xref: /illumos-gate/usr/src/cmd/auditreduce/token.c (revision 45916cd2)
17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*45916cd2Sjpk  * Common Development and Distribution License (the "License").
6*45916cd2Sjpk  * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate  *
87c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate  * and limitations under the License.
127c478bd9Sstevel@tonic-gate  *
137c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate  *
197c478bd9Sstevel@tonic-gate  * CDDL HEADER END
207c478bd9Sstevel@tonic-gate  */
217c478bd9Sstevel@tonic-gate /*
22*45916cd2Sjpk  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
237c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate  */
257c478bd9Sstevel@tonic-gate 
267c478bd9Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
277c478bd9Sstevel@tonic-gate 
287c478bd9Sstevel@tonic-gate /*
297c478bd9Sstevel@tonic-gate  * Token processing for auditreduce.
307c478bd9Sstevel@tonic-gate  */
317c478bd9Sstevel@tonic-gate 
327c478bd9Sstevel@tonic-gate #include <locale.h>
337c478bd9Sstevel@tonic-gate #include <sys/zone.h>
347c478bd9Sstevel@tonic-gate #include "auditr.h"
357c478bd9Sstevel@tonic-gate #include "toktable.h"
367c478bd9Sstevel@tonic-gate 
377c478bd9Sstevel@tonic-gate extern int	re_exec2(char *);
387c478bd9Sstevel@tonic-gate 
397c478bd9Sstevel@tonic-gate static void	anchor_path(char *path);
407c478bd9Sstevel@tonic-gate static char	*collapse_path(char *s);
417c478bd9Sstevel@tonic-gate static void	get_string(adr_t *adr, char **p);
427c478bd9Sstevel@tonic-gate static int	ipc_type_match(int flag, char type);
437c478bd9Sstevel@tonic-gate static void	skip_string(adr_t *adr);
447c478bd9Sstevel@tonic-gate static int	xgeneric(adr_t *adr);
457c478bd9Sstevel@tonic-gate 
467c478bd9Sstevel@tonic-gate #if	AUDIT_REC
477c478bd9Sstevel@tonic-gate void
487c478bd9Sstevel@tonic-gate print_id(int id)
497c478bd9Sstevel@tonic-gate {
507c478bd9Sstevel@tonic-gate 	char *suffix;
517c478bd9Sstevel@tonic-gate 
527c478bd9Sstevel@tonic-gate 	if ((id < 0) || (id > MAXTOKEN) ||
537c478bd9Sstevel@tonic-gate 	    (tokentable[id].func == NOFUNC)) {
547c478bd9Sstevel@tonic-gate 		(void) fprintf(stderr,
557c478bd9Sstevel@tonic-gate 		    "token_processing: token %d not found\n", id);
567c478bd9Sstevel@tonic-gate 		return;
577c478bd9Sstevel@tonic-gate 	}
587c478bd9Sstevel@tonic-gate 
597c478bd9Sstevel@tonic-gate 	switch (id) {
607c478bd9Sstevel@tonic-gate 	case AUT_NEWGROUPS:
617c478bd9Sstevel@tonic-gate 		suffix = "_new";
627c478bd9Sstevel@tonic-gate 		break;
637c478bd9Sstevel@tonic-gate 	case AUT_ATTR32:
647c478bd9Sstevel@tonic-gate 		suffix = "32";
657c478bd9Sstevel@tonic-gate 		break;
667c478bd9Sstevel@tonic-gate 	case AUT_ARG64:
677c478bd9Sstevel@tonic-gate 	case AUT_RETURN64:
687c478bd9Sstevel@tonic-gate 	case AUT_ATTR64:
697c478bd9Sstevel@tonic-gate 	case AUT_HEADER64:
707c478bd9Sstevel@tonic-gate 	case AUT_SUBJECT64:
717c478bd9Sstevel@tonic-gate 	case AUT_PROCESS64:
727c478bd9Sstevel@tonic-gate 	case AUT_OTHER_FILE64:
737c478bd9Sstevel@tonic-gate 		suffix = "64";
747c478bd9Sstevel@tonic-gate 		break;
757c478bd9Sstevel@tonic-gate 	case AUT_SOCKET_EX:
767c478bd9Sstevel@tonic-gate 	case AUT_IN_ADDR_EX:
777c478bd9Sstevel@tonic-gate 		suffix = "_ex";
787c478bd9Sstevel@tonic-gate 		break;
797c478bd9Sstevel@tonic-gate 	case AUT_HEADER32_EX:
807c478bd9Sstevel@tonic-gate 	case AUT_SUBJECT32_EX:
817c478bd9Sstevel@tonic-gate 	case AUT_PROCESS32_EX:
827c478bd9Sstevel@tonic-gate 		suffix = "32_ex";
837c478bd9Sstevel@tonic-gate 		break;
847c478bd9Sstevel@tonic-gate 	case AUT_HEADER64_EX:
857c478bd9Sstevel@tonic-gate 	case AUT_SUBJECT64_EX:
867c478bd9Sstevel@tonic-gate 	case AUT_PROCESS64_EX:
877c478bd9Sstevel@tonic-gate 		suffix = "64_ex";
887c478bd9Sstevel@tonic-gate 		break;
897c478bd9Sstevel@tonic-gate 	default:
907c478bd9Sstevel@tonic-gate 		suffix = "";
917c478bd9Sstevel@tonic-gate 		break;
927c478bd9Sstevel@tonic-gate 	}
937c478bd9Sstevel@tonic-gate 	(void) fprintf(stderr, "token_processing: %s%s\n",
947c478bd9Sstevel@tonic-gate 	    tokentable[id].t_name, suffix);
957c478bd9Sstevel@tonic-gate }
967c478bd9Sstevel@tonic-gate #endif	/* AUDIT_REC */
977c478bd9Sstevel@tonic-gate 
987c478bd9Sstevel@tonic-gate /*
997c478bd9Sstevel@tonic-gate  * Process a token in a record to determine whether the record is interesting.
1007c478bd9Sstevel@tonic-gate  */
1017c478bd9Sstevel@tonic-gate 
1027c478bd9Sstevel@tonic-gate int
1037c478bd9Sstevel@tonic-gate token_processing(adr_t *adr, int tokenid)
1047c478bd9Sstevel@tonic-gate {
1057c478bd9Sstevel@tonic-gate 	if ((tokenid > 0) && (tokenid <= MAXTOKEN) &&
1067c478bd9Sstevel@tonic-gate 	    (tokentable[tokenid].func != NOFUNC)) {
1077c478bd9Sstevel@tonic-gate #if	AUDIT_REC
1087c478bd9Sstevel@tonic-gate 		print_id(tokenid);
1097c478bd9Sstevel@tonic-gate #endif	/* AUDIT_REC */
1107c478bd9Sstevel@tonic-gate 		return ((*tokentable[tokenid].func)(adr));
1117c478bd9Sstevel@tonic-gate 	}
1127c478bd9Sstevel@tonic-gate 
1137c478bd9Sstevel@tonic-gate 	/* here if token id is not in table */
1147c478bd9Sstevel@tonic-gate 	return (-2);
1157c478bd9Sstevel@tonic-gate }
1167c478bd9Sstevel@tonic-gate 
1177c478bd9Sstevel@tonic-gate 
1187c478bd9Sstevel@tonic-gate /* There should not be any file or header tokens in the middle of a record */
1197c478bd9Sstevel@tonic-gate 
1207c478bd9Sstevel@tonic-gate /* ARGSUSED */
1217c478bd9Sstevel@tonic-gate int
1227c478bd9Sstevel@tonic-gate file_token(adr_t *adr)
1237c478bd9Sstevel@tonic-gate {
1247c478bd9Sstevel@tonic-gate 	return (-2);
1257c478bd9Sstevel@tonic-gate }
1267c478bd9Sstevel@tonic-gate 
1277c478bd9Sstevel@tonic-gate /* ARGSUSED */
1287c478bd9Sstevel@tonic-gate int
1297c478bd9Sstevel@tonic-gate file64_token(adr_t *adr)
1307c478bd9Sstevel@tonic-gate {
1317c478bd9Sstevel@tonic-gate 	return (-2);
1327c478bd9Sstevel@tonic-gate }
1337c478bd9Sstevel@tonic-gate 
1347c478bd9Sstevel@tonic-gate /* ARGSUSED */
1357c478bd9Sstevel@tonic-gate int
1367c478bd9Sstevel@tonic-gate header_token(adr_t *adr)
1377c478bd9Sstevel@tonic-gate {
1387c478bd9Sstevel@tonic-gate 	return (-2);
1397c478bd9Sstevel@tonic-gate }
1407c478bd9Sstevel@tonic-gate 
1417c478bd9Sstevel@tonic-gate /* ARGSUSED */
1427c478bd9Sstevel@tonic-gate int
1437c478bd9Sstevel@tonic-gate header32_ex_token(adr_t *adr)
1447c478bd9Sstevel@tonic-gate {
1457c478bd9Sstevel@tonic-gate 	return (-2);
1467c478bd9Sstevel@tonic-gate }
1477c478bd9Sstevel@tonic-gate 
1487c478bd9Sstevel@tonic-gate /* ARGSUSED */
1497c478bd9Sstevel@tonic-gate int
1507c478bd9Sstevel@tonic-gate header64_ex_token(adr_t *adr)
1517c478bd9Sstevel@tonic-gate {
1527c478bd9Sstevel@tonic-gate 	return (-2);
1537c478bd9Sstevel@tonic-gate }
1547c478bd9Sstevel@tonic-gate 
1557c478bd9Sstevel@tonic-gate /* ARGSUSED */
1567c478bd9Sstevel@tonic-gate int
1577c478bd9Sstevel@tonic-gate header64_token(adr_t *adr)
1587c478bd9Sstevel@tonic-gate {
1597c478bd9Sstevel@tonic-gate 	return (-2);
1607c478bd9Sstevel@tonic-gate }
1617c478bd9Sstevel@tonic-gate 
1627c478bd9Sstevel@tonic-gate 
1637c478bd9Sstevel@tonic-gate /*
1647c478bd9Sstevel@tonic-gate  * ======================================================
1657c478bd9Sstevel@tonic-gate  *  The following token processing routines return
1667c478bd9Sstevel@tonic-gate  *  -1: if the record is not interesting
1677c478bd9Sstevel@tonic-gate  *  -2: if an error is found
1687c478bd9Sstevel@tonic-gate  * ======================================================
1697c478bd9Sstevel@tonic-gate  */
1707c478bd9Sstevel@tonic-gate 
1717c478bd9Sstevel@tonic-gate int
1727c478bd9Sstevel@tonic-gate trailer_token(adr_t *adr)
1737c478bd9Sstevel@tonic-gate {
1747c478bd9Sstevel@tonic-gate 	short	magic_number;
1757c478bd9Sstevel@tonic-gate 	uint32_t bytes;
1767c478bd9Sstevel@tonic-gate 
1777c478bd9Sstevel@tonic-gate 	adrm_u_short(adr, (ushort_t *)&magic_number, 1);
1787c478bd9Sstevel@tonic-gate 	if (magic_number != AUT_TRAILER_MAGIC) {
1797c478bd9Sstevel@tonic-gate 		(void) fprintf(stderr, "%s\n",
1807c478bd9Sstevel@tonic-gate 			gettext("auditreduce: Bad trailer token"));
1817c478bd9Sstevel@tonic-gate 		return (-2);
1827c478bd9Sstevel@tonic-gate 	}
1837c478bd9Sstevel@tonic-gate 	adrm_u_int32(adr, &bytes, 1);
1847c478bd9Sstevel@tonic-gate 
1857c478bd9Sstevel@tonic-gate 	return (-1);
1867c478bd9Sstevel@tonic-gate }
1877c478bd9Sstevel@tonic-gate 
1887c478bd9Sstevel@tonic-gate 
1897c478bd9Sstevel@tonic-gate /*
1907c478bd9Sstevel@tonic-gate  * Format of arbitrary data token:
1917c478bd9Sstevel@tonic-gate  *	arbitrary data token id	adr char
1927c478bd9Sstevel@tonic-gate  * 	how to print		adr_char
1937c478bd9Sstevel@tonic-gate  *	basic unit		adr_char
1947c478bd9Sstevel@tonic-gate  *	unit count		adr_char, specifying number of units of
1957c478bd9Sstevel@tonic-gate  *	data items		depends on basic unit
1967c478bd9Sstevel@tonic-gate  *
1977c478bd9Sstevel@tonic-gate  */
1987c478bd9Sstevel@tonic-gate int
1997c478bd9Sstevel@tonic-gate arbitrary_data_token(adr_t *adr)
2007c478bd9Sstevel@tonic-gate {
2017c478bd9Sstevel@tonic-gate 	int	i;
2027c478bd9Sstevel@tonic-gate 	char	c1;
2037c478bd9Sstevel@tonic-gate 	short	c2;
2047c478bd9Sstevel@tonic-gate 	int32_t	c3;
2057c478bd9Sstevel@tonic-gate 	int64_t c4;
2067c478bd9Sstevel@tonic-gate 	char	how_to_print, basic_unit, unit_count;
2077c478bd9Sstevel@tonic-gate 
2087c478bd9Sstevel@tonic-gate 	/* get how_to_print, basic_unit, and unit_count */
2097c478bd9Sstevel@tonic-gate 	adrm_char(adr, &how_to_print, 1);
2107c478bd9Sstevel@tonic-gate 	adrm_char(adr, &basic_unit, 1);
2117c478bd9Sstevel@tonic-gate 	adrm_char(adr, &unit_count, 1);
2127c478bd9Sstevel@tonic-gate 	for (i = 0; i < unit_count; i++) {
2137c478bd9Sstevel@tonic-gate 		switch (basic_unit) {
2147c478bd9Sstevel@tonic-gate 			/* case AUR_BYTE: has same value as AUR_CHAR */
2157c478bd9Sstevel@tonic-gate 		case AUR_CHAR:
2167c478bd9Sstevel@tonic-gate 			adrm_char(adr, &c1, 1);
2177c478bd9Sstevel@tonic-gate 			break;
2187c478bd9Sstevel@tonic-gate 		case AUR_SHORT:
2197c478bd9Sstevel@tonic-gate 			adrm_short(adr, &c2, 1);
2207c478bd9Sstevel@tonic-gate 			break;
2217c478bd9Sstevel@tonic-gate 		case AUR_INT32:
2227c478bd9Sstevel@tonic-gate 			adrm_int32(adr, (int32_t *)&c3, 1);
2237c478bd9Sstevel@tonic-gate 			break;
2247c478bd9Sstevel@tonic-gate 		case AUR_INT64:
2257c478bd9Sstevel@tonic-gate 			adrm_int64(adr, (int64_t *)&c4, 1);
2267c478bd9Sstevel@tonic-gate 			break;
2277c478bd9Sstevel@tonic-gate 		default:
2287c478bd9Sstevel@tonic-gate 			return (-2);
2297c478bd9Sstevel@tonic-gate 			break;
2307c478bd9Sstevel@tonic-gate 		}
2317c478bd9Sstevel@tonic-gate 	}
2327c478bd9Sstevel@tonic-gate 	return (-1);
2337c478bd9Sstevel@tonic-gate }
2347c478bd9Sstevel@tonic-gate 
2357c478bd9Sstevel@tonic-gate 
2367c478bd9Sstevel@tonic-gate /*
2377c478bd9Sstevel@tonic-gate  * Format of opaque token:
