bsd/kern/kern_credential.c

155  * times out.
303  *               EWOULDBLOCK               thread timed out in msleep
395  *		the operation to either complete or time out.  Outstanding
479                         printf("kauth external resolver timed out (%d timeout(s) of %d seconds).\n",
485                 	 * If the request timed out and was never collected, the resolver
490                         KAUTH_DEBUG("RESOLVER - request timed out without being collected for processing, resolver dead");
516 		/* work out which list we have to remove it from */
567  *		kernel is copied out to the identity resolution daemon, which
748 	 * restarting, then the msleep0() will error out here, as our thread
757 		 * deregistering it, error out the request-for-work thread
775  * Decription:	Common utility function to copy out a identity resolver work
805 	 * Copy out the external lookup structure for the request, not
813 		goto out;
820 		goto out;
826 	 * to copy it out into the extended buffer, assuming the buffer is
849 			goto out;
857 out:
899 		 * deregistering it, error out the request-for-work thread
1010 				 * that it is not cleaned up out from under
1065 	 * timed out the work record will be gone.
1114  * Description:	Allocate and fill out a kauth_identity structure for
1286  *		passed out to user space to ensure that the request string
1288  *		input to avoid this.  The jury is still out.
1604 			/* If a name is wanted and one exists, copy it out */
1641 			/* If a name is wanted and one exists, copy it out */
1668  *		may elect to call out to userland to revalidate.
1681 			/* If a name is wanted and one exists, copy it out */
1741  *		may elect to call out to userland to revalidate.
1754 			/* If a name is wanted and one exists, copy it out */
1922 this, we would need to automatically opt-out any SUID/SGID binary, and force
1924 opt'ed out in any group of 16 displacement instead, since it's a much more
1930 	 * credential, and we have not opted out of memberd, then if memberd
2657 	 * out what we really want now, or might want soon.
2794  *		to avoid unnecessary calls out to user space.
3155 		 * calling out to the resolver if at all possible.
3465 	 * XXX should probably be called out in a function.
3559 	 * XXX should probably be called out in a function.
3723 		 * If the template credential is not opting out of external
3726 		 * resolver.  If it's not, then we opt it out anyway, since
3886 	 * opt out of participation in external group resolution, unless we
3950 		/* displacing a supplementary group opts us out of memberd */
3974  *	The gmuid argument supplies a new uid (or KAUTH_UID_NONE to opt out)
4050 	 * opt-out of memberd processing using setgroups(), and an opt-in
4086 	 * If we've not opted out of using the resolver, then convert the cred to a list
4135  *		from has not opted out of memberd participation; otherwise
4185 	/* inherit the opt-out of memberd */
4194 	/* displacing a supplementary group opts us out of memberd */
4771  * DEPRECATED:	This interface is obsolete due to a failure to clear out the
4889 	/* displacing a supplementary group opts us out of memberd */
4895 	 * If the cred is not opted out, make sure we are using the r/euid
5290  * Description:	Print out cred hash cache table information for debugging
5330  * Description:	Print out an individual credential's contents for debugging
5333  * Parameters:	cred				The credential to print out