44 45#include "opt_posix.h" 46 47#include <sys/param.h> 48#include <sys/kernel.h> 49#include <sys/systm.h> 50#include <sys/sysctl.h> 51#include <sys/proc.h> 52#include <sys/lock.h> 53#include <sys/mutex.h> 54#include <sys/jail.h> 55#include <sys/smp.h> 56#include <sys/unistd.h> 57 58SYSCTL_NODE(, 0, sysctl, CTLFLAG_RW, 0, 59 "Sysctl internal magic"); 60SYSCTL_NODE(, CTL_KERN, kern, CTLFLAG_RW, 0, 61 "High kernel, proc, limits &c"); 62SYSCTL_NODE(, CTL_VM, vm, CTLFLAG_RW, 0, 63 "Virtual memory"); 64SYSCTL_NODE(, CTL_VFS, vfs, CTLFLAG_RW, 0, 65 "File system"); 66SYSCTL_NODE(, CTL_NET, net, CTLFLAG_RW, 0, 67 "Network, (see socket.h)"); 68SYSCTL_NODE(, CTL_DEBUG, debug, CTLFLAG_RW, 0, 69 "Debugging"); 70SYSCTL_NODE(_debug, OID_AUTO, sizeof, CTLFLAG_RW, 0, 71 "Sizeof various things"); 72SYSCTL_NODE(, CTL_HW, hw, CTLFLAG_RW, 0, 73 "hardware"); 74SYSCTL_NODE(, CTL_MACHDEP, machdep, CTLFLAG_RW, 0, 75 "machine dependent"); 76SYSCTL_NODE(, CTL_USER, user, CTLFLAG_RW, 0, 77 "user-level"); 78SYSCTL_NODE(, CTL_P1003_1B, p1003_1b, CTLFLAG_RW, 0, 79 "p1003_1b, (see p1003_1b.h)"); 80 81SYSCTL_NODE(, OID_AUTO, compat, CTLFLAG_RW, 0, 82 "Compatibility code"); 83SYSCTL_NODE(, OID_AUTO, security, CTLFLAG_RW, 0, 84 "Security"); 85#ifdef REGRESSION 86SYSCTL_NODE(, OID_AUTO, regression, CTLFLAG_RW, 0, 87 "Regression test MIB"); 88#endif 89 90SYSCTL_STRING(_kern, OID_AUTO, ident, CTLFLAG_RD, 91 kern_ident, 0, "Kernel identifier"); 92 93SYSCTL_STRING(_kern, KERN_OSRELEASE, osrelease, CTLFLAG_RD, 94 osrelease, 0, "Operating system release"); 95 96SYSCTL_INT(_kern, KERN_OSREV, osrevision, CTLFLAG_RD, 97 0, BSD, "Operating system revision"); 98 99SYSCTL_STRING(_kern, KERN_VERSION, version, CTLFLAG_RD, 100 version, 0, "Kernel version"); 101 102SYSCTL_STRING(_kern, KERN_OSTYPE, ostype, CTLFLAG_RD, 103 ostype, 0, "Operating system type"); 104
| 44 45#include "opt_posix.h" 46 47#include <sys/param.h> 48#include <sys/kernel.h> 49#include <sys/systm.h> 50#include <sys/sysctl.h> 51#include <sys/proc.h> 52#include <sys/lock.h> 53#include <sys/mutex.h> 54#include <sys/jail.h> 55#include <sys/smp.h> 56#include <sys/unistd.h> 57 58SYSCTL_NODE(, 0, sysctl, CTLFLAG_RW, 0, 59 "Sysctl internal magic"); 60SYSCTL_NODE(, CTL_KERN, kern, CTLFLAG_RW, 0, 61 "High kernel, proc, limits &c"); 62SYSCTL_NODE(, CTL_VM, vm, CTLFLAG_RW, 0, 63 "Virtual memory"); 64SYSCTL_NODE(, CTL_VFS, vfs, CTLFLAG_RW, 0, 65 "File system"); 66SYSCTL_NODE(, CTL_NET, net, CTLFLAG_RW, 0, 67 "Network, (see socket.h)"); 68SYSCTL_NODE(, CTL_DEBUG, debug, CTLFLAG_RW, 0, 69 "Debugging"); 70SYSCTL_NODE(_debug, OID_AUTO, sizeof, CTLFLAG_RW, 0, 71 "Sizeof various things"); 72SYSCTL_NODE(, CTL_HW, hw, CTLFLAG_RW, 0, 73 "hardware"); 74SYSCTL_NODE(, CTL_MACHDEP, machdep, CTLFLAG_RW, 0, 75 "machine dependent"); 76SYSCTL_NODE(, CTL_USER, user, CTLFLAG_RW, 0, 77 "user-level"); 78SYSCTL_NODE(, CTL_P1003_1B, p1003_1b, CTLFLAG_RW, 