OPENPAM_GET_FEATURE(3)

💅 OPENPAM_GET_FEATURE

okay so bestie, we're in section 3 of the Library Functions Manual today and the star of the show is openpam_get_feature — the little function that lets you peek at whether an optional feature is turned on or off. no cap, it's giving "settings app but make it C". 🎀

✨ NAME ✨

openpam_get_feature — query the state of an optional feature. literally just reading the vibe check of a feature, that's it, that's the whole job. 💖

🌸 SYNOPSIS 🌸

#include <sys/types.h>
#include <security/pam_appl.h>
#include <security/openpam.h>

int
openpam_get_feature(int feature, int *onoff);

🦋 DESCRIPTION 🦋

So here's the tea: this function is experimental and may be modified or removed in a future release without prior warning. 😭 not me warning you in advance — read that again, fr fr, because it means don't build your entire personality on it.

The openpam_get_feature() function stores the current state of the specified feature in the variable pointed to by its onoff argument. you pass in which feature you're curious about, you hand it a pointer, it fills the pointer in. slay. 💅

The following features are recognized:

• OPENPAM_RESTRICT_SERVICE_NAME — disallow path separators in service names. this one is enabled by default ✅. disabling it allows the application to specify the path to the desired policy file directly (which, iykyk, is a whole vibe shift in how much you're trusting the caller).
• OPENPAM_VERIFY_POLICY_FILE — verify the ownership and permissions of the policy file and the path leading up to it. enabled by default ✅. yes the whole path, not just the file, she's thorough like that. 👑
• OPENPAM_RESTRICT_MODULE_NAME — disallow path separators in module names. this one is disabled by default 🙈. enabling it prevents the use of modules in non-standard locations. so like, custom module shopping spree = over.
• OPENPAM_VERIFY_MODULE_FILE — verify the ownership and permissions of each loadable module and the path leading up to it. enabled by default ✅. same energy as the policy file check, just for modules. 🫶

🌈 RETURN VALUES 🌈

The openpam_get_feature() function returns one of the following values:

• PAM_SUCCESS — success. we ate. ✨
• PAM_BAD_FEATURE — unrecognized or restricted feature. 💀 you asked about something that doesn't exist or that you're not allowed to poke at.

🍓 SEE ALSO 🍓

openpam_set_feature(3), pam(3), pam_strerror(3)

like obviously go read the setter if you wanna change stuff instead of just looking, and pam_strerror(3) to translate your error codes into actual words. 🧚

⭐ STANDARDS ⭐

The openpam_get_feature() function is an OpenPAM extension. so if you're looking for it in POSIX, bestie, it's not there. it's an OpenPAM original. 💜

🌸 AUTHORS 🌸

The openpam_get_feature() function and this manual page were developed by Dag-Erling Smørgrav <des@des.no>. legend behaviour, honestly. 🫡

---

okay that's the whole page!! go set some features, go read some features, live your truth. 🔥

and that's a wrap, cuties — this page came to you courtesy of Debian, dated June 27, 2023 (yes, the exact same date as the original, I'm not out here inventing lore 💖). mwah, bye! 🎀