f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica/*
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * CDDL HEADER START
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * The contents of this file are subject to the terms of the
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Common Development and Distribution License (the "License").
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * You may not use this file except in compliance with the License.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * or http://www.opensolaris.org/os/licensing.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * See the License for the specific language governing permissions
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * and limitations under the License.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * When distributing Covered Code, include this CDDL HEADER in each
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * If applicable, add the following below this CDDL HEADER, with the
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * fields enclosed by brackets "[]" replaced with your own identifying
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * information: Portions Copyright [yyyy] [name of copyright owner]
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * CDDL HEADER END
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica/*
7b0bedd42192a2f6bcd6fc4b637d23892303a962Ric Aleshire * Copyright 2010 Sun Microsystems, Inc. All rights reserved.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Use is subject to license terms.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica/*
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * updatehome - Update the current label's $HOME copy and link files.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Update home reads the user's minimum label copy and link
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * control files (.copy_files and .link_files) which contain a list
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * of files to be copied and symbolically linked from the user's minimum
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * label $HOME to the user's current label's $HOME.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * This is done by the Trusted Solaris dtsession whenever a
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * newly labeled workspace is created so that the user's favorite
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * files are available for use. For example the user probably
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * wants a symlink to .profile, .login, .cshrc, .exrc, .mailrc, ~/bin,
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * ... . updatehome provides a convient mechanism for accomplishing
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * this. The user may add any set of files either to be copied
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * (.copy_files), or symbolically linked (.link_files).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Files should not include embedded MLDs.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Entry options = c, if replace existing current label $HOME copies
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * (default is to ignore existing).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * d, if to print debug trace msgs (internal use only).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * i, if to ignore errors encountered (default is to
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * abort).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * m, if to suppress error diagnostics -- perror
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * (internal use only).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * r, if replace existing current label $HOME copies or
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * symbolic links -- implies c and s (default is to
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * ignore existing).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * s, if replace existing current label $HOME symbolic
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * links (default is to ignore existing).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Exit stderr = diagnostic messages.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * exis status = 0, no errors noted.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * 1, if errors noted.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * Calls __setupfiles (which does all the real work).
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica/*
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * There is a private contract between __setupfiles in this
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * directory and login. Changes made to __setupfiles may need to be
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * reflected in the source for login.
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica *
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica * G.Winiger 96/11/03
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <locale.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <pwd.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <stdio.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <stdlib.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <unistd.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <sys/types.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <tsol/label.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <sys/tsol/label_macro.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include <user_attr.h>
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#include "setupfiles.h"
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#if !defined(TEXT_DOMAIN)
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#define TEXT_DOMAIN "SYS_TEST"
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica#endif /* !defined(TEXT_DOMAIN) */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01ricaint
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01ricamain(int argc, char **argv)
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica{
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica int opt; /* option switch value */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica int flags; /* setupfiles flags */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica uid_t uid;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica extern int opterr; /* getopt error flag */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica char *kv_str = NULL;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica struct passwd *pwd; /* current user's password file entry */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica userattr_t *userp = NULL; /* current user's user_attr entry */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica m_label_t *min_sl;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica m_label_t *clearance;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) setlocale(LC_ALL, "");
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) textdomain(TEXT_DOMAIN);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags = DIAG;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica opterr = 0; /* handle errors here */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica while ((opt = getopt(argc, argv, "cdimrs")) != EOF) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica switch (opt) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case 'c': /* replace existing copy */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags |= REPC;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica break;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case 'd': /* debug */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags |= DBUG;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica break;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case 'i': /* ignore copy/link errors */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags |= IGNE;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica break;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case 'm': /* suppress error diagnostic (perror) */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica /* prints */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags &= ~DIAG;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica break;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case 'r': /* replace existing */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags |= (REPC | REPL);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica break;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case 's': /* replace existing symbolic links */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica flags |= REPL;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica break;
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica case '?': /* switch error */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) fprintf(stderr, gettext("Bad option -%c.\n"),
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (char)optopt);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica default:
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) fprintf(stderr, gettext("usage: %s [-cirs].\n"),
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica argv[0]);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica exit(1);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica /*NOTREACHED*/
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica } /* switch (opt) */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica } /* while ((opt = getopt()) */
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica uid = getuid();
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica if ((pwd = getpwuid(uid)) == (struct passwd *)0) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) fprintf(stderr,
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica gettext("Unable to get password entry for uid %d.\n"), uid);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica exit(1);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica }
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica min_sl = m_label_alloc(MAC_LABEL);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica clearance = m_label_alloc(USER_CLEAR);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica if (((userp = getusernam(pwd->pw_name)) == NULL) ||
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica ((kv_str = kva_match(userp->attr, USERATTR_MINLABEL)) == NULL)) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica if (userdefs(min_sl, clearance) == -1) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) fprintf(stderr,
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica gettext("Unable to get default user labels.\n"));
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica exit(1);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica }
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica }
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica if (kv_str != NULL) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica if (str_to_label(kv_str, &min_sl, MAC_LABEL, L_NO_CORRECTION,
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica NULL) == -1) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) fprintf(stderr,
7b0bedd42192a2f6bcd6fc4b637d23892303a962Ric Aleshire gettext("str_to_label failure on min_label for"
7b0bedd42192a2f6bcd6fc4b637d23892303a962Ric Aleshire " user %s.\n"), pwd->pw_name);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica exit(1);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica }
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica }
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica if (__setupfiles(pwd, min_sl, flags) != 0) {
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica (void) fprintf(stderr, gettext("%s failed.\n"), argv[0]);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica exit(1);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica }
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica return (0);
f875b4ebb1dd9fdbeb043557cab38ab3bf7f6e01rica} /* update home */