sysdeps/unix/sysv/linux/faccessat.c

   1 /* Test for access to file, relative to open directory.  Linux version.
   2    Copyright (C) 2006, 2009 Free Software Foundation, Inc.
   3    This file is part of the GNU C Library.
   4
   5    The GNU C Library is free software; you can redistribute it and/or
   6    modify it under the terms of the GNU Lesser General Public
   7    License as published by the Free Software Foundation; either
   8    version 2.1 of the License, or (at your option) any later version.
   9
  10    The GNU C Library is distributed in the hope that it will be useful,
  11    but WITHOUT ANY WARRANTY; without even the implied warranty of
  12    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13    Lesser General Public License for more details.
  14
  15    You should have received a copy of the GNU Lesser General Public
  16    License along with the GNU C Library; if not, write to the Free
  17    Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
  18    02111-1307 USA.  */
  19
  20 #include <errno.h>
  21 #include <fcntl.h>
  22 #include <stddef.h>
  23 #include <stdio.h>
  24 #include <string.h>
  25 #include <unistd.h>
  26 #include <sys/types.h>
  27 #include <alloca.h>
  28 #include <kernel-features.h>
  29 #include <sysdep.h>
  30
  31
  32 int
  33 faccessat (fd, file, mode, flag)
  34      int fd;
  35      const char *file;
  36      int mode;
  37      int flag;
  38 {
  39   if (flag & ~(AT_SYMLINK_NOFOLLOW | AT_EACCESS))
  40     {
  41       __set_errno (EINVAL);
  42       return -1;
  43     }
  44
  45 #ifdef __NR_faccessat
  46   if ((flag == 0 || ((flag & ~AT_EACCESS) == 0 && ! __libc_enable_secure))
  47 # ifndef __ASSUME_ATFCTS
  48       && __have_atfcts >= 0
  49 # endif
  50       )
  51     {
  52       int result = INLINE_SYSCALL (faccessat, 3, fd, file, mode);
  53 # ifndef __ASSUME_ATFCTS
  54       if (result == -1 && errno == ENOSYS)
  55         __have_atfcts = -1;
  56       else
  57 # endif
  58         return result;
  59     }
  60 #endif
  61
  62 #ifndef __ASSUME_ATFCTS
  63   if ((!(flag & AT_EACCESS) || ! __libc_enable_secure)
  64 # ifndef __NR_laccess           /* Linux so far has no laccess syscall.  */
  65       && !(flag & AT_SYMLINK_NOFOLLOW)
  66 # endif
  67       )
  68     {
  69       /* If we are not set-uid or set-gid, access does the same.  */
  70       char *buf = NULL;
  71
  72       if (fd != AT_FDCWD && file[0] != '/')
  73         {
  74           size_t filelen = strlen (file);
  75           if (__builtin_expect (filelen == 0, 0))
  76             {
  77               __set_errno (ENOENT);
  78               return -1;
  79             }
  80
  81           static const char procfd[] = "/proc/self/fd/%d/%s";
  82           /* Buffer for the path name we are going to use.  It consists of
  83              - the string /proc/self/fd/
  84              - the file descriptor number
  85              - the file name provided.
  86              The final NUL is included in the sizeof.   A bit of overhead
  87              due to the format elements compensates for possible negative
  88              numbers.  */
  89           size_t buflen = sizeof (procfd) + sizeof (int) * 3 + filelen;
  90           buf = alloca (buflen);
  91
  92           __snprintf (buf, buflen, procfd, fd, file);
  93           file = buf;
  94         }
  95
  96       int result;
  97       INTERNAL_SYSCALL_DECL (err);
  98
  99 # ifdef __NR_laccess
 100       if (flag & AT_SYMLINK_NOFOLLOW)
 101         result = INTERNAL_SYSCALL (laccess, err, 2, file, mode);
 102       else
 103 # endif
 104         result = INTERNAL_SYSCALL (access, err, 2, file, mode);
 105
 106       if (__builtin_expect (INTERNAL_SYSCALL_ERROR_P (result, err), 0))
 107         {
 108           __atfct_seterrno (INTERNAL_SYSCALL_ERRNO (result, err), fd, buf);
 109           result = -1;
 110         }
 111
 112       return result;
 113     }
 114 #endif
 115
 116   struct stat64 stats;
 117   if (fstatat64 (fd, file, &stats, flag & AT_SYMLINK_NOFOLLOW))
 118     return -1;
 119
 120   mode &= (X_OK | W_OK | R_OK); /* Clear any bogus bits. */
 121 #if R_OK != S_IROTH || W_OK != S_IWOTH || X_OK != S_IXOTH
 122 # error Oops, portability assumptions incorrect.
 123 #endif
 124
 125   if (mode == F_OK)
 126     return 0;                   /* The file exists. */
 127
 128   uid_t uid = (flag & AT_EACCESS) ? __geteuid () : __getuid ();
 129
 130   /* The super-user can read and write any file, and execute any file
 131      that anyone can execute. */
 132   if (uid == 0 && ((mode & X_OK) == 0
 133                    || (stats.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))))
 134     return 0;
 135
 136   int granted = (uid == stats.st_uid
 137                  ? (unsigned int) (stats.st_mode & (mode << 6)) >> 6
 138                  : (stats.st_gid == ((flag & AT_EACCESS)
 139                                      ? __getegid () : __getgid ())
 140                     || __group_member (stats.st_gid))
 141                  ? (unsigned int) (stats.st_mode & (mode << 3)) >> 3
 142                  : (stats.st_mode & mode));
 143
 144   if (granted == mode)
 145     return 0;
 146
 147   __set_errno (EACCES);
 148   return -1;
 149 }