xref: /freebsd/sys/security/audit/bsm_fcntl.c (revision fdafd315ad0d0f28a11b9fb4476a9ab059c62b92)
16f1cbda7SRobert Watson /*-
2*51369649SPedro F. Giffuni  * SPDX-License-Identifier: BSD-3-Clause
3*51369649SPedro F. Giffuni  *
46f1cbda7SRobert Watson  * Copyright (c) 2008-2009 Apple Inc.
56f1cbda7SRobert Watson  * All rights reserved.
66f1cbda7SRobert Watson  *
76f1cbda7SRobert Watson  * Redistribution and use in source and binary forms, with or without
86f1cbda7SRobert Watson  * modification, are permitted provided that the following conditions
96f1cbda7SRobert Watson  * are met:
106f1cbda7SRobert Watson  * 1.  Redistributions of source code must retain the above copyright
116f1cbda7SRobert Watson  *     notice, this list of conditions and the following disclaimer.
126f1cbda7SRobert Watson  * 2.  Redistributions in binary form must reproduce the above copyright
136f1cbda7SRobert Watson  *     notice, this list of conditions and the following disclaimer in the
146f1cbda7SRobert Watson  *     documentation and/or other materials provided with the distribution.
156f1cbda7SRobert Watson  * 3.  Neither the name of Apple Inc. ("Apple") nor the names of
166f1cbda7SRobert Watson  *     its contributors may be used to endorse or promote products derived
176f1cbda7SRobert Watson  *     from this software without specific prior written permission.
186f1cbda7SRobert Watson  *
196f1cbda7SRobert Watson  * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND
206f1cbda7SRobert Watson  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
216f1cbda7SRobert Watson  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
226f1cbda7SRobert Watson  * ARE DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR
236f1cbda7SRobert Watson  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
246f1cbda7SRobert Watson  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
256f1cbda7SRobert Watson  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
266f1cbda7SRobert Watson  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
276f1cbda7SRobert Watson  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
286f1cbda7SRobert Watson  * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
296f1cbda7SRobert Watson  * POSSIBILITY OF SUCH DAMAGE.
306f1cbda7SRobert Watson  */
316f1cbda7SRobert Watson 
326f1cbda7SRobert Watson #include <sys/param.h>
336f1cbda7SRobert Watson #include <sys/fcntl.h>
346f1cbda7SRobert Watson 
356f1cbda7SRobert Watson #include <security/audit/audit.h>
366f1cbda7SRobert Watson 
376f1cbda7SRobert Watson #include <bsm/audit_fcntl.h>
386f1cbda7SRobert Watson #include <bsm/audit_record.h>
396f1cbda7SRobert Watson 
406f1cbda7SRobert Watson struct bsm_fcntl_cmd {
416f1cbda7SRobert Watson 	u_short	bfc_bsm_fcntl_cmd;
426f1cbda7SRobert Watson 	int	bfc_local_fcntl_cmd;
436f1cbda7SRobert Watson };
446f1cbda7SRobert Watson typedef struct bsm_fcntl_cmd	bsm_fcntl_cmd_t;
456f1cbda7SRobert Watson 
466f1cbda7SRobert Watson static const bsm_fcntl_cmd_t bsm_fcntl_cmdtab[] = {
