2 * Copyright (c) 2000 Andre Lucas. All rights reserved.
3 * Portions copyright (c) 1998 Todd C. Miller
4 * Portions copyright (c) 1996 Jason Downs
5 * Portions copyright (c) 1996 Theo de Raadt
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. All advertising materials mentioning features or use of this software
16 * must display the following acknowledgement:
17 * This product includes software developed by Markus Friedl.
18 * 4. The name of the author may not be used to endorse or promote products
19 * derived from this software without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
22 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
23 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
24 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
25 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
26 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
30 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 ** loginrec.c: platform-independent login recording and lastlog retrieval
38 The new login code explained
39 ============================
41 This code attempts to provide a common interface to login recording
42 (utmp and friends) and last login time retrieval.
44 Its primary means of achieving this is to use 'struct logininfo', a
45 union of all the useful fields in the various different types of
46 system login record structures one finds on UNIX variants.
48 We depend on autoconf to define which recording methods are to be
49 used, and which fields are contained in the relevant data structures
50 on the local system. Many C preprocessor symbols affect which code
53 The code is designed to make it easy to modify a particular
54 recording method, without affecting other methods nor requiring so
55 many nested conditional compilation blocks as were commonplace in
58 For login recording, we try to use the local system's libraries as
59 these are clearly most likely to work correctly. For utmp systems
60 this usually means login() and logout() or setutent() etc., probably
61 in libutil, along with logwtmp() etc. On these systems, we fall back
62 to writing the files directly if we have to, though this method
63 requires very thorough testing so we do not corrupt local auditing
64 information. These files and their access methods are very system
67 For utmpx systems, the corresponding library functions are
68 setutxent() etc. To the author's knowledge, all utmpx systems have
69 these library functions and so no direct write is attempted. If such
70 a system exists and needs support, direct analogues of the [uw]tmp
73 Retrieving the time of last login ('lastlog') is in some ways even
74 more problemmatic than login recording. Some systems provide a
75 simple table of all users which we seek based on uid and retrieve a
76 relatively standard structure. Others record the same information in
77 a directory with a separate file, and others don't record the
78 information separately at all. For systems in the latter category,
79 we look backwards in the wtmp or wtmpx file for the last login entry
80 for our user. Naturally this is slower and on busy systems could
81 incur a significant performance penalty.
86 In OpenSSH all login recording and retrieval is performed in
87 login.c. Here you'll find working examples. Also, in the logintest.c
88 program there are more examples.
90 Internal handler calling method
91 -------------------------------
93 When a call is made to login_login() or login_logout(), both
94 routines set a struct logininfo flag defining which action (log in,
95 or log out) is to be taken. They both then call login_write(), which
96 calls whichever of the many structure-specific handlers autoconf
97 selects for the local system.
99 The handlers themselves handle system data structure specifics. Both
100 struct utmp and struct utmpx have utility functions (see
101 construct_utmp*()) to try to make it simpler to add extra systems
102 that introduce new features to either structure.
104 While it may seem terribly wasteful to replicate so much similar
105 code for each method, experience has shown that maintaining code to
106 write both struct utmp and utmpx in one function, whilst maintaining
107 support for all systems whether they have library support or not, is
108 a difficult and time-consuming task.
110 Lastlog support proceeds similarly. Functions login_get_lastlog()
111 (and its OpenSSH-tuned friend login_get_lastlog_time()) call
112 getlast_entry(), which tries one of three methods to find the last
113 login time. It uses local system lastlog support if it can,
114 otherwise it tries wtmp or wtmpx before giving up and returning 0,
120 In many cases it's possible to tweak autoconf to select the correct
121 methods for a particular platform, either by improving the detection
122 code (best), or by presetting DISABLE_<method> or CONF_<method>_FILE
123 symbols for the platform.
125 Use logintest to check which symbols are defined before modifying
126 configure.in and loginrec.c. (You have to build logintest yourself
127 with 'make logintest' as it's not built by default.)
129 Otherwise, patches to the specific method(s) are very helpful!
135 ** homegrown ttyslot()
142 ** Linux (Redhat 6.2, Debian)
144 ** HP-UX 10.20 (gcc only)
146 ** NeXT - M68k/HPPA/Sparc (4.2/3.3)
148 ** Testing required: Please send reports!
