5e97af535f
* Splitted `libgtop_sysdeps.la' into `libgtop_sysdeps.la' and
`libgtop_sysdeps_suid.la'.
Everything that needs to be suid/sgid is in `libgtop_sysdeps_suid.la'
and the rest in `libgtop_sysdeps.la'.
The functions from `libgtop_sysdeps_suid.la' have the `_p' prefix and
the ones from `libgtop_sysdeps.la' the `_s' prefix.
The suid library uses `glibtop_open_p' and `glibtop_close_p', the
normal one `glibtop_init_s' (found in lib/init.c), `glibtop_open_s'
and `glibtop_close_s'.
* Added `libgtop_suid_common.la' containing stuff from sysdeps/common
that is required from the suid server (currently everything from
error.c and xmalloc.c).
This means, we can add some more stuff to `libgtop_common.la' without
the risk that it may be dangerous in the suid server.
* The ``library order'' is much clearer now:
-> `libgtop.la' (from lib/) contains user-level stuff;
all functions except `glibtop_init_r' have the `_l'
suffix.
-> `libgtop_common.la' (from sysdeps/common/) contains stuff
that is common among the sysdeps directories.
use anything from `libgtop_sysdeps.la' and
`libgtop_sysdeps_suid.la'.
-> `libgtop_sysdeps.la' (from sysdeps/<sysdeps_dir>/) contains
everything from the sysdeps directory that doesn't need to
be suid/sgid.
-> `libgtop_suid_common.la' (from sysdeps/common/) is used from
the suid server instead of `libgtop_common.la'.
-> `libgtop_sysdeps_suid.la' (from sysdeps/<sysdeps_dir>/) contains
everything from the sysdeps directory that needs to be in the
suid server.
* To summarize: the server is linked only with functions that need
to be suid and everything else is linked only with functions that
do not need to be suid.
Martin
1998-07-22 Martin Baulig <martin@home-of-linux.org>
* lib/init.c (glibtop_init_s): Added this init function of
the sysdeps directory `libgtop_sysdeps.la'.
* lib/open.c (glibtop_open_l): Unconditionally calling
`glibtop_init_s' after server initialization.
* lib/lib.awk: Removed references to functions from
`libgtop_sysdeps_suid.la' to avoid undefined symbols.
* sysdeps/stub/open.c (glibtop_open_s): Renamed this
function from `glibtop_open_r'.
* sysdeps/stub/close.c (glibtop_close_s): Renamed this
function from `glibtop_close_l'.
* sysdeps/kernel/open.c (glibtop_open_s): Renamed this
function from `glibtop_open_r'.
* sysdeps/kernel/close.c (glibtop_close_s): Renamed this
function from `glibtop_close_l'.
* sysdeps/linux/open.c (glibtop_open_s): Renamed this
function from `glibtop_open_r'.
* sysdeps/linux/close.c (glibtop_close_s): Renamed this
function from `glibtop_close_l'.
* sysdeps/osf1/Makefile.am (lib_LTLIBRARIES): Added
`libgtop_sysdeps_suid.la' for the suid server.
* sysdeps/osf1/open_suid.c (glibtop_open_p): New file.
Contains all stuff that was formerly in `open.c'.
* sysdeps/osf1/open.c: Moved everything from here into
the new file `open_suid.c'.
* sysdeps/osf1/open.c (glibtop_open_s): New function.
* sysdeps/osf1/close_suid.c (glibtop_close_p): New file.
* sysdeps/osf1/close.c (glibtop_close_s): New function.
* sysdeps/osf1/*.c: Using the new init, open and close
functions.
* sysdeps/sun4/Makefile.am (lib_LTLIBRARIES): Added
`libgtop_sysdeps_suid.la' for the suid server.
* sysdeps/sun4/nosuid.c (glibtop_open_s, glibtop_close_s): New file
* sysdeps/sun4/*.c: All functions now have the `_p' suffix.
* sysdeps/common/Makefile.am (lib_LTLIBRARIES): Added
`libgtop_suid_common.la' which only contains stuff that is
needed in the suid parts.
* sysdeps/common/xmalloc.c: Using `glibtop_error_io_r' instead
of `glibtop_error_r'.
* sysdeps/{kernel, linux, osf1, sun4, stub}/init.c: Removed.
`glibtop_init_s' has been moved into `lib/init.c' since it's the
same in all the sysdeps directories.
* src/server/main.c: It is now an error to request a feature that
does not need the suid server.
* src/proxy: Removed.
