1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
/*
* lib/krb5/os/krbfileio.c
*
* Copyright (c) Hewlett-Packard Company 1991
* Released to the Massachusetts Institute of Technology for inclusion
* in the Kerberos source code distribution.
*
* Copyright 1991 by the Massachusetts Institute of Technology.
* All Rights Reserved.
*
* Export of this software from the United States of America may
* require a specific license from the United States Government.
* It is the responsibility of any person or organization contemplating
* export to obtain such a license before exporting.
*
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
* distribute this software and its documentation for any purpose and
* without fee is hereby granted, provided that the above copyright
* notice appear in all copies and that both that copyright notice and
* this permission notice appear in supporting documentation, and that
* the name of M.I.T. not be used in advertising or publicity pertaining
* to distribution of the software without specific, written prior
* permission. Furthermore if you modify this software you must label
* your software as modified software and not distribute it in such a
* fashion that it might be confused with the original M.I.T. software.
* M.I.T. makes no representations about the suitability of
* this software for any purpose. It is provided "as is" without express
* or implied warranty.
*
*
* krb5_create_secure_file
* krb5_sync_disk_file
*/
#ifdef MODULE_VERSION_ID
static char *VersionID = "@(#)krbfileio.c 2 - 08/22/91";
#endif
#define NEED_LOWLEVEL_IO /* Need open(), etc. */
#include "k5-int.h"
#ifdef HAVE_SYS_FILE_H
#include <sys/file.h>
#endif
#include <fcntl.h>
#ifndef O_BINARY
#define O_BINARY 0
#endif
#ifdef apollo
# define OPEN_MODE_NOT_TRUSTWORTHY
#endif
krb5_error_code
krb5_create_secure_file(context, pathname)
krb5_context context;
const char * pathname;
{
int fd;
/*
* Create the file with access restricted to the owner
*/
fd = THREEPARAMOPEN(pathname, O_RDWR | O_CREAT | O_EXCL | O_BINARY, 0600);
#ifdef OPEN_MODE_NOT_TRUSTWORTHY
/*
* Some systems that support default acl inheritance do not
* apply ownership information from the process - force the file
* to have the proper info.
*/
if (fd > -1) {
uid_t uid;
gid_t gid;
uid = getuid();
gid = getgid();
fchown(fd, uid, gid);
fchmod(fd, 0600);
}
#endif /* OPEN_MODE_NOT_TRUSTWORTHY */
if (fd > -1) {
close(fd);
return 0;
} else {
return errno;
}
}
krb5_error_code
krb5_sync_disk_file(context, fp)
krb5_context context;
FILE *fp;
{
fflush(fp);
#if !defined(MSDOS_FILESYSTEM) && !defined(macintosh)
if (fsync(fileno(fp))) {
return errno;
}
#endif
return 0;
}
|
