Changeset 103581 in vbox for trunk/src/VBox/Runtime/r3/posix/process-creation-posix.cpp

Timestamp:

Feb 26, 2024 5:54:50 PM (9 months ago)

Author:

vboxsync

Message:

IPRT/process-creation-posix: Try hardcoded paths for macOS if loading the PAM .so files fail if SIP is enabled when authenticating via rtProcPosixAuthenticateUsingPam(). This commits patch v1 of bugref:9946

File:

• trunk/src/VBox/Runtime/r3/posix/process-creation-posix.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/r3/posix/process-creation-posix.cpp

@@ -327 +327 @@
                                    &hModPam);
 # endif
+# ifdef RT_OS_DARWIN
+        /* Try absolute paths on Darwin (if SIP is enabled). */
+        if (RT_FAILURE(rc))
+        {
+#  define MAKE_ABSOLUTE(a_Lib) "/usr/lib" # a_Lib
+            rc = RTLdrLoadEx(pszLast = MAKE_ABSOLUTE(IPRT_LIBPAM_FILE_1), &hModPam, RTLDRLOAD_FLAGS_GLOBAL | RTLDRLOAD_FLAGS_NO_UNLOAD
+                             | RTLDRLOAD_FLAGS_SO_VER_RANGE(IPRT_LIBPAM_FILE_1_FIRST_VER, IPRT_LIBPAM_FILE_1_END_VER),
+                             NULL);
+#  ifdef IPRT_LIBPAM_FILE_2
+            if (RT_FAILURE(rc))
+                rc = RTLdrLoadEx(pszLast = MAKE_ABSOLUTE(IPRT_LIBPAM_FILE_2), &hModPam, RTLDRLOAD_FLAGS_GLOBAL | RTLDRLOAD_FLAGS_NO_UNLOAD
+                                 | RTLDRLOAD_FLAGS_SO_VER_RANGE(IPRT_LIBPAM_FILE_2_FIRST_VER, IPRT_LIBPAM_FILE_2_END_VER),
+                                 NULL);
+#  endif
+#  ifdef IPRT_LIBPAM_FILE_3
+            if (RT_FAILURE(rc))
+                rc = RTLdrLoadEx(pszLast = MAKE_ABSOLUTE(IPRT_LIBPAM_FILE_3), &hModPam, RTLDRLOAD_FLAGS_GLOBAL | RTLDRLOAD_FLAGS_NO_UNLOAD
+                                 | RTLDRLOAD_FLAGS_SO_VER_RANGE(IPRT_LIBPAM_FILE_3_FIRST_VER, IPRT_LIBPAM_FILE_3_END_VER),
+                                 NULL);
+#  endif
+#  undef MAKE_ABSOLUTE
+        }
+# endif /* RT_OS_DARWIN */
+
         if (RT_FAILURE(rc))
         {