kern_resource.c revision 1.19 1 1.17 cgd /*-
2 1.19 cgd * Copyright (c) 1982, 1986, 1991, 1993
3 1.19 cgd * The Regents of the University of California. All rights reserved.
4 1.17 cgd * (c) UNIX System Laboratories, Inc.
5 1.17 cgd * All or some portions of this file are derived from material licensed
6 1.17 cgd * to the University of California by American Telephone and Telegraph
7 1.17 cgd * Co. or Unix System Laboratories, Inc. and are reproduced herein with
8 1.17 cgd * the permission of UNIX System Laboratories, Inc.
9 1.17 cgd *
10 1.17 cgd * Redistribution and use in source and binary forms, with or without
11 1.17 cgd * modification, are permitted provided that the following conditions
12 1.17 cgd * are met:
13 1.17 cgd * 1. Redistributions of source code must retain the above copyright
14 1.17 cgd * notice, this list of conditions and the following disclaimer.
15 1.17 cgd * 2. Redistributions in binary form must reproduce the above copyright
16 1.17 cgd * notice, this list of conditions and the following disclaimer in the
17 1.17 cgd * documentation and/or other materials provided with the distribution.
18 1.17 cgd * 3. All advertising materials mentioning features or use of this software
19 1.17 cgd * must display the following acknowledgement:
20 1.17 cgd * This product includes software developed by the University of
21 1.17 cgd * California, Berkeley and its contributors.
22 1.17 cgd * 4. Neither the name of the University nor the names of its contributors
23 1.17 cgd * may be used to endorse or promote products derived from this software
24 1.17 cgd * without specific prior written permission.
25 1.17 cgd *
26 1.17 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
27 1.17 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
28 1.17 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
29 1.17 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
30 1.17 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31 1.17 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32 1.17 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33 1.17 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34 1.17 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35 1.17 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 1.17 cgd * SUCH DAMAGE.
37 1.17 cgd *
38 1.19 cgd * from: @(#)kern_resource.c 8.5 (Berkeley) 1/21/94
39 1.19 cgd * $Id: kern_resource.c,v 1.19 1994/05/19 08:13:22 cgd Exp $
40 1.17 cgd */
41 1.17 cgd
42 1.17 cgd #include <sys/param.h>
43 1.17 cgd #include <sys/kernel.h>
44 1.19 cgd #include <sys/file.h>
45 1.17 cgd #include <sys/resourcevar.h>
46 1.17 cgd #include <sys/malloc.h>
47 1.17 cgd #include <sys/proc.h>
