bsd/kern/kern_prot.c

720 	kauth_cred_t my_cred, my_new_cred;
726 	my_cred = kauth_cred_proc_ref(p);
727 	my_pcred = posix_cred_get(my_cred);
729 	DEBUG_CRED_ENTER("setuid (%d/%d): %p %d\n", p->p_pid, (p->p_pptr ? p->p_pptr->p_pid : 0), my_cred, uap->uid);
734 	    (error = suser(my_cred, &p->p_acflag))) {
735 		kauth_cred_unref(&my_cred);
746 	if (suser(my_cred, &p->p_acflag) == 0) {
778 		my_new_cred = kauth_cred_setresuid(my_cred, ruid, uid, svuid, gmuid);
779 		if (my_cred != my_new_cred) {
781 			DEBUG_CRED_CHANGE("setuid CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
790 			if (p->p_ucred != my_cred) {
793 				my_cred = kauth_cred_proc_ref(p);
807 	kauth_cred_unref(&my_cred);
837 	kauth_cred_t my_cred, my_new_cred;
845 	my_cred = kauth_cred_proc_ref(p);
846 	my_pcred = posix_cred_get(my_cred);
849 	    (error = suser(my_cred, &p->p_acflag))) {
850 		kauth_cred_unref(&my_cred);
867 		my_new_cred = kauth_cred_setresuid(my_cred, KAUTH_UID_NONE, euid, KAUTH_UID_NONE, my_pcred->cr_gmuid);
869 		if (my_cred != my_new_cred) {
871 			DEBUG_CRED_CHANGE("seteuid CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
880 			if (p->p_ucred != my_cred) {
883 				my_cred = kauth_cred_proc_ref(p);
896 	kauth_cred_unref(&my_cred);
939 	kauth_cred_t my_cred, my_new_cred;
953 	my_cred = kauth_cred_proc_ref(p);
954 	my_pcred = posix_cred_get(my_cred);
964 	    (error = suser(my_cred, &p->p_acflag))) { /* allow root user any */
965 		kauth_cred_unref(&my_cred);
1014 		my_new_cred = kauth_cred_setresuid(my_cred, ruid, euid, svuid, my_pcred->cr_gmuid);
1016 		if (my_cred != my_new_cred) {
1018 			DEBUG_CRED_CHANGE("setreuid CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
1027 			if (p->p_ucred != my_cred) {
1030 				my_cred = kauth_cred_proc_ref(p);
1043 	kauth_cred_unref(&my_cred);
1082 	kauth_cred_t my_cred, my_new_cred;
1090 	my_cred = kauth_cred_proc_ref(p);
1091 	my_pcred = posix_cred_get(my_cred);
1095 	    (error = suser(my_cred, &p->p_acflag))) {
1096 		kauth_cred_unref(&my_cred);
1104 	if (suser(my_cred,  &p->p_acflag) == 0) {
1119 		my_new_cred = kauth_cred_setresgid(my_cred, rgid, gid, svgid);
1120 		if (my_cred != my_new_cred) {
1122 			DEBUG_CRED_CHANGE("setgid(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_cred->cr_flags, my_new_cred, my_new_cred->cr_flags);
1131 			if (p->p_ucred != my_cred) {
1135 				my_cred = kauth_cred_proc_ref(p);
1147 	kauth_cred_unref(&my_cred);
1182 	kauth_cred_t my_cred, my_new_cred;
1190 	my_cred = kauth_cred_proc_ref(p);
1191 	my_pcred = posix_cred_get(my_cred);
1195 	    (error = suser(my_cred, &p->p_acflag))) {
1196 		kauth_cred_unref(&my_cred);
1209 		my_new_cred = kauth_cred_setresgid(my_cred, KAUTH_GID_NONE, egid, KAUTH_GID_NONE);
1210 		if (my_cred != my_new_cred) {
1212 			DEBUG_CRED_CHANGE("setegid(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
