1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License, Version 1.0 only 6 * (the "License"). You may not use this file except in compliance 7 * with the License. 8 * 9 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10 * or http://www.opensolaris.org/os/licensing. 11 * See the License for the specific language governing permissions 12 * and limitations under the License. 13 * 14 * When distributing Covered Code, include this CDDL HEADER in each 15 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16 * If applicable, add the following below this CDDL HEADER, with the 17 * fields enclosed by brackets "[]" replaced with your own identifying 18 * information: Portions Copyright [yyyy] [name of copyright owner] 19 * 20 * CDDL HEADER END 21 */ 22 /* 23 * Copyright 2003 Sun Microsystems, Inc. All rights reserved. 24 * Use is subject to license terms. 25 */ 26 27 #ifndef _SYS_PRIV_IMPL_H 28 #define _SYS_PRIV_IMPL_H 29 30 #include <sys/priv_const.h> 31 #include <sys/priv.h> 32 33 #ifdef __cplusplus 34 extern "C" { 35 #endif 36 37 #if defined(_KERNEL) || defined(_KMEMUSER) 38 /* 39 * priv_set_t is a structure holding a set of privileges 40 */ 41 42 struct priv_set { 43 priv_chunk_t pbits[PRIV_SETSIZE]; 44 }; 45 46 typedef struct cred_priv_s { 47 priv_set_t crprivs[PRIV_NSET]; /* Priv sets */ 48 uint_t crpriv_flags; /* Privilege flags */ 49 } cred_priv_t; 50 51 #endif 52 53 #ifdef _KERNEL 54 55 extern priv_set_t *priv_basic; 56 extern priv_set_t priv_unsafe; 57 extern priv_set_t priv_fullset; 58 extern void priv_init(void); 59 60 /* The CR_PRIVS macro is defined in <sys/cred_impl.h> */ 61 #define CR_EPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_EFFECTIVE]) 62 #define CR_IPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_INHERITABLE]) 63 #define CR_PPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_PERMITTED]) 64 #define CR_LPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_LIMIT]) 65 66 #define CR_FLAGS(c) (CR_PRIVS(c)->crpriv_flags) 67 68 #define PRIV_SETBYTES (PRIV_NSET * PRIV_SETSIZE * sizeof (priv_chunk_t)) 69 70 #define PRIV_EISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || (c)->cr_uid != 0) 71 #define PRIV_PISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || \ 72 ((c)->cr_uid != 0 && (c)->cr_suid != 0 && \ 73 (c)->cr_ruid != 0)) 74 75 #define CR_OEPRIV(c) (*(PRIV_EISAWARE(c) ? &CR_EPRIV(c) : &CR_LPRIV(c))) 76 #define CR_OPPRIV(c) (*(PRIV_PISAWARE(c) ? &CR_PPRIV(c) : &CR_LPRIV(c))) 77 78 #define PRIV_VALIDSET(s) ((s) >= 0 && (s) < PRIV_NSET) 79 #define PRIV_VALIDOP(op) ((op) >= PRIV_ON && (op) <= PRIV_SET) 80 81 #define PRIV_FULLSET &priv_fullset /* Require full set */ 82 83 /* 84 * Privilege macros bits manipulation macros; DEBUG kernels will 85 * ASSERT() that privileges are not out of range. 86 */ 87 #ifndef NBBY 88 #define NBBY 8 89 #endif 90 91 #define __NBWRD (NBBY * sizeof (priv_chunk_t)) 92 93 #define privmask(n) (1U << ((__NBWRD - 1) - ((n) % __NBWRD))) 94 #define privword(n) ((n)/__NBWRD) 95 96 /* 97 * PRIV_ASSERT(a, b) sets privilege "b" in privilege set "a". 98 * PRIV_CLEAR(a,b) clears privilege "b" in privilege set "a". 99 * PRIV_ISASSERT tests if privilege 'b' is asserted in privilege set 'a'. 100 */ 101 102 #define __PRIV_ASSERT(a, b) ((a)->pbits[privword(b)] |= privmask(b)) 103 #define __PRIV_CLEAR(a, b) ((a)->pbits[privword(b)] &= ~privmask(b)) 104 #define __PRIV_ISASSERT(a, b) ((a)->pbits[privword(b)] & privmask(b)) 105 106 #ifdef DEBUG 107 #define PRIV_CLEAR(a, b) priv_delset((a), (b)) 108 #define PRIV_ASSERT(a, b) priv_addset((a), (b)) 109 #define PRIV_ISASSERT(a, b) priv_ismember((a), (b)) 110 #else 111 #define PRIV_CLEAR(a, b) __PRIV_CLEAR((a), (b)) 112 #define PRIV_ASSERT(a, b) __PRIV_ASSERT((a), (b)) 113 #define PRIV_ISASSERT(a, b) __PRIV_ISASSERT((a), (b)) 114 #endif 115 116 #endif /* _KERNEL */ 117 118 #ifdef __cplusplus 119 } 120 #endif 121 122 #endif /* _SYS_PRIV_IMPL_H */ 123