48 1.17 cgd
49 1.17 cgd #include <vm/vm.h>
50 1.17 cgd
51 1.17 cgd /*
52 1.17 cgd * Resource controls and accounting.
53 1.17 cgd */
54 1.17 cgd
55 1.17 cgd struct getpriority_args {
56 1.17 cgd int which;
57 1.17 cgd int who;
58 1.17 cgd };
59 1.17 cgd getpriority(curp, uap, retval)
60 1.17 cgd struct proc *curp;
61 1.17 cgd register struct getpriority_args *uap;
62 1.17 cgd int *retval;
63 1.17 cgd {
64 1.17 cgd register struct proc *p;
65 1.17 cgd register int low = PRIO_MAX + 1;
66 1.17 cgd
67 1.17 cgd switch (uap->which) {
68 1.17 cgd
69 1.17 cgd case PRIO_PROCESS:
70 1.17 cgd if (uap->who == 0)
71 1.17 cgd p = curp;
72 1.17 cgd else
73 1.17 cgd p = pfind(uap->who);
74 1.17 cgd if (p == 0)
75 1.17 cgd break;
76 1.17 cgd low = p->p_nice;
77 1.17 cgd break;
78 1.17 cgd
79 1.17 cgd case PRIO_PGRP: {
80 1.17 cgd register struct pgrp *pg;
81 1.17 cgd
82 1.17 cgd if (uap->who == 0)
83 1.17 cgd pg = curp->p_pgrp;
84 1.17 cgd else if ((pg = pgfind(uap->who)) == NULL)
85 1.17 cgd break;
86 1.17 cgd for (p = pg->pg_mem; p != NULL; p = p->p_pgrpnxt) {
87 1.17 cgd if (p->p_nice < low)
88 1.17 cgd low = p->p_nice;
89 1.17 cgd }
90 1.17 cgd break;
91 1.17 cgd }
92 1.17 cgd
93 1.17 cgd case PRIO_USER:
94 1.17 cgd if (uap->who == 0)
95 1.17 cgd uap->who = curp->p_ucred->cr_uid;
96 1.17 cgd for (p = (struct proc *)allproc; p != NULL; p = p->p_next) {
97 1.17 cgd if (p->p_ucred->cr_uid == uap->who &&
98 1.17 cgd p->p_nice < low)
99 1.17 cgd low = p->p_nice;
100 1.17 cgd }
101 1.17 cgd break;
102 1.17 cgd
103 1.17 cgd default:
104 1.17 cgd return (EINVAL);
105 1.17 cgd }
106 1.17 cgd if (low == PRIO_MAX + 1)
107 1.17 cgd return (ESRCH);
108 1.17 cgd *retval = low;
109 1.17 cgd return (0);
110 1.17 cgd }
111 1.17 cgd
112 1.17 cgd struct setpriority_args {
113 1.17 cgd int which;
114 1.17 cgd int who;
115 1.17 cgd int prio;
116 1.17 cgd };
117 1.17 cgd /* ARGSUSED */
118 1.17 cgd setpriority(curp, uap, retval)
119 1.17 cgd struct proc *curp;
120 1.17 cgd register struct setpriority_args *uap;
121 1.17 cgd int *retval;
122 1.17 cgd {
123 1.17 cgd register struct proc *p;
124 1.17 cgd int found = 0, error = 0;
125 1.17 cgd
126 1.17 cgd switch (uap->which) {
127 1.17 cgd
128 1.17 cgd case PRIO_PROCESS:
129 1.17 cgd if (uap->who == 0)
130 1.17 cgd p = curp;
131 1.17 cgd else
132 1.17 cgd p = pfind(uap->who);
133 1.17 cgd if (p == 0)
134 1.17 cgd break;
135 1.17 cgd error = donice(curp, p, uap->prio);
136 1.17 cgd found++;
137 1.17 cgd break;
138 1.17 cgd
139 1.17 cgd case PRIO_PGRP: {
140 1.17 cgd register struct pgrp *pg;
141 1.17 cgd
142 1.17 cgd if (uap->who == 0)
143 1.17 cgd pg = curp->p_pgrp;
144 1.17 cgd else if ((pg = pgfind(uap->who)) == NULL)
