| /* |
| * Handle the mapping of uid/gid and user/group names between systems. |
| * |
| * Copyright (C) 1996 Andrew Tridgell |
| * Copyright (C) 1996 Paul Mackerras |
| * Copyright (C) 2004-2009 Wayne Davison |
| * |
| * This program is free software; you can redistribute it and/or modify |
| * it under the terms of the GNU General Public License as published by |
| * the Free Software Foundation; either version 3 of the License, or |
| * (at your option) any later version. |
| * |
| * This program is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| * GNU General Public License for more details. |
| * |
| * You should have received a copy of the GNU General Public License along |
| * with this program; if not, visit the http://fsf.org website. |
| */ |
| |
| /* If the source username/group does not exist on the target then use |
| * the numeric IDs. Never do any mapping for uid=0 or gid=0 as these |
| * are special. */ |
| |
| #include "rsync.h" |
| #include "ifuncs.h" |
| #include "itypes.h" |
| #include "io.h" |
| |
| extern int am_root; |
| extern int preserve_uid; |
| extern int preserve_gid; |
| extern int preserve_acls; |
| extern int numeric_ids; |
| extern char *usermap; |
| extern char *groupmap; |
| |
| #ifdef HAVE_GETGROUPS |
| # ifndef GETGROUPS_T |
| # define GETGROUPS_T gid_t |
| # endif |
| #endif |
| |
| #define GID_NONE ((gid_t)-1) |
| |
| #define NFLAGS_WILD_NAME_MATCH (1<<0) |
| #define NFLAGS_NAME_MATCH (1<<1) |
| |
| struct idlist { |
| struct idlist *next; |
| const char *name; |
| id_t id, id2; |
| uint16 flags; |
| }; |
| |
| static struct idlist *uidlist, *uidmap; |
| static struct idlist *gidlist, *gidmap; |
| |
| static struct idlist *add_to_list(struct idlist **root, id_t id, const char *name, |
| id_t id2, uint16 flags) |
| { |
| struct idlist *node = new(struct idlist); |
| if (!node) |
| out_of_memory("add_to_list"); |
| node->next = *root; |
| node->name = name; |
| node->id = id; |
| node->id2 = id2; |
| node->flags = flags; |
| *root = node; |
| return node; |
| } |
| |
| /* turn a uid into a user name */ |
| static const char *uid_to_name(uid_t uid) |
| { |
| struct passwd *pass = getpwuid(uid); |
| if (pass) |
| return strdup(pass->pw_name); |
| return NULL; |
| } |
| |
| /* turn a gid into a group name */ |
| static const char *gid_to_name(gid_t gid) |
| { |
| struct group *grp = getgrgid(gid); |
| if (grp) |
| return strdup(grp->gr_name); |
| return NULL; |
| } |
| |
| static int is_in_group(gid_t gid) |
| { |
| #ifdef HAVE_GETGROUPS |
| static gid_t last_in = GID_NONE, last_out; |
| static int ngroups = -2; |
| static GETGROUPS_T *gidset; |
| int n; |
| |
| if (gid == last_in) |
| return last_out; |
| if (ngroups < -1) { |
| gid_t mygid = MY_GID(); |
| if ((ngroups = getgroups(0, NULL)) < 0) |
| ngroups = 0; |
| gidset = new_array(GETGROUPS_T, ngroups+1); |
| if (!gidset) |
| out_of_memory("is_in_group"); |
| if (ngroups > 0) |
| ngroups = getgroups(ngroups, gidset); |
| /* The default gid might not be in the list on some systems. */ |
| for (n = 0; n < ngroups; n++) { |
| if (gidset[n] == mygid) |