122 lines
3.4 KiB
C
122 lines
3.4 KiB
C
/* $Id$ */
|
|
|
|
/* Copyright (C) 1995, 1996, 1997 Free Software Foundation, Inc.
|
|
This file is part of the Gnome Top Library.
|
|
Contributed by Martin Baulig <martin@home-of-linux.org>, April 1998.
|
|
|
|
The Gnome Top Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Library General Public License as
|
|
published by the Free Software Foundation; either version 2 of the
|
|
License, or (at your option) any later version.
|
|
|
|
The Gnome Top Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Library General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Library General Public
|
|
License along with the GNU C Library; see the file COPYING.LIB. If not,
|
|
write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
|
Boston, MA 02111-1307, USA. */
|
|
|
|
#include <config.h>
|
|
#include <glibtop/procuid.h>
|
|
|
|
#include <sys/table.h>
|
|
#include <sys/resource.h>
|
|
|
|
#include <mach.h>
|
|
#include <mach/mach_types.h>
|
|
#include <mach/task_info.h>
|
|
|
|
/* Provides detailed information about a process. */
|
|
|
|
static const unsigned long _glibtop_sysdeps_proc_uid =
|
|
(1 << GLIBTOP_PROC_UID_UID) + (1 << GLIBTOP_PROC_UID_EUID) +
|
|
(1 << GLIBTOP_PROC_UID_GID) + (1 << GLIBTOP_PROC_UID_EGID) +
|
|
(1 << GLIBTOP_PROC_UID_PID) + (1 << GLIBTOP_PROC_UID_PPID) +
|
|
(1 << GLIBTOP_PROC_UID_PGRP) + (1 << GLIBTOP_PROC_UID_SESSION) +
|
|
(1 << GLIBTOP_PROC_UID_TTY) + (1 << GLIBTOP_PROC_UID_TPGID);
|
|
|
|
void
|
|
glibtop_get_proc_uid_p (glibtop *server, glibtop_proc_uid *buf,
|
|
pid_t pid)
|
|
{
|
|
struct tbl_procinfo procinfo;
|
|
task_basic_info_data_t taskinfo;
|
|
int ret, info_count;
|
|
task_t thistask;
|
|
|
|
glibtop_open_p (server, 0, 0);
|
|
|
|
memset (buf, 0, sizeof (glibtop_proc_uid));
|
|
|
|
/* !!! THE FOLLOWING CODE RUNS SUID ROOT - CHANGE WITH CAUTION !!! */
|
|
|
|
setreuid (server->machine.uid, server->machine.euid);
|
|
|
|
ret = table (TBL_PROCINFO, pid, (char *) &procinfo, 1,
|
|
sizeof (struct tbl_procinfo));
|
|
|
|
if (setreuid (server->machine.euid, server->machine.uid))
|
|
_exit (1);
|
|
|
|
/* !!! END OF SUID ROOT PART !!! */
|
|
|
|
if (ret != 1) return;
|
|
|
|
buf->uid = procinfo.pi_ruid;
|
|
buf->euid = procinfo.pi_svuid;
|
|
buf->gid = procinfo.pi_rgid;
|
|
buf->egid = procinfo.pi_svgid;
|
|
|
|
buf->pid = procinfo.pi_pid;
|
|
buf->ppid = procinfo.pi_ppid;
|
|
buf->pgrp = procinfo.pi_pgrp;
|
|
buf->tty = procinfo.pi_ttyd;
|
|
buf->session = procinfo.pi_session;
|
|
buf->tpgid = procinfo.pi_tpgrp;
|
|
|
|
buf->flags = _glibtop_sysdeps_proc_uid;
|
|
|
|
/* !!! THE FOLLOWING CODE RUNS SUID ROOT - CHANGE WITH CAUTION !!! */
|
|
|
|
setreuid (server->machine.uid, server->machine.euid);
|
|
|
|
/* Get task structure. */
|
|
|
|
ret = task_by_unix_pid (task_self(), procinfo.pi_pid, &thistask);
|
|
|
|
if (ret == KERN_SUCCESS) {
|
|
|
|
/* Get taskinfo about this task. */
|
|
|
|
info_count = TASK_BASIC_INFO_COUNT;
|
|
|
|
ret = task_info (thistask, TASK_BASIC_INFO,
|
|
(task_info_t) &taskinfo, &info_count);
|
|
|
|
}
|
|
|
|
if (setreuid (server->machine.euid, server->machine.uid))
|
|
_exit (1);
|
|
|
|
/* !!! END OF SUID ROOT PART !!! */
|
|
|
|
if (ret != KERN_SUCCESS) return;
|
|
|
|
buf->priority = taskinfo.base_priority;
|
|
|
|
buf->flags += (1 << GLIBTOP_PROC_UID_PRIORITY);
|
|
|
|
errno = 0;
|
|
|
|
ret = getpriority (PRIO_PROCESS, pid);
|
|
|
|
if ((ret == -1) && (errno != 0)) return;
|
|
|
|
buf->nice = ret;
|
|
|
|
buf->flags += (1 << GLIBTOP_PROC_UID_NICE);
|
|
}
|