#include "config.h"
#include <sys/types.h>
#include <sys/param.h>
#include <sys/stat.h>
#include <stdio.h>
#ifdef STDC_HEADERS
# include <stdlib.h>
# include <stddef.h>
#else
# ifdef HAVE_STDLIB_H
# include <stdlib.h>
# endif
#endif
#ifdef HAVE_STRING_H
# include <string.h>
#else
# ifdef HAVE_STRINGS_H
# include <strings.h>
# endif
#endif
#ifdef HAVE_UNISTD_H
# include <unistd.h>
#endif
#include <pwd.h>
#include <errno.h>
#include <grp.h>
#ifdef HAVE_LOGIN_CAP_H
# include <login_cap.h>
#endif
#include "sudo.h"
#ifndef lint
static const char rcsid[] = "$Sudo: set_perms.c,v 1.30 2004/05/27 23:12:02 millert Exp $";
#endif
#ifdef __TANDEM
# define ROOT_UID 65535
#else
# define ROOT_UID 0
#endif
static void runas_setup __P((void));
static void fatal __P((char *, int));
#if !defined(HAVE_SETRESUID) && !defined(HAVE_SETREUID) && \
!defined(NO_SAVED_IDS) && defined(_SC_SAVED_IDS) && defined(_SC_VERSION)
void
set_perms_posix(perm)
int perm;
{
int error;
switch (perm) {
case PERM_ROOT:
if (seteuid(ROOT_UID))
fatal("seteuid(ROOT_UID) failed, your operating system may have broken POSIX saved ID support\nTry running configure with --disable-saved-ids", 0);
break;
case PERM_FULL_ROOT:
(void) seteuid(ROOT_UID);
if (setuid(ROOT_UID))
fatal("setuid(ROOT_UID)", 1);
break;
case PERM_USER:
(void) setegid(user_gid);
if (seteuid(user_uid))
fatal("seteuid(user_uid)", 1);
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setuid(user_uid))
fatal("setuid(user_uid)", 1);
break;
case PERM_RUNAS:
if (seteuid(runas_pw->pw_uid))
fatal("unable to change to runas uid", 1);
break;
case PERM_FULL_RUNAS:
runas_setup();
if (def_stay_setuid)
error = seteuid(runas_pw->pw_uid);
else
error = setuid(runas_pw->pw_uid);
if (error)
fatal("unable to change to runas uid", 1);
break;
case PERM_SUDOERS:
if (setegid(SUDOERS_GID))
fatal("unable to change to sudoers gid", 1);
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & 040) && seteuid(1))
fatal("seteuid(1)", 1);
} else {
if (seteuid(SUDOERS_UID))
fatal("seteuid(SUDOERS_UID)", 1);
}
break;
case PERM_TIMESTAMP:
if (seteuid(timestamp_uid))
fatal("seteuid(timestamp_uid)", 1);
break;
}
}
#endif
#ifdef HAVE_SETRESUID
void
set_perms_suid(perm)
int perm;
{
int error;
switch (perm) {
case PERM_FULL_ROOT:
case PERM_ROOT:
if (setresuid(ROOT_UID, ROOT_UID, ROOT_UID))
fatal("setresuid(ROOT_UID, ROOT_UID, ROOT_UID) failed, your operating system may have a broken setresuid() function\nTry running configure with --disable-setresuid", 0);
break;
case PERM_USER:
(void) setresgid(-1, user_gid, -1);
if (setresuid(user_uid, user_uid, ROOT_UID))
fatal("setresuid(user_uid, user_uid, ROOT_UID)", 1);
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setresuid(user_uid, user_uid, user_uid))
fatal("setresuid(user_uid, user_uid, user_uid)", 1);
break;
case PERM_RUNAS:
if (setresuid(-1, runas_pw->pw_uid, -1))
fatal("unable to change to runas uid", 1);
break;
case PERM_FULL_RUNAS:
runas_setup();
error = setresuid(def_stay_setuid ?
user_uid : runas_pw->pw_uid,
runas_pw->pw_uid, runas_pw->pw_uid);
if (error)
fatal("unable to change to runas uid", 1);
break;
case PERM_SUDOERS:
if (setresgid(-1, SUDOERS_GID, -1))
fatal("unable to change to sudoers gid", 1);
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & 040) && setresuid(ROOT_UID, 1, ROOT_UID))
fatal("setresuid(ROOT_UID, 1, ROOT_UID)", 1);
} else {
if (setresuid(ROOT_UID, SUDOERS_UID, ROOT_UID))
fatal("setresuid(ROOT_UID, SUDOERS_UID, ROOT_UID)", 1);
}
break;
case PERM_TIMESTAMP:
if (setresuid(ROOT_UID, timestamp_uid, ROOT_UID))
fatal("setresuid(ROOT_UID, timestamp_uid, ROOT_UID)", 1);
break;
}
}
#else
# ifdef HAVE_SETREUID
void
set_perms_suid(perm)
int perm;
{
int error;
switch (perm) {
case PERM_FULL_ROOT:
case PERM_ROOT:
if (setreuid(-1, ROOT_UID))
fatal("setreuid(-1, ROOT_UID) failed, your operating system may have a broken setreuid() function\nTry running configure with --disable-setreuid", 0);
if (setuid(ROOT_UID))
fatal("setuid(ROOT_UID)", 1);
break;
case PERM_USER:
(void) setregid(-1, user_gid);
if (setreuid(ROOT_UID, user_uid))
fatal("setreuid(ROOT_UID, user_uid)", 1);
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setreuid(user_uid, user_uid))
fatal("setreuid(user_uid, user_uid)", 1);
break;
case PERM_RUNAS:
if (setreuid(-1, runas_pw->pw_uid))
fatal("unable to change to runas uid", 1);
break;
case PERM_FULL_RUNAS:
runas_setup();
error = setreuid(def_stay_setuid ?
