| #include <stdlib.h> |
| #include <string.h> |
| #define YYBYACC 1 |
| #define YYMAJOR 1 |
| #define YYMINOR 9 |
| #define YYLEX yylex() |
| #define YYEMPTY -1 |
| #define yyclearin (yychar=(YYEMPTY)) |
| #define yyerrok (yyerrflag=0) |
| #define YYRECOVERING() (yyerrflag!=0) |
| #define YYPREFIX "yy" |
| #line 2 "gram.y" |
| /* |
| * Copyright (c) 1996, 1998-2005, 2007-2010 |
| * Todd C. Miller <Todd.Miller@courtesan.com> |
| * |
| * Permission to use, copy, modify, and distribute this software for any |
| * purpose with or without fee is hereby granted, provided that the above |
| * copyright notice and this permission notice appear in all copies. |
| * |
| * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
| * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
| * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR |
| * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
| * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN |
| * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF |
| * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
| * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF |
| * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| * |
| * Sponsored in part by the Defense Advanced Research Projects |
| * Agency (DARPA) and Air Force Research Laboratory, Air Force |
| * Materiel Command, USAF, under agreement number F39502-99-1-0512. |
| */ |
| |
| #include <config.h> |
| |
| #include <sys/types.h> |
| #include <sys/param.h> |
| #include <stdio.h> |
| #ifdef STDC_HEADERS |
| # include <stdlib.h> |
| # include <stddef.h> |
| #else |
| # ifdef HAVE_STDLIB_H |
| # include <stdlib.h> |
| # endif |
| #endif /* STDC_HEADERS */ |
| #ifdef HAVE_STRING_H |
| # include <string.h> |
| #endif /* HAVE_STRING_H */ |
| #ifdef HAVE_STRINGS_H |
| # include <strings.h> |
| #endif /* HAVE_STRINGS_H */ |
| #ifdef HAVE_UNISTD_H |
| # include <unistd.h> |
| #endif /* HAVE_UNISTD_H */ |
| #if defined(YYBISON) && defined(HAVE_ALLOCA_H) && !defined(__GNUC__) |
| # include <alloca.h> |
| #endif /* YYBISON && HAVE_ALLOCA_H && !__GNUC__ */ |
| #include <limits.h> |
| |
| #include "sudo.h" |
| #include "parse.h" |
| |
| /* |
| * We must define SIZE_MAX for yacc's skeleton.c. |
| * If there is no SIZE_MAX or SIZE_T_MAX we have to assume that size_t |
| * could be signed (as it is on SunOS 4.x). |
| */ |
| #ifndef SIZE_MAX |
| # ifdef SIZE_T_MAX |
| # define SIZE_MAX SIZE_T_MAX |
| # else |
| # define SIZE_MAX INT_MAX |
| # endif /* SIZE_T_MAX */ |
| #endif /* SIZE_MAX */ |
| |
| /* |
| * Globals |
| */ |
| extern int sudolineno; |
| extern char *sudoers; |
| int parse_error; |
| int pedantic = FALSE; |
| int verbose = FALSE; |
| int errorlineno = -1; |
| char *errorfile = NULL; |
| |
| struct defaults_list defaults; |
| struct userspec_list userspecs; |
| |
| /* |
| * Local protoypes |
| */ |
| static void add_defaults __P((int, struct member *, struct defaults *)); |
| static void add_userspec __P((struct member *, struct privilege *)); |
| static struct defaults *new_default __P((char *, char *, int)); |
| static struct member *new_member __P((char *, int)); |
| void yyerror __P((const char *)); |
| |
| void |
| yyerror(s) |
| const char *s; |
| { |
| /* Save the line the first error occurred on. */ |
| if (errorlineno == -1) { |
| errorlineno = sudolineno ? sudolineno - 1 : 0; |
| errorfile = estrdup(sudoers); |
| } |
| if (verbose && s != NULL) { |
| #ifndef TRACELEXER |
| (void) fprintf(stderr, ">>> %s: %s near line %d <<<\n", sudoers, s, |
| sudolineno ? sudolineno - 1 : 0); |
| #else |
| (void) fprintf(stderr, "<*> "); |
| #endif |
| } |
| parse_error = TRUE; |
| } |
| #line 112 "gram.y" |
| #ifndef YYSTYPE_DEFINED |
| #define YYSTYPE_DEFINED |
| typedef union { |
| struct cmndspec *cmndspec; |
| struct defaults *defaults; |
| struct member *member; |
| struct runascontainer *runas; |
| struct privilege *privilege; |
| struct sudo_command command; |
| struct cmndtag tag; |
| struct selinux_info seinfo; |
| char *string; |
| int tok; |
| } YYSTYPE; |
| #endif /* YYSTYPE_DEFINED */ |
| #line 138 "y.tab.c" |
| #define COMMAND 257 |
| #define ALIAS 258 |
| #define DEFVAR 259 |
| #define NTWKADDR 260 |
| #define NETGROUP 261 |
| #define USERGROUP 262 |
| #define WORD 263 |
| #define DEFAULTS 264 |
| #define DEFAULTS_HOST 265 |
| #define DEFAULTS_USER 266 |
| #define DEFAULTS_RUNAS 267 |
| #define DEFAULTS_CMND 268 |
| #define NOPASSWD 269 |
| #define PASSWD 270 |
| #define NOEXEC 271 |
| #define EXEC 272 |
| #define SETENV 273 |
| #define NOSETENV 274 |
| #define LOG_INPUT 275 |
| #define NOLOG_INPUT 276 |
| #define LOG_OUTPUT 277 |
| #define NOLOG_OUTPUT 278 |
| #define ALL 279 |
| #define COMMENT 280 |
| #define HOSTALIAS 281 |
| #define CMNDALIAS 282 |
| #define USERALIAS 283 |
| #define RUNASALIAS 284 |
| #define ERROR 285 |
| #define TYPE 286 |
| #define ROLE 287 |
| #define YYERRCODE 256 |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yylhs[] = |
| #else |
| short yylhs[] = |
| #endif |
| { -1, |
| 0, 0, 25, 25, 26, 26, 26, 26, 26, 26, |
| 26, 26, 26, 26, 26, 26, 4, 4, 3, 3, |
| 3, 3, 3, 20, 20, 19, 10, 10, 8, 8, |
| 8, 8, 8, 2, 2, 1, 6, 6, 23, 24, |
| 22, 22, 22, 22, 22, 17, 17, 18, 18, 18, |
| 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, |
| 21, 5, 5, 5, 28, 28, 31, 9, 9, 29, |
| 29, 32, 7, 7, 30, 30, 33, 27, 27, 34, |
| 13, 13, 11, 11, 12, 12, 12, 12, 12, 16, |
| 16, 14, 14, 15, 15, 15, |
| }; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yylen[] = |
