003 File Manager
Current Path:
/usr/src/lib/libpam/modules/pam_securetty
usr
/
src
/
lib
/
libpam
/
modules
/
pam_securetty
/
📁
..
📄
Makefile
(1.39 KB)
📄
Makefile.depend
(294 B)
📄
pam_securetty.8
(3.09 KB)
📄
pam_securetty.c
(3.27 KB)
Editing: pam_securetty.c
/*- * SPDX-License-Identifier: BSD-3-Clause * * Copyright (c) 2001 Mark R V Murray * All rights reserved. * Copyright (c) 2001 Networks Associates Technology, Inc. * All rights reserved. * * Portions of this software were developed for the FreeBSD Project by * ThinkSec AS and NAI Labs, the Security Research Division of Network * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 * ("CBOSS"), as part of the DARPA CHATS research program. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote * products derived from this software without specific prior written * permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ #include <sys/cdefs.h> __FBSDID("$FreeBSD$"); #include <sys/types.h> #include <sys/stat.h> #include <pwd.h> #include <ttyent.h> #include <string.h> #define PAM_SM_ACCOUNT #include <security/pam_appl.h> #include <security/pam_modules.h> #include <security/pam_mod_misc.h> #define TTY_PREFIX "/dev/" PAM_EXTERN int pam_sm_acct_mgmt(pam_handle_t *pamh __unused, int flags __unused, int argc __unused, const char *argv[] __unused) { struct passwd *pwd; struct ttyent *ty; const char *user; const void *tty; int pam_err; pam_err = pam_get_user(pamh, &user, NULL); if (pam_err != PAM_SUCCESS) return (pam_err); if (user == NULL || (pwd = getpwnam(user)) == NULL) return (PAM_SERVICE_ERR); PAM_LOG("Got user: %s", user); /* If the user is not root, secure ttys do not apply */ if (pwd->pw_uid != 0) return (PAM_SUCCESS); pam_err = pam_get_item(pamh, PAM_TTY, &tty); if (pam_err != PAM_SUCCESS) return (pam_err); PAM_LOG("Got TTY: %s", (const char *)tty); /* Ignore any "/dev/" on the PAM_TTY item */ if (tty != NULL && strncmp(TTY_PREFIX, tty, sizeof(TTY_PREFIX)) == 0) { PAM_LOG("WARNING: PAM_TTY starts with " TTY_PREFIX); tty = (const char *)tty + sizeof(TTY_PREFIX) - 1; } if (tty != NULL && (ty = getttynam(tty)) != NULL && (ty->ty_status & TTY_SECURE) != 0) return (PAM_SUCCESS); PAM_VERBOSE_ERROR("Not on secure TTY"); return (PAM_AUTH_ERR); } PAM_MODULE_ENTRY("pam_securetty");
Upload File
Create Folder