2 * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
3 * Copyright (C) 2000, 2001 Internet Software Consortium.
5 * Permission to use, copy, modify, and/or distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
9 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
10 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
11 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
12 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
15 * PERFORMANCE OF THIS SOFTWARE.
18 /* $Id: fsaccess.c,v 1.13 2007/06/19 23:47:18 tbox Exp $ */
22 #include <sys/types.h>
27 #include "errno2result.h"
31 * The OS-independent part of the API is in lib/isc.
33 #include "../fsaccess.c"
36 isc_fsaccess_set(const char *path, isc_fsaccess_t access) {
39 isc_boolean_t is_dir = ISC_FALSE;
43 if (stat(path, &statb) != 0)
44 return (isc__errno2result(errno));
46 if ((statb.st_mode & S_IFDIR) != 0)
48 else if ((statb.st_mode & S_IFREG) == 0)
49 return (ISC_R_INVALIDFILE);
51 result = check_bad_bits(access, is_dir);
52 if (result != ISC_R_SUCCESS)
56 * Done with checking bad bits. Set mode_t.
60 #define SET_AND_CLEAR1(modebit) \
61 if ((access & bits) != 0) { \
65 #define SET_AND_CLEAR(user, group, other) \
66 SET_AND_CLEAR1(user); \
68 SET_AND_CLEAR1(group); \
70 SET_AND_CLEAR1(other);
72 bits = ISC_FSACCESS_READ | ISC_FSACCESS_LISTDIRECTORY;
74 SET_AND_CLEAR(S_IRUSR, S_IRGRP, S_IROTH);
76 bits = ISC_FSACCESS_WRITE |
77 ISC_FSACCESS_CREATECHILD |
78 ISC_FSACCESS_DELETECHILD;
80 SET_AND_CLEAR(S_IWUSR, S_IWGRP, S_IWOTH);
82 bits = ISC_FSACCESS_EXECUTE |
83 ISC_FSACCESS_ACCESSCHILD;
85 SET_AND_CLEAR(S_IXUSR, S_IXGRP, S_IXOTH);
89 if (chmod(path, mode) < 0)
90 return (isc__errno2result(errno));
92 return (ISC_R_SUCCESS);