openpam_get_feature(3) - NetBSD Manual Pages

Command: Section: Arch: Collection:  
OPENPAM_GET_FEATURE(3)  NetBSD Library Functions Manual OPENPAM_GET_FEATURE(3)


NAME
openpam_get_feature -- query the state of an optional feature
SYNOPSIS
#include <sys/types.h> #include <security/pam_appl.h> #include <security/openpam.h> int openpam_get_feature(int feature, int *onoff);
DESCRIPTION
This function is experimental and may be modified or removed in a future release without prior warning. The openpam_get_feature() function stores the current state of the speci- fied feature in the variable pointed to by its onoff argument. The following features are recognized: OPENPAM_RESTRICT_SERVICE_NAME Disallow path separators in service names. This fea- ture is enabled by default. Disabling it allows the application to specify the path to the desired policy file directly. OPENPAM_VERIFY_POLICY_FILE Verify the ownership and permissions of the policy file and the path leading up to it. This feature is enabled by default. OPENPAM_RESTRICT_MODULE_NAME Disallow path separators in module names. This fea- ture is disabled by default. Enabling it prevents the use of modules in non-standard locations. OPENPAM_VERIFY_MODULE_FILE Verify the ownership and permissions of each loadable module and the path leading up to it. This feature is enabled by default.
RETURN VALUES
The openpam_get_feature() function returns one of the following values: [PAM_SUCCESS] Success. [PAM_BAD_FEATURE] Unrecognized or restricted feature.
SEE ALSO
openpam_set_feature(3), pam(3), pam_strerror(3)
STANDARDS
The openpam_get_feature() function is an OpenPAM extension.
AUTHORS
The openpam_get_feature() function and this manual page were developed by Dag-Erling Smørgrav <des@des.no>. NetBSD 10.99 June 27, 2023 NetBSD 10.99
Powered by man-cgi (2024-03-20). Maintained for NetBSD by Kimmo Suominen. Based on man-cgi by Panagiotis Christias.