1 files changed, 60 insertions, 0 deletions
diff --git a/utils/nonsugid.c b/utils/nonsugid.c
new file mode 100644
index 00000000..ad3a2176
--- /dev/null
+++ b/utils/nonsugid.c
@@ -0,0 +1,60 @@
+/* Get our ids, minus any setuid result
+
+   Copyright (C) 1995, 1996, 1997 Free Software Foundation, Inc.
+
+   Written by Miles Bader <miles@gnu.ai.mit.edu>
+
+   This program is free software; you can redistribute it and/or
+   modify it under the terms of the GNU General Public License as
+   published by the Free Software Foundation; either version 2, or (at
+   your option) any later version.
+
+   This program is distributed in the hope that it will be useful, but
+   WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+   General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program; if not, write to the Free Software
+   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.  */
+
+#include <errno.h>
+#include <idvec.h>
+#include <hurd.h>
+
+/* Make sure that the [UG]IDS are filled in.  To make them useful for
+   su'ing, each is the avail ids with all effective ids but the first
+   appended; this gets rid of the effect of being suid, and is useful as a
+   new process's avail id list (e.g., the real id is right).  */
+error_t
+get_nonsugid_ids (struct idvec *uids, struct idvec *gids)
+{
+  if (uids->num == 0 && gids->num == 0)
+    {
+      error_t err = 0;
+      static auth_t auth = MACH_PORT_NULL;
+      struct idvec *p_eff_uids = make_idvec ();
+      struct idvec *p_eff_gids = make_idvec ();
+
+      if (!p_eff_uids || !p_eff_gids)
+	err = ENOMEM;
+
+      if (auth == MACH_PORT_NULL)
+	auth = getauth ();
+
+      if (! err)
+	err = idvec_merge_auth (p_eff_uids, uids, p_eff_gids, gids, auth);
+      if (! err)
+	{
+	  idvec_delete (p_eff_uids, 0); /* Counteract setuid. */
+	  idvec_delete (p_eff_gids, 0);
+	  err = idvec_merge (uids, p_eff_uids);
+	  if (! err)
+	    err = idvec_merge (gids, p_eff_gids);
+	}
+
+      return err;
+    }
+  else
+    return 0;
+}