mirrors/Astral
1
0
Fork 0
mirror of https://github.com/Mathewnd/Astral.git synced 2026-10-27 20:58:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

auth: signals

Browse Source
This commit is contained in:
Matheus
2024-08-26 17:45:05 -03:00
parent fdcda428f9
commit 84c47f07c9
3 changed files with 36 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kernel-src/sys/defaultauth.c
+26
View File
@@ -197,8 +197,34 @@ static int credlistener(cred_t *cred, int actions, void *arg0, void *arg1, void
return weight ? AUTH_DECISION_ALLOW : AUTH_DECISION_DEFER;
}
static int process(cred_t *cred, int actions, void *arg0, void *arg1, void *arg2) {
proc_t *proc = arg0;
int *signal = arg1;
int weight = 0;
if (actions & AUTH_ACTIONS_PROCESS_SIGNAL) {
if (CRED_IS_ESU(cred))
weight += 1;
else if (cred->uid == proc->cred.uid ||
cred->uid == proc->cred.suid ||
cred->euid == proc->cred.uid ||
cred->euid == proc->cred.suid)
weight += 1;
else if (*signal == SIGCONT) {
// TODO SIGCONT is supposed to work on the same process group; we are being a bit more permissive here for now
weight += 1;
}
DONE_CHECK(actions);
}
done:
return weight ? AUTH_DECISION_ALLOW : AUTH_DECISION_DEFER;
}
void defaultauth_init() {
auth_registerlistener(AUTH_SCOPE_FILESYSTEM, filesystem);
auth_registerlistener(AUTH_SCOPE_SYSTEM, system);
auth_registerlistener(AUTH_SCOPE_CRED, credlistener);
auth_registerlistener(AUTH_SCOPE_PROCESS, process);
}