| break; |
| } |
| if (n == ngroups) |
| gidset[ngroups++] = mygid; |
| if (DEBUG_GTE(OWN, 2)) { |
| int pos; |
| char *gidbuf = new_array(char, ngroups*21+32); |
| if (!gidbuf) |
| out_of_memory("is_in_group"); |
| pos = snprintf(gidbuf, 32, "process has %d gid%s: ", |
| ngroups, ngroups == 1? "" : "s"); |
| for (n = 0; n < ngroups; n++) { |
| pos += snprintf(gidbuf+pos, 21, " %d", (int)gidset[n]); |
| } |
| rprintf(FINFO, "%s\n", gidbuf); |
| free(gidbuf); |
| } |
| } |
| |
| last_in = gid; |
| for (n = 0; n < ngroups; n++) { |
| if (gidset[n] == gid) |
| return last_out = 1; |
| } |
| return last_out = 0; |
| |
| #else |
| static gid_t mygid = GID_NONE; |
| if (mygid == GID_NONE) { |
| mygid = MY_GID(); |
| if (DEBUG_GTE(OWN, 2)) |
| rprintf(FINFO, "process has gid %u\n", (unsigned)mygid); |
| } |
| return gid == mygid; |
| #endif |
| } |
| |
| /* Add a uid/gid to its list of ids. Only called on receiving side. */ |
| static struct idlist *recv_add_id(struct idlist **idlist_ptr, struct idlist *idmap, |
| id_t id, const char *name) |
| { |
| struct idlist *node; |
| int flag; |
| id_t id2; |
| |
| if (!name) |
| name = ""; |
| |
| for (node = idmap; node; node = node->next) { |
| if (node->flags & NFLAGS_WILD_NAME_MATCH) { |
| if (!wildmatch(node->name, name)) |
| continue; |
| } else if (node->flags & NFLAGS_NAME_MATCH) { |
| if (strcmp(node->name, name) != 0) |
| continue; |
| } else if (node->name) { |
| if (id < node->id || id > (unsigned long)node->name) |
| continue; |
| } else { |
| if (node->id != id) |
| continue; |
| } |
| break; |
| } |
| if (node) |
| id2 = node->id2; |
| else if (*name && id) { |
| if (idlist_ptr == &uidlist) { |
| uid_t uid; |
| id2 = name_to_uid(name, &uid) ? uid : id; |
| } else { |
| gid_t gid; |
| id2 = name_to_gid(name, &gid) ? gid : id; |
| } |
| } else |
| id2 = id; |
| |
| flag = idlist_ptr == &gidlist && !am_root && !is_in_group(id2) ? FLAG_SKIP_GROUP : 0; |
| node = add_to_list(idlist_ptr, id, *name ? name : NULL, id2, flag); |
| |
| if (DEBUG_GTE(OWN, 2)) { |
| rprintf(FINFO, "%sid %u(%s) maps to %u\n", |
| idlist_ptr == &uidlist ? "u" : "g", |
| (unsigned)id, name, (unsigned)id2); |
| } |
| |
| return node; |
| } |
| |
| /* this function is a definate candidate for a faster algorithm */ |
| uid_t match_uid(uid_t uid) |
| { |
| static uid_t last_in = -1, last_out = -1; |
| struct idlist *list; |
| |
| if (uid == last_in) |
| return last_out; |
| |
| last_in = uid; |
| |
| for (list = uidlist; list; list = list->next) { |
| if (list->id == uid) |
| break; |
| } |
| |
| if (!list) |
| list = recv_add_id(&uidlist, uidmap, uid, NULL); |
| |
| return last_out = list->id2; |
| } |
| |
| gid_t match_gid(gid_t gid, uint16 *flags_ptr) |
| { |
| static struct idlist *last = NULL; |
| struct idlist *list; |
| |
| if (last && gid == last->id) |
| list = last; |
| else { |
| for (list = gidlist; list; list = list->next) { |
| if (list->id == gid) |
| break; |
| } |
| if (!list) |
| list = recv_add_id(&gidlist, gidmap, gid, NULL); |
| last = list; |
| } |
| |
| if (flags_ptr && list->flags & FLAG_SKIP_GROUP) |
