1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 #ifndef _EXEC_ATTR_H 27 #define _EXEC_ATTR_H 28 29 #ifdef __cplusplus 30 extern "C" { 31 #endif 32 33 34 #include <sys/types.h> 35 #include <secdb.h> 36 37 38 #define EXECATTR_FILENAME "/etc/security/exec_attr" 39 #define EXECATTR_DB_NAME "exec_attr.org_dir" 40 #define EXECATTR_DB_NCOL 7 /* total columns */ 41 #define EXECATTR_DB_NKEYCOL 3 /* total searchable columns */ 42 #define EXECATTR_DB_TBLT "exec_attr_tbl" 43 #define EXECATTR_NAME_DEFAULT_KW "nobody" 44 45 #define EXECATTR_COL0_KW "name" 46 #define EXECATTR_COL1_KW "policy" 47 #define EXECATTR_COL2_KW "type" 48 #define EXECATTR_COL3_KW "res1" 49 #define EXECATTR_COL4_KW "res2" 50 #define EXECATTR_COL5_KW "id" 51 #define EXECATTR_COL6_KW "attr" 52 53 /* 54 * indices of searchable columns 55 */ 56 #define EXECATTR_KEYCOL0 0 /* name */ 57 #define EXECATTR_KEYCOL1 1 /* policy */ 58 #define EXECATTR_KEYCOL2 5 /* id */ 59 60 61 /* 62 * Some macros used internally by the nsswitch code 63 */ 64 65 /* 66 * These macros are bitmasks. GET_ONE and GET_ALL are bitfield 0 67 * and thus mutually exclusive. __SEARCH_ALL_POLLS is bitfield 68 * 1 and can be logically ORed with GET_ALL if one wants to get 69 * all matching profiles from all policies, not just the ones from 70 * the currently active policy 71 * 72 * Testing for these values should be done using the IS_* macros 73 * defined below. 74 */ 75 #define GET_ONE 0 76 #define GET_ALL 1 77 #define __SEARCH_ALL_POLS 2 78 79 /* get only one exec_attr from list */ 80 #define IS_GET_ONE(f) (((f) & GET_ALL) == 0) 81 /* get all matching exec_attrs in list */ 82 #define IS_GET_ALL(f) (((f) & GET_ALL) == 1) 83 /* search all existing policies */ 84 #define IS_SEARCH_ALL(f) (((f) & __SEARCH_ALL_POLS) == __SEARCH_ALL_POLS) 85 86 /* 87 * Key words used in the exec_attr database 88 */ 89 #define EXECATTR_EUID_KW "euid" 90 #define EXECATTR_EGID_KW "egid" 91 #define EXECATTR_UID_KW "uid" 92 #define EXECATTR_GID_KW "gid" 93 #define EXECATTR_LPRIV_KW "limitprivs" 94 #define EXECATTR_IPRIV_KW "privs" 95 96 /* 97 * Nsswitch representation of execution attributes. 98 */ 99 typedef struct execstr_s { 100 char *name; /* profile name */ 101 char *policy; /* suser/rbac/tsol */ 102 char *type; /* cmd/act */ 103 char *res1; /* reserved for future use */ 104 char *res2; /* reserved for future use */ 105 char *id; /* unique ID */ 106 char *attr; /* string of key-value pair attributes */ 107 struct execstr_s *next; /* pointer to next entry */ 108 } execstr_t; 109 110 typedef struct execattr_s { 111 char *name; /* profile name */ 112 char *policy; /* suser/rbac/tsol */ 113 char *type; /* cmd/act */ 114 char *res1; /* reserved for future use */ 115 char *res2; /* reserved for future use */ 116 char *id; /* unique ID */ 117 kva_t *attr; /* array of key-value pair attributes */ 118 struct execattr_s *next; /* pointer to next entry */ 119 } execattr_t; 120 121 typedef struct __private_execattr { 122 const char *name; 123 const char *type; 124 const char *id; 125 const char *policy; 126 int search_flag; 127 execstr_t *head_exec; 128 execstr_t *prev_exec; 129 } _priv_execattr; /* Un-supported. For Sun internal use only */ 130 131 132 #ifdef __STDC__ 133 extern execattr_t *getexecattr(void); 134 extern execattr_t *getexecuser(const char *, const char *, const char *, int); 135 extern execattr_t *getexecprof(const char *, const char *, const char *, int); 136 extern execattr_t *match_execattr(execattr_t *, const char *, const char *, \ 137 const char *); 138 extern void free_execattr(execattr_t *); 139 extern void setexecattr(void); 140 extern void endexecattr(void); 141 142 #else /* not __STDC__ */ 143 144 extern execattr_t *getexecattr(); 145 extern execattr_t *getexecuser(); 146 extern execattr_t *getexecprof(); 147 extern execattr_t *match_execattr(); 148 extern void setexecattr(); 149 extern void endexecattr(); 150 extern void free_execattr(); 151 #endif 152 153 #ifdef __cplusplus 154 } 155 #endif 156 157 #endif /* _EXEC_ATTR_H */ 158