verified_exec.h revision 1.7
1 /* $NetBSD: verified_exec.h,v 1.7 2005/04/20 13:44:46 blymn Exp $ */ 2 3 /*- 4 * Copyright 2005 Elad Efrat <elad (at) bsd.org.il> 5 * Copyright 2005 Brett Lymn <blymn (at) netbsd.org> 6 * 7 * This code is derived from software contributed to The NetBSD Foundation 8 * by Brett Lymn and Elad Efrat 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Neither the name of The NetBSD Foundation nor the names of its 16 * contributors may be used to endorse or promote products derived 17 * from this software without specific prior written permission. 18 * 19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 29 * POSSIBILITY OF SUCH DAMAGE. 30 */ 31 32 #include <sys/cdefs.h> 33 __KERNEL_RCSID(0, "$NetBSD: verified_exec.h,v 1.7 2005/04/20 13:44:46 blymn Exp $"); 34 35 /* 36 * 37 * Definitions for the Verified Executables kernel function. 38 * 39 */ 40 #include <sys/param.h> 41 #include <sys/hash.h> 42 43 #ifndef V_EXEC_H 44 #define V_EXEC_H 1 45 46 /* Max length of the fingerprint type string, including terminating \0 char */ 47 #define VERIEXEC_TYPE_MAXLEN 9 48 49 struct veriexec_params { 50 unsigned char type; 51 unsigned char fp_type[VERIEXEC_TYPE_MAXLEN]; /* type of fingerprint 52 this is */ 53 char file[MAXPATHLEN]; 54 unsigned int size; /* number of bytes in the fingerprint */ 55 unsigned char *fingerprint; 56 }; 57 58 struct veriexec_sizing_params { 59 dev_t dev; 60 size_t hash_size; 61 }; 62 63 struct veriexec_fp_report { 64 unsigned size; 65 unsigned char *fingerprints; 66 }; 67 68 69 /* 70 * Types of veriexec inodes we can have 71 */ 72 #define VERIEXEC_DIRECT 0 /* Allow direct execution */ 73 #define VERIEXEC_INDIRECT 1 /* Only allow indirect execution */ 74 #define VERIEXEC_FILE 2 /* Fingerprint of a plain file */ 75 76 #define VERIEXEC_LOAD _IOW('S', 0x1, struct veriexec_params) 77 #define VERIEXEC_TABLESIZE _IOW('S', 0x2, struct veriexec_sizing_params) 78 #define VERIEXEC_FINGERPRINTS _IOWR('S', 0x3, struct veriexec_fp_report) 79 80 #ifdef _KERNEL 81 void veriexecattach(struct device *, struct device *, void *); 82 int veriexecopen(dev_t, int, int, struct proc *); 83 int veriexecclose(dev_t, int, int, struct proc *); 84 int veriexecioctl(dev_t, u_long, caddr_t, int, struct proc *); 85 86 /* defined in kern_verifiedexec.c */ 87 extern char *veriexec_fp_names; 88 89 /* 90 * Operations vector for verified exec, this defines the characteristics 91 * for the fingerprint type. 92 */ 93 94 /* Function types: init, update, final. */ 95 typedef void (*VERIEXEC_INIT_FN)(void *); 96 typedef void (*VERIEXEC_UPDATE_FN)(void *, u_char *, u_int); 97 typedef void (*VERIEXEC_FINAL_FN)(u_char *, void *); 98 99 struct veriexec_fp_ops { 100 char type[VERIEXEC_TYPE_MAXLEN]; 101 size_t hash_len; 102 size_t context_size; 103 VERIEXEC_INIT_FN init; 104 VERIEXEC_UPDATE_FN update; 105 VERIEXEC_FINAL_FN final; 106 LIST_ENTRY(veriexec_fp_ops) entries; 107 }; 108 109 /* 110 * list structure definitions - needed in kern_exec.c 111 */ 112 113 /* An entry in the per-device hash table. */ 114 struct veriexec_hash_entry { 115 ino_t inode; /* Inode number. */ 116 unsigned char type; /* Entry type. */ 117 unsigned char *fp; /* Fingerprint. */ 118 struct veriexec_fp_ops *ops; /* Fingerprint ops vector*/ 119 LIST_ENTRY(veriexec_hash_entry) entries; /* List pointer. */ 120 }; 121 122 LIST_HEAD(veriexec_hashhead, veriexec_hash_entry) *hash_tbl; 123 124 /* Veriexec hash table information. */ 125 struct veriexec_hashtbl { 126 struct veriexec_hashhead *hash_tbl; 127 size_t hash_size; /* Number of slots in the table. */ 128 dev_t hash_dev; /* Device ID the hash table refers to. */ 129 LIST_ENTRY(veriexec_hashtbl) hash_list; 130 }; 131 132 /* Global list of hash tables. */ 133 LIST_HEAD(, veriexec_hashtbl) veriexec_tables; 134 135 /* Mask to ensure bounded access to elements in the hash table. */ 136 #define VERIEXEC_HASH_MASK(tbl) ((tbl)->hash_size - 1) 137 138 /* 139 * Hashing function: Takes an inode number modulus the mask to give back 140 * an index into the hash table. 141 */ 142 #define VERIEXEC_HASH(tbl, inode) \ 143 (hash32_buf(&(inode), sizeof((inode)), HASH32_BUF_INIT) \ 144 & VERIEXEC_HASH_MASK(tbl)) 145 146 /* Callback for hash traversal. */ 147 typedef void (*VERIEXEC_CALLBACK)(struct veriexec_hash_entry *, dev_t); 148 149 void veriexec_init_fp_ops(void); 150 struct veriexec_fp_ops *veriexec_find_ops(u_char *name); 151 int veriexec_fp_calc(struct proc *, struct vnode *, 152 struct veriexec_hash_entry *, uint64_t, u_char *); 153 int veriexec_fp_cmp(struct veriexec_hash_entry *, u_char *); 154 155 struct veriexec_hashtbl *veriexec_tblfind(dev_t); 156 struct veriexec_hash_entry *veriexec_lookup(dev_t, ino_t); 157 int veriexec_hashadd(struct veriexec_hashtbl *, struct veriexec_hash_entry *); 158 void veriexec_hashprint(struct veriexec_hash_entry *, dev_t); 159 int veriexec_tblwalk(VERIEXEC_CALLBACK *); 160 161 int veriexec_verify(struct proc *, struct vnode *, struct vattr *, 162 const u_char *, int); 163 int veriexec_removechk(struct proc *, struct vnode *, const char *); 164 void veriexec_init_fp_ops(void); 165 166 #endif 167 168 #ifdef VERIFIED_EXEC_DEBUG 169 #define veriexec_dprintf(x) printf x 170 #else 171 #define veriexec_dprintf(x) 172 #endif /* VERIFIED_EXEC_DEBUG */ 173 174 #endif 175
Indexes created Wed Sep 24 02:09:48 GMT 2025