41 */ 42 43#include "opt_posix.h" 44 45#include <sys/param.h> 46#include <sys/kernel.h> 47#include <sys/systm.h> 48#include <sys/sysctl.h> 49#include <sys/proc.h> 50#include <sys/lock.h> 51#include <sys/mutex.h> 52#include <sys/jail.h> 53#include <sys/smp.h> 54#include <sys/unistd.h> 55 56SYSCTL_NODE(, 0, sysctl, CTLFLAG_RW, 0, 57 "Sysctl internal magic"); 58SYSCTL_NODE(, CTL_KERN, kern, CTLFLAG_RW, 0, 59 "High kernel, proc, limits &c"); 60SYSCTL_NODE(, CTL_VM, vm, CTLFLAG_RW, 0, 61 "Virtual memory"); 62SYSCTL_NODE(, CTL_VFS, vfs, CTLFLAG_RW, 0, 63 "File system"); 64SYSCTL_NODE(, CTL_NET, net, CTLFLAG_RW, 0, 65 "Network, (see socket.h)"); 66SYSCTL_NODE(, CTL_DEBUG, debug, CTLFLAG_RW, 0, 67 "Debugging"); 68SYSCTL_NODE(_debug, OID_AUTO, sizeof, CTLFLAG_RW, 0, 69 "Sizeof various things"); 70SYSCTL_NODE(, CTL_HW, hw, CTLFLAG_RW, 0, 71 "hardware"); 72SYSCTL_NODE(, CTL_MACHDEP, machdep, CTLFLAG_RW, 0, 73 "machine dependent"); 74SYSCTL_NODE(, CTL_USER, user, CTLFLAG_RW, 0, 75 "user-level"); 76SYSCTL_NODE(, CTL_P1003_1B, p1003_1b, CTLFLAG_RW, 0, 77 "p1003_1b, (see p1003_1b.h)"); 78 79SYSCTL_NODE(, OID_AUTO, compat, CTLFLAG_RW, 0, 80 "Compatibility code"); 81SYSCTL_NODE(, OID_AUTO, security, CTLFLAG_RW, 0, 82 "Security"); 83#ifdef REGRESSION 84SYSCTL_NODE(, OID_AUTO, regression, CTLFLAG_RW, 0, 85 "Regression test MIB"); 86#endif 87 88SYSCTL_STRING(_kern, KERN_OSRELEASE, osrelease, CTLFLAG_RD, 89 osrelease, 0, "Operating system release"); 90 91SYSCTL_INT(_kern, KERN_OSREV, osrevision, CTLFLAG_RD, 92 0, BSD, "Operating system revision"); 93 94SYSCTL_STRING(_kern, KERN_VERSION, version, CTLFLAG_RD, 95 version, 0, "Kernel version"); 96 97SYSCTL_STRING(_kern, KERN_OSTYPE, ostype, CTLFLAG_RD, 98 ostype, 0, "Operating system type"); 99 100extern int osreldate; 101SYSCTL_INT(_kern, KERN_OSRELDATE, osreldate, CTLFLAG_RD, 102 &osreldate, 0, "Operating system release date"); 103 104SYSCTL_INT(_kern, KERN_MAXPROC, maxproc, CTLFLAG_RD, 105 &maxproc, 0, "Maximum number of processes"); 106 107SYSCTL_INT(_kern, KERN_MAXPROCPERUID, maxprocperuid, CTLFLAG_RW, 108 &maxprocperuid, 0, "Maximum processes allowed per userid"); 109 110SYSCTL_INT(_kern, OID_AUTO, maxusers, CTLFLAG_RD, 111 &maxusers, 0, "Hint for kernel tuning"); 112 113SYSCTL_INT(_kern, KERN_ARGMAX, argmax, CTLFLAG_RD, 114 0, ARG_MAX, "Maximum bytes of argument to execve(2)"); 115 116SYSCTL_INT(_kern, KERN_POSIX1, posix1version, CTLFLAG_RD, 117 0, _POSIX_VERSION, "Version of POSIX attempting to comply to"); 118 119SYSCTL_INT(_kern, KERN_NGROUPS, ngroups, CTLFLAG_RD, 120 0, NGROUPS_MAX, "Maximum number of groups a user can belong to"); 121 122SYSCTL_INT(_kern, KERN_JOB_CONTROL, job_control, CTLFLAG_RD, 123 0, 1, "Whether job control is available"); 124 125#ifdef _POSIX_SAVED_IDS 126SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD, 