1 /*-
2 * SPDX-License-Identifier: BSD-3-Clause
3 *
4 * Copyright (c) 1982, 1986, 1989, 1993
5 * The Regents of the University of California. All rights reserved.
6 *
7 * This code is derived from software contributed to Berkeley by
8 * Mike Karels at Berkeley Software Design, Inc.
9 *
10 * Quite extensively rewritten by Poul-Henning Kamp of the FreeBSD
11 * project, to make these variables more userfriendly.
12 *
13 * Redistribution and use in source and binary forms, with or without
14 * modification, are permitted provided that the following conditions
15 * are met:
16 * 1. Redistributions of source code must retain the above copyright
17 * notice, this list of conditions and the following disclaimer.
18 * 2. Redistributions in binary form must reproduce the above copyright
19 * notice, this list of conditions and the following disclaimer in the
20 * documentation and/or other materials provided with the distribution.
21 * 3. Neither the name of the University nor the names of its contributors
22 * may be used to endorse or promote products derived from this software
23 * without specific prior written permission.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
26 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
27 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
28 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * SUCH DAMAGE.
36 */
37
38 #include <sys/cdefs.h>
39 #include "opt_posix.h"
40 #include "opt_config.h"
41
42 #include <sys/param.h>
43 #include <sys/boot.h>
44 #include <sys/elf.h>
45 #include <sys/jail.h>
46 #include <sys/kernel.h>
47 #include <sys/limits.h>
48 #include <sys/lock.h>
49 #include <sys/mutex.h>
50 #include <sys/proc.h>
51 #include <sys/random.h>
52 #include <sys/sbuf.h>
53 #include <sys/smp.h>
54 #include <sys/sx.h>
55 #include <sys/sysent.h>
56 #include <sys/vmmeter.h>
57 #include <sys/sysctl.h>
58 #include <sys/systm.h>
59 #include <sys/unistd.h>
60
61 #include <vm/vm_param.h>
62
63 SYSCTL_ROOT_NODE(0, sysctl, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
64 "Sysctl internal magic");
65 SYSCTL_ROOT_NODE(CTL_KERN, kern, CTLFLAG_RW | CTLFLAG_CAPRD | CTLFLAG_MPSAFE, 0,
66 "High kernel, proc, limits &c");
67 SYSCTL_ROOT_NODE(CTL_VM, vm, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
68 "Virtual memory");
69 SYSCTL_ROOT_NODE(CTL_VFS, vfs, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
70 "File system");
71 SYSCTL_ROOT_NODE(CTL_NET, net, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
72 "Network, (see socket.h)");
73 SYSCTL_ROOT_NODE(CTL_DEBUG, debug, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
74 "Debugging");
75 SYSCTL_NODE(_debug, OID_AUTO, sizeof, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
76 "Sizeof various things");
77 SYSCTL_ROOT_NODE(CTL_HW, hw, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
78 "hardware");
79 SYSCTL_ROOT_NODE(CTL_MACHDEP, machdep, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
80 "machine dependent");
81 SYSCTL_NODE(_machdep, OID_AUTO, mitigations, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
82 "Machine dependent platform mitigations.");
83 SYSCTL_ROOT_NODE(CTL_USER, user, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
84 "user-level");
85 SYSCTL_ROOT_NODE(CTL_P1003_1B, p1003_1b, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
86 "p1003_1b, (see p1003_1b.h)");
87
88 SYSCTL_ROOT_NODE(OID_AUTO, compat, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
89 "Compatibility code");
90 SYSCTL_ROOT_NODE(OID_AUTO, security, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
91 "Security");
92 #ifdef REGRESSION
93 SYSCTL_ROOT_NODE(OID_AUTO, regression, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
94 "Regression test MIB");
95 #endif
96
97 SYSCTL_CONST_STRING(_kern, OID_AUTO, ident, CTLFLAG_RD,
