hurd/setauth.c

   1 /* Copyright (C) 1991, 1992, 1993, 1994, 1995 Free Software Foundation, Inc.
   2 This file is part of the GNU C Library.
   3
   4 The GNU C Library is free software; you can redistribute it and/or
   5 modify it under the terms of the GNU Library General Public License as
   6 published by the Free Software Foundation; either version 2 of the
   7 License, or (at your option) any later version.
   8
   9 The GNU C Library is distributed in the hope that it will be useful,
  10 but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12 Library General Public License for more details.
  13
  14 You should have received a copy of the GNU Library General Public
  15 License along with the GNU C Library; see the file COPYING.LIB.  If
  16 not, write to the Free Software Foundation, Inc., 675 Mass Ave,
  17 Cambridge, MA 02139, USA.  */
  18
  19 #include <hurd.h>
  20 #include <hurd/port.h>
  21 #include <hurd/id.h>
  22 #include "set-hooks.h"
  23
  24 /* Things in the library which want to be run when the auth port changes.  */
  25 DEFINE_HOOK (_hurd_reauth_hook, (auth_t new_auth));
  26
  27 #include <cthreads.h>
  28 static struct mutex reauth_lock = MUTEX_INITIALIZER;
  29
  30
  31 /* Set the auth port to NEW, and reauthenticate
  32    everything used by the library.  */
  33 error_t
  34 _hurd_setauth (auth_t new)
  35 {
  36   error_t err;
  37   unsigned int d;
  38   mach_port_t newport, ref;
  39
  40   /* Give the new send right a user reference.
  41      This is a good way to check that it is valid.  */
  42   if (err = __mach_port_mod_refs (__mach_task_self (), new,
  43                                   MACH_PORT_RIGHT_SEND, 1))
  44     return err;
  45
  46   HURD_CRITICAL_BEGIN;
  47
  48   /* We lock against another thread doing setauth.  Anyone who sets
  49      _hurd_ports[INIT_PORT_AUTH] some other way is asking to lose.  */
  50   __mutex_lock (&reauth_lock);
  51
  52   /* Install the new port in the cell.  */
  53   __mutex_lock (&_hurd_id.lock);
  54   _hurd_port_set (&_hurd_ports[INIT_PORT_AUTH], new);
  55   _hurd_id.valid = 0;
  56   if (_hurd_id.rid_auth)
  57     {
  58       __mach_port_deallocate (__mach_task_self (), _hurd_id.rid_auth);
  59       _hurd_id.rid_auth = MACH_PORT_NULL;
  60     }
  61   __mutex_unlock (&_hurd_id.lock);
  62
  63   if (_hurd_init_dtable != NULL)
  64     /* We just have the simple table we got at startup.
  65        Otherwise, a reauth_hook in dtable.c takes care of this.  */
  66     for (d = 0; d < _hurd_init_dtablesize; ++d)
  67       if (_hurd_init_dtable[d] != MACH_PORT_NULL)
  68         {
  69           mach_port_t new;
  70           ref = __mach_reply_port ();
  71           if (! __io_reauthenticate (_hurd_init_dtable[d],
  72                                      ref, MACH_MSG_TYPE_MAKE_SEND) &&
  73               ! HURD_PORT_USE (&_hurd_ports[INIT_PORT_AUTH],
  74                                __auth_user_authenticate
  75                                (port,
  76                                 _hurd_init_dtable[d],
  77                                 ref, MACH_MSG_TYPE_MAKE_SEND,
  78                                 &new)))
  79             {
  80               __mach_port_deallocate (__mach_task_self (),
  81                                       _hurd_init_dtable[d]);
  82               _hurd_init_dtable[d] = new;
  83             }
  84           __mach_port_destroy (__mach_task_self (), ref);
  85         }
  86
  87   ref = __mach_reply_port ();
  88   if (__USEPORT (CRDIR,
  89                  ! __io_reauthenticate (port,
  90                                         ref, MACH_MSG_TYPE_MAKE_SEND) &&
  91                  ! __auth_user_authenticate (new, port,
  92                                              ref, MACH_MSG_TYPE_MAKE_SEND,
  93                                              &newport)))
  94     _hurd_port_set (&_hurd_ports[INIT_PORT_CRDIR], newport);
  95   __mach_port_destroy (__mach_task_self (), ref);
  96
  97   ref = __mach_reply_port ();
  98   if (__USEPORT (CWDIR,
  99                  ! __io_reauthenticate (port,
 100                                         ref, MACH_MSG_TYPE_MAKE_SEND) &&
 101                  ! __auth_user_authenticate (new, port,
 102                                              ref, MACH_MSG_TYPE_MAKE_SEND,
 103                                              &newport)))
 104     _hurd_port_set (&_hurd_ports[INIT_PORT_CWDIR], newport);
 105   __mach_port_destroy (__mach_task_self (), ref);
 106
 107   /* Run things which want to do reauthorization stuff.  */
 108   RUN_HOOK (_hurd_reauth_hook, (new));
 109
 110   __mutex_unlock (&reauth_lock);
 111
 112   HURD_CRITICAL_END;
 113
 114   return 0;
 115 }
 116
 117 int
 118 __setauth (auth_t new)
 119 {
 120   error_t err = _hurd_setauth (new);
 121   return err ? __hurd_fail (err) : 0;
 122 }
 123
 124 weak_alias (__setauth, setauth)