0, 79 "p1003_1b, (see p1003_1b.h)"); 80 81SYSCTL_NODE(, OID_AUTO, compat, CTLFLAG_RW, 0, 82 "Compatibility code"); 83SYSCTL_NODE(, OID_AUTO, security, CTLFLAG_RW, 0, 84 "Security"); 85#ifdef REGRESSION 86SYSCTL_NODE(, OID_AUTO, regression, CTLFLAG_RW, 0, 87 "Regression test MIB"); 88#endif 89 90SYSCTL_STRING(_kern, OID_AUTO, ident, CTLFLAG_RD, 91 kern_ident, 0, "Kernel identifier"); 92 93SYSCTL_STRING(_kern, KERN_OSRELEASE, osrelease, CTLFLAG_RD, 94 osrelease, 0, "Operating system release"); 95 96SYSCTL_INT(_kern, KERN_OSREV, osrevision, CTLFLAG_RD, 97 0, BSD, "Operating system revision"); 98 99SYSCTL_STRING(_kern, KERN_VERSION, version, CTLFLAG_RD, 100 version, 0, "Kernel version"); 101 102SYSCTL_STRING(_kern, KERN_OSTYPE, ostype, CTLFLAG_RD, 103 ostype, 0, "Operating system type"); 104
|
108 109SYSCTL_INT(_kern, KERN_MAXPROC, maxproc, CTLFLAG_RD, 110 &maxproc, 0, "Maximum number of processes"); 111 112SYSCTL_INT(_kern, KERN_MAXPROCPERUID, maxprocperuid, CTLFLAG_RW, 113 &maxprocperuid, 0, "Maximum processes allowed per userid"); 114 115SYSCTL_INT(_kern, OID_AUTO, maxusers, CTLFLAG_RD, 116 &maxusers, 0, "Hint for kernel tuning"); 117 118SYSCTL_INT(_kern, KERN_ARGMAX, argmax, CTLFLAG_RD, 119 0, ARG_MAX, "Maximum bytes of argument to execve(2)"); 120 121SYSCTL_INT(_kern, KERN_POSIX1, posix1version, CTLFLAG_RD, 122 0, _POSIX_VERSION, "Version of POSIX attempting to comply to"); 123 124SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RD, 125 0, NGROUPS_MAX, "Maximum number of groups a user can belong to"); 126 127SYSCTL_INT(_kern, KERN_JOB_CONTROL, job_control, CTLFLAG_RD, 128 0, 1, "Whether job control is available"); 129 130#ifdef _POSIX_SAVED_IDS 131SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD, 132 0, 1, "Whether saved set-group/user ID is available"); 133#else 134SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD, 135 0, 0, "Whether saved set-group/user ID is available"); 136#endif 137 138char kernelname[MAXPATHLEN] = "/kernel"; /* XXX bloat */ 139 140SYSCTL_STRING(_kern, KERN_BOOTFILE, bootfile, CTLFLAG_RW, 141 kernelname, sizeof kernelname, "Name of kernel file booted"); 142 143#ifdef SMP 144SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD, 145 &mp_ncpus, 0, "Number of active CPUs"); 146#else 147SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD, 148 0, 1, "Number of active CPUs"); 149#endif 150 151SYSCTL_INT(_hw, HW_BYTEORDER, byteorder, CTLFLAG_RD, 152 0, BYTE_ORDER, "System byte order"); 153 154SYSCTL_INT(_hw, HW_PAGESIZE, pagesize, CTLFLAG_RD, 155 0, PAGE_SIZE, "System memory page size"); 156 157static int 158sysctl_hw_physmem(SYSCTL_HANDLER_ARGS) 159{ 160 u_long val; 161 162 val = ctob(physmem); 163 return (sysctl_handle_long(oidp, &val, 0, req)); 164} 165 166SYSCTL_PROC(_hw, HW_PHYSMEM, physmem, CTLTYPE_ULONG | CTLFLAG_RD, 167 0, 0, sysctl_hw_physmem, "LU", ""); 168 169static int 