1 # This file is part of NIT ( http://www.nitlanguage.org ).
3 # Copyright 2013 Alexis Laferrière <alexis.laf@xymus.net>
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
9 # http://www.apache.org/licenses/LICENSE-2.0
11 # Unless required by applicable law or agreed to in writing, software
12 # distributed under the License is distributed on an "AS IS" BASIS,
13 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 # See the License for the specific language governing permissions and
15 # limitations under the License.
17 # Process privileges management utilities
19 # Used mainly by daemons and such to aquire resources as su and
20 # then drop back to a restricted user.
27 # Does the operating system know the user named `self`?
30 var passwd
= new Passwd.from_name
(to_s
)
31 return not passwd
.address_is_null
34 # Does the operating system know the group named `self`?
35 fun group_exists
: Bool
37 var passwd
= new Group.from_name
(to_s
)
38 return not passwd
.address_is_null
42 # Class to manage user groups
49 var group
: nullable String
51 # Drop privileges of the running program to those of `self`
53 # require: `user.user_exists and (group == null or group.group_exists)`
56 var passwd
= new Passwd.from_name
(user
)
57 assert not passwd
.address_is_null
63 var gpasswd
= new Group.from_name
(group
)
64 assert not gpasswd
.address_is_null
73 # Option to ask for a username and group
74 class OptionUserAndGroup
77 redef type VALUE: nullable UserGroup
79 # Create an `OptionUserAndGroup` for dropping privileges
80 init for_dropping_privileges
82 init("Drop privileges to user:group or simply user", null, ["-u", "--usergroup"])
85 redef fun convert
(str
)
87 var words
= str
.split
(":")
88 if words
.length
== 1 then
89 return new UserGroup(str
, null)
90 else if words
.length
== 2 then
91 return new UserGroup(words
[0], words
[1])
93 errors
.add
("Option {names.join(", ")} expected parameter in the format \"user
:group\
" or simply \"user\
".\n")