]>
git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blob - include/net/scm.h
1 #ifndef __LINUX_NET_SCM_H
2 #define __LINUX_NET_SCM_H
4 #include <linux/limits.h>
6 #include <linux/cred.h>
7 #include <linux/security.h>
9 #include <linux/nsproxy.h>
11 /* Well, we should have at least one descriptor open
12 * to accept passed FDs 8)
14 #define SCM_MAX_FD 253
25 struct user_struct
*user
;
26 struct file
*fp
[SCM_MAX_FD
];
30 struct pid
*pid
; /* Skb credentials */
31 struct scm_fp_list
*fp
; /* Passed files */
32 struct scm_creds creds
; /* Skb credentials */
33 #ifdef CONFIG_SECURITY_NETWORK
34 u32 secid
; /* Passed security ID */
38 void scm_detach_fds(struct msghdr
*msg
, struct scm_cookie
*scm
);
39 void scm_detach_fds_compat(struct msghdr
*msg
, struct scm_cookie
*scm
);
40 int __scm_send(struct socket
*sock
, struct msghdr
*msg
, struct scm_cookie
*scm
);
41 void __scm_destroy(struct scm_cookie
*scm
);
42 struct scm_fp_list
*scm_fp_dup(struct scm_fp_list
*fpl
);
44 #ifdef CONFIG_SECURITY_NETWORK
45 static __inline__
void unix_get_peersec_dgram(struct socket
*sock
, struct scm_cookie
*scm
)
47 security_socket_getpeersec_dgram(sock
, NULL
, &scm
->secid
);
50 static __inline__
void unix_get_peersec_dgram(struct socket
*sock
, struct scm_cookie
*scm
)
52 #endif /* CONFIG_SECURITY_NETWORK */
54 static __inline__
void scm_set_cred(struct scm_cookie
*scm
,
55 struct pid
*pid
, kuid_t uid
, kgid_t gid
)
57 scm
->pid
= get_pid(pid
);
58 scm
->creds
.pid
= pid_vnr(pid
);
63 static __inline__
void scm_destroy_cred(struct scm_cookie
*scm
)
69 static __inline__
void scm_destroy(struct scm_cookie
*scm
)
71 scm_destroy_cred(scm
);
76 static __inline__
int scm_send(struct socket
*sock
, struct msghdr
*msg
,
77 struct scm_cookie
*scm
, bool forcecreds
)
79 memset(scm
, 0, sizeof(*scm
));
80 scm
->creds
.uid
= INVALID_UID
;
81 scm
->creds
.gid
= INVALID_GID
;
83 scm_set_cred(scm
, task_tgid(current
), current_uid(), current_gid());
84 unix_get_peersec_dgram(sock
, scm
);
85 if (msg
->msg_controllen
<= 0)
87 return __scm_send(sock
, msg
, scm
);
90 #ifdef CONFIG_SECURITY_NETWORK
91 static inline void scm_passec(struct socket
*sock
, struct msghdr
*msg
, struct scm_cookie
*scm
)
97 if (test_bit(SOCK_PASSSEC
, &sock
->flags
)) {
98 err
= security_secid_to_secctx(scm
->secid
, &secdata
, &seclen
);
101 put_cmsg(msg
, SOL_SOCKET
, SCM_SECURITY
, seclen
, secdata
);
102 security_release_secctx(secdata
, seclen
);
107 static inline void scm_passec(struct socket
*sock
, struct msghdr
*msg
, struct scm_cookie
*scm
)
109 #endif /* CONFIG_SECURITY_NETWORK */
111 static __inline__
void scm_recv(struct socket
*sock
, struct msghdr
*msg
,
112 struct scm_cookie
*scm
, int flags
)
114 if (!msg
->msg_control
) {
115 if (test_bit(SOCK_PASSCRED
, &sock
->flags
) || scm
->fp
)
116 msg
->msg_flags
|= MSG_CTRUNC
;
121 if (test_bit(SOCK_PASSCRED
, &sock
->flags
)) {
122 struct user_namespace
*current_ns
= current_user_ns();
123 struct ucred ucreds
= {
124 .pid
= scm
->creds
.pid
,
125 .uid
= from_kuid_munged(current_ns
, scm
->creds
.uid
),
126 .gid
= from_kgid_munged(current_ns
, scm
->creds
.gid
),
128 put_cmsg(msg
, SOL_SOCKET
, SCM_CREDENTIALS
, sizeof(ucreds
), &ucreds
);
131 scm_destroy_cred(scm
);
133 scm_passec(sock
, msg
, scm
);
138 scm_detach_fds(msg
, scm
);
142 #endif /* __LINUX_NET_SCM_H */