1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 27 #include <sys/types.h> 28 #include <unistd.h> 29 #include <bsm/audit.h> 30 #include <bsm/audit_record.h> 31 #include <bsm/libbsm.h> 32 #include <priv.h> 33 #include <sys/ipc.h> 34 #include <sys/param.h> 35 #include <sys/socket.h> 36 #include <sys/time.h> 37 #include <sys/vnode.h> 38 #include <malloc.h> 39 #include <net/route.h> 40 #include <netinet/in.h> 41 #include <netinet/in_pcb.h> 42 #include <string.h> 43 #include <ucred.h> 44 #include <zone.h> 45 #include <sys/tsol/label.h> 46 47 #define NGROUPS 16 /* XXX - temporary */ 48 49 token_t *au_to_arg(char n, char *text, uint32_t v); 50 #pragma weak au_to_arg = au_to_arg32 51 token_t *au_to_return(char number, uint32_t value); 52 #pragma weak au_to_return = au_to_return32 53 54 static token_t *au_to_exec(char **, char); 55 56 static token_t * 57 get_token(int s) 58 { 59 token_t *token; /* Resultant token */ 60 61 if ((token = (token_t *)malloc(sizeof (token_t))) == NULL) 62 return (NULL); 63 if ((token->tt_data = malloc(s)) == NULL) { 64 free(token); 65 return (NULL); 66 } 67 token->tt_size = s; 68 token->tt_next = NULL; 69 return (token); 70 } 71 72 /* 73 * au_to_header 74 * return s: 75 * pointer to header token. 76 */ 77 token_t * 78 au_to_header(au_event_t e_type, au_emod_t e_mod) 79 { 80 adr_t adr; /* adr memory stream header */ 81 token_t *token; /* token pointer */ 82 char version = TOKEN_VERSION; /* version of token family */ 83 int32_t byte_count; 84 struct timeval tv; 85 #ifdef _LP64 86 char data_header = AUT_HEADER64; /* header for this token */ 87 88 token = get_token(2 * sizeof (char) + sizeof (int32_t) + 89 2 * sizeof (int64_t) + 2 * sizeof (short)); 90 #else 91 char data_header = AUT_HEADER32; 92 93 token = get_token(2 * sizeof (char) + 3 * sizeof (int32_t) + 94 2 * sizeof (short)); 95 #endif 96 97 if (token == NULL) 98 return (NULL); 99 adr_start(&adr, token->tt_data); 100 adr_char(&adr, &data_header, 1); /* token ID */ 101 adr_int32(&adr, &byte_count, 1); /* length of audit record */ 102 adr_char(&adr, &version, 1); /* version of audit tokens */ 103 adr_ushort(&adr, &e_type, 1); /* event ID */ 104 adr_ushort(&adr, &e_mod, 1); /* event ID modifier */ 105 #ifdef _LP64 106 adr_int64(&adr, (int64_t *)&tv, 2); /* time & date */ 107 #else 108 adr_int32(&adr, (int32_t *)&tv, 2); /* time & date */ 109 #endif 110 return (token); 111 } 112 113 /* 114 * au_to_header_ex 115 * return s: 116 * pointer to header token. 117 */ 118 token_t * 119 au_to_header_ex(au_event_t e_type, au_emod_t e_mod) 120 { 121 adr_t adr; /* adr memory stream header */ 122 token_t *token; /* token pointer */ 123 char version = TOKEN_VERSION; /* version of token family */ 124 int32_t byte_count; 125 struct timeval tv; 126 auditinfo_addr_t audit_info; 127 au_tid_addr_t *host_info = &audit_info.ai_termid; 128 #ifdef _LP64 129 char data_header = AUT_HEADER64_EX; /* header for this token */ 130 #else 131 char data_header = AUT_HEADER32_EX; 132 #endif 133 134 /* If our host address can't be determined, revert to un-extended hdr */ 135 136 if (auditon(A_GETKAUDIT, (caddr_t)&audit_info, 137 sizeof (audit_info)) < 0) 138 return (au_to_header(e_type, e_mod)); 139 140 if (host_info->at_type == AU_IPv6) 141 if (IN6_IS_ADDR_UNSPECIFIED((in6_addr_t *)host_info->at_addr)) 142 return (au_to_header(e_type, e_mod)); 143 else 144 if (host_info->at_addr[0] == htonl(INADDR_ANY)) 145 return (au_to_header(e_type, e_mod)); 146 147 #ifdef _LP64 148 token = get_token(2 * sizeof (char) + sizeof (int32_t) + 149 2 * sizeof (int64_t) + 2 * sizeof (short) + 150 sizeof (int32_t) + host_info->at_type); 151 #else 152 token = get_token(2 * sizeof (char) + 3 * sizeof (int32_t) + 153 2 * sizeof (short) + sizeof (int32_t) + host_info->at_type); 154 #endif 155 156 if (token == NULL) 157 return (NULL); 158 adr_start(&adr, token->tt_data); 159 adr_char(&adr, &data_header, 1); /* token ID */ 160 adr_int32(&adr, &byte_count, 1); /* length of audit record */ 161 adr_char(&adr, &version, 1); /* version of audit tokens */ 162 adr_ushort(&adr, &e_type, 1); /* event ID */ 163 adr_ushort(&adr, &e_mod, 1); /* event ID modifier */ 164 adr_int32(&adr, (int32_t *)&host_info->at_type, 1); 165 adr_char(&adr, (char *)host_info->at_addr, 166 (int)host_info->at_type); 167 #ifdef _LP64 168 adr_int64(&adr, (int64_t *)&tv, 2); /* time & date */ 169 #else 170 adr_int32(&adr, (int32_t *)&tv, 2); /* time & date */ 171 #endif 172 return (token); 173 } 174 175 /* 176 * au_to_trailer 177 * return s: 178 * pointer to a trailer token. 