xref: /netbsd-src/bin/setfacl/remove.c (revision 9aa2a9c323eb12a08584c70d6ea91d316703d3fe)
1*9aa2a9c3Schristos /*	$NetBSD: remove.c,v 1.1 2020/05/16 18:31:45 christos Exp $	*/
2*9aa2a9c3Schristos 
3*9aa2a9c3Schristos /*-
4*9aa2a9c3Schristos  * Copyright (c) 2001 Chris D. Faulhaber
5*9aa2a9c3Schristos  * All rights reserved.
6*9aa2a9c3Schristos  *
7*9aa2a9c3Schristos  * Redistribution and use in source and binary forms, with or without
8*9aa2a9c3Schristos  * modification, are permitted provided that the following conditions
9*9aa2a9c3Schristos  * are met:
10*9aa2a9c3Schristos  * 1. Redistributions of source code must retain the above copyright
11*9aa2a9c3Schristos  *    notice, this list of conditions and the following disclaimer.
12*9aa2a9c3Schristos  * 2. Redistributions in binary form must reproduce the above copyright
13*9aa2a9c3Schristos  *    notice, this list of conditions and the following disclaimer in the
14*9aa2a9c3Schristos  *    documentation and/or other materials provided with the distribution.
15*9aa2a9c3Schristos  *
16*9aa2a9c3Schristos  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17*9aa2a9c3Schristos  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18*9aa2a9c3Schristos  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19*9aa2a9c3Schristos  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20*9aa2a9c3Schristos  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21*9aa2a9c3Schristos  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22*9aa2a9c3Schristos  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23*9aa2a9c3Schristos  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24*9aa2a9c3Schristos  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25*9aa2a9c3Schristos  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26*9aa2a9c3Schristos  * SUCH DAMAGE.
27*9aa2a9c3Schristos  */
28*9aa2a9c3Schristos 
29*9aa2a9c3Schristos #include <sys/cdefs.h>
30*9aa2a9c3Schristos #if 0
31*9aa2a9c3Schristos __FBSDID("$FreeBSD: head/bin/setfacl/remove.c 333065 2018-04-27 15:25:24Z emaste $");
32*9aa2a9c3Schristos #else
33*9aa2a9c3Schristos __RCSID("$NetBSD: remove.c,v 1.1 2020/05/16 18:31:45 christos Exp $");
34*9aa2a9c3Schristos #endif
35*9aa2a9c3Schristos 
36*9aa2a9c3Schristos #include <sys/types.h>
37*9aa2a9c3Schristos #include <sys/acl.h>
38*9aa2a9c3Schristos #include <sys/stat.h>
39*9aa2a9c3Schristos 
40*9aa2a9c3Schristos #include <err.h>
41*9aa2a9c3Schristos #include <stdio.h>
42*9aa2a9c3Schristos #include <string.h>
43*9aa2a9c3Schristos 
44*9aa2a9c3Schristos #include "setfacl.h"
45*9aa2a9c3Schristos 
46*9aa2a9c3Schristos /*
47*9aa2a9c3Schristos  * remove ACL entries from an ACL
48*9aa2a9c3Schristos  */
49*9aa2a9c3Schristos int
remove_acl(acl_t acl,acl_t * prev_acl,const char * filename)50*9aa2a9c3Schristos remove_acl(acl_t acl, acl_t *prev_acl, const char *filename)
51*9aa2a9c3Schristos {
52*9aa2a9c3Schristos 	acl_entry_t	entry;
53*9aa2a9c3Schristos 	acl_t		acl_new;
54*9aa2a9c3Schristos 	acl_tag_t	tag;
