Security patches

Corinna Vinschen cygwin-patches@cygwin.com
Wed May 8 07:23:00 GMT 2002


On Wed, May 08, 2002 at 09:57:32AM -0400, Pierre A. Humblet wrote:
> Corinna Vinschen wrote:
> > 
> > We should get that SID easily:
> > 
> >   cygsid sid;
> >   sid.getfrompw (getpwuid (cygheap->user.orig_uid));
> 
> That's a nice looking statement but behind it we are
> searching the whole passwd file (*)
> Also it seems that the rest of Cygwin gets SIDs directly from 
> Windows and not from the less reliable passwd (which may not 
> exist), whenever practical.
> Do you wish to use this method anyway or do you have another
> idea?

I don't insist on using that method.  I think you're right in
your original mail that having the original SID in cygheap
would be the way to go.  So I've just commited an extension
to `class cygheap_user'.  It now holds a new member `orig_psid'
which contains the SID on application start.  This is done in
the already existing method cygheap_user::set_sid() which now
fills `orig_sid' with the same value as `psid' if `psid' is NULL.

You can retrieve the value of `orig_psid' by calling the method
`orig_sid()' now.

Hope that helps,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.



More information about the Cygwin-patches mailing list