1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
/* Add gids implied by a user
Copyright (C) 1997, 2001 Free Software Foundation, Inc.
Written by Miles Bader <miles@gnu.ai.mit.edu>
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License as
published by the Free Software Foundation; either version 2, or (at
your option) any later version.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */
#include <stdlib.h>
#include <errno.h>
#include <idvec.h>
#include <pwd.h>
#include <grp.h>
#define NUM_STATIC_GIDS 100 /* Initial size of static gid array. */
/* The set of gids implied by a uid. */
struct uid_implies
{
uid_t uid; /* this uid... */
struct idvec *implies; /* implies these gids. */
struct uid_implies *next;
};
/* Cache of previously calculated results for add_implied_gids. */
static struct uid_implies *uid_implies_cache = 0;
/* Add to IMPLIED_GIDS those group ids implied by the user UID. */
static error_t
_merge_implied_gids (struct idvec *implied_gids, uid_t uid)
{
struct uid_implies *ui;
for (ui = uid_implies_cache; ui; ui = ui->next)
if (ui->uid == uid)
return idvec_merge (implied_gids, ui->implies);
{
error_t err = 0;
struct passwd *pw = getpwuid (uid);
if (! pw)
err = EINVAL;
else
{
struct idvec *cache = make_idvec ();
#ifdef HAVE_GETGROUPLIST
gid_t _gids[NUM_STATIC_GIDS], *gids = _gids;
int maxgids = NUM_STATIC_GIDS;
int ngids = getgrouplist (pw->pw_name, pw->pw_gid, gids, &maxgids);
if (ngids == -1)
{
gids = malloc (maxgids * sizeof (gid_t));
if (! gids)
err = ENOMEM;
else
ngids = getgrouplist (pw->pw_name, pw->pw_gid, gids, &maxgids);
}
if (! cache)
err = ENOMEM;
if (! err)
{
err = idvec_merge_ids (cache, gids, ngids);
if (gids != _gids)
free (gids);
}
#else
#warning "getgrouplist() not available; supplementary group IDs unsupported."
if (! cache)
err = ENOMEM;
else
{
err = idvec_add_new (cache, pw->pw_gid);
if (err)
idvec_free (cache);
}
#endif
if (! err)
{
idvec_merge (implied_gids, cache);
ui = malloc (sizeof (struct uid_implies));
if (ui)
{
ui->uid = uid;
ui->implies = cache;
ui->next = uid_implies_cache;
uid_implies_cache = ui;
}
else
idvec_free (cache);
}
}
return err;
}
}
/* Add to GIDS those group ids implied by the users in UIDS. */
error_t
idvec_merge_implied_gids (struct idvec *gids, const struct idvec *uids)
{
unsigned int i;
error_t err = 0;
for (i = 0; i < uids->num; i++)
{
error_t this_err = _merge_implied_gids (gids, uids->ids[i]);
if (this_err && !err)
err = this_err;
}
return err;
}
|
