blob: d0fd337bd5535f1483338c6ba6b3ad2c6aa7cf13 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
// --------------------------------------------------------------------------
//
// File
// Name: UnixUser.cpp
// Purpose: Interface for managing the UNIX user of the current process
// Created: 21/1/04
//
// --------------------------------------------------------------------------
#include "Box.h"
#ifdef HAVE_PWD_H
#include <pwd.h>
#endif
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif
#include "UnixUser.h"
#include "CommonException.h"
#include "MemLeakFindOn.h"
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::UnixUser(const char *)
// Purpose: Constructor, initialises to info of given username
// Created: 21/1/04
//
// --------------------------------------------------------------------------
UnixUser::UnixUser(const char *Username)
: mUID(0),
mGID(0),
mRevertOnDestruction(false)
{
// Get password info
struct passwd *pwd = ::getpwnam(Username);
if(pwd == 0)
{
THROW_EXCEPTION(CommonException, CouldNotLookUpUsername)
}
// Store UID and GID
mUID = pwd->pw_uid;
mGID = pwd->pw_gid;
}
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::UnixUser(uid_t, gid_t)
// Purpose: Construct from given UNIX user ID and group ID
// Created: 15/3/04
//
// --------------------------------------------------------------------------
UnixUser::UnixUser(uid_t UID, gid_t GID)
: mUID(UID),
mGID(GID),
mRevertOnDestruction(false)
{
}
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::~UnixUser()
// Purpose: Destructor -- reverts to previous user if the change wasn't perminant
// Created: 21/1/04
//
// --------------------------------------------------------------------------
UnixUser::~UnixUser()
{
#ifndef WIN32
if(mRevertOnDestruction)
{
// Revert to "real" user and group id of the process
if(::setegid(::getgid()) != 0
|| ::seteuid(::getuid()) != 0)
{
THROW_EXCEPTION(CommonException, CouldNotRestoreProcessUser)
}
}
#endif
}
// --------------------------------------------------------------------------
//
// Function
// Name: UnixUser::ChangeProcessUser(bool)
// Purpose: Change the process user and group ID to the user. If Temporary == true
// the process username will be changed back when the object is destructed.
// Created: 21/1/04
//
// --------------------------------------------------------------------------
void UnixUser::ChangeProcessUser(bool Temporary)
{
#ifndef WIN32
if(Temporary)
{
// Change temporarily (change effective only)
if(::setegid(mGID) != 0
|| ::seteuid(mUID) != 0)
{
THROW_EXCEPTION(CommonException, CouldNotChangeProcessUser)
}
// Mark for change on destruction
mRevertOnDestruction = true;
}
else
{
// Change perminantely (change all UIDs and GIDs)
if(::setgid(mGID) != 0
|| ::setuid(mUID) != 0)
{
THROW_EXCEPTION(CommonException, CouldNotChangeProcessUser)
}
}
#endif
}
|
