#include <config.h>
#include <sys/types.h>
#include <sys/param.h>
#include <sys/stat.h>
#include <stdio.h>
#ifdef STDC_HEADERS
# include <stdlib.h>
# include <stddef.h>
#else
# ifdef HAVE_STDLIB_H
# include <stdlib.h>
# endif
#endif
#ifdef HAVE_STRING_H
# include <string.h>
#endif
#ifdef HAVE_STRINGS_H
# include <strings.h>
#endif
#ifdef HAVE_UNISTD_H
# include <unistd.h>
#endif
#include <pwd.h>
#include <errno.h>
#include <grp.h>
#ifdef HAVE_LOGIN_CAP_H
# include <login_cap.h>
#endif
#ifdef HAVE_PROJECT_H
# include <project.h>
# include <sys/task.h>
#endif
#include "sudo.h"
static void runas_setup __P((void));
static void runas_setgroups __P((void));
static void restore_groups __P((void));
static int current_perm = -1;
#ifdef HAVE_SETRESUID
int
set_perms(perm)
int perm;
{
const char *errstr;
int noexit;
noexit = ISSET(perm, PERM_NOEXIT);
CLR(perm, PERM_MASK);
if (perm == current_perm)
return 1;
switch (perm) {
case PERM_ROOT:
if (setresuid(ROOT_UID, ROOT_UID, ROOT_UID)) {
errstr = "setresuid(ROOT_UID, ROOT_UID, ROOT_UID)";
goto bad;
}
(void) setresgid(-1, ROOT_GID, -1);
if (current_perm == PERM_RUNAS)
restore_groups();
break;
case PERM_USER:
(void) setresgid(-1, user_gid, -1);
if (setresuid(user_uid, user_uid, ROOT_UID)) {
errstr = "setresuid(user_uid, user_uid, ROOT_UID)";
goto bad;
}
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setresuid(user_uid, user_uid, user_uid)) {
errstr = "setresuid(user_uid, user_uid, user_uid)";
goto bad;
}
break;
case PERM_RUNAS:
runas_setgroups();
(void) setresgid(-1, runas_gr ?
runas_gr->gr_gid : runas_pw->pw_gid, -1);
if (setresuid(-1, runas_pw ? runas_pw->pw_uid :
user_uid, -1)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_FULL_RUNAS:
runas_setup();
if (setresuid(def_stay_setuid ?
user_uid : runas_pw->pw_uid,
runas_pw->pw_uid, runas_pw->pw_uid)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_SUDOERS:
if (setresgid(-1, SUDOERS_GID, -1)) {
errstr = "unable to change to sudoers gid";
goto bad;
}
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & S_IRGRP) && setresuid(ROOT_UID, 1, ROOT_UID)) {
errstr = "setresuid(ROOT_UID, 1, ROOT_UID)";
goto bad;
}
} else {
if (setresuid(ROOT_UID, SUDOERS_UID, ROOT_UID)) {
errstr = "setresuid(ROOT_UID, SUDOERS_UID, ROOT_UID)";
goto bad;
}
}
break;
case PERM_TIMESTAMP:
if (setresuid(ROOT_UID, timestamp_uid, ROOT_UID)) {
errstr = "setresuid(ROOT_UID, timestamp_uid, ROOT_UID)";
goto bad;
}
break;
}
current_perm = perm;
return 1;
bad:
warningx("%s: %s", errstr,
errno == EAGAIN ? "too many processes" : strerror(errno));
if (noexit)
return 0;
exit(1);
}
#else
# ifdef HAVE_SETREUID
int
set_perms(perm)
int perm;
{
const char *errstr;
int noexit;
noexit = ISSET(perm, PERM_NOEXIT);
CLR(perm, PERM_MASK);
if (perm == current_perm)
return 1;
switch (perm) {
case PERM_ROOT:
if (setreuid(-1, ROOT_UID)) {
errstr = "setreuid(-1, ROOT_UID)";
goto bad;
}
if (setuid(ROOT_UID)) {
errstr = "setuid(ROOT_UID)";
goto bad;
}
(void) setregid(-1, ROOT_GID);
if (current_perm == PERM_RUNAS)
restore_groups();
break;
case PERM_USER:
(void) setregid(-1, user_gid);
if (setreuid(ROOT_UID, user_uid)) {
errstr = "setreuid(ROOT_UID, user_uid)";
goto bad;
}
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setreuid(user_uid, user_uid)) {
errstr = "setreuid(user_uid, user_uid)";
goto bad;
}
break;
case PERM_RUNAS:
runas_setgroups();
(void) setregid(-1, runas_gr ?
