veriexec.c revision 1.1.18.2
1 1.1.18.2 jdolecek /* $NetBSD: veriexec.c,v 1.1.18.2 2017/12/03 11:36:58 jdolecek Exp $ */ 2 1.1.18.2 jdolecek 3 1.1.18.2 jdolecek /*- 4 1.1.18.2 jdolecek * Copyright (c) 2005, 2006 Elad Efrat <elad (at) NetBSD.org> 5 1.1.18.2 jdolecek * Copyright (c) 2005, 2006 Brett Lymn <blymn (at) NetBSD.org> 6 1.1.18.2 jdolecek * All rights reserved. 7 1.1.18.2 jdolecek * 8 1.1.18.2 jdolecek * Redistribution and use in source and binary forms, with or without 9 1.1.18.2 jdolecek * modification, are permitted provided that the following conditions 10 1.1.18.2 jdolecek * are met: 11 1.1.18.2 jdolecek * 1. Redistributions of source code must retain the above copyright 12 1.1.18.2 jdolecek * notice, this list of conditions and the following disclaimer. 13 1.1.18.2 jdolecek * 2. Redistributions in binary form must reproduce the above copyright 14 1.1.18.2 jdolecek * notice, this list of conditions and the following disclaimer in the 15 1.1.18.2 jdolecek * documentation and/or other materials provided with the distribution. 16 1.1.18.2 jdolecek * 3. The name of the authors may not be used to endorse or promote products 17 1.1.18.2 jdolecek * derived from this software without specific prior written permission. 18 1.1.18.2 jdolecek * 19 1.1.18.2 jdolecek * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ``AS IS'' AND ANY EXPRESS OR 20 1.1.18.2 jdolecek * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 21 1.1.18.2 jdolecek * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 22 1.1.18.2 jdolecek * IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY DIRECT, INDIRECT, 23 1.1.18.2 jdolecek * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 24 1.1.18.2 jdolecek * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 25 1.1.18.2 jdolecek * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 26 1.1.18.2 jdolecek * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 27 1.1.18.2 jdolecek * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 28 1.1.18.2 jdolecek * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 29 1.1.18.2 jdolecek */ 30 1.1.18.2 jdolecek 31 1.1.18.2 jdolecek #include <sys/cdefs.h> 32 1.1.18.2 jdolecek __KERNEL_RCSID(0, "$NetBSD: veriexec.c,v 1.1.18.2 2017/12/03 11:36:58 jdolecek Exp $"); 33 1.1.18.2 jdolecek 34 1.1.18.2 jdolecek #include <sys/param.h> 35 1.1.18.2 jdolecek #include <sys/errno.h> 36 1.1.18.2 jdolecek #include <sys/conf.h> 37 1.1.18.2 jdolecek #include <sys/vnode.h> 38 1.1.18.2 jdolecek #include <sys/fcntl.h> 39 1.1.18.2 jdolecek #include <sys/namei.h> 40 1.1.18.2 jdolecek #include <sys/verified_exec.h> 41 1.1.18.2 jdolecek #include <sys/kauth.h> 42 1.1.18.2 jdolecek #include <sys/syslog.h> 43 1.1.18.2 jdolecek #include <sys/proc.h> 44 1.1.18.2 jdolecek 45 1.1.18.2 jdolecek #include <sys/ioctl.h> 46 1.1.18.2 jdolecek #include <sys/device.h> 47 1.1.18.2 jdolecek #define DEVPORT_DEVICE struct device 48 1.1.18.2 jdolecek 49 1.1.18.2 