mirror of
https://github.com/SerenityOS/serenity
synced 2024-09-06 17:06:31 +00:00
122d7d9533
This patch adds a new object to hold a Process's user credentials: - UID, EUID, SUID - GID, EGID, SGID, extra GIDs Credentials are immutable and child processes initially inherit the Credentials object from their parent. Whenever a process changes one or more of its user/group IDs, a new Credentials object is constructed. Any code that wants to inspect and act on a set of credentials can now do so without worrying about data races.
43 lines
1.2 KiB
C++
43 lines
1.2 KiB
C++
/*
|
|
* Copyright (c) 2022, Andreas Kling <kling@serenityos.org>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <AK/AtomicRefCounted.h>
|
|
#include <AK/FixedArray.h>
|
|
#include <Kernel/Forward.h>
|
|
|
|
namespace Kernel {
|
|
|
|
class Credentials final : public AtomicRefCounted<Credentials> {
|
|
public:
|
|
static ErrorOr<NonnullRefPtr<Credentials>> create(UserID uid, GroupID gid, UserID euid, GroupID egid, UserID suid, GroupID sgid, Span<GroupID const> extra_gids);
|
|
~Credentials();
|
|
|
|
bool is_superuser() const { return euid() == 0; }
|
|
|
|
UserID euid() const { return m_euid; }
|
|
GroupID egid() const { return m_egid; }
|
|
UserID uid() const { return m_uid; }
|
|
GroupID gid() const { return m_gid; }
|
|
UserID suid() const { return m_suid; }
|
|
GroupID sgid() const { return m_sgid; }
|
|
Span<GroupID const> extra_gids() const { return m_extra_gids.span(); }
|
|
|
|
private:
|
|
Credentials(UserID uid, GroupID gid, UserID euid, GroupID egid, UserID suid, GroupID sgid, FixedArray<GroupID> extra_gids);
|
|
|
|
UserID m_uid;
|
|
GroupID m_gid;
|
|
UserID m_euid;
|
|
GroupID m_egid;
|
|
UserID m_suid;
|
|
GroupID m_sgid;
|
|
FixedArray<GroupID> m_extra_gids;
|
|
};
|
|
|
|
}
|