17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5f48205beScasper * Common Development and Distribution License (the "License"). 6f48205beScasper * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*bda89588Sjp * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 277c478bd9Sstevel@tonic-gate /* All Rights Reserved */ 287c478bd9Sstevel@tonic-gate 297c478bd9Sstevel@tonic-gate /* 307c478bd9Sstevel@tonic-gate * Portions of this source code were derived from Berkeley 4.3 BSD 317c478bd9Sstevel@tonic-gate * under license from the Regents of the University of California. 327c478bd9Sstevel@tonic-gate */ 337c478bd9Sstevel@tonic-gate 347c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 357c478bd9Sstevel@tonic-gate 367c478bd9Sstevel@tonic-gate #include <sys/param.h> 377c478bd9Sstevel@tonic-gate #include <sys/isa_defs.h> 387c478bd9Sstevel@tonic-gate #include <sys/types.h> 397c478bd9Sstevel@tonic-gate #include <sys/sysmacros.h> 407c478bd9Sstevel@tonic-gate #include <sys/systm.h> 417c478bd9Sstevel@tonic-gate #include <sys/errno.h> 427c478bd9Sstevel@tonic-gate #include <sys/fcntl.h> 437c478bd9Sstevel@tonic-gate #include <sys/pathname.h> 447c478bd9Sstevel@tonic-gate #include <sys/var.h> 457c478bd9Sstevel@tonic-gate #include <sys/vfs.h> 467c478bd9Sstevel@tonic-gate #include <sys/vnode.h> 477c478bd9Sstevel@tonic-gate #include <sys/file.h> 487c478bd9Sstevel@tonic-gate #include <sys/mode.h> 497c478bd9Sstevel@tonic-gate #include <sys/proc.h> 507c478bd9Sstevel@tonic-gate #include <sys/uio.h> 517c478bd9Sstevel@tonic-gate #include <sys/filio.h> 527c478bd9Sstevel@tonic-gate #include <sys/fcntl.h> 537c478bd9Sstevel@tonic-gate #include <sys/debug.h> 547c478bd9Sstevel@tonic-gate #include <c2/audit.h> 557c478bd9Sstevel@tonic-gate 567c478bd9Sstevel@tonic-gate /* 577c478bd9Sstevel@tonic-gate * nmflag has the following values 587c478bd9Sstevel@tonic-gate * 597c478bd9Sstevel@tonic-gate * 1 - Always do lookup. i.e. chown, lchown. 607c478bd9Sstevel@tonic-gate * 2 - Name is optional i.e. fchownat 617c478bd9Sstevel@tonic-gate * 0 - Don't lookup name, vp is in file_p. i.e. fchown 627c478bd9Sstevel@tonic-gate * 637c478bd9Sstevel@tonic-gate */ 647c478bd9Sstevel@tonic-gate int 657c478bd9Sstevel@tonic-gate cfchownat(int fd, char *name, int nmflag, uid_t uid, gid_t gid, int flags) 667c478bd9Sstevel@tonic-gate { 677c478bd9Sstevel@tonic-gate vnode_t *startvp, *vp; 687c478bd9Sstevel@tonic-gate file_t *filefp; 697c478bd9Sstevel@tonic-gate struct vattr vattr; 707c478bd9Sstevel@tonic-gate int error = 0; 717c478bd9Sstevel@tonic-gate char startchar; 72*bda89588Sjp struct zone *zone = crgetzone(CRED()); 737c478bd9Sstevel@tonic-gate 74*bda89588Sjp if (uid != (uid_t)-1 && !VALID_UID(uid, zone) || 75*bda89588Sjp gid != (gid_t)-1 && !VALID_GID(gid, zone)) { 767c478bd9Sstevel@tonic-gate return (set_errno(EINVAL)); 77f48205beScasper } 787c478bd9Sstevel@tonic-gate vattr.va_uid = uid; 797c478bd9Sstevel@tonic-gate vattr.va_gid = gid; 807c478bd9Sstevel@tonic-gate vattr.va_mask = 0; 817c478bd9Sstevel@tonic-gate if (vattr.va_uid != -1) 827c478bd9Sstevel@tonic-gate vattr.va_mask |= AT_UID; 837c478bd9Sstevel@tonic-gate if (vattr.va_gid != -1) 847c478bd9Sstevel@tonic-gate vattr.va_mask |= AT_GID; 857c478bd9Sstevel@tonic-gate 867c478bd9Sstevel@tonic-gate 877c478bd9Sstevel@tonic-gate if (fd == AT_FDCWD && name == NULL) 887c478bd9Sstevel@tonic-gate return (set_errno(EFAULT)); 897c478bd9Sstevel@tonic-gate 907c478bd9Sstevel@tonic-gate if (nmflag == 1 || (nmflag == 2 && name != NULL)) { 917c478bd9Sstevel@tonic-gate if (copyin(name, &startchar, sizeof (char))) 927c478bd9Sstevel@tonic-gate return (set_errno(EFAULT)); 937c478bd9Sstevel@tonic-gate } else 947c478bd9Sstevel@tonic-gate startchar = '\0'; 957c478bd9Sstevel@tonic-gate 967c478bd9Sstevel@tonic-gate 977c478bd9Sstevel@tonic-gate if (fd == AT_FDCWD) 987c478bd9Sstevel@tonic-gate startvp = NULL; 997c478bd9Sstevel@tonic-gate else { 