Page MenuHomeFreeBSD
Differential D31779 Diff 94568 usr.bin/proccontrol/proccontrol.c

Changeset View

Standalone View

View Options

usr.bin/proccontrol/proccontrol.c

Show All 40 Lines
enum { enum {
MODE_ASLR, MODE_ASLR,
MODE_INVALID, MODE_INVALID,
MODE_TRACE, MODE_TRACE,
MODE_TRAPCAP, MODE_TRAPCAP,
MODE_PROTMAX, MODE_PROTMAX,
MODE_STACKGAP, MODE_STACKGAP,
MODE_NO_NEW_PRIVS, MODE_NO_NEW_PRIVS,
MODE_WXORX,
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
MODE_KPTI, MODE_KPTI,
#endif #endif
#ifdef PROC_LA_CTL #ifdef PROC_LA_CTL
MODE_LA57, MODE_LA57,
MODE_LA48, MODE_LA48,
#endif #endif
}; };
Show All 23 Lines
#define LA_USAGE #define LA_USAGE
#endif #endif
static void __dead2 static void __dead2
usage(void) usage(void)
{ {
fprintf(stderr, "Usage: proccontrol -m (aslr|protmax|trace|trapcap|" fprintf(stderr, "Usage: proccontrol -m (aslr|protmax|trace|trapcap|"
"stackgap|nonewprivs"KPTI_USAGE LA_USAGE") [-q] " "stackgap|nonewprivs|wxorx"KPTI_USAGE LA_USAGE") [-q] "
"[-s (enable|disable)] [-p pid | command]\n"); "[-s (enable|disable)] [-p pid | command]\n");
exit(1); exit(1);
} }
int int
main(int argc, char *argv[]) main(int argc, char *argv[])
{ {
int arg, ch, error, mode; int arg, ch, error, mode;
Show All 14 Lines case 'm':
else if (strcmp(optarg, "trace") == 0) else if (strcmp(optarg, "trace") == 0)
mode = MODE_TRACE; mode = MODE_TRACE;
else if (strcmp(optarg, "trapcap") == 0) else if (strcmp(optarg, "trapcap") == 0)
mode = MODE_TRAPCAP; mode = MODE_TRAPCAP;
else if (strcmp(optarg, "stackgap") == 0) else if (strcmp(optarg, "stackgap") == 0)
mode = MODE_STACKGAP; mode = MODE_STACKGAP;
else if (strcmp(optarg, "nonewprivs") == 0) else if (strcmp(optarg, "nonewprivs") == 0)
mode = MODE_NO_NEW_PRIVS; mode = MODE_NO_NEW_PRIVS;
else if (strcmp(optarg, "wxorx") == 0)
mode = MODE_WXORX;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
else if (strcmp(optarg, "kpti") == 0) else if (strcmp(optarg, "kpti") == 0)
mode = MODE_KPTI; mode = MODE_KPTI;
#endif #endif
#ifdef PROC_LA_CTL #ifdef PROC_LA_CTL
else if (strcmp(optarg, "la57") == 0) else if (strcmp(optarg, "la57") == 0)
mode = MODE_LA57; mode = MODE_LA57;
else if (strcmp(optarg, "la48") == 0) else if (strcmp(optarg, "la48") == 0)
▲ Show 20 Lines • Show All 46 Lines • ▼ Show 20 Lines case MODE_TRAPCAP:
break; break;
case MODE_PROTMAX: case MODE_PROTMAX:
error = procctl(P_PID, pid, PROC_PROTMAX_STATUS, &arg); error = procctl(P_PID, pid, PROC_PROTMAX_STATUS, &arg);
break; break;
case MODE_STACKGAP: case MODE_STACKGAP:
error = procctl(P_PID, pid, PROC_STACKGAP_STATUS, &arg); error = procctl(P_PID, pid, PROC_STACKGAP_STATUS, &arg);
break; break;
case MODE_NO_NEW_PRIVS: case MODE_NO_NEW_PRIVS:
