/*
* Copyright (c) 2010-2011 Todd C. Miller <Todd.Miller@courtesan.com>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
#include <sys/types.h>
#include <sys/param.h>
#include <stdio.h>
#include <stdlib.h>
#include <stddef.h>
#include <stdarg.h>
#include <string.h>
#include <unistd.h>
#include <ctype.h>
#include <dlfcn.h>
#include <errno.h>
#include <limits.h>
#include <pwd.h>
#include "sudo_plugin.h"
/*
* Simple driver to test sudoer group plugins.
* usage: plugin_test [-p "plugin.so plugin_args ..."] user:group ...
*/
static void *group_handle;
static struct sudoers_group_plugin *group_plugin;
static int
plugin_printf(int msg_type, const char *fmt, ...)
{
va_list ap;
FILE *fp;
switch (msg_type) {
case SUDO_CONV_INFO_MSG:
fp = stdout;
break;
case SUDO_CONV_ERROR_MSG:
fp = stderr;
break;
default:
errno = EINVAL;
return -1;
}
va_start(ap, fmt);
vfprintf(fp, fmt, ap);
va_end(ap);
return 0;
}
/*
* Load the specified plugin and run its init function.
* Returns -1 if unable to open the plugin, else it returns
* the value from the plugin's init function.
*/
static int
group_plugin_load(char *plugin_info)
{
char *args, path[PATH_MAX], savedch;
char **argv = NULL;
int rc;
/*
* Fill in .so path and split out args (if any).
*/
if ((args = strpbrk(plugin_info, " \t")) != NULL) {
savedch = *args;
*args = '\0';
}
strncpy(path, plugin_info, sizeof(path) - 1);
path[sizeof(path) - 1] = '\0';
if (args != NULL)
*args++ = savedch;
/* Open plugin and map in symbol. */
group_handle = dlopen(path, RTLD_LAZY);
if (!group_handle) {
fprintf(stderr, "unable to dlopen %s: %s\n", path, dlerror());
return -1;
}
group_plugin = dlsym(group_handle, "group_plugin");
if (group_plugin == NULL) {
fprintf(stderr, "unable to find symbol \"group_plugin\" in %s\n", path);
return -1;
}
if (GROUP_API_VERSION_GET_MAJOR(group_plugin->version) != GROUP_API_VERSION_MAJOR) {
fprintf(stderr,
"%s: incompatible group plugin major version %d, expected %d\n",
path, GROUP_API_VERSION_GET_MAJOR(group_plugin->version),
GROUP_API_VERSION_MAJOR);
return -1;
}
/*
* Split args into a vector if specified.
*/
if (args != NULL) {
int ac = 0, wasblank = 1;
char *cp;
for (cp = args; *cp != '\0'; cp++) {
if (isblank((unsigned char)*cp)) {
wasblank = 1;
} else if (wasblank) {
wasblank = 0;
ac++;
}
}
if (ac != 0) {
argv = malloc(ac * sizeof(char *));
if (argv == NULL) {
fprintf(stderr, "unable to allocate memory\n");
return -1;
}
ac = 0;
for ((cp = strtok(args, " \t")); cp; (cp = strtok(NULL, " \t")))
argv[ac++] = cp;
}
}
rc = (group_plugin->init)(GROUP_API_VERSION, plugin_printf, argv);
free(argv);
return rc;
}
static void
group_plugin_unload(void)
{
(group_plugin->cleanup)();
dlclose(group_handle);
group_handle = NULL;
}
static int
group_plugin_query(const char *user, const char *group,
const struct passwd *pwd)
{
return group_plugin->query)(user, group, pwd;
}
static void
usage(void)
{
fprintf(stderr,
"usage: plugin_test [-p \"plugin.so plugin_args ...\"] user:group ...\n");
exit(1);
}
int
main(int argc, char *argv[])
{
int ch, i, found;
char *plugin = "sample_group.so";
char *user, *group;
struct passwd *pwd;
while ((ch = getopt(argc, argv, "p:")) != -1) {
switch (ch) {
case 'p':
plugin = optarg;
break;
default:
usage();
}
}
argc -= optind;
argv += optind;
if (argc < 1)
usage();
if (group_plugin_load(plugin) != 1) {
fprintf(stderr, "unable to load plugin: %s\n", plugin);
exit(1);
}
for (i = 0; argv[i] != NULL; i++) {
user = argv[i];
group = strchr(argv[i], ':');
if (group == NULL)
continue;
*group++ = '\0';
pwd = getpwnam(user);
found = group_plugin_query(user, group, pwd);
printf("user %s %s in group %s\n", user, found ? "is" : "NOT ", group);
}
group_plugin_unload();
exit(0);
}
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>