path: root/usr/src/lib/libbsm/common/getacinfo.c

/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */

/*
 * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */

/* getacinfo.c  -  get audit control info */

#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include <bsm/audit.h>
#include <bsm/libbsm.h>
#include <synch.h>

#define	DIROP 0
#define	OTHEROP 1

#define	LEN 360		/* maximum audit control entry length */

#define	SUCCESS 0
#define	EOF_WARN 1
#define	REW_WARN 2
#define	EOF_ERR -1
#define	ERROR   -2
#define	FORMAT_ERR -3

static char	*AUDIT_CTRL  = AUDITCONTROLFILE;
static char	*MINLABEL    = "minfree:";
static char	*DIRLABEL    = "dir:";
static char	*DEFFLGLABEL = "flags:";
static char	*NAFLGLABEL  = "naflags:";
static int	LASTOP;
static int	DIRINIT;
static FILE *acf;    /* pointer into audit control file */
static mutex_t mutex_acf = DEFAULTMUTEX;

/*
 * getacinfo.c  -  get audit control info
 *
 *	getacdir() - get audit control directories, one at a time
 *	getacflg() - get audit control default audit flags
 *	getacmin() - get audit control directory min. fill value
 *	getacna() -  get audit control non-attrib audit flags
 *	setac()    -  rewind the audit control file
 *	endac()    -  close the audit control file
 *	testac()   -  check if audit control file open
 */


/*
 * getacdir() - get audit control directories, one at a time
 *
 * input: len  - size of dir buffer
 *
 * output: dir - directory string
 *
 * returns:	0 - entry read ok
 *		-1 - end of file
 *		-2 - error - can't open audit control file for read
 *		-3 - error - directory entry format error
 *		2 - directory search started from beginning again
 *
 * notes: It is the responsibility of the calling function to
 * 		check the status of the directory entry.
 */

int
getacdir(char *dir, int len)
{
	int	retstat = SUCCESS, gotone = 0, dirlen, dirst;
	char	entry[LEN];
	/* void	setac(); */

	/* open file if it is not already opened */
	(void) mutex_lock(&mutex_acf);
	if (acf == NULL && (acf = fopen(AUDIT_CTRL, "rF")) == NULL)
		retstat = ERROR;
	else if (LASTOP != DIROP && DIRINIT == 1) {
		retstat = REW_WARN;
		(void) mutex_unlock(&mutex_acf);
		setac();
	} else {
		DIRINIT = 1;
		LASTOP = DIROP;
	}
	if (retstat >= SUCCESS) do {
		if (fgets(entry, LEN, acf) != NULL) {
			switch (*entry) {

			case '#':

			break;

			case 'd':

			/* return directory entry */
			if (strncmp(entry, DIRLABEL, strlen(DIRLABEL)) == 0) {
				if ((strlen(entry) + 1) > (size_t)len) {
					retstat = FORMAT_ERR;
				} else {
					/*
					 * allow zero or one blank
					 * between colon and directory
					 */
					if (entry[strlen(DIRLABEL)] == ' ') {
						dirst = strlen(DIRLABEL) + 1;
						dirlen = strlen(entry) -
						    (strlen(DIRLABEL) + 2);
					} else {
						dirst = strlen(DIRLABEL);
						dirlen = strlen(entry) -
						    (strlen(DIRLABEL) + 1);
					}
					(void) strcpy(dir, entry + dirst);
					(void) strcpy(dir + dirlen, "\0");
					gotone = 1;
				}
			} else
				retstat = FORMAT_ERR;

			break;

			case 'm':

			break;

			case 'f':

			break;

			default:

			break;

			} /* end of switch */
		} else if ((feof(acf)) == 0) {
			retstat = ERROR;
		} else {
			retstat = EOF_ERR;
		}
	} while (gotone == 0 && retstat >= SUCCESS);

	(void) mutex_unlock(&mutex_acf);
	return (retstat);
}


/*
 * getacmin() - get audit control directory min. fill value
 *
 * output: min_val - percentage of directory fill allowed
 *
 * returns:	0 - entry read ok
 *		1 - end of file
 *		-2 - error; errno contains error number
 *		-3 - error - directory entry format error
 */

int
getacmin(int *min_val)
{
	int	retstat = SUCCESS, gotone = 0;
	char	entry[LEN];

	/* open file if it is not already opened */
	(void) mutex_lock(&mutex_acf);
	if (acf == NULL && (acf = fopen(AUDIT_CTRL, "rF")) == NULL)
		retstat = ERROR;
	else
		rewind(acf);

	if (retstat == SUCCESS) {
		do {
			if (fgets(entry, LEN, acf) != NULL) {
				switch (*entry) {
				case '#':
					break;
				case 'd':
					break;
				case 'm':
					if (strncmp(entry, MINLABEL,
					    strlen(MINLABEL)) == 0) {
						(void) sscanf(entry +
						    strlen(MINLABEL),
						    "%d", min_val);
						gotone = 1;
					} else
						retstat = FORMAT_ERR;
					break;
				case 'f':
					break;
				default:
					break;
				}
			} else if ((feof(acf)) == 0)
				retstat = ERROR;
				else
				retstat = EOF_WARN;

		} while (gotone == 0 && retstat == SUCCESS);
	}

	if (LASTOP == DIROP)
		LASTOP = OTHEROP;
	else {
		if (acf != NULL) {
			(void) fclose(acf);
			acf = NULL;
		}
		LASTOP = DIROP;
		DIRINIT = 0;
	}

