Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
per-thread_credentials [2011/05/13 01:35] – MatthewFlemingper-thread_credentials [2017/09/18 14:14] (current) – Use local wiki LinkNames (remove absolute wiki urls) KubilayKocak
Line 39: Line 39:
 There are the main tasks to implement: There are the main tasks to implement:
  
-==== Define new syscalls to set the per-thread credential. ====+==== Define new libthr library functions to set the per-thread credential. ====
  
 <code> <code>
Line 96: Line 96:
     an error number will be returned to indicate the error.     an error number will be returned to indicate the error.
 </code> </code>
 +
 +Matching syscalls gettcred(), settcred(), and reverttcred() implement the library functions.
  
 We require the caller to set the UID, GID, and supplementary groups in a single syscall.  This is a hint to the application programmer that all three of these pieces of information are necessary to create a full credential.  It also avoids the race between a setuid() and a setgroups() call where the kernel credential is incomplete. We require the caller to set the UID, GID, and supplementary groups in a single syscall.  This is a hint to the application programmer that all three of these pieces of information are necessary to create a full credential.  It also avoids the race between a setuid() and a setgroups() call where the kernel credential is incomplete.
Line 137: Line 139:
   * How per-thread credentials interact with jails   * How per-thread credentials interact with jails
   * Use new privilege infrastructure in 7.3 instead of suser()   * Use new privilege infrastructure in 7.3 instead of suser()
-  * Add auditing events as discussed here http://wiki.freebsd.org/AddingSyscalls+  * Add auditing events as discussed here: AddingSyscalls
  
 ===== References ===== ===== References =====
  • per-thread_credentials.1305250548.txt.gz
  • Last modified: 2011/05/13 01:35
  • by MatthewFleming