diff options
Diffstat (limited to 'lib/libc/posix1e')
| -rw-r--r-- | lib/libc/posix1e/Makefile | 38 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl.3 | 180 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_delete.3 | 124 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_delete.c | 57 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_dup.3 | 105 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_free.3 | 89 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_free.c | 43 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_from_text.3 | 125 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_from_text.c | 246 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_get.3 | 138 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_get.c | 97 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_init.3 | 104 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_init.c | 67 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_set.3 | 131 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_set.c | 88 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_support.c | 409 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_support.h | 46 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_to_text.3 | 130 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_to_text.c | 233 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_valid.3 | 144 | ||||
| -rw-r--r-- | lib/libc/posix1e/acl_valid.c | 97 | ||||
| -rw-r--r-- | lib/libc/posix1e/posix1e.3 | 101 |
22 files changed, 0 insertions, 2792 deletions
diff --git a/lib/libc/posix1e/Makefile b/lib/libc/posix1e/Makefile deleted file mode 100644 index 43a8a35..0000000 --- a/lib/libc/posix1e/Makefile +++ /dev/null @@ -1,38 +0,0 @@ -# $FreeBSD$ - -LIB= posix1e -SRCS+= acl_delete.c \ - acl_free.c \ - acl_from_text.c \ - acl_get.c \ - acl_init.c \ - acl_set.c \ - acl_support.c \ - acl_to_text.c \ - acl_valid.c - -MAN3= acl.3 \ - acl_delete.3 \ - acl_dup.3 \ - acl_free.3 \ - acl_from_text.3 \ - acl_get.3 \ - acl_init.3 \ - acl_set.3 \ - acl_to_text.3 \ - acl_valid.3 \ - posix1e.3 - -MLINKS+=acl_delete.3 acl_delete_def_file.3 \ - acl_delete.3 acl_delete_file_np.3 \ - acl_delete.3 acl_delete_fd_np.3 \ - acl_get.3 acl_get_file.3 \ - acl_get.3 acl_get_fd.3 \ - acl_get.3 acl_get_fd_np.3 \ - acl_set.3 acl_set_file.3 \ - acl_set.3 acl_set_fd.3 \ - acl_set.3 acl_set_fd_np.3 \ - acl_valid.3 acl_valid_file_np.3 \ - acl_valid.3 acl_valid_fd_np.3 - -.include <bsd.lib.mk> diff --git a/lib/libc/posix1e/acl.3 b/lib/libc/posix1e/acl.3 deleted file mode 100644 index 20208fa..0000000 --- a/lib/libc/posix1e/acl.3 +++ /dev/null @@ -1,180 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl -.Nd introduction to the POSIX.1e ACL security API -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Sh DESCRIPTION -As shipped, -.Fx 4.0 -permits file systems to export -Access Control Lists via the VFS, and provides a library for userland -access to and manipulation of these ACLs, but support for ACLs is not -provided by any file systems shipped in the base operating system. -The library calls shipped with 4.0 include routines to allocate, -duplicate, retrieve, set, and validate ACLs associated with file objects. -As well as the POSIX.1e routines, there are a number of non-portable -extensions defined that allow for alternative ACL semantics than the -POSIX.1e semantics, such as AFS, NTFS, Coda, and NWFS semantics. Where -routines are non-standard, they are suffixed with _np to indicate that -they are not portable. - -POSIX.1e describes a set of ACL manipulation routines to manage the -contents of ACLs, as well as their relationships with files. This -manipulation library is not currently implemented in FreeBSD, although -a third party library was under development at the time this document -was written. There is a general consensus that the POSIX.1e manipulation -routines are ambiguously defined in the specification, and don't meet the -needs of most applications. For the time being, applications may -directly manipulate the ACL structures, defined in acl.h, although the -recommended usage is to only ever handle text-form ACLs in applications, -generated and maintained using -.Fn acl_from_text -and -.Fn acl_to_text , -passed directly to and from the management routines. In this manner, -an application can remain safely unaware of the contents of ACLs. - -Available functions, sorted by behavior, include: - -.Fn acl_delete_def_file , -.Fn acl_delete_file_np , -.Fn acl_delete_fd_np - -These functions are described in -.Xr acl_delete 3 , -and may be used to delete ACLs from file system objects. - -.Fn acl_free - -This function is described in -.Xr acl_free 3 , -and may be used to free userland working ACL storage. - -.Fn acl_from_text - -This function is described in -.Xr acl_from_text 3 , -and may be used to convert a text-form ACL into working ACL state, if -the ACL has POSIX.1e semantics. - -.Fn acl_get_file , -.Fn acl_get_fd , -.Fn acl_get_fd_np - -These functions are described in -.Xr acl_get 3 , -and may be used to retrieve ACLs from file system objects. - -.Fn acl_init - -This function is described in -.Xr acl_init 3 , -and may be used to allocate a fresh (empty) ACL structure. - -.Fn acl_dup - -This function is described in -.Xr acl_dup 3 , -and may be used to duplicate an ACL structure. - -.Fn acl_set_file , -.Fn acl_set_fd , -.Fn acl_set_fd_np - -These functions are described in -.Xr acl_set 3 , -and may be used to assign an ACL to a file system object. - -.Fn acl_to_text - -This function is described in -.Xr acl_to_text 3 , -and may be used to generate a text-form of a POSIX.1e semantics ACL. - -.Fn acl_valid , -.Fn acl_valid_file_np , -.Fn acl_valid_fd_np - -Thee functions are described in -.Xr acl_valid 3 , -and may be used to validate an ACL as correct POSIX.1e-semantics, or -as appropriate for a particular file system object regardless of semantics. - -Documentation of the internal kernel interfaces backing these calls may -be found in -.Xr acl 9 . -The syscalls between the internal interfaces and the public library -routines may change over time, and as such are not documented. They are -not intended to be called directly without going through the library. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh ENVIRONMENT -POSIX.1e assigns security labels to all objects, extending the security -functionality described in POSIX.1. These additional labels provide -fine-grained discretionary access control, fine-grained capabilities, -and labels necessary for mandatory access control. POSIX.2c describes -a set of userland utilities for manipulating these labels. These userland -utilities are not bundled with -.Fx 4.0 -so as to discourage their -use in the short term. -.