1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate * CDDL HEADER START
3*0Sstevel@tonic-gate *
4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*0Sstevel@tonic-gate * with the License.
8*0Sstevel@tonic-gate *
9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*0Sstevel@tonic-gate * See the License for the specific language governing permissions
12*0Sstevel@tonic-gate * and limitations under the License.
13*0Sstevel@tonic-gate *
14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*0Sstevel@tonic-gate *
20*0Sstevel@tonic-gate * CDDL HEADER END
21*0Sstevel@tonic-gate */
22*0Sstevel@tonic-gate /*
23*0Sstevel@tonic-gate * Copyright 2003 Sun Microsystems, Inc. All rights reserved.
24*0Sstevel@tonic-gate * Use is subject to license terms.
25*0Sstevel@tonic-gate */
26*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
27*0Sstevel@tonic-gate
28*0Sstevel@tonic-gate #include <sys/socket.h>
29*0Sstevel@tonic-gate #include <netinet/in.h>
30*0Sstevel@tonic-gate #include <strings.h>
31*0Sstevel@tonic-gate #include <sys/socket.h>
32*0Sstevel@tonic-gate
33*0Sstevel@tonic-gate #include <bsm/audit.h>
34*0Sstevel@tonic-gate #include <bsm/libbsm.h>
35*0Sstevel@tonic-gate #include <bsm/audit_private.h>
36*0Sstevel@tonic-gate #include <generic.h>
37*0Sstevel@tonic-gate
38*0Sstevel@tonic-gate static int do_ipv6_address(struct sockaddr_in6 *, struct sockaddr_in6 *);
39*0Sstevel@tonic-gate static int do_ipv4_address(struct sockaddr_in *, struct sockaddr_in *);
40*0Sstevel@tonic-gate
41*0Sstevel@tonic-gate int
audit_settid(int fd)42*0Sstevel@tonic-gate audit_settid(int fd)
43*0Sstevel@tonic-gate {
44*0Sstevel@tonic-gate struct sockaddr_in6 peer;
45*0Sstevel@tonic-gate struct sockaddr_in6 sock;
46*0Sstevel@tonic-gate int peerlen = sizeof (peer);
47*0Sstevel@tonic-gate int socklen = sizeof (sock);
48*0Sstevel@tonic-gate int rv;
49*0Sstevel@tonic-gate
50*0Sstevel@tonic-gate if (cannot_audit(0)) {
51*0Sstevel@tonic-gate return (0);
52*0Sstevel@tonic-gate }
53*0Sstevel@tonic-gate
54*0Sstevel@tonic-gate /* get peer name */
55*0Sstevel@tonic-gate if (getpeername(fd, (struct sockaddr *)&peer, (socklen_t *)&peerlen)
56*0Sstevel@tonic-gate < 0) {
57*0Sstevel@tonic-gate return (1);
58*0Sstevel@tonic-gate }
59*0Sstevel@tonic-gate
60*0Sstevel@tonic-gate /* get sock name */
61*0Sstevel@tonic-gate if (getsockname(fd, (struct sockaddr *)&sock, (socklen_t *)&socklen)
62*0Sstevel@tonic-gate < 0) {
63*0Sstevel@tonic-gate return (1);
64*0Sstevel@tonic-gate }
65*0Sstevel@tonic-gate
66*0Sstevel@tonic-gate if (peer.sin6_family == AF_INET6)
67*0Sstevel@tonic-gate rv = do_ipv6_address(&peer, &sock);
68*0Sstevel@tonic-gate else
69*0Sstevel@tonic-gate rv = do_ipv4_address((struct sockaddr_in *)&peer,
70*0Sstevel@tonic-gate (struct sockaddr_in *)&sock);
