1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21
22 /*
23 * Copyright 2009 Sun Microsystems, Inc. All rights reserved.
24 * Use is subject to license terms.
25 */
26
27 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */
28 /* All Rights Reserved */
29
30 /*
31 * University Copyright- Copyright (c) 1982, 1986, 1988
32 * The Regents of the University of California
33 * All Rights Reserved
34 *
35 * University Acknowledgment- Portions of this document are derived from
36 * software developed by the University of California, Berkeley, and its
37 * contributors.
38 */
39
40 /* Copyright (c) 1987, 1988 Microsoft Corporation */
41 /* All Rights Reserved */
42
43 /*
44 * For a complete reference to login(1), see the manual page. However,
45 * login has accreted some intentionally undocumented options, which are
46 * explained here:
47 *
48 * -a: This legacy flag appears to be unused.
49 *
50 * -f <username>: This flag was introduced by PSARC 1995/039 in support
51 * of Kerberos. But it's not used by Sun's Kerberos implementation.
52 * It is however employed by zlogin(1), since it allows one to tell
53 * login: "This user is authenticated." In the case of zlogin that's
54 * true because the zone always trusts the global zone.
55 *
56 * -z <zonename>: This flag is passed to login when zlogin(1) executes a
57 * zone login. This tells login(1) to skip it's normal CONSOLE check
58 * (i.e. that the root login must be on /dev/console) and tells us the
59 * name of the zone from which the login is occurring.
60 */
61
62 #include <sys/types.h>
63 #include <sys/param.h>
64 #include <unistd.h> /* For logfile locking */
65 #include <signal.h>
66 #include <stdio.h>
67 #include <sys/stat.h>
68 #include <string.h>
69 #include <deflt.h>
70 #include <grp.h>
71 #include <fcntl.h>
72 #include <lastlog.h>
73 #include <termio.h>
74 #include <utmpx.h>
75 #include <stdlib.h>
76 #include <wait.h>
77 #include <errno.h>
78 #include <ctype.h>
79 #include <syslog.h>
80 #include <ulimit.h>
81 #include <libgen.h>
82 #include <pwd.h>
83 #include <security/pam_appl.h>
84 #include <strings.h>
85 #include <libdevinfo.h>
86 #include <zone.h>
87 #include "login_audit.h"
88
89 #include <krb5_repository.h>
90 /*
91 *
92 * *** Defines, Macros, and String Constants ***
93 *
94 *
95 */
96
97 #define ISSUEFILE "/etc/issue" /* file to print before prompt */
98 #define NOLOGIN "/etc/nologin" /* file to lock users out during shutdown */
99
100 /*
101 * These need to be defined for UTMPX management.
102 * If we add in the utility functions later, we
103 * can remove them.
104 */
105 #define __UPDATE_ENTRY 1
106 #define __LOGIN 2
107
108 /*
109 * Intervals to sleep after failed login
110 */
111 #ifndef SLEEPTIME
112 #define SLEEPTIME 4 /* sleeptime before login incorrect msg */
113 #endif
114 static int Sleeptime = SLEEPTIME;
115
116 /*
117 * seconds login disabled after allowable number of unsuccessful attempts
118 */
119 #ifndef DISABLETIME
120 #define DISABLETIME 20
121 #endif
122 static int Disabletime = DISABLETIME;
123
124 #define MAXTRYS 5
125
126 static int retry = MAXTRYS;
127
128 /*
129 * Login logging support
130 */
131 #define LOGINLOG "/var/adm/loginlog" /* login log file */
132 #define LNAME_SIZE 20 /* size of logged logname */
133 #define TTYN_SIZE 15 /* size of logged tty name */
134 #define TIME_SIZE 30 /* size of logged time string */
135 #define ENT_SIZE (LNAME_SIZE + TTYN_SIZE + TIME_SIZE + 3)
136 #define L_WAITTIME 5 /* waittime for log file to unlock */
137 #define LOGTRYS 10 /* depth of 'try' logging */
138
139 /*
140 * String manipulation macros: SCPYN, SCPYL, EQN and ENVSTRNCAT
141 * SCPYL is the safer version of SCPYN
142 */
143 #define SCPYL(a, b) (void) strlcpy(a, b, sizeof (a))
144 #define SCPYN(a, b) (void) strncpy(a, b, sizeof (a))
145 #define EQN(a, b) (strncmp(a, b, sizeof (a)-1) == 0)
146 #define ENVSTRNCAT(to, from) {int deflen; deflen = strlen(to); \
147 (void) strncpy((to)+ deflen, (from), sizeof (to) - (1 + deflen)); }
148
149 /*
150 * Other macros
151 */
152 #define NMAX sizeof (((struct utmpx *)0)->ut_name)
153 #define HMAX sizeof (((struct utmpx *)0)->ut_host)
154 #define min(a, b) (((a) < (b)) ? (a) : (b))
155
156 /*
157 * Various useful files and string constants
158 */
159 #define SHELL "/usr/bin/sh"
160 #define SHELL2 "/sbin/sh"
161 #define SUBLOGIN "<!sublogin>"
162 #define LASTLOG "/var/adm/lastlog"
163 #define PROG_NAME "login"
164 #define HUSHLOGIN ".hushlogin"
165
166 /*
167 * Array and Buffer sizes
168 */
169 #define PBUFSIZE 8 /* max significant characters in a password */
170 #define MAXARGS 63 /* change value below if changing this */
171 #define MAXARGSWIDTH 2 /* log10(MAXARGS) */
172 #define MAXENV 1024
173 #define MAXLINE 2048
174
175 /*
176 * Miscellaneous constants
177 */
178 #define ROOTUID 0
179 #define ERROR 1
180 #define OK 0
181 #define LOG_ERROR 1
182 #define DONT_LOG_ERROR 0
183 #define TRUE 1
184 #define FALSE 0
185
186 /*
187 * Counters for counting the number of failed login attempts
188 */
189 static int trys = 0;
190 static int count = 1;
191
192 /*
193 * error value for login_exit() audit output (0 == no audit record)
194 */
195 static int audit_error = 0;
196
197 /*
198 * Externs a plenty
199 */
200 extern int getsecretkey();
201
202 /*
203 * The current user name
204 */
205 static char user_name[NMAX];
206 static char minusnam[16] = "-";
207
208 /*
209 * login_pid, used to find utmpx entry to update.
210 */
211 static pid_t login_pid;
212
213 /*
214 * locale environments to be passed to shells.
215 */
216 static char *localeenv[] = {
217 "LANG",
218 "LC_CTYPE", "LC_NUMERIC", "LC_TIME", "LC_COLLATE",
219 "LC_MONETARY", "LC_MESSAGES", "LC_ALL", 0};
220 static int locale_envmatch(char *, char *);
221
222 /*
223 * Environment variable support
224 */
225 static char shell[256] = { "SHELL=" };
226 static char home[MAXPATHLEN] = { "HOME=" };
227 static char term[64] = { "TERM=" };
228 static char logname[30] = { "LOGNAME=" };
229 static char timez[100] = { "TZ=" };
230 static char hertz[10] = { "HZ=" };
231 static char path[MAXPATHLEN] = { "PATH=" };
232 static char *newenv[10+MAXARGS] =
233 {home, path, logname, hertz, term, 0, 0};
234 static char **envinit = newenv;
235 static int basicenv;
236 static char *zero = (char *)0;
237 static char **envp;
238 #ifndef NO_MAIL
239 static char mail[30] = { "MAIL=/var/mail/" };
240 #endif
241 extern char **environ;
242 static char inputline[MAXLINE];
243
244 #define MAX_ID_LEN 256
245 #define MAX_REPOSITORY_LEN 256
246 #define MAX_PAMSERVICE_LEN 256
247
248 static char identity[MAX_ID_LEN];
249 static char repository[MAX_REPOSITORY_LEN];
250 static char progname[MAX_PAMSERVICE_LEN];
251
252
253 /*
254 * Strings used to prompt the user.
255 */
256 static char loginmsg[] = "login: ";
257 static char passwdmsg[] = "Password:";
258 static char incorrectmsg[] = "Login incorrect\n";
259
260 /*
261 * Password file support
262 */
263 static struct passwd *pwd = NULL;
264 static char remote_host[HMAX];
265 static char zone_name[ZONENAME_MAX];
266
267 /*
268 * Illegal passwd entries.
269 */
270 static struct passwd nouser = { "", "no:password", (uid_t)-1 };
271
272 /*
273 * Log file support
274 */
275 static char *log_entry[LOGTRYS];
276 static int writelog = 0;
277 static int lastlogok = 0;
278 static struct lastlog ll;
279 static int dosyslog = 0;
280 static int flogin = MAXTRYS; /* flag for SYSLOG_FAILED_LOGINS */
281
282 /*
283 * Default file toggles
284 */
285 static char *Pndefault = "/etc/default/login";
286 static char *Altshell = NULL;
287 static char *Console = NULL;
288 static int Passreqflag = 0;
289
290 #define DEFUMASK 022
291 static mode_t Umask = DEFUMASK;
292 static char *Def_tz = NULL;
293 static char *tmp_tz = NULL;
294 static char *Def_hertz = NULL;
295 #define SET_FSIZ 2 /* ulimit() command arg */
296 static long Def_ulimit = 0;
297 #define MAX_TIMEOUT (15 * 60)
298 #define DEF_TIMEOUT (5 * 60)
299 static unsigned Def_timeout = DEF_TIMEOUT;
300 static char *Def_path = NULL;
301 static char *Def_supath = NULL;
302 #define DEF_PATH "/usr/bin:" /* same as PATH */
303 #define DEF_SUPATH "/usr/sbin:/usr/bin" /* same as ROOTPATH */
304
305 /*
306 * Defaults for updating expired passwords
307 */
308 #define DEF_ATTEMPTS 3
309
310 /*
311 * ttyprompt will point to the environment variable TTYPROMPT.
312 * TTYPROMPT is set by ttymon if ttymon already wrote out the prompt.