476f1cbda7SRobert Watson 	{ BSM_F_DUPFD, 		F_DUPFD },
486f1cbda7SRobert Watson 	{ BSM_F_GETFD,		F_GETFD },
496f1cbda7SRobert Watson 	{ BSM_F_SETFD,		F_SETFD	},
506f1cbda7SRobert Watson 	{ BSM_F_GETFL,		F_GETFL },
516f1cbda7SRobert Watson 	{ BSM_F_SETFL,		F_SETFL },
526f1cbda7SRobert Watson #ifdef	F_O_GETLK
536f1cbda7SRobert Watson 	{ BSM_F_O_GETLK,	F_O_GETLK },
546f1cbda7SRobert Watson #endif
556f1cbda7SRobert Watson 	{ BSM_F_SETLK,		F_SETLK },
566f1cbda7SRobert Watson 	{ BSM_F_SETLKW,		F_SETLK },
576f1cbda7SRobert Watson #ifdef	F_CHFL
586f1cbda7SRobert Watson 	{ BSM_F_CHKFL,		F_CHKFL },
596f1cbda7SRobert Watson #endif
606f1cbda7SRobert Watson #ifdef 	F_DUP2FD
616f1cbda7SRobert Watson 	{ BSM_F_DUP2FD,		F_DUP2FD },
626f1cbda7SRobert Watson #endif
636f1cbda7SRobert Watson #ifdef	F_ALLOCSP
646f1cbda7SRobert Watson 	{ BSM_F_ALLOCSP,	F_ALLOCSP },
656f1cbda7SRobert Watson #endif
666f1cbda7SRobert Watson #ifdef	F_FREESP
676f1cbda7SRobert Watson 	{ BSM_F_FREESP,		F_FREESP },
686f1cbda7SRobert Watson #endif
696f1cbda7SRobert Watson #ifdef	F_ISSTREAM
706f1cbda7SRobert Watson 	{ BSM_F_ISSTREAM,	F_ISSTREAM},
716f1cbda7SRobert Watson #endif
726f1cbda7SRobert Watson 	{ BSM_F_GETLK,		F_GETLK },
736f1cbda7SRobert Watson #ifdef 	F_PRIV
746f1cbda7SRobert Watson 	{ BSM_F_PRIV,		F_PRIV },
756f1cbda7SRobert Watson #endif
766f1cbda7SRobert Watson #ifdef	F_NPRIV
776f1cbda7SRobert Watson 	{ BSM_F_NPRIV,		F_NPRIV },
786f1cbda7SRobert Watson #endif
796f1cbda7SRobert Watson #ifdef 	F_QUOTACTL
806f1cbda7SRobert Watson 	{ BSM_F_QUOTACTL,	F_QUOTACTL },
816f1cbda7SRobert Watson #endif
826f1cbda7SRobert Watson #ifdef	F_BLOCKS
836f1cbda7SRobert Watson 	{ BSM_F_BLOCKS,		F_BLOCKS },
846f1cbda7SRobert Watson #endif
856f1cbda7SRobert Watson #ifdef	F_BLKSIZE
866f1cbda7SRobert Watson 	{ BSM_F_BLKSIZE,	F_BLKSIZE },
876f1cbda7SRobert Watson #endif
886f1cbda7SRobert Watson 	{ BSM_F_GETOWN,		F_GETOWN },
896f1cbda7SRobert Watson 	{ BSM_F_SETOWN,		F_SETOWN },
906f1cbda7SRobert Watson #ifdef	F_REVOKE
916f1cbda7SRobert Watson 	{ BSM_F_REVOKE,		F_REVOKE },
926f1cbda7SRobert Watson #endif
936f1cbda7SRobert Watson #ifdef 	F_HASREMOTEBLOCKS
946f1cbda7SRobert Watson 	{ BSM_F_HASREMOTEBLOCKS,
956f1cbda7SRobert Watson 				F_HASREMOTEBLOCKS },
966f1cbda7SRobert Watson #endif
976f1cbda7SRobert Watson #ifdef 	F_FREESP
986f1cbda7SRobert Watson 	{ BSM_F_FREESP,		F_FREESP },
996f1cbda7SRobert Watson #endif
1006f1cbda7SRobert Watson #ifdef 	F_ALLOCSP
1016f1cbda7SRobert Watson 	{ BSM_F_ALLOCSP,	F_ALLOCSP },
1026f1cbda7SRobert Watson #endif
1036f1cbda7SRobert Watson #ifdef	F_FREESP64
1046f1cbda7SRobert Watson 	{ BSM_F_FREESP64,	F_FREESP64 },
1056f1cbda7SRobert Watson #endif
1066f1cbda7SRobert Watson #ifdef 	F_ALLOCSP64
1076f1cbda7SRobert Watson 	{ BSM_F_ALLOCSP64,	F_ALLOCSP64 },
1086f1cbda7SRobert Watson #endif
1096f1cbda7SRobert Watson #ifdef	F_GETLK64
1106f1cbda7SRobert Watson 	{ BSM_F_GETLK64, 	F_GETLK64 },
1116f1cbda7SRobert Watson #endif
1126f1cbda7SRobert Watson #ifdef	F_SETLK64
1136f1cbda7SRobert Watson 	{ BSM_F_SETLK64, 	F_SETLK64 },