145 1.17 cgd break;
146 1.17 cgd for (p = pg->pg_mem; p != NULL; p = p->p_pgrpnxt) {
147 1.17 cgd error = donice(curp, p, uap->prio);
148 1.17 cgd found++;
149 1.17 cgd }
150 1.17 cgd break;
151 1.17 cgd }
152 1.17 cgd
153 1.17 cgd case PRIO_USER:
154 1.17 cgd if (uap->who == 0)
155 1.17 cgd uap->who = curp->p_ucred->cr_uid;
156 1.17 cgd for (p = (struct proc *)allproc; p != NULL; p = p->p_next)
157 1.17 cgd if (p->p_ucred->cr_uid == uap->who) {
158 1.17 cgd error = donice(curp, p, uap->prio);
159 1.17 cgd found++;
160 1.17 cgd }
161 1.17 cgd break;
162 1.17 cgd
163 1.17 cgd default:
164 1.17 cgd return (EINVAL);
165 1.17 cgd }
166 1.17 cgd if (found == 0)
167 1.17 cgd return (ESRCH);
168 1.17 cgd return (error);
169 1.17 cgd }
170 1.17 cgd
171 1.17 cgd donice(curp, chgp, n)
172 1.17 cgd register struct proc *curp, *chgp;
173 1.17 cgd register int n;
174 1.17 cgd {
175 1.17 cgd register struct pcred *pcred = curp->p_cred;
176 1.17 cgd
177 1.17 cgd if (pcred->pc_ucred->cr_uid && pcred->p_ruid &&
178 1.17 cgd pcred->pc_ucred->cr_uid != chgp->p_ucred->cr_uid &&
179 1.17 cgd pcred->p_ruid != chgp->p_ucred->cr_uid)
180 1.17 cgd return (EPERM);
181 1.17 cgd if (n > PRIO_MAX)
182 1.17 cgd n = PRIO_MAX;
183 1.17 cgd if (n < PRIO_MIN)
184 1.17 cgd n = PRIO_MIN;
185 1.17 cgd if (n < chgp->p_nice && suser(pcred->pc_ucred, &curp->p_acflag))
186 1.17 cgd return (EACCES);
187 1.17 cgd chgp->p_nice = n;
188 1.19 cgd (void)resetpriority(chgp);
189 1.17 cgd return (0);
190 1.17 cgd }
191 1.17 cgd
192 1.17 cgd #if defined(COMPAT_43) || defined(COMPAT_SUNOS)
193 1.17 cgd struct osetrlimit_args {
194 1.17 cgd u_int which;
195 1.17 cgd struct orlimit *lim;
196 1.17 cgd };
197 1.17 cgd /* ARGSUSED */
198 1.17 cgd osetrlimit(p, uap, retval)
199 1.17 cgd struct proc *p;
200 1.17 cgd struct osetrlimit_args *uap;
201 1.17 cgd int *retval;
202 1.17 cgd {
203 1.17 cgd struct orlimit olim;
204 1.17 cgd struct rlimit lim;
205 1.17 cgd int error;
206 1.17 cgd
207 1.19 cgd if (error =
208 1.19 cgd copyin((caddr_t)uap->lim, (caddr_t)&olim, sizeof (struct orlimit)))
209 1.17 cgd return (error);
210 1.17 cgd lim.rlim_cur = olim.rlim_cur;
211 1.17 cgd lim.rlim_max = olim.rlim_max;
212 1.17 cgd return (dosetrlimit(p, uap->which, &lim));
213 1.17 cgd }
214 1.17 cgd
215 1.17 cgd struct ogetrlimit_args {
216 1.17 cgd u_int which;
217 1.17 cgd struct orlimit *rlp;
218 1.17 cgd };
219 1.17 cgd /* ARGSUSED */
220 1.17 cgd ogetrlimit(p, uap, retval)
221 1.17 cgd struct proc *p;
222 1.17 cgd register struct ogetrlimit_args *uap;
223 1.17 cgd int *retval;
224 1.17 cgd {
225 1.17 cgd struct orlimit olim;
226 1.17 cgd
227 1.17 cgd if (uap->which >= RLIM_NLIMITS)
228 1.17 cgd return (EINVAL);
