17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*f48205beScasper * Common Development and Distribution License (the "License"). 6*f48205beScasper * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*f48205beScasper * Copyright 2007 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate /* Copyright (c) 1983, 1984, 1985, 1986, 1987, 1988, 1989 AT&T */ 277c478bd9Sstevel@tonic-gate /* All Rights Reserved */ 287c478bd9Sstevel@tonic-gate 297c478bd9Sstevel@tonic-gate /* 307c478bd9Sstevel@tonic-gate * Portions of this source code were derived from Berkeley 4.3 BSD 317c478bd9Sstevel@tonic-gate * under license from the Regents of the University of California. 327c478bd9Sstevel@tonic-gate */ 337c478bd9Sstevel@tonic-gate 347c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 357c478bd9Sstevel@tonic-gate 367c478bd9Sstevel@tonic-gate #include <sys/param.h> 377c478bd9Sstevel@tonic-gate #include <sys/isa_defs.h> 387c478bd9Sstevel@tonic-gate #include <sys/types.h> 397c478bd9Sstevel@tonic-gate #include <sys/sysmacros.h> 407c478bd9Sstevel@tonic-gate #include <sys/systm.h> 417c478bd9Sstevel@tonic-gate #include <sys/errno.h> 427c478bd9Sstevel@tonic-gate #include <sys/fcntl.h> 437c478bd9Sstevel@tonic-gate #include <sys/pathname.h> 447c478bd9Sstevel@tonic-gate #include <sys/var.h> 457c478bd9Sstevel@tonic-gate #include <sys/vfs.h> 467c478bd9Sstevel@tonic-gate #include <sys/vnode.h> 477c478bd9Sstevel@tonic-gate #include <sys/file.h> 487c478bd9Sstevel@tonic-gate #include <sys/mode.h> 497c478bd9Sstevel@tonic-gate #include <sys/proc.h> 507c478bd9Sstevel@tonic-gate #include <sys/uio.h> 517c478bd9Sstevel@tonic-gate #include <sys/filio.h> 527c478bd9Sstevel@tonic-gate #include <sys/fcntl.h> 537c478bd9Sstevel@tonic-gate #include <sys/debug.h> 547c478bd9Sstevel@tonic-gate #include <c2/audit.h> 557c478bd9Sstevel@tonic-gate 567c478bd9Sstevel@tonic-gate /* 577c478bd9Sstevel@tonic-gate * nmflag has the following values 587c478bd9Sstevel@tonic-gate * 597c478bd9Sstevel@tonic-gate * 1 - Always do lookup. i.e. chown, lchown. 607c478bd9Sstevel@tonic-gate * 2 - Name is optional i.e. fchownat 617c478bd9Sstevel@tonic-gate * 0 - Don't lookup name, vp is in file_p. i.e. fchown 627c478bd9Sstevel@tonic-gate * 637c478bd9Sstevel@tonic-gate */ 647c478bd9Sstevel@tonic-gate int 657c478bd9Sstevel@tonic-gate cfchownat(int fd, char *name, int nmflag, uid_t uid, gid_t gid, int flags) 667c478bd9Sstevel@tonic-gate { 677c478bd9Sstevel@tonic-gate vnode_t *startvp, *vp; 687c478bd9Sstevel@tonic-gate file_t *filefp; 697c478bd9Sstevel@tonic-gate struct vattr vattr; 707c478bd9Sstevel@tonic-gate int error = 0; 717c478bd9Sstevel@tonic-gate char