bsd/kern/kern_prot.c

345  *		uap->gidp			Address of gid_t to get gid
380  * Returns:	gid_t				The real gid of the caller
398  * Returns:	gid_t				The effective gid of the caller
400  * Notes:	As an implementation detail, the effective gid is stored as
441  *		As an implementation detail, the effective gid is stored as
662  * Description:	Is current process tainted by uid or gid changes system call
1055  * Parameters:	uap->gid			gid to set
1061  *		real, effective, and saved gid to the requested value.
1063  *		If called from an unprivileged process, but gid is equal to the
1064  *		real or saved gid, then the effective gid will be set to the
1065  *		requested value, but the real and saved gid will not change.
1070  *		As an implementation detail, the effective gid is stored as
1078 	gid_t gid;
1085 	DEBUG_CRED_ENTER("setgid(%d/%d): %d\n", p->p_pid, (p->p_pptr ? p->p_pptr->p_pid : 0), uap->gid);
1087 	gid = uap->gid;
1088 	AUDIT_ARG(gid, gid);
1093 	if (gid != my_pcred->cr_rgid &&		/* allow setgid(getgid()) */
1094 	    gid != my_pcred->cr_svgid &&	/* allow setgid(saved gid) */
1105 		svgid = gid;
1106 		rgid = gid;
1119 		my_new_cred = kauth_cred_setresgid(my_cred, rgid, gid, svgid);
1159  * Parameters:	uap->egid			effective gid to set
1166  *		gid, then the effective gid will be set to the requested
1167  *		value, but the real and saved gid will not change.
1172  *		As an implementation detail, the effective gid is stored as
1249  * Parameters:	uap->rgid			real gid to set
1250  *		uap->egid			effective gid to set
1255  * Notes:	A value of -1 is a special case indicating that the gid for
1259  *		If called by a privileged process, the real and effective gid
1262  *		If called from an unprivileged process, the real gid may be
1263  *		set to the current value of the real gid, or to the current
1264  *		value of the saved gid.  The effective gid may be set to the
1265  *		current value of any of the effective, real, or saved gid.
1267  *		If the new real and effective gid will not be equal, or the
1268  *		new real or effective gid is not the same as the saved gid,
1269  *		then the saved gid will be updated to reflect the new
1270  *		effective gid (potentially unrecoverably dropping saved
1276  *		As an implementation detail, the effective gid is stored as
1343 		 * If the newly requested real gid or effective gid does
1344 		 * not match the saved gid, then set the saved gid to the
1345 		 * new effective gid.  We are protected from escalation
1402 	gid_t gid;
1405 	gid = uap->gid;
1407 	AUDIT_ARG(gid, gid);
1440 		my_new_cred = kauth_cred_setuidgid(my_cred, uid, gid);
1563  *		gmuid				Base gid (initgroups only!)
1706  *		uap->gmuid			Base gid
1798  * Check if gid is a member of the group set.
1804 groupmember(gid_t gid, kauth_cred_t cred)
1808 	if (kauth_cred_ismember_gid(cred, gid, &is_member) == 0 && is_member)