diff options
| author | Justus Winter <justus@gnupg.org> | 2016-04-25 01:38:45 +0200 |
|---|---|---|
| committer | Justus Winter <justus@gnupg.org> | 2016-04-26 14:49:46 +0200 |
| commit | 94ce9fa4c443ec9a0e6ecc92cb6b07534c321c75 (patch) | |
| tree | c648e34b5b21eed772bb1d8920b30ac59f34d04b /libtrivfs/trivfs.h | |
| parent | d67a86c9690c2a9984ca6e9f3c376956495897f4 (diff) | |
libtrivfs: fix notion of privileged user
Set 'is_root' if the node has been opened by the root user (this was
the old behavior) or if it has been opened by the user the translator
is executing under.
This fixes the irritating bug that an unprivileged user cannot control
her own trivfs-based translators. It does not change how privileged
trivfs translators work.
* libtrivfs/io-reauthenticate.c (trivfs_S_io_reauthenticate): Use the
new function to compute 'isroot'.
* libtrivfs/io-restrict-auth.c (trivfs_S_io_restrict_auth): Likewise.
* libtrivfs/open.c (trivfs_open): Likewise.
* libtrivfs/priv.h (_is_privileged): New function.
* libtrivfs/trivfs.h (struct peropen): Clarify what 'isroot' means.
Diffstat (limited to 'libtrivfs/trivfs.h')
| -rw-r--r-- | libtrivfs/trivfs.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libtrivfs/trivfs.h b/libtrivfs/trivfs.h index d81c4f93..49cc765f 100644 --- a/libtrivfs/trivfs.h +++ b/libtrivfs/trivfs.h @@ -30,7 +30,8 @@ struct trivfs_protid { struct port_info pi; struct iouser *user; - int isroot; + int isroot; /* Opened by a privileged user, either + root or our own user. */ /* REALNODE will be null if this protid wasn't fully created (currently only in the case where trivfs_protid_create_hook returns an error). */ mach_port_t realnode; /* restricted permissions */ |