1 /* $NetBSD: secmodel_bsd44.c,v 1.4 2006/10/06 23:01:12 elad Exp $ */ 2 /*- 3 * Copyright (c) 2006 Elad Efrat <elad@NetBSD.org> 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 3. All advertising materials mentioning features or use of this software 15 * must display the following acknowledgement: 16 * This product includes software developed by Elad Efrat. 17 * 4. The name of the author may not be used to endorse or promote products 18 * derived from this software without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 21 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 22 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 23 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 24 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 25 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 26 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 27 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 28 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 29 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 30 */ 31 32 #include <sys/cdefs.h> 33 __KERNEL_RCSID(0, "$NetBSD: secmodel_bsd44.c,v 1.4 2006/10/06 23:01:12 elad Exp $"); 34 35 #include <sys/types.h> 36 #include <sys/param.h> 37 #include <sys/kauth.h> 38 39 #include <sys/sysctl.h> 40 41 #include <secmodel/secmodel.h> 42 43 #include <secmodel/bsd44/bsd44.h> 44 #include <secmodel/bsd44/suser.h> 45 #include <secmodel/bsd44/securelevel.h> 46 47 SYSCTL_SETUP(sysctl_security_bsd44_setup, 48 "sysctl security bsd44 setup") 49 { 50 const struct sysctlnode *rnode; 51 52 sysctl_createv(clog, 0, NULL, &rnode, 53 CTLFLAG_PERMANENT, 54 CTLTYPE_NODE, "security", NULL, 55 NULL, 0, NULL, 0, 56 CTL_SECURITY, CTL_EOL); 57 58 sysctl_createv(clog, 0, &rnode, NULL, 59 CTLFLAG_PERMANENT|CTLFLAG_READWRITE, 60 CTLTYPE_INT, "curtain", NULL, 61 NULL, 0, &secmodel_bsd44_curtain, 0, 62 CTL_CREATE, CTL_EOL); 63 64 sysctl_createv(clog, 0, &rnode, &rnode, 65 CTLFLAG_PERMANENT, 66 CTLTYPE_NODE, "models", NULL, 67 NULL, 0, NULL, 0, 68 CTL_CREATE, CTL_EOL); 69 70 sysctl_createv(clog, 0, &rnode, &rnode, 71 CTLFLAG_PERMANENT, 72 CTLTYPE_NODE, "bsd44", 73 SYSCTL_DESCR("Traditional NetBSD Security model, " \ 74 "derived from 4.4BSD"), 75 NULL, 0, NULL, 0, 76 CTL_CREATE, CTL_EOL); 77 78 sysctl_createv(clog, 0, &rnode, NULL, 79 CTLFLAG_PERMANENT, 80 CTLTYPE_STRING, "name", NULL, 81 NULL, 0, __UNCONST("Traditional NetBSD (4.4BSD)"), 0, 82 CTL_CREATE, CTL_EOL); 83 84 sysctl_createv(clog, 0, &rnode, NULL, 85 CTLFLAG_PERMANENT|CTLFLAG_READWRITE, 86 CTLTYPE_INT, "securelevel", 87 SYSCTL_DESCR("System security level"), 88 secmodel_bsd44_sysctl_securelevel, 0, &securelevel, 0, 89 CTL_CREATE, CTL_EOL); 90 91 sysctl_createv(clog, 0, &rnode, NULL, 92 CTLFLAG_PERMANENT|CTLFLAG_READWRITE, 93 CTLTYPE_INT, "curtain", 94 SYSCTL_DESCR("Curtain information about objects to " 95 "users not owning them."), 96 NULL, 0, &secmodel_bsd44_curtain, 0, 97 CTL_CREATE, CTL_EOL); 98 } 99 100 /* 101 * Start the traditional NetBSD security model. 102 */ 103 void 104 secmodel_start(void) 105 { 106 secmodel_bsd44_init(); 107 108 secmodel_bsd44_suser_start(); 109 secmodel_bsd44_securelevel_start(); 110 } 111