Context Navigation

source: trunk/src/sh_suidchk.c@ 529

Last change on this file since 529 was 517, checked in by katerina, 8 years ago
Fix for ticket #411 (leftover debug statement in changeset 516).
File size: 63.5 KB

Rev	Line
[1]	1	/* SAMHAIN file system integrity testing */
	2	/* Copyright (C) 2001 Rainer Wichmann */
	3	/* */
	4	/* This program is free software; you can redistribute it */
	5	/* and/or modify */
	6	/* it under the terms of the GNU General Public License as */
	7	/* published by */
	8	/* the Free Software Foundation; either version 2 of the License, or */
	9	/* (at your option) any later version. */
	10	/* */
	11	/* This program is distributed in the hope that it will be useful, */
	12	/* but WITHOUT ANY WARRANTY; without even the implied warranty of */
	13	/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the */
	14	/* GNU General Public License for more details. */
	15	/* */
	16	/* You should have received a copy of the GNU General Public License */
	17	/* along with this program; if not, write to the Free Software */
	18	/* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
	19
	20	#include "config_xor.h"
	21
	22
	23	#include <stdio.h>
	24	#include <stdlib.h>
	25	#include <string.h>
	26	#include <sys/types.h>
	27	#include <sys/stat.h>
	28	#include <fcntl.h>
	29	#include <unistd.h>
	30	#include <errno.h>
	31	#include <limits.h>
[94]	32
[1]	33	#ifdef HAVE_SCHED_H
	34	#include <sched.h>
	35	#endif
	36
	37	#ifdef SH_USE_SUIDCHK
	38
	39	#undef FIL__
	40	#define FIL__ _("sh_suidchk.c")
	41
	42	#if defined (SH_WITH_CLIENT) \|\| defined (SH_STANDALONE)
	43
	44	#if TIME_WITH_SYS_TIME
	45	#include <sys/time.h>
	46	#include <time.h>
	47	#else
	48	#if HAVE_SYS_TIME_H
	49	#include <sys/time.h>
	50	#else
	51	#include <time.h>
	52	#endif
	53	#endif
	54
	55	#ifdef HAVE_DIRENT_H
	56	#include <dirent.h>
	57	#define NAMLEN(dirent) sl_strlen((dirent)->d_name)
	58	#else
	59	#define dirent direct
	60	#define NAMLEN(dirent) (dirent)->d_namlen
	61	#ifdef HAVE_SYS_NDIR_H
	62	#include <sys/ndir.h>
	63	#endif
	64	#ifdef HAVE_SYS_DIR_H
	65	#include <sys/dir.h>
	66	#endif
	67	#ifdef HAVE_NDIR_H
	68	#include <ndir.h>
	69	#endif
	70	#endif
[137]	71	#define NEED_ADD_DIRENT
[1]	72
	73	#include "samhain.h"
[131]	74	#include "sh_pthread.h"
[1]	75	#include "sh_utils.h"
	76	#include "sh_error.h"
	77	#include "sh_modules.h"
	78	#include "sh_suidchk.h"
	79	#include "sh_hash.h"
[481]	80	#include "sh_dbIO.h"
[1]	81	#include "sh_unix.h"
	82	#include "sh_files.h"
	83	#include "sh_schedule.h"
	84	#include "sh_calls.h"
[452]	85	#include "zAVLTree.h"
[1]	86
	87
	88	sh_rconf sh_suidchk_table[] = {
	89	{
	90	N_("severitysuidcheck"),
	91	sh_suidchk_set_severity
	92	},
	93	{
	94	N_("suidcheckactive"),
	95	sh_suidchk_set_activate
	96	},
	97	{
	98	N_("suidcheckinterval"),
	99	sh_suidchk_set_timer
	100	},
	101	{
	102	N_("suidcheckschedule"),
	103	sh_suidchk_set_schedule
	104	},
	105	{
	106	N_("suidcheckexclude"),
	107	sh_suidchk_set_exclude
	108	},
	109	{
	110	N_("suidcheckfps"),
	111	sh_suidchk_set_fps
	112	},
	113	{
	114	N_("suidcheckyield"),
	115	sh_suidchk_set_yield
	116	},
	117	{
[119]	118	N_("suidchecknosuid"),
	119	sh_suidchk_set_nosuid
	120	},
	121	{
[1]	122	N_("suidcheckquarantinefiles"),
	123	sh_suidchk_set_quarantine
	124	},
	125	{
	126	N_("suidcheckquarantinemethod"),
	127	sh_suidchk_set_qmethod
	128	},
	129	{
	130	N_("suidcheckquarantinedelete"),
	131	sh_suidchk_set_qdelete
	132	},
	133	{
	134	NULL,
	135	NULL
	136	},
	137	};
	138
	139
	140	static time_t lastcheck = (time_t) 0;
	141	static int ShSuidchkActive = S_TRUE;
	142	static time_t ShSuidchkInterval = 7200;
[481]	143	static unsigned long ShSuidchkFps = 0;
[119]	144	static int ShSuidchkNosuid = S_FALSE;
[1]	145	static int ShSuidchkYield = S_FALSE;
	146	static int ShSuidchkQEnable = S_FALSE;
	147	static int ShSuidchkQMethod = SH_Q_CHANGEPERM;
	148	static int ShSuidchkQDelete = S_FALSE;
	149	static int ShSuidchkSeverity = SH_ERR_SEVERE;
	150
	151	static time_t FileLimNow = 0;
	152	static time_t FileLimStart = 0;
[481]	153	static unsigned long FileLimNum = 0;
	154	static unsigned long FileLimTotal = 0;
[1]	155
	156	static sh_schedule_t * ShSuidchkSched = NULL;
	157
[452]	158
	159	static zAVLTree * ShSuidchkExclude = NULL;
	160	static void sh_suid_exclude_free()
	161	{
	162	zAVL_string_reset(ShSuidchkExclude);
	163	ShSuidchkExclude = NULL;
	164	return;
	165	}
	166	static int sh_suid_exclude_add(const char * str)
	167	{
	168	size_t len;
	169	int ret;
	170	char * key = sh_util_strdup(str);
	171
	172	len = sl_strlen (key);
	173	if (len && key[len-1] == '/')
	174	{
	175	key[len-1] = '\0';
	176	}
	177	ret = zAVL_string_set(&ShSuidchkExclude, key);
	178	SH_FREE(key);
	179	return ret;
	180	}
	181
	182
[1]	183	static char *
	184	filesystem_type (char * path, char * relpath, struct stat * statp);
	185
	186	#ifndef PATH_MAX
	187	#define PATH_MAX 1024
	188	#endif
	189
[253]	190	SH_MUTEX_STATIC(mutex_suid_check, PTHREAD_MUTEX_INITIALIZER);
	191
[1]	192	extern unsigned long sh_files_maskof (int class);
	193
[149]	194	static void set_defaults (void)
	195	{
	196	ShSuidchkActive = S_TRUE;
	197	ShSuidchkInterval = 7200;
	198	ShSuidchkFps = 0;
	199	ShSuidchkNosuid = S_FALSE;
	200	ShSuidchkYield = S_FALSE;
	201	ShSuidchkQEnable = S_FALSE;
	202	ShSuidchkQMethod = SH_Q_CHANGEPERM;
	203	ShSuidchkQDelete = S_FALSE;
	204	ShSuidchkSeverity = SH_ERR_SEVERE;
	205	if (ShSuidchkExclude != NULL)
[474]	206	sh_suid_exclude_free();
[149]	207
	208	FileLimNow = 0;
	209	FileLimStart = 0;
	210	FileLimNum = 0;
	211	FileLimTotal = 0;
	212
	213	return;
	214	}
	215
[1]	216	/* Recursively descend into the directory to make sure that
	217	* there is no symlink in the path.
[317]	218	*
	219	* Use retry_lstat_ns() here because we cannot chdir the subprocess
	220	* that does the lstat().
[1]	221	*/
	222	static int do_truncate_int (char * path, int depth)
	223	{
	224	char * q;
	225	struct stat one;
	226	struct stat two;
	227	int fd;
[132]	228	char errbuf[SH_ERRBUF_SIZE];
[1]	229
	230	if (depth > 99)
	231	{
[253]	232	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	233	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	234	MSG_SUID_ERROR,
	235	_("do_truncate: max depth 99 exceeded"));
[253]	236	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	237	return -1;
	238	}
	239	++depth;
	240	if (path[0] != '/')
	241	{
[253]	242	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	243	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	244	MSG_SUID_ERROR,
	245	_("do_truncate: not an absolute path"));
[253]	246	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	247	return -1;
	248	}
	249	++path;
	250	q = strchr(path, '/');
	251	if (q)
	252	{
	253	*q = '\0';
[317]	254	if (0 != retry_lstat_ns(FIL__, __LINE__, path, &one))
[1]	255	{
[253]	256	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	257	sh_error_handle ((-1), FIL__, __LINE__, errno,
	258	MSG_SUID_ERROR,
[132]	259	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	260	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	261	*q = '/';
	262	return -1;
	263	}
	264	if (/@-usedef@/!S_ISDIR(one.st_mode)/@+usedef@/)
	265
	266	{
[253]	267	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	268	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	269	MSG_SUID_ERROR,
	270	_("Possible race: not a directory"));
[253]	271	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	272	*q = '/';
	273	return -1;
	274	}
	275
	276
	277	if (0 != chdir(path))
	278	{
[253]	279	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	280	sh_error_handle ((-1), FIL__, __LINE__, errno,
	281	MSG_SUID_ERROR,
[132]	282	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	283	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	284	*q = '/';
	285	return -1;
	286	}
	287	*q = '/';
[317]	288	if (0 != retry_lstat_ns(FIL__, __LINE__, ".", &two))
[1]	289	{
[405]	290	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	291	sh_error_handle ((-1), FIL__, __LINE__, errno,
	292	MSG_SUID_ERROR,
[132]	293	sh_error_message(errno, errbuf, sizeof(errbuf)));
[405]	294	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	295	return -1;
	296	}
	297	if (/@-usedef@/(one.st_dev != two.st_dev) \|\|
	298	(one.st_ino != two.st_ino) \|\|
	299	(!S_ISDIR(two.st_mode))/@+usedef@/)
	300	{
[253]	301	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	302	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	303	MSG_SUID_ERROR,
	304	_("Possible race: lstat(dir) != lstat(.)"));
[253]	305	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	306	return -1;
	307	}
	308
	309
	310	return (do_truncate_int(q, depth));
	311	}
	312	else
	313	{
	314	/* no more '/', so this is the file
	315	*/
	316	if (*path == '\0')
	317	return -1;
[317]	318	if (0 != retry_lstat_ns(FIL__, __LINE__, path, &one))
[1]	319	{
[253]	320	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	321	sh_error_handle ((-1), FIL__, __LINE__, errno,
	322	MSG_SUID_ERROR,
[132]	323	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	324	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	325	return -1;
	326	}
	327	fd = open(path, O_RDWR);
	328	if (-1 == fd)
	329	{
[253]	330	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	331	sh_error_handle ((-1), FIL__, __LINE__, errno,
	332	MSG_SUID_ERROR,
[132]	333	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	334	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	335	return -1;
	336	}
	337	if (0 != retry_fstat(FIL__, __LINE__, fd, &two))
	338	{
[253]	339	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	340	sh_error_handle ((-1), FIL__, __LINE__, errno,
	341	MSG_SUID_ERROR,
[132]	342	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	343	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	344	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	345	return -1;
	346	}
	347	if (/@-usedef@/(one.st_dev != two.st_dev) \|\|
	348	(one.st_ino != two.st_ino)/@+usedef@/)
	349	{
[253]	350	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	351	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	352	MSG_SUID_ERROR,
	353	_("Possible race: lstat != fstat"));
[253]	354	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	355	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	356	return -1;
	357	}
	358	if (!S_ISREG(two.st_mode))
	359	{
[253]	360	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	361	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	362	MSG_SUID_ERROR,
	363	_("Possible race: not a regular file"));
[253]	364	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	365	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	366	return -1;
	367	}
	368	if ((0 == (two.st_mode & S_ISUID)) && (0 == (two.st_mode & S_ISGID)))
	369	{
[253]	370	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	371	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	372	MSG_SUID_ERROR,
	373	_("Possible race: not a suid/sgid file"));
[253]	374	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	375	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	376	return -1;
	377	}
	378	if (ShSuidchkQDelete == S_FALSE)
	379	{
	380	if ((two.st_mode & S_ISUID) > 0)
	381	two.st_mode -= S_ISUID;
	382	if ((two.st_mode & S_ISGID) > 0)
	383	two.st_mode -= S_ISGID;
	384	#ifdef HAVE_FCHMOD
	385	if (-1 == /@-unrecog@/fchmod(fd, two.st_mode)/@+unrecog@/)
	386	{
