rt/snapraid
1
0
Fork 0
mirror of https://github.com/amadvance/snapraid.git synced 2026-10-26 10:51:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Abort on privilege switch failures unless errno is EPERM

Browse source
This commit is contained in:
Andrea Mazzoleni 2026-07-02 17:48:52 +02:00
parent 06351413b7
commit 46d1d537a7
1 changed files with 33 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

38
os/unix.c
View file

@ -1411,22 +1411,50 @@ void os_privileges_acquire(void)
{
if (can_switch) {
if (seteuid(0) != 0) {
os_syslog(OS_LVL_INFO, "failed to acquire privileges, errno=%s(%d)", strerror(errno), errno);
if (errno == EPERM) {
/* If EPERM, process lacks permission to switch privileges (e.g. dropped capabilities); continue with active privileges */
os_syslog(OS_LVL_INFO, "permission denied to acquire privileges, continuing with active privileges");
} else {
os_syslog(OS_LVL_INFO, "failed to acquire privileges, errno=%s(%d)", strerror(errno), errno);
os_abort();
}
}
if (setegid(0) != 0) {
os_syslog(OS_LVL_INFO, "failed to acquire group privileges, errno=%s(%d)", strerror(errno), errno);
if (errno == EPERM) {
/* If EPERM, process lacks permission to switch privileges (e.g. dropped capabilities); continue with active privileges */
os_syslog(OS_LVL_INFO, "permission denied to acquire group privileges, continuing with active privileges");
} else {
os_syslog(OS_LVL_INFO, "failed to acquire group privileges, errno=%s(%d)", strerror(errno), errno);
os_abort();
}
}
}
}
void os_privileges_release(void)
{
if (can_switch) {
if (setegid(unpriv_gid) != 0) {
if (can_switch && setegid(unpriv_gid) != 0) {
if (errno == EPERM) {
/*
* If EPERM, process lacks permission to switch privileges (e.g. dropped capabilities); continue with active privileges
*/
os_syslog(OS_LVL_INFO, "permission denied to release group privileges, continuing with active privileges");
can_switch = 0;
} else {
os_syslog(OS_LVL_INFO, "failed to release group privileges, errno=%s(%d)", strerror(errno), errno);
os_abort();
}
if (seteuid(unpriv_uid) != 0) {
}
if (can_switch && seteuid(unpriv_uid) != 0) {
if (errno == EPERM) {
/*
* If EPERM, process lacks permission to switch privileges (e.g. dropped capabilities); continue with active privileges
*/
os_syslog(OS_LVL_INFO, "permission denied to release privileges, continuing with active privileges");
can_switch = 0;
} else {
os_syslog(OS_LVL_INFO, "failed to release privileges, errno=%s(%d)", strerror(errno), errno);
os_abort();
}
}
}