handle "noexec" and "user" config options

[moira.git] / update / exec_002.c

diff --git a/update/exec_002.c b/update/exec_002.c
index 1288793c5602cc42427d22fe135957ecf993173e..887c4b1316a3d7014069ca0f271435c9a65ebd92 100644 (file)
--- a/update/exec_002.c
+++ b/update/exec_002.c
@@ -2,21 +2,28 @@
  *     $Source$
  *     $Header$
  */
+/*  (c) Copyright 1988 by the Massachusetts Institute of Technology. */
+/*  For copying and distribution information, please see the file */
+/*  <mit-copyright.h>. */
 
 #ifndef lint
 static char *rcsid_exec_002_c = "$Header$";
 #endif lint
 
+#include <mit-copyright.h>
 #include <stdio.h>
+#include <errno.h>
+#include <sys/types.h>
 #include <sys/wait.h>
 #include <signal.h>
 #include <gdb.h>
-#include <sms.h>
+#include <moira.h>
 #include "update.h"
-#include "kludge.h"
 
 extern CONNECTION conn;
-extern int code, errno;
+extern int code, errno, uid;
+extern char *whoami;
+
 
 int
 exec_002(str)
@@ -25,6 +32,12 @@ exec_002(str)
     union wait waitb;
     int n, pid, mask;
 
+    if (config_lookup("noexec")) {
+       code = EPERM;
+       code = send_object(conn, (char *)&code, INTEGER_T);
+       com_err(whoami, code, "Not allowed to execute");
+       return;
+    }
     str += 8;
     while (*str == ' ')
        str++;
@@ -41,6 +54,11 @@ exec_002(str)
            exit(1);
        return;
     case 0:
+       if (setuid(uid) < 0) {
+           com_err(whoami, errno, "Unable to setuid to %d\n", uid);
+           exit(1);
+       }
+       sigsetmask(mask);
        execlp(str, str, (char *)NULL);
        n = errno;
        sigsetmask(mask);
@@ -54,7 +72,7 @@ exec_002(str)
        } while (n != -1 && n != pid);
        sigsetmask(mask);
        if (waitb.w_status) {
-           n = waitb.w_retcode + sms_err_base;
+           n = waitb.w_retcode + ERROR_TABLE_BASE_sms;
            log_priority = log_ERROR;
            com_err(whoami, n, " child exited with status %d", waitb.w_retcode);
            code = send_object(conn, (char *)&n, INTEGER_T);