Page MenuHomeFreeBSD
Differential D20795 Diff 59163 usr.bin/proccontrol/proccontrol.c

Changeset View

Standalone View

View Options

usr.bin/proccontrol/proccontrol.c

Show All 37 Lines
#include <string.h> #include <string.h>
#include <unistd.h> #include <unistd.h>
enum { enum {
MODE_ASLR, MODE_ASLR,
MODE_INVALID, MODE_INVALID,
MODE_TRACE, MODE_TRACE,
MODE_TRAPCAP, MODE_TRAPCAP,
MODE_PROTMAX,
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
MODE_KPTI, MODE_KPTI,
#endif #endif
}; };
static pid_t static pid_t
str2pid(const char *str) str2pid(const char *str)
{ {
Show All 13 Lines
#else #else
#define KPTI_USAGE #define KPTI_USAGE
#endif #endif
static void __dead2 static void __dead2
usage(void) usage(void)
{ {
fprintf(stderr, "Usage: proccontrol -m (aslr|trace|trapcap" fprintf(stderr, "Usage: proccontrol -m (aslr|trace|trapcap|protmax"
emasteUnsubmitted
Done
Inline Actions

alpha order

emaste: alpha order
KPTI_USAGE") [-q] " KPTI_USAGE") [-q] "
"[-s (enable|disable)] [-p pid | command]\n"); "[-s (enable|disable)] [-p pid | command]\n");
exit(1); exit(1);
} }
int int
main(int argc, char *argv[]) main(int argc, char *argv[])
{ {
Show All 9 Lines while ((ch = getopt(argc, argv, "m:qs:p:")) != -1) {
switch (ch) { switch (ch) {
case 'm': case 'm':
if (strcmp(optarg, "aslr") == 0) if (strcmp(optarg, "aslr") == 0)
mode = MODE_ASLR; mode = MODE_ASLR;
else if (strcmp(optarg, "trace") == 0) else if (strcmp(optarg, "trace") == 0)
mode = MODE_TRACE; mode = MODE_TRACE;
else if (strcmp(optarg, "trapcap") == 0) else if (strcmp(optarg, "trapcap") == 0)
mode = MODE_TRAPCAP; mode = MODE_TRAPCAP;
else if (strcmp(optarg, "protmax") == 0)
mode = MODE_PROTMAX;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
else if (strcmp(optarg, "kpti") == 0) else if (strcmp(optarg, "kpti") == 0)
mode = MODE_KPTI; mode = MODE_KPTI;
#endif #endif
else else
usage(); usage();
break; break;
case 's': case 's':
Show All 33 Lines case MODE_ASLR:
error = procctl(P_PID, pid, PROC_ASLR_STATUS, &arg); error = procctl(P_PID, pid, PROC_ASLR_STATUS, &arg);
break; break;
case MODE_TRACE: case MODE_TRACE:
error = procctl(P_PID, pid, PROC_TRACE_STATUS, &arg); error = procctl(P_PID, pid, PROC_TRACE_STATUS, &arg);
break; break;
case MODE_TRAPCAP: case MODE_TRAPCAP:
error = procctl(P_PID, pid, PROC_TRAPCAP_STATUS, &arg); error = procctl(P_PID, pid, PROC_TRAPCAP_STATUS, &arg);
break; break;
case MODE_PROTMAX:
error = procctl(P_PID, pid, PROC_PROTMAX_STATUS, &arg);
break;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
case MODE_KPTI: case MODE_KPTI:
error = procctl(P_PID, pid, PROC_KPTI_STATUS, &arg); error = procctl(P_PID, pid, PROC_KPTI_STATUS, &arg);
break; break;
#endif #endif
default: default:
usage(); usage();
break; break;
Show All 31 Lines case MODE_TRAPCAP:
case PROC_TRAPCAP_CTL_ENABLE: case PROC_TRAPCAP_CTL_ENABLE:
printf("enabled\n"); printf("enabled\n");
break; break;
case PROC_TRAPCAP_CTL_DISABLE: case PROC_TRAPCAP_CTL_DISABLE:
printf("disabled\n"); printf("disabled\n");
break; break;
} }
break; break;
case MODE_PROTMAX:
switch (arg & ~PROC_PROTMAX_ACTIVE) {
case PROC_PROTMAX_FORCE_ENABLE:
printf("force enabled");
break;
case PROC_PROTMAX_FORCE_DISABLE:
printf("force disabled");
break;
case PROC_PROTMAX_NOFORCE:
printf("not forced");
break;
}
if ((arg & PROC_PROTMAX_ACTIVE) != 0)
printf(", active\n");
else
printf(", not active\n");
break;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
case MODE_KPTI: case MODE_KPTI:
switch (arg & ~PROC_KPTI_STATUS_ACTIVE) { switch (arg & ~PROC_KPTI_STATUS_ACTIVE) {
case PROC_KPTI_CTL_ENABLE_ON_EXEC: case PROC_KPTI_CTL_ENABLE_ON_EXEC:
printf("enabled"); printf("enabled");
break; break;
case PROC_KPTI_CTL_DISABLE_ON_EXEC: case PROC_KPTI_CTL_DISABLE_ON_EXEC:
printf("disabled"); printf("disabled");
Show All 17 Lines case MODE_TRACE:
arg = enable ? PROC_TRACE_CTL_ENABLE : arg = enable ? PROC_TRACE_CTL_ENABLE :
PROC_TRACE_CTL_DISABLE; PROC_TRACE_CTL_DISABLE;
error = procctl(P_PID, pid, PROC_TRACE_CTL, &arg); error = procctl(P_PID, pid, PROC_TRACE_CTL, &arg);
break; break;
case MODE_TRAPCAP: case MODE_TRAPCAP:
arg = enable ? PROC_TRAPCAP_CTL_ENABLE : arg = enable ? PROC_TRAPCAP_CTL_ENABLE :
PROC_TRAPCAP_CTL_DISABLE; PROC_TRAPCAP_CTL_DISABLE;
error = procctl(P_PID, pid, PROC_TRAPCAP_CTL, &arg); error = procctl(P_PID, pid, PROC_TRAPCAP_CTL, &arg);
break;
case MODE_PROTMAX:
arg = enable ? PROC_PROTMAX_FORCE_ENABLE :
PROC_PROTMAX_FORCE_DISABLE;
error = procctl(P_PID, pid, PROC_PROTMAX_CTL, &arg);
break; break;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
case MODE_KPTI: case MODE_KPTI:
arg = enable ? PROC_KPTI_CTL_ENABLE_ON_EXEC : arg = enable ? PROC_KPTI_CTL_ENABLE_ON_EXEC :
PROC_KPTI_CTL_DISABLE_ON_EXEC; PROC_KPTI_CTL_DISABLE_ON_EXEC;
error = procctl(P_PID, pid, PROC_KPTI_CTL, &arg); error = procctl(P_PID, pid, PROC_KPTI_CTL, &arg);
break; break;
#endif #endif
Show All 13 Lines