1 /*
2 * SPDX-License-Identifier: ISC
3 *
4 * Copyright (c) 2011-2015 Todd C. Miller <Todd.Miller@sudo.ws>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19 /*
20 * This is an open source non-commercial project. Dear PVS-Studio, please check it.
21 * PVS-Studio Static Code Analyzer for C, C++ and C#: http://www.viva64.com
22 */
23
24 #include <config.h>
25
26 #include <stdio.h>
27 #include <stdlib.h>
28 #include <string.h>
29 #include <pwd.h>
30 #include <grp.h>
31 #include <unistd.h>
32
33 #include "sudoers.h"
34 #include "sudo_iolog.h"
35
36 static size_t
fill_seq(char * str,size_t strsize,void * v)37 fill_seq(char *str, size_t strsize, void *v)
38 {
39 #ifdef SUDOERS_NO_SEQ
40 debug_decl(fill_seq, SUDOERS_DEBUG_UTIL);
41 debug_return_size_t(strlcpy(str, "%{seq}", strsize));
42 #else
43 char *logdir = v;
44 static char sessid[7];
45 int len;
46 debug_decl(fill_seq, SUDOERS_DEBUG_UTIL);
47
48 if (sessid[0] == '\0') {
49 if (!iolog_nextid(logdir, sessid))
50 debug_return_size_t((size_t)-1);
51 }
52
53 /* Path is of the form /var/log/sudo-io/00/00/01. */
54 len = snprintf(str, strsize, "%c%c/%c%c/%c%c", sessid[0],
55 sessid[1], sessid[2], sessid[3], sessid[4], sessid[5]);
56 if (len < 0)
57 debug_return_size_t(strsize); /* handle non-standard snprintf() */
58 debug_return_size_t(len);
59 #endif /* SUDOERS_NO_SEQ */
60 }
61
62 static size_t
fill_user(char * str,size_t strsize,void * unused)63 fill_user(char *str, size_t strsize, void *unused)
64 {
65 debug_decl(fill_user, SUDOERS_DEBUG_UTIL);
66 debug_return_size_t(strlcpy(str, user_name, strsize));
67 }
68
69 static size_t
fill_group(char * str,size_t strsize,void * unused)70 fill_group(char *str, size_t strsize, void *unused)
71 {
72 struct group *grp;
73 size_t len;
74 debug_decl(fill_group, SUDOERS_DEBUG_UTIL);
75
76 if ((grp = sudo_getgrgid(user_gid)) != NULL) {
77 len = strlcpy(str, grp->gr_name, strsize);
78 sudo_gr_delref(grp);
79 } else {
80 len = strlen(str);
81 len = snprintf(str + len, strsize - len, "#%u",
82 (unsigned int) user_gid);
83 }
84 debug_return_size_t(len);
85 }
86
87 static size_t
fill_runas_user(char * str,size_t strsize,void * unused)88 fill_runas_user(char *str, size_t strsize, void *unused)
89 {
90 debug_decl(fill_runas_user, SUDOERS_DEBUG_UTIL);
91 debug_return_size_t(strlcpy(str, runas_pw->pw_name, strsize));
92 }
93
94 static size_t
fill_runas_group(char * str,size_t strsize,void * unused)95 fill_runas_group(char *str, size_t strsize, void *unused)
96 {
97 struct group *grp;
98 size_t len;
99 debug_decl(fill_runas_group, SUDOERS_DEBUG_UTIL);
100
101 if (runas_gr != NULL) {
102 len = strlcpy(str, runas_gr->gr_name, strsize);
103 } else {
104 if ((grp = sudo_getgrgid(runas_pw->pw_gid)) != NULL) {
105 len = strlcpy(str, grp->gr_name, strsize);
106 sudo_gr_delref(grp);
107 } else {
108 len = strlen(str);
109 len = snprintf(str + len, strsize - len, "#%u",
110 (unsigned int) runas_pw->pw_gid);
111 }
112 }
113 debug_return_size_t(len);
114 }
115
116 static size_t
fill_hostname(char * str,size_t strsize,void * unused)117 fill_hostname(char *str, size_t strsize, void *unused)
118 {
119 debug_decl(fill_hostname, SUDOERS_DEBUG_UTIL);
120 debug_return_size_t(strlcpy(str, user_shost, strsize));
121 }
122
123 static size_t
fill_command(char * str,size_t strsize,void * unused)124 fill_command(char *str, size_t strsize, void *unused)
125 {
126 debug_decl(fill_command, SUDOERS_DEBUG_UTIL);
127 debug_return_size_t(strlcpy(str, user_base, strsize));
128 }
129
130 /* Note: "seq" must be first in the list. */
131 static const struct iolog_path_escape path_escapes[] = {
132 { "seq", fill_seq },
133 { "user", fill_user },
134 { "group", fill_group },
135 { "runas_user", fill_runas_user },
136 { "runas_group", fill_runas_group },
137 { "hostname", fill_hostname },
138 { "command", fill_command },
139 { NULL, NULL }
140 };
141 const struct iolog_path_escape *sudoers_iolog_path_escapes = path_escapes;
142