mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-22 09:39:13 +00:00
229e4e502d
When dumping/restoring for unpriveledged user, check for all sets of IDs to match, just like ptrace-may-attach in the kernel. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
46 lines
1.2 KiB
C
46 lines
1.2 KiB
C
#include <unistd.h>
|
|
#include "crtools.h"
|
|
#include "proc_parse.h"
|
|
#include "log.h"
|
|
|
|
/*
|
|
* UID and GID of user requesting for C/R
|
|
*/
|
|
static unsigned int cr_uid, cr_gid;
|
|
|
|
/*
|
|
* Setup what user is requesting for dump (via rpc or using
|
|
* suid bit on crtools). Later we would deny to dump/restore
|
|
* a task, to which the original user doesn't have the direct
|
|
* access to. (Or implement some trickier security policy).
|
|
*/
|
|
|
|
void restrict_uid(unsigned int uid, unsigned int gid)
|
|
{
|
|
pr_info("Restrict C/R with %u:%u uid\n", uid, gid);
|
|
cr_uid = uid;
|
|
cr_gid = gid;
|
|
}
|
|
|
|
static bool check_ids(unsigned int crid, unsigned int rid, unsigned int eid, unsigned int sid)
|
|
{
|
|
if (crid == 0)
|
|
return true;
|
|
if (crid == rid && crid == eid && crid == sid)
|
|
return true;
|
|
|
|
pr_err("UID/GID mismatch %u != (%u,%u,%u)\n", crid, rid, eid, sid);
|
|
return false;
|
|
}
|
|
|
|
bool may_dump(struct proc_status_creds *creds)
|
|
{
|
|
return check_ids(cr_uid, creds->uids[0], creds->uids[1], creds->uids[2]) &&
|
|
check_ids(cr_gid, creds->gids[0], creds->gids[1], creds->gids[2]);
|
|
}
|
|
|
|
bool may_restore(CredsEntry *creds)
|
|
{
|
|
return check_ids(cr_uid, creds->uid, creds->euid, creds->suid) &&
|
|
check_ids(cr_gid, creds->gid, creds->egid, creds->sgid);
|
|
}
|