17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5f48205beScasper * Common Development and Distribution License (the "License"). 6f48205beScasper * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*bda89588Sjp * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate /* 277c478bd9Sstevel@tonic-gate * Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T 287c478bd9Sstevel@tonic-gate */ 297c478bd9Sstevel@tonic-gate 307c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 317c478bd9Sstevel@tonic-gate 327c478bd9Sstevel@tonic-gate #include <sys/param.h> 337c478bd9Sstevel@tonic-gate #include <sys/types.h> 347c478bd9Sstevel@tonic-gate #include <sys/sysmacros.h> 357c478bd9Sstevel@tonic-gate #include <sys/systm.h> 367c478bd9Sstevel@tonic-gate #include <sys/cred_impl.h> 377c478bd9Sstevel@tonic-gate #include <sys/errno.h> 387c478bd9Sstevel@tonic-gate #include <sys/proc.h> 397c478bd9Sstevel@tonic-gate #include <sys/debug.h> 407c478bd9Sstevel@tonic-gate #include <sys/policy.h> 417c478bd9Sstevel@tonic-gate 427c478bd9Sstevel@tonic-gate 437c478bd9Sstevel@tonic-gate int 447c478bd9Sstevel@tonic-gate setgid(gid_t gid) 457c478bd9Sstevel@tonic-gate { 46f48205beScasper proc_t *p; 477c478bd9Sstevel@tonic-gate int error; 487c478bd9Sstevel@tonic-gate int do_nocd = 0; 497c478bd9Sstevel@tonic-gate cred_t *cr, *newcr; 50f48205beScasper ksid_t ksid, *ksp; 51*bda89588Sjp zone_t *zone = crgetzone(CRED()); 527c478bd9Sstevel@tonic-gate 53*bda89588Sjp 54*bda89588Sjp if (!VALID_GID(gid, zone)) 557c478bd9Sstevel@tonic-gate return (set_errno(EINVAL)); 567c478bd9Sstevel@tonic-gate 57f48205beScasper if (gid > MAXUID) { 58*bda89588Sjp if (ksid_lookupbygid(zone, gid, &ksid) != 0) 59f48205beScasper return (set_errno(EINVAL)); 60f48205beScasper ksp = &ksid; 61f48205beScasper } else { 62f48205beScasper ksp = NULL; 63f48205beScasper } 64f48205beScasper 657c478bd9Sstevel@tonic-gate /* 667c478bd9Sstevel@tonic-gate * Need to pre-allocate the new cred structure before grabbing 677c478bd9Sstevel@tonic-gate * the p_crlock mutex. 687c478bd9Sstevel@tonic-gate */ 69f48205beScasper newcr = cralloc_ksid(); 707c478bd9Sstevel@tonic-gate p = ttoproc(curthread); 717c478bd9Sstevel@tonic-gate mutex_enter(&p->p_crlock); 727c478bd9Sstevel@tonic-gate cr = p->p_cred; 737c478bd9Sstevel@tonic-gate 747c478bd9Sstevel@tonic-gate if ((gid == cr->cr_rgid || gid == cr->cr_sgid) && 757c478bd9Sstevel@tonic-gate secpolicy_allow_setid(cr, -1, B_TRUE) != 0) { 767c478bd9Sstevel@tonic-gate error = 0; 777c478bd9Sstevel@tonic-gate crcopy_to(cr, newcr); 787c478bd9Sstevel@tonic-gate p->p_cred = newcr; 797c478bd9Sstevel@tonic-gate newcr->cr_gid = gid; 80f48205beScasper crsetsid(newcr, ksp, KSID_GROUP); 817c478bd9Sstevel@tonic-gate } else if ((error = secpolicy_allow_setid(cr, -1, B_FALSE)) == 0) { 827c478bd9Sstevel@tonic-gate /* 837c478bd9Sstevel@tonic-gate * A privileged process that makes itself look like a 847c478bd9Sstevel@tonic-gate * set-gid process must be marked to produce no core dump. 857c478bd9Sstevel@tonic-gate */ 867c478bd9Sstevel@tonic-gate