mirror of https://github.com/trapexit/mergerfs.git
Browse Source
make changing credentials opportunistic + per thread setgroups cache
make changing credentials opportunistic + per thread setgroups cache
closes #129,#131pull/135/head
Antonio SJ Musumeci
9 years ago
31 changed files with 381 additions and 169 deletions
-
6Makefile
-
2src/access.cpp
-
2src/chmod.cpp
-
2src/chown.cpp
-
5src/create.cpp
-
2src/getattr.cpp
-
2src/getxattr.cpp
-
3src/init.cpp
-
2src/ioctl.cpp
-
5src/link.cpp
-
2src/listxattr.cpp
-
5src/mkdir.cpp
-
6src/mknod.cpp
-
2src/open.cpp
-
2src/readdir.cpp
-
2src/readlink.cpp
-
2src/removexattr.cpp
-
2src/rename.cpp
-
2src/rmdir.cpp
-
2src/setxattr.cpp
-
2src/statfs.cpp
-
2src/symlink.cpp
-
2src/truncate.cpp
-
63src/ugid.cpp
-
23src/ugid.hpp
-
69src/ugid_linux.hpp
-
36src/ugid_linux.ipp
-
107src/ugid_rwlock.hpp
-
50src/ugid_rwlock.ipp
-
2src/unlink.cpp
-
2src/utimens.cpp
@ -0,0 +1,107 @@ |
|||||
|
/*
|
||||
|
The MIT License (MIT) |
||||
|
|
||||
|
Copyright (c) 2014 Antonio SJ Musumeci <trapexit@spawn.link> |
||||
|
|
||||
|
Permission is hereby granted, free of charge, to any person obtaining a copy |
||||
|
of this software and associated documentation files (the "Software"), to deal |
||||
|
in the Software without restriction, including without limitation the rights |
||||
|
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell |
||||
|
copies of the Software, and to permit persons to whom the Software is |
||||
|
furnished to do so, subject to the following conditions: |
||||
|
|
||||
|
The above copyright notice and this permission notice shall be included in |
||||
|
all copies or substantial portions of the Software. |
||||
|
|
||||
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR |
||||
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, |
||||
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE |
||||
|
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER |
||||
|
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, |
||||
|
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN |
||||
|
THE SOFTWARE. |
||||
|
*/ |
||||
|
|
||||
|
#include <sys/types.h>
|
||||
|
#include <sys/stat.h>
|
||||
|
#include <unistd.h>
|
||||
|
#include <pthread.h>
|
||||
|
|
||||
|
namespace mergerfs |
||||
|
{ |
||||
|
namespace ugid |
||||
|
{ |
||||
|
extern uid_t currentuid; |
||||
|
extern gid_t currentgid; |
||||
|
extern pthread_rwlock_t rwlock; |
||||
|
|
||||
|
static |
||||
|
void |
||||
|
ugid_set(const uid_t newuid, |
||||
|
const gid_t newgid) |
||||
|
{ |
||||
|
pthread_rwlock_rdlock(&rwlock); |
||||
|
|
||||
|
if(newuid == currentuid && newgid == currentgid) |
||||
|
return; |
||||
|
|
||||
|
pthread_rwlock_unlock(&rwlock); |
||||
|
pthread_rwlock_wrlock(&rwlock); |
||||
|
|
||||
|
if(newuid == currentuid && newgid == currentgid) |
||||
|
return; |
||||
|
|
||||
|
if(currentuid != 0) |
||||
|
{ |
||||
|
::seteuid(0); |
||||
|
::setegid(0); |
||||
|
} |
||||
|
|
||||
|
if(newgid) |
||||
|
{ |
||||
|
::setegid(newgid); |
||||
|
initgroups(newuid,newgid); |
||||
|
} |
||||
|
|
||||
|
if(newuid) |
||||
|
::seteuid(newuid); |
||||
|
|
||||
|
currentuid = newuid; |
||||
|
currentgid = newgid; |
||||
|
} |
||||
|
|
||||
|
struct Set |
||||
|
{ |
||||
|
Set(const uid_t newuid, |
||||
|
const gid_t newgid) |
||||
|
{ |
||||
|
ugid_set(newuid,newgid); |
||||
|
} |
||||
|
|
||||
|
~Set() |
||||
|
{ |
||||
|
pthread_rwlock_unlock(&rwlock); |
||||
|
} |
||||
|
}; |
||||
|
|
||||
|
struct SetRootGuard |
||||
|
{ |
||||
|
SetRootGuard() : |
||||
|
prevuid(currentuid), |
||||
|
prevgid(currentgid) |
||||
|
{ |
||||
|
pthread_rwlock_unlock(&rwlock); |
||||
|
ugid_set(0,0); |
||||
|
} |
||||
|
|
||||
|
~SetRootGuard() |
||||
|
{ |
||||
|
pthread_rwlock_unlock(&rwlock); |
||||
|
ugid_set(prevuid,prevgid); |
||||
|
} |
||||
|
|
||||
|
const uid_t prevuid; |
||||
|
const gid_t prevgid; |
||||
|
}; |
||||
|
} |
||||
|
} |
Write
Preview
Loading…
Cancel
Save
Reference in new issue