priv.h revision 331722
1122205Sharti/*- 2122205Sharti * Copyright (c) 2006 nCircle Network Security, Inc. 3122205Sharti * All rights reserved. 4122205Sharti * 5122205Sharti * This software was developed by Robert N. M. Watson for the TrustedBSD 6122205Sharti * Project under contract to nCircle Network Security, Inc. 7122205Sharti * 8122205Sharti * Redistribution and use in source and binary forms, with or without 9122205Sharti * modification, are permitted provided that the following conditions 10122205Sharti * are met: 11122205Sharti * 1. Redistributions of source code must retain the above copyright 12122205Sharti * notice, this list of conditions and the following disclaimer. 13122205Sharti * 2. Redistributions in binary form must reproduce the above copyright 14122205Sharti * notice, this list of conditions and the following disclaimer in the 15122205Sharti * documentation and/or other materials provided with the distribution. 16122205Sharti * 17122205Sharti * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 18122205Sharti * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19122205Sharti * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20122205Sharti * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR, NCIRCLE NETWORK SECURITY, 21122205Sharti * INC., OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 22122205Sharti * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 23122205Sharti * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 24122205Sharti * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 25122205Sharti * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 26122205Sharti * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 27122205Sharti * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 28122205Sharti * 29133492Sharti * $FreeBSD: stable/11/sys/sys/priv.h 331722 2018-03-29 02:50:57Z eadler $ 30122205Sharti */ 31122205Sharti 32122205Sharti/* 33122205Sharti * Privilege checking interface for BSD kernel. 34122205Sharti */ 35122205Sharti#ifndef _SYS_PRIV_H_ 36122205Sharti#define _SYS_PRIV_H_ 37122205Sharti 38122205Sharti/* 39122205Sharti * Privilege list, sorted loosely by kernel subsystem. 40122205Sharti * 41122205Sharti * Think carefully before adding or reusing one of these privileges -- are 42122205Sharti * there existing instances referring to the same privilege? Third party 43122205Sharti * vendors may request the assignment of privileges to be used in loadable 44122205Sharti * modules. Particular numeric privilege assignments are part of the 45122205Sharti * loadable kernel module ABI, and should not be changed across minor 46122205Sharti * releases. 47122205Sharti * 48122205Sharti * When adding a new privilege, remember to determine if it's appropriate 49122205Sharti * for use in jail, and update the privilege switch in prison_priv_check() 50122205Sharti * in kern_jail.c as necessary. 51122205Sharti */ 52122205Sharti 53122205Sharti/* 54133492Sharti * Track beginning of privilege list. 55122205Sharti */ 56122205Sharti#define _PRIV_LOWEST 1 57122205Sharti 58122205Sharti/* 59122205Sharti * The remaining privileges typically correspond to one or a small 60122205Sharti * number of specific privilege checks, and have (relatively) precise 61122205Sharti * meanings. They are loosely sorted into a set of base system 62122205Sharti * privileges, such as the ability to reboot, and then loosely by 63122205Sharti * subsystem, indicated by a subsystem name. 64122205Sharti */ 65122205Sharti#define _PRIV_ROOT 1 /* Removed. */ 66122205Sharti#define PRIV_ACCT 2 /* Manage process accounting. */ 67122205Sharti#define PRIV_MAXFILES 3 /* Exceed system open files limit. */ 68133492Sharti#define PRIV_MAXPROC 4 /* Exceed system processes limit. */ 69133492Sharti#define PRIV_KTRACE 5 /* Set/clear KTRFAC_ROOT on ktrace. */ 70133492Sharti#define PRIV_SETDUMPER 6 /* Configure dump device. */ 71133492Sharti#define PRIV_REBOOT 8 /* Can reboot system. */ 72133492Sharti#define PRIV_SWAPON 9 /* Can swapon(). */ 73133492Sharti#define PRIV_SWAPOFF 10 /* Can swapoff(). */ 74133492Sharti#define PRIV_MSGBUF 11 /* Can read kernel message buffer. */ 75133492Sharti#define PRIV_IO 12 /* Can perform low-level I/O. */ 76133492Sharti#define PRIV_KEYBOARD 13 /* Reprogram keyboard. */ 77133492Sharti#define PRIV_DRIVER 14 /* Low-level driver privilege. */ 78133492Sharti#define PRIV_ADJTIME 15 /* Set time adjustment. */ 79133492Sharti#define PRIV_NTP_ADJTIME 16 /* Set NTP time adjustment. */ 80133492Sharti#define PRIV_CLOCK_SETTIME 17 /* Can call clock_settime. */ 81133492Sharti#define PRIV_SETTIMEOFDAY 18 /* Can call settimeofday. */ 82133492Sharti#define _PRIV_SETHOSTID 19 /* Removed. */ 83133492Sharti#define _PRIV_SETDOMAINNAME 20 /* Removed. */ 84133492Sharti 85133492Sharti/* 86133492Sharti * Audit subsystem privileges. 87133492Sharti */ 88133492Sharti#define PRIV_AUDIT_CONTROL 40 /* Can configure audit. */ 89122205Sharti#define PRIV_AUDIT_FAILSTOP 41 /* Can run during audit fail stop. */ 90122205Sharti#define PRIV_AUDIT_GETAUDIT 42 /* Can get proc audit properties. */ 91122205Sharti#define PRIV_AUDIT_SETAUDIT 43 /* Can set proc audit properties. */ 92122205Sharti#define PRIV_AUDIT_SUBMIT 44 /* Can submit an audit record. */ 93122205Sharti 94122205Sharti/* 95122205Sharti * Credential management privileges. 96122205Sharti */ 97122205Sharti#define PRIV_CRED_SETUID 50 /* setuid. */ 98122205Sharti#define PRIV_CRED_SETEUID 51 /* seteuid to !ruid and !svuid. */ 99122205Sharti#define PRIV_CRED_SETGID 52 /* setgid. */ 100122205Sharti#define PRIV_CRED_SETEGID 53 /* setgid to !rgid and !svgid. */ 101122205Sharti#define PRIV_CRED_SETGROUPS 54 /* Set process additional groups. */ 102122205Sharti#define PRIV_CRED_SETREUID 55 /* setreuid. */ 103122205Sharti#define PRIV_CRED_SETREGID 56 /* setregid. */ 104122205Sharti#define PRIV_CRED_SETRESUID 57 /* setresuid. */ 105122205Sharti#define PRIV_CRED_SETRESGID 58 /* setresgid. */ 106122205Sharti#define PRIV_SEEOTHERGIDS 59 /* Exempt bsd.seeothergids. */ 107122205Sharti#define PRIV_SEEOTHERUIDS 60 /* Exempt bsd.seeotheruids. */ 108122205Sharti 109122205Sharti/* 110122205Sharti * Debugging privileges. 111122205Sharti */ 112122205Sharti#define PRIV_DEBUG_DIFFCRED 80 /* Exempt debugging other users. */ 113122205Sharti#define PRIV_DEBUG_SUGID 81 /* Exempt debugging setuid proc. */ 114122205Sharti#define PRIV_DEBUG_UNPRIV 82 /* Exempt unprivileged debug limit. */ 115122205Sharti#define PRIV_DEBUG_DENIED 83 /* Exempt P2_NOTRACE. */ 116122205Sharti 117122205Sharti/* 118122205Sharti * Dtrace privileges. 119122205Sharti */ 120122205Sharti#define PRIV_DTRACE_KERNEL 90 /* Allow use of DTrace on the kernel. */ 121122205Sharti#define PRIV_DTRACE_PROC 91 /* Allow attaching DTrace to process. */ 122122205Sharti#define PRIV_DTRACE_USER 92 /* Process may submit DTrace events. */ 123122205Sharti 124122205Sharti/* 125122205Sharti * Firmware privilegs. 