sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00
Code
samba-mirror/lib/uid_wrapper/uid_wrapper.h

101 lines
2.2 KiB
C
Raw Normal View History

added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
/*
Copyright (C) Andrew Tridgell 2009
uid_wrapper: Add uwrap_setresgid().
2011-10-08 10:52:02 +02:00
Copyright (c) 2011 Andreas Schneider <asn@samba.org>
added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#ifndef __UID_WRAPPER_H__
#define __UID_WRAPPER_H__
uid-wrapper: handle uwrap_enabled() as a macro some s3 code defines uwrap_enabled() as a macro. Detect this, and don't redeclare the functions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-15 16:18:58 +11:00
#ifndef uwrap_enabled
added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
s4:UID wrapper - Make it work on older distributions On my older CentOS 4 installation I had the problem with the missing substitution prototypes ("uwrap_*"). So I added them to "uid_wrapper.h". Also, I made the head of the "uid_wrapper.c" file more like the one of "nss_wrapper.c" - it shouldn't change that much, I did it only to be consistent. This patch should fix the build on older distributions while keep it running on newer ones.
2010-01-30 14:25:51 +01:00
int uwrap_enabled(void);
int uwrap_seteuid(uid_t euid);
uid_wrapper: Add uwrap_setreuid().
2011-10-06 16:25:32 +02:00
int uwrap_setreuid(uid_t reuid, uid_t euid);
uid_wrapper: Add uwrap_setresuid(). Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Fri Oct 7 12:04:05 CEST 2011 on sn-devel-104
2011-10-07 10:30:23 +02:00
int uwrap_setresuid(uid_t reuid, uid_t euid, uid_t suid);
s4:UID wrapper - Make it work on older distributions On my older CentOS 4 installation I had the problem with the missing substitution prototypes ("uwrap_*"). So I added them to "uid_wrapper.h". Also, I made the head of the "uid_wrapper.c" file more like the one of "nss_wrapper.c" - it shouldn't change that much, I did it only to be consistent. This patch should fix the build on older distributions while keep it running on newer ones.
2010-01-30 14:25:51 +01:00
uid_t uwrap_geteuid(void);
int uwrap_setegid(gid_t egid);
uid_wrapper: Fix prototypes.
2011-10-07 18:06:53 +02:00
int uwrap_setregid(gid_t rgid, gid_t egid);
s4:UID wrapper - Make it work on older distributions On my older CentOS 4 installation I had the problem with the missing substitution prototypes ("uwrap_*"). So I added them to "uid_wrapper.h". Also, I made the head of the "uid_wrapper.c" file more like the one of "nss_wrapper.c" - it shouldn't change that much, I did it only to be consistent. This patch should fix the build on older distributions while keep it running on newer ones.
2010-01-30 14:25:51 +01:00
uid_t uwrap_getegid(void);
int uwrap_setgroups(size_t size, const gid_t *list);
int uwrap_getgroups(int size, gid_t *list);
uid_t uwrap_getuid(void);
gid_t uwrap_getgid(void);
Include uid_wrapper correctly.
2011-10-27 12:00:53 +02:00
#ifdef UID_WRAPPER_REPLACE
added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
#ifdef seteuid
#undef seteuid
#endif
#define seteuid uwrap_seteuid
uid_wrapper: Add uwrap_setreuid().
2011-10-06 16:25:32 +02:00
#ifdef setreuid
#undef setreuid
#endif
#define setreuid uwrap_setreuid
uid_wrapper: Add uwrap_setresuid(). Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Fri Oct 7 12:04:05 CEST 2011 on sn-devel-104
2011-10-07 10:30:23 +02:00
#ifdef setresuid
#undef setresuid
#endif
#define setresuid uwrap_setresuid
added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
#ifdef setegid
#undef setegid
#endif
#define setegid uwrap_setegid
uid_wrapper: Add uwrap_setregid().
2011-10-06 16:52:03 +02:00
#ifdef setregid
#undef setregid
#endif
uid_wrapper: Fix prototypes.
2011-10-07 18:06:53 +02:00
#define setregid uwrap_setregid
uid_wrapper: Add uwrap_setregid().
2011-10-06 16:52:03 +02:00
uid_wrapper: Add uwrap_setresgid().
2011-10-08 10:52:02 +02:00
#ifdef setresgid
#undef setresgid
#endif
#define setresgid uwrap_setresgid
added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
#ifdef geteuid
#undef geteuid
#endif
#define geteuid uwrap_geteuid
#ifdef getegid
#undef getegid
#endif
#define getegid uwrap_getegid
#ifdef setgroups
#undef setgroups
#endif
#define setgroups uwrap_setgroups
#ifdef getgroups
#undef getgroups
#endif
#define getgroups uwrap_getgroups
#ifdef getuid
#undef getuid
#endif
#define getuid uwrap_getuid
#ifdef getgid
#undef getgid
#endif
#define getgid uwrap_getgid
Include uid_wrapper correctly.
2011-10-27 12:00:53 +02:00
#endif /* UID_WRAPPER_REPLACE */
#endif /* uwrap_enabled */
added a uid_wrapper library This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling
2009-08-05 10:50:03 +10:00
#endif /* __UID_WRAPPER_H__ */
Copy Permalink