2387c478bd9Sstevel@tonic-gate  *	opaque token id		adr_char
2397c478bd9Sstevel@tonic-gate  *	size			adr_short
2407c478bd9Sstevel@tonic-gate  *	data			adr_char, size times
2417c478bd9Sstevel@tonic-gate  *
2427c478bd9Sstevel@tonic-gate  */
2437c478bd9Sstevel@tonic-gate int
2447c478bd9Sstevel@tonic-gate opaque_token(adr_t *adr)
2457c478bd9Sstevel@tonic-gate {
2467c478bd9Sstevel@tonic-gate 	skip_string(adr);
2477c478bd9Sstevel@tonic-gate 	return (-1);
2487c478bd9Sstevel@tonic-gate }
2497c478bd9Sstevel@tonic-gate 
2507c478bd9Sstevel@tonic-gate 
2517c478bd9Sstevel@tonic-gate 
2527c478bd9Sstevel@tonic-gate /*
2537c478bd9Sstevel@tonic-gate  * Format of return32 value token:
2547c478bd9Sstevel@tonic-gate  * 	return value token id	adr_char
2557c478bd9Sstevel@tonic-gate  *	error number		adr_char
2567c478bd9Sstevel@tonic-gate  *	return value		adr_u_int32
2577c478bd9Sstevel@tonic-gate  *
2587c478bd9Sstevel@tonic-gate  */
2597c478bd9Sstevel@tonic-gate int
2607c478bd9Sstevel@tonic-gate return_value32_token(adr_t *adr)
2617c478bd9Sstevel@tonic-gate {
2627c478bd9Sstevel@tonic-gate 	char		errnum;
2637c478bd9Sstevel@tonic-gate 	uint32_t	value;
2647c478bd9Sstevel@tonic-gate 
2657c478bd9Sstevel@tonic-gate 	adrm_char(adr, &errnum, 1);
2667c478bd9Sstevel@tonic-gate 	adrm_u_int32(adr, &value, 1);
2677c478bd9Sstevel@tonic-gate 	if ((flags & M_SORF) &&
2687c478bd9Sstevel@tonic-gate 		((global_class & mask.am_success) && (errnum == 0)) ||
2697c478bd9Sstevel@tonic-gate 		((global_class & mask.am_failure) && (errnum != 0))) {
2707c478bd9Sstevel@tonic-gate 			checkflags |= M_SORF;
2717c478bd9Sstevel@tonic-gate 	}
2727c478bd9Sstevel@tonic-gate 	return (-1);
2737c478bd9Sstevel@tonic-gate }
2747c478bd9Sstevel@tonic-gate 
2757c478bd9Sstevel@tonic-gate /*
2767c478bd9Sstevel@tonic-gate  * Format of return64 value token:
2777c478bd9Sstevel@tonic-gate  * 	return value token id	adr_char
2787c478bd9Sstevel@tonic-gate  *	error number		adr_char
2797c478bd9Sstevel@tonic-gate  *	return value		adr_u_int64
2807c478bd9Sstevel@tonic-gate  *
2817c478bd9Sstevel@tonic-gate  */
2827c478bd9Sstevel@tonic-gate int
2837c478bd9Sstevel@tonic-gate return_value64_token(adr_t *adr)
2847c478bd9Sstevel@tonic-gate {
2857c478bd9Sstevel@tonic-gate 	char		errnum;
2867c478bd9Sstevel@tonic-gate 	uint64_t	value;
2877c478bd9Sstevel@tonic-gate 
2887c478bd9Sstevel@tonic-gate 	adrm_char(adr, &errnum, 1);
2897c478bd9Sstevel@tonic-gate 	adrm_u_int64(adr, &value, 1);
2907c478bd9Sstevel@tonic-gate 	if ((flags & M_SORF) &&
2917c478bd9Sstevel@tonic-gate 		((global_class & mask.am_success) && (errnum == 0)) ||
2927c478bd9Sstevel@tonic-gate 		((global_class & mask.am_failure) && (errnum != 0))) {
2937c478bd9Sstevel@tonic-gate 			checkflags |= M_SORF;
2947c478bd9Sstevel@tonic-gate 	}
2957c478bd9Sstevel@tonic-gate 	return (-1);
2967c478bd9Sstevel@tonic-gate }
2977c478bd9Sstevel@tonic-gate 
2987c478bd9Sstevel@tonic-gate 
2997c478bd9Sstevel@tonic-gate /*
3007c478bd9Sstevel@tonic-gate  * Format of sequence token:
3017c478bd9Sstevel@tonic-gate  *	sequence token id	adr_char
3027c478bd9Sstevel@tonic-gate  *	audit_count		int32_t
3037c478bd9Sstevel@tonic-gate  *
3047c478bd9Sstevel@tonic-gate  */
3057c478bd9Sstevel@tonic-gate int
3067c478bd9Sstevel@tonic-gate sequence_token(adr_t *adr)
3077c478bd9Sstevel@tonic-gate {
3087c478bd9Sstevel@tonic-gate 	int32_t	audit_count;
3097c478bd9Sstevel@tonic-gate 
3107c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &audit_count, 1);
3117c478bd9Sstevel@tonic-gate 	return (-1);
3127c478bd9Sstevel@tonic-gate }
3137c478bd9Sstevel@tonic-gate 
3147c478bd9Sstevel@tonic-gate 
3157c478bd9Sstevel@tonic-gate /*
3167c478bd9Sstevel@tonic-gate  * Format of text token:
3177c478bd9Sstevel@tonic-gate  *	text token id		adr_char
3187c478bd9Sstevel@tonic-gate  * 	text			adr_string
3197c478bd9Sstevel@tonic-gate  *
3207c478bd9Sstevel@tonic-gate  */
3217c478bd9Sstevel@tonic-gate int
3227c478bd9Sstevel@tonic-gate text_token(adr_t *adr)
3237c478bd9Sstevel@tonic-gate {
3247c478bd9Sstevel@tonic-gate 	skip_string(adr);
3257c478bd9Sstevel@tonic-gate 	return (-1);
3267c478bd9Sstevel@tonic-gate }
3277c478bd9Sstevel@tonic-gate 
3287c478bd9Sstevel@tonic-gate 
3297c478bd9Sstevel@tonic-gate /*
3307c478bd9Sstevel@tonic-gate  * Format of ip_addr token:
3317c478bd9Sstevel@tonic-gate  *	ip token id	adr_char
3327c478bd9Sstevel@tonic-gate  *	address		adr_int32
3337c478bd9Sstevel@tonic-gate  *
3347c478bd9Sstevel@tonic-gate  */
3357c478bd9Sstevel@tonic-gate int
3367c478bd9Sstevel@tonic-gate ip_addr_token(adr_t *adr)
3377c478bd9Sstevel@tonic-gate {
3387c478bd9Sstevel@tonic-gate 	int32_t	address;
3397c478bd9Sstevel@tonic-gate 
3407c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)&address, 4);
3417c478bd9Sstevel@tonic-gate 
3427c478bd9Sstevel@tonic-gate 	return (-1);
3437c478bd9Sstevel@tonic-gate }
3447c478bd9Sstevel@tonic-gate 
3457c478bd9Sstevel@tonic-gate /*
3467c478bd9Sstevel@tonic-gate  * Format of ip_addr_ex token:
3477c478bd9Sstevel@tonic-gate  *	ip token id	adr_char
3487c478bd9Sstevel@tonic-gate  *	ip type		adr_int32
3497c478bd9Sstevel@tonic-gate  *	address		4*adr_int32
3507c478bd9Sstevel@tonic-gate  *
3517c478bd9Sstevel@tonic-gate  */
3527c478bd9Sstevel@tonic-gate int
3537c478bd9Sstevel@tonic-gate ip_addr_ex_token(adr_t *adr)
3547c478bd9Sstevel@tonic-gate {
3557c478bd9Sstevel@tonic-gate 	int32_t	address[4];
3567c478bd9Sstevel@tonic-gate 	int32_t type;
3577c478bd9Sstevel@tonic-gate 
3587c478bd9Sstevel@tonic-gate 	adrm_int32(adr, (int32_t *)&type, 1);
3597c478bd9Sstevel@tonic-gate 	adrm_int32(adr, (int32_t *)&address, 4);
3607c478bd9Sstevel@tonic-gate 
3617c478bd9Sstevel@tonic-gate 	return (-1);
3627c478bd9Sstevel@tonic-gate }
3637c478bd9Sstevel@tonic-gate 
3647c478bd9Sstevel@tonic-gate /*
3657c478bd9Sstevel@tonic-gate  * Format of ip token:
3667c478bd9Sstevel@tonic-gate  *	ip header token id	adr_char
3677c478bd9Sstevel@tonic-gate  *	version			adr_char
3687c478bd9Sstevel@tonic-gate  *	type of service		adr_char
3697c478bd9Sstevel@tonic-gate  *	length			adr_short
3707c478bd9Sstevel@tonic-gate  *	id			adr_u_short
3717c478bd9Sstevel@tonic-gate  *	offset			adr_u_short
3727c478bd9Sstevel@tonic-gate  *	ttl			adr_char
3737c478bd9Sstevel@tonic-gate  *	protocol		adr_char
3747c478bd9Sstevel@tonic-gate  *	checksum		adr_u_short
3757c478bd9Sstevel@tonic-gate  *	source address		adr_int32
3767c478bd9Sstevel@tonic-gate  *	destination address	adr_int32
3777c478bd9Sstevel@tonic-gate  *
3787c478bd9Sstevel@tonic-gate  */
3797c478bd9Sstevel@tonic-gate int
3807c478bd9Sstevel@tonic-gate ip_token(adr_t *adr)
3817c478bd9Sstevel@tonic-gate {
3827c478bd9Sstevel@tonic-gate 	char	version;
3837c478bd9Sstevel@tonic-gate 	char	type;
3847c478bd9Sstevel@tonic-gate 	short	len;
3857c478bd9Sstevel@tonic-gate 	unsigned short	id, offset, checksum;
3867c478bd9Sstevel@tonic-gate 	char	ttl, protocol;
3877c478bd9Sstevel@tonic-gate 	int32_t	src, dest;
3887c478bd9Sstevel@tonic-gate 
3897c478bd9Sstevel@tonic-gate 	adrm_char(adr, &version, 1);
3907c478bd9Sstevel@tonic-gate 	adrm_char(adr, &type, 1);
3917c478bd9Sstevel@tonic-gate 	adrm_short(adr, &len, 1);
3927c478bd9Sstevel@tonic-gate 	adrm_u_short(adr, &id, 1);
3937c478bd9Sstevel@tonic-gate 	adrm_u_short(adr, &offset, 1);
3947c478bd9Sstevel@tonic-gate 	adrm_char(adr, &ttl, 1);
3957c478bd9Sstevel@tonic-gate 	adrm_char(adr, &protocol, 1);
3967c478bd9Sstevel@tonic-gate 	adrm_u_short(adr, &checksum, 1);
3977c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)&src, 4);
3987c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)&dest, 4);
3997c478bd9Sstevel@tonic-gate 
4007c478bd9Sstevel@tonic-gate 	return (-1);
4017c478bd9Sstevel@tonic-gate }
4027c478bd9Sstevel@tonic-gate 
4037c478bd9Sstevel@tonic-gate 
4047c478bd9Sstevel@tonic-gate /*
4057c478bd9Sstevel@tonic-gate  * Format of iport token:
4067c478bd9Sstevel@tonic-gate  *	ip port address token id	adr_char
4077c478bd9Sstevel@tonic-gate  *	port address			adr_short
4087c478bd9Sstevel@tonic-gate  *
4097c478bd9Sstevel@tonic-gate  */
4107c478bd9Sstevel@tonic-gate int
4117c478bd9Sstevel@tonic-gate iport_token(adr_t *adr)
4127c478bd9Sstevel@tonic-gate {
4137c478bd9Sstevel@tonic-gate 	short	address;
4147c478bd9Sstevel@tonic-gate 
4157c478bd9Sstevel@tonic-gate 	adrm_short(adr, &address, 1);
4167c478bd9Sstevel@tonic-gate 
4177c478bd9Sstevel@tonic-gate 	return (-1);
4187c478bd9Sstevel@tonic-gate }
4197c478bd9Sstevel@tonic-gate 
4207c478bd9Sstevel@tonic-gate 
4217c478bd9Sstevel@tonic-gate /*
4227c478bd9Sstevel@tonic-gate  * Format of groups token:
4237c478bd9Sstevel@tonic-gate  *	group token id		adr_char
4247c478bd9Sstevel@tonic-gate  *	group list		adr_int32, 16 times
4257c478bd9Sstevel@tonic-gate  *
4267c478bd9Sstevel@tonic-gate  */
4277c478bd9Sstevel@tonic-gate int
4287c478bd9Sstevel@tonic-gate group_token(adr_t *adr)
4297c478bd9Sstevel@tonic-gate {
4307c478bd9Sstevel@tonic-gate 	int	gid[16];
4317c478bd9Sstevel@tonic-gate 	int	i;
4327c478bd9Sstevel@tonic-gate 	int	flag = 0;
4337c478bd9Sstevel@tonic-gate 
4347c478bd9Sstevel@tonic-gate 	for (i = 0; i < 16; i++) {
4357c478bd9Sstevel@tonic-gate 		adrm_int32(adr, (int32_t *)&gid[i], 1);
4367c478bd9Sstevel@tonic-gate 		if (flags & M_GROUPR) {
4377c478bd9Sstevel@tonic-gate 			if ((unsigned short)m_groupr == gid[i])
4387c478bd9Sstevel@tonic-gate 				flag = 1;
4397c478bd9Sstevel@tonic-gate 		}
4407c478bd9Sstevel@tonic-gate 	}
4417c478bd9Sstevel@tonic-gate 
4427c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPR) {
4437c478bd9Sstevel@tonic-gate 		if (flag)
4447c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
4457c478bd9Sstevel@tonic-gate 	}
4467c478bd9Sstevel@tonic-gate 	return (-1);
4477c478bd9Sstevel@tonic-gate }
4487c478bd9Sstevel@tonic-gate 
4497c478bd9Sstevel@tonic-gate /*
4507c478bd9Sstevel@tonic-gate  * Format of newgroups token:
4517c478bd9Sstevel@tonic-gate  *	group token id		adr_char
4527c478bd9Sstevel@tonic-gate  *	number of groups	adr_short
4537c478bd9Sstevel@tonic-gate  *	group list		adr_int32, "number" times
4547c478bd9Sstevel@tonic-gate  *
4557c478bd9Sstevel@tonic-gate  */
4567c478bd9Sstevel@tonic-gate int
4577c478bd9Sstevel@tonic-gate newgroup_token(adr_t *adr)
4587c478bd9Sstevel@tonic-gate {
4597c478bd9Sstevel@tonic-gate 	gid_t	gid;
4607c478bd9Sstevel@tonic-gate 	int	i;
4617c478bd9Sstevel@tonic-gate 	short int   number;
4627c478bd9Sstevel@tonic-gate 
4637c478bd9Sstevel@tonic-gate 	adrm_short(adr, &number, 1);
4647c478bd9Sstevel@tonic-gate 
4657c478bd9Sstevel@tonic-gate 	for (i = 0; i < number; i++) {
4667c478bd9Sstevel@tonic-gate 		adrm_int32(adr, (int32_t *)&gid, 1);
4677c478bd9Sstevel@tonic-gate 		if (flags & M_GROUPR) {
4687c478bd9Sstevel@tonic-gate 			if (m_groupr == gid)
4697c478bd9Sstevel@tonic-gate 				checkflags |= M_GROUPR;
4707c478bd9Sstevel@tonic-gate 		}
4717c478bd9Sstevel@tonic-gate 	}
4727c478bd9Sstevel@tonic-gate 
