August 2008 - launchd-changes - lists.macosforge.org

[23649] branches/PR-5874233/
by source_changes＠macosforge.org 07 Aug '08

07 Aug '08

Revision: 23649 http://trac.macosforge.org/projects/launchd/changeset/23649 Author: dsorresso(a)apple.com Date: 2008-08-06 17:38:13 -0700 (Wed, 06 Aug 2008) Log Message: ----------- "Branch for PR-5874233 from https://svn.macosforge.org/repository/launchd/trunk" Added Paths: ----------- branches/PR-5874233/ Copied: branches/PR-5874233 (from rev 23648, trunk)

1 0

[23648] branches/PR-4560719/
by source_changes＠macosforge.org 06 Aug '08

06 Aug '08

Revision: 23648 http://trac.macosforge.org/projects/launchd/changeset/23648 Author: dsorresso(a)apple.com Date: 2008-08-06 16:51:14 -0700 (Wed, 06 Aug 2008) Log Message: ----------- "Branch for PR-4560719 from https://svn.macosforge.org/repository/launchd/trunk" Added Paths: ----------- branches/PR-4560719/ Copied: branches/PR-4560719 (from rev 23647, trunk)

1 0

[23647] tags/launchd-258.18/
by source_changes＠macosforge.org 06 Aug '08

06 Aug '08

Revision: 23647 http://trac.macosforge.org/projects/launchd/changeset/23647 Author: zarzycki(a)apple.com Date: 2008-08-05 18:28:23 -0700 (Tue, 05 Aug 2008) Log Message: ----------- "Tagging launchd-258.18 from https://svn.macosforge.org/repository/launchd/branches/SULeopard" Added Paths: ----------- tags/launchd-258.18/ Copied: tags/launchd-258.18 (from rev 23646, branches/SULeopard)

1 0

[23646] branches/SULeopard/launchd/src/launchd_core_logic.c
by source_changes＠macosforge.org 06 Aug '08

06 Aug '08

Revision: 23646 http://trac.macosforge.org/projects/launchd/changeset/23646 Author: zarzycki(a)apple.com Date: 2008-08-05 18:28:01 -0700 (Tue, 05 Aug 2008) Log Message: ----------- <rdar://problem/6120462> gSULeoGaia: Add Common Criteria (a.k.a. BSM a.k.a. audit) support to launchd Modified Paths: -------------- branches/SULeopard/launchd/src/launchd_core_logic.c Modified: branches/SULeopard/launchd/src/launchd_core_logic.c =================================================================== --- branches/SULeopard/launchd/src/launchd_core_logic.c 2008-07-28 18:12:23 UTC (rev 23645) +++ branches/SULeopard/launchd/src/launchd_core_logic.c 2008-08-06 01:28:01 UTC (rev 23646) @@ -420,6 +420,7 @@ static bool job_setup_machport(job_t j); static void job_setup_fd(job_t j, int target_fd, const char *path, int flags); static void job_postfork_become_user(job_t j); +static void job_enable_audit_for_user(job_t j, uid_t u, char *name); static void job_find_and_blame_pids_with_weird_uids(job_t j); static void job_force_sampletool(job_t j); static void job_setup_exception_port(job_t j, task_t target_task); @@ -2925,6 +2926,28 @@ } void +job_enable_audit_for_user(job_t j, uid_t u, char *name) +{ + auditinfo_t auinfo = { + .ai_auid = u, + .ai_asid = j->p, + }; + long au_cond; + + if (!job_assumes(j, auditon(A_GETCOND, &au_cond, sizeof(long)) == 0)) { + _exit(EXIT_FAILURE); + } + + if (au_cond != AUC_NOAUDIT) { + if (!job_assumes(j, au_user_mask(name, &auinfo.ai_mask) == 0)) { + _exit(EXIT_FAILURE); + } else if (!job_assumes(j, setaudit(&auinfo) == 0)) { + _exit(EXIT_FAILURE); + } + } +} + +void job_postfork_become_user(job_t j) { char loginname[2000]; @@ -3001,6 +3024,8 @@ desired_gid = gre->gr_gid; } + job_enable_audit_for_user(j, desired_uid, loginname); + if (!job_assumes(j, setlogin(loginname) != -1)) { _exit(EXIT_FAILURE); }

1 0