comparison src/lib/restrict-access.h @ 1506:e7c627bacaaf HEAD

Allow first_valid_gid to be 0. Drop any supplementary groups not in valid gid range.
author Timo Sirainen <tss@iki.fi>
date Mon, 26 May 2003 18:26:29 +0300
parents 0ca6dfe196f1
children 8690d2000e33
comparison
equal deleted inserted replaced
1505:761bd2c8fefa 1506:e7c627bacaaf
2 #define __RESTRICT_ACCESS_H 2 #define __RESTRICT_ACCESS_H
3 3
4 /* set environment variables so they can be read with 4 /* set environment variables so they can be read with
5 restrict_access_by_env() */ 5 restrict_access_by_env() */
6 void restrict_access_set_env(const char *user, uid_t uid, gid_t gid, 6 void restrict_access_set_env(const char *user, uid_t uid, gid_t gid,
7 const char *chroot_dir); 7 const char *chroot_dir,
8 gid_t first_valid_gid, gid_t last_valid_gid);
8 9
9 /* chroot, setuid() and setgid() based on environment variables. 10 /* chroot, setuid() and setgid() based on environment variables.
10 If disallow_roots is TRUE, we'll kill ourself if we didn't have the 11 If disallow_roots is TRUE, we'll kill ourself if we didn't have the
11 environment settings and we have root uid or gid. */ 12 environment settings and we have root uid or gid. */
12 void restrict_access_by_env(int disallow_root); 13 void restrict_access_by_env(int disallow_root);