/* * Copyright (c) 2019-2020, Jesse Buhagiar * * SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include constexpr uid_t BASE_UID = 1000; constexpr gid_t USERS_GID = 100; constexpr const char* DEFAULT_SHELL = "/bin/Shell"; int main(int argc, char** argv) { if (pledge("stdio wpath rpath cpath chown", nullptr) < 0) { perror("pledge"); return 1; } const char* home_path = nullptr; int uid = 0; int gid = USERS_GID; bool create_home_dir = false; const char* password = ""; const char* shell = DEFAULT_SHELL; const char* gecos = ""; const char* username = nullptr; Core::ArgsParser args_parser; args_parser.add_option(home_path, "Home directory for the new user", "home-dir", 'd', "path"); args_parser.add_option(uid, "User ID (uid) for the new user", "uid", 'u', "uid"); args_parser.add_option(gid, "Group ID (gid) for the new user", "gid", 'g', "gid"); args_parser.add_option(password, "Encrypted password of the new user", "password", 'p', "password"); args_parser.add_option(create_home_dir, "Create home directory if it does not exist", "create-home", 'm'); args_parser.add_option(shell, "Path to the default shell binary for the new user", "shell", 's', "path-to-shell"); args_parser.add_option(gecos, "GECOS name of the new user", "gecos", 'n', "general-info"); args_parser.add_positional_argument(username, "Login user identity (username)", "login"); args_parser.parse(argc, argv); // Let's run a quick sanity check on username if (strpbrk(username, "\\/!@#$%^&*()~+=`:\n")) { fprintf(stderr, "invalid character in username, %s\n", username); return 1; } // Disallow names starting with _ and - if (username[0] == '_' || username[0] == '-' || !isalpha(username[0])) { fprintf(stderr, "invalid username, %s\n", username); return 1; } if (uid < 0) { fprintf(stderr, "invalid uid %d!\n", uid); return 3; } // First, let's sort out the uid for the user if (uid > 0) { if (getpwuid(static_cast(uid))) { fprintf(stderr, "uid %u already exists!\n", uid); return 4; } } else { for (uid = BASE_UID; getpwuid(static_cast(uid)); uid++) { } } if (gid < 0) { fprintf(stderr, "invalid gid %d\n", gid); return 3; } FILE* pwfile = fopen("/etc/passwd", "a"); if (!pwfile) { perror("failed to open /etc/passwd"); return 1; } String home; if (!home_path) home = String::formatted("/home/{}", username); else home = home_path; if (create_home_dir) { if (mkdir(home.characters(), 0700) < 0) { auto saved_errno = errno; warnln("Failed to create directory {}: {}", home, strerror(saved_errno)); return 12; } if (chown(home.characters(), static_cast(uid), static_cast(gid)) < 0) { warnln("Failed to change owner of {} to {}:{}: {}", home, uid, gid, strerror(errno)); if (rmdir(home.characters()) < 0) { warnln("Failed to remove directory {}: {}", home, strerror(errno)); return 12; } return 12; } } struct passwd p; p.pw_name = const_cast(username); p.pw_passwd = const_cast(password); p.pw_dir = const_cast(home.characters()); p.pw_uid = static_cast(uid); p.pw_gid = static_cast(gid); p.pw_shell = const_cast(shell); p.pw_gecos = const_cast(gecos); if (putpwent(&p, pwfile) < 0) { perror("putpwent"); return 1; } fclose(pwfile); return 0; }