Home | History | Annotate | Download | only in inc
      1 /*
      2  * CDDL HEADER START
      3  *
      4  * The contents of this file are subject to the terms of the
      5  * Common Development and Distribution License (the "License").
      6  * You may not use this file except in compliance with the License.
      7  *
      8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
      9  * or http://www.opensolaris.org/os/licensing.
     10  * See the License for the specific language governing permissions
     11  * and limitations under the License.
     12  *
     13  * When distributing Covered Code, include this CDDL HEADER in each
     14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     15  * If applicable, add the following below this CDDL HEADER, with the
     16  * fields enclosed by brackets "[]" replaced with your own identifying
     17  * information: Portions Copyright [yyyy] [name of copyright owner]
     18  *
     19  * CDDL HEADER END
     20  */
     21 
     22 /*
     23  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
     24  * Use is subject to license terms.
     25  */
     26 
     27 #ifndef _PRIV_PRIVATE_H
     28 #define	_PRIV_PRIVATE_H
     29 
     30 #pragma ident	"%Z%%M%	%I%	%E% SMI"
     31 
     32 #include <sys/types.h>
     33 #include <sys/priv.h>
     34 #include <limits.h>
     35 
     36 /*
     37  * Libc private privilege data.
     38  */
     39 
     40 #ifdef __cplusplus
     41 extern "C" {
     42 #endif
     43 
     44 #define	LOADPRIVDATA(d)		d = __priv_getdata()
     45 #define	GETPRIVDATA()		__priv_getdata()
     46 #define	LOCKPRIVDATA()		{ \
     47 					/* Data already allocated */ \
     48 					(void) lock_data(); \
     49 					(void) refresh_data(); \
     50 				}
     51 #define	UNLOCKPRIVDATA()	unlock_data()
     52 #define	WITHPRIVLOCKED(t, b, x)	{ \
     53 					t __result; \
     54 					if (lock_data() != 0) \
     55 						return (b); \
     56 					__result = (x); \
     57 					if (__result == (b) && refresh_data()) \
     58 						__result = (x); \
     59 					unlock_data(); \
     60 					return (__result); \
     61 				}
     62 
     63 /*
     64  * Privilege mask macros.
     65  */
     66 #define	__NBWRD		(CHAR_BIT * sizeof (priv_chunk_t))
     67 #define	privmask(n)	(1 << ((__NBWRD - 1) - ((n) % __NBWRD)))
     68 #define	privword(n)	((n)/__NBWRD)
     69 
     70 /*
     71  * Same as the functions, but for numeric privileges.
     72  */
     73 #define	PRIV_ADDSET(a, p)	((priv_chunk_t *)(a))[privword(p)] |= \
     74 							privmask(p)
     75 #define	PRIV_DELSET(a, p)	((priv_chunk_t *)(a))[privword(p)] &= \
     76 							~privmask(p)
     77 #define	PRIV_ISMEMBER(a, p)	((((priv_chunk_t *)(a))[privword(p)] & \
     78 							privmask(p)) != 0)
     79 
     80 /*
     81  * The structure is static except for the setsort, privnames and nprivs
     82  * field.  The pinfo structure initially has sufficient room and the kernel
     83  * guarantees no offset changes so we can copy a new structure on top of it.
     84  * The locking stratgegy is this: we lock it when we need to reference any
     85  * of the volatile fields.
     86  */
     87 typedef struct priv_data {
     88 	size_t			pd_setsize;		/* In bytes */
     89 	int			pd_nsets, pd_nprivs;
     90 	uint32_t		pd_ucredsize;
     91 	char  			**pd_setnames;
     92 	char			**pd_privnames;
     93 	int			*pd_setsort;
     94 	priv_impl_info_t 	*pd_pinfo;
     95 	priv_set_t		*pd_basicset;
     96 	priv_set_t		*pd_zoneset;
     97 } priv_data_t;
     98 
     99 extern priv_data_t *__priv_getdata(void);
    100 extern priv_data_t *__priv_parse_info(priv_impl_info_t *);
    101 extern void __priv_free_info(priv_data_t *);
    102 extern priv_data_t *privdata;
    103 
    104 extern int lock_data(void);
    105 extern boolean_t refresh_data(void);
    106 extern void unlock_data(void);
    107 
    108 extern boolean_t __priv_isemptyset(priv_data_t *, const priv_set_t *);
    109 extern boolean_t __priv_isfullset(priv_data_t *, const priv_set_t *);
    110 extern boolean_t __priv_issubset(priv_data_t *, const priv_set_t *,
    111 				const priv_set_t *);
    112 extern const char *__priv_getbynum(const priv_data_t *, int);
    113 
    114 extern int getprivinfo(priv_impl_info_t *, size_t);
    115 
    116 extern priv_set_t *priv_basic(void);
    117 
    118 #ifdef __cplusplus
    119 }
    120 #endif
    121 
    122 #endif /* _PRIV_PRIVATE_H */
    123