4737c478bd9Sstevel@tonic-gate 	return (-1);
4747c478bd9Sstevel@tonic-gate }
4757c478bd9Sstevel@tonic-gate 
4767c478bd9Sstevel@tonic-gate /*
4777c478bd9Sstevel@tonic-gate  * Format of argument32 token:
4787c478bd9Sstevel@tonic-gate  *	argument token id	adr_char
4797c478bd9Sstevel@tonic-gate  *	argument number		adr_char
4807c478bd9Sstevel@tonic-gate  *	argument value		adr_int32
4817c478bd9Sstevel@tonic-gate  *	argument description	adr_string
4827c478bd9Sstevel@tonic-gate  *
4837c478bd9Sstevel@tonic-gate  */
4847c478bd9Sstevel@tonic-gate int
4857c478bd9Sstevel@tonic-gate argument32_token(adr_t *adr)
4867c478bd9Sstevel@tonic-gate {
4877c478bd9Sstevel@tonic-gate 	char	arg_num;
4887c478bd9Sstevel@tonic-gate 	int32_t	arg_val;
4897c478bd9Sstevel@tonic-gate 
4907c478bd9Sstevel@tonic-gate 	adrm_char(adr, &arg_num, 1);
4917c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &arg_val, 1);
4927c478bd9Sstevel@tonic-gate 	skip_string(adr);
4937c478bd9Sstevel@tonic-gate 
4947c478bd9Sstevel@tonic-gate 	return (-1);
4957c478bd9Sstevel@tonic-gate }
4967c478bd9Sstevel@tonic-gate 
4977c478bd9Sstevel@tonic-gate /*
4987c478bd9Sstevel@tonic-gate  * Format of argument64 token:
4997c478bd9Sstevel@tonic-gate  *	argument token id	adr_char
5007c478bd9Sstevel@tonic-gate  *	argument number		adr_char
5017c478bd9Sstevel@tonic-gate  *	argument value		adr_int64
5027c478bd9Sstevel@tonic-gate  *	argument description	adr_string
5037c478bd9Sstevel@tonic-gate  *
5047c478bd9Sstevel@tonic-gate  */
5057c478bd9Sstevel@tonic-gate int
5067c478bd9Sstevel@tonic-gate argument64_token(adr_t *adr)
5077c478bd9Sstevel@tonic-gate {
5087c478bd9Sstevel@tonic-gate 	char	arg_num;
5097c478bd9Sstevel@tonic-gate 	int64_t	arg_val;
5107c478bd9Sstevel@tonic-gate 
5117c478bd9Sstevel@tonic-gate 	adrm_char(adr, &arg_num, 1);
5127c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &arg_val, 1);
5137c478bd9Sstevel@tonic-gate 	skip_string(adr);
5147c478bd9Sstevel@tonic-gate 
5157c478bd9Sstevel@tonic-gate 	return (-1);
5167c478bd9Sstevel@tonic-gate }
5177c478bd9Sstevel@tonic-gate 
5187c478bd9Sstevel@tonic-gate int
5197c478bd9Sstevel@tonic-gate acl_token(adr_t *adr)
5207c478bd9Sstevel@tonic-gate {
5217c478bd9Sstevel@tonic-gate 
5227c478bd9Sstevel@tonic-gate 	int32_t	id;
5237c478bd9Sstevel@tonic-gate 	int32_t	mode;
5247c478bd9Sstevel@tonic-gate 	int32_t	type;
5257c478bd9Sstevel@tonic-gate 
5267c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &type, 1);
5277c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &id, 1);
5287c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &mode, 1);
5297c478bd9Sstevel@tonic-gate 
5307c478bd9Sstevel@tonic-gate 	return (-1);
5317c478bd9Sstevel@tonic-gate }
5327c478bd9Sstevel@tonic-gate 
5337c478bd9Sstevel@tonic-gate /*
5347c478bd9Sstevel@tonic-gate  * Format of attribute token: (old pre SunOS 5.7 format)
5357c478bd9Sstevel@tonic-gate  *	attribute token id	adr_char
5367c478bd9Sstevel@tonic-gate  * 	mode			adr_int32 (printed in octal)
5377c478bd9Sstevel@tonic-gate  *	uid			adr_int32
5387c478bd9Sstevel@tonic-gate  *	gid			adr_int32
5397c478bd9Sstevel@tonic-gate  *	file system id		adr_int32
5407c478bd9Sstevel@tonic-gate  *	node id			adr_int32
5417c478bd9Sstevel@tonic-gate  *	device			adr_int32
5427c478bd9Sstevel@tonic-gate  *
5437c478bd9Sstevel@tonic-gate  */
5447c478bd9Sstevel@tonic-gate int
5457c478bd9Sstevel@tonic-gate attribute_token(adr_t *adr)
5467c478bd9Sstevel@tonic-gate {
5477c478bd9Sstevel@tonic-gate 	int32_t	dev;
5487c478bd9Sstevel@tonic-gate 	int32_t	file_sysid;
5497c478bd9Sstevel@tonic-gate 	int32_t	gid;
5507c478bd9Sstevel@tonic-gate 	int32_t	mode;
5517c478bd9Sstevel@tonic-gate 	int32_t	nodeid;
5527c478bd9Sstevel@tonic-gate 	int32_t	uid;
5537c478bd9Sstevel@tonic-gate 
5547c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &mode, 1);
5557c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &uid, 1);
5567c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &gid, 1);
5577c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &file_sysid, 1);
5587c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &nodeid, 1);
5597c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &dev, 1);
5607c478bd9Sstevel@tonic-gate 
5617c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
5627c478bd9Sstevel@tonic-gate 		if (m_usere == uid)
5637c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
5647c478bd9Sstevel@tonic-gate 	}
5657c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
5667c478bd9Sstevel@tonic-gate 		if (m_groupe == gid)
5677c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
5687c478bd9Sstevel@tonic-gate 	}
5697c478bd9Sstevel@tonic-gate 
5707c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
5717c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_FGROUP) &&
5727c478bd9Sstevel@tonic-gate 		    (obj_group == gid))
5737c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
5747c478bd9Sstevel@tonic-gate 		else if ((obj_flag & OBJ_FOWNER) &&
5757c478bd9Sstevel@tonic-gate 		    (obj_owner == uid))
5767c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
5777c478bd9Sstevel@tonic-gate 	}
5787c478bd9Sstevel@tonic-gate 	return (-1);
5797c478bd9Sstevel@tonic-gate }
5807c478bd9Sstevel@tonic-gate 
5817c478bd9Sstevel@tonic-gate /*
5827c478bd9Sstevel@tonic-gate  * Format of attribute32 token:
5837c478bd9Sstevel@tonic-gate  *	attribute token id	adr_char
5847c478bd9Sstevel@tonic-gate  * 	mode			adr_int32 (printed in octal)
5857c478bd9Sstevel@tonic-gate  *	uid			adr_int32
5867c478bd9Sstevel@tonic-gate  *	gid			adr_int32
5877c478bd9Sstevel@tonic-gate  *	file system id		adr_int32
5887c478bd9Sstevel@tonic-gate  *	node id			adr_int64
5897c478bd9Sstevel@tonic-gate  *	device			adr_int32
5907c478bd9Sstevel@tonic-gate  *
5917c478bd9Sstevel@tonic-gate  */
5927c478bd9Sstevel@tonic-gate int
5937c478bd9Sstevel@tonic-gate attribute32_token(adr_t *adr)
5947c478bd9Sstevel@tonic-gate {
5957c478bd9Sstevel@tonic-gate 	int32_t	dev;
5967c478bd9Sstevel@tonic-gate 	int32_t	file_sysid;
5977c478bd9Sstevel@tonic-gate 	int32_t	gid;
5987c478bd9Sstevel@tonic-gate 	int32_t	mode;
5997c478bd9Sstevel@tonic-gate 	int64_t	nodeid;
6007c478bd9Sstevel@tonic-gate 	int32_t	uid;
6017c478bd9Sstevel@tonic-gate 
6027c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &mode, 1);
6037c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &uid, 1);
6047c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &gid, 1);
6057c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &file_sysid, 1);
6067c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &nodeid, 1);
6077c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &dev, 1);
6087c478bd9Sstevel@tonic-gate 
6097c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
6107c478bd9Sstevel@tonic-gate 		if (m_usere == uid)
6117c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
6127c478bd9Sstevel@tonic-gate 	}
6137c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
6147c478bd9Sstevel@tonic-gate 		if (m_groupe == gid)
6157c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
6167c478bd9Sstevel@tonic-gate 	}
6177c478bd9Sstevel@tonic-gate 
6187c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
6197c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_FGROUP) &&
6207c478bd9Sstevel@tonic-gate 		    (obj_group == gid))
6217c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
6227c478bd9Sstevel@tonic-gate 		else if ((obj_flag & OBJ_FOWNER) &&
6237c478bd9Sstevel@tonic-gate 		    (obj_owner == uid))
6247c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
6257c478bd9Sstevel@tonic-gate 	}
6267c478bd9Sstevel@tonic-gate 	return (-1);
6277c478bd9Sstevel@tonic-gate }
6287c478bd9Sstevel@tonic-gate 
6297c478bd9Sstevel@tonic-gate /*
6307c478bd9Sstevel@tonic-gate  * Format of attribute64 token:
6317c478bd9Sstevel@tonic-gate  *	attribute token id	adr_char
6327c478bd9Sstevel@tonic-gate  * 	mode			adr_int32 (printed in octal)
6337c478bd9Sstevel@tonic-gate  *	uid			adr_int32
6347c478bd9Sstevel@tonic-gate  *	gid			adr_int32
6357c478bd9Sstevel@tonic-gate  *	file system id		adr_int32
6367c478bd9Sstevel@tonic-gate  *	node id			adr_int64
6377c478bd9Sstevel@tonic-gate  *	device			adr_int64
6387c478bd9Sstevel@tonic-gate  *
6397c478bd9Sstevel@tonic-gate  */
6407c478bd9Sstevel@tonic-gate int
6417c478bd9Sstevel@tonic-gate attribute64_token(adr_t *adr)
6427c478bd9Sstevel@tonic-gate {
6437c478bd9Sstevel@tonic-gate 	int64_t	dev;
6447c478bd9Sstevel@tonic-gate 	int32_t	file_sysid;
6457c478bd9Sstevel@tonic-gate 	int32_t	gid;
6467c478bd9Sstevel@tonic-gate 	int32_t	mode;
6477c478bd9Sstevel@tonic-gate 	int64_t	nodeid;
6487c478bd9Sstevel@tonic-gate 	int32_t	uid;
6497c478bd9Sstevel@tonic-gate 
6507c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &mode, 1);
6517c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &uid, 1);
6527c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &gid, 1);
6537c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &file_sysid, 1);
6547c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &nodeid, 1);
6557c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &dev, 1);
6567c478bd9Sstevel@tonic-gate 
6577c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
6587c478bd9Sstevel@tonic-gate 		if (m_usere == uid)
6597c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
6607c478bd9Sstevel@tonic-gate 	}
6617c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
6627c478bd9Sstevel@tonic-gate 		if (m_groupe == gid)
6637c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
6647c478bd9Sstevel@tonic-gate 	}
6657c478bd9Sstevel@tonic-gate 
6667c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
6677c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_FGROUP) &&
6687c478bd9Sstevel@tonic-gate 		    (obj_group == gid))
6697c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
6707c478bd9Sstevel@tonic-gate 		else if ((obj_flag & OBJ_FOWNER) &&
6717c478bd9Sstevel@tonic-gate 		    (obj_owner == uid))
6727c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
6737c478bd9Sstevel@tonic-gate 	}
6747c478bd9Sstevel@tonic-gate 	return (-1);
6757c478bd9Sstevel@tonic-gate }
6767c478bd9Sstevel@tonic-gate 
6777c478bd9Sstevel@tonic-gate 
6787c478bd9Sstevel@tonic-gate /*
6797c478bd9Sstevel@tonic-gate  * Format of command token:
6807c478bd9Sstevel@tonic-gate  *	attribute token id	adr_char
6817c478bd9Sstevel@tonic-gate  *	argc			adr_short
6827c478bd9Sstevel@tonic-gate  *	argv len		adr_short	variable amount of argv len
6837c478bd9Sstevel@tonic-gate  *	argv text		argv len	and text
6847c478bd9Sstevel@tonic-gate  *	.
6857c478bd9Sstevel@tonic-gate  *	.
6867c478bd9Sstevel@tonic-gate  *	.
6877c478bd9Sstevel@tonic-gate  *	envp count		adr_short	variable amount of envp len
6887c478bd9Sstevel@tonic-gate  *	envp len		adr_short	and text
6897c478bd9Sstevel@tonic-gate  *	envp text		envp		len
6907c478bd9Sstevel@tonic-gate  *	.