170sysctl_hw_usermem(SYSCTL_HANDLER_ARGS) 171{ 172 u_long val; 173 174 val = ctob(physmem - cnt.v_wire_count); 175 return (sysctl_handle_long(oidp, &val, 0, req)); 176} 177 178SYSCTL_PROC(_hw, HW_USERMEM, usermem, CTLTYPE_ULONG | CTLFLAG_RD, 179 0, 0, sysctl_hw_usermem, "LU", ""); 180 181SYSCTL_ULONG(_hw, OID_AUTO, availpages, CTLFLAG_RD, &physmem, 0, ""); 182 183static char machine_arch[] = MACHINE_ARCH; 184SYSCTL_STRING(_hw, HW_MACHINE_ARCH, machine_arch, CTLFLAG_RD, 185 machine_arch, 0, "System architecture"); 186 187char hostname[MAXHOSTNAMELEN]; 188 189static int 190sysctl_hostname(SYSCTL_HANDLER_ARGS) 191{ 192 struct prison *pr; 193 char tmphostname[MAXHOSTNAMELEN]; 194 int error; 195 196 pr = req->td->td_ucred->cr_prison; 197 if (pr != NULL) { 198 if (!jail_set_hostname_allowed && req->newptr) 199 return (EPERM); 200 /* 201 * Process is in jail, so make a local copy of jail 202 * hostname to get/set so we don't have to hold the jail 203 * mutex during the sysctl copyin/copyout activities. 204 */ 205 mtx_lock(&pr->pr_mtx); 206 bcopy(pr->pr_host, tmphostname, MAXHOSTNAMELEN); 207 mtx_unlock(&pr->pr_mtx); 208 209 error = sysctl_handle_string(oidp, tmphostname, 210 sizeof pr->pr_host, req); 211 212 if (req->newptr != NULL && error == 0) { 213 /* 214 * Copy the locally set hostname to the jail, if 215 * appropriate. 216 */ 217 mtx_lock(&pr->pr_mtx); 218 bcopy(tmphostname, pr->pr_host, MAXHOSTNAMELEN); 219 mtx_unlock(&pr->pr_mtx); 220 } 221 } else 222 error = sysctl_handle_string(oidp, 223 hostname, sizeof hostname, req); 224 return (error); 225} 226 227SYSCTL_PROC(_kern, KERN_HOSTNAME, hostname, 228 CTLTYPE_STRING|CTLFLAG_RW|CTLFLAG_PRISON, 229 0, 0, sysctl_hostname, "A", "Hostname"); 230 231static int regression_securelevel_nonmonotonic = 0; 232 233#ifdef REGRESSION 234SYSCTL_INT(_regression, OID_AUTO, securelevel_nonmonotonic, CTLFLAG_RW, 235 ®ression_securelevel_nonmonotonic, 0, "securelevel may be lowered"); 236#endif 237 238int securelevel = -1; 239static struct mtx securelevel_mtx; 240 241MTX_SYSINIT(securelevel_lock, &securelevel_mtx, "securelevel mutex lock", 242 MTX_DEF); 243 244static int 245sysctl_kern_securelvl(SYSCTL_HANDLER_ARGS) 246{ 247 struct prison *pr; 248 int error, level; 249 250 pr = req->td->td_ucred->cr_prison; 251 252 /* 253 * If the process is in jail, return the maximum of the global and 254 * local levels; otherwise, return the global level. 255 */ 256 if (pr != NULL) { 257 mtx_lock(&pr->pr_mtx); 258 level = imax(securelevel, pr->pr_securelevel); 259 mtx_unlock(&pr->pr_mtx); 260 } else 261 level = securelevel; 262 error = sysctl_handle_int(oidp, &level, 0, req); 263 if (error || !req->newptr) 264 return (error); 265 /* 266 * Permit update only if the new securelevel exceeds the 267 * global level, and local level if any. 268 */ 269 if (pr != NULL) { 270 mtx_lock(&pr->pr_mtx); 271 if (!regression_securelevel_nonmonotonic && 272 (level < imax(securelevel, pr->pr_securelevel))) { 273 mtx_unlock(&pr->pr_mtx); 274 return (EPERM); 275 } 276 pr->pr_securelevel = level; 277 mtx_unlock(&pr->pr_mtx); 278 } else { 279 mtx_lock(&securelevel_mtx); 280 if (!regression_securelevel_nonmonotonic && 281 (level < securelevel)) { 282 mtx_unlock(&securelevel_mtx); 283 return (EPERM); 284 } 285 securelevel = level; 286 mtx_unlock(&securelevel_mtx); 287 } 288 return (error); 289} 290 291SYSCTL_PROC(_kern, KERN_SECURELVL, securelevel, 292 CTLTYPE_INT|CTLFLAG_RW|CTLFLAG_PRISON, 0, 0, sysctl_kern_securelvl, 293 "I", "Current secure level"); 294 295char domainname[MAXHOSTNAMELEN]; 296SYSCTL_STRING(_kern, KERN_NISDOMAINNAME, domainname, CTLFLAG_RW, 297 &domainname, sizeof(domainname), "Name of the current YP/NIS domain"); 298 299u_long hostid; 300SYSCTL_ULONG(_kern, KERN_HOSTID, hostid, CTLFLAG_RW, &hostid, 0, "Host ID"); 301 302/* 303 * This is really cheating. These actually live in the libc, something 304 * which I'm not quite sure is a good idea anyway, but in order for 305 * getnext and friends to actually work, we define dummies here. 306 */ 307SYSCTL_STRING(_user, USER_CS_PATH, cs_path, CTLFLAG_RD, 308 "", 0, "PATH that finds all the standard utilities"); 309SYSCTL_INT(_user, USER_BC_BASE_MAX, bc_base_max, CTLFLAG_RD, 310 0, 0, "Max ibase/obase values in bc(1)"); 311SYSCTL_INT(_user, USER_BC_DIM_MAX, bc_dim_max, CTLFLAG_RD, 312 0, 0, "Max array size in bc(1)"); 313SYSCTL_INT(_user, USER_BC_SCALE_MAX, bc_scale_max, CTLFLAG_RD, 314 0, 0, "Max scale value in bc(1)"); 315SYSCTL_INT(_user, USER_BC_STRING_MAX, bc_string_max, CTLFLAG_RD, 316 0, 0, "Max string length in bc(1)"); 317SYSCTL_INT(_user, USER_COLL_WEIGHTS_MAX, coll_weights_max, CTLFLAG_RD, 318 0, 0, "Maximum number of weights assigned to an LC_COLLATE locale entry"); 319SYSCTL_INT(_user, USER_EXPR_NEST_MAX, expr_nest_max, CTLFLAG_RD, 0, 0, ""); 320SYSCTL_INT(_user, USER_LINE_MAX, line_max, CTLFLAG_RD, 321 0, 0, "Max length (bytes) of a text-processing utility's input line"); 322SYSCTL_INT(_user, USER_RE_DUP_MAX, re_dup_max, CTLFLAG_RD, 323 0, 0, "Maximum number of repeats of a regexp permitted"); 324SYSCTL_INT(_user, USER_POSIX2_VERSION, posix2_version, CTLFLAG_RD, 325 0, 0, 326 "The version of POSIX 1003.2 with which the system attempts to comply"); 327SYSCTL_INT(_user, USER_POSIX2_C_BIND, posix2_c_bind, CTLFLAG_RD, 328 0, 0, "Whether C development supports the C bindings option"); 329SYSCTL_INT(_user, USER_POSIX2_C_DEV, posix2_c_dev, CTLFLAG_RD, 330 0, 0, "Whether system supports the C development utilities option"); 331SYSCTL_INT(_user, USER_POSIX2_CHAR_TERM, posix2_char_term, CTLFLAG_RD, 332 0, 0, ""); 333SYSCTL_INT(_user, USER_POSIX2_FORT_DEV, posix2_fort_dev, CTLFLAG_RD, 334 0, 0, "Whether system supports FORTRAN development utilities"); 335SYSCTL_INT(_user, USER_POSIX2_FORT_RUN, posix2_fort_run, CTLFLAG_RD, 