]>
Commit | Line | Data |
---|---|---|
8efc0c15 | 1 | /* |
5260325f | 2 | * Author: Tatu Ylonen <ylo@cs.hut.fi> |
3 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland | |
4 | * All rights reserved | |
5260325f | 5 | * Code for uid-swapping. |
bcbf86ec | 6 | * |
7 | * As far as I am concerned, the code I have written for this software | |
8 | * can be used freely for any purpose. Any derived versions of this | |
9 | * software must be clearly marked as such, and if the derived work is | |
10 | * incompatible with the protocol description in the RFC file, it must be | |
11 | * called by a name other than "ssh" or "Secure Shell". | |
5260325f | 12 | */ |
8efc0c15 | 13 | |
14 | #include "includes.h" | |
a3626e12 | 15 | RCSID("$OpenBSD: uidswap.c,v 1.16 2001/04/20 16:32:22 markus Exp $"); |
8efc0c15 | 16 | |
42f11eb2 | 17 | #include "log.h" |
8efc0c15 | 18 | #include "uidswap.h" |
19 | ||
5260325f | 20 | /* |
21 | * Note: all these functions must work in all of the following cases: | |
22 | * 1. euid=0, ruid=0 | |
23 | * 2. euid=0, ruid!=0 | |
24 | * 3. euid!=0, ruid!=0 | |
25 | * Additionally, they must work regardless of whether the system has | |
26 | * POSIX saved uids or not. | |
27 | */ | |
8efc0c15 | 28 | |
0096ac62 | 29 | #if defined(_POSIX_SAVED_IDS) && !defined(BROKEN_SAVED_UIDS) |
8efc0c15 | 30 | /* Lets assume that posix saved ids also work with seteuid, even though that |
31 | is not part of the posix specification. */ | |
0096ac62 | 32 | #define SAVED_IDS_WORK_WITH_SETEUID |
33 | /* Saved effective uid. */ | |
34 | static uid_t saved_euid = 0; | |
35 | static gid_t saved_egid = 0; | |
36 | #endif | |
f8252c48 | 37 | |
8efc0c15 | 38 | /* Saved effective uid. */ |
63bd8c36 | 39 | static int privileged = 0; |
40 | static int temporarily_use_uid_effective = 0; | |
63bd8c36 | 41 | static gid_t saved_egroups[NGROUPS_MAX], user_groups[NGROUPS_MAX]; |
42 | static int saved_egroupslen = -1, user_groupslen = -1; | |
f8252c48 | 43 | |
5260325f | 44 | /* |
45 | * Temporarily changes to the given uid. If the effective user | |
46 | * id is not root, this does nothing. This call cannot be nested. | |
47 | */ | |
6ae2364d | 48 | void |
63bd8c36 | 49 | temporarily_use_uid(struct passwd *pw) |
8efc0c15 | 50 | { |
f8252c48 | 51 | /* Save the current euid, and egroups. */ |
0096ac62 | 52 | #ifdef SAVED_IDS_WORK_WITH_SETEUID |
f8252c48 | 53 | saved_euid = geteuid(); |
0096ac62 | 54 | saved_egid = getegid(); |
f8252c48 | 55 | debug("temporarily_use_uid: %d/%d (e=%d)", |
56 | pw->pw_uid, pw->pw_gid, saved_euid); | |
57 | if (saved_euid != 0) { | |
58 | privileged = 0; | |
59 | return; | |
60 | } | |
0096ac62 | 61 | #else |
62 | if (geteuid() != 0) { | |
63 | privileged = 0; | |
64 | return; | |
65 | } | |
66 | #endif /* SAVED_IDS_WORK_WITH_SETEUID */ | |
67 | ||
f8252c48 | 68 | privileged = 1; |
69 | temporarily_use_uid_effective = 1; | |
f8252c48 | 70 | saved_egroupslen = getgroups(NGROUPS_MAX, saved_egroups); |
71 | if (saved_egroupslen < 0) | |
72 | fatal("getgroups: %.100s", strerror(errno)); | |
73 | ||
74 | /* set and save the user's groups */ | |
75 | if (user_groupslen == -1) { | |
76 | if (initgroups(pw->pw_name, pw->pw_gid) < 0) | |
77 | fatal("initgroups: %s: %.100s", pw->pw_name, | |
78 | strerror(errno)); | |
79 | user_groupslen = getgroups(NGROUPS_MAX, user_groups); | |