179 */ 180 token_t * 181 au_to_trailer(void) 182 { 183 adr_t adr; /* adr memory stream header */ 184 token_t *token; /* token pointer */ 185 char data_header = AUT_TRAILER; /* header for this token */ 186 short magic = (short)AUT_TRAILER_MAGIC; /* trailer magic number */ 187 int32_t byte_count; 188 189 token = get_token(sizeof (char) + sizeof (int32_t) + sizeof (short)); 190 if (token == NULL) 191 return (NULL); 192 adr_start(&adr, token->tt_data); 193 adr_char(&adr, &data_header, 1); /* token ID */ 194 adr_short(&adr, &magic, 1); /* magic number */ 195 adr_int32(&adr, &byte_count, 1); /* length of audit record */ 196 197 return (token); 198 } 199 200 /* 201 * au_to_arg32 202 * return s: 203 * pointer to an argument token. 204 */ 205 token_t * 206 au_to_arg32(char n, char *text, uint32_t v) 207 { 208 token_t *token; /* local token */ 209 adr_t adr; /* adr memory stream header */ 210 char data_header = AUT_ARG32; /* header for this token */ 211 short bytes; /* length of string */ 212 213 bytes = strlen(text) + 1; 214 215 token = get_token((int)(2 * sizeof (char) + sizeof (int32_t) + 216 sizeof (short) + bytes)); 217 if (token == NULL) 218 return (NULL); 219 adr_start(&adr, token->tt_data); 220 adr_char(&adr, &data_header, 1); /* token type */ 221 adr_char(&adr, &n, 1); /* argument id */ 222 adr_int32(&adr, (int32_t *)&v, 1); /* argument value */ 223 adr_short(&adr, &bytes, 1); 224 adr_char(&adr, text, bytes); 225 226 return (token); 227 } 228 229 /* 230 * au_to_arg64 231 * return s: 232 * pointer to an argument token. 233 */ 234 token_t * 235 au_to_arg64(char n, char *text, uint64_t v) 236 { 237 token_t *token; /* local token */ 238 adr_t adr; /* adr memory stream header */ 239 char data_header = AUT_ARG64; /* header for this token */ 240 short bytes; /* length of string */ 241 242 bytes = strlen(text) + 1; 243 244 token = get_token((int)(2 * sizeof (char) + sizeof (int64_t) + 245 sizeof (short) + bytes)); 246 if (token == NULL) 247 return (NULL); 248 adr_start(&adr, token->tt_data); 249 adr_char(&adr, &data_header, 1); /* token type */ 250 adr_char(&adr, &n, 1); /* argument id */ 251 adr_int64(&adr, (int64_t *)&v, 1); /* argument value */ 252 adr_short(&adr, &bytes, 1); 253 adr_char(&adr, text, bytes); 254 255 return (token); 256 } 257 258 259 /* 260 * au_to_attr 261 * return s: 262 * pointer to an attribute token. 263 */ 264 token_t * 265 au_to_attr(struct vattr *attr) 266 { 267 token_t *token; /* local token */ 268 adr_t adr; /* adr memory stream header */ 269 int32_t value; 270 #ifdef _LP64 271 char data_header = AUT_ATTR64; /* header for this token */ 272 273 token = get_token(sizeof (char) + 274 sizeof (int32_t) * 4 + 275 sizeof (int64_t) * 2); 276 #else 277 char data_header = AUT_ATTR32; 278 279 token = get_token(sizeof (char) + sizeof (int32_t) * 5 + 280 sizeof (int64_t)); 281 #endif 282 283 if (token == NULL) 284 return (NULL); 285 adr_start(&adr, token->tt_data); 286 adr_char(&adr, &data_header, 1); 287 value = (int32_t)attr->va_mode; 288 adr_int32(&adr, &value, 1); 289 value = (int32_t)attr->va_uid; 290 adr_int32(&adr, &value, 1); 291 value = (int32_t)attr->va_gid; 292 adr_int32(&adr, &value, 1); 293 adr_int32(&adr, (int32_t *)&(attr->va_fsid), 1); 294 adr_int64(&adr, (int64_t *)&(attr->va_nodeid), 1); 295 #ifdef _LP64 296 adr_int64(&adr, (int64_t *)&(attr->va_rdev), 1); 297 #else 298 adr_int32(&adr, (int32_t *)&(attr->va_rdev), 1); 299 #endif 300 301 return (token); 302 } 303 304 /* 305 * au_to_data 306 * return s: 307 * pointer to a data token. 308 */ 309 token_t * 310 au_to_data(char unit_print, char unit_type, char unit_count, char *p) 311 { 312 adr_t adr; /* adr memory stream header */ 313 token_t *token; /* token pointer */ 314 char data_header = AUT_DATA; /* header for this token */ 315 int byte_count; /* number of bytes */ 316 317 if (p == NULL || unit_count < 1) 318 return (NULL); 319 320 /* 321 * Check validity of print type 322 */ 323 if (unit_print < AUP_BINARY || unit_print > AUP_STRING) 324 return (NULL); 325 326 switch (unit_type) { 327 case AUR_SHORT: 328 byte_count = unit_count * sizeof (short); 329 break; 330 case AUR_INT32: 331 byte_count = unit_count * sizeof (int32_t); 332 break; 333 case AUR_INT64: 334 byte_count = unit_count * sizeof (int64_t); 335 break; 336 /* case AUR_CHAR: */ 337 case AUR_BYTE: 338 byte_count = unit_count * sizeof (char); 339 break; 340 default: 341 return (NULL); 342 } 343 344 token = get_token((int)(4 * sizeof (char) + byte_count)); 345 if (token == NULL) 346 return (NULL); 347 adr_start(&adr, token->tt_data); 348 adr_char(&adr, &data_header, 1); 349 adr_char(&adr, &unit_print, 1); 350 adr_char(&adr, &unit_type, 1); 351 adr_char(&adr, &unit_count, 1); 352 353 switch (unit_type) { 354 case AUR_SHORT: 355 /* LINTED */ 356 adr_short(&adr, (short *)p, unit_count); 357 break; 358 case AUR_INT32: 359 /* LINTED */ 360 adr_int32(&adr, (int32_t *)p, unit_count); 361 break; 362 case AUR_INT64: 363 /* LINTED */ 364 adr_int64(&adr, (int64_t *)p, unit_count); 365 break; 366 /* case AUR_CHAR: */ 367 case AUR_BYTE: 368 adr_char(&adr, p, unit_count); 369 break; 370 } 371 372 return (token); 373 } 374 375 /* 376 * au_to_privset 377 * 378 * priv_type (LIMIT, INHERIT...) is the first string and privilege 379 * in translated into the second string. The format is as follows: 380 * 381 * token id adr_char 382 * priv type adr_string (short, string) 383 * priv set adr_string (short, string) 384 * 385 * return s: 386 * pointer to a AUT_PRIV token. 