xref: /onnv-gate/usr/src/lib/libadt_jni/common/adt_jni.c (revision 7185:88e62b13921f)
10Sstevel@tonic-gate /*
20Sstevel@tonic-gate  * CDDL HEADER START
30Sstevel@tonic-gate  *
40Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
52425Sgww  * Common Development and Distribution License (the "License").
62425Sgww  * You may not use this file except in compliance with the License.
70Sstevel@tonic-gate  *
80Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
90Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
100Sstevel@tonic-gate  * See the License for the specific language governing permissions
110Sstevel@tonic-gate  * and limitations under the License.
120Sstevel@tonic-gate  *
130Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
140Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
150Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
160Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
170Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
180Sstevel@tonic-gate  *
190Sstevel@tonic-gate  * CDDL HEADER END
200Sstevel@tonic-gate  */
210Sstevel@tonic-gate /*
220Sstevel@tonic-gate  * adt_jni.c
230Sstevel@tonic-gate  *
240Sstevel@tonic-gate  * JNI wrapper for adt interface within libbsm
250Sstevel@tonic-gate  *
26*7185Sgww  * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
270Sstevel@tonic-gate  * Use is subject to license terms.
280Sstevel@tonic-gate  *
290Sstevel@tonic-gate  */
300Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
310Sstevel@tonic-gate 
320Sstevel@tonic-gate #include <bsm/adt.h>
330Sstevel@tonic-gate #include "adt_jni.h"
340Sstevel@tonic-gate #include <jni.h>
350Sstevel@tonic-gate #include "../com/sun/audit/AuditSession.h"	/* javah output */
360Sstevel@tonic-gate #include <assert.h>
370Sstevel@tonic-gate #include <stdlib.h>
380Sstevel@tonic-gate #include <string.h>
390Sstevel@tonic-gate #include <netdb.h>
400Sstevel@tonic-gate 
410Sstevel@tonic-gate /*
420Sstevel@tonic-gate  * local_throw  -- throw an exception.
430Sstevel@tonic-gate  * "why" string must be i18n'd before calling here.
440Sstevel@tonic-gate  *
450Sstevel@tonic-gate  */
460Sstevel@tonic-gate 
470Sstevel@tonic-gate void
local_throw(JNIEnv * env,const char * exception,const char * why)480Sstevel@tonic-gate local_throw(JNIEnv *env, const char *exception, const char *why) {
490Sstevel@tonic-gate 	jobject jexception;
500Sstevel@tonic-gate 	jclass exceptionclass;
510Sstevel@tonic-gate 	jmethodID jexceptionnew;
520Sstevel@tonic-gate 
530Sstevel@tonic-gate 	jbyteArray jbarray;
540Sstevel@tonic-gate 
550Sstevel@tonic-gate 	jstring jmsg;
560Sstevel@tonic-gate 	jclass strclass;
570Sstevel@tonic-gate 	jmethodID jstrnew;
580Sstevel@tonic-gate 
590Sstevel@tonic-gate 	/* Get a String class and "new" method */
600Sstevel@tonic-gate 	strclass = (*env)->FindClass(env, "java/lang/String");
610Sstevel@tonic-gate 	jstrnew = (*env)->GetMethodID(env, strclass, "<init>", "([B)V");
620Sstevel@tonic-gate 
630Sstevel@tonic-gate 	/* Create a Byte Array from message "why" */
640Sstevel@tonic-gate 	jbarray = (*env)->NewByteArray(env, (jsize)(strlen(why)));
650Sstevel@tonic-gate 	(*env)->SetByteArrayRegion(env, jbarray, (jsize)0,
660Sstevel@tonic-gate 	    (jsize)(strlen(why)), (jbyte*) why);
670Sstevel@tonic-gate 
680Sstevel@tonic-gate 	/* Create string from byte array */
690Sstevel@tonic-gate 	jmsg = (*env)->NewObject(env, strclass, jstrnew, jbarray);
700Sstevel@tonic-gate 	exceptionclass = (*env)->FindClass(env, exception);
710Sstevel@tonic-gate 	jexceptionnew = (*env)->GetMethodID(env, exceptionclass,
720Sstevel@tonic-gate 	    "<init>", "(Ljava/lang/String;)V");
730Sstevel@tonic-gate 
740Sstevel@tonic-gate 	jexception = (*env)->NewObject(env, exceptionclass, jexceptionnew,
750Sstevel@tonic-gate 	    jmsg);
760Sstevel@tonic-gate 	(*env)->Throw(env, jexception);
770Sstevel@tonic-gate }
780Sstevel@tonic-gate 
790Sstevel@tonic-gate /*
800Sstevel@tonic-gate  * i18n the strerror return.  Input is errno.