[253]	387	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	388	sh_error_handle ((-1), FIL__, __LINE__, errno,
	389	MSG_SUID_ERROR,
[132]	390	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	391	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	392	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	393	return -1;
	394	}
	395	#else
[253]	396	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	397	sh_error_handle ((-1), FIL__, __LINE__, errno,
	398	MSG_SUID_ERROR,
	399	_("The fchmod() function is not available"));
[253]	400	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	401	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	402	return -1;
	403	#endif
	404	if (two.st_nlink > 1)
	405	{
[253]	406	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	407	sh_error_handle ((-1), FIL__, __LINE__, 0,
	408	MSG_SUID_ERROR,
	409	_("Not truncated because hardlink count gt 1"));
[253]	410	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	411	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	412	return -1;
	413	}
	414	/* The man page says: 'POSIX has ftruncate'
	415	*/
	416	if (-1 == /@-unrecog@/ftruncate(fd, 0)/@+unrecog@/)
	417	{
[253]	418	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	419	sh_error_handle ((-1), FIL__, __LINE__, errno,
	420	MSG_SUID_ERROR,
[132]	421	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	422	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	423	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	424	return -1;
	425	}
	426	}
	427	else
	428	{
	429	if (-1 == retry_aud_unlink(FIL__, __LINE__, path))
	430	{
[253]	431	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	432	sh_error_handle ((-1), FIL__, __LINE__, errno,
	433	MSG_SUID_ERROR,
[132]	434	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	435	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[252]	436	(void) sl_close_fd(FIL__, __LINE__, fd);
[1]	437	return -1;
	438	}
	439	}
[252]	440	(void) sl_close_fd (FIL__, __LINE__, fd);
[1]	441	return (0);
	442	}
	443	}
	444
[94]	445	static int do_truncate (const char * path_in)
[1]	446	{
[253]	447	volatile int caperr;
[94]	448	int result;
	449	char * path;
[132]	450	char errbuf[SH_ERRBUF_SIZE];
[1]	451
	452	if (0 != chdir("/"))
	453	{
[253]	454	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	455	sh_error_handle ((-1), FIL__, __LINE__, errno,
	456	MSG_SUID_ERROR,
[132]	457	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	458	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	459	}
	460
	461	if (0 != (caperr = sl_get_cap_qdel()))
	462	{
[253]	463	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	464	sh_error_handle((-1), FIL__, __LINE__, caperr, MSG_E_SUBGEN,
[132]	465	sh_error_message (caperr, errbuf, sizeof(errbuf)),
[1]	466	_("sl_get_cap_qdel"));
[253]	467	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	468	}
	469
[94]	470	path = sh_util_strdup (path_in);
[1]	471	result = do_truncate_int (path, 0);
[94]	472	SH_FREE(path);
[1]	473
	474	if (0 != (caperr = sl_drop_cap_qdel()))
	475	{
[253]	476	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	477	sh_error_handle((-1), FIL__, __LINE__, caperr, MSG_E_SUBGEN,
[132]	478	sh_error_message (caperr, errbuf, sizeof(errbuf)),
[1]	479	_("sl_drop_cap_qdel"));
[253]	480	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	481	}
	482
	483	if (0 != chdir("/"))
	484	{
[253]	485	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	486	sh_error_handle ((-1), FIL__, __LINE__, errno,
	487	MSG_SUID_ERROR,
[132]	488	sh_error_message(errno, errbuf, sizeof(errbuf)));
[253]	489	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	490	}
	491	return result;
	492	}
	493
[253]	494	/* This variable is not used anywhere. It only exists
	495	* to assign &dirlist to it, which keeps gcc from
	496	* putting it into a register, and avoids the 'clobbered
	497	* by longjmp' warning. And no, 'volatile' proved insufficient.
	498	*/
	499	static void * sh_dummy_tmp = NULL;
	500
[94]	501	static void sh_q_delete(const char * fullpath)
	502	{
	503	int status;
	504	char * msg;
	505	char * tmp;
	506
[253]	507	/* Take the address to keep gcc from putting it into a register.
	508	* Avoids the 'clobbered by longjmp' warning.
	509	*/
	510	sh_dummy_tmp = (void*) &tmp;
	511
[94]	512	if (do_truncate (fullpath) == -1)
	513	{
	514	status = errno;
	515	msg = SH_ALLOC(SH_BUFSIZE);
	516	tmp = sh_util_safe_name(fullpath);
	517
	518	(void) sl_snprintf(msg, SH_BUFSIZE,
	519	_("Problem quarantining file. File NOT quarantined. errno = %ld"),
	520	status);
[253]	521	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	522	sh_error_handle (ShSuidchkSeverity,
	523	FIL__, __LINE__,
	524	status,
	525	MSG_SUID_QREPORT, msg,
	526	tmp );
[253]	527	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	528	SH_FREE(tmp);
	529	SH_FREE(msg);
	530	}
	531	else
	532	{
	533	tmp = sh_util_safe_name(fullpath);
[253]	534	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	535	sh_error_handle (ShSuidchkSeverity,
	536	FIL__, __LINE__, 0,
	537	MSG_SUID_QREPORT,
	538	_("Quarantine method applied"),
	539	tmp );
[253]	540	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	541	SH_FREE(tmp);
	542	}
	543	return;
	544	}
	545
[253]	546	/* This variable is not used anywhere. It only exists
	547	* to assign &dirlist to it, which keeps gcc from
	548	* putting it into a register, and avoids the 'clobbered
	549	* by longjmp' warning. And no, 'volatile' proved insufficient.
	550	*/
	551	static void * sh_dummy_mtmp = NULL;
	552	static void * sh_dummy_mmsg = NULL;
	553
[94]	554	static void sh_q_move(const char * fullpath, file_type * theFile,
	555	const char * timestrc, const char * timestra,
	556	const char * timestrm)
	557	{
[253]	558	volatile int status;
[94]	559	int readFile = -1;
[253]	560	volatile int writeFile = -1;
[94]	561	struct stat fileInfo;
	562	ssize_t count;
	563	char * msg;
	564	char * tmp;
	565	char * basetmp;
	566	char * filetmp;
	567	char buffer[1024];
	568	char * dir = SH_ALLOC(PATH_MAX+1);
	569	mode_t umask_old;
	570	FILE * filePtr = NULL;
	571
[253]	572	/* Take the address to keep gcc from putting it into a register.
	573	* Avoids the 'clobbered by longjmp' warning.
	574	*/
	575	sh_dummy_mtmp = (void*) &tmp;
	576	sh_dummy_mmsg = (void*) &msg;
	577
[94]	578	(void) sl_strlcpy (dir, DEFAULT_QDIR, PATH_MAX+1);
	579
	580	if (retry_stat (FIL__, __LINE__, dir, &fileInfo) != 0)
	581	{
	582	/* Quarantine directory does not exist,
	583	*/
	584	status = errno;
	585	msg = SH_ALLOC(SH_BUFSIZE);
	586	tmp = sh_util_safe_name(fullpath);
	587
	588	(void) sl_snprintf(msg, SH_BUFSIZE,
	589	_("Problem quarantining file. File NOT quarantined. errno = %ld (stat)"),
	590	status);
[253]	591	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	592	sh_error_handle (ShSuidchkSeverity,
	593	FIL__, __LINE__,
	594	status,
	595	MSG_SUID_QREPORT, msg,
	596	tmp );
[253]	597	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	598	SH_FREE(tmp);
	599	SH_FREE(msg);
	600	}
	601	else
	602	{
	603	if (retry_lstat (FIL__, __LINE__,
	604	fullpath, &fileInfo) == -1)
	605	{
	606	status = errno;
	607	msg = SH_ALLOC(SH_BUFSIZE);
	608	tmp = sh_util_safe_name(fullpath);
	609
	610	(void) sl_snprintf(msg, SH_BUFSIZE, _("I/O error. errno = %ld(stat)"), status);
[253]	611	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	612	sh_error_handle (ShSuidchkSeverity,
	613	FIL__, __LINE__,
	614	status,
	615	MSG_SUID_QREPORT,
	616	msg, tmp );
[253]	617	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	618	SH_FREE(tmp);
	619	SH_FREE(msg);
	620	}
	621	else
	622	{
	623	basetmp = sh_util_strdup(fullpath);
	624	filetmp = SH_ALLOC(PATH_MAX+1);
	625	tmp = sh_util_basename(basetmp);
	626
	627	(void) sl_snprintf(filetmp, PATH_MAX+1, "%s/%s",
	628	DEFAULT_QDIR, tmp);
	629	SH_FREE(tmp);
	630	SH_FREE(basetmp);
	631
	632	readFile = open (fullpath, O_RDONLY);
	633	if (readFile != -1)
[166]	634	writeFile = open (filetmp, O_WRONLY\|O_CREAT, S_IRUSR\|S_IWUSR\|S_IXUSR);
[94]	635
	636	if ((readFile == -1) \|\| (writeFile == -1))
	637	{
	638	status = errno;
	639	msg = SH_ALLOC(SH_BUFSIZE);
	640	tmp = sh_util_safe_name(fullpath);
	641
	642	(void) sl_snprintf(msg, SH_BUFSIZE, _("Problem quarantining file. File NOT quarantined. errno = %ld (open)"), status);
[253]	643	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	644	sh_error_handle (ShSuidchkSeverity,
	645	FIL__, __LINE__, status,
	646	MSG_SUID_QREPORT,
	647	msg, tmp );
[253]	648	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	649	SH_FREE(tmp);
	650	SH_FREE(msg);
	651	}
	652	else
	653	{
	654	/* sizeof(buffer) is 1024
	655	*/
	656	while ((count = (int) read (readFile, buffer, sizeof (buffer))) > 0)
	657	{
	658	if ((int) write (writeFile, buffer, (size_t) count) != count)
	659	{
	660	status = errno;
	661	msg = SH_ALLOC(SH_BUFSIZE);
	662	tmp = sh_util_safe_name(fullpath);
	663
	664	(void) sl_snprintf(msg, SH_BUFSIZE,
	665	_("I/O error. errno = %ld (write)"), status);
[253]	666	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	667	sh_error_handle (ShSuidchkSeverity,
	668	FIL__,
	669	__LINE__,
	670	status,
	671	MSG_SUID_QREPORT,
	672	msg, tmp );
[253]	673	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	674	SH_FREE(tmp);
	675	SH_FREE(msg);
	676	}
	677	}
	678	}
	679
[252]	680	(void) sl_close_fd (FIL__, __LINE__, readFile);
[94]	681	(void) fchmod(writeFile, S_IRUSR \| S_IWUSR \| S_IXUSR);
[252]	682	(void) sl_close_fd (FIL__, __LINE__, writeFile);
[94]	683
	684	if (do_truncate (fullpath) == -1)
	685	{
	686	status = errno;
	687	msg = SH_ALLOC(SH_BUFSIZE);
	688	tmp = sh_util_safe_name(fullpath);
	689
	690	(void) sl_snprintf(msg, SH_BUFSIZE,
	691	_("Problem quarantining file. File NOT quarantined. errno = %ld"),
	692	status);
[253]	693	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	694	sh_error_handle (ShSuidchkSeverity,
	695	FIL__, __LINE__, status,
	696	MSG_SUID_QREPORT,
	697	msg, tmp );
[253]	698	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	699	SH_FREE(tmp);
	700	SH_FREE(msg);
	701	}
	702	else
	703	{
	704	tmp = sh_util_basename(fullpath);
	705
	706	(void) sl_snprintf(filetmp, PATH_MAX+1, "%s/%s.info",
	707	DEFAULT_QDIR,
	708	tmp);
	709
	710	SH_FREE(tmp);
	711	/*
	712	* avoid chmod by setting umask
	713	*/
	714	umask_old = umask (0077);
	715	filePtr = fopen (filetmp, "w+");
	716
	717	/@-usedef@/
	718	if (filePtr)
	719	{
	720	fprintf(filePtr,
	721	_("File Info:\n filename=%s\n size=%lu\n owner=%s(%d)\n group=%s(%d)\n ctime=%s\n atime=%s\n mtime=%s\n"),
	722	fullpath,
	723	(unsigned long) theFile->size,
	724	theFile->c_owner, (int) theFile->owner,
	725	theFile->c_group, (int) theFile->group,
	726	timestrc, timestra, timestrm);
[252]	727	(void) sl_fclose (FIL__, __LINE__, filePtr);
[94]	728	}
	729	/@+usedef@/
	730	umask (umask_old);
	731
	732	tmp = sh_util_safe_name(fullpath);
[253]	733	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	734	sh_error_handle (ShSuidchkSeverity,
	735	FIL__,__LINE__,
	736	0, MSG_SUID_QREPORT,
	737	_("Quarantine method applied"),
	738	tmp );
[253]	739	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	740	SH_FREE(tmp);
	741	}
	742	SH_FREE(filetmp);
	743	}
	744	}
	745	SH_FREE(dir);
	746	return;
	747	}
	748
[253]	749	/* This variable is not used anywhere. It only exists
	750	* to assign &dirlist to it, which keeps gcc from
	751	* putting it into a register, and avoids the 'clobbered
	752	* by longjmp' warning. And no, 'volatile' proved insufficient.