if (cr->cr_gid != gid || 877c478bd9Sstevel@tonic-gate cr->cr_rgid != gid || 887c478bd9Sstevel@tonic-gate cr->cr_sgid != gid) 897c478bd9Sstevel@tonic-gate do_nocd = 1; 907c478bd9Sstevel@tonic-gate crcopy_to(cr, newcr); 917c478bd9Sstevel@tonic-gate p->p_cred = newcr; 927c478bd9Sstevel@tonic-gate newcr->cr_gid = gid; 937c478bd9Sstevel@tonic-gate newcr->cr_rgid = gid; 947c478bd9Sstevel@tonic-gate newcr->cr_sgid = gid; 95f48205beScasper crsetsid(newcr, ksp, KSID_GROUP); 96f48205beScasper } else { 977c478bd9Sstevel@tonic-gate crfree(newcr); 98f48205beScasper if (ksp != NULL) 99f48205beScasper ksid_rele(ksp); 100f48205beScasper 101f48205beScasper } 1027c478bd9Sstevel@tonic-gate 1037c478bd9Sstevel@tonic-gate mutex_exit(&p->p_crlock); 1047c478bd9Sstevel@tonic-gate 1057c478bd9Sstevel@tonic-gate if (error == 0) { 1067c478bd9Sstevel@tonic-gate if (do_nocd) { 1077c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); 1087c478bd9Sstevel@tonic-gate p->p_flag |= SNOCD; 1097c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 1107c478bd9Sstevel@tonic-gate } 1117c478bd9Sstevel@tonic-gate crset(p, newcr); /* broadcast to process threads */ 1127c478bd9Sstevel@tonic-gate return (0); 1137c478bd9Sstevel@tonic-gate } 1147c478bd9Sstevel@tonic-gate return (set_errno(error)); 1157c478bd9Sstevel@tonic-gate } 1167c478bd9Sstevel@tonic-gate 1177c478bd9Sstevel@tonic-gate int64_t 1187c478bd9Sstevel@tonic-gate getgid(void) 1197c478bd9Sstevel@tonic-gate { 1207c478bd9Sstevel@tonic-gate rval_t r; 1217c478bd9Sstevel@tonic-gate cred_t *cr; 1227c478bd9Sstevel@tonic-gate 1237c478bd9Sstevel@tonic-gate cr = curthread->t_cred; 1247c478bd9Sstevel@tonic-gate r.r_val1 = cr->cr_rgid; 1257c478bd9Sstevel@tonic-gate r.r_val2 = cr->cr_gid; 1267c478bd9Sstevel@tonic-gate return (r.r_vals); 1277c478bd9Sstevel@tonic-gate } 1287c478bd9Sstevel@tonic-gate 1297c478bd9Sstevel@tonic-gate int 1307c478bd9Sstevel@tonic-gate setegid(gid_t gid) 1317c478bd9Sstevel@tonic-gate { 132f48205beScasper proc_t *p; 133f48205beScasper cred_t *cr, *newcr; 1347c478bd9Sstevel@tonic-gate int error = EPERM; 1357c478bd9Sstevel@tonic-gate int do_nocd = 0; 136f48205beScasper ksid_t ksid, *ksp; 137*bda89588Sjp zone_t *zone = crgetzone(CRED()); 1387c478bd9Sstevel@tonic-gate 139*bda89588Sjp if (!VALID_GID(gid, zone)) 1407c478bd9Sstevel@tonic-gate return (set_errno(EINVAL)); 1417c478bd9Sstevel@tonic-gate 142f48205beScasper if (gid > MAXUID) { 143*bda89588Sjp if (ksid_lookupbygid(zone, gid, &ksid) != 0) 144f48205beScasper return (set_errno(EINVAL)); 145f48205beScasper ksp = &ksid; 146f48205beScasper } else { 147f48205beScasper ksp = NULL; 148f48205beScasper } 1497c478bd9Sstevel@tonic-gate /* 1507c478bd9Sstevel@tonic-gate * Need to pre-allocate the new cred structure before grabbing 1517c478bd9Sstevel@tonic-gate * the p_crlock mutex. 