xref: /onnv-gate/usr/src/uts/common/sys/klpd.h (revision 12273:63678502e95e)

/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
 */

#ifndef	_SYS_KLPD_H
#define	_SYS_KLPD_H

#include <sys/types.h>
#include <sys/priv.h>
#include <sys/procset.h>

#ifdef _KERNEL
#include <sys/cred.h>
#include <sys/sysmacros.h>
#include <sys/varargs.h>
#endif

#ifdef	__cplusplus
extern "C" {
#endif

#define	KLPDCALL_VERS		1

#define	KLPDARG_NOMORE		0		/* End of argument List */
#define	KLPDARG_NONE		0		/* No argument */
#define	KLPDARG_VNODE		1		/* vnode_t * */
#define	KLPDARG_INT		2		/* int */
#define	KLPDARG_PORT		3		/* int, port number */
#define	KLPDARG_TCPPORT		4		/* int, tcp port number */
#define	KLPDARG_UDPPORT		5		/* int, udp port number */
#define	KLPDARG_SCTPPORT	6		/* int, sctp port number */
#define	KLPDARG_SDPPORT		7		/* int, sdp port number */

#ifdef _KERNEL

struct klpd_reg;
struct credklpd;

int klpd_reg(int, idtype_t, id_t, priv_set_t *);
int klpd_unreg(int, idtype_t, id_t);
void klpd_freelist(struct klpd_reg **);
void klpd_rele(struct klpd_reg *);
int klpd_call(const cred_t *, const priv_set_t *, va_list);
void crklpd_hold(struct credklpd *);
void crklpd_rele(struct credklpd *);
int pfexec_reg(int);
int pfexec_unreg(int);
int pfexec_call(const cred_t *, struct pathname *, cred_t **, boolean_t *);
int get_forced_privs(const cred_t *, const char *, priv_set_t *);
int check_user_privs(const cred_t *, const priv_set_t *);

#endif /* _KERNEL */

typedef struct klpd_head {
	uint32_t	klh_vers;		/* Version */
	uint32_t	klh_len;		/* Length of full packet */
	uint32_t	klh_argoff;		/* Offset of argument */
	uint32_t	klh_privoff;		/* Offset of privilege set */
} klpd_head_t;

#define	KLH_PRIVSET(kh)	((priv_set_t *)(((kh)->klh_privoff == 0 ? NULL : \
			(char *)(kh) + (kh)->klh_privoff)))
#define	KLH_ARG(kh)	((void *)((kh)->klh_argoff != 0 ? \
			(char *)(kh) + (kh)->klh_argoff : NULL))

typedef struct klpd_arg {
	uint_t	kla_type;
	uint_t	kla_dlen;
	union {
		char	__cdata[1];
		int	__idata;
		uint_t	__uidata;
	} kla_data;
} klpd_arg_t;

#define	kla_str		kla_data.__cdata
#define	kla_int		kla_data.__idata
#define	kla_uint	kla_data.__uidata

#define	PFEXEC_ARG_VERS			0x1
#define	PFEXEC_EXEC_ATTRS		0x1	/* pfexec_reply_t */
#define	PFEXEC_FORCED_PRIVS		0x2	/* priv_set_t */
#define	PFEXEC_USER_PRIVS		0x3	/* uint32_t */

#define	PFEXEC_ARG_SIZE(bufsize)	\
	(offsetof(pfexec_arg_t, pfa_data) + (bufsize))

typedef struct pfexec_arg {
	uint_t	pfa_vers;		/* Caller version */
	uint_t	pfa_call;		/* Call type */
	uint_t	pfa_len;		/* Length of data */
	uid_t	pfa_uid;		/* Real uid of subject */
	union {
		char		__pfa_path[1];
		uint32_t	__pfa_buf[1];
	} pfa_data;
} pfexec_arg_t;

#define	pfa_path	pfa_data.__pfa_path
#define	pfa_buf		pfa_data.__pfa_buf

#define	PFEXEC_NOTSET		((uid_t)-1)

typedef struct pfexec_reply {
	uint_t		pfr_vers;
	uint_t		pfr_len;
	uid_t		pfr_ruid, pfr_euid;
	gid_t		pfr_rgid, pfr_egid;
	boolean_t	pfr_setcred;
	boolean_t	pfr_scrubenv;
	boolean_t	pfr_clearflag;
	boolean_t	pfr_allowed;
	uint_t		pfr_ioff;
	uint_t		pfr_loff;
} pfexec_reply_t;

#define	PFEXEC_REPLY_IPRIV(pfr)	\
	((pfr)->pfr_ioff ? (priv_set_t *)((char *)(pfr) + (pfr)->pfr_ioff) \
	:  (priv_set_t *)0)
#define	PFEXEC_REPLY_LPRIV(pfr)	\
	((pfr)->pfr_loff ? (priv_set_t *)((char *)(pfr) + (pfr)->pfr_loff) \
	:  (priv_set_t *)0)

#ifdef	__cplusplus
}
#endif

#endif	/* _SYS_KLPD_H */