masqmail-0.2

view src/permissions.c @ 91:3e7136221104

find changesets by author, revision, files, or words in the commit message
correct masqmail path in rmail script; remove docs on uninstall on install the correct path to the masqmail executable gets inserted into the rmail script now. now documentation, examples, and the templates are removed on uninstall. Empty directories are the only thing that may remain if one installs masqmail into an unusual path.
author meillo@marmaro.de
date Mon, 21 Jun 2010 09:40:16 +0200
parents ffeff2c33799
children 087e99c7702a
line source
1 /* MasqMail
2 Copyright (C) 2000 Oliver Kurth
3
4 This program is free software; you can redistribute it and/or modify
5 it under the terms of the GNU General Public License as published by
6 the Free Software Foundation; either version 2 of the License, or
7 (at your option) any later version.
8
9 This program is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 GNU General Public License for more details.
13
14 You should have received a copy of the GNU General Public License
15 along with this program; if not, write to the Free Software
16 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
17 */
18
19 #include <pwd.h>
20 #include <grp.h>
21
22 #include "masqmail.h"
23
24 /* is there really no function in libc for this? */
25 gboolean
26 is_ingroup(uid_t uid, gid_t gid)
27 {
28 struct group *grent = getgrgid(gid);
29 struct passwd *pwent = getpwuid(uid);
30 char *entry;
31 int i = 0;
32
33 if (!grent) {
34 return FALSE;
35 }
36 if (!pwent) {
37 return FALSE;
38 }
39 /* check primary group */
40 if (pwent->pw_gid == gid) {
41 return TRUE;
42 }
43 /* check secondary groups */
44 while ((entry = grent->gr_mem[i++])) {
45 if (strcmp(pwent->pw_name, entry) == 0)
46 return TRUE;
47 }
48 return FALSE;
49 }
50
51 gboolean
52 is_privileged_user(uid_t uid)
53 {
54 /* uncomment these lines if you need the `uucp' group to be trusted too
55 struct group* grent = getgrnam("uucp");
56
57 if (is_ingroup(uid, grent->gr_gid)) {
58 return TRUE;
59 }
60 */
61
62 return (uid == 0) || (uid == conf.mail_uid) || (is_ingroup(uid, conf.mail_gid));
63 }
64
65 void
66 set_euidgid(gint uid, gint gid, uid_t * old_uid, gid_t * old_gid)
67 {
68 if (old_uid)
69 *old_uid = geteuid();
70 if (old_gid)
71 *old_gid = getegid();
72
73 seteuid(0);
74
75 if (setegid(gid) != 0) {
76 logwrite(LOG_ALERT, "could not change gid to %d: %s\n", gid, strerror(errno));
77 exit(EXIT_FAILURE);
78 }
79 if (seteuid(uid) != 0) {
80 logwrite(LOG_ALERT, "could not change uid to %d: %s\n", uid, strerror(errno));
81 exit(EXIT_FAILURE);
82 }
83 }
84
85 void
86 set_identity(uid_t old_uid, gchar * task_name)
87 {
88 if (!conf.run_as_user) {
89 if (!is_privileged_user(old_uid)) {
90 fprintf(stderr, "must be root, %s or in group %s for %s.\n", DEF_MAIL_USER, DEF_MAIL_GROUP, task_name);
91 exit(EXIT_FAILURE);
92 }
93
94 set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);
95 }
96 }