153 ** Platforms with known problems:
154 ** Some variants of Slackware Linux
158 #include "includes.h"
162 #include "loginrec.h"
170 #ifdef HAVE_LIBUTIL_H
171 # include <libutil.h>
175 ** prototypes for helper functions in this file
179 void set_utmp_time(struct logininfo *li, struct utmp *ut);
180 void construct_utmp(struct logininfo *li, struct utmp *ut);
184 void set_utmpx_time(struct logininfo *li, struct utmpx *ut);
185 void construct_utmpx(struct logininfo *li, struct utmpx *ut);
188 int utmp_write_entry(struct logininfo *li);
189 int utmpx_write_entry(struct logininfo *li);
190 int wtmp_write_entry(struct logininfo *li);
191 int wtmpx_write_entry(struct logininfo *li);
192 int lastlog_write_entry(struct logininfo *li);
193 int syslogin_write_entry(struct logininfo *li);
195 int getlast_entry(struct logininfo *li);
196 int lastlog_get_entry(struct logininfo *li);
197 int wtmp_get_entry(struct logininfo *li);
198 int wtmpx_get_entry(struct logininfo *li);
200 /* pick the shortest string */
201 #define MIN_SIZEOF(s1,s2) ( sizeof(s1) < sizeof(s2) ? sizeof(s1) : sizeof(s2) )
204 ** platform-independent login functions
207 /* login_login(struct logininfo *) -Record a login
209 * Call with a pointer to a struct logininfo initialised with
210 * login_init_entry() or login_alloc_entry()
214 * 0 on failure (will use OpenSSH's logging facilities for diagnostics)
217 login_login (struct logininfo *li)
219 li->type = LTYPE_LOGIN;
220 return login_write(li);
224 /* login_logout(struct logininfo *) - Record a logout
226 * Call as with login_login()
230 * 0 on failure (will use OpenSSH's logging facilities for diagnostics)
233 login_logout(struct logininfo *li)
235 li->type = LTYPE_LOGOUT;
236 return login_write(li);
239 /* login_get_lastlog_time(int) - Retrieve the last login time
241 * Retrieve the last login time for the given uid. Will try to use the
242 * system lastlog facilities if they are available, but will fall back
243 * to looking in wtmp/wtmpx if necessary
246 * 0 on failure, or if user has never logged in
247 * Time in seconds from the epoch if successful
249 * Useful preprocessor symbols:
250 * DISABLE_LASTLOG: If set, *never* even try to retrieve lastlog
252 * USE_LASTLOG: If set, indicates the presence of system lastlog
253 * facilities. If this and DISABLE_LASTLOG are not set,
254 * try to retrieve lastlog information from wtmp/wtmpx.
257 login_get_lastlog_time(const int uid)
261 if (login_get_lastlog(&li, uid))
267 /* login_get_lastlog(struct logininfo *, int) - Retrieve a lastlog entry
269 * Retrieve a logininfo structure populated (only partially) with
270 * information from the system lastlog data, or from wtmp/wtmpx if no
271 * system lastlog information exists.
273 * Note this routine must be given a pre-allocated logininfo.
276 * >0: A pointer to your struct logininfo if successful
277 * 0 on failure (will use OpenSSH's logging facilities for diagnostics)
281 login_get_lastlog(struct logininfo *li, const int uid)
285 memset(li, '\0', sizeof(*li));
289 * If we don't have a 'real' lastlog, we need the username to
290 * reliably search wtmp(x) for the last login (see
295 fatal("login_get_lastlog: Cannot find account for uid %i", uid);
297 /* No MIN_SIZEOF here - we absolutely *must not* truncate the
299 strlcpy(li->username, pw->pw_name, sizeof(li->username));
301 if (getlast_entry(li))
308 /* login_alloc_entry(int, char*, char*, char*) - Allocate and initialise
309 * a logininfo structure
311 * This function creates a new struct logininfo, a data structure
312 * meant to carry the information required to portably record login info.
314 * Returns a pointer to a newly created struct logininfo. If memory
315 * allocation fails, the program halts.
318 logininfo *login_alloc_entry(int pid, const char *username,
319 const char *hostname, const char *line)
321 struct logininfo *newli;
323 newli = (struct logininfo *) xmalloc (sizeof(*newli));
324 (void)login_init_entry(newli, pid, username, hostname, line);
329 /* login_free_entry(struct logininfo *) - free struct memory */
331 login_free_entry(struct logininfo *li)
337 /* login_init_entry(struct logininfo *, int, char*, char*, char*)
338 * - initialise a struct logininfo
340 * Populates a new struct logininfo, a data structure meant to carry
341 * the information required to portably record login info.
