Changeset 29582 in vbox for trunk/src/VBox

Timestamp:

May 17, 2010 7:40:34 PM (15 years ago)

Author:

vboxsync

Message:

Runtime/r3/posix: support executing as different user (Linux only for now)

Location:

trunk/src/VBox/Runtime

Files:

• Makefile.kmk (modified) (1 diff)
• r3/posix/process-posix.cpp (modified) (3 diffs)

trunk/src/VBox/Runtime/Makefile.kmk

@@ -1060 +1060 @@
  VBoxRT_LIBS                  += lzo2
 endif
+VBoxRT_LIBS.linux              = \
+        crypt
 VBoxRT_LIBS.darwin             = \
         iconv

trunk/src/VBox/Runtime/r3/posix/process-posix.cpp

@@ -39 +39 @@
 #include <fcntl.h>
 #include <signal.h>
+#if defined(RT_OS_LINUX)
+# include <pwd.h>
+# include <shadow.h>
+#endif
 #if defined(RT_OS_LINUX) || defined(RT_OS_OS2)
 # define HAVE_POSIX_SPAWN 1
@@ -61 +65 @@
 #include "internal/process.h"
 
+
+/**
+ * Check the credentials and return the gid/uid of user.
+ *
+ * @param    pszUser     username
+ * @param    pszPasswd   password
+ * @param    gid         where to store the GID of the user
+ * @param    uid         where to store the UID of the user
+ * @returns IPRT status code
+ */
+static int rtCheckCredentials(const char *pszUser, const char *pszPasswd, gid_t *gid, uid_t *uid)
+{
+#if defined(RT_OS_LINUX)
+    struct passwd *pw;
+
+    pw = getpwnam(pszUser);
+    if (!pw)
+        return VERR_PERMISSION_DENIED;
+
+    if (!pszPasswd)
+        pszPasswd = "";
+
+    struct spwd *spwd;
+    /* works only if /etc/shadow is accessible */
+    spwd = getspnam(pszUser);
+    if (spwd)
+        pw->pw_passwd = spwd->sp_pwdp;
+
+    char *pszEncPasswd = crypt(pszPasswd, pw->pw_passwd);
+    if (strcmp(pszEncPasswd, pw->pw_passwd))
+        return VERR_PERMISSION_DENIED;
+
+    *gid = pw->pw_gid;
+    *uid = pw->pw_uid;
+    return VINF_SUCCESS;
+#else
+    return VERR_PERMISSION_DENIED;
+#endif
+}
 
 
@@ -148 +191 @@
     if (pszAsUser)
     {
-        AssertMsgFailed(("Implement get uid by name lookup\n"));
-        return VERR_NOT_IMPLEMENTED;
+        rc = rtCheckCredentials(pszAsUser, pszPassword, &gid, &uid);
+        if (RT_FAILURE(rc))
+            return rc;
     }