1 /*- 2 * SPDX-License-Identifier: BSD-3-Clause 3 * 4 * Copyright (c) 1982, 1986, 1989, 1993 5 * The Regents of the University of California. All rights reserved. 6 * 7 * This code is derived from software contributed to Berkeley by 8 * Mike Karels at Berkeley Software Design, Inc. 9 * 10 * Quite extensively rewritten by Poul-Henning Kamp of the FreeBSD 11 * project, to make these variables more userfriendly. 12 * 13 * Redistribution and use in source and binary forms, with or without 14 * modification, are permitted provided that the following conditions 15 * are met: 16 * 1. Redistributions of source code must retain the above copyright 17 * notice, this list of conditions and the following disclaimer. 18 * 2. Redistributions in binary form must reproduce the above copyright 19 * notice, this list of conditions and the following disclaimer in the 20 * documentation and/or other materials provided with the distribution. 21 * 3. Neither the name of the University nor the names of its contributors 22 * may be used to endorse or promote products derived from this software 23 * without specific prior written permission. 24 * 25 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 26 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 27 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 28 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 35 * SUCH DAMAGE. 36 * 37 * @(#)kern_sysctl.c 8.4 (Berkeley) 4/14/94 38 */ 39 40 #include <sys/cdefs.h> 41 __FBSDID("$FreeBSD$"); 42 43 #include "opt_posix.h" 44 #include "opt_config.h" 45 46 #include <sys/param.h> 47 #include <sys/boot.h> 48 #include <sys/elf.h> 49 #include <sys/jail.h> 50 #include <sys/kernel.h> 51 #include <sys/limits.h> 52 #include <sys/lock.h> 53 #include <sys/mutex.h> 54 #include <sys/proc.h> 55 #include <sys/random.h> 56 #include <sys/sbuf.h> 57 #include <sys/smp.h> 58 #include <sys/sx.h> 59 #include <sys/sysent.h> 60 #include <sys/vmmeter.h> 61 #include <sys/sysctl.h> 62 #include <sys/systm.h> 63 #include <sys/unistd.h> 64 65 SYSCTL_ROOT_NODE(0, sysctl, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 66 "Sysctl internal magic"); 67 SYSCTL_ROOT_NODE(CTL_KERN, kern, CTLFLAG_RW | CTLFLAG_CAPRD | CTLFLAG_MPSAFE, 0, 68 "High kernel, proc, limits &c"); 69 SYSCTL_ROOT_NODE(CTL_VM, vm, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 70 "Virtual memory"); 71 SYSCTL_ROOT_NODE(CTL_VFS, vfs, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 72 "File system"); 73 SYSCTL_ROOT_NODE(CTL_NET, net, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 74 "Network, (see socket.h)"); 75 SYSCTL_ROOT_NODE(CTL_DEBUG, debug, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 76 "Debugging"); 77 SYSCTL_NODE(_debug, OID_AUTO, sizeof, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 78 "Sizeof various things"); 79 SYSCTL_ROOT_NODE(CTL_HW, hw, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 80 "hardware"); 81 SYSCTL_ROOT_NODE(CTL_MACHDEP, machdep, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 82 "machine dependent"); 83 SYSCTL_NODE(_machdep, OID_AUTO, mitigations, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 84 "Machine dependent platform mitigations."); 85 SYSCTL_ROOT_NODE(CTL_USER, user, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 86 "user-level"); 87 