6917c478bd9Sstevel@tonic-gate  *	.
6927c478bd9Sstevel@tonic-gate  *	.
6937c478bd9Sstevel@tonic-gate  *
6947c478bd9Sstevel@tonic-gate  */
6957c478bd9Sstevel@tonic-gate int
6967c478bd9Sstevel@tonic-gate cmd_token(adr_t *adr)
6977c478bd9Sstevel@tonic-gate {
6987c478bd9Sstevel@tonic-gate 	short	cnt;
6997c478bd9Sstevel@tonic-gate 	short	i;
7007c478bd9Sstevel@tonic-gate 
7017c478bd9Sstevel@tonic-gate 	adrm_short(adr, &cnt, 1);
7027c478bd9Sstevel@tonic-gate 
7037c478bd9Sstevel@tonic-gate 	for (i = 0; i < cnt; i++)
7047c478bd9Sstevel@tonic-gate 		skip_string(adr);
7057c478bd9Sstevel@tonic-gate 
7067c478bd9Sstevel@tonic-gate 	adrm_short(adr, &cnt, 1);
7077c478bd9Sstevel@tonic-gate 
7087c478bd9Sstevel@tonic-gate 	for (i = 0; i < cnt; i++)
7097c478bd9Sstevel@tonic-gate 		skip_string(adr);
7107c478bd9Sstevel@tonic-gate 
7117c478bd9Sstevel@tonic-gate 	return (-1);
7127c478bd9Sstevel@tonic-gate }
7137c478bd9Sstevel@tonic-gate 
7147c478bd9Sstevel@tonic-gate 
7157c478bd9Sstevel@tonic-gate /*
7167c478bd9Sstevel@tonic-gate  * Format of exit token:
7177c478bd9Sstevel@tonic-gate  *	attribute token id	adr_char
7187c478bd9Sstevel@tonic-gate  *	return value		adr_int32
7197c478bd9Sstevel@tonic-gate  *	errno			adr_int32
7207c478bd9Sstevel@tonic-gate  *
7217c478bd9Sstevel@tonic-gate  */
7227c478bd9Sstevel@tonic-gate int
7237c478bd9Sstevel@tonic-gate exit_token(adr_t *adr)
7247c478bd9Sstevel@tonic-gate {
7257c478bd9Sstevel@tonic-gate 	int32_t	retval;
7267c478bd9Sstevel@tonic-gate 	int32_t	errno;
7277c478bd9Sstevel@tonic-gate 
7287c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &retval, 1);
7297c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &errno, 1);
7307c478bd9Sstevel@tonic-gate 	return (-1);
7317c478bd9Sstevel@tonic-gate }
7327c478bd9Sstevel@tonic-gate 
7337c478bd9Sstevel@tonic-gate /*
7347c478bd9Sstevel@tonic-gate  * Format of strings array token:
7357c478bd9Sstevel@tonic-gate  *	token id		adr_char
7367c478bd9Sstevel@tonic-gate  *	count value		adr_int32
7377c478bd9Sstevel@tonic-gate  *	strings			null terminated strings
7387c478bd9Sstevel@tonic-gate  */
7397c478bd9Sstevel@tonic-gate static int
7407c478bd9Sstevel@tonic-gate strings_common_token(adr_t *adr)
7417c478bd9Sstevel@tonic-gate {
7427c478bd9Sstevel@tonic-gate 	int count, i;
7437c478bd9Sstevel@tonic-gate 	char c;
7447c478bd9Sstevel@tonic-gate 
7457c478bd9Sstevel@tonic-gate 	adrm_int32(adr, (int32_t *)&count, 1);
7467c478bd9Sstevel@tonic-gate 	for (i = 1; i <= count; i++) {
7477c478bd9Sstevel@tonic-gate 		adrm_char(adr, &c, 1);
7487c478bd9Sstevel@tonic-gate 		while (c != (char)0)
7497c478bd9Sstevel@tonic-gate 			adrm_char(adr, &c, 1);
7507c478bd9Sstevel@tonic-gate 	}
7517c478bd9Sstevel@tonic-gate 	/* no dump option here, since we will have variable length fields */
7527c478bd9Sstevel@tonic-gate 	return (-1);
7537c478bd9Sstevel@tonic-gate }
7547c478bd9Sstevel@tonic-gate 
7557c478bd9Sstevel@tonic-gate int
7567c478bd9Sstevel@tonic-gate path_attr_token(adr_t *adr)
7577c478bd9Sstevel@tonic-gate {
7587c478bd9Sstevel@tonic-gate 	return (strings_common_token(adr));
7597c478bd9Sstevel@tonic-gate }
7607c478bd9Sstevel@tonic-gate 
7617c478bd9Sstevel@tonic-gate int
7627c478bd9Sstevel@tonic-gate exec_args_token(adr_t *adr)
7637c478bd9Sstevel@tonic-gate {
7647c478bd9Sstevel@tonic-gate 	return (strings_common_token(adr));
7657c478bd9Sstevel@tonic-gate }
7667c478bd9Sstevel@tonic-gate 
7677c478bd9Sstevel@tonic-gate int
7687c478bd9Sstevel@tonic-gate exec_env_token(adr_t *adr)
7697c478bd9Sstevel@tonic-gate {
7707c478bd9Sstevel@tonic-gate 	return (strings_common_token(adr));
7717c478bd9Sstevel@tonic-gate }
7727c478bd9Sstevel@tonic-gate 
7737c478bd9Sstevel@tonic-gate /*
7747c478bd9Sstevel@tonic-gate  * Format of liaison token:
7757c478bd9Sstevel@tonic-gate  */
7767c478bd9Sstevel@tonic-gate int
7777c478bd9Sstevel@tonic-gate liaison_token(adr_t *adr)
7787c478bd9Sstevel@tonic-gate {
7797c478bd9Sstevel@tonic-gate 	int32_t	li;
7807c478bd9Sstevel@tonic-gate 
7817c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &li, 1);
7827c478bd9Sstevel@tonic-gate 	return (-1);
7837c478bd9Sstevel@tonic-gate }
7847c478bd9Sstevel@tonic-gate 
7857c478bd9Sstevel@tonic-gate 
7867c478bd9Sstevel@tonic-gate /*
7877c478bd9Sstevel@tonic-gate  * Format of path token:
7887c478bd9Sstevel@tonic-gate  *	path				adr_string
7897c478bd9Sstevel@tonic-gate  */
7907c478bd9Sstevel@tonic-gate int
7917c478bd9Sstevel@tonic-gate path_token(adr_t *adr)
7927c478bd9Sstevel@tonic-gate {
7937c478bd9Sstevel@tonic-gate 	if ((flags & M_OBJECT) && (obj_flag == OBJ_PATH)) {
7947c478bd9Sstevel@tonic-gate 		char *path;
7957c478bd9Sstevel@tonic-gate 
7967c478bd9Sstevel@tonic-gate 		get_string(adr, &path);
7977c478bd9Sstevel@tonic-gate 		if (path[0] != '/')
7987c478bd9Sstevel@tonic-gate 			/*
7997c478bd9Sstevel@tonic-gate 			 * anchor the path. user apps may not do it.
8007c478bd9Sstevel@tonic-gate 			 */
8017c478bd9Sstevel@tonic-gate 			anchor_path(path);
8027c478bd9Sstevel@tonic-gate 		/*
8037c478bd9Sstevel@tonic-gate 		 * match against the collapsed path. that is what user sees.
8047c478bd9Sstevel@tonic-gate 		 */
8057c478bd9Sstevel@tonic-gate 		if (re_exec2(collapse_path(path)) == 1)
8067c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
8077c478bd9Sstevel@tonic-gate 		free(path);
8087c478bd9Sstevel@tonic-gate 	} else {
8097c478bd9Sstevel@tonic-gate 		skip_string(adr);
8107c478bd9Sstevel@tonic-gate 	}
8117c478bd9Sstevel@tonic-gate 	return (-1);
8127c478bd9Sstevel@tonic-gate }
8137c478bd9Sstevel@tonic-gate 
8147c478bd9Sstevel@tonic-gate 
8157c478bd9Sstevel@tonic-gate /*
8167c478bd9Sstevel@tonic-gate  * Format of System V IPC permission token:
8177c478bd9Sstevel@tonic-gate  *	System V IPC permission token id	adr_char
8187c478bd9Sstevel@tonic-gate  * 	uid					adr_int32
8197c478bd9Sstevel@tonic-gate  *	gid					adr_int32
8207c478bd9Sstevel@tonic-gate  *	cuid					adr_int32
8217c478bd9Sstevel@tonic-gate  *	cgid					adr_int32
8227c478bd9Sstevel@tonic-gate  *	mode					adr_int32
8237c478bd9Sstevel@tonic-gate  *	seq					adr_int32
8247c478bd9Sstevel@tonic-gate  *	key					adr_int32
8257c478bd9Sstevel@tonic-gate  *	label					adr_opaque, sizeof (bslabel_t)
8267c478bd9Sstevel@tonic-gate  *							    bytes
8277c478bd9Sstevel@tonic-gate  */
8287c478bd9Sstevel@tonic-gate int
8297c478bd9Sstevel@tonic-gate s5_IPC_perm_token(adr_t *adr)
8307c478bd9Sstevel@tonic-gate {
8317c478bd9Sstevel@tonic-gate 	int32_t	uid, gid, cuid, cgid, mode, seq;
8327c478bd9Sstevel@tonic-gate 	int32_t	key;
8337c478bd9Sstevel@tonic-gate 
8347c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &uid, 1);
8357c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &gid, 1);
8367c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &cuid, 1);
8377c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &cgid, 1);
8387c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &mode, 1);
8397c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &seq, 1);
8407c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &key, 1);
8417c478bd9Sstevel@tonic-gate 
8427c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
8437c478bd9Sstevel@tonic-gate 		if (m_usere == uid)
8447c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
8457c478bd9Sstevel@tonic-gate 	}
8467c478bd9Sstevel@tonic-gate 
8477c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
8487c478bd9Sstevel@tonic-gate 		if (m_usere == cuid)
8497c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
8507c478bd9Sstevel@tonic-gate 	}
8517c478bd9Sstevel@tonic-gate 
8527c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPR)) {
8537c478bd9Sstevel@tonic-gate 		if (m_groupr == gid)
8547c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
8557c478bd9Sstevel@tonic-gate 	}
8567c478bd9Sstevel@tonic-gate 
8577c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPR)) {
8587c478bd9Sstevel@tonic-gate 		if (m_groupr == cgid)
8597c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
8607c478bd9Sstevel@tonic-gate 	}
8617c478bd9Sstevel@tonic-gate 
8627c478bd9Sstevel@tonic-gate 	if ((flags & M_OBJECT) &&
8637c478bd9Sstevel@tonic-gate 	    ((obj_owner == uid) ||
8647c478bd9Sstevel@tonic-gate 	    (obj_owner == cuid) ||
8657c478bd9Sstevel@tonic-gate 	    (obj_group == gid) ||
8667c478bd9Sstevel@tonic-gate 	    (obj_group == cgid))) {
8677c478bd9Sstevel@tonic-gate 
8687c478bd9Sstevel@tonic-gate 		switch (obj_flag) {
8697c478bd9Sstevel@tonic-gate 		case OBJ_MSGGROUP:
8707c478bd9Sstevel@tonic-gate 		case OBJ_MSGOWNER:
8717c478bd9Sstevel@tonic-gate 			if (ipc_type_match(OBJ_MSG, ipc_type))
8727c478bd9Sstevel@tonic-gate 				checkflags |= M_OBJECT;
8737c478bd9Sstevel@tonic-gate 			break;
8747c478bd9Sstevel@tonic-gate 		case OBJ_SEMGROUP:
8757c478bd9Sstevel@tonic-gate 		case OBJ_SEMOWNER:
8767c478bd9Sstevel@tonic-gate 			if (ipc_type_match(OBJ_SEM, ipc_type))
8777c478bd9Sstevel@tonic-gate 				checkflags |= M_OBJECT;
8787c478bd9Sstevel@tonic-gate 			break;
8797c478bd9Sstevel@tonic-gate 		case OBJ_SHMGROUP:
8807c478bd9Sstevel@tonic-gate 		case OBJ_SHMOWNER:
8817c478bd9Sstevel@tonic-gate 			if (ipc_type_match(OBJ_SHM, ipc_type))
8827c478bd9Sstevel@tonic-gate 				checkflags |= M_OBJECT;
8837c478bd9Sstevel@tonic-gate 			break;
8847c478bd9Sstevel@tonic-gate 		}
8857c478bd9Sstevel@tonic-gate 	}
8867c478bd9Sstevel@tonic-gate 	return (-1);
8877c478bd9Sstevel@tonic-gate }
8887c478bd9Sstevel@tonic-gate 
8897c478bd9Sstevel@tonic-gate 
8907c478bd9Sstevel@tonic-gate /*
8917c478bd9Sstevel@tonic-gate  * Format of process32 token:
8927c478bd9Sstevel@tonic-gate  *	process token id	adr_char
8937c478bd9Sstevel@tonic-gate  *	auid			adr_int32
8947c478bd9Sstevel@tonic-gate  *	euid			adr_int32
8957c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
8967c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
8977c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
8987c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
8997c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
9007c478bd9Sstevel@tonic-gate  * 	termid			adr_int32*2
9017c478bd9Sstevel@tonic-gate  *
9027c478bd9Sstevel@tonic-gate  */
9037c478bd9Sstevel@tonic-gate int
9047c478bd9Sstevel@tonic-gate process32_token(adr_t *adr)
9057c478bd9Sstevel@tonic-gate {
9067c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
9077c478bd9Sstevel@tonic-gate 	int32_t	sid;
9087c478bd9Sstevel@tonic-gate 	int32_t port, machine;
9097c478bd9Sstevel@tonic-gate 
9107c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
9117c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
9127c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
9137c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
9147c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
9157c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
9167c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
9177c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &port, 1);
9187c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &machine, 1);
9197c478bd9Sstevel@tonic-gate 
9207c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERA)) {
9217c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
9227c478bd9Sstevel@tonic-gate 			checkflags |= M_USERA;
9237c478bd9Sstevel@tonic-gate 	}
9247c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
9257c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
9267c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
9277c478bd9Sstevel@tonic-gate 	}
9287c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERR)) {
9297c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
9307c478bd9Sstevel@tonic-gate 			checkflags |= M_USERR;
9317c478bd9Sstevel@tonic-gate 	}
9327c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPR)) {
9337c478bd9Sstevel@tonic-gate 		if (m_groupr == rgid)
9347c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
9357c478bd9Sstevel@tonic-gate 	}
9367c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
9377c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
9387c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
9397c478bd9Sstevel@tonic-gate 	}
9407c478bd9Sstevel@tonic-gate 
9417c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
9427c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_PROC) &&
9437c478bd9Sstevel@tonic-gate 		    (obj_id == pid)) {
9447c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
9457c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_PGROUP) &&
9467c478bd9Sstevel@tonic-gate 		    ((obj_group == egid) ||
9477c478bd9Sstevel@tonic-gate 		    (obj_group == rgid))) {
9487c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
9497c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_POWNER) &&
9507c478bd9Sstevel@tonic-gate 		    ((obj_owner == euid) ||
9517c478bd9Sstevel@tonic-gate 		    (obj_group == ruid))) {
9527c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
9537c478bd9Sstevel@tonic-gate 		}
9547c478bd9Sstevel@tonic-gate 	}
9557c478bd9Sstevel@tonic-gate 	return (-1);
9567c478bd9Sstevel@tonic-gate }
9577c478bd9Sstevel@tonic-gate 
9587c478bd9Sstevel@tonic-gate /*
9597c478bd9Sstevel@tonic-gate  * Format of process32 token:
9607c478bd9Sstevel@tonic-gate  *	process token id	adr_char
9617c478bd9Sstevel@tonic-gate  *	auid			adr_int32
9627c478bd9Sstevel@tonic-gate  *	euid			adr_int32
9637c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
9647c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
9657c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
9667c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
9677c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
9687c478bd9Sstevel@tonic-gate  * 	termid			adr_int32*6
9697c478bd9Sstevel@tonic-gate  *
9707c478bd9Sstevel@tonic-gate  */
9717c478bd9Sstevel@tonic-gate int
9727c478bd9Sstevel@tonic-gate process32_ex_token(adr_t *adr)
9737c478bd9Sstevel@tonic-gate {
9747c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
9757c478bd9Sstevel@tonic-gate 	int32_t	sid;
9767c478bd9Sstevel@tonic-gate 	int32_t port, type, addr[4];
9777c478bd9Sstevel@tonic-gate 
9787c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
9797c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
9807c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
9817c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
9827c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
9837c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
9847c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
9857c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &port, 1);
9867c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &type, 1);
9877c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &addr[0], 4);
