Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to get userID when writing Linux kernel module

Tags:

c

linux-kernel

Here is my function in my kernel module which I insert using insmod command after make at later stages. I am working on goldfish (2.6.29)

asmlinkage long our_sys_read(unsigned int fd, char  *buf, size_t count)
{
      printk("------->> our_sys_read getuid() ---------- %d\n", getuid());

      return original_call_read(fd,buf,count);
}

I want to trap system calls and find out which user made these system calls. But when I run 'make', it throws me following error.

/home/mohsin/LKM/trapcall.c:245: error: implicit declaration of function 'getuid'

Any suggestion would be appreciated.

like image 588
Junaid Avatar asked Dec 31 '12 04:12

Junaid


2 Answers

You could perhaps use this:

 #include <include/linux/cred.h>

 static int getuid()
 {
     return current_uid();
 }

cred stands for "credentials", and this macro returns the user-id of the currently active credentials. Bear in mind however that the "current user id" can mean multiple things in Linux.

[dan3 obviously didn't have to dig through quite as much code as I did to find this - or he started before me!]

like image 71
Mats Petersson Avatar answered Sep 19 '22 16:09

Mats Petersson


After spending two days, I finally figured out how to get uid of the process who made a system call. I will give all the suggestions I found on different links so that if my solution does not work, one of the others may work.

1) As told me Mats,

#include <include/linux/cred.h>

 static int getuid()
 {
     return current_uid();
 }

You call this function to get uid but it gave me negative numbers like -943124788 etc.

2)

uid_t credd_uid ;
const struct cred *cred = current_cred();
credd_uid = current->cred->uid; 

Same output like large negative numbers.

3)

uid_t struct_uid;
struct user_struct *u = current_user();

struct_uid = get_uid(u);

4) Worked Solution

It's given here actually.

i) Declare function prototype on the top like

asmlinkage int (*getuid_call)();

ii) Add following line to init_module() function

/* Get the system call for getuid */

  getuid_call = sys_call_table[__NR_getuid];

iii) Call the function in your trapped system call functions to get uid like

uid_t uid = getuid_call();
like image 43
Junaid Avatar answered Sep 17 '22 16:09

Junaid