contrib/openpam/lib/libpam/openpam_features.c

   1 /*-
   2  * Copyright (c) 2012-2015 Dag-Erling Smørgrav
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  * 3. The name of the author may not be used to endorse or promote
  14  *    products derived from this software without specific prior written
  15  *    permission.
  16  *
  17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  27  * SUCH DAMAGE.
  28  *
  29  * $OpenPAM: openpam_features.c 938 2017-04-30 21:34:42Z des $
  30  */
  31
  32 #ifdef HAVE_CONFIG_H
  33 # include "config.h"
  34 #endif
  35
  36 #include <security/pam_appl.h>
  37
  38 #include "openpam_impl.h"
  39
  40 #define STRUCT_OPENPAM_FEATURE(name, descr, dflt)       \
  41         [OPENPAM_##name] = {                            \
  42                 "OPENPAM_" #name,                       \
  43                 descr,                                  \
  44                 dflt                                    \
  45         }
  46
  47 struct openpam_feature openpam_features[OPENPAM_NUM_FEATURES] = {
  48         STRUCT_OPENPAM_FEATURE(
  49             RESTRICT_SERVICE_NAME,
  50             "Disallow path separators in service names",
  51             1
  52         ),
  53         STRUCT_OPENPAM_FEATURE(
  54             VERIFY_POLICY_FILE,
  55             "Verify ownership and permissions of policy files",
  56             1
  57         ),
  58         STRUCT_OPENPAM_FEATURE(
  59             RESTRICT_MODULE_NAME,
  60             "Disallow path separators in module names",
  61             0
  62         ),
  63         STRUCT_OPENPAM_FEATURE(
  64             VERIFY_MODULE_FILE,
  65             "Verify ownership and permissions of module files",
  66             1
  67         ),
  68         STRUCT_OPENPAM_FEATURE(
  69             FALLBACK_TO_OTHER,
  70             "Fall back to \"other\" policy for empty chains",
  71             1
  72         ),
  73 };