common/sys/klpd.h

	klpd.h revision 134a1f4e3289b54e0f980e9cf05352e419a60bee
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
 */

#ifndef _SYS_KLPD_H
#define _SYS_KLPD_H

#include <sys/types.h>
#include <sys/priv.h>
#include <sys/procset.h>

#ifdef _KERNEL
#include <sys/cred.h>
#include <sys/sysmacros.h>
#include <sys/varargs.h>
#endif

#ifdef  __cplusplus
extern "C" {
#endif

#define KLPDCALL_VERS       1

#define KLPDARG_NOMORE      0       /* End of argument List */
#define KLPDARG_NONE        0       /* No argument */
#define KLPDARG_VNODE       1       /* vnode_t * */
#define KLPDARG_INT     2       /* int */
#define KLPDARG_PORT        3       /* int, port number */
#define KLPDARG_TCPPORT     4       /* int, tcp port number */
#define KLPDARG_UDPPORT     5       /* int, udp port number */
#define KLPDARG_SCTPPORT    6       /* int, sctp port number */
#define KLPDARG_SDPPORT     7       /* int, sdp port number */

#ifdef _KERNEL

struct klpd_reg;
struct credklpd;

int klpd_reg(int, idtype_t, id_t, priv_set_t *);
int klpd_unreg(int, idtype_t, id_t);
void klpd_freelist(struct klpd_reg **);
void klpd_rele(struct klpd_reg *);
int klpd_call(const cred_t *, const priv_set_t *, va_list);
void crklpd_hold(struct credklpd *);
void crklpd_rele(struct credklpd *);
int pfexec_reg(int);
int pfexec_unreg(int);
int pfexec_call(const cred_t *, struct pathname *, cred_t **, boolean_t *);
int get_forced_privs(const cred_t *, const char *, priv_set_t *);
int check_user_privs(const cred_t *, const priv_set_t *);

#endif /* _KERNEL */

typedef struct klpd_head {
    uint32_t    klh_vers;       /* Version */
    uint32_t    klh_len;        /* Length of full packet */
    uint32_t    klh_argoff;     /* Offset of argument */
    uint32_t    klh_privoff;        /* Offset of privilege set */
} klpd_head_t;

#define KLH_PRIVSET(kh) ((priv_set_t *)(((kh)->klh_privoff == 0 ? NULL : \
            (char *)(kh) + (kh)->klh_privoff)))
#define KLH_ARG(kh) ((void *)((kh)->klh_argoff != 0 ? \
            (char *)(kh) + (kh)->klh_argoff : NULL))

typedef struct klpd_arg {
    uint_t  kla_type;
    uint_t  kla_dlen;
    union {
        char    __cdata[1];
        int __idata;
        uint_t  __uidata;
    } kla_data;
} klpd_arg_t;

#define kla_str     kla_data.__cdata
#define kla_int     kla_data.__idata
#define kla_uint    kla_data.__uidata

#define PFEXEC_ARG_VERS         0x1
#define PFEXEC_EXEC_ATTRS       0x1 /* pfexec_reply_t */
#define PFEXEC_FORCED_PRIVS     0x2 /* priv_set_t */
#define PFEXEC_USER_PRIVS       0x3 /* uint32_t */

#define PFEXEC_ARG_SIZE(bufsize)    \
    (offsetof(pfexec_arg_t, pfa_data) + (bufsize))

typedef struct pfexec_arg {
    uint_t  pfa_vers;       /* Caller version */
    uint_t  pfa_call;       /* Call type */
    uint_t  pfa_len;        /* Length of data */
    uid_t   pfa_uid;        /* Real uid of subject */
    union {
        char        __pfa_path[1];
        uint32_t    __pfa_buf[1];
    } pfa_data;
} pfexec_arg_t;

#define pfa_path    pfa_data.__pfa_path
#define pfa_buf     pfa_data.__pfa_buf

#define PFEXEC_NOTSET       ((uid_t)-1)

typedef struct pfexec_reply {
    uint_t      pfr_vers;
    uint_t      pfr_len;
    uid_t       pfr_ruid, pfr_euid;
    gid_t       pfr_rgid, pfr_egid;
    boolean_t   pfr_setcred;
    boolean_t   pfr_scrubenv;
    boolean_t   pfr_clearflag;
    boolean_t   pfr_allowed;
    uint_t      pfr_ioff;
    uint_t      pfr_loff;
} pfexec_reply_t;

#define PFEXEC_REPLY_IPRIV(pfr) \
    ((pfr)->pfr_ioff ? (priv_set_t *)((char *)(pfr) + (pfr)->pfr_ioff) \
    :  (priv_set_t *)0)
#define PFEXEC_REPLY_LPRIV(pfr) \
    ((pfr)->pfr_loff ? (priv_set_t *)((char *)(pfr) + (pfr)->pfr_loff) \
    :  (priv_set_t *)0)

#ifdef  __cplusplus
}
#endif

#endif  /* _SYS_KLPD_H */