126122205Sharti */ 127122205Sharti#define PRIV_FIRMWARE_LOAD 100 /* Can load firmware. */ 128122205Sharti 129122205Sharti/* 130122205Sharti * Jail privileges. 131122205Sharti */ 132122205Sharti#define PRIV_JAIL_ATTACH 110 /* Attach to a jail. */ 133122205Sharti#define PRIV_JAIL_SET 111 /* Set jail parameters. */ 134122205Sharti#define PRIV_JAIL_REMOVE 112 /* Remove a jail. */ 135122205Sharti 136122205Sharti/* 137122205Sharti * Kernel environment privileges. 138122205Sharti */ 139122205Sharti#define PRIV_KENV_SET 120 /* Set kernel env. variables. */ 140122205Sharti#define PRIV_KENV_UNSET 121 /* Unset kernel env. variables. */ 141122205Sharti 142122205Sharti/* 143122205Sharti * Loadable kernel module privileges. 144122205Sharti */ 145122205Sharti#define PRIV_KLD_LOAD 130 /* Load a kernel module. */ 146122205Sharti#define PRIV_KLD_UNLOAD 131 /* Unload a kernel module. */ 147131826Sharti 148122205Sharti/* 149122205Sharti * Privileges associated with the MAC Framework and specific MAC policy 150122205Sharti * modules. 151122205Sharti */ 152122205Sharti#define PRIV_MAC_PARTITION 140 /* Privilege in mac_partition policy. */ 153122205Sharti#define PRIV_MAC_PRIVS 141 /* Privilege in the mac_privs policy. */ 154122205Sharti 155122205Sharti/* 156122205Sharti * Process-related privileges. 157122205Sharti */ 158122205Sharti#define PRIV_PROC_LIMIT 160 /* Exceed user process limit. */ 159122205Sharti#define PRIV_PROC_SETLOGIN 161 /* Can call setlogin. */ 160122205Sharti#define PRIV_PROC_SETRLIMIT 162 /* Can raise resources limits. */ 161122205Sharti#define PRIV_PROC_SETLOGINCLASS 163 /* Can call setloginclass(2). */ 162122205Sharti 163122205Sharti/* 164122205Sharti * System V IPC privileges. 165122205Sharti */ 166122205Sharti#define PRIV_IPC_READ 170 /* Can override IPC read perm. */ 167122205Sharti#define PRIV_IPC_WRITE 171 /* Can override IPC write perm. */ 168122205Sharti#define PRIV_IPC_ADMIN 172 /* Can override IPC owner-only perm. */ 169122205Sharti#define PRIV_IPC_MSGSIZE 173 /* Exempt IPC message queue limit. */ 170122205Sharti 171122205Sharti/* 172122205Sharti * POSIX message queue privileges. 173122205Sharti */ 174122205Sharti#define PRIV_MQ_ADMIN 180 /* Can override msgq owner-only perm. */ 175122205Sharti 176122205Sharti/* 177122205Sharti * Performance monitoring counter privileges. 178122205Sharti */ 179122205Sharti#define PRIV_PMC_MANAGE 190 /* Can administer PMC. */ 180122205Sharti#define PRIV_PMC_SYSTEM 191 /* Can allocate a system-wide PMC. */ 181122205Sharti 182122205Sharti/* 183122205Sharti * Scheduling privileges. 184122205Sharti */ 185122205Sharti#define PRIV_SCHED_DIFFCRED 200 /* Exempt scheduling other users. */ 186122205Sharti#define PRIV_SCHED_SETPRIORITY 201 /* Can set lower nice value for proc. */ 187122205Sharti#define PRIV_SCHED_RTPRIO 202 /* Can set real time scheduling. */ 188131826Sharti#define PRIV_SCHED_SETPOLICY 203 /* Can set scheduler policy. */ 189122205Sharti#define PRIV_SCHED_SET 204 /* Can set thread scheduler. */ 190122205Sharti#define PRIV_SCHED_SETPARAM 205 /* Can set thread scheduler params. */ 191131826Sharti#define PRIV_SCHED_CPUSET 206 /* Can manipulate cpusets. */ 192122205Sharti#define PRIV_SCHED_CPUSET_INTR 207 /* Can adjust IRQ to CPU binding. */ 193122205Sharti 194122205Sharti/* 195122205Sharti * POSIX semaphore privileges. 