![[BACK]](/cvsweb/icons/back.gif){kind=icon}
Return to chmod_chk.c CVS log ![[TXT]](/cvsweb/icons/text.gif){kind=icon}
![[DIR]](/cvsweb/icons/dir.gif){kind=icon}
Up to [MW Coherent from dump] / coherent / d / bin / uucheck / checkperms|
Return to chmod_chk.c CVS log | Up to [MW Coherent from dump] / coherent / d / bin / uucheck / checkperms |
1.1 root 1: /* chmod_chk.c - check a stat structure based upon chmod style permissions.
2: * part of uucheck.
3: */
4:
5: #include <sys/stat.h>
6: #include "morestat.h" /* The stat definitions that were left out. */
7: #include "checkperms.h"
8: #include "y.tab.h"
9:
10: /* Test whether statptr->st_mode corresponds to a desired permission. */
11:
12: #define TST(mask, flag) (flag && \
13: ( (((statptr->st_mode) & mask)?TRUE:FALSE) != i_want))
14:
15: boolean
16: chmod_chk(path, ugostrwx, statptr, msg_type)
17: unsigned char *path;
18: unsigned char *ugostrwx;
19: struct stat *statptr;
20: int msg_type; /* Error messages or just warning messages? */
21: {
22: unsigned char *s; /* Handy loop variable for walking through stuff. */
23:
24: boolean user_f = FALSE;
25: boolean group_f = FALSE;
26: boolean others_f = FALSE;
27: boolean setid_f = FALSE;
28: boolean sticky_f = FALSE;
29: boolean read_f = FALSE;
30: boolean write_f = FALSE;
31: boolean execute_f = FALSE;
32: boolean i_want; /* Do we want these permissions, or not? */
33: boolean error = FALSE;
34: boolean warning = FALSE;
35:
36: /* fill in statptr if it isn't already */
37: if (statptr == (struct stat *) NULL) {
38: statptr = (struct stat *) malloc(sizeof(struct stat));
39: stat(path, statptr);
40: }
41:
42: /* Pick off user, group, and other. */
43: for(s = ugostrwx; (*s != '+') && (*s != '-') && (*s != (unsigned char) NULL); ++s) {
44: switch(*s) {
45: case 'u': user_f = TRUE; break;
46: case 'g': group_f = TRUE; break;
47: case 'o': others_f = TRUE; break;
48: default:
49: VERBOSE("(POOrly Formed Formula) ugo\n");
50: FATAL("Who POOFF: %s\n", ugostrwx);
51: } /* switch(*s) */
52: #if 0
53: /* DEBUG */ fprintf(stderr, "who: %c\n",*s);
54: #endif /* 0 */
55: } /* for s = ugostrwx to '+' */
56:
57: /* We should not have hit end of string yet! */
58: if (*s == (char) NULL) {
59: VERBOSE("(POOrly Formed Formula)\n");
60: FATAL("No '+' or '-' POOFF: %s\n", ugostrwx);
61: } /* if *s == (char) NULL */
62:
63: /* Do we want these permissions, or do we want them not? */
64: if (*s == '+') {
65: i_want = TRUE;
66: } else {
67: i_want = FALSE;
68: }
69:
70: ++s; /* Skip past the '+' or '-'. */
71:
72: /* Pick off setid, sticky, read, write, and execute. */
73: for(; (*s != '+') && (*s != (char) NULL); ++s) {
74: switch(*s) {
75: case 's': setid_f = TRUE; break;
76: case 't': sticky_f = TRUE; break;
77: case 'r': read_f = TRUE; break;
78: case 'w': write_f = TRUE; break;
79: case 'x': execute_f = TRUE; break;
80: default:
81: VERBOSE("(POOrly Formed Formula) strwx\n");
82: FATAL("What POOFF: %s\n", ugostrwx);
83: } /* switch(*s) */
84: #if 0
85: /* DEBUG */ fprintf(stderr, "what: %c\n",*s);
86: #endif /* 0 */
87: } /* for s = ugostrwx to '+' */
88:
89: /* CHECKPOINT - Now all flags are set according to the characters
90: * in the chmod permissions string.
91: */
92:
93: /* I don't see a good way to do the following without making this
94: * table flavored code. Perhaps this code should be automaticly
95: * generated from some table.
