You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
71 lines
1.9 KiB
71 lines
1.9 KiB
/* |
|
* Copyright (c) 2015 Joyent, Inc |
|
* Author: Alex Wilson <alex.wilson@joyent.com> |
|
* |
|
* Permission to use, copy, modify, and distribute this software for any |
|
* purpose with or without fee is hereby granted, provided that the above |
|
* copyright notice and this permission notice appear in all copies. |
|
* |
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR |
|
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN |
|
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF |
|
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
|
*/ |
|
|
|
#include "includes.h" |
|
|
|
#include <sys/types.h> |
|
|
|
#include <stdarg.h> |
|
#include <unistd.h> |
|
|
|
#include "platform.h" |
|
|
|
#include "openbsd-compat/openbsd-compat.h" |
|
|
|
/* |
|
* Drop any fine-grained privileges that are not needed for post-startup |
|
* operation of ssh-agent |
|
* |
|
* Should be as close as possible to pledge("stdio cpath unix id proc exec", ...) |
|
*/ |
|
void |
|
platform_pledge_agent(void) |
|
{ |
|
#ifdef USE_SOLARIS_PRIVS |
|
/* |
|
* Note: Solaris priv dropping is closer to tame() than pledge(), but |
|
* we will use what we have. |
|
*/ |
|
solaris_drop_privs_root_pinfo_net(); |
|
#endif |
|
} |
|
|
|
/* |
|
* Drop any fine-grained privileges that are not needed for post-startup |
|
* operation of sftp-server |
|
*/ |
|
void |
|
platform_pledge_sftp_server(void) |
|
{ |
|
#ifdef USE_SOLARIS_PRIVS |
|
solaris_drop_privs_pinfo_net_fork_exec(); |
|
#endif |
|
} |
|
|
|
/* |
|
* Drop any fine-grained privileges that are not needed for the post-startup |
|
* operation of the SSH client mux |
|
* |
|
* Should be as close as possible to pledge("stdio proc tty", ...) |
|
*/ |
|
void |
|
platform_pledge_mux(void) |
|
{ |
|
#ifdef USE_SOLARIS_PRIVS |
|
solaris_drop_privs_root_pinfo_net_exec(); |
|
#endif |
|
}
|
|
|