SYSCTL_ROOT_NODE(CTL_P1003_1B, p1003_1b, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 88 "p1003_1b, (see p1003_1b.h)"); 89 90 SYSCTL_ROOT_NODE(OID_AUTO, compat, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 91 "Compatibility code"); 92 SYSCTL_ROOT_NODE(OID_AUTO, security, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 93 "Security"); 94 #ifdef REGRESSION 95 SYSCTL_ROOT_NODE(OID_AUTO, regression, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, 96 "Regression test MIB"); 97 #endif 98 99 SYSCTL_STRING(_kern, OID_AUTO, ident, CTLFLAG_RD|CTLFLAG_MPSAFE, 100 kern_ident, 0, "Kernel identifier"); 101 102 SYSCTL_INT(_kern, KERN_OSREV, osrevision, CTLFLAG_RD|CTLFLAG_CAPRD, 103 SYSCTL_NULL_INT_PTR, BSD, "Operating system revision"); 104 105 SYSCTL_STRING(_kern, KERN_VERSION, version, CTLFLAG_RD|CTLFLAG_MPSAFE, 106 version, 0, "Kernel version"); 107 108 SYSCTL_STRING(_kern, OID_AUTO, compiler_version, CTLFLAG_RD|CTLFLAG_MPSAFE, 109 compiler_version, 0, "Version of compiler used to compile kernel"); 110 111 SYSCTL_STRING(_kern, KERN_OSTYPE, ostype, CTLFLAG_RD|CTLFLAG_MPSAFE| 112 CTLFLAG_CAPRD, ostype, 0, "Operating system type"); 113 114 SYSCTL_INT(_kern, KERN_MAXPROC, maxproc, CTLFLAG_RDTUN | CTLFLAG_NOFETCH, 115 &maxproc, 0, "Maximum number of processes"); 116 117 SYSCTL_INT(_kern, KERN_MAXPROCPERUID, maxprocperuid, CTLFLAG_RW, 118 &maxprocperuid, 0, "Maximum processes allowed per userid"); 119 120 SYSCTL_INT(_kern, OID_AUTO, maxusers, CTLFLAG_RDTUN | CTLFLAG_NOFETCH, 121 &maxusers, 0, "Hint for kernel tuning"); 122 123 SYSCTL_INT(_kern, KERN_ARGMAX, argmax, CTLFLAG_RD|CTLFLAG_CAPRD, 124 SYSCTL_NULL_INT_PTR, ARG_MAX, "Maximum bytes of argument to execve(2)"); 125 126 SYSCTL_INT(_kern, KERN_POSIX1, posix1version, CTLFLAG_RD|CTLFLAG_CAPRD, 127 SYSCTL_NULL_INT_PTR, _POSIX_VERSION, "Version of POSIX attempting to comply to"); 128 129 SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RDTUN | 130 CTLFLAG_NOFETCH | CTLFLAG_CAPRD, &ngroups_max, 0, 131 "Maximum number of supplemental groups a user can belong to"); 132 133 SYSCTL_INT(_kern, KERN_JOB_CONTROL, job_control, CTLFLAG_RD|CTLFLAG_CAPRD, 134 SYSCTL_NULL_INT_PTR, 1, "Whether job control is available"); 135 136 #ifdef _POSIX_SAVED_IDS 137 SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD|CTLFLAG_CAPRD, 138 SYSCTL_NULL_INT_PTR, 1, "Whether saved set-group/user ID is available"); 139 #else 140 SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD|CTLFLAG_CAPRD, 141 SYSCTL_NULL_INT_PTR, 0, "Whether saved set-group/user ID is available"); 142 #endif 143 144 char kernelname[MAXPATHLEN] = PATH_KERNEL; /* XXX bloat */ 145 146 SYSCTL_STRING(_kern, KERN_BOOTFILE, bootfile, CTLFLAG_RW | CTLFLAG_MPSAFE, 147 kernelname, sizeof kernelname, "Name of kernel file booted"); 148 149 #ifdef COMPAT_FREEBSD12 150 static int 151 sysctl_maxphys(SYSCTL_HANDLER_ARGS) 152 { 153 u_long lvalue; 154 int ivalue; 155 156 lvalue = maxphys; 157 if (sizeof(int) == sizeof(u_long) || req->oldlen >= sizeof(u_long)) 158 return (sysctl_handle_long(oidp, &lvalue, 0, req)); 159 if (lvalue > INT_MAX) 160 return (sysctl_handle_long(oidp, &lvalue, 0, req)); 161 ivalue = lvalue; 162 return (sysctl_handle_int(oidp, &ivalue, 0, req)); 163 } 164 SYSCTL_PROC(_kern, KERN_MAXPHYS, maxphys, CTLTYPE_LONG | CTLFLAG_RDTUN | 165 CTLFLAG_NOFETCH | CTLFLAG_CAPRD | CTLFLAG_MPSAFE, 