-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Support Illumos/Solaris fine-grained privileges
Includes a pre-auth privsep sandbox and several pledge() emulations. bz#2511, patch by Alex Wilson. ok dtucker@
- Loading branch information
Showing
11 changed files
with
358 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,71 @@ | ||
/* | ||
* Copyright (c) 2015 Joyent, Inc | ||
* Author: Alex Wilson <alex.wilson@joyent.com> | ||
* | ||
* Permission to use, copy, modify, and distribute this software for any | ||
* purpose with or without fee is hereby granted, provided that the above | ||
* copyright notice and this permission notice appear in all copies. | ||
* | ||
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
*/ | ||
|
||
#include "includes.h" | ||
|
||
#include <sys/types.h> | ||
|
||
#include <stdarg.h> | ||
#include <unistd.h> | ||
|
||
#include "platform.h" | ||
|
||
#include "openbsd-compat/openbsd-compat.h" | ||
|
||
/* | ||
* Drop any fine-grained privileges that are not needed for post-startup | ||
* operation of ssh-agent | ||
* | ||
* Should be as close as possible to pledge("stdio cpath unix id proc exec", ...) | ||
*/ | ||
void | ||
platform_pledge_agent(void) | ||
{ | ||
#ifdef USE_SOLARIS_PRIVS | ||
/* | ||
* Note: Solaris priv dropping is closer to tame() than pledge(), but | ||
* we will use what we have. | ||
*/ | ||
solaris_drop_privs_root_pinfo_net(); | ||
#endif | ||
} | ||
|
||
/* | ||
* Drop any fine-grained privileges that are not needed for post-startup | ||
* operation of sftp-server | ||
*/ | ||
void | ||
platform_pledge_sftp_server(void) | ||
{ | ||
#ifdef USE_SOLARIS_PRIVS | ||
solaris_drop_privs_pinfo_net_fork_exec(); | ||
#endif | ||
} | ||
|
||
/* | ||
* Drop any fine-grained privileges that are not needed for the post-startup | ||
* operation of the SSH client mux | ||
* | ||
* Should be as close as possible to pledge("stdio proc tty", ...) | ||
*/ | ||
void | ||
platform_pledge_mux(void) | ||
{ | ||
#ifdef USE_SOLARIS_PRIVS | ||
solaris_drop_privs_root_pinfo_net_exec(); | ||
#endif | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.