346 login_init_entry(struct logininfo *li, int pid, const char *username,
347 const char *hostname, const char *line)
351 memset(li, 0, sizeof(*li));
355 /* set the line information */
357 line_fullname(li->line, line, sizeof(li->line));
360 strlcpy(li->username, username, sizeof(li->username));
361 pw = getpwnam(li->username);
363 fatal("login_init_entry: Cannot find user \"%s\"", li->username);
364 li->uid = pw->pw_uid;
368 strlcpy(li->hostname, hostname, sizeof(li->hostname));
373 /* login_set_current_time(struct logininfo *) - set the current time
375 * Set the current time in a logininfo structure. This function is
376 * meant to eliminate the need to deal with system dependencies for
380 login_set_current_time(struct logininfo *li)
384 gettimeofday(&tv, NULL);
386 li->tv_sec = tv.tv_sec;
387 li->tv_usec = tv.tv_usec;
390 /* copy a sockaddr_* into our logininfo */
392 login_set_addr(struct logininfo *li, const struct sockaddr *sa,
393 const unsigned int sa_size)
395 unsigned int bufsize = sa_size;
397 /* make sure we don't overrun our union */
398 if (sizeof(li->hostaddr) < sa_size)
399 bufsize = sizeof(li->hostaddr);
401 memcpy((void *)&(li->hostaddr.sa), (const void *)sa, bufsize);
406 ** login_write: Call low-level recording functions based on autoconf
410 login_write (struct logininfo *li)
413 if ((int)geteuid() != 0) {
414 log("Attempt to write login records by non-root user (aborting)");
419 /* set the timestamp */
420 login_set_current_time(li);
422 syslogin_write_entry(li);
425 if (li->type == LTYPE_LOGIN) {
426 lastlog_write_entry(li);
430 utmp_write_entry(li);
433 wtmp_write_entry(li);
436 utmpx_write_entry(li);
439 wtmpx_write_entry(li);
445 ** getlast_entry: Call low-level functions to retrieve the last login
449 /* take the uid in li and return the last login time */
451 getlast_entry(struct logininfo *li)
454 return(lastlog_get_entry(li));
455 #else /* !USE_LASTLOG */
457 #ifdef DISABLE_LASTLOG
458 /* On some systems we shouldn't even try to obtain last login
461 # else /* DISABLE_LASTLOG */
462 /* Try to retrieve the last login time from wtmp */
463 # if defined(USE_WTMP) && (defined(HAVE_TIME_IN_UTMP) || defined(HAVE_TV_IN_UTMP))
464 /* retrieve last login time from utmp */
465 return (wtmp_get_entry(li));
466 # else /* defined(USE_WTMP) && (defined(HAVE_TIME_IN_UTMP) || defined(HAVE_TV_IN_UTMP)) */
467 /* If wtmp isn't available, try wtmpx */
468 # if defined(USE_WTMPX) && (defined(HAVE_TIME_IN_UTMPX) || defined(HAVE_TV_IN_UTMPX))
469 /* retrieve last login time from utmpx */
470 return (wtmpx_get_entry(li));
472 /* Give up: No means of retrieving last login time */
474 # endif /* USE_WTMPX && (HAVE_TIME_IN_UTMPX || HAVE_TV_IN_UTMPX) */
475 # endif /* USE_WTMP && (HAVE_TIME_IN_UTMP || HAVE_TV_IN_UTMP) */
476 # endif /* DISABLE_LASTLOG */
477 #endif /* USE_LASTLOG */
483 * 'line' string utility functions
485 * These functions process the 'line' string into one of three forms:
487 * 1. The full filename (including '/dev')
488 * 2. The stripped name (excluding '/dev')
489 * 3. The abbreviated name (e.g. /dev/ttyp00 -> yp00
490 * /dev/pts/1 -> ts/1 )
492 * Form 3 is used on some systems to identify a .tmp.? entry when
493 * attempting to remove it. Typically both addition and removal is
494 * performed by one application - say, sshd - so as long as the choice
495 * uniquely identifies a terminal it's ok.