313 */
314 static char *ttyprompt = NULL;
315 static char *ttyn = NULL;
316
317 /*
318 * Pass inherited environment. Used by telnetd in support of the telnet
319 * ENVIRON option.
320 */
321 static boolean_t pflag = B_FALSE;
322 static boolean_t uflag = B_FALSE;
323 static boolean_t Rflag = B_FALSE;
324 static boolean_t sflag = B_FALSE;
325 static boolean_t Uflag = B_FALSE;
326 static boolean_t tflag = B_FALSE;
327 static boolean_t hflag = B_FALSE;
328 static boolean_t rflag = B_FALSE;
329 static boolean_t zflag = B_FALSE;
330
331 /*
332 * Remote login support
333 */
334 static char rusername[NMAX+1], lusername[NMAX+1];
335 static char terminal[MAXPATHLEN];
336
337 /*
338 * Pre-authentication flag support
339 */
340 static int fflag;
341
342 static char ** getargs(char *);
343
344 static int login_conv(int, struct pam_message **,
345 struct pam_response **, void *);
346
347 static struct pam_conv pam_conv = {login_conv, NULL};
348 static pam_handle_t *pamh; /* Authentication handle */
349
350 /*
351 * Function declarations
352 */
353 static void turn_on_logging(void);
354 static void defaults(void);
355 static void usage(void);
356 static void process_rlogin(void);
357 static void login_authenticate();
358 static void setup_credentials(void);
359 static void adjust_nice(void);
360 static void update_utmpx_entry(int);
361 static void establish_user_environment(char **);
362 static void print_banner(void);
363 static void display_last_login_time(void);
364 static void exec_the_shell(void);
365 static int process_chroot_logins(void);
366 static void chdir_to_dir_user(void);
367 static void check_log(void);
368 static void validate_account(void);
369 static void doremoteterm(char *);
370 static int get_options(int, char **);
371 static void getstr(char *, int, char *);
372 static int legalenvvar(char *);
373 static void check_for_console(void);
374 static void check_for_dueling_unix(char *);
375 static void get_user_name(void);
376 static uint_t get_audit_id(void);
377 static void login_exit(int)__NORETURN;
378 static int logins_disabled(char *);
379 static void log_bad_attempts(void);
380 static int is_number(char *);
381
382 /*
383 * *** main ***
384 *
385 * The primary flow of control is directed in this routine.
386 * Control moves in line from top to bottom calling subfunctions
387 * which perform the bulk of the work. Many of these calls exit
388 * when a fatal error is encountered and do not return to main.
389 *
390 *
391 */
392
393 int
394 main(int argc, char *argv[], char **renvp)
395 {
396 int sublogin;
397 int pam_rc;
398
399 login_pid = getpid();
400
401 /*
402 * Set up Defaults and flags
403 */
404 defaults();
405 SCPYL(progname, PROG_NAME);
406
407 /*
408 * Set up default umask
409 */
410 if (Umask > ((mode_t)0777))
411 Umask = DEFUMASK;
412 (void) umask(Umask);
413
414 /*
415 * Set up default timeouts and delays
416 */
417 if (Def_timeout > MAX_TIMEOUT)
418 Def_timeout = MAX_TIMEOUT;
419 if (Sleeptime < 0 || Sleeptime > 5)
420 Sleeptime = SLEEPTIME;
421
422 (void) alarm(Def_timeout);
423
424 /*
425 * Ignore SIGQUIT and SIGINT and set nice to 0
426 */
427 (void) signal(SIGQUIT, SIG_IGN);
428 (void) signal(SIGINT, SIG_IGN);
429 (void) nice(0);
430
431 /*
432 * Set flag to disable the pid check if you find that you are
433 * a subsystem login.
434 */
435 sublogin = 0;
436 if (*renvp && strcmp(*renvp, SUBLOGIN) == 0)
437 sublogin = 1;
438
439 /*
440 * Parse Arguments
441 */
442 if (get_options(argc, argv) == -1) {
443 usage();
444 audit_error = ADT_FAIL_VALUE_BAD_CMD;
445 login_exit(1);
446 }
447
448 /*
449 * if devicename is not passed as argument, call ttyname(0)
450 */
451 if (ttyn == NULL) {
452 ttyn = ttyname(0);
453 if (ttyn == NULL)
454 ttyn = "/dev/???";
455 }
456
457 /*
458 * Call pam_start to initiate a PAM authentication operation
459 */
460
461 if ((pam_rc = pam_start(progname, user_name, &pam_conv, &pamh))
462 != PAM_SUCCESS) {
463 audit_error = ADT_FAIL_PAM + pam_rc;
464 login_exit(1);
465 }
466 if ((pam_rc = pam_set_item(pamh, PAM_TTY, ttyn)) != PAM_SUCCESS) {
467 audit_error = ADT_FAIL_PAM + pam_rc;
468 login_exit(1);
469 }
470 if ((pam_rc = pam_set_item(pamh, PAM_RHOST, remote_host)) !=
471 PAM_SUCCESS) {
472 audit_error = ADT_FAIL_PAM + pam_rc;
473 login_exit(1);
474 }
475
476 /*
477 * We currently only support special handling of the KRB5 PAM repository
478 */
479 if ((Rflag && strlen(repository)) &&
480 strcmp(repository, KRB5_REPOSITORY_NAME) == 0 &&
481 (uflag && strlen(identity))) {
482 krb5_repository_data_t krb5_data;
483 pam_repository_t pam_rep_data;
484
485 krb5_data.principal = identity;
486 krb5_data.flags = SUNW_PAM_KRB5_ALREADY_AUTHENTICATED;
487
488 pam_rep_data.type = repository;
489 pam_rep_data.scope = (void *)&krb5_data;
490 pam_rep_data.scope_len = sizeof (krb5_data);
491
492 (void) pam_set_item(pamh, PAM_REPOSITORY,
493 (void *)&pam_rep_data);
494 }
495
496 /*
497 * Open the log file which contains a record of successful and failed
498 * login attempts
499 */
500 turn_on_logging();
501
502 /*
503 * say "hi" to syslogd ..
504 */
505 openlog("login", 0, LOG_AUTH);
506
507 /*
508 * Do special processing for -r (rlogin) flag
509 */
510 if (rflag)
511 process_rlogin();
512
513 /*
514 * validate user
515 */
516 /* we are already authenticated. fill in what we must, then continue */
517 if (fflag) {
518 if ((pwd = getpwnam(user_name)) == NULL) {
519 audit_error = ADT_FAIL_VALUE_USERNAME;
520
521 log_bad_attempts();
522 (void) printf("Login failed: unknown user '%s'.\n",
523 user_name);
524 login_exit(1);
525 }
526 } else {
527 /*
528 * Perform the primary login authentication activity.
529 */
530 login_authenticate();
531 }
532
533 /* change root login, then we exec another login and try again */
534 if (process_chroot_logins() != OK)
535 login_exit(1);
536
537 /*
538 * If root login and not on system console then call exit(2)
539 */
540 check_for_console();
541
542 /*
543 * Check to see if a shutdown is in progress, if it is and
544 * we are not root then throw the user off the system
545 */
546 if (logins_disabled(user_name) == TRUE) {
547 audit_error = ADT_FAIL_VALUE_LOGIN_DISABLED;
548 login_exit(1);
549 }
550
551 if (pwd->pw_uid == 0) {
552 if (Def_supath != NULL)
553 Def_path = Def_supath;
554 else
555 Def_path = DEF_SUPATH;
556 }
557
558 /*
559 * Check account expiration and passwd aging
560 */
561 validate_account();
562
563 /*
564 * We only get here if we've been authenticated.
565 */
566
567 /*
568 * Now we set up the environment for the new user, which includes
569 * the users ulimit, nice value, ownership of this tty, uid, gid,
570 * and environment variables.
571 */
572 if (Def_ulimit > 0L && ulimit(SET_FSIZ, Def_ulimit) < 0L)
573 (void) printf("Could not set ULIMIT to %ld\n", Def_ulimit);
574
575 /* di_devperm_login() sends detailed errors to syslog */
576 if (di_devperm_login((const char *)ttyn, pwd->pw_uid, pwd->pw_gid,
577 NULL) == -1) {
578 (void) fprintf(stderr, "error processing /etc/logindevperm,"
579 " see syslog for more details\n");
580 }
581
582 adjust_nice(); /* passwd file can specify nice value */
583
584 setup_credentials(); /* Set user credentials - exits on failure */
585
586 /*
587 * NOTE: telnetd and rlogind rely upon this updating of utmpx
588 * to indicate that the authentication completed successfully,
589 * pam_open_session was called and therefore they are required to
590 * call pam_close_session.
591 */
592 update_utmpx_entry(sublogin);
593
594 /* set the real (and effective) UID */
595 if (setuid(pwd->pw_uid) == -1) {
596 login_exit(1);
597 }
598
599 /*
600 * Set up the basic environment for the exec. This includes
601 * HOME, PATH, LOGNAME, SHELL, TERM, TZ, HZ, and MAIL.
602 */
603 chdir_to_dir_user();
604
605 establish_user_environment(renvp);
606
607 (void) pam_end(pamh, PAM_SUCCESS); /* Done using PAM */
608 pamh = NULL;
609
610 if (pwd->pw_uid == 0) {
611 if (dosyslog) {
612 if (remote_host[0]) {
613 syslog(LOG_NOTICE, "ROOT LOGIN %s FROM %.*s",
614 ttyn, HMAX, remote_host);
615 } else
616 syslog(LOG_NOTICE, "ROOT LOGIN %s", ttyn);
617 }
618 }
619 closelog();
620
621 (void) signal(SIGQUIT, SIG_DFL);
622 (void) signal(SIGINT, SIG_DFL);
623
624 /*
625 * Display some useful information to the new user like the banner
626 * and last login time if not a quiet login.
627 */
628
629 if (access(HUSHLOGIN, F_OK) != 0) {
630 print_banner();
631 display_last_login_time();
632 }
633
634 /*
635 * Set SIGXCPU and SIGXFSZ to default disposition.