387 */ 388 token_t * 389 au_to_privset(const char *priv_type, const priv_set_t *privilege) 390 { 391 token_t *token; /* local token */ 392 adr_t adr; /* adr memory stream header */ 393 char data_header = AUT_PRIV; /* header for this token */ 394 short t_bytes; /* length of type string */ 395 short p_bytes; /* length of privilege string */ 396 char *priv_string; /* privilege string */ 397 398 t_bytes = strlen(priv_type) + 1; 399 400 if ((privilege == NULL) || (priv_string = 401 priv_set_to_str(privilege, ',', 402 PRIV_STR_LIT)) == NULL) 403 return (NULL); 404 405 p_bytes = strlen(priv_string) + 1; 406 407 token = get_token((int)(sizeof (char) + (2 * sizeof (short)) + t_bytes 408 + p_bytes)); 409 if (token == NULL) 410 return (NULL); 411 412 adr_start(&adr, token->tt_data); 413 adr_char(&adr, &data_header, 1); 414 adr_short(&adr, &t_bytes, 1); 415 adr_char(&adr, (char *)priv_type, t_bytes); 416 adr_short(&adr, &p_bytes, 1); 417 adr_char(&adr, priv_string, p_bytes); 418 419 free(priv_string); 420 421 return (token); 422 } 423 424 /* 425 * au_to_process 426 * return s: 427 * pointer to a process token. 428 */ 429 430 token_t * 431 au_to_process(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, 432 pid_t pid, au_asid_t sid, au_tid_t *tid) 433 { 434 token_t *token; /* local token */ 435 adr_t adr; /* adr memory stream header */ 436 #ifdef _LP64 437 char data_header = AUT_PROCESS64; /* header for this token */ 438 439 token = get_token(sizeof (char) + 8 * sizeof (int32_t) + 440 sizeof (int64_t)); 441 #else 442 char data_header = AUT_PROCESS32; 443 444 token = get_token(sizeof (char) + 9 * sizeof (int32_t)); 445 #endif 446 447 if (token == NULL) 448 return (NULL); 449 adr_start(&adr, token->tt_data); 450 adr_char(&adr, &data_header, 1); 451 adr_int32(&adr, (int32_t *)&auid, 1); 452 adr_int32(&adr, (int32_t *)&euid, 1); 453 adr_int32(&adr, (int32_t *)&egid, 1); 454 adr_int32(&adr, (int32_t *)&ruid, 1); 455 adr_int32(&adr, (int32_t *)&rgid, 1); 456 adr_int32(&adr, (int32_t *)&pid, 1); 457 adr_int32(&adr, (int32_t *)&sid, 1); 458 #ifdef _LP64 459 adr_int64(&adr, (int64_t *)&tid->port, 1); 460 #else 461 adr_int32(&adr, (int32_t *)&tid->port, 1); 462 #endif 463 adr_int32(&adr, (int32_t *)&tid->machine, 1); 464 465 return (token); 466 } 467 468 /* 469 * au_to_process_ex 470 * return s: 471 * pointer to a process_ex token. 472 */ 473 token_t * 474 au_to_process_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, 475 pid_t pid, au_asid_t sid, au_tid_addr_t *tid) 476 { 477 token_t *token; /* local token */ 478 adr_t adr; /* adr memory stream header */ 479 char data_header; /* header for this token */ 480 481 #ifdef _LP64 482 if (tid->at_type == AU_IPv6) { 483 data_header = AUT_PROCESS64_EX; 484 token = get_token(sizeof (char) + sizeof (int64_t) + 485 12 * sizeof (int32_t)); 486 } else { 487 data_header = AUT_PROCESS64; 488 token = get_token(sizeof (char) + sizeof (int64_t) + 489 8 * sizeof (int32_t)); 490 } 491 #else 492 if (tid->at_type == AU_IPv6) { 493 data_header = AUT_PROCESS32_EX; 494 token = get_token(sizeof (char) + 13 * sizeof (int32_t)); 495 } else { 496 data_header = AUT_PROCESS32; 497 token = get_token(sizeof (char) + 9 * sizeof (int32_t)); 498 } 499 #endif 500 if (token == NULL) 501 return (NULL); 502 adr_start(&adr, token->tt_data); 503 adr_char(&adr, &data_header, 1); 504 adr_int32(&adr, (int32_t *)&auid, 1); 505 adr_int32(&adr, (int32_t *)&euid, 1); 506 adr_int32(&adr, (int32_t *)&egid, 1); 507 adr_int32(&adr, (int32_t *)&ruid, 1); 508 adr_int32(&adr, (int32_t *)&rgid, 1); 509 adr_int32(&adr, (int32_t *)&pid, 1); 510 adr_int32(&adr, (int32_t *)&sid, 1); 511 #ifdef _LP64 512 adr_int64(&adr, (int64_t *)&tid->at_port, 1); 513 #else 514 adr_int32(&adr, (int32_t *)&tid->at_port, 1); 515 #endif 516 if (tid->at_type == AU_IPv6) { 517 adr_int32(&adr, (int32_t *)&tid->at_type, 1); 518 adr_char(&adr, (char *)tid->at_addr, 16); 519 } else { 520 adr_char(&adr, (char *)tid->at_addr, 4); 521 } 522 523 return (token); 524 } 525 526 /* 527 * au_to_seq 528 * return s: 529 * pointer to token chain containing a sequence token 530 */ 531 token_t * 532 au_to_seq(int audit_count) 533 { 534 token_t *token; /* local token */ 535 adr_t adr; /* adr memory stream header */ 536 char data_header = AUT_SEQ; /* header for this token */ 537 538 token = get_token(sizeof (char) + sizeof (int32_t)); 539 if (token == NULL) 540 return (NULL); 541 adr_start(&adr, token->tt_data); 542 adr_char(&adr, &data_header, 1); 543 adr_int32(&adr, (int32_t *)&audit_count, 1); 544 545 return (token); 546 } 547 548 /* 549 * au_to_socket 550 * return s: 551 * pointer to mbuf chain containing a socket token. 