810Sstevel@tonic-gate  *
820Sstevel@tonic-gate  */
830Sstevel@tonic-gate 
840Sstevel@tonic-gate static char *
errno_to_i18n(int error_code)850Sstevel@tonic-gate errno_to_i18n(int error_code) {
860Sstevel@tonic-gate 	char	*locale;
870Sstevel@tonic-gate 	char	*local_text;
880Sstevel@tonic-gate 
890Sstevel@tonic-gate 	locale = I18N_SETUP;
900Sstevel@tonic-gate 	local_text = strerror(error_code);
910Sstevel@tonic-gate 	(void) setlocale(LC_MESSAGES, locale);
920Sstevel@tonic-gate 	return (local_text);
930Sstevel@tonic-gate }
940Sstevel@tonic-gate 
950Sstevel@tonic-gate /*
960Sstevel@tonic-gate  * j2c_pointer
970Sstevel@tonic-gate  *
980Sstevel@tonic-gate  * convert java byte array into a C pointer
990Sstevel@tonic-gate  */
1000Sstevel@tonic-gate int
j2c_pointer(JNIEnv * env,jbyteArray jpointer,caddr_t * cpointer)1010Sstevel@tonic-gate j2c_pointer(JNIEnv *env, jbyteArray jpointer, caddr_t *cpointer) {
1020Sstevel@tonic-gate 	union {
1030Sstevel@tonic-gate 		caddr_t		ptr;
1040Sstevel@tonic-gate 		jbyte		buf[sizeof (uint64_t)];
1050Sstevel@tonic-gate 	} u;
1060Sstevel@tonic-gate 	size_t			jpointer_length;
1070Sstevel@tonic-gate 	char	*locale;
1080Sstevel@tonic-gate 
1090Sstevel@tonic-gate 	(void) memset(u.buf, 0, sizeof (uint64_t));
1100Sstevel@tonic-gate 
1110Sstevel@tonic-gate 	assert(jpointer != NULL);
1120Sstevel@tonic-gate 
1130Sstevel@tonic-gate 	jpointer_length = (*env)->GetArrayLength(env, jpointer);
1140Sstevel@tonic-gate 	if (jpointer_length != sizeof (uint64_t)) {
1150Sstevel@tonic-gate 		locale = I18N_SETUP;
1160Sstevel@tonic-gate 		local_throw(env, "java/lang/Error",
1170Sstevel@tonic-gate 		    gettext("Bad session handle"));
1180Sstevel@tonic-gate 		(void) setlocale(LC_MESSAGES, locale);
1190Sstevel@tonic-gate 		return (-1);
1200Sstevel@tonic-gate 	}
1210Sstevel@tonic-gate 	(*env)->GetByteArrayRegion(env, jpointer, 0, jpointer_length,
1220Sstevel@tonic-gate 	    &(u.buf[0]));
1230Sstevel@tonic-gate 	*cpointer = (caddr_t)u.ptr;
1240Sstevel@tonic-gate 
1250Sstevel@tonic-gate 	return (0);
1260Sstevel@tonic-gate }
1270Sstevel@tonic-gate 
1280Sstevel@tonic-gate /*
1290Sstevel@tonic-gate  * c2j_pointer
1300Sstevel@tonic-gate  *
1310Sstevel@tonic-gate  * convert a C pointer into a java byte array
1320Sstevel@tonic-gate  */
1330Sstevel@tonic-gate void
c2j_pointer(JNIEnv * env,caddr_t cpointer,jbyteArray * jpointer)1340Sstevel@tonic-gate c2j_pointer(JNIEnv *env, caddr_t cpointer, jbyteArray *jpointer) {
1350Sstevel@tonic-gate 	union {
1360Sstevel@tonic-gate 		caddr_t		ptr;
1370Sstevel@tonic-gate 		jbyte		buf[sizeof (uint64_t)];
1380Sstevel@tonic-gate 	} u;
1390Sstevel@tonic-gate 
1400Sstevel@tonic-gate 	(void) memset(u.buf, 0, sizeof (uint64_t));
1410Sstevel@tonic-gate 	u.ptr = cpointer;
1420Sstevel@tonic-gate 
1430Sstevel@tonic-gate 	*jpointer = (*env)->NewByteArray(env, sizeof (uint64_t));
1440Sstevel@tonic-gate 
1450Sstevel@tonic-gate 	(*env)->SetByteArrayRegion(env, *jpointer, 0, sizeof (uint64_t),
1460Sstevel@tonic-gate 	    &(u.buf[0]));
1470Sstevel@tonic-gate }
