17bc82500SRobert Watson /*- 273275908SRobert Watson * Copyright (c) 2002, 2003 Networks Associates Technology, Inc. 37bc82500SRobert Watson * All rights reserved. 47bc82500SRobert Watson * 56201265bSRobert Watson * This software was developed for the FreeBSD Project in part by Network 66201265bSRobert Watson * Associates Laboratories, the Security Research Division of Network 76201265bSRobert Watson * Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), 86201265bSRobert Watson * as part of the DARPA CHATS research program. 97bc82500SRobert Watson * 107bc82500SRobert Watson * Redistribution and use in source and binary forms, with or without 117bc82500SRobert Watson * modification, are permitted provided that the following conditions 127bc82500SRobert Watson * are met: 137bc82500SRobert Watson * 1. Redistributions of source code must retain the above copyright 147bc82500SRobert Watson * notice, this list of conditions and the following disclaimer. 157bc82500SRobert Watson * 2. Redistributions in binary form must reproduce the above copyright 167bc82500SRobert Watson * notice, this list of conditions and the following disclaimer in the 177bc82500SRobert Watson * documentation and/or other materials provided with the distribution. 187bc82500SRobert Watson * 197bc82500SRobert Watson * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 207bc82500SRobert Watson * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 217bc82500SRobert Watson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 227bc82500SRobert Watson * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 237bc82500SRobert Watson * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 247bc82500SRobert Watson * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 257bc82500SRobert Watson * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 267bc82500SRobert Watson * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 277bc82500SRobert Watson * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 287bc82500SRobert Watson * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 297bc82500SRobert Watson * SUCH DAMAGE. 307bc82500SRobert Watson */ 31677b542eSDavid E. O'Brien 32677b542eSDavid E. O'Brien #include <sys/cdefs.h> 33677b542eSDavid E. O'Brien __FBSDID("$FreeBSD$"); 34677b542eSDavid E. O'Brien 357bc82500SRobert Watson #include "opt_mac.h" 36f9d0d524SRobert Watson 377bc82500SRobert Watson #include <sys/param.h> 3895fab37eSRobert Watson #include <sys/kernel.h> 3995fab37eSRobert Watson #include <sys/lock.h> 40b656366bSBruce Evans #include <sys/malloc.h> 4195fab37eSRobert Watson #include <sys/mutex.h> 4295fab37eSRobert Watson #include <sys/mac.h> 43f51e5803SRobert Watson #include <sys/sbuf.h> 4495fab37eSRobert Watson #include <sys/systm.h> 4595fab37eSRobert Watson #include <sys/vnode.h> 4695fab37eSRobert Watson #include <sys/pipe.h> 4795fab37eSRobert Watson #include <sys/sysctl.h> 4895fab37eSRobert Watson 4995fab37eSRobert Watson #include <sys/mac_policy.h> 5095fab37eSRobert Watson 5173275908SRobert Watson #include <security/mac/mac_internal.h> 5295fab37eSRobert Watson 53b88c98f6SRobert Watson static int mac_enforce_pipe = 1; 54b88c98f6SRobert Watson SYSCTL_INT(_security_mac, OID_AUTO, enforce_pipe, CTLFLAG_RW, 55b88c98f6SRobert Watson &mac_enforce_pipe, 0, "Enforce MAC policy on pipe operations"); 56c031391bSRobert Watson TUNABLE_INT("security.mac.enforce_pipe", &mac_enforce_pipe); 57b88c98f6SRobert Watson 58f050add5SRobert Watson #ifdef MAC_DEBUG 5973275908SRobert Watson static unsigned int nmacpipes; 60b2f0927aSRobert Watson SYSCTL_UINT(_security_mac_debug_counters, OID_AUTO, pipes, CTLFLAG_RD, 6195fab37eSRobert Watson &nmacpipes, 0, "number of pipes in use"); 62f050add5SRobert Watson #endif 6395fab37eSRobert Watson 64eca8a663SRobert Watson struct label * 65eca8a663SRobert Watson