xref: /titanic_50/usr/src/uts/common/syscall/access.c (revision 8fd04b8338ed5093ec2d1e668fa620b7de44c177)
17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5dd29fa4aSprabahar  * Common Development and Distribution License (the "License").
6dd29fa4aSprabahar  * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate  *
87c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate  * and limitations under the License.
127c478bd9Sstevel@tonic-gate  *
137c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate  *
197c478bd9Sstevel@tonic-gate  * CDDL HEADER END
207c478bd9Sstevel@tonic-gate  */
217c478bd9Sstevel@tonic-gate /*
22*8fd04b83SRoger A. Faulkner  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
237c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate  */
257c478bd9Sstevel@tonic-gate 
267c478bd9Sstevel@tonic-gate /*	Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T	*/
277c478bd9Sstevel@tonic-gate /*	  All Rights Reserved  	*/
287c478bd9Sstevel@tonic-gate 
297c478bd9Sstevel@tonic-gate /*
307c478bd9Sstevel@tonic-gate  * Portions of this source code were derived from Berkeley 4.3 BSD
317c478bd9Sstevel@tonic-gate  * under license from the Regents of the University of California.
327c478bd9Sstevel@tonic-gate  */
337c478bd9Sstevel@tonic-gate 
347c478bd9Sstevel@tonic-gate #include <sys/param.h>
357c478bd9Sstevel@tonic-gate #include <sys/isa_defs.h>
367c478bd9Sstevel@tonic-gate #include <sys/types.h>
377c478bd9Sstevel@tonic-gate #include <sys/sysmacros.h>
387c478bd9Sstevel@tonic-gate #include <sys/cred_impl.h>
397c478bd9Sstevel@tonic-gate #include <sys/systm.h>
407c478bd9Sstevel@tonic-gate #include <sys/errno.h>
417c478bd9Sstevel@tonic-gate #include <sys/pathname.h>
427c478bd9Sstevel@tonic-gate #include <sys/vnode.h>
437c478bd9Sstevel@tonic-gate #include <sys/uio.h>
447c478bd9Sstevel@tonic-gate #include <sys/cmn_err.h>
457c478bd9Sstevel@tonic-gate #include <sys/debug.h>
4648011479Ssn199410 #include <sys/file.h>
47dd29fa4aSprabahar #include <fs/fs_subr.h>
4848011479Ssn199410 #include <c2/audit.h>
49b2b3ca14SSumanth Naropanth #include <sys/fcntl.h>
507c478bd9Sstevel@tonic-gate 
517c478bd9Sstevel@tonic-gate /*
527c478bd9Sstevel@tonic-gate  * Determine accessibility of file.
537c478bd9Sstevel@tonic-gate  */
547c478bd9Sstevel@tonic-gate 
557c478bd9Sstevel@tonic-gate #define	E_OK	010	/* use effective ids */
567c478bd9Sstevel@tonic-gate #define	R_OK	004
577c478bd9Sstevel@tonic-gate #define	W_OK	002
587c478bd9Sstevel@tonic-gate #define	X_OK	001
597c478bd9Sstevel@tonic-gate 
6048011479Ssn199410 static int
6148011479Ssn199410 caccess(char *fname, int fmode, vnode_t *startvp)
627c478bd9Sstevel@tonic-gate {
637c478bd9Sstevel@tonic-gate 	vnode_t *vp;
647c478bd9Sstevel@tonic-gate 	cred_t *tmpcr;
657c478bd9Sstevel@tonic-gate 	int error;
667c478bd9Sstevel@tonic-gate 	int mode;
677c478bd9Sstevel@tonic-gate 	int eok;
687c478bd9Sstevel@tonic-gate 	cred_t *cr;
69dd29fa4aSprabahar 	int estale_retry = 0;
707c478bd9Sstevel@tonic-gate 
717c478bd9Sstevel@tonic-gate 	if (fmode & ~(E_OK|R_OK|W_OK|X_OK))
727c478bd9Sstevel@tonic-gate 		return (set_errno(EINVAL));
737c478bd9Sstevel@tonic-gate 
747c478bd9Sstevel@tonic-gate 	mode = ((fmode & (R_OK|W_OK|X_OK)) << 6);
757c478bd9Sstevel@tonic-gate 
767c478bd9Sstevel@tonic-gate 	cr = CRED();
777c478bd9Sstevel@tonic-gate 
787c478bd9Sstevel@tonic-gate 	/* OK to use effective uid/gid, i.e., no need to crdup(CRED())? */
797c478bd9Sstevel@tonic-gate 	eok = (fmode & E_OK) ||
807c478bd9Sstevel@tonic-gate 	    (cr->cr_uid == cr->cr_ruid && cr->cr_gid == cr->cr_rgid);
817c478bd9Sstevel@tonic-gate 
827c478bd9Sstevel@tonic-gate 	if (eok)
837c478bd9Sstevel@tonic-gate 		tmpcr = cr;
847c478bd9Sstevel@tonic-gate 	else {
857c478bd9Sstevel@tonic-gate 		tmpcr = crdup(cr);
867c478bd9Sstevel@tonic-gate 		tmpcr->cr_uid = cr->cr_ruid;
