![]() ![]() |
![]() |
File: [Pegasus] / pegasus / src / Executor / User.c
(download)
Revision: 1.3, Tue Feb 5 19:59:40 2008 UTC (16 years, 4 months ago) by kumpf Branch: MAIN CVS Tags: TASK_PEP328_SOLARIS_NEVADA_PORT, TASK-PEP328_SOLARIS_NEVADA_PORT_v2-root, TASK-PEP328_SOLARIS_NEVADA_PORT_v2-branch, TASK-PEP328_SOLARIS_NEVADA_PORT-root, TASK-PEP328_SOLARIS_NEVADA_PORT-branch, TASK-PEP328_SOLARIS_IX86_CC_PORT-root, TASK-PEP328_SOLARIS_IX86_CC_PORT-branch-v2, TASK-PEP328_SOLARIS_IX86_CC_PORT-branch, TASK-PEP311_WSMan-root, TASK-PEP311_WSMan-branch, RELEASE_2_8_2-RC1, RELEASE_2_8_2, RELEASE_2_8_1-RC1, RELEASE_2_8_1, RELEASE_2_8_0_BETA, RELEASE_2_8_0-RC2, RELEASE_2_8_0-RC1, RELEASE_2_8_0-FC, RELEASE_2_8_0, RELEASE_2_8-root, RELEASE_2_8-branch, Makefile Changes since 1.2: +39 -0 lines BUG#: 7348 TITLE: On start-up, indication providers get SIGHUP DESCRIPTION: When privilege separation is enabled, start all cimprovagt process from the Executor daemon process, not the cimserver command process. |
/* //%2006//////////////////////////////////////////////////////////////////////// // // Copyright (c) 2000, 2001, 2002 BMC Software; Hewlett-Packard Development // Company, L.P.; IBM Corp.; The Open Group; Tivoli Systems. // Copyright (c) 2003 BMC Software; Hewlett-Packard Development Company, L.P.; // IBM Corp.; EMC Corporation, The Open Group. // Copyright (c) 2004 BMC Software; Hewlett-Packard Development Company, L.P.; // IBM Corp.; EMC Corporation; VERITAS Software Corporation; The Open Group. // Copyright (c) 2005 Hewlett-Packard Development Company, L.P.; IBM Corp.; // EMC Corporation; VERITAS Software Corporation; The Open Group. // Copyright (c) 2006 Hewlett-Packard Development Company, L.P.; IBM Corp.; // EMC Corporation; Symantec Corporation; The Open Group. // // Permission is hereby granted, free of charge, to any person obtaining a copy // of this software and associated documentation files (the "Software"), to // deal in the Software without restriction, including without limitation the // rights to use, copy, modify, merge, publish, distribute, sublicense, and/or // sell copies of the Software, and to permit persons to whom the Software is // furnished to do so, subject to the following conditions: // // THE ABOVE COPYRIGHT NOTICE AND THIS PERMISSION NOTICE SHALL BE INCLUDED IN // ALL COPIES OR SUBSTANTIAL PORTIONS OF THE SOFTWARE. THE SOFTWARE IS PROVIDED // "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT // LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR // PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT // HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN // ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. // //%///////////////////////////////////////////////////////////////////////////// */ #include <unistd.h> #include <sys/types.h> #include <pwd.h> #include <grp.h> #include "User.h" #include "Log.h" #include "Strlcpy.h" #define PWD_BUFF_SIZE 4096 /* **============================================================================== ** ** GetUserInfo() ** ** Lookup the given user's uid and gid. ** **============================================================================== */ int GetUserInfo(const char* user, int* uid, int* gid) { struct passwd pwd; char buffer[PWD_BUFF_SIZE]; struct passwd* ptr = 0; if (getpwnam_r(user, &pwd, buffer, PWD_BUFF_SIZE, &ptr) != 0 || !ptr) { Log(LL_TRACE, "getpwnam_r(%s, ...) failed", user); return -1; } *uid = ptr->pw_uid; *gid = ptr->pw_gid; return 0; } /* **============================================================================== ** ** GetUserName() ** ** Lookup the user name for the specified user ID. ** **============================================================================== */ int GetUserName(int uid, char username[EXECUTOR_BUFFER_SIZE]) { struct passwd pwd; char buffer[PWD_BUFF_SIZE]; struct passwd* ptr = 0; if (getpwuid_r(uid, &pwd, buffer, PWD_BUFF_SIZE, &ptr) != 0 || !ptr) { Log(LL_TRACE, "getpwuid_r(%d, ...) failed", uid); username[0] = '\0'; return -1; } Strlcpy(username, ptr->pw_name, EXECUTOR_BUFFER_SIZE); return 0; } /* **============================================================================== ** ** SetUserContext() ** ** Set the process user ID, group ID, and supplemental groups ** **============================================================================== */ void SetUserContext(const char* username, int uid, int gid) { if ((int)getgid() != gid) { if (setgid((gid_t)gid) != 0) { Log(LL_SEVERE, "setgid(%d) failed\n", gid); _exit(1); } } if (initgroups(username, gid) != 0) { Log(LL_SEVERE, "initgroups(%s, %d) failed\n", username, gid); _exit(1); } if ((int)getuid() != uid) { if (setuid((uid_t)uid) != 0) { Log(LL_SEVERE, "setuid(%d) failed\n", uid); _exit(1); } } }
No CVS admin address has been configured |
Powered by ViewCVS 0.9.2 |