1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright 2008 Sun Microsystems, Inc. All rights reserved.
23 * Use is subject to license terms.
24 */
25
26
27 /* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */
28 /* All Rights Reserved */
29
30
31 /*
32 * STREAMS Administrative Driver
33 *
34 * Currently only handles autopush and module name verification.
35 */
36
37 #include <sys/types.h>
38 #include <sys/param.h>
39 #include <sys/errno.h>
40 #include <sys/stream.h>
41 #include <sys/stropts.h>
42 #include <sys/strsubr.h>
43 #include <sys/strsun.h>
44 #include <sys/conf.h>
45 #include <sys/sad.h>
46 #include <sys/cred.h>
47 #include <sys/debug.h>
48 #include <sys/ddi.h>
49 #include <sys/sunddi.h>
50 #include <sys/stat.h>
51 #include <sys/cmn_err.h>
52 #include <sys/systm.h>
53 #include <sys/modctl.h>
54 #include <sys/sysmacros.h>
55 #include <sys/zone.h>
56 #include <sys/policy.h>
57
58 static int sadopen(queue_t *, dev_t *, int, int, cred_t *);
59 static int sadclose(queue_t *, int, cred_t *);
60 static int sadwput(queue_t *qp, mblk_t *mp);
61
62 static int sad_info(dev_info_t *, ddi_info_cmd_t, void *, void **);
63 static int sad_attach(dev_info_t *, ddi_attach_cmd_t);
64
65 static void apush_ioctl(), apush_iocdata();
66 static void vml_ioctl(), vml_iocdata();
67 static int valid_major(major_t);
68
69 static dev_info_t *sad_dip; /* private copy of devinfo pointer */
70
71 static struct module_info sad_minfo = {
72 0x7361, "sad", 0, INFPSZ, 0, 0
73 };
74
75 static struct qinit sad_rinit = {
76 NULL, NULL, sadopen, sadclose, NULL, &sad_minfo, NULL
77 };
78
79 static struct qinit sad_winit = {
80 sadwput, NULL, NULL, NULL, NULL, &sad_minfo, NULL
81 };
82
83 struct streamtab sadinfo = {
84 &sad_rinit, &sad_winit, NULL, NULL
85 };
86
87 DDI_DEFINE_STREAM_OPS(sad_ops, nulldev, nulldev, sad_attach,
88 nodev, nodev, sad_info,
89 D_MP | D_MTPERQ | D_MTOUTPERIM | D_MTOCEXCL, &sadinfo,
90 ddi_quiesce_not_supported);
91
92 /*
93 * Module linkage information for the kernel.
94 */
95
96 static struct modldrv modldrv = {
97 &mod_driverops, /* Type of module. This one is a pseudo driver */
98 "STREAMS Administrative Driver 'sad'",
99 &sad_ops, /* driver ops */
100 };
101
102 static struct modlinkage modlinkage = {
103 MODREV_1, { &modldrv, NULL }
104 };
105
106 int
107 _init(void)
108 {
109 return (mod_install(&modlinkage));
110 }
111
112 int
113 _fini(void)
114 {
115 return (mod_remove(&modlinkage));
116 }
117
118 int
119 _info(struct modinfo *modinfop)
120 {
121 return (mod_info(&modlinkage, modinfop));
122 }
123
124 static int
125 sad_attach(dev_info_t *devi, ddi_attach_cmd_t cmd)
126 {
127 int instance = ddi_get_instance(devi);
128
129 if (cmd != DDI_ATTACH)
130 return (DDI_FAILURE);
131
132 ASSERT(instance == 0);
133 if (instance != 0)
134 return (DDI_FAILURE);
135
136 if (ddi_create_minor_node(devi, "user", S_IFCHR,
137 0, DDI_PSEUDO, NULL) == DDI_FAILURE) {
138 return (DDI_FAILURE);
139 }
140 if (ddi_create_minor_node(devi, "admin", S_IFCHR,
141 1, DDI_PSEUDO, NULL) == DDI_FAILURE) {
142 ddi_remove_minor_node(devi, NULL);
143 return (DDI_FAILURE);
144 }
145 sad_dip = devi;
146 return (DDI_SUCCESS);
147 }
148
149 /* ARGSUSED */
150 static int
151 sad_info(dev_info_t *dip, ddi_info_cmd_t infocmd, void *arg, void **result)
152 {
153 int error;
154
155 switch (infocmd) {
156 case DDI_INFO_DEVT2DEVINFO:
157 if (sad_dip == NULL) {
158 error = DDI_FAILURE;
159 } else {
160 *result = sad_dip;
161 error = DDI_SUCCESS;
162 }
163 break;
164 case DDI_INFO_DEVT2INSTANCE:
165 *result = (void *)0;
166 error = DDI_SUCCESS;
167 break;
168 default:
169 error = DDI_FAILURE;
170 }
171 return (error);
172 }
173
174
175 /*
176 * sadopen() -
177 * Allocate a sad device. Only one
178 * open at a time allowed per device.