229 1.19 cgd olim.rlim_cur = p->p_rlimit[uap->which].rlim_cur;
230 1.17 cgd if (olim.rlim_cur == -1)
231 1.17 cgd olim.rlim_cur = 0x7fffffff;
232 1.17 cgd olim.rlim_max = p->p_rlimit[uap->which].rlim_max;
233 1.17 cgd if (olim.rlim_max == -1)
234 1.17 cgd olim.rlim_max = 0x7fffffff;
235 1.17 cgd return (copyout((caddr_t)&olim, (caddr_t)uap->rlp, sizeof(olim)));
236 1.17 cgd }
237 1.19 cgd #endif /* COMPAT_43 || COMPAT_SUNOS */
238 1.17 cgd
239 1.17 cgd struct setrlimit_args {
240 1.17 cgd u_int which;
241 1.17 cgd struct rlimit *lim;
242 1.17 cgd };
243 1.17 cgd /* ARGSUSED */
244 1.17 cgd setrlimit(p, uap, retval)
245 1.17 cgd struct proc *p;
246 1.17 cgd register struct setrlimit_args *uap;
247 1.17 cgd int *retval;
248 1.17 cgd {
249 1.19 cgd struct rlimit alim;
250 1.17 cgd int error;
251 1.17 cgd
252 1.19 cgd if (error =
253 1.19 cgd copyin((caddr_t)uap->lim, (caddr_t)&alim, sizeof (struct rlimit)))
254 1.17 cgd return (error);
255 1.19 cgd return (dosetrlimit(p, uap->which, &alim));
256 1.17 cgd }
257 1.17 cgd
258 1.17 cgd int
259 1.17 cgd dosetrlimit(p, which, limp)
260 1.17 cgd struct proc *p;
261 1.17 cgd u_int which;
262 1.17 cgd struct rlimit *limp;
263 1.17 cgd {
264 1.17 cgd register struct rlimit *alimp;
265 1.19 cgd extern unsigned maxdmap, maxsmap;
266 1.17 cgd int error;
267 1.17 cgd
268 1.17 cgd if (which >= RLIM_NLIMITS)
269 1.17 cgd return (EINVAL);
270 1.17 cgd alimp = &p->p_rlimit[which];
271 1.19 cgd if (limp->rlim_cur > alimp->rlim_max ||
272 1.17 cgd limp->rlim_max > alimp->rlim_max)
273 1.17 cgd if (error = suser(p->p_ucred, &p->p_acflag))
274 1.17 cgd return (error);
275 1.17 cgd if (limp->rlim_cur > limp->rlim_max)
276 1.17 cgd limp->rlim_cur = limp->rlim_max;
277 1.17 cgd if (p->p_limit->p_refcnt > 1 &&
278 1.17 cgd (p->p_limit->p_lflags & PL_SHAREMOD) == 0) {
279 1.17 cgd p->p_limit->p_refcnt--;
280 1.17 cgd p->p_limit = limcopy(p->p_limit);
281 1.17 cgd alimp = &p->p_rlimit[which];
282 1.17 cgd }
283 1.17 cgd
284 1.17 cgd switch (which) {
285 1.17 cgd
286 1.17 cgd case RLIMIT_DATA:
287 1.19 cgd if (limp->rlim_cur > maxdmap)
288 1.19 cgd limp->rlim_cur = maxdmap;
289 1.19 cgd if (limp->rlim_max > maxdmap)
290 1.19 cgd limp->rlim_max = maxdmap;
291 1.17 cgd break;
292 1.17 cgd
293 1.17 cgd case RLIMIT_STACK:
294 1.19 cgd if (limp->rlim_cur > maxsmap)
295 1.19 cgd limp->rlim_cur = maxsmap;
296 1.19 cgd if (limp->rlim_max > maxsmap)
297 1.19 cgd limp->rlim_max = maxsmap;
298 1.17 cgd /*
299 1.17 cgd * Stack is allocated to the max at exec time with only
300 1.17 cgd * "rlim_cur" bytes accessible. If stack limit is going
301 1.17 cgd * up make more accessible, if going down make inaccessible.