runas_gr->gr_gid : runas_pw->pw_gid);
if (setreuid(-1,
runas_pw ? runas_pw->pw_uid : user_uid)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_FULL_RUNAS:
runas_setup();
if (setreuid(def_stay_setuid ? user_uid :
runas_pw->pw_uid, runas_pw->pw_uid)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_SUDOERS:
if (setregid(-1, SUDOERS_GID)) {
errstr = "unable to change to sudoers gid";
goto bad;
}
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & S_IRGRP) && setreuid(ROOT_UID, 1)) {
errstr = "setreuid(ROOT_UID, 1)";
goto bad;
}
} else {
if (setreuid(ROOT_UID, SUDOERS_UID)) {
errstr = "setreuid(ROOT_UID, SUDOERS_UID)";
goto bad;
}
}
break;
case PERM_TIMESTAMP:
if (setreuid(ROOT_UID, timestamp_uid)) {
errstr = "setreuid(ROOT_UID, timestamp_uid)";
goto bad;
}
break;
}
current_perm = perm;
return 1;
bad:
warningx("%s: %s", errstr,
errno == EAGAIN ? "too many processes" : strerror(errno));
if (noexit)
return 0;
exit(1);
}
# else
# ifdef HAVE_SETEUID
int
set_perms(perm)
int perm;
{
const char *errstr;
int noexit;
noexit = ISSET(perm, PERM_NOEXIT);
CLR(perm, PERM_MASK);
if (perm == current_perm)
return 1;
if (seteuid(ROOT_UID)) {
errstr = "seteuid(ROOT_UID)";
goto bad;
}
if (setuid(ROOT_UID)) {
errstr = "setuid(ROOT_UID)";
goto bad;
}
switch (perm) {
case PERM_ROOT:
(void) setegid(ROOT_GID);
if (current_perm == PERM_RUNAS)
restore_groups();
break;
case PERM_USER:
(void) setegid(user_gid);
if (seteuid(user_uid)) {
errstr = "seteuid(user_uid)";
goto bad;
}
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setuid(user_uid)) {
errstr = "setuid(user_uid)";
goto bad;
}
break;
case PERM_RUNAS:
runas_setgroups();
(void) setegid(runas_gr ?
runas_gr->gr_gid : runas_pw->pw_gid);
if (seteuid(runas_pw ? runas_pw->pw_uid : user_uid)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_FULL_RUNAS:
runas_setup();
if (setuid(runas_pw->pw_uid)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_SUDOERS:
if (setegid(SUDOERS_GID)) {
errstr = "unable to change to sudoers gid";
goto bad;
}
if (SUDOERS_UID == ROOT_UID) {
if ((SUDOERS_MODE & S_IRGRP) && seteuid(1)) {
errstr = "seteuid(1)";
goto bad;
}
} else {
if (seteuid(SUDOERS_UID)) {
errstr = "seteuid(SUDOERS_UID)";
goto bad;
}
}
break;
case PERM_TIMESTAMP:
if (seteuid(timestamp_uid)) {
errstr = "seteuid(timestamp_uid)";
goto bad;
}
break;
}
current_perm = perm;
return 1;
bad:
warningx("%s: %s", errstr,
errno == EAGAIN ? "too many processes" : strerror(errno));
if (noexit)
return 0;
exit(1);
}
# else
int
set_perms(perm)
int perm;
{
const char *errstr;
int noexit;
noexit = ISSET(perm, PERM_NOEXIT);
CLR(perm, PERM_MASK);
if (perm == current_perm)
return 1;
switch (perm) {
case PERM_ROOT:
if (setuid(ROOT_UID)) {
errstr = "setuid(ROOT_UID)";
goto bad;
}
(void) setgid(ROOT_GID);
if (current_perm == PERM_RUNAS)
restore_groups();
break;
case PERM_FULL_USER:
(void) setgid(user_gid);
if (setuid(user_uid)) {
errstr = "setuid(user_uid)";
goto bad;
}
break;
case PERM_FULL_RUNAS:
runas_setup();
if (setuid(runas_pw->pw_uid)) {
errstr = "unable to change to runas uid";
goto bad;
}
break;
case PERM_USER:
case PERM_SUDOERS:
case PERM_RUNAS:
case PERM_TIMESTAMP:
break;
}
current_perm = perm;
return 1;
bad:
warningx("%s: %s", errstr,
errno == EAGAIN ? "too many processes" : strerror(errno));
if (noexit)