\" .Sh FILES -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_dup 3 , -.Xr acl_free 3 , -.Xr acl_from_text 3 , -.Xr acl_get 3 , -.Xr acl_set 3 , -.Xr acl_to_text 3 , -.Xr acl_valid 3 , -.Xr acl 9 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_delete.3 b/lib/libc/posix1e/acl_delete.3 deleted file mode 100644 index ef559d5..0000000 --- a/lib/libc/posix1e/acl_delete.3 +++ /dev/null @@ -1,124 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_DELETE 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_delete_def_file , -.Nm acl_delete_file_np , -.Nm acl_delete_fd_np -.Nd Delete an ACL from a file -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft int -.Fn acl_delete_def_file "const char *path_p" -.Ft int -.Fn acl_delete_file_np "const char *path_p" "acl_type_t type" -.Ft int -.Fn acl_delete_fd_np "int filedes" "acl_type_t type" -.Sh DESCRIPTION -The -.Fn acl_delete_def_file , -.Fn acl_delete_file_np , -and -.Fn acl_delete_fd_np -each allow the deletion of an ACL from a file. -.Fn acl_delete_def_file -is a POSIX.1e call that deletes the default ACL from a file (normally a -directory) by name; the other two calls are non-portable extensions that -allow deleting of arbitrary ACL types from a file/directory by either path -name, or by file descriptor. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -In the event of success, 0 is returned. In the event of failure, -1 is -returned, and -.Va errno -is set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, these functions shall return -1 -and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EACCES -Search permission is denied for a component of the path prefix, or the -object exists and the process does not have appropriate access rights. -.It Bq Er EBADF -The -.Va fd -argument is not a valid file descriptor. -.It Bq Er EINVAL -The ACL type passed is invalid for this file object. -.It Bq Er ENAMETOOLONG -A component of a pathname exceeded 255 characters, or an -entire path name exceeded 1023 characters. -.It Bq Er ENOENT -The named object does not exist, or the -.Va path_p -argument points to an empty string. -.It Bq Er ENOMEM -Insufficient memory available to fulfill request. -.It Bq Er ENOTDIR -A component of the path prefix is not a directory. - -Argument -.Va path_p -must be a directory, and is not. -.It Bq Er EOPNOTSUPP -The file system does not support ACL deletion. -.It Bq Er EPERM -The process does not have appropriate privilege to perform the operation -to delete an ACL. -.It Bq Er EROFS -The file system is read-only. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_get 3 , -.Xr acl_set 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_delete.c b/lib/libc/posix1e/acl_delete.c deleted file mode 100644 index 8998400..0000000 --- a/lib/libc/posix1e/acl_delete.c +++ /dev/null @@ -1,57 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_delete_def_file -- remove a default acl from a file - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <sys/errno.h> - -int -acl_delete_def_file(const char *path_p) -{ - - return (__acl_delete_file(path_p, ACL_TYPE_DEFAULT)); -} - - -int -acl_delete_file_np(const char *path_p, acl_type_t type) -{ - - return (__acl_delete_file(path_p, type)); -} - - -int -acl_delete_fd_np(int filedes, acl_type_t type) -{ - - return (__acl_delete_fd(filedes, type)); -} diff --git a/lib/libc/posix1e/acl_dup.3 b/lib/libc/posix1e/acl_dup.3 deleted file mode 100644 index aaceb54..0000000 --- a/lib/libc/posix1e/acl_dup.3 +++ /dev/null @@ -1,105 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_DUP 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_dup -.Nd Duplicate an ACL -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft acl_t -.Fn acl_dup "acl_t acl" -.Sh DESCRIPTION -The -.Fn acl_dup -function returns a pointer to a copy of the ACL pointed to by the argument -.Va acl . - -This function may cause memory to be allocated. The caller should free any -releasable memory, when the new ACL is no longer required, by calling -.Xr acl_free 3 -with the -.Va (void*)acl_t -as an argument. - -Any existing ACL pointers that refer to the ACL referred to by -.Va acl -shall continue to refer to the ACL. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, this function shall return a pointer to the -duplicate ACL. Otherwise, a value of -.Va (acl_t)NULL -shall be returned, and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, the -.Fn acl_init -function shall return a value of -.Va (acl_t)NULL -and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EINVAL -Argument -.Va acl -does not point to a valid ACL. -.It Bq Er ENOMEM -The -.Va acl_t -to be returned requires more memory than is allowed by the hardware or -system-imposed memory management constraints. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_free 3 , -.Xr acl_get 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_free.3 b/lib/libc/posix1e/acl_free.3 deleted file mode 100644 index e02569b..0000000 --- a/lib/libc/posix1e/acl_free.3 +++ /dev/null @@ -1,89 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_FREE 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_free -.Nd Free ACL working state -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft int -.Fn acl_free "void *obj_p" -.Sh DESCRIPTION -The -.Fn acl_free -call allows the freeing of ACL working space, such as is allocated by -.Xr acl_dup 3 , -or -.Xr acl_from_text 3 . -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -In the event of success, 0 is returned. In the event of failure, -1 is -returned, and -.Va errno -is set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, the -.Fn acl_free -function shall return -1 and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EINVAL -The value of the -.Va obj_p -argument is invalid. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_dup 3 , -.Xr acl_from_text 3 , -.Xr acl_get 3 , -.Xr acl_init 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_free.c b/lib/libc/posix1e/acl_free.c deleted file mode 100644 index 74b7238..0000000 --- a/lib/libc/posix1e/acl_free.c +++ /dev/null @@ -1,43 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_free -- free ACL objects from user memory - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <sys/errno.h> -#include <stdlib.h> - -int -acl_free(void *obj_p) -{ - - free(obj_p); - return (0); -} diff --git a/lib/libc/posix1e/acl_from_text.3 b/lib/libc/posix1e/acl_from_text.3 deleted file mode 100644 index 7763761..0000000 --- a/lib/libc/posix1e/acl_from_text.3 +++ /dev/null @@ -1,125 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_FROM_TEXT 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_from_text -.Nd Create an ACL from text -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft acl_t -.Fn acl_from_text "const char *buf_p" -.Sh DESCRIPTION -The -.Fn acl_from_text -function converts the text form of an ACL referred to by -.Va buf_p -into the internal working structure for ACLs, appropriate for applying to -files or manipulating. - -This function may cause memory to be allocated. The caller should free any -releasable memory, when the new ACL is no longer required, by calling -.Xr acl_free 3 -with the -.Va (void *)acl_t -as an argument. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, the function shall return a pointer to the -internal representation of the ACL in working storage. Otherwise, a value -of -.Va (acl_t)NULL -shall be returned, and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, the -.Fn acl_from_text -function shall return a value of -.Va (acl_t)NULL -and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EACCES -Search permission is denied for a component of the path prefix, or the -object exists and the process does not have appropriate access rights. -.It Bq Er EINVAL -Argument -.Va buf_p -cannot be translated into an ACL. -.It Bq Er ENOMEM -The ACL working storage requires more memory than is allowed by the -hardware or system-imposed memory management constraints. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_free 3 , -.Xr acl_get 3 , -.Xr acl_to_text 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. - -.Fn acl_from_text -and -.Fn acl_to_text -rely on the -.Xr getpwent 3 -library calls to manage username and uid mapping, as well as the -.Xr getgrent 3 -library calls to manage groupname and gid mapping. These calls are not -thread safe, and so transitively, neither are -.Fn acl_from_text -and -.Fn acl_to_text . -These functions may also interfere with stateful -calls associated with the -.Fn getpwent -and -.Fn getgrent -calls. diff --git a/lib/libc/posix1e/acl_from_text.c b/lib/libc/posix1e/acl_from_text.c deleted file mode 100644 index a71bbca..0000000 --- a/lib/libc/posix1e/acl_from_text.c +++ /dev/null @@ -1,246 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_from_text: convert a text-form ACL from a string to an acl_t - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <sys/errno.h> -#include <stdio.h> -#include <stdlib.h> -#include <string.h> - -#include "acl_support.h" - -enum PARSE_MODE { - PM_BASE, /* initial, begin line, or after , */ - PM_QUALIFIER, /* in qualifier field */ - PM_PERM, /* in permission field */ - PM_COMMENT, /* in comment */ -}; - -static char * -string_skip_whitespace(char *string) -{ - - while (*string && ((*string == ' ') || (*string == '\t'))) { - string++; - } - return (string); -} - -static void -string_trim_trailing_whitespace(char *string) -{ - char *end; - - if (*string == '\0') - return; - - end = string + strlen(string) - 1; - - while (end != string) { - if ((*end == ' ') || (*end == '\t')) { - *end = '\0'; - end--; - } else { - return; - } - } - - return; -} - -acl_tag_t -acl_string_to_tag(char *tag, char *qualifier) -{ - - if (*qualifier == '\0') { - if ((!strcmp(tag, "user")) || (!strcmp(tag, "u"))) { - return (ACL_USER_OBJ); - } else - if ((!strcmp(tag, "group")) || (!strcmp(tag, "g"))) { - return (ACL_GROUP_OBJ); - } else - if ((!strcmp(tag, "mask")) || (!strcmp(tag, "m"))) { - return (ACL_MASK); - } else - if ((!strcmp(tag, "other")) || (!strcmp(tag, "o"))) { - return (ACL_OTHER); - } else - return(-1); - } else { - if ((!strcmp(tag, "user")) || (!strcmp(tag, "u"))) { - return(ACL_USER); - } else - if ((!strcmp(tag, "group")) || (!strcmp(tag, "g"))) { - return(ACL_GROUP); - } else - return(-1); - } -} - -/* - * acl_from_text -- convert a string into an ACL - * postpone most validity checking until the end and cal acl_valid to do - * that. - */ -acl_t -acl_from_text(const char *buf_p) -{ - acl_tag_t t; - acl_perm_t p; - acl_t acl; - uid_t id; - char *mybuf_p, *line, *cur, *notcomment, *comment, *entry; - char *tag, *qualifier, *permission; - int error; - - /* local copy we can mess up */ - mybuf_p = strdup(buf_p); - if (!mybuf_p) { - errno = ENOMEM; - return(0); - } - - acl = acl_init(3); - if (!acl) { - free(mybuf_p); - errno = ENOMEM; - return(0); - } - - /* outer loop: delimit at \n boundaries */ - cur = mybuf_p; - while ((line = strsep(&cur, "\n"))) { - /* now split the line on the first # to strip out comments */ - comment = line; - notcomment = strsep(&comment, "#"); - - /* inner loop: delimit at , boundaries */ - while ((entry = strsep(¬comment, ","))) { - /* now split into three :-delimited fields */ - tag = strsep(&entry, ":"); - if (!tag) { - /* printf("no tag\n"); */ - errno = EINVAL; - goto error_label; - } - tag = string_skip_whitespace(tag); - if ((*tag == '\0') && (!entry)) { - /* - * is an entirely comment line, skip to next - * comma - */ - continue; - } - string_trim_trailing_whitespace(tag); - - qualifier = strsep(&entry, ":"); - if (!qualifier) { - /* printf("no qualifier\n"); */ - errno = EINVAL; - goto error_label; - } - qualifier = string_skip_whitespace(qualifier); - string_trim_trailing_whitespace(qualifier); - - permission = strsep(&entry, ":"); - if ((!permission) || (entry)) { - /* printf("no permission, or more stuff\n"); */ - errno = EINVAL; - goto error_label; - } - permission = string_skip_whitespace(permission); - string_trim_trailing_whitespace(permission); - - /* printf("[%s/%s/%s]\n", tag, qualifier, - permission); */ - - t = acl_string_to_tag(tag, qualifier); - if (t == -1) { - errno = EINVAL; - goto error_label; - } - - error = acl_string_to_perm(permission, &p); - if (error == -1) { - errno = EINVAL; - goto error_label; - } - - switch(t) { - case ACL_USER_OBJ: - case ACL_GROUP_OBJ: - case ACL_MASK: - case ACL_OTHER: - if (*qualifier != '\0') { - errno = EINVAL; - goto error_label; - } - id = 0; - break; - - case ACL_USER: - case ACL_GROUP: - error = acl_name_to_id(t, qualifier, &id); - if (error == -1) - goto error_label; - break; - - default: - errno = EINVAL; - goto error_label; - } - - error = acl_add_entry(acl, t, id, p); - if (error == -1) - goto error_label; - } - } - -#if 0 - /* XXX should we only return ACLs valid according to acl_valid? */ - /* verify validity of the ACL we read in */ - if (acl_valid(acl) == -1) { - errno = EINVAL; - goto error_label; - } -#endif - - return(acl); - -error_label: - acl_free(acl); - free(mybuf_p); - return(0); -} - - - diff --git a/lib/libc/posix1e/acl_get.3 b/lib/libc/posix1e/acl_get.3 deleted file mode 100644 index 7781e40..0000000 --- a/lib/libc/posix1e/acl_get.3 +++ /dev/null @@ -1,138 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_GET 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_get_file , -.Nm acl_get_fd , -.Nm acl_get_fd_np -.Nd Get an ACL for a file -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft acl_t -.Fn acl_get_file "const char *path_p" "acl_type_t type" -.Ft acl_t -.Fn acl_get_fd "int fd" -.Ft acl_t -.Fn acl_get_fd_np "int fd" "acl_type_t type" -.Sh DESCRIPTION -The -.Fn acl_get_file , -.Fn acl_get_fd , -and -.Fn acl_get_fd_np -each allow the retrieval of an ACL from a file. -.Fn acl_get_file -is a POSIX.1e call that allows the retrieval of a -specified type of ACL from a file by name; -.Fn acl_get_fd -is a POSIX.1e call that allows the retrieval of an ACL of type -ACL_TYPE_ACCESS -from a file descriptor. -.Fn acl_get_fd_np -is a non-portable form of -.Fn acl_get_fd -that allows the retrieval of any type of ACL from a file descriptor. - -This function may cause memory to be allocated. The caller should free -any releasable memory, when the new ACL is no longer required, by calling -.Xr acl_free 3 -with the -.Va (void *)acl_t -as an argument. - -The ACL in the working storage is an independent copy of the ACL associated -with the object referred to by -.Va fd . -The ACL in the working storage shall not participate in any access control -decisions. