mirrors/wayland
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/wayland/wayland.git synced 2026-03-24 09:06:21 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge branch 'main' into 'main'

Browse source 
server: wl_client: introduce method for getting client security context

See merge request wayland/wayland!460
This commit is contained in:
Rahul Sandhu 2026-03-03 22:35:52 +00:00
commit 3f77d21818
4 changed files with 74 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

37
src/wayland-server.c
View file

@ -82,6 +82,7 @@ struct wl_client {
pid_t pid;
uid_t uid;
gid_t gid;
char *security_context;
bool error;
struct wl_priv_signal resource_created_signal;
void *data;
@ -654,6 +655,40 @@ wl_client_get_credentials(const struct wl_client *client,
*gid = client->gid;
}
/** Return Security context for the client
*
* \param client The display object
* \param security_context Returns the security_context, or NULL if
* a security context could not be obtained.
*
* This function returns the security context for the given client.
* The credentials come from getsockopt() with SO_PEERSEC, on the
* client socket fd.
*
* Be aware that for clients that a compositor forks and execs and
* then connects using socketpair(), this function will return the
* security context for the compositor. The security context for
* the socketpair are set at creation time in the compositor.
*
* \memberof wl_client
*/
WL_EXPORT void
wl_client_get_security_context(struct wl_client *client,
char **security_context)
{
// Only initalise the security context if we have to
// so we don't waste heap space.
if (!client->security_context) {
if (wl_os_socket_peersec(wl_connection_get_fd(client->connection),
&client->security_context) != 0) {
*security_context = NULL;
return;
}
}
*security_context = client->security_context;
}
/** Get the file descriptor for the client
*
* \param client The display object
@ -1019,6 +1054,8 @@ wl_client_destroy(struct wl_client *client)
wl_priv_signal_final_emit(&client->destroy_late_signal, client);
free(client->security_context);
wl_list_remove(&client->resource_created_signal.listener_list);
if (client->data_dtor)