Home | History | Annotate | Download | only in sys
      1 /*
      2  * CDDL HEADER START
      3  *
      4  * The contents of this file are subject to the terms of the
      5  * Common Development and Distribution License, Version 1.0 only
      6  * (the "License").  You may not use this file except in compliance
      7  * with the License.
      8  *
      9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
     10  * or http://www.opensolaris.org/os/licensing.
     11  * See the License for the specific language governing permissions
     12  * and limitations under the License.
     13  *
     14  * When distributing Covered Code, include this CDDL HEADER in each
     15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     16  * If applicable, add the following below this CDDL HEADER, with the
     17  * fields enclosed by brackets "[]" replaced with your own identifying
     18  * information: Portions Copyright [yyyy] [name of copyright owner]
     19  *
     20  * CDDL HEADER END
     21  */
     22 /*
     23  * Copyright 2003 Sun Microsystems, Inc.  All rights reserved.
     24  * Use is subject to license terms.
     25  */
     26 
     27 #ifndef	_SYS_PRIV_IMPL_H
     28 #define	_SYS_PRIV_IMPL_H
     29 
     30 #pragma ident	"%Z%%M%	%I%	%E% SMI"
     31 
     32 #include <sys/priv_const.h>
     33 #include <sys/priv.h>
     34 
     35 #ifdef	__cplusplus
     36 extern "C" {
     37 #endif
     38 
     39 #if defined(_KERNEL) || defined(_KMEMUSER)
     40 /*
     41  * priv_set_t is a structure holding a set of privileges
     42  */
     43 
     44 struct priv_set {
     45 	priv_chunk_t pbits[PRIV_SETSIZE];
     46 };
     47 
     48 typedef struct cred_priv_s {
     49 	priv_set_t	crprivs[PRIV_NSET];	/* Priv sets */
     50 	uint_t		crpriv_flags;		/* Privilege flags */
     51 } cred_priv_t;
     52 
     53 #endif
     54 
     55 #ifdef _KERNEL
     56 
     57 extern priv_set_t *priv_basic;
     58 extern priv_set_t priv_unsafe;
     59 extern priv_set_t priv_fullset;
     60 extern void priv_init(void);
     61 
     62 /* The CR_PRIVS macro is defined in <sys/cred_impl.h> */
     63 #define	CR_EPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_EFFECTIVE])
     64 #define	CR_IPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_INHERITABLE])
     65 #define	CR_PPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_PERMITTED])
     66 #define	CR_LPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_LIMIT])
     67 
     68 #define	CR_FLAGS(c)	(CR_PRIVS(c)->crpriv_flags)
     69 
     70 #define	PRIV_SETBYTES	(PRIV_NSET * PRIV_SETSIZE * sizeof (priv_chunk_t))
     71 
     72 #define	PRIV_EISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || (c)->cr_uid != 0)
     73 #define	PRIV_PISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || \
     74 				((c)->cr_uid != 0 && (c)->cr_suid != 0 && \
     75 				(c)->cr_ruid != 0))
     76 
     77 #define	CR_OEPRIV(c)	(*(PRIV_EISAWARE(c) ? &CR_EPRIV(c) : &CR_LPRIV(c)))
     78 #define	CR_OPPRIV(c)	(*(PRIV_PISAWARE(c) ? &CR_PPRIV(c) : &CR_LPRIV(c)))
     79 
     80 #define	PRIV_VALIDSET(s)	((s) >= 0 && (s) < PRIV_NSET)
     81 #define	PRIV_VALIDOP(op)	((op) >= PRIV_ON && (op) <= PRIV_SET)
     82 
     83 #define	PRIV_FULLSET		&priv_fullset	/* Require full set */
     84 
     85 /*
     86  * Privilege macros bits manipulation macros; DEBUG kernels will
     87  * ASSERT() that privileges are not out of range.
     88  */
     89 #ifndef	NBBY
     90 #define	NBBY		8
     91 #endif
     92 
     93 #define	__NBWRD		(NBBY * sizeof (priv_chunk_t))
     94 
     95 #define	privmask(n)	(1U << ((__NBWRD - 1) - ((n) % __NBWRD)))
     96 #define	privword(n)	((n)/__NBWRD)
     97 
     98 /*
     99  * PRIV_ASSERT(a, b) sets privilege "b" in privilege set "a".
    100  * PRIV_CLEAR(a,b) clears privilege "b" in privilege set "a".
    101  * PRIV_ISASSERT tests if privilege 'b' is asserted in privilege set 'a'.
    102  */
    103 
    104 #define	__PRIV_ASSERT(a, b)	((a)->pbits[privword(b)] |= privmask(b))
    105 #define	__PRIV_CLEAR(a, b)	((a)->pbits[privword(b)] &= ~privmask(b))
    106 #define	__PRIV_ISASSERT(a, b)	((a)->pbits[privword(b)] & privmask(b))
    107 
    108 #ifdef DEBUG
    109 #define	PRIV_CLEAR(a, b)	priv_delset((a), (b))
    110 #define	PRIV_ASSERT(a, b)	priv_addset((a), (b))
    111 #define	PRIV_ISASSERT(a, b)	priv_ismember((a), (b))
    112 #else
    113 #define	PRIV_CLEAR(a, b)	__PRIV_CLEAR((a), (b))
    114 #define	PRIV_ASSERT(a, b)	__PRIV_ASSERT((a), (b))
    115 #define	PRIV_ISASSERT(a, b)	__PRIV_ISASSERT((a), (b))
    116 #endif
    117 
    118 #endif /* _KERNEL */
    119 
    120 #ifdef	__cplusplus
    121 }
    122 #endif
    123 
    124 #endif	/* _SYS_PRIV_IMPL_H */
    125