X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=lib%2Feuidaccess.c;h=e0fdf9de2ea18c645dc423bb1dfed128e528c31a;hb=7518b4fbb51d5c858aa79f9e9eef676258efde23;hp=4803dbcadd7a9cf2cbca9b3a85423780c4c3118f;hpb=4174132afcfff62bfd39028e429b6a44ee3233a8;p=gnulib.git diff --git a/lib/euidaccess.c b/lib/euidaccess.c index 4803dbcad..e0fdf9de2 100644 --- a/lib/euidaccess.c +++ b/lib/euidaccess.c @@ -1,5 +1,5 @@ /* euidaccess -- check if effective user id can access file - Copyright (C) 1990, 1991, 1995 Free Software Foundation, Inc. + Copyright (C) 1990, 1991, 1995, 1998, 2000 Free Software Foundation, Inc. This file is part of the GNU C Library. @@ -15,73 +15,88 @@ Library General Public License for more details. You should have received a copy of the GNU Library General Public License along with the GNU C Library; see the file COPYING.LIB. If -not, write to the Free Software Foundation, Inc., 675 Mass Ave, -Cambridge, MA 02139, USA. */ +not, write to the Free Software Foundation, Inc., 59 Temple Place - +Suite 330, Boston, MA 02111-1307, USA. */ /* Written by David MacKenzie and Torbjorn Granlund. Adapted for GNU C library by Roland McGrath. */ -#ifdef HAVE_CONFIG_H -#include +#if HAVE_CONFIG_H +# include #endif #include #include #ifdef S_IEXEC -#ifndef S_IXUSR -#define S_IXUSR S_IEXEC -#endif -#ifndef S_IXGRP -#define S_IXGRP (S_IEXEC >> 3) -#endif -#ifndef S_IXOTH -#define S_IXOTH (S_IEXEC >> 6) -#endif +# ifndef S_IXUSR +# define S_IXUSR S_IEXEC +# endif +# ifndef S_IXGRP +# define S_IXGRP (S_IEXEC >> 3) +# endif +# ifndef S_IXOTH +# define S_IXOTH (S_IEXEC >> 6) +# endif #endif /* S_IEXEC */ #if defined (HAVE_UNISTD_H) || defined (_LIBC) -#include +# include #endif #ifdef _POSIX_VERSION -#include -#if !defined(NGROUPS_MAX) || NGROUPS_MAX < 1 -#undef NGROUPS_MAX -#define NGROUPS_MAX sysconf (_SC_NGROUPS_MAX) -#endif /* NGROUPS_MAX */ +# include +# if !defined(NGROUPS_MAX) || NGROUPS_MAX < 1 +# undef NGROUPS_MAX +# define NGROUPS_MAX sysconf (_SC_NGROUPS_MAX) +# endif /* NGROUPS_MAX */ #else /* not _POSIX_VERSION */ uid_t getuid (); gid_t getgid (); uid_t geteuid (); gid_t getegid (); -#include -#if !defined(NGROUPS_MAX) && defined(NGROUPS) -#define NGROUPS_MAX NGROUPS -#endif /* not NGROUPS_MAX and NGROUPS */ +# include +# if !defined(NGROUPS_MAX) && defined(NGROUPS) +# define NGROUPS_MAX NGROUPS +# endif /* not NGROUPS_MAX and NGROUPS */ #endif /* not POSIX_VERSION */ #include #ifndef errno extern int errno; #endif +#ifndef __set_errno +# define __set_errno(val) errno = (val) +#endif #if defined(EACCES) && !defined(EACCESS) -#define EACCESS EACCES +# define EACCESS EACCES #endif #ifndef F_OK -#define F_OK 0 -#define X_OK 1 -#define W_OK 2 -#define R_OK 4 +# define F_OK 0 +# define X_OK 1 +# define W_OK 2 +# define R_OK 4 #endif +#if !defined (S_IROTH) && defined (R_OK) +# define S_IROTH R_OK +#endif + +#if !defined (S_IWOTH) && defined (W_OK) +# define S_IWOTH W_OK +#endif + +#if !defined (S_IXOTH) && defined (X_OK) +# define S_IXOTH X_OK +#endif #ifdef _LIBC -#define group_member __group_member +# define group_member __group_member +# define euidaccess __euidaccess #else @@ -91,6 +106,14 @@ static uid_t uid; /* The user's real group id. */ static gid_t gid; +# if HAVE_GETGROUPS +int group_member (); +# else +# define group_member(gid) 0 +# endif + +#endif + /* The user's effective user id. */ static uid_t euid; @@ -98,15 +121,7 @@ static uid_t euid; static gid_t egid; /* Nonzero if UID, GID, EUID, and EGID have valid values. */ -static int have_ids = 0; - -#ifdef HAVE_GETGROUPS -int group_member (); -#else -#define group_member(gid) 0 -#endif - -#endif +static int have_ids; /* Return 0 if the user has permission of type MODE on file PATH; @@ -116,16 +131,15 @@ int group_member (); filesystem, text busy, etc. */ int -euidaccess (path, mode) - const char *path; - int mode; +euidaccess (const char *path, int mode) { struct stat stats; int granted; #ifdef _LIBC - uid_t uid = getuid (), euid = geteuid (); - gid_t gid = getgid (), egid = getegid (); + if (! __libc_enable_secure) + /* If we are not set-uid or set-gid, access does the same. */ + return __access (path, mode); #else if (have_ids == 0) { @@ -135,11 +149,11 @@ euidaccess (path, mode) euid = geteuid (); egid = getegid (); } -#endif if (uid == euid && gid == egid) /* If we are not set-uid or set-gid, access does the same. */ return access (path, mode); +#endif if (stat (path, &stats)) return -1; @@ -152,6 +166,16 @@ euidaccess (path, mode) if (mode == F_OK) return 0; /* The file exists. */ +#ifdef _LIBC + /* Now we need the IDs. */ + if (have_ids == 0) + { + have_ids = 1; + euid = __geteuid (); + egid = __getegid (); + } +#endif + /* The super-user can read and write any file, and execute any file that anyone can execute. */ if (euid == 0 && ((mode & X_OK) == 0 @@ -166,6 +190,40 @@ euidaccess (path, mode) granted = (stats.st_mode & mode); if (granted == mode) return 0; - errno = EACCESS; + __set_errno (EACCESS); return -1; } +#undef euidaccess +#ifdef weak_alias +weak_alias (__euidaccess, euidaccess) +#endif + +#ifdef TEST +# include +# include +# include "error.h" + +char *program_name; + +int +main (argc, argv) + int argc; + char **argv; +{ + char *file; + int mode; + int err; + + program_name = argv[0]; + if (argc < 3) + abort (); + file = argv[1]; + mode = atoi (argv[2]); + + err = euidaccess (file, mode); + printf ("%d\n", err); + if (err != 0) + error (0, errno, "%s", file); + exit (0); +} +#endif