diff options
| author | Sebastian Huber <sebastian.huber@embedded-brains.de> | 2014-11-18 11:07:36 +0100 |
|---|---|---|
| committer | Sebastian Huber <sebastian.huber@embedded-brains.de> | 2014-11-20 10:30:25 +0100 |
| commit | ffd52858449d58111581d5ee82ff1c3ffba585a5 (patch) | |
| tree | b125a84336e3a14efaa081fe9f502c967dadf67a /cpukit/libmisc/shell/shell.h | |
| parent | shell: Add and use rtems_shell_execute_cmd() (diff) | |
| download | rtems-ffd52858449d58111581d5ee82ff1c3ffba585a5.tar.bz2 | |
shell: Inherit UID and GID if no login check
Use the UID and GID of the executing user for the real and effective UID
and GID of the shell task in case no login check is present. This
prevents privilege escalation via shell scripts.
Diffstat (limited to 'cpukit/libmisc/shell/shell.h')
| -rw-r--r-- | cpukit/libmisc/shell/shell.h | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/cpukit/libmisc/shell/shell.h b/cpukit/libmisc/shell/shell.h index 726a8eeb4e..c137378cbe 100644 --- a/cpukit/libmisc/shell/shell.h +++ b/cpukit/libmisc/shell/shell.h @@ -17,6 +17,7 @@ #ifndef __RTEMS_SHELL_H__ #define __RTEMS_SHELL_H__ +#include <sys/types.h> #include <rtems.h> #include <stdio.h> #include <termios.h> @@ -199,6 +200,18 @@ typedef struct { bool output_append; rtems_id wake_on_end; rtems_shell_login_check_t login_check; + + /** + * @brief The real and effective UID of the shell task in case no login check + * is present. + */ + uid_t uid; + + /** + * @brief The real and effective GID of the shell task in case no login check + * is present. + */ + gid_t gid; } rtems_shell_env_t; bool rtems_shell_main_loop( |