499 /* line_fullname(): add the leading '/dev/' if it doesn't exist make
500 * sure dst has enough space, if not just copy src (ugh) */
502 line_fullname(char *dst, const char *src, int dstsize)
504 memset(dst, '\0', dstsize);
505 if ((strncmp(src, "/dev/", 5) == 0) || (dstsize < (strlen(src) + 5))) {
506 strlcpy(dst, src, dstsize);
508 strlcpy(dst, "/dev/", dstsize);
509 strlcat(dst, src, dstsize);
514 /* line_stripname(): strip the leading '/dev' if it exists, return dst */
516 line_stripname(char *dst, const char *src, int dstsize)
518 memset(dst, '\0', dstsize);
519 if (strncmp(src, "/dev/", 5) == 0)
520 strlcpy(dst, src + 5, dstsize);
522 strlcpy(dst, src, dstsize);
526 /* line_abbrevname(): Return the abbreviated (usually four-character)
527 * form of the line (Just use the last <dstsize> characters of the
530 * NOTE: use strncpy because we do NOT necessarily want zero
533 line_abbrevname(char *dst, const char *src, int dstsize)
537 memset(dst, '\0', dstsize);
539 /* Always skip prefix if present */
541 if (strncmp(src, "/dev/tty", 8) == 0)
544 if (strncmp(src, "/dev/", 5) == 0)
551 if (((int)len - dstsize) > 0)
552 src += ((int)len - dstsize);
554 /* note: _don't_ change this to strlcpy */
555 strncpy(dst, src, (size_t)dstsize);
562 ** utmp utility functions
564 ** These functions manipulate struct utmp, taking system differences
568 #if defined(USE_UTMP) || defined (USE_WTMP) || defined (USE_LOGIN)
570 /* build the utmp structure */
572 set_utmp_time(struct logininfo *li, struct utmp *ut)
574 # ifdef HAVE_TV_IN_UTMP
575 ut->ut_tv.tv_sec = li->tv_sec;
576 ut->ut_tv.tv_usec = li->tv_usec;
578 # ifdef HAVE_TIME_IN_UTMP
579 ut->ut_time = li->tv_sec;
585 construct_utmp(struct logininfo *li,
588 memset(ut, '\0', sizeof(*ut));
590 /* First fill out fields used for both logins and logouts */
592 # ifdef HAVE_ID_IN_UTMP
593 line_abbrevname(ut->ut_id, li->line, sizeof(ut->ut_id));
596 # ifdef HAVE_TYPE_IN_UTMP
597 /* This is done here to keep utmp constants out of struct logininfo */
600 ut->ut_type = USER_PROCESS;
603 ut->ut_type = DEAD_PROCESS;
607 set_utmp_time(li, ut);
609 line_stripname(ut->ut_line, li->line, sizeof(ut->ut_line));
611 # ifdef HAVE_PID_IN_UTMP
612 ut->ut_pid = li->pid;
615 /* If we're logging out, leave all other fields blank */
616 if (li->type == LTYPE_LOGOUT)
620 * These fields are only used when logging in, and are blank
624 /* Use strncpy because we don't necessarily want null termination */
625 strncpy(ut->ut_name, li->username, MIN_SIZEOF(ut->ut_name, li->username));
626 # ifdef HAVE_HOST_IN_UTMP
627 strncpy(ut->ut_host, li->hostname, MIN_SIZEOF(ut->ut_host, li->hostname));
629 # ifdef HAVE_ADDR_IN_UTMP
630 /* this is just a 32-bit IP address */
631 if (li->hostaddr.sa.sa_family == AF_INET)
632 ut->ut_addr = li->hostaddr.sa_in.sin_addr.s_addr;
635 #endif /* USE_UTMP || USE_WTMP || USE_LOGIN */
638 ** utmpx utility functions
640 ** These functions manipulate struct utmpx, accounting for system
644 #if defined(USE_UTMPX) || defined (USE_WTMPX)
645 /* build the utmpx structure */
647 set_utmpx_time(struct logininfo *li, struct utmpx *utx)
649 # ifdef HAVE_TV_IN_UTMPX
650 utx->ut_tv.tv_sec = li->tv_sec;
651 utx->ut_tv.tv_usec = li->tv_usec;
652 # else /* HAVE_TV_IN_UTMPX */
653 # ifdef HAVE_TIME_IN_UTMPX
654 utx->ut_time = li->tv_sec;
655 # endif /* HAVE_TIME_IN_UTMPX */
656 # endif /* HAVE_TV_IN_UTMPX */
660 construct_utmpx(struct logininfo *li, struct utmpx *utx)
662 memset(utx, '\0', sizeof(*utx));
663 # ifdef HAVE_ID_IN_UTMPX
664 line_abbrevname(utx->ut_id, li->line, sizeof(utx->ut_id));
