This file is indexed.

/usr/include/dacs/group.h is in libdacs-dev 1.4.28b-3ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
/*
 * Copyright (c) 2003-2012
 * Distributed Systems Software.  All rights reserved.
 * See the file LICENSE for redistribution information.
 *
 * $Id: group.h 2594 2012-10-19 17:28:49Z brachman $
 */

/*****************************************************************************
 * COPYRIGHT AND PERMISSION NOTICE
 * 
 * Copyright (c) 2001-2003 The Queen in Right of Canada
 * 
 * All rights reserved.
 * 
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to
 * deal in the Software without restriction, including without limitation 
 * the rights to use, copy, modify, merge, publish, distribute, and/or sell
 * copies of the Software, and to permit persons to whom the Software is 
 * furnished to do so, provided that the above copyright notice(s) and this
 * permission notice appear in all copies of the Software and that both the
 * above copyright notice(s) and this permission notice appear in supporting
 * documentation.
 * 
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
 * IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE 
 * BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
 * OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
 * WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, 
 * ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS 
 * SOFTWARE.
 * 
 * Except as contained in this notice, the name of a copyright holder shall not
 * be used in advertising or otherwise to promote the sale, use or other
 * dealings in this Software without prior written authorization of the
 * copyright holder.
 ***************************************************************************/

#ifndef _GROUPS_H_
#define _GROUPS_H_

#include "auth.h"
#include "local.h"

/*************************************************************************/

/* Corresponds to a "group_member" element. */
typedef enum {
	GROUP_MEMBER_TYPE_ROLE     = 0,
	GROUP_MEMBER_TYPE_NFIS     = 1,
	GROUP_MEMBER_TYPE_USERNAME = 2,
	GROUP_MEMBER_TYPE_META     = 3
} Group_member_type;

static char MAYBE_UNUSED *Group_member_type_symbols[] = {
  "role", "dacs", "username", "meta", NULL
};

typedef struct Group_member {
  char *jurisdiction;
  char *name;
  char *type;
  char *alt_name;
  char *dacs_url;
  char *authenticates;
  char *prompts;
  char *auxiliary;
  char *public_key_str;
  EVP_PKEY *public_key;
  char *public_key_pem;
  struct Group_member *next;
} Group_member;

/* Corresponds to a "group_definition" element. */
typedef enum {
  GROUP_DEFINITION_TYPE_PRIVATE = 0,
  GROUP_DEFINITION_TYPE_PUBLIC  = 1
} Group_definition_type;

static char MAYBE_UNUSED *Group_definition_type_symbols[] = {
  "private", "public", NULL
};

typedef struct Group_definition {
  char *jurisdiction;
  char *name;
  char *mod_date;
  char *type;
  Group_member *group_member_head;
  struct Group_definition *next;
} Group_definition;

/* Corresponds to a "groups" element. */
typedef struct Groups {
  struct Group_definition *group_definition_head;
} Groups;

typedef enum Parse_xml_groups_state_code {
	GROUPS_PARSE_GROUPS           = 1,
	GROUPS_PARSE_GROUP_DEFINITION = 2,
	GROUPS_PARSE_GROUP_MEMBER     = 3,
	GROUPS_PARSE_GROUP_NAME       = 4
} Parse_xml_groups_state_code;

typedef struct Parse_xml_groups_state {
  Parse_xml_groups_state_code code;
  union {
	Groups *groups;
	Group_definition *group_definition;
	Group_member *group_member;
	Group_name *group_name;
  } object;
} Parse_xml_groups_state;