127 0, 1, "Whether saved set-group/user ID is available"); 128#else 129SYSCTL_INT(_kern, KERN_SAVED_IDS, saved_ids, CTLFLAG_RD, 130 0, 0, "Whether saved set-group/user ID is available"); 131#endif 132 133char kernelname[MAXPATHLEN] = "/kernel"; /* XXX bloat */ 134 135SYSCTL_STRING(_kern, KERN_BOOTFILE, bootfile, CTLFLAG_RW, 136 kernelname, sizeof kernelname, "Name of kernel file booted"); 137 138#ifdef SMP 139SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD, 140 &mp_ncpus, 0, "Number of active CPUs"); 141#else 142SYSCTL_INT(_hw, HW_NCPU, ncpu, CTLFLAG_RD, 143 0, 1, "Number of active CPUs"); 144#endif 145 146SYSCTL_INT(_hw, HW_BYTEORDER, byteorder, CTLFLAG_RD, 147 0, BYTE_ORDER, "System byte order"); 148 149SYSCTL_INT(_hw, HW_PAGESIZE, pagesize, CTLFLAG_RD, 150 0, PAGE_SIZE, "System memory page size"); 151 152static int 153sysctl_hw_physmem(SYSCTL_HANDLER_ARGS) 154{ 155 u_long val; 156 157 val = ctob(physmem); 158 return (sysctl_handle_long(oidp, &val, 0, req)); 159} 160 161SYSCTL_PROC(_hw, HW_PHYSMEM, physmem, CTLTYPE_ULONG | CTLFLAG_RD, 162 0, 0, sysctl_hw_physmem, "LU", ""); 163 164static int 165sysctl_hw_usermem(SYSCTL_HANDLER_ARGS) 166{ 167 u_long val; 168 169 val = ctob(physmem - cnt.v_wire_count); 170 return (sysctl_handle_long(oidp, &val, 0, req)); 171} 172 173SYSCTL_PROC(_hw, HW_USERMEM, usermem, CTLTYPE_ULONG | CTLFLAG_RD, 174 0, 0, sysctl_hw_usermem, "LU", ""); 175 176SYSCTL_ULONG(_hw, OID_AUTO, availpages, CTLFLAG_RD, &physmem, 0, ""); 177 178static char machine_arch[] = MACHINE_ARCH; 179SYSCTL_STRING(_hw, HW_MACHINE_ARCH, machine_arch, CTLFLAG_RD, 180 machine_arch, 0, "System architecture"); 181 182char hostname[MAXHOSTNAMELEN]; 183 184static int 185sysctl_hostname(SYSCTL_HANDLER_ARGS) 186{ 187 struct prison *pr; 188 char tmphostname[MAXHOSTNAMELEN]; 189 int error; 190 191 pr = req->td->td_ucred->cr_prison; 192 if (pr != NULL) { 193 if (!jail_set_hostname_allowed && req->newptr) 194 return (EPERM); 195 /* 196 * Process is in jail, so make a local copy of jail 197 * hostname to get/set so we don't have to hold the jail 198 * mutex during the sysctl copyin/copyout activities. 199 */ 200 mtx_lock(&pr->pr_mtx); 201 bcopy(pr->pr_host, tmphostname, MAXHOSTNAMELEN); 202 mtx_unlock(&pr->pr_mtx); 203 204 error = sysctl_handle_string(oidp, tmphostname, 205 sizeof pr->pr_host, req); 206 207 if (req->newptr != NULL && error == 0) { 208 /* 209 * Copy the locally set hostname to the jail, if 210 * appropriate. 