179 */
180 /* ARGSUSED */
181 static int
182 sadopen(
183 queue_t *qp, /* pointer to read queue */
184 dev_t *devp, /* major/minor device of stream */
185 int flag, /* file open flags */
186 int sflag, /* stream open flags */
187 cred_t *credp) /* user credentials */
188 {
189 int i;
190 netstack_t *ns;
191 str_stack_t *ss;
192
193 if (sflag) /* no longer called from clone driver */
194 return (EINVAL);
195
196 /* Only privileged process can access ADMINDEV */
197 if (getminor(*devp) == ADMMIN) {
198 int err;
199
200 err = secpolicy_sadopen(credp);
201
202 if (err != 0)
203 return (err);
204 }
205
206 ns = netstack_find_by_cred(credp);
207 ASSERT(ns != NULL);
208 ss = ns->netstack_str;
209 ASSERT(ss != NULL);
210
211 /*
212 * Both USRMIN and ADMMIN are clone interfaces.
213 */
214 for (i = 0; i < ss->ss_sadcnt; i++)
215 if (ss->ss_saddev[i].sa_qp == NULL)
216 break;
217 if (i >= ss->ss_sadcnt) { /* no such device */
218 netstack_rele(ss->ss_netstack);
219 return (ENXIO);
220 }
221 switch (getminor(*devp)) {
222 case USRMIN: /* mere mortal */
223 ss->ss_saddev[i].sa_flags = 0;
224 break;
225
226 case ADMMIN: /* privileged user */
227 ss->ss_saddev[i].sa_flags = SADPRIV;
228 break;
229
230 default:
231 netstack_rele(ss->ss_netstack);
232 return (EINVAL);
233 }
234
235 ss->ss_saddev[i].sa_qp = qp;
236 ss->ss_saddev[i].sa_ss = ss;
237 qp->q_ptr = (caddr_t)&ss->ss_saddev[i];
238 WR(qp)->q_ptr = (caddr_t)&ss->ss_saddev[i];
239
240 /*
241 * NOTE: should the ADMMIN or USRMIN minors change
242 * then so should the offset of 2 below
243 * Both USRMIN and ADMMIN are clone interfaces and
244 * therefore their minor numbers (0 and 1) are reserved.
245 */
246 *devp = makedevice(getemajor(*devp), i + 2);
247 qprocson(qp);
248 return (0);
249 }
250
251 /*
252 * sadclose() -
253 * Clean up the data structures.
