WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-13 21:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

linux: cred: add user identifiers to the cred object extension

Browse Source
This commit is contained in:
Gustavo Moreira
2024-12-18 16:09:11 +11:00
parent 197d24567a
commit 2de553e1c1
1 changed files with 29 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/linux/extensions/__init__.py
+29 -2
View File
@@ -2079,13 +2079,40 @@ class cred(objects.StructType):
return int(value)
@property
def euid(self):
def uid(self) -> int:
"""Returns the real user ID
Returns:
The real user ID value
"""
return self._get_cred_int_value("uid")
@property
def gid(self) -> int:
"""Returns the real user ID
Returns:
The real user ID value
"""
return self._get_cred_int_value("gid")
@property
def euid(self) -> int:
"""Returns the effective user ID
Returns:
The effective user ID value
"""
return self._get_cred_int_value("euid")
@property
def egid(self) -> int:
"""Returns the effective group ID
Returns:
int: the effective user ID value
"""
return self._get_cred_int_value("euid")
return self._get_cred_int_value("egid")
class kernel_cap_struct(objects.StructType):