11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * linux/kernel/sys.c 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Copyright (C) 1991, 1992 Linus Torvalds 51da177e4SLinus Torvalds */ 61da177e4SLinus Torvalds 71da177e4SLinus Torvalds #include <linux/config.h> 81da177e4SLinus Torvalds #include <linux/module.h> 91da177e4SLinus Torvalds #include <linux/mm.h> 101da177e4SLinus Torvalds #include <linux/utsname.h> 111da177e4SLinus Torvalds #include <linux/mman.h> 121da177e4SLinus Torvalds #include <linux/smp_lock.h> 131da177e4SLinus Torvalds #include <linux/notifier.h> 141da177e4SLinus Torvalds #include <linux/reboot.h> 151da177e4SLinus Torvalds #include <linux/prctl.h> 161da177e4SLinus Torvalds #include <linux/init.h> 171da177e4SLinus Torvalds #include <linux/highuid.h> 181da177e4SLinus Torvalds #include <linux/fs.h> 19dc009d92SEric W. Biederman #include <linux/kernel.h> 20dc009d92SEric W. Biederman #include <linux/kexec.h> 211da177e4SLinus Torvalds #include <linux/workqueue.h> 221da177e4SLinus Torvalds #include <linux/device.h> 231da177e4SLinus Torvalds #include <linux/key.h> 241da177e4SLinus Torvalds #include <linux/times.h> 251da177e4SLinus Torvalds #include <linux/posix-timers.h> 261da177e4SLinus Torvalds #include <linux/security.h> 271da177e4SLinus Torvalds #include <linux/dcookies.h> 281da177e4SLinus Torvalds #include <linux/suspend.h> 291da177e4SLinus Torvalds #include <linux/tty.h> 307ed20e1aSJesper Juhl #include <linux/signal.h> 311da177e4SLinus Torvalds 321da177e4SLinus Torvalds #include <linux/compat.h> 331da177e4SLinus Torvalds #include <linux/syscalls.h> 341da177e4SLinus Torvalds 351da177e4SLinus Torvalds #include <asm/uaccess.h> 361da177e4SLinus Torvalds #include <asm/io.h> 371da177e4SLinus Torvalds #include <asm/unistd.h> 381da177e4SLinus Torvalds 391da177e4SLinus Torvalds #ifndef SET_UNALIGN_CTL 401da177e4SLinus Torvalds # define SET_UNALIGN_CTL(a,b) (-EINVAL) 411da177e4SLinus Torvalds #endif 421da177e4SLinus Torvalds #ifndef GET_UNALIGN_CTL 431da177e4SLinus Torvalds # define GET_UNALIGN_CTL(a,b) (-EINVAL) 441da177e4SLinus Torvalds #endif 451da177e4SLinus Torvalds #ifndef SET_FPEMU_CTL 461da177e4SLinus Torvalds # define SET_FPEMU_CTL(a,b) (-EINVAL) 471da177e4SLinus Torvalds #endif 481da177e4SLinus Torvalds #ifndef GET_FPEMU_CTL 491da177e4SLinus Torvalds # define GET_FPEMU_CTL(a,b) (-EINVAL) 501da177e4SLinus Torvalds #endif 511da177e4SLinus Torvalds #ifndef SET_FPEXC_CTL 521da177e4SLinus Torvalds # define SET_FPEXC_CTL(a,b) (-EINVAL) 531da177e4SLinus Torvalds #endif 541da177e4SLinus Torvalds #ifndef GET_FPEXC_CTL 551da177e4SLinus Torvalds # define GET_FPEXC_CTL(a,b) (-EINVAL) 561da177e4SLinus Torvalds #endif 571da177e4SLinus Torvalds 581da177e4SLinus Torvalds /* 591da177e4SLinus Torvalds * this is where the system-wide overflow UID and GID are defined, for 601da177e4SLinus Torvalds * architectures that now have 32-bit UID/GID but didn't in the past 611da177e4SLinus Torvalds */ 621da177e4SLinus Torvalds 631da177e4SLinus Torvalds int overflowuid = DEFAULT_OVERFLOWUID; 641da177e4SLinus Torvalds int overflowgid = DEFAULT_OVERFLOWGID; 651da177e4SLinus Torvalds 661da177e4SLinus Torvalds #ifdef CONFIG_UID16 671da177e4SLinus Torvalds EXPORT_SYMBOL(overflowuid); 681da177e4SLinus Torvalds EXPORT_SYMBOL(overflowgid); 691da177e4SLinus Torvalds #endif 701da177e4SLinus Torvalds 711da177e4SLinus Torvalds /* 721da177e4SLinus Torvalds * the same as above, but for filesystems which can only store a 16-bit 731da177e4SLinus Torvalds * UID and GID. as such, this is needed on all architectures 741da177e4SLinus Torvalds */ 751da177e4SLinus Torvalds 