254 */
255 /* ARGSUSED */
256 static int
257 sadclose(
258 queue_t *qp, /* pointer to read queue */
259 int flag, /* file open flags */
260 cred_t *credp) /* user credentials */
261 {
262 struct saddev *sadp;
263
264 qprocsoff(qp);
265 sadp = (struct saddev *)qp->q_ptr;
266 sadp->sa_qp = NULL;
267 sadp->sa_addr = NULL;
268 netstack_rele(sadp->sa_ss->ss_netstack);
269 sadp->sa_ss = NULL;
270 qp->q_ptr = NULL;
271 WR(qp)->q_ptr = NULL;
272 return (0);
273 }
274
275 /*
276 * sadwput() -
277 * Write side put procedure.
278 */
279 static int
280 sadwput(
281 queue_t *qp, /* pointer to write queue */
282 mblk_t *mp) /* message pointer */
283 {
284 struct iocblk *iocp;
285
286 switch (mp->b_datap->db_type) {
287 case M_FLUSH:
288 if (*mp->b_rptr & FLUSHR) {
289 *mp->b_rptr &= ~FLUSHW;
290 qreply(qp, mp);
291 } else
292 freemsg(mp);
293 break;
294
295 case M_IOCTL:
296 iocp = (struct iocblk *)mp->b_rptr;
297 switch (SAD_CMD(iocp->ioc_cmd)) {
298 case SAD_CMD(SAD_SAP):
299 case SAD_CMD(SAD_GAP):
300 apush_ioctl(qp, mp);
301 break;
302
303 case SAD_VML:
304 vml_ioctl(qp, mp);
305 break;
306
307 default:
308 miocnak(qp, mp, 0, EINVAL);
309 break;
310 }
311 break;
312
313 case M_IOCDATA:
314 iocp = (struct iocblk *)mp->b_rptr;
315 switch (SAD_CMD(iocp->ioc_cmd)) {
316 case SAD_CMD(SAD_SAP):
317 case SAD_CMD(SAD_GAP):
318 apush_iocdata(qp, mp);
319 break;
320
321 case SAD_VML:
322 vml_iocdata(qp, mp);
323 break;
324
325 default:
326 cmn_err(CE_WARN,
327 "sadwput: invalid ioc_cmd in case M_IOCDATA: %d",
328 iocp->ioc_cmd);
329 freemsg(mp);
330 break;
331 }
332 break;
333
334 default:
335 freemsg(mp);
336 break;
337 } /* switch (db_type) */
338 return (0);
339 }
340
341 /*
342 * apush_ioctl() -
343 * Handle the M_IOCTL messages associated with
344 * the autopush feature.
345 */
346 static void
347 apush_ioctl(
348 queue_t *qp, /* pointer to write queue */
349 mblk_t *mp) /* message pointer */
350 {
351 struct iocblk *iocp;
352 struct saddev *sadp;
353 uint_t size;
354
355 iocp = (struct iocblk *)mp->b_rptr;
356 if (iocp->ioc_count != TRANSPARENT) {
357 miocnak(qp, mp, 0, EINVAL);
358 return;
359 }
360 if (SAD_VER(iocp->ioc_cmd) > AP_VERSION) {
361 miocnak(qp, mp, 0, EINVAL);
362 return;
363 }
364
365 sadp = (struct saddev *)qp->q_ptr;
366 switch (SAD_CMD(iocp->ioc_cmd)) {
367 case SAD_CMD(SAD_SAP):
368 if (!(sadp->sa_flags & SADPRIV)) {
369 miocnak(qp, mp, 0, EPERM);
370 break;
371 }
372 /* FALLTHRU */
373
374 case SAD_CMD(SAD_GAP):
375 sadp->sa_addr = (caddr_t)*(uintptr_t *)mp->b_cont->b_rptr;
376 if (SAD_VER(iocp->ioc_cmd) == 1)
377 size = STRAPUSH_V1_LEN;
378 else
379 size = STRAPUSH_V0_LEN;
380 mcopyin(mp, (void *)GETSTRUCT, size, NULL);
381 qreply(qp, mp);
382 break;
383
384 default:
385 ASSERT(0);
386 miocnak(qp, mp, 0, EINVAL);
387 break;
388 } /* switch (ioc_cmd) */
389 }
390
391 /*
392 * apush_iocdata() -
393 * Handle the M_IOCDATA messages associated with
394 * the autopush feature.
