WebSVN – HelenOS-historic – Diff – /kernel/trunk/generic/src/security/cap.c


/*
 * Copyright (C) 2006 Jakub Jermar
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * - Redistributions of source code must retain the above copyright
 *   notice, this list of conditions and the following disclaimer.
 * - Redistributions in binary form must reproduce the above copyright
 *   notice, this list of conditions and the following disclaimer in the
 *   documentation and/or other materials provided with the distribution.
 * - The name of the author may not be used to endorse or promote products
 *   derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */
 
 /** @addtogroup generic   
 * @{
 */
 
/**
 * @file    cap.c
 * @brief   Capabilities control.
 *
 * @see cap.h
 */
 
#include <security/cap.h>
#include <proc/task.h>
#include <synch/spinlock.h>
#include <syscall/sysarg64.h>
#include <syscall/copy.h>
#include <arch.h>
#include <typedefs.h>
#include <errno.h>
 
/** Set capabilities.
 *
 * @param t Task whose capabilities are to be changed.
 * @param caps New set of capabilities.
 */
void cap_set(task_t *t, cap_t caps)
{
    ipl_t ipl;
   
    ipl = interrupts_disable();
    spinlock_lock(&t->lock);
   
    t->capabilities = caps;
   
    spinlock_unlock(&t->lock);
    interrupts_restore(ipl);
}
 
/** Get capabilities.
 *
 * @param t Task whose capabilities are to be returned.
 * @return Task's capabilities.
 */
cap_t cap_get(task_t *t)
{
    ipl_t ipl;
    cap_t caps;
   
    ipl = interrupts_disable();
    spinlock_lock(&t->lock);
   
    caps = t->capabilities;
   
    spinlock_unlock(&t->lock);
    interrupts_restore(ipl);
   
    return caps;
}
 
/** Grant capabilities to a task.
 *
 * The calling task must have the CAP_CAP capability.
 *
 * @param uspace_taskid_arg Userspace structure holding destination task ID.
 * @param caps Capabilities to grant.
 *
 * @return Zero on success or an error code from @ref errno.h.
 */
__native sys_cap_grant(sysarg64_t *uspace_taskid_arg, cap_t caps)
{
    sysarg64_t taskid_arg;
    task_t *t;
    ipl_t ipl;
    int rc;
   
    if (!(cap_get(TASK) & CAP_CAP))
        return (__native) EPERM;
   
    rc = copy_from_uspace(&taskid_arg, uspace_taskid_arg, sizeof(sysarg64_t));
    if (rc != 0)
        return (__native) rc;
       
    ipl = interrupts_disable();
    spinlock_lock(&tasks_lock);
    t = task_find_by_id((task_id_t) taskid_arg.value);
    if (!t) {
        spinlock_unlock(&tasks_lock);
        interrupts_restore(ipl);
        return (__native) ENOENT;
    }
   
    spinlock_lock(&t->lock);
    cap_set(t, cap_get(t) | caps);
    spinlock_unlock(&t->lock);
   
    spinlock_unlock(&tasks_lock);
   
 
   
    interrupts_restore(ipl);   
    return 0;
}
 
/** Revoke capabilities from a task.
 *
 * The calling task must have the CAP_CAP capability or the caller must
 * attempt to revoke capabilities from itself.
 *
 * @param uspace_taskid_arg Userspace structure holding destination task ID.
 * @param caps Capabilities to revoke.
 *
 * @return Zero on success or an error code from @ref errno.h.
 */
__native sys_cap_revoke(sysarg64_t *uspace_taskid_arg, cap_t caps)
{
    sysarg64_t taskid_arg;
    task_t *t;
    ipl_t ipl;
    int rc;
   
    rc = copy_from_uspace(&taskid_arg, uspace_taskid_arg, sizeof(sysarg64_t));
    if (rc != 0)
        return (__native) rc;
 
    ipl = interrupts_disable();
    spinlock_lock(&tasks_lock);
    t = task_find_by_id((task_id_t) taskid_arg.value);
    if (!t) {
        spinlock_unlock(&tasks_lock);
        interrupts_restore(ipl);
        return (__native) ENOENT;
    }
 
