2 * Copyright (c) 1988, 1993, 1994
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 * must display the following acknowledgement:
15 * This product includes software developed by the University of
16 * California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * @(#) Copyright (c) 1988, 1993, 1994 The Regents of the University of California. All rights reserved.
34 * @(#)chpass.c 8.4 (Berkeley) 4/2/94
35 * $FreeBSD: src/usr.bin/chpass/chpass.c,v 1.16.2.4 2002/08/11 14:16:42 dwmalone Exp $
36 * $DragonFly: src/usr.bin/chpass/chpass.c,v 1.2 2003/06/17 04:29:25 dillon Exp $
39 #include <sys/param.h>
41 #include <sys/signal.h>
43 #include <sys/resource.h>
59 #include <rpcsvc/yp.h>
60 int yp_errno = YP_TRUE;
65 #include "pathnames.h"
70 void baduser __P((void));
71 void usage __P((void));
78 enum { NEWSH, LOADENTRY, EDITENTRY, NEWPW, NEWEXP } op;
79 struct passwd *pw = NULL, lpw, old_pw, *pold_pw;
80 char *username = NULL;
90 while ((ch = getopt(argc, argv, "a:p:s:e:d:h:oly")) != -1)
92 while ((ch = getopt(argc, argv, "a:p:s:e:")) != -1)
115 warnx("Only the superuser can use the -h flag");
126 warnx("Only the superuser can use the -d flag");
130 if (yp_server == NULL)
131 yp_server = "localhost";
141 _use_yp = force_yp = 1;
156 if (op == EDITENTRY || op == NEWSH || op == NEWPW || op == NEWEXP) {
161 get_yp_master(1); /* XXX just to set the suser flag */
165 get_yp_master(1); /* XXX just to set the suser flag */
168 if (!(pw = getpwuid(uid)))
169 errx(1, "unknown user: uid %lu",
173 if (!(pw = getpwnam(*argv)))
174 errx(1, "unknown user: %s", *argv);
176 if (uid && uid != pw->pw_uid)
183 /* Make a copy for later verification */
185 old_pw.pw_gecos = strdup(old_pw.pw_gecos);
190 /* protect p_shell -- it thinks NULL is /bin/sh */
193 if (p_shell(arg, pw, (ENTRY *)NULL))
194 pw_error((char *)NULL, 0, 1);
198 if (uid) /* only root can change expire */
200 if (p_expire(arg, pw, (ENTRY *)NULL))
201 pw_error((char *)NULL, 0, 1);
204 if (op == LOADENTRY) {
208 if (!pw_scan(arg, pw))
210 if ((pold_pw = getpwnam(pw->pw_name)) != NULL) {
212 old_pw.pw_gecos = strdup(old_pw.pw_gecos);
215 username = pw->pw_name;
221 if(strchr(arg, ':')) {
222 errx(1, "invalid format for password");
228 * The temporary file/file descriptor usage is a little tricky here.
229 * 1: We start off with two fd's, one for the master password
230 * file (used to lock everything), and one for a temporary file.
231 * 2: Display() gets an fp for the temporary file, and copies the
232 * user's information into it. It then gives the temporary file
233 * to the user and closes the fp, closing the underlying fd.
234 * 3: The user edits the temporary file some number of times.
235 * 4: Verify() gets an fp for the temporary file, and verifies the
236 * contents. It can't use an fp derived from the step #2 fd,
237 * because the user's editor may have created a new instance of
238 * the file. Once the file is verified, its contents are stored
239 * in a password structure. The verify routine closes the fp,
240 * closing the underlying fd.
241 * 5: Delete the temporary file.
242 * 6: Get a new temporary file/fd. Pw_copy() gets an fp for it
243 * file and copies the master password file into it, replacing
244 * the user record with a new one. We can't use the first
245 * temporary file for this because it was owned by the user.
246 * Pw_copy() closes its fp, flushing the data and closing the
247 * underlying file descriptor. We can't close the master
248 * password fp, or we'd lose the lock.
249 * 7: Call pw_mkdb() (which renames the temporary file) and exit.
250 * The exit closes the master passwd fp/fd.
255 if (op == EDITENTRY) {
258 (void)unlink(tempname);
265 (void)unlink(tempname);
269 pw_copy(pfd, tfd, pw, pold_pw);
271 if (!pw_mkdb(username))
272 pw_error((char *)NULL, 0, 1);
282 errx(1, "%s", strerror(EACCES));
289 (void)fprintf(stderr,
291 "usage: chpass [-o] [-l] [-y] [-d domain] [-h host] [-a list] [-p encpass] [-s shell] [-e mmm dd yy] [user]\n");
293 "usage: chpass [-a list] [-p encpass] [-s shell] [-e mmm dd yy] [user]\n");