From 006dd48f14798b398aa5ed68237bbcf5db3d53b7 Mon Sep 17 00:00:00 2001 From: Thomas Walker Lynch Date: Sat, 20 Sep 2025 19:27:21 +0000 Subject: [PATCH] blessing the root user --- developer/machine/x86_64/man_in_grey_apply | Bin 17232 -> 17232 bytes developer/source/Man_In_Grey_apply.c | 10 +++++----- release/x86_64/man_in_grey_apply | Bin 17232 -> 17232 bytes 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/developer/machine/x86_64/man_in_grey_apply b/developer/machine/x86_64/man_in_grey_apply index ee431abde30d5d8d74318972d771c04085608d04..48dfade7b32168aaf29ea41e2fc4c59b54986c31 100755 GIT binary patch delta 1699 zcmYLKeQZ-z6o0SnMz^tcjFC+Vq3PaWiZGsJ!jd)gVaHzGs}d!K!~w!4f=;HhOGuon z*mmLO@iyg+@Q3k>fCdv4Eg^hmOt!U-h?zqZ;}#$$;;l>hNX7>H;Q70+Y-`eYdVlAf z-}#+$@4Fpn;|JRKlU_cn!OEGRhM1o(;}`hc>E*1|iRF61!_YU47yj6|zxdp>p(jR@ ztBa4;9gVeEPdakQw5)lCayd@gtgp>4=jZEh-D07?IBRsBy3Zx zHA=9G+CLlkFo9fQ6m_-0cg8n**P||1O@7SQVU(p(bN}>prbdb@g z?{f-Cii0Fh|7PntpHK=Q@7+Ju^Acwnca>dWi$W{HhMT8y> z8Cio=ngjS8o2smp-_B;nlZmG3)rmQLB8^YN(DT4Au1CD0t-K3B(JlxBE;tT>s7mY> z`^7>?y$)9ANsHX+RuHzQ98cUa^JP|#jH6!Kpe08GaqKOy=CbErs}bBvpg1aln1 z1LLlNF$F8+A;dO;*-!eY09YYok6Q7(!L;T9LtC$Xn#FN}Xewy)tIga@#1>OhIf0MT z2Zj+Dnn_1z%|Jo^0Vd&h`tH#L0x+|g2!_F30t#7MS;1-@*NY05+KVwsziJco^@Sy& z;XByO=9D-nYeB&)lg{A*G%KsMf=edXX$90_Ln5CukX!@bEmXxAylh|IL`CQ6A!s>{ z_k$#G*l8g!PzJ4vTIwS=k#QM5WNd>&A-4eZr-1-~kjXh8;t=5hULT4}4aP1@cgYo`QLJh@Htp_>No8-}`$j)6ut zd8^sP$R(8e(1MCamzCWS^fcnwne{MQE#n_lm$lqUn1EU-=(Rw~dk*N~L zMqCQHke*byhnK>Ae4y^$3u@(PAZj=xpWuqXmL8jDo*MdtN#A^>Mr|3j%TXf;rR5)k zogPVhVvJzqEY3}QoMkS07MbP@Wi?M$J)4%VVT#HhAP3r;kadQ=4aqAgBzF6WO`uBv zVze8PiB>v$Xp24#-EBCiVk%jNw-N`K^5Dm^6if3$5^-8^WhLDJ%-)ihr%j%Od7n`c zW$5sjImT$Z!e>kyi9<&Lb6!k4cc-1d%{s@~VDmFjZ`Vh$FCN=rU((dr7x1rP7W=q9 z;a+9glG2|nUbfAJAk1axoXrRU|o8XI`(PaD5mKOt80zSv#ydn?}> h`?91`aUpsNEO}gNqKBZlO1~aD^M12qs3@+}0KvyAQi|1X3+# zE#XbMjpT?i_=i9+iX;k_00A5w`$RDggor_45Hz>!3(Xvp4bIqyrxTF;PKAmCI6*F_$B(-Yhb8NdBp1J(3@#Z9mNe!K>=6a;-cG50| zV_azKWQGwN##yd05i=nslYo^Mn^|y+1zjc{Yr06o_J_na!W5m3EHD#8Z z($0!xu%z-~ao(_6F{^^@SKDXh&1*M_4IL(l1lXiF#x=dI>$)8AsOf2CK}fFcEP7~c zP1`lD>qz-n3d10sy{*E4_9sks(qW``5-cqZ2GXhhJO=7S+MYxtdqGwl)_fvc^R-J< zCh`#@liR{&(xKg^>&hZ)K13T=fh;NcVH#08x!