552 */ 553 token_t * 554 au_to_socket(struct oldsocket *so) 555 { 556 adr_t adr; 557 token_t *token; 558 char data_header = AUT_SOCKET; 559 struct inpcb *inp = so->so_pcb; 560 561 token = get_token(sizeof (char) + sizeof (short) * 3 + 562 sizeof (int32_t) * 2); 563 if (token == NULL) 564 return (NULL); 565 adr_start(&adr, token->tt_data); 566 adr_char(&adr, &data_header, 1); 567 adr_short(&adr, (short *)&so->so_type, 1); 568 adr_short(&adr, (short *)&inp->inp_lport, 1); 569 adr_int32(&adr, (int32_t *)&inp->inp_laddr, 1); 570 adr_short(&adr, (short *)&inp->inp_fport, 1); 571 adr_int32(&adr, (int32_t *)&inp->inp_faddr, 1); 572 573 return (token); 574 } 575 576 /* 577 * au_to_subject 578 * return s: 579 * pointer to a process token. 580 */ 581 582 token_t * 583 au_to_subject(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, 584 pid_t pid, au_asid_t sid, au_tid_t *tid) 585 { 586 token_t *token; /* local token */ 587 adr_t adr; /* adr memory stream header */ 588 #ifdef _LP64 589 char data_header = AUT_SUBJECT64; /* header for this token */ 590 591 token = get_token(sizeof (char) + sizeof (int64_t) + 592 8 * sizeof (int32_t)); 593 #else 594 char data_header = AUT_SUBJECT32; 595 596 token = get_token(sizeof (char) + 9 * sizeof (int32_t)); 597 #endif 598 599 if (token == NULL) 600 return (NULL); 601 adr_start(&adr, token->tt_data); 602 adr_char(&adr, &data_header, 1); 603 adr_int32(&adr, (int32_t *)&auid, 1); 604 adr_int32(&adr, (int32_t *)&euid, 1); 605 adr_int32(&adr, (int32_t *)&egid, 1); 606 adr_int32(&adr, (int32_t *)&ruid, 1); 607 adr_int32(&adr, (int32_t *)&rgid, 1); 608 adr_int32(&adr, (int32_t *)&pid, 1); 609 adr_int32(&adr, (int32_t *)&sid, 1); 610 #ifdef _LP64 611 adr_int64(&adr, (int64_t *)&tid->port, 1); 612 #else 613 adr_int32(&adr, (int32_t *)&tid->port, 1); 614 #endif 615 adr_int32(&adr, (int32_t *)&tid->machine, 1); 616 617 return (token); 618 } 619 620 /* 621 * au_to_subject_ex 622 * return s: 623 * pointer to a process token. 624 */ 625 626 token_t * 627 au_to_subject_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid, gid_t rgid, 628 pid_t pid, au_asid_t sid, au_tid_addr_t *tid) 629 { 630 token_t *token; /* local token */ 631 adr_t adr; /* adr memory stream header */ 632 #ifdef _LP64 633 char data_header; /* header for this token */ 634 635 if (tid->at_type == AU_IPv6) { 636 data_header = AUT_SUBJECT64_EX; 637 token = get_token(sizeof (char) + sizeof (int64_t) + 638 12 * sizeof (int32_t)); 639 } else { 640 data_header = AUT_SUBJECT64; 641 token = get_token(sizeof (char) + sizeof (int64_t) + 642 8 * sizeof (int32_t)); 643 } 644 #else 645 char data_header; /* header for this token */ 646 647 if (tid->at_type == AU_IPv6) { 648 data_header = AUT_SUBJECT32_EX; 649 token = get_token(sizeof (char) + 13 * sizeof (int32_t)); 650 } else { 651 data_header = AUT_SUBJECT32; 652 token = get_token(sizeof (char) + 9 * sizeof (int32_t)); 653 } 654 #endif 655 656 if (token == NULL) 657 return (NULL); 658 adr_start(&adr, token->tt_data); 659 adr_char(&adr, &data_header, 1); 660 adr_int32(&adr, (int32_t *)&auid, 1); 661 adr_int32(&adr, (int32_t *)&euid, 1); 662 adr_int32(&adr, (int32_t *)&egid, 1); 663 adr_int32(&adr, (int32_t *)&ruid, 1); 664 adr_int32(&adr, (int32_t *)&rgid, 1); 665 adr_int32(&adr, (int32_t *)&pid, 1); 666 adr_int32(&adr, (int32_t *)&sid, 1); 667 #ifdef _LP64 668 adr_int64(&adr, (int64_t *)&tid->at_port, 1); 669 #else 670 adr_int32(&adr, (int32_t *)&tid->at_port, 1); 671 #endif 672 if (tid->at_type == AU_IPv6) { 673 adr_int32(&adr, (int32_t *)&tid->at_type, 1); 674 adr_char(&adr, (char *)tid->at_addr, 16); 675 } else { 676 adr_char(&adr, (char *)tid->at_addr, 4); 677 } 678 679 return (token); 680 } 681 682 /* 683 * au_to_me 684 * return s: 685 * pointer to a process token. 686 */ 687 688 token_t * 689 au_to_me(void) 690 { 691 auditinfo_addr_t info; 692 693 if (getaudit_addr(&info, sizeof (info))) 694 return (NULL); 695 return (au_to_subject_ex(info.ai_auid, geteuid(), getegid(), getuid(), 696 getgid(), getpid(), info.ai_asid, &info.ai_termid)); 697 } 698 /* 699 * au_to_text 700 * return s: 701 * pointer to a text token. 702 */ 703 token_t * 704 au_to_text(char *text) 705 { 706 token_t *token; /* local token */ 707 adr_t adr; /* adr memory stream header */ 708 char data_header = AUT_TEXT; /* header for this token */ 709 short bytes; /* length of string */ 710 711 bytes = strlen(text) + 1; 712 token = get_token((int)(sizeof (char) + sizeof (short) + bytes)); 713 if (token == NULL) 714 return (NULL); 715 adr_start(&adr, token->tt_data); 716 adr_char(&adr, &data_header, 1); 717 adr_short(&adr, &bytes, 1); 718 adr_char(&adr, text, bytes); 719 720 return (token); 721 } 722 723 /* 724 * au_to_path 725 * return s: 726 * pointer to a path token. 