| #else |
| short yylen[] = |
| #endif |
| { 2, |
| 0, 1, 1, 2, 1, 2, 2, 2, 2, 2, |
| 2, 2, 3, 3, 3, 3, 1, 3, 1, 2, |
| 3, 3, 3, 1, 3, 3, 1, 2, 1, 1, |
| 1, 1, 1, 1, 3, 4, 1, 2, 3, 3, |
| 0, 1, 1, 2, 2, 0, 3, 1, 3, 2, |
| 0, 2, 2, 2, 2, 2, 2, 2, 2, 2, |
| 2, 1, 1, 1, 1, 3, 3, 1, 3, 1, |
| 3, 3, 1, 3, 1, 3, 3, 1, 3, 3, |
| 1, 3, 1, 2, 1, 1, 1, 1, 1, 1, |
| 3, 1, 2, 1, 1, 1, |
| }; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yydefred[] = |
| #else |
| short yydefred[] = |
| #endif |
| { 0, |
| 0, 85, 87, 88, 89, 0, 0, 0, 0, 0, |
| 86, 5, 0, 0, 0, 0, 0, 0, 81, 83, |
| 0, 0, 3, 6, 0, 0, 17, 0, 29, 32, |
| 31, 33, 30, 0, 27, 0, 68, 0, 0, 64, |
| 63, 62, 0, 37, 73, 0, 0, 0, 65, 0, |
| 0, 70, 0, 0, 78, 0, 0, 75, 84, 0, |
| 0, 24, 0, 4, 0, 0, 0, 20, 0, 28, |
| 0, 0, 0, 0, 38, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 82, 0, 0, 21, 22, |
| 23, 18, 69, 74, 0, 66, 0, 71, 0, 79, |
| 0, 76, 0, 34, 0, 0, 25, 0, 0, 0, |
| 0, 0, 0, 51, 0, 0, 94, 96, 95, 0, |
| 90, 92, 0, 0, 47, 35, 0, 0, 0, 44, |
| 45, 93, 0, 0, 40, 39, 52, 53, 54, 55, |
| 56, 57, 58, 59, 60, 61, 36, 91, |
| }; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yydgoto[] = |
| #else |
| short yydgoto[] = |
| #endif |
| { 18, |
| 104, 105, 27, 28, 44, 45, 46, 35, 61, 37, |
| 19, 20, 21, 121, 122, 123, 106, 110, 62, 63, |
| 129, 114, 115, 116, 22, 23, 54, 48, 51, 57, |
| 49, 52, 58, 55, |
| }; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yysindex[] = |
| #else |
| short yysindex[] = |
| #endif |
| { 475, |
| -270, 0, 0, 0, 0, -29, 567, 594, 594, -2, |
| 0, 0, -240, -222, -216, -212, -241, 0, 0, 0, |
| -25, 475, 0, 0, -10, -207, 0, 9, 0, 0, |
| 0, 0, 0, -235, 0, -33, 0, -31, -31, 0, |
| 0, 0, -242, 0, 0, -30, -7, 3, 0, -6, |
| 4, 0, -5, 6, 0, -1, 8, 0, 0, 594, |
| -20, 0, 10, 0, -205, -196, -194, 0, -29, 0, |
| 567, 9, 9, 9, 0, -2, 9, 567, -240, -2, |
| -222, 594, -216, 594, -212, 0, 31, 567, 0, 0, |
| 0, 0, 0, 0, 26, 0, 28, 0, 29, 0, |
| 29, 0, 541, 0, 32, -247, 0, 86, -15, 33, |
| 31, 14, 16, 0, -208, -204, 0, 0, 0, -231, |
| 0, 0, 38, 86, 0, 0, -179, -178, 491, 0, |
| 0, 0, 86, 38, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0,}; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yyrindex[] = |
| #else |
| short yyrindex[] = |
| #endif |
| { 87, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 90, 0, 0, 1, 0, 0, 177, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 207, 0, 0, |
| 237, 0, 0, 271, 0, 0, 300, 0, 0, 0, |
| 0, 0, 329, 0, 0, 0, 0, 0, 0, 0, |
| 0, 358, 387, 417, 0, 0, 446, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, -26, 0, 0, 0, |
| 0, 0, 0, 0, 30, 0, 59, 0, 89, 0, |
| 118, 0, 0, 0, 148, 514, 0, 0, 45, 0, |
| -26, 0, 0, 0, 537, 565, 0, 0, 0, 0, |
| 0, 0, 50, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 52, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0,}; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yygindex[] = |
| #else |
| short yygindex[] = |
| #endif |
| { 0, |
| -17, 0, 27, 11, 54, -64, 15, 64, 2, 34, |
| 39, 84, -3, -27, -18, -21, 0, 0, 19, 0, |
| 0, 0, -12, -4, 0, 88, 0, 0, 0, 0, |
| 35, 40, 23, 37, |
| }; |
| #define YYTABLESIZE 873 |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yytable[] = |
| #else |
| short yytable[] = |
| #endif |
| { 26, |
| 19, 26, 26, 26, 38, 39, 46, 34, 36, 24, |
| 71, 94, 60, 76, 40, 41, 2, 47, 60, 3, |
| 4, 5, 29, 71, 30, 31, 117, 32, 60, 67, |
| 43, 118, 66, 19, 67, 50, 42, 11, 112, 113, |
| 87, 53, 124, 33, 19, 56, 72, 119, 73, 74, |
| 65, 68, 69, 78, 80, 82, 77, 89, 72, 84, |
| 79, 81, 67, 83, 147, 85, 90, 88, 91, 71, |
| 103, 76, 60, 125, 127, 111, 128, 112, 99, 95, |
| 101, 133, 113, 135, 136, 48, 1, 67, 80, 2, |
| 50, 72, 49, 126, 97, 92, 75, 70, 86, 109, |
| 59, 132, 134, 131, 93, 148, 107, 102, 0, 64, |
| 130, 0, 0, 96, 0, 0, 72, 77, 120, 100, |
| 98, 80, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 80, 26, 0, 0, |
| 77, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 77, 12, 0, 0, 0, |
| 26, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 26, 9, 0, 0, 12, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 25, 0, 25, 25, 25, |
| 46, 46, 29, 0, 30, 31, 10, 32, 0, 9, |
| 0, 0, 46, 46, 46, 46, 46, 46, 46, 46, |
| 46, 46, 46, 33, 40, 41, 19, 0, 19, 46, |
| 46, 19, 19, 19, 19, 19, 19, 19, 19, 10, |
| 8, 0, 0, 0, 0, 0, 42, 0, 0, 19, |
| 19, 19, 19, 19, 19, 67, 0, 67, 0, 0, |
| 67, 67, 67, 67, 67, 67, 67, 67, 0, 11, |
| 0, 0, 0, 8, 0, 0, 0, 0, 67, 67, |
| 67, 67, 67, 67, 72, 0, 72, 0, 0, 72, |
| 72, 72, 72, 72, 72, 72, 72, 0, 7, 0, |
| 0, 0, 11, 0, 0, 0, 0, 72, 72, 72, |
| 72, 72, 72, 117, 80, 0, 80, 0, 118, 80, |
| 80, 80, 80, 80, 80, 80, 80, 15, 0, 0, |
| 0, 7, 0, 0, 119, 0, 0, 80, 80, 80, |
| 80, 80, 80, 77, 0, 77, 0, 0, 77, 77, |
| 77, 77, 77, 77, 77, 77, 13, 0, 0, 0, |
| 15, 0, 0, 0, 0, 0, 77, 77, 77, 77, |
| 77, 77, 0, 26, 0, 26, 0, 0, 26, 26, |
| 26, 26, 26, 26, 26, 26, 14, 0, 0, 13, |
| 0, 0, 0, 0, 0, 0, 26, 26, 26, 26, |
| 26, 26, 12, 0, 12, 0, 0, 12, 12, 12, |
| 12, 12, 12, 12, 12, 16, 0, 0, 0, 14, |
| 0, 0, 0, 0, 0, 12, 12, 12, 12, 12, |
| 12, 0, 9, 0, 9, 0, 0, 9, 9, 9, |
| 9, 9, 9, 9, 9, 0, 0, 0, 16, 0, |
| 0, 0, 0, 0, 0, 9, 9, 9, 9, 9, |
| 9, 0, 10, 0, 10, 0, 0, 10, 10, 10, |
| 10, 10, 10, 10, 10, 0, 0, 17, 0, 0, |
| 0, 0, 0, 0, 0, 10, 10, 10, 10, 10, |
| 10, 0, 0, 43, 0, 0, 8, 0, 8, 0, |
| 0, 8, 8, 8, 8, 8, 8, 8, 8, 0, |
| 0, 0, 0, 0, 0, 0, 41, 0, 0, 8, |
| 8, 8, 8, 8, 8, 11, 0, 11, 0, 0, |
| 11, 11, 11, 11, 11, 11, 11, 11, 0, 42, |
