2 // Automated Testing Framework (atf)
4 // Copyright (c) 2007 The NetBSD Foundation, Inc.
5 // All rights reserved.
7 // Redistribution and use in source and binary forms, with or without
8 // modification, are permitted provided that the following conditions
10 // 1. Redistributions of source code must retain the above copyright
11 // notice, this list of conditions and the following disclaimer.
12 // 2. Redistributions in binary form must reproduce the above copyright
13 // notice, this list of conditions and the following disclaimer in the
14 // documentation and/or other materials provided with the distribution.
16 // THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND
17 // CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
18 // INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
19 // MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20 // IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS BE LIABLE FOR ANY
21 // DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 // DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
23 // GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
24 // INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
25 // IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
26 // OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
27 // IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31 #include <sys/param.h>
32 #include <sys/types.h>
45 namespace impl
= tools::user
;
46 #define IMPL_NAME "tools::user"
55 impl::drop_privileges(const std::pair
< int, int > ids
)
57 if (::setgid(ids
.second
) == -1)
58 throw std::runtime_error("Failed to drop group privileges");
59 if (::setuid(ids
.first
) == -1)
60 throw std::runtime_error("Failed to drop user privileges");
64 impl::get_user_ids(const std::string
& user
)
66 const struct passwd
* pw
= ::getpwnam(user
.c_str());
68 throw std::runtime_error("Failed to get information for user " + user
);
69 return std::make_pair(pw
->pw_uid
, pw
->pw_gid
);
73 impl::is_member_of_group(gid_t gid
)
75 static gid_t groups
[NGROUPS_MAX
];
76 static int ngroups
= -1;
81 ngroups
= getgroups(NGROUPS_MAX
, groups
);
86 for (i
= 0; !found
&& i
< ngroups
; i
++)
95 return ::geteuid() == 0;
99 impl::is_unprivileged(void)
101 return ::geteuid() != 0;