user_uid : runas_pw->pw_uid,
runas_pw->pw_uid);
if (error)
fatal("unable to change to runas uid", 1);
break;
case PERM_SUDOERS:
if (setregid(-1, SUDOERS_GID))
fatal("unable to change to sudoers gid", 1);
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & 040) && setreuid(ROOT_UID, 1))
fatal("setreuid(ROOT_UID, 1)", 1);
} else {
if (setreuid(ROOT_UID, SUDOERS_UID))
fatal("setreuid(ROOT_UID, SUDOERS_UID)", 1);
}
break;
case PERM_TIMESTAMP:
if (setreuid(ROOT_UID, timestamp_uid))
fatal("setreuid(ROOT_UID, timestamp_uid)", 1);
break;
}
}
# else
# ifdef HAVE_SETREUID
void
set_perms_nosuid(perm)
int perm;
{
if (setuid(ROOT_UID))
fatal("setuid(ROOT_UID)", 1);
switch (perm) {
case PERM_USER:
(void) setegid(user_gid);
if (seteuid(user_uid))
fatal("seteuid(user_uid)", 1);
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setuid(user_uid))
fatal("setuid(user_uid)", 1);
break;
case PERM_RUNAS:
if (seteuid(runas_pw->pw_uid))
fatal("unable to change to runas uid", 1);
break;
case PERM_FULL_RUNAS:
runas_setup();
if (setuid(runas_pw->pw_uid))
fatal("unable to change to runas uid", 1);
break;
case PERM_SUDOERS:
if (setegid(SUDOERS_GID))
fatal("unable to change to sudoers gid", 1);
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & 040) && seteuid(1))
fatal("seteuid(1)", 1);
} else {
if (seteuid(SUDOERS_UID))
fatal("seteuid(SUDOERS_UID)", 1);
}
break;
case PERM_TIMESTAMP:
if (seteuid(timestamp_uid))
fatal("seteuid(timestamp_uid)", 1);
break;
}
}
# else
void
set_perms_nosuid(perm)
int perm;
{
switch (perm) {
case PERM_FULL_ROOT:
case PERM_ROOT:
if (setuid(ROOT_UID))
fatal("setuid(ROOT_UID)", 1);
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setuid(user_uid))
fatal("setuid(user_uid)", 1);
break;
case PERM_FULL_RUNAS:
runas_setup();
if (setuid(runas_pw->pw_uid))
fatal("unable to change to runas uid", 1);
break;
case PERM_USER:
case PERM_SUDOERS:
case PERM_RUNAS:
case PERM_TIMESTAMP:
break;
}
}
# endif
# endif
#endif
static void
runas_setup()
{
#ifdef HAVE_LOGIN_CAP_H
int error, flags;
extern login_cap_t *lc;
#endif
if (runas_pw->pw_name != NULL) {
#ifdef HAVE_PAM
pam_prep_user(runas_pw);
#endif
#ifdef HAVE_LOGIN_CAP_H
if (def_use_loginclass) {
flags = LOGIN_SETRESOURCES|LOGIN_SETPRIORITY;
if (!def_preserve_groups)
SET(flags, LOGIN_SETGROUP);
else if (setgid(runas_pw->pw_gid))
perror("cannot set gid to runas gid");
error = setusercontext(lc, runas_pw,
runas_pw->pw_uid, flags);
if (error) {
if (runas_pw->pw_uid != ROOT_UID)
fatal("unable to set user context", 1);
else
perror("unable to set user context");
}
} else
#endif
{
if (setgid(runas_pw->pw_gid))
perror("cannot set gid to runas gid");
#ifdef HAVE_INITGROUPS
if (!def_preserve_groups &&
initgroups(*user_runas, runas_pw->pw_gid) < 0)
perror("cannot set group vector");
#endif
}
}
}
static void
fatal(str, printerr)
char *str;
int printerr;
{
if (str) {
if (printerr)
perror(str);
else {
fputs(str, stderr);
fputc('\n', stderr);
}
}
exit(1);
}