mirror/darkhttpd
1
0
Fork 0
mirror of https://github.com/emikulic/darkhttpd.git synced 2023-08-10 21:13:08 +03:00
Code Issues Projects Releases Wiki Activity

Added handling of --uid.

Browse Source
This commit is contained in:
Emil Mikulic 2003-11-27 05:14:55 +00:00
parent b5f0992e7e
commit 7ef872fd6a
1 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
trunk/darkhttpd.c
View File

@ -18,7 +18,7 @@
* x Test If-Mod-Since with IE, Phoenix, lynx, links, Opera * x Test If-Mod-Since with IE, Phoenix, lynx, links, Opera
* x Keep-alive connections. * x Keep-alive connections.
* . Chroot * . Chroot
* . Set{uid|gid}. * x Set{uid|gid}.
* . Port to Win32. * . Port to Win32.
* x Detect Content-Type from a list of content types. * x Detect Content-Type from a list of content types.
* x Log Referer, User-Agent. * x Log Referer, User-Agent.
@ -41,6 +41,7 @@
#include <ctype.h> #include <ctype.h>
#include <errno.h> #include <errno.h>
#include <fcntl.h> #include <fcntl.h>
#include <grp.h>
#include <pwd.h> #include <pwd.h>
#include <signal.h> #include <signal.h>
#include <stdarg.h> #include <stdarg.h>
@ -991,6 +992,21 @@ static void parse_commandline(const int argc, char *argv[])
else else
drop_uid = p->pw_uid; drop_uid = p->pw_uid;
} }
else if (strcmp(argv[i], "--gid") == 0)
{
struct group *g;
int num;
if (++i >= argc) errx(1, "missing gid after --gid");
if (!str_to_num(argv[i], &num))
g = getgrnam(argv[i]);
else
g = getgrgid( (gid_t)num );
if (g == NULL)
errx(1, "no such gid: `%s'", argv[i]);
else
drop_gid = g->gr_gid;
}
else else
errx(1, "unknown argument `%s'", argv[i]); errx(1, "unknown argument `%s'", argv[i]);
} }
@ -2073,6 +2089,11 @@ int main(int argc, char *argv[])
err(1, "signal(SIGQUIT)"); err(1, "signal(SIGQUIT)");
/* security */ /* security */
if (drop_gid != INVALID_GID)
{
if (setgid(drop_gid) == -1) err(1, "setgid(%d)", drop_gid);
debugf("set gid to %d\n", drop_gid);
}
if (drop_uid != INVALID_UID) if (drop_uid != INVALID_UID)
{ {
if (setuid(drop_uid) == -1) err(1, "setuid(%d)", drop_uid); if (setuid(drop_uid) == -1) err(1, "setuid(%d)", drop_uid);