71*0Sstevel@tonic-gate
72*0Sstevel@tonic-gate return (rv);
73*0Sstevel@tonic-gate }
74*0Sstevel@tonic-gate
75*0Sstevel@tonic-gate static int
do_ipv6_address(struct sockaddr_in6 * peer,struct sockaddr_in6 * sock)76*0Sstevel@tonic-gate do_ipv6_address(struct sockaddr_in6 *peer, struct sockaddr_in6 *sock)
77*0Sstevel@tonic-gate {
78*0Sstevel@tonic-gate auditinfo_addr_t ai;
79*0Sstevel@tonic-gate
80*0Sstevel@tonic-gate /* get audit characteristics of process */
81*0Sstevel@tonic-gate if (getaudit_addr(&ai, sizeof (ai)) < 0) {
82*0Sstevel@tonic-gate return (errno);
83*0Sstevel@tonic-gate }
84*0Sstevel@tonic-gate
85*0Sstevel@tonic-gate /*
86*0Sstevel@tonic-gate * if terminal ID already set, i.e. non-zero, then just return
87*0Sstevel@tonic-gate */
88*0Sstevel@tonic-gate if (ai.ai_termid.at_port ||
89*0Sstevel@tonic-gate ai.ai_termid.at_addr[0] ||
90*0Sstevel@tonic-gate ai.ai_termid.at_addr[1] ||
91*0Sstevel@tonic-gate ai.ai_termid.at_addr[2] ||
92*0Sstevel@tonic-gate ai.ai_termid.at_addr[3]) {
93*0Sstevel@tonic-gate return (0);
94*0Sstevel@tonic-gate }
95*0Sstevel@tonic-gate
96*0Sstevel@tonic-gate ai.ai_termid.at_port = ((peer->sin6_port<<16) | (sock->sin6_port));
97*0Sstevel@tonic-gate ai.ai_termid.at_type = AU_IPv6;
98*0Sstevel@tonic-gate bcopy(&peer->sin6_addr, ai.ai_termid.at_addr, 16);
99*0Sstevel@tonic-gate
100*0Sstevel@tonic-gate if (setaudit_addr(&ai, sizeof (ai)) < 0) {
101*0Sstevel@tonic-gate return (errno);
102*0Sstevel@tonic-gate }
103*0Sstevel@tonic-gate
104*0Sstevel@tonic-gate return (0);
105*0Sstevel@tonic-gate }
106*0Sstevel@tonic-gate
107*0Sstevel@tonic-gate static int
do_ipv4_address(struct sockaddr_in * peer,struct sockaddr_in * sock)108*0Sstevel@tonic-gate do_ipv4_address(struct sockaddr_in *peer, struct sockaddr_in *sock)
109*0Sstevel@tonic-gate {
110*0Sstevel@tonic-gate auditinfo_t ai;
111*0Sstevel@tonic-gate
112*0Sstevel@tonic-gate /* get audit characteristics of process */
113*0Sstevel@tonic-gate if (getaudit(&ai) < 0) {
114*0Sstevel@tonic-gate return (errno);
115*0Sstevel@tonic-gate }
116*0Sstevel@tonic-gate
117*0Sstevel@tonic-gate /*
118*0Sstevel@tonic-gate * if terminal ID already set, i.e. non-zero, then just return
119*0Sstevel@tonic-gate */
120*0Sstevel@tonic-gate if (ai.ai_termid.port || ai.ai_termid.machine) {
121*0Sstevel@tonic-gate return (0);
122*0Sstevel@tonic-gate }
123*0Sstevel@tonic-gate
124*0Sstevel@tonic-gate ai.ai_termid.port = (peer->sin_port<<16 | sock->sin_port);
125*0Sstevel@tonic-gate ai.ai_termid.machine = (uint32_t)peer->sin_addr.s_addr;
126*0Sstevel@tonic-gate
127*0Sstevel@tonic-gate if (setaudit(&ai) < 0) {
128*0Sstevel@tonic-gate return (errno);
129*0Sstevel@tonic-gate }
130*0Sstevel@tonic-gate
131*0Sstevel@tonic-gate return (0);
132*0Sstevel@tonic-gate }
133