1527c478bd9Sstevel@tonic-gate */ 153f48205beScasper newcr = cralloc_ksid(); 1547c478bd9Sstevel@tonic-gate p = ttoproc(curthread); 1557c478bd9Sstevel@tonic-gate mutex_enter(&p->p_crlock); 1567c478bd9Sstevel@tonic-gate cr = p->p_cred; 1577c478bd9Sstevel@tonic-gate if (gid == cr->cr_rgid || gid == cr->cr_gid || gid == cr->cr_sgid || 1587c478bd9Sstevel@tonic-gate (error = secpolicy_allow_setid(cr, -1, B_FALSE)) == 0) { 1597c478bd9Sstevel@tonic-gate /* 1607c478bd9Sstevel@tonic-gate * A privileged process that makes itself look like a 1617c478bd9Sstevel@tonic-gate * set-gid process must be marked to produce no core dump. 1627c478bd9Sstevel@tonic-gate */ 1637c478bd9Sstevel@tonic-gate if (cr->cr_gid != gid && error == 0) 1647c478bd9Sstevel@tonic-gate do_nocd = 1; 1657c478bd9Sstevel@tonic-gate error = 0; 1667c478bd9Sstevel@tonic-gate crcopy_to(cr, newcr); 1677c478bd9Sstevel@tonic-gate p->p_cred = newcr; 1687c478bd9Sstevel@tonic-gate newcr->cr_gid = gid; 169f48205beScasper crsetsid(newcr, ksp, KSID_GROUP); 170f48205beScasper } else { 1717c478bd9Sstevel@tonic-gate crfree(newcr); 172f48205beScasper if (ksp != NULL) 173f48205beScasper ksid_rele(ksp); 174f48205beScasper } 1757c478bd9Sstevel@tonic-gate 1767c478bd9Sstevel@tonic-gate mutex_exit(&p->p_crlock); 1777c478bd9Sstevel@tonic-gate 1787c478bd9Sstevel@tonic-gate if (error == 0) { 1797c478bd9Sstevel@tonic-gate if (do_nocd) { 1807c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); 1817c478bd9Sstevel@tonic-gate p->p_flag |= SNOCD; 1827c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 1837c478bd9Sstevel@tonic-gate } 1847c478bd9Sstevel@tonic-gate crset(p, newcr); /* broadcast to process threads */ 1857c478bd9Sstevel@tonic-gate return (0); 1867c478bd9Sstevel@tonic-gate } 1877c478bd9Sstevel@tonic-gate return (set_errno(error)); 1887c478bd9Sstevel@tonic-gate } 1897c478bd9Sstevel@tonic-gate 1907c478bd9Sstevel@tonic-gate /* 1917c478bd9Sstevel@tonic-gate * Buy-back from SunOS 4.x 1927c478bd9Sstevel@tonic-gate * 1937c478bd9Sstevel@tonic-gate * Like setgid() and setegid() combined -except- that non-root users 1947c478bd9Sstevel@tonic-gate * can change cr_rgid to cr_gid, and the semantics of cr_sgid are 1957c478bd9Sstevel@tonic-gate * subtly different. 1967c478bd9Sstevel@tonic-gate */ 1977c478bd9Sstevel@tonic-gate int 1987c478bd9Sstevel@tonic-gate setregid(gid_t rgid, gid_t egid) 1997c478bd9Sstevel@tonic-gate { 2007c478bd9Sstevel@tonic-gate proc_t *p; 2017c478bd9Sstevel@tonic-gate int error = EPERM; 2027c478bd9Sstevel@tonic-gate int do_nocd = 0; 2037c478bd9Sstevel@tonic-gate cred_t *cr, *newcr; 204f48205beScasper ksid_t ksid, *ksp; 205*bda89588Sjp zone_t *zone = crgetzone(CRED()); 2067c478bd9Sstevel@tonic-gate 207*bda89588Sjp if ((rgid != -1 && !VALID_GID(rgid, zone)) || 208*bda89588Sjp (egid != -1 && !VALID_GID(egid, zone))) 2097c478bd9Sstevel@tonic-gate return (set_errno(EINVAL)); 2107c478bd9Sstevel@tonic-gate 211f48205beScasper if (egid != -1 && egid > MAXUID) { 212*bda89588Sjp if (ksid_lookupbygid(zone, egid, &ksid) != 0) 213f48205beScasper return (set_errno(EINVAL)); 214f48205beScasper ksp = &ksid; 215f48205beScasper } else { 216f48205beScasper ksp = NULL; 217f48205beScasper } 2187c478bd9Sstevel@tonic-gate /* 2197c478bd9Sstevel@tonic-gate * Need to pre-allocate the new cred structure before grabbing 2207c478bd9Sstevel@tonic-gate * the p_crlock mutex. 