Attachment 1144 Details for Bug 1081 – Implement getgrouplist() on AIX via getgrset().

[patch] Implement getgrouplist() on AIX via getgrset().

openssh-4.3p2-aixgroup.patch (text/plain), 4.58 KB, created by Darren Tucker on 2006-06-03 13:15:53 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Darren Tucker

Created: 2006-06-03 13:15:53 AEST

Size: 4.58 KB

patch

obsolete

>diff -ru openssh-4.3p2/config.h.in openssh-4.3p2-aixgroup/config.h.in
>--- openssh-4.3p2/config.h.in	2006-02-11 11:07:35.000000000 +1100
>+++ openssh-4.3p2-aixgroup/config.h.in	2006-03-27 22:27:38.000000000 +1000
>@@ -305,6 +305,9 @@
> /* Define to 1 if you have the `getgrouplist' function. */
> #undef HAVE_GETGROUPLIST
> 
>+/* Define to 1 if you have the `getgrset' function. */
>+#undef HAVE_GETGRSET
>+
> /* Define to 1 if you have the `getluid' function. */
> #undef HAVE_GETLUID
> 
>diff -ru openssh-4.3p2/configure openssh-4.3p2-aixgroup/configure
>--- openssh-4.3p2/configure	2006-02-11 11:07:37.000000000 +1100
>+++ openssh-4.3p2-aixgroup/configure	2006-03-27 22:50:12.000000000 +1000
>@@ -5019,7 +5019,8 @@
> 
> 
> 
>-for ac_func in setauthdb
>+
>+for ac_func in getgrset setauthdb
> do
> as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh`
> echo "$as_me:$LINENO: checking for $ac_func" >&5
>@@ -27224,9 +27225,9 @@
> exec 5>>config.log
> {
>   echo
>-  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<BOXI_EOF
>+  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
> ## Running $as_me. ##
>-BOXI_EOF
>+_ASBOX
> } >&5
> cat >&5 <<_CSEOF
> 
>diff -ru openssh-4.3p2/configure.ac openssh-4.3p2-aixgroup/configure.ac
>--- openssh-4.3p2/configure.ac	2006-02-08 22:11:06.000000000 +1100
>+++ openssh-4.3p2-aixgroup/configure.ac	2006-03-27 22:27:38.000000000 +1000
>@@ -174,7 +174,7 @@
> 		[],
> 		[#include <usersec.h>]
> 	)
>-	AC_CHECK_FUNCS(setauthdb)
>+	AC_CHECK_FUNCS(getgrset setauthdb)
> 	check_for_aix_broken_getaddrinfo=1
> 	AC_DEFINE(BROKEN_REALPATH, 1, [Define if you have a broken realpath.])
> 	AC_DEFINE(SETEUID_BREAKS_SETUID, 1,
>diff -ru openssh-4.3p2/openbsd-compat/port-aix.c openssh-4.3p2-aixgroup/openbsd-compat/port-aix.c
>--- openssh-4.3p2/openbsd-compat/port-aix.c	2005-05-29 10:54:28.000000000 +1000
>+++ openssh-4.3p2-aixgroup/openbsd-compat/port-aix.c	2006-03-28 08:56:58.000000000 +1000
>@@ -1,7 +1,7 @@
> /*
>  *
>  * Copyright (c) 2001 Gert Doering.  All rights reserved.
>- * Copyright (c) 2003,2004,2005 Darren Tucker.  All rights reserved.
>+ * Copyright (c) 2003,2004,2005,2006 Darren Tucker.  All rights reserved.
>  *
>  * Redistribution and use in source and binary forms, with or without
>  * modification, are permitted provided that the following conditions
>@@ -372,4 +372,58 @@
> }
> # endif /* AIX_GETNAMEINFO_HACK */
> 
>+# if defined(USE_GETGRSET)
>+#  include <stdlib.h>
>+int
>+getgrouplist(const char *user, gid_t pgid, gid_t *groups, int *grpcnt)
>+{
>+	char *cp, *grplist, *grp;
>+	gid_t gid;
>+	int ret = 0, ngroups = 0, maxgroups;
>+	long l;
>+
>+	maxgroups = *grpcnt;
>+
>+	if ((cp = grplist = getgrset(user)) == NULL)
>+		return -1;
>+
>+	/* handle zero-length case */
>+	if (maxgroups <= 0) {
>+		*grpcnt = 0;
>+		return -1;
>+	}
>+
>+	/* copy primary group */
>+	groups[ngroups++] = pgid;
>+
>+	/* copy each entry from getgrset into group list */
>+	while ((grp = strsep(&grplist, ",")) != NULL) {
>+		l = strtol(grp, NULL, 10);
>+		if (ngroups >= maxgroups || l == LONG_MIN || l == LONG_MAX) {
>+			ret = -1;
>+			goto out;
>+		}
>+		gid = (gid_t)l;
>+		if (gid == pgid)
>+			continue;	/* we have already added primary gid */
>+		groups[ngroups++] = gid;
>+	}
>+out:
>+	free(cp);
>+	*grpcnt = ngroups;
>+	return ret;
>+}
>+
>+int
>+ssh_initgroups(const char *user, gid_t group)
>+{
>+	gid_t grps[NGROUPS_MAX];
>+	int grpcnt = NGROUPS_MAX;
>+
>+	if (getgrouplist(user, group, grps, &grpcnt) == -1)
>+		return -1;
>+	return setgroups(grpcnt, grps);
>+}
>+# endif	/* USE_GETGRSET */
>+
> #endif /* _AIX */
>diff -ru openssh-4.3p2/openbsd-compat/port-aix.h openssh-4.3p2-aixgroup/openbsd-compat/port-aix.h
>--- openssh-4.3p2/openbsd-compat/port-aix.h	2005-05-28 20:28:40.000000000 +1000
>+++ openssh-4.3p2-aixgroup/openbsd-compat/port-aix.h	2006-03-28 08:57:25.000000000 +1000
>@@ -3,7 +3,7 @@
> /*
>  *
>  * Copyright (c) 2001 Gert Doering.  All rights reserved.
>- * Copyright (c) 2004, 2005 Darren Tucker.  All rights reserved.
>+ * Copyright (c) 2004,2005,2006 Darren Tucker.  All rights reserved.
>  *
>  * Redistribution and use in source and binary forms, with or without
>  * modification, are permitted provided that the following conditions
>@@ -115,4 +115,13 @@
> # define getnameinfo(a,b,c,d,e,f,g) (sshaix_getnameinfo(a,b,c,d,e,f,g))
> #endif
> 
>+/* We use getgrset in preference to multiple getgrent calls for efficiency */
>+#if !defined(HAVE_GETGRENT) && defined(HAVE_GETGRSET)
>+# define HAVE_GETGRENT
>+# define USE_GETGRSET
>+int getgrouplist(const char *, gid_t, gid_t *, int *);
>+int ssh_initgroups(const char *, gid_t);
>+# define initgroups(a, b) ssh_initgroups((a), (b))
>+#endif
>+
> #endif /* _AIX */

Actions: View | Diff

Attachments on bug 1081: 1144 | 1430