| *flags_ptr |= FLAG_SKIP_GROUP; |
| return list->id2; |
| } |
| |
| /* Add a uid to the list of uids. Only called on sending side. */ |
| const char *add_uid(uid_t uid) |
| { |
| struct idlist *list; |
| struct idlist *node; |
| |
| if (uid == 0) /* don't map root */ |
| return NULL; |
| |
| for (list = uidlist; list; list = list->next) { |
| if (list->id == uid) |
| return NULL; |
| } |
| |
| node = add_to_list(&uidlist, uid, uid_to_name(uid), 0, 0); |
| return node->name; |
| } |
| |
| /* Add a gid to the list of gids. Only called on sending side. */ |
| const char *add_gid(gid_t gid) |
| { |
| struct idlist *list; |
| struct idlist *node; |
| |
| if (gid == 0) /* don't map root */ |
| return NULL; |
| |
| for (list = gidlist; list; list = list->next) { |
| if (list->id == gid) |
| return NULL; |
| } |
| |
| node = add_to_list(&gidlist, gid, gid_to_name(gid), 0, 0); |
| return node->name; |
| } |
| |
| /* send a complete uid/gid mapping to the peer */ |
| void send_id_list(int f) |
| { |
| struct idlist *list; |
| |
| if (preserve_uid || preserve_acls) { |
| int len; |
| /* we send sequences of uid/byte-length/name */ |
| for (list = uidlist; list; list = list->next) { |
| if (!list->name) |
| continue; |
| len = strlen(list->name); |
| write_varint30(f, list->id); |
| write_byte(f, len); |
| write_buf(f, list->name, len); |
| } |
| |
| /* terminate the uid list with a 0 uid. We explicitly exclude |
| * 0 from the list */ |
| write_varint30(f, 0); |
| } |
| |
| if (preserve_gid || preserve_acls) { |
| int len; |
| for (list = gidlist; list; list = list->next) { |
| if (!list->name) |
| continue; |
| len = strlen(list->name); |
| write_varint30(f, list->id); |
| write_byte(f, len); |
| write_buf(f, list->name, len); |
| } |
| write_varint30(f, 0); |
| } |
| } |
| |
| uid_t recv_user_name(int f, uid_t uid) |
| { |
| struct idlist *node; |
| int len = read_byte(f); |
| char *name = new_array(char, len+1); |
| if (!name) |
| out_of_memory("recv_user_name"); |
| read_sbuf(f, name, len); |
| if (numeric_ids < 0) { |
| free(name); |
| name = NULL; |
| } |
| node = recv_add_id(&uidlist, uidmap, uid, name); /* node keeps name's memory */ |
| return node->id2; |
| } |
| |
| gid_t recv_group_name(int f, gid_t gid, uint16 *flags_ptr) |
| { |
| struct idlist *node; |
| int len = read_byte(f); |
| char *name = new_array(char, len+1); |
| if (!name) |
| out_of_memory("recv_group_name"); |
| read_sbuf(f, name, len); |
| if (numeric_ids < 0) { |
| free(name); |
| name = NULL; |
| } |
| node = recv_add_id(&gidlist, gidmap, gid, name); /* node keeps name's memory */ |
| if (flags_ptr && node->flags & FLAG_SKIP_GROUP) |
| *flags_ptr |= FLAG_SKIP_GROUP; |
| return node->id2; |
| } |
| |
| /* recv a complete uid/gid mapping from the peer and map the uid/gid |
| * in the file list to local names */ |
| void recv_id_list(int f, struct file_list *flist) |
| { |
| id_t id; |
| int i; |
| |
| if ((preserve_uid || preserve_acls) && numeric_ids <= 0) { |
| /* read the uid list */ |
| while ((id = read_varint30(f)) != 0) |
| recv_user_name(f, id); |
| } |
| |
