oec/tlsserver
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

re-implemented setuid/setgid support

Browse Source
This commit is contained in:
Özgür Kesim 2016-01-02 14:49:54 +01:00
parent 7648733aaa
commit f30a09097d
1 changed files with 22 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
tlsserver.go
View File

@ -55,7 +55,7 @@ func main() {
// set uid/gid // set uid/gid
if *gid >= 0 { if *gid >= 0 {
err := syscall.Setgid(*gid) err := setgid(*gid) // syscall.Setgid(*gid)
if err != nil { if err != nil {
fmt.Println("Couldn't setgid to", *gid, ":", err) fmt.Println("Couldn't setgid to", *gid, ":", err)
os.Exit(4) os.Exit(4)
@ -63,7 +63,7 @@ func main() {
} }
if *uid >= 0 { if *uid >= 0 {
err := syscall.Setuid(*uid) err := setuid(*uid) // syscall.Setuid(*uid)
if err != nil { if err != nil {
fmt.Println("Couldn't setuid to", *uid, ":", err) fmt.Println("Couldn't setuid to", *uid, ":", err)
os.Exit(4) os.Exit(4)
@ -117,3 +117,23 @@ func handleConnection(conn net.Conn) {
} }
log.Println("Done with connection", conn.RemoteAddr()) log.Println("Done with connection", conn.RemoteAddr())
} }
// Since go1.4 the setgid syscall is deliberatelly not supported anymore, as it
// only applies to the calling thread. So we try this here:
func setgid(gid int) error {
// RawSyscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err Errno)
_, _, e := syscall.RawSyscall(syscall.SYS_SETGID, uintptr(gid), 0, 0)
if e != 0 {
return fmt.Errorf(e.Error())
}
return nil
}
func setuid(uid int) error {
// RawSyscall(trap, a1, a2, a3 uintptr) (r1, r2 uintptr, err Errno)
_, _, e := syscall.RawSyscall(syscall.SYS_SETUID, uintptr(uid), 0, 0)
if e != 0 {
return fmt.Errorf(e.Error())
}
return nil
}