1*10b5fe87SSascha Wildner /*-
2*10b5fe87SSascha Wildner  * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
3*10b5fe87SSascha Wildner  * Copyright (c) 2004-2017 Dag-Erling Smørgrav
4*10b5fe87SSascha Wildner  * All rights reserved.
5*10b5fe87SSascha Wildner  *
6*10b5fe87SSascha Wildner  * This software was developed for the FreeBSD Project by ThinkSec AS and
7*10b5fe87SSascha Wildner  * Network Associates Laboratories, the Security Research Division of
8*10b5fe87SSascha Wildner  * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
9*10b5fe87SSascha Wildner  * ("CBOSS"), as part of the DARPA CHATS research program.
10*10b5fe87SSascha Wildner  *
11*10b5fe87SSascha Wildner  * Redistribution and use in source and binary forms, with or without
12*10b5fe87SSascha Wildner  * modification, are permitted provided that the following conditions
13*10b5fe87SSascha Wildner  * are met:
14*10b5fe87SSascha Wildner  * 1. Redistributions of source code must retain the above copyright
15*10b5fe87SSascha Wildner  *    notice, this list of conditions and the following disclaimer.
16*10b5fe87SSascha Wildner  * 2. Redistributions in binary form must reproduce the above copyright
17*10b5fe87SSascha Wildner  *    notice, this list of conditions and the following disclaimer in the
18*10b5fe87SSascha Wildner  *    documentation and/or other materials provided with the distribution.
19*10b5fe87SSascha Wildner  * 3. The name of the author may not be used to endorse or promote
20*10b5fe87SSascha Wildner  *    products derived from this software without specific prior written
21*10b5fe87SSascha Wildner  *    permission.
22*10b5fe87SSascha Wildner  *
23*10b5fe87SSascha Wildner  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
24*10b5fe87SSascha Wildner  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*10b5fe87SSascha Wildner  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*10b5fe87SSascha Wildner  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
27*10b5fe87SSascha Wildner  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*10b5fe87SSascha Wildner  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*10b5fe87SSascha Wildner  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*10b5fe87SSascha Wildner  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*10b5fe87SSascha Wildner  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*10b5fe87SSascha Wildner  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*10b5fe87SSascha Wildner  * SUCH DAMAGE.
34*10b5fe87SSascha Wildner  *
35*10b5fe87SSascha Wildner  * $OpenPAM: pam_setenv.c 938 2017-04-30 21:34:42Z des $
36*10b5fe87SSascha Wildner  */
37*10b5fe87SSascha Wildner 
38*10b5fe87SSascha Wildner #ifdef HAVE_CONFIG_H
39*10b5fe87SSascha Wildner # include "config.h"
40*10b5fe87SSascha Wildner #endif
41*10b5fe87SSascha Wildner 
42*10b5fe87SSascha Wildner #include <errno.h>
43*10b5fe87SSascha Wildner #include <stdlib.h>
44*10b5fe87SSascha Wildner #include <stdio.h>
45*10b5fe87SSascha Wildner #include <string.h>
46*10b5fe87SSascha Wildner 
47*10b5fe87SSascha Wildner #include <security/pam_appl.h>
48*10b5fe87SSascha Wildner 
49*10b5fe87SSascha Wildner #include "openpam_impl.h"
50*10b5fe87SSascha Wildner #include "openpam_asprintf.h"
51*10b5fe87SSascha Wildner 
52*10b5fe87SSascha Wildner /*
53*10b5fe87SSascha Wildner  * OpenPAM extension
54*10b5fe87SSascha Wildner  *
55*10b5fe87SSascha Wildner  * Set the value of an environment variable
56*10b5fe87SSascha Wildner  * Mirrors setenv(3)
57*10b5fe87SSascha Wildner  */
58*10b5fe87SSascha Wildner 
59*10b5fe87SSascha Wildner int
pam_setenv(pam_handle_t * pamh,const char * name,const char * value,int overwrite)60*10b5fe87SSascha Wildner pam_setenv(pam_handle_t *pamh,
61*10b5fe87SSascha Wildner 	const char *name,
62*10b5fe87SSascha Wildner 	const char *value,
63*10b5fe87SSascha Wildner 	int overwrite)
64*10b5fe87SSascha Wildner {
65*10b5fe87SSascha Wildner 	char *env;
66*10b5fe87SSascha Wildner 	int r;
67*10b5fe87SSascha Wildner 
68*10b5fe87SSascha Wildner 	ENTER();
69*10b5fe87SSascha Wildner 
70*10b5fe87SSascha Wildner 	/* sanity checks */
71*10b5fe87SSascha Wildner 	if (*name == '\0' || strchr(name, '=') != NULL) {
72*10b5fe87SSascha Wildner 		errno = EINVAL;
73*10b5fe87SSascha Wildner 		RETURNC(PAM_SYSTEM_ERR);
74*10b5fe87SSascha Wildner 	}
75*10b5fe87SSascha Wildner 
76*10b5fe87SSascha Wildner 	/* is it already there? */
77*10b5fe87SSascha Wildner 	if (!overwrite && openpam_findenv(pamh, name, strlen(name)) >= 0)
78*10b5fe87SSascha Wildner 		RETURNC(PAM_SUCCESS);
79*10b5fe87SSascha Wildner 
80*10b5fe87SSascha Wildner 	/* set it... */
81*10b5fe87SSascha Wildner 	if (asprintf(&env, "%s=%s", name, value) < 0)
82*10b5fe87SSascha Wildner 		RETURNC(PAM_BUF_ERR);
83*10b5fe87SSascha Wildner 	r = pam_putenv(pamh, env);
84*10b5fe87SSascha Wildner 	FREE(env);
85*10b5fe87SSascha Wildner 	RETURNC(r);
86*10b5fe87SSascha Wildner }
87*10b5fe87SSascha Wildner 
88*10b5fe87SSascha Wildner /*
89*10b5fe87SSascha Wildner  * Error codes:
90*10b5fe87SSascha Wildner  *
91*10b5fe87SSascha Wildner  *	=pam_putenv
92*10b5fe87SSascha Wildner  *	PAM_SYSTEM_ERR
93*10b5fe87SSascha Wildner  *	PAM_BUF_ERR
94*10b5fe87SSascha Wildner  */
95*10b5fe87SSascha Wildner 
96*10b5fe87SSascha Wildner /**
97*10b5fe87SSascha Wildner  * The =pam_setenv function sets an environment variable.
98*10b5fe87SSascha Wildner  * Its semantics are similar to those of =setenv, but it modifies the PAM
99*10b5fe87SSascha Wildner  * context's environment list instead of the application's.
100*10b5fe87SSascha Wildner  *
101*10b5fe87SSascha Wildner  * >pam_getenv
102*10b5fe87SSascha Wildner  * >pam_getenvlist
103*10b5fe87SSascha Wildner  * >pam_putenv
104*10b5fe87SSascha Wildner  */
105