openpam_get_feature(3) - NetBSD Manual Pages

Command:
Section:
Arch:
Collection:
>>>
OPENPAM_GET_FEATURE(3)  NetBSD Library Functions Manual OPENPAM_GET_FEATURE(3)


NAME

     openpam_get_feature -- query the state of an optional feature


SYNOPSIS

     #include <sys/types.h>
     #include <security/pam_appl.h>
     #include <security/openpam.h>

     int
     openpam_get_feature(int feature, int *onoff);


DESCRIPTION

     This function is experimental and may be modified or removed in a future
     release without prior warning.

     The openpam_get_feature() function stores the current state of the speci-
     fied feature in the variable pointed to by its onoff argument.

     The following features are recognized:

     OPENPAM_RESTRICT_SERVICE_NAME
                         Disallow path separators in service names.  This fea-
                         ture is enabled by default.  Disabling it allows the
                         application to specify the path to the desired policy
                         file directly.

     OPENPAM_VERIFY_POLICY_FILE
                         Verify the ownership and permissions of the policy
                         file and the path leading up to it.  This feature is
                         enabled by default.

     OPENPAM_RESTRICT_MODULE_NAME
                         Disallow path separators in module names.  This fea-
                         ture is disabled by default.  Enabling it prevents
                         the use of modules in non-standard locations.

     OPENPAM_VERIFY_MODULE_FILE
                         Verify the ownership and permissions of each loadable
                         module and the path leading up to it.  This feature
                         is enabled by default.


RETURN VALUES

     The openpam_get_feature() function returns one of the following values:

     [PAM_SUCCESS]       Success.

     [PAM_BAD_FEATURE]   Unrecognized or restricted feature.


SEE ALSO

     openpam_set_feature(3), pam(3), pam_strerror(3)


STANDARDS

     The openpam_get_feature() function is an OpenPAM extension.


AUTHORS

     The openpam_get_feature() function and this manual page were developed by
     Dag-Erling Smørgrav <des@des.no>.

NetBSD 10.1                    February 24, 2019                   NetBSD 10.1