166 NULL, 0, sysctl_maxphys, "UL", "Maximum block I/O access size"); 167 #else 168 SYSCTL_ULONG(_kern, KERN_MAXPHYS, maxphys, 169 CTLFLAG_RDTUN | CTLFLAG_NOFETCH | CTLFLAG_CAPRD, 170 &maxphys, 0, "Maximum block I/O access size"); 171 #endif 172 173 SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD|CTLFLAG_CAPRD, 174 &mp_ncpus, 0, "Number of active CPUs"); 175 176 SYSCTL_INT(_hw, HW_BYTEORDER, byteorder, CTLFLAG_RD|CTLFLAG_CAPRD, 177 SYSCTL_NULL_INT_PTR, BYTE_ORDER, "System byte order"); 178 179 SYSCTL_INT(_hw, HW_PAGESIZE, pagesize, CTLFLAG_RD|CTLFLAG_CAPRD, 180 SYSCTL_NULL_INT_PTR, PAGE_SIZE, "System memory page size"); 181 182 static int 183 sysctl_kern_arnd(SYSCTL_HANDLER_ARGS) 184 { 185 char buf[256]; 186 size_t len; 187 188 len = MIN(req->oldlen, sizeof(buf)); 189 read_random(buf, len); 190 return (SYSCTL_OUT(req, buf, len)); 191 } 192 193 SYSCTL_PROC(_kern, KERN_ARND, arandom, 194 CTLTYPE_OPAQUE | CTLFLAG_RD | CTLFLAG_MPSAFE | CTLFLAG_CAPRD, NULL, 0, 195 sysctl_kern_arnd, "", "arc4rand"); 196 197 static int 198 sysctl_hw_physmem(SYSCTL_HANDLER_ARGS) 199 { 200 u_long val, p; 201 202 p = SIZE_T_MAX >> PAGE_SHIFT; 203 if (physmem < p) 204 p = physmem; 205 val = ctob(p); 206 return (sysctl_handle_long(oidp, &val, 0, req)); 207 } 208 SYSCTL_PROC(_hw, HW_PHYSMEM, physmem, 209 CTLTYPE_ULONG | CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 0, 210 sysctl_hw_physmem, "LU", 211 "Amount of physical memory (in bytes)"); 212 213 static int 214 sysctl_hw_realmem(SYSCTL_HANDLER_ARGS) 215 { 216 u_long val, p; 217 218 p = SIZE_T_MAX >> PAGE_SHIFT; 219 if (realmem < p) 220 p = realmem; 221 val = ctob(p); 222 return (sysctl_handle_long(oidp, &val, 0, req)); 223 } 224 SYSCTL_PROC(_hw, HW_REALMEM, realmem, 225 CTLTYPE_ULONG | CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 0, 226 sysctl_hw_realmem, "LU", 227 "Amount of memory (in bytes) reported by the firmware"); 228 229 static int 230 sysctl_hw_usermem(SYSCTL_HANDLER_ARGS) 231 { 232 u_long val, p, p1; 233 234 p1 = physmem - vm_wire_count(); 235 p = SIZE_T_MAX >> PAGE_SHIFT; 236 if (p1 < p) 237 p = p1; 238 val = ctob(p); 239 return (sysctl_handle_long(oidp, &val, 0, req)); 240 } 241 SYSCTL_PROC(_hw, HW_USERMEM, usermem, 242 CTLTYPE_ULONG | CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 0, 243 sysctl_hw_usermem, "LU", 244 "Amount of memory (in bytes) which is not wired"); 245 246 SYSCTL_LONG(_hw, OID_AUTO, availpages, CTLFLAG_RD, &physmem, 0, 247 "Amount of physical memory (in pages)"); 248 249 u_long pagesizes[MAXPAGESIZES] = { PAGE_SIZE }; 250 251 static int 252 sysctl_hw_pagesizes(SYSCTL_HANDLER_ARGS) 253 { 254 int error; 255 size_t len; 256 #ifdef SCTL_MASK32 257 int i; 258 uint32_t pagesizes32[MAXPAGESIZES]; 259 260 if (req->flags & SCTL_MASK32) { 261 /* 262 * Recreate the "pagesizes" array with 32-bit elements. 