[linux-2.6-block.git] / include / net / scm.h

#ifndef __LINUX_NET_SCM_H
#define __LINUX_NET_SCM_H

#include <linux/limits.h>
#include <linux/net.h>
#include <linux/security.h>
#include <linux/pid.h>
#include <linux/nsproxy.h>

/* Well, we should have at least one descriptor open
 * to accept passed FDs 8)
 */
#define SCM_MAX_FD	253

struct scm_fp_list {
	struct list_head	list;
	short			count;
	short			max;
	struct file		*fp[SCM_MAX_FD];
};

struct scm_cookie {
	struct pid		*pid;		/* Skb credentials */
	const struct cred	*cred;
	struct scm_fp_list	*fp;		/* Passed files		*/
	struct ucred		creds;		/* Skb credentials	*/
#ifdef CONFIG_SECURITY_NETWORK
	u32			secid;		/* Passed security ID 	*/
#endif
};

extern void scm_detach_fds(struct msghdr *msg, struct scm_cookie *scm);
extern void scm_detach_fds_compat(struct msghdr *msg, struct scm_cookie *scm);
extern int __scm_send(struct socket *sock, struct msghdr *msg, struct scm_cookie *scm);
extern void __scm_destroy(struct scm_cookie *scm);
extern struct scm_fp_list * scm_fp_dup(struct scm_fp_list *fpl);

#ifdef CONFIG_SECURITY_NETWORK
static __inline__ void unix_get_peersec_dgram(struct socket *sock, struct scm_cookie *scm)
{
	security_socket_getpeersec_dgram(sock, NULL, &scm->secid);
}
#else
static __inline__ void unix_get_peersec_dgram(struct socket *sock, struct scm_cookie *scm)
{ }
#endif /* CONFIG_SECURITY_NETWORK */

static __inline__ void scm_set_cred(struct scm_cookie *scm,
				    struct pid *pid, const struct cred *cred)
{
	scm->pid  = get_pid(pid);
	scm->cred = cred ? get_cred(cred) : NULL;
	cred_to_ucred(pid, cred, &scm->creds);
}

static __inline__ void scm_destroy_cred(struct scm_cookie *scm)
{
	put_pid(scm->pid);
	scm->pid  = NULL;

	if (scm->cred)
		put_cred(scm->cred);
	scm->cred = NULL;
}

static __inline__ void scm_destroy(struct scm_cookie *scm)
{
	scm_destroy_cred(scm);
	if (scm && scm->fp)
		__scm_destroy(scm);
}

static __inline__ int scm_send(struct socket *sock, struct msghdr *msg,
			       struct scm_cookie *scm)
{
	memset(scm, 0, sizeof(*scm));
	unix_get_peersec_dgram(sock, scm);
	if (msg->msg_controllen <= 0)
		return 0;
	return __scm_send(sock, msg, scm);
}

#ifdef CONFIG_SECURITY_NETWORK
static inline void scm_passec(struct socket *sock, struct msghdr *msg, struct scm_cookie *scm)
{
	char *secdata;
	u32 seclen;
	int err;

	if (test_bit(SOCK_PASSSEC, &sock->flags)) {
		err = security_secid_to_secctx(scm->secid, &secdata, &seclen);

		if (!err) {
			put_cmsg(msg, SOL_SOCKET, SCM_SECURITY, seclen, secdata);
			security_release_secctx(secdata, seclen);
		}
	}
}
#else
static inline void scm_passec(struct socket *sock, struct msghdr *msg, struct scm_cookie *scm)
{ }
#endif /* CONFIG_SECURITY_NETWORK */

static __inline__ void scm_recv(struct socket *sock, struct msghdr *msg,
				struct scm_cookie *scm, int flags)
{
	if (!msg->msg_control) {
		if (test_bit(SOCK_PASSCRED, &sock->flags) || scm->fp)
			msg->msg_flags |= MSG_CTRUNC;
		scm_destroy(scm);
		return;
	}

	if (test_bit(SOCK_PASSCRED, &sock->flags))
		put_cmsg(msg, SOL_SOCKET, SCM_CREDENTIALS, sizeof(scm->creds), &scm->creds);

	scm_destroy_cred(scm);

	scm_passec(sock, msg, scm);

	if (!scm->fp)
		return;
	
