expose setresuid #50757

solinym · 2009-07-17T22:25:32Z

BPO	6508
Nosy	@loewis, @gpshead, @amauryfa, @davidmalcolm
Files	foo.txt: patch to add {get,set}res{uid,gid} functionality foo.txt: diff from Python 2.6.1 setresuid.patch res.patch: complete patch for making {set,get}res{uid,gid} available under os/posix module issue6508-gps01.diff

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = 'https://github.com/gpshead'
closed_at = <Date 2009-11-27.14:13:08.935>
created_at = <Date 2009-07-17.22:25:31.641>
labels = ['extension-modules', 'type-feature']
title = 'expose setresuid'
updated_at = <Date 2009-11-27.14:13:08.934>
user = 'https://bugs.python.org/solinym'

bugs.python.org fields:

activity = <Date 2009-11-27.14:13:08.934>
actor = 'loewis'
assignee = 'gregory.p.smith'
closed = True
closed_date = <Date 2009-11-27.14:13:08.935>
closer = 'loewis'
components = ['Extension Modules']
creation = <Date 2009-07-17.22:25:31.641>
creator = 'solinym'
dependencies = []
files = ['14903', '14918', '14919', '14923', '15297']
hgrepos = []
issue_num = 6508
keywords = ['patch']
message_count = 18.0
messages = ['90642', '90645', '91852', '91855', '91858', '92720', '92726', '92744', '92745', '92788', '92790', '92813', '92830', '92831', '94997', '94999', '95062', '95770']
nosy_count = 5.0
nosy_names = ['loewis', 'gregory.p.smith', 'amaury.forgeotdarc', 'solinym', 'dmalcolm']
pr_nums = []
priority = 'normal'
resolution = 'accepted'
stage = 'test needed'
status = 'closed'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue6508'
versions = ['Python 2.7', 'Python 3.2']

solinym · 2009-07-17T22:25:31Z

Python should expose setresuid in the same module that exposes setuid.

The reason why is complicated, but is best explained here:

http://www.eecs.berkeley.edu/~daw/papers/setuid-usenix02.pdf

I might work on a patch to implement this.

solinym · 2009-07-17T22:47:21Z

should also expose setresgid for same reason.

Paper also defines a higher-level API in section 8.2.1 that would
probably be worth implementing.

solinym · 2009-08-22T03:03:00Z

Where would be the best place to put these non-POSIX calls?

I looked at posixmodule.c and it's a mess; much conditional CPP logic
governing what gets compiled, not clear where I should add something
like this there - if I should at all, since these routines are not POSIX
routines.

Perhaps there should be a module called Unix or something?

Also, knowing whether the functions were avaiable at compile time would
be tricky; some Unix OSes have them and others don't. It sounds like a
job for autoconf to define HAVE_SETRESUID and other CPP definitions like
that so we can compile cleanly and portably...

Thoughts?

amauryfa · 2009-08-22T07:07:25Z

Yes, just put it near the numerous set_XXXuid functions, protected with a
HAVE_SETRESUID macro (you will have to modify configure.in as well)

loewis · 2009-08-22T07:48:50Z

Where would be the best place to put these non-POSIX calls?

I looked at posixmodule.c and it's a mess; much conditional CPP logic
governing what gets compiled, not clear where I should add something
like this there - if I should at all, since these routines are not POSIX
routines.

Don't worry about that - the POSIX module is the right place, despite
it's name.

Perhaps there should be a module called Unix or something?

That wouldn't reduce the need to remove CPP logic. I personally don't
find that CPP logic very messy - most of it is fairly clear (perhaps
with popen being the exception).

Also, knowing whether the functions were avaiable at compile time would
be tricky; some Unix OSes have them and others don't.

I don't understand. When you compile for a specific Unix, it either has
them or not, right? So you *can* test at compile time, and easily so
(the same way it test for about 20 other functions).

It sounds like a
job for autoconf to define HAVE_SETRESUID and other CPP definitions like
that so we can compile cleanly and portably...

Correct - you need to change configure.in as well.

solinym · 2009-09-16T21:35:56Z

I have coded up a first draft at implemented {get,set}res{gid,uid}
functions. This completes the exposure of the user and group setting
functions, and enables python programmers to be able to safely drop
privileges, for example when running network daemons as root that need
to drop down to user privileges, or writing a setuid program which needs
to do the same.

I cannot test this in my current environment because I'm stuck with Red
Hat and it does not have a recent enough automake to re-create configure
from configure.in.

davidmalcolm · 2009-09-16T22:23:04Z

I cannot test this in my current environment because I'm stuck with Red
Hat and it does not have a recent enough automake to re-create configure
from configure.in.

FWIW, it may be an _autoconf_ version issue; I'm able to recreate a
"configure" from Python's "configure.in" on my RHEL5 box by downloading
autoconf-2.61 from http://ftp.gnu.org/gnu/autoconf/
installing it to /usr/local (with ./configure ; make; sudo make install)
then invoking /usr/local/bin/autoconf in the root of an SVN checkout of
python. Hope this is helpful.

loewis · 2009-09-17T08:12:44Z

Please do try this out on your system. Installing autoconf locally is
really not difficult: download 2.61, then do

./configure --prefix=$HOME/ac261
make
make install

This will give you $HOME/ac261/bin/auto{conf|header}; automake is not
needed for Python.

loewis · 2009-09-17T08:17:53Z

Your patch looks right, although I have a few style issues:

the if chaining looks complicated: we don't usually have an else when
the if returns
make sure you use tabs consistently with the rest of the file
it may be better to use uid_t where appropriate, see bpo-6873

solinym · 2009-09-17T18:03:13Z

Simplified if/else chaining

Uploading here before testing on new machine (m4 was too old on previous
machine)

solinym · 2009-09-17T19:05:14Z

I applied the same patch to Python 2.6.2 and believe that I got the
tab/space situation worked out so that it's consistent with the rest of
posixmodule.c

I also executed autoconf to convert configure.in to configure, and
judging by the config.log, it is testing for and finding setresuid and
friends. It is also defining HAVE_SETRESUID to 1 as expected. However,
when I execute this python and import os (or posix), it says that module
doesn't have the setresuid attribute.

