1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License, Version 1.0 only
6 * (the "License"). You may not use this file except in compliance
7 * with the License.
8 *
9 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10 * or http://www.opensolaris.org/os/licensing.
11 * See the License for the specific language governing permissions
12 * and limitations under the License.
13 *
14 * When distributing Covered Code, include this CDDL HEADER in each
15 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16 * If applicable, add the following below this CDDL HEADER, with the
17 * fields enclosed by brackets "[]" replaced with your own identifying
18 * information: Portions Copyright [yyyy] [name of copyright owner]
19 *
20 * CDDL HEADER END
21 */
22 /*
23 * Copyright 2003 Sun Microsystems, Inc. All rights reserved.
24 * Use is subject to license terms.
25 */
26 #pragma ident "%Z%%M% %I% %E% SMI"
27
28 #include <sys/socket.h>
29 #include <netinet/in.h>
30 #include <strings.h>
31 #include <sys/socket.h>
32
33 #include <bsm/audit.h>
34 #include <bsm/libbsm.h>
35 #include <bsm/audit_private.h>
36 #include <generic.h>
37
38 static int do_ipv6_address(struct sockaddr_in6 *, struct sockaddr_in6 *);
39 static int do_ipv4_address(struct sockaddr_in *, struct sockaddr_in *);
40
41 int
audit_settid(int fd)42 audit_settid(int fd)
43 {
44 struct sockaddr_in6 peer;
45 struct sockaddr_in6 sock;
46 int peerlen = sizeof (peer);
47 int socklen = sizeof (sock);
48 int rv;
49
50 if (cannot_audit(0)) {
51 return (0);
52 }
53
54 /* get peer name */
55 if (getpeername(fd, (struct sockaddr *)&peer, (socklen_t *)&peerlen)
56 < 0) {
57 return (1);
58 }
59
60 /* get sock name */
61 if (getsockname(fd, (struct sockaddr *)&sock, (socklen_t *)&socklen)
62 < 0) {
63 return (1);
64 }
65
66 if (peer.sin6_family == AF_INET6)
67 rv = do_ipv6_address(&peer, &sock);
68 else
69 rv = do_ipv4_address((struct sockaddr_in *)&peer,
70 (struct sockaddr_in *)&sock);
71
72 return (rv);
73 }
74
75 static int
do_ipv6_address(struct sockaddr_in6 * peer,struct sockaddr_in6 * sock)76 do_ipv6_address(struct sockaddr_in6 *peer, struct sockaddr_in6 *sock)
77 {
78 auditinfo_addr_t ai;
79
80 /* get audit characteristics of process */
81 if (getaudit_addr(&ai, sizeof (ai)) < 0) {
82 return (errno);
83 }
84
85 /*
86 * if terminal ID already set, i.e. non-zero, then just return
87 */
88 if (ai.ai_termid.at_port ||
89 ai.ai_termid.at_addr[0] ||
90 ai.ai_termid.at_addr[1] ||
91 ai.ai_termid.at_addr[2] ||
92 ai.ai_termid.at_addr[3]) {
93 return (0);
94 }
95
96 ai.ai_termid.at_port = ((peer->sin6_port<<16) | (sock->sin6_port));
97 ai.ai_termid.at_type = AU_IPv6;
98 bcopy(&peer->sin6_addr, ai.ai_termid.at_addr, 16);
99
100 if (setaudit_addr(&ai, sizeof (ai)) < 0) {
101 return (errno);
102 }
103
104 return (0);
105 }
106
107 static int
do_ipv4_address(struct sockaddr_in * peer,struct sockaddr_in * sock)108 do_ipv4_address(struct sockaddr_in *peer, struct sockaddr_in *sock)
109 {
110 auditinfo_t ai;
111
112 /* get audit characteristics of process */
113 if (getaudit(&ai) < 0) {
114 return (errno);
115 }
116
117 /*
118 * if terminal ID already set, i.e. non-zero, then just return
119 */
120 if (ai.ai_termid.port || ai.ai_termid.machine) {
121 return (0);
122 }
123
124 ai.ai_termid.port = (peer->sin_port<<16 | sock->sin_port);
125 ai.ai_termid.machine = (uint32_t)peer->sin_addr.s_addr;
126
127 if (setaudit(&ai) < 0) {
128 return (errno);
129 }
130
131 return (0);
132 }
133