1007c478bd9Sstevel@tonic-gate /* 1017c478bd9Sstevel@tonic-gate * only get fd if not doing absolute lookup 1027c478bd9Sstevel@tonic-gate */ 1037c478bd9Sstevel@tonic-gate if (startchar != '/' || nmflag == 0) { 1047c478bd9Sstevel@tonic-gate if ((filefp = getf(fd)) == NULL) { 1057c478bd9Sstevel@tonic-gate return (set_errno(EBADF)); 1067c478bd9Sstevel@tonic-gate } 1077c478bd9Sstevel@tonic-gate startvp = filefp->f_vnode; 1087c478bd9Sstevel@tonic-gate VN_HOLD(startvp); 1097c478bd9Sstevel@tonic-gate releasef(fd); 1107c478bd9Sstevel@tonic-gate } else { 1117c478bd9Sstevel@tonic-gate startvp = NULL; 1127c478bd9Sstevel@tonic-gate } 1137c478bd9Sstevel@tonic-gate } 1147c478bd9Sstevel@tonic-gate 1157c478bd9Sstevel@tonic-gate if ((nmflag == 2) && audit_active) 1167c478bd9Sstevel@tonic-gate audit_setfsat_path(1); 1177c478bd9Sstevel@tonic-gate 1187c478bd9Sstevel@tonic-gate /* 1197c478bd9Sstevel@tonic-gate * Do lookups for chown, lchown and fchownat when name not NULL 1207c478bd9Sstevel@tonic-gate */ 1217c478bd9Sstevel@tonic-gate if ((nmflag == 2 && name != NULL) || nmflag == 1) { 1227c478bd9Sstevel@tonic-gate if (error = lookupnameat(name, UIO_USERSPACE, 1237c478bd9Sstevel@tonic-gate (flags == AT_SYMLINK_NOFOLLOW) ? 1247c478bd9Sstevel@tonic-gate NO_FOLLOW : FOLLOW, 1257c478bd9Sstevel@tonic-gate NULLVPP, &vp, startvp)) { 1267c478bd9Sstevel@tonic-gate if (startvp != NULL) 1277c478bd9Sstevel@tonic-gate VN_RELE(startvp); 1287c478bd9Sstevel@tonic-gate return (set_errno(error)); 1297c478bd9Sstevel@tonic-gate } 1307c478bd9Sstevel@tonic-gate } else { 1317c478bd9Sstevel@tonic-gate vp = startvp; 1327c478bd9Sstevel@tonic-gate ASSERT(vp); 1337c478bd9Sstevel@tonic-gate VN_HOLD(vp); 1347c478bd9Sstevel@tonic-gate } 1357c478bd9Sstevel@tonic-gate 1367c478bd9Sstevel@tonic-gate if (vn_is_readonly(vp)) { 1377c478bd9Sstevel@tonic-gate error = EROFS; 1387c478bd9Sstevel@tonic-gate } else { 1397c478bd9Sstevel@tonic-gate error = VOP_SETATTR(vp, &vattr, 0, CRED(), NULL); 1407c478bd9Sstevel@tonic-gate } 1417c478bd9Sstevel@tonic-gate 1427c478bd9Sstevel@tonic-gate if (startvp != NULL) 1437c478bd9Sstevel@tonic-gate VN_RELE(startvp); 1447c478bd9Sstevel@tonic-gate if (vp != NULL) 1457c478bd9Sstevel@tonic-gate VN_RELE(vp); 1467c478bd9Sstevel@tonic-gate 1477c478bd9Sstevel@tonic-gate if (error != 0) 1487c478bd9Sstevel@tonic-gate return (set_errno(error)); 1497c478bd9Sstevel@tonic-gate else 1507c478bd9Sstevel@tonic-gate return (error); 1517c478bd9Sstevel@tonic-gate } 1527c478bd9Sstevel@tonic-gate /* 1537c478bd9Sstevel@tonic-gate * Change ownership of file given file name. 1547c478bd9Sstevel@tonic-gate */ 1557c478bd9Sstevel@tonic-gate int 1567c478bd9Sstevel@tonic-gate chown(char *fname, uid_t uid, gid_t gid) 1577c478bd9Sstevel@tonic-gate { 1587c478bd9Sstevel@tonic-gate return (cfchownat(AT_FDCWD, fname, 1, uid, gid, 0)); 1597c478bd9Sstevel@tonic-gate } 1607c478bd9Sstevel@tonic-gate 1617c478bd9Sstevel@tonic-gate int 1627c478bd9Sstevel@tonic-gate lchown(char *fname, uid_t uid, gid_t gid) 1637c478bd9Sstevel@tonic-gate { 1647c478bd9Sstevel@tonic-gate return (cfchownat(AT_FDCWD, fname, 1, uid, gid, AT_SYMLINK_NOFOLLOW)); 1657c478bd9Sstevel@tonic-gate } 1667c478bd9Sstevel@tonic-gate 1677c478bd9Sstevel@tonic-gate /* 1687c478bd9Sstevel@tonic-gate * Change ownership of file given file descriptor. 1697c478bd9Sstevel@tonic-gate */ 1707c478bd9Sstevel@tonic-gate int 1717c478bd9Sstevel@tonic-gate fchown(int fd, uid_t uid, uid_t gid) 1727c478bd9Sstevel@tonic-gate { 1737c478bd9Sstevel@tonic-gate return (cfchownat(fd, NULL, 0, uid, gid, 0)); 1747c478bd9Sstevel@tonic-gate } 1757c478bd9Sstevel@tonic-gate 1767c478bd9Sstevel@tonic-gate int 1777c478bd9Sstevel@tonic-gate fchownat(int fd, char *name, uid_t uid, gid_t gid, int flags) 1787c478bd9Sstevel@tonic-gate { 1797c478bd9Sstevel@tonic-gate return (cfchownat(fd, name, 2, uid, gid, flags)); 1807c478bd9Sstevel@tonic-gate 1817c478bd9Sstevel@tonic-gate } 182