diff options
Diffstat (limited to 'plugins/sudoers/timestamp.h')
| -rw-r--r-- | plugins/sudoers/timestamp.h | 104 |
1 files changed, 104 insertions, 0 deletions
diff --git a/plugins/sudoers/timestamp.h b/plugins/sudoers/timestamp.h new file mode 100644 index 0000000..924d84c --- /dev/null +++ b/plugins/sudoers/timestamp.h @@ -0,0 +1,104 @@ +/* + * SPDX-License-Identifier: ISC + * + * Copyright (c) 1993-1996, 1998-2005, 2007-2015, 2017-2018, 2021-2023 + * Todd C. Miller <Todd.Miller@sudo.ws> + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + * + * Sponsored in part by the Defense Advanced Research Projects + * Agency (DARPA) and Air Force Research Laboratory, Air Force + * Materiel Command, USAF, under agreement number F39502-99-1-0512. + */ + +#ifndef SUDOERS_TIMESTAMP_H +#define SUDOERS_TIMESTAMP_H + +struct passwd; +struct sudoers_context; +struct getpass_closure { + int lectured; + void *cookie; + struct passwd *auth_pw; + const struct sudoers_context *ctx; +}; + +/* Status codes for timestamp_status() */ +#define TS_CURRENT 0 +#define TS_OLD 1 +#define TS_MISSING 2 +#define TS_ERROR 3 +#define TS_FATAL 4 + +/* + * Time stamps are now stored in a single file which contains multiple + * records. Each record starts with a 16-bit version number and a 16-bit + * record size. Multiple record types can coexist in the same file. + */ +#define TS_VERSION 2 + +/* Time stamp entry types */ +#define TS_GLOBAL 0x01U /* not restricted by tty or ppid */ +#define TS_TTY 0x02U /* restricted by tty */ +#define TS_PPID 0x03U /* restricted by ppid */ +#define TS_LOCKEXCL 0x04U /* special lock record */ + +/* Time stamp flags */ +#define TS_DISABLED 0x01U /* entry disabled */ +#define TS_ANYUID 0x02U /* ignore uid, only valid in the key */ + +struct timestamp_entry_v1 { + unsigned short version; /* version number */ + unsigned short size; /* entry size */ + unsigned short type; /* TS_GLOBAL, TS_TTY, TS_PPID */ + unsigned short flags; /* TS_DISABLED, TS_ANYUID */ + uid_t auth_uid; /* uid to authenticate as */ + pid_t sid; /* session ID associated with tty/ppid */ + struct timespec ts; /* time stamp (CLOCK_MONOTONIC) */ + union { + dev_t ttydev; /* tty device number */ + pid_t ppid; /* parent pid */ + } u; +}; + +struct timestamp_entry { + unsigned short version; /* version number */ + unsigned short size; /* entry size */ + unsigned short type; /* TS_GLOBAL, TS_TTY, TS_PPID */ + unsigned short flags; /* TS_DISABLED, TS_ANYUID */ + uid_t auth_uid; /* uid to authenticate as */ + pid_t sid; /* session ID associated with tty/ppid */ + struct timespec start_time; /* session/ppid start time */ + struct timespec ts; /* time stamp (CLOCK_MONOTONIC) */ + union { + dev_t ttydev; /* tty device number */ + pid_t ppid; /* parent pid */ + } u; +}; + +union sudo_defs_val; +void *timestamp_open(const struct sudoers_context *ctx); +void timestamp_close(void *vcookie); +bool timestamp_lock(void *vcookie, struct passwd *pw); +bool timestamp_update(void *vcookie, struct passwd *pw); +int timestamp_remove(const struct sudoers_context *ctx, bool unlinkit); +int timestamp_status(void *vcookie, struct passwd *pw); +uid_t timestamp_get_uid(void); +bool cb_timestampowner(struct sudoers_context *ctx, const char *file, int line, int column, const union sudo_defs_val *sd_un, int op); +int get_starttime(pid_t pid, struct timespec *starttime); +bool already_lectured(const struct sudoers_context *ctx); +int set_lectured(const struct sudoers_context *ctx); +void display_lecture(struct sudo_conv_callback *callback); +int create_admin_success_flag(const struct sudoers_context *ctx); + +#endif /* SUDOERS_TIMESTAMP_H */ |