263 * Truncate any page size greater than UINT32_MAX to zero, 264 * which assumes that page sizes are powers of two. 265 */ 266 for (i = 0; i < MAXPAGESIZES; i++) 267 pagesizes32[i] = (uint32_t)pagesizes[i]; 268 269 len = sizeof(pagesizes32); 270 if (len > req->oldlen && req->oldptr != NULL) 271 len = req->oldlen; 272 error = SYSCTL_OUT(req, pagesizes32, len); 273 } else 274 #endif 275 { 276 len = sizeof(pagesizes); 277 if (len > req->oldlen && req->oldptr != NULL) 278 len = req->oldlen; 279 error = SYSCTL_OUT(req, pagesizes, len); 280 } 281 return (error); 282 } 283 SYSCTL_PROC(_hw, OID_AUTO, pagesizes, 284 CTLTYPE_OPAQUE | CTLFLAG_RD | CTLFLAG_MPSAFE, NULL, 0, 285 sysctl_hw_pagesizes, "S,pagesizes", 286 "Supported page sizes"); 287 288 int adaptive_machine_arch = 1; 289 SYSCTL_INT(_debug, OID_AUTO, adaptive_machine_arch, CTLFLAG_RW, 290 &adaptive_machine_arch, 1, 291 "Adapt reported machine architecture to the ABI of the binary"); 292 293 static const char * 294 proc_machine_arch(struct proc *p) 295 { 296 297 if (p->p_sysent->sv_machine_arch != NULL) 298 return (p->p_sysent->sv_machine_arch(p)); 299 #ifdef COMPAT_FREEBSD32 300 if (SV_PROC_FLAG(p, SV_ILP32)) 301 return (MACHINE_ARCH32); 302 #endif 303 return (MACHINE_ARCH); 304 } 305 306 static int 307 sysctl_hw_machine_arch(SYSCTL_HANDLER_ARGS) 308 { 309 const char *machine_arch; 310 311 if (adaptive_machine_arch) 312 machine_arch = proc_machine_arch(curproc); 313 else 314 machine_arch = MACHINE_ARCH; 315 return (SYSCTL_OUT(req, machine_arch, strlen(machine_arch) + 1)); 316 } 317 SYSCTL_PROC(_hw, HW_MACHINE_ARCH, machine_arch, CTLTYPE_STRING | CTLFLAG_RD | 318 CTLFLAG_MPSAFE, NULL, 0, sysctl_hw_machine_arch, "A", 319 "System architecture"); 320 321 #ifndef MACHINE_ARCHES 322 #ifdef COMPAT_FREEBSD32 323 #define MACHINE_ARCHES MACHINE_ARCH " " MACHINE_ARCH32 324 #else 325 #define MACHINE_ARCHES MACHINE_ARCH 326 #endif 327 #endif 328 329 SYSCTL_STRING(_kern, OID_AUTO, supported_archs, CTLFLAG_RD | CTLFLAG_MPSAFE, 330 MACHINE_ARCHES, 0, "Supported architectures for binaries"); 331 332 static int 333 sysctl_hostname(SYSCTL_HANDLER_ARGS) 334 { 335 struct prison *pr, *cpr; 336 size_t pr_offset; 337 char tmpname[MAXHOSTNAMELEN]; 338 int descend, error, len; 339 340 /* 341 * This function can set: hostname domainname hostuuid. 342 * Keep that in mind when comments say "hostname". 343 */ 344 pr_offset = (size_t)arg1; 345 len = arg2; 346 KASSERT(len <= sizeof(tmpname), 347 ("length %d too long for %s", len, __func__)); 348 349 /* 350 * Make a local copy of hostname to get/set so we don't have to hold 351 * the jail mutex during the sysctl copyin/copyout activities. 352 */ 353 pr = req->td->td_ucred->cr_prison; 354 mtx_lock(&pr->pr_mtx); 355 bcopy((char *)pr + pr_offset, tmpname, len); 356 mtx_unlock(&pr->pr_mtx); 357 358 error = sysctl_handle_string(oidp, tmpname, len, req); 359 if (error != 0 || req->newptr == NULL) 360 return (error); 361 362 /* 363 * Copy the locally set hostname to all jails that share 364 * this host info. 365 */ 366 sx_slock(&allprison_lock); 367 if (!(pr->pr_allow & PR_ALLOW_SET_HOSTNAME)) 368 error = EPERM; 369 else { 370 while (!(pr->pr_flags & PR_HOST)) 371 pr = pr->pr_parent; 372 mtx_lock(&pr->pr_mtx); 373 bcopy(tmpname, (char *)pr + pr_offset, len); 374 FOREACH_PRISON_DESCENDANT_LOCKED(pr, cpr, descend) 375 if (cpr->pr_flags & PR_HOST) 376 descend = 0; 377 else 378 bcopy(tmpname, (char *)cpr + pr_offset, len); 379 mtx_unlock(&pr->pr_mtx); 380 } 381 sx_sunlock(&allprison_lock); 382 return (error); 383 } 384 385 SYSCTL_PROC(_kern, KERN_HOSTNAME, hostname, 386 CTLTYPE_STRING | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_CAPRD | CTLFLAG_MPSAFE, 387 (void *)(offsetof(struct prison, pr_hostname)), MAXHOSTNAMELEN, 388 sysctl_hostname, "A", "Hostname"); 389 