1*0Sstevel@tonic-gate /* 2*0Sstevel@tonic-gate * CDDL HEADER START 3*0Sstevel@tonic-gate * 4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 7*0Sstevel@tonic-gate * with the License. 8*0Sstevel@tonic-gate * 9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 11*0Sstevel@tonic-gate * See the License for the specific language governing permissions 12*0Sstevel@tonic-gate * and limitations under the License. 13*0Sstevel@tonic-gate * 14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 19*0Sstevel@tonic-gate * 20*0Sstevel@tonic-gate * CDDL HEADER END 21*0Sstevel@tonic-gate */ 22*0Sstevel@tonic-gate /* 23*0Sstevel@tonic-gate * Copyright 2003 Sun Microsystems, Inc. All rights reserved. 24*0Sstevel@tonic-gate * Use is subject to license terms. 25*0Sstevel@tonic-gate */ 26*0Sstevel@tonic-gate 27*0Sstevel@tonic-gate #ifndef _SYS_PRIV_IMPL_H 28*0Sstevel@tonic-gate #define _SYS_PRIV_IMPL_H 29*0Sstevel@tonic-gate 30*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 31*0Sstevel@tonic-gate 32*0Sstevel@tonic-gate #include <sys/priv_const.h> 33*0Sstevel@tonic-gate #include <sys/priv.h> 34*0Sstevel@tonic-gate 35*0Sstevel@tonic-gate #ifdef __cplusplus 36*0Sstevel@tonic-gate extern "C" { 37*0Sstevel@tonic-gate #endif 38*0Sstevel@tonic-gate 39*0Sstevel@tonic-gate #if defined(_KERNEL) || defined(_KMEMUSER) 40*0Sstevel@tonic-gate /* 41*0Sstevel@tonic-gate * priv_set_t is a structure holding a set of privileges 42*0Sstevel@tonic-gate */ 43*0Sstevel@tonic-gate 44*0Sstevel@tonic-gate struct priv_set { 45*0Sstevel@tonic-gate priv_chunk_t pbits[PRIV_SETSIZE]; 46*0Sstevel@tonic-gate }; 47*0Sstevel@tonic-gate 48*0Sstevel@tonic-gate typedef struct cred_priv_s { 49*0Sstevel@tonic-gate priv_set_t crprivs[PRIV_NSET]; /* Priv sets */ 50*0Sstevel@tonic-gate uint_t crpriv_flags; /* Privilege flags */ 51*0Sstevel@tonic-gate } cred_priv_t; 52*0Sstevel@tonic-gate 53*0Sstevel@tonic-gate #endif 54*0Sstevel@tonic-gate 55*0Sstevel@tonic-gate #ifdef _KERNEL 56*0Sstevel@tonic-gate 57*0Sstevel@tonic-gate extern priv_set_t *priv_basic; 58*0Sstevel@tonic-gate extern priv_set_t priv_unsafe; 59*0Sstevel@tonic-gate extern priv_set_t priv_fullset; 60*0Sstevel@tonic-gate extern void priv_init(void); 61*0Sstevel@tonic-gate 62*0Sstevel@tonic-gate /* The CR_PRIVS macro is defined in <sys/cred_impl.h> */ 63*0Sstevel@tonic-gate #define CR_EPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_EFFECTIVE]) 64*0Sstevel@tonic-gate #define CR_IPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_INHERITABLE]) 65*0Sstevel@tonic-gate #define CR_PPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_PERMITTED]) 66*0Sstevel@tonic-gate #define CR_LPRIV(c) (CR_PRIVS(c)->crprivs[PRIV_LIMIT]) 67*0Sstevel@tonic-gate 68*0Sstevel@tonic-gate #define CR_FLAGS(c) (CR_PRIVS(c)->crpriv_flags) 69*0Sstevel@tonic-gate 70*0Sstevel@tonic-gate #define PRIV_SETBYTES (PRIV_NSET * PRIV_SETSIZE * sizeof (priv_chunk_t)) 71*0Sstevel@tonic-gate 