bsd/kern/kern_credential.c

236 static void	kauth_groups_updatecache(struct kauth_identity_extlookup *el);
2330 	struct kauth_identity_extlookup el;
2468 	bzero(&el, sizeof(el));
2469 	el.el_info_pid = current_proc()->p_pid;
2472 		el.el_flags = KAUTH_EXTLOOKUP_VALID_UID;
2473 		el.el_uid = *(uid_t *)src;
2476 		el.el_flags = KAUTH_EXTLOOKUP_VALID_GID;
2477 		el.el_gid = *(gid_t *)src;
2480 		el.el_flags = KAUTH_EXTLOOKUP_VALID_UGUID | KAUTH_EXTLOOKUP_VALID_GGUID;
2481 		el.el_uguid = *(guid_t *)src;
2482 		el.el_gguid = *(guid_t *)src;
2485 		el.el_flags = KAUTH_EXTLOOKUP_VALID_USID | KAUTH_EXTLOOKUP_VALID_GSID;
2486 		el.el_usid = *(ntsid_t *)src;
2487 		el.el_gsid = *(ntsid_t *)src;
2491 		el.el_flags = KAUTH_EXTLOOKUP_VALID_PWNAM;
2496 		el.el_flags = KAUTH_EXTLOOKUP_VALID_GRNAM;
2511 	el.el_flags |= KAUTH_EXTLOOKUP_WANT_UID | KAUTH_EXTLOOKUP_WANT_GID |
2516 		el.el_flags |= KAUTH_EXTLOOKUP_WANT_PWNAM;
2521 		el.el_flags |= KAUTH_EXTLOOKUP_WANT_GRNAM;
2526 	KAUTH_DEBUG("CACHE - calling resolver for %x", el.el_flags);
2530 	error = kauth_resolver_submit(&el, extend_data);
2544 			el.el_flags |= KAUTH_EXTLOOKUP_VALID_PWNAM;
2546 			el.el_flags |= KAUTH_EXTLOOKUP_VALID_GRNAM;
2548 		kauth_identity_updatecache(&el, &ki, extend_data);
2688 kauth_groups_updatecache(struct kauth_identity_extlookup *el)
2694 	if ((el->el_flags &
2707 		if ((el->el_uid == gm->gm_uid) &&
2708 		    (el->el_gid == gm->gm_gid)) {
2709 			if (el->el_flags & KAUTH_EXTLOOKUP_ISMEMBER) {
2714 			gm->gm_expiry = (el->el_member_valid) ? el->el_member_valid + tv.tv_sec : 0;
2728 		gm->gm_uid = el->el_uid;
2729 		gm->gm_gid = el->el_gid;
2730 		if (el->el_flags & KAUTH_EXTLOOKUP_ISMEMBER) {
2735 		gm->gm_expiry = (el->el_member_valid) ? el->el_member_valid + tv.tv_sec : 0;
2845 	struct kauth_identity_extlookup el;
2885 	bzero(&el, sizeof(el));
2886 	el.el_info_pid = current_proc()->p_pid;
2887 	el.el_flags = KAUTH_EXTLOOKUP_VALID_UID | KAUTH_EXTLOOKUP_VALID_GID | KAUTH_EXTLOOKUP_WANT_MEMBERSHIP;
2888 	el.el_uid = pcred->cr_gmuid;
2889 	el.el_gid = gid;
2890 	el.el_member_valid = 0;		/* XXX set by resolver? */
2892 	DTRACE_PROC2(kauth__group__resolver__submitted, int, el.el_uid, int, el.el_gid);
2894 	error = kauth_resolver_submit(&el, 0ULL);
2896 	DTRACE_PROC2(kauth__group__resolver__returned, int, error, int, el.el_flags);
2901 	kauth_groups_updatecache(&el);
2904 	if (el.el_flags & KAUTH_EXTLOOKUP_VALID_MEMBERSHIP) {
2905 		*resultp = (el.el_flags & KAUTH_EXTLOOKUP_ISMEMBER) ? 1 : 0;