196122205Sharti */ 197122205Sharti#define PRIV_SEM_WRITE 220 /* Can override sem write perm. */ 198122205Sharti 199122205Sharti/* 200122205Sharti * Signal privileges. 201122205Sharti */ 202122205Sharti#define PRIV_SIGNAL_DIFFCRED 230 /* Exempt signalling other users. */ 203122205Sharti#define PRIV_SIGNAL_SUGID 231 /* Non-conserv signal setuid proc. */ 204122205Sharti 205122205Sharti/* 206122205Sharti * Sysctl privileges. 207122205Sharti */ 208122205Sharti#define PRIV_SYSCTL_DEBUG 240 /* Can invoke sysctl.debug. */ 209122205Sharti#define PRIV_SYSCTL_WRITE 241 /* Can write sysctls. */ 210122205Sharti#define PRIV_SYSCTL_WRITEJAIL 242 /* Can write sysctls, jail permitted. */ 211122205Sharti 212122205Sharti/* 213122205Sharti * TTY privileges. 214122205Sharti */ 215122205Sharti#define PRIV_TTY_CONSOLE 250 /* Set console to tty. */ 216122205Sharti#define PRIV_TTY_DRAINWAIT 251 /* Set tty drain wait time. */ 217122205Sharti#define PRIV_TTY_DTRWAIT 252 /* Set DTR wait on tty. */ 218122205Sharti#define PRIV_TTY_EXCLUSIVE 253 /* Override tty exclusive flag. */ 219122205Sharti#define _PRIV_TTY_PRISON 254 /* Removed. */ 220122205Sharti#define PRIV_TTY_STI 255 /* Simulate input on another tty. */ 221122205Sharti#define PRIV_TTY_SETA 256 /* Set tty termios structure. */ 222122205Sharti 223122205Sharti/* 224122205Sharti * UFS-specific privileges. 225122205Sharti */ 226122205Sharti#define PRIV_UFS_EXTATTRCTL 270 /* Can configure EAs on UFS1. */ 227122205Sharti#define PRIV_UFS_QUOTAOFF 271 /* quotaoff(). */ 228122205Sharti#define PRIV_UFS_QUOTAON 272 /* quotaon(). */ 229122205Sharti#define PRIV_UFS_SETUSE 273 /* setuse(). */ 230122205Sharti 231122205Sharti/* 232122205Sharti * ZFS-specific privileges. 233122205Sharti */ 234122205Sharti#define PRIV_ZFS_POOL_CONFIG 280 /* Can configure ZFS pools. */ 235122205Sharti#define PRIV_ZFS_INJECT 281 /* Can inject faults in the ZFS fault 236122205Sharti injection framework. */ 237122205Sharti#define PRIV_ZFS_JAIL 282 /* Can attach/detach ZFS file systems 238122205Sharti to/from jails. */ 239122205Sharti 240122205Sharti/* 241122205Sharti * NFS-specific privileges. 242122205Sharti */ 243122205Sharti#define PRIV_NFS_DAEMON 290 /* Can become the NFS daemon. */ 244122205Sharti#define PRIV_NFS_LOCKD 291 /* Can become NFS lock daemon. */ 245122205Sharti 246122205Sharti/* 247122205Sharti * VFS privileges. 248122205Sharti */ 249122205Sharti#define PRIV_VFS_READ 310 /* Override vnode DAC read perm. */ 250122205Sharti#define PRIV_VFS_WRITE 311 /* Override vnode DAC write perm. */ 251122205Sharti#define PRIV_VFS_ADMIN 312 /* Override vnode DAC admin perm. */ 252122205Sharti#define PRIV_VFS_EXEC 313 /* Override vnode DAC exec perm. */ 253122205Sharti#define PRIV_VFS_LOOKUP 314 /* Override vnode DAC lookup perm. */ 254122205Sharti#define PRIV_VFS_BLOCKRESERVE 315 /* Can use free block reserve. */ 255122205Sharti#define PRIV_VFS_CHFLAGS_DEV 316 /* Can chflags() a device node. */ 256122205Sharti#define PRIV_VFS_CHOWN 317 /* Can set user; group to non-member. */ 257131826Sharti#define PRIV_VFS_CHROOT 318 /* chroot(). */ 258122205Sharti#define PRIV_VFS_RETAINSUGID 319 /* Can retain sugid bits on change. */ 259122205Sharti#define PRIV_VFS_EXCEEDQUOTA 320 /* Exempt from quota restrictions. */ 260122205Sharti#define PRIV_VFS_EXTATTR_SYSTEM 321 /* Operate on system EA namespace. */ 261122205Sharti#define PRIV_VFS_FCHROOT 322 /* fchroot(). */ 262122205Sharti#define PRIV_VFS_FHOPEN 323 /* Can fhopen(). */ 263122205Sharti#define