JehanneOS
/
newlib
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

* grp.cc (getgroups): If `allow_ntsec' is set, use the process token 

information to evaluate the groups list.
This commit is contained in:
Corinna Vinschen 2001-04-16 14:02:42 +00:00
parent 8a3adc99ec
commit c4548fb4fa
2 changed files with 59 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
winsup/cygwin/ChangeLog
View File

@ -1,3 +1,8 @@
Mon Apr 16 16:01:00 2001 Corinna Vinschen <corinna@vinschen.de>
* grp.cc (getgroups): If `allow_ntsec' is set, use the process token
information to evaluate the groups list.
Mon Apr 16 00:08:02 2001 Christopher Faylor <cgf@cygnus.com>
* features.h: Remove this file as it is now being supplied by newlib.

35
winsup/cygwin/grp.cc
View File

@ -21,6 +21,7 @@ details. */
#include "pinfo.h"
#include "cygheap.h"
#include "cygerrno.h"
#include "security.h"
/* Read /etc/group only once for better performance. This is done
on the first call that needs information from it. */
@ -239,11 +240,42 @@ setgrent ()
int
getgroups (int gidsetsize, gid_t *grouplist, gid_t gid, const char *username)
{
HANDLE hToken = NULL;
char buf[4096];
DWORD size;
int cnt = 0;
if (!group_in_memory_p)
read_etc_group();
int cnt = 0;
if (allow_ntsec &&
OpenProcessToken (hMainProc, TOKEN_QUERY, &hToken) &&
GetTokenInformation (hToken, TokenGroups, buf, 4096, &size))
{
TOKEN_GROUPS *groups = (TOKEN_GROUPS *) buf;
char ssid[256];
for (DWORD pg = 0; pg < groups->GroupCount; ++pg)
{
convert_sid_to_string_sid (groups->Groups[pg].Sid, ssid);
for (int gg = 0; gg < curr_lines; ++gg)
{
if (!strcmp (group_buf[gg].gr_passwd, ssid))
{
if (cnt < gidsetsize)
grouplist[cnt] = group_buf[gg].gr_gid;
++cnt;
if (gidsetsize && cnt > gidsetsize)
goto error;
break;
}
}
}
CloseHandle (hToken);
return cnt;
}
else
{
for (int i = 0; i < curr_lines; ++i)
if (gid == group_buf[i].gr_gid)
{
@ -264,6 +296,7 @@ getgroups (int gidsetsize, gid_t *grouplist, gid_t gid, const char *username)
goto error;
}
return cnt;
}
error:
set_errno (EINVAL);