SYSCTL_PROC(_kern, KERN_NISDOMAINNAME, domainname, 390 CTLTYPE_STRING | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_CAPRD | CTLFLAG_MPSAFE, 391 (void *)(offsetof(struct prison, pr_domainname)), MAXHOSTNAMELEN, 392 sysctl_hostname, "A", "Name of the current YP/NIS domain"); 393 SYSCTL_PROC(_kern, KERN_HOSTUUID, hostuuid, 394 CTLTYPE_STRING | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_CAPRD | CTLFLAG_MPSAFE, 395 (void *)(offsetof(struct prison, pr_hostuuid)), HOSTUUIDLEN, 396 sysctl_hostname, "A", "Host UUID"); 397 398 static int regression_securelevel_nonmonotonic = 0; 399 400 #ifdef REGRESSION 401 SYSCTL_INT(_regression, OID_AUTO, securelevel_nonmonotonic, CTLFLAG_RW, 402 ®ression_securelevel_nonmonotonic, 0, "securelevel may be lowered"); 403 #endif 404 405 static int 406 sysctl_kern_securelvl(SYSCTL_HANDLER_ARGS) 407 { 408 struct prison *pr, *cpr; 409 int descend, error, level; 410 411 pr = req->td->td_ucred->cr_prison; 412 413 /* 414 * Reading the securelevel is easy, since the current jail's level 415 * is known to be at least as secure as any higher levels. Perform 416 * a lockless read since the securelevel is an integer. 417 */ 418 level = pr->pr_securelevel; 419 error = sysctl_handle_int(oidp, &level, 0, req); 420 if (error || !req->newptr) 421 return (error); 422 /* Permit update only if the new securelevel exceeds the old. */ 423 sx_slock(&allprison_lock); 424 mtx_lock(&pr->pr_mtx); 425 if (!regression_securelevel_nonmonotonic && 426 level < pr->pr_securelevel) { 427 mtx_unlock(&pr->pr_mtx); 428 sx_sunlock(&allprison_lock); 429 return (EPERM); 430 } 431 pr->pr_securelevel = level; 432 /* 433 * Set all child jails to be at least this level, but do not lower 434 * them (even if regression_securelevel_nonmonotonic). 435 */ 436 FOREACH_PRISON_DESCENDANT_LOCKED(pr, cpr, descend) { 437 if (cpr->pr_securelevel < level) 438 cpr->pr_securelevel = level; 439 } 440 mtx_unlock(&pr->pr_mtx); 441 sx_sunlock(&allprison_lock); 442 return (error); 443 } 444 445 SYSCTL_PROC(_kern, KERN_SECURELVL, securelevel, 446 CTLTYPE_INT | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_MPSAFE, 0, 0, 447 sysctl_kern_securelvl, "I", 448 "Current secure level"); 449 450 #ifdef INCLUDE_CONFIG_FILE 451 /* Actual kernel configuration options. */ 452 extern char kernconfstring[]; 453 454 SYSCTL_STRING(_kern, OID_AUTO, conftxt, CTLFLAG_RD | CTLFLAG_MPSAFE, 455 kernconfstring, 0, "Kernel configuration file"); 456 #endif 457 458 static int 459 sysctl_hostid(SYSCTL_HANDLER_ARGS) 460 { 461 struct prison *pr, *cpr; 462 u_long tmpid; 463 int descend, error; 464 465 /* 466 * Like sysctl_hostname, except it operates on a u_long 467 * instead of a string, and is used only for hostid. 468 */ 469 pr = req->td->td_ucred->cr_prison; 470 mtx_lock(&pr->pr_mtx); 471 tmpid = pr->pr_hostid; 472 mtx_unlock(&pr->pr_mtx); 473 474 error = sysctl_handle_long(oidp, &tmpid, 0, req); 475 if (error != 0 || req->newptr == NULL) 476 return (error); 477 478 sx_slock(&allprison_lock); 479 if (!(pr->pr_allow & PR_ALLOW_SET_HOSTNAME)) 480 error = EPERM; 481 else { 482 while (!