xref: /titanic_50/usr/src/uts/common/syscall/access.c (revision c4d3e299d9d0295322679b4d484560411b6822d5)
17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5dd29fa4aSprabahar  * Common Development and Distribution License (the "License").
6dd29fa4aSprabahar  * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate  *
87c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate  * and limitations under the License.
127c478bd9Sstevel@tonic-gate  *
137c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate  *
197c478bd9Sstevel@tonic-gate  * CDDL HEADER END
207c478bd9Sstevel@tonic-gate  */
217c478bd9Sstevel@tonic-gate /*
22*c4d3e299SBrent Paulson  * Copyright (c) 1994, 2010, Oracle and/or its affiliates. All rights reserved.
237c478bd9Sstevel@tonic-gate  */
247c478bd9Sstevel@tonic-gate 
257c478bd9Sstevel@tonic-gate /*	Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T	*/
267c478bd9Sstevel@tonic-gate /*	  All Rights Reserved  	*/
277c478bd9Sstevel@tonic-gate 
287c478bd9Sstevel@tonic-gate /*
297c478bd9Sstevel@tonic-gate  * Portions of this source code were derived from Berkeley 4.3 BSD
307c478bd9Sstevel@tonic-gate  * under license from the Regents of the University of California.
317c478bd9Sstevel@tonic-gate  */
327c478bd9Sstevel@tonic-gate 
337c478bd9Sstevel@tonic-gate #include <sys/param.h>
347c478bd9Sstevel@tonic-gate #include <sys/isa_defs.h>
357c478bd9Sstevel@tonic-gate #include <sys/types.h>
367c478bd9Sstevel@tonic-gate #include <sys/sysmacros.h>
377c478bd9Sstevel@tonic-gate #include <sys/cred_impl.h>
387c478bd9Sstevel@tonic-gate #include <sys/systm.h>
397c478bd9Sstevel@tonic-gate #include <sys/errno.h>
407c478bd9Sstevel@tonic-gate #include <sys/pathname.h>
417c478bd9Sstevel@tonic-gate #include <sys/vnode.h>
427c478bd9Sstevel@tonic-gate #include <sys/uio.h>
437c478bd9Sstevel@tonic-gate #include <sys/cmn_err.h>
447c478bd9Sstevel@tonic-gate #include <sys/debug.h>
4548011479Ssn199410 #include <sys/file.h>
46dd29fa4aSprabahar #include <fs/fs_subr.h>
4748011479Ssn199410 #include <c2/audit.h>
48b2b3ca14SSumanth Naropanth #include <sys/fcntl.h>
497c478bd9Sstevel@tonic-gate 
507c478bd9Sstevel@tonic-gate /*
517c478bd9Sstevel@tonic-gate  * Determine accessibility of file.
527c478bd9Sstevel@tonic-gate  */
537c478bd9Sstevel@tonic-gate 
547c478bd9Sstevel@tonic-gate #define	E_OK	010	/* use effective ids */
557c478bd9Sstevel@tonic-gate #define	R_OK	004
567c478bd9Sstevel@tonic-gate #define	W_OK	002
577c478bd9Sstevel@tonic-gate #define	X_OK	001
587c478bd9Sstevel@tonic-gate 
5948011479Ssn199410 static int
6048011479Ssn199410 caccess(char *fname, int fmode, vnode_t *startvp)
617c478bd9Sstevel@tonic-gate {
627c478bd9Sstevel@tonic-gate 	vnode_t *vp;
637c478bd9Sstevel@tonic-gate 	cred_t *tmpcr;
647c478bd9Sstevel@tonic-gate 	int error;
657c478bd9Sstevel@tonic-gate 	int mode;
667c478bd9Sstevel@tonic-gate 	int eok;
677c478bd9Sstevel@tonic-gate 	cred_t *cr;
68dd29fa4aSprabahar 	int estale_retry = 0;
697c478bd9Sstevel@tonic-gate 
707c478bd9Sstevel@tonic-gate 	if (fmode & ~(E_OK|R_OK|W_OK|X_OK))
717c478bd9Sstevel@tonic-gate 		return (set_errno(EINVAL));
727c478bd9Sstevel@tonic-gate 
737c478bd9Sstevel@tonic-gate 	mode = ((fmode & (R_OK|W_OK|X_OK)) << 6);
747c478bd9Sstevel@tonic-gate 
757c478bd9Sstevel@tonic-gate 	cr = CRED();
767c478bd9Sstevel@tonic-gate 
777c478bd9Sstevel@tonic-gate 	/* OK to use effective uid/gid, i.e., no need to crdup(CRED())? */
787c478bd9Sstevel@tonic-gate 	eok = (fmode & E_OK) ||
797c478bd9Sstevel@tonic-gate 	    (cr->cr_uid == cr->cr_ruid && cr->cr_gid == cr->cr_rgid);
807c478bd9Sstevel@tonic-gate 
817c478bd9Sstevel@tonic-gate 	if (eok)
827c478bd9Sstevel@tonic-gate 		tmpcr = cr;
837c478bd9Sstevel@tonic-gate 	else {
847c478bd9Sstevel@tonic-gate 		tmpcr = crdup(cr);
857c478bd9Sstevel@tonic-gate 		tmpcr->cr_uid = cr->cr_ruid;