| 0, 0, 0, 17, 0, 0, 0, 0, 11, 11, |
| 11, 11, 11, 11, 7, 0, 7, 0, 0, 7, |
| 7, 7, 7, 7, 7, 7, 7, 43, 108, 34, |
| 0, 0, 0, 0, 0, 0, 0, 7, 7, 7, |
| 7, 7, 7, 15, 0, 15, 0, 0, 15, 15, |
| 15, 15, 15, 15, 15, 15, 17, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 15, 15, 15, 15, |
| 15, 15, 13, 0, 13, 0, 0, 13, 13, 13, |
| 13, 13, 13, 13, 13, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 13, 13, 13, 13, 13, |
| 13, 0, 14, 0, 14, 0, 0, 14, 14, 14, |
| 14, 14, 14, 14, 14, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 0, 14, 14, 14, 14, 14, |
| 14, 16, 0, 16, 0, 0, 16, 16, 16, 16, |
| 16, 16, 16, 16, 0, 0, 0, 0, 0, 0, |
| 0, 0, 0, 0, 16, 16, 16, 16, 16, 16, |
| 1, 0, 2, 0, 0, 3, 4, 5, 6, 7, |
| 8, 9, 10, 0, 0, 0, 0, 40, 41, 0, |
| 0, 0, 0, 11, 12, 13, 14, 15, 16, 137, |
| 138, 139, 140, 141, 142, 143, 144, 145, 146, 42, |
| 41, 41, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 41, 41, 41, 41, 41, 41, 41, 41, |
| 41, 41, 41, 42, 42, 0, 0, 0, 2, 0, |
| 0, 3, 4, 5, 0, 42, 42, 42, 42, 42, |
| 42, 42, 42, 42, 42, 42, 0, 0, 0, 11, |
| 0, 43, 43, 0, 29, 0, 30, 31, 0, 32, |
| 0, 0, 0, 43, 43, 43, 43, 43, 43, 43, |
| 43, 43, 43, 43, 0, 33, 0, 0, 0, 0, |
| 0, 2, 0, 0, 3, 4, 5, 0, 0, 0, |
| 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, |
| 0, 0, 11, |
| }; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const short yycheck[] = |
| #else |
| short yycheck[] = |
| #endif |
| { 33, |
| 0, 33, 33, 33, 8, 9, 33, 33, 7, 280, |
| 44, 76, 44, 44, 257, 258, 258, 258, 44, 261, |
| 262, 263, 258, 44, 260, 261, 258, 263, 44, 0, |
| 33, 263, 43, 33, 45, 258, 279, 279, 286, 287, |
| 61, 258, 58, 279, 44, 258, 36, 279, 38, 39, |
| 61, 259, 44, 61, 61, 61, 46, 263, 0, 61, |
| 58, 58, 33, 58, 129, 58, 263, 58, 263, 44, |
| 40, 44, 44, 41, 61, 44, 61, 286, 82, 78, |
| 84, 44, 287, 263, 263, 41, 0, 58, 0, 0, |
| 41, 33, 41, 111, 80, 69, 43, 34, 60, 103, |
| 17, 120, 124, 116, 71, 133, 88, 85, -1, 22, |
| 115, -1, -1, 79, -1, -1, 58, 0, 33, 83, |
| 81, 33, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, -1, 58, 0, -1, -1, |
| 33, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, 58, 0, -1, -1, -1, |
| 33, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, 58, 0, -1, -1, 33, |
| -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, 259, -1, 259, 259, 259, |
| 257, 258, 258, -1, 260, 261, 0, 263, -1, 33, |
| -1, -1, 269, 270, 271, 272, 273, 274, 275, 276, |
| 277, 278, 279, 279, 257, 258, 256, -1, 258, 286, |
| 287, 261, 262, 263, 264, 265, 266, 267, 268, 33, |
| 0, -1, -1, -1, -1, -1, 279, -1, -1, 279, |
| 280, 281, 282, 283, 284, 256, -1, 258, -1, -1, |
| 261, 262, 263, 264, 265, 266, 267, 268, -1, 0, |
| -1, -1, -1, 33, -1, -1, -1, -1, 279, 280, |
| 281, 282, 283, 284, 256, -1, 258, -1, -1, 261, |
| 262, 263, 264, 265, 266, 267, 268, -1, 0, -1, |
| -1, -1, 33, -1, -1, -1, -1, 279, 280, 281, |
| 282, 283, 284, 258, 256, -1, 258, -1, 263, 261, |
| 262, 263, 264, 265, 266, 267, 268, 0, -1, -1, |
| -1, 33, -1, -1, 279, -1, -1, 279, 280, 281, |
| 282, 283, 284, 256, -1, 258, -1, -1, 261, 262, |
| 263, 264, 265, 266, 267, 268, 0, -1, -1, -1, |
| 33, -1, -1, -1, -1, -1, 279, 280, 281, 282, |
| 283, 284, -1, 256, -1, 258, -1, -1, 261, 262, |
| 263, 264, 265, 266, 267, 268, 0, -1, -1, 33, |
| -1, -1, -1, -1, -1, -1, 279, 280, 281, 282, |
| 283, 284, 256, -1, 258, -1, -1, 261, 262, 263, |
| 264, 265, 266, 267, 268, 0, -1, -1, -1, 33, |
| -1, -1, -1, -1, -1, 279, 280, 281, 282, 283, |
| 284, -1, 256, -1, 258, -1, -1, 261, 262, 263, |
| 264, 265, 266, 267, 268, -1, -1, -1, 33, -1, |
| -1, -1, -1, -1, -1, 279, 280, 281, 282, 283, |
| 284, -1, 256, -1, 258, -1, -1, 261, 262, 263, |
| 264, 265, 266, 267, 268, -1, -1, 33, -1, -1, |
| -1, -1, -1, -1, -1, 279, 280, 281, 282, 283, |
| 284, -1, -1, 33, -1, -1, 256, -1, 258, -1, |
| -1, 261, 262, 263, 264, 265, 266, 267, 268, -1, |
| -1, -1, -1, -1, -1, -1, 33, -1, -1, 279, |
| 280, 281, 282, 283, 284, 256, -1, 258, -1, -1, |
| 261, 262, 263, 264, 265, 266, 267, 268, -1, 33, |
| -1, -1, -1, 33, -1, -1, -1, -1, 279, 280, |
| 281, 282, 283, 284, 256, -1, 258, -1, -1, 261, |
| 262, 263, 264, 265, 266, 267, 268, 33, 58, 33, |
| -1, -1, -1, -1, -1, -1, -1, 279, 280, 281, |
| 282, 283, 284, 256, -1, 258, -1, -1, 261, 262, |
| 263, 264, 265, 266, 267, 268, 33, -1, -1, -1, |
| -1, -1, -1, -1, -1, -1, 279, 280, 281, 282, |
| 283, 284, 256, -1, 258, -1, -1, 261, 262, 263, |
| 264, 265, 266, 267, 268, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, 279, 280, 281, 282, 283, |
| 284, -1, 256, -1, 258, -1, -1, 261, 262, 263, |
| 264, 265, 266, 267, 268, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, -1, 279, 280, 281, 282, 283, |
| 284, 256, -1, 258, -1, -1, 261, 262, 263, 264, |
| 265, 266, 267, 268, -1, -1, -1, -1, -1, -1, |
| -1, -1, -1, -1, 279, 280, 281, 282, 283, 284, |
| 256, -1, 258, -1, -1, 261, 262, 263, 264, 265, |
| 266, 267, 268, -1, -1, -1, -1, 257, 258, -1, |
| -1, -1, -1, 279, 280, 281, 282, 283, 284, 269, |
| 270, 271, 272, 273, 274, 275, 276, 277, 278, 279, |
| 257, 258, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, 269, 270, 271, 272, 273, 274, 275, 276, |
| 277, 278, 279, 257, 258, -1, -1, -1, 258, -1, |
| -1, 261, 262, 263, -1, 269, 270, 271, 272, 273, |
| 274, 275, 276, 277, 278, 279, -1, -1, -1, 279, |
| -1, 257, 258, -1, 258, -1, 260, 261, -1, 263, |
| -1, -1, -1, 269, 270, 271, 272, 273, 274, 275, |
| 276, 277, 278, 279, -1, 279, -1, -1, -1, -1, |
| -1, 258, -1, -1, 261, 262, 263, -1, -1, -1, |
