man.bsd.lv manual page server

Manual Page Search Parameters
OPENPAM_GET_FEATURE(3) Library Functions Manual OPENPAM_GET_FEATURE(3)

openpam_get_featurequery the state of an optional feature

#include <sys/types.h>
#include <security/pam_appl.h>
#include <security/openpam.h>

int
openpam_get_feature(int feature, int *onoff);

This function is experimental and may be modified or removed in a future release without prior warning.

The () function stores the current state of the specified feature in the variable pointed to by its onoff argument.

The following features are recognized:

Disallow path separators in service names. This feature is enabled by default. Disabling it allows the application to specify the path to the desired policy file directly.
Verify the ownership and permissions of the policy file and the path leading up to it. This feature is enabled by default.
Disallow path separators in module names. This feature is disabled by default. Enabling it prevents the use of modules in non-standard locations.
Verify the ownership and permissions of each loadable module and the path leading up to it. This feature is enabled by default.

The openpam_get_feature() function returns one of the following values:

[PAM_SUCCESS]
Success.
[PAM_BAD_FEATURE]
Unrecognized or restricted feature.

openpam_set_feature(3), pam(3), pam_strerror(3)

The openpam_get_feature() function is an OpenPAM extension.

The openpam_get_feature() function and this manual page were developed by Dag-Erling Smørgrav <des@des.no>.

April 30, 2017 FreeBSD-12.0