PRIV_VFS_FHSTAT 324 /* Can fhstat(). */ 264122205Sharti#define PRIV_VFS_FHSTATFS 325 /* Can fhstatfs(). */ 265122205Sharti#define PRIV_VFS_GENERATION 326 /* stat() returns generation number. */ 266122205Sharti#define PRIV_VFS_GETFH 327 /* Can retrieve file handles. */ 267122205Sharti#define PRIV_VFS_GETQUOTA 328 /* getquota(). */ 268122205Sharti#define PRIV_VFS_LINK 329 /* bsd.hardlink_check_uid */ 269122205Sharti#define PRIV_VFS_MKNOD_BAD 330 /* Was: mknod() can mark bad inodes. */ 270122205Sharti#define PRIV_VFS_MKNOD_DEV 331 /* Can mknod() to create dev nodes. */ 271122205Sharti#define PRIV_VFS_MKNOD_WHT 332 /* Can mknod() to create whiteout. */ 272122205Sharti#define PRIV_VFS_MOUNT 333 /* Can mount(). */ 273122205Sharti#define PRIV_VFS_MOUNT_OWNER 334 /* Can manage other users' file systems. */ 274122205Sharti#define PRIV_VFS_MOUNT_EXPORTED 335 /* Can set MNT_EXPORTED on mount. */ 275122205Sharti#define PRIV_VFS_MOUNT_PERM 336 /* Override dev node perms at mount. */ 276122205Sharti#define PRIV_VFS_MOUNT_SUIDDIR 337 /* Can set MNT_SUIDDIR on mount. */ 277122205Sharti#define PRIV_VFS_MOUNT_NONUSER 338 /* Can perform a non-user mount. */ 278122205Sharti#define PRIV_VFS_SETGID 339 /* Can setgid if not in group. */ 279122205Sharti#define PRIV_VFS_SETQUOTA 340 /* setquota(). */ 280122205Sharti#define PRIV_VFS_STICKYFILE 341 /* Can set sticky bit on file. */ 281122205Sharti#define PRIV_VFS_SYSFLAGS 342 /* Can modify system flags. */ 282122205Sharti#define PRIV_VFS_UNMOUNT 343 /* Can unmount(). */ 283122205Sharti#define PRIV_VFS_STAT 344 /* Override vnode MAC stat perm. */ 284122205Sharti 285122205Sharti/* 286122205Sharti * Virtual memory privileges. 287122205Sharti */ 288122205Sharti#define PRIV_VM_MADV_PROTECT 360 /* Can set MADV_PROTECT. */ 289122205Sharti#define PRIV_VM_MLOCK 361 /* Can mlock(), mlockall(). */ 290122205Sharti#define PRIV_VM_MUNLOCK 362 /* Can munlock(), munlockall(). */ 291122205Sharti#define PRIV_VM_SWAP_NOQUOTA 363 /* 292122205Sharti * Can override the global 293122205Sharti * swap reservation limits. 294122205Sharti */ 295122205Sharti#define PRIV_VM_SWAP_NORLIMIT 364 /* 296122205Sharti * Can override the per-uid 297122205Sharti * swap reservation limits. 298122205Sharti */ 299122205Sharti 300122205Sharti/* 301122205Sharti * Device file system privileges. 302122205Sharti */ 303122205Sharti#define PRIV_DEVFS_RULE 370 /* Can manage devfs rules. */ 304122205Sharti#define PRIV_DEVFS_SYMLINK 371 /* Can create symlinks in devfs. */ 305122205Sharti 306122205Sharti/* 307122205Sharti * Random number generator privileges. 308122205Sharti */ 309122205Sharti#define PRIV_RANDOM_RESEED 380 /* Closing /dev/random reseeds. */ 310122205Sharti 311122205Sharti/* 312122205Sharti * Network stack privileges. 313122205Sharti */ 314122205Sharti#define PRIV_NET_BRIDGE 390 /* Administer bridge. */ 315122205Sharti#define PRIV_NET_GRE 391 /* Administer GRE. */ 316122205Sharti#define _PRIV_NET_PPP 392 /* Removed. */ 317122205Sharti#define _PRIV_NET_SLIP 393 /* Removed. */ 318122205Sharti#define PRIV_NET_BPF 394 /* Monitor BPF. */ 319122205Sharti#define PRIV_NET_RAW 395 /* Open raw socket. */ 320122205Sharti#define PRIV_NET_ROUTE 396 /* Administer routing. */ 321122205Sharti#define PRIV_NET_TAP 397 /* Can open tap device. */ 322122205Sharti#define PRIV_NET_SETIFMTU 398 /* Set interface MTU. */ 323122205Sharti#define PRIV_NET_SETIFFLAGS 399 /* Set interface flags. */ 