1146f1cbda7SRobert Watson #endif
1156f1cbda7SRobert Watson #ifdef	F_SETLKW64
1166f1cbda7SRobert Watson 	{ BSM_F_SETLKW64, 	F_SETLKW64 },
1176f1cbda7SRobert Watson #endif
1186f1cbda7SRobert Watson #ifdef	F_SHARE
1196f1cbda7SRobert Watson 	{ BSM_F_SHARE,		F_SHARE },
1206f1cbda7SRobert Watson #endif
1216f1cbda7SRobert Watson #ifdef	F_UNSHARE
1226f1cbda7SRobert Watson 	{ BSM_F_UNSHARE,	F_UNSHARE },
1236f1cbda7SRobert Watson #endif
1246f1cbda7SRobert Watson #ifdef	F_SETLK_NBMAND
1256f1cbda7SRobert Watson 	{ BSM_F_SETLK_NBMAND,	F_SETLK_NBMAND },
1266f1cbda7SRobert Watson #endif
1276f1cbda7SRobert Watson #ifdef	F_SHARE_NBMAND
1286f1cbda7SRobert Watson 	{ BSM_F_SHARE_NBMAND,	F_SHARE_NBMAND },
1296f1cbda7SRobert Watson #endif
1306f1cbda7SRobert Watson #ifdef	F_SETLK64_NBMAND
1316f1cbda7SRobert Watson 	{ BSM_F_SETLK64_NBMAND,	F_SETLK64_NBMAND },
1326f1cbda7SRobert Watson #endif
1336f1cbda7SRobert Watson #ifdef	F_GETXFL
1346f1cbda7SRobert Watson 	{ BSM_F_GETXFL,		F_GETXFL },
1356f1cbda7SRobert Watson #endif
1366f1cbda7SRobert Watson #ifdef	F_BADFD
1376f1cbda7SRobert Watson 	{ BSM_F_BADFD,		F_BADFD },
1386f1cbda7SRobert Watson #endif
1396f1cbda7SRobert Watson #ifdef	F_OGETLK
1406f1cbda7SRobert Watson 	{ BSM_F_OGETLK,		F_OGETLK },
1416f1cbda7SRobert Watson #endif
1426f1cbda7SRobert Watson #ifdef	F_OSETLK
1436f1cbda7SRobert Watson 	{ BSM_F_OSETLK,		F_OSETLK },
1446f1cbda7SRobert Watson #endif
1456f1cbda7SRobert Watson #ifdef	F_OSETLKW
1466f1cbda7SRobert Watson 	{ BSM_F_OSETLKW,	F_OSETLKW },
1476f1cbda7SRobert Watson #endif
1486f1cbda7SRobert Watson #ifdef	F_SETLK_REMOTE
1496f1cbda7SRobert Watson 	{ BSM_F_SETLK_REMOTE,	F_SETLK_REMOTE },
1506f1cbda7SRobert Watson #endif
1516f1cbda7SRobert Watson 
1526f1cbda7SRobert Watson #ifdef	F_SETSIG
1536f1cbda7SRobert Watson 	{ BSM_F_SETSIG,		F_SETSIG },
1546f1cbda7SRobert Watson #endif
1556f1cbda7SRobert Watson #ifdef	F_GETSIG
1566f1cbda7SRobert Watson 	{ BSM_F_GETSIG,		F_GETSIG },
1576f1cbda7SRobert Watson #endif
1586f1cbda7SRobert Watson 
1596f1cbda7SRobert Watson #ifdef	F_CHKCLEAN
1606f1cbda7SRobert Watson 	{ BSM_F_CHKCLEAN,	F_CHKCLEAN },
1616f1cbda7SRobert Watson #endif
1626f1cbda7SRobert Watson #ifdef	F_PREALLOCATE
1636f1cbda7SRobert Watson 	{ BSM_F_PREALLOCATE,	F_PREALLOCATE },
1646f1cbda7SRobert Watson #endif
1656f1cbda7SRobert Watson #ifdef	F_SETSIZE
1666f1cbda7SRobert Watson 	{ BSM_F_SETSIZE,	F_SETSIZE },
1676f1cbda7SRobert Watson #endif
1686f1cbda7SRobert Watson #ifdef	F_RDADVISE
1696f1cbda7SRobert Watson 	{ BSM_F_RDADVISE,	F_RDADVISE },
1706f1cbda7SRobert Watson #endif
1716f1cbda7SRobert Watson #ifdef	F_RDAHEAD
1726f1cbda7SRobert Watson 	{ BSM_F_RDAHEAD,	F_RDAHEAD },
1736f1cbda7SRobert Watson #endif
1746f1cbda7SRobert Watson #ifdef	F_READBOOTSTRAP
1756f1cbda7SRobert Watson 	{ BSM_F_READBOOTSTRAP,	F_READBOOTSTRAP },
1766f1cbda7SRobert Watson #endif
1776f1cbda7SRobert Watson #ifdef	F_WRITEBOOTSTRAP
1786f1cbda7SRobert Watson 	{ BSM_F_WRITEBOOTSTRAP,	F_WRITEBOOTSTRAP },
1796f1cbda7SRobert Watson #endif