1480Sstevel@tonic-gate 
1490Sstevel@tonic-gate /*
1500Sstevel@tonic-gate  * adt_start_session wrapper
1510Sstevel@tonic-gate  *
1520Sstevel@tonic-gate  */
1530Sstevel@tonic-gate /*ARGSUSED*/
1540Sstevel@tonic-gate JNIEXPORT jbyteArray JNICALL
Java_com_sun_audit_AuditSession_startSession(JNIEnv * env,jobject cls,jbyteArray jimport,jlong flags)1550Sstevel@tonic-gate Java_com_sun_audit_AuditSession_startSession(JNIEnv *env, jobject cls,
1560Sstevel@tonic-gate     jbyteArray jimport, jlong flags) {
1570Sstevel@tonic-gate 	jbyteArray		jstate;
1580Sstevel@tonic-gate 	adt_session_data_t	*state;
1590Sstevel@tonic-gate 	jbyte			*import;
1600Sstevel@tonic-gate 	size_t			import_size;
1610Sstevel@tonic-gate 	int			rc;
1620Sstevel@tonic-gate 
1630Sstevel@tonic-gate 	if (jimport == NULL) {
1640Sstevel@tonic-gate 		import = NULL;
1650Sstevel@tonic-gate 	} else {
1660Sstevel@tonic-gate 		import_size = (*env)->GetArrayLength(env, jimport);
1670Sstevel@tonic-gate 		import = (jbyte *)malloc(import_size * sizeof (jbyte));
1680Sstevel@tonic-gate 		if (import == NULL) {
1690Sstevel@tonic-gate 			local_throw(env, "java/lang/Error",
1700Sstevel@tonic-gate 			    errno_to_i18n(errno));
1710Sstevel@tonic-gate 			return (NULL);
1720Sstevel@tonic-gate 		}
1730Sstevel@tonic-gate 		(*env)->GetByteArrayRegion(env, jimport, 0, import_size,
1740Sstevel@tonic-gate 		    import);
1750Sstevel@tonic-gate 	}
1760Sstevel@tonic-gate 	rc = adt_start_session(&state, (adt_export_data_t *)import, flags);
1770Sstevel@tonic-gate 
1780Sstevel@tonic-gate 	if (import != NULL)
1790Sstevel@tonic-gate 		free(import);
1800Sstevel@tonic-gate 
1810Sstevel@tonic-gate 	if (rc) {
1820Sstevel@tonic-gate 		local_throw(env, "java/lang/Error", errno_to_i18n(errno));
1830Sstevel@tonic-gate 		return (NULL);
1840Sstevel@tonic-gate 	}
1850Sstevel@tonic-gate 	c2j_pointer(env, (caddr_t)state, &jstate);
1860Sstevel@tonic-gate 
1870Sstevel@tonic-gate 	return (jstate);
1880Sstevel@tonic-gate }
1890Sstevel@tonic-gate 
1900Sstevel@tonic-gate /*
1910Sstevel@tonic-gate  * adt_end_session wrapper
1920Sstevel@tonic-gate  */
1930Sstevel@tonic-gate 
1940Sstevel@tonic-gate /* ARGSUSED */
1950Sstevel@tonic-gate JNIEXPORT void JNICALL
Java_com_sun_audit_AuditSession_endSession(JNIEnv * env,jobject cls,jbyteArray jstate)1960Sstevel@tonic-gate Java_com_sun_audit_AuditSession_endSession(JNIEnv *env, jobject cls,
1970Sstevel@tonic-gate     jbyteArray jstate) {
1980Sstevel@tonic-gate 	adt_session_data_t	*state;
1990Sstevel@tonic-gate 	char	*locale;
2000Sstevel@tonic-gate 
2010Sstevel@tonic-gate 	if (j2c_pointer(env, jstate, (caddr_t *)&state))
2020Sstevel@tonic-gate 		return;
2030Sstevel@tonic-gate 
2040Sstevel@tonic-gate 	if (state == NULL)
2050Sstevel@tonic-gate 		return;  /* invalid session, nothing to free */
2060Sstevel@tonic-gate 
2070Sstevel@tonic-gate 	/* presently, no errors defined, but what the heck? */
2080Sstevel@tonic-gate 	if (adt_end_session(state)) {
2090Sstevel@tonic-gate 		locale = I18N_SETUP;
2100Sstevel@tonic-gate 		local_throw(env, "java/lang/Error",
