diff options
| author | Corinna Vinschen <corinna@vinschen.de> | 2009-10-13 10:23:31 +0000 |
|---|---|---|
| committer | Corinna Vinschen <corinna@vinschen.de> | 2009-10-13 10:23:31 +0000 |
| commit | 0191627a260aee41f464d3e0a2c2d4d067cad5ad (patch) | |
| tree | fbb1b641d62b3a8955ff1c98b293c8e4fabe4e33 /winsup/cygwin/spawn.cc | |
| parent | 6c41e710c91ef093e58e6b6923b0696d9383a685 (diff) | |
| download | cygnal-0191627a260aee41f464d3e0a2c2d4d067cad5ad.tar.gz cygnal-0191627a260aee41f464d3e0a2c2d4d067cad5ad.tar.bz2 cygnal-0191627a260aee41f464d3e0a2c2d4d067cad5ad.zip | |
* include/sys/cygwin.h: Add new cygwin_getinfo_type
CW_SET_EXTERNAL_TOKEN.
Add new enum CW_TOKEN_IMPERSONATION, CW_TOKEN_RESTRICTED.
* cygheap.h (cyguser): New flags ext_token_is_restricted,
curr_token_is_restricted and setuid_to_restricted.
* external.cc (cygwin_internal): Add CW_SET_EXTERNAL_TOKEN.
* sec_auth.cc (set_imp_token): New function.
(cygwin_set_impersonation_token): Call set_imp_token ().
* security.h (set_imp_token): New prototype.
* spawn.cc (spawn_guts): Use CreateProcessAsUserW if restricted token
was enabled by setuid(). Do not create new window station in this case.
* syscalls.cc (seteuid32): Add handling of restricted external tokens.
Set HANDLE_FLAG_INHERIT for primary token.
(setuid32): Set setuid_to_restricted flag.
* uinfo.cc (uinfo_init): Do not reimpersonate if restricted token was
enabled by setuid (). Initialize user.*_restricted flags.
Diffstat (limited to 'winsup/cygwin/spawn.cc')
| -rw-r--r-- | winsup/cygwin/spawn.cc | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/winsup/cygwin/spawn.cc b/winsup/cygwin/spawn.cc index 5c86c4b5c..a6ac9f0e7 100644 --- a/winsup/cygwin/spawn.cc +++ b/winsup/cygwin/spawn.cc @@ -537,7 +537,8 @@ loop: if (!cygheap->user.issetuid () || (cygheap->user.saved_uid == cygheap->user.real_uid && cygheap->user.saved_gid == cygheap->user.real_gid - && !cygheap->user.groups.issetgroups ())) + && !cygheap->user.groups.issetgroups () + && !cygheap->user.setuid_to_restricted)) { rc = CreateProcessW (runpath, /* image name - with full path */ wone_line, /* what was passed to exec */ @@ -571,7 +572,8 @@ loop: risk, but we don't want to disable this behaviour for older OSes because it's still heavily used by some users. They have been warned. */ - if (wcscasecmp (wstname, L"WinSta0") != 0) + if (!cygheap->user.setuid_to_restricted + && wcscasecmp (wstname, L"WinSta0") != 0) { WCHAR sid[128]; |