1221 			if (p->p_ucred != my_cred) {
1225 				my_cred = kauth_cred_proc_ref(p);
1238 	kauth_cred_unref(&my_cred);
1286 	kauth_cred_t my_cred, my_new_cred;
1301 	my_cred = kauth_cred_proc_ref(p);
1302 	my_pcred = posix_cred_get(my_cred);
1313 	    (error = suser(my_cred, &p->p_acflag))) { /* allow root user any */
1314 		kauth_cred_unref(&my_cred);
1354 		my_new_cred = kauth_cred_setresgid(my_cred, rgid, egid, svgid);
1355 		if (my_cred != my_new_cred) {
1357 			DEBUG_CRED_CHANGE("setregid(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
1365 			if (p->p_ucred != my_cred) {
1369 				my_cred = kauth_cred_proc_ref(p);
1381 	kauth_cred_unref(&my_cred);
1424 		kauth_cred_t my_cred, my_new_cred;
1439 		my_cred = uthread->uu_ucred;
1440 		my_new_cred = kauth_cred_setuidgid(my_cred, uid, gid);
1441 		if (my_cred != my_new_cred)
1446 		kauth_cred_unref(&my_cred);
1473 	kauth_cred_t my_cred, my_target_cred, my_new_cred;
1520 		my_cred = uthread->uu_ucred;
1523 		my_new_cred = kauth_cred_setuidgid(my_cred, my_target_pcred->cr_uid, my_target_pcred->cr_gid);
1524 		if (my_cred != my_new_cred)
1531 		kauth_cred_unref(&my_cred);
1596 	kauth_cred_t my_cred, my_new_cred;
1615 	my_cred = kauth_cred_proc_ref(p);
1616 	if ((error = suser(my_cred, &p->p_acflag))) {
1617 		kauth_cred_unref(&my_cred);
1625 		kauth_cred_unref(&my_cred);
1636 		my_cred = uthread->uu_ucred;
1637 		uthread->uu_ucred = kauth_cred_setgroups(my_cred, &newgroups[0], ngrp, gmuid);
1639 		if (my_cred != uthread->uu_ucred) {
1640 			DEBUG_CRED_CHANGE("setgroups1(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_cred_flags, uthread->uu_ucred , uthread->uu_ucred ->cr_flags);
1658 			my_new_cred = kauth_cred_setgroups(my_cred, &newgroups[0], ngrp, gmuid);
1659 			if (my_cred != my_new_cred) {
1661 				DEBUG_CRED_CHANGE("setgroups1(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_cred->cr_flags, my_new_cred, my_new_cred->cr_flags);
1671 				if (p->p_ucred != my_cred) {
1674 					my_cred = kauth_cred_proc_ref(p);
1687 		AUDIT_ARG(groupset, posix_cred_get(my_cred)->cr_groups, ngrp);
1688 		kauth_cred_unref(&my_cred);
1868 	kauth_cred_t my_cred;
1875 	my_cred = kauth_cred_proc_ref(p);
1876 	my_pcred = posix_cred_get(my_cred);
1878 	err =  (suser(my_cred, &p->p_acflag) == 0 ||
1880 	kauth_cred_unref(&my_cred);
1994 	kauth_cred_t my_cred;
2011 	my_cred = kauth_cred_proc_ref(p);
2012 	my_pcred = posix_cred_get(my_cred);
2015 	if (IS_VALID_CRED(my_cred)) {
2016 		sec_token.val[0] = kauth_cred_getuid(my_cred);
2017 		sec_token.val[1] = kauth_cred_getgid(my_cred);
2032 	audit_token.val[0] = my_cred->cr_audit.as_aia_p->ai_auid;
2038 	audit_token.val[6] = my_cred->cr_audit.as_aia_p->ai_asid;
2042 	mac_task_label_update_cred(my_cred, p->task);
2047 	if (host_priv != HOST_PRIV_NULL && mac_system_check_host_priv(my_cred))
2050 	kauth_cred_unref(&my_cred);