1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License, Version 1.0 only 6 * (the "License"). You may not use this file except in compliance 7 * with the License. 8 * 9 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10 * or http://www.opensolaris.org/os/licensing. 11 * See the License for the specific language governing permissions 12 * and limitations under the License. 13 * 14 * When distributing Covered Code, include this CDDL HEADER in each 15 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16 * If applicable, add the following below this CDDL HEADER, with the 17 * fields enclosed by brackets "[]" replaced with your own identifying 18 * information: Portions Copyright [yyyy] [name of copyright owner] 19 * 20 * CDDL HEADER END 21 */ 22 /* 23 * Copyright 2003 Sun Microsystems, Inc. All rights reserved. 24 * Use is subject to license terms. 25 */ 26 #pragma ident "%Z%%M% %I% %E% SMI" 27 28 #include <sys/socket.h> 29 #include <netinet/in.h> 30 #include <strings.h> 31 #include <sys/socket.h> 32 33 #include <bsm/audit.h> 34 #include <bsm/libbsm.h> 35 #include <bsm/audit_private.h> 36 #include <generic.h> 37 38 static int do_ipv6_address(struct sockaddr_in6 *, struct sockaddr_in6 *); 39 static int do_ipv4_address(struct sockaddr_in *, struct sockaddr_in *); 40 41 int 42 audit_settid(int fd) 43 { 44 struct sockaddr_in6 peer; 45 struct sockaddr_in6 sock; 46 int peerlen = sizeof (peer); 47 int socklen = sizeof (sock); 48 int rv; 49 50 if (cannot_audit(0)) { 51 return (0); 52 } 53 54 /* get peer name */ 55 if (getpeername(fd, (struct sockaddr *)&peer, (socklen_t *)&peerlen) 56 < 0) { 57 return (1); 58 } 59 60 /* get sock name */ 61 if (getsockname(fd, (struct sockaddr *)&sock, (socklen_t *)&socklen) 62 < 0) { 63 return (1); 64 } 65 66 if (peer.sin6_family == AF_INET6) 67 rv = do_ipv6_address(&peer, &sock); 68 else 69 rv = do_ipv4_address((struct sockaddr_in *)&peer, 70 (struct sockaddr_in *)&sock); 71 72 return (rv); 73 } 74 75 static int 76 do_ipv6_address(struct sockaddr_in6 *peer, struct sockaddr_in6 *sock) 77 { 78 auditinfo_addr_t ai; 79 80 /* get audit characteristics of process */ 81 if (getaudit_addr(&ai, sizeof (ai)) < 0) { 82 return (errno); 83 } 84 85 /* 86 * if terminal ID already set, i.e. non-zero, then just return 87 */ 88 if (ai.ai_termid.at_port || 89 ai.ai_termid.at_addr[0] || 90 ai.ai_termid.at_addr[1] || 91 ai.ai_termid.at_addr[2] || 92 ai.ai_termid.at_addr[3]) { 93 return (0); 94 } 95 96 ai.ai_termid.at_port = ((peer->sin6_port<<16) | (sock->sin6_port)); 97 ai.ai_termid.at_type = AU_IPv6; 98 bcopy(&peer->sin6_addr, ai.ai_termid.at_addr, 16); 99 100 if (setaudit_addr(&ai, sizeof (ai)) < 0) { 101 return (errno); 102 } 103 104 return (0); 105 } 106 107 static int 108 do_ipv4_address(struct sockaddr_in *peer, struct sockaddr_in *sock) 109 { 110 auditinfo_t ai; 111 112 /* get audit characteristics of process */ 113 if (getaudit(&ai) < 0) { 114 return (errno); 115 } 116 117 /* 118 * if terminal ID already set, i.e. non-zero, then just return 119 */ 120 if (ai.ai_termid.port || ai.ai_termid.machine) { 121 return (0); 122 } 123 124 ai.ai_termid.port = (peer->sin_port<<16 | sock->sin_port); 125 ai.ai_termid.machine = (uint32_t)peer->sin_addr.s_addr; 126 127 if (setaudit(&ai) < 0) { 128 return (errno); 129 } 130 131 return (0); 132 } 133