Page MenuHomeFreeBSD
Differential D441 Diff 1070 sys/security/audit/audit_pipe.c

Changeset View

Standalone View

View Options

sys/security/audit/audit_pipe.c

Context not available.
#define AUDIT_PIPE_ASYNC 0x00000001 #define AUDIT_PIPE_ASYNC 0x00000001
#define AUDIT_PIPE_NBIO 0x00000002 #define AUDIT_PIPE_NBIO 0x00000002
struct audit_pipe { struct audit_pipe {
int ap_open; /* Device open? */
u_int ap_flags; u_int ap_flags;
struct selinfo ap_selinfo; struct selinfo ap_selinfo;
Context not available.
#define AUDIT_PIPE_LIST_LOCK_INIT() rw_init(&audit_pipe_lock, \ #define AUDIT_PIPE_LIST_LOCK_INIT() rw_init(&audit_pipe_lock, \
"audit_pipe_list_lock") "audit_pipe_list_lock")
#define AUDIT_PIPE_LIST_LOCK_DESTROY() rw_destroy(&audit_pipe_lock)
#define AUDIT_PIPE_LIST_RLOCK() rw_rlock(&audit_pipe_lock) #define AUDIT_PIPE_LIST_RLOCK() rw_rlock(&audit_pipe_lock)
#define AUDIT_PIPE_LIST_RUNLOCK() rw_runlock(&audit_pipe_lock) #define AUDIT_PIPE_LIST_RUNLOCK() rw_runlock(&audit_pipe_lock)
#define AUDIT_PIPE_LIST_WLOCK() rw_wlock(&audit_pipe_lock) #define AUDIT_PIPE_LIST_WLOCK() rw_wlock(&audit_pipe_lock)
Context not available.
#define AUDIT_PIPE_LIST_WUNLOCK() rw_wunlock(&audit_pipe_lock) #define AUDIT_PIPE_LIST_WUNLOCK() rw_wunlock(&audit_pipe_lock)
/* /*
* Cloning related variables and constants. * Audit pipe device.
*/ */
#define AUDIT_PIPE_NAME "auditpipe" static struct cdev *audit_pipe_dev;
static eventhandler_tag audit_pipe_eh_tag;
static struct clonedevs *audit_pipe_clones;
#define AUDIT_PIPE_NAME "auditpipe"
/* /*
* Special device methods and definition. * Special device methods and definition.
*/ */
Context not available.
static struct cdevsw audit_pipe_cdevsw = { static struct cdevsw audit_pipe_cdevsw = {
.d_version = D_VERSION, .d_version = D_VERSION,
.d_flags = D_NEEDMINOR,
.d_open = audit_pipe_open, .d_open = audit_pipe_open,
.d_close = audit_pipe_close, .d_close = audit_pipe_close,
.d_read = audit_pipe_read, .d_read = audit_pipe_read,
Context not available.
{ {
struct audit_pipe *ap; struct audit_pipe *ap;
AUDIT_PIPE_LIST_WLOCK_ASSERT();
ap = malloc(sizeof(*ap), M_AUDIT_PIPE, M_NOWAIT | M_ZERO); ap = malloc(sizeof(*ap), M_AUDIT_PIPE, M_NOWAIT | M_ZERO);
if (ap == NULL) if (ap == NULL)
return (NULL); return (NULL);
Context not available.
/* /*
* Add to global list and update global statistics. * Add to global list and update global statistics.
*/ */
AUDIT_PIPE_LIST_WLOCK();
TAILQ_INSERT_HEAD(&audit_pipe_list, ap, ap_list); TAILQ_INSERT_HEAD(&audit_pipe_list, ap, ap_list);
audit_pipe_count++; audit_pipe_count++;