    /*
     * Revoking capabilities is different from granting them in that
     * a task can revoke capabilities from itself even if it
     * doesn't have CAP_CAP.
     */
    if (!(cap_get(TASK) & CAP_CAP) || !(t == TASK)) {
        spinlock_unlock(&tasks_lock);
        interrupts_restore(ipl);
        return (__native) EPERM;
    }
   
    spinlock_lock(&t->lock);
    cap_set(t, cap_get(t) & ~caps);
    spinlock_unlock(&t->lock);
 
    spinlock_unlock(&tasks_lock);
 
    interrupts_restore(ipl);
    return 0;
}
 
 /** @}
 */
 
 

Rev 1588	Rev 1702
1	/*	1	/*
2	* Copyright (C) 2006 Jakub Jermar	2	* Copyright (C) 2006 Jakub Jermar
3	* All rights reserved.	3	* All rights reserved.
4	*	4	*
5	* Redistribution and use in source and binary forms, with or without	5	* Redistribution and use in source and binary forms, with or without
6	* modification, are permitted provided that the following conditions	6	* modification, are permitted provided that the following conditions
7	* are met:	7	* are met:
8	*	8	*
9	* - Redistributions of source code must retain the above copyright	9	* - Redistributions of source code must retain the above copyright
10	* notice, this list of conditions and the following disclaimer.	10	* notice, this list of conditions and the following disclaimer.
11	* - Redistributions in binary form must reproduce the above copyright	11	* - Redistributions in binary form must reproduce the above copyright
12	* notice, this list of conditions and the following disclaimer in the	12	* notice, this list of conditions and the following disclaimer in the
13	* documentation and/or other materials provided with the distribution.	13	* documentation and/or other materials provided with the distribution.
14	* - The name of the author may not be used to endorse or promote products	14	* - The name of the author may not be used to endorse or promote products
15	* derived from this software without specific prior written permission.	15	* derived from this software without specific prior written permission.
16	*	16	*
17	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR	17	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES	18	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.	19	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,	20	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT	21	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,	22	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY	23	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT	24	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF	25	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.	26	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27	*/	27	*/
28		28
-		29	/** @addtogroup generic
-		30	* @{
-		31	*/
-		32
29	/**	33	/**
30	* @file cap.c	34	* @file cap.c
31	* @brief Capabilities control.	35	* @brief Capabilities control.
32	*	36	*
33	* @see cap.h	37	* @see cap.h
34	*/	38	*/
35		39
36	#include <security/cap.h>	40	#include <security/cap.h>
37	#include <proc/task.h>	41	#include <proc/task.h>
38	#include <synch/spinlock.h>	42	#include <synch/spinlock.h>
39	#include <syscall/sysarg64.h>	43	#include <syscall/sysarg64.h>
40	#include <syscall/copy.h>	44	#include <syscall/copy.h>
41	#include <arch.h>	45	#include <arch.h>
42	#include <typedefs.h>	46	#include <typedefs.h>