| if ((preserve_gid || preserve_acls) && numeric_ids <= 0) { |
| /* read the gid list */ |
| while ((id = read_varint30(f)) != 0) |
| recv_group_name(f, id, NULL); |
| } |
| |
| /* Now convert all the uids/gids from sender values to our values. */ |
| #ifdef SUPPORT_ACLS |
| if (preserve_acls && (!numeric_ids || usermap || groupmap)) |
| match_acl_ids(); |
| #endif |
| if (am_root && preserve_uid && (!numeric_ids || usermap)) { |
| for (i = 0; i < flist->used; i++) |
| F_OWNER(flist->files[i]) = match_uid(F_OWNER(flist->files[i])); |
| } |
| if (preserve_gid && (!am_root || !numeric_ids || groupmap)) { |
| for (i = 0; i < flist->used; i++) { |
| F_GROUP(flist->files[i]) = match_gid(F_GROUP(flist->files[i]), |
| &flist->files[i]->flags); |
| } |
| } |
| } |
| |
| void parse_name_map(char *map, BOOL usernames) |
| { |
| struct idlist **idmap_ptr = usernames ? &uidmap : &gidmap; |
| struct idlist **idlist_ptr = usernames ? &uidlist : &gidlist; |
| char *colon, *end, *name, *cp = map + strlen(map); |
| id_t id1; |
| uint16 flags; |
| |
| /* Parse the list in reverse, so the order in the struct is right. */ |
| while (1) { |
| end = cp; |
| while (cp > map && cp[-1] != ',') cp--; |
| if (!(colon = strchr(cp, ':'))) { |
| rprintf(FERROR, "No colon found in --%smap: %s\n", |
| usernames ? "user" : "group", cp); |
| exit_cleanup(RERR_SYNTAX); |
| } |
| if (!colon[1]) { |
| rprintf(FERROR, "No name found after colon --%smap: %s\n", |
| usernames ? "user" : "group", cp); |
| exit_cleanup(RERR_SYNTAX); |
| } |
| *colon = '\0'; |
| |
| if (isDigit(cp)) { |
| char *dash = strchr(cp, '-'); |
| if (strspn(cp, "0123456789-") != (size_t)(colon - cp) |
| || (dash && (!dash[1] || strchr(dash+1, '-')))) { |
| bad_number: |
| rprintf(FERROR, "Invalid number in --%smap: %s\n", |
| usernames ? "user" : "group", cp); |
| exit_cleanup(RERR_SYNTAX); |
| } |
| if (dash) |
| name = (char *)atol(dash+1); |
| else |
| name = (char *)0; |
| flags = 0; |
| id1 = atol(cp); |
| } else if (strpbrk(cp, "*[?")) { |
| flags = NFLAGS_WILD_NAME_MATCH; |
| name = cp; |
| id1 = 0; |
| } else { |
| flags = NFLAGS_NAME_MATCH; |
| name = cp; |
| id1 = 0; |
| } |
| |
| if (isDigit(colon+1)) { |
| if (strspn(colon+1, "0123456789") != (size_t)(end - colon - 1)) { |
| cp = colon+1; |
| goto bad_number; |
| } |
| add_to_list(idmap_ptr, id1, name, atol(colon+1), flags); |
| } else if (usernames) { |
| uid_t uid; |
| if (name_to_uid(colon+1, &uid)) |
| add_to_list(idmap_ptr, id1, name, uid, flags); |
| else { |
| rprintf(FERROR, |
| "Unknown --usermap name on receiver: %s\n", |
| colon+1); |
| } |
| } else { |
| gid_t gid; |
| if (name_to_gid(colon+1, &gid)) |
| add_to_list(idmap_ptr, id1, name, gid, flags); |
| else { |
| rprintf(FERROR, |
| "Unknown --groupmap name on receiver: %s\n", |
| colon+1); |
| } |
| } |
| |
| if (cp == map) |
| break; |
| |
| *--cp = '\0'; /* replace comma */ |
| } |
| |
| /* The 0 user/group doesn't get its name sent, so add it explicitly. */ |
| recv_add_id(idlist_ptr, *idmap_ptr, 0, |
| numeric_ids ? NULL : usernames ? uid_to_name(0) : gid_to_name(0)); |
| } |