636 * Shells inherit signal disposition from parent.
637 * And the shells should have default dispositions
638 * for the two below signals.
639 */
640 (void) signal(SIGXCPU, SIG_DFL);
641 (void) signal(SIGXFSZ, SIG_DFL);
642
643 /*
644 * Now fire off the shell of choice
645 */
646 exec_the_shell();
647
648 /*
649 * All done
650 */
651 login_exit(1);
652 return (0);
653 }
654
655
656 /*
657 * *** Utility functions ***
658 */
659
660
661
662 /*
663 * donothing & catch - Signal catching functions
664 */
665
666 /*ARGSUSED*/
667 static void
668 donothing(int sig)
669 {
670 if (pamh)
671 (void) pam_end(pamh, PAM_ABORT);
672 }
673
674 #ifdef notdef
675 static int intrupt;
676
677 /*ARGSUSED*/
678 static void
679 catch(int sig)
680 {
681 ++intrupt;
682 }
683 #endif
684
685 /*
686 * *** Bad login logging support ***
687 */
688
689 /*
690 * badlogin() - log to the log file 'trys'
691 * unsuccessful attempts
692 */
693
694 static void
695 badlogin(void)
696 {
697 int retval, count1, fildes;
698
699 /*
700 * Tries to open the log file. If succeed, lock it and write
701 * in the failed attempts
702 */
703 if ((fildes = open(LOGINLOG, O_APPEND|O_WRONLY)) != -1) {
704
705 (void) sigset(SIGALRM, donothing);
706 (void) alarm(L_WAITTIME);
707 retval = lockf(fildes, F_LOCK, 0L);
708 (void) alarm(0);
709 (void) sigset(SIGALRM, SIG_DFL);
710 if (retval == 0) {
711 for (count1 = 0; count1 < trys; count1++)
712 (void) write(fildes, log_entry[count1],
713 (unsigned)strlen(log_entry[count1]));
714 (void) lockf(fildes, F_ULOCK, 0L);
715 }
716 (void) close(fildes);
717 }
718 }
719
720
721 /*
722 * log_bad_attempts - log each bad login attempt - called from
723 * login_authenticate. Exits when the maximum attempt
724 * count is exceeded.
725 */
726
727 static void
728 log_bad_attempts(void)
729 {
730 time_t timenow;
731
732 if (trys >= LOGTRYS)
733 return;
734 if (writelog) {
735 (void) time(&timenow);
736 (void) strncat(log_entry[trys], user_name, LNAME_SIZE);
737 (void) strncat(log_entry[trys], ":", (size_t)1);
738 (void) strncat(log_entry[trys], ttyn, TTYN_SIZE);
739 (void) strncat(log_entry[trys], ":", (size_t)1);
740 (void) strncat(log_entry[trys], ctime(&timenow), TIME_SIZE);
741 trys++;
742 }
743 if (count > flogin) {
744 if ((pwd = getpwnam(user_name)) != NULL) {
745 if (remote_host[0]) {
746 syslog(LOG_NOTICE,
747 "Login failure on %s from %.*s, "
748 "%.*s", ttyn, HMAX, remote_host,
749 NMAX, user_name);
750 } else {
751 syslog(LOG_NOTICE,
752 "Login failure on %s, %.*s",
753 ttyn, NMAX, user_name);
754 }
755 } else {
756 if (remote_host[0]) {
757 syslog(LOG_NOTICE,
758 "Login failure on %s from %.*s",
759 ttyn, HMAX, remote_host);
760 } else {
761 syslog(LOG_NOTICE,
762 "Login failure on %s", ttyn);
763 }
764 }
765 }
766 }
767
768
769 /*
770 * turn_on_logging - if the logfile exist, turn on attempt logging and
771 * initialize the string storage area
772 */
773
774 static void
775 turn_on_logging(void)
776 {
777 struct stat dbuf;
778 int i;
779
780 if (stat(LOGINLOG, &dbuf) == 0) {
781 writelog = 1;
782 for (i = 0; i < LOGTRYS; i++) {
783 if (!(log_entry[i] = malloc((size_t)ENT_SIZE))) {
784 writelog = 0;
785 break;
786 }
787 *log_entry[i] = '\0';
788 }
789 }
790 }
791
792
793 /*
794 * login_conv():
795 * This is the conv (conversation) function called from
796 * a PAM authentication module to print error messages
797 * or garner information from the user.
798 */
799 /*ARGSUSED*/
800 static int
801 login_conv(int num_msg, struct pam_message **msg,
802 struct pam_response **response, void *appdata_ptr)
803 {
804 struct pam_message *m;
805 struct pam_response *r;
806 char *temp;
807 int k, i;
808
809 if (num_msg <= 0)
810 return (PAM_CONV_ERR);
811
812 *response = calloc(num_msg, sizeof (struct pam_response));
813 if (*response == NULL)
814 return (PAM_BUF_ERR);
815
816 k = num_msg;
817 m = *msg;
818 r = *response;
819 while (k--) {
820
821 switch (m->msg_style) {
822
823 case PAM_PROMPT_ECHO_OFF:
824 errno = 0;
825 temp = getpassphrase(m->msg);
826 if (temp != NULL) {
827 if (errno == EINTR)
828 return (PAM_CONV_ERR);
829
830 r->resp = strdup(temp);
831 if (r->resp == NULL) {
832 /* free responses */
833 r = *response;
834 for (i = 0; i < num_msg; i++, r++) {
835 if (r->resp)
836 free(r->resp);
837 }
838 free(*response);
839 *response = NULL;
840 return (PAM_BUF_ERR);
841 }
842 }
843
844 m++;
845 r++;
846 break;
847
848 case PAM_PROMPT_ECHO_ON:
849 if (m->msg != NULL)
850 (void) fputs(m->msg, stdout);
851 r->resp = calloc(1, PAM_MAX_RESP_SIZE);
852 if (r->resp == NULL) {
853 /* free responses */
854 r = *response;
855 for (i = 0; i < num_msg; i++, r++) {
856 if (r->resp)
857 free(r->resp);
858 }
859 free(*response);
860 *response = NULL;
861 return (PAM_BUF_ERR);
862 }
863 /*
864 * The response might include environment variables
865 * information. We should store that information in
866 * envp if there is any; otherwise, envp is set to
867 * NULL.
868 */
869 bzero((void *)inputline, MAXLINE);
870
871 envp = getargs(inputline);
872
873 /* If we read in any input, process it. */
874 if (inputline[0] != '\0') {
875 int len;
876
877 if (envp != (char **)NULL)
878 /*
879 * If getargs() did not return NULL,
880 * *envp is the first string in
881 * inputline. envp++ makes envp point
882 * to environment variables information
883 * or be NULL.
884 */
885 envp++;
886
887 (void) strncpy(r->resp, inputline,
888 PAM_MAX_RESP_SIZE-1);
889 r->resp[PAM_MAX_RESP_SIZE-1] = NULL;
890 len = strlen(r->resp);
891 if (r->resp[len-1] == '\n')
892 r->resp[len-1] = '\0';
893 } else {
894 login_exit(1);
895 }
896 m++;
897 r++;
898 break;
899
900 case PAM_ERROR_MSG:
901 if (m->msg != NULL) {
902 (void) fputs(m->msg, stderr);
903 (void) fputs("\n", stderr);
904 }
905 m++;
906 r++;
907 break;
908 case PAM_TEXT_INFO:
909 if (m->msg != NULL) {
910 (void) fputs(m->msg, stdout);
911 (void) fputs("\n", stdout);
912 }
913 m++;
914 r++;
915 break;
916
917 default:
918 break;
919 }
920 }
921 return (PAM_SUCCESS);
922 }
923
924 /*
925 * verify_passwd - Authenticates the user.
926 * Returns: PAM_SUCCESS if authentication successful,
927 * PAM error code if authentication fails.
928 */
929
930 static int
931 verify_passwd(void)
932 {
933 int error;
934 char *user;
935 int flag = (Passreqflag ? PAM_DISALLOW_NULL_AUTHTOK : 0);
936
937 /*
938 * PAM authenticates the user for us.
939 */
940 error = pam_authenticate(pamh, flag);
941
942 /* get the user_name from the pam handle */
943 (void) pam_get_item(pamh, PAM_USER, (void**)&user);
944
945 if (user == NULL || *user == '\0')
946 return (PAM_SYSTEM_ERR);
947
948 SCPYL(user_name, user);
949 check_for_dueling_unix(user_name);
950
951 if (((pwd = getpwnam(user_name)) == NULL) &&
952 (error != PAM_USER_UNKNOWN)) {
953 return (PAM_SYSTEM_ERR);
954 }
955
956 return (error);
957 }
958
959 /*
960 * quotec - Called by getargs
961 */
962
963 static int
964 quotec(void)
965 {
966 int c, i, num;
967
968 switch (c = getc(stdin)) {
969
970 case 'n':
971 c = '\n';
972 break;
973
974 case 'r':
975 c = '\r';
976 break;
977
978 case 'v':
979 c = '\013';
980 break;
981
982 case 'b':
983 c = '\b';
984 break;
985
986 case 't':
987 c = '\t';
988 break;
989
990 case 'f':
991 c = '\f';
992 break;
993
994 case '0':
995 case '1':
996 case '2':
997 case '3':
998 case '4':
999 case '5':
1000 case '6':
1001 case '7':
1002 for (num = 0, i = 0; i < 3; i++) {
1003 num = num * 8 + (c - '0');
1004 if ((c = getc(stdin)) < '0' || c > '7')
1005 break;
1006 }
1007 (void) ungetc(c, stdin);
1008 c = num & 0377;
1009 break;
1010
1011 default:
1012 break;
1013 }
1014 return (c);
1015 }
1016
1017 /*
1018 * getargs - returns an input line. Exits if EOF encountered.