324122205Sharti#define PRIV_NET_SETIFCAP 400 /* Set interface capabilities. */ 325122205Sharti#define PRIV_NET_SETIFNAME 401 /* Set interface name. */ 326122205Sharti#define PRIV_NET_SETIFMETRIC 402 /* Set interface metrics. */ 327122205Sharti#define PRIV_NET_SETIFPHYS 403 /* Set interface physical layer prop. */ 328122205Sharti#define PRIV_NET_SETIFMAC 404 /* Set interface MAC label. */ 329122205Sharti#define PRIV_NET_ADDMULTI 405 /* Add multicast addr. to ifnet. */ 330122205Sharti#define PRIV_NET_DELMULTI 406 /* Delete multicast addr. from ifnet. */ 331122205Sharti#define PRIV_NET_HWIOCTL 407 /* Issue hardware ioctl on ifnet. */ 332122205Sharti#define PRIV_NET_SETLLADDR 408 /* Set interface link-level address. */ 333122205Sharti#define PRIV_NET_ADDIFGROUP 409 /* Add new interface group. */ 334122205Sharti#define PRIV_NET_DELIFGROUP 410 /* Delete interface group. */ 335122205Sharti#define PRIV_NET_IFCREATE 411 /* Create cloned interface. */ 336122205Sharti#define PRIV_NET_IFDESTROY 412 /* Destroy cloned interface. */ 337122205Sharti#define PRIV_NET_ADDIFADDR 413 /* Add protocol addr to interface. */ 338122205Sharti#define PRIV_NET_DELIFADDR 414 /* Delete protocol addr on interface. */ 339122205Sharti#define PRIV_NET_LAGG 415 /* Administer lagg interface. */ 340122205Sharti#define PRIV_NET_GIF 416 /* Administer gif interface. */ 341122205Sharti#define PRIV_NET_SETIFVNET 417 /* Move interface to vnet. */ 342122205Sharti#define PRIV_NET_SETIFDESCR 418 /* Set interface description. */ 343122205Sharti#define PRIV_NET_SETIFFIB 419 /* Set interface fib. */ 344122205Sharti#define PRIV_NET_VXLAN 420 /* Administer vxlan. */ 345122205Sharti#define PRIV_NET_SETVLANPCP 421 /* Set VLAN priority. */ 346122205Sharti 347122205Sharti/* 348122205Sharti * 802.11-related privileges. 349122205Sharti */ 350122205Sharti#define PRIV_NET80211_GETKEY 440 /* Query 802.11 keys. */ 351122205Sharti#define PRIV_NET80211_MANAGE 441 /* Administer 802.11. */ 352122205Sharti 353122205Sharti/* 354122205Sharti * Placeholder for AppleTalk privileges, not supported anymore. 355122205Sharti */ 356122205Sharti#define _PRIV_NETATALK_RESERVEDPORT 450 /* Bind low port number. */ 357122205Sharti 358122205Sharti/* 359122205Sharti * ATM privileges. 360122205Sharti */ 361122205Sharti#define PRIV_NETATM_CFG 460 362122205Sharti#define PRIV_NETATM_ADD 461 363122205Sharti#define PRIV_NETATM_DEL 462 364122205Sharti#define PRIV_NETATM_SET 463 365122205Sharti 366122205Sharti/* 367122205Sharti * Bluetooth privileges. 368122205Sharti */ 369122205Sharti#define PRIV_NETBLUETOOTH_RAW 470 /* Open raw bluetooth socket. */ 370122205Sharti 371122205Sharti/* 372122205Sharti * Netgraph and netgraph module privileges. 373122205Sharti */ 374122205Sharti#define PRIV_NETGRAPH_CONTROL 480 /* Open netgraph control socket. */ 375122205Sharti#define PRIV_NETGRAPH_TTY 481 /* Configure tty for netgraph. */ 376122205Sharti 377122205Sharti/* 378122205Sharti * IPv4 and IPv6 privileges. 