| -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, |
| -1, -1, 279, |
| }; |
| #define YYFINAL 18 |
| #ifndef YYDEBUG |
| #define YYDEBUG 0 |
| #endif |
| #define YYMAXTOKEN 287 |
| #if YYDEBUG |
| #if defined(__cplusplus) || defined(__STDC__) |
| const char * const yyname[] = |
| #else |
| char *yyname[] = |
| #endif |
| { |
| "end-of-file",0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, |
| "'!'",0,0,0,0,0,0,"'('","')'",0,"'+'","','","'-'",0,0,0,0,0,0,0,0,0,0,0,0,"':'", |
| 0,0,"'='",0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, |
| 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, |
| 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, |
| 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, |
| 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0, |
| "COMMAND","ALIAS","DEFVAR","NTWKADDR","NETGROUP","USERGROUP","WORD","DEFAULTS", |
| "DEFAULTS_HOST","DEFAULTS_USER","DEFAULTS_RUNAS","DEFAULTS_CMND","NOPASSWD", |
| "PASSWD","NOEXEC","EXEC","SETENV","NOSETENV","LOG_INPUT","NOLOG_INPUT", |
| "LOG_OUTPUT","NOLOG_OUTPUT","ALL","COMMENT","HOSTALIAS","CMNDALIAS","USERALIAS", |
| "RUNASALIAS","ERROR","TYPE","ROLE", |
| }; |
| #if defined(__cplusplus) || defined(__STDC__) |
| const char * const yyrule[] = |
| #else |
| char *yyrule[] = |
| #endif |
| {"$accept : file", |
| "file :", |
| "file : line", |
| "line : entry", |
| "line : line entry", |
| "entry : COMMENT", |
| "entry : error COMMENT", |
| "entry : userlist privileges", |
| "entry : USERALIAS useraliases", |
| "entry : HOSTALIAS hostaliases", |
| "entry : CMNDALIAS cmndaliases", |
| "entry : RUNASALIAS runasaliases", |
| "entry : DEFAULTS defaults_list", |
| "entry : DEFAULTS_USER userlist defaults_list", |
| "entry : DEFAULTS_RUNAS userlist defaults_list", |
| "entry : DEFAULTS_HOST hostlist defaults_list", |
| "entry : DEFAULTS_CMND cmndlist defaults_list", |
| "defaults_list : defaults_entry", |
| "defaults_list : defaults_list ',' defaults_entry", |
| "defaults_entry : DEFVAR", |
| "defaults_entry : '!' DEFVAR", |
| "defaults_entry : DEFVAR '=' WORD", |
| "defaults_entry : DEFVAR '+' WORD", |
| "defaults_entry : DEFVAR '-' WORD", |
| "privileges : privilege", |
| "privileges : privileges ':' privilege", |
| "privilege : hostlist '=' cmndspeclist", |
| "ophost : host", |
| "ophost : '!' host", |
| "host : ALIAS", |
| "host : ALL", |
| "host : NETGROUP", |
| "host : NTWKADDR", |
| "host : WORD", |
| "cmndspeclist : cmndspec", |
| "cmndspeclist : cmndspeclist ',' cmndspec", |
| "cmndspec : runasspec selinux cmndtag opcmnd", |
| "opcmnd : cmnd", |
| "opcmnd : '!' cmnd", |
| "rolespec : ROLE '=' WORD", |
| "typespec : TYPE '=' WORD", |
| "selinux :", |
| "selinux : rolespec", |
| "selinux : typespec", |
| "selinux : rolespec typespec", |
| "selinux : typespec rolespec", |
| "runasspec :", |
| "runasspec : '(' runaslist ')'", |
| "runaslist : userlist", |
| "runaslist : userlist ':' grouplist", |
| "runaslist : ':' grouplist", |
| "cmndtag :", |
| "cmndtag : cmndtag NOPASSWD", |
| "cmndtag : cmndtag PASSWD", |
| "cmndtag : cmndtag NOEXEC", |
| "cmndtag : cmndtag EXEC", |
| "cmndtag : cmndtag SETENV", |
| "cmndtag : cmndtag NOSETENV", |
| "cmndtag : cmndtag LOG_INPUT", |
| "cmndtag : cmndtag NOLOG_INPUT", |
| "cmndtag : cmndtag LOG_OUTPUT", |
| "cmndtag : cmndtag NOLOG_OUTPUT", |
| "cmnd : ALL", |
| "cmnd : ALIAS", |
| "cmnd : COMMAND", |
| "hostaliases : hostalias", |
| "hostaliases : hostaliases ':' hostalias", |
| "hostalias : ALIAS '=' hostlist", |
| "hostlist : ophost", |
| "hostlist : hostlist ',' ophost", |
| "cmndaliases : cmndalias", |
| "cmndaliases : cmndaliases ':' cmndalias", |
| "cmndalias : ALIAS '=' cmndlist", |
| "cmndlist : opcmnd", |
| "cmndlist : cmndlist ',' opcmnd", |
| "runasaliases : runasalias", |
| "runasaliases : runasaliases ':' runasalias", |
| "runasalias : ALIAS '=' userlist", |
| "useraliases : useralias", |
| "useraliases : useraliases ':' useralias", |
| "useralias : ALIAS '=' userlist", |
| "userlist : opuser", |
| "userlist : userlist ',' opuser", |
| "opuser : user", |
| "opuser : '!' user", |
| "user : ALIAS", |
| "user : ALL", |
| "user : NETGROUP", |
| "user : USERGROUP", |
| "user : WORD", |
| "grouplist : opgroup", |
| "grouplist : grouplist ',' opgroup", |
| "opgroup : group", |
| "opgroup : '!' group", |
| "group : ALIAS", |
| "group : ALL", |
| "group : WORD", |
| }; |
| #endif |
| #ifdef YYSTACKSIZE |
| #undef YYMAXDEPTH |
| #define YYMAXDEPTH YYSTACKSIZE |
| #else |
| #ifdef YYMAXDEPTH |
| #define YYSTACKSIZE YYMAXDEPTH |
| #else |
| #define YYSTACKSIZE 10000 |
| #define YYMAXDEPTH 10000 |
| #endif |
| #endif |
| #define YYINITSTACKSIZE 200 |
| /* LINTUSED */ |
| int yydebug; |
| int yynerrs; |
| int yyerrflag; |
| int yychar; |
| short *yyssp; |
| YYSTYPE *yyvsp; |
| YYSTYPE yyval; |
| YYSTYPE yylval; |
| short *yyss; |
| short *yysslim; |
| YYSTYPE *yyvs; |
| int yystacksize; |
| #line 606 "gram.y" |
| static struct defaults * |
| new_default(var, val, op) |
| char *var; |
| char *val; |
| int op; |
| { |
| struct defaults *d; |
| |
| d = emalloc(sizeof(struct defaults)); |
| d->var = var; |
| d->val = val; |
| tq_init(&d->binding); |
| d->type = 0; |
| d->op = op; |
| d->prev = d; |
| d->next = NULL; |
| |
| return(d); |
| } |
| |
| static struct member * |
| new_member(name, type) |
| char *name; |
| int type; |
| { |
| struct member *m; |
| |
| m = emalloc(sizeof(struct member)); |
| m->name = name; |