98 kern_ident, "Kernel identifier");
99
100 SYSCTL_INT(_kern, KERN_OSREV, osrevision, CTLFLAG_RD | CTLFLAG_CAPRD,
101 SYSCTL_NULL_INT_PTR, BSD, "Operating system revision");
102
103 SYSCTL_CONST_STRING(_kern, KERN_VERSION, version, CTLFLAG_RD,
104 version, "Kernel version");
105
106 SYSCTL_CONST_STRING(_kern, OID_AUTO, compiler_version, CTLFLAG_RD,
107 compiler_version, "Version of compiler used to compile kernel");
108
109 SYSCTL_CONST_STRING(_kern, KERN_OSTYPE, ostype, CTLFLAG_RD | CTLFLAG_CAPRD,
110 ostype, "Operating system type");
111
112 SYSCTL_INT(_kern, KERN_MAXPROC, maxproc, CTLFLAG_RDTUN | CTLFLAG_NOFETCH,
113 &maxproc, 0, "Maximum number of processes");
114
115 SYSCTL_INT(_kern, KERN_MAXPROCPERUID, maxprocperuid, CTLFLAG_RW,
116 &maxprocperuid, 0, "Maximum processes allowed per userid");
117
118 SYSCTL_INT(_kern, OID_AUTO, maxusers, CTLFLAG_RDTUN | CTLFLAG_NOFETCH,
119 &maxusers, 0, "Hint for kernel tuning");
120
121 SYSCTL_INT(_kern, KERN_ARGMAX, argmax, CTLFLAG_RD|CTLFLAG_CAPRD,
122 SYSCTL_NULL_INT_PTR, ARG_MAX, "Maximum bytes of argument to execve(2)");
123
124 SYSCTL_INT(_kern, KERN_POSIX1, posix1version, CTLFLAG_RD|CTLFLAG_CAPRD,
125 SYSCTL_NULL_INT_PTR, _POSIX_VERSION, "Version of POSIX attempting to comply to");
126
127 SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RDTUN |
128 CTLFLAG_NOFETCH | CTLFLAG_CAPRD, &ngroups_max, 0,
129 "Maximum number of supplemental groups a user can belong to");
130
131 SYSCTL_INT(_kern, KERN_JOB_CONTROL, job_control, CTLFLAG_RD|CTLFLAG_CAPRD,
132 SYSCTL_NULL_INT_PTR, 1, "Whether job control is available");
133
134 #ifdef _POSIX_SAVED_IDS
135 SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD|CTLFLAG_CAPRD,
136 SYSCTL_NULL_INT_PTR, 1, "Whether saved set-group/user ID is available");
137 #else
138 SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD|CTLFLAG_CAPRD,
139 SYSCTL_NULL_INT_PTR, 0, "Whether saved set-group/user ID is available");
140 #endif
141
142 char kernelname[MAXPATHLEN] = PATH_KERNEL; /* XXX bloat */
143
144 SYSCTL_STRING(_kern, KERN_BOOTFILE, bootfile, CTLFLAG_RW,
145 kernelname, sizeof kernelname, "Name of kernel file booted");
146
147 #ifdef COMPAT_FREEBSD12
148 static int
sysctl_maxphys(SYSCTL_HANDLER_ARGS)149 sysctl_maxphys(SYSCTL_HANDLER_ARGS)
150 {
151 u_long lvalue;
152 int ivalue;
153
154 lvalue = maxphys;
155 if (sizeof(int) == sizeof(u_long) || req->oldlen >= sizeof(u_long))
156 return (sysctl_handle_long(oidp, &lvalue, 0, req));
157 if (lvalue > INT_MAX)
158 return (sysctl_handle_long(oidp, &lvalue, 0, req));
159 ivalue = lvalue;
160 return (sysctl_handle_int(oidp, &ivalue, 0, req));
161 }
162 SYSCTL_PROC(_kern, KERN_MAXPHYS, maxphys, CTLTYPE_LONG | CTLFLAG_RDTUN |
163 CTLFLAG_NOFETCH | CTLFLAG_CAPRD | CTLFLAG_MPSAFE,
164 NULL, 0, sysctl_maxphys, "UL", "Maximum block I/O access size");
165 #else
166 SYSCTL_ULONG(_kern, KERN_MAXPHYS, maxphys,
167 CTLFLAG_RDTUN | CTLFLAG_NOFETCH | CTLFLAG_CAPRD,
168 &maxphys, 0, "Maximum block I/O access size");
169 #endif
170
171 SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD|CTLFLAG_CAPRD,
172 &mp_ncpus, 0, "Number of active CPUs");
173
174 SYSCTL_INT(_hw, HW_BYTEORDER, byteorder, CTLFLAG_RD|CTLFLAG_CAPRD,
175 SYSCTL_NULL_INT_PTR, BYTE_ORDER, "System byte order");
176
177 SYSCTL_INT(_hw, HW_PAGESIZE, pagesize, CTLFLAG_RD|CTLFLAG_CAPRD,
178 SYSCTL_NULL_INT_PTR, PAGE_SIZE, "System memory page size");
179
180 static int
sysctl_kern_arnd(SYSCTL_HANDLER_ARGS)181 sysctl_kern_arnd(SYSCTL_HANDLER_ARGS)
182 {
183 char buf[256];
184 size_t len;
185 int error;
186
187 len = MIN(req->oldlen, sizeof(buf));
188 read_random(buf, len);
189
190 error = SYSCTL_OUT(req, buf, len);
191 explicit_bzero(buf, len);
192 return (error);
193 }
194
195 SYSCTL_PROC(_kern, KERN_ARND, arandom,
196 CTLTYPE_OPAQUE | CTLFLAG_RD | CTLFLAG_MPSAFE | CTLFLAG_CAPRD, NULL, 0,