1019 */
1020 #define WHITESPACE 0
1021 #define ARGUMENT 1
1022
1023 static char **
1024 getargs(char *input_line)
1025 {
1026 static char envbuf[MAXLINE];
1027 static char *args[MAXARGS];
1028 char *ptr, **answer;
1029 int c;
1030 int state;
1031 char *p = input_line;
1032
1033 ptr = envbuf;
1034 answer = &args[0];
1035 state = WHITESPACE;
1036
1037 while ((c = getc(stdin)) != EOF && answer < &args[MAXARGS-1]) {
1038
1039 *(input_line++) = c;
1040
1041 switch (c) {
1042
1043 case '\n':
1044 if (ptr == &envbuf[0])
1045 return ((char **)NULL);
1046 *input_line = *ptr = '\0';
1047 *answer = NULL;
1048 return (&args[0]);
1049
1050 case ' ':
1051 case '\t':
1052 if (state == ARGUMENT) {
1053 *ptr++ = '\0';
1054 state = WHITESPACE;
1055 }
1056 break;
1057
1058 case '\\':
1059 c = quotec();
1060
1061 default:
1062 if (state == WHITESPACE) {
1063 *answer++ = ptr;
1064 state = ARGUMENT;
1065 }
1066 *ptr++ = c;
1067 }
1068
1069 /* Attempt at overflow, exit */
1070 if (input_line - p >= MAXLINE - 1 ||
1071 ptr >= &envbuf[sizeof (envbuf) - 1]) {
1072 audit_error = ADT_FAIL_VALUE_INPUT_OVERFLOW;
1073 login_exit(1);
1074 }
1075 }
1076
1077 /*
1078 * If we left loop because an EOF was received or we've overflown
1079 * args[], exit immediately.
1080 */
1081 login_exit(0);
1082 /* NOTREACHED */
1083 }
1084
1085 /*
1086 * get_user_name - Gets the user name either passed in, or from the
1087 * login: prompt.
1088 */
1089
1090 static void
1091 get_user_name(void)
1092 {
1093 FILE *fp;
1094
1095 if ((fp = fopen(ISSUEFILE, "r")) != NULL) {
1096 char *ptr, buffer[BUFSIZ];
1097 while ((ptr = fgets(buffer, sizeof (buffer), fp)) != NULL) {
1098 (void) fputs(ptr, stdout);
1099 }
1100 (void) fclose(fp);
1101 }
1102
1103 /*
1104 * if TTYPROMPT is not set, use our own prompt
1105 * otherwise, use ttyprompt. We just set PAM_USER_PROMPT
1106 * and let the module do the prompting.
1107 */
1108
1109 if ((ttyprompt == NULL) || (*ttyprompt == '\0'))
1110 (void) pam_set_item(pamh, PAM_USER_PROMPT, (void *)loginmsg);
1111 else
1112 (void) pam_set_item(pamh, PAM_USER_PROMPT, (void *)ttyprompt);
1113
1114 envp = &zero; /* XXX: is this right? */
1115 }
1116
1117
1118 /*
1119 * Check_for_dueling_unix - Check to see if the another login is talking
1120 * to the line we've got open as a login port
1121 * Exits if we're talking to another unix system
1122 */
1123
1124 static void
1125 check_for_dueling_unix(char *inputline)
1126 {
1127 if (EQN(loginmsg, inputline) || EQN(passwdmsg, inputline) ||
1128 EQN(incorrectmsg, inputline)) {
1129 (void) printf("Looking at a login line.\n");
1130 login_exit(8);
1131 }
1132 }
1133
1134 /*
1135 * logins_disabled - if the file /etc/nologin exists and the user is not
1136 * root then do not permit them to login
1137 */
1138 static int
1139 logins_disabled(char *user_name)
1140 {
1141 FILE *nlfd;
1142 int c;
1143 if (!EQN("root", user_name) &&
1144 ((nlfd = fopen(NOLOGIN, "r")) != (FILE *)NULL)) {
1145 while ((c = getc(nlfd)) != EOF)
1146 (void) putchar(c);
1147 (void) fflush(stdout);
1148 (void) sleep(5);
1149 return (TRUE);
1150 }
1151 return (FALSE);
1152 }
1153
1154 #define DEFAULT_CONSOLE "/dev/console"
1155
1156 /*
1157 * check_for_console - Checks if we're getting a root login on the
1158 * console, or a login from the global zone. Exits if not.
1159 *
1160 * If CONSOLE is set to /dev/console in /etc/default/login, then root logins
1161 * on /dev/vt/# are permitted as well. /dev/vt/# does not exist in non-global
1162 * zones, but checking them does no harm.
1163 */
1164 static void
1165 check_for_console(void)
1166 {
1167 const char *consoles[] = { "/dev/console", "/dev/vt/", NULL };
1168 int i;
1169
1170 if (pwd == NULL || pwd->pw_uid != 0 || zflag != B_FALSE ||
1171 Console == NULL)
1172 return;
1173
1174 if (strcmp(Console, DEFAULT_CONSOLE) == 0) {
1175 for (i = 0; consoles[i] != NULL; i ++) {
1176 if (strncmp(ttyn, consoles[i],
1177 strlen(consoles[i])) == 0)
1178 return;
1179 }
1180 } else {
1181 if (strcmp(ttyn, Console) == 0)
1182 return;
1183 }
1184
1185 (void) printf("Not on system console\n");
1186
1187 audit_error = ADT_FAIL_VALUE_CONSOLE;
1188 login_exit(10);
1189
1190 }
1191
1192 /*
1193 * List of environment variables or environment variable prefixes that should
1194 * not be propagated across logins, such as when the login -p option is used.
1195 */
1196 static const char *const illegal[] = {
1197 "SHELL=",
1198 "HOME=",
1199 "LOGNAME=",
1200 #ifndef NO_MAIL
1201 "MAIL=",
1202 #endif
1203 "CDPATH=",
1204 "IFS=",
1205 "PATH=",
1206 "LD_",
1207 "SMF_",
1208 NULL
1209 };
1210
1211 /*
1212 * legalenvvar - Is it legal to insert this environmental variable?
1213 */
1214
1215 static int
1216 legalenvvar(char *s)
1217 {
1218 const char *const *p;
1219
1220 for (p = &illegal[0]; *p; p++) {
1221 if (strncmp(s, *p, strlen(*p)) == 0)
1222 return (0);
1223 }
1224
1225 return (1);
1226 }
1227
1228
1229 /*
1230 * getstr - Get a string from standard input
1231 * Calls exit if read(2) fails.
1232 */
1233
1234 static void
1235 getstr(char *buf, int cnt, char *err)
1236 {
1237 char c;
1238
1239 do {
1240 if (read(0, &c, 1) != 1)
1241 login_exit(1);
1242 *buf++ = c;
1243 } while (--cnt > 1 && c != 0);
1244
1245 *buf = 0;
1246 err = err; /* For lint */
1247 }
1248
1249
1250 /*
1251 * defaults - read defaults
1252 */
1253
1254 static void
1255 defaults(void)
1256 {
1257 int flags;
1258 char *ptr;
1259
1260 if (defopen(Pndefault) == 0) {
1261 /*
1262 * ignore case
1263 */
1264 flags = defcntl(DC_GETFLAGS, 0);
1265 TURNOFF(flags, DC_CASE);
1266 (void) defcntl(DC_SETFLAGS, flags);
1267
1268 if ((Console = defread("CONSOLE=")) != NULL)
1269 Console = strdup(Console);
1270
1271 if ((Altshell = defread("ALTSHELL=")) != NULL)
1272 Altshell = strdup(Altshell);
1273
1274 if ((ptr = defread("PASSREQ=")) != NULL &&
1275 strcasecmp("YES", ptr) == 0)
1276 Passreqflag = 1;
1277
1278 if ((Def_tz = defread("TIMEZONE=")) != NULL)
1279 Def_tz = strdup(Def_tz);
1280
1281 if ((Def_hertz = defread("HZ=")) != NULL)
1282 Def_hertz = strdup(Def_hertz);
1283
1284 if ((Def_path = defread("PATH=")) != NULL)
1285 Def_path = strdup(Def_path);
1286
1287 if ((Def_supath = defread("SUPATH=")) != NULL)
1288 Def_supath = strdup(Def_supath);
1289
1290 if ((ptr = defread("ULIMIT=")) != NULL)
1291 Def_ulimit = atol(ptr);
1292
1293 if ((ptr = defread("TIMEOUT=")) != NULL)
1294 Def_timeout = (unsigned)atoi(ptr);
1295
1296 if ((ptr = defread("UMASK=")) != NULL)
1297 if (sscanf(ptr, "%lo", &Umask) != 1)
1298 Umask = DEFUMASK;
1299
1300 if ((ptr = defread("SLEEPTIME=")) != NULL) {
1301 if (is_number(ptr))
1302 Sleeptime = atoi(ptr);
1303 }
1304
1305 if ((ptr = defread("DISABLETIME=")) != NULL) {
1306 if (is_number(ptr))
1307 Disabletime = atoi(ptr);
1308 }
1309
1310 if ((ptr = defread("SYSLOG=")) != NULL)
1311 dosyslog = strcmp(ptr, "YES") == 0;
1312
1313 if ((ptr = defread("RETRIES=")) != NULL) {
1314 if (is_number(ptr))
1315 retry = atoi(ptr);
1316 }
1317
1318 if ((ptr = defread("SYSLOG_FAILED_LOGINS=")) != NULL) {
1319 if (is_number(ptr))
1320 flogin = atoi(ptr);
1321 else
1322 flogin = retry;
1323 } else
1324 flogin = retry;
1325 (void) defopen((char *)NULL);
1326 }
1327 }
1328
1329
1330 /*
1331 * get_options(argc, argv)
1332 * - parse the cmd line.
1333 * - return 0 if successful, -1 if failed.
1334 * Calls login_exit() on misuse of -r, -h, and -z flags
1335 */
1336
1337 static int
1338 get_options(int argc, char *argv[])
1339 {
1340 int c;
1341 int errflg = 0;
1342 char sflagname[NMAX+1];
1343 const char *flags_message = "Only one of -r, -h and -z allowed\n";
1344
1345 while ((c = getopt(argc, argv, "u:s:R:f:h:r:pad:t:U:z:")) != -1) {
1346 switch (c) {
1347 case 'a':
1348 break;
1349
1350 case 'd':
1351 /*
1352 * Must be root to pass in device name
1353 * otherwise we exit() as punishment for trying.
