summaryrefslogtreecommitdiff
path: root/lib/uid_wrapper
AgeCommit message (Collapse)AuthorFilesLines
2011-10-27Include uid_wrapper correctly.Andreas Schneider2-3/+6
2011-10-27uid_wrapper: Add uwrap_setresgid().Andreas Schneider2-0/+24
2011-10-27uid_wrapper: Fix build on UNIX platforms.Andreas Schneider1-0/+10
2011-10-27uid_wrapper: Handle euid and egid 0.Andreas Schneider1-7/+29
2011-10-27uid_wrapper: Make sure we have initialized the wrapper.Andreas Schneider1-0/+2
2011-10-27uid_wrapper: Fix prototypes.Andreas Schneider1-2/+2
2011-10-07uid_wrapper: Add uwrap_setresuid().Andreas Schneider2-0/+17
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Fri Oct 7 12:04:05 CEST 2011 on sn-devel-104
2011-10-07uid_wrapper: Add uwrap_setregid().Andreas Schneider2-0/+17
2011-10-07uid_wrapper: Add uwrap_setreuid().Andreas Schneider2-0/+17
2011-10-06s3: Use the uid_wrapperVolker Lendecke1-0/+3
Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org>
2011-10-06uid_wrapper: We have talloc_array_length, no need for an explicit lengthVolker Lendecke1-9/+9
Signed-off-by: Andreas Schneider <asn@samba.org>
2011-02-18uid-wrapper: handle uwrap_enabled() as a macroAndrew Tridgell1-0/+2
some s3 code defines uwrap_enabled() as a macro. Detect this, and don't redeclare the functions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-12s4-waf: Only enable various wrappers if they're actually used.Jelmer Vernooij1-1/+2
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Nov 12 14:33:34 UTC 2010 on sn-devel-104
2010-10-31s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij1-9/+0
The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-23s4: Rename UID_WRAPPER to uid_wrapper.Jelmer Vernooij2-5/+6
Only link to uid_wrapper when it is enabled.
2010-10-21wrapper: make socket_wrapper, uid_wrapper and nss_wrapper private libsAndrew Tridgell1-4/+5
this prevents double instantiation Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-20uid_wrapper: The gid wrapper does not require a destructorVolker Lendecke1-2/+2
Don't use talloc_autofree_context
2010-04-18s4-waf: put the --xxx-wrapper options in 'developer options' groupAndrew Tridgell1-1/+2
2010-04-06s4-waf: added a --enable-selftest option as a shortcutAndrew Tridgell1-1/+3
This is equiavalent to --enable-uid-wrapper --enable-nss-wrapper --enable-socket-wrapper but is easier to remember!
2010-04-06s4-waf: removed the AUTOGENERATED markersAndrew Tridgell1-3/+0
we won't be using the mk -> wscript generator again
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell2-0/+4
them
2010-04-06build: commit all the waf build files in the treeAndrew Tridgell1-0/+9
2010-04-06build: added wrapper optionsAndrew Tridgell1-0/+11
2010-02-05s4:UID wrapper - Make it work on older distributionsMatthias Dieter Wallnöfer2-4/+20
On my older CentOS 4 installation I had the problem with the missing substitution prototypes ("uwrap_*"). So I added them to "uid_wrapper.h". Also, I made the head of the "uid_wrapper.c" file more like the one of "nss_wrapper.c" - it shouldn't change that much, I did it only to be consistent. This patch should fix the build on older distributions while keep it running on newer ones.
2009-08-05fixed a uid_wrapper bug that caused a segv in the RAW-ACLS testAndrew Tridgell1-8/+15
2009-08-05make the UID_WRAPPER skip checks at runtimeAndrew Tridgell2-0/+9
This fixes two issues pointed out by Andrew. It adds a runtime uwrap_enabled() call that wraps the skips needed for uid emulation. It also makes the skip in the directory_create_or_exist() function only change the uid checking code, not the permissions code
2009-08-05added a uid_wrapper libraryAndrew Tridgell4-0/+233
This library intercepts seteuid and related calls, and simulates them in a manner similar to the nss_wrapper and socket_wrapper libraries. This allows us to enable the vfs_unixuid NTVFS module in the build farm, which means we are more likely to catch errors in the token manipulation. The simulation is not complete, but it is enough for Samba4 for now. The major areas of incompleteness are: - no emulation of setreuid, setresuid or saved uids. These would be needed for use in Samba3 - no emulation of ruid changing. That would also be needed for Samba3 - no attempt to emulate file ownership changing, so code that (for example) tests whether st.st_uid matches geteuid() needs special handling