	(void) mutex_unlock(&mutex_acf);
	return (retstat);
}


/*
 * getacflg() - get audit control flags
 *
 * output: auditstring - character representation of system audit flags
 *
 * returns:	0 - entry read ok
 *		1 - end of file
 *		-2 - error - errno contains error number
 *		-3 - error - directory entry format error
 */

int
getacflg(char *auditstring, int len)
{
	int	retstat = SUCCESS, gotone = 0, minst, minlen;
	char	entry[LEN];

	/* open file if it is not already opened */
	(void) mutex_lock(&mutex_acf);
	if (acf == NULL && (acf = fopen(AUDIT_CTRL, "rF")) == NULL)
		retstat = ERROR;
	else
		rewind(acf);

	if (retstat == SUCCESS) do {
		if (fgets(entry, LEN, acf) != NULL) {
			switch (*entry) {
			case '#':
				break;
			case 'd':
				break;
			case 'm':
				break;
			case 'f':

			if ((strncmp(entry, DEFFLGLABEL,
			    strlen(DEFFLGLABEL))) == 0) {
				if (entry[strlen(DEFFLGLABEL)] == ' ') {
					minst = strlen(DEFFLGLABEL) + 1;
					minlen = strlen(entry) -
					    (strlen(DEFFLGLABEL) + 2);
				} else {
					minst = strlen(DEFFLGLABEL);
					minlen = strlen(entry) -
					    (strlen(DEFFLGLABEL) + 1);
				}
				if (minlen > len)
					retstat = FORMAT_ERR;
				else {
					(void) strcpy(auditstring,
					    entry + minst);
					(void) strcpy(auditstring + minlen,
					    "\0");
					gotone = 1;
				}
			} else
				retstat = FORMAT_ERR;

			break; /* end of case f */

			default:
				break;
			}
		} else if ((feof(acf)) == 0) {
			retstat = ERROR;
		} else {
			retstat = EOF_WARN;
		}
	} while (gotone == 0 && retstat == SUCCESS);

	if (LASTOP == DIROP)
		LASTOP = OTHEROP;
	else {
		if (acf != NULL) {
			(void) fclose(acf);
			acf = NULL;
		}
		LASTOP = DIROP;
		DIRINIT = 0;
	}

	(void) mutex_unlock(&mutex_acf);
	return (retstat);
}


/*
 * getacna() - get audit flags for non-attributable (server) events
 *
 * output: auditstring - character representation of system audit flags
 *
 * returns:	0 - entry read ok
 *		1 - end of file
 *		-2 - error - errno contains error number
 *		-3 - error - directory entry format error
 */

int
getacna(char *auditstring, int len)
{
	int	retstat = SUCCESS, gotone = 0, minst, minlen;
	char	entry[LEN];

	/* open file if it is not already opened */
	(void) mutex_lock(&mutex_acf);
	if (acf == NULL && (acf = fopen(AUDIT_CTRL, "rF")) == NULL) {
		retstat = ERROR;
	} else {
		rewind(acf);
	}

	if (retstat == SUCCESS) do {
		if (fgets(entry, LEN, acf) != NULL)
			switch (*entry) {
			case '#':
				break;
			case 'd':
				break;
			case 'm':
				break;
			case 'f':
				break;
			case 'n':

			if ((strncmp(entry, NAFLGLABEL,
			    strlen(NAFLGLABEL))) == 0) {
				if (entry[strlen(NAFLGLABEL)] == ' ') {
					minst = strlen(NAFLGLABEL) + 1;
					minlen = strlen(entry) -
					    (strlen(NAFLGLABEL) + 2);
				} else {
					minst = strlen(NAFLGLABEL);
					minlen = strlen(entry) -
					    (strlen(NAFLGLABEL) + 1);
				}
				if (minlen > len)
					retstat = FORMAT_ERR;
				else {
					(void) strcpy(auditstring,
					    entry + minst);
					(void) strcpy(auditstring + minlen,
					    "\0");
					gotone = 1;
				}
			} else
				retstat = FORMAT_ERR;

			break; /* end of case n */

			default:
				break;

		/* end of if-switch */
		} else if ((feof(acf)) == 0) {
			retstat = ERROR;
		} else {
			retstat = EOF_WARN;
		}

	/* end of if-do */
	} while (gotone == 0 && retstat == SUCCESS);

	if (LASTOP == DIROP)
		LASTOP = OTHEROP;
	else {
		if (acf != NULL) {
			(void) fclose(acf);
			acf = NULL;
		}
		LASTOP = DIROP;
		DIRINIT = 0;
	}

	(void) mutex_unlock(&mutex_acf);
	return (retstat);
}


/* rewind the audit control file */
void
setac()
{
	(void) mutex_lock(&mutex_acf);
	if (acf == NULL)
		acf = fopen(AUDIT_CTRL, "rF");
	else
		rewind(acf);
	LASTOP = DIROP;
	DIRINIT = 0;
	(void) mutex_unlock(&mutex_acf);
}


/* close the audit control file */
void
endac()
{
	(void) mutex_lock(&mutex_acf);
	if (acf != NULL) {
		(void) fclose(acf);
		acf = NULL;
	}
	LASTOP = DIROP;
	DIRINIT = 0;
	(void) mutex_unlock(&mutex_acf);
}