1354 */
1355 if (getuid() != 0 || geteuid() != 0) {
1356 audit_error = ADT_FAIL_VALUE_DEVICE_PERM;
1357 login_exit(1); /* sigh */
1358 /*NOTREACHED*/
1359 }
1360 ttyn = optarg;
1361 break;
1362
1363 case 'h':
1364 if (hflag || rflag || zflag) {
1365 (void) fprintf(stderr, flags_message);
1366 login_exit(1);
1367 }
1368 hflag = B_TRUE;
1369 SCPYL(remote_host, optarg);
1370 if (argv[optind]) {
1371 if (argv[optind][0] != '-') {
1372 SCPYL(terminal, argv[optind]);
1373 optind++;
1374 } else {
1375 /*
1376 * Allow "login -h hostname -" to
1377 * skip setting up an username as "-".
1378 */
1379 if (argv[optind][1] == '\0')
1380 optind++;
1381 }
1382
1383 }
1384 SCPYL(progname, "telnet");
1385 break;
1386
1387 case 'r':
1388 if (hflag || rflag || zflag) {
1389 (void) fprintf(stderr, flags_message);
1390 login_exit(1);
1391 }
1392 rflag = B_TRUE;
1393 SCPYL(remote_host, optarg);
1394 SCPYL(progname, "rlogin");
1395 break;
1396
1397 case 'p':
1398 pflag = B_TRUE;
1399 break;
1400
1401 case 'f':
1402 /*
1403 * Must be root to bypass authentication
1404 * otherwise we exit() as punishment for trying.
1405 */
1406 if (getuid() != 0 || geteuid() != 0) {
1407 audit_error = ADT_FAIL_VALUE_AUTH_BYPASS;
1408
1409 login_exit(1); /* sigh */
1410 /*NOTREACHED*/
1411 }
1412 /* save fflag user name for future use */
1413 SCPYL(user_name, optarg);
1414 fflag = B_TRUE;
1415 break;
1416 case 'u':
1417 if (!strlen(optarg)) {
1418 (void) fprintf(stderr,
1419 "Empty string supplied with -u\n");
1420 login_exit(1);
1421 }
1422 SCPYL(identity, optarg);
1423 uflag = B_TRUE;
1424 break;
1425 case 's':
1426 if (!strlen(optarg)) {
1427 (void) fprintf(stderr,
1428 "Empty string supplied with -s\n");
1429 login_exit(1);
1430 }
1431 SCPYL(sflagname, optarg);
1432 sflag = B_TRUE;
1433 break;
1434 case 'R':
1435 if (!strlen(optarg)) {
1436 (void) fprintf(stderr,
1437 "Empty string supplied with -R\n");
1438 login_exit(1);
1439 }
1440 SCPYL(repository, optarg);
1441 Rflag = B_TRUE;
1442 break;
1443 case 't':
1444 if (!strlen(optarg)) {
1445 (void) fprintf(stderr,
1446 "Empty string supplied with -t\n");
1447 login_exit(1);
1448 }
1449 SCPYL(terminal, optarg);
1450 tflag = B_TRUE;
1451 break;
1452 case 'U':
1453 /*
1454 * Kerberized rlogind may fork us with
1455 * -U "" if the rlogin client used the "-a"
1456 * option to send a NULL username. This is done
1457 * to force login to prompt for a user/password.
1458 * However, if Kerberos auth was used, we dont need
1459 * to prompt, so we will accept the option and
1460 * handle the situation later.
1461 */
1462 SCPYL(rusername, optarg);
1463 Uflag = B_TRUE;
1464 break;
1465 case 'z':
1466 if (hflag || rflag || zflag) {
1467 (void) fprintf(stderr, flags_message);
1468 login_exit(1);
1469 }
1470 (void) snprintf(zone_name, sizeof (zone_name),
1471 "zone:%s", optarg);
1472 SCPYL(progname, "zlogin");
1473 zflag = B_TRUE;
1474 break;
1475 default:
1476 errflg++;
1477 break;
1478 } /* end switch */
1479 } /* end while */
1480
1481 /*
1482 * If the 's svcname' flag was used, override the progname
1483 * value that is to be used in the pam_start call.
1484 */
1485 if (sflag)
1486 SCPYL(progname, sflagname);
1487
1488 /*
1489 * get the prompt set by ttymon
1490 */
1491 ttyprompt = getenv("TTYPROMPT");
1492
1493 if ((ttyprompt != NULL) && (*ttyprompt != '\0')) {
1494 /*
1495 * if ttyprompt is set, there should be data on
1496 * the stream already.
1497 */
1498 if ((envp = getargs(inputline)) != (char **)NULL) {
1499 /*
1500 * don't get name if name passed as argument.
1501 */
1502 SCPYL(user_name, *envp++);
1503 }
1504 } else if (optind < argc) {
1505 SCPYL(user_name, argv[optind]);
1506 (void) SCPYL(inputline, user_name);
1507 (void) strlcat(inputline, " \n", sizeof (inputline));
1508 envp = &argv[optind+1];
1509
1510 if (!fflag)
1511 SCPYL(lusername, user_name);
1512 }
1513
1514 if (errflg)
1515 return (-1);
1516 return (0);
1517 }
1518
1519 /*
1520 * usage - Print usage message
1521 *
1522 */
1523 static void
1524 usage(void)
1525 {
1526 (void) fprintf(stderr,
1527 "usage:\n"
1528 " login [-p] [-d device] [-R repository] [-s service]\n"
1529 "\t[-t terminal] [-u identity] [-U ruser]\n"
1530 "\t[-h hostname [terminal] | -r hostname] [name [environ]...]\n");
1531
1532 }
1533
1534 /*
1535 * doremoteterm - Sets the appropriate ioctls for a remote terminal
1536 */
1537 static char *speeds[] = {
1538 "0", "50", "75", "110", "134", "150", "200", "300",
1539 "600", "1200", "1800", "2400", "4800", "9600", "19200", "38400",
1540 "57600", "76800", "115200", "153600", "230400", "307200", "460800",
1541 "921600"
1542 };
1543
1544 #define NSPEEDS (sizeof (speeds) / sizeof (speeds[0]))
1545
1546
1547 static void
1548 doremoteterm(char *term)
1549 {
1550 struct termios tp;
1551 char *cp = strchr(term, '/'), **cpp;
1552 char *speed;
1553
1554 (void) ioctl(0, TCGETS, &tp);
1555
1556 if (cp) {
1557 *cp++ = '\0';
1558 speed = cp;
1559 cp = strchr(speed, '/');
1560
1561 if (cp)
1562 *cp++ = '\0';
1563
1564 for (cpp = speeds; cpp < &speeds[NSPEEDS]; cpp++)
1565 if (strcmp(*cpp, speed) == 0) {
1566 (void) cfsetospeed(&tp, cpp-speeds);
1567 break;
1568 }
1569 }
1570
1571 tp.c_lflag |= ECHO|ICANON;
1572 tp.c_iflag |= IGNPAR|ICRNL;
1573
1574 (void) ioctl(0, TCSETS, &tp);
1575
1576 }
1577
1578 /*
1579 * Process_rlogin - Does the work that rlogin and telnet
1580 * need done
1581 */
1582 static void
1583 process_rlogin(void)
1584 {
1585 /*
1586 * If a Kerberized rlogin was initiated, then these fields
1587 * must be read by rlogin daemon itself and passed down via
1588 * cmd line args.
1589 */
1590 if (!Uflag && !strlen(rusername))
1591 getstr(rusername, sizeof (rusername), "remuser");
1592 if (!strlen(lusername))
1593 getstr(lusername, sizeof (lusername), "locuser");
1594 if (!tflag && !strlen(terminal))
1595 getstr(terminal, sizeof (terminal), "Terminal type");
1596
1597 if (strlen(terminal))
1598 doremoteterm(terminal);
1599
1600 /* fflag has precedence over stuff passed by rlogind */
1601 if (fflag || getuid()) {
1602 pwd = &nouser;
1603 return;
1604 } else {
1605 if (pam_set_item(pamh, PAM_USER, lusername) != PAM_SUCCESS)
1606 login_exit(1);
1607
1608 pwd = getpwnam(lusername);
1609 if (pwd == NULL) {
1610 pwd = &nouser;
1611 return;
1612 }
1613 }
1614
1615 /*
1616 * Update PAM on the user name
1617 */
1618 if (strlen(lusername) &&
1619 pam_set_item(pamh, PAM_USER, lusername) != PAM_SUCCESS)
1620 login_exit(1);
1621
1622 if (strlen(rusername) &&
1623 pam_set_item(pamh, PAM_RUSER, rusername) != PAM_SUCCESS)
1624 login_exit(1);
1625
1626 SCPYL(user_name, lusername);
1627 envp = &zero;
1628 lusername[0] = '\0';
1629 }
1630
1631 /*
1632 * *** Account validation routines ***
1633 *
1634 */
1635
1636 /*
1637 * validate_account - This is the PAM version of validate.
