Jika/redox-kernel
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow current process to access its own proc data

Browse Source
This commit is contained in:
Jeremy Soller
2021-08-10 16:33:49 -06:00
parent 0b1445f8bd
commit f94dc3beb8
1 changed files with 17 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
src/scheme/proc.rs
View File

@@ -277,21 +277,24 @@ impl Scheme for ProcScheme {
let current = contexts.current().ok_or(Error::new(ESRCH))?;
let current = current.read();
// Do we own the process?
if uid != target.euid && gid != target.egid {
return Err(Error::new(EPERM));
}
// Are we the process?
if target.id != current.id {
// Do we own the process?
if uid != target.euid && gid != target.egid {
return Err(Error::new(EPERM));
}
// Is it a subprocess of us? In the future, a capability could
// bypass this check.
match contexts.ancestors(target.ppid).find(|&(id, _context)| id == current.id) {
Some((id, context)) => {
// Paranoid sanity check, as ptrace security holes
// wouldn't be fun
assert_eq!(id, current.id);
assert_eq!(id, context.read().id);
},
None => return Err(Error::new(EPERM)),
// Is it a subprocess of us? In the future, a capability could
// bypass this check.
match contexts.ancestors(target.ppid).find(|&(id, _context)| id == current.id) {
Some((id, context)) => {
// Paranoid sanity check, as ptrace security holes
// wouldn't be fun
assert_eq!(id, current.id);
assert_eq!(id, context.read().id);
},
None => return Err(Error::new(EPERM)),
}
}
}
};