include/exec_attr.h

   1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 /*
  22  * Copyright 2014 Garrett D'Amore <garrett@damore.org>
  23  *
  24  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
  25  * Use is subject to license terms.
  26  */
  27
  28 #ifndef _EXEC_ATTR_H
  29 #define _EXEC_ATTR_H
  30
  31 #ifdef  __cplusplus
  32 extern "C" {
  33 #endif
  34
  35
  36 #include <sys/types.h>
  37 #include <secdb.h>
  38
  39
  40 #define EXECATTR_FILENAME               "/etc/security/exec_attr"
  41 #define EXECATTR_DB_NAME                "exec_attr.org_dir"
  42 #define EXECATTR_DB_NCOL                7       /* total columns */
  43 #define EXECATTR_DB_NKEYCOL             3       /* total searchable columns */
  44 #define EXECATTR_DB_TBLT                "exec_attr_tbl"
  45 #define EXECATTR_NAME_DEFAULT_KW        "nobody"
  46
  47 #define EXECATTR_COL0_KW                "name"
  48 #define EXECATTR_COL1_KW                "policy"
  49 #define EXECATTR_COL2_KW                "type"
  50 #define EXECATTR_COL3_KW                "res1"
  51 #define EXECATTR_COL4_KW                "res2"
  52 #define EXECATTR_COL5_KW                "id"
  53 #define EXECATTR_COL6_KW                "attr"
  54
  55 /*
  56  * indices of searchable columns
  57  */
  58 #define EXECATTR_KEYCOL0                0       /* name */
  59 #define EXECATTR_KEYCOL1                1       /* policy */
  60 #define EXECATTR_KEYCOL2                5       /* id */
  61
  62
  63 /*
  64  * Some macros used internally by the nsswitch code
  65  */
  66
  67 /*
  68  * These macros are bitmasks. GET_ONE and GET_ALL are bitfield 0
  69  * and thus mutually exclusive. __SEARCH_ALL_POLLS is bitfield
  70  * 1 and can be logically ORed with GET_ALL if one wants to get
  71  * all matching profiles from all policies, not just the ones from
  72  * the currently active policy
  73  *
  74  * Testing for these values should be done using the IS_* macros
  75  * defined below.
  76  */
  77 #define GET_ONE                 0
  78 #define GET_ALL                 1
  79 #define __SEARCH_ALL_POLS       2
  80
  81 /* get only one exec_attr from list */
  82 #define IS_GET_ONE(f) (((f) & GET_ALL) == 0)
  83 /* get all matching exec_attrs in list */
  84 #define IS_GET_ALL(f) (((f) & GET_ALL) == 1)
  85 /* search all existing policies */
  86 #define IS_SEARCH_ALL(f) (((f) & __SEARCH_ALL_POLS) == __SEARCH_ALL_POLS)
  87
  88 /*
  89  * Key words used in the exec_attr database
  90  */
  91 #define EXECATTR_EUID_KW        "euid"
  92 #define EXECATTR_EGID_KW        "egid"
  93 #define EXECATTR_UID_KW         "uid"
  94 #define EXECATTR_GID_KW         "gid"
  95 #define EXECATTR_LPRIV_KW       "limitprivs"
  96 #define EXECATTR_IPRIV_KW       "privs"
  97
  98 /*
  99  * Nsswitch representation of execution attributes.
 100  */
 101 typedef struct execstr_s {
 102         char   *name;           /* profile name */
 103         char   *policy;         /* suser/rbac */
 104         char   *type;           /* cmd/act */
 105         char   *res1;           /* reserved for future use */
 106         char   *res2;           /* reserved for future use */
 107         char   *id;             /* unique ID */
 108         char   *attr;           /* string of key-value pair attributes */
 109         struct execstr_s *next; /* pointer to next entry */
 110 } execstr_t;
 111
 112 typedef struct execattr_s {
 113         char   *name;           /* profile name */
 114         char   *policy;         /* suser/rbac */
 115         char   *type;           /* cmd/act */
 116         char   *res1;           /* reserved for future use */
 117         char   *res2;           /* reserved for future use */
 118         char   *id;             /* unique ID */
 119         kva_t  *attr;           /* array of key-value pair attributes */
 120         struct execattr_s *next;        /* pointer to next entry */
 121 } execattr_t;
 122
 123 typedef struct __private_execattr {
 124         const char *name;
 125         const char *type;
 126         const char *id;
 127         const char *policy;
 128         int search_flag;
 129         execstr_t *head_exec;
 130         execstr_t *prev_exec;
 131 } _priv_execattr;               /* Un-supported. For Sun internal use only */
 132
 133
 134 extern execattr_t *getexecattr(void);
 135 extern execattr_t *getexecuser(const char *, const char *, const char *, int);
 136 extern execattr_t *getexecprof(const char *, const char *, const char *, int);
 137 extern execattr_t *match_execattr(execattr_t *, const char *, const char *, \
 138         const char *);
 139 extern void free_execattr(execattr_t *);
 140 extern void setexecattr(void);
 141 extern void endexecattr(void);
 142
 143 #ifdef __cplusplus
 144 }
 145 #endif
 146
 147 #endif  /* _EXEC_ATTR_H */