(pr->pr_flags & PR_HOST)) 483 pr = pr->pr_parent; 484 mtx_lock(&pr->pr_mtx); 485 pr->pr_hostid = tmpid; 486 FOREACH_PRISON_DESCENDANT_LOCKED(pr, cpr, descend) 487 if (cpr->pr_flags & PR_HOST) 488 descend = 0; 489 else 490 cpr->pr_hostid = tmpid; 491 mtx_unlock(&pr->pr_mtx); 492 } 493 sx_sunlock(&allprison_lock); 494 return (error); 495 } 496 497 SYSCTL_PROC(_kern, KERN_HOSTID, hostid, 498 CTLTYPE_ULONG | CTLFLAG_RW | CTLFLAG_PRISON | CTLFLAG_MPSAFE | CTLFLAG_CAPRD, 499 NULL, 0, sysctl_hostid, "LU", "Host ID"); 500 501 static struct mtx bootid_lk; 502 MTX_SYSINIT(bootid_lock, &bootid_lk, "bootid generator lock", MTX_DEF); 503 504 static int 505 sysctl_bootid(SYSCTL_HANDLER_ARGS) 506 { 507 static uint8_t boot_id[16]; 508 static bool initialized = false; 509 510 mtx_lock(&bootid_lk); 511 if (!initialized) { 512 if (!is_random_seeded()) { 513 mtx_unlock(&bootid_lk); 514 return (ENXIO); 515 } 516 arc4random_buf(boot_id, sizeof(boot_id)); 517 initialized = true; 518 } 519 mtx_unlock(&bootid_lk); 520 521 return (SYSCTL_OUT(req, boot_id, sizeof(boot_id))); 522 } 523 SYSCTL_PROC(_kern, OID_AUTO, boot_id, 524 CTLTYPE_STRUCT | CTLFLAG_RD | CTLFLAG_MPSAFE | CTLFLAG_CAPRD, 525 NULL, 0, sysctl_bootid, "", "Random boot ID"); 526 527 /* 528 * The osrelease string is copied from the global (osrelease in vers.c) into 529 * prison0 by a sysinit and is inherited by child jails if not changed at jail 530 * creation, so we always return the copy from the current prison data. 531 */ 532 static int 533 sysctl_osrelease(SYSCTL_HANDLER_ARGS) 534 { 535 struct prison *pr; 536 537 pr = req->td->td_ucred->cr_prison; 538 return (SYSCTL_OUT(req, pr->pr_osrelease, strlen(pr->pr_osrelease) + 1)); 539 540 } 541 542 SYSCTL_PROC(_kern, KERN_OSRELEASE, osrelease, 543 CTLTYPE_STRING | CTLFLAG_CAPRD | CTLFLAG_RD | CTLFLAG_MPSAFE, 544 NULL, 0, sysctl_osrelease, "A", "Operating system release"); 545 546 /* 547 * The osreldate number is copied from the global (osreldate in vers.c) into 548 * prison0 by a sysinit and is inherited by child jails if not changed at jail 549 * creation, so we always return the value from the current prison data. 550 */ 551 static int 552 sysctl_osreldate(SYSCTL_HANDLER_ARGS) 553 { 554 struct prison *pr; 555 556 pr = req->td->td_ucred->cr_prison; 557 return (SYSCTL_OUT(req, &pr->pr_osreldate, sizeof(pr->pr_osreldate))); 558 559 } 560 561 /* 562 * NOTICE: The *userland* release date is available in 563 * /usr/include/osreldate.h 564 */ 565 SYSCTL_PROC(_kern, KERN_OSRELDATE, osreldate, 566 CTLTYPE_INT | CTLFLAG_CAPRD | CTLFLAG_RD | CTLFLAG_MPSAFE, 567 NULL, 0, sysctl_osreldate, "I", "Kernel release date"); 568 569 /* 570 * The build-id is copied from the ELF section .note.gnu.build-id. The linker 571 * script defines two variables to expose the beginning and end. LLVM 572 * currently uses a SHA-1 hash, but other formats can be supported by checking 573 * the length of the section. 574 */ 575 576 extern char __build_id_start[]; 577 extern char __build_id_end[]; 578 579 #define BUILD_ID_HEADER_LEN 0x10 580 #define BUILD_ID_HASH_MAXLEN 0x14 581 582 static int 583 sysctl_build_id(SYSCTL_HANDLER_ARGS) 584 { 585 uintptr_t sectionlen = (uintptr_t)(__build_id_end - __build_id_start); 586 int hashlen; 587 char buf[2*BUILD_ID_HASH_MAXLEN+1]; 588 589 /* 590 * The ELF note section has a four byte length for the vendor name, 591 * four byte length for the value, and a four byte vendor specific 592 * type. The name for the build id is "GNU\0". We skip the first 16 593 * bytes to read the build hash. We will return the remaining bytes up 594 * to 20 (SHA-1) hash size. If the hash happens to be a custom number 595 * of bytes we will pad the value with zeros, as the section should be 596 * four byte aligned. 