| m->type = type; |
| m->prev = m; |
| m->next = NULL; |
| |
| return(m); |
| } |
| |
| /* |
| * Add a list of defaults structures to the defaults list. |
| * The binding, if non-NULL, specifies a list of hosts, users, or |
| * runas users the entries apply to (specified by the type). |
| */ |
| static void |
| add_defaults(type, bmem, defs) |
| int type; |
| struct member *bmem; |
| struct defaults *defs; |
| { |
| struct defaults *d; |
| struct member_list binding; |
| |
| /* |
| * We can only call list2tq once on bmem as it will zero |
| * out the prev pointer when it consumes bmem. |
| */ |
| list2tq(&binding, bmem); |
| |
| /* |
| * Set type and binding (who it applies to) for new entries. |
| */ |
| for (d = defs; d != NULL; d = d->next) { |
| d->type = type; |
| d->binding = binding; |
| } |
| tq_append(&defaults, defs); |
| } |
| |
| /* |
| * Allocate a new struct userspec, populate it, and insert it at the |
| * and of the userspecs list. |
| */ |
| static void |
| add_userspec(members, privs) |
| struct member *members; |
| struct privilege *privs; |
| { |
| struct userspec *u; |
| |
| u = emalloc(sizeof(*u)); |
| list2tq(&u->users, members); |
| list2tq(&u->privileges, privs); |
| u->prev = u; |
| u->next = NULL; |
| tq_append(&userspecs, u); |
| } |
| |
| /* |
| * Free up space used by data structures from a previous parser run and sets |
| * the current sudoers file to path. |
| */ |
| void |
| init_parser(path, quiet) |
| char *path; |
| int quiet; |
| { |
| struct defaults *d; |
| struct member *m, *binding; |
| struct userspec *us; |
| struct privilege *priv; |
| struct cmndspec *cs; |
| struct sudo_command *c; |
| |
| while ((us = tq_pop(&userspecs)) != NULL) { |
| while ((m = tq_pop(&us->users)) != NULL) { |
| efree(m->name); |
| efree(m); |
| } |
| while ((priv = tq_pop(&us->privileges)) != NULL) { |
| struct member *runasuser = NULL, *runasgroup = NULL; |
| #ifdef HAVE_SELINUX |
| char *role = NULL, *type = NULL; |
| #endif /* HAVE_SELINUX */ |
| |
| while ((m = tq_pop(&priv->hostlist)) != NULL) { |
| efree(m->name); |
| efree(m); |
| } |
| while ((cs = tq_pop(&priv->cmndlist)) != NULL) { |
| #ifdef HAVE_SELINUX |
| /* Only free the first instance of a role/type. */ |
| if (cs->role != role) { |
| role = cs->role; |
| efree(cs->role); |
| } |
| if (cs->type != type) { |
| type = cs->type; |
| efree(cs->type); |
| } |
| #endif /* HAVE_SELINUX */ |
| if (tq_last(&cs->runasuserlist) != runasuser) { |
| runasuser = tq_last(&cs->runasuserlist); |
| while ((m = tq_pop(&cs->runasuserlist)) != NULL) { |
| efree(m->name); |
| efree(m); |
| } |
| } |
| if (tq_last(&cs->runasgrouplist) != runasgroup) { |
| runasgroup = tq_last(&cs->runasgrouplist); |
| while ((m = tq_pop(&cs->runasgrouplist)) != NULL) { |
| efree(m->name); |
| efree(m); |
| } |
| } |
| if (cs->cmnd->type == COMMAND) { |
| c = (struct sudo_command *) cs->cmnd->name; |
| efree(c->cmnd); |
| efree(c->args); |
| } |
| efree(cs->cmnd->name); |
| efree(cs->cmnd); |
| efree(cs); |
| } |
| efree(priv); |
| } |
| efree(us); |
| } |
| tq_init(&userspecs); |
| |
| binding = NULL; |
| while ((d = tq_pop(&defaults)) != NULL) { |
| if (tq_last(&d->binding) != binding) { |
| binding = tq_last(&d->binding); |
| while ((m = tq_pop(&d->binding)) != NULL) { |
| if (m->type == COMMAND) { |
| c = (struct sudo_command *) m->name; |
| efree(c->cmnd); |
| efree(c->args); |
| } |
| efree(m->name); |
| efree(m); |
| } |
| } |
| efree(d->var); |
| efree(d->val); |
| efree(d); |
| } |
| tq_init(&defaults); |
| |
| init_aliases(); |
| |
| init_lexer(); |
| |
| efree(sudoers); |
| sudoers = path ? estrdup(path) : NULL; |
| |
| parse_error = FALSE; |
| errorlineno = -1; |
| errorfile = NULL; |
| sudolineno = 1; |
| verbose = !quiet; |
| } |
| #line 775 "y.tab.c" |
| /* allocate initial stack or double stack size, up to YYMAXDEPTH */ |
| #if defined(__cplusplus) || defined(__STDC__) |
| static int yygrowstack(void) |
| #else |
| static int yygrowstack() |
| #endif |
| { |
| int newsize, i; |
| short *newss; |
| YYSTYPE *newvs; |
| |
| if ((newsize = yystacksize) == 0) |
| newsize = YYINITSTACKSIZE; |
| else if (newsize >= YYMAXDEPTH) |
| return -1; |
| else if ((newsize *= 2) > YYMAXDEPTH) |
| newsize = YYMAXDEPTH; |
| i = yyssp - yyss; |
| #ifdef SIZE_MAX |
| #define YY_SIZE_MAX SIZE_MAX |
| #else |
| #define YY_SIZE_MAX 0x7fffffff |
| #endif |
| if (newsize && YY_SIZE_MAX / newsize < sizeof *newss) |
| goto bail; |
| newss = yyss ? (short *)realloc(yyss, newsize * sizeof *newss) : |
| (short *)malloc(newsize * sizeof *newss); /* overflow check above */ |
| if (newss == NULL) |
| goto bail; |
| yyss = newss; |
| yyssp = newss + i; |
| if (newsize && YY_SIZE_MAX / newsize < sizeof *newvs) |
| goto bail; |
| newvs = yyvs ? (YYSTYPE *)realloc(yyvs, newsize * sizeof *newvs) : |
| (YYSTYPE *)malloc(newsize * sizeof *newvs); /* overflow check above */ |
| if (newvs == NULL) |
| goto bail; |
| yyvs = newvs; |
| yyvsp = newvs + i; |
| yystacksize = newsize; |
| yysslim = yyss + newsize - 1; |
| return 0; |
| bail: |
| if (yyss) |
| free(yyss); |
| if (yyvs) |
| free(yyvs); |
| yyss = yyssp = NULL; |
| yyvs = yyvsp = NULL; |
| yystacksize = 0; |
| return -1; |
| } |
| |
| #define YYABORT goto yyabort |
| #define YYREJECT goto yyabort |
| #define YYACCEPT goto yyaccept |
| #define YYERROR goto yyerrlab |
| int |
| #if defined(__cplusplus) || defined(__STDC__) |
| yyparse(void) |
| #else |
| yyparse() |
| #endif |
| { |
| int yym, yyn, yystate; |
