/usr/include/arc/User.h is in nordugrid-arc-dev 5.0.5-1ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 | // -*- indent-tabs-mode: nil -*-
#ifndef __ARC_USER_H__
#define __ARC_USER_H__
#include <string>
struct passwd;
namespace Arc {
/// Platform independent representation of system user
/** \ingroup common
* \headerfile User.h arc/User.h */
class User {
private:
// local name, home directory, uid and gid of this user
std::string name;
std::string home;
int uid;
int gid;
bool valid;
bool set(const struct passwd*);
public:
/// Construct user from current process owner.
User();
/// Construct user from username and optional group name.
/** If group is not specified it is determined automatically. */
User(const std::string& name, const std::string& group="");
/// Construct user from uid and optional gid.
/** If gid is not specified it is determined automatically. */
User(int uid, int gid=-1);
/// Returns true if this is a valid user.
operator bool() const {
return valid;
}
/// Returns true is this is not a valid user.
bool operator !() const {
return !valid;
}
/// Returns the name of this user.
const std::string& Name(void) const {
return name;
}
/// Returns the path to the user's home directory.
const std::string& Home(void) const {
return home;
}
/// Returns the user's uid.
int get_uid(void) const {
return (int)uid;
}
/// Returns the user's gid.
int get_gid(void) const {
return (int)gid;
}
/// Returns true if this User's name is the same as n.
bool operator==(const std::string& n) {
return (n == name);
}
/// Check if this User has the rights specified by flags on the given path.
/** \return 0 if User has the rights */
int check_file_access(const std::string& path, int flags) const;
/// Change the owner of the current process.
/** Internally this method calls setuid() and setgid() with this User's
values. It can be used in the initializer of Arc::Run to switch the
owner of a child process just after fork(). To temporarily change the
owner of a thread in a multi-threaded environment UserSwitch should be
used instead.
\return true if switch succeeded. */
bool SwitchUser() const;
}; // class User
/// Class for temporary switching of user id.
/** If this class is created, the user identity is switched to the provided
uid and gid. Due to an internal lock there will be only one valid
instance of this class. Any attempt to create another instance
will block until the first one is destroyed.
If uid and gid are set to 0 then the user identity is not switched,
but the lock is applied anyway.
The lock has a dual purpose. The first and most important is to
protect communication with the underlying operating system which may
depend on user identity. For that it is advisable for code which
talks to the operating system to acquire a valid instance of this class.
Care must be taken not to hold that instance too long as
that may block other code in a multithreaded environment.
The other purpose of this lock is to provide a workaround for a glibc bug
in __nptl_setxid. This bug causes lockup of seteuid() function
if racing with fork. To avoid this problem the lock mentioned above
is used by the Run class while spawning a new process.
\ingroup common
\headerfile User.h arc/User.h */
class UserSwitch {
private:
int old_uid;
int old_gid;
bool valid;
public:
/// Switch uid and gid.
UserSwitch(int uid,int gid);
/// Switch back to old uid and gid and release lock on this class.
~UserSwitch(void);
/// Returns true if switching user succeeded.
operator bool(void) { return valid; };
}; // class UserSwitch
} // namespace Arc
#endif
|