1*9aa2a9c3Schristos /* $NetBSD: remove.c,v 1.1 2020/05/16 18:31:45 christos Exp $ */
2*9aa2a9c3Schristos
3*9aa2a9c3Schristos /*-
4*9aa2a9c3Schristos * Copyright (c) 2001 Chris D. Faulhaber
5*9aa2a9c3Schristos * All rights reserved.
6*9aa2a9c3Schristos *
7*9aa2a9c3Schristos * Redistribution and use in source and binary forms, with or without
8*9aa2a9c3Schristos * modification, are permitted provided that the following conditions
9*9aa2a9c3Schristos * are met:
10*9aa2a9c3Schristos * 1. Redistributions of source code must retain the above copyright
11*9aa2a9c3Schristos * notice, this list of conditions and the following disclaimer.
12*9aa2a9c3Schristos * 2. Redistributions in binary form must reproduce the above copyright
13*9aa2a9c3Schristos * notice, this list of conditions and the following disclaimer in the
14*9aa2a9c3Schristos * documentation and/or other materials provided with the distribution.
15*9aa2a9c3Schristos *
16*9aa2a9c3Schristos * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17*9aa2a9c3Schristos * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18*9aa2a9c3Schristos * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19*9aa2a9c3Schristos * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20*9aa2a9c3Schristos * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21*9aa2a9c3Schristos * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22*9aa2a9c3Schristos * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23*9aa2a9c3Schristos * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24*9aa2a9c3Schristos * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25*9aa2a9c3Schristos * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26*9aa2a9c3Schristos * SUCH DAMAGE.
27*9aa2a9c3Schristos */
28*9aa2a9c3Schristos
29*9aa2a9c3Schristos #include <sys/cdefs.h>
30*9aa2a9c3Schristos #if 0
31*9aa2a9c3Schristos __FBSDID("$FreeBSD: head/bin/setfacl/remove.c 333065 2018-04-27 15:25:24Z emaste $");
32*9aa2a9c3Schristos #else
33*9aa2a9c3Schristos __RCSID("$NetBSD: remove.c,v 1.1 2020/05/16 18:31:45 christos Exp $");
34*9aa2a9c3Schristos #endif
35*9aa2a9c3Schristos
36*9aa2a9c3Schristos #include <sys/types.h>
37*9aa2a9c3Schristos #include <sys/acl.h>
38*9aa2a9c3Schristos #include <sys/stat.h>
39*9aa2a9c3Schristos
40*9aa2a9c3Schristos #include <err.h>
41*9aa2a9c3Schristos #include <stdio.h>
42*9aa2a9c3Schristos #include <string.h>
43*9aa2a9c3Schristos
44*9aa2a9c3Schristos #include "setfacl.h"
45*9aa2a9c3Schristos
46*9aa2a9c3Schristos /*
47*9aa2a9c3Schristos * remove ACL entries from an ACL
48*9aa2a9c3Schristos */
49*9aa2a9c3Schristos int
remove_acl(acl_t acl,acl_t * prev_acl,const char * filename)50*9aa2a9c3Schristos remove_acl(acl_t acl, acl_t *prev_acl, const char *filename)
51*9aa2a9c3Schristos {
52*9aa2a9c3Schristos acl_entry_t entry;
53*9aa2a9c3Schristos acl_t acl_new;
54*9aa2a9c3Schristos acl_tag_t tag;
55*9aa2a9c3Schristos int carried_error, entry_id, acl_brand, prev_acl_brand;
56*9aa2a9c3Schristos
57*9aa2a9c3Schristos carried_error = 0;
58*9aa2a9c3Schristos
59*9aa2a9c3Schristos acl_get_brand_np(acl, &acl_brand);
60*9aa2a9c3Schristos acl_get_brand_np(*prev_acl, &prev_acl_brand);
61*9aa2a9c3Schristos
62*9aa2a9c3Schristos if (branding_mismatch(acl_brand, prev_acl_brand)) {
63*9aa2a9c3Schristos warnx("%s: branding mismatch; existing ACL is %s, "
64*9aa2a9c3Schristos "entry to be removed is %s", filename,
65*9aa2a9c3Schristos brand_name(prev_acl_brand), brand_name(acl_brand));
66*9aa2a9c3Schristos return (-1);
67*9aa2a9c3Schristos }
68*9aa2a9c3Schristos
69*9aa2a9c3Schristos carried_error = 0;
70*9aa2a9c3Schristos
71*9aa2a9c3Schristos acl_new = acl_dup(*prev_acl);
72*9aa2a9c3Schristos if (acl_new == NULL)
73*9aa2a9c3Schristos err(1, "%s: acl_dup() failed", filename);
74*9aa2a9c3Schristos
75*9aa2a9c3Schristos tag = ACL_UNDEFINED_TAG;
76*9aa2a9c3Schristos
77*9aa2a9c3Schristos /* find and delete the entry */
78*9aa2a9c3Schristos entry_id = ACL_FIRST_ENTRY;
79*9aa2a9c3Schristos while (acl_get_entry(acl, entry_id, &entry) == 1) {
80*9aa2a9c3Schristos entry_id = ACL_NEXT_ENTRY;