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, the function shall return a pointer to the ACL -that was retrieved. Otherwise, a value of -.Va (acl_t)NULL -shall be returned, and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, the -.Fn acl_get_fd -function shall return a value of -.Va (acl_t)NULL -and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EACCES -Search permission is denied for a component of the path prefix, or the -object exists and the process does not have appropriate access rights. -.It Bq Er EBADF -The -.Va fd -argument is not a valid file descriptor. -.It Bq Er EINVAL -The ACL type passed is invalid for this file object. -.It Bq Er ENAMETOOLONG -A component of a pathname exceeded 255 characters, or an -entire path name exceeded 1023 characters. -.It Bq Er ENOENT -The named object does not exist, or the -.Va path_p -argument points to an empty string. -.It Bq Er ENOMEM -Insufficient memory available to fulfill request. -.It Bq Er EOPNOTSUPP -The file system does not support ACL retrieval. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_free 3 , -.Xr acl_get 3 , -.Xr acl_set 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_get.c b/lib/libc/posix1e/acl_get.c deleted file mode 100644 index 494eed7..0000000 --- a/lib/libc/posix1e/acl_get.c +++ /dev/null @@ -1,97 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_get_file - syscall wrapper for retrieving ACL by filename - * acl_get_fd - syscall wrapper for retrieving access ACL by fd - * acl_get_fd_np - syscall wrapper for retrieving ACL by fd (non-POSIX) - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <sys/errno.h> -#include <stdlib.h> - -acl_t -acl_get_file(const char *path_p, acl_type_t type) -{ - struct acl *aclp; - int error; - - aclp = acl_init(ACL_MAX_ENTRIES); - if (!aclp) { - return (0); - } - - error = __acl_get_file(path_p, type, aclp); - if (error) { - acl_free(aclp); - return (0); - } - - return (aclp); -} - -acl_t -acl_get_fd(int fd) -{ - struct acl *aclp; - int error; - - aclp = acl_init(ACL_MAX_ENTRIES); - if (!aclp) { - return (0); - } - - error = __acl_get_fd(fd, ACL_TYPE_ACCESS, aclp); - if (error) { - acl_free(aclp); - return (0); - } - - return (aclp); -} - -acl_t -acl_get_fd_np(int fd, acl_type_t type) -{ - struct acl *aclp; - int error; - - aclp = acl_init(ACL_MAX_ENTRIES); - if (!aclp) { - return (0); - } - - error = __acl_get_fd(fd, type, aclp); - if (error) { - acl_free(aclp); - return (0); - } - - return (aclp); -} diff --git a/lib/libc/posix1e/acl_init.3 b/lib/libc/posix1e/acl_init.3 deleted file mode 100644 index 51b7c2a..0000000 --- a/lib/libc/posix1e/acl_init.3 +++ /dev/null @@ -1,104 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_INIT 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_init -.Nd Initialize ACL working storage -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft acl_t -.Fn acl_init "int count" -.Sh DESCRIPTION -The -.Fn acl_init -function allocates and initializes the working storage for an ACL of at -least -.Va count -ACL entries. A pointer to the working storage is returned. The working -storage allocated to contain the ACL is freed by a call to -.Xr acl_free 3 . -When the area is first allocated, it shall contain an an ACL that contains -no ACL entries. - -This function may cause memory to be allocated. The caller should free any -releasable memory, when the new ACL is no longer required, by calling -.Xr acl_free 3 -with the -.Va (void*)acl_t -as an argument. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, this function shall return a pointer to the -working storage. Otherwise, a value of -.Va (acl_t)NULL -shall be returned, and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, the -.Fn acl_init -function shall return a value of -.Va (acl_t)NULL -and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EINVAL -The value of count is less than zero. -.It Bq Er ENOMEM -The -.Va acl_t -to be returned requires more memory than is allowed by the hardware or -system-imposed memory management constraints. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_free 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_init.c b/lib/libc/posix1e/acl_init.c deleted file mode 100644 index c2fa43b..0000000 --- a/lib/libc/posix1e/acl_init.c +++ /dev/null @@ -1,67 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_init -- return a fresh acl structure - * acl_dup -- duplicate an acl and return the new copy - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <errno.h> -#include <stdlib.h> -#include <string.h> - -acl_t -acl_init(int count) -{ - struct acl *acl; - - if (count > ACL_MAX_ENTRIES) { - errno = ENOMEM; - return (0); - } - - acl = (struct acl *) malloc(sizeof(struct acl)); - bzero(acl, sizeof(struct acl)); - - return (acl); -} - -acl_t -acl_dup(acl_t acl) -{ - struct acl *acl_new; - - acl_new = acl_init(ACL_MAX_ENTRIES); - if (!acl_new) - return(NULL); - - *acl_new = *acl; - - return(acl_new); -} diff --git a/lib/libc/posix1e/acl_set.3 b/lib/libc/posix1e/acl_set.3 deleted file mode 100644 index 916292c..0000000 --- a/lib/libc/posix1e/acl_set.3 +++ /dev/null @@ -1,131 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_SET 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_set_file , -.Nm acl_set_fd , -.Nm acl_set_fd_np -.Nd Get an ACL for a file -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft int -.Fn acl_set_file "const char *path_p" "acl_type_t type" "acl_t acl" -.Ft int -.Fn acl_set_fd "int fd" "acl_t acl" -.Ft int -.Fn acl_set_fd_np "int fd" "acl_t acl" "acl_type_t type" -.Sh DESCRIPTION -The -.Fn acl_set_file , -.Fn acl_set_fd , -and -.Fn acl_set_fd_np -each associate an ACL with an object referred to by -.Va fd -or -.Va path_p . -All except -.Fn acl_set_fd_np -are POSIX.1e calls-- -.Fn acl_set_fd -allows only the setting of ACLs of type ACL_TYPE_ACCESS -where as -.Fn acl_set_fd_np -allows the setting of ACLs of any type. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, the function shall return a value of zero. -Otherwise, a value of -1 shall be returned and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, these functions shall return --1 and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EACCES -Search permission is denied for a component of the path prefix, or the -object exists and the process does not have appropriate access rights. -.It Bq Er EBADF -The -.Va fd -argument is not a valid file descriptor. -.It Bq Er EINVAL -Argument -.Va acl -does not point to a valid ACL for this object, or the ACL type -specified in -.Va type -is invalid for this object, or both. -.It Bq Er ENAMETOOLONG -A component of a pathname exceeded 255 characters, or an -entire path name exceeded 1023 characters. -.It Bq Er ENOENT -The named object does not exist, or the -.Va path_p -argument points to an empty string. -.It Bq Er ENOMEM -Insufficient memory available to fulfill request. -.It Bq Er ENOSPC -The directory or file system that would contain the new ACL cannot be -extended, or the file system is out of file allocation resources. -.It Bq Er EOPNOTSUPP -The file system does not support ACL retrieval. -.It Bq Er EROFS -This function requires modification of a file system which is currently -read-only. