/* * ProFTPD: mod_ctrls -- a module implementing the ftpdctl local socket * server * Copyright (c) 2000-2020 The ProFTPD Project team * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Suite 500, Boston, MA 02110-1335, USA. * * As a special exemption, TJ Saunders and other respective copyright holders * give permission to link this program with OpenSSL, and distribute the * resulting executable, without including the source code for OpenSSL in the * source distribution. * * This is mod_ctrls, contrib software for proftpd 1.2 and above. * For more information contact TJ Saunders <tj@castaglia.org>. */ #ifndef MOD_CTRLS_H #define MOD_CTRLS_H #include <signal.h> #include "conf.h" # if defined(PR_USE_CTRLS) /* Controls access control objects */ typedef struct { unsigned char allow; unsigned int nuids; uid_t *uids; } ctrls_user_acl_t; typedef struct { unsigned char allow; unsigned int ngids; gid_t *gids; } ctrls_group_acl_t; typedef struct { pool *acl_pool; ctrls_user_acl_t acl_users; ctrls_group_acl_t acl_groups; } ctrls_acl_t; typedef struct { const char *act_action; const char *act_desc; ctrls_acl_t *act_acl; int (*act_cb)(pr_ctrls_t *, int, char **); } ctrls_acttab_t; int pr_ctrls_check_group_acl(gid_t, const ctrls_group_acl_t *); int pr_ctrls_check_user_acl(uid_t, const ctrls_user_acl_t *); /* Returns TRUE if use of ctrl named by action is allowed by the user or group * ACL, FALSE otherwise. The ACLs associated with the given action are * looked up in the given table. The default is to deny everyone, unless an * ACL has been configured to allow them. */ int pr_ctrls_check_acl(const pr_ctrls_t *ctrl, const ctrls_acttab_t *ctrls_acttab, const char *action); /* Initialize an ctrls_acl_t object. */ int pr_ctrls_init_acl(ctrls_acl_t *acl); /* Parse the comma-separated list of names in a Controls ACL into a * NULL-terminated array. */ char **pr_ctrls_parse_acl(pool *acl_pool, const char *acl_text); int pr_ctrls_set_group_acl(pool *, ctrls_group_acl_t *, const char *, char *); int pr_ctrls_set_user_acl(pool *, ctrls_user_acl_t *, const char *, char *); /* Configures the ACLs for the actions implemented in a Controls module. * * On error, the bad_action argument, if provided, will be set to the * offending/unknown action. */ char *pr_ctrls_set_module_acls(ctrls_acttab_t *ctrls_acttab, pool *acl_pool, char **actions, const char *allow, const char *type, char *list); int pr_ctrls_set_module_acls2(ctrls_acttab_t *ctrls_acttab, pool *acl_pool, char **actions, const char *allow, const char *type, char *list, const char **bad_action); /* Unregisters a module's actions according to the configured list. * * On error, the bad_action argument, if provided, will be set to the * offending/unknown action. */ char *pr_ctrls_unregister_module_actions(ctrls_acttab_t *ctrls_acttab, char **actions, module *mod); int pr_ctrls_unregister_module_actions2(ctrls_acttab_t *ctrls_acttab, char **actions, module *mod, const char **bad_action); /* Set the file descriptor that the Controls API should use for logging. */ int pr_ctrls_set_logfd(int fd); /* Logs into a mod_ctrls-specific log file. */ int pr_ctrls_log(const char *module_version, const char *fmt, ...) #ifdef __GNUC__ __attribute__ ((format (printf, 2, 3))); #else ; #endif # endif /* PR_USE_CTRLS */ #endif /* MOD_CTRLS_H */ SIMPAN PERUBAHAN