[lkml]   [1996]   [Jul]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectExtended SCM_RIGHTS for AF_UNIX sockets

We can now pass file descriptors down Unix domain sockets with
an SCM_RIGHTS control messages in sendmsg() but can't easily
tell for *certain* who sent them to us. [Guesses made via
getpeername and stat are subject to minor attacks.] SysV file
descriptor passing uses a STREAMS I_SENDFD and the receiver gets
the sender's euid and egid. I'd like to add something like
SCM_XRIGHTS to Linux which would behaves like SCM_RIGHTS on the
sender side but the receiver gets a control message containing:
uid_t uid;
gid_t gid;
pid_t pid;
int fd[...];
instead of just the array of descriptors. Notice that the trivial
case is also useful. The sender can send zero file descriptors with
SCM_RIGHTS and the receiver can verify who sent the message, both
uid/gid and the PID of the sender. Would anyone mind if I added this


Malcolm Beattie <>
Oxford University Computing Services
"Widget. It's got a widget. A lovely widget. A widget it has got." --Jack Dee

 \ /
  Last update: 2005-03-22 13:37    [W:0.077 / U:2.232 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site