	753	*/
	754	static void * sh_dummy_ctmp = NULL;
	755	static void * sh_dummy_cmsg = NULL;
	756
[94]	757	static void sh_q_changeperm(const char * fullpath)
	758	{
[253]	759	volatile int caperr;
	760	volatile int status;
[94]	761	char * msg;
	762	char * tmp;
	763	struct stat fileInfo;
	764	struct stat fileInfo_F;
	765	int cperm_status = 0;
[253]	766	volatile int file_d = -1;
[132]	767	char errbuf[SH_ERRBUF_SIZE];
[94]	768
[253]	769	/* Take the address to keep gcc from putting it into a register.
	770	* Avoids the 'clobbered by longjmp' warning.
	771	*/
	772	sh_dummy_ctmp = (void*) &tmp;
	773	sh_dummy_cmsg = (void*) &msg;
	774
[94]	775	if (retry_lstat(FIL__, __LINE__, fullpath, &fileInfo) == -1)
	776	{
	777	status = errno;
	778	msg = SH_ALLOC(SH_BUFSIZE);
	779	tmp = sh_util_safe_name(fullpath);
	780
	781	(void) sl_snprintf(msg, SH_BUFSIZE, _("I/O error. errno = %ld"), status);
[253]	782	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	783	sh_error_handle (ShSuidchkSeverity,
	784	FIL__, __LINE__,
	785	status,
	786	MSG_SUID_QREPORT, msg,
	787	tmp );
[253]	788	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	789	SH_FREE(tmp);
	790	SH_FREE(msg);
	791	cperm_status = -1;
	792	}
	793
	794	if (cperm_status == 0)
	795	{
	796	if (0 != (caperr = sl_get_cap_qdel()))
	797	{
[253]	798	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	799	sh_error_handle((-1), FIL__, __LINE__,
	800	caperr, MSG_E_SUBGEN,
[132]	801	sh_error_message (caperr, errbuf, sizeof(errbuf)),
[94]	802	_("sl_get_cap_qdel"));
[253]	803	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	804	cperm_status = -1;
	805	}
	806	}
	807
	808	if (cperm_status == 0)
	809	{
	810	file_d = aud_open (FIL__, __LINE__, SL_YESPRIV,
	811	fullpath, O_RDONLY, 0);
	812	if (-1 == file_d)
	813	{
	814	status = errno;
	815	msg = SH_ALLOC(SH_BUFSIZE);
	816	tmp = sh_util_safe_name(fullpath);
	817
	818	(void) sl_snprintf(msg, SH_BUFSIZE, _("I/O error. errno = %ld"), status);
[253]	819	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	820	sh_error_handle (ShSuidchkSeverity,
	821	FIL__, __LINE__,
	822	status,
	823	MSG_SUID_QREPORT, msg,
	824	tmp );
[253]	825	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	826	SH_FREE(tmp);
	827	SH_FREE(msg);
	828	cperm_status = -1;
	829	}
	830	}
	831
	832	if (cperm_status == 0)
	833	{
	834	if (retry_fstat(FIL__, __LINE__, file_d, &fileInfo_F) == -1)
	835	{
	836	status = errno;
	837	msg = SH_ALLOC(SH_BUFSIZE);
	838	tmp = sh_util_safe_name(fullpath);
	839
	840	(void) sl_snprintf(msg, SH_BUFSIZE,
	841	_("I/O error. errno = %ld"), status);
[253]	842	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	843	sh_error_handle (ShSuidchkSeverity,
	844	FIL__, __LINE__,
	845	status,
	846	MSG_SUID_QREPORT, msg,
	847	tmp );
[253]	848	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	849	SH_FREE(tmp);
	850	SH_FREE(msg);
	851	cperm_status = -1;
	852	}
	853	}
	854
	855	if (cperm_status == 0)
	856	{
	857	if (fileInfo_F.st_ino != fileInfo.st_ino \|\|
	858	fileInfo_F.st_dev != fileInfo.st_dev \|\|
	859	fileInfo_F.st_mode != fileInfo.st_mode)
	860	{
	861	status = errno;
	862	msg = SH_ALLOC(SH_BUFSIZE);
	863	tmp = sh_util_safe_name(fullpath);
	864
	865	(void) sl_snprintf(msg, SH_BUFSIZE,
	866	_("Race detected. errno = %ld"), status);
[253]	867	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	868	sh_error_handle (ShSuidchkSeverity,
	869	FIL__, __LINE__,
	870	status,
	871	MSG_SUID_QREPORT, msg,
	872	tmp );
[253]	873	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	874	SH_FREE(tmp);
	875	SH_FREE(msg);
	876	cperm_status = -1;
	877	}
	878	}
	879
	880	if ((fileInfo.st_mode & S_ISUID) > 0)
	881	fileInfo.st_mode -= S_ISUID;
	882	if ((fileInfo.st_mode & S_ISGID) > 0)
	883	fileInfo.st_mode -= S_ISGID;
	884
	885	if (cperm_status == 0)
	886	{
	887	if (fchmod(file_d, fileInfo.st_mode) == -1)
	888	{
	889	status = errno;
	890	msg = SH_ALLOC(SH_BUFSIZE);
	891	tmp = sh_util_safe_name(fullpath);
	892
	893	(void) sl_snprintf(msg, SH_BUFSIZE,
	894	_("Problem quarantining file. File NOT quarantined. errno = %ld"),
	895	status);
[253]	896	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	897	sh_error_handle (ShSuidchkSeverity,
	898	FIL__, __LINE__,
	899	status,
	900	MSG_SUID_QREPORT,
	901	msg, tmp );
[253]	902	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	903	SH_FREE(tmp);
	904	SH_FREE(msg);
	905	}
	906	else
	907	{
	908	tmp = sh_util_safe_name(fullpath);
[253]	909	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	910	sh_error_handle (ShSuidchkSeverity,
	911	FIL__, __LINE__,
	912	0,
	913	MSG_SUID_QREPORT,
	914	_("Quarantine method applied"),
	915	tmp );
[253]	916	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	917	SH_FREE(tmp);
	918	}
	919	}
	920
	921	if (0 != (caperr = sl_drop_cap_qdel()))
	922	{
[253]	923	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	924	sh_error_handle((-1), FIL__, __LINE__,
	925	caperr, MSG_E_SUBGEN,
[132]	926	sh_error_message (caperr, errbuf, sizeof(errbuf)),
[94]	927	_("sl_drop_cap_qdel"));
[253]	928	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	929	}
	930
	931	if (file_d != -1)
	932	{
	933	do {
[252]	934	status = sl_close_fd (FIL__, __LINE__, file_d);
[94]	935	} while (status == -1 && errno == EINTR);
	936
	937	if (-1 == status)
	938	{
	939	status = errno;
	940	msg = SH_ALLOC(SH_BUFSIZE);
	941	tmp = sh_util_safe_name(fullpath);
	942
	943	(void) sl_snprintf(msg, SH_BUFSIZE,
	944	_("I/O error. errno = %ld"), status);
[253]	945	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	946	sh_error_handle (ShSuidchkSeverity,
	947	FIL__, __LINE__,
	948	status,
	949	MSG_SUID_QREPORT, msg,
	950	tmp );
[253]	951	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	952	SH_FREE(tmp);
	953	SH_FREE(msg);
	954	}
	955	}
	956	return;
	957	}
	958
	959	static void report_file (const char * tmpcat, file_type * theFile,
	960	char * timestrc, char * timestra, char * timestrm)
	961	{
	962	char * msg = SH_ALLOC(SH_BUFSIZE);
	963	char * tmp = sh_util_safe_name(tmpcat);
	964
	965	msg[0] = '\0';
	966	/@-usedef@/
[132]	967
[94]	968	#ifdef SH_USE_XML
	969	(void) sl_snprintf(msg, SH_BUFSIZE, _("owner_new=\"%s\" iowner_new=\"%ld\" group_new=\"%s\" igroup_new=\"%ld\" size_new=\"%lu\" ctime_new=\"%s\" atime_new=\"%s\" mtime_new=\"%s\""),
	970	theFile->c_owner, theFile->owner,
	971	theFile->c_group, theFile->group,
	972	(unsigned long) theFile->size,
	973	timestrc, timestra, timestrm);
	974	#else
	975	(void) sl_snprintf(msg, SH_BUFSIZE, _("owner_new=<%s>, iowner_new=<%ld>, group_new=<%s>, igroup_new=<%ld>, filesize=<%lu>, ctime=<%s>, atime=<%s>, mtime=<%s>"),
	976	theFile->c_owner, theFile->owner,
	977	theFile->c_group, theFile->group,
	978	(unsigned long) theFile->size,
	979	timestrc, timestra, timestrm);
	980	#endif
	981	/@+usedef@/
	982
[253]	983	SH_MUTEX_LOCK(mutex_thread_nolog);
[94]	984	sh_error_handle (ShSuidchkSeverity, FIL__, __LINE__,
	985	0, MSG_SUID_POLICY,
	986	_("suid/sgid file not in database"),
	987	tmp, msg );
[253]	988	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[94]	989	SH_FREE(tmp);
	990	SH_FREE(msg);
	991	return;
	992	}
	993
[253]	994	/* This variable is not used anywhere. It only exists
	995	* to assign &dirlist to it, which keeps gcc from
	996	* putting it into a register, and avoids the 'clobbered
	997	* by longjmp' warning. And no, 'volatile' proved insufficient.
	998	*/
[516]	999	void * sh_dummy_idirlist = NULL;
	1000	void * sh_dummy_itmp = NULL;
[253]	1001
	1002
[1]	1003	static
	1004	int sh_suidchk_check_internal (char * iname)
	1005	{
	1006	DIR * thisDir = NULL;
	1007	struct dirent * thisEntry;
	1008	char * tmpcat;
	1009	char * tmp;
	1010	char timestrc[32];
	1011	char timestra[32];
	1012	char timestrm[32];
	1013	struct stat buf;
[253]	1014	volatile int status;
[115]	1015	int fflags;
[1]	1016	char * fs;
[253]	1017	volatile long sl_status;
[227]	1018	file_type * theFile = NULL;
[19]	1019	char fileHash[2*(KEY_LEN + 1)];
[1]	1020
[170]	1021	struct sh_dirent * dirlist;
	1022	struct sh_dirent * dirlist_orig;
[132]	1023	char errbuf[SH_ERRBUF_SIZE];
[22]	1024
[1]	1025	SL_ENTER(_("sh_suidchk_check_internal"));
	1026
[253]	1027	/* Take the address to keep gcc from putting it into a register.