audit_pipe_ever++; audit_pipe_ever++;
AUDIT_PIPE_LIST_WUNLOCK();
return (ap); return (ap);
} }
Context not available.
audit_pipe_count--; audit_pipe_count--;
} }
/*
* Audit pipe clone routine -- provide specific requested audit pipe, or a
* fresh one if a specific one is not requested.
*/
static void static void
audit_pipe_clone(void *arg, struct ucred *cred, char *name, int namelen, audit_pipe_dtor(void *arg)
struct cdev **dev)
{ {
int i, u; struct audit_pipe *ap;
if (*dev != NULL) ap = arg;
return; AUDIT_PIPE_LIST_WLOCK();
AUDIT_PIPE_LOCK(ap);
if (strcmp(name, AUDIT_PIPE_NAME) == 0) audit_pipe_free(ap);
u = -1; AUDIT_PIPE_LIST_WUNLOCK();
else if (dev_stdclone(name, NULL, AUDIT_PIPE_NAME, &u) != 1)
return;
i = clone_create(&audit_pipe_clones, &audit_pipe_cdevsw, &u, dev, 0);
if (i)
*dev = make_dev_credf(MAKEDEV_REF, &audit_pipe_cdevsw, u, cred,
UID_ROOT, GID_WHEEL, 0600, "%s%d", AUDIT_PIPE_NAME, u);
} }
/* /*
Context not available.
audit_pipe_open(struct cdev *dev, int oflags, int devtype, struct thread *td) audit_pipe_open(struct cdev *dev, int oflags, int devtype, struct thread *td)
{ {
struct audit_pipe *ap; struct audit_pipe *ap;
int error;
AUDIT_PIPE_LIST_WLOCK(); ap = audit_pipe_alloc();
ap = dev->si_drv1;
if (ap == NULL) { if (ap == NULL) {
ap = audit_pipe_alloc(); return (ENOMEM);
if (ap == NULL) { }
AUDIT_PIPE_LIST_WUNLOCK(); fsetown(td->td_proc->p_pid, &ap->ap_sigio);
return (ENOMEM); error = devfs_set_cdevpriv(ap, audit_pipe_dtor);
} if (error != 0) {
dev->si_drv1 = ap; AUDIT_PIPE_LIST_WLOCK();
} else { audit_pipe_free(ap);
KASSERT(ap->ap_open, ("audit_pipe_open: ap && !ap_open"));
AUDIT_PIPE_LIST_WUNLOCK(); AUDIT_PIPE_LIST_WUNLOCK();
return (EBUSY);
} }
ap->ap_open = 1; /* No lock required yet. */
AUDIT_PIPE_LIST_WUNLOCK();
fsetown(td->td_proc->p_pid, &ap->ap_sigio);
return (0); return (0);
} }
Context not available.
audit_pipe_close(struct cdev *dev, int fflag, int devtype, struct thread *td) audit_pipe_close(struct cdev *dev, int fflag, int devtype, struct thread *td)
{ {
struct audit_pipe *ap; struct audit_pipe *ap;
int error;
ap = dev->si_drv1; error = devfs_get_cdevpriv((void **)&ap);
KASSERT(ap != NULL, ("audit_pipe_close: ap == NULL")); if (error != 0)
KASSERT(ap->ap_open, ("audit_pipe_close: !ap_open")); return (error);
funsetown(&ap->ap_sigio); funsetown(&ap->ap_sigio);
AUDIT_PIPE_LIST_WLOCK();
AUDIT_PIPE_LOCK(ap);
ap->ap_open = 0;
audit_pipe_free(ap);
dev->si_drv1 = NULL;
AUDIT_PIPE_LIST_WUNLOCK();
return (0); return (0);
} }
kibUnsubmitted
Not Done
Inline Actions

