Schristosand the path leading up to it. 3823e44a77SchristosThis feature is enabled by default. 3923e44a77Schristos.It Dv OPENPAM_RESTRICT_MODULE_NAME 4023e44a77SchristosDisallow path separators in module names. 4123e44a77SchristosThis feature is disabled by default. 4223e44a77SchristosEnabling it prevents the use of modules in non-standard 4323e44a77Schristoslocations. 4423e44a77Schristos.It Dv OPENPAM_VERIFY_MODULE_FILE 4523e44a77SchristosVerify the ownership and permissions of each loadable 4623e44a77Schristosmodule and the path leading up to it. 4723e44a77SchristosThis feature is enabled by default. 4823e44a77Schristos.El 4923e44a77Schristos.Sh RETURN VALUES 5023e44a77SchristosThe 5123e44a77Schristos.Fn openpam_get_feature 5223e44a77Schristosfunction returns one of the following values: 5323e44a77Schristos.Bl -tag -width 18n 544cb4af11Schristos.It Bq Er PAM_SUCCESS 554cb4af11SchristosSuccess. 564cb4af11Schristos.It Bq Er PAM_BAD_FEATURE 574cb4af11SchristosUnrecognized or restricted feature. 5823e44a77Schristos.El 5923e44a77Schristos.Sh SEE ALSO 6023e44a77Schristos.Xr openpam_set_feature 3 , 6123e44a77Schristos.Xr pam 3 , 6223e44a77Schristos.Xr pam_strerror 3 6323e44a77Schristos.Sh STANDARDS 6423e44a77SchristosThe 6523e44a77Schristos.Fn openpam_get_feature 6623e44a77Schristosfunction is an OpenPAM extension. 6723e44a77Schristos.Sh AUTHORS 6823e44a77SchristosThe 6923e44a77Schristos.Fn openpam_get_feature 7023e44a77Schristosfunction and this manual page were 7123e44a77Schristosdeveloped by 72a5684d07Swiz.An Dag-Erling Sm\(/orgrav Aq Mt des@des.no . 73