Merge pull request #124 from nc7s/replace-users

sec: replace users with uzers, RUSTSEC-2023-0059

Cargo.toml

@@ -48,13 +48,13 @@ toml = "0.5"
 serde = "1.0"
 serde_json = "1.0"
 serde_derive = "1.0"
-users = "0.11"
 nix = "0.23"
 sha2 = "0.10"
 dirs-next = "2.0"
 base64 = "0.13"
 libc = "0.2"
 bstr = "0.2.16"
+uzers = "0.11.3"
 
 [target.'cfg(target_os="linux")'.dependencies]
 syscallz = "0.16"

src/sandbox/mod.rs

@@ -47,10 +47,10 @@ pub fn chroot(path: &str) -> Result<()> {
 
 #[cfg(target_os="linux")]
 pub fn id() -> String {
-    let uid = users::get_current_uid();
-    let euid = users::get_effective_uid();
-    let gid = users::get_current_gid();
-    let egid = users::get_effective_gid();
+    let uid = uzers::get_current_uid();
+    let euid = uzers::get_effective_uid();
+    let gid = uzers::get_current_gid();
+    let egid = uzers::get_effective_gid();
     let groups = getgroups().unwrap();
 
     format!(
@@ -66,10 +66,10 @@ pub fn id() -> String {
 // TODO: use the other id function everywhere after nix added getgroups/setgroups support to osx
 #[cfg(not(target_os="linux"))]
 pub fn id() -> String {
-    let uid = users::get_current_uid();
-    let euid = users::get_effective_uid();
-    let gid = users::get_current_gid();
-    let egid = users::get_effective_gid();
+    let uid = uzers::get_current_uid();
+    let euid = uzers::get_effective_uid();
+    let gid = uzers::get_current_gid();
+    let egid = uzers::get_effective_gid();
 
     format!(
         "uid={:?} euid={:?} gid={:?} egid={:?}",
@@ -84,7 +84,7 @@ fn apply_config(config: config::Config) -> Result<()> {
     debug!("got config: {:?}", config);
 
     let user = if let Some(user) = config.sandbox.user {
-        let user = match users::get_user_by_name(&user) {
+        let user = match uzers::get_user_by_name(&user) {
             Some(user) => user,
             None => bail!("Invalid sandbox user"),
         };