jdolecek #include <prop/proplib.h> 50 1.1.18.2 jdolecek 51 1.1.18.2 jdolecek void veriexecattach(device_t, device_t, void *); 52 1.1.18.2 jdolecek static dev_type_open(veriexecopen); 53 1.1.18.2 jdolecek static dev_type_close(veriexecclose); 54 1.1.18.2 jdolecek static dev_type_ioctl(veriexecioctl); 55 1.1.18.2 jdolecek 56 1.1.18.2 jdolecek struct veriexec_softc { 57 1.1.18.2 jdolecek DEVPORT_DEVICE veriexec_dev; 58 1.1.18.2 jdolecek }; 59 1.1.18.2 jdolecek 60 1.1.18.2 jdolecek const struct cdevsw veriexec_cdevsw = { 61 1.1.18.2 jdolecek .d_open = veriexecopen, 62 1.1.18.2 jdolecek .d_close = veriexecclose, 63 1.1.18.2 jdolecek .d_read = noread, 64 1.1.18.2 jdolecek .d_write = nowrite, 65 1.1.18.2 jdolecek .d_ioctl = veriexecioctl, 66 1.1.18.2 jdolecek .d_stop = nostop, 67 1.1.18.2 jdolecek .d_tty = notty, 68 1.1.18.2 jdolecek .d_poll = nopoll, 69 1.1.18.2 jdolecek .d_mmap = nommap, 70 1.1.18.2 jdolecek .d_discard = nodiscard, 71 1.1.18.2 jdolecek .d_kqfilter = nokqfilter, 72 1.1.18.2 jdolecek .d_flag = D_OTHER, 73 1.1.18.2 jdolecek }; 74 1.1.18.2 jdolecek 75 1.1.18.2 jdolecek /* count of number of times device is open (we really only allow one open) */ 76 1.1.18.2 jdolecek static unsigned int veriexec_dev_usage = 0; 77 1.1.18.2 jdolecek 78 1.1.18.2 jdolecek void 79 1.1.18.2 jdolecek veriexecattach(DEVPORT_DEVICE *parent, DEVPORT_DEVICE *self, void *aux) 80 1.1.18.2 jdolecek { 81 1.1.18.2 jdolecek veriexec_dev_usage = 0; 82 1.1.18.2 jdolecek } 83 1.1.18.2 jdolecek 84 1.1.18.2 jdolecek static int 85 1.1.18.2 jdolecek veriexecopen(dev_t dev, int flags, int fmt, struct lwp *l) 86 1.1.18.2 jdolecek { 87 1.1.18.2 jdolecek if (kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_VERIEXEC, 88 1.1.18.2 jdolecek KAUTH_REQ_SYSTEM_VERIEXEC_ACCESS, NULL, NULL, NULL)) 89 1.1.18.2 jdolecek return (EPERM); 90 1.1.18.2 jdolecek 91 1.1.18.2 jdolecek if (veriexec_dev_usage > 0) 92 1.1.18.2 jdolecek return(EBUSY); 93 1.1.18.2 jdolecek 94 1.1.18.2 jdolecek veriexec_dev_usage++; 95 1.1.18.2 jdolecek return (0); 96 1.1.18.2 jdolecek } 97 1.1.18.2 jdolecek 98 1.1.18.2 jdolecek static int 99 1.1.18.2 jdolecek veriexecclose(dev_t dev, int flags, int fmt, struct lwp *l) 100 1.1.18.2 jdolecek { 101 1.1.18.2 jdolecek if (veriexec_dev_usage > 0) 102 1.1.18.2 jdolecek veriexec_dev_usage--; 103 1.1.18.2 jdolecek return (0); 104 1.1.18.2 jdolecek } 105 1.1.18.2 jdolecek 106 1.1.18.2 jdolecek static int 107 1.1.18.2 jdolecek veriexec_delete(prop_dictionary_t dict, struct lwp *l) 108 1.1.18.2 jdolecek { 109 1.1.18.2 jdolecek struct vnode *vp; 110 1.1.18.2 jdolecek const char *file; 111 1.1.18.2 jdolecek int error; 112 1.1.18.2 jdolecek 113 1.1.18.2 jdolecek if (!prop_dictionary_get_cstring_nocopy(dict, "file", &file)) 114 1.1.18.2 jdolecek return (EINVAL); 115 1.1.18.2 jdolecek 116 1.1.18.2 jdolecek error = namei_simple_kernel(file, NSM_FOLLOW_NOEMULROOT, &vp); 117 1.1.18.2 jdolecek if (error) 118 1.1.18.2 jdolecek