mirror of
https://github.com/asterisk/asterisk.git
synced 2025-10-31 18:55:19 +00:00
Add -U and -G options to set user/group to run as
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@3470 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
44
asterisk.c
44
asterisk.c
@@ -51,6 +51,8 @@
|
||||
#include <asterisk/config.h>
|
||||
#include <asterisk/config_pvt.h>
|
||||
#include <sys/resource.h>
|
||||
#include <grp.h>
|
||||
#include <pwd.h>
|
||||
|
||||
#if defined(__FreeBSD__)
|
||||
#include <netdb.h>
|
||||
@@ -1413,6 +1415,8 @@ static int show_cli_help(void) {
|
||||
printf("Usage: asterisk [OPTIONS]\n");
|
||||
printf("Valid Options:\n");
|
||||
printf(" -C <configfile> Use an alternate configuration file\n");
|
||||
printf(" -G <group> Run as a group other than the caller\n");
|
||||
printf(" -U <user> Run as a user other than the caller\n");
|
||||
printf(" -c Provide console CLI\n");
|
||||
printf(" -d Enable extra debugging\n");
|
||||
printf(" -f Do not fork\n");
|
||||
@@ -1495,6 +1499,7 @@ int main(int argc, char *argv[])
|
||||
sigset_t sigs;
|
||||
int num;
|
||||
char *buf;
|
||||
char *runuser=NULL, *rungroup=NULL;
|
||||
|
||||
/* Remember original args for restart */
|
||||
if (argc > sizeof(_argv) / sizeof(_argv[0]) - 1) {
|
||||
@@ -1528,7 +1533,7 @@ int main(int argc, char *argv[])
|
||||
}
|
||||
*/
|
||||
/* Check for options */
|
||||
while((c=getopt(argc, argv, "hfdvqprRgcinx:C:")) != -1) {
|
||||
while((c=getopt(argc, argv, "hfdvqprRgcinx:U:G:C:")) != -1) {
|
||||
switch(c) {
|
||||
case 'd':
|
||||
option_debug++;
|
||||
@@ -1580,6 +1585,12 @@ int main(int argc, char *argv[])
|
||||
case 'h':
|
||||
show_cli_help();
|
||||
exit(0);
|
||||
case 'U':
|
||||
runuser = optarg;
|
||||
break;
|
||||
case 'G':
|
||||
rungroup = optarg;
|
||||
break;
|
||||
case '?':
|
||||
exit(1);
|
||||
}
|
||||
@@ -1595,6 +1606,37 @@ int main(int argc, char *argv[])
|
||||
}
|
||||
}
|
||||
|
||||
if (rungroup) {
|
||||
struct group *gr;
|
||||
gr = getgrnam(rungroup);
|
||||
if (!gr) {
|
||||
ast_log(LOG_WARNING, "No such group '%s'!\n", rungroup);
|
||||
exit(1);
|
||||
}
|
||||
if (setuid(gr->gr_gid)) {
|
||||
ast_log(LOG_WARNING, "Unable to setgid to %d (%s)\n", gr->gr_gid, rungroup);
|
||||
exit(1);
|
||||
}
|
||||
if (option_verbose)
|
||||
ast_verbose("Running as group '%s'\n", rungroup);
|
||||
}
|
||||
|
||||
|
||||
if (runuser) {
|
||||
struct passwd *pw;
|
||||
pw = getpwnam(runuser);
|
||||
if (!pw) {
|
||||
ast_log(LOG_WARNING, "No such user '%s'!\n", runuser);
|
||||
exit(1);
|
||||
}
|
||||
if (setuid(pw->pw_uid)) {
|
||||
ast_log(LOG_WARNING, "Unable to setuid to %d (%s)\n", pw->pw_uid, runuser);
|
||||
exit(1);
|
||||
}
|
||||
if (option_verbose)
|
||||
ast_verbose("Running as user '%s'\n", runuser);
|
||||
}
|
||||
|
||||
term_init();
|
||||
printf(term_end());
|
||||
fflush(stdout);
|
||||
|
||||
Reference in New Issue
Block a user