1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright 2014 Garrett D'Amore <garrett@damore.org>
23 *
24 * Copyright 2009 Sun Microsystems, Inc. All rights reserved.
25 * Use is subject to license terms.
26 */
27
28 #ifndef _EXEC_ATTR_H
29 #define _EXEC_ATTR_H
30
31 #ifdef __cplusplus
32 extern "C" {
33 #endif
34
35
36 #include <sys/types.h>
37 #include <secdb.h>
38
39
40 #define EXECATTR_FILENAME "/etc/security/exec_attr"
41 #define EXECATTR_DB_NAME "exec_attr.org_dir"
42 #define EXECATTR_DB_NCOL 7 /* total columns */
43 #define EXECATTR_DB_NKEYCOL 3 /* total searchable columns */
44 #define EXECATTR_DB_TBLT "exec_attr_tbl"
45 #define EXECATTR_NAME_DEFAULT_KW "nobody"
46
47 #define EXECATTR_COL0_KW "name"
48 #define EXECATTR_COL1_KW "policy"
49 #define EXECATTR_COL2_KW "type"
50 #define EXECATTR_COL3_KW "res1"
51 #define EXECATTR_COL4_KW "res2"
52 #define EXECATTR_COL5_KW "id"
53 #define EXECATTR_COL6_KW "attr"
54
55 /*
56 * indices of searchable columns
57 */
58 #define EXECATTR_KEYCOL0 0 /* name */
59 #define EXECATTR_KEYCOL1 1 /* policy */
60 #define EXECATTR_KEYCOL2 5 /* id */
61
62
63 /*
64 * Some macros used internally by the nsswitch code
65 */
66
67 /*
68 * These macros are bitmasks. GET_ONE and GET_ALL are bitfield 0
69 * and thus mutually exclusive. __SEARCH_ALL_POLLS is bitfield
70 * 1 and can be logically ORed with GET_ALL if one wants to get
71 * all matching profiles from all policies, not just the ones from
72 * the currently active policy
73 *
74 * Testing for these values should be done using the IS_* macros
75 * defined below.
76 */
77 #define GET_ONE 0
78 #define GET_ALL 1
79 #define __SEARCH_ALL_POLS 2
80
81 /* get only one exec_attr from list */
82 #define IS_GET_ONE(f) (((f) & GET_ALL) == 0)
83 /* get all matching exec_attrs in list */
84 #define IS_GET_ALL(f) (((f) & GET_ALL) == 1)
85 /* search all existing policies */
86 #define IS_SEARCH_ALL(f) (((f) & __SEARCH_ALL_POLS) == __SEARCH_ALL_POLS)
87
88 /*
89 * Key words used in the exec_attr database
90 */
91 #define EXECATTR_EUID_KW "euid"
92 #define EXECATTR_EGID_KW "egid"
93 #define EXECATTR_UID_KW "uid"
94 #define EXECATTR_GID_KW "gid"
95 #define EXECATTR_LPRIV_KW "limitprivs"
96 #define EXECATTR_IPRIV_KW "privs"
97
98 /*
99 * Nsswitch representation of execution attributes.
100 */
101 typedef struct execstr_s {
102 char *name; /* profile name */
103 char *policy; /* suser/rbac/tsol */
104 char *type; /* cmd/act */
105 char *res1; /* reserved for future use */
106 char *res2; /* reserved for future use */
107 char *id; /* unique ID */
108 char *attr; /* string of key-value pair attributes */
109 struct execstr_s *next; /* pointer to next entry */
110 } execstr_t;
111
112 typedef struct execattr_s {
113 char *name; /* profile name */
114 char *policy; /* suser/rbac/tsol */
115 char *type; /* cmd/act */
116 char *res1; /* reserved for future use */
117 char *res2; /* reserved for future use */
118 char *id; /* unique ID */
119 kva_t *attr; /* array of key-value pair attributes */
120 struct execattr_s *next; /* pointer to next entry */
121 } execattr_t;
122
123 typedef struct __private_execattr {
124 const char *name;
125 const char *type;
126 const char *id;
127 const char *policy;
128 int search_flag;
129 execstr_t *head_exec;
130 execstr_t *prev_exec;
131 } _priv_execattr; /* Un-supported. For Sun internal use only */
132
133
134 extern execattr_t *getexecattr(void);
135 extern execattr_t *getexecuser(const char *, const char *, const char *, int);
136 extern execattr_t *getexecprof(const char *, const char *, const char *, int);
137 extern execattr_t *match_execattr(execattr_t *, const char *, const char *, \
138 const char *);
139 extern void free_execattr(execattr_t *);
140 extern void setexecattr(void);
141 extern void endexecattr(void);
142
143 #ifdef __cplusplus
144 }
145 #endif
146
147 #endif /* _EXEC_ATTR_H */