| #if YYDEBUG |
| #if defined(__cplusplus) || defined(__STDC__) |
| const char *yys; |
| #else /* !(defined(__cplusplus) || defined(__STDC__)) */ |
| char *yys; |
| #endif /* !(defined(__cplusplus) || defined(__STDC__)) */ |
| |
| if ((yys = getenv("YYDEBUG"))) |
| { |
| yyn = *yys; |
| if (yyn >= '0' && yyn <= '9') |
| yydebug = yyn - '0'; |
| } |
| #endif /* YYDEBUG */ |
| |
| yynerrs = 0; |
| yyerrflag = 0; |
| yychar = (-1); |
| |
| if (yyss == NULL && yygrowstack()) goto yyoverflow; |
| yyssp = yyss; |
| yyvsp = yyvs; |
| *yyssp = yystate = 0; |
| |
| yyloop: |
| if ((yyn = yydefred[yystate]) != 0) goto yyreduce; |
| if (yychar < 0) |
| { |
| if ((yychar = yylex()) < 0) yychar = 0; |
| #if YYDEBUG |
| if (yydebug) |
| { |
| yys = 0; |
| if (yychar <= YYMAXTOKEN) yys = yyname[yychar]; |
| if (!yys) yys = "illegal-symbol"; |
| printf("%sdebug: state %d, reading %d (%s)\n", |
| YYPREFIX, yystate, yychar, yys); |
| } |
| #endif |
| } |
| if ((yyn = yysindex[yystate]) && (yyn += yychar) >= 0 && |
| yyn <= YYTABLESIZE && yycheck[yyn] == yychar) |
| { |
| #if YYDEBUG |
| if (yydebug) |
| printf("%sdebug: state %d, shifting to state %d\n", |
| YYPREFIX, yystate, yytable[yyn]); |
| #endif |
| if (yyssp >= yysslim && yygrowstack()) |
| { |
| goto yyoverflow; |
| } |
| *++yyssp = yystate = yytable[yyn]; |
| *++yyvsp = yylval; |
| yychar = (-1); |
| if (yyerrflag > 0) --yyerrflag; |
| goto yyloop; |
| } |
| if ((yyn = yyrindex[yystate]) && (yyn += yychar) >= 0 && |
| yyn <= YYTABLESIZE && yycheck[yyn] == yychar) |
| { |
| yyn = yytable[yyn]; |
| goto yyreduce; |
| } |
| if (yyerrflag) goto yyinrecovery; |
| #if defined(lint) || defined(__GNUC__) |
| goto yynewerror; |
| #endif |
| yynewerror: |
| yyerror("syntax error"); |
| #if defined(lint) || defined(__GNUC__) |
| goto yyerrlab; |
| #endif |
| yyerrlab: |
| ++yynerrs; |
| yyinrecovery: |
| if (yyerrflag < 3) |
| { |
| yyerrflag = 3; |
| for (;;) |
| { |
| if ((yyn = yysindex[*yyssp]) && (yyn += YYERRCODE) >= 0 && |
| yyn <= YYTABLESIZE && yycheck[yyn] == YYERRCODE) |
| { |
| #if YYDEBUG |
| if (yydebug) |
| printf("%sdebug: state %d, error recovery shifting\ |
| to state %d\n", YYPREFIX, *yyssp, yytable[yyn]); |
| #endif |
| if (yyssp >= yysslim && yygrowstack()) |
| { |
| goto yyoverflow; |
| } |
| *++yyssp = yystate = yytable[yyn]; |
| *++yyvsp = yylval; |
| goto yyloop; |
| } |
| else |
| { |
| #if YYDEBUG |
| if (yydebug) |
| printf("%sdebug: error recovery discarding state %d\n", |
| YYPREFIX, *yyssp); |
| #endif |
| if (yyssp <= yyss) goto yyabort; |
| --yyssp; |
| --yyvsp; |
| } |
| } |
| } |
| else |
| { |
| if (yychar == 0) goto yyabort; |
| #if YYDEBUG |
| if (yydebug) |
| { |
| yys = 0; |
| if (yychar <= YYMAXTOKEN) yys = yyname[yychar]; |
| if (!yys) yys = "illegal-symbol"; |
| printf("%sdebug: state %d, error recovery discards token %d (%s)\n", |
| YYPREFIX, yystate, yychar, yys); |
| } |
| #endif |
| yychar = (-1); |
| goto yyloop; |
| } |
| yyreduce: |
| #if YYDEBUG |
| if (yydebug) |
| printf("%sdebug: state %d, reducing by rule %d (%s)\n", |
| YYPREFIX, yystate, yyn, yyrule[yyn]); |
| #endif |
| yym = yylen[yyn]; |
| if (yym) |
| yyval = yyvsp[1-yym]; |
| else |
| memset(&yyval, 0, sizeof yyval); |
| switch (yyn) |
| { |
| case 1: |
| #line 187 "gram.y" |
| { ; } |
| break; |
| case 5: |
| #line 195 "gram.y" |
| { |
| ; |
| } |
| break; |
| case 6: |
| #line 198 "gram.y" |
| { |
| yyerrok; |
| } |
| break; |
| case 7: |
| #line 201 "gram.y" |
| { |
| add_userspec(yyvsp[-1].member, yyvsp[0].privilege); |
| } |
| break; |
| case 8: |
| #line 204 "gram.y" |
| { |
| ; |
| } |
| break; |
| case 9: |
| #line 207 "gram.y" |
| { |
| ; |
| } |
| break; |
| case 10: |
| #line 210 "gram.y" |
| { |
| ; |
| } |
| break; |
| case 11: |
| #line 213 "gram.y" |
| { |
| ; |
| } |
| break; |
| case 12: |
| #line 216 "gram.y" |
| { |
| add_defaults(DEFAULTS, NULL, yyvsp[0].defaults); |
| } |
| break; |
| case 13: |
| #line 219 "gram.y" |
| { |
| add_defaults(DEFAULTS_USER, yyvsp[-1].member, yyvsp[0].defaults); |
| } |
| break; |
| case 14: |
| #line 222 "gram.y" |
| { |
| add_defaults(DEFAULTS_RUNAS, yyvsp[-1].member, yyvsp[0].defaults); |
| } |
| break; |
| case 15: |
| #line 225 "gram.y" |
| { |
| add_defaults(DEFAULTS_HOST, yyvsp[-1].member, yyvsp[0].defaults); |
| } |
| break; |
| case 16: |
| #line 228 "gram.y" |
| { |
| add_defaults(DEFAULTS_CMND, yyvsp[-1].member, yyvsp[0].defaults); |
| } |
| break; |
| case 18: |
| #line 234 "gram.y" |
| { |
| list_append(yyvsp[-2].defaults, yyvsp[0].defaults); |
| yyval.defaults = yyvsp[-2].defaults; |
| } |
| break; |
| case 19: |
| #line 240 "gram.y" |
| { |
| yyval.defaults = new_default(yyvsp[0].string, NULL, TRUE); |
| } |
| break; |
| case 20: |
| #line 243 "gram.y" |
| { |
| yyval.defaults = new_default(yyvsp[0].string, NULL, FALSE); |
| } |
| break; |
| case 21: |
| #line 246 "gram.y" |
| { |
| yyval.defaults = new_default(yyvsp[-2].string, yyvsp[0].string, TRUE); |
| } |
| break; |
| case 22: |
| #line 249 "gram.y" |
| { |
| yyval.defaults = new_default(yyvsp[-2].string, yyvsp[0].string, '+'); |
| } |
| break; |
| case 23: |
| #line 252 "gram.y" |
| { |
| yyval.defaults = new_default(yyvsp[-2].string, yyvsp[0].string, '-'); |
| } |
| break; |
| case 25: |
| #line 258 "gram.y" |
| { |
| list_append(yyvsp[-2].privilege, yyvsp[0].privilege); |
| yyval.privilege = yyvsp[-2].privilege; |
| } |
| break; |
| case 26: |
| #line 264 "gram.y" |
| { |