597 */ 598 if (sectionlen <= BUILD_ID_HEADER_LEN || 599 sectionlen > (BUILD_ID_HEADER_LEN + BUILD_ID_HASH_MAXLEN)) { 600 return (ENOENT); 601 } 602 603 hashlen = sectionlen - BUILD_ID_HEADER_LEN; 604 for (int i = 0; i < hashlen; i++) { 605 uint8_t c = __build_id_start[i+BUILD_ID_HEADER_LEN]; 606 snprintf(&buf[2*i], 3, "%02x", c); 607 } 608 609 return (SYSCTL_OUT(req, buf, strlen(buf) + 1)); 610 } 611 612 SYSCTL_PROC(_kern, OID_AUTO, build_id, 613 CTLTYPE_STRING | CTLFLAG_CAPRD | CTLFLAG_RD | CTLFLAG_MPSAFE, 614 NULL, 0, sysctl_build_id, "A", "Operating system build-id"); 615 616 SYSCTL_NODE(_kern, OID_AUTO, features, CTLFLAG_RD | CTLFLAG_MPSAFE, 0, 617 "Kernel Features"); 618 619 #ifdef COMPAT_FREEBSD4 620 FEATURE(compat_freebsd4, "Compatible with FreeBSD 4"); 621 #endif 622 623 #ifdef COMPAT_FREEBSD5 624 FEATURE(compat_freebsd5, "Compatible with FreeBSD 5"); 625 #endif 626 627 #ifdef COMPAT_FREEBSD6 628 FEATURE(compat_freebsd6, "Compatible with FreeBSD 6"); 629 #endif 630 631 #ifdef COMPAT_FREEBSD7 632 FEATURE(compat_freebsd7, "Compatible with FreeBSD 7"); 633 #endif 634 635 /* 636 * This is really cheating. These actually live in the libc, something 637 * which I'm not quite sure is a good idea anyway, but in order for 638 * getnext and friends to actually work, we define dummies here. 639 * 640 * XXXRW: These probably should be CTLFLAG_CAPRD. 641 */ 642 SYSCTL_STRING(_user, USER_CS_PATH, cs_path, CTLFLAG_RD, 643 "", 0, "PATH that finds all the standard utilities"); 644 SYSCTL_INT(_user, USER_BC_BASE_MAX, bc_base_max, CTLFLAG_RD, 645 SYSCTL_NULL_INT_PTR, 0, "Max ibase/obase values in bc(1)"); 646 SYSCTL_INT(_user, USER_BC_DIM_MAX, bc_dim_max, CTLFLAG_RD, 647 SYSCTL_NULL_INT_PTR, 0, "Max array size in bc(1)"); 648 SYSCTL_INT(_user, USER_BC_SCALE_MAX, bc_scale_max, CTLFLAG_RD, 649 SYSCTL_NULL_INT_PTR, 0, "Max scale value in bc(1)"); 650 SYSCTL_INT(_user, USER_BC_STRING_MAX, bc_string_max, CTLFLAG_RD, 651 SYSCTL_NULL_INT_PTR, 0, "Max string length in bc(1)"); 652 SYSCTL_INT(_user, USER_COLL_WEIGHTS_MAX, coll_weights_max, CTLFLAG_RD, 653 SYSCTL_NULL_INT_PTR, 0, "Maximum number of weights assigned to an LC_COLLATE locale entry"); 654 SYSCTL_INT(_user, USER_EXPR_NEST_MAX, expr_nest_max, CTLFLAG_RD, 655 SYSCTL_NULL_INT_PTR, 0, ""); 656 SYSCTL_INT(_user, USER_LINE_MAX, line_max, CTLFLAG_RD, 657 SYSCTL_NULL_INT_PTR, 0, "Max length (bytes) of a text-processing utility's input line"); 658 SYSCTL_INT(_user, USER_RE_DUP_MAX, re_dup_max, CTLFLAG_RD, 659 SYSCTL_NULL_INT_PTR, 0, "Maximum number of repeats of a regexp permitted"); 660 SYSCTL_INT(_user, USER_POSIX2_VERSION, posix2_version, CTLFLAG_RD, 661 SYSCTL_NULL_INT_PTR, 0, 662 "The version of POSIX 1003.2 with which the system attempts to comply"); 663 SYSCTL_INT(_user, USER_POSIX2_C_BIND, posix2_c_bind, CTLFLAG_RD, 664 SYSCTL_NULL_INT_PTR, 0, "Whether C development supports the C bindings option"); 665 SYSCTL_INT(_user, USER_POSIX2_C_DEV, posix2_c_dev, CTLFLAG_RD, 666 SYSCTL_NULL_INT_PTR, 0, "Whether system supports the C development utilities option"); 667 SYSCTL_INT(_user, USER_POSIX2_CHAR_TERM, posix2_char_term, CTLFLAG_RD, 668 SYSCTL_NULL_INT_PTR, 