43	#include <errno.h>	47	#include <errno.h>
44		48
45	/** Set capabilities.	49	/** Set capabilities.
46	*	50	*
47	* @param t Task whose capabilities are to be changed.	51	* @param t Task whose capabilities are to be changed.
48	* @param caps New set of capabilities.	52	* @param caps New set of capabilities.
49	*/	53	*/
50	void cap_set(task_t *t, cap_t caps)	54	void cap_set(task_t *t, cap_t caps)
51	{	55	{
52	ipl_t ipl;	56	ipl_t ipl;
53		57
54	ipl = interrupts_disable();	58	ipl = interrupts_disable();
55	spinlock_lock(&t->lock);	59	spinlock_lock(&t->lock);
56		60
57	t->capabilities = caps;	61	t->capabilities = caps;
58		62
59	spinlock_unlock(&t->lock);	63	spinlock_unlock(&t->lock);
60	interrupts_restore(ipl);	64	interrupts_restore(ipl);
61	}	65	}
62		66
63	/** Get capabilities.	67	/** Get capabilities.
64	*	68	*
65	* @param t Task whose capabilities are to be returned.	69	* @param t Task whose capabilities are to be returned.
66	* @return Task's capabilities.	70	* @return Task's capabilities.
67	*/	71	*/
68	cap_t cap_get(task_t *t)	72	cap_t cap_get(task_t *t)
69	{	73	{
70	ipl_t ipl;	74	ipl_t ipl;
71	cap_t caps;	75	cap_t caps;
72		76
73	ipl = interrupts_disable();	77	ipl = interrupts_disable();
74	spinlock_lock(&t->lock);	78	spinlock_lock(&t->lock);
75		79
76	caps = t->capabilities;	80	caps = t->capabilities;
77		81
78	spinlock_unlock(&t->lock);	82	spinlock_unlock(&t->lock);
79	interrupts_restore(ipl);	83	interrupts_restore(ipl);
80		84
81	return caps;	85	return caps;
82	}	86	}
83		87
84	/** Grant capabilities to a task.	88	/** Grant capabilities to a task.
85	*	89	*
86	* The calling task must have the CAP_CAP capability.	90	* The calling task must have the CAP_CAP capability.
87	*	91	*
88	* @param uspace_taskid_arg Userspace structure holding destination task ID.	92	* @param uspace_taskid_arg Userspace structure holding destination task ID.
89	* @param caps Capabilities to grant.	93	* @param caps Capabilities to grant.
90	*	94	*
91	* @return Zero on success or an error code from @ref errno.h.	95	* @return Zero on success or an error code from @ref errno.h.
92	*/	96	*/
93	__native sys_cap_grant(sysarg64_t *uspace_taskid_arg, cap_t caps)	97	__native sys_cap_grant(sysarg64_t *uspace_taskid_arg, cap_t caps)
94	{	98	{
95	sysarg64_t taskid_arg;	99	sysarg64_t taskid_arg;
96	task_t *t;	100	task_t *t;
97	ipl_t ipl;	101	ipl_t ipl;
98	int rc;	102	int rc;
99		103
100	if (!(cap_get(TASK) & CAP_CAP))	104	if (!(cap_get(TASK) & CAP_CAP))
101	return (__native) EPERM;	105	return (__native) EPERM;
102		106
103	rc = copy_from_uspace(&taskid_arg, uspace_taskid_arg, sizeof(sysarg64_t));	107	rc = copy_from_uspace(&taskid_arg, uspace_taskid_arg, sizeof(sysarg64_t));
104	if (rc != 0)	108	if (rc != 0)
105	return (__native) rc;	109	return (__native) rc;
106		110
107	ipl = interrupts_disable();	111	ipl = interrupts_disable();
108	spinlock_lock(&tasks_lock);	112	spinlock_lock(&tasks_lock);
109	t = task_find_by_id((task_id_t) taskid_arg.value);	113	t = task_find_by_id((task_id_t) taskid_arg.value);
110	if (!t) {	114	if (!t) {
111	spinlock_unlock(&tasks_lock);	115	spinlock_unlock(&tasks_lock);
112	interrupts_restore(ipl);	116	interrupts_restore(ipl);
113	return (__native) ENOENT;	117	return (__native) ENOENT;
114	}	118	}
115		119
116	spinlock_lock(&t->lock);	120	spinlock_lock(&t->lock);