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_delete 3 , -.Xr acl_get 3 , -.Xr acl_valid 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_set.c b/lib/libc/posix1e/acl_set.c deleted file mode 100644 index 070e2b1..0000000 --- a/lib/libc/posix1e/acl_set.c +++ /dev/null @@ -1,88 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_set_file -- set a file/directory ACL by name - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <errno.h> - -#include "acl_support.h" - -/* - * For POSIX.1e-semantic ACLs, do a presort so the kernel doesn't have to - * (the POSIX.1e semantic code will reject unsorted ACL submission). If it's - * not a semantic that the library knows about, just submit it flat and - * assume the caller knows what they're up to. - */ -int -acl_set_file(const char *path_p, acl_type_t type, acl_t acl) -{ - int error; - - if (acl_posix1e(acl, type)) { - error = acl_sort(acl); - if (error) { - errno = error; - return (-1); - } - } - - return (__acl_set_file(path_p, type, acl)); -} - -int -acl_set_fd(int fd, acl_t acl) -{ - int error; - - error = acl_sort(acl); - if (error) { - errno = error; - return(-1); - } - - return (__acl_set_fd(fd, ACL_TYPE_ACCESS, acl)); -} - -int -acl_set_fd_np(int fd, acl_t acl, acl_type_t type) -{ - int error; - - if (acl_posix1e(acl, type)) { - error = acl_sort(acl); - if (error) { - errno = error; - return (-1); - } - } - - return (__acl_set_fd(fd, type, acl)); -} diff --git a/lib/libc/posix1e/acl_support.c b/lib/libc/posix1e/acl_support.c deleted file mode 100644 index a136407..0000000 --- a/lib/libc/posix1e/acl_support.c +++ /dev/null @@ -1,409 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * Support functionality for the POSIX.1e ACL interface - * These calls are intended only to be called within the library. - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <errno.h> -#include <grp.h> -#include <pwd.h> -#include <stdio.h> -#include <stdlib.h> - -#include "acl_support.h" - -#define ACL_STRING_PERM_WRITE 'w' -#define ACL_STRING_PERM_READ 'r' -#define ACL_STRING_PERM_EXEC 'x' -#define ACL_STRING_PERM_NONE '-' - -/* - * acl_entry_compare -- compare two acl_entry structures to determine the - * order they should appear in. Used by acl_sort to sort ACL entries into - * the kernel-desired order -- i.e., the order useful for evaluation and - * O(n) validity checking. Beter to have an O(nlogn) sort in userland and - * an O(n) in kernel than to have both in kernel. - */ -typedef int (*compare)(const void *, const void *); -static int -acl_entry_compare(struct acl_entry *a, struct acl_entry *b) -{ - /* - * First, sort between tags -- conveniently defined in the correct - * order for verification. - */ - if (a->ae_tag < b->ae_tag) - return (-1); - if (a->ae_tag > b->ae_tag) - return (1); - - /* - * Next compare uids/gids on appropriate types. - */ - - if (a->ae_tag == ACL_USER || a->ae_tag == ACL_GROUP) { - if (a->ae_id < b->ae_id) - return (-1); - if (a->ae_id > b->ae_id) - return (1); - - /* shouldn't be equal, fall through to the invalid case */ - } - - /* - * Don't know how to sort multiple entries of the rest--either it's - * a bad entry, or there shouldn't be more than one. Ignore and the - * validity checker can get it later. - */ - return (0); -} - -/* - * acl_sort -- sort ACL entries. - * Give the opportunity to fail, althouh we don't currently have a way - * to fail. - */ -int -acl_sort(acl_t acl) -{ - - qsort(&acl->acl_entry[0], acl->acl_cnt, sizeof(struct acl_entry), - (compare) acl_entry_compare); - - return (0); -} - -/* - * acl_posix1e -- in what situations should we acl_sort before submission? - * We apply posix1e ACL semantics for any ACL of type ACL_TYPE_ACCESS or - * ACL_TYPE_DEFAULT - */ -int -acl_posix1e(acl_t acl, acl_type_t type) -{ - - return ((type == ACL_TYPE_ACCESS) || (type == ACL_TYPE_DEFAULT)); -} - -/* - * acl_check -- given an ACL, check its validity. This is mirrored from - * code in sys/kern/kern_acl.c, and if changes are made in one, they should - * be made in the other also. This copy of acl_check is made available - * in userland for the benefit of processes wanting to check ACLs for - * validity before submitting them to the kernel, or for performing - * in userland file system checking. Needless to say, the kernel makes - * the real checks on calls to get/setacl. - * - * See the comments in kernel for explanation -- just briefly, it assumes - * an already sorted ACL, and checks based on that assumption. The - * POSIX.1e interface, acl_valid(), will perform the sort before calling - * this. Returns 0 on success, EINVAL on failure. - */ -int -acl_check(struct acl *acl) -{ - struct acl_entry *entry; /* current entry */ - uid_t obj_uid=-1, obj_gid=-1, highest_uid=0, highest_gid=0; - int stage = ACL_USER_OBJ; - int i = 0; - int count_user_obj=0, count_user=0, count_group_obj=0, - count_group=0, count_mask=0, count_other=0; - - /* printf("acl_check: checking acl with %d entries\n", acl->acl_cnt); */ - while (i < acl->acl_cnt) { - - entry = &acl->acl_entry[i]; - - if ((entry->ae_perm | ACL_PERM_BITS) != ACL_PERM_BITS) - return (EINVAL); - - switch(entry->ae_tag) { - case ACL_USER_OBJ: - /* printf("acl_check: %d: ACL_USER_OBJ\n", i); */ - if (stage > ACL_USER_OBJ) - return (EINVAL); - stage = ACL_USER; - count_user_obj++; - obj_uid = entry->ae_id; - break; - - case ACL_USER: - /* printf("acl_check: %d: ACL_USER\n", i); */ - if (stage > ACL_USER) - return (EINVAL); - stage = ACL_USER; - if (entry->ae_id == obj_uid) - return (EINVAL); - if (count_user && (entry->ae_id <= highest_uid)) - return (EINVAL); - highest_uid = entry->ae_id; - count_user++; - break; - - case ACL_GROUP_OBJ: - /* printf("acl_check: %d: ACL_GROUP_OBJ\n", i); */ - if (stage > ACL_GROUP_OBJ) - return (EINVAL); - stage = ACL_GROUP; - count_group_obj++; - obj_gid = entry->ae_id; - break; - - case ACL_GROUP: - /* printf("acl_check: %d: ACL_GROUP\n", i); */ - if (stage > ACL_GROUP) - return (EINVAL); - stage = ACL_GROUP; - if (entry->ae_id == obj_gid) - return (EINVAL); - if (count_group && (entry->ae_id <= highest_gid)) - return (EINVAL); - highest_gid = entry->ae_id; - count_group++; - break; - - case ACL_MASK: - /* printf("acl_check: %d: ACL_MASK\n", i); */ - if (stage > ACL_MASK) - return (EINVAL); - stage = ACL_MASK; - count_mask++; - break; - - case ACL_OTHER: - /* printf("acl_check: %d: ACL_OTHER\n", i); */ - if (stage > ACL_OTHER) - return (EINVAL); - stage = ACL_OTHER; - count_other++; - break; - - default: - /* printf("acl_check: %d: INVALID\n", i); */ - return (EINVAL); - } - i++; - } - - if (count_user_obj != 1) - return (EINVAL); - - if (count_group_obj != 1) - return (EINVAL); - - if (count_mask != 0 && count_mask != 1) - return (EINVAL); - - if (count_other != 1) - return (EINVAL); - - return (0); -} - - -/* - * Given a uid/gid, return a username/groupname for the text form of an ACL - * XXX NOT THREAD SAFE, RELIES ON GETPWUID, GETGRGID - * XXX USES *PW* AND *GR* WHICH ARE STATEFUL AND THEREFORE THIS ROUTINE - * MAY HAVE SIDE-EFFECTS - */ -int -acl_id_to_name(acl_tag_t tag, uid_t id, ssize_t buf_len, char *buf) -{ - struct group *g; - struct passwd *p; - int i; - - switch(tag) { - case ACL_USER: - p = getpwuid(id); - if (!p) - i = snprintf(buf, buf_len, "%d", id); - else - i = snprintf(buf, buf_len, "%s", p->pw_name); - - if (i >= buf_len) { - errno = ENOMEM; - return (-1); - } - return (0); - - case ACL_GROUP: - g = getgrgid(id); - if (!g) - i = snprintf(buf, buf_len, "%d", id); - else - i = snprintf(buf, buf_len, "%s", g->gr_name); - - if (i >= buf_len) { - errno = ENOMEM; - return (-1); - } - return (0); - - default: - return (EINVAL); - } -} - - -/* - * Given a username/groupname from a text form of an ACL, return the uid/gid - * XXX NOT THREAD SAFE, RELIES ON GETPWNAM, GETGRNAM - * XXX USES *PW* AND *GR* WHICH ARE STATEFUL AND THEREFORE THIS ROUTINE - * MAY HAVE SIDE-EFFECTS - * - * XXX currently doesn't deal correctly with a numeric uid being passed - * instead of a username. What is correct behavior here? Check chown. - */ -int -acl_name_to_id(acl_tag_t tag, char *name, uid_t *id) -{ - struct group *g; - struct passwd *p; - - switch(tag) { - case ACL_USER: - p = getpwnam(name); - if (!p) { - errno = EINVAL; - return (-1); - } - *id = p->pw_uid; - return (0); - - case ACL_GROUP: - g = getgrnam(name); - if (g) { - errno = EINVAL; - return (-1); - } - *id = g->gr_gid; - return (0); - - default: - return (EINVAL); - } -} - - -/* - * Given a right-shifted permission (i.e., direct ACL_PERM_* mask), fill - * in a string describing the permissions. - */ -int -acl_perm_to_string(acl_perm_t perm, ssize_t buf_len, char *buf) -{ - - if (buf_len < ACL_STRING_PERM_MAXSIZE + 1) { - errno = ENOMEM; - return (-1); - } - - if ((perm | ACL_PERM_BITS) != ACL_PERM_BITS) { - errno = EINVAL; - return (-1); - } - - buf[3] = 0; /* null terminate */ - - if (perm & ACL_PERM_READ) - buf[0] = ACL_STRING_PERM_READ; - else - buf[0] = ACL_STRING_PERM_NONE; - - if (perm & ACL_PERM_WRITE) - buf[1] = ACL_STRING_PERM_WRITE; - else - buf[1] = ACL_STRING_PERM_NONE; - - if (perm & ACL_PERM_EXEC) - buf[2] = ACL_STRING_PERM_EXEC; - else - buf[2] = ACL_STRING_PERM_NONE; - - return (0); -} - -/* - * given a string, return a permission describing it - */ -int -acl_string_to_perm(char *string, acl_perm_t *perm) -{ - acl_perm_t myperm = ACL_PERM_NONE; - char *ch; - - ch = string; - while (*ch) { - switch(*ch) { - case ACL_STRING_PERM_READ: - myperm |= ACL_PERM_READ; - break; - case ACL_STRING_PERM_WRITE: - myperm |= ACL_PERM_WRITE; - break; - case ACL_STRING_PERM_EXEC: - myperm |= ACL_PERM_EXEC; - break; - case ACL_STRING_PERM_NONE: - break; - default: - return (EINVAL); - } - ch++; - } - - *perm = myperm; - return (0); -} - -/* - * Add an ACL entry without doing much checking, et al - */ -int -acl_add_entry(acl_t acl, acl_tag_t tag, uid_t id, acl_perm_t perm) -{ - struct acl_entry *e; - - if (acl->acl_cnt >= ACL_MAX_ENTRIES) { - errno = ENOMEM; - return (-1); - } - - e = &(acl->acl_entry[acl->acl_cnt]); - e->ae_perm = perm; - e->ae_tag = tag; - e->ae_id = id; - acl->acl_cnt++; - - return (0); -} diff --git a/lib/libc/posix1e/acl_support.h b/lib/libc/posix1e/acl_support.h deleted file mode 100644 index e34aca5..0000000 --- a/lib/libc/posix1e/acl_support.h +++ /dev/null @@ -1,46 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * Support functionality for the POSIX.1e ACL interface - * These calls are intended only to be called within the library. - */ -#ifndef _ACL_SUPPORT_H -#define _ACL_SUPPORT_H - -#define ACL_STRING_PERM_MAXSIZE 3 /* read, write, exec */ - -int acl_check(struct acl *acl); -int acl_sort(acl_t acl); -int acl_posix1e(acl_t acl, acl_type_t type); -int acl_id_to_name(acl_tag_t tag, uid_t id, ssize_t buf_len, char *buf); -int acl_name_to_id(acl_tag_t tag, char *name, uid_t *id); -int acl_perm_to_string(acl_perm_t perm, ssize_t buf_len, char *buf); -int acl_string_to_perm(char *string, acl_perm_t *perm); -int acl_add_entry(acl_t acl, acl_tag_t tag, uid_t id, acl_perm_t perm); - -#endif diff --git a/lib/libc/posix1e/acl_to_text.3 b/lib/libc/posix1e/acl_to_text.3 deleted file mode 100644 index 483dea7..0000000 --- a/lib/libc/posix1e/acl_to_text.3 +++ /dev/null @@ -1,130 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_TO_TEXT 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_to_text -.Nd Convert an ACL to Text -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft char * -.Fn acl_to_text "acl_t acl" "ssize_t *len_p" -.Sh DESCRIPTION -The -.Fn acl_to_text -function translates the ACL pointed to by argument -.Va acl -into a NULL terminated character string. If the pointer -.Va len_p -is not NULL, then the function shall return the length of the string (not -including the NULL terminator) in the location pointed to by -.Va len_p . -The format of the text string returned by -.Fn acl_to_text -shall be the POSIX.1e long ACL form. - -This function allocates any memory necessary to contain the string and -returns a pointer to the string. The caller should free any releasable -memory, when the new string is no longer required, by calling -.Xr acl_free 3 -with the -.Va (void*)char -as an argument. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, the function shall return a pointer to the -long text form of an ACL. Otherwise, a value of -.Va (char*)NULL -shall be returned and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, the -.Fn acl_to_text -function shall return a value of -.Va (acl_t)NULL -and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EINVAL -Argument -.Va acl -does not point to a valid ACL. - -The ACL denoted by -.Va acl -contains one or more improperly formed ACL entries, or for some other -reason cannot be translated into a text form of an ACL. -.It Bq Er ENOMEM -The character string to be returned requires more memory than is allowed -by the hardware or software-imposed memory management constraints. