isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

set_perms: ctx may be NULL for PERM_ROOT, PERM_SUDOERS, PERM_TIMESTAMP.

Browse Source
This commit is contained in:
Todd C. Miller
2023-08-21 16:53:35 -06:00
parent c7157ce0b1
commit 821799d1f4
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
plugins/sudoers/set_perms.c
View File

@@ -105,6 +105,7 @@ rewind_perms(void)
* Set real and effective and saved uids and gids based on perm. * Set real and effective and saved uids and gids based on perm.
* We always retain a saved uid of 0 unless we are headed for an exec(). * We always retain a saved uid of 0 unless we are headed for an exec().
* We only flip the effective gid since it only changes for PERM_SUDOERS. * We only flip the effective gid since it only changes for PERM_SUDOERS.
* The ctx argument may be NULL for PERM_ROOT, PERM_SUDOERS and PERM_TIMESTAMP.
* This version of set_perms() works fine with the "stay_setuid" option. * This version of set_perms() works fine with the "stay_setuid" option.
*/ */
bool bool
@@ -441,6 +442,7 @@ bad:
* Set real and effective and saved uids and gids based on perm. * Set real and effective and saved uids and gids based on perm.
* We always retain a saved uid of 0 unless we are headed for an exec(). * We always retain a saved uid of 0 unless we are headed for an exec().
* We only flip the effective gid since it only changes for PERM_SUDOERS. * We only flip the effective gid since it only changes for PERM_SUDOERS.
* The ctx argument may be NULL for PERM_ROOT, PERM_SUDOERS and PERM_TIMESTAMP.
* This version of set_perms() works fine with the "stay_setuid" option. * This version of set_perms() works fine with the "stay_setuid" option.
*/ */
bool bool
@@ -853,6 +855,7 @@ bad:
* Set real and effective and saved uids and gids based on perm. * Set real and effective and saved uids and gids based on perm.
* We always retain a saved uid of 0 unless we are headed for an exec(). * We always retain a saved uid of 0 unless we are headed for an exec().
* We only flip the effective gid since it only changes for PERM_SUDOERS. * We only flip the effective gid since it only changes for PERM_SUDOERS.
* The ctx argument may be NULL for PERM_ROOT, PERM_SUDOERS and PERM_TIMESTAMP.
* This version of set_perms() works fine with the "stay_setuid" option. * This version of set_perms() works fine with the "stay_setuid" option.
*/ */
bool bool
@@ -1168,6 +1171,7 @@ bad:
* Set real and effective uids and gids based on perm. * Set real and effective uids and gids based on perm.
* We always retain a real or effective uid of ROOT_UID unless * We always retain a real or effective uid of ROOT_UID unless
* we are headed for an exec(). * we are headed for an exec().
* The ctx argument may be NULL for PERM_ROOT, PERM_SUDOERS and PERM_TIMESTAMP.
* This version of set_perms() works fine with the "stay_setuid" option. * This version of set_perms() works fine with the "stay_setuid" option.
*/ */
bool bool
@@ -1470,6 +1474,7 @@ bad:
/* /*
* Set uids and gids based on perm via setuid() and setgid(). * Set uids and gids based on perm via setuid() and setgid().
* The ctx argument may be NULL for PERM_ROOT, PERM_SUDOERS and PERM_TIMESTAMP.
* NOTE: does not support the "stay_setuid" or timestampowner options. * NOTE: does not support the "stay_setuid" or timestampowner options.
* Also, sudoers_uid and sudoers_gid are not used. * Also, sudoers_uid and sudoers_gid are not used.
*/ */