Home | History | Annotate | Line # | Download | only in racoon 
      1 /*	$NetBSD: privsep.h,v 1.7 2025/03/07 15:55:29 christos Exp $	*/
      2 
      3 /* Id: privsep.h,v 1.5 2005/06/07 12:22:11 fredsen Exp */
      4 
      5 /*
      6  * Copyright (C) 2004 Emmanuel Dreyfus
      7  * All rights reserved.
      8  *
      9  * Redistribution and use in source and binary forms, with or without
     10  * modification, are permitted provided that the following conditions
     11  * are met:
     12  * 1. Redistributions of source code must retain the above copyright
     13  *    notice, this list of conditions and the following disclaimer.
     14  * 2. Redistributions in binary form must reproduce the above copyright
     15  *    notice, this list of conditions and the following disclaimer in the
     16  *    documentation and/or other materials provided with the distribution.
     17  * 3. Neither the name of the project nor the names of its contributors
     18  *    may be used to endorse or promote products derived from this software
     19  *    without specific prior written permission.
     20  *
     21  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     31  * SUCH DAMAGE.
     32  */
     33 
     34 #ifndef _PRIVSEP_H
     35 #define _PRIVSEP_H
     36 
     37 #define PRIVSEP_EAY_GET_PKCS1PRIVKEY	0x0801	/* admin_com_bufs follows */
     38 #define PRIVSEP_SCRIPT_EXEC		0x0803	/* admin_com_bufs follows */
     39 #define PRIVSEP_GETPSK			0x0804	/* admin_com_bufs follows */
     40 #define PRIVSEP_XAUTH_LOGIN_SYSTEM	0x0805	/* admin_com_bufs follows */
     41 #define PRIVSEP_ACCOUNTING_PAM		0x0806	/* admin_com_bufs follows */
     42 #define PRIVSEP_XAUTH_LOGIN_PAM		0x0807	/* admin_com_bufs follows */
     43 #define PRIVSEP_CLEANUP_PAM		0x0808	/* admin_com_bufs follows */
     44 #define PRIVSEP_ACCOUNTING_SYSTEM	0x0809	/* admin_com_bufs follows */
     45 #define PRIVSEP_SETSOCKOPTS		0x080A	/* admin_com_bufs follows */
     46 #define PRIVSEP_BIND			0x080B	/* admin_com_bufs follows */
     47 #define PRIVSEP_SOCKET			0x080C	/* admin_com_bufs follows */
     48 
     49 #define PRIVSEP_NBUF_MAX 24
     50 #define PRIVSEP_BUFLEN_MAX 4096
     51 struct admin_com_bufs {
     52 	size_t buflen[PRIVSEP_NBUF_MAX];
     53 	/* Followed by the buffers */
     54 };
     55 
     56 struct privsep_com_msg {
     57 	struct admin_com hdr;
     58 	struct admin_com_bufs bufs;
     59 };
     60 
     61 int privsep_init(void);
     62 
     63 vchar_t *privsep_eay_get_pkcs1privkey(char *);
     64 int privsep_script_exec(char *, int, char * const *);
     65 int privsep_setsockopt(int, int, int, const void *, socklen_t);
     66 int privsep_socket(int, int, int);
     67 int privsep_bind(int, const struct sockaddr *, socklen_t);
     68 vchar_t *privsep_getpsk(const char *, const int);
     69 int privsep_xauth_login_system(char *, char *);
     70 #ifdef HAVE_LIBPAM
     71 int privsep_accounting_pam(int, int);
     72 int privsep_xauth_login_pam(int, struct sockaddr *, char *, char *);
     73 void privsep_cleanup_pam(int);
     74 #endif
     75 int privsep_accounting_system(int, struct sockaddr *, char *, int);
     76 #endif /* _PRIVSEP_H */
     77