diff options
Diffstat (limited to 'usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/restrict.c')
| -rw-r--r-- | usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/restrict.c | 191 |
1 files changed, 191 insertions, 0 deletions
diff --git a/usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/restrict.c b/usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/restrict.c new file mode 100644 index 0000000000..7142ef8e9d --- /dev/null +++ b/usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/restrict.c @@ -0,0 +1,191 @@ +#pragma ident "%Z%%M% %I% %E% SMI" + +/**************************************************************************** + Copyright (c) 1999,2000 WU-FTPD Development Group. + All rights reserved. + + Portions Copyright (c) 1980, 1985, 1988, 1989, 1990, 1991, 1993, 1994 + The Regents of the University of California. + Portions Copyright (c) 1993, 1994 Washington University in Saint Louis. + Portions Copyright (c) 1996, 1998 Berkeley Software Design, Inc. + Portions Copyright (c) 1989 Massachusetts Institute of Technology. + Portions Copyright (c) 1998 Sendmail, Inc. + Portions Copyright (c) 1983, 1995, 1996, 1997 Eric P. Allman. + Portions Copyright (c) 1997 by Stan Barber. + Portions Copyright (c) 1997 by Kent Landfield. + Portions Copyright (c) 1991, 1992, 1993, 1994, 1995, 1996, 1997 + Free Software Foundation, Inc. + + Use and distribution of this software and its source code are governed + by the terms and conditions of the WU-FTPD Software License ("LICENSE"). + + If you did not receive a copy of the license, it may be obtained online + at http://www.wu-ftpd.org/license.html. + + $Id: restrict.c,v 1.14 2000/07/01 18:17:39 wuftpd Exp $ + +****************************************************************************/ +/* + * Contributed by Glenn Nielsen <glenn@more.net> + * Mon, 18 Jan 1999 20:04:07 -0600 + */ +#include "config.h" + +#include <sys/param.h> +#include <stdlib.h> +#include <string.h> +#include <syslog.h> +#include "proto.h" + +#ifdef HAVE_GETCWD +extern char *getcwd(char *, size_t); +#else +extern char *getwd(char *); +#endif + +#ifndef TRUE +#define TRUE 1 +#define FALSE 0 +#endif + +extern char *home; +extern int restricted_user; + +/* + * name is the function parameter + * home is a global string containing the user's home directory + * + * rhome is the resolved home directory + * rname is the resolved requested filename + * curwd is the current working directory + * path is name, possibly prepended by the current working directory + */ + +int restrict_check(char *name) +{ + if (!test_restriction(name)) + return 0; + reply(550, "Permission denied on server. You are restricted to your account."); + return 1; +} + +int test_restriction(char *name) +{ + char rhome[MAXPATHLEN + 1], rname[MAXPATHLEN + 1], path[MAXPATHLEN + 1]; + + /* we're not in restrict mode so all access is OK */ + if (restricted_user == FALSE) + return 0; + + /* get resolved equivalent of user's home directory */ + fb_realpath(home, rhome); + + path[0] = '\0'; + + /* a relative path is specified, so resolve it w.r.t. current working directory */ + if ((name)[0] != '/') { + + char curwd[MAXPATHLEN + 1]; + + /* determine current working directory */ +#ifdef HAVE_GETCWD + if (getcwd(curwd, MAXPATHLEN) == (char *) NULL) { +#else + if (getwd(curwd) == (char *) NULL) { +#endif + return 1; + } /* if */ + + strcpy(path, curwd); + strcat(path, "/"); + + } /* if */ + + if ((strlen(path) + strlen(name) + 2) > sizeof(path)) { + return 1; + } + + strcat(path, name); + fb_realpath(path, rname); + strcat(rname, "/"); + + if (strncmp(rhome, rname, strlen(rhome))) { + return 1; + } /* if */ + + return 0; +} /* restrict_check */ + +int restrict_list_check(char *name) +{ + char *beg, *copy, *end; + int flag; + + beg = name; + + while (*beg != '\0') { + + flag = 0; + end = beg; + while (*end && !isspace(*end)) + ++end; + if (!*end) + flag = 1; + if (!flag) + *end = '\0'; + copy = strdup(beg); + if (!flag) + *end = ' '; + + if (!copy) { + reply(550, "Permission denied on server. Out of memory."); + return 1; + + } /* if */ + + if (restrict_check(copy)) { + free(copy); + return 1; + } + free(copy); + beg = end; + if (!flag) + ++beg; + + } /* while */ + + return 0; + +} /* restrict_list_check */ + +/* + * $Log: restrict.c,v $ + * Revision 1.14 2000/07/01 18:17:39 wuftpd + * + * Updated copyright statement for the WU-FTPD Development Group. + * + * Revision 1.13 1999/10/08 03:42:12 wuftpd + * Fixed a bug in restrict_check which could allow access outside the users home + * + * Revision 1.12 1999/09/05 02:31:50 wuftpd + * Add virtual and defaultserver support for email notification + * + * Revision 1.11 1999/09/02 19:35:48 wuftpd + * CDUP was leaking information about restrictions. + * + * Revision 1.10 1999/09/02 14:04:29 wuftpd + * Cleaning up. Indented and removed some STDC checks + * + * Revision 1.9 1999/08/24 23:41:39 wuftpd + * wu-ftpd-2.4.x RCS Ids removed and new Ids added for wu-ftpd.org usage. + * WU-FTPD Development Group copyright headers added. + * Original Copyright headers moved into the COPYRIGHT file. + * COPYPRIGHT.c added to build for ftpshut and ftpd. + * + * Revision 1.2 1996/02/20 04:54:04 root + * added #define to make gcc use HAVE_GETCWD + * + * Revision 1.1 1996/02/20 03:52:48 root + * Initial revision + * + */ |