1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 This file is part of systemd.
6 Copyright 2010 Lennart Poettering
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
29 #include <sys/prctl.h>
30 #include <sys/capability.h>
37 int audit_session_from_pid(pid_t pid, uint32_t *id) {
44 if (have_effective_cap(CAP_AUDIT_CONTROL) <= 0)
48 r = read_one_line_file("/proc/self/sessionid", &s);
52 if (asprintf(&p, "/proc/%lu/sessionid", (unsigned long) pid) < 0)
55 r = read_one_line_file(p, &s);
62 r = safe_atou32(s, &u);
68 if (u == (uint32_t) -1 || u <= 0)
75 int audit_loginuid_from_pid(pid_t pid, uid_t *uid) {
82 /* Only use audit login uid if we are executed with sufficient
83 * capabilities so that pam_loginuid could do its job. If we
84 * are lacking the CAP_AUDIT_CONTROL capabality we most likely
85 * are being run in a container and /proc/self/loginuid is
86 * useless since it probably contains a uid of the host
89 if (have_effective_cap(CAP_AUDIT_CONTROL) <= 0)
93 r = read_one_line_file("/proc/self/loginuid", &s);
97 if (asprintf(&p, "/proc/%lu/loginuid", (unsigned long) pid) < 0)
100 r = read_one_line_file(p, &s);
107 r = parse_uid(s, &u);