727 */ 728 token_t * 729 au_to_path(char *path) 730 { 731 token_t *token; /* local token */ 732 adr_t adr; /* adr memory stream header */ 733 char data_header = AUT_PATH; /* header for this token */ 734 short bytes; /* length of string */ 735 736 bytes = (short)strlen(path) + 1; 737 738 token = get_token((int)(sizeof (char) + sizeof (short) + bytes)); 739 if (token == NULL) 740 return (NULL); 741 adr_start(&adr, token->tt_data); 742 adr_char(&adr, &data_header, 1); 743 adr_short(&adr, &bytes, 1); 744 adr_char(&adr, path, bytes); 745 746 return (token); 747 } 748 749 /* 750 * au_to_cmd 751 * return s: 752 * pointer to an command line argument token 753 */ 754 token_t * 755 au_to_cmd(uint_t argc, char **argv, char **envp) 756 { 757 token_t *token; /* local token */ 758 adr_t adr; /* adr memory stream header */ 759 char data_header = AUT_CMD; /* header for this token */ 760 short len = 0; 761 short cnt = 0; 762 short envc = 0; 763 short largc = (short)argc; 764 765 /* 766 * one char for the header, one short for argc, 767 * one short for # envp strings. 768 */ 769 len = sizeof (char) + sizeof (short) + sizeof (short); 770 771 /* get sizes of strings */ 772 773 for (cnt = 0; cnt < argc; cnt++) { 774 len += (short)sizeof (short) + (short)(strlen(argv[cnt]) + 1); 775 } 776 777 if (envp != NULL) { 778 for (envc = 0; envp[envc] != NULL; envc++) { 779 len += (short)sizeof (short) + 780 (short)(strlen(envp[envc]) + 1); 781 } 782 } 783 784 token = get_token(len); 785 if (token == NULL) 786 return (NULL); 787 788 adr_start(&adr, token->tt_data); 789 adr_char(&adr, &data_header, 1); 790 791 adr_short(&adr, &largc, 1); 792 793 for (cnt = 0; cnt < argc; cnt++) { 794 len = (short)(strlen(argv[cnt]) + 1); 795 adr_short(&adr, &len, 1); 796 adr_char(&adr, argv[cnt], len); 797 } 798 799 adr_short(&adr, &envc, 1); 800 801 for (cnt = 0; cnt < envc; cnt++) { 802 len = (short)(strlen(envp[cnt]) + 1); 803 adr_short(&adr, &len, 1); 804 adr_char(&adr, envp[cnt], len); 805 } 806 807 return (token); 808 } 809 810 /* 811 * au_to_exit 812 * return s: 813 * pointer to a exit value token. 814 */ 815 token_t * 816 au_to_exit(int retval, int err) 817 { 818 token_t *token; /* local token */ 819 adr_t adr; /* adr memory stream header */ 820 char data_header = AUT_EXIT; /* header for this token */ 821 822 token = get_token(sizeof (char) + (2 * sizeof (int32_t))); 823 if (token == NULL) 824 return (NULL); 825 adr_start(&adr, token->tt_data); 826 adr_char(&adr, &data_header, 1); 827 adr_int32(&adr, (int32_t *)&retval, 1); 828 adr_int32(&adr, (int32_t *)&err, 1); 829 830 return (token); 831 } 832 833 /* 834 * au_to_return 835 * return s: 836 * pointer to a return value token. 837 */ 838 token_t * 839 au_to_return32(char number, uint32_t value) 840 { 841 token_t *token; /* local token */ 842 adr_t adr; /* adr memory stream header */ 843 char data_header = AUT_RETURN32; /* header for this token */ 844 845 token = get_token(2 * sizeof (char) + sizeof (int32_t)); 846 if (token == NULL) 847 return (NULL); 848 adr_start(&adr, token->tt_data); 849 adr_char(&adr, &data_header, 1); 850 adr_char(&adr, &number, 1); 851 adr_int32(&adr, (int32_t *)&value, 1); 852 853 return (token); 854 } 855 856 /* 857 * au_to_return 858 * return s: 859 * pointer to a return value token. 860 */ 861 token_t * 862 au_to_return64(char number, uint64_t value) 863 { 864 token_t *token; /* local token */ 865 adr_t adr; /* adr memory stream header */ 866 char data_header = AUT_RETURN64; /* header for this token */ 867 868 token = get_token(2 * sizeof (char) + sizeof (int64_t)); 869 if (token == NULL) 870 return (NULL); 871 adr_start(&adr, token->tt_data); 872 adr_char(&adr, &data_header, 1); 873 adr_char(&adr, &number, 1); 874 adr_int64(&adr, (int64_t *)&value, 1); 875 876 return (token); 877 } 878 879 880 /* 881 * au_to_opaque 882 * return s: 883 * pointer to a opaque token. 884 */ 885 token_t * 886 au_to_opaque(char *opaque, short bytes) 887 { 888 token_t *token; /* local token */ 889 adr_t adr; /* adr memory stream header */ 890 char data_header = AUT_OPAQUE; /* header for this token */ 891 892 if (bytes < 1) 893 return (NULL); 894 895 token = get_token((int)(sizeof (char) + sizeof (short) + bytes)); 896 if (token == NULL) 897 return (NULL); 898 adr_start(&adr, token->tt_data); 899 adr_char(&adr, &data_header, 1); 900 adr_short(&adr, &bytes, 1); 901 adr_char(&adr, opaque, bytes); 902 903 return (token); 904 } 905 906 /* 907 * au_to_in_addr 908 * return s: 909 * pointer to an internet address token 910 */ 911 token_t * 912 au_to_in_addr(struct in_addr *internet_addr) 913 { 914 token_t *token; /* local token */ 915 adr_t adr; /* adr memory stream header */ 916 