211 */ 212 mtx_lock(&pr->pr_mtx); 213 bcopy(tmphostname, pr->pr_host, MAXHOSTNAMELEN); 214 mtx_unlock(&pr->pr_mtx); 215 } 216 } else 217 error = sysctl_handle_string(oidp, 218 hostname, sizeof hostname, req); 219 return (error); 220} 221 222SYSCTL_PROC(_kern, KERN_HOSTNAME, hostname, 223 CTLTYPE_STRING|CTLFLAG_RW|CTLFLAG_PRISON, 224 0, 0, sysctl_hostname, "A", "Hostname"); 225 226static int regression_securelevel_nonmonotonic = 0; 227 228#ifdef REGRESSION 229SYSCTL_INT(_regression, OID_AUTO, securelevel_nonmonotonic, CTLFLAG_RW, 230 ®ression_securelevel_nonmonotonic, 0, "securelevel may be lowered"); 231#endif 232 233int securelevel = -1; 234struct mtx securelevel_mtx; 235 236MTX_SYSINIT(securelevel_lock, &securelevel_mtx, "securelevel mutex lock", 237 MTX_DEF); 238 239static int 240sysctl_kern_securelvl(SYSCTL_HANDLER_ARGS) 241{ 242 struct prison *pr; 243 int error, level; 244 245 pr = req->td->td_ucred->cr_prison; 246 247 /* 248 * If the process is in jail, return the maximum of the global and 249 * local levels; otherwise, return the global level. 250 */ 251 if (pr != NULL) { 252 mtx_lock(&pr->pr_mtx); 253 level = imax(securelevel, pr->pr_securelevel); 254 mtx_unlock(&pr->pr_mtx); 255 } else 256 level = securelevel; 257 error = sysctl_handle_int(oidp, &level, 0, req); 258 if (error || !req->newptr) 259 return (error); 260 /* 261 * Permit update only if the new securelevel exceeds the 262 * global level, and local level if any. 263 */ 264 if (pr != NULL) { 265 mtx_lock(&pr->pr_mtx); 266 if (!regression_securelevel_nonmonotonic && 267 (level < imax(securelevel, pr->pr_securelevel))) { 268 mtx_unlock(&pr->pr_mtx); 269 return (EPERM); 270 } 271 pr->pr_securelevel = level; 272 mtx_unlock(&pr->pr_mtx); 273 } else { 274 mtx_lock(&securelevel_mtx); 275 if (!regression_securelevel_nonmonotonic && 276 (level < securelevel)) { 277 mtx_unlock(&securelevel_mtx); 278 return (EPERM); 279 } 280 securelevel = level; 281 mtx_unlock(&securelevel_mtx); 282 } 283 return (error); 284} 285 286SYSCTL_PROC(_kern, KERN_SECURELVL, securelevel, 287 CTLTYPE_INT|CTLFLAG_RW|CTLFLAG_PRISON, 0, 0, sysctl_kern_securelvl, 288 "I", "Current secure level"); 289 290char domainname[MAXHOSTNAMELEN]; 291SYSCTL_STRING(_kern, KERN_NISDOMAINNAME, domainname, CTLFLAG_RW, 292 &domainname, sizeof(domainname), "Name of the current YP/NIS domain"); 293 294u_long hostid; 295SYSCTL_ULONG(_kern, KERN_HOSTID, hostid, CTLFLAG_RW, &hostid, 0, "Host ID"); 296 297/* 298 * This is really cheating. These actually live in the libc, something 299 * which I'm not quite sure is a good idea anyway, but in order for 300 * getnext and friends to actually work, we define dummies here. 301 */ 302SYSCTL_STRING(_user, USER_CS_PATH, cs_path, CTLFLAG_RD, 303 "", 0, "PATH that finds all the standard utilities"); 304SYSCTL_INT(_user, USER_BC_BASE_MAX, bc_base_max, CTLFLAG_RD, 305 0, 0, "Max ibase/obase values in bc(1)"); 306SYSCTL_INT(_user, USER_BC_DIM_MAX, bc_dim_max, CTLFLAG_RD, 307 0, 0, "Max array size in bc(1)"); 308SYSCTL_INT(_user, USER_BC_SCALE_MAX, bc_scale_max, CTLFLAG_RD, 309 0, 0, "Max scale value in bc(1)"); 310SYSCTL_INT(_user, USER_BC_STRING_MAX, bc_string_max, CTLFLAG_RD, 