17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 545916cd2Sjpk * Common Development and Distribution License (the "License"). 645916cd2Sjpk * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 2245916cd2Sjpk * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate /* 297c478bd9Sstevel@tonic-gate * Token processing for auditreduce. 307c478bd9Sstevel@tonic-gate */ 317c478bd9Sstevel@tonic-gate 327c478bd9Sstevel@tonic-gate #include <locale.h> 337c478bd9Sstevel@tonic-gate #include <sys/zone.h> 347c478bd9Sstevel@tonic-gate #include "auditr.h" 357c478bd9Sstevel@tonic-gate #include "toktable.h" 367c478bd9Sstevel@tonic-gate 377c478bd9Sstevel@tonic-gate extern int re_exec2(char *); 387c478bd9Sstevel@tonic-gate 397c478bd9Sstevel@tonic-gate static void anchor_path(char *path); 407c478bd9Sstevel@tonic-gate static char *collapse_path(char *s); 417c478bd9Sstevel@tonic-gate static void get_string(adr_t *adr, char **p); 427c478bd9Sstevel@tonic-gate static int ipc_type_match(int flag, char type); 437c478bd9Sstevel@tonic-gate static void skip_string(adr_t *adr); 447c478bd9Sstevel@tonic-gate static int xgeneric(adr_t *adr); 457c478bd9Sstevel@tonic-gate 467c478bd9Sstevel@tonic-gate #if AUDIT_REC 477c478bd9Sstevel@tonic-gate void 487c478bd9Sstevel@tonic-gate print_id(int id) 497c478bd9Sstevel@tonic-gate { 507c478bd9Sstevel@tonic-gate char *suffix; 517c478bd9Sstevel@tonic-gate 527c478bd9Sstevel@tonic-gate if ((id < 0) || (id > MAXTOKEN) || 537c478bd9Sstevel@tonic-gate (tokentable[id].func == NOFUNC)) { 547c478bd9Sstevel@tonic-gate (void) fprintf(stderr, 557c478bd9Sstevel@tonic-gate "token_processing: token %d not found\n", id); 567c478bd9Sstevel@tonic-gate return; 577c478bd9Sstevel@tonic-gate } 587c478bd9Sstevel@tonic-gate 597c478bd9Sstevel@tonic-gate switch (id) { 607c478bd9Sstevel@tonic-gate case AUT_NEWGROUPS: 617c478bd9Sstevel@tonic-gate suffix = "_new"; 627c478bd9Sstevel@tonic-gate break; 637c478bd9Sstevel@tonic-gate case AUT_ATTR32: 647c478bd9Sstevel@tonic-gate suffix = "32"; 657c478bd9Sstevel@tonic-gate break; 667c478bd9Sstevel@tonic-gate case AUT_ARG64: 677c478bd9Sstevel@tonic-gate case AUT_RETURN64: 687c478bd9Sstevel@tonic-gate case AUT_ATTR64: 697c478bd9Sstevel@tonic-gate case AUT_HEADER64: 707c478bd9Sstevel@tonic-gate case AUT_SUBJECT64: 717c478bd9Sstevel@tonic-gate case AUT_PROCESS64: 727c478bd9Sstevel@tonic-gate case AUT_OTHER_FILE64: 737c478bd9Sstevel@tonic-gate suffix = "64"; 747c478bd9Sstevel@tonic-gate break; 757c478bd9Sstevel@tonic-gate case AUT_SOCKET_EX: 767c478bd9Sstevel@tonic-gate case AUT_IN_ADDR_EX: 777c478bd9Sstevel@tonic-gate suffix = "_ex"; 787c478bd9Sstevel@tonic-gate break; 797c478bd9Sstevel@tonic-gate case AUT_HEADER32_EX: 807c478bd9Sstevel@tonic-gate case AUT_SUBJECT32_EX: 817c478bd9Sstevel@tonic-gate case AUT_PROCESS32_EX: 827c478bd9Sstevel@tonic-gate suffix = "32_ex"; 837c478bd9Sstevel@tonic-gate break; 847c478bd9Sstevel@tonic-gate case AUT_HEADER64_EX: 857c478bd9Sstevel@tonic-gate case AUT_SUBJECT64_EX: 867c478bd9Sstevel@tonic-gate case AUT_PROCESS64_EX: 877c478bd9Sstevel@tonic-gate suffix = "64_ex"; 887c478bd9Sstevel@tonic-gate break; 897c478bd9Sstevel@tonic-gate default: 907c478bd9Sstevel@tonic-gate suffix = ""; 917c478bd9Sstevel@tonic-gate break; 927c478bd9Sstevel@tonic-gate } 937c478bd9Sstevel@tonic-gate (void) fprintf(stderr, "token_processing: %s%s\n", 947c478bd9Sstevel@tonic-gate tokentable[id].t_name, suffix); 957c478bd9Sstevel@tonic-gate } 967c478bd9Sstevel@tonic-gate #endif /* AUDIT_REC */ 977c478bd9Sstevel@tonic-gate 987c478bd9Sstevel@tonic-gate /* 997c478bd9Sstevel@tonic-gate * Process a token in a record to determine whether the record is interesting. 1007c478bd9Sstevel@tonic-gate */ 1017c478bd9Sstevel@tonic-gate 1027c478bd9Sstevel@tonic-gate int 1037c478bd9Sstevel@tonic-gate token_processing(adr_t *adr, int tokenid) 1047c478bd9Sstevel@tonic-gate { 1057c478bd9Sstevel@tonic-gate if ((tokenid > 0) && (tokenid <= MAXTOKEN) && 1067c478bd9Sstevel@tonic-gate (tokentable[tokenid].func != NOFUNC)) { 1077c478bd9Sstevel@tonic-gate #if AUDIT_REC 1087c478bd9Sstevel@tonic-gate print_id(tokenid); 1097c478bd9Sstevel@tonic-gate #endif /* AUDIT_REC */ 1107c478bd9Sstevel@tonic-gate return ((*tokentable[tokenid].func)(adr)); 1117c478bd9Sstevel@tonic-gate } 1127c478bd9Sstevel@tonic-gate 1137c478bd9Sstevel@tonic-gate /* here if token id is not in table */ 1147c478bd9Sstevel@tonic-gate return (-2); 1157c478bd9Sstevel@tonic-gate } 1167c478bd9Sstevel@tonic-gate 1177c478bd9Sstevel@tonic-gate 1187c478bd9Sstevel@tonic-gate /* There should not be any file or header tokens in the middle of a record */ 1197c478bd9Sstevel@tonic-gate 1207c478bd9Sstevel@tonic-gate /* ARGSUSED */ 1217c478bd9Sstevel@tonic-gate int 1227c478bd9Sstevel@tonic-gate file_token(adr_t *adr) 1237c478bd9Sstevel@tonic-gate { 1247c478bd9Sstevel@tonic-gate return (-2); 1257c478bd9Sstevel@tonic-gate } 1267c478bd9Sstevel@tonic-gate 1277c478bd9Sstevel@tonic-gate /* ARGSUSED */ 1287c478bd9Sstevel@tonic-gate int 1297c478bd9Sstevel@tonic-gate file64_token(adr_t *adr) 1307c478bd9Sstevel@tonic-gate { 1317c478bd9Sstevel@tonic-gate return (-2); 1327c478bd9Sstevel@tonic-gate } 1337c478bd9Sstevel@tonic-gate 1347c478bd9Sstevel@tonic-gate /* ARGSUSED */ 1357c478bd9Sstevel@tonic-gate int 1367c478bd9Sstevel@tonic-gate header_token(adr_t *adr) 1377c478bd9Sstevel@tonic-gate { 1387c478bd9Sstevel@tonic-gate return (-2); 1397c478bd9Sstevel@tonic-gate } 1407c478bd9Sstevel@tonic-gate 1417c478bd9Sstevel@tonic-gate /* ARGSUSED */ 1427c478bd9Sstevel@tonic-gate int 1437c478bd9Sstevel@tonic-gate header32_ex_token(adr_t *adr) 1447c478bd9Sstevel@tonic-gate { 1457c478bd9Sstevel@tonic-gate return (-2); 1467c478bd9Sstevel@tonic-gate } 1477c478bd9Sstevel@tonic-gate 1487c478bd9Sstevel@tonic-gate /* ARGSUSED */ 1497c478bd9Sstevel@tonic-gate int 1507c478bd9Sstevel@tonic-gate header64_ex_token(adr_t *adr) 1517c478bd9Sstevel@tonic-gate { 1527c478bd9Sstevel@tonic-gate return (-2); 1537c478bd9Sstevel@tonic-gate } 1547c478bd9Sstevel@tonic-gate 1557c478bd9Sstevel@tonic-gate /* ARGSUSED */ 1567c478bd9Sstevel@tonic-gate int 1577c478bd9Sstevel@tonic-gate header64_token(adr_t *adr) 1587c478bd9Sstevel@tonic-gate { 1597c478bd9Sstevel@tonic-gate return (-2); 1607c478bd9Sstevel@tonic-gate } 1617c478bd9Sstevel@tonic-gate 1627c478bd9Sstevel@tonic-gate 1637c478bd9Sstevel@tonic-gate /* 1647c478bd9Sstevel@tonic-gate * ====================================================== 1657c478bd9Sstevel@tonic-gate * The following token processing routines return 1667c478bd9Sstevel@tonic-gate * -1: if the record is not interesting 1677c478bd9Sstevel@tonic-gate * -2: if an error is found 1687c478bd9Sstevel@tonic-gate * ====================================================== 1697c478bd9Sstevel@tonic-gate */ 1707c478bd9Sstevel@tonic-gate 1717c478bd9Sstevel@tonic-gate int 1727c478bd9Sstevel@tonic-gate trailer_token(adr_t *adr) 1737c478bd9Sstevel@tonic-gate { 1747c478bd9Sstevel@tonic-gate short magic_number; 1757c478bd9Sstevel@tonic-gate uint32_t bytes; 1767c478bd9Sstevel@tonic-gate 1777c478bd9Sstevel@tonic-gate adrm_u_short(adr, (ushort_t *)&magic_number, 1); 1787c478bd9Sstevel@tonic-gate if (magic_number != AUT_TRAILER_MAGIC) { 1797c478bd9Sstevel@tonic-gate (void) fprintf(stderr, "%s\n", 1807c478bd9Sstevel@tonic-gate gettext("auditreduce: Bad trailer token")); 1817c478bd9Sstevel@tonic-gate return (-2); 1827c478bd9Sstevel@tonic-gate } 1837c478bd9Sstevel@tonic-gate adrm_u_int32(adr, &bytes, 1); 1847c478bd9Sstevel@tonic-gate 1857c478bd9Sstevel@tonic-gate return (-1); 1867c478bd9Sstevel@tonic-gate } 1877c478bd9Sstevel@tonic-gate 1887c478bd9Sstevel@tonic-gate 1897c478bd9Sstevel@tonic-gate /* 1907c478bd9Sstevel@tonic-gate * Format of arbitrary data token: 1917c478bd9Sstevel@tonic-gate * arbitrary data token id adr char 1927c478bd9Sstevel@tonic-gate * how to print adr_char 1937c478bd9Sstevel@tonic-gate * basic unit adr_char 1947c478bd9Sstevel@tonic-gate * unit count adr_char, specifying number of units of 1957c478bd9Sstevel@tonic-gate * data items depends on basic unit 1967c478bd9Sstevel@tonic-gate * 1977c478bd9Sstevel@tonic-gate */ 1987c478bd9Sstevel@tonic-gate int 1997c478bd9Sstevel@tonic-gate arbitrary_data_token(adr_t *adr) 2007c478bd9Sstevel@tonic-gate { 2017c478bd9Sstevel@tonic-gate int i; 2027c478bd9Sstevel@tonic-gate char c1; 2037c478bd9Sstevel@tonic-gate short c2; 2047c478bd9Sstevel@tonic-gate int32_t c3; 2057c478bd9Sstevel@tonic-gate int64_t c4; 2067c478bd9Sstevel@tonic-gate char how_to_print, basic_unit, unit_count; 2077c478bd9Sstevel@tonic-gate 2087c478bd9Sstevel@tonic-gate /* get how_to_print, basic_unit, and unit_count */ 2097c478bd9Sstevel@tonic-gate adrm_char(adr, &how_to_print, 1); 2107c478bd9Sstevel@tonic-gate adrm_char(adr, &basic_unit, 1); 2117c478bd9Sstevel@tonic-gate adrm_char(adr, &unit_count, 1); 2127c478bd9Sstevel@tonic-gate for (i = 0; i < unit_count; i++) { 2137c478bd9Sstevel@tonic-gate switch (basic_unit) { 2147c478bd9Sstevel@tonic-gate /* case AUR_BYTE: has same value as AUR_CHAR */ 2157c478bd9Sstevel@tonic-gate case AUR_CHAR: 2167c478bd9Sstevel@tonic-gate adrm_char(adr, &c1, 1); 2177c478bd9Sstevel@tonic-gate break; 2187c478bd9Sstevel@tonic-gate case AUR_SHORT: 2197c478bd9Sstevel@tonic-gate adrm_short(adr, &c2, 1); 2207c478bd9Sstevel@tonic-gate break; 2217c478bd9Sstevel@tonic-gate case AUR_INT32: 2227c478bd9Sstevel@tonic-gate adrm_int32(adr, (int32_t *)&c3, 1); 2237c478bd9Sstevel@tonic-gate break; 2247c478bd9Sstevel@tonic-gate case AUR_INT64: 2257c478bd9Sstevel@tonic-gate adrm_int64(adr, (int64_t *)&c4, 1); 2267c478bd9Sstevel@tonic-gate break; 2277c478bd9Sstevel@tonic-gate default: 2287c478bd9Sstevel@tonic-gate return (-2); 2297c478bd9Sstevel@tonic-gate break; 2307c478bd9Sstevel@tonic-gate } 2317c478bd9Sstevel@tonic-gate } 2327c478bd9Sstevel@tonic-gate return (-1); 2337c478bd9Sstevel@tonic-gate } 2347c478bd9Sstevel@tonic-gate 2357c478bd9Sstevel@tonic-gate 2367c478bd9Sstevel@tonic-gate /* 2377c478bd9Sstevel@tonic-gate * Format of opaque token: 2387c478bd9Sstevel@tonic-gate * opaque token id adr_char 2397c478bd9Sstevel@tonic-gate * size adr_short 2407c478bd9Sstevel@tonic-gate * data adr_char, size times 2417c478bd9Sstevel@tonic-gate * 2427c478bd9Sstevel@tonic-gate */ 2437c478bd9Sstevel@tonic-gate int 2447c478bd9Sstevel@tonic-gate opaque_token(adr_t *adr) 2457c478bd9Sstevel@tonic-gate { 2467c478bd9Sstevel@tonic-gate skip_string(adr); 2477c478bd9Sstevel@tonic-gate return (-1); 2487c478bd9Sstevel@tonic-gate } 2497c478bd9Sstevel@tonic-gate 2507c478bd9Sstevel@tonic-gate 2517c478bd9Sstevel@tonic-gate 2527c478bd9Sstevel@tonic-gate /* 2537c478bd9Sstevel@tonic-gate * Format of return32 value token: 2547c478bd9Sstevel@tonic-gate * return value token id adr_char 2557c478bd9Sstevel@tonic-gate * error number adr_char 2567c478bd9Sstevel@tonic-gate * return value adr_u_int32 2577c478bd9Sstevel@tonic-gate * 2587c478bd9Sstevel@tonic-gate */ 2597c478bd9Sstevel@tonic-gate int 2607c478bd9Sstevel@tonic-gate return_value32_token(adr_t *adr) 2617c478bd9Sstevel@tonic-gate { 2627c478bd9Sstevel@tonic-gate char errnum; 2637c478bd9Sstevel@tonic-gate uint32_t value; 2647c478bd9Sstevel@tonic-gate 2657c478bd9Sstevel@tonic-gate adrm_char(adr, &errnum, 1); 2667c478bd9Sstevel@tonic-gate adrm_u_int32(adr, &value, 1); 2677c478bd9Sstevel@tonic-gate if ((flags & M_SORF) && 2687c478bd9Sstevel@tonic-gate ((global_class & mask.am_success) && (errnum == 0)) || 2697c478bd9Sstevel@tonic-gate ((global_class & mask.am_failure) && (errnum != 0))) { 2707c478bd9Sstevel@tonic-gate checkflags |= M_SORF; 2717c478bd9Sstevel@tonic-gate } 2727c478bd9Sstevel@tonic-gate return (-1); 2737c478bd9Sstevel@tonic-gate } 2747c478bd9Sstevel@tonic-gate 2757c478bd9Sstevel@tonic-gate /* 2767c478bd9Sstevel@tonic-gate * Format of return64 value token: 2777c478bd9Sstevel@tonic-gate * return value token id adr_char 2787c478bd9Sstevel@tonic-gate * error number adr_char 2797c478bd9Sstevel@tonic-gate * return value adr_u_int64 2807c478bd9Sstevel@tonic-gate * 2817c478bd9Sstevel@tonic-gate */ 2827c478bd9Sstevel@tonic-gate int 2837c478bd9Sstevel@tonic-gate return_value64_token(adr_t *adr) 2847c478bd9Sstevel@tonic-gate { 2857c478bd9Sstevel@tonic-gate char errnum; 2867c478bd9Sstevel@tonic-gate uint64_t value; 2877c478bd9Sstevel@tonic-gate 2887c478bd9Sstevel@tonic-gate adrm_char(adr, &errnum, 1); 2897c478bd9Sstevel@tonic-gate adrm_u_int64(adr, &value, 1); 2907c478bd9Sstevel@tonic-gate if ((flags & M_SORF) && 2917c478bd9Sstevel@tonic-gate ((global_class & mask.am_success) && (errnum == 0)) || 2927c478bd9Sstevel@tonic-gate ((global_class & mask.am_failure) && (errnum != 0))) { 2937c478bd9Sstevel@tonic-gate checkflags |= M_SORF; 2947c478bd9Sstevel@tonic-gate } 2957c478bd9Sstevel@tonic-gate return (-1); 2967c478bd9Sstevel@tonic-gate } 2977c478bd9Sstevel@tonic-gate 2987c478bd9Sstevel@tonic-gate 2997c478bd9Sstevel@tonic-gate /* 3007c478bd9Sstevel@tonic-gate * Format of sequence token: 3017c478bd9Sstevel@tonic-gate * sequence token id adr_char 3027c478bd9Sstevel@tonic-gate * audit_count int32_t 3037c478bd9Sstevel@tonic-gate * 3047c478bd9Sstevel@tonic-gate */ 3057c478bd9Sstevel@tonic-gate int 3067c478bd9Sstevel@tonic-gate sequence_token(adr_t *adr) 3077c478bd9Sstevel@tonic-gate { 3087c478bd9Sstevel@tonic-gate int32_t audit_count; 3097c478bd9Sstevel@tonic-gate 3107c478bd9Sstevel@tonic-gate adrm_int32(adr, &audit_count, 1); 3117c478bd9Sstevel@tonic-gate return (-1); 3127c478bd9Sstevel@tonic-gate } 3137c478bd9Sstevel@tonic-gate 3147c478bd9Sstevel@tonic-gate 3157c478bd9Sstevel@tonic-gate /* 3167c478bd9Sstevel@tonic-gate * Format of text token: 3177c478bd9Sstevel@tonic-gate * text token id adr_char 3187c478bd9Sstevel@tonic-gate * text adr_string 3197c478bd9Sstevel@tonic-gate * 3207c478bd9Sstevel@tonic-gate */ 3217c478bd9Sstevel@tonic-gate int 3227c478bd9Sstevel@tonic-gate text_token(adr_t *adr) 3237c478bd9Sstevel@tonic-gate { 3247c478bd9Sstevel@tonic-gate skip_string(adr); 3257c478bd9Sstevel@tonic-gate return (-1); 3267c478bd9Sstevel@tonic-gate } 3277c478bd9Sstevel@tonic-gate 3287c478bd9Sstevel@tonic-gate 3297c478bd9Sstevel@tonic-gate /* 3307c478bd9Sstevel@tonic-gate * Format of ip_addr token: 3317c478bd9Sstevel@tonic-gate * ip token id adr_char 3327c478bd9Sstevel@tonic-gate * address adr_int32 3337c478bd9Sstevel@tonic-gate * 3347c478bd9Sstevel@tonic-gate */ 3357c478bd9Sstevel@tonic-gate int 3367c478bd9Sstevel@tonic-gate ip_addr_token(adr_t *adr) 3377c478bd9Sstevel@tonic-gate { 3387c478bd9Sstevel@tonic-gate int32_t address; 3397c478bd9Sstevel@tonic-gate 3407c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)&address, 4); 3417c478bd9Sstevel@tonic-gate 3427c478bd9Sstevel@tonic-gate return (-1); 3437c478bd9Sstevel@tonic-gate } 3447c478bd9Sstevel@tonic-gate 3457c478bd9Sstevel@tonic-gate /* 3467c478bd9Sstevel@tonic-gate * Format of ip_addr_ex token: 3477c478bd9Sstevel@tonic-gate * ip token id adr_char 3487c478bd9Sstevel@tonic-gate * ip type adr_int32 3497c478bd9Sstevel@tonic-gate * address 4*adr_int32 3507c478bd9Sstevel@tonic-gate * 3517c478bd9Sstevel@tonic-gate */ 3527c478bd9Sstevel@tonic-gate int 3537c478bd9Sstevel@tonic-gate ip_addr_ex_token(adr_t *adr) 3547c478bd9Sstevel@tonic-gate { 3557c478bd9Sstevel@tonic-gate int32_t address[4]; 3567c478bd9Sstevel@tonic-gate int32_t type; 3577c478bd9Sstevel@tonic-gate 3587c478bd9Sstevel@tonic-gate adrm_int32(adr, (int32_t *)&type, 1); 3597c478bd9Sstevel@tonic-gate adrm_int32(adr, (int32_t *)&address, 4); 3607c478bd9Sstevel@tonic-gate 3617c478bd9Sstevel@tonic-gate return (-1); 3627c478bd9Sstevel@tonic-gate } 3637c478bd9Sstevel@tonic-gate 3647c478bd9Sstevel@tonic-gate /* 3657c478bd9Sstevel@tonic-gate * Format of ip token: 3667c478bd9Sstevel@tonic-gate * ip header token id adr_char 3677c478bd9Sstevel@tonic-gate * version adr_char 3687c478bd9Sstevel@tonic-gate * type of service adr_char 3697c478bd9Sstevel@tonic-gate * length adr_short 3707c478bd9Sstevel@tonic-gate * id adr_u_short 3717c478bd9Sstevel@tonic-gate * offset adr_u_short 3727c478bd9Sstevel@tonic-gate * ttl adr_char 3737c478bd9Sstevel@tonic-gate * protocol adr_char 3747c478bd9Sstevel@tonic-gate * checksum adr_u_short 3757c478bd9Sstevel@tonic-gate * source address adr_int32 3767c478bd9Sstevel@tonic-gate * destination address adr_int32 3777c478bd9Sstevel@tonic-gate * 3787c478bd9Sstevel@tonic-gate */ 3797c478bd9Sstevel@tonic-gate int 3807c478bd9Sstevel@tonic-gate ip_token(adr_t *adr) 3817c478bd9Sstevel@tonic-gate { 3827c478bd9Sstevel@tonic-gate char version; 3837c478bd9Sstevel@tonic-gate char type; 3847c478bd9Sstevel@tonic-gate short len; 3857c478bd9Sstevel@tonic-gate unsigned short id, offset, checksum; 3867c478bd9Sstevel@tonic-gate char ttl, protocol; 3877c478bd9Sstevel@tonic-gate int32_t src, dest; 3887c478bd9Sstevel@tonic-gate 3897c478bd9Sstevel@tonic-gate adrm_char(adr, &version, 1); 3907c478bd9Sstevel@tonic-gate adrm_char(adr, &type, 1); 3917c478bd9Sstevel@tonic-gate adrm_short(adr, &len, 1); 3927c478bd9Sstevel@tonic-gate adrm_u_short(adr, &id, 1); 3937c478bd9Sstevel@tonic-gate adrm_u_short(adr, &offset, 1); 3947c478bd9Sstevel@tonic-gate adrm_char(adr, &ttl, 1); 3957c478bd9Sstevel@tonic-gate adrm_char(adr, &protocol, 1); 3967c478bd9Sstevel@tonic-gate adrm_u_short(adr, &checksum, 1); 3977c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)&src, 4); 3987c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)&dest, 4); 3997c478bd9Sstevel@tonic-gate 4007c478bd9Sstevel@tonic-gate return (-1); 4017c478bd9Sstevel@tonic-gate } 4027c478bd9Sstevel@tonic-gate 4037c478bd9Sstevel@tonic-gate 4047c478bd9Sstevel@tonic-gate /* 4057c478bd9Sstevel@tonic-gate * Format of iport token: 4067c478bd9Sstevel@tonic-gate * ip port address token id adr_char 4077c478bd9Sstevel@tonic-gate * port address adr_short 4087c478bd9Sstevel@tonic-gate * 4097c478bd9Sstevel@tonic-gate */ 4107c478bd9Sstevel@tonic-gate int 4117c478bd9Sstevel@tonic-gate iport_token(adr_t *adr) 4127c478bd9Sstevel@tonic-gate { 4137c478bd9Sstevel@tonic-gate short address; 4147c478bd9Sstevel@tonic-gate 4157c478bd9Sstevel@tonic-gate adrm_short(adr, &address, 1); 4167c478bd9Sstevel@tonic-gate 4177c478bd9Sstevel@tonic-gate return (-1); 4187c478bd9Sstevel@tonic-gate } 4197c478bd9Sstevel@tonic-gate 4207c478bd9Sstevel@tonic-gate 4217c478bd9Sstevel@tonic-gate /* 4227c478bd9Sstevel@tonic-gate * Format of groups token: 4237c478bd9Sstevel@tonic-gate * group token id adr_char 4247c478bd9Sstevel@tonic-gate * group list adr_int32, 16 times 4257c478bd9Sstevel@tonic-gate * 4267c478bd9Sstevel@tonic-gate */ 4277c478bd9Sstevel@tonic-gate int 4287c478bd9Sstevel@tonic-gate group_token(adr_t *adr) 4297c478bd9Sstevel@tonic-gate { 4307c478bd9Sstevel@tonic-gate int gid[16]; 4317c478bd9Sstevel@tonic-gate int i; 4327c478bd9Sstevel@tonic-gate int flag = 0; 4337c478bd9Sstevel@tonic-gate 4347c478bd9Sstevel@tonic-gate for (i = 0; i < 16; i++) { 4357c478bd9Sstevel@tonic-gate adrm_int32(adr, (int32_t *)&gid[i], 1); 4367c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 4377c478bd9Sstevel@tonic-gate if ((unsigned short)m_groupr == gid[i]) 4387c478bd9Sstevel@tonic-gate flag = 1; 4397c478bd9Sstevel@tonic-gate } 4407c478bd9Sstevel@tonic-gate } 4417c478bd9Sstevel@tonic-gate 4427c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 4437c478bd9Sstevel@tonic-gate if (flag) 4447c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 4457c478bd9Sstevel@tonic-gate } 4467c478bd9Sstevel@tonic-gate return (-1); 4477c478bd9Sstevel@tonic-gate } 4487c478bd9Sstevel@tonic-gate 4497c478bd9Sstevel@tonic-gate /* 4507c478bd9Sstevel@tonic-gate * Format of newgroups token: 4517c478bd9Sstevel@tonic-gate * group token id adr_char 4527c478bd9Sstevel@tonic-gate * number of groups adr_short 4537c478bd9Sstevel@tonic-gate * group list adr_int32, "number" times 4547c478bd9Sstevel@tonic-gate * 4557c478bd9Sstevel@tonic-gate */ 4567c478bd9Sstevel@tonic-gate int 4577c478bd9Sstevel@tonic-gate newgroup_token(adr_t *adr) 4587c478bd9Sstevel@tonic-gate { 4597c478bd9Sstevel@tonic-gate gid_t gid; 4607c478bd9Sstevel@tonic-gate int i; 4617c478bd9Sstevel@tonic-gate short int number; 4627c478bd9Sstevel@tonic-gate 4637c478bd9Sstevel@tonic-gate adrm_short(adr, &number, 1); 4647c478bd9Sstevel@tonic-gate 4657c478bd9Sstevel@tonic-gate for (i = 0; i < number; i++) { 4667c478bd9Sstevel@tonic-gate adrm_int32(adr, (int32_t *)&gid, 1); 4677c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 4687c478bd9Sstevel@tonic-gate if (m_groupr == gid) 4697c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 4707c478bd9Sstevel@tonic-gate } 4717c478bd9Sstevel@tonic-gate } 4727c478bd9Sstevel@tonic-gate 4737c478bd9Sstevel@tonic-gate return (-1); 4747c478bd9Sstevel@tonic-gate } 4757c478bd9Sstevel@tonic-gate 4767c478bd9Sstevel@tonic-gate /* 4777c478bd9Sstevel@tonic-gate * Format of argument32 token: 4787c478bd9Sstevel@tonic-gate * argument token id adr_char 4797c478bd9Sstevel@tonic-gate * argument number adr_char 4807c478bd9Sstevel@tonic-gate * argument value adr_int32 4817c478bd9Sstevel@tonic-gate * argument description adr_string 4827c478bd9Sstevel@tonic-gate * 4837c478bd9Sstevel@tonic-gate */ 4847c478bd9Sstevel@tonic-gate int 4857c478bd9Sstevel@tonic-gate argument32_token(adr_t *adr) 4867c478bd9Sstevel@tonic-gate { 4877c478bd9Sstevel@tonic-gate char arg_num; 4887c478bd9Sstevel@tonic-gate int32_t arg_val; 4897c478bd9Sstevel@tonic-gate 4907c478bd9Sstevel@tonic-gate adrm_char(adr, &arg_num, 1); 4917c478bd9Sstevel@tonic-gate adrm_int32(adr, &arg_val, 1); 4927c478bd9Sstevel@tonic-gate skip_string(adr); 4937c478bd9Sstevel@tonic-gate 4947c478bd9Sstevel@tonic-gate return (-1); 4957c478bd9Sstevel@tonic-gate } 4967c478bd9Sstevel@tonic-gate 4977c478bd9Sstevel@tonic-gate /* 4987c478bd9Sstevel@tonic-gate * Format of argument64 token: 4997c478bd9Sstevel@tonic-gate * argument token id adr_char 5007c478bd9Sstevel@tonic-gate * argument number adr_char 5017c478bd9Sstevel@tonic-gate * argument value adr_int64 5027c478bd9Sstevel@tonic-gate * argument description adr_string 5037c478bd9Sstevel@tonic-gate * 5047c478bd9Sstevel@tonic-gate */ 5057c478bd9Sstevel@tonic-gate int 5067c478bd9Sstevel@tonic-gate argument64_token(adr_t *adr) 5077c478bd9Sstevel@tonic-gate { 5087c478bd9Sstevel@tonic-gate char arg_num; 5097c478bd9Sstevel@tonic-gate int64_t arg_val; 5107c478bd9Sstevel@tonic-gate 5117c478bd9Sstevel@tonic-gate adrm_char(adr, &arg_num, 1); 5127c478bd9Sstevel@tonic-gate adrm_int64(adr, &arg_val, 1); 5137c478bd9Sstevel@tonic-gate skip_string(adr); 5147c478bd9Sstevel@tonic-gate 5157c478bd9Sstevel@tonic-gate return (-1); 5167c478bd9Sstevel@tonic-gate } 5177c478bd9Sstevel@tonic-gate 5187c478bd9Sstevel@tonic-gate int 5197c478bd9Sstevel@tonic-gate acl_token(adr_t *adr) 5207c478bd9Sstevel@tonic-gate { 5217c478bd9Sstevel@tonic-gate 5227c478bd9Sstevel@tonic-gate int32_t id; 5237c478bd9Sstevel@tonic-gate int32_t mode; 5247c478bd9Sstevel@tonic-gate int32_t type; 