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_free 3 , -.Xr acl_from_text 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the FreeBSD POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. - -.Fn acl_from_text -and -.Fn acl_to_text -rely on the -.Xr getpwent 3 -library calls to manage username and uid mapping, as well as the -.Xr getgrent 3 -library calls to manage groupname and gid mapping. These calls are not -thread safe, and so transitively, neither are -.Fn acl_from_text -and -.Fn acl_to_text . -These functions may also interfere with stateful -calls associated with the -.Fn getpwent -and -.Fn getgrent -calls. diff --git a/lib/libc/posix1e/acl_to_text.c b/lib/libc/posix1e/acl_to_text.c deleted file mode 100644 index 0dc3058..0000000 --- a/lib/libc/posix1e/acl_to_text.c +++ /dev/null @@ -1,233 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_to_text - return a text string with a text representation of the acl - * in it. - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <sys/errno.h> -#include <stdio.h> -#include <stdlib.h> -#include <string.h> -#include <utmp.h> - -#include "acl_support.h" - -/* - * acl_to_text - generate a text form of an acl - * spec says nothing about output ordering, so leave in acl order - * - * This function will not produce nice results if it is called with - * a non-POSIX.1e semantics ACL. - */ -char * -acl_to_text(acl_t acl, ssize_t *len_p) -{ - char *buf, *tmpbuf; - char name_buf[UT_NAMESIZE+1]; - char perm_buf[ACL_STRING_PERM_MAXSIZE+1], - effective_perm_buf[ACL_STRING_PERM_MAXSIZE+1]; - int i, error, len; - uid_t ae_id; - acl_tag_t ae_tag; - acl_perm_t ae_perm, effective_perm, mask_perm; - - buf = strdup(""); - - mask_perm = ACL_PERM_BITS; /* effective is regular if no mask */ - for (i = 0; i < acl->acl_cnt; i++) - if (acl->acl_entry[i].ae_tag == ACL_MASK) - mask_perm = acl->acl_entry[i].ae_perm; - - for (i = 0; i < acl->acl_cnt; i++) { - ae_tag = acl->acl_entry[i].ae_tag; - ae_id = acl->acl_entry[i].ae_id; - ae_perm = acl->acl_entry[i].ae_perm; - - switch(ae_tag) { - case ACL_USER_OBJ: - error = acl_perm_to_string(ae_perm, - ACL_STRING_PERM_MAXSIZE+1, perm_buf); - if (error) - goto error_label; - len = asprintf(&tmpbuf, "%suser::%s\n", buf, - perm_buf); - if (len == -1) { - errno = ENOMEM; - goto error_label; - } - free(buf); - buf = tmpbuf; - break; - - case ACL_USER: - error = acl_perm_to_string(ae_perm, - ACL_STRING_PERM_MAXSIZE+1, perm_buf); - if (error) - goto error_label; - - error = acl_id_to_name(ae_tag, ae_id, UT_NAMESIZE+1, - name_buf); - if (error) - goto error_label; - - effective_perm = ae_perm & mask_perm; - if (effective_perm != ae_perm) { - error = acl_perm_to_string(effective_perm, - ACL_STRING_PERM_MAXSIZE+1, - effective_perm_buf); - if (error) - goto error_label; - len = asprintf(&tmpbuf, "%suser:%s:%s\t\t# " - "effective: %s\n", - buf, name_buf, perm_buf, - effective_perm_buf); - } else { - len = asprintf(&tmpbuf, "%suser:%s:%s\n", buf, - name_buf, perm_buf); - } - if (len == -1) { - errno = ENOMEM; - goto error_label; - } - free(buf); - buf = tmpbuf; - break; - - case ACL_GROUP_OBJ: - error = acl_perm_to_string(ae_perm, - ACL_STRING_PERM_MAXSIZE+1, perm_buf); - if (error) - goto error_label; - - effective_perm = ae_perm & mask_perm; - if (effective_perm != ae_perm) { - error = acl_perm_to_string(effective_perm, - ACL_STRING_PERM_MAXSIZE+1, - effective_perm_buf); - if (error) - goto error_label; - len = asprintf(&tmpbuf, "%sgroup::%s\t\t# " - "effective: %s\n", - buf, perm_buf, effective_perm_buf); - } else { - len = asprintf(&tmpbuf, "%sgroup::%s\n", buf, - perm_buf); - } - if (len == -1) { - errno = ENOMEM; - goto error_label; - } - free(buf); - buf = tmpbuf; - break; - - case ACL_GROUP: - error = acl_perm_to_string(ae_perm, - ACL_STRING_PERM_MAXSIZE+1, perm_buf); - if (error) - goto error_label; - - error = acl_id_to_name(ae_tag, ae_id, UT_NAMESIZE+1, - name_buf); - if (error) - goto error_label; - - effective_perm = ae_perm & mask_perm; - if (effective_perm != ae_perm) { - error = acl_perm_to_string(effective_perm, - ACL_STRING_PERM_MAXSIZE+1, - effective_perm_buf); - if (error) - goto error_label; - len = asprintf(&tmpbuf, "%sgroup::%s\t\t# " - "effective: %s\n", - buf, perm_buf, effective_perm_buf); - } else { - len = asprintf(&tmpbuf, "%sgroup:%s:%s\n", buf, - name_buf, perm_buf); - } - if (len == -1) { - errno = ENOMEM; - goto error_label; - } - free(buf); - buf = tmpbuf; - break; - - case ACL_MASK: - error = acl_perm_to_string(ae_perm, - ACL_STRING_PERM_MAXSIZE+1, perm_buf); - if (error) - goto error_label; - - len = asprintf(&tmpbuf, "%smask::%s\n", buf, - perm_buf); - if (len == -1) { - errno = ENOMEM; - goto error_label; - } - free(buf); - buf = tmpbuf; - break; - - case ACL_OTHER: - error = acl_perm_to_string(ae_perm, - ACL_STRING_PERM_MAXSIZE+1, perm_buf); - if (error) - goto error_label; - - len = asprintf(&tmpbuf, "%sother::%s\n", buf, - perm_buf); - if (len == -1) { - errno = ENOMEM; - goto error_label; - } - free(buf); - buf = tmpbuf; - break; - - default: - free(buf); - errno = EINVAL; - return (0); - } - } - - if (len_p) { - *len_p = strlen(buf); - } - return (buf); - -error_label: - /* jump to here sets errno already, we just clean up */ - if (buf) free(buf); - return (0); -} diff --git a/lib/libc/posix1e/acl_valid.3 b/lib/libc/posix1e/acl_valid.3 deleted file mode 100644 index 53ee879..0000000 --- a/lib/libc/posix1e/acl_valid.3 +++ /dev/null @@ -1,144 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 28, 2000 -.Dt ACL_VALID 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm acl_valid , -.Nm acl_valid_fd_np , -.Nm acl_valid_file_np -.Nd Validate an ACL -.Sh SYNOPSIS -.Fd #include <sys/types.h> -.Fd #include <sys/acl.h> -.Ft int -.Fn acl_valid "acl_t acl" -.Ft int -.Fn acl_valid_fd_np "int fd" "acl_type_t type" "acl_t acl" -.Ft int -.Fn acl_valid_file_np "const char *path_p" "acl_type_t type" "acl_t acl" -.Sh DESCRIPTION -These functions check that the ACL referred to by the argument -.Va acl -is valid. The POSIX.1e routine, -.Fn acl_valid , -checks this validity only with POSIX.1e ACL semantics, and irrespective -of the context in which the ACL is to be used. The non-portable forms, -.Fn acl_valid_fd_np -and -.Fn acl_valid_file_np , -allow an ACL to be checked in the context of a specific acl type, -.Va type , -and file system object. In environments where additional ACL types are -supported than just POSIX.1e, this makes more sense. - -For POSIX.1e semantics, the checks include: -.Bd -literal -offset indent -The three required entries (ACL_USER_OBJ, ACL_GROUP_OBJ, -and ACL_OTHER) shall exist exactly once in the ACL. If -the ACL contains any ACL_USER, ACL_GROUP, or any other -implementation-defined entries in the file group class -then one ACL_MASK entry shall also be required. The ACL -shall contain at most on ACL_MASK entry. - -The qualifier field shall be unique among all entries of -the same POSIX.1e ACL facility defined tag type. The -tag type field shall contain valid values including any -implementation-defined values. Validation of the values -of the qualifier field is implementation-defined. -.Ed - -The POSIX.1e -.Fn acl_valid -function may reorder the ACL for the purposes of verification; the -non-portable validation functions will not. -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh RETURN VALUES -Upon successful completion, the function shall return a value of zero. -Otherwise, a value of -1 shall be returned and -.Va errno -shall be set to indicate the error. -.Sh ERRORS -If any of the following