2 * Copyright (c) 1988, 1993, 1994
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 * must display the following acknowledgement:
15 * This product includes software developed by the University of
16 * California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * @(#) Copyright (c) 1988, 1993, 1994 The Regents of the University of California. All rights reserved.
34 * @(#)chpass.c 8.4 (Berkeley) 4/2/94
35 * $FreeBSD: src/usr.bin/chpass/chpass.c,v 1.16.2.4 2002/08/11 14:16:42 dwmalone Exp $
36 * $DragonFly: src/usr.bin/chpass/chpass.c,v 1.4 2003/11/03 19:31:28 eirikn Exp $
39 #include <sys/param.h>
41 #include <sys/signal.h>
43 #include <sys/resource.h>
59 #include <rpcsvc/yp.h>
60 int yp_errno = YP_TRUE;
65 #include "pathnames.h"
74 main(int argc, char **argv)
76 enum { NEWSH, LOADENTRY, EDITENTRY, NEWPW, NEWEXP } op;
77 struct passwd *pw = NULL, lpw, old_pw, *pold_pw;
78 char *username = NULL;
88 while ((ch = getopt(argc, argv, "a:p:s:e:d:h:oly")) != -1)
90 while ((ch = getopt(argc, argv, "a:p:s:e:")) != -1)
113 warnx("Only the superuser can use the -h flag");
124 warnx("Only the superuser can use the -d flag");
128 if (yp_server == NULL)
129 yp_server = "localhost";
139 _use_yp = force_yp = 1;
154 if (op == EDITENTRY || op == NEWSH || op == NEWPW || op == NEWEXP) {
159 get_yp_master(1); /* XXX just to set the suser flag */
163 get_yp_master(1); /* XXX just to set the suser flag */
166 if (!(pw = getpwuid(uid)))
167 errx(1, "unknown user: uid %lu",
171 if (!(pw = getpwnam(*argv)))
172 errx(1, "unknown user: %s", *argv);
174 if (uid && uid != pw->pw_uid)
181 /* Make a copy for later verification */
183 old_pw.pw_gecos = strdup(old_pw.pw_gecos);
188 /* protect p_shell -- it thinks NULL is /bin/sh */
191 if (p_shell(arg, pw, (ENTRY *)NULL))
192 pw_error((char *)NULL, 0, 1);
196 if (uid) /* only root can change expire */
198 if (p_expire(arg, pw, (ENTRY *)NULL))
199 pw_error((char *)NULL, 0, 1);
202 if (op == LOADENTRY) {
206 if (!__pw_scan(arg, pw, _PWSCAN_WARN|_PWSCAN_MASTER))
208 if ((pold_pw = getpwnam(pw->pw_name)) != NULL) {
210 old_pw.pw_gecos = strdup(old_pw.pw_gecos);
213 username = pw->pw_name;
219 if(strchr(arg, ':')) {
220 errx(1, "invalid format for password");
226 * The temporary file/file descriptor usage is a little tricky here.
227 * 1: We start off with two fd's, one for the master password
228 * file (used to lock everything), and one for a temporary file.
229 * 2: Display() gets an fp for the temporary file, and copies the
230 * user's information into it. It then gives the temporary file
231 * to the user and closes the fp, closing the underlying fd.
232 * 3: The user edits the temporary file some number of times.
233 * 4: Verify() gets an fp for the temporary file, and verifies the
234 * contents. It can't use an fp derived from the step #2 fd,
235 * because the user's editor may have created a new instance of
236 * the file. Once the file is verified, its contents are stored
237 * in a password structure. The verify routine closes the fp,
238 * closing the underlying fd.
239 * 5: Delete the temporary file.
240 * 6: Get a new temporary file/fd. Pw_copy() gets an fp for it
241 * file and copies the master password file into it, replacing
242 * the user record with a new one. We can't use the first
243 * temporary file for this because it was owned by the user.
244 * Pw_copy() closes its fp, flushing the data and closing the
245 * underlying file descriptor. We can't close the master
246 * password fp, or we'd lose the lock.
247 * 7: Call pw_mkdb() (which renames the temporary file) and exit.
248 * The exit closes the master passwd fp/fd.
253 if (op == EDITENTRY) {
256 (void)unlink(tempname);
263 (void)unlink(tempname);
267 pw_copy(pfd, tfd, pw, pold_pw);
269 if (!pw_mkdb(username))
270 pw_error((char *)NULL, 0, 1);
280 errx(1, "%s", strerror(EACCES));
287 (void)fprintf(stderr,
289 "usage: chpass [-o] [-l] [-y] [-d domain] [-h host] [-a list] [-p encpass] [-s shell] [-e mmm dd yy] [user]\n");
291 "usage: chpass [-a list] [-p encpass] [-s shell] [-e mmm dd yy] [user]\n");