fsaccess.c revision 258945
1169691Skan/* 2169691Skan * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") 3169691Skan * Copyright (C) 2000, 2001 Internet Software Consortium. 4169691Skan * 5169691Skan * Permission to use, copy, modify, and/or distribute this software for any 6169691Skan * purpose with or without fee is hereby granted, provided that the above 7169691Skan * copyright notice and this permission notice appear in all copies. 8169691Skan * 9169691Skan * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 10169691Skan * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 11169691Skan * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 12169691Skan * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 13169691Skan * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 14169691Skan * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 15169691Skan * PERFORMANCE OF THIS SOFTWARE. 16169691Skan */ 17169691Skan 18169691Skan/* $Id: fsaccess.c,v 1.13 2007/06/19 23:47:18 tbox Exp $ */ 19169691Skan 20169691Skan#include <config.h> 21169691Skan 22169691Skan#include <sys/types.h> 23169691Skan#include <sys/stat.h> 24169691Skan 25169691Skan#include <errno.h> 26169691Skan 27169691Skan#include "errno2result.h" 28169691Skan 29169691Skan/*! \file 30169691Skan * \brief 31169691Skan * The OS-independent part of the API is in lib/isc. 32169691Skan */ 33169691Skan#include "../fsaccess.c" 34169691Skan 35169691Skanisc_result_t 36169691Skanisc_fsaccess_set(const char *path, isc_fsaccess_t access) { 37169691Skan struct stat statb; 38169691Skan mode_t mode; 39169691Skan isc_boolean_t is_dir = ISC_FALSE; 40169691Skan isc_fsaccess_t bits; 41169691Skan isc_result_t result; 42169691Skan 43169691Skan if (stat(path, &statb) != 0) 44169691Skan return (isc__errno2result(errno)); 45169691Skan 46169691Skan if ((statb.st_mode & S_IFDIR) != 0) 47169691Skan is_dir = ISC_TRUE; 48169691Skan else if ((statb.st_mode & S_IFREG) == 0) 49169691Skan return (ISC_R_INVALIDFILE); 50169691Skan 51169691Skan result = check_bad_bits(access, is_dir); 52169691Skan if (result != ISC_R_SUCCESS) 53169691Skan return (result); 54169691Skan 55169691Skan /* 56169691Skan * Done with checking bad bits. Set mode_t. 57169691Skan */ 58169691Skan mode = 0; 59169691Skan 60169691Skan#define SET_AND_CLEAR1(modebit) \ 61169691Skan if ((access & bits) != 0) { \ 62169691Skan mode |= modebit; \ 63169691Skan access &= ~bits; \ 64169691Skan } 65169691Skan#define SET_AND_CLEAR(user, group, other) \ 66169691Skan SET_AND_CLEAR1(user); \ 67169691Skan bits <<= STEP; \ 68169691Skan SET_AND_CLEAR1(group); \ 69169691Skan bits <<= STEP; \ 70169691Skan SET_AND_CLEAR1(other); 71169691Skan 72169691Skan bits = ISC_FSACCESS_READ | ISC_FSACCESS_LISTDIRECTORY; 73169691Skan 74169691Skan SET_AND_CLEAR(S_IRUSR, S_IRGRP, S_IROTH); 75169691Skan 76169691Skan bits = ISC_FSACCESS_WRITE | 77169691Skan ISC_FSACCESS_CREATECHILD | 78169691Skan ISC_FSACCESS_DELETECHILD; 79169691Skan 80169691Skan SET_AND_CLEAR(S_IWUSR, S_IWGRP, S_IWOTH); 81169691Skan 82169691Skan bits = ISC_FSACCESS_EXECUTE | 83169691Skan ISC_FSACCESS_ACCESSCHILD; 84169691Skan 85 SET_AND_CLEAR(S_IXUSR, S_IXGRP, S_IXOTH); 86 87 INSIST(access == 0); 88 89 if (chmod(path, mode) < 0) 90 return (isc__errno2result(errno)); 91 92 return (ISC_R_SUCCESS); 93} 94