Bug 20600

Summary:	getpeereid obtains credentials from connect()
Product:	Base System	Reporter:	web-freebsd <web-freebsd>
Component:	bin	Assignee:	dd <dd>
Status:	Closed FIXED
Severity:	Affects Only Me
Priority:	Normal
Version:	4.0-RELEASE
Hardware:	Any
OS:	Any

Description web-freebsd 2000-08-14 16:00:05 UTC

	A local-domain server obtains credentials reflecting
	the process that called connect() using getpeereid().
	Credentials consist of effective user and group IDs.
	No action is required of the client (e.g. calling
	sendmsg).  Credentials are passed at connect(),
	therefore clients are unable to consume connections
	anonymously.  Furthermore, complications due to
	the client changing ID or calling fork() before
	sendmsg() do not enter.  These are simply
	connection credentials and not message credentials.

	A patch for FreeBSD 4.0 is available at

	http://www.superscript.com/patches/freebsd_4_0.getpeereid

	The initial application for getpeereid() is ucspi-ipc,
	available with online documentation at

	http://www.superscript.com/ucspi-ipc/intro.html

Comment 1 Chris D.Faulhaber freebsd_committer

2000-08-16 12:42:58 UTC

Responsible Changed
From-To: gnats-admin->freebsd-bugs

Misfiled PR

Comment 2 Sheldon Hearn freebsd_committer

2000-08-17 11:09:58 UTC

Responsible Changed
From-To: freebsd-bugs->freebsd-net

This is something of an experiment.  I'd like to see whether the 
assignment of network-related PR's to the freebsd-net list can be 
a productive exercise.

Comment 3 ru freebsd_committer

2001-07-03 15:00:17 UTC

Responsible Changed
From-To: freebsd-net->freebsd-bugs

Experiment has failed.  peter's script can't handle this. 
It skips ^(freebsd|gnats) responsibles. 
Except a few special ones like freebsd-bugs, freebsd-doc, and freebsd-ports.

Comment 4 dd freebsd_committer

2001-07-03 19:56:21 UTC

Responsible Changed
From-To: freebsd-bugs->dd

I proposed something similar, so I'll take a look at this.

Comment 5 dd freebsd_committer

2001-08-20 01:05:10 UTC

State Changed
From-To: open->closed

getpeereid(3) is implemented in -current in terms of the LOCAL_PEERCRED 
socket option.