379122205Sharti */ 380122205Sharti#define PRIV_NETINET_RESERVEDPORT 490 /* Bind low port number. */ 381122205Sharti#define PRIV_NETINET_IPFW 491 /* Administer IPFW firewall. */ 382122205Sharti#define PRIV_NETINET_DIVERT 492 /* Open IP divert socket. */ 383122205Sharti#define PRIV_NETINET_PF 493 /* Administer pf firewall. */ 384122205Sharti#define PRIV_NETINET_DUMMYNET 494 /* Administer DUMMYNET. */ 385122205Sharti#define PRIV_NETINET_CARP 495 /* Administer CARP. */ 386122205Sharti#define PRIV_NETINET_MROUTE 496 /* Administer multicast routing. */ 387122205Sharti#define PRIV_NETINET_RAW 497 /* Open netinet raw socket. */ 388122205Sharti#define PRIV_NETINET_GETCRED 498 /* Query netinet pcb credentials. */ 389122205Sharti#define PRIV_NETINET_ADDRCTRL6 499 /* Administer IPv6 address scopes. */ 390122205Sharti#define PRIV_NETINET_ND6 500 /* Administer IPv6 neighbor disc. */ 391122205Sharti#define PRIV_NETINET_SCOPE6 501 /* Administer IPv6 address scopes. */ 392122205Sharti#define PRIV_NETINET_ALIFETIME6 502 /* Administer IPv6 address lifetimes. */ 393122205Sharti#define PRIV_NETINET_IPSEC 503 /* Administer IPSEC. */ 394122205Sharti#define PRIV_NETINET_REUSEPORT 504 /* Allow [rapid] port/address reuse. */ 395122205Sharti#define PRIV_NETINET_SETHDROPTS 505 /* Set certain IPv4/6 header options. */ 396122205Sharti#define PRIV_NETINET_BINDANY 506 /* Allow bind to any address. */ 397122205Sharti#define PRIV_NETINET_HASHKEY 507 /* Get and set hash keys for IPv4/6. */ 398122205Sharti 399122205Sharti/* 400122205Sharti * Placeholders for IPX/SPX privileges, not supported any more. 401213789Srpaulo */ 402122205Sharti#define _PRIV_NETIPX_RESERVEDPORT 520 /* Bind low port number. */ 403122205Sharti#define _PRIV_NETIPX_RAW 521 /* Open netipx raw socket. */ 404122205Sharti 405122205Sharti/* 406122205Sharti * NCP privileges. 407122205Sharti */ 408122205Sharti#define PRIV_NETNCP 530 /* Use another user's connection. */ 409122205Sharti 410122205Sharti/* 411122205Sharti * SMB privileges. 412122205Sharti */ 413122205Sharti#define PRIV_NETSMB 540 /* Use another user's connection. */ 414122205Sharti 415122205Sharti/* 416122205Sharti * VM86 privileges. 417122205Sharti */ 418122205Sharti#define PRIV_VM86_INTCALL 550 /* Allow invoking vm86 int handlers. */ 419122205Sharti 420122205Sharti/* 421122205Sharti * Set of reserved privilege values, which will be allocated to code as 422122205Sharti * needed, in order to avoid renumbering later privileges due to insertion. 423122205Sharti */ 424122205Sharti#define _PRIV_RESERVED0 560 425122205Sharti#define _PRIV_RESERVED1 561 426122205Sharti#define _PRIV_RESERVED2 562 427122205Sharti#define _PRIV_RESERVED3 563 428122205Sharti#define _PRIV_RESERVED4 564 429122205Sharti#define _PRIV_RESERVED5 565 430122205Sharti#define _PRIV_RESERVED6 566 431122205Sharti#define _PRIV_RESERVED7 567 432122205Sharti#define _PRIV_RESERVED8 568 433122205Sharti#define _PRIV_RESERVED9 569 434122205Sharti#define _PRIV_RESERVED10 570 435122205Sharti#define _PRIV_RESERVED11 571 436122205Sharti#define _PRIV_RESERVED12 572 437122205Sharti#define _PRIV_RESERVED13 573 438122205Sharti#define _PRIV_RESERVED14 574 439122205Sharti#define _PRIV_RESERVED15 575 440122205Sharti 441122205Sharti/* 442122205Sharti * Define a set of valid privilege numbers that can be used by loadable 443122205Sharti * modules that don't yet have privilege reservations. Ideally, these should 444122205Sharti * not be used, since their meaning is opaque to any policies that are aware 445122205Sharti * of specific privileges, such as jail, and as such may be arbitrarily 446122205Sharti * denied. 