Re: RFC: [PATCH] SCM_CREDS support

[Svante Signell]

On Thu, 2013-10-24 at 18:24 +0200, Svante Signell wrote:
> On Thu, 2013-10-24 at 18:15 +0200, Samuel Thibault wrote:
> > Svante Signell, le Thu 24 Oct 2013 18:14:19 +0200, a écrit :
> 
> > Sure, but again, what is the relation between that and having both
> > SCM_RIGHT and SCM_CREDS in the same message?
> 
> It was a matter of constructing an if-then-else structure, the one for
> -n would check for cmsg==NULL and data=='\0', the other two not. Never
> mind, it's not relevant any longer.

New patches attached, this time using the auth_user_authenticate() and
auth_server_authenticate() pair to get the credentials: *uid, *gid and
groups. For PID checks, proc_getallpids() and proc_getprocinfo() are
used, until proc_user_authenticate() proc_server_authenticate() is
implemented (if needed?).

With these patches gamin and glib2.0 work (including tests), Emacs in X,
several Window Managers and browsers work and the test code sent in
http://lists.gnu.org/archive/html/bug-hurd/2013-11/msg00346.html
works. Several rights srtuctures are supported but only one credentials
structure request is supported as implemented, but can be extended to
more is needed (is more than one reasonable!?) 

dbus-daemon works, but some of the tests does not, since the
sendmsg():auth_user_authenticate() is called before
recvmsg():auth_server_authenticate(), causing a hang. They are
synchronous, i.e. recvmsg() must be running when sendmsg() is called,
and for these dbus tests they are called in reverse order.

Comments/bugs/issues?

Svante

scm_creds-recvmsg.c.diff
Description: Text Data

scm_creds-sendmsg.c.diff
Description: Text Data