1 | /// ----------------------------------------*- mode: C++; -*--
|
---|
2 | /// @file setuid.h
|
---|
3 | /// Change effective user ID in a thread-safe way
|
---|
4 | /// ----------------------------------------------------------
|
---|
5 | /// $Id: setuid.h 2549 2007-04-02 22:17:37Z bless $
|
---|
6 | /// $HeadURL: https://svn.ipv6.tm.uka.de/nsis/protlib/trunk/include/setuid.h $
|
---|
7 | // ===========================================================
|
---|
8 | //
|
---|
9 | // Copyright (C) 2005-2007, all rights reserved by
|
---|
10 | // - Institute of Telematics, Universitaet Karlsruhe (TH)
|
---|
11 | //
|
---|
12 | // More information and contact:
|
---|
13 | // https://projekte.tm.uka.de/trac/NSIS
|
---|
14 | //
|
---|
15 | // This program is free software; you can redistribute it and/or modify
|
---|
16 | // it under the terms of the GNU General Public License as published by
|
---|
17 | // the Free Software Foundation; version 2 of the License
|
---|
18 | //
|
---|
19 | // This program is distributed in the hope that it will be useful,
|
---|
20 | // but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
22 | // GNU General Public License for more details.
|
---|
23 | //
|
---|
24 | // You should have received a copy of the GNU General Public License along
|
---|
25 | // with this program; if not, write to the Free Software Foundation, Inc.,
|
---|
26 | // 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
---|
27 | //
|
---|
28 | // ===========================================================
|
---|
29 | /** @ingroup tssetuid
|
---|
30 | *
|
---|
31 | * Thread-safe setuid support for linux.
|
---|
32 | * Change effective user ID in a thread-safe way.
|
---|
33 | *
|
---|
34 | * tsdb::init() must be called before calling setuid::init().
|
---|
35 | */
|
---|
36 |
|
---|
37 | #ifndef THREADSAFE_SETUID_H
|
---|
38 | #define THREADSAFE_SETUID_H
|
---|
39 |
|
---|
40 | #include <sys/types.h>
|
---|
41 | #include <pthread.h>
|
---|
42 | #include <string>
|
---|
43 |
|
---|
44 | #include "protlib_types.h"
|
---|
45 | #include "cleanuphandler.h"
|
---|
46 |
|
---|
47 | namespace protlib {
|
---|
48 |
|
---|
49 | /** @addtogroup tssetuid Thread-safe setuid program support
|
---|
50 | * @{
|
---|
51 | */
|
---|
52 |
|
---|
53 | /// Thread-safe setuid
|
---|
54 | /** This class provieds class methods for changing the effective user ID of
|
---|
55 | * the current process.
|
---|
56 | */
|
---|
57 | class setuid {
|
---|
58 | public:
|
---|
59 | /// initialize setuid
|
---|
60 | static void init();
|
---|
61 | /// cleanup setuid resources
|
---|
62 | static void end();
|
---|
63 | /// turn on setuid mode
|
---|
64 | static void on();
|
---|
65 | /// turn off setuid mode
|
---|
66 | static void off();
|
---|
67 | private:
|
---|
68 | /// init state
|
---|
69 | static bool is_init;
|
---|
70 | /// setuid mutex
|
---|
71 | static pthread_mutex_t mutex;
|
---|
72 | /// setuid counter
|
---|
73 | static uint32 count;
|
---|
74 | /// file user ID
|
---|
75 | static uid_t file_userid;
|
---|
76 | /// file user name
|
---|
77 | static string file_username;
|
---|
78 | /// real user ID
|
---|
79 | static uid_t real_userid;
|
---|
80 | /// real user name
|
---|
81 | static string real_username;
|
---|
82 | /// are we using setuid?
|
---|
83 | static bool is_setuid;
|
---|
84 | }; // end class setuid
|
---|
85 |
|
---|
86 | /// Turn on setuid mode and install cleanup handler.
|
---|
87 | #define BEGIN_SETUID_MODE protlib::setuid::on(); install_cleanup(call_void_fun,protlib::setuid::off)
|
---|
88 | #define END_SETUID_MODE uninstall_cleanup(1)
|
---|
89 |
|
---|
90 | //@}
|
---|
91 |
|
---|
92 | } // end namespace protlib
|
---|
93 |
|
---|
94 | #endif
|
---|