1806f1cbda7SRobert Watson #ifdef	F_NOCACHE
1816f1cbda7SRobert Watson 	{ BSM_F_NOCACHE,	F_NOCACHE },
1826f1cbda7SRobert Watson #endif
1836f1cbda7SRobert Watson #ifdef	F_LOG2PHYS
1846f1cbda7SRobert Watson 	{ BSM_F_LOG2PHYS,	F_LOG2PHYS },
1856f1cbda7SRobert Watson #endif
1866f1cbda7SRobert Watson #ifdef	F_GETPATH
1876f1cbda7SRobert Watson 	{ BSM_F_GETPATH,	F_GETPATH },
1886f1cbda7SRobert Watson #endif
1896f1cbda7SRobert Watson #ifdef	F_FULLFSYNC
1906f1cbda7SRobert Watson 	{ BSM_F_FULLFSYNC,	F_FULLFSYNC },
1916f1cbda7SRobert Watson #endif
1926f1cbda7SRobert Watson #ifdef	F_PATHPKG_CHECK
1936f1cbda7SRobert Watson 	{ BSM_F_PATHPKG_CHECK,	F_PATHPKG_CHECK },
1946f1cbda7SRobert Watson #endif
1956f1cbda7SRobert Watson #ifdef	F_FREEZE_FS
1966f1cbda7SRobert Watson 	{ BSM_F_FREEZE_FS,	F_FREEZE_FS },
1976f1cbda7SRobert Watson #endif
1986f1cbda7SRobert Watson #ifdef	F_THAW_FS
1996f1cbda7SRobert Watson 	{ BSM_F_THAW_FS,	F_THAW_FS },
2006f1cbda7SRobert Watson #endif
2016f1cbda7SRobert Watson #ifdef	F_GLOBAL_NOCACHE
2026f1cbda7SRobert Watson 	{ BSM_F_GLOBAL_NOCACHE,	F_GLOBAL_NOCACHE },
2036f1cbda7SRobert Watson #endif
2046f1cbda7SRobert Watson #ifdef	F_OPENFROM
2056f1cbda7SRobert Watson 	{ BSM_F_OPENFROM,	F_OPENFROM },
2066f1cbda7SRobert Watson #endif
2076f1cbda7SRobert Watson #ifdef	F_UNLINKFROM
2086f1cbda7SRobert Watson 	{ BSM_F_UNLINKFROM,	F_UNLINKFROM },
2096f1cbda7SRobert Watson #endif
2106f1cbda7SRobert Watson #ifdef	F_CHECK_OPENEVT
2116f1cbda7SRobert Watson 	{ BSM_F_CHECK_OPENEVT,	F_CHECK_OPENEVT },
2126f1cbda7SRobert Watson #endif
2136f1cbda7SRobert Watson #ifdef	F_ADDSIGS
2146f1cbda7SRobert Watson 	{ BSM_F_ADDSIGS,	F_ADDSIGS },
2156f1cbda7SRobert Watson #endif
2166f1cbda7SRobert Watson #ifdef	F_MARKDEPENDENCY
2176f1cbda7SRobert Watson 	{ BSM_F_MARKDEPENDENCY,	F_MARKDEPENDENCY },
2186f1cbda7SRobert Watson #endif
2196f1cbda7SRobert Watson 
2206f1cbda7SRobert Watson #ifdef	FCNTL_FS_SPECIFIC_BASE
2216f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_0,	FCNTL_FS_SPECIFIC_BASE},
2226f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_1,	FCNTL_FS_SPECIFIC_BASE + 1},
2236f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_2,	FCNTL_FS_SPECIFIC_BASE + 2},
2246f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_3,	FCNTL_FS_SPECIFIC_BASE + 3},
2256f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_4,	FCNTL_FS_SPECIFIC_BASE + 4},
2266f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_5,	FCNTL_FS_SPECIFIC_BASE + 5},
2276f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_6,	FCNTL_FS_SPECIFIC_BASE + 6},
2286f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_7,	FCNTL_FS_SPECIFIC_BASE + 7},
2296f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_8,	FCNTL_FS_SPECIFIC_BASE + 8},
2306f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_9,	FCNTL_FS_SPECIFIC_BASE + 9},
2316f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_10,	FCNTL_FS_SPECIFIC_BASE + 10},
2326f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_11,	FCNTL_FS_SPECIFIC_BASE + 11},