302 1.17 cgd */
303 1.17 cgd if (limp->rlim_cur != alimp->rlim_cur) {
304 1.17 cgd vm_offset_t addr;
305 1.17 cgd vm_size_t size;
306 1.17 cgd vm_prot_t prot;
307 1.17 cgd
308 1.17 cgd if (limp->rlim_cur > alimp->rlim_cur) {
309 1.17 cgd prot = VM_PROT_ALL;
310 1.17 cgd size = limp->rlim_cur - alimp->rlim_cur;
311 1.17 cgd addr = USRSTACK - limp->rlim_cur;
312 1.17 cgd } else {
313 1.17 cgd prot = VM_PROT_NONE;
314 1.17 cgd size = alimp->rlim_cur - limp->rlim_cur;
315 1.17 cgd addr = USRSTACK - alimp->rlim_cur;
316 1.17 cgd }
317 1.17 cgd addr = trunc_page(addr);
318 1.17 cgd size = round_page(size);
319 1.17 cgd (void) vm_map_protect(&p->p_vmspace->vm_map,
320 1.17 cgd addr, addr+size, prot, FALSE);
321 1.17 cgd }
322 1.17 cgd break;
323 1.19 cgd
324 1.19 cgd case RLIMIT_NOFILE:
325 1.19 cgd if (limp->rlim_cur > maxfiles)
326 1.19 cgd limp->rlim_cur = maxfiles;
327 1.19 cgd if (limp->rlim_max > maxfiles)
328 1.19 cgd limp->rlim_max = maxfiles;
329 1.19 cgd break;
330 1.19 cgd
331 1.19 cgd case RLIMIT_NPROC:
332 1.19 cgd if (limp->rlim_cur > maxproc)
333 1.19 cgd limp->rlim_cur = maxproc;
334 1.19 cgd if (limp->rlim_max > maxproc)
335 1.19 cgd limp->rlim_max = maxproc;
336 1.19 cgd break;
337 1.17 cgd }
338 1.17 cgd *alimp = *limp;
339 1.17 cgd return (0);
340 1.17 cgd }
341 1.17 cgd
342 1.17 cgd struct getrlimit_args {
343 1.17 cgd u_int which;
344 1.17 cgd struct rlimit *rlp;
345 1.17 cgd };
346 1.17 cgd /* ARGSUSED */
347 1.17 cgd getrlimit(p, uap, retval)
348 1.17 cgd struct proc *p;
349 1.17 cgd register struct getrlimit_args *uap;
350 1.17 cgd int *retval;
351 1.17 cgd {
352 1.17 cgd
353 1.17 cgd if (uap->which >= RLIM_NLIMITS)
354 1.17 cgd return (EINVAL);
355 1.17 cgd return (copyout((caddr_t)&p->p_rlimit[uap->which], (caddr_t)uap->rlp,
356 1.17 cgd sizeof (struct rlimit)));
357 1.17 cgd }
358 1.17 cgd
359 1.17 cgd /*
360 1.17 cgd * Transform the running time and tick information in proc p into user,
361 1.17 cgd * system, and interrupt time usage.
362 1.17 cgd */
363 1.17 cgd calcru(p, up, sp, ip)
364 1.17 cgd register struct proc *p;
365 1.17 cgd register struct timeval *up;
366 1.17 cgd register struct timeval *sp;
367 1.17 cgd register struct timeval *ip;
368 1.17 cgd {
369 1.17 cgd register u_quad_t u, st, ut, it, tot;
370 1.17 cgd register u_long sec, usec;
371 1.17 cgd register int s;
372 1.17 cgd struct timeval tv;
373 1.17 cgd
374 1.17 cgd s = splstatclock();
375 1.17 cgd st = p->p_sticks;
376 1.17 cgd ut = p->p_uticks;
377 1.17 cgd it = p->p_iticks;
378 1.17 cgd splx(s);
379 1.17 cgd
380 1.17 cgd tot = st + ut + it;
381 1.17 cgd if (tot == 0) {
382 1.17 cgd up->tv_sec = up->tv_usec = 0;
383 1.17 cgd sp->tv_sec = sp->tv_usec = 0;
384 1.17 cgd if (ip != NULL)
385 1.17 cgd ip->tv_sec = ip->tv_usec = 0;
386 1.17 cgd return;
387 1.17 cgd }
388 1.17 cgd
389 1.17 cgd sec = p->p_rtime.tv_sec;
390 1.17 cgd usec = p->p_rtime.tv_usec;
391 1.17 cgd if (p == curproc) {
392 1.17 cgd /*
393 1.17 cgd * Adjust for the current time slice. This is actually fairly
394 1.17 cgd * important since the error here is on the order of a time
395 1.17 cgd * quantum, which is much greater than the sampling error.
