Skyler FerranteandAlejandro Colomar
a28371336e
Set Prog (program name) based on hardcoded value instead of argv[0].
This is to help prevent escape sequence injection.
Cherry-picked-from: e6c2e43937 ("Hardcoding Prog to known value")
Link: <https://github.com/shadow-maint/shadow/issues/959>
Link: <https://github.com/shadow-maint/shadow/pull/960>
Cc: "Skyler Ferrante (RIT Student)" <sjf5462@rit.edu>
Cc: "Serge E. Hallyn" <serge@hallyn.com>
Cc: Karel Zak <kzak@redhat.com>
Cc: Iker Pedrosa <ipedrosa@redhat.com>
Cc: Christian Brauner <christian@brauner.io>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
45 lines
921 B
C
45 lines
921 B
C
/* SPDX-License-Identifier: BSD-3-Clause */
|
|
|
|
#include <stdio.h>
|
|
#include "subid.h"
|
|
#include "stdlib.h"
|
|
#include "prototypes.h"
|
|
#include "shadowlog.h"
|
|
|
|
static const char Prog[] = "get_subid_owners";
|
|
|
|
static void usage(void)
|
|
{
|
|
fprintf(stderr, "Usage: [-g] %s subuid\n", Prog);
|
|
fprintf(stderr, " list uids who own the given subuid\n");
|
|
fprintf(stderr, " pass -g to query a subgid\n");
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
int i, n;
|
|
uid_t *uids;
|
|
|
|
log_set_progname(Prog);
|
|
log_set_logfd(stderr);
|
|
if (argc < 2) {
|
|
usage();
|
|
}
|
|
if (argc == 3 && strcmp(argv[1], "-g") == 0)
|
|
n = subid_get_gid_owners(atoi(argv[2]), &uids);
|
|
else if (argc == 2 && strcmp(argv[1], "-h") == 0)
|
|
usage();
|
|
else
|
|
n = subid_get_uid_owners(atoi(argv[1]), &uids);
|
|
if (n < 0) {
|
|
fprintf(stderr, "No owners found\n");
|
|
exit(1);
|
|
}
|
|
for (i = 0; i < n; i++) {
|
|
printf("%d\n", uids[i]);
|
|
}
|
|
free(uids);
|
|
return 0;
|
|
}
|