336 0, 0, "Whether system supports FORTRAN runtime utilities"); 337SYSCTL_INT(_user, USER_POSIX2_LOCALEDEF, posix2_localedef, CTLFLAG_RD, 338 0, 0, "Whether system supports creation of locales"); 339SYSCTL_INT(_user, USER_POSIX2_SW_DEV, posix2_sw_dev, CTLFLAG_RD, 340 0, 0, "Whether system supports software development utilities"); 341SYSCTL_INT(_user, USER_POSIX2_UPE, posix2_upe, CTLFLAG_RD, 342 0, 0, "Whether system supports the user portability utilities"); 343SYSCTL_INT(_user, USER_STREAM_MAX, stream_max, CTLFLAG_RD, 344 0, 0, "Min Maximum number of streams a process may have open at one time"); 345SYSCTL_INT(_user, USER_TZNAME_MAX, tzname_max, CTLFLAG_RD, 346 0, 0, "Min Maximum number of types supported for timezone names"); 347 348#include <sys/vnode.h> 349SYSCTL_INT(_debug_sizeof, OID_AUTO, vnode, CTLFLAG_RD, 350 0, sizeof(struct vnode), "sizeof(struct vnode)"); 351 352SYSCTL_INT(_debug_sizeof, OID_AUTO, proc, CTLFLAG_RD, 353 0, sizeof(struct proc), "sizeof(struct proc)"); 354 355#include <sys/conf.h> 356SYSCTL_INT(_debug_sizeof, OID_AUTO, cdev, CTLFLAG_RD, 357 0, sizeof(struct cdev), "sizeof(struct cdev)"); 358 359#include <sys/bio.h> 360#include <sys/buf.h> 361SYSCTL_INT(_debug_sizeof, OID_AUTO, bio, CTLFLAG_RD, 362 0, sizeof(struct bio), "sizeof(struct bio)"); 363SYSCTL_INT(_debug_sizeof, OID_AUTO, buf, CTLFLAG_RD, 364 0, sizeof(struct buf), "sizeof(struct buf)"); 365 366#include <sys/user.h> 367SYSCTL_INT(_debug_sizeof, OID_AUTO, kinfo_proc, CTLFLAG_RD, 368 0, sizeof(struct kinfo_proc), "sizeof(struct kinfo_proc)"); 369 370/* XXX compatibility, remove for 6.0 */ 371#include <sys/imgact.h> 372#include <sys/imgact_elf.h> 373SYSCTL_INT(_kern, OID_AUTO, fallback_elf_brand, CTLFLAG_RW, 374 &__elfN(fallback_brand), sizeof(__elfN(fallback_brand)), 375 "compatibility for kern.fallback_elf_brand");
| 112 113SYSCTL_INT(_kern, KERN_MAXPROC, maxproc, CTLFLAG_RD, 114 &maxproc, 0, "Maximum number of processes"); 115 116SYSCTL_INT(_kern, KERN_MAXPROCPERUID, maxprocperuid, CTLFLAG_RW, 117 &maxprocperuid, 0, "Maximum processes allowed per userid"); 118 119SYSCTL_INT(_kern, OID_AUTO, maxusers, CTLFLAG_RD, 120 &maxusers, 0, "Hint for kernel tuning"); 121 122SYSCTL_INT(_kern, KERN_ARGMAX, argmax, CTLFLAG_RD, 123 0, ARG_MAX, "Maximum bytes of argument to execve(2)"); 124 125SYSCTL_INT(_kern, KERN_POSIX1, posix1version, CTLFLAG_RD, 126 0, _POSIX_VERSION, "Version of POSIX attempting to comply to"); 127 128SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RD, 129 0, NGROUPS_MAX, "Maximum number of groups a user can belong to"); 130 131SYSCTL_INT(_kern, KERN_JOB_CONTROL, job_control, CTLFLAG_RD, 132 0, 1, "Whether job control is available"); 133 134#ifdef _POSIX_SAVED_IDS 135SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD, 136 0, 1, "Whether saved set-group/user ID is available"); 137#else 138SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD, 