nshlib: hard/soft credential drop and sudo via PR_NSHCRED_AUTHSETEID - #3714
Open
Abhishekmishra2808 wants to merge 2 commits into
Open
nshlib: hard/soft credential drop and sudo via PR_NSHCRED_AUTHSETEID#3714Abhishekmishra2808 wants to merge 2 commits into
Abhishekmishra2808 wants to merge 2 commits into
Conversation
Hard-drop non-root logins with setres*(uid,uid,uid). Soft-drop within root-originated sessions so in-process su/sudo can restore euid. Escalate only through prctl(PR_NSHCRED_AUTHSETEID) after password verification; mark the agent with PR_NSHCRED_ENABLE at NSH init. Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
Exercise agent-flag gates, wrong/empty/correct AUTHSETEID passwords, session-persistent su root, and related permission paths. Harden passwd_append helpers used by the seeded passwd file. Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
acassis
requested review from
cederom,
linguini1,
raiden00pl,
xiaoxiang781216 and
yf13
August 10, 2026 19:13
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Impact
NSH sessions can drop to a real non-root identity and escalate only after an in-kernel passwd check, which is what makes su/sudo usable with hard-dropped logins. Builds without
CONFIG_SCHED_USER_IDENTITYare unchanged.Testing