xref: /illumos-gate/usr/src/uts/common/sys/priv_impl.h (revision 7c478bd9)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License, Version 1.0 only
6  * (the "License").  You may not use this file except in compliance
7  * with the License.
8  *
9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10  * or http://www.opensolaris.org/os/licensing.
11  * See the License for the specific language governing permissions
12  * and limitations under the License.
13  *
14  * When distributing Covered Code, include this CDDL HEADER in each
15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16  * If applicable, add the following below this CDDL HEADER, with the
17  * fields enclosed by brackets "[]" replaced with your own identifying
18  * information: Portions Copyright [yyyy] [name of copyright owner]
19  *
20  * CDDL HEADER END
21  */
22 /*
23  * Copyright 2003 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 #ifndef	_SYS_PRIV_IMPL_H
28 #define	_SYS_PRIV_IMPL_H
29 
30 #pragma ident	"%Z%%M%	%I%	%E% SMI"
31 
32 #include <sys/priv_const.h>
33 #include <sys/priv.h>
34 
35 #ifdef	__cplusplus
36 extern "C" {
37 #endif
38 
39 #if defined(_KERNEL) || defined(_KMEMUSER)
40 /*
41  * priv_set_t is a structure holding a set of privileges
42  */
43 
44 struct priv_set {
45 	priv_chunk_t pbits[PRIV_SETSIZE];
46 };
47 
48 typedef struct cred_priv_s {
49 	priv_set_t	crprivs[PRIV_NSET];	/* Priv sets */
50 	uint_t		crpriv_flags;		/* Privilege flags */
51 } cred_priv_t;
52 
53 #endif
54 
55 #ifdef _KERNEL
56 
57 extern priv_set_t *priv_basic;
58 extern priv_set_t priv_unsafe;
59 extern priv_set_t priv_fullset;
60 extern void priv_init(void);
61 
62 /* The CR_PRIVS macro is defined in <sys/cred_impl.h> */
63 #define	CR_EPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_EFFECTIVE])
64 #define	CR_IPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_INHERITABLE])
65 #define	CR_PPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_PERMITTED])
66 #define	CR_LPRIV(c)	(CR_PRIVS(c)->crprivs[PRIV_LIMIT])
67 
68 #define	CR_FLAGS(c)	(CR_PRIVS(c)->crpriv_flags)
69 
70 #define	PRIV_SETBYTES	(PRIV_NSET * PRIV_SETSIZE * sizeof (priv_chunk_t))
71 
72 #define	PRIV_EISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || (c)->cr_uid != 0)
73 #define	PRIV_PISAWARE(c) ((CR_FLAGS(c) & PRIV_AWARE) || \
74 				((c)->cr_uid != 0 && (c)->cr_suid != 0 && \
75 				(c)->cr_ruid != 0))
76 
77 #define	CR_OEPRIV(c)	(*(PRIV_EISAWARE(c) ? &CR_EPRIV(c) : &CR_LPRIV(c)))
78 #define	CR_OPPRIV(c)	(*(PRIV_PISAWARE(c) ? &CR_PPRIV(c) : &CR_LPRIV(c)))
79 
80 #define	PRIV_VALIDSET(s)	((s) >= 0 && (s) < PRIV_NSET)
81 #define	PRIV_VALIDOP(op)	((op) >= PRIV_ON && (op) <= PRIV_SET)
82 
83 #define	PRIV_FULLSET		&priv_fullset	/* Require full set */
84 
85 /*
86  * Privilege macros bits manipulation macros; DEBUG kernels will
87  * ASSERT() that privileges are not out of range.
88  */
89 #ifndef	NBBY
90 #define	NBBY		8
91 #endif
92 
93 #define	__NBWRD		(NBBY * sizeof (priv_chunk_t))
94 
95 #define	privmask(n)	(1U << ((__NBWRD - 1) - ((n) % __NBWRD)))
96 #define	privword(n)	((n)/__NBWRD)
97 
98 /*
99  * PRIV_ASSERT(a, b) sets privilege "b" in privilege set "a".
100  * PRIV_CLEAR(a,b) clears privilege "b" in privilege set "a".
101  * PRIV_ISASSERT tests if privilege 'b' is asserted in privilege set 'a'.
102  */
103 
104 #define	__PRIV_ASSERT(a, b)	((a)->pbits[privword(b)] |= privmask(b))
105 #define	__PRIV_CLEAR(a, b)	((a)->pbits[privword(b)] &= ~privmask(b))
106 #define	__PRIV_ISASSERT(a, b)	((a)->pbits[privword(b)] & privmask(b))
107 
108 #ifdef DEBUG
109 #define	PRIV_CLEAR(a, b)	priv_delset((a), (b))
110 #define	PRIV_ASSERT(a, b)	priv_addset((a), (b))
111 #define	PRIV_ISASSERT(a, b)	priv_ismember((a), (b))
112 #else
113 #define	PRIV_CLEAR(a, b)	__PRIV_CLEAR((a), (b))
114 #define	PRIV_ASSERT(a, b)	__PRIV_ASSERT((a), (b))
115 #define	PRIV_ISASSERT(a, b)	__PRIV_ISASSERT((a), (b))
116 #endif
117 
118 #endif /* _KERNEL */
119 
120 #ifdef	__cplusplus
121 }
122 #endif
123 
124 #endif	/* _SYS_PRIV_IMPL_H */
125