diff options
| author | Werner Koch <[email protected]> | 2024-06-19 07:34:40 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2024-06-19 07:34:40 +0000 |
| commit | bdd1060445fa358d3ca3f1f98334de60cd5d6c10 (patch) | |
| tree | 2aa332e319c4825529466273186cdb0fbd520607 /src/spawn-posix.c | |
| parent | spawn: Keep struct definitions at the top of the file. (diff) | |
| download | libgpg-error-bdd1060445fa358d3ca3f1f98334de60cd5d6c10.tar.gz libgpg-error-bdd1060445fa358d3ca3f1f98334de60cd5d6c10.zip | |
spawn: New flag GPGRT_PROCESS_NO_EUID_CHECK
* src/gpg-error.h.in (GPGRT_PROCESS_NO_EUID_CHECK): New.
* src/spawn-posix.c (spawn_detached): Move check to ...
(_gpgrt_process_spawn): here and skip if flag is set.
Diffstat (limited to 'src/spawn-posix.c')
| -rw-r--r-- | src/spawn-posix.c | 16 |
1 files changed, 9 insertions, 7 deletions
diff --git a/src/spawn-posix.c b/src/spawn-posix.c index 03ad37a..7de02a9 100644 --- a/src/spawn-posix.c +++ b/src/spawn-posix.c @@ -365,13 +365,6 @@ spawn_detached (const char *pgmname, const char *argv[], gpg_err_code_t ec; pid_t pid; - /* FIXME: Is this GnuPG specific or should we keep it. */ - if (getuid() != geteuid()) - { - xfree (argv); - return GPG_ERR_BUG; - } - if (access (pgmname, X_OK)) { ec = _gpg_err_code_from_syserror (); @@ -542,6 +535,15 @@ _gpgrt_process_spawn (const char *pgmname, const char *argv1[], return GPG_ERR_INV_ARG; } + if (!(flags & GPGRT_PROCESS_NO_EUID_CHECK)) + { + if (getuid() != geteuid()) + { + xfree (argv); + return GPG_ERR_FORBIDDEN; + } + } + return spawn_detached (pgmname, argv, act); } |