NAME¶
cr_seeotheruids —
determine visibility of objects given their user
credentials
SYNOPSIS¶
int
cr_seeotheruids(
struct
ucred *u1,
struct ucred
*u2);
DESCRIPTION¶
This function determines the visibility of objects in the kernel based on the
real user IDs in the credentials
u1 and
u2 associated with them.
The visibility of objects is influenced by the
sysctl(8) variable
security.bsd.see_other_uids. If this variable
is non-zero then all objects in the kernel are visible to each other
irrespective of their user IDs. If this variable is zero then the object with
credentials
u2 is visible to the object with
credentials
u1 if either
u1 is the super-user credential, or if
u1 and
u2
have the same real user ID.
SYSCTL VARIABLES¶
- security.bsd.see_other_uids
- Must be non-zero if objects with unprivileged credentials are to be able
to see each other.
RETURN VALUES¶
This function returns zero if the object with credential
u1 can “see” the object with
credential
u2, or
ESRCH otherwise.
SEE ALSO¶
cr_seeothergids(9),
p_candebug(9)
