Function private_regular_file_snapshot

src/daemon/ipc.c:735–753

}

static bool private_regular_file_snapshot(int directory_fd, const char *base_name, int fd,
                                          nlink_t expected_links, struct stat *status_out) {
    struct stat by_handle;
    struct stat by_path;
    bool valid = directory_fd >= 0 && base_name && base_name[0] != '\0' && fd >= 0 &&
                 fstat(fd, &by_handle) == 0 &&
                 fstatat(directory_fd, base_name, &by_path, AT_SYMLINK_NOFOLLOW) == 0 &&
                 S_ISREG(by_handle.st_mode) && S_ISREG(by_path.st_mode) &&
                 by_handle.st_uid == geteuid() && by_path.st_uid == geteuid() &&
                 by_handle.st_nlink == expected_links && by_path.st_nlink == expected_links &&
                 (by_handle.st_mode & 07777) == 0600 && (by_path.st_mode & 07777) == 0600 &&
                 by_handle.st_dev == by_path.st_dev && by_handle.st_ino == by_path.st_ino &&
                 cbm_macos_extended_acl_fd_is_empty(directory_fd) &&
                 cbm_macos_extended_acl_fd_is_empty(fd);
    if (valid && status_out) {
        *status_out = by_handle;
    }
    return valid;
}

static bool private_regular_file_at_is_safe(int directory_fd, const char *base_name,
                                            nlink_t expected_links) {