139 0, 0, "Whether saved set-group/user ID is available"); 140#endif 141 142char kernelname[MAXPATHLEN] = "/kernel"; /* XXX bloat */ 143 144SYSCTL_STRING(_kern, KERN_BOOTFILE, bootfile, CTLFLAG_RW, 145 kernelname, sizeof kernelname, "Name of kernel file booted"); 146 147#ifdef SMP 148SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD, 149 &mp_ncpus, 0, "Number of active CPUs"); 150#else 151SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD, 152 0, 1, "Number of active CPUs"); 153#endif 154 155SYSCTL_INT(_hw, HW_BYTEORDER, byteorder, CTLFLAG_RD, 156 0, BYTE_ORDER, "System byte order"); 157 158SYSCTL_INT(_hw, HW_PAGESIZE, pagesize, CTLFLAG_RD, 159 0, PAGE_SIZE, "System memory page size"); 160 161static int 162sysctl_hw_physmem(SYSCTL_HANDLER_ARGS) 163{ 164 u_long val; 165 166 val = ctob(physmem); 167 return (sysctl_handle_long(oidp, &val, 0, req)); 168} 169 170SYSCTL_PROC(_hw, HW_PHYSMEM, physmem, CTLTYPE_ULONG | CTLFLAG_RD, 171 0, 0, sysctl_hw_physmem, "LU", ""); 172 173static int 174sysctl_hw_usermem(SYSCTL_HANDLER_ARGS) 175{ 176 u_long val; 177 178 val = ctob(physmem - cnt.v_wire_count); 179 return (sysctl_handle_long(oidp, &val, 0, req)); 180} 181 182SYSCTL_PROC(_hw, HW_USERMEM, usermem, CTLTYPE_ULONG | CTLFLAG_RD, 183 0, 0, sysctl_hw_usermem, "LU", ""); 184 185SYSCTL_ULONG(_hw, OID_AUTO, availpages, CTLFLAG_RD, &physmem, 0, ""); 186 187static char machine_arch[] = MACHINE_ARCH; 188SYSCTL_STRING(_hw, HW_MACHINE_ARCH, machine_arch, CTLFLAG_RD, 189 machine_arch, 0, "System architecture"); 190 191char hostname[MAXHOSTNAMELEN]; 192 193static int 194sysctl_hostname(SYSCTL_HANDLER_ARGS) 195{ 196 struct prison *pr; 197 char tmphostname[MAXHOSTNAMELEN]; 198 int error; 199 200 pr = req->td->td_ucred->cr_prison; 201 if (pr != NULL) { 202 if (!jail_set_hostname_allowed && req->newptr) 203 return (EPERM); 204 /* 205 * Process is in jail, so make a local copy of jail 206 * hostname to get/set so we don't have to hold the jail 207 * mutex during the sysctl copyin/copyout activities. 208 */ 209 mtx_lock(&pr->pr_mtx); 210 bcopy(pr->pr_host, tmphostname, MAXHOSTNAMELEN); 211 mtx_unlock(&pr->pr_mtx); 212 213 error = sysctl_handle_string(oidp, tmphostname, 214 sizeof pr->pr_host, req); 215 216 if (req->newptr != NULL && error == 0) { 217 /* 218 * Copy the locally set hostname to the jail, if 219 * appropriate. 220 */ 221 mtx_lock(&pr->pr_mtx); 222 bcopy(tmphostname, pr->pr_host, MAXHOSTNAMELEN); 223 mtx_unlock(&pr->pr_mtx); 224 } 225 } else 226 error = sysctl_handle_string(oidp, 227 hostname, sizeof hostname, req); 228 return (error); 229} 230 231SYSCTL_PROC(_kern, KERN_HOSTNAME, hostname, 232 CTLTYPE_STRING|CTLFLAG_RW|CTLFLAG_PRISON, 233 0, 0, sysctl_hostname, "A", "Hostname"); 234 235static int regression_securelevel_nonmonotonic = 0; 236 237#ifdef REGRESSION 238SYSCTL_INT(_regression, OID_AUTO, securelevel_nonmonotonic, CTLFLAG_RW, 