Re: Security patches

["Pierre A. Humblet" <Pierre dot Humblet at ieee dot org>]

At 09:54 AM 4/12/2002 +0200, Corinna Vinschen wrote:
>I hope you don't mind that I'm asking you to send the patch again
>to cygwin-patches, relative to the current CVS. 

Here is the second installment. The only substantial change is that
in __sec_user() sid1 is not obtained from cygheap->user.sid ()
but from a new function getting the sid of the process token user.
That is because we want the "old" sid, but cygheap->user.sid can
already be the "new" sid.
Instead of having this new function it would be more elegant to
keep this important sid as a NO_COPY variable (initialized in
dcrt0.cc), or perhaps in cygheap. It's largely a matter of taste.

The split of __sec_user() in two functions is for software modularity
and reuse. The function will be reused in installment #3.

Pierre

2002-05-07  Pierre Humblet <pierre.humblet@ieee.org>
	* shared.cc (sec_process_sid): Create.
	(sec_acl): Create from part of __sec_user(), except creator/owner.
	(__sec_user): Split into sec_acl(). Call sec_process_sid()
	instead of cygheap->user.sid().
	* security.h: Define new functions above and MAX_DACL_LEN.

Attachment: shared.cc.diff
Description: Text document

Attachment: security.h.diff
Description: Text document