xref: /netbsd-src/lib/libpam/modules/pam_rootok/pam_rootok.c (revision 105f63f965856125935e34867af9812682f28d3a)
1*105f63f9Schristos /*	$NetBSD: pam_rootok.c,v 1.3 2006/11/03 18:03:23 christos Exp $	*/
2e7d22a2eSchristos 
36f11bdf1Schristos /*-
46f11bdf1Schristos  * Copyright (c) 2001 Mark R V Murray
56f11bdf1Schristos  * All rights reserved.
66f11bdf1Schristos  * Copyright (c) 2001 Networks Associates Technology, Inc.
76f11bdf1Schristos  * All rights reserved.
86f11bdf1Schristos  *
96f11bdf1Schristos  * Portions of this software were developed for the FreeBSD Project by
106f11bdf1Schristos  * ThinkSec AS and NAI Labs, the Security Research Division of Network
116f11bdf1Schristos  * Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
126f11bdf1Schristos  * ("CBOSS"), as part of the DARPA CHATS research program.
136f11bdf1Schristos  *
146f11bdf1Schristos  * Redistribution and use in source and binary forms, with or without
156f11bdf1Schristos  * modification, are permitted provided that the following conditions
166f11bdf1Schristos  * are met:
176f11bdf1Schristos  * 1. Redistributions of source code must retain the above copyright
186f11bdf1Schristos  *    notice, this list of conditions and the following disclaimer.
196f11bdf1Schristos  * 2. Redistributions in binary form must reproduce the above copyright
206f11bdf1Schristos  *    notice, this list of conditions and the following disclaimer in the
216f11bdf1Schristos  *    documentation and/or other materials provided with the distribution.
226f11bdf1Schristos  * 3. The name of the author may not be used to endorse or promote
236f11bdf1Schristos  *    products derived from this software without specific prior written
246f11bdf1Schristos  *    permission.
256f11bdf1Schristos  *
266f11bdf1Schristos  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
276f11bdf1Schristos  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
286f11bdf1Schristos  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
296f11bdf1Schristos  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
306f11bdf1Schristos  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
316f11bdf1Schristos  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
326f11bdf1Schristos  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
336f11bdf1Schristos  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
346f11bdf1Schristos  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
356f11bdf1Schristos  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
366f11bdf1Schristos  * SUCH DAMAGE.
376f11bdf1Schristos  */
386f11bdf1Schristos 
396f11bdf1Schristos #include <sys/cdefs.h>
40e7d22a2eSchristos #ifdef __FreeBSD__
416f11bdf1Schristos __FBSDID("$FreeBSD: src/lib/libpam/modules/pam_rootok/pam_rootok.c,v 1.8 2002/04/12 22:27:23 des Exp $");
42e7d22a2eSchristos #else
43*105f63f9Schristos __RCSID("$NetBSD: pam_rootok.c,v 1.3 2006/11/03 18:03:23 christos Exp $");
44e7d22a2eSchristos #endif
456f11bdf1Schristos 
466f11bdf1Schristos #define _BSD_SOURCE
476f11bdf1Schristos 
486f11bdf1Schristos #include <unistd.h>
496f11bdf1Schristos 
506f11bdf1Schristos #define PAM_SM_AUTH
516f11bdf1Schristos 
526f11bdf1Schristos #include <security/pam_appl.h>
536f11bdf1Schristos #include <security/pam_modules.h>
546f11bdf1Schristos #include <security/pam_mod_misc.h>
556f11bdf1Schristos 
566f11bdf1Schristos PAM_EXTERN int
pam_sm_authenticate(pam_handle_t * pamh,int flags __unused,int argc __unused,const char * argv[]__unused)576f11bdf1Schristos pam_sm_authenticate(pam_handle_t *pamh, int flags __unused,
586f11bdf1Schristos     int argc __unused, const char *argv[] __unused)
596f11bdf1Schristos {
606f11bdf1Schristos 
616f11bdf1Schristos 	if (getuid() == 0)
626f11bdf1Schristos 		return (PAM_SUCCESS);
636f11bdf1Schristos 
646f11bdf1Schristos 	PAM_VERBOSE_ERROR("Refused; not superuser");
656f11bdf1Schristos 	PAM_LOG("User is not superuser");
666f11bdf1Schristos 
676f11bdf1Schristos 	return (PAM_AUTH_ERR);
686f11bdf1Schristos }
696f11bdf1Schristos 
706f11bdf1Schristos PAM_EXTERN int
pam_sm_setcred(pam_handle_t * pamh __unused,int flags __unused,int argc __unused,const char * argv[]__unused)716f11bdf1Schristos pam_sm_setcred(pam_handle_t *pamh __unused, int flags __unused,
726f11bdf1Schristos     int argc __unused, const char *argv[] __unused)
736f11bdf1Schristos {
746f11bdf1Schristos 
756f11bdf1Schristos 	return (PAM_SUCCESS);
766f11bdf1Schristos }
776f11bdf1Schristos 
786f11bdf1Schristos PAM_MODULE_ENTRY("pam_rootok");
79