Beispiel #1
0
void PickUserView::AddUserList(ColumnListView* listView)
{
	DIR *users;
	struct dirent *user;

	users = OpenUsers();
	if (users)
	{
		while ((user = ReadUser(users)) != NULL)
			if (!isUserInGroup(user->d_name, excludedGroup))
			{
				char desc[64];
				getUserFullName(user->d_name, desc, sizeof(desc));
				listView->AddItem(new PickUserItem(this, user->d_name, desc));
			}

		CloseGroup(users);
	}
}
int main(void) {
	char username[TEMP_MAX_LEN+1];
	char *sn, *sfn, *userstart, *userend, *args[2];
	int sn_len, sfn_len, userlen;
	struct passwd *userpw;
	struct group *grp;
	struct stat sst;
	
	// Recover desired environment variables
	sn = getenv("SCRIPT_NAME");
	if (!sn) return error(__LINE__,"SCRIPT_NAME undefined.");
	sn_len = strlen(sn);
	
	sfn = getenv("SCRIPT_FILENAME");
	if (!sfn) return error(__LINE__,"SCRIPT_FILENAME undefined.");
	sfn_len = strlen(sfn);
	
	// Minimum name: "/~U/s"
	if (sn_len < 5  ) return error(__LINE__,"SCRIPT_NAME malformed.");
	if (sn[0] != '/') return error(__LINE__,"SCRIPT_NAME malformed.");
	if (sn[1] != '~') return error(__LINE__,"SCRIPT_NAME malformed.");
	
	// Recover status info for the file
	if (stat(sfn, &sst)) return error(__LINE__,"Script not found.");
	
	// Check if it is a regular file (not simlinks, dir, or other)
	if (!S_ISREG(sst.st_mode))
		return error(__LINE__,"Script is not a regular file.");
	
	// Look for the username
	userstart = sn + 2;
	userend   = strchr(sn+2, '/');
	if (!userend) return error(__LINE__,"Bad user name or URL.");

	// Copy to a new string
	userlen = userend - userstart;
	if (userlen > TEMP_MAX_LEN) return error(__LINE__,"Bad user name.");
	
	strncpy(username, userstart, userlen);
	username[userlen] = 0;
	
	// Require the user to exist
	userpw = getpwnam(username);
	if (!userpw) return error(__LINE__,"User not found.");
	
	// Require the suphp group to exist
	grp = getgrnam(SUPHP_GROUP_NAME);
	if (!grp) return error(__LINE__,"Missing " SUPHP_GROUP_NAME " group.");
	
	// Require the user to be in the suphp group
	if (!isUserInGroup(username, grp->gr_mem))
		return error(__LINE__,"User not allowed to use scripts.");
	
	// Require the script to be inside the user's home
	if (strncmp(sfn, userpw->pw_dir, strlen(userpw->pw_dir)))
		return error(__LINE__,"Invalid script directory.");
	
	// Require user to own the script
	if (userpw->pw_uid != sst.st_uid)
		return error(__LINE__,"Unsafe script.");
	
	// Require user read permission to the file
	if(!(sst.st_mode&S_IRUSR))
		return error(__LINE__,"Can not read script.");
	
	// Refuse scripts writable by group/other
	if(sst.st_mode & (S_IWGRP|S_IWOTH))
		return error(__LINE__,"Unsafe script.");
	
	// Change to the user
	if (setuid(userpw->pw_uid))
		return error(__LINE__,"User switching failed.");
	
	// Run the script
	args[0] = sfn;
	args[1] = 0;
	execv("/usr/bin/php-cgi", args);
	return 0;
}