447122205Sharti */ 448122205Sharti#define PRIV_MODULE0 600 449122205Sharti#define PRIV_MODULE1 601 450122205Sharti#define PRIV_MODULE2 602 451122205Sharti#define PRIV_MODULE3 603 452122205Sharti#define PRIV_MODULE4 604 453122205Sharti#define PRIV_MODULE5 605 454122205Sharti#define PRIV_MODULE6 606 455122205Sharti#define PRIV_MODULE7 607 456122205Sharti#define PRIV_MODULE8 608 457122205Sharti#define PRIV_MODULE9 609 458122205Sharti#define PRIV_MODULE10 610 459122205Sharti#define PRIV_MODULE11 611 460122205Sharti#define PRIV_MODULE12 612 461122205Sharti#define PRIV_MODULE13 613 462122205Sharti#define PRIV_MODULE14 614 463122205Sharti#define PRIV_MODULE15 615 464122205Sharti 465122205Sharti/* 466122205Sharti * DDB(4) privileges. 467122205Sharti */ 468122205Sharti#define PRIV_DDB_CAPTURE 620 /* Allow reading of DDB capture log. */ 469131826Sharti 470122205Sharti/* 471122205Sharti * Arla/nnpfs privileges. 472122205Sharti */ 473122205Sharti#define PRIV_NNPFS_DEBUG 630 /* Perforn ARLA_VIOC_NNPFSDEBUG. */ 474122205Sharti 475122205Sharti/* 476122205Sharti * cpuctl(4) privileges. 477122205Sharti */ 478122205Sharti#define PRIV_CPUCTL_WRMSR 640 /* Write model-specific register. */ 479122205Sharti#define PRIV_CPUCTL_UPDATE 641 /* Update cpu microcode. */ 480122205Sharti 481122205Sharti/* 482122205Sharti * Capi4BSD privileges. 483122205Sharti */ 484122205Sharti#define PRIV_C4B_RESET_CTLR 650 /* Load firmware, reset controller. */ 485122205Sharti#define PRIV_C4B_TRACE 651 /* Unrestricted CAPI message tracing. */ 486122205Sharti 487122205Sharti/* 488122205Sharti * OpenAFS privileges. 489122205Sharti */ 490122205Sharti#define PRIV_AFS_ADMIN 660 /* Can change AFS client settings. */ 491122205Sharti#define PRIV_AFS_DAEMON 661 /* Can become the AFS daemon. */ 492122205Sharti 493122205Sharti/* 494122205Sharti * Resource Limits privileges. 495122205Sharti */ 496122205Sharti#define PRIV_RCTL_GET_RACCT 670 497122205Sharti#define PRIV_RCTL_GET_RULES 671 498122205Sharti#define PRIV_RCTL_GET_LIMITS 672 499122205Sharti#define PRIV_RCTL_ADD_RULE 673 500122205Sharti#define PRIV_RCTL_REMOVE_RULE 674 501122205Sharti 502122205Sharti/* 503122205Sharti * mem(4) privileges. 504122205Sharti */ 505122205Sharti#define PRIV_KMEM_READ 680 /* Open mem/kmem for reading. */ 506122205Sharti#define PRIV_KMEM_WRITE 681 /* Open mem/kmem for writing. */ 507122205Sharti 508122205Sharti/* 509122205Sharti * Track end of privilege list. 510122205Sharti */ 511122205Sharti#define _PRIV_HIGHEST 682 512122205Sharti 513122205Sharti/* 514122205Sharti * Validate that a named privilege is known by the privilege system. Invalid 515122205Sharti * privileges presented to the privilege system by a priv_check interface 516122205Sharti * will result in a panic. This is only approximate due to sparse allocation 517122205Sharti * of the privilege space. 518122205Sharti */ 519122205Sharti#define PRIV_VALID(x) ((x) > _PRIV_LOWEST && (x) < _PRIV_HIGHEST) 520122205Sharti 521122205Sharti#ifdef _KERNEL 522122205Sharti/* 523122205Sharti * Privilege check interfaces, modeled after historic suser() interfaces, but 524122205Sharti * with the addition of a specific privilege name. No flags are currently 525122205Sharti * defined for the API. Historically, flags specified using the real uid 526122205Sharti * instead of the effective uid, and whether or not the check should be 527122205Sharti * allowed in jail. 528122205Sharti */ 529122205Shartistruct thread; 530122205Shartistruct ucred; 531122205Shartiint priv_check(struct thread *td, int priv); 532122205Shartiint priv_check_cred(struct ucred *cred, int priv, int flags); 533122205Sharti#endif 534122205Sharti 535122205Sharti#endif /* !_SYS_PRIV_H_ */ 536122205Sharti