shithub: riscv

ref: ee5be0d4d45549d727f46c720158a75b02d53ade
dir: /sys/src/libauth/auth_chuid.c/

#include <u.h>
#include <libc.h>
#include <auth.h>

/*
 *  become the authenticated user
 */
int
auth_chuid(AuthInfo *ai, char *ns)
{
	int rv, fd;

	if(ai == nil || ai->cap == nil || ai->cap[0] == 0){
		werrstr("no capability");
		return -1;
	}

	/* change uid */
	fd = open("/dev/capuse", OCEXEC|OWRITE);
	if(fd < 0){
		werrstr("opening /dev/capuse: %r");
		return -1;
	}
	rv = write(fd, ai->cap, strlen(ai->cap));
	close(fd);
	if(rv < 0){
		werrstr("writing %s to /dev/capuse: %r", ai->cap);
		return -1;
	}

	/* get a link to factotum as new user */
	fd = open("/srv/factotum", ORDWR);
	if(fd >= 0){
		if(mount(fd, -1, "/mnt", MREPL, "") == -1)
			close(fd);
	}

	/* set up new namespace */
	return newns(ai->cuid, ns);
}