	scm_detach_fds(msg, scm);
}


#endif /* __LINUX_NET_SCM_H */
Commit	Line	Data
1da177e4 LT	1	#ifndef __LINUX_NET_SCM_H
	2	#define __LINUX_NET_SCM_H
	3
	4	#include <linux/limits.h>
	5	#include <linux/net.h>
dc49c1f9	6	#include <linux/security.h>
b488893a PE	7	#include <linux/pid.h>
b488893a PE	8	#include <linux/nsproxy.h>
1da177e4 LT	9
	10	/* Well, we should have at least one descriptor open
	11	* to accept passed FDs 8)
	12	*/
bba14de9	13	#define SCM_MAX_FD 253
1da177e4	14
fd2c3ef7	15	struct scm_fp_list {
f8d570a4	16	struct list_head list;
bba14de9 ED	17	short count;
bba14de9 ED	18	short max;
f8d570a4	19	struct file *fp[SCM_MAX_FD];
1da177e4 LT	20	};
1da177e4 LT	21
fd2c3ef7	22	struct scm_cookie {
257b5358 EB	23	struct pid pid; / Skb credentials */
257b5358 EB	24	const struct cred *cred;
1da177e4	25	struct scm_fp_list fp; / Passed files */
812e876e	26	struct ucred creds; /* Skb credentials */
877ce7c1	27	#ifdef CONFIG_SECURITY_NETWORK
dc49c1f9	28	u32 secid; /* Passed security ID */
877ce7c1	29	#endif
1da177e4 LT	30	};
	31
	32	extern void scm_detach_fds(struct msghdr msg, struct scm_cookie scm);
	33	extern void scm_detach_fds_compat(struct msghdr msg, struct scm_cookie scm);
	34	extern int __scm_send(struct socket sock, struct msghdr msg, struct scm_cookie *scm);
	35	extern void __scm_destroy(struct scm_cookie *scm);
	36	extern struct scm_fp_list * scm_fp_dup(struct scm_fp_list *fpl);
	37
dc49c1f9 CZ	38	#ifdef CONFIG_SECURITY_NETWORK
	39	static __inline__ void unix_get_peersec_dgram(struct socket sock, struct scm_cookie scm)
	40	{
	41	security_socket_getpeersec_dgram(sock, NULL, &scm->secid);
	42	}
	43	#else
	44	static __inline__ void unix_get_peersec_dgram(struct socket sock, struct scm_cookie scm)
	45	{ }
	46	#endif /* CONFIG_SECURITY_NETWORK */
	47
257b5358 EB	48	static __inline__ void scm_set_cred(struct scm_cookie *scm,
	49	struct pid pid, const struct cred cred)
	50	{
	51	scm->pid = get_pid(pid);
16e57262	52	scm->cred = cred ? get_cred(cred) : NULL;
257b5358 EB	53	cred_to_ucred(pid, cred, &scm->creds);
	54	}
	55
	56	static __inline__ void scm_destroy_cred(struct scm_cookie *scm)
	57	{
	58	put_pid(scm->pid);
	59	scm->pid = NULL;
	60
	61	if (scm->cred)
	62	put_cred(scm->cred);
	63	scm->cred = NULL;
	64	}
	65
1da177e4 LT	66	static __inline__ void scm_destroy(struct scm_cookie *scm)
1da177e4 LT	67	{
257b5358	68	scm_destroy_cred(scm);
1da177e4 LT	69	if (scm && scm->fp)
	70	__scm_destroy(scm);
	71	}
	72
	73	static __inline__ int scm_send(struct socket sock, struct msghdr msg,
	74	struct scm_cookie *scm)
	75	{
16e57262	76	memset(scm, 0, sizeof(*scm));
dc49c1f9	77	unix_get_peersec_dgram(sock, scm);
1da177e4 LT	78	if (msg->msg_controllen <= 0)
	79	return 0;
	80	return __scm_send(sock, msg, scm);
	81	}
	82
877ce7c1 CZ	83	#ifdef CONFIG_SECURITY_NETWORK
	84	static inline void scm_passec(struct socket sock, struct msghdr msg, struct scm_cookie *scm)
	85	{
dc49c1f9 CZ	86	char *secdata;
	87	u32 seclen;
	88	int err;
	89
	90	if (test_bit(SOCK_PASSSEC, &sock->flags)) {
	91	err = security_secid_to_secctx(scm->secid, &secdata, &seclen);
	92
	93	if (!err) {
	94	put_cmsg(msg, SOL_SOCKET, SCM_SECURITY, seclen, secdata);
	95	security_release_secctx(secdata, seclen);
	96	}
	97	}
877ce7c1 CZ	98	}
	99	#else
	100	static inline void scm_passec(struct socket sock, struct msghdr msg, struct scm_cookie *scm)
	101	{ }
	102	#endif /* CONFIG_SECURITY_NETWORK */
	103
1da177e4 LT	104	static __inline__ void scm_recv(struct socket sock, struct msghdr msg,
	105	struct scm_cookie *scm, int flags)
	106	{
fd2c3ef7	107	if (!msg->msg_control) {
1da177e4 LT	108	if (test_bit(SOCK_PASSCRED, &sock->flags) \|\| scm->fp)
1da177e4 LT	109	msg->msg_flags \|= MSG_CTRUNC;
f78a5fda	110	scm_destroy(scm);
1da177e4 LT	111	return;
	112	}
	113
	114	if (test_bit(SOCK_PASSCRED, &sock->flags))
	115	put_cmsg(msg, SOL_SOCKET, SCM_CREDENTIALS, sizeof(scm->creds), &scm->creds);
	116
f78a5fda DM	117	scm_destroy_cred(scm);
f78a5fda DM	118
877ce7c1 CZ	119	scm_passec(sock, msg, scm);
877ce7c1 CZ	120
1da177e4 LT	121	if (!scm->fp)
	122	return;
	123
	124	scm_detach_fds(msg, scm);
	125	}
	126
	127
	128	#endif /* __LINUX_NET_SCM_H */
	129