55*9aa2a9c3Schristos 	int		carried_error, entry_id, acl_brand, prev_acl_brand;
56*9aa2a9c3Schristos 
57*9aa2a9c3Schristos 	carried_error = 0;
58*9aa2a9c3Schristos 
59*9aa2a9c3Schristos 	acl_get_brand_np(acl, &acl_brand);
60*9aa2a9c3Schristos 	acl_get_brand_np(*prev_acl, &prev_acl_brand);
61*9aa2a9c3Schristos 
62*9aa2a9c3Schristos 	if (branding_mismatch(acl_brand, prev_acl_brand)) {
63*9aa2a9c3Schristos 		warnx("%s: branding mismatch; existing ACL is %s, "
64*9aa2a9c3Schristos 		    "entry to be removed is %s", filename,
65*9aa2a9c3Schristos 		    brand_name(prev_acl_brand), brand_name(acl_brand));
66*9aa2a9c3Schristos 		return (-1);
67*9aa2a9c3Schristos 	}
68*9aa2a9c3Schristos 
69*9aa2a9c3Schristos 	carried_error = 0;
70*9aa2a9c3Schristos 
71*9aa2a9c3Schristos 	acl_new = acl_dup(*prev_acl);
72*9aa2a9c3Schristos 	if (acl_new == NULL)
73*9aa2a9c3Schristos 		err(1, "%s: acl_dup() failed", filename);
74*9aa2a9c3Schristos 
75*9aa2a9c3Schristos 	tag = ACL_UNDEFINED_TAG;
76*9aa2a9c3Schristos 
77*9aa2a9c3Schristos 	/* find and delete the entry */
78*9aa2a9c3Schristos 	entry_id = ACL_FIRST_ENTRY;
79*9aa2a9c3Schristos 	while (acl_get_entry(acl, entry_id, &entry) == 1) {
80*9aa2a9c3Schristos 		entry_id = ACL_NEXT_ENTRY;
81*9aa2a9c3Schristos 		if (acl_get_tag_type(entry, &tag) == -1)
82*9aa2a9c3Schristos 			err(1, "%s: acl_get_tag_type() failed", filename);
83*9aa2a9c3Schristos 		if (tag == ACL_MASK)
84*9aa2a9c3Schristos 			have_mask = true;
85*9aa2a9c3Schristos 		if (acl_delete_entry(acl_new, entry) == -1) {
86*9aa2a9c3Schristos 			carried_error++;
87*9aa2a9c3Schristos 			warnx("%s: cannot remove non-existent ACL entry",
88*9aa2a9c3Schristos 			    filename);
89*9aa2a9c3Schristos 		}
90*9aa2a9c3Schristos 	}
91*9aa2a9c3Schristos 
92*9aa2a9c3Schristos 	acl_free(*prev_acl);
93*9aa2a9c3Schristos 	*prev_acl = acl_new;
94*9aa2a9c3Schristos 
95*9aa2a9c3Schristos 	if (carried_error)
96*9aa2a9c3Schristos 		return (-1);
97*9aa2a9c3Schristos 
98*9aa2a9c3Schristos 	return (0);
99*9aa2a9c3Schristos }
100*9aa2a9c3Schristos 
101*9aa2a9c3Schristos int
remove_by_number(uint entry_number,acl_t * prev_acl,const char * filename)102*9aa2a9c3Schristos remove_by_number(uint entry_number, acl_t *prev_acl, const char *filename)
103*9aa2a9c3Schristos {
104*9aa2a9c3Schristos 	acl_entry_t	entry;
105*9aa2a9c3Schristos 	acl_t		acl_new;
106*9aa2a9c3Schristos 	acl_tag_t	tag;
107*9aa2a9c3Schristos 	int		carried_error, entry_id;
108*9aa2a9c3Schristos 	uint		i;
109*9aa2a9c3Schristos 
110*9aa2a9c3Schristos 	carried_error = 0;
111*9aa2a9c3Schristos 
112*9aa2a9c3Schristos 	acl_new = acl_dup(*prev_acl);
113*9aa2a9c3Schristos 	if (acl_new == NULL)
114*9aa2a9c3Schristos 		err(1, "%s: acl_dup() failed", filename);
115*9aa2a9c3Schristos 
116*9aa2a9c3Schristos 	tag = ACL_UNDEFINED_TAG;
117*9aa2a9c3Schristos 
118*9aa2a9c3Schristos 	/*
119*9aa2a9c3Schristos 	 * Find out whether we're removing the mask entry,
120*9aa2a9c3Schristos 	 * to behave the same as the routine above.
