mirrors/pulseaudio
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pulseaudio/pulseaudio.git synced 2025-11-09 13:29:59 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

add support for capabilities

Browse source 
git-svn-id: file:///home/lennart/svn/public/pulseaudio/trunk@233 fefdeb5f-60dc-0310-8127-8f9354f1896f
This commit is contained in:
Lennart Poettering 2004-09-23 15:47:11 +00:00
parent 370ff1d7cd
commit 03ee5e2b44
10 changed files with 161 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

106
polyp/caps.c Normal file
View file

@ -0,0 +1,106 @@
/* $Id$ */
/***
This file is part of polypaudio.
polypaudio is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published
by the Free Software Foundation; either version 2 of the License,
or (at your option) any later version.
polypaudio is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
You should have received a copy of the GNU General Public License
along with polypaudio; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
USA.
***/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <assert.h>
#include <unistd.h>
#include <errno.h>
#include <string.h>
#ifdef HAVE_SYS_CAPABILITY_H
#include <sys/capability.h>
#endif
#include "log.h"
#include "caps.h"
void pa_drop_root(void) {
if (getuid() != 0 && geteuid() == 0) {
pa_log(__FILE__": Started SUID root, dropping root rights.\n");
setuid(getuid());
seteuid(getuid());
}
}
#ifdef HAVE_SYS_CAPABILITY_H
int pa_limit_caps(void) {
int r = -1;
cap_t caps;
cap_value_t nice_cap = CAP_SYS_NICE;
caps = cap_init();
assert(caps);
cap_clear(caps);
cap_set_flag(caps, CAP_EFFECTIVE, 1, &nice_cap, CAP_SET);
cap_set_flag(caps, CAP_PERMITTED, 1, &nice_cap, CAP_SET);
if (cap_set_proc(caps) < 0)
goto fail;
pa_log(__FILE__": Started SUID root, capabilities limited.\n");
r = 0;
fail:
cap_free (caps);
return r;
}
int pa_drop_caps(void) {
cap_t caps;
int r = -1;
caps = cap_init();
assert(caps);
cap_clear(caps);
if (cap_set_proc(caps) < 0)
goto fail;
pa_drop_root();
r = 0;
fail:
cap_free (caps);
return r;
}
#else
int pa_limit_caps(void) {
return 0;
}
int pa_drop_caps(void) {
pa_drop_root();
return 0;
}
#endif