1638 */
1639
1640 static void
1641 validate_account(void)
1642 {
1643 int error;
1644 int flag;
1645 int tries; /* new password retries */
1646
1647 (void) alarm(0); /* give user time to come up with password */
1648
1649 check_log();
1650
1651 if (Passreqflag)
1652 flag = PAM_DISALLOW_NULL_AUTHTOK;
1653 else
1654 flag = 0;
1655
1656 if ((error = pam_acct_mgmt(pamh, flag)) != PAM_SUCCESS) {
1657 if (error == PAM_NEW_AUTHTOK_REQD) {
1658 tries = 1;
1659 error = PAM_AUTHTOK_ERR;
1660 while (error == PAM_AUTHTOK_ERR &&
1661 tries <= DEF_ATTEMPTS) {
1662 if (tries > 1)
1663 (void) printf("Try again\n\n");
1664
1665 (void) printf("Choose a new password.\n");
1666
1667 error = pam_chauthtok(pamh,
1668 PAM_CHANGE_EXPIRED_AUTHTOK);
1669 if (error == PAM_TRY_AGAIN) {
1670 (void) sleep(1);
1671 error = pam_chauthtok(pamh,
1672 PAM_CHANGE_EXPIRED_AUTHTOK);
1673 }
1674 tries++;
1675 }
1676
1677 if (error != PAM_SUCCESS) {
1678 if (dosyslog)
1679 syslog(LOG_CRIT,
1680 "change password failure: %s",
1681 pam_strerror(pamh, error));
1682 audit_error = ADT_FAIL_PAM + error;
1683 login_exit(1);
1684 } else {
1685 audit_success(ADT_passwd, pwd, zone_name);
1686 }
1687 } else {
1688 (void) printf(incorrectmsg);
1689
1690 if (dosyslog)
1691 syslog(LOG_CRIT,
1692 "login account failure: %s",
1693 pam_strerror(pamh, error));
1694 audit_error = ADT_FAIL_PAM + error;
1695 login_exit(1);
1696 }
1697 }
1698 }
1699
1700 /*
1701 * Check_log - This is really a hack because PAM checks the log, but login
1702 * wants to know if the log is okay and PAM doesn't have
1703 * a module independent way of handing this info back.
1704 */
1705
1706 static void
1707 check_log(void)
1708 {
1709 int fdl;
1710 long long offset;
1711
1712 offset = (long long) pwd->pw_uid * (long long) sizeof (struct lastlog);
1713
1714 if ((fdl = open(LASTLOG, O_RDWR|O_CREAT, 0444)) >= 0) {
1715 if (llseek(fdl, offset, SEEK_SET) == offset &&
1716 read(fdl, (char *)&ll, sizeof (ll)) == sizeof (ll) &&
1717 ll.ll_time != 0)
1718 lastlogok = 1;
1719 (void) close(fdl);
1720 }
1721 }
1722
1723 /*
1724 * chdir_to_dir_user - Now chdir after setuid/setgid have happened to
1725 * place us in the user's home directory just in
1726 * case it was protected and the first chdir failed.
1727 * No chdir errors should happen at this point because
1728 * all failures should have happened on the first
1729 * time around.
1730 */
1731
1732 static void
1733 chdir_to_dir_user(void)
1734 {
1735 if (chdir(pwd->pw_dir) < 0) {
1736 if (chdir("/") < 0) {
1737 (void) printf("No directory!\n");
1738 /*
1739 * This probably won't work since we can't get to /.
1740 */
1741 if (dosyslog) {
1742 if (remote_host[0]) {
1743 syslog(LOG_CRIT,
1744 "LOGIN FAILURES ON %s FROM %.*s ",
1745 " %.*s", ttyn, HMAX,
1746 remote_host, NMAX, pwd->pw_name);
1747 } else {
1748 syslog(LOG_CRIT,
1749 "LOGIN FAILURES ON %s, %.*s",
1750 ttyn, NMAX, pwd->pw_name);
1751 }
1752 }
1753 closelog();
1754 (void) sleep(Disabletime);
1755 exit(1);
1756 } else {
1757 (void) printf("No directory! Logging in with home=/\n");
1758 pwd->pw_dir = "/";
1759 }
1760 }
1761 }
1762
1763
1764 /*
1765 * login_authenticate - Performs the main authentication work
1766 * 1. Prints the login prompt
1767 * 2. Requests and verifys the password
1768 * 3. Checks the port password
1769 */
1770
1771 static void
1772 login_authenticate(void)
1773 {
1774 char *user;
1775 int err;
1776 int login_successful = 0;
1777
1778 do {
1779 /* if scheme broken, then nothing to do but quit */
1780 if (pam_get_item(pamh, PAM_USER, (void **)&user) != PAM_SUCCESS)
1781 exit(1);
1782
1783 /*
1784 * only get name from utility if it is not already
1785 * supplied by pam_start or a pam_set_item.
1786 */
1787 if (!user || !user[0]) {
1788 /* use call back to get user name */
1789 get_user_name();
1790 }
1791
1792 err = verify_passwd();
1793
1794 /*
1795 * If root login and not on system console then call exit(2)
1796 */
1797 check_for_console();
1798
1799 switch (err) {
1800 case PAM_SUCCESS:
1801 case PAM_NEW_AUTHTOK_REQD:
1802 /*
1803 * Officially, pam_authenticate() shouldn't return this
1804 * but it's probably the right thing to return if
1805 * PAM_DISALLOW_NULL_AUTHTOK is set so the user will
1806 * be forced to change password later in this code.
1807 */
1808 count = 0;
1809 login_successful = 1;
1810 break;
1811 case PAM_MAXTRIES:
1812 count = retry;
1813 /*FALLTHROUGH*/
1814 case PAM_AUTH_ERR:
1815 case PAM_AUTHINFO_UNAVAIL:
1816 case PAM_USER_UNKNOWN:
1817 audit_failure(get_audit_id(), ADT_FAIL_PAM + err, pwd,
1818 remote_host, ttyn, zone_name);
1819 log_bad_attempts();
1820 break;
1821 case PAM_ABORT:
1822 log_bad_attempts();
1823 (void) sleep(Disabletime);
1824 (void) printf(incorrectmsg);
1825
1826 audit_error = ADT_FAIL_PAM + err;
1827 login_exit(1);
1828 /*NOTREACHED*/
1829 default: /* Some other PAM error */
1830 audit_error = ADT_FAIL_PAM + err;
1831 login_exit(1);
1832 /*NOTREACHED*/
1833 }
1834
1835 if (login_successful)
1836 break;
1837
1838 /* sleep after bad passwd */
1839 if (count)
1840 (void) sleep(Sleeptime);
1841 (void) printf(incorrectmsg);
1842 /* force name to be null in this case */
1843 if (pam_set_item(pamh, PAM_USER, NULL) != PAM_SUCCESS)
1844 login_exit(1);
1845 if (pam_set_item(pamh, PAM_RUSER, NULL) != PAM_SUCCESS)
1846 login_exit(1);
1847 } while (count++ < retry);
1848
1849 if (count >= retry) {
1850 audit_failure(get_audit_id(), ADT_FAIL_VALUE_MAX_TRIES, pwd,
1851 remote_host, ttyn, zone_name);
1852 /*
1853 * If logging is turned on, output the
1854 * string storage area to the log file,
1855 * and sleep for Disabletime
1856 * seconds before exiting.
1857 */
1858 if (writelog)
1859 badlogin();
1860 if (dosyslog) {
1861 if ((pwd = getpwnam(user_name)) != NULL) {
1862 if (remote_host[0]) {
1863 syslog(LOG_CRIT,
1864 "REPEATED LOGIN FAILURES ON %s "
1865 "FROM %.*s, %.*s",
1866 ttyn, HMAX, remote_host, NMAX,
1867 user_name);
1868 } else {
1869 syslog(LOG_CRIT,
1870 "REPEATED LOGIN FAILURES ON "
1871 "%s, %.*s",
1872 ttyn, NMAX, user_name);
1873 }
1874 } else {
1875 if (remote_host[0]) {
1876 syslog(LOG_CRIT,
1877 "REPEATED LOGIN FAILURES ON %s "
1878 "FROM %.*s",
1879 ttyn, HMAX, remote_host);
1880 } else {
1881 syslog(LOG_CRIT,
1882 "REPEATED LOGIN FAILURES ON %s",
1883 ttyn);
1884 }
1885 }
1886 }
1887 (void) sleep(Disabletime);
1888 exit(1);
1889 }
1890
1891 }
1892
1893 /*
1894 * *** Credential Related routines ***
1895 *
1896 */
1897
1898 /*
1899 * setup_credentials - sets the group ID, initializes the groups
1900 * and sets up the secretkey.
1901 * Exits if a failure occurrs.
1902 */
1903
1904
1905 /*
1906 * setup_credentials - PAM does all the work for us on this one.
1907 */
1908
1909 static void
1910 setup_credentials(void)
1911 {
1912 int error = 0;
1913
1914 /* set the real (and effective) GID */
1915 if (setgid(pwd->pw_gid) == -1) {
1916 login_exit(1);
1917 }
1918
1919 /*
1920 * Initialize the supplementary group access list.
1921 */
1922 if ((user_name[0] == '\0') ||
1923 (initgroups(user_name, pwd->pw_gid) == -1)) {
1924 audit_error = ADT_FAIL_VALUE_PROGRAM;
1925 login_exit(1);
1926 }
1927
1928 if ((error = pam_setcred(pamh, zflag ? PAM_REINITIALIZE_CRED :
1929 PAM_ESTABLISH_CRED)) != PAM_SUCCESS) {
1930 audit_error = ADT_FAIL_PAM + error;
1931 login_exit(error);
1932 }
1933
1934 /*
1935 * Record successful login and fork process that records logout.
1936 * We have to do this after setting credentials because pam_setcred()
1937 * loads key audit info into the cred, but before setuid() so audit
1938 * system calls will work.
1939 */
1940 audit_success(get_audit_id(), pwd, zone_name);
1941 }
1942
1943 static uint_t
1944 get_audit_id(void)
1945 {
1946 if (rflag)
1947 return (ADT_rlogin);
1948 else if (hflag)
1949 return (ADT_telnet);
1950 else if (zflag)
1951 return (ADT_zlogin);
1952
1953 return (ADT_login);
1954 }
1955
1956 /*
1957 *
1958 * *** Routines to get a new user set up and running ***
1959 *
1960 * Things to do when starting up a new user:
1961 * adjust_nice
1962 * update_utmpx_entry
1963 * establish_user_environment
1964 * print_banner
1965 * display_last_login_time
1966 * exec_the_shell
1967 *
1968 */
1969
1970
1971 /*
1972 * adjust_nice - Set the nice (process priority) value if the
1973 * gecos value contains an appropriate value.