	1028	* Avoids the 'clobbered by longjmp' warning.
	1029	*/
[516]	1030	sh_dummy_idirlist = (void*) &dirlist;
	1031	sh_dummy_itmp = (void*) &tmp;
[253]	1032
[1]	1033	if (iname == NULL)
	1034	{
	1035	TPT((0, FIL__, __LINE__ , _("msg=<directory name is NULL>\n")));
	1036	SL_RETURN( (-1), _("sh_suidchk_check_internal"));
	1037	}
	1038
	1039	if (sig_urgent > 0) {
	1040	SL_RETURN( (0), _("sh_suidchk_check_internal"));
	1041	}
	1042
	1043	thisDir = opendir (iname);
	1044
	1045	if (thisDir == NULL)
	1046	{
	1047	status = errno;
	1048	tmp = sh_util_safe_name(iname);
[253]	1049	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1050	sh_error_handle (ShDFLevel[SH_ERR_T_DIR], FIL__, __LINE__, status,
	1051	MSG_E_OPENDIR,
[132]	1052	sh_error_message (status, errbuf, sizeof(errbuf)), tmp);
[253]	1053	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1054	SH_FREE(tmp);
	1055	SL_RETURN( (-1), _("sh_suidchk_check_internal"));
	1056	}
	1057
[94]	1058	/* Loop over directory entries
	1059	*/
[137]	1060	SH_MUTEX_LOCK(mutex_readdir);
[131]	1061
[170]	1062	dirlist = NULL;
	1063	dirlist_orig = NULL;
	1064
[1]	1065	do {
	1066
	1067	thisEntry = readdir (thisDir);
	1068
	1069	if (thisEntry != NULL) {
	1070
	1071	if (sl_strcmp (thisEntry->d_name, ".") == 0)
	1072	continue;
	1073
	1074	if (sl_strcmp (thisEntry->d_name, "..") == 0)
	1075	continue;
	1076
[131]	1077	dirlist = addto_sh_dirlist (thisEntry, dirlist);
	1078	}
[1]	1079
[131]	1080	} while (thisEntry != NULL);
[94]	1081
[137]	1082	SH_MUTEX_UNLOCK(mutex_readdir);
[94]	1083
[131]	1084	closedir(thisDir);
[1]	1085
[131]	1086	dirlist_orig = dirlist;
[1]	1087
[170]	1088	sl_status = SL_ENONE;
	1089
[131]	1090	do {
	1091
	1092	/* If the directory is empty, dirlist = NULL
	1093	*/
	1094	if (!dirlist)
	1095	break;
	1096
[143]	1097	if (sig_urgent > 0) {
	1098	SL_RETURN( (0), _("sh_suidchk_check_internal"));
	1099	}
	1100
[131]	1101	tmpcat = SH_ALLOC(PATH_MAX);
	1102	(void) sl_strlcpy(tmpcat, iname, PATH_MAX);
	1103
	1104	if ((sl_strlen(tmpcat) != sl_strlen(iname)) \|\| (tmpcat[0] == '\0'))
	1105	{
	1106	sl_status = SL_ETRUNC;
	1107	}
	1108	else
	1109	{
	1110	if (tmpcat[1] != '\0')
	1111	sl_status = sl_strlcat(tmpcat, "/", PATH_MAX);
	1112	}
	1113
	1114	if (! SL_ISERROR(sl_status))
	1115	sl_status = sl_strlcat(tmpcat, dirlist->sh_d_name, PATH_MAX);
	1116
	1117	if (SL_ISERROR(sl_status))
	1118	{
	1119	tmp = sh_util_safe_name(tmpcat);
[253]	1120	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1121	sh_error_handle ((-1), FIL__, __LINE__, (int) sl_status,
	1122	MSG_E_SUBGPATH,
	1123	_("path too long"),
	1124	_("sh_suidchk_check_internal"), tmp );
[253]	1125	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1126	SH_FREE(tmp);
[227]	1127	SH_FREE(tmpcat);
[131]	1128	dirlist = dirlist->next;
	1129	continue;
	1130	}
	1131
	1132	++FileLimNum;
	1133	++FileLimTotal;
	1134
	1135	/* Rate limit (Fps == Files per second)
	1136	*/
[481]	1137	if ((ShSuidchkFps > 0 && FileLimNum > ShSuidchkFps) &&
[131]	1138	(ShSuidchkYield == S_FALSE))
	1139	{
	1140	FileLimNum = 0;
	1141	FileLimNow = time(NULL);
	1142
	1143	if ( (FileLimNow - FileLimStart) > 0 &&
	1144	FileLimTotal/(FileLimNow - FileLimStart) > ShSuidchkFps )
	1145	(void) retry_msleep((int)((FileLimTotal/(FileLimNow-FileLimStart))/
	1146	ShSuidchkFps) , 0);
	1147	}
[516]	1148
[131]	1149	status = (int) retry_lstat(FIL__, __LINE__, tmpcat, &buf);
[1]	1150
[131]	1151	if (status != 0)
	1152	{
[253]	1153	volatile int elevel = SH_ERR_ERR;
[252]	1154	size_t tlen;
	1155
[131]	1156	status = errno;
	1157	tmp = sh_util_safe_name(tmpcat);
[252]	1158	tlen = strlen(tmp);
	1159	if (tlen >= 6 && 0 == strcmp(&tmp[tlen-6], _("/.gvfs")))
	1160	elevel = SH_ERR_NOTICE;
[453]	1161	else if (tlen >= 5 && 0 == strcmp(&tmp[tlen-5], _("/gvfs")))
[452]	1162	elevel = SH_ERR_NOTICE;
[406]	1163
	1164	/* If we are scanning a temporary directory where dirs and files
	1165	* can be created/deleted, an lstat() error is something which
	1166	* may occur frequently. As a missing dir/file is not an important
	1167	* problem for the suidcheck, the error level is only SH_ERR_NOTICE.
	1168	*/
	1169	if (status == ENOENT)
	1170	elevel = SH_ERR_NOTICE;
	1171
[253]	1172	SH_MUTEX_LOCK(mutex_thread_nolog);
[252]	1173	sh_error_handle (elevel, FIL__, __LINE__, status, MSG_ERR_LSTAT,
[132]	1174	sh_error_message(status, errbuf, sizeof(errbuf)),
[252]	1175	tmp );
[253]	1176	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1177	SH_FREE(tmp);
	1178	}
	1179	else
	1180	{
	1181	if (/@-usedef@/S_ISDIR(buf.st_mode)/@+usedef@/ &&
	1182	(ShSuidchkExclude == NULL \|\|
[452]	1183	NULL == zAVL_string_get(ShSuidchkExclude, tmpcat)))
[131]	1184	{
	1185	/* fs is a STATIC string or NULL
	1186	*/
	1187	fs = filesystem_type (tmpcat, tmpcat, &buf);
[516]	1188
[131]	1189	if (fs != NULL
[30]	1190	#ifndef SH_SUIDTESTDIR
[131]	1191	&&
	1192	0 != strncmp (_("afs"), fs, 3) &&
	1193	0 != strncmp (_("devfs"), fs, 5) &&
[231]	1194	0 != strncmp (_("fdesc"), fs, 5) &&
[131]	1195	0 != strncmp (_("iso9660"), fs, 7) &&
[231]	1196	0 != strncmp (_("cd9660"), fs, 6) &&
[131]	1197	0 != strncmp (_("lustre"), fs, 6) &&
	1198	0 != strncmp (_("mmfs"), fs, 4) &&
	1199	0 != strncmp (_("msdos"), fs, 5) &&
	1200	0 != strncmp (_("nfs"), fs, 3) &&
	1201	0 != strncmp (_("proc"), fs, 4) &&
[231]	1202	0 != strncmp (_("sysfs"), fs, 5) &&
[131]	1203	0 != strncmp (_("vfat"), fs, 4)
[30]	1204	#endif
[131]	1205	)
	1206	{
	1207	if ((ShSuidchkNosuid == S_TRUE) \|\|
	1208	(0 != strncmp (_("nosuid"), fs, 6)))
	1209	/* fprintf(stderr, "%s: %s\n", fs, tmpcat); */
	1210	(void) sh_suidchk_check_internal(tmpcat);
	1211	}
	1212	}
	1213	else if (S_ISREG(buf.st_mode) &&
	1214	(0 !=(S_ISUID & buf.st_mode) \|\|
[1]	1215	#if defined(HOST_IS_LINUX)
[131]	1216	(0 !=(S_ISGID & buf.st_mode) &&
	1217	0 !=(S_IXGRP & buf.st_mode))
[1]	1218	#else
[131]	1219	0 !=(S_ISGID & buf.st_mode)
[1]	1220	#endif
[131]	1221	)
	1222	)
	1223	{
[370]	1224	int dummy;
	1225	int class;
[481]	1226	unsigned long check_flags = 0;
[370]	1227
[227]	1228	theFile = SH_ALLOC(sizeof(file_type));
	1229
	1230	(void) sl_strlcpy (theFile->fullpath, tmpcat, PATH_MAX);
[481]	1231	theFile->check_flags = sh_files_maskof(SH_LEVEL_READONLY);
[227]	1232	CLEAR_SH_FFLAG_REPORTED(theFile->file_reported);
	1233	theFile->attr_string = NULL;
	1234	theFile->link_path = NULL;
[131]	1235
[481]	1236	sh_files_search_file(tmpcat, &class, &check_flags, &dummy);
	1237	if ((check_flags & MODI_PREL) != 0)
	1238	MODI_SET(theFile->check_flags, MODI_PREL);
[370]	1239
[131]	1240	status = sh_unix_getinfo (ShDFLevel[SH_ERR_T_RO],
[138]	1241	dirlist->sh_d_name,
[227]	1242	theFile, fileHash, 0);
[131]	1243
	1244	tmp = sh_util_safe_name(tmpcat);
	1245
	1246	if (status != 0)
	1247	{
[253]	1248	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1249	sh_error_handle (ShSuidchkSeverity, FIL__, __LINE__,
	1250	0, MSG_E_SUBGPATH,
	1251	_("Could not check suid/sgid file"),
	1252	_("sh_suidchk_check_internal"),
	1253	tmp);
[253]	1254	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1255	}
	1256	else
	1257	{
	1258
	1259	if ( sh.flag.update == S_TRUE &&
	1260	(sh.flag.checkSum == SH_CHECK_INIT \|\|
	1261	sh.flag.checkSum == SH_CHECK_CHECK))
	1262	{
[253]	1263	int compret;
	1264
[131]	1265	/* Updating database. Report new files that
	1266	* are not in database already. Then compare
	1267	* to database and report changes.
	1268	*/
	1269	if (-1 == sh_hash_have_it (tmpcat))
	1270	{
[253]	1271	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1272	sh_error_handle ((-1), FIL__, __LINE__,
	1273	0, MSG_SUID_FOUND, tmp );
[253]	1274	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1275	}
	1276	else
	1277	{
[253]	1278	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1279	sh_error_handle (SH_ERR_ALL, FIL__, __LINE__,
	1280	0, MSG_SUID_FOUND, tmp );
[253]	1281	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1282	}
	1283
[253]	1284	SH_MUTEX_LOCK(mutex_thread_nolog);
	1285	compret = sh_hash_compdata (SH_LEVEL_READONLY,
	1286	theFile, fileHash,
	1287	_("[SuidCheck]"),
	1288	ShSuidchkSeverity);
	1289	SH_MUTEX_UNLOCK(mutex_thread_nolog);
	1290
	1291	if (compret == 0)
[131]	1292	{
[253]	1293	sh_hash_pushdata_memory (theFile, fileHash); /* no call to sh_error_handle */
[131]	1294	}
	1295
[458]	1296	sh_hash_set_flag(tmpcat, SH_FFLAG_SUIDCHK); /* no call to sh_error_handle */
[131]	1297
	1298	}
	1299
	1300	else if (sh.flag.checkSum == SH_CHECK_INIT &&
	1301	sh.flag.update == S_FALSE )
	1302	{
	1303	/* Running init. Report on files detected.