395 */
396 static void
397 apush_iocdata(
398 queue_t *qp, /* pointer to write queue */
399 mblk_t *mp) /* message pointer */
400 {
401 int i, ret;
402 struct copyresp *csp;
403 struct strapush *sap = NULL;
404 struct autopush *ap, *ap_tmp;
405 struct saddev *sadp;
406 uint_t size;
407 dev_t dev;
408 str_stack_t *ss;
409
410 sadp = (struct saddev *)qp->q_ptr;
411 ss = sadp->sa_ss;
412
413 csp = (struct copyresp *)mp->b_rptr;
414 if (csp->cp_rval) { /* if there was an error */
415 freemsg(mp);
416 return;
417 }
418 if (mp->b_cont) {
419 /*
420 * sap needed only if mp->b_cont is set. figure out the
421 * size of the expected sap structure and make sure
422 * enough data was supplied.
423 */
424 if (SAD_VER(csp->cp_cmd) == 1)
425 size = STRAPUSH_V1_LEN;
426 else
427 size = STRAPUSH_V0_LEN;
428 if (MBLKL(mp->b_cont) < size) {
429 miocnak(qp, mp, 0, EINVAL);
430 return;
431 }
432 sap = (struct strapush *)mp->b_cont->b_rptr;
433 dev = makedevice(sap->sap_major, sap->sap_minor);
434 }
435 switch (SAD_CMD(csp->cp_cmd)) {
436 case SAD_CMD(SAD_SAP):
437
438 /* currently we only support one SAD_SAP command */
439 if (((long)csp->cp_private) != GETSTRUCT) {
440 cmn_err(CE_WARN,
441 "apush_iocdata: cp_private bad in SAD_SAP: %p",
442 (void *)csp->cp_private);
443 miocnak(qp, mp, 0, EINVAL);
444 return;
445 }
446
447 switch (sap->sap_cmd) {
448 default:
449 miocnak(qp, mp, 0, EINVAL);
450 return;
451 case SAP_ONE:
452 case SAP_RANGE:
453 case SAP_ALL:
454 /* allocate and initialize a new config */
455 ap = sad_ap_alloc();
456 ap->ap_common = sap->sap_common;
457 if (SAD_VER(csp->cp_cmd) > 0)
458 ap->ap_anchor = sap->sap_anchor;
459 for (i = 0; i < MIN(sap->sap_npush, MAXAPUSH); i++)
460 (void) strncpy(ap->ap_list[i],
461 sap->sap_list[i], FMNAMESZ);
462
463 /* sanity check the request */
464 if (((ret = sad_ap_verify(ap)) != 0) ||
465 ((ret = valid_major(ap->ap_major)) != 0)) {
466 sad_ap_rele(ap, ss);
467 miocnak(qp, mp, 0, ret);
468 return;
469 }
470
471 /* check for overlapping configs */
472 mutex_enter(&ss->ss_sad_lock);
473 ap_tmp = sad_ap_find(&ap->ap_common, ss);
474 if (ap_tmp != NULL) {
475 /* already configured */
476 mutex_exit(&ss->ss_sad_lock);
477 sad_ap_rele(ap_tmp, ss);
478 sad_ap_rele(ap, ss);
479 miocnak(qp, mp, 0, EEXIST);
480 return;
481 }
482
483 /* add the new config to our hash */
484 sad_ap_insert(ap, ss);
485 mutex_exit(&ss->ss_sad_lock);
486 miocack(qp, mp, 0, 0);
487 return;
488
489 case SAP_CLEAR:
490 /* sanity check the request */
491 if (ret = valid_major(sap->sap_major)) {
492 miocnak(qp, mp, 0, ret);
493 return;
494 }
495
496 /* search for a matching config */
497 if ((ap = sad_ap_find_by_dev(dev, ss)) == NULL) {
498 /* no config found */
499 miocnak(qp, mp, 0, ENODEV);
500 return;
501 }
502
503 /*
504 * If we matched a SAP_RANGE config
505 * the minor passed in must match the
506 * beginning of the range exactly.