| struct privilege *p = emalloc(sizeof(*p)); |
| list2tq(&p->hostlist, yyvsp[-2].member); |
| list2tq(&p->cmndlist, yyvsp[0].cmndspec); |
| p->prev = p; |
| p->next = NULL; |
| yyval.privilege = p; |
| } |
| break; |
| case 27: |
| #line 274 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = FALSE; |
| } |
| break; |
| case 28: |
| #line 278 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = TRUE; |
| } |
| break; |
| case 29: |
| #line 284 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, ALIAS); |
| } |
| break; |
| case 30: |
| #line 287 "gram.y" |
| { |
| yyval.member = new_member(NULL, ALL); |
| } |
| break; |
| case 31: |
| #line 290 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, NETGROUP); |
| } |
| break; |
| case 32: |
| #line 293 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, NTWKADDR); |
| } |
| break; |
| case 33: |
| #line 296 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, WORD); |
| } |
| break; |
| case 35: |
| #line 302 "gram.y" |
| { |
| list_append(yyvsp[-2].cmndspec, yyvsp[0].cmndspec); |
| #ifdef HAVE_SELINUX |
| /* propagate role and type */ |
| if (yyvsp[0].cmndspec->role == NULL) |
| yyvsp[0].cmndspec->role = yyvsp[0].cmndspec->prev->role; |
| if (yyvsp[0].cmndspec->type == NULL) |
| yyvsp[0].cmndspec->type = yyvsp[0].cmndspec->prev->type; |
| #endif /* HAVE_SELINUX */ |
| /* propagate tags and runas list */ |
| if (yyvsp[0].cmndspec->tags.nopasswd == UNSPEC) |
| yyvsp[0].cmndspec->tags.nopasswd = yyvsp[0].cmndspec->prev->tags.nopasswd; |
| if (yyvsp[0].cmndspec->tags.noexec == UNSPEC) |
| yyvsp[0].cmndspec->tags.noexec = yyvsp[0].cmndspec->prev->tags.noexec; |
| if (yyvsp[0].cmndspec->tags.setenv == UNSPEC && |
| yyvsp[0].cmndspec->prev->tags.setenv != IMPLIED) |
| yyvsp[0].cmndspec->tags.setenv = yyvsp[0].cmndspec->prev->tags.setenv; |
| if (yyvsp[0].cmndspec->tags.log_input == UNSPEC) |
| yyvsp[0].cmndspec->tags.log_input = yyvsp[0].cmndspec->prev->tags.log_input; |
| if (yyvsp[0].cmndspec->tags.log_output == UNSPEC) |
| yyvsp[0].cmndspec->tags.log_output = yyvsp[0].cmndspec->prev->tags.log_output; |
| if ((tq_empty(&yyvsp[0].cmndspec->runasuserlist) && |
| tq_empty(&yyvsp[0].cmndspec->runasgrouplist)) && |
| (!tq_empty(&yyvsp[0].cmndspec->prev->runasuserlist) || |
| !tq_empty(&yyvsp[0].cmndspec->prev->runasgrouplist))) { |
| yyvsp[0].cmndspec->runasuserlist = yyvsp[0].cmndspec->prev->runasuserlist; |
| yyvsp[0].cmndspec->runasgrouplist = yyvsp[0].cmndspec->prev->runasgrouplist; |
| } |
| yyval.cmndspec = yyvsp[-2].cmndspec; |
| } |
| break; |
| case 36: |
| #line 334 "gram.y" |
| { |
| struct cmndspec *cs = emalloc(sizeof(*cs)); |
| if (yyvsp[-3].runas != NULL) { |
| list2tq(&cs->runasuserlist, yyvsp[-3].runas->runasusers); |
| list2tq(&cs->runasgrouplist, yyvsp[-3].runas->runasgroups); |
| efree(yyvsp[-3].runas); |
| } else { |
| tq_init(&cs->runasuserlist); |
| tq_init(&cs->runasgrouplist); |
| } |
| #ifdef HAVE_SELINUX |
| cs->role = yyvsp[-2].seinfo.role; |
| cs->type = yyvsp[-2].seinfo.type; |
| #endif |
| cs->tags = yyvsp[-1].tag; |
| cs->cmnd = yyvsp[0].member; |
| cs->prev = cs; |
| cs->next = NULL; |
| /* sudo "ALL" implies the SETENV tag */ |
| if (cs->cmnd->type == ALL && !cs->cmnd->negated && |
| cs->tags.setenv == UNSPEC) |
| cs->tags.setenv = IMPLIED; |
| yyval.cmndspec = cs; |
| } |
| break; |
| case 37: |
| #line 360 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = FALSE; |
| } |
| break; |
| case 38: |
| #line 364 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = TRUE; |
| } |
| break; |
| case 39: |
| #line 370 "gram.y" |
| { |
| yyval.string = yyvsp[0].string; |
| } |
| break; |
| case 40: |
| #line 375 "gram.y" |
| { |
| yyval.string = yyvsp[0].string; |
| } |
| break; |
| case 41: |
| #line 380 "gram.y" |
| { |
| yyval.seinfo.role = NULL; |
| yyval.seinfo.type = NULL; |
| } |
| break; |
| case 42: |
| #line 384 "gram.y" |
| { |
| yyval.seinfo.role = yyvsp[0].string; |
| yyval.seinfo.type = NULL; |
| } |
| break; |
| case 43: |
| #line 388 "gram.y" |
| { |
| yyval.seinfo.type = yyvsp[0].string; |
| yyval.seinfo.role = NULL; |
| } |
| break; |
| case 44: |
| #line 392 "gram.y" |
| { |
| yyval.seinfo.role = yyvsp[-1].string; |
| yyval.seinfo.type = yyvsp[0].string; |
| } |
| break; |
| case 45: |
| #line 396 "gram.y" |
| { |
| yyval.seinfo.type = yyvsp[-1].string; |
| yyval.seinfo.role = yyvsp[0].string; |
| } |
| break; |
| case 46: |
| #line 402 "gram.y" |
| { |
| yyval.runas = NULL; |
| } |
| break; |
| case 47: |
| #line 405 "gram.y" |
| { |
| yyval.runas = yyvsp[-1].runas; |
| } |
| break; |
| case 48: |
| #line 410 "gram.y" |
| { |
| yyval.runas = emalloc(sizeof(struct runascontainer)); |
| yyval.runas->runasusers = yyvsp[0].member; |
| yyval.runas->runasgroups = NULL; |
| } |
| break; |
| case 49: |
| #line 415 "gram.y" |
| { |
| yyval.runas = emalloc(sizeof(struct runascontainer)); |
| yyval.runas->runasusers = yyvsp[-2].member; |
| yyval.runas->runasgroups = yyvsp[0].member; |
| } |
| break; |
| case 50: |
| #line 420 "gram.y" |
| { |
| yyval.runas = emalloc(sizeof(struct runascontainer)); |
| yyval.runas->runasusers = NULL; |
| yyval.runas->runasgroups = yyvsp[0].member; |
| } |
| break; |
| case 51: |
| #line 427 "gram.y" |
| { |
| yyval.tag.nopasswd = yyval.tag.noexec = yyval.tag.setenv = |
| yyval.tag.log_input = yyval.tag.log_output = UNSPEC; |
| } |
| break; |
| case 52: |
| #line 431 "gram.y" |
| { |
| yyval.tag.nopasswd = TRUE; |
| } |
| break; |
| case 53: |
| #line 434 "gram.y" |