	1304	*/
[481]	1305	sh_dbIO_data_write (theFile, fileHash); /* no call to sh_error_handle */
[253]	1306	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1307	sh_error_handle ((-1), FIL__, __LINE__,
	1308	0, MSG_SUID_FOUND, tmp );
[253]	1309	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1310	}
	1311
	1312	else if (sh.flag.checkSum == SH_CHECK_CHECK )
	1313	{
	1314	/* Running file check. Report on new files
	1315	* detected, and quarantine them.
	1316	*/
[253]	1317	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1318	sh_error_handle (SH_ERR_ALL, FIL__, __LINE__,
	1319	0, MSG_SUID_FOUND, tmp );
[253]	1320	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1321
[253]	1322	fflags = sh_hash_getflags(tmpcat); /* no call to sh_error_handle */
[131]	1323
	1324	if ( (-1 == fflags) \|\| (!SH_FFLAG_SUIDCHK_SET(fflags)))
	1325	{
	1326	if (-1 == fflags)
[132]	1327	{
[227]	1328	(void) sh_unix_gmttime (theFile->ctime, timestrc, sizeof(timestrc));
	1329	(void) sh_unix_gmttime (theFile->atime, timestra, sizeof(timestra));
	1330	(void) sh_unix_gmttime (theFile->mtime, timestrm, sizeof(timestrm));
[132]	1331
[227]	1332	report_file(tmpcat, theFile, timestrc, timestra, timestrm);
[132]	1333	}
[131]	1334	/* Quarantine file according to configured method
	1335	*/
	1336	if (ShSuidchkQEnable == S_TRUE)
	1337	{
	1338	switch (ShSuidchkQMethod)
	1339	{
	1340	case SH_Q_DELETE:
[227]	1341	sh_q_delete(theFile->fullpath);
[131]	1342	break;
	1343	case SH_Q_CHANGEPERM:
[227]	1344	sh_q_changeperm(theFile->fullpath);
[131]	1345	break;
	1346	case SH_Q_MOVE:
[227]	1347	sh_q_move(theFile->fullpath, theFile, timestrc, timestra, timestrm);
[131]	1348	break;
	1349	default:
[253]	1350	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1351	sh_error_handle (ShSuidchkSeverity, FIL__,
	1352	__LINE__, 0, MSG_SUID_QREPORT,
	1353	_("Bad quarantine method"), tmp);
[253]	1354	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1355	break;
	1356	}
	1357	}
	1358	else
	1359	{
	1360	/* 1.8.1 push file to in-memory database
	1361	*/
[253]	1362	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1363	(void) sh_hash_compdata (SH_LEVEL_READONLY,
[227]	1364	theFile, fileHash,
[131]	1365	_("[SuidCheck]"),
	1366	ShSuidchkSeverity);
[253]	1367	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[131]	1368
[458]	1369	sh_hash_set_flag(tmpcat, SH_FFLAG_SUIDCHK); /* no call to sh_error_handle */
[131]	1370
	1371	}
	1372	}
	1373	else
	1374	{
	1375	/* File exists. Check for modifications.
	1376	*/
[253]	1377	SH_MUTEX_LOCK(mutex_thread_nolog);
[131]	1378	(void) sh_hash_compdata (SH_LEVEL_READONLY,
[227]	1379	theFile, fileHash,
[131]	1380	_("[SuidCheck]"),
	1381	ShSuidchkSeverity);
[253]	1382	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[458]	1383	sh_hash_set_flag(tmpcat, SH_FFLAG_SUIDCHK); /* no call to sh_error_handle */
[131]	1384
	1385	}
	1386	}
	1387	}
	1388	SH_FREE(tmp);
[227]	1389	if (theFile->attr_string) SH_FREE(theFile->attr_string);
	1390	if (theFile->link_path) SH_FREE(theFile->link_path);
	1391	SH_FREE(theFile);
[131]	1392	}
	1393	}
	1394	SH_FREE(tmpcat);
[115]	1395
[131]	1396
[1]	1397	#ifdef HAVE_SCHED_YIELD
	1398	if (ShSuidchkYield == S_TRUE)
	1399	{
	1400	if (sched_yield() == -1)
	1401	{
	1402	status = errno;
[253]	1403	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1404	sh_error_handle ((-1), FIL__, __LINE__, status, MSG_E_SUBGEN,
[131]	1405	_("Failed to release time slice"),
[1]	1406	_("sh_suidchk_check_internal") );
[253]	1407	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1408	}
	1409	}
	1410	#endif
[131]	1411
	1412	dirlist = dirlist->next;
[68]	1413
[131]	1414	} while (dirlist != NULL);
[1]	1415
[131]	1416
	1417	kill_sh_dirlist (dirlist_orig);
	1418
[1]	1419	SL_RETURN( (0), _("sh_suidchk_check_internal"));
	1420	}
	1421
	1422	/*************
	1423	*
	1424	* module init
	1425	*
	1426	*************/
[140]	1427	int sh_suidchk_init (struct mod_type * arg)
[1]	1428	{
[253]	1429	#ifndef HAVE_PTHREAD
[140]	1430	(void) arg;
[253]	1431	#endif
	1432
[1]	1433	if (ShSuidchkActive == S_FALSE)
[253]	1434	return SH_MOD_FAILED;
[1]	1435
[253]	1436	#ifdef HAVE_PTHREAD
	1437	if (arg != NULL && arg->initval < 0 &&
	1438	(sh.flag.isdaemon == S_TRUE \|\| sh.flag.loop == S_TRUE))
	1439	{
	1440	if (0 == sh_pthread_create(sh_threaded_module_run, (void *)arg))
	1441	return SH_MOD_THREAD;
	1442	else
	1443	return SH_MOD_FAILED;
	1444	}
[335]	1445	else if (arg != NULL && arg->initval == SH_MOD_THREAD &&
	1446	(sh.flag.isdaemon == S_TRUE \|\| sh.flag.loop == S_TRUE))
	1447	{
	1448	return SH_MOD_THREAD;
	1449	}
[253]	1450	#endif
	1451
[1]	1452	return (0);
	1453	}
	1454
	1455
	1456	/*************
	1457	*
	1458	* module cleanup
	1459	*
	1460	*************/
	1461	int sh_suidchk_end ()
	1462	{
	1463	return (0);
	1464	}
	1465
	1466
	1467	/*************
	1468	*
	1469	* module timer
	1470	*
	1471	*************/
	1472	int sh_suidchk_timer (time_t tcurrent)
	1473	{
	1474	if (sh.flag.checkSum == SH_CHECK_INIT)
	1475	return -1;
	1476
	1477	/* One-shot (not daemon and not loop forever)
	1478	*/
	1479	if (sh.flag.isdaemon != S_TRUE && sh.flag.loop == S_FALSE)
	1480	return -1;
	1481
	1482	if (ShSuidchkSched != NULL)
	1483	{
	1484	return test_sched(ShSuidchkSched);
	1485	}
	1486	if ((time_t) (tcurrent - lastcheck) >= ShSuidchkInterval)
	1487	{
	1488	lastcheck = tcurrent;
	1489	return (-1);
	1490	}
	1491	return 0;
	1492	}
	1493
	1494	/*************
	1495	*
	1496	* module check
	1497	*
	1498	*************/
	1499
	1500	int sh_suidchk_check ()
	1501	{
[253]	1502	volatile int status;
[1]	1503
	1504	SL_ENTER(_("sh_suidchk_check"));
	1505
[253]	1506	if (ShSuidchkActive == S_FALSE)
	1507	SL_RETURN(-1, _("sh_suidchk_check"));
	1508
	1509	SH_MUTEX_LOCK(mutex_thread_nolog);
[257]	1510	sh_error_handle (SH_ERR_INFO, FIL__, __LINE__, EINVAL, MSG_E_SUBGEN,
[1]	1511	_("Checking for SUID programs"),
[257]	1512	_("sh_suidchk_check") );
[253]	1513	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1514
	1515	FileLimNow = time(NULL);
	1516	FileLimStart = FileLimNow;
	1517	FileLimNum = 0;
	1518	FileLimTotal = 0;
	1519
[22]	1520	#ifdef SH_SUIDTESTDIR
	1521	status = sh_suidchk_check_internal (SH_SUIDTESTDIR);
	1522	#else
[1]	1523	status = sh_suidchk_check_internal ("/");
[22]	1524	#endif
[1]	1525
[253]	1526	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1527	sh_error_handle ((-1), FIL__, __LINE__, EINVAL, MSG_SUID_SUMMARY,
	1528	FileLimTotal,
	1529	(long) (time(NULL) - FileLimStart) );
[253]	1530	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1531
	1532	SL_RETURN(status, _("sh_suidchk_check"));
	1533	}
	1534
	1535	/*************
	1536	*
	1537	* module setup
	1538	*
	1539	*************/
	1540
[68]	1541	int sh_suidchk_set_severity (const char * c)
[1]	1542	{
	1543	int retval;
	1544	char tmp[32];
	1545
	1546	SL_ENTER(_("sh_suidchk_set_severity"));
	1547	tmp[0] = '='; tmp[1] = '\0';
	1548	(void) sl_strlcat (tmp, c, 32);
	1549	retval = sh_error_set_level (tmp, &ShSuidchkSeverity);
	1550	SL_RETURN(retval, _("sh_suidchk_set_severity"));
	1551	}
	1552
[68]	1553	int sh_suidchk_set_exclude (const char * c)
[1]	1554	{
[452]	1555	int ret = 0;
[1]	1556	SL_ENTER(_("sh_suidchk_set_exclude"));
[68]	1557
[1]	1558	if (c == NULL \|\| c[0] == '\0')
	1559	{
	1560	SL_RETURN(-1, _("sh_suidchk_set_exclude"));
	1561	}
	1562
	1563	if (0 == sl_strncmp(c, _("NULL"), 4))
	1564	{
	1565	if (ShSuidchkExclude != NULL)
[452]	1566	sh_suid_exclude_free();
[1]	1567	SL_RETURN(0, _("sh_suidchk_set_exclude"));
	1568	}
	1569
[452]	1570	ret = sh_suid_exclude_add(c);
[1]	1571
[452]	1572	SL_RETURN(ret, _("sh_suidchk_set_exclude"));
[1]	1573	}
	1574
[68]	1575	int sh_suidchk_set_timer (const char * c)
[1]	1576	{
[253]	1577	volatile long val;
[1]	1578
	1579	SL_ENTER(_("sh_suidchk_set_timer"));
	1580
	1581	val = strtol (c, (char **)NULL, 10);
	1582	if (val <= 0)
[253]	1583	{
	1584	SH_MUTEX_LOCK(mutex_thread_nolog);
	1585	sh_error_handle ((-1), FIL__, __LINE__, EINVAL, MSG_EINVALS,
	1586	_("suidchk timer"), c);
	1587	SH_MUTEX_UNLOCK(mutex_thread_nolog);
	1588	}
[1]	1589	val = (val <= 0 ? 7200 : val);
	1590
	1591	ShSuidchkInterval = (time_t) val;
	1592	SL_RETURN( 0, _("sh_suidchk_set_timer"));
	1593	}
	1594
	1595
[170]	1596	static void sh_suidchk_free_schedule (void)
[1]	1597	{
	1598	sh_schedule_t * current = ShSuidchkSched;
	1599	sh_schedule_t * next = NULL;
	1600
