|
0
|
1 #include <sys/stat.h>
|
|
|
2 #include <sys/types.h>
|
|
|
3 #include <unistd.h>
|
|
|
4 #include <stdio.h>
|
|
|
5 #include <errno.h>
|
|
|
6 #include <stdlib.h>
|
|
|
7 #include <pwd.h>
|
|
|
8 #include <grp.h> // declares struct group
|
|
|
9 #include <libgen.h> // for dirname
|
|
|
10 #include <string.h> // for strcpy
|
|
|
11
|
|
|
12 /* cpx.c David Hoover 1/13/11
|
|
|
13 usage:
|
|
|
14 cpx from.file to.file login
|
|
|
15
|
|
|
16 cpx copies a file from one location to another, but only if the original file is owned by the given login. The
|
|
|
17 program is expected to be setuid and owned by root.
|
|
|
18
|
|
|
19 */
|
|
|
20
|
|
|
21 int notReadable(char *file, char *user)
|
|
|
22 /* Returns 1 if file not readable by given user */
|
|
|
23 {
|
|
|
24 struct stat fileStat;
|
|
|
25 struct passwd *own,*usr;
|
|
|
26 struct group *grp;
|
|
|
27 int i=0;
|
|
|
28
|
|
|
29 usr = getpwnam(user);
|
|
|
30
|
|
|
31 /* does user exist? */
|
|
|
32 if (! usr)
|
|
|
33 {
|
|
|
34 fprintf(stderr,"%s: No such user\n",user);
|
|
|
35 exit(1);
|
|
|
36 }
|
|
|
37
|
|
|
38 /* must be able to stat file */
|
|
|
39 if (stat(file, &fileStat) < 0)
|
|
|
40 {
|
|
|
41 fprintf(stderr,"%s: No such file\n",file);
|
|
|
42 exit(1);
|
|
|
43 }
|
|
|
44
|
|
|
45 /* get the owner and group information for the file */
|
|
|
46 own = getpwuid(fileStat.st_uid);
|
|
|
47 grp = getgrgid(fileStat.st_gid);
|
|
|
48
|
|
|
49 /* does the file owner match the argument? */
|
|
|
50 // if (!strcmp(own->pw_name,user))
|
|
|
51 if (usr->pw_uid == fileStat.st_uid)
|
|
|
52 {
|
|
|
53 // printf("owners match!\n");
|
|
|
54
|
|
|
55 /* is file readable? */
|
|
|
56 if (fileStat.st_mode & S_IRUSR)
|
|
|
57 {
|
|
|
58 // printf("%s is readable by %s\n",file,user);
|
|
|
59 return 0;
|
|
|
60 }
|
|
|
61 else
|
|
|
62 {
|
|
|
63 // printf("%s is not readable by %s\n",file,user);
|
|
|
64 }
|
|
|
65 }
|
|
|
66 else {
|
|
|
67 // printf("owners don't match!\n");
|
|
|
68 }
|
|
|
69
|
|
|
70 /* is the file group readable by the given group? */
|
|
|
71 if (fileStat.st_mode & S_IRGRP)
|
|
|
72 {
|
|
|
73 // printf("%s is readable by group %s\n",file,grp->gr_name);
|
|
|
74
|
|
|
75
|
|
|
76 /* is the user's gid the same as the file? */
|
|
|
77 // printf("%d\n",usr->pw_gid);
|
|
|
78 // printf("%d\n",fileStat.st_gid);
|
|
|
79 if (usr->pw_gid == fileStat.st_gid)
|
|
|
80 {
|
|
|
81 // printf("groups match!\n");
|
|
|
82
|
|
|
83 /* if the path a directory is it executable? */
|
|
|
84 if (S_ISDIR(fileStat.st_mode))
|
|
|
85 {
|
|
|
86 if (fileStat.st_mode & S_IXGRP)
|
|
|
87 {
|
|
|
88 return 0;
|
|
|
89 }
|
|
|
90 }
|
|
|
91 else {
|
|
|
92 return 0;
|
|
|
93 }
|
|
|
94 }
|
|
|
95 else
|
|
|
96 {
|
|
|
97
|
|
|
98 /* is the user a member of the group that owns the file? */
|
|
|
99 while(grp->gr_mem[i] != NULL)
|
|
|
100 {
|
|
|
101 if(!strcmp(grp->gr_mem[i],user))
|
|
|
102 {
|
|
|
103 // printf("%s is a member of the %s group\n",user,grp->gr_name);
|
|
|
104 /* if the path a directory is it executable? */
|
|
|
105 if (S_ISDIR(fileStat.st_mode))
|
|
|
106 {
|
|
|
107 if (fileStat.st_mode & S_IXGRP)
|
|
|
108 {
|
|
|
109 return 0;
|
|
|
110 }
|
|
|
111 }
|
|
|
112 else {
|
|
|
113 return 0;
|
|
|
114 }
|
|
|
115 }
|
|
|
116 i++;
|
|
|
117 }
|
|
|
118
|
|
|
119 // printf("%s is not a member of the %s group\n",user,grp->gr_name);
|
|
|
120
|
|
|
121 }
|
|
|
122 }
|
|
|
123 else
|
|
|
124 {
|
|
|
125 // printf("%s is not readable by group %s\n",file,grp->gr_name);
|
|
|
126 }
|
|
|
127
|
|
|
128 /* is the e world readable? */
|
|
|
129 if (fileStat.st_mode & S_IROTH)
|
|
|
130 {
|
|
|