/*************************************************************************/

typedef enum {
  GROUP_DELTAS_TYPE_REPLACE    = 0,
  GROUP_DELTAS_TYPE_ADD_DELETE = 1
} Group_deltas_type;

static char MAYBE_UNUSED *Group_deltas_type_symbols[] = {
  "replace", "add_delete", NULL
};

typedef struct Group_meta_update {
  char *newname;
} Group_meta_update;

typedef struct Group_delete_member {
  char *jurisdiction;
  char *name;
} Group_delete_member;

typedef struct Group_add_delete {
  Group_member *group_member;
  Group_delete_member *group_delete_member;
  struct Group_add_delete *next;
} Group_add_delete;

typedef struct Group_deltas {
  char *jurisdiction;
  char *name;
  char *type;
  char *timestamp;
  Group_meta_update *group_meta_update;
  Group_add_delete *group_add_delete;
} Group_deltas;

typedef enum Parse_xml_group_deltas_state_code {
	GROUPS_PARSE_GROUP_DELTAS        = 1
} Parse_xml_group_deltas_state_code;

typedef struct Parse_xml_group_deltas_state {
  Parse_xml_group_deltas_state_code code;
  union {
	Group_deltas *group_deltas;
  } object;
} Parse_xml_group_deltas_state;

/*************************************************************************/

typedef struct Jurisdiction {
  char *jname;
  char *name;
  char *alt_name;
  char *dacs_url;
  char *authenticates;
  char *prompts;
  char *auxiliary;
  char *public_key_str;
  EVP_PKEY *public_key;
  char *public_key_pem;
} Jurisdiction;

typedef struct Group_file {
  char *path;
  Group_name group_name;
  time_t mod_date;
  Group_definition_type type;
} Group_file;

static inline MAYBE_UNUSED mode_t
set_public_group_mode(mode_t mode)
{

  return(mode & ~GROUPS_PRIVATE_MODE_BIT);
}

static inline MAYBE_UNUSED mode_t
set_private_group_mode(mode_t mode)
{

  return(mode | GROUPS_PRIVATE_MODE_BIT);
}

static inline MAYBE_UNUSED int
is_public_group_mode(mode_t mode)
{

  return((mode & GROUPS_PRIVATE_MODE_BIT) == 0);
}

static inline MAYBE_UNUSED int
is_private_group_mode(mode_t mode)
{

  return((mode & GROUPS_PRIVATE_MODE_BIT) != 0);
}

typedef struct Roles_list {
  Credentials *cr;
  Group_name **group_names;
  struct Roles_list *next;
} Roles_list;

extern Jurisdiction *jurisdictions;
extern int njurisdictions;

#ifdef __cplusplus
extern "C" {
#endif

extern char *make_group_pathname(char *jurisdiction, char *name);
extern char *make_group_itemname(char *jurisdiction, char *name);
extern int is_valid_name(const char *name);
extern int load_jurisdictions(void);
extern int get_group_list(Dsvec **);
extern int refresh_group_list(Dsvec **gf);
extern int load_group(char *jurisdiction, char *name, char **buf);
extern int parse_xml_groups(char *str, Groups **groups);
extern void add_group_member_to_group(Group_definition *gd, Group_member *gm);
extern int set_mod_date(Group_definition *gd);
extern int store_group_file(Groups *groups, char *jurisdiction, char *name);
extern int delete_group_member_from_group(Group_definition *gd,
										  char *jurisdiction, char *name);
extern void groups_xml_html(FILE *fp, Groups *groups);
extern int is_valid_federation_name(char *federation);
extern int is_valid_jurisdiction_name(char *jurisdiction);
extern int exists_group(char *jurisdiction, char *name);
extern Group_name *make_group_name_from_str(Group_name *gn, const char *str);
extern int is_valid_group_name(Group_name *gn);
extern int groups_xml_text(FILE *fp, Groups *groups);
extern int parse_xml_group_deltas(char *str, Group_deltas **group_deltas);
extern int rename_group_file(char *jurisdiction, char *oldname, char *newname);
extern int group_member_name_from_str(const char *str, char **jurisdiction,
									  char **name);
extern Group_name **make_group_names_from_role_str(char *jurisdiction,
												   char *role_str);
extern void add_group_to_groups(Groups *groups, Group_definition *gd);
extern char *groups_xml_text_to_buf(Groups *groups);
extern int get_jurisdiction_meta(char *jurisdiction, Jurisdiction **jp);

extern int is_group_member(char *jname, char *uname, Group_name **roles,
						   char *jurisdiction, char *name);
extern int has_unauth_role(char *role_str, char *jurisdiction, char *name);

#ifdef __cplusplus
}
#endif

#endif