9887c478bd9Sstevel@tonic-gate 
9897c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERA)) {
9907c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
9917c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERA;
9927c478bd9Sstevel@tonic-gate 	}
9937c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
9947c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
9957c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERE;
9967c478bd9Sstevel@tonic-gate 	}
9977c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERR)) {
9987c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
9997c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERR;
10007c478bd9Sstevel@tonic-gate 	}
10017c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPR)) {
10027c478bd9Sstevel@tonic-gate 		if (m_groupr == egid)
10037c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPR;
10047c478bd9Sstevel@tonic-gate 	}
10057c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
10067c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
10077c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPE;
10087c478bd9Sstevel@tonic-gate 	}
10097c478bd9Sstevel@tonic-gate 
10107c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
10117c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_PROC) &&
10127c478bd9Sstevel@tonic-gate 		    (obj_id == pid)) {
10137c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_OBJECT;
10147c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_PGROUP) &&
10157c478bd9Sstevel@tonic-gate 		    ((obj_group == egid) ||
10167c478bd9Sstevel@tonic-gate 		    (obj_group == rgid))) {
10177c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_OBJECT;
10187c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_POWNER) &&
10197c478bd9Sstevel@tonic-gate 		    ((obj_owner == euid) ||
10207c478bd9Sstevel@tonic-gate 		    (obj_group == ruid))) {
10217c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_OBJECT;
10227c478bd9Sstevel@tonic-gate 		}
10237c478bd9Sstevel@tonic-gate 	}
10247c478bd9Sstevel@tonic-gate 	return (-1);
10257c478bd9Sstevel@tonic-gate }
10267c478bd9Sstevel@tonic-gate 
10277c478bd9Sstevel@tonic-gate /*
10287c478bd9Sstevel@tonic-gate  * Format of process64 token:
10297c478bd9Sstevel@tonic-gate  *	process token id	adr_char
10307c478bd9Sstevel@tonic-gate  *	auid			adr_int32
10317c478bd9Sstevel@tonic-gate  *	euid			adr_int32
10327c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
10337c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
10347c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
10357c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
10367c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
10377c478bd9Sstevel@tonic-gate  * 	termid			adr_int64+adr_int32
10387c478bd9Sstevel@tonic-gate  *
10397c478bd9Sstevel@tonic-gate  */
10407c478bd9Sstevel@tonic-gate int
10417c478bd9Sstevel@tonic-gate process64_token(adr_t *adr)
10427c478bd9Sstevel@tonic-gate {
10437c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
10447c478bd9Sstevel@tonic-gate 	int32_t	sid;
10457c478bd9Sstevel@tonic-gate 	int64_t port;
10467c478bd9Sstevel@tonic-gate 	int32_t machine;
10477c478bd9Sstevel@tonic-gate 
10487c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
10497c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
10507c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
10517c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
10527c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
10537c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
10547c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
10557c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &port, 1);
10567c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &machine, 1);
10577c478bd9Sstevel@tonic-gate 
10587c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERA)) {
10597c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
10607c478bd9Sstevel@tonic-gate 			checkflags |= M_USERA;
10617c478bd9Sstevel@tonic-gate 	}
10627c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
10637c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
10647c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
10657c478bd9Sstevel@tonic-gate 	}
10667c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERR)) {
10677c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
10687c478bd9Sstevel@tonic-gate 			checkflags |= M_USERR;
10697c478bd9Sstevel@tonic-gate 	}
10707c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPR)) {
10717c478bd9Sstevel@tonic-gate 		if (m_groupr == rgid)
10727c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
10737c478bd9Sstevel@tonic-gate 	}
10747c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
10757c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
10767c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
10777c478bd9Sstevel@tonic-gate 	}
10787c478bd9Sstevel@tonic-gate 
10797c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
10807c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_PROC) &&
10817c478bd9Sstevel@tonic-gate 		    (obj_id == pid)) {
10827c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
10837c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_PGROUP) &&
10847c478bd9Sstevel@tonic-gate 		    ((obj_group == egid) ||
10857c478bd9Sstevel@tonic-gate 		    (obj_group == rgid))) {
10867c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
10877c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_POWNER) &&
10887c478bd9Sstevel@tonic-gate 		    ((obj_owner == euid) ||
10897c478bd9Sstevel@tonic-gate 		    (obj_group == ruid))) {
10907c478bd9Sstevel@tonic-gate 			checkflags |= M_OBJECT;
10917c478bd9Sstevel@tonic-gate 		}
10927c478bd9Sstevel@tonic-gate 	}
10937c478bd9Sstevel@tonic-gate 	return (-1);
10947c478bd9Sstevel@tonic-gate }
10957c478bd9Sstevel@tonic-gate 
10967c478bd9Sstevel@tonic-gate /*
10977c478bd9Sstevel@tonic-gate  * Format of process64 token:
10987c478bd9Sstevel@tonic-gate  *	process token id	adr_char
10997c478bd9Sstevel@tonic-gate  *	auid			adr_int32
11007c478bd9Sstevel@tonic-gate  *	euid			adr_int32
11017c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
11027c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
11037c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
11047c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
11057c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
11067c478bd9Sstevel@tonic-gate  * 	termid			adr_int64+5*adr_int32
11077c478bd9Sstevel@tonic-gate  *
11087c478bd9Sstevel@tonic-gate  */
11097c478bd9Sstevel@tonic-gate int
11107c478bd9Sstevel@tonic-gate process64_ex_token(adr_t *adr)
11117c478bd9Sstevel@tonic-gate {
11127c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
11137c478bd9Sstevel@tonic-gate 	int32_t	sid;
11147c478bd9Sstevel@tonic-gate 	int64_t port;
11157c478bd9Sstevel@tonic-gate 	int32_t type, addr[4];
11167c478bd9Sstevel@tonic-gate 
11177c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
11187c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
11197c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
11207c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
11217c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
11227c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
11237c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
11247c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &port, 1);
11257c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &type, 1);
11267c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &addr[0], 4);
11277c478bd9Sstevel@tonic-gate 
11287c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERA)) {
11297c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
11307c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERA;
11317c478bd9Sstevel@tonic-gate 	}
11327c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERE)) {
11337c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
11347c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERE;
11357c478bd9Sstevel@tonic-gate 	}
11367c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_USERR)) {
11377c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
11387c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERR;
11397c478bd9Sstevel@tonic-gate 	}
11407c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPR)) {
11417c478bd9Sstevel@tonic-gate 		if (m_groupr == egid)
11427c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPR;
11437c478bd9Sstevel@tonic-gate 	}
11447c478bd9Sstevel@tonic-gate 	if (!new_mode && (flags & M_GROUPE)) {
11457c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
11467c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPE;
11477c478bd9Sstevel@tonic-gate 	}
11487c478bd9Sstevel@tonic-gate 
11497c478bd9Sstevel@tonic-gate 	if (flags & M_OBJECT) {
11507c478bd9Sstevel@tonic-gate 		if ((obj_flag & OBJ_PROC) &&
11517c478bd9Sstevel@tonic-gate 		    (obj_id == pid)) {
11527c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_OBJECT;
11537c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_PGROUP) &&
11547c478bd9Sstevel@tonic-gate 		    ((obj_group == egid) ||
11557c478bd9Sstevel@tonic-gate 		    (obj_group == rgid))) {
11567c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_OBJECT;
11577c478bd9Sstevel@tonic-gate 		} else if ((obj_flag & OBJ_POWNER) &&
11587c478bd9Sstevel@tonic-gate 		    ((obj_owner == euid) ||
11597c478bd9Sstevel@tonic-gate 		    (obj_group == ruid))) {
11607c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_OBJECT;
11617c478bd9Sstevel@tonic-gate 		}
11627c478bd9Sstevel@tonic-gate 	}
11637c478bd9Sstevel@tonic-gate 	return (-1);
11647c478bd9Sstevel@tonic-gate }
11657c478bd9Sstevel@tonic-gate 
11667c478bd9Sstevel@tonic-gate /*
11677c478bd9Sstevel@tonic-gate  * Format of System V IPC token:
11687c478bd9Sstevel@tonic-gate  *	System V IPC token id	adr_char
11697c478bd9Sstevel@tonic-gate  *	object id		adr_int32
11707c478bd9Sstevel@tonic-gate  *
11717c478bd9Sstevel@tonic-gate  */
11727c478bd9Sstevel@tonic-gate int
11737c478bd9Sstevel@tonic-gate s5_IPC_token(adr_t *adr)
11747c478bd9Sstevel@tonic-gate {
11757c478bd9Sstevel@tonic-gate 	int32_t	ipc_id;
11767c478bd9Sstevel@tonic-gate 
11777c478bd9Sstevel@tonic-gate 	adrm_char(adr, &ipc_type, 1);	/* Global */
11787c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ipc_id, 1);
11797c478bd9Sstevel@tonic-gate 
11807c478bd9Sstevel@tonic-gate 	if ((flags & M_OBJECT) &&
11817c478bd9Sstevel@tonic-gate 	    ipc_type_match(obj_flag, ipc_type) &&
11827c478bd9Sstevel@tonic-gate 	    (obj_id == ipc_id))
11837c478bd9Sstevel@tonic-gate 		checkflags |= M_OBJECT;
11847c478bd9Sstevel@tonic-gate 
11857c478bd9Sstevel@tonic-gate 	return (-1);
11867c478bd9Sstevel@tonic-gate }
11877c478bd9Sstevel@tonic-gate 
11887c478bd9Sstevel@tonic-gate 
11897c478bd9Sstevel@tonic-gate /*
11907c478bd9Sstevel@tonic-gate  * Format of socket token:
11917c478bd9Sstevel@tonic-gate  *	socket_type		adrm_short
11927c478bd9Sstevel@tonic-gate  *	remote_port		adrm_short
11937c478bd9Sstevel@tonic-gate  *	remote_inaddr		adrm_int32
11947c478bd9Sstevel@tonic-gate  *
11957c478bd9Sstevel@tonic-gate  */
11967c478bd9Sstevel@tonic-gate int
11977c478bd9Sstevel@tonic-gate socket_token(adr_t *adr)
11987c478bd9Sstevel@tonic-gate {
11997c478bd9Sstevel@tonic-gate 	short	socket_type;
12007c478bd9Sstevel@tonic-gate 	short	remote_port;
12017c478bd9Sstevel@tonic-gate 	int32_t	remote_inaddr;
12027c478bd9Sstevel@tonic-gate 
12037c478bd9Sstevel@tonic-gate 	adrm_short(adr, &socket_type, 1);
12047c478bd9Sstevel@tonic-gate 	adrm_short(adr, &remote_port, 1);
12057c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)&remote_inaddr, 4);
12067c478bd9Sstevel@tonic-gate 
12077c478bd9Sstevel@tonic-gate 	if ((flags & M_OBJECT) && (obj_flag == OBJ_SOCK)) {
12087c478bd9Sstevel@tonic-gate 		if (socket_flag == SOCKFLG_MACHINE) {
12097c478bd9Sstevel@tonic-gate 			if (remote_inaddr == obj_id)
12107c478bd9Sstevel@tonic-gate 				checkflags |= M_OBJECT;
12117c478bd9Sstevel@tonic-gate 		} else if (socket_flag == SOCKFLG_PORT) {
12127c478bd9Sstevel@tonic-gate 			if (remote_port == obj_id)
12137c478bd9Sstevel@tonic-gate 				checkflags |= M_OBJECT;
12147c478bd9Sstevel@tonic-gate 		}
12157c478bd9Sstevel@tonic-gate 	}
12167c478bd9Sstevel@tonic-gate 	return (-1);
12177c478bd9Sstevel@tonic-gate }
12187c478bd9Sstevel@tonic-gate 
12197c478bd9Sstevel@tonic-gate 
12207c478bd9Sstevel@tonic-gate /*
12217c478bd9Sstevel@tonic-gate  * Format of socket token:
12227c478bd9Sstevel@tonic-gate  *	socket_type		adrm_short
12237c478bd9Sstevel@tonic-gate  *	remote_port		adrm_short
12247c478bd9Sstevel@tonic-gate  *	remote_inaddr		adrm_int32
12257c478bd9Sstevel@tonic-gate  *
12267c478bd9Sstevel@tonic-gate  */
12277c478bd9Sstevel@tonic-gate int
12287c478bd9Sstevel@tonic-gate socket_ex_token(adr_t *adr)
12297c478bd9Sstevel@tonic-gate {
12307c478bd9Sstevel@tonic-gate 	short	socket_domain;
12317c478bd9Sstevel@tonic-gate 	short	socket_type;
12327c478bd9Sstevel@tonic-gate 	short	ip_size;
12337c478bd9Sstevel@tonic-gate 	short	local_port;
12347c478bd9Sstevel@tonic-gate 	int32_t	local_inaddr[4];
12357c478bd9Sstevel@tonic-gate 	short	remote_port;
12367c478bd9Sstevel@tonic-gate 	int32_t	remote_inaddr[4];
12377c478bd9Sstevel@tonic-gate 
12387c478bd9Sstevel@tonic-gate 	adrm_short(adr, &socket_domain, 1);
12397c478bd9Sstevel@tonic-gate 	adrm_short(adr, &socket_type, 1);
12407c478bd9Sstevel@tonic-gate 	adrm_short(adr, &ip_size, 1);
12417c478bd9Sstevel@tonic-gate 
12427c478bd9Sstevel@tonic-gate 	/* validate ip size */
12437c478bd9Sstevel@tonic-gate 	if ((ip_size != AU_IPv6) && (ip_size != AU_IPv4))
12447c478bd9Sstevel@tonic-gate 		return (0);
12457c478bd9Sstevel@tonic-gate 
12467c478bd9Sstevel@tonic-gate 	adrm_short(adr, &local_port, 1);
12477c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)local_inaddr, ip_size);
12487c478bd9Sstevel@tonic-gate 
12497c478bd9Sstevel@tonic-gate 	adrm_short(adr, &remote_port, 1);
12507c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)remote_inaddr, ip_size);
12517c478bd9Sstevel@tonic-gate 
12527c478bd9Sstevel@tonic-gate 	/* if IP type mis-match, then nothing to do */
12537c478bd9Sstevel@tonic-gate 	if (ip_size != ip_type)
12547c478bd9Sstevel@tonic-gate 		return (-1);
12557c478bd9Sstevel@tonic-gate 
12567c478bd9Sstevel@tonic-gate 	if ((flags & M_OBJECT) && (obj_flag == OBJ_SOCK)) {
12577c478bd9Sstevel@tonic-gate 		if (socket_flag == SOCKFLG_MACHINE) {
12587c478bd9Sstevel@tonic-gate 			if (ip_type == AU_IPv4) {
12597c478bd9Sstevel@tonic-gate 				if ((local_inaddr[0] == obj_id) ||
12607c478bd9Sstevel@tonic-gate 				    (remote_inaddr[0] == obj_id))