197 sysctl_kern_arnd, "", "arc4rand");
198
199 static int
sysctl_hw_physmem(SYSCTL_HANDLER_ARGS)200 sysctl_hw_physmem(SYSCTL_HANDLER_ARGS)
201 {
202 u_long val, p;
203
204 p = SIZE_T_MAX >> PAGE_SHIFT;
205 if (physmem < p)
206 p = physmem;
207 val = ctob(p);
208 return (sysctl_handle_long(oidp, &val, 0, req));
209 }
210 SYSCTL_PROC(_hw, HW_PHYSMEM, physmem,
211 CTLTYPE_ULONG | CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 0,
212 sysctl_hw_physmem, "LU",
213 "Amount of physical memory (in bytes)");
214
215 static int
sysctl_hw_realmem(SYSCTL_HANDLER_ARGS)216 sysctl_hw_realmem(SYSCTL_HANDLER_ARGS)
217 {
218 u_long val, p;
219
220 p = SIZE_T_MAX >> PAGE_SHIFT;
221 if (realmem < p)
222 p = realmem;
223 val = ctob(p);
224 return (sysctl_handle_long(oidp, &val, 0, req));
225 }
226 SYSCTL_PROC(_hw, HW_REALMEM, realmem,
227 CTLTYPE_ULONG | CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 0,
228 sysctl_hw_realmem, "LU",
229 "Amount of memory (in bytes) reported by the firmware");
230
231 static int
sysctl_hw_usermem(SYSCTL_HANDLER_ARGS)232 sysctl_hw_usermem(SYSCTL_HANDLER_ARGS)
233 {
234 u_long val, p, p1;
235
236 p1 = physmem - vm_wire_count();
237 p = SIZE_T_MAX >> PAGE_SHIFT;
238 if (p1 < p)
239 p = p1;
240 val = ctob(p);
241 return (sysctl_handle_long(oidp, &val, 0, req));
242 }
243 SYSCTL_PROC(_hw, HW_USERMEM, usermem,
244 CTLTYPE_ULONG | CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 0,
245 sysctl_hw_usermem, "LU",
246 "Amount of memory (in bytes) which is not wired");
247
248 SYSCTL_LONG(_hw, OID_AUTO, availpages, CTLFLAG_RD, &physmem, 0,
249 "Amount of physical memory (in pages)");
250
251 #if VM_NRESERVLEVEL > 0
252 _Static_assert(MAXPAGESIZES > VM_NRESERVLEVEL, "MAXPAGESIZES is too small");
253 #endif
254
255 u_long __read_mostly pagesizes[MAXPAGESIZES] = { PAGE_SIZE };
256
257 static int
sysctl_hw_pagesizes(SYSCTL_HANDLER_ARGS)258 sysctl_hw_pagesizes(SYSCTL_HANDLER_ARGS)
259 {
260 int error;
261 size_t len;
262 #ifdef SCTL_MASK32
263 int i;
264 uint32_t pagesizes32[MAXPAGESIZES];
265
266 if (req->flags & SCTL_MASK32) {
267 /*
268 * Recreate the "pagesizes" array with 32-bit elements.
269 * Truncate any page size greater than UINT32_MAX to zero,
270 * which assumes that page sizes are powers of two.
271 */
272 for (i = 0; i < MAXPAGESIZES; i++)
273 pagesizes32[i] = (uint32_t)pagesizes[i];
274
275 len = sizeof(pagesizes32);
276 if (len > req->oldlen && req->oldptr != NULL)
277 len = req->oldlen;
278 error = SYSCTL_OUT(req, pagesizes32, len);
279 } else
280 #endif
281 {
282 len = sizeof(pagesizes);
283 if (len > req->oldlen && req->oldptr != NULL)
284 len = req->oldlen;
285 error = SYSCTL_OUT(req, pagesizes, len);
286 }
287 return (error);
288 }
289 SYSCTL_PROC(_hw, OID_AUTO, pagesizes,
290 CTLTYPE_OPAQUE | CTLFLAG_RD | CTLFLAG_MPSAFE, NULL, 0,
291 sysctl_hw_pagesizes, "S,pagesizes",
292 "Supported page sizes");
293
294 int adaptive_machine_arch = 1;
295 SYSCTL_INT(_debug, OID_AUTO, adaptive_machine_arch, CTLFLAG_RW,
296 &adaptive_machine_arch, 1,
297 "Adapt reported machine architecture to the ABI of the binary");
298
299 static const char *
proc_machine_arch(struct proc * p)300 proc_machine_arch(struct proc *p)
301 {
302
303 if (p->p_sysent->sv_machine_arch != NULL)
304 return (p->p_sysent->sv_machine_arch(p));
305 #ifdef COMPAT_FREEBSD32
306 if (SV_PROC_FLAG(p, SV_ILP32))
307 return (MACHINE_ARCH32);
308 #endif
309 return (MACHINE_ARCH);
310 }
311
312 static int
sysctl_hw_machine_arch(SYSCTL_HANDLER_ARGS)313 sysctl_hw_machine_arch(SYSCTL_HANDLER_ARGS)
314 {
315 const char *machine_arch;
316
317 if (adaptive_machine_arch)
318 machine_arch = proc_machine_arch(curproc);
319 else
320 machine_arch = MACHINE_ARCH;
321 return (SYSCTL_OUT(req, machine_arch, strlen(machine_arch) + 1));
322 }
