diff options
Diffstat (limited to 'src/expiry.c')
| -rw-r--r-- | src/expiry.c | 210 |
1 files changed, 210 insertions, 0 deletions
diff --git a/src/expiry.c b/src/expiry.c new file mode 100644 index 00000000..b16d98fb --- /dev/null +++ b/src/expiry.c @@ -0,0 +1,210 @@ +/* + * Copyright (c) 1994 , Julianne Frances Haugh + * Copyright (c) 1996 - 2000, Marek Michałkiewicz + * Copyright (c) 2001 - 2006, Tomasz Kłoczko + * Copyright (c) 2007 - 2011, Nicolas François + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. The name of the copyright holders or contributors may not be used to + * endorse or promote products derived from this software without + * specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A + * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + * HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + */ + +#include <config.h> + +#ident "$Id: expiry.c 3640 2011-11-19 21:51:52Z nekral-guest $" + +#include <pwd.h> +#include <signal.h> +#include <stdio.h> +#include <sys/types.h> +#include <getopt.h> +#include "defines.h" +#include "prototypes.h" +/*@-exitarg@*/ +#include "exitcodes.h" + +/* Global variables */ +const char *Prog; +static bool cflg = false; + +/* local function prototypes */ +static RETSIGTYPE catch_signals (unused int sig); +static /*@noreturn@*/void usage (int status); +static void process_flags (int argc, char **argv); + +/* + * catch_signals - signal catcher + */ +static RETSIGTYPE catch_signals (unused int sig) +{ + exit (10); +} + +/* + * usage - print syntax message and exit + */ +static /*@noreturn@*/void usage (int status) +{ + FILE *usageout = (E_SUCCESS != status) ? stderr : stdout; + (void) fprintf (usageout, + _("Usage: %s [options]\n" + "\n" + "Options:\n"), + Prog); + (void) fputs (_(" -c, --check check the user's password expiration\n"), usageout); + (void) fputs (_(" -f, --force force password change if the user's password\n" + " is expired\n"), usageout); + (void) fputs (_(" -h, --help display this help message and exit\n"), usageout); + (void) fputs ("\n", usageout); + exit (status); +} + +/* + * process_flags - parse the command line options + * + * It will not return if an error is encountered. + */ +static void process_flags (int argc, char **argv) +{ + bool fflg = false; + int c; + static struct option long_options[] = { + {"check", no_argument, NULL, 'c'}, + {"force", no_argument, NULL, 'f'}, + {"help", no_argument, NULL, 'h'}, + {NULL, 0, NULL, '\0'} + }; + + while ((c = getopt_long (argc, argv, "cfh", + long_options, NULL)) != -1) { + switch (c) { + case 'c': + cflg = true; + break; + case 'f': + fflg = true; + break; + case 'h': + usage (E_SUCCESS); + /*@notreached@*/break; + default: + usage (E_USAGE); + } + } + + if (! (cflg || fflg)) { + usage (E_USAGE); + } + + if (cflg && fflg) { + fprintf (stderr, + _("%s: options %s and %s conflict\n"), + Prog, "-c", "-f"); + usage (E_USAGE); + } + + if (argc != optind) { + fprintf (stderr, + _("%s: unexpected argument: %s\n"), + Prog, argv[optind]); + usage (E_USAGE); + } +} + +/* + * expiry - check and enforce password expiration policy + * + * expiry checks (-c) the current password expiration and forces (-f) + * changes when required. It is callable as a normal user command. + */ +int main (int argc, char **argv) +{ + struct passwd *pwd; + struct spwd *spwd; + + Prog = Basename (argv[0]); + + sanitize_env (); + + /* + * Start by disabling all of the keyboard signals. + */ + (void) signal (SIGHUP, catch_signals); + (void) signal (SIGINT, catch_signals); + (void) signal (SIGQUIT, catch_signals); +#ifdef SIGTSTP + (void) signal (SIGTSTP, catch_signals); +#endif + + /* + * expiry takes one of two arguments. The default action is to give + * the usage message. + */ + (void) setlocale (LC_ALL, ""); + (void) bindtextdomain (PACKAGE, LOCALEDIR); + (void) textdomain (PACKAGE); + + OPENLOG ("expiry"); + + process_flags (argc, argv); + + /* + * Get user entries for /etc/passwd and /etc/shadow + */ + pwd = get_my_pwent (); + if (NULL == pwd) { + fprintf (stderr, _("%s: Cannot determine your user name.\n"), + Prog); + SYSLOG ((LOG_WARN, "Cannot determine the user name of the caller (UID %lu)", + (unsigned long) getuid ())); + exit (10); + } + spwd = getspnam (pwd->pw_name); /* !USE_PAM, No need for xgetspnam */ + + /* + * If checking accounts, use agecheck() function. + */ + if (cflg) { + /* + * Print out number of days until expiration. + */ + agecheck (spwd); + + /* + * Exit with status indicating state of account. + */ + exit (isexpired (pwd, spwd)); + } + + /* + * Otherwise, force a password change with the expire() function. + * It will force the change or give a message indicating what to + * do. + * It won't return unless the account is unexpired. + */ + (void) expire (pwd, spwd); + + return E_SUCCESS; +} + |