2 * Copyright (c) 1988, 1993, 1994
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 * must display the following acknowledgement:
15 * This product includes software developed by the University of
16 * California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 static const char copyright[] =
36 "@(#) Copyright (c) 1988, 1993, 1994\n\
37 The Regents of the University of California. All rights reserved.\n";
41 static const char sccsid[] = "From: @(#)chpass.c 8.4 (Berkeley) 4/2/94";
42 static const char rcsid[] =
43 "$FreeBSD: src/usr.bin/chpass/chpass.c,v 1.16.2.4 2002/08/11 14:16:42 dwmalone Exp $";
46 #include <sys/param.h>
48 #include <sys/signal.h>
50 #include <sys/resource.h>
66 #include <rpcsvc/yp.h>
67 int yp_errno = YP_TRUE;
72 #include "pathnames.h"
77 void baduser __P((void));
78 void usage __P((void));
85 enum { NEWSH, LOADENTRY, EDITENTRY, NEWPW, NEWEXP } op;
86 struct passwd *pw = NULL, lpw, old_pw, *pold_pw;
87 char *username = NULL;
97 while ((ch = getopt(argc, argv, "a:p:s:e:d:h:oly")) != -1)
99 while ((ch = getopt(argc, argv, "a:p:s:e:")) != -1)
122 warnx("Only the superuser can use the -h flag");
133 warnx("Only the superuser can use the -d flag");
137 if (yp_server == NULL)
138 yp_server = "localhost";
148 _use_yp = force_yp = 1;
163 if (op == EDITENTRY || op == NEWSH || op == NEWPW || op == NEWEXP) {
168 get_yp_master(1); /* XXX just to set the suser flag */
172 get_yp_master(1); /* XXX just to set the suser flag */
175 if (!(pw = getpwuid(uid)))
176 errx(1, "unknown user: uid %lu",
180 if (!(pw = getpwnam(*argv)))
181 errx(1, "unknown user: %s", *argv);
183 if (uid && uid != pw->pw_uid)
190 /* Make a copy for later verification */
192 old_pw.pw_gecos = strdup(old_pw.pw_gecos);
197 /* protect p_shell -- it thinks NULL is /bin/sh */
200 if (p_shell(arg, pw, (ENTRY *)NULL))
201 pw_error((char *)NULL, 0, 1);
205 if (uid) /* only root can change expire */
207 if (p_expire(arg, pw, (ENTRY *)NULL))
208 pw_error((char *)NULL, 0, 1);
211 if (op == LOADENTRY) {
215 if (!pw_scan(arg, pw))
217 if ((pold_pw = getpwnam(pw->pw_name)) != NULL) {
219 old_pw.pw_gecos = strdup(old_pw.pw_gecos);
222 username = pw->pw_name;
228 if(strchr(arg, ':')) {
229 errx(1, "invalid format for password");
235 * The temporary file/file descriptor usage is a little tricky here.
236 * 1: We start off with two fd's, one for the master password
237 * file (used to lock everything), and one for a temporary file.
238 * 2: Display() gets an fp for the temporary file, and copies the
239 * user's information into it. It then gives the temporary file
240 * to the user and closes the fp, closing the underlying fd.
241 * 3: The user edits the temporary file some number of times.
242 * 4: Verify() gets an fp for the temporary file, and verifies the
243 * contents. It can't use an fp derived from the step #2 fd,
244 * because the user's editor may have created a new instance of
245 * the file. Once the file is verified, its contents are stored
246 * in a password structure. The verify routine closes the fp,
247 * closing the underlying fd.
248 * 5: Delete the temporary file.
249 * 6: Get a new temporary file/fd. Pw_copy() gets an fp for it
250 * file and copies the master password file into it, replacing
251 * the user record with a new one. We can't use the first
252 * temporary file for this because it was owned by the user.
253 * Pw_copy() closes its fp, flushing the data and closing the
254 * underlying file descriptor. We can't close the master
255 * password fp, or we'd lose the lock.
256 * 7: Call pw_mkdb() (which renames the temporary file) and exit.
257 * The exit closes the master passwd fp/fd.
262 if (op == EDITENTRY) {
265 (void)unlink(tempname);
272 (void)unlink(tempname);
276 pw_copy(pfd, tfd, pw, pold_pw);
278 if (!pw_mkdb(username))
279 pw_error((char *)NULL, 0, 1);
289 errx(1, "%s", strerror(EACCES));
296 (void)fprintf(stderr,
298 "usage: chpass [-o] [-l] [-y] [-d domain] [-h host] [-a list] [-p encpass] [-s shell] [-e mmm dd yy] [user]\n");
300 "usage: chpass [-a list] [-p encpass] [-s shell] [-e mmm dd yy] [user]\n");