Why is this assignment left ?

kib: Why is this assignment left ?
Context not available.
int error, mode; int error, mode;
au_id_t auid; au_id_t auid;
ap = dev->si_drv1; error = devfs_get_cdevpriv((void **)&ap);
KASSERT(ap != NULL, ("audit_pipe_ioctl: ap == NULL")); if (error != 0)
return (error);
/* /*
* Audit pipe ioctls: first come standard device node ioctls, then * Audit pipe ioctls: first come standard device node ioctls, then
Context not available.
u_int toread; u_int toread;
int error; int error;
ap = dev->si_drv1; error = devfs_get_cdevpriv((void **)&ap);
KASSERT(ap != NULL, ("audit_pipe_read: ap == NULL")); if (error != 0)
return (error);
/* /*
* We hold an sx(9) lock over read and flush because we rely on the * We hold an sx(9) lock over read and flush because we rely on the
Context not available.
audit_pipe_poll(struct cdev *dev, int events, struct thread *td) audit_pipe_poll(struct cdev *dev, int events, struct thread *td)
{ {
struct audit_pipe *ap; struct audit_pipe *ap;
int revents; int error, revents;
revents = 0; revents = 0;
ap = dev->si_drv1; error = devfs_get_cdevpriv((void **)&ap);
KASSERT(ap != NULL, ("audit_pipe_poll: ap == NULL")); if (error != 0)
return (error);
if (events & (POLLIN | POLLRDNORM)) { if (events & (POLLIN | POLLRDNORM)) {
AUDIT_PIPE_LOCK(ap); AUDIT_PIPE_LOCK(ap);
if (TAILQ_FIRST(&ap->ap_queue) != NULL) if (TAILQ_FIRST(&ap->ap_queue) != NULL)
Context not available.
audit_pipe_kqfilter(struct cdev *dev, struct knote *kn) audit_pipe_kqfilter(struct cdev *dev, struct knote *kn)
{ {
struct audit_pipe *ap; struct audit_pipe *ap;
int error;
ap = dev->si_drv1; error = devfs_get_cdevpriv((void **)&ap);
KASSERT(ap != NULL, ("audit_pipe_kqfilter: ap == NULL")); if (error != 0)
return (error);
if (kn->kn_filter != EVFILT_READ) if (kn->kn_filter != EVFILT_READ)
return (EINVAL); return (EINVAL);
Context not available.
struct audit_pipe *ap; struct audit_pipe *ap;
ap = (struct audit_pipe *)kn->kn_hook; ap = (struct audit_pipe *)kn->kn_hook;
KASSERT(ap != NULL, ("audit_pipe_kqread: ap == NULL"));
AUDIT_PIPE_LOCK_ASSERT(ap); AUDIT_PIPE_LOCK_ASSERT(ap);
if (ap->ap_qlen != 0) { if (ap->ap_qlen != 0) {
Context not available.
struct audit_pipe *ap; struct audit_pipe *ap;
ap = (struct audit_pipe *)kn->kn_hook; ap = (struct audit_pipe *)kn->kn_hook;
KASSERT(ap != NULL, ("audit_pipe_kqdetach: ap == NULL"));
AUDIT_PIPE_LOCK(ap); AUDIT_PIPE_LOCK(ap);
knlist_remove(&ap->ap_selinfo.si_note, kn, 1); knlist_remove(&ap->ap_selinfo.si_note, kn, 1);
AUDIT_PIPE_UNLOCK(ap); AUDIT_PIPE_UNLOCK(ap);
Context not available.
TAILQ_INIT(&audit_pipe_list); TAILQ_INIT(&audit_pipe_list);
AUDIT_PIPE_LIST_LOCK_INIT(); AUDIT_PIPE_LIST_LOCK_INIT();
audit_pipe_dev = make_dev(&audit_pipe_cdevsw, 0, UID_ROOT,
clone_setup(&audit_pipe_clones); GID_WHEEL, 0600, "%s", AUDIT_PIPE_NAME);
audit_pipe_eh_tag = EVENTHANDLER_REGISTER(dev_clone, if (audit_pipe_dev == NULL) {
audit_pipe_clone, 0, 1000); AUDIT_PIPE_LIST_LOCK_DESTROY();
if (audit_pipe_eh_tag == NULL) panic("Can't initialize audit pipe subsystem");
panic("audit_pipe_init: EVENTHANDLER_REGISTER"); }
} }
SYSINIT(audit_pipe_init, SI_SUB_DRIVERS, SI_ORDER_MIDDLE, audit_pipe_init, SYSINIT(audit_pipe_init, SI_SUB_DRIVERS, SI_ORDER_MIDDLE, audit_pipe_init,
Context not available.