1 /*-
2 * Copyright (c) 2001-2002 Chris D. Faulhaber
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 *
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24 * SUCH DAMAGE.
25 */
26
27 #include <sys/cdefs.h>
28 #include <sys/types.h>
29 #include <sys/acl.h>
30 #include <sys/stat.h>
31
32 #include <err.h>
33
34 #include "setfacl.h"
35
36 /* set the appropriate mask the given ACL's */
37 int
set_acl_mask(acl_t * prev_acl,const char * filename)38 set_acl_mask(acl_t *prev_acl, const char *filename)
39 {
40 acl_entry_t entry;
41 acl_t acl;
42 acl_tag_t tag;
43 int entry_id;
44
45 entry = NULL;
46
47 /*
48 * ... if a mask entry is specified, then the permissions of the mask
49 * entry in the resulting ACL shall be set to the permissions in the
50 * specified ACL mask entry.
51 */
52 if (have_mask)
53 return (0);
54
55 acl = acl_dup(*prev_acl);
56 if (acl == NULL)
57 err(1, "%s: acl_dup() failed", filename);
58
59 if (!n_flag) {
60 /*
61 * If no mask entry is specified and the -n option is not
62 * specified, then the permissions of the resulting ACL mask
63 * entry shall be set to the union of the permissions
64 * associated with all entries which belong to the file group
65 * class in the resulting ACL
66 */
67 if (acl_calc_mask(&acl)) {
68 warn("%s: acl_calc_mask() failed", filename);
69 acl_free(acl);
70 return (-1);
71 }
72 } else {
73 /*
74 * If no mask entry is specified and the -n option is
75 * specified, then the permissions of the resulting ACL
76 * mask entry shall remain unchanged ...
77 */
78
79 entry_id = ACL_FIRST_ENTRY;
80
81 while (acl_get_entry(acl, entry_id, &entry) == 1) {
82 entry_id = ACL_NEXT_ENTRY;
83 if (acl_get_tag_type(entry, &tag) == -1)
84 err(1, "%s: acl_get_tag_type() failed",
85 filename);
86
87 if (tag == ACL_MASK) {
88 acl_free(acl);
89 return (0);
90 }
91 }
92
93 /*
94 * If no mask entry is specified, the -n option is specified,
95 * and no ACL mask entry exists in the ACL associated with the
96 * file, then write an error message to standard error and
97 * continue with the next file.
98 */
99 warnx("%s: warning: no mask entry", filename);
100 acl_free(acl);
101 return (0);
102 }
103
104 acl_free(*prev_acl);
105 *prev_acl = acl_dup(acl);
106 acl_free(acl);
107
108 return (0);
109 }
110