2110Sstevel@tonic-gate 		    gettext("Bad session handle"));
2120Sstevel@tonic-gate 		(void) setlocale(LC_MESSAGES, locale);
2130Sstevel@tonic-gate 	}
2140Sstevel@tonic-gate }
2150Sstevel@tonic-gate 
2160Sstevel@tonic-gate /*
2170Sstevel@tonic-gate  * adt_dup_session wrapper
2180Sstevel@tonic-gate  */
2190Sstevel@tonic-gate 
2200Sstevel@tonic-gate /* ARGSUSED */
2210Sstevel@tonic-gate JNIEXPORT jbyteArray JNICALL
Java_com_sun_audit_AuditSession_dupSession(JNIEnv * env,jobject cls,jbyteArray jsource)2220Sstevel@tonic-gate Java_com_sun_audit_AuditSession_dupSession(JNIEnv *env, jobject cls,
2230Sstevel@tonic-gate     jbyteArray jsource) {
2240Sstevel@tonic-gate 	jbyteArray		jdest;
2250Sstevel@tonic-gate 	adt_session_data_t	*source, *dest;
2260Sstevel@tonic-gate 	char	*locale;
2270Sstevel@tonic-gate 
2280Sstevel@tonic-gate 	if (j2c_pointer(env, jsource, (caddr_t *)&source))
2290Sstevel@tonic-gate 		return (NULL);
2300Sstevel@tonic-gate 
2310Sstevel@tonic-gate 	if (adt_dup_session(source, &dest)) {
2320Sstevel@tonic-gate 		locale = I18N_SETUP;
2330Sstevel@tonic-gate 		local_throw(env, "java/lang/Error",
2340Sstevel@tonic-gate 		    gettext("Out of memory"));
2350Sstevel@tonic-gate 		(void) setlocale(LC_MESSAGES, locale);
2360Sstevel@tonic-gate 	}
2370Sstevel@tonic-gate 
2380Sstevel@tonic-gate 	c2j_pointer(env, (caddr_t)dest, &jdest);
2390Sstevel@tonic-gate 
2400Sstevel@tonic-gate 	return (jdest);
2410Sstevel@tonic-gate }
2420Sstevel@tonic-gate 
2430Sstevel@tonic-gate /*
2440Sstevel@tonic-gate  * adt_get_session_id wrapper
2450Sstevel@tonic-gate  *
2460Sstevel@tonic-gate  */
2470Sstevel@tonic-gate 
2480Sstevel@tonic-gate /* ARGSUSED */
2490Sstevel@tonic-gate JNIEXPORT jstring JNICALL
Java_com_sun_audit_AuditSession_getSessionId(JNIEnv * env,jobject cls,jbyteArray jstate)2500Sstevel@tonic-gate Java_com_sun_audit_AuditSession_getSessionId(JNIEnv *env, jobject cls,
2510Sstevel@tonic-gate     jbyteArray jstate) {
2520Sstevel@tonic-gate 	adt_session_data_t	*state;
2530Sstevel@tonic-gate 	char			*session_id;
2540Sstevel@tonic-gate 	jstring			return_val;
2550Sstevel@tonic-gate 
2560Sstevel@tonic-gate 	if (j2c_pointer(env, jstate, (caddr_t *)&state))
2570Sstevel@tonic-gate 		return (NULL);
2580Sstevel@tonic-gate 
2590Sstevel@tonic-gate 	if (adt_get_session_id(state, &session_id)) {
2600Sstevel@tonic-gate 		return_val = (*env)->NewStringUTF(env, session_id);
2610Sstevel@tonic-gate 		free(session_id);
2620Sstevel@tonic-gate 		return (return_val);
2630Sstevel@tonic-gate 	} else
2640Sstevel@tonic-gate 		return (NULL);
2650Sstevel@tonic-gate }
2660Sstevel@tonic-gate 
2670Sstevel@tonic-gate /*
2680Sstevel@tonic-gate  * adt_get_session_id wrapper
2690Sstevel@tonic-gate  */
2700Sstevel@tonic-gate 
2710Sstevel@tonic-gate /* ARGSUSED */
2720Sstevel@tonic-gate JNIEXPORT jbyteArray JNICALL
Java_com_sun_audit_AuditSession_exportSessionData(JNIEnv * env,jobject cls,jbyteArray jstate)2730Sstevel@tonic-gate Java_com_sun_audit_AuditSession_exportSessionData
2740Sstevel@tonic-gate 	(JNIEnv *env, jobject cls, jbyteArray jstate) {