311 0, 0, "Max string length in bc(1)"); 312SYSCTL_INT(_user, USER_COLL_WEIGHTS_MAX, coll_weights_max, CTLFLAG_RD, 313 0, 0, "Maximum number of weights assigned to an LC_COLLATE locale entry"); 314SYSCTL_INT(_user, USER_EXPR_NEST_MAX, expr_nest_max, CTLFLAG_RD, 0, 0, ""); 315SYSCTL_INT(_user, USER_LINE_MAX, line_max, CTLFLAG_RD, 316 0, 0, "Max length (bytes) of a text-processing utility's input line"); 317SYSCTL_INT(_user, USER_RE_DUP_MAX, re_dup_max, CTLFLAG_RD, 318 0, 0, "Maximum number of repeats of a regexp permitted"); 319SYSCTL_INT(_user, USER_POSIX2_VERSION, posix2_version, CTLFLAG_RD, 320 0, 0, 321 "The version of POSIX 1003.2 with which the system attempts to comply"); 322SYSCTL_INT(_user, USER_POSIX2_C_BIND, posix2_c_bind, CTLFLAG_RD, 323 0, 0, "Whether C development supports the C bindings option"); 324SYSCTL_INT(_user, USER_POSIX2_C_DEV, posix2_c_dev, CTLFLAG_RD, 325 0, 0, "Whether system supports the C development utilities option"); 326SYSCTL_INT(_user, USER_POSIX2_CHAR_TERM, posix2_char_term, CTLFLAG_RD, 327 0, 0, ""); 328SYSCTL_INT(_user, USER_POSIX2_FORT_DEV, posix2_fort_dev, CTLFLAG_RD, 329 0, 0, "Whether system supports FORTRAN development utilities"); 330SYSCTL_INT(_user, USER_POSIX2_FORT_RUN, posix2_fort_run, CTLFLAG_RD, 331 0, 0, "Whether system supports FORTRAN runtime utilities"); 332SYSCTL_INT(_user, USER_POSIX2_LOCALEDEF, posix2_localedef, CTLFLAG_RD, 333 0, 0, "Whether system supports creation of locales"); 334SYSCTL_INT(_user, USER_POSIX2_SW_DEV, posix2_sw_dev, CTLFLAG_RD, 335 0, 0, "Whether system supports software development utilities"); 336SYSCTL_INT(_user, USER_POSIX2_UPE, posix2_upe, CTLFLAG_RD, 337 0, 0, "Whether system supports the user portability utilities"); 338SYSCTL_INT(_user, USER_STREAM_MAX, stream_max, CTLFLAG_RD, 339 0, 0, "Min Maximum number of streams a process may have open at one time"); 340SYSCTL_INT(_user, USER_TZNAME_MAX, tzname_max, CTLFLAG_RD, 341 0, 0, "Min Maximum number of types supported for timezone names"); 342 343#include <sys/vnode.h> 344SYSCTL_INT(_debug_sizeof, OID_AUTO, vnode, CTLFLAG_RD, 345 0, sizeof(struct vnode), "sizeof(struct vnode)"); 346 347SYSCTL_INT(_debug_sizeof, OID_AUTO, proc, CTLFLAG_RD, 348 0, sizeof(struct proc), "sizeof(struct proc)"); 349 350#include <sys/conf.h> 351SYSCTL_INT(_debug_sizeof, OID_AUTO, cdev, CTLFLAG_RD, 352 0, sizeof(struct cdev), "sizeof(struct cdev)"); 353 354#include <sys/bio.h> 355#include <sys/buf.h> 356SYSCTL_INT(_debug_sizeof, OID_AUTO, bio, CTLFLAG_RD, 357 0, sizeof(struct bio), "sizeof(struct bio)"); 358SYSCTL_INT(_debug_sizeof, OID_AUTO, buf, CTLFLAG_RD, 359 0, sizeof(struct buf), "sizeof(struct buf)"); 360 361#include <sys/user.h> 362SYSCTL_INT(_debug_sizeof, OID_AUTO, kinfo_proc, CTLFLAG_RD, 363 0, sizeof(struct kinfo_proc), "sizeof(struct kinfo_proc)"); 364
|