117	cap_set(t, cap_get(t) \| caps);	121	cap_set(t, cap_get(t) \| caps);
118	spinlock_unlock(&t->lock);	122	spinlock_unlock(&t->lock);
119		123
120	spinlock_unlock(&tasks_lock);	124	spinlock_unlock(&tasks_lock);
121		125
122		126
123		127
124	interrupts_restore(ipl);	128	interrupts_restore(ipl);
125	return 0;	129	return 0;
126	}	130	}
127		131
128	/** Revoke capabilities from a task.	132	/** Revoke capabilities from a task.
129	*	133	*
130	* The calling task must have the CAP_CAP capability or the caller must	134	* The calling task must have the CAP_CAP capability or the caller must
131	* attempt to revoke capabilities from itself.	135	* attempt to revoke capabilities from itself.
132	*	136	*
133	* @param uspace_taskid_arg Userspace structure holding destination task ID.	137	* @param uspace_taskid_arg Userspace structure holding destination task ID.
134	* @param caps Capabilities to revoke.	138	* @param caps Capabilities to revoke.
135	*	139	*
136	* @return Zero on success or an error code from @ref errno.h.	140	* @return Zero on success or an error code from @ref errno.h.
137	*/	141	*/
138	__native sys_cap_revoke(sysarg64_t *uspace_taskid_arg, cap_t caps)	142	__native sys_cap_revoke(sysarg64_t *uspace_taskid_arg, cap_t caps)
139	{	143	{
140	sysarg64_t taskid_arg;	144	sysarg64_t taskid_arg;
141	task_t *t;	145	task_t *t;
142	ipl_t ipl;	146	ipl_t ipl;
143	int rc;	147	int rc;
144		148
145	rc = copy_from_uspace(&taskid_arg, uspace_taskid_arg, sizeof(sysarg64_t));	149	rc = copy_from_uspace(&taskid_arg, uspace_taskid_arg, sizeof(sysarg64_t));
146	if (rc != 0)	150	if (rc != 0)
147	return (__native) rc;	151	return (__native) rc;
148		152
149	ipl = interrupts_disable();	153	ipl = interrupts_disable();
150	spinlock_lock(&tasks_lock);	154	spinlock_lock(&tasks_lock);
151	t = task_find_by_id((task_id_t) taskid_arg.value);	155	t = task_find_by_id((task_id_t) taskid_arg.value);
152	if (!t) {	156	if (!t) {
153	spinlock_unlock(&tasks_lock);	157	spinlock_unlock(&tasks_lock);
154	interrupts_restore(ipl);	158	interrupts_restore(ipl);
155	return (__native) ENOENT;	159	return (__native) ENOENT;
156	}	160	}
157		161
158	/*	162	/*
159	* Revoking capabilities is different from granting them in that	163	* Revoking capabilities is different from granting them in that
160	* a task can revoke capabilities from itself even if it	164	* a task can revoke capabilities from itself even if it
161	* doesn't have CAP_CAP.	165	* doesn't have CAP_CAP.
162	*/	166	*/
163	if (!(cap_get(TASK) & CAP_CAP) \|\| !(t == TASK)) {	167	if (!(cap_get(TASK) & CAP_CAP) \|\| !(t == TASK)) {
164	spinlock_unlock(&tasks_lock);	168	spinlock_unlock(&tasks_lock);
165	interrupts_restore(ipl);	169	interrupts_restore(ipl);
166	return (__native) EPERM;	170	return (__native) EPERM;
167	}	171	}
168		172
169	spinlock_lock(&t->lock);	173	spinlock_lock(&t->lock);
170	cap_set(t, cap_get(t) & ~caps);	174	cap_set(t, cap_get(t) & ~caps);
171	spinlock_unlock(&t->lock);	175	spinlock_unlock(&t->lock);
172		176
173	spinlock_unlock(&tasks_lock);	177	spinlock_unlock(&tasks_lock);
174		178
175	interrupts_restore(ipl);	179	interrupts_restore(ipl);
176	return 0;	180	return 0;
177	}	181	}
-		182
-		183	/** @}
-		184	*/
-		185
178		186

Subversion Repositories HelenOS-historic

(root)/kernel/trunk/generic/src/security/cap.c – Rev 1588 → 1702