mac_pipe_label_alloc(void) 66f7b951a8SRobert Watson { 67eca8a663SRobert Watson struct label *label; 68f7b951a8SRobert Watson 69eca8a663SRobert Watson label = mac_labelzone_alloc(M_WAITOK); 70f7b951a8SRobert Watson MAC_PERFORM(init_pipe_label, label); 718d8d5ea8SRobert Watson MAC_DEBUG_COUNTER_INC(&nmacpipes); 72eca8a663SRobert Watson return (label); 73f7b951a8SRobert Watson } 74f7b951a8SRobert Watson 7508bcdc58SRobert Watson void 764795b82cSRobert Watson mac_init_pipe(struct pipepair *pp) 7708bcdc58SRobert Watson { 7808bcdc58SRobert Watson 794795b82cSRobert Watson pp->pp_label = mac_pipe_label_alloc(); 8008bcdc58SRobert Watson } 8108bcdc58SRobert Watson 822555374cSRobert Watson void 83eca8a663SRobert Watson mac_pipe_label_free(struct label *label) 84f7b951a8SRobert Watson { 85f7b951a8SRobert Watson 86f7b951a8SRobert Watson MAC_PERFORM(destroy_pipe_label, label); 87eca8a663SRobert Watson mac_labelzone_free(label); 888d8d5ea8SRobert Watson MAC_DEBUG_COUNTER_DEC(&nmacpipes); 89f7b951a8SRobert Watson } 90f7b951a8SRobert Watson 9187807196SRobert Watson void 924795b82cSRobert Watson mac_destroy_pipe(struct pipepair *pp) 9308bcdc58SRobert Watson { 9408bcdc58SRobert Watson 954795b82cSRobert Watson mac_pipe_label_free(pp->pp_label); 964795b82cSRobert Watson pp->pp_label = NULL; 9787807196SRobert Watson } 9887807196SRobert Watson 992555374cSRobert Watson void 100f7b951a8SRobert Watson mac_copy_pipe_label(struct label *src, struct label *dest) 101f7b951a8SRobert Watson { 102f7b951a8SRobert Watson 103f7b951a8SRobert Watson MAC_PERFORM(copy_pipe_label, src, dest); 104f7b951a8SRobert Watson } 105f7b951a8SRobert Watson 10673275908SRobert Watson int 107f7b951a8SRobert Watson mac_externalize_pipe_label(struct label *label, char *elements, 10883b7b0edSRobert Watson char *outbuf, size_t outbuflen) 109f7b951a8SRobert Watson { 110f7b951a8SRobert Watson int error; 111f7b951a8SRobert Watson 112da77b2faSRobert Watson MAC_EXTERNALIZE(pipe, label, elements, outbuf, outbuflen); 113f7b951a8SRobert Watson 114f7b951a8SRobert Watson return (error); 115f7b951a8SRobert Watson } 116f7b951a8SRobert Watson 11773275908SRobert Watson int 118f7b951a8SRobert Watson mac_internalize_pipe_label(struct label *label, char *string) 119f7b951a8SRobert Watson { 120f7b951a8SRobert Watson int error; 121f7b951a8SRobert Watson 122da77b2faSRobert Watson MAC_INTERNALIZE(pipe, label, string); 123f7b951a8SRobert Watson 124f7b951a8SRobert Watson return (error); 125f7b951a8SRobert Watson } 126f7b951a8SRobert Watson 12795fab37eSRobert Watson void 1284795b82cSRobert Watson mac_create_pipe(struct ucred *cred, struct pipepair *pp) 12995fab37eSRobert Watson { 13095fab37eSRobert Watson 1314795b82cSRobert Watson MAC_PERFORM(create_pipe, cred, pp, pp->pp_label); 13295fab37eSRobert Watson } 13395fab37eSRobert Watson 13495fab37eSRobert Watson static void 1354795b82cSRobert Watson mac_relabel_pipe(struct ucred *cred, struct pipepair *pp, 1364795b82cSRobert Watson struct label *newlabel) 13795fab37eSRobert Watson { 13895fab37eSRobert Watson 1394795b82cSRobert Watson MAC_PERFORM(relabel_pipe, cred, pp, pp->pp_label, newlabel); 14095fab37eSRobert Watson } 14195fab37eSRobert Watson 14295fab37eSRobert Watson int 1434795b82cSRobert Watson mac_check_pipe_ioctl(struct ucred *cred, struct pipepair *pp, 1444795b82cSRobert Watson unsigned long cmd, void *data) 14595fab37eSRobert Watson { 14695fab37eSRobert Watson int error; 14795fab37eSRobert Watson 1484795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 1491aa37f53SRobert Watson 1501aa37f53SRobert Watson if (!mac_enforce_pipe) 1511aa37f53SRobert Watson return (0); 1521aa37f53SRobert Watson 1534795b82cSRobert Watson MAC_CHECK(check_pipe_ioctl, cred, pp, pp->pp_label, cmd, data); 15495fab37eSRobert Watson 15595fab37eSRobert Watson return (error); 15695fab37eSRobert Watson } 