1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License, Version 1.0 only 6 * (the "License"). You may not use this file except in compliance 7 * with the License. 8 * 9 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10 * or http://www.opensolaris.org/os/licensing. 11 * See the License for the specific language governing permissions 12 * and limitations under the License. 13 * 14 * When distributing Covered Code, include this CDDL HEADER in each 15 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16 * If applicable, add the following below this CDDL HEADER, with the 17 * fields enclosed by brackets "[]" replaced with your own identifying 18 * information: Portions Copyright [yyyy] [name of copyright owner] 19 * 20 * CDDL HEADER END 21 */ 22 /* 23 * Copyright 2003 Sun Microsystems, Inc. All rights reserved. 24 * Use is subject to license terms. 25 */ 26 27 #ifndef _SYS_PRIV_IMPL_H 28 #define _SYS_PRIV_IMPL_H 29 30 #pragma ident "%Z%%M% %I% %E% SMI" 31 32 #include <sys/priv_const.h> 33 #include <sys/priv.h> 34 35 #ifdef __cplusplus 36 extern "C" { 37 #endif 38 39 #if defined(_KERNEL) || defined(_KMEMUSER) 40 /* 41 * priv_set_t is a structure holding a set of privileges 42 */ 43 44 struct priv_set { 45 priv_chunk_t pbits[PRIV_SETSIZE]; 46 }; 47 48 typedef struct cred_priv_s { 49 priv_set_t crprivs[PRIV_NSET]; /* Priv sets */ 50 uint_t crpriv_flags; /* Privilege flags */ 51 } cred_priv_t; 52 53 #endif 54 55 #ifdef _KERNEL 56 57 extern priv_set_t *priv_basic; 58 extern priv_set_t priv_unsafe; 59 extern priv_set_t priv_fullset; 60 extern void priv_init(void); 61 62 /* The CR_PRIVS macro is defined in <sys/cred_impl.h> */ 63 #define CR_EPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_EFFECTIVE]) 64 #define CR_IPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_INHERITABLE]) 65 #define CR_PPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_PERMITTED]) 66 #define CR_LPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_LIMIT]) 67 68 #define CR_FLAGS(c) (CR_PRIVS(c)->crpriv_flags) 69 70 #define PRIV_SETBYTES (PRIV_NSET * PRIV_SETSIZE * sizeof (priv_chunk_t)) 71 72 #define PRIV_EISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || (c)->cr_uid != 0) 73 #define PRIV_PISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || \ 74 ((c)->cr_uid != 0 && (c)->cr_suid != 0 && \ 75 (c)->cr_ruid != 0)) 76 77 #define CR_OEPRIV(c) (*(PRIV_EISAWARE(c) ? &CR_EPRIV(c) : &CR_LPRIV(c))) 78 #define CR_OPPRIV(c) (*(PRIV_PISAWARE(c) ? &CR_PPRIV(c) : &CR_LPRIV(c))) 79 80 #define PRIV_VALIDSET(s) ((s) >= 0 && (s) < PRIV_NSET) 81 #define PRIV_VALIDOP(op) ((op) >= PRIV_ON && (op) <= PRIV_SET) 82 83 #define PRIV_FULLSET &priv_fullset /* Require full set */ 84 85 /* 86 * Privilege macros bits manipulation macros; DEBUG kernels will 87 * ASSERT() that privileges are not out of range. 88 */ 89 #ifndef NBBY 90 #define NBBY 8 91 #endif 92 93 #define __NBWRD (NBBY * sizeof (priv_chunk_t)) 94 95 #define privmask(n) (1U << ((__NBWRD - 1) - ((n) % __NBWRD))) 96 #define privword(n) ((n)/__NBWRD) 97 98 /* 99 * PRIV_ASSERT(a, b) sets privilege "b" in privilege set "a". 100 * PRIV_CLEAR(a,b) clears privilege "b" in privilege set "a". 101 * PRIV_ISASSERT tests if privilege 'b' is asserted in privilege set 'a'. 102 */ 103 104 #define __PRIV_ASSERT(a, b) ((a)->pbits[privword(b)] |= privmask(b)) 105 #define __PRIV_CLEAR(a, b) ((a)->pbits[privword(b)] &= ~privmask(b)) 106 #define __PRIV_ISASSERT(a, b) ((a)->pbits[privword(b)] & privmask(b)) 107 108 #ifdef DEBUG 109 #define PRIV_CLEAR(a, b) priv_delset((a), (b)) 110 #define PRIV_ASSERT(a, b) priv_addset((a), (b)) 111 #define PRIV_ISASSERT(a, b) priv_ismember((a), (b)) 112 #else 113 #define PRIV_CLEAR(a, b) __PRIV_CLEAR((a), (b)) 114 #define PRIV_ASSERT(a, b) __PRIV_ASSERT((a), (b)) 115 #define PRIV_ISASSERT(a, b) __PRIV_ISASSERT((a), (b)) 116 #endif 117 118 #endif /* _KERNEL */ 119 120 #ifdef __cplusplus 121 } 122 #endif 123 124 #endif /* _SYS_PRIV_IMPL_H */ 125