Added restrict_get_groups_list() for easily getting list of process's groups.

--HG--
branch : HEAD

diff --git a/src/lib/restrict-access.c b/src/lib/restrict-access.c
index a8ae2897462bef5d22a1a1dc989b60da887413c6..81843143ea2cfa2d527619b23fd10dab729f02cc 100644 (file)
--- a/src/lib/restrict-access.c
+++ b/src/lib/restrict-access.c
@@ -109,7 +109,7 @@ static void restrict_init_groups(gid_t primary_gid, gid_t privileged_gid)
 #endif
 }
 
-static gid_t *get_groups_list(unsigned int *gid_count_r)
+gid_t *restrict_get_groups_list(unsigned int *gid_count_r)
 {
        gid_t *gid_list;
        int ret, gid_count;
@@ -175,7 +175,7 @@ static void fix_groups_list(const struct restrict_access_settings *set,
                t_strsplit_spaces(set->extra_groups, ", ");
 
        if (preserve_existing) {
-               gid_list = get_groups_list(&gid_count);
+               gid_list = restrict_get_groups_list(&gid_count);
                drop_restricted_groups(set, gid_list, &gid_count,
                                       have_root_group);
                /* see if the list already contains the primary GID */

diff --git a/src/lib/restrict-access.h b/src/lib/restrict-access.h
index a80560335e10340013828712a21adbd2ffcf612a..646a9bc7e2314c4822338c0116dc99bebbf2d2de 100644 (file)
--- a/src/lib/restrict-access.h
+++ b/src/lib/restrict-access.h
@@ -52,4 +52,6 @@ void restrict_access_drop_priv_gid(void);
 /* Returns TRUE if privileged GID exists for this process. */
 bool restrict_access_have_priv_gid(void);
 
+gid_t *restrict_get_groups_list(unsigned int *gid_count_r);
+
 #endif