bsd/kern/kern_prot.c

721 	posix_cred_t my_pcred;
727 	my_pcred = posix_cred_get(my_cred);
732 	if (uid != my_pcred->cr_ruid &&		/* allow setuid(getuid()) */
733 	    uid != my_pcred->cr_svuid &&	/* allow setuid(saved uid) */
754 		(void)chgproccnt(my_pcred->cr_ruid, -1);
768 		if (!(my_pcred->cr_flags & CRF_NOMEMBERD))
781 			DEBUG_CRED_CHANGE("setuid CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
838 	posix_cred_t my_pcred;
846 	my_pcred = posix_cred_get(my_cred);
848 	if (euid != my_pcred->cr_ruid && euid != my_pcred->cr_svuid &&
867 		my_new_cred = kauth_cred_setresuid(my_cred, KAUTH_UID_NONE, euid, KAUTH_UID_NONE, my_pcred->cr_gmuid);
871 			DEBUG_CRED_CHANGE("seteuid CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
940 	posix_cred_t my_pcred;
954 	my_pcred = posix_cred_get(my_cred);
957 	      ruid != my_pcred->cr_ruid &&	/* allow ruid = ruid */
958 	      ruid != my_pcred->cr_uid &&	/* allow ruid = euid */
959 	      ruid != my_pcred->cr_svuid) ||	/* allow ruid = svuid */
961 	      euid != my_pcred->cr_uid &&	/* allow euid = euid */
962 	      euid != my_pcred->cr_ruid &&	/* allow euid = ruid */
963 	      euid != my_pcred->cr_svuid)) &&	/* allow euid = svui */
979 		new_euid = my_pcred->cr_uid;
980 		new_ruid = my_pcred->cr_ruid;
989 		if (euid == KAUTH_UID_NONE && my_pcred->cr_uid != euid) {
994 		if (ruid != KAUTH_UID_NONE && my_pcred->cr_ruid != ruid) {
998 			(void)chgproccnt(my_pcred->cr_ruid, -1);
1008 		if (my_pcred->cr_svuid != uap->ruid &&
1009 		    my_pcred->cr_svuid != uap->euid) {
1014 		my_new_cred = kauth_cred_setresuid(my_cred, ruid, euid, svuid, my_pcred->cr_gmuid);
1018 			DEBUG_CRED_CHANGE("setreuid CH(%d): %p/0x%08x -> %p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
1083 	posix_cred_t my_pcred;
1091 	my_pcred = posix_cred_get(my_cred);
1093 	if (gid != my_pcred->cr_rgid &&		/* allow setgid(getgid()) */
1094 	    gid != my_pcred->cr_svgid &&	/* allow setgid(saved gid) */
1183 	posix_cred_t my_pcred;
1191 	my_pcred = posix_cred_get(my_cred);
1193 	if (egid != my_pcred->cr_rgid &&
1194 	    egid != my_pcred->cr_svgid &&
1212 			DEBUG_CRED_CHANGE("setegid(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
1287 	posix_cred_t my_pcred;
1302 	my_pcred = posix_cred_get(my_cred);
1305 	      rgid != my_pcred->cr_rgid &&	/* allow rgid = rgid */
1306 	      rgid != my_pcred->cr_gid &&	/* allow rgid = egid */
1307 	      rgid != my_pcred->cr_svgid) ||	/* allow rgid = svgid */
1309 	      egid != my_pcred->cr_groups[0] &&	/* allow no change of egid */
1310 	      egid != my_pcred->cr_gid &&	/* allow egid = egid */
1311 	      egid != my_pcred->cr_rgid &&	/* allow egid = rgid */
1312 	      egid != my_pcred->cr_svgid)) &&	/* allow egid = svgid */
1320 		uid_t new_egid = my_pcred->cr_gid;
1321 		uid_t new_rgid = my_pcred->cr_rgid;
1332 		if (egid == KAUTH_UID_NONE && my_pcred->cr_gid != egid) {
1337 		if (rgid != KAUTH_UID_NONE && my_pcred->cr_rgid != rgid) {
1348 		if (my_pcred->cr_svgid != uap->rgid &&
1349 		    my_pcred->cr_svgid != uap->egid) {
1357 			DEBUG_CRED_CHANGE("setregid(CH)%d: %p/0x%08x->%p/0x%08x\n", p->p_pid, my_cred, my_pcred->cr_flags, my_new_cred, posix_cred_get(my_new_cred)->cr_flags);
1869 	posix_cred_t my_pcred;
1876 	my_pcred = posix_cred_get(my_cred);
1879 			my_pcred->cr_ruid == 0 || my_pcred->cr_svuid == 0);
1995 	posix_cred_t my_pcred;
2012 	my_pcred = posix_cred_get(my_cred);
2033 	audit_token.val[1] = my_pcred->cr_uid;
2034 	audit_token.val[2] = my_pcred->cr_gid;
2035 	audit_token.val[3] = my_pcred->cr_ruid;
2036 	audit_token.val[4] = my_pcred->cr_rgid;