1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
// --------------------------------------------------------------------------
//
// File
// Name: UnixUser.cpp
// Purpose: Interface for managing the UNIX user of the current process
// Created: 21/1/04
//
// --------------------------------------------------------------------------
#include "Box.h"
#ifdef HAVE_PWD_H
#include <pwd.h>
#endif
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif
#include "UnixUser.h"
#include "CommonException.h"
#include "MemLeakFindOn.h"
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::UnixUser(const char *)
// Purpose: Constructor, initialises to info of given username
// Created: 21/1/04
//
// --------------------------------------------------------------------------
UnixUser::UnixUser(const std::string& Username)
: mUID(0),
mGID(0),
mRevertOnDestruction(false)
{
// Get password info
struct passwd *pwd = ::getpwnam(Username.c_str());
if(pwd == 0)
{
THROW_EXCEPTION(CommonException, CouldNotLookUpUsername)
}
// Store UID and GID
mUID = pwd->pw_uid;
mGID = pwd->pw_gid;
}
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::UnixUser(uid_t, gid_t)
// Purpose: Construct from given UNIX user ID and group ID
// Created: 15/3/04
//
// --------------------------------------------------------------------------
UnixUser::UnixUser(uid_t UID, gid_t GID)
: mUID(UID),
mGID(GID),
mRevertOnDestruction(false)
{
}
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::~UnixUser()
// Purpose: Destructor -- reverts to previous user if the change wasn't perminant
// Created: 21/1/04
//
// --------------------------------------------------------------------------
UnixUser::~UnixUser()
{
if(mRevertOnDestruction)
{
// Revert to "real" user and group id of the process
if(::setegid(::getgid()) != 0 || ::seteuid(::getuid()) != 0)
{
THROW_EXCEPTION(CommonException, CouldNotRestoreProcessUser)
}
}
}
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::ChangeProcessUser(bool)
// Purpose: Change the process user and group ID to the user. If Temporary == true
// the process username will be changed back when the object is destructed.
// Created: 21/1/04
//
// --------------------------------------------------------------------------
void UnixUser::ChangeProcessUser(bool Temporary)
{
if(Temporary)
{
// Change temporarily (change effective only)
if(::setegid(mGID) != 0 || ::seteuid(mUID) != 0)
{
THROW_EXCEPTION(CommonException, CouldNotChangeProcessUser)
}
// Mark for change on destruction
mRevertOnDestruction = true;
}
else
{
// Change permanently (change all UIDs and GIDs)
if(::setgid(mGID) != 0 || ::setuid(mUID) != 0)
{
THROW_EXCEPTION(CommonException, CouldNotChangeProcessUser)
}
}
}
|