239 ®ression_securelevel_nonmonotonic, 0, "securelevel may be lowered"); 240#endif 241 242int securelevel = -1; 243static struct mtx securelevel_mtx; 244 245MTX_SYSINIT(securelevel_lock, &securelevel_mtx, "securelevel mutex lock", 246 MTX_DEF); 247 248static int 249sysctl_kern_securelvl(SYSCTL_HANDLER_ARGS) 250{ 251 struct prison *pr; 252 int error, level; 253 254 pr = req->td->td_ucred->cr_prison; 255 256 /* 257 * If the process is in jail, return the maximum of the global and 258 * local levels; otherwise, return the global level. 259 */ 260 if (pr != NULL) { 261 mtx_lock(&pr->pr_mtx); 262 level = imax(securelevel, pr->pr_securelevel); 263 mtx_unlock(&pr->pr_mtx); 264 } else 265 level = securelevel; 266 error = sysctl_handle_int(oidp, &level, 0, req); 267 if (error || !req->newptr) 268 return (error); 269 /* 270 * Permit update only if the new securelevel exceeds the 271 * global level, and local level if any. 272 */ 273 if (pr != NULL) { 274 mtx_lock(&pr->pr_mtx); 275 if (!regression_securelevel_nonmonotonic && 276 (level < imax(securelevel, pr->pr_securelevel))) { 277 mtx_unlock(&pr->pr_mtx); 278 return (EPERM); 279 } 280 pr->pr_securelevel = level; 281 mtx_unlock(&pr->pr_mtx); 282 } else { 283 mtx_lock(&securelevel_mtx); 284 if (!regression_securelevel_nonmonotonic && 285 (level < securelevel)) { 286 mtx_unlock(&securelevel_mtx); 287 return (EPERM); 288 } 289 securelevel = level; 290 mtx_unlock(&securelevel_mtx); 291 } 292 return (error); 293} 294 295SYSCTL_PROC(_kern, KERN_SECURELVL, securelevel, 296 CTLTYPE_INT|CTLFLAG_RW|CTLFLAG_PRISON, 0, 0, sysctl_kern_securelvl, 297 "I", "Current secure level"); 298 299char domainname[MAXHOSTNAMELEN]; 300SYSCTL_STRING(_kern, KERN_NISDOMAINNAME, domainname, CTLFLAG_RW, 301 &domainname, sizeof(domainname), "Name of the current YP/NIS domain"); 302 303u_long hostid; 304SYSCTL_ULONG(_kern, KERN_HOSTID, hostid, CTLFLAG_RW, &hostid, 0, "Host ID"); 305 306/* 307 * This is really cheating. These actually live in the libc, something 308 * which I'm not quite sure is a good idea anyway, but in order for 309 * getnext and friends to actually work, we define dummies here. 310 */ 311SYSCTL_STRING(_user, USER_CS_PATH, cs_path, CTLFLAG_RD, 312 "", 0, "PATH that finds all the standard utilities"); 313SYSCTL_INT(_user, USER_BC_BASE_MAX, bc_base_max, CTLFLAG_RD, 314 0, 0, "Max ibase/obase values in bc(1)"); 315SYSCTL_INT(_user, USER_BC_DIM_MAX, bc_dim_max, CTLFLAG_RD, 316 0, 0, "Max array size in bc(1)"); 317SYSCTL_INT(_user, USER_BC_SCALE_MAX, bc_scale_max, CTLFLAG_RD, 318 0, 0, "Max scale value in bc(1)"); 319SYSCTL_INT(_user, USER_BC_STRING_MAX, bc_string_max, CTLFLAG_RD, 320 0, 0, "Max string length in bc(1)"); 321SYSCTL_INT(_user, USER_COLL_WEIGHTS_MAX, coll_weights_max, CTLFLAG_RD, 322 0, 0, "Maximum number of weights assigned to an LC_COLLATE locale entry"); 