policy.h revision 6073:47f6aa7a8077
1/* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21/* 22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 23 * Use is subject to license terms. 24 */ 25 26#ifndef _SYS_POLICY_H 27#define _SYS_POLICY_H 28 29#pragma ident "%Z%%M% %I% %E% SMI" /* TSOL 8 */ 30 31#include <sys/types.h> 32#include <sys/cred.h> 33#include <sys/vnode.h> 34#include <sys/fs/snode.h> 35 36#ifdef __cplusplus 37extern "C" { 38#endif 39 40#ifdef _KERNEL 41 42#ifndef _IN_PORT_T 43#define _IN_PORT_T 44typedef uint16_t in_port_t; 45#endif 46 47/* 48 * Policy routines; in case we check privileges in-line. 49 * 50 * priv_policy 51 * privilege debugging 52 * audits success & failure 53 * returns 0 on success, error on failure 54 * 55 * priv_policy_choice 56 * determines extend of operation 57 * audit on success 58 * returns a boolean_t indicating success (B_TRUE) or failure. 59 * 60 * priv_policy_only 61 * when auditing is in appropriate (interrupt context) 62 * to determine context of operation 63 * returns a boolean_t indicating success (B_TRUE) or failure. 64 * 65 */ 66int priv_policy(const cred_t *, int, boolean_t, int, const char *); 67boolean_t priv_policy_only(const cred_t *, int, boolean_t); 68boolean_t priv_policy_choice(const cred_t *, int, boolean_t); 69 70struct kipc_perm; 71struct vfs; 72struct proc; 73 74int secpolicy_acct(const cred_t *); 75int secpolicy_allow_setid(const cred_t *, uid_t, boolean_t); 76int secpolicy_audit_config(const cred_t *); 77int secpolicy_audit_getattr(const cred_t *); 78int secpolicy_audit_modify(const cred_t *); 79int secpolicy_blacklist(const cred_t *); 80int secpolicy_chroot(const cred_t *); 81int secpolicy_clock_highres(const cred_t *); 82int secpolicy_console(const cred_t *); 83int secpolicy_contract_identity(const cred_t *); 84int secpolicy_contract_observer(const cred_t *, struct contract *); 85boolean_t secpolicy_contract_observer_choice(const cred_t *); 86int secpolicy_contract_event(const cred_t *); 87boolean_t secpolicy_contract_event_choice(const cred_t *); 88int secpolicy_coreadm(const cred_t *); 89int secpolicy_cpc_cpu(const cred_t *); 90int secpolicy_dispadm(const cred_t *); 91int secpolicy_error_inject(const cred_t *); 92int secpolicy_excl_open(const cred_t *); 93int secpolicy_fs_mount(cred_t *, vnode_t *, struct vfs *); 94int secpolicy_fs_unmount(cred_t *, struct vfs *); 95int secpolicy_fs_config(const cred_t *, const struct vfs *); 96int secpolicy_fs_linkdir(const cred_t *, const struct vfs *); 97int secpolicy_fs_minfree(const cred_t *, const struct vfs *); 98int secpolicy_fs_quota(const cred_t *, const struct vfs *); 99int secpolicy_idmap(const cred_t *); 100int secpolicy_ip(const cred_t *, int, boolean_t); 101int secpolicy_ip_config(const cred_t *, boolean_t); 102int secpolicy_ipc_access(const cred_t *, const struct kipc_perm *, mode_t); 103int secpolicy_ipc_config(const cred_t *); 104int secpolicy_ipc_owner(const cred_t *, const struct kipc_perm *); 105int secpolicy_kmdb(const cred_t *); 106int secpolicy_lock_memory(const cred_t *); 107int secpolicy_modctl(const cred_t *, int); 108int secpolicy_net(const cred_t *, int, boolean_t); 109int secpolicy_net_bindmlp(const cred_t *); 110int secpolicy_net_config(const cred_t *, boolean_t); 111int secpolicy_net_icmpaccess(const cred_t *); 112int secpolicy_net_mac_aware(const cred_t *); 113int secpolicy_net_privaddr(const cred_t *, in_port_t); 114int secpolicy_net_rawaccess(const cred_t *); 115boolean_t secpolicy_net_reply_equal(const cred_t *); 116int secpolicy_newproc(const cred_t *); 117int secpolicy_nfs(const cred_t *); 118int secpolicy_pcfs_modify_bootpartition(const cred_t *); 119int secpolicy_ponline(const cred_t *); 120int secpolicy_pool(const cred_t *); 121int secpolicy_power_mgmt(const cred_t *); 122int secpolicy_proc_access(const cred_t *); 123int secpolicy_proc_excl_open(const cred_t *); 124int