2336f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_12,	FCNTL_FS_SPECIFIC_BASE + 12},
2346f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_13,	FCNTL_FS_SPECIFIC_BASE + 13},
2356f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_14,	FCNTL_FS_SPECIFIC_BASE + 14},
2366f1cbda7SRobert Watson 	{ BSM_F_FS_SPECIFIC_15,	FCNTL_FS_SPECIFIC_BASE + 15},
2376f1cbda7SRobert Watson #endif	/* FCNTL_FS_SPECIFIC_BASE */
2386f1cbda7SRobert Watson };
239323b076eSPedro F. Giffuni static const int bsm_fcntl_cmd_count = nitems(bsm_fcntl_cmdtab);
2406f1cbda7SRobert Watson 
2416f1cbda7SRobert Watson static const bsm_fcntl_cmd_t *
bsm_lookup_local_fcntl_cmd(int local_fcntl_cmd)2426f1cbda7SRobert Watson bsm_lookup_local_fcntl_cmd(int local_fcntl_cmd)
2436f1cbda7SRobert Watson {
2446f1cbda7SRobert Watson 	int i;
2456f1cbda7SRobert Watson 
2466f1cbda7SRobert Watson 	for (i = 0; i < bsm_fcntl_cmd_count; i++) {
2476f1cbda7SRobert Watson 		if (bsm_fcntl_cmdtab[i].bfc_local_fcntl_cmd ==
2486f1cbda7SRobert Watson 		    local_fcntl_cmd)
2496f1cbda7SRobert Watson 			return (&bsm_fcntl_cmdtab[i]);
2506f1cbda7SRobert Watson 	}
2516f1cbda7SRobert Watson 	return (NULL);
2526f1cbda7SRobert Watson }
2536f1cbda7SRobert Watson 
2546f1cbda7SRobert Watson u_short
au_fcntl_cmd_to_bsm(int local_fcntl_cmd)2556f1cbda7SRobert Watson au_fcntl_cmd_to_bsm(int local_fcntl_cmd)
2566f1cbda7SRobert Watson {
2576f1cbda7SRobert Watson 	const bsm_fcntl_cmd_t *bfcp;
2586f1cbda7SRobert Watson 
2596f1cbda7SRobert Watson 	bfcp = bsm_lookup_local_fcntl_cmd(local_fcntl_cmd);
2606f1cbda7SRobert Watson 	if (bfcp == NULL)
2616f1cbda7SRobert Watson 		return (BSM_F_UNKNOWN);
2626f1cbda7SRobert Watson 	return (bfcp->bfc_bsm_fcntl_cmd);
2636f1cbda7SRobert Watson }
2646f1cbda7SRobert Watson 
2656f1cbda7SRobert Watson static const bsm_fcntl_cmd_t *
bsm_lookup_bsm_fcntl_cmd(u_short bsm_fcntl_cmd)2666f1cbda7SRobert Watson bsm_lookup_bsm_fcntl_cmd(u_short bsm_fcntl_cmd)
2676f1cbda7SRobert Watson {
2686f1cbda7SRobert Watson 	int i;
2696f1cbda7SRobert Watson 
2706f1cbda7SRobert Watson 	for (i = 0; i < bsm_fcntl_cmd_count; i++) {
2716f1cbda7SRobert Watson 		if (bsm_fcntl_cmdtab[i].bfc_bsm_fcntl_cmd ==
2726f1cbda7SRobert Watson 		    bsm_fcntl_cmd)
2736f1cbda7SRobert Watson 			return (&bsm_fcntl_cmdtab[i]);
2746f1cbda7SRobert Watson 	}
2756f1cbda7SRobert Watson 	return (NULL);
2766f1cbda7SRobert Watson }
2776f1cbda7SRobert Watson 
2786f1cbda7SRobert Watson int
au_bsm_to_fcntl_cmd(u_short bsm_fcntl_cmd,int * local_fcntl_cmdp)2796f1cbda7SRobert Watson au_bsm_to_fcntl_cmd(u_short bsm_fcntl_cmd, int *local_fcntl_cmdp)
2806f1cbda7SRobert Watson {
2816f1cbda7SRobert Watson 	const bsm_fcntl_cmd_t *bfcp;
2826f1cbda7SRobert Watson 
2836f1cbda7SRobert Watson 	bfcp = bsm_lookup_bsm_fcntl_cmd(bsm_fcntl_cmd);
2846f1cbda7SRobert Watson 	if (bfcp == NULL || bfcp->bfc_local_fcntl_cmd)
2856f1cbda7SRobert Watson 		return (-1);
2866f1cbda7SRobert Watson 	*local_fcntl_cmdp = bfcp->bfc_local_fcntl_cmd;
2876f1cbda7SRobert Watson 	return (0);
2886f1cbda7SRobert Watson }
289