	1601	while (current != NULL)
	1602	{
	1603	next = current->next;
	1604	SH_FREE(current);
	1605	current = next;
	1606	}
	1607	ShSuidchkSched = NULL;
[149]	1608	return;
[1]	1609	}
	1610
[149]	1611	int sh_suidchk_reconf ()
	1612	{
[253]	1613	SH_MUTEX_LOCK(mutex_suid_check);
[149]	1614	sh_suidchk_free_schedule();
	1615	set_defaults();
[253]	1616	SH_MUTEX_UNLOCK(mutex_suid_check);
[150]	1617	return 0;
[149]	1618	}
	1619
[68]	1620	int sh_suidchk_set_schedule (const char * str)
[1]	1621	{
	1622	int status;
	1623	sh_schedule_t * newSched = NULL;
	1624
	1625	SL_ENTER(_("sh_suidchk_set_schedule"));
	1626
	1627	/*
	1628	if (ShSuidchkSched != NULL)
	1629	{
	1630	SH_FREE(ShSuidchkSched);
	1631	ShSuidchkSched = NULL;
	1632	}
	1633	*/
	1634
	1635	if (0 == sl_strncmp(str, _("NULL"), 4))
	1636	{
	1637	(void) sh_suidchk_free_schedule ();
	1638	return 0;
	1639	}
	1640
	1641	newSched = SH_ALLOC(sizeof(sh_schedule_t));
	1642	status = create_sched(str, newSched);
	1643	if (status != 0)
	1644	{
	1645	SH_FREE(newSched);
	1646	newSched = NULL;
	1647	}
	1648	else
	1649	{
	1650	newSched->next = ShSuidchkSched;
	1651	ShSuidchkSched = newSched;
	1652	}
	1653	SL_RETURN( status, _("sh_suidchk_set_schedule"));
	1654	}
	1655
	1656
	1657
[68]	1658	int sh_suidchk_set_fps (const char * c)
[1]	1659	{
[253]	1660	volatile long val;
[1]	1661
	1662	SL_ENTER(_("sh_suidchk_set_fps"));
	1663
	1664	val = strtol (c, (char **)NULL, 10);
	1665	if (val < 0)
[253]	1666	{
	1667	SH_MUTEX_LOCK(mutex_thread_nolog);
	1668	sh_error_handle ((-1), FIL__, __LINE__, EINVAL, MSG_EINVALS,
	1669	_("suidchk fps"), c);
	1670	SH_MUTEX_UNLOCK(mutex_thread_nolog);
	1671	}
[1]	1672	val = (val < 0 ? 0 : val);
	1673
	1674	ShSuidchkFps = val;
	1675	SL_RETURN( 0, _("sh_suidchk_set_fps"));
	1676	}
	1677
[68]	1678	int sh_suidchk_set_yield (const char * c)
[1]	1679	{
	1680	int i;
	1681	SL_ENTER(_("sh_suidchk_set_yield"));
	1682	#ifdef HAVE_SCHED_YIELD
	1683	i = sh_util_flagval(c, &ShSuidchkYield);
	1684	#else
	1685	(void) c; /* cast to void to avoid compiler warning */
	1686	i = -1;
	1687	#endif
	1688	SL_RETURN(i, _("sh_suidchk_set_yield"));
	1689	}
	1690
[68]	1691	int sh_suidchk_set_activate (const char * c)
[1]	1692	{
	1693	int i;
	1694	SL_ENTER(_("sh_suidchk_set_activate"));
	1695	i = sh_util_flagval(c, &ShSuidchkActive);
	1696	SL_RETURN(i, _("sh_suidchk_set_activate"));
	1697	}
	1698
[119]	1699	int sh_suidchk_set_nosuid (const char * c)
	1700	{
	1701	int i;
	1702	SL_ENTER(_("sh_suidchk_set_nosuid"));
	1703	i = sh_util_flagval(c, &ShSuidchkNosuid);
	1704	SL_RETURN(i, _("sh_suidchk_set_nosuid"));
	1705	}
	1706
[68]	1707	int sh_suidchk_set_quarantine (const char * c)
[1]	1708	{
	1709	int i;
	1710	SL_ENTER(_("sh_suidchk_set_quarantine"));
	1711	i = sh_util_flagval(c, &ShSuidchkQEnable);
	1712	SL_RETURN(i, _("sh_suidchk_set_quarantine"));
	1713	}
	1714
[68]	1715	int sh_suidchk_set_qdelete (const char * c)
[1]	1716	{
	1717	int i;
	1718	SL_ENTER(_("sh_suidchk_set_qdelete"));
	1719	i = sh_util_flagval(c, &ShSuidchkQDelete);
	1720	SL_RETURN(i, _("sh_suidchk_set_qdelete"));
	1721	}
	1722
[68]	1723	int sh_suidchk_set_qmethod (const char * c)
[1]	1724	{
[253]	1725	volatile long val;
	1726	volatile int ret = 0;
[22]	1727	struct stat buf;
[1]	1728
	1729	SL_ENTER(_("sh_suidchk_set_qmethod"));
	1730
	1731	val = strtol (c, (char **)NULL, 10);
	1732	if (val < 0)
	1733	{
[253]	1734	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1735	sh_error_handle ((-1), FIL__, __LINE__, EINVAL, MSG_EINVALS,
	1736	_("suidchk qmethod"), c);
[253]	1737	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1738	ret = -1;
	1739	}
	1740	else
	1741	{
	1742	switch (val)
	1743	{
	1744	case SH_Q_DELETE:
	1745	ShSuidchkQMethod = SH_Q_DELETE;
	1746	break;
	1747	case SH_Q_CHANGEPERM:
	1748	ShSuidchkQMethod = SH_Q_CHANGEPERM;
	1749	break;
	1750	case SH_Q_MOVE:
[22]	1751	if (retry_stat (FIL__, __LINE__, DEFAULT_QDIR, &buf) != 0)
[1]	1752	{
	1753	if (mkdir (DEFAULT_QDIR, 0750) == -1)
	1754	{
[253]	1755	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1756	sh_error_handle ((-1), FIL__, __LINE__, EINVAL,
	1757	MSG_SUID_ERROR,
	1758	_("Unable to create quarantine directory"));
[253]	1759	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1760	}
	1761	}
	1762	ShSuidchkQMethod = SH_Q_MOVE;
	1763	break;
	1764	default:
[253]	1765	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	1766	sh_error_handle ((-1), FIL__, __LINE__, EINVAL, MSG_EINVALS,
	1767	_("suidchk qmethod"), c);
[253]	1768	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	1769	ShSuidchkQMethod = -1;
	1770	ret = -1;
	1771	break;
	1772	}
	1773	}
	1774
	1775	SL_RETURN( ret, _("sh_suidchk_set_qmethod"));
	1776	}
	1777
	1778	#if defined(FSTYPE_STATFS) \|\| defined(FSTYPE_AIX_STATFS)
	1779	/* dirname.c -- return all but the last element in a path
	1780	Copyright (C) 1990 Free Software Foundation, Inc.
	1781
	1782	This program is free software; you can redistribute it and/or modify
	1783	it under the terms of the GNU General Public License as published by
	1784	the Free Software Foundation; either version 2, or (at your option)
	1785	any later version.
	1786
	1787	This program is distributed in the hope that it will be useful,
	1788	but WITHOUT ANY WARRANTY; without even the implied warranty of
	1789	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	1790	GNU General Public License for more details.
	1791
	1792	You should have received a copy of the GNU General Public License
	1793	along with this program; if not, write to the Free Software Foundation,
	1794	Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */
	1795
	1796	/* Return the leading directories part of PATH,
	1797	allocated with malloc. If out of memory, return 0.
	1798	Assumes that trailing slashes have already been
	1799	removed. */
	1800
	1801	char * sh_dirname (const char * path)
	1802	{
	1803	char *newpath;
	1804	char *slash;
	1805	int length; /* Length of result, not including NUL. */
	1806
	1807	slash = strrchr (path, '/');
	1808	if (slash == NULL)
	1809	{
	1810	/* File is in the current directory. */
	1811	path = ".";
	1812	length = 1;
	1813	}
	1814	else
	1815	{
	1816	/* Remove any trailing slashes from the result. */
	1817	while (slash > path && *slash == '/')
	1818	--slash;
	1819
	1820	length = slash - path + 1;
	1821	}
	1822	newpath = (char *) SH_ALLOC (length + 1);
	1823	if (newpath == NULL)
	1824	return NULL;
	1825	strncpy (newpath, path, length);
	1826	newpath[length] = '\0';
	1827	return newpath;
	1828	}
	1829	/* #ifdef FSTYPE_STATFS */
	1830	#endif
	1831
	1832	/* fstype.c -- determine type of filesystems that files are on
	1833	Copyright (C) 1990, 91, 92, 93, 94 Free Software Foundation, Inc.
	1834
	1835	This program is free software; you can redistribute it and/or modify
	1836	it under the terms of the GNU General Public License as published by
	1837	the Free Software Foundation; either version 2, or (at your option)
	1838	any later version.
	1839
	1840	This program is distributed in the hope that it will be useful,
	1841	but WITHOUT ANY WARRANTY; without even the implied warranty of
	1842	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	1843	GNU General Public License for more details.
	1844
	1845	You should have received a copy of the GNU General Public License
	1846	along with this program; if not, write to the Free Software
	1847	Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
	1848
	1849	/* Written by David MacKenzie <djm@gnu.ai.mit.edu>. */
	1850
	1851	/* Modified by R. Wichmann:
	1852	- replaced error() by sh_error_handle()
	1853	- replaced xstrdup() by sl_strdup()
	1854	- replaced strstr() by sl_strstr()
	1855	- some additions to recognize nosuid fs
	1856	*/
	1857
	1858	/* modetype.h -- file type bits definitions for POSIX systems
	1859	Requires sys/types.h sys/stat.h.
	1860	Copyright (C) 1990 Free Software Foundation, Inc.
	1861
	1862	This program is free software; you can redistribute it and/or modify
	1863	it under the terms of the GNU General Public License as published by
	1864	the Free Software Foundation; either version 2, or (at your option)
	1865	any later version.
	1866
	1867	This program is distributed in the hope that it will be useful,
	1868	but WITHOUT ANY WARRANTY; without even the implied warranty of
	1869	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	1870	GNU General Public License for more details.
