emo/busybox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

setpriv: dump no-new-privs info

Browse Source 
Introduce the ability to dump the state of the no-new-privs flag, which
states whethere it is allowed to grant new privileges.

function                                             old     new   delta
setpriv_main                                         419     467     +48
.rodata                                           145926  145969     +43

Signed-off-by: Patrick Steinhardt <ps@pks.im>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
Patrick Steinhardt 2017-07-06 15:21:43 +02:00 committed by Denys Vlasenko
parent 111cdcf295
commit 10c53b85c9
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
util-linux/setpriv.c
View File

@ -62,6 +62,10 @@
#define PR_SET_NO_NEW_PRIVS 38 #define PR_SET_NO_NEW_PRIVS 38
#endif #endif
#ifndef PR_GET_NO_NEW_PRIVS
#define PR_GET_NO_NEW_PRIVS 39
#endif
enum { enum {
IF_FEATURE_SETPRIV_DUMP(OPTBIT_DUMP,) IF_FEATURE_SETPRIV_DUMP(OPTBIT_DUMP,)
OPTBIT_NNP, OPTBIT_NNP,
@ -76,13 +80,17 @@ static int dump(void)
uid_t ruid, euid, suid; uid_t ruid, euid, suid;
gid_t rgid, egid, sgid; gid_t rgid, egid, sgid;
gid_t *gids; gid_t *gids;
int ngids; int ngids, nnp;
getresuid(&ruid, &euid, &suid); /* never fails in Linux */ getresuid(&ruid, &euid, &suid); /* never fails in Linux */
getresgid(&rgid, &egid, &sgid); /* never fails in Linux */ getresgid(&rgid, &egid, &sgid); /* never fails in Linux */
ngids = 0; ngids = 0;
gids = bb_getgroups(&ngids, NULL); /* never fails in Linux */ gids = bb_getgroups(&ngids, NULL); /* never fails in Linux */
nnp = prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0);
if (nnp < 0)
bb_simple_perror_msg_and_die("prctl: GET_NO_NEW_PRIVS");
printf("uid: %u\n", (unsigned)ruid); printf("uid: %u\n", (unsigned)ruid);
printf("euid: %u\n", (unsigned)euid); printf("euid: %u\n", (unsigned)euid);
printf("gid: %u\n", (unsigned)rgid); printf("gid: %u\n", (unsigned)rgid);
@ -99,7 +107,7 @@ static int dump(void)
fmt = ",%u"; fmt = ",%u";
} }
} }
bb_putchar('\n'); printf("\nno_new_privs: %d\n", nnp);
if (ENABLE_FEATURE_CLEAN_UP) if (ENABLE_FEATURE_CLEAN_UP)
free(gids); free(gids);