323 SYSCTL_PROC(_hw, HW_MACHINE_ARCH, machine_arch, CTLTYPE_STRING | CTLFLAG_RD |
324 CTLFLAG_CAPRD | CTLFLAG_MPSAFE, NULL, 0, sysctl_hw_machine_arch, "A",
325 "System architecture");
326
327 #ifdef COMPAT_FREEBSD32
328 #include <compat/freebsd32/freebsd32_util.h>
329 #endif
330
331 static int
sysctl_kern_supported_archs(SYSCTL_HANDLER_ARGS)332 sysctl_kern_supported_archs(SYSCTL_HANDLER_ARGS)
333 {
334 const char *supported_archs;
335
336 supported_archs =
337 #ifdef COMPAT_FREEBSD32
338 compat_freebsd_32bit ? MACHINE_ARCH " " MACHINE_ARCH32 :
339 #endif
340 MACHINE_ARCH;
341 return (SYSCTL_OUT(req, supported_archs, strlen(supported_archs) + 1));
342 }
343 SYSCTL_PROC(_kern, OID_AUTO, supported_archs, CTLFLAG_RD | CTLFLAG_MPSAFE |
344 CTLFLAG_CAPRD | CTLTYPE_STRING, NULL, 0, sysctl_kern_supported_archs, "A",
345 "Supported architectures for binaries");
346
347 static int
sysctl_hostname(SYSCTL_HANDLER_ARGS)348 sysctl_hostname(SYSCTL_HANDLER_ARGS)
349 {
350 struct prison *pr, *cpr;
351 size_t pr_offset;
352 char tmpname[MAXHOSTNAMELEN];
353 int descend, error, len;
354
355 /*
356 * This function can set: hostname domainname hostuuid.
357 * Keep that in mind when comments say "hostname".
358 */
359 pr_offset = (size_t)arg1;
360 len = arg2;
361 KASSERT(len <= sizeof(tmpname),
362 ("length %d too long for %s", len, __func__));
363
364 /*
365 * Make a local copy of hostname to get/set so we don't have to hold
366 * the jail mutex during the sysctl copyin/copyout activities.
367 */
368 pr = req->td->td_ucred->cr_prison;
369 mtx_lock(&pr->pr_mtx);
370 bcopy((char *)pr + pr_offset, tmpname, len);
371 mtx_unlock(&pr->pr_mtx);
372
373 error = sysctl_handle_string(oidp, tmpname, len, req);
374 if (error != 0 || req->newptr == NULL)
375 return (error);
376
377 /*
378 * Copy the locally set hostname to all jails that share
379 * this host info.
380 */
381 sx_slock(&allprison_lock);
382 if (!(pr->pr_allow & PR_ALLOW_SET_HOSTNAME))
383 error = EPERM;
384 else {
385 while (!(pr->pr_flags & PR_HOST))
386 pr = pr->pr_parent;
387 mtx_lock(&pr->pr_mtx);
388 bcopy(tmpname, (char *)pr + pr_offset, len);
389 FOREACH_PRISON_DESCENDANT_LOCKED(pr, cpr, descend)
390 if (cpr->pr_flags & PR_HOST)
391 descend = 0;
392 else
393 bcopy(tmpname, (char *)cpr + pr_offset, len);
394 mtx_unlock(&pr->pr_mtx);
395 }
396 sx_sunlock(&allprison_lock);
397 return (error);
398 }
399
400 SYSCTL_PROC(_kern, KERN_HOSTNAME, hostname,
401 CTLTYPE_STRING | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_CAPRD | CTLFLAG_MPSAFE,
402 (void *)(offsetof(struct prison, pr_hostname)), MAXHOSTNAMELEN,
403 sysctl_hostname, "A", "Hostname");
404 SYSCTL_PROC(_kern, KERN_NISDOMAINNAME, domainname,
405 CTLTYPE_STRING | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_CAPRD | CTLFLAG_MPSAFE,
406 (void *)(offsetof(struct prison, pr_domainname)), MAXHOSTNAMELEN,
407 sysctl_hostname, "A", "Name of the current YP/NIS domain");
408 SYSCTL_PROC(_kern, KERN_HOSTUUID, hostuuid,
409 CTLTYPE_STRING | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_CAPRD | CTLFLAG_MPSAFE,
410 (void *)(offsetof(struct prison, pr_hostuuid)), HOSTUUIDLEN,
411 sysctl_hostname, "A", "Host UUID");
412
413 static int regression_securelevel_nonmonotonic = 0;
414
415 #ifdef REGRESSION
416 SYSCTL_INT(_regression, OID_AUTO, securelevel_nonmonotonic, CTLFLAG_RW,
417 ®ression_securelevel_nonmonotonic, 0, "securelevel may be lowered");
418 #endif
419
420 static int
sysctl_kern_securelvl(SYSCTL_HANDLER_ARGS)421 sysctl_kern_securelvl(SYSCTL_HANDLER_ARGS)
422 {
423 struct prison *pr, *cpr;
424 int descend, error, level;
425
426 pr = req->td->td_ucred->cr_prison;
427
428 /*
429 * Reading the securelevel is easy, since the current jail's level
430 * is known to be at least as secure as any higher levels. Perform
431 * a lockless read since the securelevel is an integer.