12617c478bd9Sstevel@tonic-gate 					checkflags |= M_OBJECT;
12627c478bd9Sstevel@tonic-gate 			} else {
12637c478bd9Sstevel@tonic-gate 				if (((local_inaddr[0] == ip_ipv6[0]) &&
12647c478bd9Sstevel@tonic-gate 				    (local_inaddr[1] == ip_ipv6[1]) &&
12657c478bd9Sstevel@tonic-gate 				    (local_inaddr[2] == ip_ipv6[2]) &&
12667c478bd9Sstevel@tonic-gate 				    (local_inaddr[3] == ip_ipv6[3])) ||
12677c478bd9Sstevel@tonic-gate 				    ((remote_inaddr[0] == ip_ipv6[0]) &&
12687c478bd9Sstevel@tonic-gate 				    (remote_inaddr[1] == ip_ipv6[1]) &&
12697c478bd9Sstevel@tonic-gate 				    (remote_inaddr[2] == ip_ipv6[2]) &&
12707c478bd9Sstevel@tonic-gate 				    (remote_inaddr[3] == ip_ipv6[3])))
12717c478bd9Sstevel@tonic-gate 					checkflags |= M_OBJECT;
12727c478bd9Sstevel@tonic-gate 			}
12737c478bd9Sstevel@tonic-gate 		} else if (socket_flag == SOCKFLG_PORT) {
12747c478bd9Sstevel@tonic-gate 			if ((local_port == obj_id) || (remote_port == obj_id))
12757c478bd9Sstevel@tonic-gate 				checkflags |= M_OBJECT;
12767c478bd9Sstevel@tonic-gate 		}
12777c478bd9Sstevel@tonic-gate 	}
12787c478bd9Sstevel@tonic-gate 	return (-1);
12797c478bd9Sstevel@tonic-gate }
12807c478bd9Sstevel@tonic-gate 
12817c478bd9Sstevel@tonic-gate 
12827c478bd9Sstevel@tonic-gate /*
12837c478bd9Sstevel@tonic-gate  * Format of subject32 token:
12847c478bd9Sstevel@tonic-gate  *	subject token id	adr_char
12857c478bd9Sstevel@tonic-gate  *	auid			adr_int32
12867c478bd9Sstevel@tonic-gate  *	euid			adr_int32
12877c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
12887c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
12897c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
12907c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
12917c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
12927c478bd9Sstevel@tonic-gate  * 	termid			adr_int32*2
12937c478bd9Sstevel@tonic-gate  *
12947c478bd9Sstevel@tonic-gate  */
12957c478bd9Sstevel@tonic-gate int
12967c478bd9Sstevel@tonic-gate subject32_token(adr_t *adr)
12977c478bd9Sstevel@tonic-gate {
12987c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
12997c478bd9Sstevel@tonic-gate 	int32_t	sid;
13007c478bd9Sstevel@tonic-gate 	int32_t port, machine;
13017c478bd9Sstevel@tonic-gate 
13027c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
13037c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
13047c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
13057c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
13067c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
13077c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
13087c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
13097c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &port, 1);
13107c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &machine, 1);
13117c478bd9Sstevel@tonic-gate 
13127c478bd9Sstevel@tonic-gate 	if (flags & M_SUBJECT) {
13137c478bd9Sstevel@tonic-gate 		if (subj_id == pid)
13147c478bd9Sstevel@tonic-gate 			checkflags |= M_SUBJECT;
13157c478bd9Sstevel@tonic-gate 	}
13167c478bd9Sstevel@tonic-gate 	if (flags & M_USERA) {
13177c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
13187c478bd9Sstevel@tonic-gate 			checkflags |= M_USERA;
13197c478bd9Sstevel@tonic-gate 	}
13207c478bd9Sstevel@tonic-gate 	if (flags & M_USERE) {
13217c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
13227c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
13237c478bd9Sstevel@tonic-gate 	}
13247c478bd9Sstevel@tonic-gate 	if (flags & M_USERR) {
13257c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
13267c478bd9Sstevel@tonic-gate 			checkflags |= M_USERR;
13277c478bd9Sstevel@tonic-gate 	}
13287c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPR) {
13297c478bd9Sstevel@tonic-gate 		if (m_groupr == rgid)
13307c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
13317c478bd9Sstevel@tonic-gate 	}
13327c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPE) {
13337c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
13347c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
13357c478bd9Sstevel@tonic-gate 	}
1336924c9144Sgww 	if (flags & M_SID) {
1337924c9144Sgww 		if (m_sid == sid)
1338924c9144Sgww 			checkflags |= M_SID;
1339924c9144Sgww 	}
13407c478bd9Sstevel@tonic-gate 	return (-1);
13417c478bd9Sstevel@tonic-gate }
13427c478bd9Sstevel@tonic-gate 
13437c478bd9Sstevel@tonic-gate /*
13447c478bd9Sstevel@tonic-gate  * Format of subject32_ex token:
13457c478bd9Sstevel@tonic-gate  *	subject token id	adr_char
13467c478bd9Sstevel@tonic-gate  *	auid			adr_int32
13477c478bd9Sstevel@tonic-gate  *	euid			adr_int32
13487c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
13497c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
13507c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
13517c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
13527c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
13537c478bd9Sstevel@tonic-gate  * 	termid_addr		adr_int32*6
13547c478bd9Sstevel@tonic-gate  *
13557c478bd9Sstevel@tonic-gate  */
13567c478bd9Sstevel@tonic-gate int
13577c478bd9Sstevel@tonic-gate subject32_ex_token(adr_t *adr)
13587c478bd9Sstevel@tonic-gate {
13597c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
13607c478bd9Sstevel@tonic-gate 	int32_t	sid;
13617c478bd9Sstevel@tonic-gate 	int32_t port, type, addr[4];
13627c478bd9Sstevel@tonic-gate 
13637c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
13647c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
13657c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
13667c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
13677c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
13687c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
13697c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
13707c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &port, 1);
13717c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &type, 1);
13727c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &addr[0], 4);
13737c478bd9Sstevel@tonic-gate 
13747c478bd9Sstevel@tonic-gate 	if (flags & M_SUBJECT) {
13757c478bd9Sstevel@tonic-gate 		if (subj_id == pid)
13767c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_SUBJECT;
13777c478bd9Sstevel@tonic-gate 	}
13787c478bd9Sstevel@tonic-gate 	if (flags & M_USERA) {
13797c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
13807c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERA;
13817c478bd9Sstevel@tonic-gate 	}
13827c478bd9Sstevel@tonic-gate 	if (flags & M_USERE) {
13837c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
13847c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERE;
13857c478bd9Sstevel@tonic-gate 	}
13867c478bd9Sstevel@tonic-gate 	if (flags & M_USERR) {
13877c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
13887c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERR;
13897c478bd9Sstevel@tonic-gate 	}
13907c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPR) {
13917c478bd9Sstevel@tonic-gate 		if (m_groupr == egid)
13927c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPR;
13937c478bd9Sstevel@tonic-gate 	}
13947c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPE) {
13957c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
13967c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPE;
13977c478bd9Sstevel@tonic-gate 	}
1398924c9144Sgww 	if (flags & M_SID) {
1399924c9144Sgww 		if (m_sid == sid)
1400924c9144Sgww 			checkflags = checkflags | M_SID;
1401924c9144Sgww 	}
14027c478bd9Sstevel@tonic-gate 	return (-1);
14037c478bd9Sstevel@tonic-gate }
14047c478bd9Sstevel@tonic-gate 
14057c478bd9Sstevel@tonic-gate /*
14067c478bd9Sstevel@tonic-gate  * Format of subject64 token:
14077c478bd9Sstevel@tonic-gate  *	subject token id	adr_char
14087c478bd9Sstevel@tonic-gate  *	auid			adr_int32
14097c478bd9Sstevel@tonic-gate  *	euid			adr_int32
14107c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
14117c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
14127c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
14137c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
14147c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
14157c478bd9Sstevel@tonic-gate  * 	termid			adr_int64+adr_int32
14167c478bd9Sstevel@tonic-gate  *
14177c478bd9Sstevel@tonic-gate  */
14187c478bd9Sstevel@tonic-gate int
14197c478bd9Sstevel@tonic-gate subject64_token(adr_t *adr)
14207c478bd9Sstevel@tonic-gate {
14217c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
14227c478bd9Sstevel@tonic-gate 	int32_t	sid;
14237c478bd9Sstevel@tonic-gate 	int64_t port;
14247c478bd9Sstevel@tonic-gate 	int32_t machine;
14257c478bd9Sstevel@tonic-gate 
14267c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
14277c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
14287c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
14297c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
14307c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
14317c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
14327c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
14337c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &port, 1);
14347c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &machine, 1);
14357c478bd9Sstevel@tonic-gate 
14367c478bd9Sstevel@tonic-gate 	if (flags & M_SUBJECT) {
14377c478bd9Sstevel@tonic-gate 		if (subj_id == pid)
14387c478bd9Sstevel@tonic-gate 			checkflags |= M_SUBJECT;
14397c478bd9Sstevel@tonic-gate 	}
14407c478bd9Sstevel@tonic-gate 	if (flags & M_USERA) {
14417c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
14427c478bd9Sstevel@tonic-gate 			checkflags |= M_USERA;
14437c478bd9Sstevel@tonic-gate 	}
14447c478bd9Sstevel@tonic-gate 	if (flags & M_USERE) {
14457c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
14467c478bd9Sstevel@tonic-gate 			checkflags |= M_USERE;
14477c478bd9Sstevel@tonic-gate 	}
14487c478bd9Sstevel@tonic-gate 	if (flags & M_USERR) {
14497c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
14507c478bd9Sstevel@tonic-gate 			checkflags |= M_USERR;
14517c478bd9Sstevel@tonic-gate 	}
14527c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPR) {
14537c478bd9Sstevel@tonic-gate 		if (m_groupr == rgid)
14547c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPR;
14557c478bd9Sstevel@tonic-gate 	}
14567c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPE) {
14577c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
14587c478bd9Sstevel@tonic-gate 			checkflags |= M_GROUPE;
14597c478bd9Sstevel@tonic-gate 	}
1460924c9144Sgww 	if (flags & M_SID) {
1461924c9144Sgww 		if (m_sid == sid)
1462924c9144Sgww 			checkflags |= M_SID;
1463924c9144Sgww 	}
14647c478bd9Sstevel@tonic-gate 	return (-1);
14657c478bd9Sstevel@tonic-gate }
14667c478bd9Sstevel@tonic-gate 
14677c478bd9Sstevel@tonic-gate /*
14687c478bd9Sstevel@tonic-gate  * Format of subject64 token:
14697c478bd9Sstevel@tonic-gate  *	subject token id	adr_char
14707c478bd9Sstevel@tonic-gate  *	auid			adr_int32
14717c478bd9Sstevel@tonic-gate  *	euid			adr_int32
14727c478bd9Sstevel@tonic-gate  *	egid 			adr_int32
14737c478bd9Sstevel@tonic-gate  * 	ruid			adr_int32
14747c478bd9Sstevel@tonic-gate  *	rgid			adr_int32
14757c478bd9Sstevel@tonic-gate  * 	pid			adr_int32
14767c478bd9Sstevel@tonic-gate  * 	sid			adr_int32
14777c478bd9Sstevel@tonic-gate  * 	termid			adr_int64+5*adr_int32
14787c478bd9Sstevel@tonic-gate  *
14797c478bd9Sstevel@tonic-gate  */
14807c478bd9Sstevel@tonic-gate int
14817c478bd9Sstevel@tonic-gate subject64_ex_token(adr_t *adr)
14827c478bd9Sstevel@tonic-gate {
14837c478bd9Sstevel@tonic-gate 	int32_t	auid, euid, egid, ruid, rgid, pid;
14847c478bd9Sstevel@tonic-gate 	int32_t	sid;
14857c478bd9Sstevel@tonic-gate 	int64_t port;
14867c478bd9Sstevel@tonic-gate 	int32_t type, addr[4];
14877c478bd9Sstevel@tonic-gate 
14887c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &auid, 1);
14897c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &euid, 1);
14907c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &egid, 1);
14917c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &ruid, 1);
14927c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &rgid, 1);
14937c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &pid, 1);
14947c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &sid, 1);
14957c478bd9Sstevel@tonic-gate 	adrm_int64(adr, &port, 1);
14967c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &type, 1);
14977c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &addr[0], 4);
14987c478bd9Sstevel@tonic-gate 
14997c478bd9Sstevel@tonic-gate 	if (flags & M_SUBJECT) {
15007c478bd9Sstevel@tonic-gate 		if (subj_id == pid)
15017c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_SUBJECT;
15027c478bd9Sstevel@tonic-gate 	}
15037c478bd9Sstevel@tonic-gate 	if (flags & M_USERA) {
15047c478bd9Sstevel@tonic-gate 		if (m_usera == auid)
15057c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERA;
15067c478bd9Sstevel@tonic-gate 	}
15077c478bd9Sstevel@tonic-gate 	if (flags & M_USERE) {
15087c478bd9Sstevel@tonic-gate 		if (m_usere == euid)
15097c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERE;
15107c478bd9Sstevel@tonic-gate 	}
15117c478bd9Sstevel@tonic-gate 	if (flags & M_USERR) {
15127c478bd9Sstevel@tonic-gate 		if (m_userr == ruid)
15137c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERR;
15147c478bd9Sstevel@tonic-gate 	}
15157c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPR) {
15167c478bd9Sstevel@tonic-gate 		if (m_groupr == egid)
15177c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPR;
15187c478bd9Sstevel@tonic-gate 	}
15197c478bd9Sstevel@tonic-gate 	if (flags & M_GROUPE) {
15207c478bd9Sstevel@tonic-gate 		if (m_groupe == egid)
15217c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_GROUPE;
15227c478bd9Sstevel@tonic-gate 	}
1523924c9144Sgww 	if (flags & M_SID) {
1524924c9144Sgww 		if (m_sid == sid)
1525924c9144Sgww 			checkflags = checkflags | M_SID;
1526924c9144Sgww 	}
15277c478bd9Sstevel@tonic-gate 	return (-1);
15287c478bd9Sstevel@tonic-gate }
15297c478bd9Sstevel@tonic-gate 
15307c478bd9Sstevel@tonic-gate /*
15317c478bd9Sstevel@tonic-gate  * -----------------------------------------------------------------------
15327c478bd9Sstevel@tonic-gate  * tid_token(): Process tid token and display contents
15337c478bd9Sstevel@tonic-gate  *
15347c478bd9Sstevel@tonic-gate  * Format of tid token:
15357c478bd9Sstevel@tonic-gate  *	tid token id			adr_char
15367c478bd9Sstevel@tonic-gate  * 	address type			adr_char
15377c478bd9Sstevel@tonic-gate  *	For address type of AU_IPADR...