121*9aa2a9c3Schristos 	 *
122*9aa2a9c3Schristos 	 * XXX: Is this loop actually needed?
123*9aa2a9c3Schristos 	 */
124*9aa2a9c3Schristos 	entry_id = ACL_FIRST_ENTRY;
125*9aa2a9c3Schristos 	i = 0;
126*9aa2a9c3Schristos 	while (acl_get_entry(acl_new, entry_id, &entry) == 1) {
127*9aa2a9c3Schristos 		entry_id = ACL_NEXT_ENTRY;
128*9aa2a9c3Schristos 		if (i != entry_number)
129*9aa2a9c3Schristos 			continue;
130*9aa2a9c3Schristos 		if (acl_get_tag_type(entry, &tag) == -1)
131*9aa2a9c3Schristos 			err(1, "%s: acl_get_tag_type() failed", filename);
132*9aa2a9c3Schristos 		if (tag == ACL_MASK)
133*9aa2a9c3Schristos 			have_mask = true;
134*9aa2a9c3Schristos 	}
135*9aa2a9c3Schristos 
136*9aa2a9c3Schristos 	if (acl_delete_entry_np(acl_new, entry_number) == -1) {
137*9aa2a9c3Schristos 		carried_error++;
138*9aa2a9c3Schristos 		warn("%s: acl_delete_entry_np() failed", filename);
139*9aa2a9c3Schristos 	}
140*9aa2a9c3Schristos 
141*9aa2a9c3Schristos 	acl_free(*prev_acl);
142*9aa2a9c3Schristos 	*prev_acl = acl_new;
143*9aa2a9c3Schristos 
144*9aa2a9c3Schristos 	if (carried_error)
145*9aa2a9c3Schristos 		return (-1);
146*9aa2a9c3Schristos 
147*9aa2a9c3Schristos 	return (0);
148*9aa2a9c3Schristos }
149*9aa2a9c3Schristos 
150*9aa2a9c3Schristos /*
151*9aa2a9c3Schristos  * remove default entries
152*9aa2a9c3Schristos  */
153*9aa2a9c3Schristos int
remove_default(acl_t * prev_acl,const char * filename)154*9aa2a9c3Schristos remove_default(acl_t *prev_acl, const char *filename)
155*9aa2a9c3Schristos {
156*9aa2a9c3Schristos 
157*9aa2a9c3Schristos 	acl_free(*prev_acl);
158*9aa2a9c3Schristos 	*prev_acl = acl_init(ACL_MAX_ENTRIES);
159*9aa2a9c3Schristos 	if (*prev_acl == NULL)
160*9aa2a9c3Schristos 		err(1, "%s: acl_init() failed", filename);
161*9aa2a9c3Schristos 
162*9aa2a9c3Schristos 	return (0);
163*9aa2a9c3Schristos }
164*9aa2a9c3Schristos 
165*9aa2a9c3Schristos /*
166*9aa2a9c3Schristos  * remove extended entries
167*9aa2a9c3Schristos  */
168*9aa2a9c3Schristos void
remove_ext(acl_t * prev_acl,const char * filename)169*9aa2a9c3Schristos remove_ext(acl_t *prev_acl, const char *filename)
170*9aa2a9c3Schristos {
171*9aa2a9c3Schristos 	acl_t acl_new;
172*9aa2a9c3Schristos 
173*9aa2a9c3Schristos 	acl_new = acl_strip_np(*prev_acl, !n_flag);
174*9aa2a9c3Schristos 	if (acl_new == NULL)
175*9aa2a9c3Schristos 		err(1, "%s: acl_strip_np() failed", filename);
176*9aa2a9c3Schristos 
177*9aa2a9c3Schristos 	acl_free(*prev_acl);
178*9aa2a9c3Schristos 	*prev_acl = acl_new;
179*9aa2a9c3Schristos }
180