|
version 1.1.1.1, 2012/02/21 16:23:02
|
version 1.1.1.5, 2013/10/14 07:56:33
|
|
Line 1
|
Line 1
|
| /* |
/* |
| * Copyright (c) 2008, 2010-2011 Todd C. Miller <Todd.Miller@courtesan.com> | * Copyright (c) 2008, 2010-2013 Todd C. Miller <Todd.Miller@courtesan.com> |
| * |
* |
| * Permission to use, copy, modify, and distribute this software for any |
* Permission to use, copy, modify, and distribute this software for any |
| * purpose with or without fee is hereby granted, provided that the above |
* purpose with or without fee is hereby granted, provided that the above |
|
Line 33
|
Line 33
|
| |
|
| #include "missing.h" |
#include "missing.h" |
| #include "alloc.h" |
#include "alloc.h" |
| #include "error.h" | #include "fatal.h" |
| | #include "sudo_debug.h" |
| |
|
| #define DEFAULT_TEXT_DOMAIN "sudo" |
#define DEFAULT_TEXT_DOMAIN "sudo" |
| #include "gettext.h" |
#include "gettext.h" |
|
Line 72 static int
|
Line 73 static int
|
| aix_getlimit(char *user, char *lim, rlim64_t *valp) |
aix_getlimit(char *user, char *lim, rlim64_t *valp) |
| { |
{ |
| int val; |
int val; |
| |
debug_decl(aix_getlimit, SUDO_DEBUG_UTIL) |
| |
|
| if (getuserattr(user, lim, &val, SEC_INT) != 0) |
if (getuserattr(user, lim, &val, SEC_INT) != 0) |
| return -1; | debug_return_int(-1); |
| *valp = val; |
*valp = val; |
| return 0; | debug_return_int(0); |
| } |
} |
| |
|
| static void |
static void |
|
Line 85 aix_setlimits(char *user)
|
Line 87 aix_setlimits(char *user)
|
| struct rlimit64 rlim; |
struct rlimit64 rlim; |
| rlim64_t val; |
rlim64_t val; |
| int n; |
int n; |
| |
debug_decl(aix_setlimits, SUDO_DEBUG_UTIL) |
| |
|
| if (setuserdb(S_READ) != 0) |
if (setuserdb(S_READ) != 0) |
| error(1, "unable to open userdb"); | fatal("unable to open userdb"); |
| |
|
| /* |
/* |
| * For each resource limit, get the soft/hard values for the user |
* For each resource limit, get the soft/hard values for the user |
|
Line 105 aix_setlimits(char *user)
|
Line 108 aix_setlimits(char *user)
|
| else |
else |
| rlim.rlim_cur = rlim.rlim_max; /* soft not specd, use hard */ |
rlim.rlim_cur = rlim.rlim_max; /* soft not specd, use hard */ |
| } else { |
} else { |
| /* No hard limit set, try soft limit. */ | /* No hard limit set, try soft limit, if it exists. */ |
| if (aix_getlimit(user, aix_limits[n].soft, &val) == 0) | if (aix_getlimit(user, aix_limits[n].soft, &val) == -1) |
| rlim.rlim_cur = val == -1 ? RLIM64_INFINITY : val * aix_limits[n].factor; | continue; |
| | rlim.rlim_cur = val == -1 ? RLIM64_INFINITY : val * aix_limits[n].factor; |
| |
|
| /* Set hard limit per AIX /etc/security/limits documentation. */ |
/* Set hard limit per AIX /etc/security/limits documentation. */ |
| switch (aix_limits[n].resource) { |
switch (aix_limits[n].resource) { |
|
Line 126 aix_setlimits(char *user)
|
Line 130 aix_setlimits(char *user)
|
| (void)setrlimit64(aix_limits[n].resource, &rlim); |
(void)setrlimit64(aix_limits[n].resource, &rlim); |
| } |
} |
| enduserdb(); |
enduserdb(); |
| |
debug_return; |
| } |
} |
| |
|
| #ifdef HAVE_SETAUTHDB |
#ifdef HAVE_SETAUTHDB |
|
Line 138 void
|
Line 143 void
|
| aix_setauthdb(char *user) |
aix_setauthdb(char *user) |
| { |
{ |
| char *registry; |
char *registry; |
| |
debug_decl(aix_setauthdb, SUDO_DEBUG_UTIL) |
| |
|
| if (user != NULL) { |
if (user != NULL) { |
| if (setuserdb(S_READ) != 0) |
if (setuserdb(S_READ) != 0) |
| error(1, _("unable to open userdb")); | fatal(_("unable to open userdb")); |
| if (getuserattr(user, S_REGISTRY, ®istry, SEC_CHAR) == 0) { |
if (getuserattr(user, S_REGISTRY, ®istry, SEC_CHAR) == 0) { |
| if (setauthdb(registry, NULL) != 0) |
if (setauthdb(registry, NULL) != 0) |
| error(1, _("unable to switch to registry \"%s\" for %s"), | fatal(_("unable to switch to registry \"%s\" for %s"), |
| registry, user); |
registry, user); |
| } |
} |
| enduserdb(); |
enduserdb(); |
| } |
} |
| |
debug_return; |
| } |
} |
| |
|
| /* |
/* |
|
Line 157 aix_setauthdb(char *user)
|
Line 164 aix_setauthdb(char *user)
|
| void |
void |
| aix_restoreauthdb(void) |
aix_restoreauthdb(void) |
| { |
{ |
| |
debug_decl(aix_setauthdb, SUDO_DEBUG_UTIL) |
| |
|
| if (setauthdb(NULL, NULL) != 0) |
if (setauthdb(NULL, NULL) != 0) |
| error(1, _("unable to restore registry")); | fatal(_("unable to restore registry")); |
| | |
| | debug_return; |
| } |
} |
| #endif |
#endif |
| |
|
|
Line 167 aix_prep_user(char *user, const char *tty)
|
Line 178 aix_prep_user(char *user, const char *tty)
|
| { |
{ |
| char *info; |
char *info; |
| int len; |
int len; |
| |
debug_decl(aix_setauthdb, SUDO_DEBUG_UTIL) |
| |
|
| /* set usrinfo, like login(1) does */ |
/* set usrinfo, like login(1) does */ |
| len = easprintf(&info, "NAME=%s%cLOGIN=%s%cLOGNAME=%s%cTTY=%s%c", |
len = easprintf(&info, "NAME=%s%cLOGIN=%s%cLOGNAME=%s%cTTY=%s%c", |
|
Line 181 aix_prep_user(char *user, const char *tty)
|
Line 193 aix_prep_user(char *user, const char *tty)
|
| |
|
| /* set resource limits */ |
/* set resource limits */ |
| aix_setlimits(user); |
aix_setlimits(user); |
| |
|
| |
debug_return; |
| } |
} |
| #endif /* HAVE_GETUSERATTR */ |
#endif /* HAVE_GETUSERATTR */ |