d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add -c option that allows root to specify a login_class.

Browse Source
This commit is contained in:
Guido van Rooij 1997-10-27 22:05:12 +00:00
parent 186a5319ff
commit 7a853dfffc
2 changed files with 35 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
usr.bin/su/su.1
View File

@ -30,7 +30,7 @@
.\" SUCH DAMAGE.
.\"
.\" @(#)su.1 8.2 (Berkeley) 4/18/94
.\" $Id: su.1,v 1.10 1997/08/30 12:22:48 jmg Exp $
.\" $Id: su.1,v 1.3.2.5 1997/10/12 08:12:40 jmg Exp $
.\"
.\" this is for hilit19's braindeadness: "
.Dd April 18, 1994
@ -42,6 +42,7 @@
.Sh SYNOPSIS
.Nm
.Op Fl Kflm
.Op Fl c Ar class
.Op Ar login Op Ar args
.Sh DESCRIPTION
.Nm Su
@ -129,6 +130,8 @@ and the caller's real uid is
non-zero,
.Nm
will fail.
.It Fl c Ar class
Use the settings of the specified login class. Only allowed for the super-user.
.El
.Pp
The
@ -157,19 +160,10 @@ to
.Dq root ,
unless this group is empty.
.Pp
When using
.Nm
to become super-user, note that the invoked shell dictates the new
command prompt and not
.Nm su .
Even when
.Nm
is invoked with the
.Fl l
option, the command prompt is still determined by the shell's startup
files, specifically their manipulation of the
.Ev PS1
variable.
By default (unless the prompt is reset by a startup file) the super-user
prompt is set to
.Dq Sy \&#
to remind one of its awesome power.
.Sh SEE ALSO
.Xr csh 1 ,
.Xr kerberos 1 ,

32
usr.bin/su/su.c
View File

@ -42,7 +42,7 @@ static const char copyright[] =
static char sccsid[] = "@(#)su.c 8.3 (Berkeley) 4/2/94";
#endif
static const char rcsid[] =
"$Id$";
"$Id: su.c,v 1.14.2.5 1997/09/28 17:00:06 markm Exp $";
#endif /* not lint */
#include <sys/param.h>
@ -74,17 +74,25 @@ static const char rcsid[] =
#ifdef KERBEROS
#include <des.h>
#include <krb.h>
#include <kerberosIV/krb.h>
#include <netdb.h>
#ifdef LOGIN_CAP
#define ARGSTR "-Kflmc:"
#else
#define ARGSTR "-Kflm"
#endif
static int kerberos(char *username, char *user, int uid, char *pword);
static int koktologin(char *name, char *toname);
int use_kerberos = 1;
#else /* !KERBEROS */
#ifdef LOGIN_CAP
#define ARGSTR "-flmc:"
#else
#define ARGSTR "-flm"
#endif
#endif /* KERBEROS */
char *ontty __P((void));
@ -109,6 +117,7 @@ main(argc, argv)
enum { UNSET, YES, NO } iscsh = UNSET;
#ifdef LOGIN_CAP
login_cap_t *lc;
char *class=NULL;
int setwhat;
#ifdef LOGIN_CAP_AUTH
char *style, *approvep, *auth_method = NULL;
@ -144,6 +153,11 @@ main(argc, argv)
asme = 1;
asthem = 0;
break;
#ifdef LOGIN_CAP
case 'c':
class = optarg;
break;
#endif
case '?':
default:
usage();
@ -211,7 +225,15 @@ main(argc, argv)
errx(1, "unknown login: %s", user);
}
#ifdef LOGIN_CAP
lc = login_getpwclass(pwd);
if (class==NULL) {
lc = login_getpwclass(pwd);
} else {
if (ruid)
errx(1, "only root may use -c");
lc = login_getclass(class);
if (lc == NULL)
errx(1, "unknown class: %s", class);
}
#endif
#ifdef WHEELSU
@ -350,9 +372,9 @@ main(argc, argv)
setwhat = LOGIN_SETUSER|LOGIN_SETGROUP|LOGIN_SETRESOURCES|LOGIN_SETPRIORITY;
/*
* Don't touch resource/priority settings if -m has been
* used or -l hasn't, and we're not su'ing to root.
* used or -l and -c hasn't, and we're not su'ing to root.
*/
if ((asme || !asthem) && pwd->pw_uid)
if ((asme || (!asthem && class == NULL)) && pwd->pw_uid)
setwhat &= ~(LOGIN_SETPRIORITY|LOGIN_SETRESOURCES);
if (setusercontext(lc, pwd, pwd->pw_uid, setwhat) < 0)
err(1, "setusercontext");