secpolicy_proc_owner(const cred_t *, const cred_t *, int); 125int secpolicy_proc_zone(const cred_t *); 126int secpolicy_pset(const cred_t *); 127int secpolicy_rctlsys(const cred_t *, boolean_t); 128int secpolicy_resource(const cred_t *); 129int secpolicy_rpcmod_open(const cred_t *); 130int secpolicy_rsm_access(const cred_t *, uid_t, mode_t); 131int secpolicy_setpriority(const cred_t *); 132int secpolicy_settime(const cred_t *); 133int secpolicy_smb(const cred_t *); 134int secpolicy_smbfs_login(const cred_t *, uid_t); 135int secpolicy_spec_open(const cred_t *, struct vnode *, int); 136int secpolicy_sti(const cred_t *); 137int secpolicy_swapctl(const cred_t *); 138int secpolicy_sys_config(const cred_t *, boolean_t); 139int secpolicy_zone_admin(const cred_t *, boolean_t); 140int secpolicy_zone_config(const cred_t *); 141int secpolicy_sys_devices(const cred_t *); 142int secpolicy_systeminfo(const cred_t *); 143int secpolicy_tasksys(const cred_t *); 144int secpolicy_vnode_access(const cred_t *, vnode_t *, uid_t, mode_t); 145int secpolicy_vnode_create_gid(const cred_t *); 146int secpolicy_vnode_owner(const cred_t *, uid_t); 147int secpolicy_vnode_remove(const cred_t *); 148int secpolicy_vnode_setdac(const cred_t *, uid_t); 149int secpolicy_vnode_setid_retain(const cred_t *, boolean_t); 150int secpolicy_vnode_setids_setgids(const cred_t *, gid_t); 151int secpolicy_vnode_stky_modify(const cred_t *); 152int secpolicy_vscan(const cred_t *); 153int secpolicy_zinject(const cred_t *); 154int secpolicy_zfs(const cred_t *); 155int secpolicy_ucode_update(const cred_t *); 156int secpolicy_sadopen(const cred_t *); 157void secpolicy_setid_clear(vattr_t *, cred_t *); 158void secpolicy_fs_mount_clearopts(cred_t *, struct vfs *); 159int secpolicy_setid_setsticky_clear(vnode_t *, vattr_t *, 160 const vattr_t *, cred_t *); 161int secpolicy_xvattr(xvattr_t *, uid_t, cred_t *, vtype_t); 162 163int secpolicy_basic_exec(const cred_t *); 164int secpolicy_basic_fork(const cred_t *); 165int secpolicy_basic_proc(const cred_t *); 166int secpolicy_basic_procinfo(const cred_t *, struct proc *, struct proc *); 167int secpolicy_basic_link(const cred_t *); 168 169int secpolicy_gart_access(const cred_t *); 170int secpolicy_gart_map(const cred_t *); 171/* 172 * This function to be called from xxfs_setattr(). 173 * Must be called with the node's attributes read-write locked. 174 * 175 * cred_t * - acting credentials 176 * struct vnode * - vnode we're operating on 177 * struct vattr *va - new attributes, va_mask may be 178 * changed on return from a call 179 * struct vattr *oldva - old attributes, need include owner 180 * and mode only 181 * int flags - setattr flags 182 * int iaccess(void *node, int mode, cred_t *cr) 183 * - non-locking internal access function 184 * mode be checked 185 * w/ VREAD|VWRITE|VEXEC, not fs 186 * internal mode encoding. 187 * 188 * void *node - internal node (inode, tmpnode) to 189 * pass as arg to iaccess 190 */ 191int secpolicy_vnode_setattr(cred_t *, struct vnode *, struct vattr *, 192 const struct vattr *, int, int (void *, int, cred_t *), void *); 193 194/* 195 * Test privilege. Audit success or failure, allow privilege debugging. 196 * Returns 0 for success, err for failure. 197 */ 198#define PRIV_POLICY(cred, priv, all, err, reason) \ 199 priv_policy((cred), (priv), (all), (err), (reason)) 200 201/* 202 * Test privilege. Audit success only, no privilege debugging. 203 * Returns 1 for success, and 0 for failure. 204 */ 205#define PRIV_POLICY_CHOICE(cred, priv, all) \ 206 priv_policy_choice((cred), (priv), (all)) 207 208/* 209 * Test privilege. No priv_debugging, no auditing. 210 * Returns 1 for success, and 0 for failure. 211 */ 212 213#define PRIV_POLICY_ONLY(cred, priv, all) \ 214 priv_policy_only((cred), (priv), (all)) 215 216 217#endif 218 219#ifdef __cplusplus 220} 221#endif 222 223#endif /* _SYS_POLICY_H */ 224