0, ""); 669 SYSCTL_INT(_user, USER_POSIX2_FORT_DEV, posix2_fort_dev, CTLFLAG_RD, 670 SYSCTL_NULL_INT_PTR, 0, "Whether system supports FORTRAN development utilities"); 671 SYSCTL_INT(_user, USER_POSIX2_FORT_RUN, posix2_fort_run, CTLFLAG_RD, 672 SYSCTL_NULL_INT_PTR, 0, "Whether system supports FORTRAN runtime utilities"); 673 SYSCTL_INT(_user, USER_POSIX2_LOCALEDEF, posix2_localedef, CTLFLAG_RD, 674 SYSCTL_NULL_INT_PTR, 0, "Whether system supports creation of locales"); 675 SYSCTL_INT(_user, USER_POSIX2_SW_DEV, posix2_sw_dev, CTLFLAG_RD, 676 SYSCTL_NULL_INT_PTR, 0, "Whether system supports software development utilities"); 677 SYSCTL_INT(_user, USER_POSIX2_UPE, posix2_upe, CTLFLAG_RD, 678 SYSCTL_NULL_INT_PTR, 0, "Whether system supports the user portability utilities"); 679 SYSCTL_INT(_user, USER_STREAM_MAX, stream_max, CTLFLAG_RD, 680 SYSCTL_NULL_INT_PTR, 0, "Min Maximum number of streams a process may have open at one time"); 681 SYSCTL_INT(_user, USER_TZNAME_MAX, tzname_max, CTLFLAG_RD, 682 SYSCTL_NULL_INT_PTR, 0, "Min Maximum number of types supported for timezone names"); 683 684 static char localbase[MAXPATHLEN] = ""; 685 686 SYSCTL_STRING(_user, USER_LOCALBASE, localbase, CTLFLAG_RWTUN, 687 localbase, sizeof(localbase), "Prefix used to install and locate add-on packages"); 688 689 #include <sys/vnode.h> 690 SYSCTL_INT(_debug_sizeof, OID_AUTO, vnode, CTLFLAG_RD, 691 SYSCTL_NULL_INT_PTR, sizeof(struct vnode), "sizeof(struct vnode)"); 692 693 SYSCTL_INT(_debug_sizeof, OID_AUTO, proc, CTLFLAG_RD, 694 SYSCTL_NULL_INT_PTR, sizeof(struct proc), "sizeof(struct proc)"); 695 696 static int 697 sysctl_kern_pid_max(SYSCTL_HANDLER_ARGS) 698 { 699 int error, pm; 700 701 pm = pid_max; 702 error = sysctl_handle_int(oidp, &pm, 0, req); 703 if (error || !req->newptr) 704 return (error); 705 sx_xlock(&proctree_lock); 706 sx_xlock(&allproc_lock); 707 708 /* 709 * Only permit the values less then PID_MAX. 710 * As a safety measure, do not allow to limit the pid_max too much. 711 */ 712 if (pm < 300 || pm > PID_MAX) 713 error = EINVAL; 714 else 715 pid_max = pm; 716 sx_xunlock(&allproc_lock); 717 sx_xunlock(&proctree_lock); 718 return (error); 719 } 720 SYSCTL_PROC(_kern, OID_AUTO, pid_max, CTLTYPE_INT | 721 CTLFLAG_RWTUN | CTLFLAG_NOFETCH | CTLFLAG_MPSAFE, 722 0, 0, sysctl_kern_pid_max, "I", "Maximum allowed pid"); 723 724 #include <sys/bio.h> 725 #include <sys/buf.h> 726 SYSCTL_INT(_debug_sizeof, OID_AUTO, bio, CTLFLAG_RD, 727 SYSCTL_NULL_INT_PTR, sizeof(struct bio), "sizeof(struct bio)"); 728 SYSCTL_INT(_debug_sizeof, OID_AUTO, buf, CTLFLAG_RD, 729 SYSCTL_NULL_INT_PTR, sizeof(struct buf), "sizeof(struct buf)"); 730 731 #include <sys/user.h> 732 SYSCTL_INT(_debug_sizeof, OID_AUTO, kinfo_proc, CTLFLAG_RD, 733 SYSCTL_NULL_INT_PTR, sizeof(struct kinfo_proc), "sizeof(struct kinfo_proc)"); 734 735 /* Used by kernel debuggers. */ 736 const int pcb_size = sizeof(struct pcb); 737 SYSCTL_INT(_debug_sizeof, OID_AUTO, pcb, CTLFLAG_RD, 738 SYSCTL_NULL_INT_PTR, sizeof(struct pcb), "sizeof(struct pcb)"); 739 740 /* XXX compatibility, remove for 6.0 */ 741 #include <sys/imgact.h> 742 #include <sys/imgact_elf.h> 743 SYSCTL_INT(_kern, OID_AUTO, fallback_elf_brand, CTLFLAG_RW, 744 &__elfN(fallback_brand), sizeof(__elfN(fallback_brand)), 745 "compatibility for kern.fallback_elf_brand"); 746