667 /* this is done here to keep utmp constants out of loginrec.h */
670 utx->ut_type = USER_PROCESS;
673 utx->ut_type = DEAD_PROCESS;
676 line_stripname(utx->ut_line, li->line, sizeof(utx->ut_line));
677 set_utmpx_time(li, utx);
678 utx->ut_pid = li->pid;
680 if (li->type == LTYPE_LOGOUT)
684 * These fields are only used when logging in, and are blank
688 /* strncpy(): Don't necessarily want null termination */
689 strncpy(utx->ut_name, li->username, MIN_SIZEOF(utx->ut_name, li->username));
690 # ifdef HAVE_HOST_IN_UTMPX
691 strncpy(utx->ut_host, li->hostname, MIN_SIZEOF(utx->ut_host, li->hostname));
693 # ifdef HAVE_ADDR_IN_UTMPX
694 /* this is just a 32-bit IP address */
695 if (li->hostaddr.sa.sa_family == AF_INET)
696 utx->ut_addr = li->hostaddr.sa_in.sin_addr.s_addr;
698 # ifdef HAVE_SYSLEN_IN_UTMPX
699 /* ut_syslen is the length of the utx_host string */
700 utx->ut_syslen = MIN(strlen(li->hostname), sizeof(utx->ut_host));
703 #endif /* USE_UTMPX || USE_WTMPX */
706 ** Low-level utmp functions
709 /* FIXME: (ATL) utmp_write_direct needs testing */
712 /* if we can, use pututline() etc. */
713 # if !defined(DISABLE_PUTUTLINE) && defined(HAVE_SETUTENT) && \
714 defined(HAVE_PUTUTLINE)
715 # define UTMP_USE_LIBRARY
719 /* write a utmp entry with the system's help (pututline() and pals) */
720 # ifdef UTMP_USE_LIBRARY
722 utmp_write_library(struct logininfo *li, struct utmp *ut)
727 # ifdef HAVE_ENDUTENT
732 # else /* UTMP_USE_LIBRARY */
734 /* write a utmp entry direct to the file */
735 /* This is a slightly modification of code in OpenBSD's login.c */
737 utmp_write_direct(struct logininfo *li, struct utmp *ut)
743 /* FIXME: (ATL) ttyslot() needs local implementation */
745 #if defined(HAVE_GETTTYENT)
746 register struct ttyent *ty;
751 while ((struct ttyent *)0 != (ty = getttyent())) {
753 if (!strncmp(ty->ty_name, ut->ut_line, sizeof(ut->ut_line)))
758 if((struct ttyent *)0 == ty) {
759 log("utmp_write_entry: tty not found");
764 tty = ttyslot(); /* seems only to work for /dev/ttyp? style names */
766 #endif /* HAVE_GETTTYENT */
768 if (tty > 0 && (fd = open(UTMP_FILE, O_RDWR|O_CREAT, 0644)) >= 0) {
769 (void)lseek(fd, (off_t)(tty * sizeof(struct utmp)), SEEK_SET);
771 * Prevent luser from zero'ing out ut_host.
772 * If the new ut_line is empty but the old one is not
773 * and ut_line and ut_name match, preserve the old ut_line.
775 if (atomicio(read, fd, &old_ut, sizeof(old_ut)) == sizeof(old_ut) &&
776 (ut->ut_host[0] == '\0') && (old_ut.ut_host[0] != '\0') &&
777 (strncmp(old_ut.ut_line, ut->ut_line, sizeof(ut->ut_line)) == 0) &&
778 (strncmp(old_ut.ut_name, ut->ut_name, sizeof(ut->ut_name)) == 0)) {
779 (void)memcpy(ut->ut_host, old_ut.ut_host, sizeof(ut->ut_host));
782 (void)lseek(fd, (off_t)(tty * sizeof(struct utmp)), SEEK_SET);
783 if (atomicio(write, fd, ut, sizeof(*ut)) != sizeof(*ut))
784 log("utmp_write_direct: error writing %s: %s",
785 UTMP_FILE, strerror(errno));
793 # endif /* UTMP_USE_LIBRARY */
796 utmp_perform_login(struct logininfo *li)
800 construct_utmp(li, &ut);
801 # ifdef UTMP_USE_LIBRARY
802 if (!utmp_write_library(li, &ut)) {
803 log("utmp_perform_login: utmp_write_library() failed");
807 if (!utmp_write_direct(li, &ut)) {
808 log("utmp_perform_login: utmp_write_direct() failed");
817 utmp_perform_logout(struct logininfo *li)
821 construct_utmp(li, &ut);
822 # ifdef UTMP_USE_LIBRARY
823 if (!utmp_write_library(li, &ut)) {
824 log("utmp_perform_logout: utmp_write_library() failed");
828 if (!utmp_write_direct(li, &ut)) {
