13e65b9c6SColin Percival /*-
2*4d846d26SWarner Losh * SPDX-License-Identifier: BSD-2-Clause
3d915a14eSPedro F. Giffuni *
4b6f7731dSXin LI * Copyright (c) 2011 Xin LI <delphij@FreeBSD.org>
53e65b9c6SColin Percival *
63e65b9c6SColin Percival * Redistribution and use in source and binary forms, with or without
73e65b9c6SColin Percival * modification, are permitted provided that the following conditions
83e65b9c6SColin Percival * are met:
93e65b9c6SColin Percival * 1. Redistributions of source code must retain the above copyright
103e65b9c6SColin Percival * notice, this list of conditions and the following disclaimer.
113e65b9c6SColin Percival * 2. Redistributions in binary form must reproduce the above copyright
123e65b9c6SColin Percival * notice, this list of conditions and the following disclaimer in the
133e65b9c6SColin Percival * documentation and/or other materials provided with the distribution.
143e65b9c6SColin Percival *
153e65b9c6SColin Percival * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
163e65b9c6SColin Percival * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
173e65b9c6SColin Percival * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
183e65b9c6SColin Percival * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
193e65b9c6SColin Percival * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
203e65b9c6SColin Percival * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
213e65b9c6SColin Percival * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
223e65b9c6SColin Percival * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
233e65b9c6SColin Percival * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
243e65b9c6SColin Percival * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
253e65b9c6SColin Percival * SUCH DAMAGE.
263e65b9c6SColin Percival */
273e65b9c6SColin Percival
283e65b9c6SColin Percival #include <dlfcn.h>
293e65b9c6SColin Percival #include <stddef.h>
303e65b9c6SColin Percival #include <unistd.h>
313e65b9c6SColin Percival
323e65b9c6SColin Percival #include "libc_private.h"
333e65b9c6SColin Percival
343e65b9c6SColin Percival /*
353e65b9c6SColin Percival * Whether we want to restrict dlopen()s.
363e65b9c6SColin Percival */
373e65b9c6SColin Percival static int __libc_restricted_mode = 0;
383e65b9c6SColin Percival
393e65b9c6SColin Percival void *
libc_dlopen(const char * path,int mode)403e65b9c6SColin Percival libc_dlopen(const char *path, int mode)
413e65b9c6SColin Percival {
423e65b9c6SColin Percival
433e65b9c6SColin Percival if (__libc_restricted_mode) {
443e65b9c6SColin Percival _rtld_error("Service unavailable -- libc in restricted mode");
453e65b9c6SColin Percival return (NULL);
46dfdc07bcSKonstantin Belousov }
473e65b9c6SColin Percival return (dlopen(path, mode));
483e65b9c6SColin Percival }
493e65b9c6SColin Percival
503e65b9c6SColin Percival void
__FreeBSD_libc_enter_restricted_mode(void)513e65b9c6SColin Percival __FreeBSD_libc_enter_restricted_mode(void)
523e65b9c6SColin Percival {
533e65b9c6SColin Percival
543e65b9c6SColin Percival __libc_restricted_mode = 1;
553e65b9c6SColin Percival }
563e65b9c6SColin Percival
57