15795fab37eSRobert Watson 15895fab37eSRobert Watson int 1594795b82cSRobert Watson mac_check_pipe_poll(struct ucred *cred, struct pipepair *pp) 16095fab37eSRobert Watson { 16195fab37eSRobert Watson int error; 16295fab37eSRobert Watson 1634795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 1641aa37f53SRobert Watson 1651aa37f53SRobert Watson if (!mac_enforce_pipe) 1661aa37f53SRobert Watson return (0); 1671aa37f53SRobert Watson 1684795b82cSRobert Watson MAC_CHECK(check_pipe_poll, cred, pp, pp->pp_label); 169c024c3eeSRobert Watson 170c024c3eeSRobert Watson return (error); 171c024c3eeSRobert Watson } 172c024c3eeSRobert Watson 173c024c3eeSRobert Watson int 1744795b82cSRobert Watson mac_check_pipe_read(struct ucred *cred, struct pipepair *pp) 175c024c3eeSRobert Watson { 176c024c3eeSRobert Watson int error; 177c024c3eeSRobert Watson 1784795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 1791aa37f53SRobert Watson 1801aa37f53SRobert Watson if (!mac_enforce_pipe) 1811aa37f53SRobert Watson return (0); 1821aa37f53SRobert Watson 1834795b82cSRobert Watson MAC_CHECK(check_pipe_read, cred, pp, pp->pp_label); 18495fab37eSRobert Watson 18595fab37eSRobert Watson return (error); 18695fab37eSRobert Watson } 18795fab37eSRobert Watson 18895fab37eSRobert Watson static int 1894795b82cSRobert Watson mac_check_pipe_relabel(struct ucred *cred, struct pipepair *pp, 19095fab37eSRobert Watson struct label *newlabel) 19195fab37eSRobert Watson { 19295fab37eSRobert Watson int error; 19395fab37eSRobert Watson 1944795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 1951aa37f53SRobert Watson 1961aa37f53SRobert Watson if (!mac_enforce_pipe) 1971aa37f53SRobert Watson return (0); 1981aa37f53SRobert Watson 1994795b82cSRobert Watson MAC_CHECK(check_pipe_relabel, cred, pp, pp->pp_label, newlabel); 20095fab37eSRobert Watson 20195fab37eSRobert Watson return (error); 20295fab37eSRobert Watson } 20395fab37eSRobert Watson 20495fab37eSRobert Watson int 2054795b82cSRobert Watson mac_check_pipe_stat(struct ucred *cred, struct pipepair *pp) 206c024c3eeSRobert Watson { 207c024c3eeSRobert Watson int error; 208c024c3eeSRobert Watson 2094795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 2101aa37f53SRobert Watson 2111aa37f53SRobert Watson if (!mac_enforce_pipe) 2121aa37f53SRobert Watson return (0); 2131aa37f53SRobert Watson 2144795b82cSRobert Watson MAC_CHECK(check_pipe_stat, cred, pp, pp->pp_label); 215c024c3eeSRobert Watson 216c024c3eeSRobert Watson return (error); 217c024c3eeSRobert Watson } 218c024c3eeSRobert Watson 219c024c3eeSRobert Watson int 2204795b82cSRobert Watson mac_check_pipe_write(struct ucred *cred, struct pipepair *pp) 221c024c3eeSRobert Watson { 222c024c3eeSRobert Watson int error; 223c024c3eeSRobert Watson 2244795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 2251aa37f53SRobert Watson 2261aa37f53SRobert Watson if (!mac_enforce_pipe) 2271aa37f53SRobert Watson return (0); 2281aa37f53SRobert Watson 2294795b82cSRobert Watson MAC_CHECK(check_pipe_write, cred, pp, pp->pp_label); 230c024c3eeSRobert Watson 231c024c3eeSRobert Watson return (error); 232c024c3eeSRobert Watson } 233c024c3eeSRobert Watson 234c024c3eeSRobert Watson int 2354795b82cSRobert Watson mac_pipe_label_set(struct ucred *cred, struct pipepair *pp, 2364795b82cSRobert Watson struct label *label) 23795fab37eSRobert Watson { 23895fab37eSRobert Watson int error; 23995fab37eSRobert Watson 2404795b82cSRobert Watson mtx_assert(&pp->pp_mtx, MA_OWNED); 2411aa37f53SRobert Watson 2424795b82cSRobert Watson error = mac_check_pipe_relabel(cred, pp, label); 24395fab37eSRobert Watson if (error) 24495fab37eSRobert Watson return (error); 24595fab37eSRobert Watson 2464795b82cSRobert Watson mac_relabel_pipe(cred, pp, label); 24795fab37eSRobert Watson 24895fab37eSRobert Watson return (0); 24995fab37eSRobert Watson } 250