432 */
433 level = pr->pr_securelevel;
434 error = sysctl_handle_int(oidp, &level, 0, req);
435 if (error || !req->newptr)
436 return (error);
437 /* Permit update only if the new securelevel exceeds the old. */
438 sx_slock(&allprison_lock);
439 mtx_lock(&pr->pr_mtx);
440 if (!regression_securelevel_nonmonotonic &&
441 level < pr->pr_securelevel) {
442 mtx_unlock(&pr->pr_mtx);
443 sx_sunlock(&allprison_lock);
444 return (EPERM);
445 }
446 pr->pr_securelevel = level;
447 /*
448 * Set all child jails to be at least this level, but do not lower
449 * them (even if regression_securelevel_nonmonotonic).
450 */
451 FOREACH_PRISON_DESCENDANT_LOCKED(pr, cpr, descend) {
452 if (cpr->pr_securelevel < level)
453 cpr->pr_securelevel = level;
454 }
455 mtx_unlock(&pr->pr_mtx);
456 sx_sunlock(&allprison_lock);
457 return (error);
458 }
459
460 SYSCTL_PROC(_kern, KERN_SECURELVL, securelevel,
461 CTLTYPE_INT | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_MPSAFE, 0, 0,
462 sysctl_kern_securelvl, "I",
463 "Current secure level");
464
465 #ifdef INCLUDE_CONFIG_FILE
466 /* Actual kernel configuration options. */
467 extern const char kernconfstring[];
468
469 SYSCTL_CONST_STRING(_kern, OID_AUTO, conftxt, CTLFLAG_RD,
470 kernconfstring, "Kernel configuration file");
471 #endif
472
473 static int
sysctl_hostid(SYSCTL_HANDLER_ARGS)474 sysctl_hostid(SYSCTL_HANDLER_ARGS)
475 {
476 struct prison *pr, *cpr;
477 u_long tmpid;
478 int descend, error;
479
480 /*
481 * Like sysctl_hostname, except it operates on a u_long
482 * instead of a string, and is used only for hostid.
483 */
484 pr = req->td->td_ucred->cr_prison;
485 mtx_lock(&pr->pr_mtx);
486 tmpid = pr->pr_hostid;
487 mtx_unlock(&pr->pr_mtx);
488
489 error = sysctl_handle_long(oidp, &tmpid, 0, req);
490 if (error != 0 || req->newptr == NULL)
491 return (error);
492
493 sx_slock(&allprison_lock);
494 if (!(pr->pr_allow & PR_ALLOW_SET_HOSTNAME))
495 error = EPERM;
496 else {
497 while (!(pr->pr_flags & PR_HOST))
498 pr = pr->pr_parent;
499 mtx_lock(&pr->pr_mtx);
500 pr->pr_hostid = tmpid;
501 FOREACH_PRISON_DESCENDANT_LOCKED(pr, cpr, descend)
502 if (cpr->pr_flags & PR_HOST)
503 descend = 0;
504 else
505 cpr->pr_hostid = tmpid;
506 mtx_unlock(&pr->pr_mtx);
507 }
508 sx_sunlock(&allprison_lock);
509 return (error);
510 }
511
512 SYSCTL_PROC(_kern, KERN_HOSTID, hostid,
513 CTLTYPE_ULONG | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_MPSAFE | CTLFLAG_CAPRD,
514 NULL, 0, sysctl_hostid, "LU", "Host ID");
515
516 static struct mtx bootid_lk;
517 MTX_SYSINIT(bootid_lock, &bootid_lk, "bootid generator lock", MTX_DEF);
518
519 static int
sysctl_bootid(SYSCTL_HANDLER_ARGS)520 sysctl_bootid(SYSCTL_HANDLER_ARGS)
521 {
522 static uint8_t boot_id[16];
523 static bool initialized = false;
524
525 mtx_lock(&bootid_lk);
526 if (!initialized) {
527 if (!is_random_seeded()) {
528 mtx_unlock(&bootid_lk);
529 return (ENXIO);
530 }
531 arc4random_buf(boot_id, sizeof(boot_id));
532 initialized = true;
533 }
534 mtx_unlock(&bootid_lk);
535
536 return (SYSCTL_OUT(req, boot_id, sizeof(boot_id)));
537 }
538 SYSCTL_PROC(_kern, OID_AUTO, boot_id,
539 CTLTYPE_STRUCT | CTLFLAG_RD | CTLFLAG_MPSAFE | CTLFLAG_CAPRD,
540 NULL, 0, sysctl_bootid, "", "Random boot ID");
541
542 /*
543 * The osrelease string is copied from the global (osrelease in vers.c) into
544 * prison0 by a sysinit and is inherited by child jails if not changed at jail
545 * creation, so we always return the copy from the current prison data.
