1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD 3 * 4 * Copyright (c) 2013 The FreeBSD Foundation 5 * 6 * This software was developed by Pawel Jakub Dawidek under sponsorship from 7 * the FreeBSD Foundation. 8 * 9 * Redistribution and use in source and binary forms, with or without 10 * modification, are permitted provided that the following conditions 11 * are met: 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 2. Redistributions in binary form must reproduce the above copyright 15 * notice, this list of conditions and the following disclaimer in the 16 * documentation and/or other materials provided with the distribution. 17 * 18 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND 19 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 20 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 21 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE 22 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 23 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 24 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 25 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 26 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 27 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 28 * SUCH DAMAGE. 29 */ 30 31 #include <sys/cdefs.h> 32 __FBSDID("$FreeBSD$"); 33 34 #include "opt_capsicum.h" 35 36 #include <sys/param.h> 37 #include <sys/capsicum.h> 38 #include <sys/filedesc.h> 39 #include <sys/limits.h> 40 #include <sys/malloc.h> 41 #include <sys/proc.h> 42 #include <sys/syscallsubr.h> 43 #include <sys/sysproto.h> 44 45 #include <security/audit/audit.h> 46 47 #include <compat/freebsd32/freebsd32_proto.h> 48 49 #ifdef CAPABILITIES 50 51 MALLOC_DECLARE(M_FILECAPS); 52 53 int 54 freebsd32_cap_ioctls_limit(struct thread *td, 55 struct freebsd32_cap_ioctls_limit_args *uap) 56 { 57 u_long *cmds; 58 uint32_t *cmds32; 59 size_t ncmds; 60 u_int i; 61 int error; 62 63 ncmds = uap->ncmds; 64 65 if (ncmds > 256) /* XXX: Is 256 sane? */ 66 return (EINVAL); 67 68 if (ncmds == 0) { 69 cmds = NULL; 70 } else { 71 cmds32 = malloc(sizeof(cmds32[0]) * ncmds, M_FILECAPS, M_WAITOK); 72 error = copyin(uap->cmds, cmds32, sizeof(cmds32[0]) * ncmds); 73 if (error != 0) { 74 free(cmds32, M_FILECAPS); 75 return (error); 76 } 77 cmds = malloc(sizeof(cmds[0]) * ncmds, M_FILECAPS, M_WAITOK); 78 for (i = 0; i < ncmds; i++) 79 cmds[i] = cmds32[i]; 80 free(cmds32, M_FILECAPS); 81 } 82 83 return (kern_cap_ioctls_limit(td, uap->fd, cmds, ncmds)); 84 } 85 86 int 87 freebsd32_cap_ioctls_get(struct thread *td, 88 struct freebsd32_cap_ioctls_get_args *uap) 89 { 90 struct filedesc *fdp; 91 struct filedescent *fdep; 92 uint32_t *cmds32; 93 u_long *cmds; 94 size_t maxcmds; 95 int error, fd; 96 u_int i; 97 98 fd = uap->fd; 99 cmds32 = uap->cmds; 100 maxcmds = uap->maxcmds; 101 102 AUDIT_ARG_FD(fd); 103 104 fdp = td->td_proc->p_fd; 105 FILEDESC_SLOCK(fdp); 106 107 if (fget_noref(fdp, fd) == NULL) { 108 error = EBADF; 109 goto out; 110 } 111 112 /* 113 * If all ioctls are allowed (fde_nioctls == -1 && fde_ioctls == NULL) 114 * the only sane thing we can do is to not populate the given array and 115 * return CAP_IOCTLS_ALL (actually, INT_MAX). 116 */ 117 118 fdep = &fdp->fd_ofiles[fd]; 119 cmds = fdep->fde_ioctls; 120 if (cmds32 != NULL && cmds != NULL) { 121 for (i = 0; i < MIN(fdep->fde_nioctls, maxcmds); i++) { 122 error = suword32(&cmds32[i], cmds[i]); 123 if (error != 0) 124 goto out; 125 } 126 } 127 if (fdep->fde_nioctls == -1) 128 td->td_retval[0] = INT_MAX; 129 else 130 td->td_retval[0] = fdep->fde_nioctls; 131 132 error = 0; 133 out: 134 FILEDESC_SUNLOCK(fdp); 135 return (error); 136 } 137 138 #else /* !CAPABILITIES */ 139 140 int 141 freebsd32_cap_ioctls_limit(struct thread *td, 142 struct freebsd32_cap_ioctls_limit_args *uap) 143 { 144 145 return (ENOSYS); 146 } 147 148 int 149 freebsd32_cap_ioctls_get(struct thread *td, 150 struct freebsd32_cap_ioctls_get_args *uap) 151 { 152 153 return (ENOSYS); 154 } 155 156 #endif /* CAPABILITIES */ 157