2750Sstevel@tonic-gate 	adt_session_data_t	*state;
2760Sstevel@tonic-gate 	size_t			length;
2770Sstevel@tonic-gate 	jbyte			*buffer;
2780Sstevel@tonic-gate 	jbyteArray		jbuf;
2790Sstevel@tonic-gate 
2800Sstevel@tonic-gate 	if (j2c_pointer(env, jstate, (caddr_t *)&state))
2810Sstevel@tonic-gate 		return (NULL);
2820Sstevel@tonic-gate 
2830Sstevel@tonic-gate 	length = adt_export_session_data(state, (adt_export_data_t **)&buffer);
2840Sstevel@tonic-gate 
2850Sstevel@tonic-gate 	if ((jbuf = (*env)->NewByteArray(env, length)) == NULL) {
2860Sstevel@tonic-gate 		free(buffer);
2870Sstevel@tonic-gate 		return (NULL);
2880Sstevel@tonic-gate 	}
2890Sstevel@tonic-gate 	(*env)->SetByteArrayRegion(env, jbuf, 0, length, buffer);
2900Sstevel@tonic-gate 	free(buffer);
2910Sstevel@tonic-gate 
2920Sstevel@tonic-gate 	return (jbuf);
2930Sstevel@tonic-gate }
2940Sstevel@tonic-gate 
2950Sstevel@tonic-gate /* ARGSUSED */
2960Sstevel@tonic-gate JNIEXPORT void JNICALL
Java_com_sun_audit_AuditSession_sessionAttr(JNIEnv * env,jobject cls,jbyteArray jstate,jint euid,jint egid,jint ruid,jint rgid,jstring jhostname,jint context)2970Sstevel@tonic-gate Java_com_sun_audit_AuditSession_sessionAttr(JNIEnv *env, jobject cls,
2980Sstevel@tonic-gate     jbyteArray jstate,
2990Sstevel@tonic-gate     jint euid, jint egid, jint ruid, jint rgid,
3000Sstevel@tonic-gate     jstring jhostname, jint context) {
3010Sstevel@tonic-gate 	adt_session_data_t	*state;
3020Sstevel@tonic-gate 	const char		*hostname;
3030Sstevel@tonic-gate 	adt_termid_t		*termid;
3040Sstevel@tonic-gate 
3050Sstevel@tonic-gate 	if (j2c_pointer(env, jstate, (caddr_t *)&state))
3060Sstevel@tonic-gate 		return;	/* j2c_pointer threw exception */
3070Sstevel@tonic-gate 
3080Sstevel@tonic-gate 	if (state == NULL)
3090Sstevel@tonic-gate 		return;	/* invalid session */
3100Sstevel@tonic-gate 
3110Sstevel@tonic-gate 	hostname = (*env)->GetStringUTFChars(env, jhostname, NULL);
3120Sstevel@tonic-gate 
313*7185Sgww 	if (adt_load_hostname(hostname, &termid)) {
3140Sstevel@tonic-gate 		local_throw(env, "java/lang/Error", errno_to_i18n(errno));
315*7185Sgww 	} else if (adt_set_user(state, euid, egid, ruid, rgid, termid,
316*7185Sgww 	    context)) {
317*7185Sgww 		free(termid);
3180Sstevel@tonic-gate 		local_throw(env, "java/lang/Error", errno_to_i18n(errno));
319*7185Sgww 	}
3200Sstevel@tonic-gate 	(*env)->ReleaseStringUTFChars(env, jhostname, hostname);
321*7185Sgww 	free(termid);
3220Sstevel@tonic-gate }
3230Sstevel@tonic-gate 
3240Sstevel@tonic-gate /* ARGSUSED */
3250Sstevel@tonic-gate JNIEXPORT jboolean JNICALL
Java_com_sun_audit_AuditSession_bsmAuditOn(JNIEnv * env,jobject cls)3260Sstevel@tonic-gate Java_com_sun_audit_AuditSession_bsmAuditOn(JNIEnv *env, jobject cls) {
3270Sstevel@tonic-gate 	int condition;
3280Sstevel@tonic-gate 
3290Sstevel@tonic-gate 	if (auditon(A_GETCOND, (caddr_t)&condition, sizeof (condition)))
3300Sstevel@tonic-gate 		return (0);
3310Sstevel@tonic-gate 
3320Sstevel@tonic-gate 	return (1);
3330Sstevel@tonic-gate }
334