1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 
  22 /*
  23  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
  24  * Use is subject to license terms.
  25  */
  26 
  27 #ifndef _PRIV_PRIVATE_H
  28 #define _PRIV_PRIVATE_H
  29 
  30 #include <sys/types.h>
  31 #include <sys/priv.h>
  32 #include <limits.h>
  33 
  34 /*
  35  * Libc private privilege data.
  36  */
  37 
  38 #ifdef __cplusplus
  39 extern "C" {
  40 #endif
  41 
  42 #define LOADPRIVDATA(d)         d = __priv_getdata()
  43 #define GETPRIVDATA()           __priv_getdata()
  44 #define LOCKPRIVDATA()          { \
  45                                         /* Data already allocated */ \
  46                                         (void) lock_data(); \
  47                                         (void) refresh_data(); \
  48                                 }
  49 #define UNLOCKPRIVDATA()        unlock_data()
  50 #define WITHPRIVLOCKED(t, b, x) { \
  51                                         t __result; \
  52                                         if (lock_data() != 0) \
  53                                                 return (b); \
  54                                         __result = (x); \
  55                                         if (__result == (b) && refresh_data()) \
  56                                                 __result = (x); \
  57                                         unlock_data(); \
  58                                         return (__result); \
  59                                 }
  60 
  61 /*
  62  * Privilege mask macros.
  63  */
  64 #define __NBWRD         (CHAR_BIT * sizeof (priv_chunk_t))
  65 #define privmask(n)     (1 << ((__NBWRD - 1) - ((n) % __NBWRD)))
  66 #define privword(n)     ((n)/__NBWRD)
  67 
  68 /*
  69  * Same as the functions, but for numeric privileges.
  70  */
  71 #define PRIV_ADDSET(a, p)       ((priv_chunk_t *)(a))[privword(p)] |= \
  72                                                         privmask(p)
  73 #define PRIV_DELSET(a, p)       ((priv_chunk_t *)(a))[privword(p)] &= \
  74                                                         ~privmask(p)
  75 #define PRIV_ISMEMBER(a, p)     ((((priv_chunk_t *)(a))[privword(p)] & \
  76                                                         privmask(p)) != 0)
  77 
  78 /*
  79  * The structure is static except for the setsort, privnames and nprivs
  80  * field.  The pinfo structure initially has sufficient room and the kernel
  81  * guarantees no offset changes so we can copy a new structure on top of it.
  82  * The locking stratgegy is this: we lock it when we need to reference any
  83  * of the volatile fields.
  84  */
  85 typedef struct priv_data {
  86         size_t                  pd_setsize;             /* In bytes */
  87         int                     pd_nsets, pd_nprivs;
  88         uint32_t                pd_ucredsize;
  89         char                    **pd_setnames;
  90         char                    **pd_privnames;
  91         int                     *pd_setsort;
  92         priv_impl_info_t        *pd_pinfo;
  93         priv_set_t              *pd_basicset;
  94         priv_set_t              *pd_defaultset;
  95         priv_set_t              *pd_zoneset;
  96 } priv_data_t;
  97 
  98 extern priv_data_t *__priv_getdata(void);
  99 extern priv_data_t *__priv_parse_info(priv_impl_info_t *);
 100 extern void __priv_free_info(priv_data_t *);
 101 extern priv_data_t *privdata;
 102 
 103 extern int lock_data(void);
 104 extern boolean_t refresh_data(void);
 105 extern void unlock_data(void);
 106 
 107 extern boolean_t __priv_isemptyset(priv_data_t *, const priv_set_t *);
 108 extern boolean_t __priv_isfullset(priv_data_t *, const priv_set_t *);
 109 extern boolean_t __priv_issubset(priv_data_t *, const priv_set_t *,
 110                                 const priv_set_t *);
 111 extern const char *__priv_getbynum(const priv_data_t *, int);
 112 
 113 extern int getprivinfo(priv_impl_info_t *, size_t);
 114 
 115 extern priv_set_t *priv_basic(void);
 116 extern priv_set_t *priv_default(void);
 117 
 118 #ifdef __cplusplus
 119 }
 120 #endif
 121 
 122 #endif /* _PRIV_PRIVATE_H */