#cPG~}~@XrDgymB|A*e+dKpb}`hi z67t~-Tw_0uMvT0ZDw9#WGOejEmCHaiV~J8;7Z>_PT{C-ru+qdZw$OmTB6QtXs@ah) zvNqAImD$0m&D$7T4pv3T=+M{ zl|E_9hV{Ko;zn_kSSpsaYG)qk`f0;O$^C+AD+R$57`29HfN$c!5o-Sc_H(NsDJz)= zV33uw)@~j^A%YhRG2w!6Sr|EoEz^uP8Ce(98^q(*dzAPt6f_@RGP%?<)bp5gSa_lSPj}uls_T)J+DgnNG6*uEfysIB+rZa`fO99V%gT~P_&7qEZjXq8>Cnm z>088QgfOLDa5i3_hE`T=Xk$w%hu@3@{*8N`##MupteawVi?+iE@4vVfgd{1f`_2P= zAJH{e9Qhs!&$E4}gqWQaGui@Jv7a??H*N=Qhsw^KAB>PuX0vZIK6z0i{I?6@z?ST>->(Ig;Te~(G{E3d8fY@<#- zXPuAtSJ!&o^=^-Iv(u4-PXUk0Tb5Y@1G*l-!ZW1nhcE^(UcoqyoyZvb@2g%*mg(ye zb)O~2G}^EJXvr##4eC0I|Kv%-Y$JZz*kCiYt~U43JBAAQ@Y@gmb`*mtG^aM1R-4ls z6AI0|l2~ZY-aTopdD+g%qIqS*ly&BwiiD37qU&C?BuBd!UrS`W)WgDR_E7Y1;kyKO id-OnV(^U3=D%h4LKmBWS+g2oBoA|@K7CmhH%Je^9Uil*c diff --git a/developer/source/Man_In_Grey_apply.c b/developer/source/Man_In_Grey_apply.c index 9cd35f3..0b8f386 100644 --- a/developer/source/Man_In_Grey_apply.c +++ b/developer/source/Man_In_Grey_apply.c @@ -116,13 +116,13 @@ int main(int argc ,char **argv) { return 0; } - /* policy: if privileged but user is not in sudo group, explain and abort */ - if (privileged && !in_sudo) { - struct passwd *pw = getpwuid(getuid()); + /* policy: if privileged but real user is neither root nor in sudo, abort */ + uid_t ruid = getuid(); + if (privileged && ruid != 0 && !in_sudo) { + struct passwd *pw = getpwuid(ruid); const char *name = pw ? pw->pw_name : "unknown"; fprintf(stderr, - "refusing privileged apply: real user '%s' is not a member of group 'sudo'\n" - "hint: either add user to sudo, or remove setuid bit from man_in_grey_apply to test unprivileged.\n", + "refusing privileged apply: real user '%s' is not root and not in group 'sudo'\n", name ); return 1; diff --git a/release/x86_64/man_in_grey_apply b/release/x86_64/man_in_grey_apply index ee431abde30d5d8d74318972d771c04085608d04..48dfade7b32168aaf29ea41e2fc4c59b54986c31 100755 GIT binary patch delta 1699 zcmYLKeQZ-z6o0SnMz^tcjFC+Vq3PaWiZGsJ!jd)gVaHzGs}d!K!~w!4f=;HhOGuon z*mmLO@iyg+@Q3k>fCdv4Eg^hmOt!U-h?zqZ;}#$$;;l>hNX7>H;Q70+Y-`eYdVlAf z-}#+$@4Fpn;|JRKlU_cn!OEGRhM1o(;}`hc>E*1|iRF61!