15387c478bd9Sstevel@tonic-gate  *		remote port		adr_short
15397c478bd9Sstevel@tonic-gate  *		local port		adr_short
15407c478bd9Sstevel@tonic-gate  *		IP type			adr_int32
15417c478bd9Sstevel@tonic-gate  *		IP addr			adr_int32 if IPv4
15427c478bd9Sstevel@tonic-gate  *		IP addr			4 x adr_int32 if IPv6
15437c478bd9Sstevel@tonic-gate  * address types other than AU_IPADR are not yet defined
15447c478bd9Sstevel@tonic-gate  * -----------------------------------------------------------------------
15457c478bd9Sstevel@tonic-gate  */
15467c478bd9Sstevel@tonic-gate int
15477c478bd9Sstevel@tonic-gate tid_token(adr_t *adr)
15487c478bd9Sstevel@tonic-gate {
15497c478bd9Sstevel@tonic-gate 	int32_t	address[4];
15507c478bd9Sstevel@tonic-gate 	int32_t	ip_type;
15517c478bd9Sstevel@tonic-gate 	char	tid_type;
15527c478bd9Sstevel@tonic-gate 	short	rport;
15537c478bd9Sstevel@tonic-gate 	short	lport;
15547c478bd9Sstevel@tonic-gate 
15557c478bd9Sstevel@tonic-gate 	adrm_char(adr, &tid_type, 1);
15567c478bd9Sstevel@tonic-gate 	switch (tid_type) {
15577c478bd9Sstevel@tonic-gate 	case AU_IPADR:
15587c478bd9Sstevel@tonic-gate 		adrm_short(adr, &rport, 1);
15597c478bd9Sstevel@tonic-gate 		adrm_short(adr, &lport, 1);
15607c478bd9Sstevel@tonic-gate 		adrm_int32(adr, &ip_type, 1);
15617c478bd9Sstevel@tonic-gate 		adrm_char(adr, (char *)&address, ip_type);
15627c478bd9Sstevel@tonic-gate 		break;
15637c478bd9Sstevel@tonic-gate 	default:
15647c478bd9Sstevel@tonic-gate 		return (0);
15657c478bd9Sstevel@tonic-gate 	}
15667c478bd9Sstevel@tonic-gate 	return (-1);
15677c478bd9Sstevel@tonic-gate }
15687c478bd9Sstevel@tonic-gate 
15697c478bd9Sstevel@tonic-gate /*
15707c478bd9Sstevel@tonic-gate  * -----------------------------------------------------------------------
15717c478bd9Sstevel@tonic-gate  * zonename_token(): Process zonename token and display contents
15727c478bd9Sstevel@tonic-gate  *
15737c478bd9Sstevel@tonic-gate  * Format of zonename token:
15747c478bd9Sstevel@tonic-gate  *	zonename token id		adr_char
15757c478bd9Sstevel@tonic-gate  * 	zone name			adr_string
15767c478bd9Sstevel@tonic-gate  * -----------------------------------------------------------------------
15777c478bd9Sstevel@tonic-gate  */
15787c478bd9Sstevel@tonic-gate int
15797c478bd9Sstevel@tonic-gate zonename_token(adr_t *adr)
15807c478bd9Sstevel@tonic-gate {
15817c478bd9Sstevel@tonic-gate 	char	*name;
15827c478bd9Sstevel@tonic-gate 
15837c478bd9Sstevel@tonic-gate 	if (flags & M_ZONENAME) {
15847c478bd9Sstevel@tonic-gate 		get_string(adr, &name);
15857c478bd9Sstevel@tonic-gate 		if (strncmp(zonename, name, ZONENAME_MAX) == 0)
15867c478bd9Sstevel@tonic-gate 			checkflags |= M_ZONENAME;
15877c478bd9Sstevel@tonic-gate 		free(name);
15887c478bd9Sstevel@tonic-gate 	} else {
15897c478bd9Sstevel@tonic-gate 		skip_string(adr);
15907c478bd9Sstevel@tonic-gate 	}
15917c478bd9Sstevel@tonic-gate 	return (-1);
15927c478bd9Sstevel@tonic-gate }
15937c478bd9Sstevel@tonic-gate 
15947c478bd9Sstevel@tonic-gate /*
15957c478bd9Sstevel@tonic-gate  * Format of xatom token:
15967c478bd9Sstevel@tonic-gate  */
15977c478bd9Sstevel@tonic-gate int
15987c478bd9Sstevel@tonic-gate xatom_token(adr_t *adr)
15997c478bd9Sstevel@tonic-gate {
16007c478bd9Sstevel@tonic-gate 	skip_string(adr);
16017c478bd9Sstevel@tonic-gate 
16027c478bd9Sstevel@tonic-gate 	return (-1);
16037c478bd9Sstevel@tonic-gate }
16047c478bd9Sstevel@tonic-gate 
16057c478bd9Sstevel@tonic-gate /*
16067c478bd9Sstevel@tonic-gate  * Format of xselect token:
16077c478bd9Sstevel@tonic-gate  */
16087c478bd9Sstevel@tonic-gate int
16097c478bd9Sstevel@tonic-gate xselect_token(adr_t *adr)
16107c478bd9Sstevel@tonic-gate {
16117c478bd9Sstevel@tonic-gate 	skip_string(adr);
16127c478bd9Sstevel@tonic-gate 	skip_string(adr);
16137c478bd9Sstevel@tonic-gate 	skip_string(adr);
16147c478bd9Sstevel@tonic-gate 
16157c478bd9Sstevel@tonic-gate 	return (-1);
16167c478bd9Sstevel@tonic-gate }
16177c478bd9Sstevel@tonic-gate 
16187c478bd9Sstevel@tonic-gate /*
16197c478bd9Sstevel@tonic-gate  * anchor a path name with a slash
16207c478bd9Sstevel@tonic-gate  * assume we have enough space
16217c478bd9Sstevel@tonic-gate  */
16227c478bd9Sstevel@tonic-gate void
16237c478bd9Sstevel@tonic-gate anchor_path(char *path)
16247c478bd9Sstevel@tonic-gate {
16257c478bd9Sstevel@tonic-gate 	(void) memmove((void *)(path + 1), (void *)path, strlen(path) + 1);
16267c478bd9Sstevel@tonic-gate 	*path = '/';
16277c478bd9Sstevel@tonic-gate }
16287c478bd9Sstevel@tonic-gate 
16297c478bd9Sstevel@tonic-gate 
16307c478bd9Sstevel@tonic-gate /*
16317c478bd9Sstevel@tonic-gate  * copy path to collapsed path.
16327c478bd9Sstevel@tonic-gate  * collapsed path does not contain:
16337c478bd9Sstevel@tonic-gate  *	successive slashes
16347c478bd9Sstevel@tonic-gate  *	instances of dot-slash
16357c478bd9Sstevel@tonic-gate  *	instances of dot-dot-slash
16367c478bd9Sstevel@tonic-gate  * passed path must be anchored with a '/'
16377c478bd9Sstevel@tonic-gate  */
16387c478bd9Sstevel@tonic-gate char *
16397c478bd9Sstevel@tonic-gate collapse_path(char *s)
16407c478bd9Sstevel@tonic-gate {
16417c478bd9Sstevel@tonic-gate 	int	id;	/* index of where we are in destination string */
16427c478bd9Sstevel@tonic-gate 	int	is;	/* index of where we are in source string */
16437c478bd9Sstevel@tonic-gate 	int	slashseen;	/* have we seen a slash */
16447c478bd9Sstevel@tonic-gate 	int	ls;		/* length of source string */
16457c478bd9Sstevel@tonic-gate 
16467c478bd9Sstevel@tonic-gate 	ls = strlen(s) + 1;
16477c478bd9Sstevel@tonic-gate 
16487c478bd9Sstevel@tonic-gate 	slashseen = 0;
16497c478bd9Sstevel@tonic-gate 	for (is = 0, id = 0; is < ls; is++) {
16507c478bd9Sstevel@tonic-gate 		/* thats all folks, we've reached the end of input */
16517c478bd9Sstevel@tonic-gate 		if (s[is] == '\0') {
16527c478bd9Sstevel@tonic-gate 			if (id > 1 && s[id-1] == '/') {
16537c478bd9Sstevel@tonic-gate 				--id;
16547c478bd9Sstevel@tonic-gate 			}
16557c478bd9Sstevel@tonic-gate 			s[id++] = '\0';
16567c478bd9Sstevel@tonic-gate 			break;
16577c478bd9Sstevel@tonic-gate 		}
16587c478bd9Sstevel@tonic-gate 		/* previous character was a / */
16597c478bd9Sstevel@tonic-gate 		if (slashseen) {
16607c478bd9Sstevel@tonic-gate 			if (s[is] == '/')
16617c478bd9Sstevel@tonic-gate 				continue;	/* another slash, ignore it */
16627c478bd9Sstevel@tonic-gate 		} else if (s[is] == '/') {
16637c478bd9Sstevel@tonic-gate 			/* we see a /, just copy it and try again */
16647c478bd9Sstevel@tonic-gate 			slashseen = 1;
16657c478bd9Sstevel@tonic-gate 			s[id++] = '/';
16667c478bd9Sstevel@tonic-gate 			continue;
16677c478bd9Sstevel@tonic-gate 		}
16687c478bd9Sstevel@tonic-gate 		/* /./ seen */
16697c478bd9Sstevel@tonic-gate 		if (s[is] == '.' && s[is+1] == '/') {
16707c478bd9Sstevel@tonic-gate 			is += 1;
16717c478bd9Sstevel@tonic-gate 			continue;
16727c478bd9Sstevel@tonic-gate 		}
16737c478bd9Sstevel@tonic-gate 		/* XXX/. seen */
16747c478bd9Sstevel@tonic-gate 		if (s[is] == '.' && s[is+1] == '\0') {
16757c478bd9Sstevel@tonic-gate 			if (id > 1)
16767c478bd9Sstevel@tonic-gate 				id--;
16777c478bd9Sstevel@tonic-gate 			continue;
16787c478bd9Sstevel@tonic-gate 		}
16797c478bd9Sstevel@tonic-gate 		/* XXX/.. seen */
16807c478bd9Sstevel@tonic-gate 		if (s[is] == '.' && s[is+1] == '.' && s[is+2] == '\0') {
16817c478bd9Sstevel@tonic-gate 			is += 1;
16827c478bd9Sstevel@tonic-gate 			if (id > 0)
16837c478bd9Sstevel@tonic-gate 				id--;
16847c478bd9Sstevel@tonic-gate 			while (id > 0 && s[--id] != '/');
16857c478bd9Sstevel@tonic-gate 			id++;
16867c478bd9Sstevel@tonic-gate 			continue;
16877c478bd9Sstevel@tonic-gate 		}
16887c478bd9Sstevel@tonic-gate 		/* XXX/../ seen */
16897c478bd9Sstevel@tonic-gate 		if (s[is] == '.' && s[is+1] == '.' && s[is+2] == '/') {
16907c478bd9Sstevel@tonic-gate 			is += 2;
16917c478bd9Sstevel@tonic-gate 			if (id > 0)
16927c478bd9Sstevel@tonic-gate 				id--;
16937c478bd9Sstevel@tonic-gate 			while (id > 0 && s[--id] != '/');
16947c478bd9Sstevel@tonic-gate 			id++;
16957c478bd9Sstevel@tonic-gate 			continue;
16967c478bd9Sstevel@tonic-gate 		}
16977c478bd9Sstevel@tonic-gate 		while (is < ls && (s[id++] = s[is++]) != '/');
16987c478bd9Sstevel@tonic-gate 		is--;
16997c478bd9Sstevel@tonic-gate 	}
17007c478bd9Sstevel@tonic-gate 	return (s);
17017c478bd9Sstevel@tonic-gate }
17027c478bd9Sstevel@tonic-gate 
17037c478bd9Sstevel@tonic-gate 
17047c478bd9Sstevel@tonic-gate int
17057c478bd9Sstevel@tonic-gate ipc_type_match(int flag, char type)
17067c478bd9Sstevel@tonic-gate {
17077c478bd9Sstevel@tonic-gate 	if (flag == OBJ_SEM && type == AT_IPC_SEM)
17087c478bd9Sstevel@tonic-gate 		return (1);
17097c478bd9Sstevel@tonic-gate 
17107c478bd9Sstevel@tonic-gate 	if (flag == OBJ_MSG && type == AT_IPC_MSG)
17117c478bd9Sstevel@tonic-gate 		return (1);
17127c478bd9Sstevel@tonic-gate 
17137c478bd9Sstevel@tonic-gate 	if (flag == OBJ_SHM && type == AT_IPC_SHM)
17147c478bd9Sstevel@tonic-gate 		return (1);
17157c478bd9Sstevel@tonic-gate 
17167c478bd9Sstevel@tonic-gate 	return (0);
17177c478bd9Sstevel@tonic-gate }
17187c478bd9Sstevel@tonic-gate 
17197c478bd9Sstevel@tonic-gate 
17207c478bd9Sstevel@tonic-gate void
17217c478bd9Sstevel@tonic-gate skip_string(adr_t *adr)
17227c478bd9Sstevel@tonic-gate {
17237c478bd9Sstevel@tonic-gate 	ushort_t	c;
17247c478bd9Sstevel@tonic-gate 
17257c478bd9Sstevel@tonic-gate 	adrm_u_short(adr, &c, 1);
17267c478bd9Sstevel@tonic-gate 	adr->adr_now += c;
17277c478bd9Sstevel@tonic-gate }
17287c478bd9Sstevel@tonic-gate 
17297c478bd9Sstevel@tonic-gate 
17307c478bd9Sstevel@tonic-gate void
17317c478bd9Sstevel@tonic-gate get_string(adr_t *adr, char **p)
17327c478bd9Sstevel@tonic-gate {
17337c478bd9Sstevel@tonic-gate 	ushort_t	c;
17347c478bd9Sstevel@tonic-gate 
17357c478bd9Sstevel@tonic-gate 	adrm_u_short(adr, &c, 1);
17367c478bd9Sstevel@tonic-gate 	*p = a_calloc(1, (size_t)c);
17377c478bd9Sstevel@tonic-gate 	adrm_char(adr, *p, c);
17387c478bd9Sstevel@tonic-gate }
17397c478bd9Sstevel@tonic-gate 
17407c478bd9Sstevel@tonic-gate 
17417c478bd9Sstevel@tonic-gate /*
17427c478bd9Sstevel@tonic-gate  * Format of host token:
17437c478bd9Sstevel@tonic-gate  *	host  		ard_uint32
17447c478bd9Sstevel@tonic-gate  */
17457c478bd9Sstevel@tonic-gate int
17467c478bd9Sstevel@tonic-gate host_token(adr_t *adr)
17477c478bd9Sstevel@tonic-gate {
17487c478bd9Sstevel@tonic-gate 	uint32_t host;
17497c478bd9Sstevel@tonic-gate 
17507c478bd9Sstevel@tonic-gate 	adrm_u_int32(adr, &host, 1);
17517c478bd9Sstevel@tonic-gate 
17527c478bd9Sstevel@tonic-gate 	return (-1);
17537c478bd9Sstevel@tonic-gate }
17547c478bd9Sstevel@tonic-gate 
17557c478bd9Sstevel@tonic-gate /*
17567c478bd9Sstevel@tonic-gate  * Format of useofauth token:
17577c478bd9Sstevel@tonic-gate  *	uauth token id		adr_char
17587c478bd9Sstevel@tonic-gate  * 	uauth			adr_string
17597c478bd9Sstevel@tonic-gate  *
17607c478bd9Sstevel@tonic-gate  */
17617c478bd9Sstevel@tonic-gate int
17627c478bd9Sstevel@tonic-gate useofauth_token(adr_t *adr)
17637c478bd9Sstevel@tonic-gate {
17647c478bd9Sstevel@tonic-gate 	skip_string(adr);
17657c478bd9Sstevel@tonic-gate 	return (-1);
17667c478bd9Sstevel@tonic-gate }
17677c478bd9Sstevel@tonic-gate 
17687c478bd9Sstevel@tonic-gate int
17697c478bd9Sstevel@tonic-gate xcolormap_token(adr_t *adr)
17707c478bd9Sstevel@tonic-gate {
17717c478bd9Sstevel@tonic-gate 	return (xgeneric(adr));
17727c478bd9Sstevel@tonic-gate }
17737c478bd9Sstevel@tonic-gate 
17747c478bd9Sstevel@tonic-gate int
17757c478bd9Sstevel@tonic-gate xcursor_token(adr_t *adr)
17767c478bd9Sstevel@tonic-gate {
17777c478bd9Sstevel@tonic-gate 	return (xgeneric(adr));
17787c478bd9Sstevel@tonic-gate }
17797c478bd9Sstevel@tonic-gate 
17807c478bd9Sstevel@tonic-gate int
17817c478bd9Sstevel@tonic-gate xfont_token(adr_t *adr)
17827c478bd9Sstevel@tonic-gate {
17837c478bd9Sstevel@tonic-gate 	return (xgeneric(adr));
17847c478bd9Sstevel@tonic-gate }
17857c478bd9Sstevel@tonic-gate 
17867c478bd9Sstevel@tonic-gate int
17877c478bd9Sstevel@tonic-gate xgc_token(adr_t *adr)
17887c478bd9Sstevel@tonic-gate {
17897c478bd9Sstevel@tonic-gate 	return (xgeneric(adr));
17907c478bd9Sstevel@tonic-gate }
17917c478bd9Sstevel@tonic-gate 
17927c478bd9Sstevel@tonic-gate int
17937c478bd9Sstevel@tonic-gate xpixmap_token(adr_t *adr)
17947c478bd9Sstevel@tonic-gate {
17957c478bd9Sstevel@tonic-gate 	return (xgeneric(adr));
17967c478bd9Sstevel@tonic-gate }
17977c478bd9Sstevel@tonic-gate 
17987c478bd9Sstevel@tonic-gate int
17997c478bd9Sstevel@tonic-gate xwindow_token(adr_t *adr)
18007c478bd9Sstevel@tonic-gate {
18017c478bd9Sstevel@tonic-gate 	return (xgeneric(adr));
18027c478bd9Sstevel@tonic-gate }
18037c478bd9Sstevel@tonic-gate 
18047c478bd9Sstevel@tonic-gate 
18057c478bd9Sstevel@tonic-gate /*
18067c478bd9Sstevel@tonic-gate  * Format of xgeneric token:
18077c478bd9Sstevel@tonic-gate  *	XID			adr_int32
18087c478bd9Sstevel@tonic-gate  *	creator UID		adr_int32
18097c478bd9Sstevel@tonic-gate  *
18107c478bd9Sstevel@tonic-gate  * Includes:  xcolormap, xcursor, xfont, xgc, xpixmap, and xwindow
18117c478bd9Sstevel@tonic-gate  */
18127c478bd9Sstevel@tonic-gate int
18137c478bd9Sstevel@tonic-gate xgeneric(adr_t *adr)
18147c478bd9Sstevel@tonic-gate {
18157c478bd9Sstevel@tonic-gate 	int32_t xid;
18167c478bd9Sstevel@tonic-gate 	int32_t uid;
18177c478bd9Sstevel@tonic-gate 
18187c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &xid, 1);
18197c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &uid, 1);
18207c478bd9Sstevel@tonic-gate 
18217c478bd9Sstevel@tonic-gate 	if (flags & M_USERE) {
18227c478bd9Sstevel@tonic-gate 		if (m_usere == uid)
18237c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERE;
18247c478bd9Sstevel@tonic-gate 	}
18257c478bd9Sstevel@tonic-gate 
18267c478bd9Sstevel@tonic-gate 	return (-1);
18277c478bd9Sstevel@tonic-gate }
18287c478bd9Sstevel@tonic-gate 
18297c478bd9Sstevel@tonic-gate 
18307c478bd9Sstevel@tonic-gate /*
18317c478bd9Sstevel@tonic-gate  * Format of xproperty token:
18327c478bd9Sstevel@tonic-gate  *	XID			adr_int32
18337c478bd9Sstevel@tonic-gate  *	creator UID		adr_int32
18347c478bd9Sstevel@tonic-gate  *	atom string		adr_string
18357c478bd9Sstevel@tonic-gate  */
18367c478bd9Sstevel@tonic-gate int
18377c478bd9Sstevel@tonic-gate xproperty_token(adr_t *adr)
18387c478bd9Sstevel@tonic-gate {
18397c478bd9Sstevel@tonic-gate 	int32_t	xid;
18407c478bd9Sstevel@tonic-gate 	int32_t uid;
18417c478bd9Sstevel@tonic-gate 
18427c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &xid, 1);
18437c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &uid, 1);
18447c478bd9Sstevel@tonic-gate 	skip_string(adr);
18457c478bd9Sstevel@tonic-gate 
18467c478bd9Sstevel@tonic-gate 	if (flags & M_USERE) {
18477c478bd9Sstevel@tonic-gate 		if (m_usere == uid)
18487c478bd9Sstevel@tonic-gate 			checkflags = checkflags | M_USERE;
18497c478bd9Sstevel@tonic-gate 	}
18507c478bd9Sstevel@tonic-gate 
18517c478bd9Sstevel@tonic-gate 	return (-1);
18527c478bd9Sstevel@tonic-gate }
18537c478bd9Sstevel@tonic-gate 
18547c478bd9Sstevel@tonic-gate 
18557c478bd9Sstevel@tonic-gate /*
18567c478bd9Sstevel@tonic-gate  * Format of xclient token:
18577c478bd9Sstevel@tonic-gate  * 	xclient id		adr_int32
18587c478bd9Sstevel@tonic-gate  */
18597c478bd9Sstevel@tonic-gate int
18607c478bd9Sstevel@tonic-gate xclient_token(adr_t *adr)
18617c478bd9Sstevel@tonic-gate {
18627c478bd9Sstevel@tonic-gate 	int32_t	client_id;
18637c478bd9Sstevel@tonic-gate 
18647c478bd9Sstevel@tonic-gate 	adrm_int32(adr, &client_id, 1);
18657c478bd9Sstevel@tonic-gate 
18667c478bd9Sstevel@tonic-gate 	return (-1);
18677c478bd9Sstevel@tonic-gate }
18687c478bd9Sstevel@tonic-gate 
18697c478bd9Sstevel@tonic-gate /*
18707c478bd9Sstevel@tonic-gate  * Format of privilege set token:
18717c478bd9Sstevel@tonic-gate  *	priv_set type		string
18727c478bd9Sstevel@tonic-gate  *	priv_set		string
18737c478bd9Sstevel@tonic-gate  */
18747c478bd9Sstevel@tonic-gate 
18757c478bd9Sstevel@tonic-gate int
18767c478bd9Sstevel@tonic-gate privilege_token(adr_t *adr)
18777c478bd9Sstevel@tonic-gate {
18787c478bd9Sstevel@tonic-gate 	skip_string(adr);	/* set type name */
18797c478bd9Sstevel@tonic-gate 	skip_string(adr);	/* privilege set */
18807c478bd9Sstevel@tonic-gate 	return (-1);
18817c478bd9Sstevel@tonic-gate }
18827c478bd9Sstevel@tonic-gate 
18837c478bd9Sstevel@tonic-gate /*
18847c478bd9Sstevel@tonic-gate  * Format of slabel token:
18857c478bd9Sstevel@tonic-gate  *	slabel			adr_char*(sizeof (bslabel_t))
18867c478bd9Sstevel@tonic-gate  */
18877c478bd9Sstevel@tonic-gate int
18887c478bd9Sstevel@tonic-gate slabel_token(adr_t *adr)
18897c478bd9Sstevel@tonic-gate {
18907c478bd9Sstevel@tonic-gate 	bslabel_t slabel;
18917c478bd9Sstevel@tonic-gate 
18927c478bd9Sstevel@tonic-gate 	adrm_char(adr, (char *)&slabel, sizeof (slabel));
18937c478bd9Sstevel@tonic-gate 
1894*45916cd2Sjpk 	if (flags & M_LABEL) {
1895*45916cd2Sjpk 		if (blinrange(&slabel, m_label))
1896*45916cd2Sjpk 			checkflags = checkflags | M_LABEL;
18977c478bd9Sstevel@tonic-gate 	}
18987c478bd9Sstevel@tonic-gate 
18997c478bd9Sstevel@tonic-gate 	return (-1);
19007c478bd9Sstevel@tonic-gate }
19017c478bd9Sstevel@tonic-gate 
19027c478bd9Sstevel@tonic-gate 
19037c478bd9Sstevel@tonic-gate /*
19047c478bd9Sstevel@tonic-gate  * Format of useofpriv token:
19057c478bd9Sstevel@tonic-gate  *	success/failure		adr_char
19067c478bd9Sstevel@tonic-gate  * TSOL:
19077c478bd9Sstevel@tonic-gate  *	privilege		adr_int32
19087c478bd9Sstevel@tonic-gate  * SOL:
19097c478bd9Sstevel@tonic-gate  *	privilege(s)		adr_string
19107c478bd9Sstevel@tonic-gate  */
19117c478bd9Sstevel@tonic-gate #ifndef	TSOL
19127c478bd9Sstevel@tonic-gate /* ARGSUSED */
19137c478bd9Sstevel@tonic-gate #endif	/* !TSOL */
19147c478bd9Sstevel@tonic-gate int
19157c478bd9Sstevel@tonic-gate useofpriv_token(adr_t *adr)
19167c478bd9Sstevel@tonic-gate {
19177c478bd9Sstevel@tonic-gate 	char	flag;
19187c478bd9Sstevel@tonic-gate 
19197c478bd9Sstevel@tonic-gate #ifdef	TSOL
19207c478bd9Sstevel@tonic-gate 	priv_t	priv;
19217c478bd9Sstevel@tonic-gate 
19227c478bd9Sstevel@tonic-gate 	adrm_char(adr, &flag, 1);
19237c478bd9Sstevel@tonic-gate 	adrm_int32(adr, (int32_t *)&priv, 1);
19247c478bd9Sstevel@tonic-gate 
19257c478bd9Sstevel@tonic-gate 	return (-1);
19267c478bd9Sstevel@tonic-gate #else	/* !TSOL */
19277c478bd9Sstevel@tonic-gate 
19287c478bd9Sstevel@tonic-gate 	adrm_char(adr, &flag, 1);
19297c478bd9Sstevel@tonic-gate 	skip_string(adr);
19307c478bd9Sstevel@tonic-gate 	return (-1);
19317c478bd9Sstevel@tonic-gate #endif	/* TSOL */
19327c478bd9Sstevel@tonic-gate }
1933