877c478bd9Sstevel@tonic-gate 		tmpcr->cr_gid = cr->cr_rgid;
887c478bd9Sstevel@tonic-gate 		tmpcr->cr_ruid = cr->cr_uid;
897c478bd9Sstevel@tonic-gate 		tmpcr->cr_rgid = cr->cr_gid;
907c478bd9Sstevel@tonic-gate 	}
917c478bd9Sstevel@tonic-gate 
927c478bd9Sstevel@tonic-gate lookup:
937a142be9SCasper H.S. Dik 	if (error = lookupnameatcred(fname, UIO_USERSPACE, FOLLOW, NULLVPP, &vp,
947a142be9SCasper H.S. Dik 	    startvp, tmpcr)) {
95dd29fa4aSprabahar 		if ((error == ESTALE) && fs_need_estale_retry(estale_retry++))
967c478bd9Sstevel@tonic-gate 			goto lookup;
977c478bd9Sstevel@tonic-gate 		if (!eok)
987c478bd9Sstevel@tonic-gate 			crfree(tmpcr);
997c478bd9Sstevel@tonic-gate 		return (set_errno(error));
1007c478bd9Sstevel@tonic-gate 	}
1017c478bd9Sstevel@tonic-gate 
1027c478bd9Sstevel@tonic-gate 	if (mode) {
103da6c28aaSamw 		error = VOP_ACCESS(vp, mode, 0, tmpcr, NULL);
1047c478bd9Sstevel@tonic-gate 		if (error) {
105dd29fa4aSprabahar 			if ((error == ESTALE) &&
106dd29fa4aSprabahar 			    fs_need_estale_retry(estale_retry++)) {
1077c478bd9Sstevel@tonic-gate 				VN_RELE(vp);
1087c478bd9Sstevel@tonic-gate 				goto lookup;
1097c478bd9Sstevel@tonic-gate 			}
1107c478bd9Sstevel@tonic-gate 			(void) set_errno(error);
1117c478bd9Sstevel@tonic-gate 		}
1127c478bd9Sstevel@tonic-gate 	}
1137c478bd9Sstevel@tonic-gate 
1147c478bd9Sstevel@tonic-gate 	if (!eok)
1157c478bd9Sstevel@tonic-gate 		crfree(tmpcr);
1167c478bd9Sstevel@tonic-gate 	VN_RELE(vp);
1177c478bd9Sstevel@tonic-gate 	return (error);
1187c478bd9Sstevel@tonic-gate }
11948011479Ssn199410 
12048011479Ssn199410 int
121b2b3ca14SSumanth Naropanth faccessat(int fd, char *fname, int fmode, int flag)
12248011479Ssn199410 {
12348011479Ssn199410 	file_t *dirfp;
12448011479Ssn199410 	vnode_t *dirvp;
12548011479Ssn199410 	int error;
12648011479Ssn199410 	char startchar;
12748011479Ssn199410 
12848011479Ssn199410 	if (fd == AT_FDCWD && fname == NULL)
12948011479Ssn199410 		return (set_errno(EFAULT));
13048011479Ssn199410 
131b2b3ca14SSumanth Naropanth 	if ((flag & ~AT_EACCESS) != 0)
132b2b3ca14SSumanth Naropanth 		return (set_errno(EINVAL));
133b2b3ca14SSumanth Naropanth 
13448011479Ssn199410 	if (fname != NULL) {
13548011479Ssn199410 		if (copyin(fname, &startchar, sizeof (char)))
13648011479Ssn199410 			return (set_errno(EFAULT));
13748011479Ssn199410 	} else
13848011479Ssn199410 		startchar = '\0';
13948011479Ssn199410 
14048011479Ssn199410 	if (fd == AT_FDCWD) {
14148011479Ssn199410 		dirvp = NULL;
14248011479Ssn199410 	} else {
14348011479Ssn199410 		if (startchar != '/') {
14448011479Ssn199410 			if ((dirfp = getf(fd)) == NULL) {
14548011479Ssn199410 				return (set_errno(EBADF));
14648011479Ssn199410 			}
14748011479Ssn199410 			dirvp = dirfp->f_vnode;
14848011479Ssn199410 			VN_HOLD(dirvp);
14948011479Ssn199410 			releasef(fd);
15048011479Ssn199410 		} else {
15148011479Ssn199410 			dirvp = NULL;
15248011479Ssn199410 		}
15348011479Ssn199410 	}
15448011479Ssn199410 
15548011479Ssn199410 	if (audit_active)
15648011479Ssn199410 		audit_setfsat_path(1);
15748011479Ssn199410 
158b2b3ca14SSumanth Naropanth 	/* Do not allow E_OK unless AT_EACCESS flag is set */
159b2b3ca14SSumanth Naropanth 	fmode &= ~E_OK;
160b2b3ca14SSumanth Naropanth 	if (flag & AT_EACCESS)
161b2b3ca14SSumanth Naropanth 		fmode |= E_OK;
162b2b3ca14SSumanth Naropanth 
16348011479Ssn199410 	error = caccess(fname, fmode, dirvp);
16448011479Ssn199410 	if (dirvp != NULL)
16548011479Ssn199410 		VN_RELE(dirvp);
16648011479Ssn199410 
16748011479Ssn199410 	return (error);
16848011479Ssn199410 }
169*8fd04b83SRoger A. Faulkner 
170*8fd04b83SRoger A. Faulkner int
171*8fd04b83SRoger A. Faulkner access(char *fname, int fmode)
172*8fd04b83SRoger A. Faulkner {
173*8fd04b83SRoger A. Faulkner 	return (faccessat(AT_FDCWD, fname, fmode, 0));
174*8fd04b83SRoger A. Faulkner }
175