131 // printf("%s is world readable\n",file);
|
|
|
132 return 0;
|
|
|
133 }
|
|
|
134 else
|
|
|
135 {
|
|
|
136 // printf("%s is not world readable\n",file);
|
|
|
137 }
|
|
|
138
|
|
|
139 return 1;
|
|
|
140 }
|
|
|
141
|
|
|
142 int copyFile(char *src, char *dst)
|
|
|
143 {
|
|
|
144 // printf("Copying %s to %s\n",src,dst);
|
|
|
145
|
|
7
|
146 char *c;
|
|
0
|
147 FILE *fs,*ft;
|
|
|
148 struct stat fileStat;
|
|
7
|
149 size_t st=10000000;
|
|
|
150 int numr,numw;
|
|
|
151
|
|
|
152 // buffer = 10000;
|
|
0
|
153 /* must be able to stat file */
|
|
|
154 if (stat(src, &fileStat) < 0)
|
|
|
155 {
|
|
|
156 fprintf(stderr,"%s: No such file\n",src);
|
|
|
157 exit(1);
|
|
|
158 }
|
|
|
159
|
|
|
160 /* is path a regular file? */
|
|
|
161 if (S_ISDIR(fileStat.st_mode))
|
|
|
162 {
|
|
|
163 fprintf(stderr,"%s: Is a directory\n",src);
|
|
|
164 exit(1);
|
|
|
165 }
|
|
|
166
|
|
|
167 fs = fopen(src,"r");
|
|
|
168 if (fs==NULL) {
|
|
|
169 fprintf(stderr,"Can't read from file %s!\n",src);
|
|
|
170 exit(1);
|
|
|
171 }
|
|
|
172 ft = fopen(dst,"w");
|
|
|
173 if (ft==NULL) {
|
|
|
174 fprintf(stderr,"Can't write to file %s!\n",dst);
|
|
|
175 exit(1);
|
|
|
176 }
|
|
|
177
|
|
7
|
178 c=malloc(st);
|
|
|
179 while(feof(fs)==0)
|
|
|
180 {
|
|
|
181 if((numr=fread(c,1,st,fs))!=st)
|
|
|
182 {
|
|
|
183 if(ferror(fs)!=0)
|
|
|
184 {
|
|
|
185 fprintf(stderr,"read file error.\n");
|
|
|
186 exit(1);
|
|
|
187 }
|
|
|
188 else if(feof(fs)!=0);
|
|
|
189 }
|
|
|
190 if((numw=fwrite(c,1,numr,ft))!=numr)
|
|
|
191 {
|
|
|
192 fprintf(stderr,"write file error.\n");
|
|
|
193 exit(1);
|
|
|
194 }
|
|
|
195 }
|
|
|
196
|
|
0
|
197 fclose(fs);
|
|
|
198 fclose(ft);
|
|
7
|
199 free(c);
|
|
0
|
200
|
|
|
201 return 0;
|
|
|
202
|
|
|
203 }
|
|
|
204
|
|
|
205 int chownToUser(char *file)
|
|
|
206 /* chown a file to the user running cpx */
|
|
|
207 {
|
|
|
208 uid_t uid;
|
|
|
209 gid_t gid;
|
|
|
210
|
|
|
211 uid = getuid();
|
|
|
212 gid = getgid();
|
|
|
213
|
|
|
214 // printf("UID = %d\n",uid);
|
|
|
215 // printf("GID = %d\n",gid);
|
|
|
216
|
|
|
217 // printf("chown %s %d,%d\n",file,uid,gid);
|
|
|
218 if (chown(file,uid,gid))
|
|
|
219 {
|
|
|
220 fprintf(stderr,"Can't chown %s\n",file);
|
|
|
221 exit(1);
|
|
|
222 }
|
|
|
223 return 0;
|
|
|
224 }
|
|
|
225
|
|
|
226 int explodePath(char *file, char *user)
|
|
|
227 /* Returns 1 if file not readable by given user */
|
|
|
228 {
|
|
|
229 char **path;
|
|
|
230 char *dir;
|
|
|
231 char newfile[10000];
|
|
|
232 int i;
|
|
|
233
|
|
|
234 strcpy(newfile,file);
|
|
|
235 if (!notReadable(newfile,user))
|
|
|
236 {
|
|
|
237 dir = dirname(newfile);
|
|
|
238 if (strcmp(dir,"/"))
|
|
|
239 explodePath(dir,user);
|
|
|
240 }
|
|
|
241 else
|
|
|
242 {
|
|
|
243 fprintf(stderr,"%s: Permission denied.\n",file);
|
|
|
244 exit(1);
|
|
|
245 }
|
|
|
246
|
|
|
247 return 0;
|
|
|
248 }
|
|
|
249
|
|
|
250 main(int argc, char **argv)
|
|
|
251 {
|
|
|
252
|
|
|
253 /* must have two arguments */
|
|
|
254 if (argc != 4)
|
|
|
255 {
|
|
|
256 fprintf(stderr,"usage: cpx source dest user\n");
|
|
|
257 exit(1);
|
|
|
258 }
|
|
|
259
|
|
7
|
260 if (!strncmp(argv[1],"/data",5) || !strncmp(argv[1],"/home",5))
|
|
|
261 {
|
|
|
262
|
|
0
|
263 /* is file readable by given user? */
|
|
7
|
264 explodePath(argv[1],argv[3]);
|
|
0
|
265
|
|
|
266 /* copy the file and change the owner */
|
|
7
|
267 copyFile(argv[1],argv[2]);
|
|
|
268 chownToUser(argv[2]);
|
|
|
269 }
|
|
|
270 else
|
|
|
271 {
|
|
|
272 fprintf(stderr,"%s: Permission denied.\n",argv[1]);
|
|
|
273 exit(1);
|
|
|
274 }
|
|
0
|
275
|
|
|
276 exit(0);
|
|
|
277 }
|