546 */
547 static int
sysctl_osrelease(SYSCTL_HANDLER_ARGS)548 sysctl_osrelease(SYSCTL_HANDLER_ARGS)
549 {
550 struct prison *pr;
551
552 pr = req->td->td_ucred->cr_prison;
553 return (SYSCTL_OUT(req, pr->pr_osrelease, strlen(pr->pr_osrelease) + 1));
554
555 }
556
557 SYSCTL_PROC(_kern, KERN_OSRELEASE, osrelease,
558 CTLTYPE_STRING | CTLFLAG_CAPRD | CTLFLAG_RD | CTLFLAG_MPSAFE,
559 NULL, 0, sysctl_osrelease, "A", "Operating system release");
560
561 /*
562 * The osreldate number is copied from the global (osreldate in vers.c) into
563 * prison0 by a sysinit and is inherited by child jails if not changed at jail
564 * creation, so we always return the value from the current prison data.
565 */
566 static int
sysctl_osreldate(SYSCTL_HANDLER_ARGS)567 sysctl_osreldate(SYSCTL_HANDLER_ARGS)
568 {
569 struct prison *pr;
570
571 pr = req->td->td_ucred->cr_prison;
572 return (SYSCTL_OUT(req, &pr->pr_osreldate, sizeof(pr->pr_osreldate)));
573
574 }
575
576 /*
577 * NOTICE: The *userland* release date is available in
578 * /usr/include/osreldate.h
579 */
580 SYSCTL_PROC(_kern, KERN_OSRELDATE, osreldate,
581 CTLTYPE_INT | CTLFLAG_CAPRD | CTLFLAG_RD | CTLFLAG_MPSAFE,
582 NULL, 0, sysctl_osreldate, "I", "Kernel release date");
583
584 /*
585 * The build-id is copied from the ELF section .note.gnu.build-id. The linker
586 * script defines two variables to expose the beginning and end. LLVM
587 * currently uses a SHA-1 hash, but other formats can be supported by checking
588 * the length of the section.
589 */
590
591 extern char __build_id_start[];
592 extern char __build_id_end[];
593
594 #define BUILD_ID_HEADER_LEN 0x10
595 #define BUILD_ID_HASH_MAXLEN 0x14
596
597 static int
sysctl_build_id(SYSCTL_HANDLER_ARGS)598 sysctl_build_id(SYSCTL_HANDLER_ARGS)
599 {
600 uintptr_t sectionlen = (uintptr_t)(__build_id_end - __build_id_start);
601 int hashlen;
602 char buf[2*BUILD_ID_HASH_MAXLEN+1];
603
604 /*
605 * The ELF note section has a four byte length for the vendor name,
606 * four byte length for the value, and a four byte vendor specific
607 * type. The name for the build id is "GNU\0". We skip the first 16
608 * bytes to read the build hash. We will return the remaining bytes up
609 * to 20 (SHA-1) hash size. If the hash happens to be a custom number
610 * of bytes we will pad the value with zeros, as the section should be
611 * four byte aligned.
