xref: /illumos-gate/usr/src/lib/libc/inc/priv_private.h (revision 1da57d551424de5a9d469760be7c4b4d4f10a755)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 
22 /*
23  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 #ifndef _PRIV_PRIVATE_H
28 #define	_PRIV_PRIVATE_H
29 
30 #include <sys/types.h>
31 #include <sys/priv.h>
32 #include <limits.h>
33 
34 /*
35  * Libc private privilege data.
36  */
37 
38 #ifdef __cplusplus
39 extern "C" {
40 #endif
41 
42 #define	LOADPRIVDATA(d)		d = __priv_getdata()
43 #define	GETPRIVDATA()		__priv_getdata()
44 #define	LOCKPRIVDATA()		{ \
45 					/* Data already allocated */ \
46 					(void) lock_data(); \
47 					(void) refresh_data(); \
48 				}
49 #define	UNLOCKPRIVDATA()	unlock_data()
50 #define	WITHPRIVLOCKED(t, b, x)	{ \
51 					t __result; \
52 					if (lock_data() != 0) \
53 						return (b); \
54 					__result = (x); \
55 					if (__result == (b) && refresh_data()) \
56 						__result = (x); \
57 					unlock_data(); \
58 					return (__result); \
59 				}
60 
61 /*
62  * Privilege mask macros.
63  */
64 #define	__NBWRD		(CHAR_BIT * sizeof (priv_chunk_t))
65 #define	privmask(n)	(1 << ((__NBWRD - 1) - ((n) % __NBWRD)))
66 #define	privword(n)	((n)/__NBWRD)
67 
68 /*
69  * Same as the functions, but for numeric privileges.
70  */
71 #define	PRIV_ADDSET(a, p)	((priv_chunk_t *)(a))[privword(p)] |= \
72 							privmask(p)
73 #define	PRIV_DELSET(a, p)	((priv_chunk_t *)(a))[privword(p)] &= \
74 							~privmask(p)
75 #define	PRIV_ISMEMBER(a, p)	((((priv_chunk_t *)(a))[privword(p)] & \
76 							privmask(p)) != 0)
77 
78 /*
79  * The structure is static except for the setsort, privnames and nprivs
80  * field.  The pinfo structure initially has sufficient room and the kernel
81  * guarantees no offset changes so we can copy a new structure on top of it.
82  * The locking stratgegy is this: we lock it when we need to reference any
83  * of the volatile fields.
84  */
85 typedef struct priv_data {
86 	size_t			pd_setsize;		/* In bytes */
87 	int			pd_nsets, pd_nprivs;
88 	uint32_t		pd_ucredsize;
89 	char  			**pd_setnames;
90 	char			**pd_privnames;
91 	int			*pd_setsort;
92 	priv_impl_info_t 	*pd_pinfo;
93 	priv_set_t		*pd_basicset;
94 	priv_set_t		*pd_zoneset;
95 } priv_data_t;
96 
97 extern priv_data_t *__priv_getdata(void);
98 extern priv_data_t *__priv_parse_info(priv_impl_info_t *);
99 extern void __priv_free_info(priv_data_t *);
100 extern priv_data_t *privdata;
101 
102 extern int lock_data(void);
103 extern boolean_t refresh_data(void);
104 extern void unlock_data(void);
105 
106 extern boolean_t __priv_isemptyset(priv_data_t *, const priv_set_t *);
107 extern boolean_t __priv_isfullset(priv_data_t *, const priv_set_t *);
108 extern boolean_t __priv_issubset(priv_data_t *, const priv_set_t *,
109 				const priv_set_t *);
110 extern const char *__priv_getbynum(const priv_data_t *, int);
111 
112 extern int getprivinfo(priv_impl_info_t *, size_t);
113 
114 extern priv_set_t *priv_basic(void);
115 
116 #ifdef __cplusplus
117 }
118 #endif
119 
120 #endif /* _PRIV_PRIVATE_H */
121