1974 */
1975
1976 static void
1977 adjust_nice(void)
1978 {
1979 int pri, mflg, i;
1980
1981 if (strncmp("pri=", pwd->pw_gecos, 4) == 0) {
1982 pri = 0;
1983 mflg = 0;
1984 i = 4;
1985
1986 if (pwd->pw_gecos[i] == '-') {
1987 mflg++;
1988 i++;
1989 }
1990
1991 while (pwd->pw_gecos[i] >= '0' && pwd->pw_gecos[i] <= '9')
1992 pri = (pri * 10) + pwd->pw_gecos[i++] - '0';
1993
1994 if (mflg)
1995 pri = -pri;
1996
1997 (void) nice(pri);
1998 }
1999 }
2000
2001 /*
2002 * update_utmpx_entry - Searchs for the correct utmpx entry, making an
2003 * entry there if it finds one, otherwise exits.
2004 */
2005
2006 static void
2007 update_utmpx_entry(int sublogin)
2008 {
2009 int err;
2010 char *user;
2011 static char *errmsg = "No utmpx entry. "
2012 "You must exec \"login\" from the lowest level \"shell\".";
2013 int tmplen;
2014 struct utmpx *u = (struct utmpx *)0;
2015 struct utmpx utmpx;
2016 char *ttyntail;
2017
2018 /*
2019 * If we're not a sublogin then
2020 * we'll get an error back if our PID doesn't match the PID of the
2021 * entry we are updating, otherwise if its a sublogin the flags
2022 * field is set to 0, which means we just write a matching entry
2023 * (without checking the pid), or a new entry if an entry doesn't
2024 * exist.
2025 */
2026
2027 if ((err = pam_open_session(pamh, 0)) != PAM_SUCCESS) {
2028 audit_error = ADT_FAIL_PAM + err;
2029 login_exit(1);
2030 }
2031
2032 if ((err = pam_get_item(pamh, PAM_USER, (void **) &user)) !=
2033 PAM_SUCCESS) {
2034 audit_error = ADT_FAIL_PAM + err;
2035 login_exit(1);
2036 }
2037
2038 (void) memset((void *)&utmpx, 0, sizeof (utmpx));
2039 (void) time(&utmpx.ut_tv.tv_sec);
2040 utmpx.ut_pid = getpid();
2041
2042 if (rflag || hflag) {
2043 SCPYN(utmpx.ut_host, remote_host);
2044 tmplen = strlen(remote_host) + 1;
2045 if (tmplen < sizeof (utmpx.ut_host))
2046 utmpx.ut_syslen = tmplen;
2047 else
2048 utmpx.ut_syslen = sizeof (utmpx.ut_host);
2049 } else if (zflag) {
2050 /*
2051 * If this is a login from another zone, put the
2052 * zone:<zonename> string in the utmpx entry.
2053 */
2054 SCPYN(utmpx.ut_host, zone_name);
2055 tmplen = strlen(zone_name) + 1;
2056 if (tmplen < sizeof (utmpx.ut_host))
2057 utmpx.ut_syslen = tmplen;
2058 else
2059 utmpx.ut_syslen = sizeof (utmpx.ut_host);
2060 } else {
2061 utmpx.ut_syslen = 0;
2062 }
2063
2064 SCPYN(utmpx.ut_user, user);
2065
2066 /* skip over "/dev/" */
2067 ttyntail = basename(ttyn);
2068
2069 while ((u = getutxent()) != NULL) {
2070 if ((u->ut_type == INIT_PROCESS ||
2071 u->ut_type == LOGIN_PROCESS ||
2072 u->ut_type == USER_PROCESS) &&
2073 ((sublogin && strncmp(u->ut_line, ttyntail,
2074 sizeof (u->ut_line)) == 0) ||
2075 u->ut_pid == login_pid)) {
2076 SCPYN(utmpx.ut_line, (ttyn+sizeof ("/dev/")-1));
2077 (void) memcpy(utmpx.ut_id, u->ut_id,
2078 sizeof (utmpx.ut_id));
2079 utmpx.ut_exit.e_exit = u->ut_exit.e_exit;
2080 utmpx.ut_type = USER_PROCESS;
2081 (void) pututxline(&utmpx);
2082 break;
2083 }
2084 }
2085 endutxent();
2086
2087 if (u == (struct utmpx *)NULL) {
2088 if (!sublogin) {
2089 /*
2090 * no utmpx entry already setup
2091 * (init or rlogind/telnetd)
2092 */
2093 (void) puts(errmsg);
2094
2095 audit_error = ADT_FAIL_VALUE_PROGRAM;
2096 login_exit(1);
2097 }
2098 } else {
2099 /* Now attempt to write out this entry to the wtmp file if */
2100 /* we were successful in getting it from the utmpx file and */
2101 /* the wtmp file exists. */
2102 updwtmpx(WTMPX_FILE, &utmpx);
2103 }
2104 }
2105
2106
2107
2108 /*
2109 * process_chroot_logins - Chroots to the specified subdirectory and
2110 * re executes login.
2111 */
2112
2113 static int
2114 process_chroot_logins(void)
2115 {
2116 /*
2117 * If the shell field starts with a '*', do a chroot to the home
2118 * directory and perform a new login.
2119 */
2120
2121 if (*pwd->pw_shell == '*') {
2122 (void) pam_end(pamh, PAM_SUCCESS); /* Done using PAM */
2123 pamh = NULL; /* really done */
2124 if (chroot(pwd->pw_dir) < 0) {
2125 (void) printf("No Root Directory\n");
2126
2127 audit_failure(get_audit_id(),
2128 ADT_FAIL_VALUE_CHDIR_FAILED,
2129 pwd, remote_host, ttyn, zone_name);
2130
2131 return (ERROR);
2132 }
2133 /*
2134 * Set the environment flag <!sublogin> so that the next login
2135 * knows that it is a sublogin.
2136 */
2137 envinit[0] = SUBLOGIN;
2138 envinit[1] = (char *)NULL;
2139 (void) printf("Subsystem root: %s\n", pwd->pw_dir);
2140 (void) execle("/usr/bin/login", "login", (char *)0,
2141 &envinit[0]);
2142 (void) execle("/etc/login", "login", (char *)0, &envinit[0]);
2143 (void) printf("No /usr/bin/login or /etc/login on root\n");
2144
2145 audit_error = ADT_FAIL_VALUE_PROGRAM;
2146
2147 login_exit(1);
2148 }
2149 return (OK);
2150 }
2151
2152 /*
2153 * establish_user_environment - Set up the new users enviornment
2154 */
2155
2156 static void
2157 establish_user_environment(char **renvp)
2158 {
2159 int i, j, k, l_index, length, idx = 0;
2160 char *endptr;
2161 char **lenvp;
2162 char **pam_env;
2163
2164 lenvp = environ;
2165 while (*lenvp++)
2166 ;
2167
2168 /* count the number of PAM environment variables set by modules */
2169 if ((pam_env = pam_getenvlist(pamh)) != 0) {
2170 for (idx = 0; pam_env[idx] != 0; idx++)
2171 ;
2172 }
2173
2174 envinit = (char **)calloc(lenvp - environ + 10 + MAXARGS + idx,
2175 sizeof (char *));
2176 if (envinit == NULL) {
2177 (void) printf("Calloc failed - out of swap space.\n");
2178 login_exit(8);
2179 }
2180
2181 /*
2182 * add PAM environment variables first so they
2183 * can be overwritten at login's discretion.
2184 * check for illegal environment variables.
2185 */
2186 idx = 0; basicenv = 0;
2187 if (pam_env != 0) {
2188 while (pam_env[idx] != 0) {
2189 if (legalenvvar(pam_env[idx])) {
2190 envinit[basicenv] = pam_env[idx];
2191 basicenv++;
2192 }
2193 idx++;
2194 }
2195 }
2196 (void) memcpy(&envinit[basicenv], newenv, sizeof (newenv));
2197
2198 /* Set up environment */
2199 if (rflag) {
2200 ENVSTRNCAT(term, terminal);
2201 } else if (hflag) {
2202 if (strlen(terminal)) {
2203 ENVSTRNCAT(term, terminal);
2204 }
2205 } else {
2206 char *tp = getenv("TERM");
2207
2208 if ((tp != NULL) && (*tp != '\0'))
2209 ENVSTRNCAT(term, tp);
2210 }
2211
2212 ENVSTRNCAT(logname, pwd->pw_name);
2213
2214 /*
2215 * There are three places to get timezone info. init.c sets
2216 * TZ if the file /etc/TIMEZONE contains a value for TZ.
2217 * login.c looks in the file /etc/default/login for a
2218 * variable called TIMEZONE being set. If TIMEZONE has a
2219 * value, TZ is set to that value; no environment variable
2220 * TIMEZONE is set, only TZ. If neither of these methods
2221 * work to set TZ, then the library routines will default
2222 * to using the file /usr/lib/locale/TZ/localtime.
2223 *
2224 * There is a priority set up here. If /etc/TIMEZONE has
2225 * a value for TZ, that value remains top priority. If the
2226 * file /etc/default/login has TIMEZONE set, that has second
2227 * highest priority not overriding the value of TZ in
2228 * /etc/TIMEZONE. The reason for this priority is that the
2229 * file /etc/TIMEZONE is supposed to be sourced by
2230 * /etc/profile. We are doing the "sourcing" prematurely in
2231 * init.c. Additionally, a login C shell doesn't source the
2232 * file /etc/profile thus not sourcing /etc/TIMEZONE thus not
2233 * allowing an adminstrator to globally set TZ for all users
2234 */
2235 if (Def_tz != NULL) /* Is there a TZ from defaults/login? */
2236 tmp_tz = Def_tz;
2237
2238 if ((Def_tz = getenv("TZ")) != NULL) {
2239 ENVSTRNCAT(timez, Def_tz);
2240 } else if (tmp_tz != NULL) {
2241 Def_tz = tmp_tz;
2242 ENVSTRNCAT(timez, Def_tz);
2243 }
2244
2245 if (Def_hertz == NULL)
2246 (void) sprintf(hertz + strlen(hertz), "%lu", HZ);
2247 else
2248 ENVSTRNCAT(hertz, Def_hertz);
2249
2250 if (Def_path == NULL)
2251 (void) strlcat(path, DEF_PATH, sizeof (path));
2252 else
2253 ENVSTRNCAT(path, Def_path);
2254
2255 ENVSTRNCAT(home, pwd->pw_dir);
2256
2257 /*
2258 * Find the end of the basic environment
2259 */
2260 for (basicenv = 0; envinit[basicenv] != NULL; basicenv++)
2261 ;
2262
2263 /*
2264 * If TZ has a value, add it.