81*9aa2a9c3Schristos if (acl_get_tag_type(entry, &tag) == -1)
82*9aa2a9c3Schristos err(1, "%s: acl_get_tag_type() failed", filename);
83*9aa2a9c3Schristos if (tag == ACL_MASK)
84*9aa2a9c3Schristos have_mask = true;
85*9aa2a9c3Schristos if (acl_delete_entry(acl_new, entry) == -1) {
86*9aa2a9c3Schristos carried_error++;
87*9aa2a9c3Schristos warnx("%s: cannot remove non-existent ACL entry",
88*9aa2a9c3Schristos filename);
89*9aa2a9c3Schristos }
90*9aa2a9c3Schristos }
91*9aa2a9c3Schristos
92*9aa2a9c3Schristos acl_free(*prev_acl);
93*9aa2a9c3Schristos *prev_acl = acl_new;
94*9aa2a9c3Schristos
95*9aa2a9c3Schristos if (carried_error)
96*9aa2a9c3Schristos return (-1);
97*9aa2a9c3Schristos
98*9aa2a9c3Schristos return (0);
99*9aa2a9c3Schristos }
100*9aa2a9c3Schristos
101*9aa2a9c3Schristos int
remove_by_number(uint entry_number,acl_t * prev_acl,const char * filename)102*9aa2a9c3Schristos remove_by_number(uint entry_number, acl_t *prev_acl, const char *filename)
103*9aa2a9c3Schristos {
104*9aa2a9c3Schristos acl_entry_t entry;
105*9aa2a9c3Schristos acl_t acl_new;
106*9aa2a9c3Schristos acl_tag_t tag;
107*9aa2a9c3Schristos int carried_error, entry_id;
108*9aa2a9c3Schristos uint i;
109*9aa2a9c3Schristos
110*9aa2a9c3Schristos carried_error = 0;
111*9aa2a9c3Schristos
112*9aa2a9c3Schristos acl_new = acl_dup(*prev_acl);
113*9aa2a9c3Schristos if (acl_new == NULL)
114*9aa2a9c3Schristos err(1, "%s: acl_dup() failed", filename);
115*9aa2a9c3Schristos
116*9aa2a9c3Schristos tag = ACL_UNDEFINED_TAG;
117*9aa2a9c3Schristos
118*9aa2a9c3Schristos /*
119*9aa2a9c3Schristos * Find out whether we're removing the mask entry,
120*9aa2a9c3Schristos * to behave the same as the routine above.
121*9aa2a9c3Schristos *
122*9aa2a9c3Schristos * XXX: Is this loop actually needed?
123*9aa2a9c3Schristos */
124*9aa2a9c3Schristos entry_id = ACL_FIRST_ENTRY;
125*9aa2a9c3Schristos i = 0;
126*9aa2a9c3Schristos while (acl_get_entry(acl_new, entry_id, &entry) == 1) {
127*9aa2a9c3Schristos entry_id = ACL_NEXT_ENTRY;
128*9aa2a9c3Schristos if (i != entry_number)
129*9aa2a9c3Schristos continue;
130*9aa2a9c3Schristos if (acl_get_tag_type(entry, &tag) == -1)
131*9aa2a9c3Schristos err(1, "%s: acl_get_tag_type() failed", filename);
132*9aa2a9c3Schristos if (tag == ACL_MASK)
133*9aa2a9c3Schristos have_mask = true;
134*9aa2a9c3Schristos }
135*9aa2a9c3Schristos
136*9aa2a9c3Schristos if (acl_delete_entry_np(acl_new, entry_number) == -1) {
137*9aa2a9c3Schristos carried_error++;
138*9aa2a9c3Schristos warn("%s: acl_delete_entry_np() failed", filename);
139*9aa2a9c3Schristos }
140*9aa2a9c3Schristos
141*9aa2a9c3Schristos acl_free(*prev_acl);
142*9aa2a9c3Schristos *prev_acl = acl_new;
143*9aa2a9c3Schristos
144*9aa2a9c3Schristos if (carried_error)
145*9aa2a9c3Schristos return (-1);
146*9aa2a9c3Schristos
147*9aa2a9c3Schristos return (0);
148*9aa2a9c3Schristos }
149*9aa2a9c3Schristos
150*9aa2a9c3Schristos /*
151*9aa2a9c3Schristos * remove default entries
152*9aa2a9c3Schristos */
153*9aa2a9c3Schristos int
remove_default(acl_t * prev_acl,const char * filename)154*9aa2a9c3Schristos remove_default(acl_t *prev_acl, const char *filename)
155*9aa2a9c3Schristos {
156*9aa2a9c3Schristos
157*9aa2a9c3Schristos acl_free(*prev_acl);
158*9aa2a9c3Schristos *prev_acl = acl_init(ACL_MAX_ENTRIES);
159*9aa2a9c3Schristos if (*prev_acl == NULL)
160*9aa2a9c3Schristos err(1, "%s: acl_init() failed", filename);
161*9aa2a9c3Schristos
162*9aa2a9c3Schristos return (0);
163*9aa2a9c3Schristos }
164*9aa2a9c3Schristos
165*9aa2a9c3Schristos /*
166*9aa2a9c3Schristos * remove extended entries
167*9aa2a9c3Schristos */
168*9aa2a9c3Schristos void
remove_ext(acl_t * prev_acl,const char * filename)169*9aa2a9c3Schristos remove_ext(acl_t *prev_acl, const char *filename)
170*9aa2a9c3Schristos {
171*9aa2a9c3Schristos acl_t acl_new;
172*9aa2a9c3Schristos
173*9aa2a9c3Schristos acl_new = acl_strip_np(*prev_acl, !n_flag);
174*9aa2a9c3Schristos if (acl_new == NULL)
175*9aa2a9c3Schristos err(1, "%s: acl_strip_np() failed", filename);
176*9aa2a9c3Schristos
177*9aa2a9c3Schristos acl_free(*prev_acl);
178*9aa2a9c3Schristos *prev_acl = acl_new;
179*9aa2a9c3Schristos }
180