startchar; 727c478bd9Sstevel@tonic-gate 73*f48205beScasper if (uid != (uid_t)-1 && !VALID_UID(uid) || 74*f48205beScasper gid != (gid_t)-1 && !VALID_GID(gid)) { 757c478bd9Sstevel@tonic-gate return (set_errno(EINVAL)); 76*f48205beScasper } 777c478bd9Sstevel@tonic-gate vattr.va_uid = uid; 787c478bd9Sstevel@tonic-gate vattr.va_gid = gid; 797c478bd9Sstevel@tonic-gate vattr.va_mask = 0; 807c478bd9Sstevel@tonic-gate if (vattr.va_uid != -1) 817c478bd9Sstevel@tonic-gate vattr.va_mask |= AT_UID; 827c478bd9Sstevel@tonic-gate if (vattr.va_gid != -1) 837c478bd9Sstevel@tonic-gate vattr.va_mask |= AT_GID; 847c478bd9Sstevel@tonic-gate 857c478bd9Sstevel@tonic-gate 867c478bd9Sstevel@tonic-gate if (fd == AT_FDCWD && name == NULL) 877c478bd9Sstevel@tonic-gate return (set_errno(EFAULT)); 887c478bd9Sstevel@tonic-gate 897c478bd9Sstevel@tonic-gate if (nmflag == 1 || (nmflag == 2 && name != NULL)) { 907c478bd9Sstevel@tonic-gate if (copyin(name, &startchar, sizeof (char))) 917c478bd9Sstevel@tonic-gate return (set_errno(EFAULT)); 927c478bd9Sstevel@tonic-gate } else 937c478bd9Sstevel@tonic-gate startchar = '\0'; 947c478bd9Sstevel@tonic-gate 957c478bd9Sstevel@tonic-gate 967c478bd9Sstevel@tonic-gate if (fd == AT_FDCWD) 977c478bd9Sstevel@tonic-gate startvp = NULL; 987c478bd9Sstevel@tonic-gate else { 997c478bd9Sstevel@tonic-gate /* 1007c478bd9Sstevel@tonic-gate * only get fd if not doing absolute lookup 1017c478bd9Sstevel@tonic-gate */ 1027c478bd9Sstevel@tonic-gate if (startchar != '/' || nmflag == 0) { 1037c478bd9Sstevel@tonic-gate if ((filefp = getf(fd)) == NULL) { 1047c478bd9Sstevel@tonic-gate return (set_errno(EBADF)); 1057c478bd9Sstevel@tonic-gate } 1067c478bd9Sstevel@tonic-gate startvp = filefp->f_vnode; 1077c478bd9Sstevel@tonic-gate VN_HOLD(startvp); 1087c478bd9Sstevel@tonic-gate releasef(fd); 1097c478bd9Sstevel@tonic-gate } else { 1107c478bd9Sstevel@tonic-gate startvp = NULL; 1117c478bd9Sstevel@tonic-gate } 1127c478bd9Sstevel@tonic-gate } 1137c478bd9Sstevel@tonic-gate 1147c478bd9Sstevel@tonic-gate #if C2_AUDIT 1157c478bd9Sstevel@tonic-gate if ((nmflag == 2) && audit_active) 1167c478bd9Sstevel@tonic-gate audit_setfsat_path(1); 1177c478bd9Sstevel@tonic-gate #endif /* C2_AUDIT */ 1187c478bd9Sstevel@tonic-gate 1197c478bd9Sstevel@tonic-gate /* 1207c478bd9Sstevel@tonic-gate * Do lookups for chown, lchown and fchownat when name not NULL 1217c478bd9Sstevel@tonic-gate */ 1227c478bd9Sstevel@tonic-gate if ((nmflag == 2 && name != NULL) || nmflag == 1) { 1237c478bd9Sstevel@tonic-gate if (error = lookupnameat(name, UIO_USERSPACE, 1247c478bd9Sstevel@tonic-gate (flags == AT_SYMLINK_NOFOLLOW) ? 