I ran "strings" on libpython2.6a and found that it has the strings
"setuid" and "setreuid" as expected, but not my "setresuid".

Does anyone have any idea why this might be? I'm trying hard to get
this into python but I'm not an expert on how the build works.

loewis · 2009-09-18T07:44:54Z

Your patch looks good (except that in getresuid, you seem to be missing
return). I have no clue why it doesn't work; I'll see whether I can try it
out on Linux within the next few weeks.

The one puzzling detail is that you don't include a patch to
pyconfig.h.in: did you run autoheader?

solinym · 2009-09-18T16:31:51Z

This patch fixes a number of typos in the original and, to my knowledge,
is now complete.

I have tested this manually and confirmed that it works. I would start
as root, setresuid/gid to some non-root uid/gids, getresuid/gid to test
those functions, and follow it up with os.system("id") to check using an
outside utility.

solinym · 2009-09-18T16:33:25Z

On Fri, Sep 18, 2009 at 07:44:56AM +0000, Martin v. L??wis wrote:

Your patch looks good (except that in getresuid, you seem to be missing
return). I have no clue why it doesn't work; I'll see whether I can try it
out on Linux within the next few weeks.

I am testing it out now on a more up-to-date machine.

The one puzzling detail is that you don't include a patch to
pyconfig.h.in: did you run autoheader?

No, I did not - it has been a long time since I was familiar with
autotools - and that was why there was no access to these functions
when I compiled before.

I've now got a complete, tested patch up on bugs.python.org

Obama Nation | My emails do not have attachments; it's a digital signature
that your mail program doesn't understand. | http://www.subspacefield.org/~travis/
If you are a spammer, please email john@subspacefield.org to get blacklisted.

solinym · 2009-11-06T20:17:23Z

So this patch is done and tested, but no movement on it since 18
September. Is there anything I can do to help move this along towards
integration?

gpshead · 2009-11-06T21:04:00Z

I'll take care of it. It needs unittests but those will be trivial.

gpshead · 2009-11-09T08:03:32Z

Attaching an updated patch that includes unittests.

I also changed the set functions to take input as long's instead of int's
as that is more likely to fit within a uid_t and forced the return values
on the get's to fit within a long and used Py_BuildValue() to handle
memory errors and such that could happen while allocating the ints and
tuple rather than PyTuple_Pack.

Remaining work: os module documentation.

loewis · 2009-11-27T14:13:09Z

I have now added documentation to os.rst, and committed the patch as
r76550 and r76552.

Thanks for contributing it.

solinym mannequin added the extension-modules C modules in the Modules dir label Jul 17, 2009

gpshead self-assigned this Nov 6, 2009

gpshead added the type-feature A feature request or enhancement label Nov 6, 2009

loewis mannequin closed this as completed Nov 27, 2009

ezio-melotti transferred this issue from another repository Apr 10, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

expose setresuid #50757

expose setresuid #50757

solinym mannequin commented Jul 17, 2009

solinym mannequin commented Jul 17, 2009

solinym mannequin commented Jul 17, 2009

solinym mannequin commented Aug 22, 2009

amauryfa commented Aug 22, 2009

loewis mannequin commented Aug 22, 2009

solinym mannequin commented Sep 16, 2009

davidmalcolm commented Sep 16, 2009

loewis mannequin commented Sep 17, 2009

loewis mannequin commented Sep 17, 2009

solinym mannequin commented Sep 17, 2009

solinym mannequin commented Sep 17, 2009

loewis mannequin commented Sep 18, 2009

solinym mannequin commented Sep 18, 2009

solinym mannequin commented Sep 18, 2009

solinym mannequin commented Nov 6, 2009

gpshead commented Nov 6, 2009

gpshead commented Nov 9, 2009

loewis mannequin commented Nov 27, 2009

expose setresuid #50757

expose setresuid #50757

Comments

solinym mannequin commented Jul 17, 2009

solinym mannequin commented Jul 17, 2009

solinym mannequin commented Jul 17, 2009

solinym mannequin commented Aug 22, 2009

amauryfa commented Aug 22, 2009

loewis mannequin commented Aug 22, 2009

solinym mannequin commented Sep 16, 2009

davidmalcolm commented Sep 16, 2009

loewis mannequin commented Sep 17, 2009

loewis mannequin commented Sep 17, 2009

solinym mannequin commented Sep 17, 2009

solinym mannequin commented Sep 17, 2009

loewis mannequin commented Sep 18, 2009

solinym mannequin commented Sep 18, 2009

solinym mannequin commented Sep 18, 2009

I've now got a complete, tested patch up on bugs.python.org

solinym mannequin commented Nov 6, 2009

gpshead commented Nov 6, 2009

gpshead commented Nov 9, 2009

loewis mannequin commented Nov 27, 2009