612 */
613 if (sectionlen <= BUILD_ID_HEADER_LEN ||
614 sectionlen > (BUILD_ID_HEADER_LEN + BUILD_ID_HASH_MAXLEN)) {
615 return (ENOENT);
616 }
617
618 hashlen = sectionlen - BUILD_ID_HEADER_LEN;
619 for (int i = 0; i < hashlen; i++) {
620 uint8_t c = __build_id_start[i+BUILD_ID_HEADER_LEN];
621 snprintf(&buf[2*i], 3, "%02x", c);
622 }
623
624 return (SYSCTL_OUT(req, buf, strlen(buf) + 1));
625 }
626
627 SYSCTL_PROC(_kern, OID_AUTO, build_id,
628 CTLTYPE_STRING | CTLFLAG_CAPRD | CTLFLAG_RD | CTLFLAG_MPSAFE,
629 NULL, 0, sysctl_build_id, "A", "Operating system build-id");
630
631 SYSCTL_NODE(_kern, OID_AUTO, features, CTLFLAG_RD | CTLFLAG_MPSAFE, 0,
632 "Kernel Features");
633
634 #ifdef COMPAT_FREEBSD4
635 FEATURE(compat_freebsd4, "Compatible with FreeBSD 4");
636 #endif
637
638 #ifdef COMPAT_FREEBSD5
639 FEATURE(compat_freebsd5, "Compatible with FreeBSD 5");
640 #endif
641
642 #ifdef COMPAT_FREEBSD6
643 FEATURE(compat_freebsd6, "Compatible with FreeBSD 6");
644 #endif
645
646 #ifdef COMPAT_FREEBSD7
647 FEATURE(compat_freebsd7, "Compatible with FreeBSD 7");
648 #endif
649
650 #ifdef COMPAT_FREEBSD8
651 FEATURE(compat_freebsd8, "Compatible with FreeBSD 8");
652 #endif
653
654 #ifdef COMPAT_FREEBSD9
655 FEATURE(compat_freebsd9, "Compatible with FreeBSD 9");
656 #endif
657
658 #ifdef COMPAT_FREEBSD10
659 FEATURE(compat_freebsd10, "Compatible with FreeBSD 10");
660 #endif
661
662 #ifdef COMPAT_FREEBSD11
663 FEATURE(compat_freebsd11, "Compatible with FreeBSD 11");
664 #endif
665
666 #ifdef COMPAT_FREEBSD12
667 FEATURE(compat_freebsd12, "Compatible with FreeBSD 12");
668 #endif
669
670 #ifdef COMPAT_FREEBSD13
671 FEATURE(compat_freebsd13, "Compatible with FreeBSD 13");
672 #endif
673
674 #ifdef COMPAT_FREEBSD14
675 FEATURE(compat_freebsd14, "Compatible with FreeBSD 14");
676 #endif
677
678 /*
679 * This is really cheating. These actually live in the libc, something
680 * which I'm not quite sure is a good idea anyway, but in order for
681 * getnext and friends to actually work, we define dummies here.
682 *
683 * XXXRW: These probably should be CTLFLAG_CAPRD.
684 */
685 SYSCTL_STRING(_user, USER_CS_PATH, cs_path, CTLFLAG_RD,
686 "", 0, "PATH that finds all the standard utilities");
687 SYSCTL_INT(_user, USER_BC_BASE_MAX, bc_base_max, CTLFLAG_RD,
688 SYSCTL_NULL_INT_PTR, 0, "Max ibase/obase values in bc(1)");
689 SYSCTL_INT(_user, USER_BC_DIM_MAX, bc_dim_max, CTLFLAG_RD,
690 SYSCTL_NULL_INT_PTR, 0, "Max array size in bc(1)");
691 SYSCTL_INT(_user, USER_BC_SCALE_MAX, bc_scale_max, CTLFLAG_RD,
692 SYSCTL_NULL_INT_PTR, 0, "Max scale value in bc(1)");
693 SYSCTL_INT(_user, USER_BC_STRING_MAX, bc_string_max, CTLFLAG_RD,
694 SYSCTL_NULL_INT_PTR, 0, "Max string length in bc(1)");
695 SYSCTL_INT(_user, USER_COLL_WEIGHTS_MAX, coll_weights_max, CTLFLAG_RD,
696 SYSCTL_NULL_INT_PTR, 0, "Maximum number of weights assigned to an LC_COLLATE locale entry");
697 SYSCTL_INT(_user, USER_EXPR_NEST_MAX, expr_nest_max, CTLFLAG_RD,
698 SYSCTL_NULL_INT_PTR, 0, "");
699 SYSCTL_INT(_user, USER_LINE_MAX, line_max, CTLFLAG_RD,
700 SYSCTL_NULL_INT_PTR, 0, "Max length (bytes) of a text-processing utility's input line");
701 SYSCTL_INT(_user, USER_RE_DUP_MAX, re_dup_max, CTLFLAG_RD,
702 SYSCTL_NULL_INT_PTR, 0, "Maximum number of repeats of a regexp permitted");
703 SYSCTL_INT(_user, USER_POSIX2_VERSION, posix2_version, CTLFLAG_RD,
704 SYSCTL_NULL_INT_PTR, 0,
705 "The version of POSIX 1003.2 with which the system attempts to comply");
706 SYSCTL_INT(_user, USER_POSIX2_C_BIND, posix2_c_bind, CTLFLAG_RD,
707 SYSCTL_NULL_INT_PTR, 0, "Whether C development supports the C bindings option");
708 SYSCTL_INT(_user, USER_POSIX2_C_DEV, posix2_c_dev, CTLFLAG_RD,