80 | if (user_groupslen < 0) | |
81 | fatal("getgroups: %.100s", strerror(errno)); | |
82 | } | |
229be2df | 83 | #ifndef HAVE_CYGWIN |
f8252c48 | 84 | /* Set the effective uid to the given (unprivileged) uid. */ |
d98d029a | 85 | if (setgroups(user_groupslen, user_groups) < 0) |
63bd8c36 | 86 | fatal("setgroups: %.100s", strerror(errno)); |
229be2df | 87 | #endif /* !HAVE_CYWIN */ |
0096ac62 | 88 | #ifndef SAVED_IDS_WORK_WITH_SETEUID |
89 | /* Propagate the privileged gid to all of our gids. */ | |
90 | if (setgid(getegid()) < 0) | |
91 | debug("setgid %u: %.100s", (u_int) getegid(), strerror(errno)); | |
92 | /* Propagate the privileged uid to all of our uids. */ | |
93 | if (setuid(geteuid()) < 0) | |
94 | debug("setuid %u: %.100s", (u_int) geteuid(), strerror(errno)); | |
95 | #endif /* SAVED_IDS_WORK_WITH_SETEUID */ | |
d98d029a | 96 | if (setegid(pw->pw_gid) < 0) |
f8252c48 | 97 | fatal("setegid %u: %.100s", (u_int) pw->pw_gid, |
98 | strerror(errno)); | |
99 | if (seteuid(pw->pw_uid) == -1) | |
100 | fatal("seteuid %u: %.100s", (u_int) pw->pw_uid, | |
101 | strerror(errno)); | |
8efc0c15 | 102 | } |
f8252c48 | 103 | |
5260325f | 104 | /* |
a3626e12 | 105 | * Restores to the original (privileged) uid. |
5260325f | 106 | */ |
6ae2364d | 107 | void |
1e3b8b07 | 108 | restore_uid(void) |
8efc0c15 | 109 | { |
63bd8c36 | 110 | debug("restore_uid"); |
111 | /* it's a no-op unless privileged */ | |
112 | if (!privileged) | |
113 | return; | |
114 | if (!temporarily_use_uid_effective) | |
115 | fatal("restore_uid: temporarily_use_uid not effective"); | |
0096ac62 | 116 | |
117 | #ifdef SAVED_IDS_WORK_WITH_SETEUID | |
a3626e12 | 118 | /* Set the effective uid back to the saved privileged uid. */ |
5260325f | 119 | if (seteuid(saved_euid) < 0) |
96c63318 | 120 | fatal("seteuid %u: %.100s", (u_int) saved_euid, strerror(errno)); |
0096ac62 | 121 | if (setegid(saved_egid) < 0) |
122 | fatal("setegid %u: %.100s", (u_int) saved_egid, | |
123 | strerror(errno)); | |
124 | #else /* SAVED_IDS_WORK_WITH_SETEUID */ | |
125 | /* | |
126 | * We are unable to restore the real uid to its unprivileged value. | |
127 | * Propagate the real uid (usually more privileged) to effective uid | |
128 | * as well. | |
129 | */ | |
130 | setuid(getuid()); | |
131 | setgid(getgid()); | |
132 | #endif /* SAVED_IDS_WORK_WITH_SETEUID */ | |
133 | ||
229be2df | 134 | #ifndef HAVE_CYGWIN |
d98d029a | 135 | if (setgroups(saved_egroupslen, saved_egroups) < 0) |
63bd8c36 | 136 | fatal("setgroups: %.100s", strerror(errno)); |
229be2df | 137 | #endif /* !HAVE_CYGWIN */ |
63bd8c36 | 138 | temporarily_use_uid_effective = 0; |
8efc0c15 | 139 | } |
140 | ||
5260325f | 141 | /* |
142 | * Permanently sets all uids to the given uid. This cannot be | |
143 | * called while temporarily_use_uid is effective. | |
144 | */ | |
6ae2364d | 145 | void |
63bd8c36 | 146 | permanently_set_uid(struct passwd *pw) |
8efc0c15 | 147 | { |
63bd8c36 | 148 | if (temporarily_use_uid_effective) |
149 | fatal("restore_uid: temporarily_use_uid effective"); | |
63bd8c36 | 150 | if (setgid(pw->pw_gid) < 0) |
151 | fatal("setgid %u: %.100s", (u_int) pw->pw_gid, strerror(errno)); | |
a3626e12 | 152 | if (setuid(pw->pw_uid) < 0) |
153 | fatal("setuid %u: %.100s", (u_int) pw->pw_uid, strerror(errno)); | |
8efc0c15 | 154 | } |