Changeset 574 for trunk/run_email2trac.c

Timestamp:

10/20/11 09:20:17 (13 years ago)

Author:

bas

Message:

added support for initgroup, thanks to Dennis McRitchie?,
closes #274

File:

• trunk/run_email2trac.c (modified) (3 diffs)

trunk/run_email2trac.c

@@ -27 +27 @@
 #
 */
+#include "config.h"
+
+#include <sys/types.h>
 #include <stdlib.h>
 #include <unistd.h>
@@ -34 +37 @@
 #include <stdio.h>
 #include <limits.h>
+#ifdef HAVE_INITGROUPS
+#include <grp.h>
+#endif
 
 #include "run_email2trac.h"
@@ -107 +113 @@
   }
   
-  /* set UID/GID to Trac (or apache) user */
+  /* set UID/GID and supplementary groups to be Trac (or apache) user */
   check_username(TRAC_USER);
   if ( TRAC = getpwnam(TRAC_USER) ) {
+#ifdef HAVE_INITGROUPS
+    if (initgroups(TRAC_USER, TRAC->pw_gid)) {
+      if ( DEBUG ) printf("initgroups failed\n");
+      return -7;    /* 249 : Can't set supplementary groups */
+    }
+#endif
     if (setgid(TRAC->pw_gid) || setuid(TRAC->pw_uid)) {
       if ( DEBUG ) printf("setgid or setuid failed\n");
-      return -5;
+      return -5;   /* 251: Can't set gid or uid */
     }
   } else {
     if ( DEBUG ) printf("Invalid Trac user (%s)\n",TRAC_USER);
-    return -3;     /* 253 : Trac user not found */
+    return -6;     /* 250 : Trac user not found */
   }