507 */
508 if ((ap->ap_type == SAP_RANGE) &&
509 (ap->ap_minor != sap->sap_minor)) {
510 sad_ap_rele(ap, ss);
511 miocnak(qp, mp, 0, ERANGE);
512 return;
513 }
514
515 /*
516 * If we matched a SAP_ALL config
517 * the minor passed in must be 0.
518 */
519 if ((ap->ap_type == SAP_ALL) &&
520 (sap->sap_minor != 0)) {
521 sad_ap_rele(ap, ss);
522 miocnak(qp, mp, 0, EINVAL);
523 return;
524 }
525
526 /*
527 * make sure someone else hasn't already
528 * removed this config from the hash.
529 */
530 mutex_enter(&ss->ss_sad_lock);
531 ap_tmp = sad_ap_find(&ap->ap_common, ss);
532 if (ap_tmp != ap) {
533 mutex_exit(&ss->ss_sad_lock);
534 sad_ap_rele(ap_tmp, ss);
535 sad_ap_rele(ap, ss);
536 miocnak(qp, mp, 0, ENODEV);
537 return;
538 }
539
540 /* remove the config from the hash and return */
541 sad_ap_remove(ap, ss);
542 mutex_exit(&ss->ss_sad_lock);
543
544 /*
545 * Release thrice, once for sad_ap_find_by_dev(),
546 * once for sad_ap_find(), and once to free.
547 */
548 sad_ap_rele(ap, ss);
549 sad_ap_rele(ap, ss);
550 sad_ap_rele(ap, ss);
551 miocack(qp, mp, 0, 0);
552 return;
553 } /* switch (sap_cmd) */
554 /*NOTREACHED*/
555
556 case SAD_CMD(SAD_GAP):
557 switch ((long)csp->cp_private) {
558
559 case GETSTRUCT:
560 /* sanity check the request */
561 if (ret = valid_major(sap->sap_major)) {
562 miocnak(qp, mp, 0, ret);
563 return;
564 }
565
566 /* search for a matching config */
567 if ((ap = sad_ap_find_by_dev(dev, ss)) == NULL) {
568 /* no config found */
569 miocnak(qp, mp, 0, ENODEV);
570 return;
571 }
572
573 /* copy out the contents of the config */
574 sap->sap_common = ap->ap_common;
575 if (SAD_VER(csp->cp_cmd) > 0)
576 sap->sap_anchor = ap->ap_anchor;
577 for (i = 0; i < ap->ap_npush; i++)
578 (void) strcpy(sap->sap_list[i], ap->ap_list[i]);
579 for (; i < MAXAPUSH; i++)
580 bzero(sap->sap_list[i], FMNAMESZ + 1);
581
582 /* release our hold on the config */
583 sad_ap_rele(ap, ss);
584
585 /* copyout the results */
586 if (SAD_VER(csp->cp_cmd) == 1)
587 size = STRAPUSH_V1_LEN;
588 else
589 size = STRAPUSH_V0_LEN;
590
591 mcopyout(mp, (void *)GETRESULT, size, sadp->sa_addr,
592 NULL);
593 qreply(qp, mp);
594 return;
595 case GETRESULT:
596 miocack(qp, mp, 0, 0);
597 return;
598
599 default:
600 cmn_err(CE_WARN,
601 "apush_iocdata: cp_private bad case SAD_GAP: %p",
602 (void *)csp->cp_private);
603 freemsg(mp);
604 return;
605 } /* switch (cp_private) */
606 /*NOTREACHED*/
607 default: /* can't happen */
608 ASSERT(0);
609 freemsg(mp);
610 return;
611 } /* switch (cp_cmd) */
612 }
613
614 /*
615 * vml_ioctl() -
616 * Handle the M_IOCTL message associated with a request
617 * to validate a module list.
