Affected by GO-2024-3181 and 1 other vulnerabilities

GO-2024-3181: PAM module may allow accessing with the credentials of another user in github.com/ubuntu/authd

GO-2024-3188: Authd allows attacker-controlled usernames to yield controllable UIDs in github.com/ubuntu/authd

permissions

package

v0.3.7 Latest Latest Go to latest Published: Dec 11, 2024 License: GPL-3.0 Imports: 13 Imported by: 0

Details

Package permissions handles peer user detection and permissions.

This section is empty.

This section is empty.

func WithUnixPeerCreds() grpc.ServerOption

WithUnixPeerCreds returns the credentials of the caller.

type Manager struct {
	// contains filtered or unexported fields
}

Manager is an abstraction of permission process.

func New(args ...Option) Manager

New returns a new Manager.

func (m Manager) IsRequestFromRoot(ctx context.Context) (err error)

IsRequestFromRoot returns nil if the request was performed by a root user. The pid and uid are extracted from peerCredsInfo in the gRPC context.

type Option func(*options)

Option represents an optional function to override Manager default values.

Path	Synopsis
testutils Package permissionstestutils are exported functions to be run in 3rd party package or integration tests.	Package permissionstestutils are exported functions to be run in 3rd party package or integration tests.