/
niceSOFT
/
shadow
Обзор
Документация
Войти
/
niceSOFT
/
shadow
Код
Задачи
Вики
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
lib/prototypes.h
524 строки
16 KB
Alejandro Colomar
lib/, src/: Rename obscure_get_range() => pass_min_len(), and simplify
17 июл 2026, 21:42
17 июл 2026, 21:42
1233561
Код
Авторство
О чём код?
/* * SPDX-FileCopyrightText: 1990 - 1994, Julianne Frances Haugh * SPDX-FileCopyrightText: 1996 - 2000, Marek Michałkiewicz * SPDX-FileCopyrightText: 2003 - 2006, Tomasz Kłoczko * SPDX-FileCopyrightText: 2007 - 2010, Nicolas François * * SPDX-License-Identifier: BSD-3-Clause */ /* * prototypes.h * * prototypes of some lib functions, and private lib functions. * * $Id$ * */ #ifndef _PROTOTYPES_H #define _PROTOTYPES_H #include "config.h" #include <sys/socket.h> #include <sys/stat.h> #include <sys/types.h> #include <pwd.h> #include <grp.h> #include <shadow.h> #ifdef ENABLE_LASTLOG #include <lastlog.h> #endif /* ENABLE_LASTLOG */ #include "attr.h" #include "defines.h" #include "commonio.h" #include "shadow/gshadow/sgrp.h" /* addgrps.c */ #if !defined(USE_PAM) extern int add_groups (const char *); #endif /* age.c */ extern void agecheck (/*@null@*/const struct spwd *); extern int expire (const struct passwd *, /*@null@*/const struct spwd *); /* isexpired.c */ extern int isexpired (const struct passwd *, /*@null@*/const struct spwd *); /* basename() renamed to Basename() to avoid libc name space confusion */ /* basename.c */ extern /*@observer@*/const char *Basename (const char *str); /* chowndir.c */ extern int chown_tree (const char *root, uid_t old_uid, uid_t new_uid, gid_t old_gid, gid_t new_gid); /* chowntty.c */ extern void chown_tty (const struct passwd *); /* cleanup.c */ typedef /*@null@*/void (*cleanup_function) (/*@null@*/void *arg); void add_cleanup (/*@notnull@*/cleanup_function pcf, /*@null@*/void *arg); void del_cleanup (/*@notnull@*/cleanup_function pcf); void do_cleanups (void); /* cleanup_group.c */ struct cleanup_info_mod { char *audit_msg; char *action; /*@observer@*/const char *name; }; void cleanup_report_add_group (void *group_name); void cleanup_report_add_group_group (void *group_name); #ifdef SHADOWGRP void cleanup_report_add_group_gshadow (void *group_name); #endif void cleanup_report_del_group (void *group_name); void cleanup_report_del_group_group (void *group_name); #ifdef SHADOWGRP void cleanup_report_del_group_gshadow (void *group_name); #endif void cleanup_report_mod_passwd (void *cleanup_info); void cleanup_report_mod_group (void *cleanup_info); void cleanup_report_mod_gshadow (void *cleanup_info); void cleanup_unlock_group (void *process_selinux); #ifdef SHADOWGRP void cleanup_unlock_gshadow (void *process_selinux); #endif void cleanup_unlock_passwd (void *process_selinux); /* console.c */ extern bool console (const char *); /* copydir.c */ extern int copy_tree (const char *src_root, const char *dst_root, bool copy_root, uid_t old_uid, uid_t new_uid, gid_t old_gid, gid_t new_gid); /* encrypt.c */ extern /*@exposed@*//*@null@*/char *pw_encrypt (const char *, const char *); /* env.c */ extern void addenv (const char *, /*@null@*/const char *); extern void initenv (void); extern void set_env (int, char *const *); extern void sanitize_env (void); /* fd.c */ extern void check_fds (void); /* find_new_gid.c */ extern int find_new_gid (bool sys_group, gid_t *gid, /*@null@*/gid_t const *preferred_gid); /* find_new_uid.c */ extern int find_new_uid (bool sys_user, uid_t *uid, /*@null@*/uid_t const *preferred_uid); #ifdef ENABLE_SUBIDS /* find_new_sub_gids.c */ extern int find_new_sub_gids(uid_t uid, id_t *range_start, unsigned long *range_count); /* find_new_sub_uids.c */ extern int find_new_sub_uids(uid_t uid, id_t *range_start, unsigned long *range_count); #endif /* ENABLE_SUBIDS */ /* getgr_nam_gid.c */ extern /*@only@*//*@null@*/struct group *getgr_nam_gid (/*@null@*/const char *grname); /* get_pid.c */ extern int get_pidfd_from_fd(const char *pidfdstr); extern int open_pidfd(const char *pidstr); /* getrange */ extern int getrange (const char *range, unsigned long *min, bool *has_min, unsigned long *max, bool *has_max); /* gettime.c */ extern time_t gettime (void); /* groupio.c */ extern void __gr_del_entry (const struct commonio_entry *ent); extern /*@observer@*/const struct commonio_db *__gr_get_db (void); extern /*@dependent@*/ /*@null@*/struct commonio_entry *__gr_get_head (void); extern void __gr_set_changed (void); /* groupmem.c */ extern /*@null@*/ /*@only@*/struct group *__gr_dup (const struct group *grent); extern void gr_free_members (struct group *grent); extern void gr_free(/*@only@*/struct group *grent); /* hushed.c */ extern bool hushed (const char *username); /* audit_help.c */ #ifdef WITH_AUDIT extern int audit_fd; extern void audit_help_open (void); /* Use AUDIT_NO_ID when a name is provided to audit_logger instead of an ID */ #define AUDIT_NO_ID ((unsigned int) -1) typedef enum { SHADOW_AUDIT_FAILURE = 0, SHADOW_AUDIT_SUCCESS = 1} shadow_audit_result; extern void audit_logger (int type, const char *op, const char *name, unsigned int id, shadow_audit_result result); void audit_logger_message (const char *message, shadow_audit_result result); void audit_logger_with_group(int type, const char *op, const char *name, id_t id, const char *grp_type, const char *grp, shadow_audit_result result); #endif /* limits.c */ #ifndef USE_PAM extern void setup_limits (const struct passwd *); #endif /* list.c */ extern /*@only@*/char **add_list (/*@returned@*/ /*@only@*/char **, const char *); extern /*@only@*/char **del_list (/*@returned@*/ /*@only@*/char **, const char *); extern /*@only@*/char **dup_list (char *const *); extern void free_list (char **); extern bool is_on_list (char *const *list, const char *member); extern /*@only@*/char **comma_to_list (const char *); #ifdef ENABLE_LASTLOG /* log.c */ extern void dolastlog ( struct lastlog *ll, const struct passwd *pw, /*@unique@*/const char *line, /*@unique@*/const char *host); #endif /* ENABLE_LASTLOG */ /* login_nopam.c */ extern int login_access (const char *user, const char *from); /* loginprompt.c */ extern void login_prompt (char *, int); /* mail.c */ extern void mailcheck (void); /* motd.c */ extern int motd(void); /* myname.c */ extern /*@null@*//*@only@*/struct passwd *get_my_pwent (void); /* nss.c */ #include <libsubid/subid.h> extern void nss_init(const char *nsswitch_path); extern bool nss_is_initialized(void); struct subid_nss_ops { /* * nss_has_range: does a user own a given subid range * * @owner: username * @start: first subid in queried range * @count: number of subids in queried range * @idtype: subuid or subgid * @result: true if @owner has been allocated the subid range. * * returns success if the module was able to determine an answer (true or false), * else an error status. */ enum subid_status (*has_range)(const char *owner, unsigned long start, unsigned long count, enum subid_type idtype, bool *result); /* * nss_list_owner_ranges: list the subid ranges delegated to a user. * * @owner - string representing username being queried * @id_type - subuid or subgid * @ranges - pointer to an array of struct subid_range, or NULL. The * returned array must be freed by the caller. * @count - pointer to an integer into which the number of returned ranges * is written. * returns success if the module was able to determine an answer, * else an error status. */ enum subid_status (*list_owner_ranges)(const char *owner, enum subid_type id_type, struct subid_range **ranges, int *count); /* * nss_find_subid_owners: find uids who own a given subuid or subgid. * * @id - the delegated id (subuid or subgid) being queried * @id_type - subuid or subgid * @uids - pointer