selinux support by Yuichi Nakamura <ynakam@hitachisoft.jp> (HitachiSoft)
[oweals/busybox.git] / coreutils / id.c
index 85b288c0c2dc53d1717c2c9615450eac1099c694..a0364675ff43f1e0ddb27abd7f380fd5d8921521 100644 (file)
  *
  * Copyright (C) 2000 by Randolph Chung <tausq@debian.org>
  *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
- * General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program; if not, write to the Free Software
- * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
- *
+ * Licensed under GPLv2 or later, see file LICENSE in this tarball for details.
+ */
+
+/* BB_AUDIT SUSv3 _NOT_ compliant -- option -G is not currently supported. */
+/* Hacked by Tito Ragusa (C) 2004 to handle usernames of whatever length and to
+ * be more similar to GNU id.
+ * -Z option support: by Yuichi Nakamura <ynakam@hitachisoft.jp>
  */
 
 #include "busybox.h"
 #include <stdio.h>
 #include <unistd.h>
-#include <getopt.h>
-#include <string.h>
 #include <sys/types.h>
 
-extern int id_main(int argc, char **argv)
+#define PRINT_REAL        1
+#define NAME_NOT_NUMBER   2
+#define JUST_USER         4
+#define JUST_GROUP        8
+#if ENABLE_SELINUX
+#define JUST_CONTEXT    16
+#endif
+
+static short printf_full(unsigned int id, const char *arg, const char prefix)
 {
-       int no_user = 0, no_group = 0, print_real = 0;
-       int name_not_number = 0;
-       char user[9], group[9];
-       long gid;
-       long pwnam, grnam;
-       int opt;
-       
-       gid = 0;
+       const char *fmt = "%cid=%u";
+       short status = EXIT_FAILURE;
 
-       while ((opt = getopt(argc, argv, "ugrn")) > 0) {
-               switch (opt) {
-                       case 'u':
-                               no_group++;
-                               break;
-                       case 'g':
-                               no_user++;
-                               break;
-                       case 'r':
-                               print_real++;
-                               break;
-                       case 'n':
-                               name_not_number++;
-                               break;
-                       default:
-                               show_usage();
-               }
+       if (arg) {
+               fmt = "%cid=%u(%s)";
+               status = EXIT_SUCCESS;
        }
+       printf(fmt, prefix, id, arg);
+       return status;
+}
 
-       if (no_user && no_group) show_usage();
+int id_main(int argc, char **argv);
+int id_main(int argc, char **argv)
+{
+       struct passwd *p;
+       uid_t uid;
+       gid_t gid;
+       unsigned long flags;
+       short status;
+#if ENABLE_SELINUX
+       security_context_t scontext;
+#endif
+       /* Don't allow -n -r -nr -ug -rug -nug -rnug */
+       /* Don't allow more than one username */
+       opt_complementary = "?1:?:u--g:g--u:r?ug:n?ug" USE_SELINUX(":u--Z:Z--u:g--Z:Z--g");
+       flags = getopt32(argc, argv, "rnug" USE_SELINUX("Z"));
 
-       if (argv[optind] == NULL) {
-               if (print_real) {
-                       my_getpwuid(user, getuid());
-                       my_getgrgid(group, getgid());
-               } else {
-                       my_getpwuid(user, geteuid());
-                       my_getgrgid(group, getegid());
-               }
-       } else {
-               strncpy(user, argv[optind], 8);
-               user[8] = '\0';
-           gid = my_getpwnamegid(user);
-               my_getgrgid(group, gid);
+       /* This values could be overwritten later */
+       uid = geteuid();
+       gid = getegid();
+       if (flags & PRINT_REAL) {
+               uid = getuid();
+               gid = getgid();
        }
 
-       pwnam=my_getpwnam(user);
-       grnam=my_getgrnam(group);
+       if (argv[optind]) {
+               p = getpwnam(argv[optind]);
+               /* xuname2uid is needed because it exits on failure */
+               uid = xuname2uid(argv[optind]);
+               gid = p->pw_gid;
+               /* in this case PRINT_REAL is the same */
+       }
 
-       if (no_group) {
-               if(name_not_number && user)
-                       puts(user);
-               else
-                       printf("%ld\n", pwnam);
-       } else if (no_user) {
-               if(name_not_number && group)
-                       puts(group);
-               else
-                       printf("%ld\n", grnam);
-       } else {
-               printf("uid=%ld(%s) gid=%ld(%s)\n", pwnam, user, grnam, group);
+       if (flags & (JUST_GROUP | JUST_USER USE_SELINUX(| JUST_CONTEXT))) {
+               /* JUST_GROUP and JUST_USER are mutually exclusive */
+               if (flags & NAME_NOT_NUMBER) {
+                       /* bb_getpwuid and bb_getgrgid exit on failure so puts cannot segfault */
+                       puts((flags & JUST_USER) ? bb_getpwuid(NULL, uid, -1 ) : bb_getgrgid(NULL, gid, -1 ));
+               } else {
+                       if (flags & JUST_USER) {
+                               printf("%u\n", uid);
+                       }
+                       if (flags & JUST_GROUP) {
+                               printf("%u\n", gid);
+                       }
+               }
+               
+#if ENABLE_SELINUX
+               if (flags & JUST_CONTEXT) {        
+                       selinux_or_die();
+                       if (argc - optind == 1) {
+                               bb_error_msg_and_die("can't print security context when user specified");
+                       }
+                       
+                       if (getcon(&scontext)) {
+                               bb_error_msg_and_die("can't get process context");              
+                       }
+                       printf("%s\n", scontext);
+               }
+#endif 
+               /* exit */
+               fflush_stdout_and_exit(EXIT_SUCCESS);
        }
-       return(0);
-}
 
+       /* Print full info like GNU id */
+       /* bb_getpwuid doesn't exit on failure here */
+       status = printf_full(uid, bb_getpwuid(NULL, uid, 0), 'u');
+       putchar(' ');
+       /* bb_getgrgid doesn't exit on failure here */
+       status |= printf_full(gid, bb_getgrgid(NULL, gid, 0), 'g');
+
+#if ENABLE_SELINUX
+       if (is_selinux_enabled()) {
+               security_context_t mysid;
+               const char *context;
 
-/* END CODE */
+               context = "unknown";
+               getcon(&mysid);
+               if (mysid) {
+                       context = alloca(strlen(mysid) + 1);
+                       strcpy((char*)context, mysid);
+                       freecon(mysid);
+               }
+               printf(" context=%s", context);
+       }
+#endif
+
+       putchar('\n');
+       fflush_stdout_and_exit(status);
+}