1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate * CDDL HEADER START
3*0Sstevel@tonic-gate *
4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*0Sstevel@tonic-gate * with the License.
8*0Sstevel@tonic-gate *
9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*0Sstevel@tonic-gate * See the License for the specific language governing permissions
12*0Sstevel@tonic-gate * and limitations under the License.
13*0Sstevel@tonic-gate *
14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*0Sstevel@tonic-gate *
20*0Sstevel@tonic-gate * CDDL HEADER END
21*0Sstevel@tonic-gate */
22*0Sstevel@tonic-gate /*
23*0Sstevel@tonic-gate * Copyright 2003 Sun Microsystems, Inc. All rights reserved.
24*0Sstevel@tonic-gate * Use is subject to license terms.
25*0Sstevel@tonic-gate */
26*0Sstevel@tonic-gate
27*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
28*0Sstevel@tonic-gate
29*0Sstevel@tonic-gate #include <errno.h>
30*0Sstevel@tonic-gate #include <sys/types.h>
31*0Sstevel@tonic-gate #include <nfs/nfs_sec.h>
32*0Sstevel@tonic-gate #include <strings.h>
33*0Sstevel@tonic-gate #include "libfsmgt.h"
34*0Sstevel@tonic-gate
35*0Sstevel@tonic-gate /*
36*0Sstevel@tonic-gate * Public methods
37*0Sstevel@tonic-gate */
38*0Sstevel@tonic-gate
39*0Sstevel@tonic-gate /*
40*0Sstevel@tonic-gate * Method: nfssec_free_secmode_list
41*0Sstevel@tonic-gate *
42*0Sstevel@tonic-gate * Description: Frees the space allocated for the security mode list array.
43*0Sstevel@tonic-gate *
44*0Sstevel@tonic-gate * Parameters:
45*0Sstevel@tonic-gate * - char **seclist - the array to be freed.
46*0Sstevel@tonic-gate * - int num_elements - the number of elements in the array.
47*0Sstevel@tonic-gate *
48*0Sstevel@tonic-gate * Returns:
49*0Sstevel@tonic-gate * - Nothing
50*0Sstevel@tonic-gate */
51*0Sstevel@tonic-gate void
nfssec_free_secmode_list(char ** seclist,int num_elements)52*0Sstevel@tonic-gate nfssec_free_secmode_list(char **seclist, int num_elements)
53*0Sstevel@tonic-gate {
54*0Sstevel@tonic-gate fileutil_free_string_array(seclist, num_elements);
55*0Sstevel@tonic-gate } /* nfssec_free_secmode_list */
56*0Sstevel@tonic-gate
57*0Sstevel@tonic-gate /*
58*0Sstevel@tonic-gate * Method: nfssec_get_default_secmode
59*0Sstevel@tonic-gate *
60*0Sstevel@tonic-gate * Description: Retrieves the default security mode for NFS.
61*0Sstevel@tonic-gate *
62*0Sstevel@tonic-gate * Parameters:
63*0Sstevel@tonic-gate * - int *errp - the error indicator. This will be set to a non-zero
64*0Sstevel@tonic-gate * value upon error.
65*0Sstevel@tonic-gate *
66*0Sstevel@tonic-gate * Returns:
67*0Sstevel@tonic-gate * - char * - the NFS security mode name.
68*0Sstevel@tonic-gate * - NULL if an error occurred.
69*0Sstevel@tonic-gate *
70*0Sstevel@tonic-gate * Note: Caller must free the space allocated for the return value.
