1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26 /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 27 /* All Rights Reserved */ 28 29 /* 30 * Portions of this source code were derived from Berkeley 4.3 BSD 31 * under license from the Regents of the University of California. 32 */ 33 34 #include <sys/param.h> 35 #include <sys/isa_defs.h> 36 #include <sys/types.h> 37 #include <sys/sysmacros.h> 38 #include <sys/cred_impl.h> 39 #include <sys/systm.h> 40 #include <sys/errno.h> 41 #include <sys/pathname.h> 42 #include <sys/vnode.h> 43 #include <sys/uio.h> 44 #include <sys/cmn_err.h> 45 #include <sys/debug.h> 46 #include <sys/file.h> 47 #include <fs/fs_subr.h> 48 #include <c2/audit.h> 49 #include <sys/fcntl.h> 50 51 /* 52 * Determine accessibility of file. 53 */ 54 55 #define E_OK 010 /* use effective ids */ 56 #define R_OK 004 57 #define W_OK 002 58 #define X_OK 001 59 60 static int 61 caccess(char *fname, int fmode, vnode_t *startvp) 62 { 63 vnode_t *vp; 64 cred_t *tmpcr; 65 int error; 66 int mode; 67 int eok; 68 cred_t *cr; 69 int estale_retry = 0; 70 71 if (fmode & ~(E_OK|R_OK|W_OK|X_OK)) 72 return (set_errno(EINVAL)); 73 74 mode = ((fmode & (R_OK|W_OK|X_OK)) << 6); 75 76 cr = CRED(); 77 78 /* OK to use effective uid/gid, i.e., no need to crdup(CRED())? */ 79 eok = (fmode & E_OK) || 80 (cr->cr_uid == cr->cr_ruid && cr->cr_gid == cr->cr_rgid); 81 82 if (eok) 83 tmpcr = cr; 84 else { 85 tmpcr = crdup(cr); 86 tmpcr->cr_uid = cr->cr_ruid; 87 tmpcr->cr_gid = cr->cr_rgid; 88 tmpcr->cr_ruid = cr->cr_uid; 89 tmpcr->cr_rgid = cr->cr_gid; 90 } 91 92 lookup: 93 if (error = lookupnameatcred(fname, UIO_USERSPACE, FOLLOW, NULLVPP, &vp, 94 startvp, tmpcr)) { 95 if ((error == ESTALE) && fs_need_estale_retry(estale_retry++)) 96 goto lookup; 97 if (!eok) 98 crfree(tmpcr); 99 return (set_errno(error)); 100 } 101 102 if (mode) { 103 error = VOP_ACCESS(vp, mode, 0, tmpcr, NULL); 104 if (error) { 105 if ((error == ESTALE) && 106 fs_need_estale_retry(estale_retry++)) { 107 VN_RELE(vp); 108 goto lookup; 109 } 110 (void) set_errno(error); 111 } 112 } 113 114 if (!eok) 115 crfree(tmpcr); 116 VN_RELE(vp); 117 return (error); 118 } 119 120 int 121 access(char *fname, int fmode) 122 { 123 return (caccess(fname, fmode, NULL)); 124 } 125 126 int 127 faccessat(int fd, char *fname, int fmode, int flag) 128 { 129 file_t *dirfp; 130 vnode_t *dirvp; 131 int error; 132 char startchar; 133 134 if (fd == AT_FDCWD && fname == NULL) 135 return (set_errno(EFAULT)); 136 137 if ((flag & ~AT_EACCESS) != 0) 138 return (set_errno(EINVAL)); 139 140 if (fname != NULL) { 141 if (copyin(fname, &startchar, sizeof (char))) 142 return (set_errno(EFAULT)); 143 } else 144 startchar = '\0'; 145 146 if (fd == AT_FDCWD) { 147 dirvp = NULL; 148 } else { 149 if (startchar != '/') { 150 if ((dirfp = getf(fd)) == NULL) { 151 return (set_errno(EBADF)); 152 } 153 dirvp = dirfp->f_vnode; 154 VN_HOLD(dirvp); 155 releasef(fd); 156 } else { 157 dirvp = NULL; 158 } 159 } 160 161 if (audit_active) 162 audit_setfsat_path(1); 163 164 /* Do not allow E_OK unless AT_EACCESS flag is set */ 165 fmode &= ~E_OK; 166 if (flag & AT_EACCESS) 167 fmode |= E_OK; 168 169 error = caccess(fname, fmode, dirvp); 170 if (dirvp != NULL) 171 VN_RELE(dirvp); 172 173 return (error); 174 } 175