webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-20 07:53:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

misc-progs: sambactrl: Sanitise username

Browse Source 
Fixes: #12562
Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2021-01-06 11:56:08 +00:00
parent 8e4b2125cc
commit 64883513d5
1 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
src/misc-progs/sambactrl.c
View File

@@ -20,14 +20,29 @@ int main(int argc, char *argv[]) {
return 1;
} else if (strcmp(argv[1], "smbuserdisable") == 0) {
if (!is_valid_argument_alnum(argv[2])) {
fprintf(stderr, "Invalid username '%s'\n", argv[2]);
exit(2);
}
snprintf(command, BUFFER_SIZE-1, "/usr/bin/smbpasswd -d %s >/dev/null", argv[2]);
safe_system(command);
} else if (strcmp(argv[1], "smbuserenable") == 0) {
if (!is_valid_argument_alnum(argv[2])) {
fprintf(stderr, "Invalid username '%s'\n", argv[2]);
exit(2);
}
snprintf(command, BUFFER_SIZE-1, "/usr/bin/smbpasswd -e %s >/dev/null", argv[2]);
safe_system(command);
} else if (strcmp(argv[1], "smbuserdelete") == 0) {
if (!is_valid_argument_alnum(argv[2])) {
fprintf(stderr, "Invalid username '%s'\n", argv[2]);
exit(2);
}
snprintf(command, BUFFER_SIZE-1, "/usr/bin/smbpasswd -x %s >/dev/null", argv[2]);
safe_system(command);
@@ -56,6 +71,11 @@ int main(int argc, char *argv[]) {
safe_system(command);
} else if (strcmp(argv[1], "smbuseradd") == 0) {
if (!is_valid_argument_alnum(argv[2])) {
fprintf(stderr, "Invalid username '%s'\n", argv[2]);
exit(2);
}
snprintf(command, BUFFER_SIZE-1, "/usr/sbin/groupadd sambauser >/dev/null");
safe_system(command);
@@ -69,6 +89,11 @@ int main(int argc, char *argv[]) {
safe_system(command);
} else if (strcmp(argv[1], "smbchangepw") == 0) {
if (!is_valid_argument_alnum(argv[2])) {
fprintf(stderr, "Invalid username '%s'\n", argv[2]);
exit(2);
}
snprintf(command, BUFFER_SIZE-1, "echo %s:%s | chpasswd", argv[2], argv[3]);
safe_system(command);