char data_header = AUT_IN_ADDR; /* header for this token */ 917 918 token = get_token(sizeof (char) + sizeof (struct in_addr)); 919 if (token == NULL) 920 return (NULL); 921 adr_start(&adr, token->tt_data); 922 adr_char(&adr, &data_header, 1); 923 adr_char(&adr, (char *)internet_addr, sizeof (struct in_addr)); 924 925 return (token); 926 } 927 928 /* 929 * au_to_in_addr_ex 930 * return s: 931 * pointer to an internet extended token 932 */ 933 token_t * 934 au_to_in_addr_ex(struct in6_addr *addr) 935 { 936 token_t *token; 937 adr_t adr; 938 char data_header = AUT_IN_ADDR_EX; 939 940 if ((token = get_token(sizeof (char) + sizeof (struct in6_addr))) 941 == NULL) { 942 return (NULL); 943 } 944 945 adr_start(&adr, token->tt_data); 946 adr_char(&adr, &data_header, 1); 947 adr_char(&adr, (char *)addr, sizeof (struct in6_addr)); 948 949 return (token); 950 } 951 952 /* 953 * au_to_iport 954 * return s: 955 * pointer to token chain containing a ip port address token 956 */ 957 token_t * 958 au_to_iport(ushort_t iport) 959 { 960 token_t *token; /* local token */ 961 adr_t adr; /* adr memory stream header */ 962 char data_header = AUT_IPORT; /* header for this token */ 963 964 token = get_token(sizeof (char) + sizeof (short)); 965 if (token == NULL) 966 return (NULL); 967 adr_start(&adr, token->tt_data); 968 adr_char(&adr, &data_header, 1); 969 adr_short(&adr, (short *)&iport, 1); 970 971 return (token); 972 } 973 974 token_t * 975 au_to_ipc(char type, int id) 976 { 977 token_t *token; /* local token */ 978 adr_t adr; /* adr memory stream header */ 979 char data_header = AUT_IPC; /* header for this token */ 980 981 token = get_token((2 * sizeof (char)) + sizeof (int32_t)); 982 if (token == NULL) 983 return (NULL); 984 adr_start(&adr, token->tt_data); 985 adr_char(&adr, &data_header, 1); 986 adr_char(&adr, &type, 1); 987 adr_int32(&adr, (int32_t *)&id, 1); 988 989 return (token); 990 } 991 992 /* 993 * au_to_tid 994 * 995 * output format depends on type; at present only IP v4 and v6 addresses 996 * are defined. 997 * 998 * IPv4 -- tid type, 16 bit remote port, 16 bit local port, ip type, 999 * 32 bit IP address. 1000 * IPv6 -- tid type, 16 bit remote port, 16 bit local port, ip type, 1001 * 4 x 32 bit IP address. 1002 * 1003 */ 1004 token_t * 1005 au_to_tid(au_generic_tid_t *tid) 1006 { 1007 char data_header = AUT_TID; /* header for this token */ 1008 adr_t adr; /* adr memory stream header */ 1009 token_t *token; /* local token */ 1010 au_ip_t *ip; 1011 1012 switch (tid->gt_type) { 1013 case AU_IPADR: 1014 ip = &(tid->gt_adr.at_ip); 1015 token = get_token((int)(2 * sizeof (char) + 2 * sizeof (short) + 1016 sizeof (uint32_t) + ip->at_type)); 1017 if (token == NULL) 1018 return (NULL); 1019 1020 adr_start(&adr, token->tt_data); 1021 adr_char(&adr, &data_header, 1); 1022 adr_char(&adr, (char *)&(tid->gt_type), 1); 1023 adr_short(&adr, (short *)&(ip->at_r_port), 1); 1024 adr_short(&adr, (short *)&(ip->at_l_port), 1); 1025 adr_int32(&adr, (int32_t *)&(ip->at_type), 1); 1026 1027 adr_char(&adr, (char *)ip->at_addr, ip->at_type); 1028 1029 break; 1030 default: 1031 return (NULL); 1032 } 1033 return (token); 1034 } 1035 1036 /* 1037 * The Modifier tokens 1038 */ 1039 1040 /* 1041 * au_to_groups 1042 * return s: 1043 * pointer to a group list token. 1044 * 1045 * This function is obsolete. Please use au_to_newgroups. 1046 */ 1047 token_t * 1048 au_to_groups(int *groups) 1049 { 1050 token_t *token; /* local token */ 1051 adr_t adr; /* adr memory stream header */ 1052 char data_header = AUT_GROUPS; /* header for this token */ 1053 1054 token = get_token(sizeof (char) + NGROUPS * sizeof (int32_t)); 1055 if (token == NULL) 1056 return (NULL); 1057 adr_start(&adr, token->tt_data); 1058 adr_char(&adr, &data_header, 1); 1059 adr_int32(&adr, (int32_t *)groups, NGROUPS); 1060 1061 return (token); 1062 } 1063 1064 /* 1065 * au_to_newgroups 1066 * return s: 1067 * pointer to a group list token. 1068 */ 1069 token_t * 1070 au_to_newgroups(int n, gid_t *groups) 1071 { 1072 token_t *token; /* local token */ 1073 adr_t adr; /* adr memory stream header */ 1074 char data_header = AUT_NEWGROUPS; /* header for this token */ 1075 short n_groups; 1076 1077 if (n < NGROUPS_UMIN || n > NGROUPS_UMAX || groups == NULL) 1078 return (NULL); 1079 token = get_token(sizeof (char) + sizeof (short) + n * sizeof (gid_t)); 1080 if (token == NULL) 1081 return (NULL); 1082 n_groups = (short)n; 1083 adr_start(&adr, token->tt_data); 1084 adr_char(&adr, &data_header, 1); 1085 adr_short(&adr, &n_groups, 1); 1086 adr_int32(&adr, (int32_t *)groups, n_groups); 1087 1088 return (token); 1089 } 1090 1091 /* 1092 * au_to_exec_args 1093 * returns: 1094 * pointer to an exec args token. 1095 */ 1096 token_t * 1097 au_to_exec_args(char **argv) 1098 { 1099 return (au_to_exec(argv, AUT_EXEC_ARGS)); 1100 } 1101 1102 /* 1103 * au_to_exec_env 1104 * returns: 1105 * pointer to an exec args token. 