618 */
619 static void
620 vml_ioctl(
621 queue_t *qp, /* pointer to write queue */
622 mblk_t *mp) /* message pointer */
623 {
624 struct iocblk *iocp;
625
626 iocp = (struct iocblk *)mp->b_rptr;
627 if (iocp->ioc_count != TRANSPARENT) {
628 miocnak(qp, mp, 0, EINVAL);
629 return;
630 }
631 ASSERT(SAD_CMD(iocp->ioc_cmd) == SAD_VML);
632 mcopyin(mp, (void *)GETSTRUCT,
633 SIZEOF_STRUCT(str_list, iocp->ioc_flag), NULL);
634 qreply(qp, mp);
635 }
636
637 /*
638 * vml_iocdata() -
639 * Handle the M_IOCDATA messages associated with
640 * a request to validate a module list.
641 */
642 static void
643 vml_iocdata(
644 queue_t *qp, /* pointer to write queue */
645 mblk_t *mp) /* message pointer */
646 {
647 long i;
648 int nmods;
649 struct copyresp *csp;
650 struct str_mlist *lp;
651 STRUCT_HANDLE(str_list, slp);
652 struct saddev *sadp;
653
654 csp = (struct copyresp *)mp->b_rptr;
655 if (csp->cp_rval) { /* if there was an error */
656 freemsg(mp);
657 return;
658 }
659
660 ASSERT(SAD_CMD(csp->cp_cmd) == SAD_VML);
661 sadp = (struct saddev *)qp->q_ptr;
662 switch ((long)csp->cp_private) {
663 case GETSTRUCT:
664 STRUCT_SET_HANDLE(slp, csp->cp_flag,
665 (struct str_list *)mp->b_cont->b_rptr);
666 nmods = STRUCT_FGET(slp, sl_nmods);
667 if (nmods <= 0) {
668 miocnak(qp, mp, 0, EINVAL);
669 break;
670 }
671 sadp->sa_addr = (caddr_t)(uintptr_t)nmods;
672
673 mcopyin(mp, (void *)GETLIST, nmods * sizeof (struct str_mlist),
674 STRUCT_FGETP(slp, sl_modlist));
675 qreply(qp, mp);
676 break;
677
678 case GETLIST:
679 lp = (struct str_mlist *)mp->b_cont->b_rptr;
680 for (i = 0; i < (long)sadp->sa_addr; i++, lp++) {
681 lp->l_name[FMNAMESZ] = '\0';
682 if (fmodsw_find(lp->l_name, FMODSW_LOAD) == NULL) {
683 miocack(qp, mp, 0, 1);
684 return;
685 }
686 }
687 miocack(qp, mp, 0, 0);
688 break;
689
690 default:
691 cmn_err(CE_WARN, "vml_iocdata: invalid cp_private value: %p",
692 (void *)csp->cp_private);
693 freemsg(mp);
694 break;
695 } /* switch (cp_private) */
696 }
697
698 /*
699 * Validate a major number and also verify if
700 * it is a STREAMS device.
701 * Return values: 0 if a valid STREAMS dev
702 * error code otherwise
703 */
704 static int
705 valid_major(major_t major)
706 {
707 int ret = 0;
708
709 if (etoimajor(major) == -1)
710 return (EINVAL);
711
712 /*
713 * attempt to load the driver 'major' and verify that
714 * it is a STREAMS driver.
715 */
716 if (ddi_hold_driver(major) == NULL)
717 return (EINVAL);
718
719 if (!STREAMSTAB(major))
720 ret = ENOSTR;
721
722 ddi_rele_driver(major);
723
724 return (ret);
725 }