mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-11-20 14:42:02 +00:00
139 lines
3.0 KiB
C
139 lines
3.0 KiB
C
/*
|
|
|
|
https://github.com/ncopa/su-exec
|
|
The file is copy-pasted verbatim to avoid supply chain attacks.
|
|
|
|
The MIT License (MIT)
|
|
|
|
Copyright (c) 2015 ncopa
|
|
|
|
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
of this software and associated documentation files (the "Software"), to deal
|
|
in the Software without restriction, including without limitation the rights
|
|
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
copies of the Software, and to permit persons to whom the Software is
|
|
furnished to do so, subject to the following conditions:
|
|
|
|
The above copyright notice and this permission notice shall be included in all
|
|
copies or substantial portions of the Software.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
SOFTWARE.
|
|
|
|
*/
|
|
|
|
/* set user and group id and exec */
|
|
|
|
#include <sys/types.h>
|
|
|
|
#include <err.h>
|
|
#include <errno.h>
|
|
#include <grp.h>
|
|
#include <pwd.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <unistd.h>
|
|
|
|
static char *argv0;
|
|
|
|
static void usage(int exitcode)
|
|
{
|
|
printf("Usage: %s user-spec command [args]\n", argv0);
|
|
exit(exitcode);
|
|
}
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
char *user, *group, **cmdargv;
|
|
char *end;
|
|
|
|
uid_t uid = getuid();
|
|
gid_t gid = getgid();
|
|
|
|
argv0 = argv[0];
|
|
if (argc < 3)
|
|
usage(0);
|
|
|
|
user = argv[1];
|
|
group = strchr(user, ':');
|
|
if (group)
|
|
*group++ = '\0';
|
|
|
|
cmdargv = &argv[2];
|
|
|
|
struct passwd *pw = NULL;
|
|
if (user[0] != '\0') {
|
|
uid_t nuid = strtol(user, &end, 10);
|
|
if (*end == '\0')
|
|
uid = nuid;
|
|
else {
|
|
pw = getpwnam(user);
|
|
if (pw == NULL)
|
|
err(1, "getpwnam(%s)", user);
|
|
}
|
|
}
|
|
if (pw == NULL) {
|
|
pw = getpwuid(uid);
|
|
}
|
|
if (pw != NULL) {
|
|
uid = pw->pw_uid;
|
|
gid = pw->pw_gid;
|
|
}
|
|
|
|
setenv("HOME", pw != NULL ? pw->pw_dir : "/", 1);
|
|
|
|
if (group && group[0] != '\0') {
|
|
/* group was specified, ignore grouplist for setgroups later */
|
|
pw = NULL;
|
|
|
|
gid_t ngid = strtol(group, &end, 10);
|
|
if (*end == '\0')
|
|
gid = ngid;
|
|
else {
|
|
struct group *gr = getgrnam(group);
|
|
if (gr == NULL)
|
|
err(1, "getgrnam(%s)", group);
|
|
gid = gr->gr_gid;
|
|
}
|
|
}
|
|
|
|
if (pw == NULL) {
|
|
if (setgroups(1, &gid) < 0)
|
|
err(1, "setgroups(%i)", gid);
|
|
} else {
|
|
int ngroups = 0;
|
|
gid_t *glist = NULL;
|
|
|
|
while (1) {
|
|
int r = getgrouplist(pw->pw_name, gid, glist, &ngroups);
|
|
|
|
if (r >= 0) {
|
|
if (setgroups(ngroups, glist) < 0)
|
|
err(1, "setgroups");
|
|
break;
|
|
}
|
|
|
|
glist = realloc(glist, ngroups * sizeof(gid_t));
|
|
if (glist == NULL)
|
|
err(1, "malloc");
|
|
}
|
|
}
|
|
|
|
if (setgid(gid) < 0)
|
|
err(1, "setgid(%i)", gid);
|
|
|
|
if (setuid(uid) < 0)
|
|
err(1, "setuid(%i)", uid);
|
|
|
|
execvp(cmdargv[0], cmdargv);
|
|
err(1, "%s", cmdargv[0]);
|
|
|
|
return 1;
|
|
}
|