diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-15 20:46:53 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-15 20:46:53 +0000 |
commit | 19da58be2d9359a9641381feb559be0b918ef710 (patch) | |
tree | 109724175f07436696f51b14b5abbd3f4d704d6d /libsubid/api.c | |
parent | Initial commit. (diff) | |
download | shadow-19da58be2d9359a9641381feb559be0b918ef710.tar.xz shadow-19da58be2d9359a9641381feb559be0b918ef710.zip |
Adding upstream version 1:4.13+dfsg1.upstream/1%4.13+dfsg1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | libsubid/api.c | 108 |
1 files changed, 108 insertions, 0 deletions
diff --git a/libsubid/api.c b/libsubid/api.c new file mode 100644 index 0000000..00da74f --- /dev/null +++ b/libsubid/api.c @@ -0,0 +1,108 @@ +/* + * SPDX-FileCopyrightText: 2020 Serge Hallyn + * + * SPDX-License-Identifier: BSD-3-Clause + */ + +#include <config.h> +#include <fcntl.h> +#include <stdio.h> +#include <errno.h> +#include <stdlib.h> +#include <string.h> +#include <pwd.h> +#include <stdbool.h> +#include "subordinateio.h" +#include "idmapping.h" +#include "subid.h" +#include "shadowlog.h" + +bool subid_init(const char *progname, FILE * logfd) +{ + FILE *shadow_logfd; + if (progname) { + progname = strdup(progname); + if (!progname) + return false; + log_set_progname(progname); + } else { + log_set_progname("(libsubid)"); + } + + if (logfd) { + log_set_logfd(logfd); + return true; + } + shadow_logfd = fopen("/dev/null", "w"); + if (!shadow_logfd) { + log_set_logfd(stderr); + return false; + } + log_set_logfd(shadow_logfd); + return true; +} + +static +int get_subid_ranges(const char *owner, enum subid_type id_type, struct subid_range **ranges) +{ + return list_owner_ranges(owner, id_type, ranges); +} + +int subid_get_uid_ranges(const char *owner, struct subid_range **ranges) +{ + return get_subid_ranges(owner, ID_TYPE_UID, ranges); +} + +int subid_get_gid_ranges(const char *owner, struct subid_range **ranges) +{ + return get_subid_ranges(owner, ID_TYPE_GID, ranges); +} + +static +int get_subid_owner(unsigned long id, enum subid_type id_type, uid_t **owner) +{ + return find_subid_owners(id, id_type, owner); +} + +int subid_get_uid_owners(uid_t uid, uid_t **owner) +{ + return get_subid_owner((unsigned long)uid, ID_TYPE_UID, owner); +} + +int subid_get_gid_owners(gid_t gid, uid_t **owner) +{ + return get_subid_owner((unsigned long)gid, ID_TYPE_GID, owner); +} + +static +bool grant_subid_range(struct subordinate_range *range, bool reuse, + enum subid_type id_type) +{ + return new_subid_range(range, id_type, reuse); +} + +bool subid_grant_uid_range(struct subordinate_range *range, bool reuse) +{ + return grant_subid_range(range, reuse, ID_TYPE_UID); +} + +bool subid_grant_gid_range(struct subordinate_range *range, bool reuse) +{ + return grant_subid_range(range, reuse, ID_TYPE_GID); +} + +static +bool ungrant_subid_range(struct subordinate_range *range, enum subid_type id_type) +{ + return release_subid_range(range, id_type); +} + +bool subid_ungrant_uid_range(struct subordinate_range *range) +{ + return ungrant_subid_range(range, ID_TYPE_UID); +} + +bool subid_ungrant_gid_range(struct subordinate_range *range) +{ + return ungrant_subid_range(range, ID_TYPE_GID); +} |