return (error); 119 1.1.18.2 jdolecek 120 1.1.18.2 jdolecek /* XXX this should be done differently... */ 121 1.1.18.2 jdolecek if (vp->v_type == VREG) 122 1.1.18.2 jdolecek error = veriexec_file_delete(l, vp); 123 1.1.18.2 jdolecek else if (vp->v_type == VDIR) 124 1.1.18.2 jdolecek error = veriexec_table_delete(l, vp->v_mount); 125 1.1.18.2 jdolecek 126 1.1.18.2 jdolecek vrele(vp); 127 1.1.18.2 jdolecek 128 1.1.18.2 jdolecek return (error); 129 1.1.18.2 jdolecek } 130 1.1.18.2 jdolecek 131 1.1.18.2 jdolecek static int 132 1.1.18.2 jdolecek veriexec_query(prop_dictionary_t dict, prop_dictionary_t rdict, struct lwp *l) 133 1.1.18.2 jdolecek { 134 1.1.18.2 jdolecek struct vnode *vp; 135 1.1.18.2 jdolecek const char *file; 136 1.1.18.2 jdolecek int error; 137 1.1.18.2 jdolecek 138 1.1.18.2 jdolecek if (!prop_dictionary_get_cstring_nocopy(dict, "file", &file)) 139 1.1.18.2 jdolecek return (EINVAL); 140 1.1.18.2 jdolecek 141 1.1.18.2 jdolecek error = namei_simple_kernel(file, NSM_FOLLOW_NOEMULROOT, &vp); 142 1.1.18.2 jdolecek if (error) 143 1.1.18.2 jdolecek return (error); 144 1.1.18.2 jdolecek 145 1.1.18.2 jdolecek error = veriexec_convert(vp, rdict); 146 1.1.18.2 jdolecek 147 1.1.18.2 jdolecek vrele(vp); 148 1.1.18.2 jdolecek 149 1.1.18.2 jdolecek return (error); 150 1.1.18.2 jdolecek } 151 1.1.18.2 jdolecek 152 1.1.18.2 jdolecek int 153 1.1.18.2 jdolecek veriexecioctl(dev_t dev, u_long cmd, void *data, int flags, struct lwp *l) 154 1.1.18.2 jdolecek { 155 1.1.18.2 jdolecek struct plistref *plistref; 156 1.1.18.2 jdolecek prop_dictionary_t dict; 157 1.1.18.2 jdolecek int error = 0; 158 1.1.18.2 jdolecek 159 1.1.18.2 jdolecek switch (cmd) { 160 1.1.18.2 jdolecek case VERIEXEC_TABLESIZE: 161 1.1.18.2 jdolecek case VERIEXEC_LOAD: 162 1.1.18.2 jdolecek case VERIEXEC_DELETE: 163 1.1.18.2 jdolecek case VERIEXEC_FLUSH: 164 1.1.18.2 jdolecek if (!(flags & FWRITE)) 165 1.1.18.2 jdolecek return (EPERM); 166 1.1.18.2 jdolecek 167 1.1.18.2 jdolecek error = kauth_authorize_system(l->l_cred, KAUTH_SYSTEM_VERIEXEC, 168 1.1.18.2 jdolecek KAUTH_REQ_SYSTEM_VERIEXEC_MODIFY, KAUTH_ARG(cmd), NULL, 169 1.1.18.2 jdolecek NULL); 170 1.1.18.2 jdolecek if (error) 171 1.1.18.2 jdolecek return error; 172 1.1.18.2 jdolecek 173 1.1.18.2 jdolecek break; 174 1.1.18.2 jdolecek 175 1.1.18.2 jdolecek case VERIEXEC_QUERY: 176 1.1.18.2 jdolecek case VERIEXEC_DUMP: 177 1.1.18.2 jdolecek if (!(flags & FREAD)) 178 1.1.18.2 jdolecek return (EPERM); 179 1.1.18.2 jdolecek 180 1.1.18.2 jdolecek break; 181 1.1.18.2 jdolecek 182 1.1.18.2 jdolecek default: 183 1.1.18.2 jdolecek /* Invalid operation. */ 184 1.1.18.2 jdolecek return (ENODEV); 185 1.1.18.2 jdolecek } 186 1.1.18.2 jdolecek 187 1.1.18.2 jdolecek plistref = (struct plistref *)data; 188 1.1.18.2 jdolecek 189 1.1.18.2 jdolecek switch (cmd) { 190 1.1.18.2 jdolecek case VERIEXEC_TABLESIZE: 191 1.1.18.2 jdolecek /* Do nothing. Kept for binary compatibility. */ 192 1.1.18.2 jdolecek