error = procctl(P_PID, pid, PROC_NO_NEW_PRIVS_STATUS, &arg); error = procctl(P_PID, pid, PROC_NO_NEW_PRIVS_STATUS,
&arg);
break; break;
case MODE_WXORX:
error = procctl(P_PID, pid, PROC_WXORX_STATUS, &arg);
break;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
case MODE_KPTI: case MODE_KPTI:
error = procctl(P_PID, pid, PROC_KPTI_STATUS, &arg); error = procctl(P_PID, pid, PROC_KPTI_STATUS, &arg);
break; break;
#endif #endif
#ifdef PROC_LA_CTL #ifdef PROC_LA_CTL
case MODE_LA57: case MODE_LA57:
case MODE_LA48: case MODE_LA48:
▲ Show 20 Lines • Show All 84 Lines • ▼ Show 20 Lines case MODE_NO_NEW_PRIVS:
case PROC_NO_NEW_PRIVS_ENABLE: case PROC_NO_NEW_PRIVS_ENABLE:
printf("enabled\n"); printf("enabled\n");
break; break;
case PROC_NO_NEW_PRIVS_DISABLE: case PROC_NO_NEW_PRIVS_DISABLE:
printf("disabled\n"); printf("disabled\n");
break; break;
} }
break; break;
case MODE_WXORX:
if ((arg & PROC_WXORX_DISABLE) != 0)
printf("disabled");
else
printf("enabled");
if ((arg & PROC_WXORX_ENABLE_ON_EXEC) != 0)
printf(", enabled on exec");
if ((arg & PROC_WXORX_ENFORCE) != 0)
printf(", enforced");
printf("\n");
break;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
case MODE_KPTI: case MODE_KPTI:
switch (arg & ~PROC_KPTI_STATUS_ACTIVE) { switch (arg & ~PROC_KPTI_STATUS_ACTIVE) {
case PROC_KPTI_CTL_ENABLE_ON_EXEC: case PROC_KPTI_CTL_ENABLE_ON_EXEC:
printf("enabled"); printf("enabled");
break; break;
case PROC_KPTI_CTL_DISABLE_ON_EXEC: case PROC_KPTI_CTL_DISABLE_ON_EXEC:
printf("disabled"); printf("disabled");
▲ Show 20 Lines • Show All 53 Lines • ▼ Show 20 Lines case MODE_STACKGAP:
arg = enable ? PROC_STACKGAP_ENABLE_EXEC : arg = enable ? PROC_STACKGAP_ENABLE_EXEC :
(PROC_STACKGAP_DISABLE | (PROC_STACKGAP_DISABLE |
PROC_STACKGAP_DISABLE_EXEC); PROC_STACKGAP_DISABLE_EXEC);
error = procctl(P_PID, pid, PROC_STACKGAP_CTL, &arg); error = procctl(P_PID, pid, PROC_STACKGAP_CTL, &arg);
break; break;
case MODE_NO_NEW_PRIVS: case MODE_NO_NEW_PRIVS:
arg = enable ? PROC_NO_NEW_PRIVS_ENABLE : arg = enable ? PROC_NO_NEW_PRIVS_ENABLE :
PROC_NO_NEW_PRIVS_DISABLE; PROC_NO_NEW_PRIVS_DISABLE;
error = procctl(P_PID, pid, PROC_NO_NEW_PRIVS_CTL, &arg); error = procctl(P_PID, pid, PROC_NO_NEW_PRIVS_CTL,
&arg);
break;
case MODE_WXORX:
arg = enable ? PROC_WXORX_ENABLE_ON_EXEC :
PROC_WXORX_DISABLE;
error = procctl(P_PID, pid, PROC_WXORX_CTL, &arg);
break; break;
#ifdef PROC_KPTI_CTL #ifdef PROC_KPTI_CTL
case MODE_KPTI: case MODE_KPTI:
arg = enable ? PROC_KPTI_CTL_ENABLE_ON_EXEC : arg = enable ? PROC_KPTI_CTL_ENABLE_ON_EXEC :
PROC_KPTI_CTL_DISABLE_ON_EXEC; PROC_KPTI_CTL_DISABLE_ON_EXEC;
error = procctl(P_PID, pid, PROC_KPTI_CTL, &arg); error = procctl(P_PID, pid, PROC_KPTI_CTL, &arg);
break; break;
#endif #endif
Show All 25 Lines