1*10b5fe87SSascha Wildner /*-
2*10b5fe87SSascha Wildner * Copyright (c) 2012-2017 Dag-Erling Smørgrav
3*10b5fe87SSascha Wildner * All rights reserved.
4*10b5fe87SSascha Wildner *
5*10b5fe87SSascha Wildner * Redistribution and use in source and binary forms, with or without
6*10b5fe87SSascha Wildner * modification, are permitted provided that the following conditions
7*10b5fe87SSascha Wildner * are met:
8*10b5fe87SSascha Wildner * 1. Redistributions of source code must retain the above copyright
9*10b5fe87SSascha Wildner * notice, this list of conditions and the following disclaimer.
10*10b5fe87SSascha Wildner * 2. Redistributions in binary form must reproduce the above copyright
11*10b5fe87SSascha Wildner * notice, this list of conditions and the following disclaimer in the
12*10b5fe87SSascha Wildner * documentation and/or other materials provided with the distribution.
13*10b5fe87SSascha Wildner * 3. The name of the author may not be used to endorse or promote
14*10b5fe87SSascha Wildner * products derived from this software without specific prior written
15*10b5fe87SSascha Wildner * permission.
16*10b5fe87SSascha Wildner *
17*10b5fe87SSascha Wildner * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18*10b5fe87SSascha Wildner * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19*10b5fe87SSascha Wildner * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20*10b5fe87SSascha Wildner * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
21*10b5fe87SSascha Wildner * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22*10b5fe87SSascha Wildner * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23*10b5fe87SSascha Wildner * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24*10b5fe87SSascha Wildner * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25*10b5fe87SSascha Wildner * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26*10b5fe87SSascha Wildner * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27*10b5fe87SSascha Wildner * SUCH DAMAGE.
28*10b5fe87SSascha Wildner *
29*10b5fe87SSascha Wildner * $OpenPAM: openpam_get_feature.c 938 2017-04-30 21:34:42Z des $
30*10b5fe87SSascha Wildner */
31*10b5fe87SSascha Wildner
32*10b5fe87SSascha Wildner #ifdef HAVE_CONFIG_H
33*10b5fe87SSascha Wildner # include "config.h"
34*10b5fe87SSascha Wildner #endif
35*10b5fe87SSascha Wildner
36*10b5fe87SSascha Wildner #include <security/pam_appl.h>
37*10b5fe87SSascha Wildner #include <security/openpam.h>
38*10b5fe87SSascha Wildner
39*10b5fe87SSascha Wildner #include "openpam_impl.h"
40*10b5fe87SSascha Wildner
41*10b5fe87SSascha Wildner /*
42*10b5fe87SSascha Wildner * OpenPAM extension
43*10b5fe87SSascha Wildner *
44*10b5fe87SSascha Wildner * Query the state of an optional feature.
45*10b5fe87SSascha Wildner */
46*10b5fe87SSascha Wildner
47*10b5fe87SSascha Wildner int
openpam_get_feature(int feature,int * onoff)48*10b5fe87SSascha Wildner openpam_get_feature(int feature, int *onoff)
49*10b5fe87SSascha Wildner {
50*10b5fe87SSascha Wildner
51*10b5fe87SSascha Wildner ENTERF(feature);
52*10b5fe87SSascha Wildner if (feature < 0 || feature >= OPENPAM_NUM_FEATURES)
53*10b5fe87SSascha Wildner RETURNC(PAM_BAD_FEATURE);
54*10b5fe87SSascha Wildner *onoff = openpam_features[feature].onoff;
55*10b5fe87SSascha Wildner RETURNC(PAM_SUCCESS);
56*10b5fe87SSascha Wildner }
57*10b5fe87SSascha Wildner
58*10b5fe87SSascha Wildner /*
59*10b5fe87SSascha Wildner * Error codes:
60*10b5fe87SSascha Wildner *
61*10b5fe87SSascha Wildner * PAM_BAD_FEATURE
62*10b5fe87SSascha Wildner */
63*10b5fe87SSascha Wildner
64*10b5fe87SSascha Wildner /**
65*10b5fe87SSascha Wildner * EXPERIMENTAL
66*10b5fe87SSascha Wildner *
67*10b5fe87SSascha Wildner * The =openpam_get_feature function stores the current state of the
68*10b5fe87SSascha Wildner * specified feature in the variable pointed to by its =onoff argument.
69*10b5fe87SSascha Wildner *
70*10b5fe87SSascha Wildner * The following features are recognized:
71*10b5fe87SSascha Wildner *
72*10b5fe87SSascha Wildner * =OPENPAM_RESTRICT_SERVICE_NAME:
73*10b5fe87SSascha Wildner * Disallow path separators in service names.
74*10b5fe87SSascha Wildner * This feature is enabled by default.
75*10b5fe87SSascha Wildner * Disabling it allows the application to specify the path to
76*10b5fe87SSascha Wildner * the desired policy file directly.
77*10b5fe87SSascha Wildner *
78*10b5fe87SSascha Wildner * =OPENPAM_VERIFY_POLICY_FILE:
79*10b5fe87SSascha Wildner * Verify the ownership and permissions of the policy file
80*10b5fe87SSascha Wildner * and the path leading up to it.
81*10b5fe87SSascha Wildner * This feature is enabled by default.
82*10b5fe87SSascha Wildner *
83*10b5fe87SSascha Wildner * =OPENPAM_RESTRICT_MODULE_NAME:
84*10b5fe87SSascha Wildner * Disallow path separators in module names.
85*10b5fe87SSascha Wildner * This feature is disabled by default.
86*10b5fe87SSascha Wildner * Enabling it prevents the use of modules in non-standard
87*10b5fe87SSascha Wildner * locations.
88*10b5fe87SSascha Wildner *
89*10b5fe87SSascha Wildner * =OPENPAM_VERIFY_MODULE_FILE:
90*10b5fe87SSascha Wildner * Verify the ownership and permissions of each loadable
91*10b5fe87SSascha Wildner * module and the path leading up to it.
92*10b5fe87SSascha Wildner * This feature is enabled by default.
93*10b5fe87SSascha Wildner *
94*10b5fe87SSascha Wildner *
95*10b5fe87SSascha Wildner * >openpam_set_feature
96*10b5fe87SSascha Wildner *
97*10b5fe87SSascha Wildner * AUTHOR DES
98*10b5fe87SSascha Wildner */
99