break; 193 1.1.18.2 jdolecek 194 1.1.18.2 jdolecek case VERIEXEC_LOAD: 195 1.1.18.2 jdolecek error = prop_dictionary_copyin_ioctl(plistref, cmd, &dict); 196 1.1.18.2 jdolecek if (error) 197 1.1.18.2 jdolecek break; 198 1.1.18.2 jdolecek 199 1.1.18.2 jdolecek error = veriexec_file_add(l, dict); 200 1.1.18.2 jdolecek prop_object_release(dict); 201 1.1.18.2 jdolecek break; 202 1.1.18.2 jdolecek 203 1.1.18.2 jdolecek case VERIEXEC_DELETE: 204 1.1.18.2 jdolecek error = prop_dictionary_copyin_ioctl(plistref, cmd, &dict); 205 1.1.18.2 jdolecek if (error) 206 1.1.18.2 jdolecek break; 207 1.1.18.2 jdolecek 208 1.1.18.2 jdolecek error = veriexec_delete(dict, l); 209 1.1.18.2 jdolecek prop_object_release(dict); 210 1.1.18.2 jdolecek break; 211 1.1.18.2 jdolecek 212 1.1.18.2 jdolecek case VERIEXEC_QUERY: { 213 1.1.18.2 jdolecek prop_dictionary_t rdict; 214 1.1.18.2 jdolecek 215 1.1.18.2 jdolecek error = prop_dictionary_copyin_ioctl(plistref, cmd, &dict); 216 1.1.18.2 jdolecek if (error) 217 1.1.18.2 jdolecek return (error); 218 1.1.18.2 jdolecek 219 1.1.18.2 jdolecek rdict = prop_dictionary_create(); 220 1.1.18.2 jdolecek if (rdict == NULL) { 221 1.1.18.2 jdolecek prop_object_release(dict); 222 1.1.18.2 jdolecek error = ENOMEM; 223 1.1.18.2 jdolecek break; 224 1.1.18.2 jdolecek } 225 1.1.18.2 jdolecek 226 1.1.18.2 jdolecek error = veriexec_query(dict, rdict, l); 227 1.1.18.2 jdolecek if (error == 0) { 228 1.1.18.2 jdolecek error = prop_dictionary_copyout_ioctl(plistref, cmd, 229 1.1.18.2 jdolecek rdict); 230 1.1.18.2 jdolecek } 231 1.1.18.2 jdolecek 232 1.1.18.2 jdolecek prop_object_release(rdict); 233 1.1.18.2 jdolecek prop_object_release(dict); 234 1.1.18.2 jdolecek 235 1.1.18.2 jdolecek break; 236 1.1.18.2 jdolecek } 237 1.1.18.2 jdolecek 238 1.1.18.2 jdolecek case VERIEXEC_DUMP: { 239 1.1.18.2 jdolecek prop_array_t rarray; 240 1.1.18.2 jdolecek 241 1.1.18.2 jdolecek rarray = prop_array_create(); 242 1.1.18.2 jdolecek if (rarray == NULL) { 243 1.1.18.2 jdolecek error = ENOMEM; 244 1.1.18.2 jdolecek break; 245 1.1.18.2 jdolecek } 246 1.1.18.2 jdolecek 247 1.1.18.2 jdolecek error = veriexec_dump(l, rarray); 248 1.1.18.2 jdolecek if (error == 0) { 249 1.1.18.2 jdolecek error = prop_array_copyout_ioctl(plistref, cmd, 250 1.1.18.2 jdolecek rarray); 251 1.1.18.2 jdolecek } 252 1.1.18.2 jdolecek 253 1.1.18.2 jdolecek prop_object_release(rarray); 254 1.1.18.2 jdolecek 255 1.1.18.2 jdolecek break; 256 1.1.18.2 jdolecek } 257 1.1.18.2 jdolecek 258 1.1.18.2 jdolecek case VERIEXEC_FLUSH: 259 1.1.18.2 jdolecek error = veriexec_flush(l); 260 1.1.18.2 jdolecek break; 261 1.1.18.2 jdolecek 262 1.1.18.2 jdolecek default: 263 1.1.18.2 jdolecek /* Invalid operation. */ 264 1.1.18.2 jdolecek error = ENODEV; 265 1.1.18.2 jdolecek break; 266 1.1.18.2 jdolecek } 267 1.1.18.2 jdolecek 268 1.1.18.2 jdolecek return (error); 269 1.1.18.2 jdolecek } 270 1.1.18.2 jdolecek 271
Indexes created Thu Oct 23 18:09:57 GMT 2025