2 * Copyright (c) 2001 Chris D. Faulhaber
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 #include <sys/cdefs.h>
28 __FBSDID("$FreeBSD$");
30 #include <sys/types.h>
41 * remove ACL entries from an ACL
44 remove_acl(acl_t acl, acl_t *prev_acl, const char *filename)
49 int carried_error, entry_id, acl_brand, prev_acl_brand;
53 acl_get_brand_np(acl, &acl_brand);
54 acl_get_brand_np(*prev_acl, &prev_acl_brand);
56 if (branding_mismatch(acl_brand, prev_acl_brand)) {
57 warnx("%s: branding mismatch; existing ACL is %s, "
58 "entry to be removed is %s", filename,
59 brand_name(prev_acl_brand), brand_name(acl_brand));
65 acl_new = acl_dup(*prev_acl);
67 err(1, "%s: acl_dup() failed", filename);
69 tag = ACL_UNDEFINED_TAG;
71 /* find and delete the entry */
72 entry_id = ACL_FIRST_ENTRY;
73 while (acl_get_entry(acl, entry_id, &entry) == 1) {
74 entry_id = ACL_NEXT_ENTRY;
75 if (acl_get_tag_type(entry, &tag) == -1)
76 err(1, "%s: acl_get_tag_type() failed", filename);
79 if (acl_delete_entry(acl_new, entry) == -1) {
81 warnx("%s: cannot remove non-existent ACL entry",
96 remove_by_number(uint entry_number, acl_t *prev_acl, const char *filename)
101 int carried_error, entry_id;
106 acl_new = acl_dup(*prev_acl);
108 err(1, "%s: acl_dup() failed", filename);
110 tag = ACL_UNDEFINED_TAG;
113 * Find out whether we're removing the mask entry,
114 * to behave the same as the routine above.
116 * XXX: Is this loop actually needed?
118 entry_id = ACL_FIRST_ENTRY;
120 while (acl_get_entry(acl_new, entry_id, &entry) == 1) {
121 entry_id = ACL_NEXT_ENTRY;
122 if (i != entry_number)
124 if (acl_get_tag_type(entry, &tag) == -1)
125 err(1, "%s: acl_get_tag_type() failed", filename);
130 if (acl_delete_entry_np(acl_new, entry_number) == -1) {
132 warn("%s: acl_delete_entry_np() failed", filename);
145 * remove default entries
148 remove_default(acl_t *prev_acl, const char *filename)
152 *prev_acl = acl_init(ACL_MAX_ENTRIES);
153 if (*prev_acl == NULL)
154 err(1, "%s: acl_init() failed", filename);
160 * remove extended entries
163 remove_ext(acl_t *prev_acl, const char *filename)
167 acl_new = acl_strip_np(*prev_acl, !n_flag);
169 err(1, "%s: acl_strip_np() failed", filename);