	1871
	1872	You should have received a copy of the GNU General Public License
	1873	along with this program; if not, write to the Free Software
	1874	Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
	1875
	1876	/* POSIX.1 doesn't mention the S_IFMT bits; instead, it uses S_IStype
	1877	test macros. To make storing file types more convenient, define
	1878	them; the values don't need to correspond to what the kernel uses,
	1879	because of the way we use them. */
	1880	#ifndef S_IFMT /* Doesn't have traditional Unix macros. */
	1881	#define S_IFBLK 1
	1882	#define S_IFCHR 2
	1883	#define S_IFDIR 4
	1884	#define S_IFREG 8
	1885	#ifdef S_ISLNK
	1886	#define S_IFLNK 16
	1887	#endif
	1888	#ifdef S_ISFIFO
	1889	#define S_IFIFO 32
	1890	#endif
	1891	#ifdef S_ISSOCK
	1892	#define S_IFSOCK 64
	1893	#endif
	1894	#endif /* !S_IFMT */
	1895
	1896	#ifdef STAT_MACROS_BROKEN
	1897	#undef S_ISBLK
	1898	#undef S_ISCHR
	1899	#undef S_ISDIR
	1900	#undef S_ISREG
	1901	#undef S_ISFIFO
	1902	#undef S_ISLNK
	1903	#undef S_ISSOCK
	1904	#undef S_ISMPB
	1905	#undef S_ISMPC
	1906	#undef S_ISNWK
	1907	#endif
	1908
	1909	/* Do the reverse: define the POSIX.1 macros for traditional Unix systems
	1910	that don't have them. */
	1911	#if !defined(S_ISBLK) && defined(S_IFBLK)
	1912	#define S_ISBLK(m) (((m) & S_IFMT) == S_IFBLK)
	1913	#endif
	1914	#if !defined(S_ISCHR) && defined(S_IFCHR)
	1915	#define S_ISCHR(m) (((m) & S_IFMT) == S_IFCHR)
	1916	#endif
	1917	#if !defined(S_ISDIR) && defined(S_IFDIR)
	1918	#define S_ISDIR(m) (((m) & S_IFMT) == S_IFDIR)
	1919	#endif
	1920	#if !defined(S_ISREG) && defined(S_IFREG)
	1921	#define S_ISREG(m) (((m) & S_IFMT) == S_IFREG)
	1922	#endif
	1923	#if !defined(S_ISFIFO) && defined(S_IFIFO)
	1924	#define S_ISFIFO(m) (((m) & S_IFMT) == S_IFIFO)
	1925	#endif
	1926	#if !defined(S_ISLNK) && defined(S_IFLNK)
	1927	#define S_ISLNK(m) (((m) & S_IFMT) == S_IFLNK)
	1928	#endif
	1929	#if !defined(S_ISSOCK) && defined(S_IFSOCK)
	1930	#define S_ISSOCK(m) (((m) & S_IFMT) == S_IFSOCK)
	1931	#endif
	1932	#if !defined(S_ISMPB) && defined(S_IFMPB) /* V7 */
	1933	#define S_ISMPB(m) (((m) & S_IFMT) == S_IFMPB)
	1934	#define S_ISMPC(m) (((m) & S_IFMT) == S_IFMPC)
	1935	#endif
	1936	#if !defined(S_ISNWK) && defined(S_IFNWK) /* HP/UX */
	1937	#define S_ISNWK(m) (((m) & S_IFMT) == S_IFNWK)
	1938	#endif
	1939
	1940
	1941	static char filesystem_type_uncached (char path, char *relpath,
	1942	struct stat *statp);
	1943
	1944	#ifdef FSTYPE_MNTENT /* 4.3BSD etc. */
[199]	1945	static int xatoi (const char *cp);
[1]	1946	#endif
	1947
	1948	#ifdef FSTYPE_MNTENT /* 4.3BSD, SunOS, HP-UX, Dynix, Irix. */
	1949	#include <mntent.h>
	1950	#if !defined(MOUNTED)
	1951	# if defined(MNT_MNTTAB) /* HP-UX. */
	1952	# define MOUNTED MNT_MNTTAB
	1953	# endif
	1954	# if defined(MNTTABNAME) /* Dynix. */
	1955	# define MOUNTED MNTTABNAME
	1956	# endif
	1957	#endif
	1958	#endif
	1959
	1960	#ifdef FSTYPE_GETMNT /* Ultrix. */
	1961	#include <sys/param.h>
	1962	#include <sys/mount.h>
	1963	#include <sys/fs_types.h>
	1964	#endif
	1965
	1966	#ifdef FSTYPE_USG_STATFS /* SVR3. */
	1967	#include <sys/statfs.h>
	1968	#include <sys/fstyp.h>
	1969	#endif
	1970
	1971	#ifdef FSTYPE_STATVFS /* SVR4. */
	1972	#include <sys/statvfs.h>
	1973	#include <sys/fstyp.h>
	1974	#endif
	1975
	1976	#ifdef FSTYPE_STATFS /* 4.4BSD. */
	1977	#include <sys/param.h> /* NetBSD needs this. */
	1978	#include <sys/mount.h>
	1979
	1980	#ifndef MFSNAMELEN /* NetBSD defines this. */
	1981	static char *
	1982	fstype_to_string (t)
	1983	short t;
	1984	{
	1985	#ifdef INITMOUNTNAMES /* Defined in 4.4BSD, not in NET/2. */
	1986	static char *mn[] = INITMOUNTNAMES;
	1987	if (t >= 0 && t <= MOUNT_MAXTYPE)
	1988	return mn[t];
	1989	else
	1990	return "?";
	1991	#else /* !INITMOUNTNAMES */
	1992	switch (t)
	1993	{
[231]	1994	#ifdef MOUNT_UFS
[1]	1995	case MOUNT_UFS:
	1996	return _("ufs");
[231]	1997	#endif
	1998	#ifdef MOUNT_ISO9660
	1999	case MOUNT_ISO9660:
	2000	return _("iso9660fs");
	2001	#endif
	2002	#ifdef MOUNT_CD9660
	2003	case MOUNT_CD9660:
	2004	return _("cd9660");
	2005	#endif
	2006	#ifdef MOUNT_NFS
[1]	2007	case MOUNT_NFS:
	2008	return _("nfs");
[231]	2009	#endif
[1]	2010	#ifdef MOUNT_PC
	2011	case MOUNT_PC:
	2012	return _("pc");
	2013	#endif
	2014	#ifdef MOUNT_MFS
	2015	case MOUNT_MFS:
	2016	return _("mfs");
	2017	#endif
	2018	#ifdef MOUNT_LO
	2019	case MOUNT_LO:
	2020	return _("lofs");
	2021	#endif
	2022	#ifdef MOUNT_TFS
	2023	case MOUNT_TFS:
	2024	return _("tfs");
	2025	#endif
	2026	#ifdef MOUNT_TMP
	2027	case MOUNT_TMP:
	2028	return _("tmp");
	2029	#endif
	2030	#ifdef MOUNT_MSDOS
	2031	case MOUNT_MSDOS:
	2032	return _("msdos");
	2033	#endif
[231]	2034	#ifdef MOUNT_LFS
	2035	case MOUNT_LFS:
	2036	return _("lfs");
[1]	2037	#endif
[231]	2038	#ifdef MOUNT_LOFS
	2039	case MOUNT_LOFS:
	2040	return _("lofs");
	2041	#endif
	2042	#ifdef MOUNT_FDESC
	2043	case MOUNT_FDESC:
	2044	return _("fdesc");
	2045	#endif
	2046	#ifdef MOUNT_PORTAL
	2047	case MOUNT_PORTAL:
	2048	return _("portal");
	2049	#endif
	2050	#ifdef MOUNT_NULL
	2051	case MOUNT_NULL:
	2052	return _("null");
	2053	#endif
	2054	#ifdef MOUNT_UMAP
	2055	case MOUNT_UMAP:
	2056	return _("umap");
	2057	#endif
	2058	#ifdef MOUNT_KERNFS
	2059	case MOUNT_KERNFS:
	2060	return _("kernfs");
	2061	#endif
	2062	#ifdef MOUNT_PROCFS
	2063	case MOUNT_PROCFS:
	2064	return _("procfs");
	2065	#endif
	2066	#ifdef MOUNT_DEVFS
	2067	case MOUNT_DEVFS:
	2068	return _("devfs");
	2069	#endif
	2070	#ifdef MOUNT_EXT2FS
	2071	case MOUNT_EXT2FS:
	2072	return _("ext2fs");
	2073	#endif
	2074	#ifdef MOUNT_UNION
	2075	case MOUNT_UNION:
	2076	return _("union");
	2077	#endif
[1]	2078	default:
	2079	return "?";
	2080	}
	2081	#endif /* !INITMOUNTNAMES */
	2082	}
	2083	#endif /* !MFSNAMELEN */
	2084	#endif /* FSTYPE_STATFS */
	2085
	2086	#ifdef FSTYPE_AIX_STATFS /* AIX. */
	2087	#include <sys/vmount.h>
	2088	#include <sys/statfs.h>
	2089
	2090	#define FSTYPE_STATFS /* Otherwise like 4.4BSD. */
	2091	#define f_type f_vfstype
	2092
	2093	static char *
	2094	fstype_to_string (t)
	2095	short t;
	2096	{
	2097	switch (t)
	2098	{
	2099	case MNT_AIX:
	2100	return _("aix"); /* AIX 4.3: NFS filesystems are actually MNT_AIX. */
	2101	#ifdef MNT_NAMEFS
	2102	case MNT_NAMEFS:
	2103	return _("namefs");
	2104	#endif
	2105	case MNT_NFS:
	2106	return _("nfs");
	2107	case MNT_JFS:
	2108	return _("jfs");
	2109	case MNT_CDROM:
	2110	return _("cdrom");
	2111	#ifdef MNT_PROCFS
	2112	case MNT_PROCFS:
	2113	return _("procfs");
	2114	#endif
	2115	#ifdef MNT_SFS
	2116	case MNT_SFS:
	2117	return _("sfs");
	2118	#endif
	2119	#ifdef MNT_CACHEFS
	2120	case MNT_CACHEFS:
	2121	return _("cachefs");
	2122	#endif
	2123	#ifdef MNT_NFS3
	2124	case MNT_NFS3:
	2125	return _("nfs3");
	2126	#endif
	2127	#ifdef MNT_AUTOFS
	2128	case MNT_AUTOFS:
	2129	return _("autofs");
	2130	#endif
	2131	#ifdef MNT_VXFS
	2132	case MNT_VXFS:
	2133	return _("vxfs");
	2134	#endif
	2135	#ifdef MNT_VXODM
	2136	case MNT_VXODM:
	2137	return _("veritasfs");
	2138	#endif
	2139	#ifdef MNT_UDF
	2140	case MNT_UDF:
	2141	return _("udfs");
	2142	#endif
	2143	#ifdef MNT_NFS4
	2144	case MNT_NFS4:
	2145	return _("nfs4");
	2146	#endif
	2147	#ifdef MNT_RFS4
	2148	case MNT_RFS4:
	2149	return _("nfs4");
	2150	#endif
	2151	#ifdef MNT_CIFS
	2152	case MNT_CIFS:
	2153	return _("cifs");
	2154	#endif
	2155	default:
	2156	return "?";
	2157	}
	2158	}
	2159	#endif /* FSTYPE_AIX_STATFS */
	2160
	2161	#ifdef AFS
	2162	#include <netinet/in.h>
	2163	#include <afs/venus.h>
	2164	#if __STDC__
	2165	/* On SunOS 4, afs/vice.h defines this to rely on a pre-ANSI cpp. */
	2166	#undef _VICEIOCTL
	2167	#define _VICEIOCTL(id) ((unsigned int ) _IOW('V', id, struct ViceIoctl))
	2168	#endif
	2169	#ifndef _IOW
	2170	/* AFS on Solaris 2.3 doesn't get this definition. */
	2171	#include <sys/ioccom.h>
	2172	#endif
	2173
	2174	static int
	2175	in_afs (path)
	2176	char *path;
	2177	{
	2178	static char space[2048];
	2179	struct ViceIoctl vi;
	2180
	2181	vi.in_size = 0;
	2182	vi.out_size = sizeof (space);
	2183	vi.out = space;
	2184
	2185	if (pioctl (path, VIOC_FILE_CELL_NAME, &vi, 1)
	2186	&& (errno == EINVAL \|\| errno == ENOENT))
	2187	return 0;
	2188	return 1;
	2189	}
	2190	#endif /* AFS */
	2191
	2192	/* Nonzero if the current filesystem's type is known. */
	2193	static int fstype_known = 0;
	2194
	2195	/* Return a static string naming the type of filesystem that the file PATH,
	2196	described by STATP, is on.
	2197	RELPATH is the file name relative to the current directory.
	2198	Return "unknown" if its filesystem type is unknown. */
	2199
	2200	static char *
	2201	filesystem_type (char * path, char * relpath, struct stat * statp)
	2202	{
	2203	static char *current_fstype = NULL;
	2204	static dev_t current_dev;
	2205
	2206	if (current_fstype != NULL)
	2207	{
	2208	if ((0 != fstype_known) && statp->st_dev == current_dev)
	2209	return current_fstype; /* Cached value. */
	2210	SH_FREE (current_fstype);
	2211	}
	2212	current_dev = statp->st_dev;
	2213	current_fstype = filesystem_type_uncached (path, relpath, statp);
[516]	2214
[1]	2215	return current_fstype;
	2216	}
	2217
	2218	/* Return a newly allocated string naming the type of filesystem that the
	2219	file PATH, described by STATP, is on.
	2220	RELPATH is the file name relative to the current directory.
	2221	Return "unknown" if its filesystem type is unknown. */
	2222
[481]	2223	void * sh_dummy_2229_type;
	2224
[1]	2225	static char *
	2226	filesystem_type_uncached (path, relpath, statp)
	2227	char *path;
	2228	char *relpath;
	2229	struct stat *statp;
	2230	{
	2231	char * type = NULL;
	2232	#ifdef MFSNAMELEN /* NetBSD. */
	2233	static char my_tmp_type[64];
	2234	#endif
	2235
[516]	2236	#ifdef FSTYPE_MNTENT /* 4.3BSD, SunOS, HP-UX, Dynix, Irix,Linux */
[1]	2237	char *table = MOUNTED;
	2238	FILE *mfp;
	2239	struct mntent *mnt;
	2240
[481]	2241	/* Take the address to keep gcc from putting it into a register.
