Skip to content

Commit

Permalink
Complete LOCAL_PEERCRED support. Cache pid of the remote process in the
Browse files Browse the repository at this point in the history
struct xucred. Do not bump XUCRED_VERSION as struct layout is not changed.

PR:		215202
Differential Revision:	https://reviews.freebsd.org/D20415

(cherry picked from commit c5afec6)
  • Loading branch information
lemul committed Mar 21, 2021
1 parent 097e0b8 commit 925f44f
Show file tree
Hide file tree
Showing 7 changed files with 22 additions and 11 deletions.
2 changes: 1 addition & 1 deletion crypto/heimdal/lib/ipc/server.c
Expand Up @@ -550,7 +550,7 @@ update_client_creds(struct client *c)
{
c->unixrights.uid = peercred.cr_uid;
c->unixrights.gid = peercred.cr_gid;
c->unixrights.pid = 0;
c->unixrights.pid = peercred.cr_pid;
return 1;
}
}
Expand Down
1 change: 1 addition & 0 deletions share/man/man4/unix.4
Expand Up @@ -312,6 +312,7 @@ struct xucred {
uid_t cr_uid; /* effective user id */
short cr_ngroups; /* number of groups */
gid_t cr_groups[XU_NGROUPS]; /* groups */
pid_t cr_pid; /* process id of the sending process */
};
.Ed
The
Expand Down
5 changes: 1 addition & 4 deletions sys/compat/linux/linux_socket.c
Expand Up @@ -1538,10 +1538,7 @@ linux_getsockopt(struct thread *td, struct linux_getsockopt_args *args)
name, &xu, UIO_SYSSPACE, &xulen);
if (error != 0)
return (error);
/*
* XXX Use 0 for pid as the FreeBSD does not cache peer pid.
*/
lxu.pid = 0;
lxu.pid = xu.cr_pid;
lxu.uid = xu.cr_uid;
lxu.gid = xu.cr_gid;
return (copyout(&lxu, PTRIN(args->optval), sizeof(lxu)));
Expand Down
8 changes: 8 additions & 0 deletions sys/kern/kern_prot.c
Expand Up @@ -1931,6 +1931,14 @@ cru2x(struct ucred *cr, struct xucred *xcr)
ngroups * sizeof(*cr->cr_groups));
}

void inline
cru2xt(struct thread *td, struct xucred *xcr)
{

cru2x(td->td_ucred, xcr);
xcr->cr_pid = td->td_proc->p_pid;
}

/*
* Set initial process credentials.
* Callers are responsible for providing the reference for provided credentials.
Expand Down
8 changes: 4 additions & 4 deletions sys/kern/uipc_usrreq.c
Expand Up @@ -892,7 +892,7 @@ uipc_listen(struct socket *so, int backlog, struct thread *td)
SOCK_LOCK(so);
error = solisten_proto_check(so);
if (error == 0) {
cru2x(td->td_ucred, &unp->unp_peercred);
cru2xt(td, &unp->unp_peercred);
solisten_proto(so, backlog);
}
SOCK_UNLOCK(so);
Expand Down Expand Up @@ -1638,7 +1638,7 @@ void
unp_copy_peercred(struct thread *td, struct unpcb *client_unp,
struct unpcb *server_unp, struct unpcb *listen_unp)
{
cru2x(td->td_ucred, &client_unp->unp_peercred);
cru2xt(td, &client_unp->unp_peercred);
client_unp->unp_flags |= UNP_HAVEPC;

memcpy(&server_unp->unp_peercred, &listen_unp->unp_peercred,
Expand Down Expand Up @@ -2812,8 +2812,8 @@ db_print_xucred(int indent, struct xucred *xu)
int comma, i;

db_print_indent(indent);
db_printf("cr_version: %u cr_uid: %u cr_ngroups: %d\n",
xu->cr_version, xu->cr_uid, xu->cr_ngroups);
db_printf("cr_version: %u cr_uid: %u cr_pid: %d cr_ngroups: %d\n",
xu->cr_version, xu->cr_uid, xu->cr_pid, xu->cr_ngroups);
db_print_indent(indent);
db_printf("cr_groups: ");
comma = 0;
Expand Down
7 changes: 6 additions & 1 deletion sys/sys/ucred.h
Expand Up @@ -87,10 +87,14 @@ struct xucred {
uid_t cr_uid; /* effective user id */
short cr_ngroups; /* number of groups */
gid_t cr_groups[XU_NGROUPS]; /* groups */
void *_cr_unused1; /* compatibility with old ucred */
union {
void *_cr_unused1; /* compatibility with old ucred */
pid_t _pid;
} _cr;
};
#define XUCRED_VERSION 0

#define cr_pid _cr._pid
/* This can be used for both ucred and xucred structures. */
#define cr_gid cr_groups[0]

Expand All @@ -114,6 +118,7 @@ void crfree(struct ucred *cr);
struct ucred *crget(void);
struct ucred *crhold(struct ucred *cr);
void cru2x(struct ucred *cr, struct xucred *xcr);
void cru2xt(struct thread *td, struct xucred *xcr);
void crsetgroups(struct ucred *cr, int n, gid_t *groups);
int groupmember(gid_t gid, struct ucred *cred);
#endif /* _KERNEL */
Expand Down
2 changes: 1 addition & 1 deletion usr.sbin/mountd/mountd.c
Expand Up @@ -273,7 +273,7 @@ static struct xucred def_anon = {
(uid_t)65534,
1,
{ (gid_t)65533 },
NULL
{ NULL }
};
static int force_v2 = 0;
static int resvport_only = 1;
Expand Down

0 comments on commit 925f44f

Please sign in to comment.