2265 */
2266 if (strcmp(timez, "TZ=") != 0)
2267 envinit[basicenv++] = timez;
2268
2269 if (*pwd->pw_shell == '\0') {
2270 /*
2271 * If possible, use the primary default shell,
2272 * otherwise, use the secondary one.
2273 */
2274 if (access(SHELL, X_OK) == 0)
2275 pwd->pw_shell = SHELL;
2276 else
2277 pwd->pw_shell = SHELL2;
2278 } else if (Altshell != NULL && strcmp(Altshell, "YES") == 0) {
2279 envinit[basicenv++] = shell;
2280 ENVSTRNCAT(shell, pwd->pw_shell);
2281 }
2282
2283 #ifndef NO_MAIL
2284 envinit[basicenv++] = mail;
2285 (void) strlcat(mail, pwd->pw_name, sizeof (mail));
2286 #endif
2287
2288 /*
2289 * Pick up locale environment variables, if any.
2290 */
2291 lenvp = renvp;
2292 while (*lenvp != NULL) {
2293 j = 0;
2294 while (localeenv[j] != 0) {
2295 /*
2296 * locale_envmatch() returns 1 if
2297 * *lenvp is localenev[j] and valid.
2298 */
2299 if (locale_envmatch(localeenv[j], *lenvp) == 1) {
2300 envinit[basicenv++] = *lenvp;
2301 break;
2302 }
2303 j++;
2304 }
2305 lenvp++;
2306 }
2307
2308 /*
2309 * If '-p' flag, then try to pass on allowable environment
2310 * variables. Note that by processing this first, what is
2311 * passed on the final "login:" line may over-ride the invocation
2312 * values. XXX is this correct?
2313 */
2314 if (pflag) {
2315 for (lenvp = renvp; *lenvp; lenvp++) {
2316 if (!legalenvvar(*lenvp)) {
2317 continue;
2318 }
2319 /*
2320 * If this isn't 'xxx=yyy', skip it. XXX
2321 */
2322 if ((endptr = strchr(*lenvp, '=')) == NULL) {
2323 continue;
2324 }
2325 length = endptr + 1 - *lenvp;
2326 for (j = 0; j < basicenv; j++) {
2327 if (strncmp(envinit[j], *lenvp, length) == 0) {
2328 /*
2329 * Replace previously established value
2330 */
2331 envinit[j] = *lenvp;
2332 break;
2333 }
2334 }
2335 if (j == basicenv) {
2336 /*
2337 * It's a new definition, so add it at the end.
2338 */
2339 envinit[basicenv++] = *lenvp;
2340 }
2341 }
2342 }
2343
2344 /*
2345 * Add in all the environment variables picked up from the
2346 * argument list to "login" or from the user response to the
2347 * "login" request, if any.
2348 */
2349
2350 if (envp == NULL)
2351 goto switch_env; /* done */
2352
2353 for (j = 0, k = 0, l_index = 0;
2354 *envp != NULL && j < (MAXARGS-1);
2355 j++, envp++) {
2356
2357 /*
2358 * Scan each string provided. If it doesn't have the
2359 * format xxx=yyy, then add the string "Ln=" to the beginning.
2360 */
2361 if ((endptr = strchr(*envp, '=')) == NULL) {
2362 /*
2363 * This much to be malloc'd:
2364 * strlen(*envp) + 1 char for 'L' +
2365 * MAXARGSWIDTH + 1 char for '=' + 1 for null char;
2366 *
2367 * total = strlen(*envp) + MAXARGSWIDTH + 3
2368 */
2369 int total = strlen(*envp) + MAXARGSWIDTH + 3;
2370 envinit[basicenv+k] = malloc(total);
2371 if (envinit[basicenv+k] == NULL) {
2372 (void) printf("%s: malloc failed\n", PROG_NAME);
2373 login_exit(1);
2374 }
2375 (void) snprintf(envinit[basicenv+k], total, "L%d=%s",
2376 l_index, *envp);
2377
2378 k++;
2379 l_index++;
2380 } else {
2381 if (!legalenvvar(*envp)) { /* this env var permited? */
2382 continue;
2383 } else {
2384
2385 /*
2386 * Check to see whether this string replaces
2387 * any previously defined string
2388 */
2389 for (i = 0, length = endptr + 1 - *envp;
2390 i < basicenv + k; i++) {
2391 if (strncmp(*envp, envinit[i], length)
2392 == 0) {
2393 envinit[i] = *envp;
2394 break;
2395 }
2396 }
2397
2398 /*
2399 * If it doesn't, place it at the end of
2400 * environment array.
2401 */
2402 if (i == basicenv+k) {
2403 envinit[basicenv+k] = *envp;
2404 k++;
2405 }
2406 }
2407 }
2408 } /* for (j = 0 ... ) */
2409
2410 switch_env:
2411 /*
2412 * Switch to the new environment.
2413 */
2414 environ = envinit;
2415 }
2416
2417 /*
2418 * print_banner - Print the banner at start up
2419 * Do not turn on DOBANNER ifdef. This is not
2420 * relevant to SunOS.
2421 */
2422
2423 static void
2424 print_banner(void)
2425 {
2426 #ifdef DOBANNER
2427 uname(&un);
2428 #if i386
2429 (void) printf("UNIX System V/386 Release %s\n%s\n"
2430 "Copyright (C) 1984, 1986, 1987, 1988 AT&T\n"
2431 "Copyright (C) 1987, 1988 Microsoft Corp.\nAll Rights Reserved\n",
2432 un.release, un.nodename);
2433 #elif sun
2434 (void) printf("SunOS Release %s Sun Microsystems %s\n%s\n"
2435 "Copyright (c) 1984, 1986, 1987, 1988 AT&T\n"
2436 "Copyright (c) 1988, 1989, 1990, 1991 Sun Microsystems\n"
2437 "All Rights Reserved\n",
2438 un.release, un.machine, un.nodename);
2439 #else
2440 (void) printf("UNIX System V Release %s AT&T %s\n%s\n"
2441 "Copyright (c) 1984, 1986, 1987, 1988 AT&T\nAll Rights Reserved\n",
2442 un.release, un.machine, un.nodename);
2443 #endif /* i386 */
2444 #endif /* DOBANNER */
2445 }
2446
2447 /*
2448 * display_last_login_time - Advise the user the time and date
2449 * that this login-id was last used.
2450 */
2451
2452 static void
2453 display_last_login_time(void)
2454 {
2455 if (lastlogok) {
2456 (void) printf("Last login: %.*s ", 24-5, ctime(&ll.ll_time));
2457
2458 if (*ll.ll_host != '\0')
2459 (void) printf("from %.*s\n", sizeof (ll.ll_host),
2460 ll.ll_host);
2461 else
2462 (void) printf("on %.*s\n", sizeof (ll.ll_line),
2463 ll.ll_line);
2464 }
2465 }
2466
2467 /*
2468 * exec_the_shell - invoke the specified shell or start up program
2469 */
2470
2471 static void
2472 exec_the_shell(void)
2473 {
2474 char *endptr;
2475 int i;
2476
2477 (void) strlcat(minusnam, basename(pwd->pw_shell),
2478 sizeof (minusnam));
2479
2480 /*
2481 * Exec the shell
2482 */
2483 (void) execl(pwd->pw_shell, minusnam, (char *)0);
2484
2485 /*
2486 * pwd->pw_shell was not an executable object file, maybe it
2487 * is a shell proceedure or a command line with arguments.
2488 * If so, turn off the SHELL= environment variable.
2489 */
2490 for (i = 0; envinit[i] != NULL; ++i) {
2491 if ((envinit[i] == shell) &&
2492 ((endptr = strchr(shell, '=')) != NULL))
2493 (*++endptr) = '\0';
2494 }
2495
2496 if (access(pwd->pw_shell, R_OK|X_OK) == 0) {
2497 (void) execl(SHELL, "sh", pwd->pw_shell, (char *)0);
2498 (void) execl(SHELL2, "sh", pwd->pw_shell, (char *)0);
2499 }
2500
2501 (void) printf("No shell\n");
2502 }
2503
2504 /*
2505 * login_exit - Call exit() and terminate.
2506 * This function is here for PAM so cleanup can
2507 * be done before the process exits.
2508 */
2509 static void
2510 login_exit(int exit_code)
2511 {
2512 if (pamh)
2513 (void) pam_end(pamh, PAM_ABORT);
2514
2515 if (audit_error)
2516 audit_failure(get_audit_id(), audit_error,
2517 pwd, remote_host, ttyn, zone_name);
2518
2519 exit(exit_code);
2520 /*NOTREACHED*/
2521 }
2522
2523 /*
2524 * Check if lenv and penv matches or not.
2525 */
2526 static int
2527 locale_envmatch(char *lenv, char *penv)
2528 {
2529 while ((*lenv == *penv) && *lenv && *penv != '=') {
2530 lenv++;
2531 penv++;
2532 }
2533
2534 /*
2535 * '/' is eliminated for security reason.
2536 */
2537 if (*lenv == '\0' && *penv == '=' && *(penv + 1) != '/')
2538 return (1);
2539 return (0);
2540 }
2541
2542 static int
2543 is_number(char *ptr)
2544 {
2545 while (*ptr != '\0') {
2546 if (!isdigit(*ptr))
2547 return (0);
2548 ptr++;
2549 }
2550 return (1);
2551 }