709 SYSCTL_NULL_INT_PTR, 0, "Whether system supports the C development utilities option");
710 SYSCTL_INT(_user, USER_POSIX2_CHAR_TERM, posix2_char_term, CTLFLAG_RD,
711 SYSCTL_NULL_INT_PTR, 0, "");
712 SYSCTL_INT(_user, USER_POSIX2_FORT_DEV, posix2_fort_dev, CTLFLAG_RD,
713 SYSCTL_NULL_INT_PTR, 0, "Whether system supports FORTRAN development utilities");
714 SYSCTL_INT(_user, USER_POSIX2_FORT_RUN, posix2_fort_run, CTLFLAG_RD,
715 SYSCTL_NULL_INT_PTR, 0, "Whether system supports FORTRAN runtime utilities");
716 SYSCTL_INT(_user, USER_POSIX2_LOCALEDEF, posix2_localedef, CTLFLAG_RD,
717 SYSCTL_NULL_INT_PTR, 0, "Whether system supports creation of locales");
718 SYSCTL_INT(_user, USER_POSIX2_SW_DEV, posix2_sw_dev, CTLFLAG_RD,
719 SYSCTL_NULL_INT_PTR, 0, "Whether system supports software development utilities");
720 SYSCTL_INT(_user, USER_POSIX2_UPE, posix2_upe, CTLFLAG_RD,
721 SYSCTL_NULL_INT_PTR, 0, "Whether system supports the user portability utilities");
722 SYSCTL_INT(_user, USER_STREAM_MAX, stream_max, CTLFLAG_RD,
723 SYSCTL_NULL_INT_PTR, 0, "Min Maximum number of streams a process may have open at one time");
724 SYSCTL_INT(_user, USER_TZNAME_MAX, tzname_max, CTLFLAG_RD,
725 SYSCTL_NULL_INT_PTR, 0, "Min Maximum number of types supported for timezone names");
726
727 static char localbase[MAXPATHLEN] = "";
728
729 SYSCTL_STRING(_user, USER_LOCALBASE, localbase, CTLFLAG_RWTUN,
730 localbase, sizeof(localbase), "Prefix used to install and locate add-on packages");
731
732 #include <sys/vnode.h>
733 SYSCTL_INT(_debug_sizeof, OID_AUTO, vnode, CTLFLAG_RD,
734 SYSCTL_NULL_INT_PTR, sizeof(struct vnode), "sizeof(struct vnode)");
735
736 SYSCTL_INT(_debug_sizeof, OID_AUTO, proc, CTLFLAG_RD,
737 SYSCTL_NULL_INT_PTR, sizeof(struct proc), "sizeof(struct proc)");
738
739 static int
sysctl_kern_pid_max(SYSCTL_HANDLER_ARGS)740 sysctl_kern_pid_max(SYSCTL_HANDLER_ARGS)
741 {
742 int error, pm;
743
744 pm = pid_max;
745 error = sysctl_handle_int(oidp, &pm, 0, req);
746 if (error || !req->newptr)
747 return (error);
748 sx_xlock(&proctree_lock);
749 sx_xlock(&allproc_lock);
750
751 /*
752 * Only permit the values less then PID_MAX.
753 * As a safety measure, do not allow to limit the pid_max too much.
754 */
755 if (pm < 300 || pm > PID_MAX)
756 error = EINVAL;
757 else
758 pid_max = pm;
759 sx_xunlock(&allproc_lock);
760 sx_xunlock(&proctree_lock);
761 return (error);
762 }
763 SYSCTL_PROC(_kern, OID_AUTO, pid_max, CTLTYPE_INT |
764 CTLFLAG_RWTUN | CTLFLAG_NOFETCH | CTLFLAG_MPSAFE,
765 0, 0, sysctl_kern_pid_max, "I", "Maximum allowed pid");
766
767 SYSCTL_INT(_kern, OID_AUTO, pid_max_limit, CTLFLAG_RD,
768 SYSCTL_NULL_INT_PTR, PID_MAX,
769 "Maximum allowed pid (kern.pid_max) top limit");
770
771 #include <sys/bio.h>
772 #include <sys/buf.h>
773 SYSCTL_INT(_debug_sizeof, OID_AUTO, bio, CTLFLAG_RD,
774 SYSCTL_NULL_INT_PTR, sizeof(struct bio), "sizeof(struct bio)");
775 SYSCTL_INT(_debug_sizeof, OID_AUTO, buf, CTLFLAG_RD,
776 SYSCTL_NULL_INT_PTR, sizeof(struct buf), "sizeof(struct buf)");
777
778 #include <sys/user.h>
779 SYSCTL_INT(_debug_sizeof, OID_AUTO, kinfo_proc, CTLFLAG_RD,
780 SYSCTL_NULL_INT_PTR, sizeof(struct kinfo_proc), "sizeof(struct kinfo_proc)");
781
782 /* Used by kernel debuggers. */
783 const int pcb_size = sizeof(struct pcb);
784 SYSCTL_INT(_debug_sizeof, OID_AUTO, pcb, CTLFLAG_RD,
785 SYSCTL_NULL_INT_PTR, sizeof(struct pcb), "sizeof(struct pcb)");
786
787 /* XXX compatibility, remove for 6.0 */
788 #include <sys/imgact.h>
789 #include <sys/imgact_elf.h>
790 SYSCTL_INT(_kern, OID_AUTO, fallback_elf_brand, CTLFLAG_RW,
791 &__elfN(fallback_brand), sizeof(__elfN(fallback_brand)),
792 "compatibility for kern.fallback_elf_brand");
793