2217c478bd9Sstevel@tonic-gate */ 222f48205beScasper newcr = cralloc_ksid(); 2237c478bd9Sstevel@tonic-gate 2247c478bd9Sstevel@tonic-gate p = ttoproc(curthread); 2257c478bd9Sstevel@tonic-gate mutex_enter(&p->p_crlock); 2267c478bd9Sstevel@tonic-gate cr = p->p_cred; 2277c478bd9Sstevel@tonic-gate 2287c478bd9Sstevel@tonic-gate if ((rgid == -1 || 2297c478bd9Sstevel@tonic-gate rgid == cr->cr_rgid || rgid == cr->cr_gid || rgid == cr->cr_sgid) && 2307c478bd9Sstevel@tonic-gate (egid == -1 || egid == cr->cr_rgid || egid == cr->cr_gid || 2317c478bd9Sstevel@tonic-gate egid == cr->cr_sgid) || 2327c478bd9Sstevel@tonic-gate (error = secpolicy_allow_setid(cr, -1, B_FALSE)) == 0) { 2337c478bd9Sstevel@tonic-gate crhold(cr); 2347c478bd9Sstevel@tonic-gate crcopy_to(cr, newcr); 2357c478bd9Sstevel@tonic-gate p->p_cred = newcr; 2367c478bd9Sstevel@tonic-gate 237f48205beScasper if (egid != -1) { 2387c478bd9Sstevel@tonic-gate newcr->cr_gid = egid; 239f48205beScasper crsetsid(newcr, ksp, KSID_GROUP); 240f48205beScasper } 2417c478bd9Sstevel@tonic-gate if (rgid != -1) 2427c478bd9Sstevel@tonic-gate newcr->cr_rgid = rgid; 2437c478bd9Sstevel@tonic-gate /* 2447c478bd9Sstevel@tonic-gate * "If the real gid is being changed, or the effective gid is 2457c478bd9Sstevel@tonic-gate * being changed to a value not equal to the real gid, the 2467c478bd9Sstevel@tonic-gate * saved gid is set to the new effective gid." 2477c478bd9Sstevel@tonic-gate */ 2487c478bd9Sstevel@tonic-gate if (rgid != -1 || 2497c478bd9Sstevel@tonic-gate (egid != -1 && newcr->cr_gid != newcr->cr_rgid)) 2507c478bd9Sstevel@tonic-gate newcr->cr_sgid = newcr->cr_gid; 2517c478bd9Sstevel@tonic-gate /* 2527c478bd9Sstevel@tonic-gate * A privileged process that makes itself look like a 2537c478bd9Sstevel@tonic-gate * set-gid process must be marked to produce no core dump. 2547c478bd9Sstevel@tonic-gate */ 2557c478bd9Sstevel@tonic-gate if ((cr->cr_gid != newcr->cr_gid || 2567c478bd9Sstevel@tonic-gate cr->cr_rgid != newcr->cr_rgid || 2577c478bd9Sstevel@tonic-gate cr->cr_sgid != newcr->cr_sgid) && error == 0) 2587c478bd9Sstevel@tonic-gate do_nocd = 1; 2597c478bd9Sstevel@tonic-gate error = 0; 2607c478bd9Sstevel@tonic-gate crfree(cr); 2617c478bd9Sstevel@tonic-gate } 2627c478bd9Sstevel@tonic-gate mutex_exit(&p->p_crlock); 2637c478bd9Sstevel@tonic-gate 2647c478bd9Sstevel@tonic-gate if (error == 0) { 2657c478bd9Sstevel@tonic-gate if (do_nocd) { 2667c478bd9Sstevel@tonic-gate mutex_enter(&p->p_lock); 2677c478bd9Sstevel@tonic-gate p->p_flag |= SNOCD; 2687c478bd9Sstevel@tonic-gate mutex_exit(&p->p_lock); 2697c478bd9Sstevel@tonic-gate } 2707c478bd9Sstevel@tonic-gate crset(p, newcr); /* broadcast to process threads */ 2717c478bd9Sstevel@tonic-gate return (0); 2727c478bd9Sstevel@tonic-gate } 2737c478bd9Sstevel@tonic-gate crfree(newcr); 274f48205beScasper if (ksp != NULL) 275f48205beScasper ksid_rele(ksp); 2767c478bd9Sstevel@tonic-gate return (set_errno(error)); 2777c478bd9Sstevel@tonic-gate } 278