1 /*-
2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3 *
4 * Copyright (c) 2013 The FreeBSD Foundation
5 *
6 * This software was developed by Pawel Jakub Dawidek under sponsorship from
7 * the FreeBSD Foundation.
8 *
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
11 * are met:
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 *
18 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
19 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
22 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28 * SUCH DAMAGE.
29 */
30
31 #include <sys/cdefs.h>
32 __FBSDID("$FreeBSD$");
33
34 #include "opt_capsicum.h"
35
36 #include <sys/param.h>
37 #include <sys/capsicum.h>
38 #include <sys/filedesc.h>
39 #include <sys/limits.h>
40 #include <sys/malloc.h>
41 #include <sys/proc.h>
42 #include <sys/syscallsubr.h>
43 #include <sys/sysproto.h>
44
45 #include <security/audit/audit.h>
46
47 #include <compat/freebsd32/freebsd32_proto.h>
48
49 #ifdef CAPABILITIES
50
51 MALLOC_DECLARE(M_FILECAPS);
52
53 int
54 freebsd32_cap_ioctls_limit(struct thread *td,
55 struct freebsd32_cap_ioctls_limit_args *uap)
56 {
57 u_long *cmds;
58 uint32_t *cmds32;
59 size_t ncmds;
60 u_int i;
61 int error;
62
63 ncmds = uap->ncmds;
64
65 if (ncmds > 256) /* XXX: Is 256 sane? */
66 return (EINVAL);
67
68 if (ncmds == 0) {
69 cmds = NULL;
70 } else {
71 cmds32 = malloc(sizeof(cmds32[0]) * ncmds, M_FILECAPS, M_WAITOK);
72 error = copyin(uap->cmds, cmds32, sizeof(cmds32[0]) * ncmds);
73 if (error != 0) {
74 free(cmds32, M_FILECAPS);
75 return (error);
76 }
77 cmds = malloc(sizeof(cmds[0]) * ncmds, M_FILECAPS, M_WAITOK);
78 for (i = 0; i < ncmds; i++)
79 cmds[i] = cmds32[i];
80 free(cmds32, M_FILECAPS);
81 }
82
83 return (kern_cap_ioctls_limit(td, uap->fd, cmds, ncmds));
84 }
85
86 int
87 freebsd32_cap_ioctls_get(struct thread *td,
88 struct freebsd32_cap_ioctls_get_args *uap)
89 {
90 struct filedesc *fdp;
91 struct filedescent *fdep;
92 uint32_t *cmds32;
93 u_long *cmds;
94 size_t maxcmds;
95 int error, fd;
96 u_int i;
97
98 fd = uap->fd;
99 cmds32 = uap->cmds;
100 maxcmds = uap->maxcmds;
101
102 AUDIT_ARG_FD(fd);
103
104 fdp = td->td_proc->p_fd;
105 FILEDESC_SLOCK(fdp);
106
107 if (fget_noref(fdp, fd) == NULL) {
108 error = EBADF;
109 goto out;
110 }
111
112 /*
113 * If all ioctls are allowed (fde_nioctls == -1 && fde_ioctls == NULL)
114 * the only sane thing we can do is to not populate the given array and
115 * return CAP_IOCTLS_ALL (actually, INT_MAX).
116 */
117
118 fdep = &fdp->fd_ofiles[fd];
119 cmds = fdep->fde_ioctls;
120 if (cmds32 != NULL && cmds != NULL) {
121 for (i = 0; i < MIN(fdep->fde_nioctls, maxcmds); i++) {
122 error = suword32(&cmds32[i], cmds[i]);
123 if (error != 0)
124 goto out;
125 }
126 }
127 if (fdep->fde_nioctls == -1)
128 td->td_retval[0] = INT_MAX;
129 else
130 td->td_retval[0] = fdep->fde_nioctls;
131
132 error = 0;
133 out:
134 FILEDESC_SUNLOCK(fdp);
135 return (error);
136 }
137
138 #else /* !CAPABILITIES */
139
140 int
141 freebsd32_cap_ioctls_limit(struct thread *td,
142 struct freebsd32_cap_ioctls_limit_args *uap)
143 {
144
145 return (ENOSYS);
146 }
147
148 int
149 freebsd32_cap_ioctls_get(struct thread *td,
150 struct freebsd32_cap_ioctls_get_args *uap)
151 {
152
153 return (ENOSYS);
154 }
155
156 #endif /* CAPABILITIES */
Cache object: 2711d72be16c8add1505ba0d180ead8d
|