usr/src/lib/libc/inc/priv_private.h

   1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21
  22 /*
  23  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
  24  * Use is subject to license terms.
  25  */
  26
  27 #ifndef _PRIV_PRIVATE_H
  28 #define _PRIV_PRIVATE_H
  29
  30 #pragma ident   "%Z%%M% %I%     %E% SMI"
  31
  32 #include <sys/types.h>
  33 #include <sys/priv.h>
  34 #include <limits.h>
  35
  36 /*
  37  * Libc private privilege data.
  38  */
  39
  40 #ifdef __cplusplus
  41 extern "C" {
  42 #endif
  43
  44 #define LOADPRIVDATA(d)         d = __priv_getdata()
  45 #define GETPRIVDATA()           __priv_getdata()
  46 #define LOCKPRIVDATA()          { \
  47                                         /* Data already allocated */ \
  48                                         (void) lock_data(); \
  49                                         (void) refresh_data(); \
  50                                 }
  51 #define UNLOCKPRIVDATA()        unlock_data()
  52 #define WITHPRIVLOCKED(t, b, x) { \
  53                                         t __result; \
  54                                         if (lock_data() != 0) \
  55                                                 return (b); \
  56                                         __result = (x); \
  57                                         if (__result == (b) && refresh_data()) \
  58                                                 __result = (x); \
  59                                         unlock_data(); \
  60                                         return (__result); \
  61                                 }
  62
  63 /*
  64  * Privilege mask macros.
  65  */
  66 #define __NBWRD         (CHAR_BIT * sizeof (priv_chunk_t))
  67 #define privmask(n)     (1 << ((__NBWRD - 1) - ((n) % __NBWRD)))
  68 #define privword(n)     ((n)/__NBWRD)
  69
  70 /*
  71  * Same as the functions, but for numeric privileges.
  72  */
  73 #define PRIV_ADDSET(a, p)       ((priv_chunk_t *)(a))[privword(p)] |= \
  74                                                         privmask(p)
  75 #define PRIV_DELSET(a, p)       ((priv_chunk_t *)(a))[privword(p)] &= \
  76                                                         ~privmask(p)
  77 #define PRIV_ISMEMBER(a, p)     ((((priv_chunk_t *)(a))[privword(p)] & \
  78                                                         privmask(p)) != 0)
  79
  80 /*
  81  * The structure is static except for the setsort, privnames and nprivs
  82  * field.  The pinfo structure initially has sufficient room and the kernel
  83  * guarantees no offset changes so we can copy a new structure on top of it.
  84  * The locking stratgegy is this: we lock it when we need to reference any
  85  * of the volatile fields.
  86  */
  87 typedef struct priv_data {
  88         size_t                  pd_setsize;             /* In bytes */
  89         int                     pd_nsets, pd_nprivs;
  90         uint32_t                pd_ucredsize;
  91         char                    **pd_setnames;
  92         char                    **pd_privnames;
  93         int                     *pd_setsort;
  94         priv_impl_info_t        *pd_pinfo;
  95         priv_set_t              *pd_basicset;
  96         priv_set_t              *pd_zoneset;
  97 } priv_data_t;
  98
  99 extern priv_data_t *__priv_getdata(void);
 100 extern priv_data_t *__priv_parse_info(priv_impl_info_t *);
 101 extern void __priv_free_info(priv_data_t *);
 102 extern priv_data_t *privdata;
 103
 104 extern int lock_data(void);
 105 extern boolean_t refresh_data(void);
 106 extern void unlock_data(void);
 107
 108 extern boolean_t __priv_isemptyset(priv_data_t *, const priv_set_t *);
 109 extern boolean_t __priv_isfullset(priv_data_t *, const priv_set_t *);
 110 extern boolean_t __priv_issubset(priv_data_t *, const priv_set_t *,
 111                                 const priv_set_t *);
 112 extern const char *__priv_getbynum(const priv_data_t *, int);
 113
 114 extern int getprivinfo(priv_impl_info_t *, size_t);
 115
 116 extern priv_set_t *priv_basic(void);
 117
 118 #ifdef __cplusplus
 119 }
 120 #endif
 121
 122 #endif /* _PRIV_PRIVATE_H */