Aksal/nuttx
3
1
Fork 1
mirror of https://github.com/apache/nuttx.git synced 2026-08-01 20:28:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Documentation/sched: Add POSIX user identity transition docs

Browse source 
Adds comprehensive documentation for the POSIX three-tier user identity
model (real, effective, saved-set IDs) enabled by CONFIG_SCHED_USER_IDENTITY.

* Updates sched/Kconfig with detailed help text explaining the config.
* Adds user_identity.rst to formally document credential inheritance
  and the privilege transition rules for setuid(), seteuid(), setgid(),
  and setegid().
* Updates tasks_vs_threads.rst to list credentials as a shared task
  group resource.

Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
This commit is contained in:
Abhishek Mishra 2026-06-11 19:48:15 +00:00 • committed by Xiang Xiao
parent 14661fdba0
commit d487c46a29
5 changed files with 91 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

19
sched/Kconfig
View file

@ -789,12 +789,19 @@ config SCHED_USER_IDENTITY
bool "Support per-task User Identity"
default n
---help---
This selection enables functionality of getuid(), setuid(), getgid(),
setgid(). If this option is not selected, then stub, root-only
versions of these interfaces are available. When selected, these
interfaces will associate a UID and/or GID with each task group.
Those can then be managed using the interfaces. Child tasks will
inherit the UID and GID of its parent.
Enable per-task-group POSIX user and group credentials.
When selected, each task group tracks real, effective, and saved-set
UID/GID values and provides getuid(), getgid(), geteuid(),
getegid(), setuid(), setgid(), seteuid(), and setegid().
Child tasks inherit all credential fields from the parent task
group. setuid()/setgid() update real, effective, and saved-set
IDs when called with effective privileges; seteuid()/setegid()
implement the standard POSIX privilege transition rules.
If this option is not selected, stub root-only versions of these
interfaces are available instead.
config SCHED_THREAD_LOCAL
bool "Support __thread/thread_local keyword"