96: */
97: if (user_f){
98: if (TST(S_ISVTX, sticky_f)) {
99: sprintf(bigbuf, "%s is %ssticky.",
100: path, i_want?"not ":"");
101: notice(msg_type, bigbuf, NULL);
102: SETFAIL;
103: sprintf(command, "chmod %ct %s",
104: i_want?'+':'-', path);
105: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
106: VERBOSE(bigbuf);
107: FIX(system(command););
108: } /* if setid_f */
109: if (TST(S_IREAD, read_f)) {
110: sprintf(bigbuf, "%s is %sowner readable.",
111: path, i_want?"not ":"");
112: notice(msg_type, bigbuf, NULL);
113: SETFAIL;
114: sprintf(command, "chmod u%cr %s",
115: i_want?'+':'-', path);
116: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
117: VERBOSE(bigbuf);
118: FIX(system(command););
119: } /* if read_f */
120: if (TST(S_IWRITE, write_f)) {
121: sprintf(bigbuf, "%s is %sowner writable.",
122: path, i_want?"not ":"");
123: notice(msg_type, bigbuf, NULL);
124: SETFAIL;
125: sprintf(command, "chmod u%cw %s",
126: i_want?'+':'-', path);
127: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
128: VERBOSE(bigbuf);
129: FIX(system(command););
130: } /* if write_f */
131: if (TST(S_IEXEC, execute_f)) {
132: sprintf(bigbuf, "%s is %sowner executable.",
133: path, i_want?"not ":"");
134: notice(msg_type, bigbuf, NULL);
135: SETFAIL;
136: sprintf(command, "chmod u%cx %s",
137: i_want?'+':'-', path);
138: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
139: VERBOSE(bigbuf);
140: FIX(system(command););
141: } /* if execute_f */
142: /* Setuid must come last, or it will be lost. */
143: if (TST(S_ISUID, setid_f)) {
144: sprintf(bigbuf, "%s is %ssetuid.",
145: path, i_want?"not ":"");
146: notice(msg_type, bigbuf, NULL);
147: SETFAIL;
148: sprintf(command, "chmod u%cs %s",
149: i_want?'+':'-', path);
150: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
151: VERBOSE(bigbuf);
152: FIX(system(command););
153: } /* if setid_f */
154: } /* if user_f */
155:
156: if (group_f){
157: if (TST(S_ISVTX, sticky_f)) {
158: sprintf(bigbuf, "%s is %ssticky.",
159: path, i_want?"not ":"");
160: notice(msg_type, bigbuf, NULL);
161: SETFAIL;
162: sprintf(command, "chmod %ct %s",
163: i_want?'+':'-', path);
164: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
165: VERBOSE(bigbuf);
166: FIX(system(command););
167: } /* if setid_f */
168: if (TST(S_IGREAD, read_f)) {
169: sprintf(bigbuf, "%s is %sgroup readable.",
170: path, i_want?"not ":"");
171: notice(msg_type, bigbuf, NULL);
172: SETFAIL;
173: sprintf(command, "chmod g%cr %s",
174: i_want?'+':'-', path);
175: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
176: VERBOSE(bigbuf);
177: FIX(system(command););
178: } /* if read_f */
179: if (TST(S_IGWRITE, write_f)) {
180: sprintf(bigbuf, "%s is %sgroup writable.",
181: path, i_want?"not ":"");
182: notice(msg_type, bigbuf, NULL);
183: SETFAIL;
184: sprintf(command, "chmod g%cw %s",
185: i_want?'+':'-', path);
186: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
187: VERBOSE(bigbuf);
188: FIX(system(command););
189: } /* if write_f */
190: if (TST(S_IGEXEC, execute_f)) {
191: sprintf(bigbuf, "%s is %sgroup executable.",
192: path, i_want?"not ":"");
193: notice(msg_type, bigbuf, NULL);
194: SETFAIL;
195: sprintf(command, "chmod g%cx %s",
196: i_want?'+':'-', path);
197: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
198: VERBOSE(bigbuf);
199: FIX(system(command););
200: } /* if execute_f */
201: if (TST(S_ISGID, setid_f)) {
202: sprintf(bigbuf, "%s is %ssetgid.",
203: path, i_want?"not ":"");
204: notice(msg_type, bigbuf, NULL);
205: SETFAIL;
206: sprintf(command, "chmod g%cs %s",
207: i_want?'+':'-', path);
208: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
209: VERBOSE(bigbuf);
210: FIX(system(command););
211: } /* if setid_f */
212: } /* if group_f */
213:
214: if (others_f){
215: if (TST(S_ISVTX, sticky_f)) {
216: sprintf(bigbuf, "%s is %ssticky.",
217: path, i_want?"not ":"");
218: notice(msg_type, bigbuf, NULL);
219: SETFAIL;
220: sprintf(command, "chmod %ct %s",
221: i_want?'+':'-', path);
222: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
223: VERBOSE(bigbuf);
224: FIX(system(command););
225: } /* if setid_f */
226: if (TST(S_IOREAD, read_f)) {
227: sprintf(bigbuf, "%s is %spublicly readable.",
228: path, i_want?"not ":"");
229: notice(msg_type, bigbuf, NULL);
230: SETFAIL;
231: sprintf(command, "chmod o%cr %s",
232: i_want?'+':'-', path);
233: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
234: VERBOSE(bigbuf);
235: FIX(system(command););
236: } /* if read_f */
237: if (TST(S_IOWRITE, write_f)) {
238: sprintf(bigbuf, "%s is %spublicly writable.",
239: path, i_want?"not ":"");
240: notice(msg_type, bigbuf, NULL);
241: SETFAIL;
242: sprintf(command, "chmod o%cw %s",
243: i_want?'+':'-', path);
244: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
245: VERBOSE(bigbuf);
246: FIX(system(command););
247: } /* if write_f */
248: if (TST(S_IOEXEC, execute_f)) {
249: sprintf(bigbuf, "%s is %spublicly executable.",
250: path, i_want?"not ":"");
251: notice(msg_type, bigbuf, NULL);
252: SETFAIL;
253: sprintf(command, "chmod o%cx %s",
254: i_want?'+':'-', path);
255: sprintf(bigbuf, "Use \"%s\" to fix this.\n", command);
256: VERBOSE(bigbuf);
257: FIX(system(command););
258: } /* if execute_f */
259: } /* if other_f */
260:
261: if (error || warning) {
262: return(FALSE);
263: } else {
264: return(TRUE);
265: } /* if error || warning */
266: } /* chmod_chk() */
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.