829 log("utmp_perform_logout: utmp_write_direct() failed");
838 utmp_write_entry(struct logininfo *li)
842 return utmp_perform_login(li);
845 return utmp_perform_logout(li);
848 log("utmp_write_entry: invalid type field");
852 #endif /* USE_UTMP */
856 ** Low-level utmpx functions
859 /* not much point if we don't want utmpx entries */
862 /* if we have the wherewithall, use pututxline etc. */
863 # if !defined(DISABLE_PUTUTXLINE) && defined(HAVE_SETUTXENT) && \
864 defined(HAVE_PUTUTXLINE)
865 # define UTMPX_USE_LIBRARY
869 /* write a utmpx entry with the system's help (pututxline() and pals) */
870 # ifdef UTMPX_USE_LIBRARY
872 utmpx_write_library(struct logininfo *li, struct utmpx *utx)
877 # ifdef HAVE_ENDUTXENT
883 # else /* UTMPX_USE_LIBRARY */
885 /* write a utmp entry direct to the file */
887 utmpx_write_direct(struct logininfo *li, struct utmpx *utx)
889 log("utmpx_write_direct: not implemented!");
892 # endif /* UTMPX_USE_LIBRARY */
895 utmpx_perform_login(struct logininfo *li)
899 construct_utmpx(li, &utx);
900 # ifdef UTMPX_USE_LIBRARY
901 if (!utmpx_write_library(li, &utx)) {
902 log("utmpx_perform_login: utmp_write_library() failed");
906 if (!utmpx_write_direct(li, &ut)) {
907 log("utmpx_perform_login: utmp_write_direct() failed");
916 utmpx_perform_logout(struct logininfo *li)
920 memset(&utx, '\0', sizeof(utx));
921 set_utmpx_time(li, &utx);
922 line_stripname(utx.ut_line, li->line, sizeof(utx.ut_line));
923 # ifdef HAVE_ID_IN_UTMPX
924 line_abbrevname(utx.ut_id, li->line, sizeof(utx.ut_id));
926 # ifdef HAVE_TYPE_IN_UTMPX
927 utx.ut_type = DEAD_PROCESS;
930 # ifdef UTMPX_USE_LIBRARY
931 utmpx_write_library(li, &utx);
933 utmpx_write_direct(li, &utx);
939 utmpx_write_entry(struct logininfo *li)
943 return utmpx_perform_login(li);
945 return utmpx_perform_logout(li);
947 log("utmpx_write_entry: invalid type field");
951 #endif /* USE_UTMPX */
955 ** Low-level wtmp functions
960 /* write a wtmp entry direct to the end of the file */
961 /* This is a slight modification of code in OpenBSD's logwtmp.c */
963 wtmp_write(struct logininfo *li, struct utmp *ut)
968 if ((fd = open(WTMP_FILE, O_WRONLY|O_APPEND, 0)) < 0) {
969 log("wtmp_write: problem writing %s: %s",
970 WTMP_FILE, strerror(errno));
973 if (fstat(fd, &buf) == 0)
974 if (atomicio(write, fd, ut, sizeof(*ut)) != sizeof(*ut)) {
975 ftruncate(fd, buf.st_size);
976 log("wtmp_write: problem writing %s: %s",
977 WTMP_FILE, strerror(errno));
985 wtmp_perform_login(struct logininfo *li)
989 construct_utmp(li, &ut);
990 return wtmp_write(li, &ut);
995 wtmp_perform_logout(struct logininfo *li)
999 construct_utmp(li, &ut);
1000 return wtmp_write(li, &ut);
1005 wtmp_write_entry(struct logininfo *li)
1009 return wtmp_perform_login(li);
1011 return wtmp_perform_logout(li);
1013 log("wtmp_write_entry: invalid type field");
1019 /* Notes on fetching login data from wtmp/wtmpx
1021 * Logouts are usually recorded with (amongst other things) a blank
1022 * username on a given tty line. However, some systems (HP-UX is one)
1023 * leave all fields set, but change the ut_type field to DEAD_PROCESS.
1025 * Since we're only looking for logins here, we know that the username
1026 * must be set correctly. On systems that leave it in, we check for
1027 * ut_type==USER_PROCESS (indicating a login.)
1029 * Portability: Some systems may set something other than USER_PROCESS
1030 * to indicate a login process. I don't know of any as I write. Also,
1031 * it's possible that some systems may both leave the username in
1032 * place and not have ut_type.
