1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
/*********************************************************
* Copyright (C) 1998 VMware, Inc. All rights reserved.
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU Lesser General Public License as published
* by the Free Software Foundation version 2.1 and no later version.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the Lesser GNU General Public
* License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
*********************************************************/
/*
* su.h --
*
* Manage super-user priviledges
*
*/
#ifndef USER_SU_H
#define USER_SU_H
#define INCLUDE_ALLOW_USERLEVEL
#define INCLUDE_ALLOW_VMCORE
#include "includeCheck.h"
#include "vm_basic_types.h"
#include "vm_assert.h"
#if defined(__APPLE__)
#include <sys/types.h>
#include <unistd.h>
int Id_SetGid(gid_t egid);
int Id_SetREUid(uid_t ruid, uid_t euid);
int Id_SetRESUid(uid_t ruid, uid_t euid, uid_t suid);
#define Id_GetEUid() geteuid()
void *Id_AuthGetLocal();
void *Id_AuthGetExternal(size_t *size);
Bool Id_AuthSet(void const *buf, size_t size);
Bool Id_AuthCheck(char const *right,
char const *localizedDescription,
Bool showDialogIfNeeded);
#elif (defined(__linux__) || defined(sun) || defined(__FreeBSD__)) && !defined(N_PLAT_NLM)
#include <sys/types.h>
#include <unistd.h>
/* Our set of set*id functions which affect current thread only */
int Id_SetUid(uid_t euid);
int Id_SetGid(gid_t egid);
int Id_SetREUid(uid_t ruid, uid_t euid);
int Id_SetREGid(gid_t rgid, gid_t egid);
int Id_SetRESUid(uid_t ruid, uid_t euid, uid_t suid);
int Id_SetRESGid(gid_t rgid, gid_t egid, gid_t sgid);
/* For symmetry */
#define Id_GetEUid() geteuid()
/*
*----------------------------------------------------------------------------
*
* Id_SetEUid --
*
* Set specified effective uid for current thread. Does not affect
* real uid or saved uid.
*
* Results:
* 0 on success, -1 on failure, errno set
*
* Side effects:
* errno may be modified on success
*
*----------------------------------------------------------------------------
*/
static INLINE int
Id_SetEUid(uid_t euid)
{
return Id_SetRESUid((uid_t)-1, euid, (uid_t)-1);
}
/*
*----------------------------------------------------------------------------
*
* Id_SetEGid --
*
* Set specified effective gid for current thread. Does not affect
* real gid or saved gid.
*
* Results:
* 0 on success, -1 on failure, errno set
*
* Side effects:
* errno may be modified on success
*
*----------------------------------------------------------------------------
*/
static INLINE int
Id_SetEGid(gid_t egid)
{
return Id_SetRESGid((gid_t)-1, egid, (gid_t)-1);
}
#endif /* linux */
#if defined(_WIN32) || defined(N_PLAT_NLM)
#define Id_BeginSuperUser() (-1)
#define Id_EndSuperUser(uid)
#define Id_IsSuperUser() TRUE
#else
#define Id_IsSuperUser() (0 == geteuid())
uid_t Id_BeginSuperUser(void);
void Id_EndSuperUser(uid_t uid);
#endif
#endif /* USER_SU_H */
|