72*0Sstevel@tonic-gate #define PRIV_EISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || (c)->cr_uid != 0) 73*0Sstevel@tonic-gate #define PRIV_PISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || \ 74*0Sstevel@tonic-gate ((c)->cr_uid != 0 && (c)->cr_suid != 0 && \ 75*0Sstevel@tonic-gate (c)->cr_ruid != 0)) 76*0Sstevel@tonic-gate 77*0Sstevel@tonic-gate #define CR_OEPRIV(c) (*(PRIV_EISAWARE(c) ? &CR_EPRIV(c) : &CR_LPRIV(c))) 78*0Sstevel@tonic-gate #define CR_OPPRIV(c) (*(PRIV_PISAWARE(c) ? &CR_PPRIV(c) : &CR_LPRIV(c))) 79*0Sstevel@tonic-gate 80*0Sstevel@tonic-gate #define PRIV_VALIDSET(s) ((s) >= 0 && (s) < PRIV_NSET) 81*0Sstevel@tonic-gate #define PRIV_VALIDOP(op) ((op) >= PRIV_ON && (op) <= PRIV_SET) 82*0Sstevel@tonic-gate 83*0Sstevel@tonic-gate #define PRIV_FULLSET &priv_fullset /* Require full set */ 84*0Sstevel@tonic-gate 85*0Sstevel@tonic-gate /* 86*0Sstevel@tonic-gate * Privilege macros bits manipulation macros; DEBUG kernels will 87*0Sstevel@tonic-gate * ASSERT() that privileges are not out of range. 88*0Sstevel@tonic-gate */ 89*0Sstevel@tonic-gate #ifndef NBBY 90*0Sstevel@tonic-gate #define NBBY 8 91*0Sstevel@tonic-gate #endif 92*0Sstevel@tonic-gate 93*0Sstevel@tonic-gate #define __NBWRD (NBBY * sizeof (priv_chunk_t)) 94*0Sstevel@tonic-gate 95*0Sstevel@tonic-gate #define privmask(n) (1U << ((__NBWRD - 1) - ((n) % __NBWRD))) 96*0Sstevel@tonic-gate #define privword(n) ((n)/__NBWRD) 97*0Sstevel@tonic-gate 98*0Sstevel@tonic-gate /* 99*0Sstevel@tonic-gate * PRIV_ASSERT(a, b) sets privilege "b" in privilege set "a". 100*0Sstevel@tonic-gate * PRIV_CLEAR(a,b) clears privilege "b" in privilege set "a". 101*0Sstevel@tonic-gate * PRIV_ISASSERT tests if privilege 'b' is asserted in privilege set 'a'. 102*0Sstevel@tonic-gate */ 103*0Sstevel@tonic-gate 104*0Sstevel@tonic-gate #define __PRIV_ASSERT(a, b) ((a)->pbits[privword(b)] |= privmask(b)) 105*0Sstevel@tonic-gate #define __PRIV_CLEAR(a, b) ((a)->pbits[privword(b)] &= ~privmask(b)) 106*0Sstevel@tonic-gate #define __PRIV_ISASSERT(a, b) ((a)->pbits[privword(b)] & privmask(b)) 107*0Sstevel@tonic-gate 108*0Sstevel@tonic-gate #ifdef DEBUG 109*0Sstevel@tonic-gate #define PRIV_CLEAR(a, b) priv_delset((a), (b)) 110*0Sstevel@tonic-gate #define PRIV_ASSERT(a, b) priv_addset((a), (b)) 111*0Sstevel@tonic-gate #define PRIV_ISASSERT(a, b) priv_ismember((a), (b)) 112*0Sstevel@tonic-gate #else 113*0Sstevel@tonic-gate #define PRIV_CLEAR(a, b) __PRIV_CLEAR((a), (b)) 114*0Sstevel@tonic-gate #define PRIV_ASSERT(a, b) __PRIV_ASSERT((a), (b)) 115*0Sstevel@tonic-gate #define PRIV_ISASSERT(a, b) __PRIV_ISASSERT((a), (b)) 116*0Sstevel@tonic-gate #endif 117*0Sstevel@tonic-gate 118*0Sstevel@tonic-gate #endif /* _KERNEL */ 119*0Sstevel@tonic-gate 120*0Sstevel@tonic-gate #ifdef __cplusplus 121*0Sstevel@tonic-gate } 122*0Sstevel@tonic-gate #endif 123*0Sstevel@tonic-gate 124*0Sstevel@tonic-gate #endif /* _SYS_PRIV_IMPL_H */ 125