1*c9945492SAndroid Build Coastguard Worker #define _GNU_SOURCE
2*c9945492SAndroid Build Coastguard Worker #include <unistd.h>
3*c9945492SAndroid Build Coastguard Worker #include <signal.h>
4*c9945492SAndroid Build Coastguard Worker #include "syscall.h"
5*c9945492SAndroid Build Coastguard Worker #include "libc.h"
6*c9945492SAndroid Build Coastguard Worker
7*c9945492SAndroid Build Coastguard Worker struct ctx {
8*c9945492SAndroid Build Coastguard Worker size_t count;
9*c9945492SAndroid Build Coastguard Worker const gid_t *list;
10*c9945492SAndroid Build Coastguard Worker int ret;
11*c9945492SAndroid Build Coastguard Worker };
12*c9945492SAndroid Build Coastguard Worker
do_setgroups(void * p)13*c9945492SAndroid Build Coastguard Worker static void do_setgroups(void *p)
14*c9945492SAndroid Build Coastguard Worker {
15*c9945492SAndroid Build Coastguard Worker struct ctx *c = p;
16*c9945492SAndroid Build Coastguard Worker if (c->ret<0) return;
17*c9945492SAndroid Build Coastguard Worker int ret = __syscall(SYS_setgroups, c->count, c->list);
18*c9945492SAndroid Build Coastguard Worker if (ret && !c->ret) {
19*c9945492SAndroid Build Coastguard Worker /* If one thread fails to set groups after another has already
20*c9945492SAndroid Build Coastguard Worker * succeeded, forcibly killing the process is the only safe
21*c9945492SAndroid Build Coastguard Worker * thing to do. State is inconsistent and dangerous. Use
22*c9945492SAndroid Build Coastguard Worker * SIGKILL because it is uncatchable. */
23*c9945492SAndroid Build Coastguard Worker __block_all_sigs(0);
24*c9945492SAndroid Build Coastguard Worker __syscall(SYS_kill, __syscall(SYS_getpid), SIGKILL);
25*c9945492SAndroid Build Coastguard Worker }
26*c9945492SAndroid Build Coastguard Worker c->ret = ret;
27*c9945492SAndroid Build Coastguard Worker }
28*c9945492SAndroid Build Coastguard Worker
setgroups(size_t count,const gid_t list[])29*c9945492SAndroid Build Coastguard Worker int setgroups(size_t count, const gid_t list[])
30*c9945492SAndroid Build Coastguard Worker {
31*c9945492SAndroid Build Coastguard Worker /* ret is initially nonzero so that failure of the first thread does not
32*c9945492SAndroid Build Coastguard Worker * trigger the safety kill above. */
33*c9945492SAndroid Build Coastguard Worker struct ctx c = { .count = count, .list = list, .ret = 1 };
34*c9945492SAndroid Build Coastguard Worker __synccall(do_setgroups, &c);
35*c9945492SAndroid Build Coastguard Worker return __syscall_ret(c.ret);
36*c9945492SAndroid Build Coastguard Worker }
37