5257c478bd9Sstevel@tonic-gate 5267c478bd9Sstevel@tonic-gate adrm_int32(adr, &type, 1); 5277c478bd9Sstevel@tonic-gate adrm_int32(adr, &id, 1); 5287c478bd9Sstevel@tonic-gate adrm_int32(adr, &mode, 1); 5297c478bd9Sstevel@tonic-gate 5307c478bd9Sstevel@tonic-gate return (-1); 5317c478bd9Sstevel@tonic-gate } 5327c478bd9Sstevel@tonic-gate 5337c478bd9Sstevel@tonic-gate /* 5347c478bd9Sstevel@tonic-gate * Format of attribute token: (old pre SunOS 5.7 format) 5357c478bd9Sstevel@tonic-gate * attribute token id adr_char 5367c478bd9Sstevel@tonic-gate * mode adr_int32 (printed in octal) 5377c478bd9Sstevel@tonic-gate * uid adr_int32 5387c478bd9Sstevel@tonic-gate * gid adr_int32 5397c478bd9Sstevel@tonic-gate * file system id adr_int32 5407c478bd9Sstevel@tonic-gate * node id adr_int32 5417c478bd9Sstevel@tonic-gate * device adr_int32 5427c478bd9Sstevel@tonic-gate * 5437c478bd9Sstevel@tonic-gate */ 5447c478bd9Sstevel@tonic-gate int 5457c478bd9Sstevel@tonic-gate attribute_token(adr_t *adr) 5467c478bd9Sstevel@tonic-gate { 5477c478bd9Sstevel@tonic-gate int32_t dev; 5487c478bd9Sstevel@tonic-gate int32_t file_sysid; 5497c478bd9Sstevel@tonic-gate int32_t gid; 5507c478bd9Sstevel@tonic-gate int32_t mode; 5517c478bd9Sstevel@tonic-gate int32_t nodeid; 5527c478bd9Sstevel@tonic-gate int32_t uid; 5537c478bd9Sstevel@tonic-gate 5547c478bd9Sstevel@tonic-gate adrm_int32(adr, &mode, 1); 5557c478bd9Sstevel@tonic-gate adrm_int32(adr, &uid, 1); 5567c478bd9Sstevel@tonic-gate adrm_int32(adr, &gid, 1); 5577c478bd9Sstevel@tonic-gate adrm_int32(adr, &file_sysid, 1); 5587c478bd9Sstevel@tonic-gate adrm_int32(adr, &nodeid, 1); 5597c478bd9Sstevel@tonic-gate adrm_int32(adr, &dev, 1); 5607c478bd9Sstevel@tonic-gate 5617c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 5627c478bd9Sstevel@tonic-gate if (m_usere == uid) 5637c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 5647c478bd9Sstevel@tonic-gate } 5657c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 5667c478bd9Sstevel@tonic-gate if (m_groupe == gid) 5677c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 5687c478bd9Sstevel@tonic-gate } 5697c478bd9Sstevel@tonic-gate 5707c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 5717c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_FGROUP) && 5727c478bd9Sstevel@tonic-gate (obj_group == gid)) 5737c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 5747c478bd9Sstevel@tonic-gate else if ((obj_flag & OBJ_FOWNER) && 5757c478bd9Sstevel@tonic-gate (obj_owner == uid)) 5767c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 5777c478bd9Sstevel@tonic-gate } 5787c478bd9Sstevel@tonic-gate return (-1); 5797c478bd9Sstevel@tonic-gate } 5807c478bd9Sstevel@tonic-gate 5817c478bd9Sstevel@tonic-gate /* 5827c478bd9Sstevel@tonic-gate * Format of attribute32 token: 5837c478bd9Sstevel@tonic-gate * attribute token id adr_char 5847c478bd9Sstevel@tonic-gate * mode adr_int32 (printed in octal) 5857c478bd9Sstevel@tonic-gate * uid adr_int32 5867c478bd9Sstevel@tonic-gate * gid adr_int32 5877c478bd9Sstevel@tonic-gate * file system id adr_int32 5887c478bd9Sstevel@tonic-gate * node id adr_int64 5897c478bd9Sstevel@tonic-gate * device adr_int32 5907c478bd9Sstevel@tonic-gate * 5917c478bd9Sstevel@tonic-gate */ 5927c478bd9Sstevel@tonic-gate int 5937c478bd9Sstevel@tonic-gate attribute32_token(adr_t *adr) 5947c478bd9Sstevel@tonic-gate { 5957c478bd9Sstevel@tonic-gate int32_t dev; 5967c478bd9Sstevel@tonic-gate int32_t file_sysid; 5977c478bd9Sstevel@tonic-gate int32_t gid; 5987c478bd9Sstevel@tonic-gate int32_t mode; 5997c478bd9Sstevel@tonic-gate int64_t nodeid; 6007c478bd9Sstevel@tonic-gate int32_t uid; 6017c478bd9Sstevel@tonic-gate 6027c478bd9Sstevel@tonic-gate adrm_int32(adr, &mode, 1); 6037c478bd9Sstevel@tonic-gate adrm_int32(adr, &uid, 1); 6047c478bd9Sstevel@tonic-gate adrm_int32(adr, &gid, 1); 6057c478bd9Sstevel@tonic-gate adrm_int32(adr, &file_sysid, 1); 6067c478bd9Sstevel@tonic-gate adrm_int64(adr, &nodeid, 1); 6077c478bd9Sstevel@tonic-gate adrm_int32(adr, &dev, 1); 6087c478bd9Sstevel@tonic-gate 6097c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 6107c478bd9Sstevel@tonic-gate if (m_usere == uid) 6117c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 6127c478bd9Sstevel@tonic-gate } 6137c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 6147c478bd9Sstevel@tonic-gate if (m_groupe == gid) 6157c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 6167c478bd9Sstevel@tonic-gate } 6177c478bd9Sstevel@tonic-gate 6187c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 6197c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_FGROUP) && 6207c478bd9Sstevel@tonic-gate (obj_group == gid)) 6217c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 6227c478bd9Sstevel@tonic-gate else if ((obj_flag & OBJ_FOWNER) && 6237c478bd9Sstevel@tonic-gate (obj_owner == uid)) 6247c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 6257c478bd9Sstevel@tonic-gate } 6267c478bd9Sstevel@tonic-gate return (-1); 6277c478bd9Sstevel@tonic-gate } 6287c478bd9Sstevel@tonic-gate 6297c478bd9Sstevel@tonic-gate /* 6307c478bd9Sstevel@tonic-gate * Format of attribute64 token: 6317c478bd9Sstevel@tonic-gate * attribute token id adr_char 6327c478bd9Sstevel@tonic-gate * mode adr_int32 (printed in octal) 6337c478bd9Sstevel@tonic-gate * uid adr_int32 6347c478bd9Sstevel@tonic-gate * gid adr_int32 6357c478bd9Sstevel@tonic-gate * file system id adr_int32 6367c478bd9Sstevel@tonic-gate * node id adr_int64 6377c478bd9Sstevel@tonic-gate * device adr_int64 6387c478bd9Sstevel@tonic-gate * 6397c478bd9Sstevel@tonic-gate */ 6407c478bd9Sstevel@tonic-gate int 6417c478bd9Sstevel@tonic-gate attribute64_token(adr_t *adr) 6427c478bd9Sstevel@tonic-gate { 6437c478bd9Sstevel@tonic-gate int64_t dev; 6447c478bd9Sstevel@tonic-gate int32_t file_sysid; 6457c478bd9Sstevel@tonic-gate int32_t gid; 6467c478bd9Sstevel@tonic-gate int32_t mode; 6477c478bd9Sstevel@tonic-gate int64_t nodeid; 6487c478bd9Sstevel@tonic-gate int32_t uid; 6497c478bd9Sstevel@tonic-gate 6507c478bd9Sstevel@tonic-gate adrm_int32(adr, &mode, 1); 6517c478bd9Sstevel@tonic-gate adrm_int32(adr, &uid, 1); 6527c478bd9Sstevel@tonic-gate adrm_int32(adr, &gid, 1); 6537c478bd9Sstevel@tonic-gate adrm_int32(adr, &file_sysid, 1); 6547c478bd9Sstevel@tonic-gate adrm_int64(adr, &nodeid, 1); 6557c478bd9Sstevel@tonic-gate adrm_int64(adr, &dev, 1); 6567c478bd9Sstevel@tonic-gate 6577c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 6587c478bd9Sstevel@tonic-gate if (m_usere == uid) 6597c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 6607c478bd9Sstevel@tonic-gate } 6617c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 6627c478bd9Sstevel@tonic-gate if (m_groupe == gid) 6637c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 6647c478bd9Sstevel@tonic-gate } 6657c478bd9Sstevel@tonic-gate 6667c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 6677c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_FGROUP) && 6687c478bd9Sstevel@tonic-gate (obj_group == gid)) 6697c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 6707c478bd9Sstevel@tonic-gate else if ((obj_flag & OBJ_FOWNER) && 6717c478bd9Sstevel@tonic-gate (obj_owner == uid)) 6727c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 6737c478bd9Sstevel@tonic-gate } 6747c478bd9Sstevel@tonic-gate return (-1); 6757c478bd9Sstevel@tonic-gate } 6767c478bd9Sstevel@tonic-gate 6777c478bd9Sstevel@tonic-gate 6787c478bd9Sstevel@tonic-gate /* 6797c478bd9Sstevel@tonic-gate * Format of command token: 6807c478bd9Sstevel@tonic-gate * attribute token id adr_char 6817c478bd9Sstevel@tonic-gate * argc adr_short 6827c478bd9Sstevel@tonic-gate * argv len adr_short variable amount of argv len 6837c478bd9Sstevel@tonic-gate * argv text argv len and text 6847c478bd9Sstevel@tonic-gate * . 6857c478bd9Sstevel@tonic-gate * . 6867c478bd9Sstevel@tonic-gate * . 6877c478bd9Sstevel@tonic-gate * envp count adr_short variable amount of envp len 6887c478bd9Sstevel@tonic-gate * envp len adr_short and text 6897c478bd9Sstevel@tonic-gate * envp text envp len 6907c478bd9Sstevel@tonic-gate * . 6917c478bd9Sstevel@tonic-gate * . 6927c478bd9Sstevel@tonic-gate * . 6937c478bd9Sstevel@tonic-gate * 6947c478bd9Sstevel@tonic-gate */ 6957c478bd9Sstevel@tonic-gate int 6967c478bd9Sstevel@tonic-gate cmd_token(adr_t *adr) 6977c478bd9Sstevel@tonic-gate { 6987c478bd9Sstevel@tonic-gate short cnt; 6997c478bd9Sstevel@tonic-gate short i; 7007c478bd9Sstevel@tonic-gate 7017c478bd9Sstevel@tonic-gate adrm_short(adr, &cnt, 1); 7027c478bd9Sstevel@tonic-gate 7037c478bd9Sstevel@tonic-gate for (i = 0; i < cnt; i++) 7047c478bd9Sstevel@tonic-gate skip_string(adr); 7057c478bd9Sstevel@tonic-gate 7067c478bd9Sstevel@tonic-gate adrm_short(adr, &cnt, 1); 7077c478bd9Sstevel@tonic-gate 7087c478bd9Sstevel@tonic-gate for (i = 0; i < cnt; i++) 7097c478bd9Sstevel@tonic-gate skip_string(adr); 7107c478bd9Sstevel@tonic-gate 7117c478bd9Sstevel@tonic-gate return (-1); 7127c478bd9Sstevel@tonic-gate } 7137c478bd9Sstevel@tonic-gate 7147c478bd9Sstevel@tonic-gate 7157c478bd9Sstevel@tonic-gate /* 7167c478bd9Sstevel@tonic-gate * Format of exit token: 7177c478bd9Sstevel@tonic-gate * attribute token id adr_char 7187c478bd9Sstevel@tonic-gate * return value adr_int32 7197c478bd9Sstevel@tonic-gate * errno adr_int32 7207c478bd9Sstevel@tonic-gate * 7217c478bd9Sstevel@tonic-gate */ 7227c478bd9Sstevel@tonic-gate int 7237c478bd9Sstevel@tonic-gate exit_token(adr_t *adr) 7247c478bd9Sstevel@tonic-gate { 7257c478bd9Sstevel@tonic-gate int32_t retval; 7267c478bd9Sstevel@tonic-gate int32_t errno; 7277c478bd9Sstevel@tonic-gate 7287c478bd9Sstevel@tonic-gate adrm_int32(adr, &retval, 1); 7297c478bd9Sstevel@tonic-gate adrm_int32(adr, &errno, 1); 7307c478bd9Sstevel@tonic-gate return (-1); 7317c478bd9Sstevel@tonic-gate } 7327c478bd9Sstevel@tonic-gate 7337c478bd9Sstevel@tonic-gate /* 7347c478bd9Sstevel@tonic-gate * Format of strings array token: 7357c478bd9Sstevel@tonic-gate * token id adr_char 7367c478bd9Sstevel@tonic-gate * count value adr_int32 7377c478bd9Sstevel@tonic-gate * strings null terminated strings 7387c478bd9Sstevel@tonic-gate */ 7397c478bd9Sstevel@tonic-gate static int 7407c478bd9Sstevel@tonic-gate strings_common_token(adr_t *adr) 7417c478bd9Sstevel@tonic-gate { 7427c478bd9Sstevel@tonic-gate int count, i; 7437c478bd9Sstevel@tonic-gate char c; 7447c478bd9Sstevel@tonic-gate 7457c478bd9Sstevel@tonic-gate adrm_int32(adr, (int32_t *)&count, 1); 7467c478bd9Sstevel@tonic-gate for (i = 1; i <= count; i++) { 7477c478bd9Sstevel@tonic-gate adrm_char(adr, &c, 1); 7487c478bd9Sstevel@tonic-gate while (c != (char)0) 7497c478bd9Sstevel@tonic-gate adrm_char(adr, &c, 1); 7507c478bd9Sstevel@tonic-gate } 7517c478bd9Sstevel@tonic-gate /* no dump option here, since we will have variable length fields */ 7527c478bd9Sstevel@tonic-gate return (-1); 7537c478bd9Sstevel@tonic-gate } 7547c478bd9Sstevel@tonic-gate 7557c478bd9Sstevel@tonic-gate int 7567c478bd9Sstevel@tonic-gate path_attr_token(adr_t *adr) 7577c478bd9Sstevel@tonic-gate { 7587c478bd9Sstevel@tonic-gate return (strings_common_token(adr)); 7597c478bd9Sstevel@tonic-gate } 7607c478bd9Sstevel@tonic-gate 7617c478bd9Sstevel@tonic-gate int 7627c478bd9Sstevel@tonic-gate exec_args_token(adr_t *adr) 7637c478bd9Sstevel@tonic-gate { 7647c478bd9Sstevel@tonic-gate return (strings_common_token(adr)); 7657c478bd9Sstevel@tonic-gate } 7667c478bd9Sstevel@tonic-gate 7677c478bd9Sstevel@tonic-gate int 7687c478bd9Sstevel@tonic-gate exec_env_token(adr_t *adr) 7697c478bd9Sstevel@tonic-gate { 7707c478bd9Sstevel@tonic-gate return (strings_common_token(adr)); 7717c478bd9Sstevel@tonic-gate } 7727c478bd9Sstevel@tonic-gate 7737c478bd9Sstevel@tonic-gate /* 7747c478bd9Sstevel@tonic-gate * Format of liaison token: 7757c478bd9Sstevel@tonic-gate */ 7767c478bd9Sstevel@tonic-gate int 7777c478bd9Sstevel@tonic-gate liaison_token(adr_t *adr) 7787c478bd9Sstevel@tonic-gate { 7797c478bd9Sstevel@tonic-gate int32_t li; 7807c478bd9Sstevel@tonic-gate 7817c478bd9Sstevel@tonic-gate adrm_int32(adr, &li, 1); 7827c478bd9Sstevel@tonic-gate return (-1); 7837c478bd9Sstevel@tonic-gate } 7847c478bd9Sstevel@tonic-gate 7857c478bd9Sstevel@tonic-gate 7867c478bd9Sstevel@tonic-gate /* 7877c478bd9Sstevel@tonic-gate * Format of path token: 7887c478bd9Sstevel@tonic-gate * path adr_string 7897c478bd9Sstevel@tonic-gate */ 7907c478bd9Sstevel@tonic-gate int 7917c478bd9Sstevel@tonic-gate path_token(adr_t *adr) 7927c478bd9Sstevel@tonic-gate { 7937c478bd9Sstevel@tonic-gate if ((flags & M_OBJECT) && (obj_flag == OBJ_PATH)) { 7947c478bd9Sstevel@tonic-gate char *path; 7957c478bd9Sstevel@tonic-gate 7967c478bd9Sstevel@tonic-gate get_string(adr, &path); 7977c478bd9Sstevel@tonic-gate if (path[0] != '/') 7987c478bd9Sstevel@tonic-gate /* 7997c478bd9Sstevel@tonic-gate * anchor the path. user apps may not do it. 8007c478bd9Sstevel@tonic-gate */ 8017c478bd9Sstevel@tonic-gate anchor_path(path); 8027c478bd9Sstevel@tonic-gate /* 8037c478bd9Sstevel@tonic-gate * match against the collapsed path. that is what user sees. 8047c478bd9Sstevel@tonic-gate */ 8057c478bd9Sstevel@tonic-gate if (re_exec2(collapse_path(path)) == 1) 8067c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 8077c478bd9Sstevel@tonic-gate free(path); 8087c478bd9Sstevel@tonic-gate } else { 8097c478bd9Sstevel@tonic-gate skip_string(adr); 8107c478bd9Sstevel@tonic-gate } 8117c478bd9Sstevel@tonic-gate return (-1); 8127c478bd9Sstevel@tonic-gate } 8137c478bd9Sstevel@tonic-gate 8147c478bd9Sstevel@tonic-gate 8157c478bd9Sstevel@tonic-gate /* 8167c478bd9Sstevel@tonic-gate * Format of System V IPC permission token: 8177c478bd9Sstevel@tonic-gate * System V IPC permission token id adr_char 8187c478bd9Sstevel@tonic-gate * uid adr_int32 8197c478bd9Sstevel@tonic-gate * gid adr_int32 8207c478bd9Sstevel@tonic-gate * cuid adr_int32 8217c478bd9Sstevel@tonic-gate * cgid adr_int32 8227c478bd9Sstevel@tonic-gate * mode adr_int32 8237c478bd9Sstevel@tonic-gate * seq adr_int32 8247c478bd9Sstevel@tonic-gate * key adr_int32 8257c478bd9Sstevel@tonic-gate */ 8267c478bd9Sstevel@tonic-gate int 8277c478bd9Sstevel@tonic-gate s5_IPC_perm_token(adr_t *adr) 8287c478bd9Sstevel@tonic-gate { 8297c478bd9Sstevel@tonic-gate int32_t uid, gid, cuid, cgid, mode, seq; 8307c478bd9Sstevel@tonic-gate int32_t key; 8317c478bd9Sstevel@tonic-gate 8327c478bd9Sstevel@tonic-gate adrm_int32(adr, &uid, 1); 8337c478bd9Sstevel@tonic-gate adrm_int32(adr, &gid, 1); 8347c478bd9Sstevel@tonic-gate adrm_int32(adr, &cuid, 1); 8357c478bd9Sstevel@tonic-gate adrm_int32(adr, &cgid, 1); 8367c478bd9Sstevel@tonic-gate adrm_int32(adr, &mode, 1); 8377c478bd9Sstevel@tonic-gate adrm_int32(adr, &seq, 1); 8387c478bd9Sstevel@tonic-gate adrm_int32(adr, &key, 1); 8397c478bd9Sstevel@tonic-gate 8407c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 8417c478bd9Sstevel@tonic-gate if (m_usere == uid) 8427c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 8437c478bd9Sstevel@tonic-gate } 8447c478bd9Sstevel@tonic-gate 8457c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 8467c478bd9Sstevel@tonic-gate if (m_usere == cuid) 8477c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 8487c478bd9Sstevel@tonic-gate } 8497c478bd9Sstevel@tonic-gate 8507c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPR)) { 8517c478bd9Sstevel@tonic-gate if (m_groupr == gid) 8527c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 8537c478bd9Sstevel@tonic-gate } 8547c478bd9Sstevel@tonic-gate 8557c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPR)) { 8567c478bd9Sstevel@tonic-gate if (m_groupr == cgid) 8577c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 8587c478bd9Sstevel@tonic-gate } 8597c478bd9Sstevel@tonic-gate 8607c478bd9Sstevel@tonic-gate if ((flags & M_OBJECT) && 8617c478bd9Sstevel@tonic-gate ((obj_owner == uid) || 8627c478bd9Sstevel@tonic-gate (obj_owner == cuid) || 8637c478bd9Sstevel@tonic-gate (obj_group == gid) || 8647c478bd9Sstevel@tonic-gate (obj_group == cgid))) { 8657c478bd9Sstevel@tonic-gate 8667c478bd9Sstevel@tonic-gate switch (obj_flag) { 8677c478bd9Sstevel@tonic-gate case OBJ_MSGGROUP: 8687c478bd9Sstevel@tonic-gate case OBJ_MSGOWNER: 8697c478bd9Sstevel@tonic-gate if (ipc_type_match(OBJ_MSG, ipc_type)) 8707c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 8717c478bd9Sstevel@tonic-gate break; 8727c478bd9Sstevel@tonic-gate case OBJ_SEMGROUP: 8737c478bd9Sstevel@tonic-gate case OBJ_SEMOWNER: 8747c478bd9Sstevel@tonic-gate if (ipc_type_match(OBJ_SEM, ipc_type)) 8757c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 8767c478bd9Sstevel@tonic-gate break; 8777c478bd9Sstevel@tonic-gate case OBJ_SHMGROUP: 8787c478bd9Sstevel@tonic-gate case OBJ_SHMOWNER: 8797c478bd9Sstevel@tonic-gate if (ipc_type_match(OBJ_SHM, ipc_type)) 8807c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 8817c478bd9Sstevel@tonic-gate break; 8827c478bd9Sstevel@tonic-gate } 8837c478bd9Sstevel@tonic-gate } 8847c478bd9Sstevel@tonic-gate return (-1); 8857c478bd9Sstevel@tonic-gate } 8867c478bd9Sstevel@tonic-gate 8877c478bd9Sstevel@tonic-gate 8887c478bd9Sstevel@tonic-gate /* 8897c478bd9Sstevel@tonic-gate * Format of process32 token: 8907c478bd9Sstevel@tonic-gate * process token id adr_char 8917c478bd9Sstevel@tonic-gate * auid adr_int32 8927c478bd9Sstevel@tonic-gate * euid adr_int32 8937c478bd9Sstevel@tonic-gate * egid adr_int32 8947c478bd9Sstevel@tonic-gate * ruid adr_int32 8957c478bd9Sstevel@tonic-gate * rgid adr_int32 8967c478bd9Sstevel@tonic-gate * pid adr_int32 8977c478bd9Sstevel@tonic-gate * sid adr_int32 8987c478bd9Sstevel@tonic-gate * termid adr_int32*2 8997c478bd9Sstevel@tonic-gate * 9007c478bd9Sstevel@tonic-gate */ 9017c478bd9Sstevel@tonic-gate int 9027c478bd9Sstevel@tonic-gate process32_token(adr_t *adr) 9037c478bd9Sstevel@tonic-gate { 9047c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 9057c478bd9Sstevel@tonic-gate int32_t sid; 9067c478bd9Sstevel@tonic-gate int32_t port, machine; 9077c478bd9Sstevel@tonic-gate 9087c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 9097c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 9107c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 9117c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 9127c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 9137c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 9147c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 9157c478bd9Sstevel@tonic-gate adrm_int32(adr, &port, 1); 9167c478bd9Sstevel@tonic-gate adrm_int32(adr, &machine, 1); 9177c478bd9Sstevel@tonic-gate 9187c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERA)) { 9197c478bd9Sstevel@tonic-gate if (m_usera == auid) 9207c478bd9Sstevel@tonic-gate checkflags |= M_USERA; 9217c478bd9Sstevel@tonic-gate } 9227c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 9237c478bd9Sstevel@tonic-gate if (m_usere == euid) 9247c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 9257c478bd9Sstevel@tonic-gate } 9267c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERR)) { 9277c478bd9Sstevel@tonic-gate if (m_userr == ruid) 9287c478bd9Sstevel@tonic-gate checkflags |= M_USERR; 9297c478bd9Sstevel@tonic-gate } 9307c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPR)) { 9317c478bd9Sstevel@tonic-gate if (m_groupr == rgid) 9327c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 9337c478bd9Sstevel@tonic-gate } 9347c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 9357c478bd9Sstevel@tonic-gate if (m_groupe == egid) 9367c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 9377c478bd9Sstevel@tonic-gate } 9387c478bd9Sstevel@tonic-gate 9397c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 9407c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_PROC) && 9417c478bd9Sstevel@tonic-gate (obj_id == pid)) { 9427c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 9437c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_PGROUP) && 9447c478bd9Sstevel@tonic-gate ((obj_group == egid) || 9457c478bd9Sstevel@tonic-gate (obj_group == rgid))) { 9467c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 9477c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_POWNER) && 9487c478bd9Sstevel@tonic-gate ((obj_owner == euid) || 9497c478bd9Sstevel@tonic-gate (obj_group == ruid))) { 9507c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 9517c478bd9Sstevel@tonic-gate } 9527c478bd9Sstevel@tonic-gate } 9537c478bd9Sstevel@tonic-gate return (-1); 9547c478bd9Sstevel@tonic-gate } 9557c478bd9Sstevel@tonic-gate 9567c478bd9Sstevel@tonic-gate /* 9577c478bd9Sstevel@tonic-gate * Format of process32 token: 9587c478bd9Sstevel@tonic-gate * process token id adr_char 9597c478bd9Sstevel@tonic-gate * auid adr_int32 9607c478bd9Sstevel@tonic-gate * euid adr_int32 9617c478bd9Sstevel@tonic-gate * egid adr_int32 9627c478bd9Sstevel@tonic-gate * ruid adr_int32 9637c478bd9Sstevel@tonic-gate * rgid adr_int32 9647c478bd9Sstevel@tonic-gate * pid adr_int32 9657c478bd9Sstevel@tonic-gate * sid adr_int32 9667c478bd9Sstevel@tonic-gate * termid adr_int32*6 9677c478bd9Sstevel@tonic-gate * 9687c478bd9Sstevel@tonic-gate */ 9697c478bd9Sstevel@tonic-gate int 9707c478bd9Sstevel@tonic-gate process32_ex_token(adr_t *adr) 9717c478bd9Sstevel@tonic-gate { 9727c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 9737c478bd9Sstevel@tonic-gate int32_t sid; 9747c478bd9Sstevel@tonic-gate int32_t port, type, addr[4]; 9757c478bd9Sstevel@tonic-gate 9767c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 9777c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 9787c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 9797c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 9807c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 9817c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 9827c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 9837c478bd9Sstevel@tonic-gate adrm_int32(adr, &port, 1); 9847c478bd9Sstevel@tonic-gate adrm_int32(adr, &type, 1); 9857c478bd9Sstevel@tonic-gate adrm_int32(adr, &addr[0], 4); 9867c478bd9Sstevel@tonic-gate 9877c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERA)) { 9887c478bd9Sstevel@tonic-gate if (m_usera == auid) 9897c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERA; 9907c478bd9Sstevel@tonic-gate } 9917c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 9927c478bd9Sstevel@tonic-gate if (m_usere == euid) 9937c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERE; 9947c478bd9Sstevel@tonic-gate } 9957c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERR)) { 9967c478bd9Sstevel@tonic-gate if (m_userr == ruid) 9977c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERR; 9987c478bd9Sstevel@tonic-gate } 9997c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPR)) { 10007c478bd9Sstevel@tonic-gate if (m_groupr == egid) 10017c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPR; 10027c478bd9Sstevel@tonic-gate } 10037c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 10047c478bd9Sstevel@tonic-gate if (m_groupe == egid) 10057c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPE; 10067c478bd9Sstevel@tonic-gate } 10077c478bd9Sstevel@tonic-gate 10087c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 10097c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_PROC) && 10107c478bd9Sstevel@tonic-gate (obj_id == pid)) { 10117c478bd9Sstevel@tonic-gate checkflags = checkflags | M_OBJECT; 10127c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_PGROUP) && 10137c478bd9Sstevel@tonic-gate ((obj_group == egid) || 10147c478bd9Sstevel@tonic-gate (obj_group == rgid))) { 10157c478bd9Sstevel@tonic-gate checkflags = checkflags | M_OBJECT; 10167c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_POWNER) && 10177c478bd9Sstevel@tonic-gate ((obj_owner == euid) || 10187c478bd9Sstevel@tonic-gate (obj_group == ruid))) { 10197c478bd9Sstevel@tonic-gate checkflags = checkflags | M_OBJECT; 10207c478bd9Sstevel@tonic-gate } 10217c478bd9Sstevel@tonic-gate } 10227c478bd9Sstevel@tonic-gate return (-1); 10237c478bd9Sstevel@tonic-gate } 10247c478bd9Sstevel@tonic-gate 10257c478bd9Sstevel@tonic-gate /* 10267c478bd9Sstevel@tonic-gate * Format of process64 token: 10277c478bd9Sstevel@tonic-gate * process token id adr_char 10287c478bd9Sstevel@tonic-gate * auid adr_int32 10297c478bd9Sstevel@tonic-gate * euid adr_int32 10307c478bd9Sstevel@tonic-gate * egid adr_int32 10317c478bd9Sstevel@tonic-gate * ruid adr_int32 10327c478bd9Sstevel@tonic-gate * rgid adr_int32 10337c478bd9Sstevel@tonic-gate * pid adr_int32 10347c478bd9Sstevel@tonic-gate * sid adr_int32 10357c478bd9Sstevel@tonic-gate * termid adr_int64+adr_int32 10367c478bd9Sstevel@tonic-gate * 10377c478bd9Sstevel@tonic-gate */ 10387c478bd9Sstevel@tonic-gate int 10397c478bd9Sstevel@tonic-gate process64_token(adr_t *adr) 10407c478bd9Sstevel@tonic-gate { 10417c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 10427c478bd9Sstevel@tonic-gate int32_t sid; 10437c478bd9Sstevel@tonic-gate int64_t port; 10447c478bd9Sstevel@tonic-gate int32_t machine; 10457c478bd9Sstevel@tonic-gate 10467c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 10477c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 10487c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 10497c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 10507c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 10517c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 10527c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 10537c478bd9Sstevel@tonic-gate adrm_int64(adr, &port, 1); 10547c478bd9Sstevel@tonic-gate adrm_int32(adr, &machine, 1); 10557c478bd9Sstevel@tonic-gate 10567c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERA)) { 10577c478bd9Sstevel@tonic-gate if (m_usera == auid) 10587c478bd9Sstevel@tonic-gate checkflags |= M_USERA; 10597c478bd9Sstevel@tonic-gate } 10607c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 10617c478bd9Sstevel@tonic-gate if (m_usere == euid) 10627c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 10637c478bd9Sstevel@tonic-gate } 10647c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERR)) { 10657c478bd9Sstevel@tonic-gate if (m_userr == ruid) 10667c478bd9Sstevel@tonic-gate checkflags |= M_USERR; 10677c478bd9Sstevel@tonic-gate } 10687c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPR)) { 10697c478bd9Sstevel@tonic-gate if (m_groupr == rgid) 10707c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 10717c478bd9Sstevel@tonic-gate } 10727c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 10737c478bd9Sstevel@tonic-gate if (m_groupe == egid) 10747c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 10757c478bd9Sstevel@tonic-gate } 10767c478bd9Sstevel@tonic-gate 10777c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 10787c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_PROC) && 10797c478bd9Sstevel@tonic-gate (obj_id == pid)) { 10807c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 10817c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_PGROUP) && 10827c478bd9Sstevel@tonic-gate ((obj_group == egid) || 10837c478bd9Sstevel@tonic-gate (obj_group == rgid))) { 10847c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 10857c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_POWNER) && 10867c478bd9Sstevel@tonic-gate ((obj_owner == euid) || 10877c478bd9Sstevel@tonic-gate (obj_group == ruid))) { 10887c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 10897c478bd9Sstevel@tonic-gate } 10907c478bd9Sstevel@tonic-gate } 10917c478bd9Sstevel@tonic-gate return (-1); 10927c478bd9Sstevel@tonic-gate } 10937c478bd9Sstevel@tonic-gate 10947c478bd9Sstevel@tonic-gate /* 10957c478bd9Sstevel@tonic-gate * Format of process64 token: 10967c478bd9Sstevel@tonic-gate * process token id adr_char 10977c478bd9Sstevel@tonic-gate * auid adr_int32 10987c478bd9Sstevel@tonic-gate * euid adr_int32 10997c478bd9Sstevel@tonic-gate * egid adr_int32 11007c478bd9Sstevel@tonic-gate * ruid adr_int32 11017c478bd9Sstevel@tonic-gate * rgid adr_int32 11027c478bd9Sstevel@tonic-gate * pid adr_int32 11037c478bd9Sstevel@tonic-gate * sid adr_int32 11047c478bd9Sstevel@tonic-gate * termid adr_int64+5*adr_int32 11057c478bd9Sstevel@tonic-gate * 11067c478bd9Sstevel@tonic-gate */ 11077c478bd9Sstevel@tonic-gate int 11087c478bd9Sstevel@tonic-gate process64_ex_token(adr_t *adr) 11097c478bd9Sstevel@tonic-gate { 11107c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 11117c478bd9Sstevel@tonic-gate int32_t sid; 11127c478bd9Sstevel@tonic-gate int64_t port; 11137c478bd9Sstevel@tonic-gate int32_t type, addr[4]; 11147c478bd9Sstevel@tonic-gate 11157c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 11167c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 11177c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 11187c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 11197c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 11207c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 11217c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 11227c478bd9Sstevel@tonic-gate adrm_int64(adr, &port, 1); 11237c478bd9Sstevel@tonic-gate adrm_int32(adr, &type, 1); 11247c478bd9Sstevel@tonic-gate adrm_int32(adr, &addr[0], 4); 11257c478bd9Sstevel@tonic-gate 11267c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERA)) { 11277c478bd9Sstevel@tonic-gate if (m_usera == auid) 11287c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERA; 11297c478bd9Sstevel@tonic-gate } 11307c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERE)) { 11317c478bd9Sstevel@tonic-gate if (m_usere == euid) 11327c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERE; 11337c478bd9Sstevel@tonic-gate } 11347c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_USERR)) { 11357c478bd9Sstevel@tonic-gate if (m_userr == ruid) 11367c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERR; 11377c478bd9Sstevel@tonic-gate } 11387c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPR)) { 11397c478bd9Sstevel@tonic-gate if (m_groupr == egid) 11407c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPR; 11417c478bd9Sstevel@tonic-gate } 11427c478bd9Sstevel@tonic-gate if (!new_mode && (flags & M_GROUPE)) { 11437c478bd9Sstevel@tonic-gate if (m_groupe == egid) 11447c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPE; 11457c478bd9Sstevel@tonic-gate } 11467c478bd9Sstevel@tonic-gate 11477c478bd9Sstevel@tonic-gate if (flags & M_OBJECT) { 11487c478bd9Sstevel@tonic-gate if ((obj_flag & OBJ_PROC) && 11497c478bd9Sstevel@tonic-gate (obj_id == pid)) { 11507c478bd9Sstevel@tonic-gate checkflags = checkflags | M_OBJECT; 11517c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_PGROUP) && 11527c478bd9Sstevel@tonic-gate ((obj_group == egid) || 11537c478bd9Sstevel@tonic-gate (obj_group == rgid))) { 11547c478bd9Sstevel@tonic-gate checkflags = checkflags | M_OBJECT; 11557c478bd9Sstevel@tonic-gate } else if ((obj_flag & OBJ_POWNER) && 11567c478bd9Sstevel@tonic-gate ((obj_owner == euid) || 11577c478bd9Sstevel@tonic-gate (obj_group == ruid))) { 11587c478bd9Sstevel@tonic-gate checkflags = checkflags | M_OBJECT; 11597c478bd9Sstevel@tonic-gate } 11607c478bd9Sstevel@tonic-gate } 11617c478bd9Sstevel@tonic-gate return (-1); 11627c478bd9Sstevel@tonic-gate } 11637c478bd9Sstevel@tonic-gate 11647c478bd9Sstevel@tonic-gate /* 11657c478bd9Sstevel@tonic-gate * Format of System V IPC token: 11667c478bd9Sstevel@tonic-gate * System V IPC token id adr_char 11677c478bd9Sstevel@tonic-gate * object id adr_int32 11687c478bd9Sstevel@tonic-gate * 11697c478bd9Sstevel@tonic-gate */ 11707c478bd9Sstevel@tonic-gate int 11717c478bd9Sstevel@tonic-gate s5_IPC_token(adr_t *adr) 11727c478bd9Sstevel@tonic-gate { 11737c478bd9Sstevel@tonic-gate int32_t ipc_id; 11747c478bd9Sstevel@tonic-gate 11757c478bd9Sstevel@tonic-gate adrm_char(adr, &ipc_type, 1); /* Global */ 11767c478bd9Sstevel@tonic-gate adrm_int32(adr, &ipc_id, 1); 11777c478bd9Sstevel@tonic-gate 11787c478bd9Sstevel@tonic-gate if ((flags & M_OBJECT) && 11797c478bd9Sstevel@tonic-gate ipc_type_match(obj_flag, ipc_type) && 11807c478bd9Sstevel@tonic-gate (obj_id == ipc_id)) 11817c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 11827c478bd9Sstevel@tonic-gate 11837c478bd9Sstevel@tonic-gate return (-1); 11847c478bd9Sstevel@tonic-gate } 11857c478bd9Sstevel@tonic-gate 11867c478bd9Sstevel@tonic-gate 11877c478bd9Sstevel@tonic-gate /* 11887c478bd9Sstevel@tonic-gate * Format of socket token: 11897c478bd9Sstevel@tonic-gate * socket_type adrm_short 11907c478bd9Sstevel@tonic-gate * remote_port adrm_short 11917c478bd9Sstevel@tonic-gate * remote_inaddr adrm_int32 11927c478bd9Sstevel@tonic-gate * 11937c478bd9Sstevel@tonic-gate */ 11947c478bd9Sstevel@tonic-gate int 11957c478bd9Sstevel@tonic-gate socket_token(adr_t *adr) 11967c478bd9Sstevel@tonic-gate { 11977c478bd9Sstevel@tonic-gate short socket_type; 11987c478bd9Sstevel@tonic-gate short remote_port; 11997c478bd9Sstevel@tonic-gate int32_t remote_inaddr; 12007c478bd9Sstevel@tonic-gate 12017c478bd9Sstevel@tonic-gate adrm_short(adr, &socket_type, 1); 12027c478bd9Sstevel@tonic-gate adrm_short(adr, &remote_port, 1); 12037c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)&remote_inaddr, 4); 12047c478bd9Sstevel@tonic-gate 12057c478bd9Sstevel@tonic-gate if ((flags & M_OBJECT) && (obj_flag == OBJ_SOCK)) { 12067c478bd9Sstevel@tonic-gate if (socket_flag == SOCKFLG_MACHINE) { 12077c478bd9Sstevel@tonic-gate if (remote_inaddr == obj_id) 12087c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 12097c478bd9Sstevel@tonic-gate } else if (socket_flag == SOCKFLG_PORT) { 12107c478bd9Sstevel@tonic-gate if (remote_port == obj_id) 12117c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 12127c478bd9Sstevel@tonic-gate } 12137c478bd9Sstevel@tonic-gate } 12147c478bd9Sstevel@tonic-gate return (-1); 12157c478bd9Sstevel@tonic-gate } 12167c478bd9Sstevel@tonic-gate 12177c478bd9Sstevel@tonic-gate 12187c478bd9Sstevel@tonic-gate /* 12197c478bd9Sstevel@tonic-gate * Format of socket token: 12207c478bd9Sstevel@tonic-gate * socket_type adrm_short 12217c478bd9Sstevel@tonic-gate * remote_port adrm_short 12227c478bd9Sstevel@tonic-gate * remote_inaddr adrm_int32 12237c478bd9Sstevel@tonic-gate * 12247c478bd9Sstevel@tonic-gate */ 12257c478bd9Sstevel@tonic-gate int 12267c478bd9Sstevel@tonic-gate socket_ex_token(adr_t *adr) 12277c478bd9Sstevel@tonic-gate { 12287c478bd9Sstevel@tonic-gate short socket_domain; 12297c478bd9Sstevel@tonic-gate short socket_type; 12307c478bd9Sstevel@tonic-gate short ip_size; 12317c478bd9Sstevel@tonic-gate short local_port; 12327c478bd9Sstevel@tonic-gate int32_t local_inaddr[4]; 12337c478bd9Sstevel@tonic-gate short remote_port; 12347c478bd9Sstevel@tonic-gate int32_t remote_inaddr[4]; 12357c478bd9Sstevel@tonic-gate 12367c478bd9Sstevel@tonic-gate adrm_short(adr, &socket_domain, 1); 12377c478bd9Sstevel@tonic-gate adrm_short(adr, &socket_type, 1); 12387c478bd9Sstevel@tonic-gate adrm_short(adr, &ip_size, 1); 12397c478bd9Sstevel@tonic-gate 12407c478bd9Sstevel@tonic-gate /* validate ip size */ 12417c478bd9Sstevel@tonic-gate if ((ip_size != AU_IPv6) && (ip_size != AU_IPv4)) 12427c478bd9Sstevel@tonic-gate return (0); 12437c478bd9Sstevel@tonic-gate 12447c478bd9Sstevel@tonic-gate adrm_short(adr, &local_port, 1); 12457c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)local_inaddr, ip_size); 12467c478bd9Sstevel@tonic-gate 12477c478bd9Sstevel@tonic-gate adrm_short(adr, &remote_port, 1); 12487c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)remote_inaddr, ip_size); 12497c478bd9Sstevel@tonic-gate 12507c478bd9Sstevel@tonic-gate /* if IP type mis-match, then nothing to do */ 12517c478bd9Sstevel@tonic-gate if (ip_size != ip_type) 12527c478bd9Sstevel@tonic-gate return (-1); 12537c478bd9Sstevel@tonic-gate 12547c478bd9Sstevel@tonic-gate if ((flags & M_OBJECT) && (obj_flag == OBJ_SOCK)) { 12557c478bd9Sstevel@tonic-gate if (socket_flag == SOCKFLG_MACHINE) { 12567c478bd9Sstevel@tonic-gate if (ip_type == AU_IPv4) { 12577c478bd9Sstevel@tonic-gate if ((local_inaddr[0] == obj_id) || 12587c478bd9Sstevel@tonic-gate (remote_inaddr[0] == obj_id)) 12597c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 12607c478bd9Sstevel@tonic-gate } else { 12617c478bd9Sstevel@tonic-gate if (((local_inaddr[0] == ip_ipv6[0]) && 12627c478bd9Sstevel@tonic-gate (local_inaddr[1] == ip_ipv6[1]) && 12637c478bd9Sstevel@tonic-gate (local_inaddr[2] == ip_ipv6[2]) && 12647c478bd9Sstevel@tonic-gate (local_inaddr[3] == ip_ipv6[3])) || 12657c478bd9Sstevel@tonic-gate ((remote_inaddr[0] == ip_ipv6[0]) && 12667c478bd9Sstevel@tonic-gate (remote_inaddr[1] == ip_ipv6[1]) && 12677c478bd9Sstevel@tonic-gate (remote_inaddr[2] == ip_ipv6[2]) && 12687c478bd9Sstevel@tonic-gate (remote_inaddr[3] == ip_ipv6[3]))) 12697c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 12707c478bd9Sstevel@tonic-gate } 12717c478bd9Sstevel@tonic-gate } else if (socket_flag == SOCKFLG_PORT) { 12727c478bd9Sstevel@tonic-gate if ((local_port == obj_id) || (remote_port == obj_id)) 12737c478bd9Sstevel@tonic-gate checkflags |= M_OBJECT; 12747c478bd9Sstevel@tonic-gate } 12757c478bd9Sstevel@tonic-gate } 12767c478bd9Sstevel@tonic-gate return (-1); 12777c478bd9Sstevel@tonic-gate } 12787c478bd9Sstevel@tonic-gate 12797c478bd9Sstevel@tonic-gate 12807c478bd9Sstevel@tonic-gate /* 12817c478bd9Sstevel@tonic-gate * Format of subject32 token: 12827c478bd9Sstevel@tonic-gate * subject token id adr_char 12837c478bd9Sstevel@tonic-gate * auid adr_int32 12847c478bd9Sstevel@tonic-gate * euid adr_int32 12857c478bd9Sstevel@tonic-gate * egid adr_int32 12867c478bd9Sstevel@tonic-gate * ruid adr_int32 12877c478bd9Sstevel@tonic-gate * rgid adr_int32 12887c478bd9Sstevel@tonic-gate * pid adr_int32 12897c478bd9Sstevel@tonic-gate * sid adr_int32 12907c478bd9Sstevel@tonic-gate * termid adr_int32*2 12917c478bd9Sstevel@tonic-gate * 12927c478bd9Sstevel@tonic-gate */ 12937c478bd9Sstevel@tonic-gate int 12947c478bd9Sstevel@tonic-gate subject32_token(adr_t *adr) 12957c478bd9Sstevel@tonic-gate { 12967c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 12977c478bd9Sstevel@tonic-gate int32_t sid; 12987c478bd9Sstevel@tonic-gate int32_t port, machine; 12997c478bd9Sstevel@tonic-gate 13007c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 13017c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 13027c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 13037c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 13047c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 13057c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 13067c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 13077c478bd9Sstevel@tonic-gate adrm_int32(adr, &port, 1); 13087c478bd9Sstevel@tonic-gate adrm_int32(adr, &machine, 1); 13097c478bd9Sstevel@tonic-gate 13107c478bd9Sstevel@tonic-gate if (flags & M_SUBJECT) { 13117c478bd9Sstevel@tonic-gate if (subj_id == pid) 13127c478bd9Sstevel@tonic-gate checkflags |= M_SUBJECT; 13137c478bd9Sstevel@tonic-gate } 13147c478bd9Sstevel@tonic-gate if (flags & M_USERA) { 13157c478bd9Sstevel@tonic-gate if (m_usera == auid) 13167c478bd9Sstevel@tonic-gate checkflags |= M_USERA; 13177c478bd9Sstevel@tonic-gate } 13187c478bd9Sstevel@tonic-gate if (flags & M_USERE) { 13197c478bd9Sstevel@tonic-gate if (m_usere == euid) 13207c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 13217c478bd9Sstevel@tonic-gate } 13227c478bd9Sstevel@tonic-gate if (flags & M_USERR) { 13237c478bd9Sstevel@tonic-gate if (m_userr == ruid) 13247c478bd9Sstevel@tonic-gate checkflags |= M_USERR; 13257c478bd9Sstevel@tonic-gate } 13267c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 13277c478bd9Sstevel@tonic-gate if (m_groupr == rgid) 13287c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 13297c478bd9Sstevel@tonic-gate } 13307c478bd9Sstevel@tonic-gate if (flags & M_GROUPE) { 13317c478bd9Sstevel@tonic-gate if (m_groupe == egid) 13327c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 13337c478bd9Sstevel@tonic-gate } 1334924c9144Sgww if (flags & M_SID) { 1335924c9144Sgww if (m_sid == sid) 1336924c9144Sgww checkflags |= M_SID; 1337924c9144Sgww } 13387c478bd9Sstevel@tonic-gate return (-1); 13397c478bd9Sstevel@tonic-gate } 13407c478bd9Sstevel@tonic-gate 13417c478bd9Sstevel@tonic-gate /* 13427c478bd9Sstevel@tonic-gate * Format of subject32_ex token: 13437c478bd9Sstevel@tonic-gate * subject token id adr_char 13447c478bd9Sstevel@tonic-gate * auid adr_int32 13457c478bd9Sstevel@tonic-gate * euid adr_int32 13467c478bd9Sstevel@tonic-gate * egid adr_int32 13477c478bd9Sstevel@tonic-gate * ruid adr_int32 13487c478bd9Sstevel@tonic-gate * rgid adr_int32 13497c478bd9Sstevel@tonic-gate * pid adr_int32 13507c478bd9Sstevel@tonic-gate * sid adr_int32 13517c478bd9Sstevel@tonic-gate * termid_addr adr_int32*6 13527c478bd9Sstevel@tonic-gate * 13537c478bd9Sstevel@tonic-gate */ 13547c478bd9Sstevel@tonic-gate int 13557c478bd9Sstevel@tonic-gate subject32_ex_token(adr_t *adr) 13567c478bd9Sstevel@tonic-gate { 13577c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 13587c478bd9Sstevel@tonic-gate int32_t sid; 13597c478bd9Sstevel@tonic-gate int32_t port, type, addr[4]; 13607c478bd9Sstevel@tonic-gate 13617c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 13627c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 13637c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 13647c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 13657c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 13667c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 13677c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 13687c478bd9Sstevel@tonic-gate adrm_int32(adr, &port, 1); 13697c478bd9Sstevel@tonic-gate adrm_int32(adr, &type, 1); 13707c478bd9Sstevel@tonic-gate adrm_int32(adr, &addr[0], 4); 13717c478bd9Sstevel@tonic-gate 13727c478bd9Sstevel@tonic-gate if (flags & M_SUBJECT) { 13737c478bd9Sstevel@tonic-gate if (subj_id == pid) 13747c478bd9Sstevel@tonic-gate checkflags = checkflags | M_SUBJECT; 13757c478bd9Sstevel@tonic-gate } 13767c478bd9Sstevel@tonic-gate if (flags & M_USERA) { 13777c478bd9Sstevel@tonic-gate if (m_usera == auid) 13787c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERA; 13797c478bd9Sstevel@tonic-gate } 13807c478bd9Sstevel@tonic-gate if (flags & M_USERE) { 13817c478bd9Sstevel@tonic-gate if (m_usere == euid) 13827c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERE; 13837c478bd9Sstevel@tonic-gate } 13847c478bd9Sstevel@tonic-gate if (flags & M_USERR) { 13857c478bd9Sstevel@tonic-gate if (m_userr == ruid) 13867c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERR; 13877c478bd9Sstevel@tonic-gate } 13887c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 13897c478bd9Sstevel@tonic-gate if (m_groupr == egid) 13907c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPR; 13917c478bd9Sstevel@tonic-gate } 13927c478bd9Sstevel@tonic-gate if (flags & M_GROUPE) { 13937c478bd9Sstevel@tonic-gate if (m_groupe == egid) 13947c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPE; 13957c478bd9Sstevel@tonic-gate } 1396924c9144Sgww if (flags & M_SID) { 1397924c9144Sgww if (m_sid == sid) 1398924c9144Sgww checkflags = checkflags | M_SID; 1399924c9144Sgww } 14007c478bd9Sstevel@tonic-gate return (-1); 14017c478bd9Sstevel@tonic-gate } 14027c478bd9Sstevel@tonic-gate 14037c478bd9Sstevel@tonic-gate /* 14047c478bd9Sstevel@tonic-gate * Format of subject64 token: 14057c478bd9Sstevel@tonic-gate * subject token id adr_char 14067c478bd9Sstevel@tonic-gate * auid adr_int32 14077c478bd9Sstevel@tonic-gate * euid adr_int32 14087c478bd9Sstevel@tonic-gate * egid adr_int32 14097c478bd9Sstevel@tonic-gate * ruid adr_int32 14107c478bd9Sstevel@tonic-gate * rgid adr_int32 14117c478bd9Sstevel@tonic-gate * pid adr_int32 14127c478bd9Sstevel@tonic-gate * sid adr_int32 14137c478bd9Sstevel@tonic-gate * termid adr_int64+adr_int32 14147c478bd9Sstevel@tonic-gate * 14157c478bd9Sstevel@tonic-gate */ 14167c478bd9Sstevel@tonic-gate int 14177c478bd9Sstevel@tonic-gate subject64_token(adr_t *adr) 14187c478bd9Sstevel@tonic-gate { 14197c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 14207c478bd9Sstevel@tonic-gate int32_t sid; 14217c478bd9Sstevel@tonic-gate int64_t port; 14227c478bd9Sstevel@tonic-gate int32_t machine; 14237c478bd9Sstevel@tonic-gate 14247c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 14257c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 14267c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 14277c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 14287c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 14297c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 14307c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 14317c478bd9Sstevel@tonic-gate adrm_int64(adr, &port, 1); 14327c478bd9Sstevel@tonic-gate adrm_int32(adr, &machine, 1); 14337c478bd9Sstevel@tonic-gate 14347c478bd9Sstevel@tonic-gate if (flags & M_SUBJECT) { 14357c478bd9Sstevel@tonic-gate if (subj_id == pid) 14367c478bd9Sstevel@tonic-gate checkflags |= M_SUBJECT; 14377c478bd9Sstevel@tonic-gate } 14387c478bd9Sstevel@tonic-gate if (flags & M_USERA) { 14397c478bd9Sstevel@tonic-gate if (m_usera == auid) 14407c478bd9Sstevel@tonic-gate checkflags |= M_USERA; 14417c478bd9Sstevel@tonic-gate } 14427c478bd9Sstevel@tonic-gate if (flags & M_USERE) { 14437c478bd9Sstevel@tonic-gate if (m_usere == euid) 14447c478bd9Sstevel@tonic-gate checkflags |= M_USERE; 14457c478bd9Sstevel@tonic-gate } 14467c478bd9Sstevel@tonic-gate if (flags & M_USERR) { 14477c478bd9Sstevel@tonic-gate if (m_userr == ruid) 14487c478bd9Sstevel@tonic-gate checkflags |= M_USERR; 14497c478bd9Sstevel@tonic-gate } 14507c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 14517c478bd9Sstevel@tonic-gate if (m_groupr == rgid) 14527c478bd9Sstevel@tonic-gate checkflags |= M_GROUPR; 14537c478bd9Sstevel@tonic-gate } 14547c478bd9Sstevel@tonic-gate if (flags & M_GROUPE) { 14557c478bd9Sstevel@tonic-gate if (m_groupe == egid) 14567c478bd9Sstevel@tonic-gate checkflags |= M_GROUPE; 14577c478bd9Sstevel@tonic-gate } 1458924c9144Sgww if (flags & M_SID) { 1459924c9144Sgww if (m_sid == sid) 1460924c9144Sgww checkflags |= M_SID; 1461924c9144Sgww } 14627c478bd9Sstevel@tonic-gate return (-1); 14637c478bd9Sstevel@tonic-gate } 14647c478bd9Sstevel@tonic-gate 14657c478bd9Sstevel@tonic-gate /* 14667c478bd9Sstevel@tonic-gate * Format of subject64 token: 14677c478bd9Sstevel@tonic-gate * subject token id adr_char 14687c478bd9Sstevel@tonic-gate * auid adr_int32 14697c478bd9Sstevel@tonic-gate * euid adr_int32 14707c478bd9Sstevel@tonic-gate * egid adr_int32 14717c478bd9Sstevel@tonic-gate * ruid adr_int32 14727c478bd9Sstevel@tonic-gate * rgid adr_int32 14737c478bd9Sstevel@tonic-gate * pid adr_int32 14747c478bd9Sstevel@tonic-gate * sid adr_int32 14757c478bd9Sstevel@tonic-gate * termid adr_int64+5*adr_int32 14767c478bd9Sstevel@tonic-gate * 14777c478bd9Sstevel@tonic-gate */ 14787c478bd9Sstevel@tonic-gate int 14797c478bd9Sstevel@tonic-gate subject64_ex_token(adr_t *adr) 14807c478bd9Sstevel@tonic-gate { 14817c478bd9Sstevel@tonic-gate int32_t auid, euid, egid, ruid, rgid, pid; 14827c478bd9Sstevel@tonic-gate int32_t sid; 14837c478bd9Sstevel@tonic-gate int64_t port; 14847c478bd9Sstevel@tonic-gate int32_t type, addr[4]; 14857c478bd9Sstevel@tonic-gate 14867c478bd9Sstevel@tonic-gate adrm_int32(adr, &auid, 1); 14877c478bd9Sstevel@tonic-gate adrm_int32(adr, &euid, 1); 14887c478bd9Sstevel@tonic-gate adrm_int32(adr, &egid, 1); 14897c478bd9Sstevel@tonic-gate adrm_int32(adr, &ruid, 1); 14907c478bd9Sstevel@tonic-gate adrm_int32(adr, &rgid, 1); 14917c478bd9Sstevel@tonic-gate adrm_int32(adr, &pid, 1); 14927c478bd9Sstevel@tonic-gate adrm_int32(adr, &sid, 1); 14937c478bd9Sstevel@tonic-gate adrm_int64(adr, &port, 1); 14947c478bd9Sstevel@tonic-gate adrm_int32(adr, &type, 1); 14957c478bd9Sstevel@tonic-gate adrm_int32(adr, &addr[0], 4); 14967c478bd9Sstevel@tonic-gate 14977c478bd9Sstevel@tonic-gate if (flags & M_SUBJECT) { 14987c478bd9Sstevel@tonic-gate if (subj_id == pid) 14997c478bd9Sstevel@tonic-gate checkflags = checkflags | M_SUBJECT; 15007c478bd9Sstevel@tonic-gate } 15017c478bd9Sstevel@tonic-gate if (flags & M_USERA) { 15027c478bd9Sstevel@tonic-gate if (m_usera == auid) 15037c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERA; 15047c478bd9Sstevel@tonic-gate } 15057c478bd9Sstevel@tonic-gate if (flags & M_USERE) { 15067c478bd9Sstevel@tonic-gate if (m_usere == euid) 15077c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERE; 15087c478bd9Sstevel@tonic-gate } 15097c478bd9Sstevel@tonic-gate if (flags & M_USERR) { 15107c478bd9Sstevel@tonic-gate if (m_userr == ruid) 15117c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERR; 15127c478bd9Sstevel@tonic-gate } 15137c478bd9Sstevel@tonic-gate if (flags & M_GROUPR) { 15147c478bd9Sstevel@tonic-gate if (m_groupr == egid) 15157c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPR; 15167c478bd9Sstevel@tonic-gate } 15177c478bd9Sstevel@tonic-gate if (flags & M_GROUPE) { 15187c478bd9Sstevel@tonic-gate if (m_groupe == egid) 15197c478bd9Sstevel@tonic-gate checkflags = checkflags | M_GROUPE; 15207c478bd9Sstevel@tonic-gate } 1521924c9144Sgww if (flags & M_SID) { 1522924c9144Sgww if (m_sid == sid) 1523924c9144Sgww checkflags = checkflags | M_SID; 1524924c9144Sgww } 15257c478bd9Sstevel@tonic-gate return (-1); 15267c478bd9Sstevel@tonic-gate } 15277c478bd9Sstevel@tonic-gate 15287c478bd9Sstevel@tonic-gate /* 15297c478bd9Sstevel@tonic-gate * ----------------------------------------------------------------------- 15307c478bd9Sstevel@tonic-gate * tid_token(): Process tid token and display contents 15317c478bd9Sstevel@tonic-gate * 15327c478bd9Sstevel@tonic-gate * Format of tid token: 15337c478bd9Sstevel@tonic-gate * tid token id adr_char 15347c478bd9Sstevel@tonic-gate * address type adr_char 15357c478bd9Sstevel@tonic-gate * For address type of AU_IPADR... 15367c478bd9Sstevel@tonic-gate * remote port adr_short 15377c478bd9Sstevel@tonic-gate * local port adr_short 15387c478bd9Sstevel@tonic-gate * IP type adr_int32 15397c478bd9Sstevel@tonic-gate * IP addr adr_int32 if IPv4 15407c478bd9Sstevel@tonic-gate * IP addr 4 x adr_int32 if IPv6 15417c478bd9Sstevel@tonic-gate * address types other than AU_IPADR are not yet defined 15427c478bd9Sstevel@tonic-gate * ----------------------------------------------------------------------- 15437c478bd9Sstevel@tonic-gate */ 15447c478bd9Sstevel@tonic-gate int 15457c478bd9Sstevel@tonic-gate tid_token(adr_t *adr) 15467c478bd9Sstevel@tonic-gate { 15477c478bd9Sstevel@tonic-gate int32_t address[4]; 15487c478bd9Sstevel@tonic-gate int32_t ip_type; 15497c478bd9Sstevel@tonic-gate char tid_type; 15507c478bd9Sstevel@tonic-gate short rport; 15517c478bd9Sstevel@tonic-gate short lport; 15527c478bd9Sstevel@tonic-gate 15537c478bd9Sstevel@tonic-gate adrm_char(adr, &tid_type, 1); 15547c478bd9Sstevel@tonic-gate switch (tid_type) { 15557c478bd9Sstevel@tonic-gate case AU_IPADR: 15567c478bd9Sstevel@tonic-gate adrm_short(adr, &rport, 1); 15577c478bd9Sstevel@tonic-gate adrm_short(adr, &lport, 1); 15587c478bd9Sstevel@tonic-gate adrm_int32(adr, &ip_type, 1); 15597c478bd9Sstevel@tonic-gate adrm_char(adr, (char *)&address, ip_type); 15607c478bd9Sstevel@tonic-gate break; 15617c478bd9Sstevel@tonic-gate default: 15627c478bd9Sstevel@tonic-gate return (0); 15637c478bd9Sstevel@tonic-gate } 15647c478bd9Sstevel@tonic-gate return (-1); 15657c478bd9Sstevel@tonic-gate } 15667c478bd9Sstevel@tonic-gate 15677c478bd9Sstevel@tonic-gate /* 15687c478bd9Sstevel@tonic-gate * ----------------------------------------------------------------------- 15697c478bd9Sstevel@tonic-gate * zonename_token(): Process zonename token and display contents 15707c478bd9Sstevel@tonic-gate * 15717c478bd9Sstevel@tonic-gate * Format of zonename token: 15727c478bd9Sstevel@tonic-gate * zonename token id adr_char 15737c478bd9Sstevel@tonic-gate * zone name adr_string 15747c478bd9Sstevel@tonic-gate * ----------------------------------------------------------------------- 15757c478bd9Sstevel@tonic-gate */ 15767c478bd9Sstevel@tonic-gate int 15777c478bd9Sstevel@tonic-gate zonename_token(adr_t *adr) 15787c478bd9Sstevel@tonic-gate { 15797c478bd9Sstevel@tonic-gate char *name; 15807c478bd9Sstevel@tonic-gate 15817c478bd9Sstevel@tonic-gate if (flags & M_ZONENAME) { 15827c478bd9Sstevel@tonic-gate get_string(adr, &name); 15837c478bd9Sstevel@tonic-gate if (strncmp(zonename, name, ZONENAME_MAX) == 0) 15847c478bd9Sstevel@tonic-gate checkflags |= M_ZONENAME; 15857c478bd9Sstevel@tonic-gate free(name); 15867c478bd9Sstevel@tonic-gate } else { 15877c478bd9Sstevel@tonic-gate skip_string(adr); 15887c478bd9Sstevel@tonic-gate } 15897c478bd9Sstevel@tonic-gate return (-1); 15907c478bd9Sstevel@tonic-gate } 15917c478bd9Sstevel@tonic-gate 1592103b2b15Sgww /* 1593103b2b15Sgww * fmri_token(): 1594103b2b15Sgww * 1595103b2b15Sgww * Format of fmri token: 1596103b2b15Sgww * fmri adr_string 1597103b2b15Sgww */ 1598103b2b15Sgww int 1599103b2b15Sgww fmri_token(adr_t *adr) 1600103b2b15Sgww { 1601103b2b15Sgww if ((flags & M_OBJECT) && (obj_flag == OBJ_FMRI)) { 1602103b2b15Sgww char *fmri_name; 1603103b2b15Sgww 1604103b2b15Sgww get_string(adr, &fmri_name); 1605103b2b15Sgww 1606103b2b15Sgww /* match token against service instance */ 1607103b2b15Sgww if (scf_cmp_pattern(fmri_name, &fmri) == 1) { 1608103b2b15Sgww checkflags |= M_OBJECT; 1609103b2b15Sgww } 1610103b2b15Sgww free(fmri_name); 1611103b2b15Sgww } else { 1612103b2b15Sgww skip_string(adr); 1613103b2b15Sgww } 1614103b2b15Sgww return (-1); 1615103b2b15Sgww } 1616103b2b15Sgww 16177c478bd9Sstevel@tonic-gate /* 16187c478bd9Sstevel@tonic-gate * Format of xatom token: 16197c478bd9Sstevel@tonic-gate */ 16207c478bd9Sstevel@tonic-gate int 16217c478bd9Sstevel@tonic-gate xatom_token(adr_t *adr) 16227c478bd9Sstevel@tonic-gate { 16237c478bd9Sstevel@tonic-gate skip_string(adr); 16247c478bd9Sstevel@tonic-gate 16257c478bd9Sstevel@tonic-gate return (-1); 16267c478bd9Sstevel@tonic-gate } 16277c478bd9Sstevel@tonic-gate 16287c478bd9Sstevel@tonic-gate /* 16297c478bd9Sstevel@tonic-gate * Format of xselect token: 16307c478bd9Sstevel@tonic-gate */ 16317c478bd9Sstevel@tonic-gate int 16327c478bd9Sstevel@tonic-gate xselect_token(adr_t *adr) 16337c478bd9Sstevel@tonic-gate { 16347c478bd9Sstevel@tonic-gate skip_string(adr); 16357c478bd9Sstevel@tonic-gate skip_string(adr); 16367c478bd9Sstevel@tonic-gate skip_string(adr); 16377c478bd9Sstevel@tonic-gate 16387c478bd9Sstevel@tonic-gate return (-1); 16397c478bd9Sstevel@tonic-gate } 16407c478bd9Sstevel@tonic-gate 16417c478bd9Sstevel@tonic-gate /* 16427c478bd9Sstevel@tonic-gate * anchor a path name with a slash 16437c478bd9Sstevel@tonic-gate * assume we have enough space 16447c478bd9Sstevel@tonic-gate */ 16457c478bd9Sstevel@tonic-gate void 16467c478bd9Sstevel@tonic-gate anchor_path(char *path) 16477c478bd9Sstevel@tonic-gate { 16487c478bd9Sstevel@tonic-gate (void) memmove((void *)(path + 1), (void *)path, strlen(path) + 1); 16497c478bd9Sstevel@tonic-gate *path = '/'; 16507c478bd9Sstevel@tonic-gate } 16517c478bd9Sstevel@tonic-gate 16527c478bd9Sstevel@tonic-gate 16537c478bd9Sstevel@tonic-gate /* 16547c478bd9Sstevel@tonic-gate * copy path to collapsed path. 16557c478bd9Sstevel@tonic-gate * collapsed path does not contain: 16567c478bd9Sstevel@tonic-gate * successive slashes 16577c478bd9Sstevel@tonic-gate * instances of dot-slash 16587c478bd9Sstevel@tonic-gate * instances of dot-dot-slash 16597c478bd9Sstevel@tonic-gate * passed path must be anchored with a '/' 16607c478bd9Sstevel@tonic-gate */ 16617c478bd9Sstevel@tonic-gate char * 16627c478bd9Sstevel@tonic-gate collapse_path(char *s) 16637c478bd9Sstevel@tonic-gate { 16647c478bd9Sstevel@tonic-gate int id; /* index of where we are in destination string */ 16657c478bd9Sstevel@tonic-gate int is; /* index of where we are in source string */ 16667c478bd9Sstevel@tonic-gate int slashseen; /* have we seen a slash */ 16677c478bd9Sstevel@tonic-gate int ls; /* length of source string */ 16687c478bd9Sstevel@tonic-gate 16697c478bd9Sstevel@tonic-gate ls = strlen(s) + 1; 16707c478bd9Sstevel@tonic-gate 16717c478bd9Sstevel@tonic-gate slashseen = 0; 16727c478bd9Sstevel@tonic-gate for (is = 0, id = 0; is < ls; is++) { 16737c478bd9Sstevel@tonic-gate /* thats all folks, we've reached the end of input */ 16747c478bd9Sstevel@tonic-gate if (s[is] == '\0') { 16757c478bd9Sstevel@tonic-gate if (id > 1 && s[id-1] == '/') { 16767c478bd9Sstevel@tonic-gate --id; 16777c478bd9Sstevel@tonic-gate } 16787c478bd9Sstevel@tonic-gate s[id++] = '\0'; 16797c478bd9Sstevel@tonic-gate break; 16807c478bd9Sstevel@tonic-gate } 16817c478bd9Sstevel@tonic-gate /* previous character was a / */ 16827c478bd9Sstevel@tonic-gate if (slashseen) { 16837c478bd9Sstevel@tonic-gate if (s[is] == '/') 16847c478bd9Sstevel@tonic-gate continue; /* another slash, ignore it */ 16857c478bd9Sstevel@tonic-gate } else if (s[is] == '/') { 16867c478bd9Sstevel@tonic-gate /* we see a /, just copy it and try again */ 16877c478bd9Sstevel@tonic-gate slashseen = 1; 16887c478bd9Sstevel@tonic-gate s[id++] = '/'; 16897c478bd9Sstevel@tonic-gate continue; 16907c478bd9Sstevel@tonic-gate } 16917c478bd9Sstevel@tonic-gate /* /./ seen */ 16927c478bd9Sstevel@tonic-gate if (s[is] == '.' && s[is+1] == '/') { 16937c478bd9Sstevel@tonic-gate is += 1; 16947c478bd9Sstevel@tonic-gate continue; 16957c478bd9Sstevel@tonic-gate } 16967c478bd9Sstevel@tonic-gate /* XXX/. seen */ 16977c478bd9Sstevel@tonic-gate if (s[is] == '.' && s[is+1] == '\0') { 16987c478bd9Sstevel@tonic-gate if (id > 1) 16997c478bd9Sstevel@tonic-gate id--; 17007c478bd9Sstevel@tonic-gate continue; 17017c478bd9Sstevel@tonic-gate } 17027c478bd9Sstevel@tonic-gate /* XXX/.. seen */ 17037c478bd9Sstevel@tonic-gate if (s[is] == '.' && s[is+1] == '.' && s[is+2] == '\0') { 17047c478bd9Sstevel@tonic-gate is += 1; 17057c478bd9Sstevel@tonic-gate if (id > 0) 17067c478bd9Sstevel@tonic-gate id--; 17077c478bd9Sstevel@tonic-gate while (id > 0 && s[--id] != '/'); 17087c478bd9Sstevel@tonic-gate id++; 17097c478bd9Sstevel@tonic-gate continue; 17107c478bd9Sstevel@tonic-gate } 17117c478bd9Sstevel@tonic-gate /* XXX/../ seen */ 17127c478bd9Sstevel@tonic-gate if (s[is] == '.' && s[is+1] == '.' && s[is+2] == '/') { 17137c478bd9Sstevel@tonic-gate is += 2; 17147c478bd9Sstevel@tonic-gate if (id > 0) 17157c478bd9Sstevel@tonic-gate id--; 17167c478bd9Sstevel@tonic-gate while (id > 0 && s[--id] != '/'); 17177c478bd9Sstevel@tonic-gate id++; 17187c478bd9Sstevel@tonic-gate continue; 17197c478bd9Sstevel@tonic-gate } 17207c478bd9Sstevel@tonic-gate while (is < ls && (s[id++] = s[is++]) != '/'); 17217c478bd9Sstevel@tonic-gate is--; 17227c478bd9Sstevel@tonic-gate } 17237c478bd9Sstevel@tonic-gate return (s); 17247c478bd9Sstevel@tonic-gate } 17257c478bd9Sstevel@tonic-gate 17267c478bd9Sstevel@tonic-gate 17277c478bd9Sstevel@tonic-gate int 17287c478bd9Sstevel@tonic-gate ipc_type_match(int flag, char type) 17297c478bd9Sstevel@tonic-gate { 17307c478bd9Sstevel@tonic-gate if (flag == OBJ_SEM && type == AT_IPC_SEM) 17317c478bd9Sstevel@tonic-gate return (1); 17327c478bd9Sstevel@tonic-gate 17337c478bd9Sstevel@tonic-gate if (flag == OBJ_MSG && type == AT_IPC_MSG) 17347c478bd9Sstevel@tonic-gate return (1); 17357c478bd9Sstevel@tonic-gate 17367c478bd9Sstevel@tonic-gate if (flag == OBJ_SHM && type == AT_IPC_SHM) 17377c478bd9Sstevel@tonic-gate return (1); 17387c478bd9Sstevel@tonic-gate 17397c478bd9Sstevel@tonic-gate return (0); 17407c478bd9Sstevel@tonic-gate } 17417c478bd9Sstevel@tonic-gate 17427c478bd9Sstevel@tonic-gate 17437c478bd9Sstevel@tonic-gate void 17447c478bd9Sstevel@tonic-gate skip_string(adr_t *adr) 17457c478bd9Sstevel@tonic-gate { 17467c478bd9Sstevel@tonic-gate ushort_t c; 17477c478bd9Sstevel@tonic-gate 17487c478bd9Sstevel@tonic-gate adrm_u_short(adr, &c, 1); 17497c478bd9Sstevel@tonic-gate adr->adr_now += c; 17507c478bd9Sstevel@tonic-gate } 17517c478bd9Sstevel@tonic-gate 17527c478bd9Sstevel@tonic-gate 17537c478bd9Sstevel@tonic-gate void 17547c478bd9Sstevel@tonic-gate get_string(adr_t *adr, char **p) 17557c478bd9Sstevel@tonic-gate { 17567c478bd9Sstevel@tonic-gate ushort_t c; 17577c478bd9Sstevel@tonic-gate 17587c478bd9Sstevel@tonic-gate adrm_u_short(adr, &c, 1); 17597c478bd9Sstevel@tonic-gate *p = a_calloc(1, (size_t)c); 17607c478bd9Sstevel@tonic-gate adrm_char(adr, *p, c); 17617c478bd9Sstevel@tonic-gate } 17627c478bd9Sstevel@tonic-gate 17637c478bd9Sstevel@tonic-gate 17647c478bd9Sstevel@tonic-gate /* 17657c478bd9Sstevel@tonic-gate * Format of host token: 17667c478bd9Sstevel@tonic-gate * host ard_uint32 17677c478bd9Sstevel@tonic-gate */ 17687c478bd9Sstevel@tonic-gate int 17697c478bd9Sstevel@tonic-gate host_token(adr_t *adr) 17707c478bd9Sstevel@tonic-gate { 17717c478bd9Sstevel@tonic-gate uint32_t host; 17727c478bd9Sstevel@tonic-gate 17737c478bd9Sstevel@tonic-gate adrm_u_int32(adr, &host, 1); 17747c478bd9Sstevel@tonic-gate 17757c478bd9Sstevel@tonic-gate return (-1); 17767c478bd9Sstevel@tonic-gate } 17777c478bd9Sstevel@tonic-gate 17787c478bd9Sstevel@tonic-gate /* 17797c478bd9Sstevel@tonic-gate * Format of useofauth token: 17807c478bd9Sstevel@tonic-gate * uauth token id adr_char 17817c478bd9Sstevel@tonic-gate * uauth adr_string 17827c478bd9Sstevel@tonic-gate * 17837c478bd9Sstevel@tonic-gate */ 17847c478bd9Sstevel@tonic-gate int 17857c478bd9Sstevel@tonic-gate useofauth_token(adr_t *adr) 17867c478bd9Sstevel@tonic-gate { 17877c478bd9Sstevel@tonic-gate skip_string(adr); 17887c478bd9Sstevel@tonic-gate return (-1); 17897c478bd9Sstevel@tonic-gate } 17907c478bd9Sstevel@tonic-gate 17917c478bd9Sstevel@tonic-gate int 17927c478bd9Sstevel@tonic-gate xcolormap_token(adr_t *adr) 17937c478bd9Sstevel@tonic-gate { 17947c478bd9Sstevel@tonic-gate return (xgeneric(adr)); 17957c478bd9Sstevel@tonic-gate } 17967c478bd9Sstevel@tonic-gate 17977c478bd9Sstevel@tonic-gate int 17987c478bd9Sstevel@tonic-gate xcursor_token(adr_t *adr) 17997c478bd9Sstevel@tonic-gate { 18007c478bd9Sstevel@tonic-gate return (xgeneric(adr)); 18017c478bd9Sstevel@tonic-gate } 18027c478bd9Sstevel@tonic-gate 18037c478bd9Sstevel@tonic-gate int 18047c478bd9Sstevel@tonic-gate xfont_token(adr_t *adr) 18057c478bd9Sstevel@tonic-gate { 18067c478bd9Sstevel@tonic-gate return (xgeneric(adr)); 18077c478bd9Sstevel@tonic-gate } 18087c478bd9Sstevel@tonic-gate 18097c478bd9Sstevel@tonic-gate int 18107c478bd9Sstevel@tonic-gate xgc_token(adr_t *adr) 18117c478bd9Sstevel@tonic-gate { 18127c478bd9Sstevel@tonic-gate return (xgeneric(adr)); 18137c478bd9Sstevel@tonic-gate } 18147c478bd9Sstevel@tonic-gate 18157c478bd9Sstevel@tonic-gate int 18167c478bd9Sstevel@tonic-gate xpixmap_token(adr_t *adr) 18177c478bd9Sstevel@tonic-gate { 18187c478bd9Sstevel@tonic-gate return (xgeneric(adr)); 18197c478bd9Sstevel@tonic-gate } 18207c478bd9Sstevel@tonic-gate 18217c478bd9Sstevel@tonic-gate int 18227c478bd9Sstevel@tonic-gate xwindow_token(adr_t *adr) 18237c478bd9Sstevel@tonic-gate { 18247c478bd9Sstevel@tonic-gate return (xgeneric(adr)); 18257c478bd9Sstevel@tonic-gate } 18267c478bd9Sstevel@tonic-gate 18277c478bd9Sstevel@tonic-gate 18287c478bd9Sstevel@tonic-gate /* 18297c478bd9Sstevel@tonic-gate * Format of xgeneric token: 18307c478bd9Sstevel@tonic-gate * XID adr_int32 18317c478bd9Sstevel@tonic-gate * creator UID adr_int32 18327c478bd9Sstevel@tonic-gate * 18337c478bd9Sstevel@tonic-gate * Includes: xcolormap, xcursor, xfont, xgc, xpixmap, and xwindow 18347c478bd9Sstevel@tonic-gate */ 18357c478bd9Sstevel@tonic-gate int 18367c478bd9Sstevel@tonic-gate xgeneric(adr_t *adr) 18377c478bd9Sstevel@tonic-gate { 18387c478bd9Sstevel@tonic-gate int32_t xid; 18397c478bd9Sstevel@tonic-gate int32_t uid; 18407c478bd9Sstevel@tonic-gate 18417c478bd9Sstevel@tonic-gate adrm_int32(adr, &xid, 1); 18427c478bd9Sstevel@tonic-gate adrm_int32(adr, &uid, 1); 18437c478bd9Sstevel@tonic-gate 18447c478bd9Sstevel@tonic-gate if (flags & M_USERE) { 18457c478bd9Sstevel@tonic-gate if (m_usere == uid) 18467c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERE; 18477c478bd9Sstevel@tonic-gate } 18487c478bd9Sstevel@tonic-gate 18497c478bd9Sstevel@tonic-gate return (-1); 18507c478bd9Sstevel@tonic-gate } 18517c478bd9Sstevel@tonic-gate 18527c478bd9Sstevel@tonic-gate 18537c478bd9Sstevel@tonic-gate /* 18547c478bd9Sstevel@tonic-gate * Format of xproperty token: 18557c478bd9Sstevel@tonic-gate * XID adr_int32 18567c478bd9Sstevel@tonic-gate * creator UID adr_int32 18577c478bd9Sstevel@tonic-gate * atom string adr_string 18587c478bd9Sstevel@tonic-gate */ 18597c478bd9Sstevel@tonic-gate int 18607c478bd9Sstevel@tonic-gate xproperty_token(adr_t *adr) 18617c478bd9Sstevel@tonic-gate { 18627c478bd9Sstevel@tonic-gate int32_t xid; 18637c478bd9Sstevel@tonic-gate int32_t uid; 18647c478bd9Sstevel@tonic-gate 18657c478bd9Sstevel@tonic-gate adrm_int32(adr, &xid, 1); 18667c478bd9Sstevel@tonic-gate adrm_int32(adr, &uid, 1); 18677c478bd9Sstevel@tonic-gate skip_string(adr); 18687c478bd9Sstevel@tonic-gate 18697c478bd9Sstevel@tonic-gate if (flags & M_USERE) { 18707c478bd9Sstevel@tonic-gate if (m_usere == uid) 18717c478bd9Sstevel@tonic-gate checkflags = checkflags | M_USERE; 18727c478bd9Sstevel@tonic-gate } 18737c478bd9Sstevel@tonic-gate 18747c478bd9Sstevel@tonic-gate return (-1); 18757c478bd9Sstevel@tonic-gate } 18767c478bd9Sstevel@tonic-gate 18777c478bd9Sstevel@tonic-gate 18787c478bd9Sstevel@tonic-gate /* 18797c478bd9Sstevel@tonic-gate * Format of xclient token: 18807c478bd9Sstevel@tonic-gate * xclient id adr_int32 18817c478bd9Sstevel@tonic-gate */ 18827c478bd9Sstevel@tonic-gate int 18837c478bd9Sstevel@tonic-gate xclient_token(adr_t *adr) 18847c478bd9Sstevel@tonic-gate { 18857c478bd9Sstevel@tonic-gate int32_t client_id; 18867c478bd9Sstevel@tonic-gate 18877c478bd9Sstevel@tonic-gate adrm_int32(adr, &client_id, 1); 18887c478bd9Sstevel@tonic-gate 18897c478bd9Sstevel@tonic-gate return (-1); 18907c478bd9Sstevel@tonic-gate } 18917c478bd9Sstevel@tonic-gate 18927c478bd9Sstevel@tonic-gate /* 18937c478bd9Sstevel@tonic-gate * Format of privilege set token: 18947c478bd9Sstevel@tonic-gate * priv_set type string 18957c478bd9Sstevel@tonic-gate * priv_set string 18967c478bd9Sstevel@tonic-gate */ 18977c478bd9Sstevel@tonic-gate 18987c478bd9Sstevel@tonic-gate int 18997c478bd9Sstevel@tonic-gate privilege_token(adr_t *adr) 19007c478bd9Sstevel@tonic-gate { 19017c478bd9Sstevel@tonic-gate skip_string(adr); /* set type name */ 19027c478bd9Sstevel@tonic-gate skip_string(adr); /* privilege set */ 19037c478bd9Sstevel@tonic-gate return (-1); 19047c478bd9Sstevel@tonic-gate } 19057c478bd9Sstevel@tonic-gate 19067c478bd9Sstevel@tonic-gate /* 1907*a13cf099Sgww * Format of label token: 1908*a13cf099Sgww * label ID 1 byte 1909*a13cf099Sgww * compartment length 1 byte 1910*a13cf099Sgww * classification 2 bytes 1911*a13cf099Sgww * compartment words <compartment length> * 4 bytes 19127c478bd9Sstevel@tonic-gate */ 19137c478bd9Sstevel@tonic-gate int 1914*a13cf099Sgww label_token(adr_t *adr) 19157c478bd9Sstevel@tonic-gate { 1916*a13cf099Sgww static m_label_t *label = NULL; 1917*a13cf099Sgww static size_t l_size; 1918*a13cf099Sgww int len; 19197c478bd9Sstevel@tonic-gate 1920*a13cf099Sgww if (label == NULL) { 1921*a13cf099Sgww label = m_label_alloc(MAC_LABEL); 1922*a13cf099Sgww l_size = blabel_size() - 4; 1923*a13cf099Sgww } 1924*a13cf099Sgww 1925*a13cf099Sgww if (label == NULL) { 1926*a13cf099Sgww /* out of memory, should never happen; skip label */ 1927*a13cf099Sgww char l; /* length */ 1928*a13cf099Sgww 1929*a13cf099Sgww adr->adr_now += sizeof (char); 1930*a13cf099Sgww adrm_char(adr, (char *)&l, 1); 1931*a13cf099Sgww adr->adr_now += sizeof (short) + (4 * l); 1932*a13cf099Sgww return (-1); 1933*a13cf099Sgww } 1934*a13cf099Sgww 1935*a13cf099Sgww adrm_char(adr, (char *)label, 4); 1936*a13cf099Sgww len = (int)(((char *)label)[1] * 4); 1937*a13cf099Sgww if (len > l_size) { 1938*a13cf099Sgww return (-1); 1939*a13cf099Sgww } 1940*a13cf099Sgww adrm_char(adr, &((char *)label)[4], len); 19417c478bd9Sstevel@tonic-gate 194245916cd2Sjpk if (flags & M_LABEL) { 1943*a13cf099Sgww if (blinrange(label, m_label)) 194445916cd2Sjpk checkflags = checkflags | M_LABEL; 19457c478bd9Sstevel@tonic-gate } 19467c478bd9Sstevel@tonic-gate 19477c478bd9Sstevel@tonic-gate return (-1); 19487c478bd9Sstevel@tonic-gate } 19497c478bd9Sstevel@tonic-gate 19507c478bd9Sstevel@tonic-gate 19517c478bd9Sstevel@tonic-gate /* 19527c478bd9Sstevel@tonic-gate * Format of useofpriv token: 19537c478bd9Sstevel@tonic-gate * success/failure adr_char 19547c478bd9Sstevel@tonic-gate * privilege(s) adr_string 19557c478bd9Sstevel@tonic-gate */ 19567c478bd9Sstevel@tonic-gate /* ARGSUSED */ 19577c478bd9Sstevel@tonic-gate int 19587c478bd9Sstevel@tonic-gate useofpriv_token(adr_t *adr) 19597c478bd9Sstevel@tonic-gate { 19607c478bd9Sstevel@tonic-gate char flag; 19617c478bd9Sstevel@tonic-gate 19627c478bd9Sstevel@tonic-gate adrm_char(adr, &flag, 1); 19637c478bd9Sstevel@tonic-gate skip_string(adr); 19647c478bd9Sstevel@tonic-gate return (-1); 19657c478bd9Sstevel@tonic-gate } 1966