diff options
Diffstat (limited to 'libtrivfs/io-reauthenticate.c')
-rw-r--r-- | libtrivfs/io-reauthenticate.c | 94 |
1 files changed, 94 insertions, 0 deletions
diff --git a/libtrivfs/io-reauthenticate.c b/libtrivfs/io-reauthenticate.c new file mode 100644 index 00000000..df0ed2ee --- /dev/null +++ b/libtrivfs/io-reauthenticate.c @@ -0,0 +1,94 @@ +/* + Copyright (C) 1993,94,95,96,2000,01,02 Free Software Foundation, Inc. + +This file is part of the GNU Hurd. + +The GNU Hurd is free software; you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation; either version 2, or (at your option) +any later version. + +The GNU Hurd is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with the GNU Hurd; see the file COPYING. If not, write to +the Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. */ + +/* Written by Michael I. Bushnell. */ + +#include "priv.h" +#include "trivfs_io_S.h" +#include <assert.h> +#include <string.h> + +kern_return_t +trivfs_S_io_reauthenticate (struct trivfs_protid *cred, + mach_port_t reply, + mach_msg_type_name_t replytype, + mach_port_t rendport) +{ + struct trivfs_protid *newcred; + error_t err; + auth_t auth; + mach_port_t newright; + + if (cred == 0) + return EOPNOTSUPP; + + do + err = ports_create_port_noinstall (cred->po->cntl->protid_class, + cred->po->cntl->protid_bucket, + sizeof (struct trivfs_protid), + &newcred); + while (err == EINTR); + if (err) + return err; + + auth = getauth (); + newright = ports_get_send_right (newcred); + assert (newright != MACH_PORT_NULL); + + err = iohelp_reauth (&newcred->user, auth, rendport, newright, 1); + mach_port_deallocate (mach_task_self (), rendport); + mach_port_deallocate (mach_task_self (), auth); + if (err) + return err; + + mach_port_deallocate (mach_task_self (), newright); + if (idvec_contains (newcred->user->uids, 0)) + newcred->isroot = 1; + + newcred->hook = cred->hook; + newcred->po = cred->po; + refcount_ref (&newcred->po->refcnt); + + do + err = io_restrict_auth (newcred->po->cntl->underlying, &newcred->realnode, + newcred->user->uids->ids, + newcred->user->uids->num, + newcred->user->gids->ids, + newcred->user->gids->num); + while (err == EINTR); + if (!err && trivfs_protid_create_hook) + { + do + err = (*trivfs_protid_create_hook) (newcred); + while (err == EINTR); + if (err) + mach_port_deallocate (mach_task_self (), newcred->realnode); + } + + if (err) + /* Signal that the user destroy hook shouldn't be called on NEWCRED. */ + newcred->realnode = MACH_PORT_NULL; + + mach_port_move_member (mach_task_self (), newcred->pi.port_right, + cred->po->cntl->protid_bucket->portset); + + ports_port_deref (newcred); + + return err; +} |