return 0;
exit(1);
}
# endif
# endif
#endif
#ifdef HAVE_INITGROUPS
static void
runas_setgroups()
{
static int ngroups = -1;
# ifdef HAVE_GETGROUPS
static GETGROUPS_T *groups;
# endif
static struct passwd *pw;
struct passwd *opw = pw;
if (def_preserve_groups)
return;
pw = runas_pw ? runas_pw : sudo_user.pw;
if (pw != opw) {
# ifdef HAVE_SETAUTHDB
aix_setauthdb(pw->pw_name);
# endif
if (initgroups(pw->pw_name, pw->pw_gid) < 0)
log_fatal(USE_ERRNO|MSG_ONLY, "can't set runas group vector");
# ifdef HAVE_GETGROUPS
if (groups) {
efree(groups);
groups = NULL;
}
if ((ngroups = getgroups(0, NULL)) > 0) {
groups = emalloc2(ngroups, sizeof(GETGROUPS_T));
if (getgroups(ngroups, groups) < 0)
log_fatal(USE_ERRNO|MSG_ONLY, "can't get runas group vector");
}
# ifdef HAVE_SETAUTHDB
aix_restoreauthdb();
# endif
} else {
if (setgroups(ngroups, groups) < 0)
log_fatal(USE_ERRNO|MSG_ONLY, "can't set runas group vector");
# endif
}
}
static void
restore_groups()
{
if (user_ngroups >= 0 && setgroups(user_ngroups, user_groups) < 0)
log_fatal(USE_ERRNO|MSG_ONLY, "can't reset user group vector");
}
#else
static void
runas_setgroups()
{
}
static void
restore_groups()
{
}
#endif
#ifdef HAVE_PROJECT_H
static void
set_project(pw)
struct passwd *pw;
{
struct project proj;
char buf[PROJECT_BUFSZ];
int errval;
setprojent();
if (getdefaultproj(pw->pw_name, &proj, buf, sizeof(buf)) != NULL) {
errval = setproject(proj.pj_name, pw->pw_name, TASK_NORMAL);
switch(errval) {
case 0:
break;
case SETPROJ_ERR_TASK:
switch (errno) {
case EAGAIN:
warningx("resource control limit has been reached");
break;
case ESRCH:
warningx("user \"%s\" is not a member of project \"%s\"",
pw->pw_name, proj.pj_name);
break;
case EACCES:
warningx("the invoking task is final");
break;
default:
warningx("could not join project \"%s\"", proj.pj_name);
}
case SETPROJ_ERR_POOL:
switch (errno) {
case EACCES:
warningx("no resource pool accepting default bindings "
"exists for project \"%s\"", proj.pj_name);
break;
case ESRCH:
warningx("specified resource pool does not exist for "
"project \"%s\"", proj.pj_name);
break;
default:
warningx("could not bind to default resource pool for "
"project \"%s\"", proj.pj_name);
}
break;
default:
if (errval <= 0) {
warningx("setproject failed for project \"%s\"", proj.pj_name);
} else {
warningx("warning, resource control assignment failed for "
"project \"%s\"", proj.pj_name);
}
}
} else {
warning("getdefaultproj");
}
endprojent();
}
#endif
static void
runas_setup()
{
gid_t gid;
#ifdef HAVE_LOGIN_CAP_H
int flags;
extern login_cap_t *lc;
#endif
if (runas_pw->pw_name != NULL) {
gid = runas_gr ? runas_gr->gr_gid : runas_pw->pw_gid;
#ifdef HAVE_PROJECT_H
set_project(runas_pw);
#endif
#ifdef HAVE_GETUSERATTR
aix_prep_user(runas_pw->pw_name, user_ttypath);
#endif
#ifdef HAVE_PAM
pam_begin_session(runas_pw);
#endif
#ifdef HAVE_LOGIN_CAP_H
if (def_use_loginclass) {
flags = LOGIN_SETRESOURCES|LOGIN_SETPRIORITY;
if (setusercontext(lc, runas_pw, runas_pw->pw_uid, flags)) {
if (runas_pw->pw_uid != ROOT_UID)
error(1, "unable to set user context");
else
warning("unable to set user context");
}
}
#endif
runas_setgroups();
#ifdef HAVE_SETEUID
if (setegid(gid))
warning("cannot set egid to runas gid");
#endif
if (setgid(gid))
warning("cannot set gid to runas gid");
}
}