396 1.17 cgd */
397 1.17 cgd microtime(&tv);
398 1.17 cgd sec += tv.tv_sec - runtime.tv_sec;
399 1.17 cgd usec += tv.tv_usec - runtime.tv_usec;
400 1.17 cgd }
401 1.17 cgd u = sec * 1000000 + usec;
402 1.17 cgd st = (u * st) / tot;
403 1.17 cgd sp->tv_sec = st / 1000000;
404 1.17 cgd sp->tv_usec = st % 1000000;
405 1.17 cgd ut = (u * ut) / tot;
406 1.17 cgd up->tv_sec = ut / 1000000;
407 1.17 cgd up->tv_usec = ut % 1000000;
408 1.17 cgd if (ip != NULL) {
409 1.17 cgd it = (u * it) / tot;
410 1.17 cgd ip->tv_sec = it / 1000000;
411 1.17 cgd ip->tv_usec = it % 1000000;
412 1.17 cgd }
413 1.17 cgd }
414 1.17 cgd
415 1.17 cgd struct getrusage_args {
416 1.17 cgd int who;
417 1.17 cgd struct rusage *rusage;
418 1.17 cgd };
419 1.17 cgd /* ARGSUSED */
420 1.17 cgd getrusage(p, uap, retval)
421 1.17 cgd register struct proc *p;
422 1.17 cgd register struct getrusage_args *uap;
423 1.17 cgd int *retval;
424 1.17 cgd {
425 1.17 cgd register struct rusage *rup;
426 1.17 cgd
427 1.17 cgd switch (uap->who) {
428 1.17 cgd
429 1.19 cgd case RUSAGE_SELF:
430 1.17 cgd rup = &p->p_stats->p_ru;
431 1.17 cgd calcru(p, &rup->ru_utime, &rup->ru_stime, NULL);
432 1.17 cgd break;
433 1.17 cgd
434 1.17 cgd case RUSAGE_CHILDREN:
435 1.17 cgd rup = &p->p_stats->p_cru;
436 1.17 cgd break;
437 1.17 cgd
438 1.17 cgd default:
439 1.17 cgd return (EINVAL);
440 1.17 cgd }
441 1.17 cgd return (copyout((caddr_t)rup, (caddr_t)uap->rusage,
442 1.17 cgd sizeof (struct rusage)));
443 1.17 cgd }
444 1.17 cgd
445 1.17 cgd ruadd(ru, ru2)
446 1.17 cgd register struct rusage *ru, *ru2;
447 1.17 cgd {
448 1.17 cgd register long *ip, *ip2;
449 1.17 cgd register int i;
450 1.17 cgd
451 1.17 cgd timevaladd(&ru->ru_utime, &ru2->ru_utime);
452 1.17 cgd timevaladd(&ru->ru_stime, &ru2->ru_stime);
453 1.17 cgd if (ru->ru_maxrss < ru2->ru_maxrss)
454 1.17 cgd ru->ru_maxrss = ru2->ru_maxrss;
455 1.17 cgd ip = &ru->ru_first; ip2 = &ru2->ru_first;
456 1.17 cgd for (i = &ru->ru_last - &ru->ru_first; i >= 0; i--)
457 1.17 cgd *ip++ += *ip2++;
458 1.17 cgd }
459 1.17 cgd
460 1.17 cgd /*
461 1.17 cgd * Make a copy of the plimit structure.
462 1.17 cgd * We share these structures copy-on-write after fork,
463 1.17 cgd * and copy when a limit is changed.
464 1.17 cgd */
465 1.17 cgd struct plimit *
466 1.17 cgd limcopy(lim)
467 1.17 cgd struct plimit *lim;
468 1.17 cgd {
469 1.17 cgd register struct plimit *copy;
470 1.17 cgd
471 1.17 cgd MALLOC(copy, struct plimit *, sizeof(struct plimit),
472 1.17 cgd M_SUBPROC, M_WAITOK);
473 1.17 cgd bcopy(lim->pl_rlimit, copy->pl_rlimit,
474 1.17 cgd sizeof(struct rlimit) * RLIM_NLIMITS);
475 1.17 cgd copy->p_lflags = 0;
476 1.17 cgd copy->p_refcnt = 1;
477 1.17 cgd return (copy);
478 1.17 cgd }
479