71*0Sstevel@tonic-gate */
72*0Sstevel@tonic-gate char *
nfssec_get_default_secmode(int * errp)73*0Sstevel@tonic-gate nfssec_get_default_secmode(int *errp)
74*0Sstevel@tonic-gate {
75*0Sstevel@tonic-gate seconfig_t secp, defsecp;
76*0Sstevel@tonic-gate char *ret_val;
77*0Sstevel@tonic-gate int err = 0;
78*0Sstevel@tonic-gate
79*0Sstevel@tonic-gate *errp = 0;
80*0Sstevel@tonic-gate err = nfs_getseconfig_default(&secp);
81*0Sstevel@tonic-gate if (err != 0) {
82*0Sstevel@tonic-gate *errp = err;
83*0Sstevel@tonic-gate return (NULL);
84*0Sstevel@tonic-gate }
85*0Sstevel@tonic-gate
86*0Sstevel@tonic-gate err = nfs_getseconfig_bynumber(secp.sc_nfsnum, &defsecp);
87*0Sstevel@tonic-gate if (err != 0) {
88*0Sstevel@tonic-gate *errp = err;
89*0Sstevel@tonic-gate return (NULL);
90*0Sstevel@tonic-gate }
91*0Sstevel@tonic-gate
92*0Sstevel@tonic-gate ret_val = strdup(defsecp.sc_name);
93*0Sstevel@tonic-gate if (ret_val == NULL) {
94*0Sstevel@tonic-gate *errp = ENOMEM;
95*0Sstevel@tonic-gate return (NULL);
96*0Sstevel@tonic-gate }
97*0Sstevel@tonic-gate
98*0Sstevel@tonic-gate return (ret_val);
99*0Sstevel@tonic-gate } /* nfssec_get_default_secmode */
100*0Sstevel@tonic-gate
101*0Sstevel@tonic-gate /*
102*0Sstevel@tonic-gate * Method: nfssec_get_nfs_secmode_list
103*0Sstevel@tonic-gate *
104*0Sstevel@tonic-gate * Description: Retrieves a list of the supported NFS security modes from
105*0Sstevel@tonic-gate * /etc/nfssec.conf.
106*0Sstevel@tonic-gate *
107*0Sstevel@tonic-gate * Parameters:
108*0Sstevel@tonic-gate * - int *num_elements - integer pointer used to keep track of the number
109*0Sstevel@tonic-gate * of elements in the array.
110*0Sstevel@tonic-gate * - int *errp - the error indicator. This will be set to a non-zero
111*0Sstevel@tonic-gate * value upon error.
112*0Sstevel@tonic-gate *
113*0Sstevel@tonic-gate * Returns:
114*0Sstevel@tonic-gate * - char ** - The array containing the supported security mode names as
115*0Sstevel@tonic-gate * elements.
116*0Sstevel@tonic-gate * - NULL if an error occurred.
117*0Sstevel@tonic-gate *
118*0Sstevel@tonic-gate * Note: The space allocated for the return array must be freed by the caller
119*0Sstevel@tonic-gate * using nfssec_free_secmode_list.
120*0Sstevel@tonic-gate */
121*0Sstevel@tonic-gate char **
nfssec_get_nfs_secmode_list(int * num_elements,int * errp)122*0Sstevel@tonic-gate nfssec_get_nfs_secmode_list(int *num_elements, int *errp)
123*0Sstevel@tonic-gate {
124*0Sstevel@tonic-gate FILE *fp;
125*0Sstevel@tonic-gate char **seclist = NULL;
126*0Sstevel@tonic-gate int err = 0;
127*0Sstevel@tonic-gate
128*0Sstevel@tonic-gate *errp = 0;
129*0Sstevel@tonic-gate if ((fp = fopen(NFSSEC_CONF, "r")) == NULL) {
130*0Sstevel@tonic-gate /*
131*0Sstevel@tonic-gate * The opening of nfssec.conf failed.
132*0Sstevel@tonic-gate */
133*0Sstevel@tonic-gate *errp = errno;
134*0Sstevel@tonic-gate return (NULL);
135*0Sstevel@tonic-gate }
136*0Sstevel@tonic-gate
137*0Sstevel@tonic-gate seclist = fileutil_get_first_column_data(fp, num_elements, &err);
138*0Sstevel@tonic-gate (void) fclose(fp);
139*0Sstevel@tonic-gate if (seclist == NULL) {
140*0Sstevel@tonic-gate *errp = err;
141*0Sstevel@tonic-gate return (NULL);
142*0Sstevel@tonic-gate }
143*0Sstevel@tonic-gate
144*0Sstevel@tonic-gate return (seclist);
145*0Sstevel@tonic-gate } /* nfssec_get_nfs_secmode_list */
146