	2242	* Avoids the 'clobbered by longjmp' warning.
	2243	*/
	2244	sh_dummy_2229_type = (void *) &type;
	2245
[1]	2246	if (path == NULL \|\| relpath == NULL)
	2247	return NULL;
	2248
	2249	mfp = setmntent (table, "r");
	2250	if (mfp == NULL)
	2251	{
[253]	2252	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	2253	sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
	2254	_("setmntent() failed"),
	2255	_("filesystem_type_uncached") );
[253]	2256	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	2257	return NULL;
	2258	}
	2259
	2260	/* Find the entry with the same device number as STATP, and return
	2261	that entry's fstype. */
	2262	while (type == NULL && (mnt = getmntent (mfp)) != NULL)
	2263	{
[199]	2264	const char *devopt;
[1]	2265	dev_t dev;
	2266	struct stat disk_stats;
	2267
	2268	#ifdef MNTTYPE_IGNORE
	2269	if (0 == strcmp (mnt->mnt_type, MNTTYPE_IGNORE))
	2270	continue;
	2271	#endif
	2272
	2273	/* Newer systems like SunOS 4.1 keep the dev number in the mtab,
	2274	in the options string. For older systems, we need to stat the
	2275	directory that the filesystem is mounted on to get it.
	2276
	2277	Unfortunately, the HPUX 9.x mnttab entries created by automountq
	2278	contain a dev= option but the option value does not match the
	2279	st_dev value of the file (maybe the lower 16 bits match?). */
	2280
	2281	#if !defined(hpux) && !defined(__hpux__)
	2282	devopt = sl_strstr (mnt->mnt_opts, "dev=");
	2283	if (devopt)
	2284	{
	2285	if (devopt[4] == '0' && (devopt[5] == 'x' \|\| devopt[5] == 'X'))
	2286	dev = (dev_t) xatoi (devopt + 6);
	2287	else
	2288	dev = (dev_t) xatoi (devopt + 4);
	2289	}
	2290	else
	2291	#endif /* not hpux */
	2292	{
	2293	if (stat (mnt->mnt_dir, &disk_stats) == -1)
	2294	{
[252]	2295	char errmsg[256];
[253]	2296	volatile int elevel = SH_ERR_ERR;
[252]	2297	size_t tlen = strlen(mnt->mnt_dir);
[516]	2298
[252]	2299	if (tlen >= 6 && 0 == strcmp(&((mnt->mnt_dir)[tlen-6]), _("/.gvfs")))
	2300	elevel = SH_ERR_NOTICE;
[440]	2301	else if (tlen >= 5 && 0 == strcmp(&((mnt->mnt_dir)[tlen-5]), _("/gvfs")))
	2302	elevel = SH_ERR_NOTICE;
[516]	2303	else if (0 == strcmp (mnt->mnt_type, _("tracefs")))
	2304	elevel = SH_ERR_NOTICE;
	2305
[252]	2306	sl_snprintf(errmsg, sizeof(errmsg), _("stat(%s) failed"),
	2307	mnt->mnt_dir);
[253]	2308	SH_MUTEX_LOCK(mutex_thread_nolog);
[252]	2309	sh_error_handle (elevel, FIL__, __LINE__, 0, MSG_E_SUBGEN,
	2310	errmsg,
[1]	2311	_("filesystem_type_uncached") );
[253]	2312	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[516]	2313	continue;
[1]	2314	}
	2315	dev = disk_stats.st_dev;
	2316	}
	2317
	2318	if (dev == statp->st_dev)
	2319	{
	2320	/* check for the "nosuid" option
	2321	*/
[61]	2322	#ifdef HAVE_HASMNTOPT
[119]	2323	if (NULL == hasmntopt(mnt, "nosuid") \|\| (ShSuidchkNosuid == S_TRUE))
[1]	2324	type = mnt->mnt_type;
	2325	else
[61]	2326	type = _("nosuid"); /* hasmntopt (nosuid) */
	2327	#else
	2328	type = mnt->mnt_type;
	2329	#endif
[1]	2330	}
	2331	}
	2332
	2333	if (endmntent (mfp) == 0)
	2334	{
[253]	2335	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	2336	sh_error_handle ((-1), FIL__, __LINE__, 0, MSG_E_SUBGEN,
	2337	_("endmntent() failed"),
	2338	_("filesystem_type_uncached") );
[253]	2339	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	2340	}
	2341	#endif
	2342
	2343	#ifdef FSTYPE_GETMNT /* Ultrix. */
	2344	int offset = 0;
	2345	struct fs_data fsd;
	2346
	2347	if (path == NULL \|\| relpath == NULL)
	2348	return NULL;
	2349
[253]	2350	/* Take the address to keep gcc from putting it into a register.
	2351	* Avoids the 'clobbered by longjmp' warning.
	2352	*/
[483]	2353	sh_dummy_2229_type = (void*) &type;
[253]	2354
[1]	2355	while (type == NULL
	2356	&& getmnt (&offset, &fsd, sizeof (fsd), NOSTAT_MANY, 0) > 0)
	2357	{
	2358	if (fsd.fd_req.dev == statp->st_dev)
	2359	type = gt_names[fsd.fd_req.fstype];
	2360	}
	2361	#endif
	2362
	2363	#ifdef FSTYPE_USG_STATFS /* SVR3. */
	2364	struct statfs fss;
	2365	char typebuf[FSTYPSZ];
	2366
	2367	if (path == NULL \|\| relpath == NULL)
	2368	return NULL;
	2369
[253]	2370	/* Take the address to keep gcc from putting it into a register.
	2371	* Avoids the 'clobbered by longjmp' warning.
	2372	*/
[483]	2373	sh_dummy_2229_type = (void*) &type;
[253]	2374
[1]	2375	if (statfs (relpath, &fss, sizeof (struct statfs), 0) == -1)
	2376	{
	2377	/* Don't die if a file was just removed. */
	2378	if (errno != ENOENT)
	2379	{
[253]	2380	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	2381	sh_error_handle ((-1), FIL__, __LINE__, errno, MSG_E_SUBGEN,
	2382	_("statfs() failed"),
	2383	_("filesystem_type_uncached") );
[253]	2384	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	2385	return NULL;
	2386	}
	2387	}
	2388	else if (!sysfs (GETFSTYP, fss.f_fstyp, typebuf))
	2389	type = typebuf;
	2390	#endif
	2391
	2392	#ifdef FSTYPE_STATVFS /* SVR4. */
	2393	struct statvfs fss;
	2394
	2395	if (path == NULL \|\| relpath == NULL)
	2396	return NULL;
	2397
[253]	2398	/* Take the address to keep gcc from putting it into a register.
	2399	* Avoids the 'clobbered by longjmp' warning.
	2400	*/
[483]	2401	sh_dummy_2229_type = (void*) &type;
[253]	2402
[1]	2403	if (statvfs (relpath, &fss) == -1)
	2404	{
	2405	/* Don't die if a file was just removed. */
	2406	if (errno != ENOENT)
	2407	{
[253]	2408	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	2409	sh_error_handle ((-1), FIL__, __LINE__, errno, MSG_E_SUBGEN,
	2410	_("statvfs() failed"),
	2411	_("filesystem_type_uncached") );
[253]	2412	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	2413	return NULL;
	2414	}
	2415	}
	2416	else
	2417	{
	2418	type = fss.f_basetype;
	2419
	2420	/* patch by Konstantin Khrooschev <nathoo@co.ru>
	2421	*/
[119]	2422	if( (fss.f_flag & ST_NOSUID) && (ShSuidchkNosuid == S_FALSE))
[1]	2423	type = _("nosuid");
	2424	}
	2425	(void) statp; /* fix compiler warning */
	2426	#endif
	2427
	2428	#ifdef FSTYPE_STATFS /* 4.4BSD. */
	2429	struct statfs fss;
	2430	char *p;
	2431	#if defined(MNT_VISFLAGMASK) && defined(HAVE_STRUCT_STATFS_F_FLAGS)
	2432	int flags;
	2433	#endif
	2434	/* char * sh_dirname(const char path); /
	2435
	2436	if (path == NULL \|\| relpath == NULL)
	2437	return NULL;
	2438
[253]	2439	/* Take the address to keep gcc from putting it into a register.
	2440	* Avoids the 'clobbered by longjmp' warning.
	2441	*/
[483]	2442	sh_dummy_2229_type = (void*) &type;
[253]	2443
[1]	2444	if (S_ISLNK (statp->st_mode))
	2445	p = sh_dirname (relpath);
	2446	else
	2447	p = relpath;
	2448
	2449	if (statfs (p, &fss) == -1)
	2450	{
	2451	/* Don't die if symlink to nonexisting file, or a file that was
	2452	just removed. */
	2453	if (errno != ENOENT)
	2454	{
[253]	2455	SH_MUTEX_LOCK(mutex_thread_nolog);
[1]	2456	sh_error_handle ((-1), FIL__, __LINE__, errno, MSG_E_SUBGEN,
	2457	_("statfs() failed"),
	2458	_("filesystem_type_uncached") );
[253]	2459	SH_MUTEX_UNLOCK(mutex_thread_nolog);
[1]	2460	return NULL;
	2461	}
	2462	}
	2463	else
	2464	{
	2465
	2466	#ifdef MFSNAMELEN /* NetBSD. */
	2467	/* MEMORY LEAK !!!
	2468	* type = sh_util_strdup (fss.f_fstypename);
	2469	*/
	2470	sl_strlcpy (my_tmp_type, fss.f_fstypename, 64);
	2471	type = my_tmp_type;
	2472	#else
	2473	type = fstype_to_string (fss.f_type);
	2474	#endif
	2475
	2476	#ifdef HAVE_STRUCT_STATFS_F_FLAGS
	2477	#ifdef MNT_VISFLAGMASK
	2478	flags = fss.f_flags & MNT_VISFLAGMASK;
[119]	2479	if ((flags & MNT_NOSUID) && (ShSuidchkNosuid == S_FALSE))
[1]	2480	#else
[119]	2481	if ((fss.f_flags & MNT_NOSUID) && (ShSuidchkNosuid == S_FALSE))
[1]	2482	#endif
	2483	type = _("nosuid");
	2484	#endif
	2485	}
	2486	if (p != relpath)
	2487	SH_FREE (p);
	2488	#endif
	2489
	2490	#ifdef AFS
	2491	if ((!type \|\| !strcmp (type, "xx")) && in_afs (relpath))
	2492	type = "afs";
	2493	#endif
	2494
	2495	/* An unknown value can be caused by an ENOENT error condition.
	2496	Don't cache those values. */
	2497	fstype_known = (int)(type != NULL);
	2498
	2499	return sh_util_strdup (type ? type : "unknown");
	2500	}
	2501
	2502	#ifdef FSTYPE_MNTENT /* 4.3BSD etc. */
	2503	/* Return the value of the hexadecimal number represented by CP.
	2504	No prefix (like '0x') or suffix (like 'h') is expected to be
	2505	part of CP. */
	2506
	2507	static int
	2508	xatoi (cp)
[199]	2509	const char *cp;
[1]	2510	{
	2511	int val;
	2512
	2513	val = 0;
	2514	while (*cp != '\0')
	2515	{
	2516	/@+charint@/
	2517	if (cp >= 'a' && cp <= 'f')
	2518	val = val * 16 + *cp - 'a' + 10;
	2519	else if (cp >= 'A' && cp <= 'F')
	2520	val = val * 16 + *cp - 'A' + 10;
	2521	else if (cp >= '0' && cp <= '9')
	2522	val = val * 16 + *cp - '0';
	2523	else
	2524	break;
	2525	/@-charint@/
	2526	cp++;
	2527	}
	2528	return val;
	2529	}
	2530	#endif
	2531
	2532
	2533
	2534	#endif
	2535
	2536
	2537	/* #ifdef SH_USE_UTMP */
	2538	#endif
	2539
	2540
	2541

Note: See TracBrowser for help on using the repository browser.

Download in other formats: