1/*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21
22/*
23 * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
24 * Use is subject to license terms.
25 */
26
27#ifndef _PRIV_PRIVATE_H
28#define	_PRIV_PRIVATE_H
29
30#pragma ident	"%Z%%M%	%I%	%E% SMI"
31
32#include <sys/types.h>
33#include <sys/priv.h>
34#include <limits.h>
35
36/*
37 * Libc private privilege data.
38 */
39
40#ifdef __cplusplus
41extern "C" {
42#endif
43
44#define	LOADPRIVDATA(d)		d = __priv_getdata()
45#define	GETPRIVDATA()		__priv_getdata()
46#define	LOCKPRIVDATA()		{ \
47					/* Data already allocated */ \
48					(void) lock_data(); \
49					(void) refresh_data(); \
50				}
51#define	UNLOCKPRIVDATA()	unlock_data()
52#define	WITHPRIVLOCKED(t, b, x)	{ \
53					t __result; \
54					if (lock_data() != 0) \
55						return (b); \
56					__result = (x); \
57					if (__result == (b) && refresh_data()) \
58						__result = (x); \
59					unlock_data(); \
60					return (__result); \
61				}
62
63/*
64 * Privilege mask macros.
65 */
66#define	__NBWRD		(CHAR_BIT * sizeof (priv_chunk_t))
67#define	privmask(n)	(1 << ((__NBWRD - 1) - ((n) % __NBWRD)))
68#define	privword(n)	((n)/__NBWRD)
69
70/*
71 * Same as the functions, but for numeric privileges.
72 */
73#define	PRIV_ADDSET(a, p)	((priv_chunk_t *)(a))[privword(p)] |= \
74							privmask(p)
75#define	PRIV_DELSET(a, p)	((priv_chunk_t *)(a))[privword(p)] &= \
76							~privmask(p)
77#define	PRIV_ISMEMBER(a, p)	((((priv_chunk_t *)(a))[privword(p)] & \
78							privmask(p)) != 0)
79
80/*
81 * The structure is static except for the setsort, privnames and nprivs
82 * field.  The pinfo structure initially has sufficient room and the kernel
83 * guarantees no offset changes so we can copy a new structure on top of it.
84 * The locking stratgegy is this: we lock it when we need to reference any
85 * of the volatile fields.
86 */
87typedef struct priv_data {
88	size_t			pd_setsize;		/* In bytes */
89	int			pd_nsets, pd_nprivs;
90	uint32_t		pd_ucredsize;
91	char  			**pd_setnames;
92	char			**pd_privnames;
93	int			*pd_setsort;
94	priv_impl_info_t 	*pd_pinfo;
95	priv_set_t		*pd_basicset;
96	priv_set_t		*pd_zoneset;
97} priv_data_t;
98
99extern priv_data_t *__priv_getdata(void);
100extern priv_data_t *__priv_parse_info(priv_impl_info_t *);
101extern void __priv_free_info(priv_data_t *);
102extern priv_data_t *privdata;
103
104extern int lock_data(void);
105extern boolean_t refresh_data(void);
106extern void unlock_data(void);
107
108extern boolean_t __priv_isemptyset(priv_data_t *, const priv_set_t *);
109extern boolean_t __priv_isfullset(priv_data_t *, const priv_set_t *);
110extern boolean_t __priv_issubset(priv_data_t *, const priv_set_t *,
111				const priv_set_t *);
112extern const char *__priv_getbynum(const priv_data_t *, int);
113
114extern int getprivinfo(priv_impl_info_t *, size_t);
115
116extern priv_set_t *priv_basic(void);
117
118#ifdef __cplusplus
119}
120#endif
121
122#endif /* _PRIV_PRIVATE_H */
123