1257c478bd9Sstevel@tonic-gate NO_FOLLOW : FOLLOW, 1267c478bd9Sstevel@tonic-gate NULLVPP, &vp, startvp)) { 1277c478bd9Sstevel@tonic-gate if (startvp != NULL) 1287c478bd9Sstevel@tonic-gate VN_RELE(startvp); 1297c478bd9Sstevel@tonic-gate return (set_errno(error)); 1307c478bd9Sstevel@tonic-gate } 1317c478bd9Sstevel@tonic-gate } else { 1327c478bd9Sstevel@tonic-gate vp = startvp; 1337c478bd9Sstevel@tonic-gate ASSERT(vp); 1347c478bd9Sstevel@tonic-gate VN_HOLD(vp); 1357c478bd9Sstevel@tonic-gate } 1367c478bd9Sstevel@tonic-gate 1377c478bd9Sstevel@tonic-gate if (vn_is_readonly(vp)) { 1387c478bd9Sstevel@tonic-gate error = EROFS; 1397c478bd9Sstevel@tonic-gate } else { 1407c478bd9Sstevel@tonic-gate error = VOP_SETATTR(vp, &vattr, 0, CRED(), NULL); 1417c478bd9Sstevel@tonic-gate } 1427c478bd9Sstevel@tonic-gate 1437c478bd9Sstevel@tonic-gate if (startvp != NULL) 1447c478bd9Sstevel@tonic-gate VN_RELE(startvp); 1457c478bd9Sstevel@tonic-gate if (vp != NULL) 1467c478bd9Sstevel@tonic-gate VN_RELE(vp); 1477c478bd9Sstevel@tonic-gate 1487c478bd9Sstevel@tonic-gate if (error != 0) 1497c478bd9Sstevel@tonic-gate return (set_errno(error)); 1507c478bd9Sstevel@tonic-gate else 1517c478bd9Sstevel@tonic-gate return (error); 1527c478bd9Sstevel@tonic-gate } 1537c478bd9Sstevel@tonic-gate /* 1547c478bd9Sstevel@tonic-gate * Change ownership of file given file name. 1557c478bd9Sstevel@tonic-gate */ 1567c478bd9Sstevel@tonic-gate int 1577c478bd9Sstevel@tonic-gate chown(char *fname, uid_t uid, gid_t gid) 1587c478bd9Sstevel@tonic-gate { 1597c478bd9Sstevel@tonic-gate return (cfchownat(AT_FDCWD, fname, 1, uid, gid, 0)); 1607c478bd9Sstevel@tonic-gate } 1617c478bd9Sstevel@tonic-gate 1627c478bd9Sstevel@tonic-gate int 1637c478bd9Sstevel@tonic-gate lchown(char *fname, uid_t uid, gid_t gid) 1647c478bd9Sstevel@tonic-gate { 1657c478bd9Sstevel@tonic-gate return (cfchownat(AT_FDCWD, fname, 1, uid, gid, AT_SYMLINK_NOFOLLOW)); 1667c478bd9Sstevel@tonic-gate } 1677c478bd9Sstevel@tonic-gate 1687c478bd9Sstevel@tonic-gate /* 1697c478bd9Sstevel@tonic-gate * Change ownership of file given file descriptor. 1707c478bd9Sstevel@tonic-gate */ 1717c478bd9Sstevel@tonic-gate int 1727c478bd9Sstevel@tonic-gate fchown(int fd, uid_t uid, uid_t gid) 1737c478bd9Sstevel@tonic-gate { 1747c478bd9Sstevel@tonic-gate return (cfchownat(fd, NULL, 0, uid, gid, 0)); 1757c478bd9Sstevel@tonic-gate } 1767c478bd9Sstevel@tonic-gate 1777c478bd9Sstevel@tonic-gate int 1787c478bd9Sstevel@tonic-gate fchownat(int fd, char *name, uid_t uid, gid_t gid, int flags) 1797c478bd9Sstevel@tonic-gate { 1807c478bd9Sstevel@tonic-gate return (cfchownat(fd, name, 2, uid, gid, flags)); 1817c478bd9Sstevel@tonic-gate 1827c478bd9Sstevel@tonic-gate } 183