mdw@git.distorted.org.uk Git - disorder/blob - lib/user.c

   1 /*
   2  * This file is part of DisOrder
   3  * Copyright (C) 2005 Richard Kettlewell
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13  * General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License
  16  * along with this program; if not, write to the Free Software
  17  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
  18  * USA
  19  */
  20
  21 #include <config.h>
  22 #include "types.h"
  23
  24 #include <sys/types.h>
  25 #include <errno.h>
  26 #include <pwd.h>
  27 #include <grp.h>
  28 #include <unistd.h>
  29
  30 #include "user.h"
  31 #include "log.h"
  32 #include "configuration.h"
  33
  34 void become_mortal(void) {
  35   struct passwd *pw;
  36
  37   if(config->user) {
  38     if(!(pw = getpwnam(config->user)))
  39       fatal(0, "cannot find user %s", config->user);
  40     if(pw->pw_uid != getuid()) {
  41       if(initgroups(config->user, pw->pw_gid))
  42         fatal(errno, "error calling initgroups");
  43       if(setgid(pw->pw_gid) < 0) fatal(errno, "error calling setgid");
  44       if(setuid(pw->pw_uid) < 0) fatal(errno, "error calling setgid");
  45       info("changed to user %s (uid %lu)", config->user, (unsigned long)getuid());
  46     }
  47     /* sanity checks */
  48     if(getuid() != pw->pw_uid) fatal(0, "wrong real uid");
  49     if(geteuid() != pw->pw_uid) fatal(0, "wrong effective uid");
  50     if(getgid() != pw->pw_gid) fatal(0, "wrong real gid");
  51     if(getegid() != pw->pw_gid) fatal(0, "wrong effective gid");
  52     if(setuid(0) != -1) fatal(0, "setuid(0) unexpectedly succeeded");
  53     if(seteuid(0) != -1) fatal(0, "seteuid(0) unexpectedly succeeded");
  54   }
  55 }
  56
  57 /*
  58 Local Variables:
  59 c-basic-offset:2
  60 comment-column:40
  61 fill-column:79
  62 indent-tabs-mode:nil
  63 End:
  64 */
  65 /* arch-tag:GTEl+AUapne19BB73yRZdw */