+/* UID/GID functions */
+
+int lc_getuid(lua_State* L)
+{
+ lua_pushinteger(L, getuid());
+ return 1;
+}
+
+int lc_getgid(lua_State* L)
+{
+ lua_pushinteger(L, getgid());
+ return 1;
+}
+
+int lc_setuid(lua_State* L)
+{
+ int uid = -1;
+ if(lua_gettop(L) < 1)
+ return 0;
+ if(!lua_isnumber(L, 1) && lua_tostring(L, 1))
+ {
+ /* Passed UID is actually a string, so look up the UID */
+ struct passwd *p;
+ p = getpwnam(lua_tostring(L, 1));
+ if(!p)
+ {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "no-such-user");
+ return 2;
+ }
+ uid = p->pw_uid;
+ }
+ else
+ {
+ uid = lua_tonumber(L, 1);
+ }
+
+ if(uid>-1)
+ {
+ /* Ok, attempt setuid */
+ errno = 0;
+ if(setuid(uid))
+ {
+ /* Fail */
+ lua_pushboolean(L, 0);
+ switch(errno)
+ {
+ case EINVAL:
+ lua_pushstring(L, "invalid-uid");
+ break;
+ case EPERM:
+ lua_pushstring(L, "permission-denied");
+ break;
+ default:
+ lua_pushstring(L, "unknown-error");
+ }
+ return 2;
+ }
+ else
+ {
+ /* Success! */
+ lua_pushboolean(L, 1);
+ return 1;
+ }
+ }
+
+ /* Seems we couldn't find a valid UID to switch to */
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "invalid-uid");
+ return 2;
+}
+
+int lc_setgid(lua_State* L)
+{
+ int gid = -1;
+ if(lua_gettop(L) < 1)
+ return 0;
+ if(!lua_isnumber(L, 1) && lua_tostring(L, 1))
+ {
+ /* Passed GID is actually a string, so look up the GID */
+ struct group *g;
+ g = getgrnam(lua_tostring(L, 1));
+ if(!g)
+ {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "no-such-group");
+ return 2;
+ }
+ gid = g->gr_gid;
+ }
+ else
+ {
+ gid = lua_tonumber(L, 1);
+ }
+
+ if(gid>-1)
+ {
+ /* Ok, attempt setgid */
+ errno = 0;
+ if(setgid(gid))
+ {
+ /* Fail */
+ lua_pushboolean(L, 0);
+ switch(errno)
+ {
+ case EINVAL:
+ lua_pushstring(L, "invalid-gid");
+ break;
+ case EPERM:
+ lua_pushstring(L, "permission-denied");
+ break;
+ default:
+ lua_pushstring(L, "unknown-error");
+ }
+ return 2;
+ }
+ else
+ {
+ /* Success! */
+ lua_pushboolean(L, 1);
+ return 1;
+ }
+ }
+
+ /* Seems we couldn't find a valid GID to switch to */
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "invalid-gid");
+ return 2;
+}
+
+int lc_umask(lua_State* L)
+{
+ char old_mode_string[7];
+ mode_t old_mode = umask(strtoul(luaL_checkstring(L, 1), NULL, 8));
+
+ snprintf(old_mode_string, sizeof(old_mode_string), "%03o", old_mode);
+ old_mode_string[sizeof(old_mode_string)-1] = 0;
+ lua_pushstring(L, old_mode_string);
+
+ return 1;
+}
+
+/* Like POSIX's setrlimit()/getrlimit() API functions.
+ *
+ * Syntax:
+ * pposix.setrlimit( resource, soft limit, hard limit)
+ *
+ * Any negative limit will be replace with the current limit by an additional call of getrlimit().
+ *
+ * Example usage:
+ * pposix.setrlimit("NOFILE", 1000, 2000)
+ */
+int string2resource(const char *s) {
+ if (!strcmp(s, "CORE")) return RLIMIT_CORE;
+ if (!strcmp(s, "CPU")) return RLIMIT_CPU;
+ if (!strcmp(s, "DATA")) return RLIMIT_DATA;
+ if (!strcmp(s, "FSIZE")) return RLIMIT_FSIZE;
+ if (!strcmp(s, "NOFILE")) return RLIMIT_NOFILE;
+ if (!strcmp(s, "STACK")) return RLIMIT_STACK;
+#if !(defined(sun) || defined(__sun))
+ if (!strcmp(s, "MEMLOCK")) return RLIMIT_MEMLOCK;
+ if (!strcmp(s, "NPROC")) return RLIMIT_NPROC;
+ if (!strcmp(s, "RSS")) return RLIMIT_RSS;
+#endif
+ return -1;
+}
+
+int lc_setrlimit(lua_State *L) {
+ int arguments = lua_gettop(L);
+ int softlimit = -1;
+ int hardlimit = -1;
+ const char *resource = NULL;
+ int rid = -1;
+ if(arguments < 1 || arguments > 3) {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "incorrect-arguments");
+ }
+
+ resource = luaL_checkstring(L, 1);
+ softlimit = luaL_checkinteger(L, 2);
+ hardlimit = luaL_checkinteger(L, 3);
+
+ rid = string2resource(resource);
+ if (rid != -1) {
+ struct rlimit lim;
+ struct rlimit lim_current;
+
+ if (softlimit < 0 || hardlimit < 0) {
+ if (getrlimit(rid, &lim_current)) {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "getrlimit-failed");
+ return 2;
+ }
+ }
+
+ if (softlimit < 0) lim.rlim_cur = lim_current.rlim_cur;
+ else lim.rlim_cur = softlimit;
+ if (hardlimit < 0) lim.rlim_max = lim_current.rlim_max;
+ else lim.rlim_max = hardlimit;
+
+ if (setrlimit(rid, &lim)) {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "setrlimit-failed");
+ return 2;
+ }
+ } else {
+ /* Unsupported resoucrce. Sorry I'm pretty limited by POSIX standard. */
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "invalid-resource");
+ return 2;
+ }
+ lua_pushboolean(L, 1);
+ return 1;
+}
+
+int lc_getrlimit(lua_State *L) {
+ int arguments = lua_gettop(L);
+ const char *resource = NULL;
+ int rid = -1;
+ struct rlimit lim;
+
+ if (arguments != 1) {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "invalid-arguments");
+ return 2;
+ }
+
+ resource = luaL_checkstring(L, 1);
+ rid = string2resource(resource);
+ if (rid != -1) {
+ if (getrlimit(rid, &lim)) {
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "getrlimit-failed.");
+ return 2;
+ }
+ } else {
+ /* Unsupported resoucrce. Sorry I'm pretty limited by POSIX standard. */
+ lua_pushboolean(L, 0);
+ lua_pushstring(L, "invalid-resource");
+ return 2;
+ }
+ lua_pushboolean(L, 1);
+ lua_pushnumber(L, lim.rlim_cur);
+ lua_pushnumber(L, lim.rlim_max);
+ return 3;
+}
+
+int lc_abort(lua_State* L)
+{
+ abort();
+ return 0;
+}
+