323SYSCTL_INT(_user, USER_EXPR_NEST_MAX, expr_nest_max, CTLFLAG_RD, 0, 0, ""); 324SYSCTL_INT(_user, USER_LINE_MAX, line_max, CTLFLAG_RD, 325 0, 0, "Max length (bytes) of a text-processing utility's input line"); 326SYSCTL_INT(_user, USER_RE_DUP_MAX, re_dup_max, CTLFLAG_RD, 327 0, 0, "Maximum number of repeats of a regexp permitted"); 328SYSCTL_INT(_user, USER_POSIX2_VERSION, posix2_version, CTLFLAG_RD, 329 0, 0, 330 "The version of POSIX 1003.2 with which the system attempts to comply"); 331SYSCTL_INT(_user, USER_POSIX2_C_BIND, posix2_c_bind, CTLFLAG_RD, 332 0, 0, "Whether C development supports the C bindings option"); 333SYSCTL_INT(_user, USER_POSIX2_C_DEV, posix2_c_dev, CTLFLAG_RD, 334 0, 0, "Whether system supports the C development utilities option"); 335SYSCTL_INT(_user, USER_POSIX2_CHAR_TERM, posix2_char_term, CTLFLAG_RD, 336 0, 0, ""); 337SYSCTL_INT(_user, USER_POSIX2_FORT_DEV, posix2_fort_dev, CTLFLAG_RD, 338 0, 0, "Whether system supports FORTRAN development utilities"); 339SYSCTL_INT(_user, USER_POSIX2_FORT_RUN, posix2_fort_run, CTLFLAG_RD, 340 0, 0, "Whether system supports FORTRAN runtime utilities"); 341SYSCTL_INT(_user, USER_POSIX2_LOCALEDEF, posix2_localedef, CTLFLAG_RD, 342 0, 0, "Whether system supports creation of locales"); 343SYSCTL_INT(_user, USER_POSIX2_SW_DEV, posix2_sw_dev, CTLFLAG_RD, 344 0, 0, "Whether system supports software development utilities"); 345SYSCTL_INT(_user, USER_POSIX2_UPE, posix2_upe, CTLFLAG_RD, 346 0, 0, "Whether system supports the user portability utilities"); 347SYSCTL_INT(_user, USER_STREAM_MAX, stream_max, CTLFLAG_RD, 348 0, 0, "Min Maximum number of streams a process may have open at one time"); 349SYSCTL_INT(_user, USER_TZNAME_MAX, tzname_max, CTLFLAG_RD, 350 0, 0, "Min Maximum number of types supported for timezone names"); 351 352#include <sys/vnode.h> 353SYSCTL_INT(_debug_sizeof, OID_AUTO, vnode, CTLFLAG_RD, 354 0, sizeof(struct vnode), "sizeof(struct vnode)"); 355 356SYSCTL_INT(_debug_sizeof, OID_AUTO, proc, CTLFLAG_RD, 357 0, sizeof(struct proc), "sizeof(struct proc)"); 358 359#include <sys/conf.h> 360SYSCTL_INT(_debug_sizeof, OID_AUTO, cdev, CTLFLAG_RD, 361 0, sizeof(struct cdev), "sizeof(struct cdev)"); 362 363#include <sys/bio.h> 364#include <sys/buf.h> 365SYSCTL_INT(_debug_sizeof, OID_AUTO, bio, CTLFLAG_RD, 366 0, sizeof(struct bio), "sizeof(struct bio)"); 367SYSCTL_INT(_debug_sizeof, OID_AUTO, buf, CTLFLAG_RD, 368 0, sizeof(struct buf), "sizeof(struct buf)"); 369 370#include <sys/user.h> 371SYSCTL_INT(_debug_sizeof, OID_AUTO, kinfo_proc, CTLFLAG_RD, 372 0, sizeof(struct kinfo_proc), "sizeof(struct kinfo_proc)"); 373 374/* XXX compatibility, remove for 6.0 */ 375#include <sys/imgact.h> 376#include <sys/imgact_elf.h> 377SYSCTL_INT(_kern, OID_AUTO, fallback_elf_brand, CTLFLAG_RW, 378 &__elfN(fallback_brand), sizeof(__elfN(fallback_brand)), 379 "compatibility for kern.fallback_elf_brand");
|