1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved. 23 */ 24 25 #ifndef _SYS_KLPD_H 26 #define _SYS_KLPD_H 27 28 #include <sys/types.h> 29 #include <sys/priv.h> 30 #include <sys/procset.h> 31 32 #ifdef _KERNEL 33 #include <sys/cred.h> 34 #include <sys/sysmacros.h> 35 #include <sys/varargs.h> 36 #endif 37 38 #ifdef __cplusplus 39 extern "C" { 40 #endif 41 42 #define KLPDCALL_VERS 1 43 44 #define KLPDARG_NOMORE 0 /* End of argument List */ 45 #define KLPDARG_NONE 0 /* No argument */ 46 #define KLPDARG_VNODE 1 /* vnode_t * */ 47 #define KLPDARG_INT 2 /* int */ 48 #define KLPDARG_PORT 3 /* int, port number */ 49 #define KLPDARG_TCPPORT 4 /* int, tcp port number */ 50 #define KLPDARG_UDPPORT 5 /* int, udp port number */ 51 #define KLPDARG_SCTPPORT 6 /* int, sctp port number */ 52 #define KLPDARG_SDPPORT 7 /* int, sdp port number */ 53 54 #ifdef _KERNEL 55 56 struct klpd_reg; 57 struct credklpd; 58 59 int klpd_reg(int, idtype_t, id_t, priv_set_t *); 60 int klpd_unreg(int, idtype_t, id_t); 61 void klpd_freelist(struct klpd_reg **); 62 void klpd_rele(struct klpd_reg *); 63 int klpd_call(const cred_t *, const priv_set_t *, va_list); 64 void crklpd_hold(struct credklpd *); 65 void crklpd_rele(struct credklpd *); 66 int pfexec_reg(int); 67 int pfexec_unreg(int); 68 int pfexec_call(const cred_t *, struct pathname *, cred_t **, boolean_t *); 69 int get_forced_privs(const cred_t *, const char *, priv_set_t *); 70 int check_user_privs(const cred_t *, const priv_set_t *); 71 72 #endif /* _KERNEL */ 73 74 typedef struct klpd_head { 75 uint32_t klh_vers; /* Version */ 76 uint32_t klh_len; /* Length of full packet */ 77 uint32_t klh_argoff; /* Offset of argument */ 78 uint32_t klh_privoff; /* Offset of privilege set */ 79 } klpd_head_t; 80 81 #define KLH_PRIVSET(kh) ((priv_set_t *)(((kh)->klh_privoff == 0 ? NULL : \ 82 (char *)(kh) + (kh)->klh_privoff))) 83 #define KLH_ARG(kh) ((void *)((kh)->klh_argoff != 0 ? \ 84 (char *)(kh) + (kh)->klh_argoff : NULL)) 85 86 typedef struct klpd_arg { 87 uint_t kla_type; 88 uint_t kla_dlen; 89 union { 90 char __cdata[1]; 91 int __idata; 92 uint_t __uidata; 93 } kla_data; 94 } klpd_arg_t; 95 96 #define kla_str kla_data.__cdata 97 #define kla_int kla_data.__idata 98 #define kla_uint kla_data.__uidata 99 100 #define PFEXEC_ARG_VERS 0x1 101 #define PFEXEC_EXEC_ATTRS 0x1 /* pfexec_reply_t */ 102 #define PFEXEC_FORCED_PRIVS 0x2 /* priv_set_t */ 103 #define PFEXEC_USER_PRIVS 0x3 /* uint32_t */ 104 105 #define PFEXEC_ARG_SIZE(bufsize) \ 106 (offsetof(pfexec_arg_t, pfa_data) + (bufsize)) 107 108 typedef struct pfexec_arg { 109 uint_t pfa_vers; /* Caller version */ 110 uint_t pfa_call; /* Call type */ 111 uint_t pfa_len; /* Length of data */ 112 uid_t pfa_uid; /* Real uid of subject */ 113 union { 114 char __pfa_path[1]; 115 uint32_t __pfa_buf[1]; 116 } pfa_data; 117 } pfexec_arg_t; 118 119 #define pfa_path pfa_data.__pfa_path 120 #define pfa_buf pfa_data.__pfa_buf 121 122 #define PFEXEC_NOTSET ((uid_t)-1) 123 124 typedef struct pfexec_reply { 125 uint_t pfr_vers; 126 uint_t pfr_len; 127 uid_t pfr_ruid, pfr_euid; 128 gid_t pfr_rgid, pfr_egid; 129 boolean_t pfr_setcred; 130 boolean_t pfr_scrubenv; 131 boolean_t pfr_clearflag; 132 boolean_t pfr_allowed; 133 uint_t pfr_ioff; 134 uint_t pfr_loff; 135 } pfexec_reply_t; 136 137 #define PFEXEC_REPLY_IPRIV(pfr) \ 138 ((pfr)->pfr_ioff ? (priv_set_t *)((char *)(pfr) + (pfr)->pfr_ioff) \ 139 : (priv_set_t *)0) 140 #define PFEXEC_REPLY_LPRIV(pfr) \ 141 ((pfr)->pfr_loff ? (priv_set_t *)((char *)(pfr) + (pfr)->pfr_loff) \ 142 : (priv_set_t *)0) 143 144 #ifdef __cplusplus 145 } 146 #endif 147 148 #endif /* _SYS_KLPD_H */ 149