1106 */ 1107 token_t * 1108 au_to_exec_env(char **envp) 1109 { 1110 return (au_to_exec(envp, AUT_EXEC_ENV)); 1111 } 1112 1113 /* 1114 * au_to_exec 1115 * returns: 1116 * pointer to an exec args token. 1117 */ 1118 static token_t * 1119 au_to_exec(char **v, char data_header) 1120 { 1121 token_t *token; 1122 adr_t adr; 1123 char **p; 1124 int32_t n = 0; 1125 int len = 0; 1126 1127 for (p = v; *p != NULL; p++) { 1128 len += strlen(*p) + 1; 1129 n++; 1130 } 1131 token = get_token(sizeof (char) + sizeof (int32_t) + len); 1132 if (token == (token_t *)NULL) 1133 return ((token_t *)NULL); 1134 adr_start(&adr, token->tt_data); 1135 adr_char(&adr, &data_header, 1); 1136 adr_int32(&adr, &n, 1); 1137 for (p = v; *p != NULL; p++) { 1138 adr_char(&adr, *p, strlen(*p) + 1); 1139 } 1140 return (token); 1141 } 1142 1143 /* 1144 * au_to_uauth 1145 * return s: 1146 * pointer to a uauth token. 1147 */ 1148 token_t * 1149 au_to_uauth(char *text) 1150 { 1151 token_t *token; /* local token */ 1152 adr_t adr; /* adr memory stream header */ 1153 char data_header = AUT_UAUTH; /* header for this token */ 1154 short bytes; /* length of string */ 1155 1156 bytes = strlen(text) + 1; 1157 1158 token = get_token((int)(sizeof (char) + sizeof (short) + bytes)); 1159 if (token == NULL) 1160 return (NULL); 1161 adr_start(&adr, token->tt_data); 1162 adr_char(&adr, &data_header, 1); 1163 adr_short(&adr, &bytes, 1); 1164 adr_char(&adr, text, bytes); 1165 1166 return (token); 1167 } 1168 1169 /* 1170 * au_to_upriv 1171 * return s: 1172 * pointer to a use of privilege token. 1173 */ 1174 token_t * 1175 au_to_upriv(char sorf, char *priv) 1176 { 1177 token_t *token; /* local token */ 1178 adr_t adr; /* adr memory stream header */ 1179 char data_header = AUT_UAUTH; /* header for this token */ 1180 short bytes; /* length of string */ 1181 1182 bytes = strlen(priv) + 1; 1183 1184 token = get_token(sizeof (char) + sizeof (char) + sizeof (short) + 1185 bytes); 1186 if (token == NULL) 1187 return (NULL); 1188 adr_start(&adr, token->tt_data); 1189 adr_char(&adr, &data_header, 1); 1190 adr_char(&adr, &sorf, 1); /* success/failure */ 1191 adr_short(&adr, &bytes, 1); 1192 adr_char(&adr, priv, bytes); 1193 1194 return (token); 1195 } 1196 1197 /* 1198 * au_to_xatom 1199 * return s: 1200 * pointer to a xatom token. 1201 */ 1202 token_t * 1203 au_to_xatom(char *atom) 1204 { 1205 token_t *token; /* local token */ 1206 adr_t adr; /* adr memory stream header */ 1207 char data_header = AUT_XATOM; /* header for this token */ 1208 short len; 1209 1210 len = strlen(atom) + 1; 1211 1212 token = get_token(sizeof (char) + sizeof (short) + len); 1213 if (token == NULL) 1214 return (NULL); 1215 adr_start(&adr, token->tt_data); 1216 adr_char(&adr, &data_header, 1); 1217 adr_short(&adr, (short *)&len, 1); 1218 adr_char(&adr, atom, len); 1219 1220 return (token); 1221 } 1222 1223 /* 1224 * au_to_xselect 1225 * return s: 1226 * pointer to a X select token. 1227 */ 1228 token_t * 1229 au_to_xselect(char *propname, char *proptype, char *windata) 1230 { 1231 token_t *token; /* local token */ 1232 adr_t adr; /* adr memory stream header */ 1233 char data_header = AUT_XSELECT; /* header for this token */ 1234 short proplen; 1235 short typelen; 1236 short datalen; 1237 1238 proplen = strlen(propname) + 1; 1239 typelen = strlen(proptype) + 1; 1240 datalen = strlen(windata) + 1; 1241 1242 token = get_token(sizeof (char) + (sizeof (short) * 3) + 1243 proplen + typelen + datalen); 1244 if (token == NULL) 1245 return (NULL); 1246 adr_start(&adr, token->tt_data); 1247 adr_char(&adr, &data_header, 1); 1248 adr_short(&adr, &proplen, 1); 1249 adr_char(&adr, propname, proplen); 1250 adr_short(&adr, &typelen, 1); 1251 adr_char(&adr, proptype, typelen); 1252 adr_short(&adr, &datalen, 1); 1253 adr_char(&adr, windata, datalen); 1254 1255 return (token); 1256 } 1257 1258 /* 1259 * x_common 1260 * return s: 1261 * pointer to a common X token. 1262 */ 1263 1264 static token_t * 1265 x_common(char data_header, int32_t xid, uid_t cuid) 1266 { 1267 token_t *token; /* local token */ 1268 adr_t adr; /* adr memory stream header */ 1269 1270 token = get_token(sizeof (char) + sizeof (int32_t) + sizeof (uid_t)); 1271 if (token == NULL) 1272 return (NULL); 1273 adr_start(&adr, token->tt_data); 1274 adr_char(&adr, &data_header, 1); 1275 adr_int32(&adr, &xid, 1); 1276 adr_uid(&adr, &cuid, 1); 1277 1278 return (token); 1279 } 1280 1281 /* 1282 * au_to_xcolormap 1283 * return s: 1284 * pointer to a X Colormap token. 1285 */ 1286 1287 token_t * 1288 au_to_xcolormap(int32_t xid, uid_t cuid) 1289 { 1290 return (x_common(AUT_XCOLORMAP, xid, cuid)); 1291 } 1292 1293 /* 1294 * au_to_xcursor 1295 * return s: 1296 * pointer to a X Cursor token. 