to an array of uids which will be allocated by * nss_find_subid_owners() * @count - number of uids found * * returns success if the module was able to determine an answer, * else an error status. */ enum subid_status (*find_subid_owners)(unsigned long id, enum subid_type id_type, uid_t **uids, int *count); /* * nss_free: free a memory block allocated by a subid plugin. * * @ptr - a pointer to a memory block to deallocate * * Some routines of subid_nss_ops allocate memory which should be freed by * caller after use. In order to deallocate that memory block, one should * use this routine to release that memory. By default, this function * pointer is set to free(3) for backward compatibility. However, it is * strongly recommended to define this routine explicitly. */ void (*free)(void *ptr); /* The dlsym handle to close */ void *handle; }; extern struct subid_nss_ops *get_subid_nss_handle(void); /* pam_pass_non_interactive.c */ #ifdef USE_PAM extern int do_pam_passwd_non_interactive (const char *pam_service, const char *username, const char* password); #endif /* USE_PAM */ /* obscure.c */ extern bool obscure (const char *, const char *); extern size_t pass_min_len(void); /* pam_pass.c */ #ifdef USE_PAM extern void do_pam_passwd (const char *user, bool silent, bool change_expired); #endif /* port.c */ extern bool isttytime (const char *, const char *, time_t); /* prefix_flag.c */ extern const char* process_prefix_flag (const char* short_opt, int argc, char **argv); extern struct group *prefix_getgrnam(const char *name); extern struct group *prefix_getgrgid(gid_t gid); extern struct passwd *prefix_getpwuid(uid_t uid); extern struct passwd *prefix_getpwnam(const char* name); #if HAVE_FGETPWENT_R extern int prefix_getpwnam_r(const char* name, struct passwd* pwd, char* buf, size_t buflen, struct passwd** result); #endif extern struct spwd *prefix_getspnam(const char* name); extern struct group *prefix_getgr_nam_gid(const char *grname); extern void prefix_setpwent(void); extern struct passwd* prefix_getpwent(void); extern void prefix_endpwent(void); extern void prefix_setgrent(void); extern struct group* prefix_getgrent(void); extern void prefix_endgrent(void); /* pwd2spwd.c */ extern struct spwd *pwd_to_spwd (const struct passwd *); /* pwdcheck.c */ #ifndef USE_PAM extern void passwd_check(const char *, const char *); #endif /* pwd_init.c */ extern void pwd_init (void); /* pwio.c */ extern void __pw_del_entry (const struct commonio_entry *ent); extern struct commonio_db *__pw_get_db (void); extern /*@dependent@*/ /*@null@*/struct commonio_entry *__pw_get_head (void); /* pwmem.c */ extern /*@null@*/ /*@only@*/struct passwd *__pw_dup (const struct passwd *pwent); extern void pw_free(/*@only@*/struct passwd *pwent); /* csrand.c */ unsigned long csrand (void); unsigned long csrand_uniform (unsigned long n); unsigned long csrand_interval (unsigned long min, unsigned long max); /* remove_tree.c */ extern int remove_tree (const char *root, bool remove_root); /* root_flag.c */ extern void process_root_flag (const char* short_opt, int argc, char **argv); /* salt.c */ extern /*@observer@*/const char *crypt_make_salt (/*@null@*//*@observer@*/const char *meth, /*@null@*/void *arg); /* selinux.c */ #ifdef WITH_SELINUX extern int set_selinux_file_context (const char *dst_name, mode_t mode); extern void reset_selinux_handle (void); extern int reset_selinux_file_context (void); extern int check_selinux_permit (const char *perm_name); #endif /* semanage.c */ #ifdef WITH_SELINUX extern int set_seuser(const char *login_name, const char *seuser_name, const char *serange); extern int del_seuser(const char *login_name); #endif /* setugid.c */ extern int setup_groups (const struct passwd *info); extern int change_uid (const struct passwd *info); #if !defined(USE_PAM) extern int setup_uid_gid (const struct passwd *info, bool is_console); #else extern int setup_uid_gid (const struct passwd *info); #endif /* setup.c */ extern void setup (struct passwd *); /* setupenv.c */ extern void setup_env (struct passwd *); /* sgroupio.c */ extern void __sgr_del_entry (const struct commonio_entry *ent); extern /*@null@*/ /*@only@*/struct sgrp *__sgr_dup (const struct sgrp *sgent); extern void sgr_free(/*@only@*/struct sgrp *sgent); extern /*@dependent@*/ /*@null@*/struct commonio_entry *__sgr_get_head (void); extern void __sgr_set_changed (void); /* shadowio.c */ extern /*@dependent@*/ /*@null@*/struct commonio_entry *__spw_get_head (void); extern void __spw_del_entry (const struct commonio_entry *ent); /* shadowmem.c */ extern /*@null@*/ /*@only@*/struct spwd *__spw_dup (const struct spwd *spent); extern void spw_free(/*@only@*/struct spwd *spent); /* shell.c */ extern int shell (const char *file, /*@null@*/const char *arg, char *const envp[]); /* spawn.c */ ATTR_ACCESS(write_only, 4) extern int run_command(const char *cmd, const char *argv[], /*@null@*/const char *envp[], int *restrict status); /* strtoday.c */ extern long strtoday (const char *); /* suauth.c */ extern int check_su_auth (const char *actual_id, const char *wanted_id, bool su_to_root); /* sulog.c */ extern void sulog (const char *tty, bool success, const char *oldname, const char *name); /* sub.c */ extern void subsystem (const struct passwd *); /* ttytype.c */ extern void ttytype (const char *); /* tz.c */ #ifndef USE_PAM extern /*@observer@*/const char *tz (const char *); #endif /* ulimit.c */ extern int set_filesize_limit (int blocks); /* user_busy.c */ extern int user_busy (const char *name, uid_t uid); /* * Session management: utmp.c or logind.c */ /** * @brief Get host for the current session * * @param[out] out Host name * @param[in] main_pid the PID of the main process (the parent PID if * the process forked itself) * * @return 0 or a positive integer if the host was obtained properly, * another value on error. */ extern int get_session_host (char **out, pid_t main_pid); #ifndef ENABLE_LOGIND /** * @brief Update or create an utmp entry in utmp, wtmp, utmpw, or wtmpx * * @param[in] user username * @param[in] tty tty * @param[in] host hostname * @param[in] main_pid the PID of the main process (the parent PID if * the process forked itself) * * @return 0 if utmp was updated properly, * 1 on error. */ extern int update_utmp (const char *user, const char *tty, const char *host, pid_t main_pid); /** * @brief Update the cumulative failure log * * @param[in] failent_user username * @param[in] tty tty * @param[in] host hostname * @param[in] main_pid the PID of the main process (the parent PID if * the process forked itself) * */ extern void record_failure(const char *failent_user, const char *tty, const char *hostname, pid_t main_pid); #endif /* ENABLE_LOGIND */ /** * @brief Number of active user sessions * * @param[in] name username * @param[in] limit maximum number of active sessions * * @return number of active sessions. * */ extern unsigned long active_sessions_count(const char *name, unsigned long limit); /* valid.c */ extern bool valid (const char *, const struct passwd *); /* write_full.c */ extern int write_full(int fd, const void *buf, size_t count); /* xgetpwnam.c */ extern /*@null@*/ /*@only@*/struct passwd *xgetpwnam (const char *); /* xprefix_getpwnam.c */ extern /*@null@*/ /*@only@*/struct passwd *xprefix_getpwnam (const char *); /* xgetpwuid.c */ extern /*@null@*/ /*@only@*/struct passwd *xgetpwuid (uid_t); /* xgetgrnam.c */ extern /*@null@*/ /*@only@*/struct group *xgetgrnam (const char *); /* xgetgrgid.c */ extern /*@null@*/ /*@only@*/struct group *xgetgrgid (gid_t); /* xgetspnam.c */ extern /*@null@*/ /*@only@*/struct spwd *xgetspnam(const char *); /* yesno.c */ extern bool yes_or_no (bool read_only); #endif /* _PROTOTYPES_H */