867c478bd9Sstevel@tonic-gate 		tmpcr->cr_gid = cr->cr_rgid;
877c478bd9Sstevel@tonic-gate 		tmpcr->cr_ruid = cr->cr_uid;
887c478bd9Sstevel@tonic-gate 		tmpcr->cr_rgid = cr->cr_gid;
897c478bd9Sstevel@tonic-gate 	}
907c478bd9Sstevel@tonic-gate 
917c478bd9Sstevel@tonic-gate lookup:
927a142be9SCasper H.S. Dik 	if (error = lookupnameatcred(fname, UIO_USERSPACE, FOLLOW, NULLVPP, &vp,
937a142be9SCasper H.S. Dik 	    startvp, tmpcr)) {
94dd29fa4aSprabahar 		if ((error == ESTALE) && fs_need_estale_retry(estale_retry++))
957c478bd9Sstevel@tonic-gate 			goto lookup;
967c478bd9Sstevel@tonic-gate 		if (!eok)
977c478bd9Sstevel@tonic-gate 			crfree(tmpcr);
987c478bd9Sstevel@tonic-gate 		return (set_errno(error));
997c478bd9Sstevel@tonic-gate 	}
1007c478bd9Sstevel@tonic-gate 
1017c478bd9Sstevel@tonic-gate 	if (mode) {
102da6c28aaSamw 		error = VOP_ACCESS(vp, mode, 0, tmpcr, NULL);
1037c478bd9Sstevel@tonic-gate 		if (error) {
104dd29fa4aSprabahar 			if ((error == ESTALE) &&
105dd29fa4aSprabahar 			    fs_need_estale_retry(estale_retry++)) {
1067c478bd9Sstevel@tonic-gate 				VN_RELE(vp);
1077c478bd9Sstevel@tonic-gate 				goto lookup;
1087c478bd9Sstevel@tonic-gate 			}
1097c478bd9Sstevel@tonic-gate 			(void) set_errno(error);
1107c478bd9Sstevel@tonic-gate 		}
1117c478bd9Sstevel@tonic-gate 	}
1127c478bd9Sstevel@tonic-gate 
1137c478bd9Sstevel@tonic-gate 	if (!eok)
1147c478bd9Sstevel@tonic-gate 		crfree(tmpcr);
1157c478bd9Sstevel@tonic-gate 	VN_RELE(vp);
1167c478bd9Sstevel@tonic-gate 	return (error);
1177c478bd9Sstevel@tonic-gate }
11848011479Ssn199410 
11948011479Ssn199410 int
120b2b3ca14SSumanth Naropanth faccessat(int fd, char *fname, int fmode, int flag)
12148011479Ssn199410 {
12248011479Ssn199410 	file_t *dirfp;
12348011479Ssn199410 	vnode_t *dirvp;
12448011479Ssn199410 	int error;
12548011479Ssn199410 	char startchar;
12648011479Ssn199410 
12748011479Ssn199410 	if (fd == AT_FDCWD && fname == NULL)
12848011479Ssn199410 		return (set_errno(EFAULT));
12948011479Ssn199410 
130b2b3ca14SSumanth Naropanth 	if ((flag & ~AT_EACCESS) != 0)
131b2b3ca14SSumanth Naropanth 		return (set_errno(EINVAL));
132b2b3ca14SSumanth Naropanth 
13348011479Ssn199410 	if (fname != NULL) {
13448011479Ssn199410 		if (copyin(fname, &startchar, sizeof (char)))
13548011479Ssn199410 			return (set_errno(EFAULT));
13648011479Ssn199410 	} else
13748011479Ssn199410 		startchar = '\0';
13848011479Ssn199410 
13948011479Ssn199410 	if (fd == AT_FDCWD) {
14048011479Ssn199410 		dirvp = NULL;
14148011479Ssn199410 	} else {
14248011479Ssn199410 		if (startchar != '/') {
14348011479Ssn199410 			if ((dirfp = getf(fd)) == NULL) {
14448011479Ssn199410 				return (set_errno(EBADF));
14548011479Ssn199410 			}
14648011479Ssn199410 			dirvp = dirfp->f_vnode;
14748011479Ssn199410 			VN_HOLD(dirvp);
14848011479Ssn199410 			releasef(fd);
14948011479Ssn199410 		} else {
15048011479Ssn199410 			dirvp = NULL;
15148011479Ssn199410 		}
15248011479Ssn199410 	}
15348011479Ssn199410 
154*c4d3e299SBrent Paulson 	if (AU_AUDITING() && (dirvp != NULL))
15548011479Ssn199410 		audit_setfsat_path(1);
15648011479Ssn199410 
157b2b3ca14SSumanth Naropanth 	/* Do not allow E_OK unless AT_EACCESS flag is set */
158b2b3ca14SSumanth Naropanth 	fmode &= ~E_OK;
159b2b3ca14SSumanth Naropanth 	if (flag & AT_EACCESS)
160b2b3ca14SSumanth Naropanth 		fmode |= E_OK;
161b2b3ca14SSumanth Naropanth 
16248011479Ssn199410 	error = caccess(fname, fmode, dirvp);
16348011479Ssn199410 	if (dirvp != NULL)
16448011479Ssn199410 		VN_RELE(dirvp);
16548011479Ssn199410 
16648011479Ssn199410 	return (error);
16748011479Ssn199410 }
1688fd04b83SRoger A. Faulkner 
1698fd04b83SRoger A. Faulkner int
1708fd04b83SRoger A. Faulkner access(char *fname, int fmode)
1718fd04b83SRoger A. Faulkner {
1728fd04b83SRoger A. Faulkner 	return (faccessat(AT_FDCWD, fname, fmode, 0));
1738fd04b83SRoger A. Faulkner }
174