1297 */ 1298 1299 token_t * 1300 au_to_xcursor(int32_t xid, uid_t cuid) 1301 { 1302 return (x_common(AUT_XCURSOR, xid, cuid)); 1303 } 1304 1305 /* 1306 * au_to_xfont 1307 * return s: 1308 * pointer to a X Font token. 1309 */ 1310 1311 token_t * 1312 au_to_xfont(int32_t xid, uid_t cuid) 1313 { 1314 return (x_common(AUT_XFONT, xid, cuid)); 1315 } 1316 1317 /* 1318 * au_to_xgc 1319 * return s: 1320 * pointer to a X Graphic Context token. 1321 */ 1322 1323 token_t * 1324 au_to_xgc(int32_t xid, uid_t cuid) 1325 { 1326 return (x_common(AUT_XGC, xid, cuid)); 1327 } 1328 1329 /* 1330 * au_to_xpixmap 1331 * return s: 1332 * pointer to a X Pixal Map token. 1333 */ 1334 1335 token_t * 1336 au_to_xpixmap(int32_t xid, uid_t cuid) 1337 { 1338 return (x_common(AUT_XPIXMAP, xid, cuid)); 1339 } 1340 1341 /* 1342 * au_to_xwindow 1343 * return s: 1344 * pointer to a X Window token. 1345 */ 1346 1347 token_t * 1348 au_to_xwindow(int32_t xid, uid_t cuid) 1349 { 1350 return (x_common(AUT_XWINDOW, xid, cuid)); 1351 } 1352 1353 /* 1354 * au_to_xproperty 1355 * return s: 1356 * pointer to a X Property token. 1357 */ 1358 1359 token_t * 1360 au_to_xproperty(int32_t xid, uid_t cuid, char *propname) 1361 { 1362 token_t *token; /* local token */ 1363 adr_t adr; /* adr memory stream header */ 1364 char data_header = AUT_XPROPERTY; /* header for this token */ 1365 short proplen; 1366 1367 proplen = strlen(propname) + 1; 1368 1369 token = get_token(sizeof (char) + sizeof (int32_t) + sizeof (uid_t) + 1370 sizeof (short) + proplen); 1371 if (token == NULL) 1372 return (NULL); 1373 adr_start(&adr, token->tt_data); 1374 adr_char(&adr, &data_header, 1); 1375 adr_int32(&adr, &xid, 1); 1376 adr_uid(&adr, &cuid, 1); 1377 adr_short(&adr, &proplen, 1); 1378 adr_char(&adr, propname, proplen); 1379 1380 return (token); 1381 } 1382 1383 /* 1384 * au_to_xclient 1385 * return s: 1386 * pointer to a X Client token 1387 */ 1388 1389 token_t * 1390 au_to_xclient(uint32_t client) 1391 { 1392 token_t *token; /* local token */ 1393 adr_t adr; /* adr memory stream header */ 1394 char data_header = AUT_XCLIENT; /* header for this token */ 1395 1396 token = get_token(sizeof (char) + sizeof (uint32_t)); 1397 if (token == NULL) 1398 return (NULL); 1399 adr_start(&adr, token->tt_data); 1400 adr_char(&adr, &data_header, 1); 1401 adr_int32(&adr, (int32_t *)&client, 1); 1402 1403 return (token); 1404 } 1405 1406 /* 1407 * au_to_label 1408 * return s: 1409 * pointer to a label token. 1410 */ 1411 token_t * 1412 au_to_label(m_label_t *label) 1413 { 1414 token_t *token; /* local token */ 1415 adr_t adr; /* adr memory stream header */ 1416 char data_header = AUT_LABEL; /* header for this token */ 1417 size_t llen = blabel_size(); 1418 1419 token = get_token(sizeof (char) + llen); 1420 if (token == NULL) { 1421 return (NULL); 1422 } else if (label == NULL) { 1423 free(token); 1424 return (NULL); 1425 } 1426 adr_start(&adr, token->tt_data); 1427 adr_char(&adr, &data_header, 1); 1428 adr_char(&adr, (char *)label, llen); 1429 1430 return (token); 1431 } 1432 1433 /* 1434 * au_to_mylabel 1435 * return s: 1436 * pointer to a label token. 1437 */ 1438 token_t * 1439 au_to_mylabel(void) 1440 { 1441 ucred_t *uc; 1442 token_t *token; 1443 1444 if ((uc = ucred_get(P_MYID)) == NULL) { 1445 return (NULL); 1446 } 1447 1448 token = au_to_label(ucred_getlabel(uc)); 1449 ucred_free(uc); 1450 return (token); 1451 } 1452 1453 /* 1454 * au_to_zonename 1455 * return s: 1456 * pointer to a zonename token. 1457 */ 1458 token_t * 1459 au_to_zonename(char *name) 1460 { 1461 token_t *token; /* local token */ 1462 adr_t adr; /* adr memory stream header */ 1463 char data_header = AUT_ZONENAME; /* header for this token */ 1464 short bytes; /* length of string */ 1465 1466 if (name == NULL) 1467 return (NULL); 1468 1469 bytes = strlen(name) + 1; 1470 token = get_token((int)(sizeof (char) + sizeof (short) + bytes)); 1471 if (token == NULL) 1472 return (NULL); 1473 adr_start(&adr, token->tt_data); 1474 adr_char(&adr, &data_header, 1); 1475 adr_short(&adr, &bytes, 1); 1476 adr_char(&adr, name, bytes); 1477 1478 return (token); 1479 } 1480 1481 /* 1482 * au_to_fmri 1483 * return s: 1484 * pointer to a fmri token. 1485 */ 1486 token_t * 1487 au_to_fmri(char *fmri) 1488 { 1489 token_t *token; /* local token */ 1490 adr_t adr; /* adr memory stream header */ 1491 char data_header = AUT_FMRI; /* header for this token */ 1492 short bytes; /* length of string */ 1493 1494 if (fmri == NULL) 1495 return (NULL); 1496 1497 bytes = strlen(fmri) + 1; 1498 token = get_token((int)(sizeof (char) + sizeof (short) + bytes)); 1499 if (token == NULL) 1500 return (NULL); 1501 adr_start(&adr, token->tt_data); 1502 adr_char(&adr, &data_header, 1); 1503 adr_short(&adr, &bytes, 1); 1504 adr_char(&adr, fmri, bytes); 1505 1506 return (token); 1507 } 1508