1035 /* return true if this wtmp entry indicates a login */
1037 wtmp_islogin(struct logininfo *li, struct utmp *ut)
1039 if (strncmp(li->username, ut->ut_name,
1040 MIN_SIZEOF(li->username, ut->ut_name)) == 0) {
1041 # ifdef HAVE_TYPE_IN_UTMP
1042 if (ut->ut_type & USER_PROCESS)
1052 wtmp_get_entry(struct logininfo *li)
1058 /* Clear the time entries in our logininfo */
1059 li->tv_sec = li->tv_usec = 0;
1061 if ((fd = open(WTMP_FILE, O_RDONLY)) < 0) {
1062 log("wtmp_get_entry: problem opening %s: %s",
1063 WTMP_FILE, strerror(errno));
1066 if (fstat(fd, &st) != 0) {
1067 log("wtmp_get_entry: couldn't stat %s: %s",
1068 WTMP_FILE, strerror(errno));
1073 /* Seek to the start of the last struct utmp */
1074 if (lseek(fd, (off_t)(0 - sizeof(struct utmp)), SEEK_END) == -1) {
1075 /* Looks like we've got a fresh wtmp file */
1081 if (atomicio(read, fd, &ut, sizeof(ut)) != sizeof(ut)) {
1082 log("wtmp_get_entry: read of %s failed: %s",
1083 WTMP_FILE, strerror(errno));
1087 if ( wtmp_islogin(li, &ut) ) {
1089 /* We've already checked for a time in struct
1090 * utmp, in login_getlast(). */
1091 # ifdef HAVE_TIME_IN_UTMP
1092 li->tv_sec = ut.ut_time;
1094 # if HAVE_TV_IN_UTMP
1095 li->tv_sec = ut.ut_tv.tv_sec;
1098 line_fullname(li->line, ut.ut_line,
1099 MIN_SIZEOF(li->line, ut.ut_line));
1100 # ifdef HAVE_HOST_IN_UTMP
1101 strlcpy(li->hostname, ut.ut_host,
1102 MIN_SIZEOF(li->hostname, ut.ut_host));
1106 /* Seek back 2 x struct utmp */
1107 if (lseek(fd, (off_t)(0-2*sizeof(struct utmp)), SEEK_CUR) == -1) {
1108 /* We've found the start of the file, so quit */
1114 /* We found an entry. Tidy up and return */
1118 # endif /* USE_WTMP */
1122 ** Low-level wtmpx functions
1126 /* write a wtmpx entry direct to the end of the file */
1127 /* This is a slight modification of code in OpenBSD's logwtmp.c */
1129 wtmpx_write(struct logininfo *li, struct utmpx *utx)
1134 if ((fd = open(WTMPX_FILE, O_WRONLY|O_APPEND, 0)) < 0) {
1135 log("wtmpx_write: problem opening %s: %s",
1136 WTMPX_FILE, strerror(errno));
1140 if (fstat(fd, &buf) == 0)
1141 if (atomicio(write, fd, utx, sizeof(*utx)) != sizeof(*utx)) {
1142 ftruncate(fd, buf.st_size);
1143 log("wtmpx_write: problem writing %s: %s",
1144 WTMPX_FILE, strerror(errno));
1154 wtmpx_perform_login(struct logininfo *li)
1158 construct_utmpx(li, &utx);
1159 return wtmpx_write(li, &utx);
1164 wtmpx_perform_logout(struct logininfo *li)
1168 construct_utmpx(li, &utx);
1169 return wtmpx_write(li, &utx);
1174 wtmpx_write_entry(struct logininfo *li)
1178 return wtmpx_perform_login(li);
1180 return wtmpx_perform_logout(li);
1182 log("wtmpx_write_entry: invalid type field");
1187 /* Please see the notes above wtmp_islogin() for information about the
1188 next two functions */
1190 /* Return true if this wtmpx entry indicates a login */
1192 wtmpx_islogin(struct logininfo *li, struct utmpx *utx)
1194 if ( strncmp(li->username, utx->ut_name,
1195 MIN_SIZEOF(li->username, utx->ut_name)) == 0 ) {
1196 # ifdef HAVE_TYPE_IN_UTMPX
1197 if (utx->ut_type == USER_PROCESS)
1208 wtmpx_get_entry(struct logininfo *li)
1214 /* Clear the time entries */
1215 li->tv_sec = li->tv_usec = 0;
1217 if ((fd = open(WTMPX_FILE, O_RDONLY)) < 0) {
1218 log("wtmpx_get_entry: problem opening %s: %s",
1219 WTMPX_FILE, strerror(errno));
1222 if (fstat(fd, &st) != 0) {
1223 log("wtmpx_get_entry: couldn't stat %s: %s",
1224 WTMP_FILE, strerror(errno));
1229 /* Seek to the start of the last struct utmpx */
1230 if (lseek(fd, (off_t)(0-sizeof(struct utmpx)), SEEK_END) == -1 ) {
1231 /* probably a newly rotated wtmpx file */
1237 if (atomicio(read, fd, &utx, sizeof(utx)) != sizeof(utx)) {
1238 log("wtmpx_get_entry: read of %s failed: %s",
1239 WTMPX_FILE, strerror(errno));
1243 /* Logouts are recorded as a blank username on a particular line.