_YU47yj6|zxdp>p(jR@ ztBa4;9gVeEPdakQw5)lCayd@gtgp>4=jZEh-D07?IBRsBy3Zx zHA=9G+CLlkFo9fQ6m_-0cg8n**P||1O@7SQVU(p(bN}>prbdb@g z?{f-Cii0Fh|7PntpHK=Q@7+Ju^Acwnca>dWi$W{HhMT8y> z8Cio=ngjS8o2smp-_B;nlZmG3)rmQLB8^YN(DT4Au1CD0t-K3B(JlxBE;tT>s7mY> z`^7>?y$)9ANsHX+RuHzQ98cUa^JP|#jH6!Kpe08GaqKOy=CbErs}bBvpg1aln1 z1LLlNF$F8+A;dO;*-!eY09YYok6Q7(!L;T9LtC$Xn#FN}Xewy)tIga@#1>OhIf0MT z2Zj+Dnn_1z%|Jo^0Vd&h`tH#L0x+|g2!_F30t#7MS;1-@*NY05+KVwsziJco^@Sy& z;XByO=9D-nYeB&)lg{A*G%KsMf=edXX$90_Ln5CukX!@bEmXxAylh|IL`CQ6A!s>{ z_k$#G*l8g!PzJ4vTIwS=k#QM5WNd>&A-4eZr-1-~kjXh8;t=5hULT4}4aP1@cgYo`QLJh@Htp_>No8-}`$j)6ut zd8^sP$R(8e(1MCamzCWS^fcnwne{MQE#n_lm$lqUn1EU-=(Rw~dk*N~L zMqCQHke*byhnK>Ae4y^$3u@(PAZj=xpWuqXmL8jDo*MdtN#A^>Mr|3j%TXf;rR5)k zogPVhVvJzqEY3}QoMkS07MbP@Wi?M$J)4%VVT#HhAP3r;kadQ=4aqAgBzF6WO`uBv zVze8PiB>v$Xp24#-EBCiVk%jNw-N`K^5Dm^6if3$5^-8^WhLDJ%-)ihr%j%Od7n`c zW$5sjImT$Z!e>kyi9<&Lb6!k4cc-1d%{s@~VDmFjZ`Vh$FCN=rU((dr7x1rP7W=q9 z;a+9glG2|nUbfAJAk1axoXrRU|o8XI`(PaD5mKOt80zSv#ydn?}> h`?91`aUpsNEO}gNqKBZlO1~aD^M12qs3@+}0KvyAQi|1X3+# zE#XbMjpT?i_=i9+iX;k_00A5w`$RDggor_45Hz>!3(Xvp4bIqyrxTF;PKAmCI6*F_$B(-Yhb8NdBp1J(3@#Z9mNe!K>=6a;-cG50| zV_azKWQGwN##yd05i=nslYo^Mn^|y+1zjc{Yr06o_J_na!W5m3EHD#8Z z($0!xu%z-~ao(_6F{^^@SKDXh&1*M_4IL(l1lXiF#x=dI>$)8AsOf2CK}fFcEP7~c zP1`lD>qz-n3d10sy{*E4_9sks(qW``5-cqZ2GXhhJO=7S+MYxtdqGwl)_fvc^R-J< zCh`#@liR{&(xKg^>&hZ)K13T=fh;NcVH#08x!#cPG~}~@XrDgymB|A*e+dKpb}`hi z67t~-Tw_0uMvT0ZDw9#WGOejEmCHaiV~J8;7Z>_PT{C-ru+qdZw$OmTB6QtXs@ah) zvNqAImD$0m&D$7T4pv3T=+M{ zl|E_9hV{Ko;zn_kSSpsaYG)qk`f0;O$^C+AD+R$57`29HfN$c!5o-Sc_H(NsDJz)= zV33uw)@~j^A%YhRG2w!6Sr|EoEz^uP8Ce(98^q(*dzAPt6f_@RGP%?<)bp5gSa_lSPj}uls_T)J+DgnNG6*uEfysIB+rZa`fO99V%gT~P_&7qEZjXq8>Cnm z>088QgfOLDa5i3_hE`T=Xk$w%hu@3@{*8N`##MupteawVi?+iE@4vVfgd{1f`_2P= zAJH{e9Qhs!&$E4}gqWQaGui@Jv7a??H*N=Qhsw^KAB>PuX0vZIK6z0i{I?6@z?ST>->(Ig;Te~(G{E3d8fY@<#- zXPuAtSJ!&o^=^-Iv(u4-PXUk0Tb5Y@1G*l-!ZW1nhcE^(UcoqyoyZvb@2g%*mg(ye zb)O~2G}^EJXvr##4eC0I|Kv%-Y$JZz*kCiYt~U43JBAAQ@Y@gmb`*mtG^aM1R-4ls z6AI0|l2~ZY-aTopdD+g%qIqS*ly&BwiiD37qU&C?BuBd!UrS`W)WgDR_E7Y1;kyKO id-OnV(^U3=D%h4LKmBWS+g2oBoA|@K7CmhH%Je^9Uil*c -- 2.20.1