| { |
| yyval.tag.nopasswd = FALSE; |
| } |
| break; |
| case 54: |
| #line 437 "gram.y" |
| { |
| yyval.tag.noexec = TRUE; |
| } |
| break; |
| case 55: |
| #line 440 "gram.y" |
| { |
| yyval.tag.noexec = FALSE; |
| } |
| break; |
| case 56: |
| #line 443 "gram.y" |
| { |
| yyval.tag.setenv = TRUE; |
| } |
| break; |
| case 57: |
| #line 446 "gram.y" |
| { |
| yyval.tag.setenv = FALSE; |
| } |
| break; |
| case 58: |
| #line 449 "gram.y" |
| { |
| yyval.tag.log_input = TRUE; |
| } |
| break; |
| case 59: |
| #line 452 "gram.y" |
| { |
| yyval.tag.log_input = FALSE; |
| } |
| break; |
| case 60: |
| #line 455 "gram.y" |
| { |
| yyval.tag.log_output = TRUE; |
| } |
| break; |
| case 61: |
| #line 458 "gram.y" |
| { |
| yyval.tag.log_output = FALSE; |
| } |
| break; |
| case 62: |
| #line 463 "gram.y" |
| { |
| yyval.member = new_member(NULL, ALL); |
| } |
| break; |
| case 63: |
| #line 466 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, ALIAS); |
| } |
| break; |
| case 64: |
| #line 469 "gram.y" |
| { |
| struct sudo_command *c = emalloc(sizeof(*c)); |
| c->cmnd = yyvsp[0].command.cmnd; |
| c->args = yyvsp[0].command.args; |
| yyval.member = new_member((char *)c, COMMAND); |
| } |
| break; |
| case 67: |
| #line 481 "gram.y" |
| { |
| char *s; |
| if ((s = alias_add(yyvsp[-2].string, HOSTALIAS, yyvsp[0].member)) != NULL) { |
| yyerror(s); |
| YYERROR; |
| } |
| } |
| break; |
| case 69: |
| #line 491 "gram.y" |
| { |
| list_append(yyvsp[-2].member, yyvsp[0].member); |
| yyval.member = yyvsp[-2].member; |
| } |
| break; |
| case 72: |
| #line 501 "gram.y" |
| { |
| char *s; |
| if ((s = alias_add(yyvsp[-2].string, CMNDALIAS, yyvsp[0].member)) != NULL) { |
| yyerror(s); |
| YYERROR; |
| } |
| } |
| break; |
| case 74: |
| #line 511 "gram.y" |
| { |
| list_append(yyvsp[-2].member, yyvsp[0].member); |
| yyval.member = yyvsp[-2].member; |
| } |
| break; |
| case 77: |
| #line 521 "gram.y" |
| { |
| char *s; |
| if ((s = alias_add(yyvsp[-2].string, RUNASALIAS, yyvsp[0].member)) != NULL) { |
| yyerror(s); |
| YYERROR; |
| } |
| } |
| break; |
| case 80: |
| #line 534 "gram.y" |
| { |
| char *s; |
| if ((s = alias_add(yyvsp[-2].string, USERALIAS, yyvsp[0].member)) != NULL) { |
| yyerror(s); |
| YYERROR; |
| } |
| } |
| break; |
| case 82: |
| #line 544 "gram.y" |
| { |
| list_append(yyvsp[-2].member, yyvsp[0].member); |
| yyval.member = yyvsp[-2].member; |
| } |
| break; |
| case 83: |
| #line 550 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = FALSE; |
| } |
| break; |
| case 84: |
| #line 554 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = TRUE; |
| } |
| break; |
| case 85: |
| #line 560 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, ALIAS); |
| } |
| break; |
| case 86: |
| #line 563 "gram.y" |
| { |
| yyval.member = new_member(NULL, ALL); |
| } |
| break; |
| case 87: |
| #line 566 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, NETGROUP); |
| } |
| break; |
| case 88: |
| #line 569 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, USERGROUP); |
| } |
| break; |
| case 89: |
| #line 572 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, WORD); |
| } |
| break; |
| case 91: |
| #line 578 "gram.y" |
| { |
| list_append(yyvsp[-2].member, yyvsp[0].member); |
| yyval.member = yyvsp[-2].member; |
| } |
| break; |
| case 92: |
| #line 584 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = FALSE; |
| } |
| break; |
| case 93: |
| #line 588 "gram.y" |
| { |
| yyval.member = yyvsp[0].member; |
| yyval.member->negated = TRUE; |
| } |
| break; |
| case 94: |
| #line 594 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, ALIAS); |
| } |
| break; |
| case 95: |
| #line 597 "gram.y" |
| { |
| yyval.member = new_member(NULL, ALL); |
| } |
| break; |
| case 96: |
| #line 600 "gram.y" |
| { |
| yyval.member = new_member(yyvsp[0].string, WORD); |
| } |
| break; |
| #line 1544 "y.tab.c" |
| } |
| yyssp -= yym; |
| yystate = *yyssp; |
| yyvsp -= yym; |
| yym = yylhs[yyn]; |
| if (yystate == 0 && yym == 0) |
| { |
| #if YYDEBUG |
| if (yydebug) |
| printf("%sdebug: after reduction, shifting from state 0 to\ |
| state %d\n", YYPREFIX, YYFINAL); |
| #endif |
| yystate = YYFINAL; |
| *++yyssp = YYFINAL; |
| *++yyvsp = yyval; |
| if (yychar < 0) |
| { |
| if ((yychar = yylex()) < 0) yychar = 0; |
| #if YYDEBUG |
| if (yydebug) |
| { |
| yys = 0; |
| if (yychar <= YYMAXTOKEN) yys = yyname[yychar]; |
| if (!yys) yys = "illegal-symbol"; |
| printf("%sdebug: state %d, reading %d (%s)\n", |
| YYPREFIX, YYFINAL, yychar, yys); |
| } |
| #endif |
| } |
| if (yychar == 0) goto yyaccept; |
| goto yyloop; |
| } |
| if ((yyn = yygindex[yym]) && (yyn += yystate) >= 0 && |
| yyn <= YYTABLESIZE && yycheck[yyn] == yystate) |
| yystate = yytable[yyn]; |
| else |
| yystate = yydgoto[yym]; |
| #if YYDEBUG |
| if (yydebug) |
| printf("%sdebug: after reduction, shifting from state %d \ |
| to state %d\n", YYPREFIX, *yyssp, yystate); |
| #endif |
| if (yyssp >= yysslim && yygrowstack()) |
| { |
| goto yyoverflow; |
| } |
| *++yyssp = yystate; |
| *++yyvsp = yyval; |
| goto yyloop; |
| yyoverflow: |
| yyerror("yacc stack overflow"); |
| yyabort: |
| if (yyss) |
| free(yyss); |
| if (yyvs) |
| free(yyvs); |
| yyss = yyssp = NULL; |
| yyvs = yyvsp = NULL; |
| yystacksize = 0; |
| return (1); |
| yyaccept: |
| if (yyss) |
| free(yyss); |
| if (yyvs) |
| free(yyvs); |
| yyss = yyssp = NULL; |
| yyvs = yyvsp = NULL; |
| yystacksize = 0; |
| return (0); |
| } |