1244 * So, we just need to find the username in struct utmpx */
1245 if ( wtmpx_islogin(li, &utx) ) {
1246 # ifdef HAVE_TV_IN_UTMPX
1247 li->tv_sec = utx.ut_tv.tv_sec;
1249 # ifdef HAVE_TIME_IN_UTMPX
1250 li->tv_sec = utx.ut_time;
1253 line_fullname(li->line, utx.ut_line, sizeof(li->line));
1254 # ifdef HAVE_HOST_IN_UTMPX
1255 strlcpy(li->hostname, utx.ut_host,
1256 MIN_SIZEOF(li->hostname, utx.ut_host));
1260 if (lseek(fd, (off_t)(0-2*sizeof(struct utmpx)), SEEK_CUR) == -1) {
1269 #endif /* USE_WTMPX */
1272 ** Low-level libutil login() functions
1277 syslogin_perform_login(struct logininfo *li)
1281 if (! (ut = (struct utmp *)malloc(sizeof(*ut)))) {
1282 log("syslogin_perform_login: couldn't malloc()");
1285 construct_utmp(li, ut);
1292 syslogin_perform_logout(struct logininfo *li)
1297 (void)line_stripname(line, li->line, sizeof(line));
1299 if (!logout(line)) {
1300 log("syslogin_perform_logout: logout() returned an error");
1301 # ifdef HAVE_LOGWTMP
1303 logwtmp(line, "", "");
1306 /* FIXME: (ATL - if the need arises) What to do if we have
1307 * login, but no logout? what if logout but no logwtmp? All
1308 * routines are in libutil so they should all be there,
1315 syslogin_write_entry(struct logininfo *li)
1319 return syslogin_perform_login(li);
1321 return syslogin_perform_logout(li);
1323 log("syslogin_write_entry: Invalid type field");
1327 #endif /* USE_LOGIN */
1329 /* end of file log-syslogin.c */
1332 ** Low-level lastlog functions
1341 lastlog_construct(struct logininfo *li, struct lastlog *last)
1343 /* clear the structure */
1344 memset(last, '\0', sizeof(*last));
1346 (void)line_stripname(last->ll_line, li->line, sizeof(last->ll_line));
1347 strlcpy(last->ll_host, li->hostname,
1348 MIN_SIZEOF(last->ll_host, li->hostname));
1349 last->ll_time = li->tv_sec;
1353 lastlog_filetype(char *filename)
1357 if (stat(LASTLOG_FILE, &st) != 0) {
1358 log("lastlog_perform_login: Couldn't stat %s: %s", LASTLOG_FILE,
1362 if (S_ISDIR(st.st_mode))
1364 else if (S_ISREG(st.st_mode))
1371 /* open the file (using filemode) and seek to the login entry */
1373 lastlog_openseek(struct logininfo *li, int *fd, int filemode)
1377 char lastlog_file[1024];
1379 type = lastlog_filetype(LASTLOG_FILE);
1382 strlcpy(lastlog_file, LASTLOG_FILE, sizeof(lastlog_file));
1385 snprintf(lastlog_file, sizeof(lastlog_file), "%s/%s",
1386 LASTLOG_FILE, li->username);
1389 log("lastlog_openseek: %.100s is not a file or directory!",
1394 *fd = open(lastlog_file, filemode);
1396 debug("lastlog_openseek: Couldn't open %s: %s",
1397 lastlog_file, strerror(errno));
1401 if (type == LL_FILE) {
1402 /* find this uid's offset in the lastlog file */
1403 offset = (off_t) ( (long)li->uid * sizeof(struct lastlog));
1405 if ( lseek(*fd, offset, SEEK_SET) != offset ) {
1406 log("lastlog_openseek: %s->lseek(): %s",
1407 lastlog_file, strerror(errno));
1416 lastlog_perform_login(struct logininfo *li)
1418 struct lastlog last;
1421 /* create our struct lastlog */
1422 lastlog_construct(li, &last);
1424 if (!lastlog_openseek(li, &fd, O_RDWR|O_CREAT))
1427 /* write the entry */
1428 if (atomicio(write, fd, &last, sizeof(last)) != sizeof(last)) {
1430 log("lastlog_write_filemode: Error writing to %s: %s",
1431 LASTLOG_FILE, strerror(errno));
1440 lastlog_write_entry(struct logininfo *li)
1444 return lastlog_perform_login(li);
1446 log("lastlog_write_entry: Invalid type field");
1452 lastlog_populate_entry(struct logininfo *li, struct lastlog *last)
1454 line_fullname(li->line, last->ll_line, sizeof(li->line));
1455 strlcpy(li->hostname, last->ll_host,
1456 MIN_SIZEOF(li->hostname, last->ll_host));
1457 li->tv_sec = last->ll_time;
1461 lastlog_get_entry(struct logininfo *li)
1463 struct lastlog last;
1466 if (lastlog_openseek(li, &fd, O_RDONLY)) {
1467 if (atomicio(read, fd, &last, sizeof(last)) != sizeof(last)) {
1468 log("lastlog_get_entry: Error reading from %s: %s",
1469 LASTLOG_FILE, strerror(errno));
1472 lastlog_populate_entry(li, &last);
1479 #endif /* USE_LASTLOG */