@ai-ecoverse/slicc-kernel 1.43.0 → 1.44.0

package/dist/process-worker.js

@@ -2896,6 +2896,9 @@ var init_process_fork = __esm({
 function status(r) {
   return r.ok ? 0 : -wasiErrno(r.errno);
 }
+function credOf(r) {
+  return r.ok ? r.json : -wasiErrno(r.errno);
+}
 function number(r) {
   if (!r.ok) return -wasiErrno(r.errno);
   return r.kind === "json" && typeof r.json === "number" ? r.json : -wasiErrno("EIO");
@@ -3103,6 +3106,8 @@ function createProcessKernel(deps) {
     setsid: () => number(call2({ op: "proc-setsid" }, "setsid")),
     getpgid: (pid) => number(call2({ op: "proc-getpgid", pid }, "getpgid")),
     getsid: (pid) => number(call2({ op: "proc-getsid", pid }, "getsid")),
+    cred: () => credOf(call2({ op: "proc-cred" }, "cred")),
+    setcred: (change) => credOf(call2({ op: "proc-setcred", change }, "setcred")),
     tcgetpgrp(fd) {
       const kfd = Fs.getStream(fd)?.sliccKernelFd;
       if (kfd === void 0) return -wasiErrno("ENOTTY");
@@ -3436,6 +3441,25 @@ var init_process_sockets = __esm({
   }
 });
 
+// src/kernel/cred.ts
+var ROOT, MAX_GROUPS;
+var init_cred = __esm({
+  "src/kernel/cred.ts"() {
+    "use strict";
+    init_types();
+    ROOT = Object.freeze({
+      ruid: 0,
+      euid: 0,
+      suid: 0,
+      rgid: 0,
+      egid: 0,
+      sgid: 0,
+      groups: [0]
+    });
+    MAX_GROUPS = 65536;
+  }
+});
+
 // src/process/procfs.ts
 function commOf(info) {
   const name = info.argv[0] ?? "";
@@ -3496,7 +3520,8 @@ function pidStat(info, boot) {
 }
 function pidStatus(info) {
   const state = info.state === "Z" ? "Z (zombie)" : "S (sleeping)";
-  const ids = `${UID}	${UID}	${UID}	${UID}`;
+  const c = info.cred ?? ROOT;
+  const ids = (r, e, s) => `${r}	${e}	${s}	${e}`;
   return [
     `Name:	${commOf(info)}`,
     `Umask:	${(info.umask ?? 18).toString(8).padStart(4, "0")}`,
@@ -3506,12 +3531,12 @@ function pidStatus(info) {
     `Pid:	${info.pid}`,
     `PPid:	${info.ppid}`,
     "TracerPid:	0",
-    `Uid:	${ids}`,
-    `Gid:	${ids}`,
+    `Uid:	${ids(c.ruid, c.euid, c.suid)}`,
+    `Gid:	${ids(c.rgid, c.egid, c.sgid)}`,
     "FDSize:	64",
     `VmSize:	${Math.ceil(info.memory / KIB)} kB`,
     `VmRSS:	${Math.ceil(info.memory / KIB)} kB`,
-    "Groups:	",
+    `Groups:	${c.groups.join(" ")}`,
     `NSpid:	${info.pid}`,
     `NSpgid:	${info.pgid}`,
     `NSsid:	${info.sid}`,
@@ -3730,6 +3755,7 @@ var HZ, DIR_MODE2, FILE_MODE, LINK_MODE2, ENOENT, ESRCH, EINVAL, UID, KIB, FALLB
 var init_procfs = __esm({
   "src/process/procfs.ts"() {
     "use strict";
+    init_cred();
     init_process_fds();
     HZ = 100;
     DIR_MODE2 = 16749;
@@ -5453,10 +5479,11 @@ function wrap(table) {
   }
   return out;
 }
-var WasiExit, NS_PER_MS, AT_SYMLINK_NOFOLLOW2, DEFAULT_UMASK, MONOTONIC_BASE, MAX_READ, SIGPIPE_EXIT, WasiHost;
+var WasiExit, IDS, NS_PER_MS, AT_SYMLINK_NOFOLLOW2, DEFAULT_UMASK, MONOTONIC_BASE, MAX_READ, SIGPIPE_EXIT, WasiHost;
 var init_wasi_host = __esm({
   "src/process/wasi/wasi-host.ts"() {
     "use strict";
+    init_cred();
     init_wasi_abi();
     init_wasi_fds();
     init_wasi_files();
@@ -5469,6 +5496,7 @@ var init_wasi_host = __esm({
         this.code = code2;
       }
     };
+    IDS = ["ruid", "euid", "suid", "rgid", "egid", "sgid"];
     NS_PER_MS = 1000000n;
     AT_SYMLINK_NOFOLLOW2 = 1;
     DEFAULT_UMASK = 18;
@@ -5567,6 +5595,35 @@ var init_wasi_host = __esm({
             data: mem.string(dp, dl)
           }),
           umount2: (tp, tl, flags) => void this.o.kernel.call({ op: "umount", target: path(tp, tl), flags }),
+          cred_get: (out) => {
+            const cred = this.o.kernel.call({ op: "proc-cred" });
+            const view = mem.view();
+            view.getUint32(out + 20, true);
+            IDS.forEach((key, i) => void view.setUint32(out + i * 4, cred[key], true));
+          },
+          cred_set: (...ids) => {
+            const change = {};
+            IDS.forEach((key, i) => {
+              if (ids[i] !== -1) change[key] = ids[i] >>> 0;
+            });
+            void this.o.kernel.call({ op: "proc-setcred", change });
+          },
+          groups_get: (buf, cap, count) => {
+            const { groups } = this.o.kernel.call({ op: "proc-cred" });
+            if (cap !== 0 && cap < groups.length) throw new WasiError("EINVAL");
+            const shown = cap === 0 ? [] : groups;
+            const view = mem.view();
+            view.getUint32(count, true);
+            if (shown.length > 0) view.getUint32(buf + (shown.length - 1) * 4, true);
+            shown.forEach((g, i) => void view.setUint32(buf + i * 4, g, true));
+            view.setUint32(count, groups.length, true);
+          },
+          groups_set: (buf, n) => {
+            if (n < 0 || n > MAX_GROUPS) throw new WasiError("EINVAL");
+            const view = mem.view();
+            const groups = Array.from({ length: n }, (_, i) => view.getUint32(buf + i * 4, true));
+            void this.o.kernel.call({ op: "proc-setcred", change: { groups } });
+          },
           sigaction_set: (sig, disposition, flags) => this.signals ? this.signals.disposition(sig, disposition, flags) : E.NOSYS
         });
       }
@@ -8898,9 +8955,11 @@ function netOps(kernel, io) {
     connect: async (options) => {
       const signal = options.signal ?? NEVER;
       signal.throwIfAborted();
+      const host = options.host ?? "127.0.0.1";
+      if (host.includes(":")) throw new JsCallError("EADDRNOTAVAIL", host);
       const addr = {
         family: "inet",
-        host: await resolve(options.host, signal),
+        host: await resolve(host, signal),
         port: port(options.port)
       };
       return opened(async (fd) => {