conditions occur, these functions shall return --1 and set -.Va errno -to the corresponding value: -.Bl -tag -width Er -.It Bq Er EACCES -Search permission is denied for a component of the path prefix, or the -object exists and the process does not have appropriate access rights. -.It Bq Er EBADF -The -.Va fd -argument is not a valid file descriptor. -.It Bq Er EINVAL -Argument -.Va acl -does not point to a valid ACL. - -One or more of the required ACL entries is not present in -.Va acl . - -The ACL contains entries that are not unique. - -The file system rejects the ACL based on fs-specific semantics issues. -.It Bq Er ENAMETOOLONG -A component of a pathname exceeded 255 characters, or an -entire path name exceeded 1023 characters. -.It Bq Er ENOENT -The named object does not exist, or the -.Va path_p -argument points to an empty string. -.It Bq Er ENOMEM -Insufficient memory available to fulfill request. -.It Bq Er EOPNOTSUPP -The file system does not support ACL retrieval. -.El -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl_get 3 , -.Xr acl_init 3 , -.Xr acl_set 3 , -.Xr posix1e 3 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the FreeBSD POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. diff --git a/lib/libc/posix1e/acl_valid.c b/lib/libc/posix1e/acl_valid.c deleted file mode 100644 index efb91ed..0000000 --- a/lib/libc/posix1e/acl_valid.c +++ /dev/null @@ -1,97 +0,0 @@ -/*- - * Copyright (c) 1999 Robert N. M. Watson - * All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - * - * $FreeBSD$ - */ -/* - * acl_valid -- POSIX.1e ACL check routine - */ - -#include <sys/types.h> -#include <sys/acl.h> -#include <sys/errno.h> - -#include "acl_support.h" - -/* - * acl_valid: accepts an ACL, returns 0 on valid ACL, -1 for invalid, - * and errno set to EINVAL. - * - * Implemented by calling the acl_check routine in acl_support, which - * requires ordering. We call acl_support's acl_sort to make this - * true. POSIX.1e allows acl_valid() to reorder the ACL as it sees fit. - * - * This call is deprecated, as it doesn't ask whether the ACL is valid - * for a particular target. However, this call is standardized, unlike - * the other two forms. - */ -int -acl_valid(acl_t acl) -{ - int error; - - acl_sort(acl); - error = acl_check(acl); - if (error) { - errno = error; - return (-1); - } else { - return (0); - } -} - - -int -acl_valid_file_np(const char *pathp, acl_type_t type, acl_t acl) -{ - int error; - - if (acl_posix1e(acl, type)) { - error = acl_sort(acl); - if (error) { - errno = error; - return (-1); - } - } - - return (__acl_aclcheck_file(pathp, type, acl)); -} - - -int -acl_valid_fd_np(int fd, acl_type_t type, acl_t acl) -{ - int error; - - if (acl_posix1e(acl, type)) { - error = acl_sort(acl); - if (error) { - errno = error; - return (-1); - } - } - - return (__acl_aclcheck_fd(fd, type, acl)); -} diff --git a/lib/libc/posix1e/posix1e.3 b/lib/libc/posix1e/posix1e.3 deleted file mode 100644 index 3d43382..0000000 --- a/lib/libc/posix1e/posix1e.3 +++ /dev/null @@ -1,101 +0,0 @@ -.\"- -.\" Copyright (c) 2000 Robert N. M. Watson -.\" All rights reserved. -.\" -.\" Redistribution and use in source and binary forms, with or without -.\" modification, are permitted provided that the following conditions -.\" are met: -.\" 1. Redistributions of source code must retain the above copyright -.\" notice, this list of conditions and the following disclaimer. -.\" 2. Redistributions in binary form must reproduce the above copyright -.\" notice, this list of conditions and the following disclaimer in the -.\" documentation and/or other materials provided with the distribution. -.\" -.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND -.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE -.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL -.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS -.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) -.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT -.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY -.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF -.\" SUCH DAMAGE. -.\" -.\" $FreeBSD$ -.\" -.Dd January 17, 2000 -.Dt POSIX1E 3 -.Os FreeBSD 4.0 -.Sh NAME -.Nm posix1e -.Nd introduction to the POSIX.1e security API -.Sh SYNOPSIS -.Fd #include <sys/acl.h> -.Fd #include <sys/audit.h> -.Fd #include <sys/capability.h> -.Fd #include <sys/mac.h> -.Sh DESCRIPTION -The IEEE POSIX.1e specification never left draft form, but the interfaces -it describes are now widely used despite inherent limitations. Currently, -only a few of the interfaces and features are implemented in FreeBSD, -although efforts are underway to complete the integration at this time. - -POSIX.1e describes five security extensions to the base POSIX.1 API: -Access Control Lists (ACLs), Auditing, Capabilities, Mandatory Access -Control, and Information Flow Labels. Of these, the ACL interfaces are -currently included with FreeBSD, Auditing, Capabilities, and Mandatory -Access Control are in the wings, and Information Flow Labels are not on -the calendar. - -POSIX.1e defines both syntax and semantics for these features, but fairly -substantial changes are required to implement these features in the -operating system. As shipped, FreeBSD 4.0 permits file systems to export -Access Control Lists via the VFS, and provides a library for userland -access to and manipulation of these ACLs, but support for ACLs is not -provided by any file systems shipped in the base operating system. -Available API calls relating to ACLs are described in detail in -.Xr acl 3 . - -The patches supporting other POSIX.1e features are not available in the -base operating system at this time--however, more information on them -may be found on the FreeBSD POSIX.1e implementation web page: - -http://www.watson.org/fbsd-hardening/posix1e/ -.Sh IMPLEMENTATION NOTES -FreeBSD's support for POSIX.1e interfaces and features is still under -development at this time. -.Sh ENVIRONMENT -POSIX.1e assigns security labels to all objects, extending the security -functionality described in POSIX.1. These additional labels provide -fine-grained discretionary access control, fine-grained capabilities, -and labels necessary for mandatory access control. POSIX.2c describes -a set of userland utilities for manipulating these labels. These userland -utilities are not bundled with -.Fx 4.0 -so as to discourage their -use in the short term. -.Sh FILES -.Sh SEE ALSO -.Xr acl 3 , -.Xr acl 9 , -.Xr extattr 9 -.Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the -.Fx -POSIX.1e implementation -page for more information. -.Sh HISTORY -POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. -.Sh AUTHORS -.An Robert N M Watson , -.An Ilmar S Habibulin -.Sh BUGS -These features are not yet fully implemented. In particular, the shipped -version of UFS/FFS does not support storage of additional security labels, -and so is unable to (easily) provide support for most of these features. |