761da177e4SLinus Torvalds int fs_overflowuid = DEFAULT_FS_OVERFLOWUID; 771da177e4SLinus Torvalds int fs_overflowgid = DEFAULT_FS_OVERFLOWUID; 781da177e4SLinus Torvalds 791da177e4SLinus Torvalds EXPORT_SYMBOL(fs_overflowuid); 801da177e4SLinus Torvalds EXPORT_SYMBOL(fs_overflowgid); 811da177e4SLinus Torvalds 821da177e4SLinus Torvalds /* 831da177e4SLinus Torvalds * this indicates whether you can reboot with ctrl-alt-del: the default is yes 841da177e4SLinus Torvalds */ 851da177e4SLinus Torvalds 861da177e4SLinus Torvalds int C_A_D = 1; 871da177e4SLinus Torvalds int cad_pid = 1; 881da177e4SLinus Torvalds 891da177e4SLinus Torvalds /* 901da177e4SLinus Torvalds * Notifier list for kernel code which wants to be called 911da177e4SLinus Torvalds * at shutdown. This is used to stop any idling DMA operations 921da177e4SLinus Torvalds * and the like. 931da177e4SLinus Torvalds */ 941da177e4SLinus Torvalds 951da177e4SLinus Torvalds static struct notifier_block *reboot_notifier_list; 961da177e4SLinus Torvalds static DEFINE_RWLOCK(notifier_lock); 971da177e4SLinus Torvalds 981da177e4SLinus Torvalds /** 991da177e4SLinus Torvalds * notifier_chain_register - Add notifier to a notifier chain 1001da177e4SLinus Torvalds * @list: Pointer to root list pointer 1011da177e4SLinus Torvalds * @n: New entry in notifier chain 1021da177e4SLinus Torvalds * 1031da177e4SLinus Torvalds * Adds a notifier to a notifier chain. 1041da177e4SLinus Torvalds * 1051da177e4SLinus Torvalds * Currently always returns zero. 1061da177e4SLinus Torvalds */ 1071da177e4SLinus Torvalds 1081da177e4SLinus Torvalds int notifier_chain_register(struct notifier_block **list, struct notifier_block *n) 1091da177e4SLinus Torvalds { 1101da177e4SLinus Torvalds write_lock(¬ifier_lock); 1111da177e4SLinus Torvalds while(*list) 1121da177e4SLinus Torvalds { 1131da177e4SLinus Torvalds if(n->priority > (*list)->priority) 1141da177e4SLinus Torvalds break; 1151da177e4SLinus Torvalds list= &((*list)->next); 1161da177e4SLinus Torvalds } 1171da177e4SLinus Torvalds n->next = *list; 1181da177e4SLinus Torvalds *list=n; 1191da177e4SLinus Torvalds write_unlock(¬ifier_lock); 1201da177e4SLinus Torvalds return 0; 1211da177e4SLinus Torvalds } 1221da177e4SLinus Torvalds 1231da177e4SLinus Torvalds EXPORT_SYMBOL(notifier_chain_register); 1241da177e4SLinus Torvalds 1251da177e4SLinus Torvalds /** 1261da177e4SLinus Torvalds * notifier_chain_unregister - Remove notifier from a notifier chain 1271da177e4SLinus Torvalds * @nl: Pointer to root list pointer 1281da177e4SLinus Torvalds * @n: New entry in notifier chain 1291da177e4SLinus Torvalds * 1301da177e4SLinus Torvalds * Removes a notifier from a notifier chain. 1311da177e4SLinus Torvalds * 1321da177e4SLinus Torvalds * Returns zero on success, or %-ENOENT on failure. 1331da177e4SLinus Torvalds */ 1341da177e4SLinus Torvalds 1351da177e4SLinus Torvalds int notifier_chain_unregister(struct notifier_block **nl, struct notifier_block *n) 1361da177e4SLinus Torvalds { 1371da177e4SLinus Torvalds write_lock(¬ifier_lock); 1381da177e4SLinus Torvalds while((*nl)!=NULL) 1391da177e4SLinus Torvalds { 1401da177e4SLinus Torvalds if((*nl)==n) 1411da177e4SLinus Torvalds { 1421da177e4SLinus Torvalds *nl=n->next; 1431da177e4SLinus Torvalds write_unlock(¬ifier_lock); 1441da177e4SLinus Torvalds return 0; 1451da177e4SLinus Torvalds } 1461da177e4SLinus Torvalds nl=&((*nl)->next); 1471da177e4SLinus Torvalds } 1481da177e4SLinus Torvalds write_unlock(¬ifier_lock); 1491da177e4SLinus Torvalds return -ENOENT; 1501da177e4SLinus Torvalds } 1511da177e4SLinus Torvalds 1521da177e4SLinus Torvalds EXPORT_SYMBOL(notifier_chain_unregister); 1531da177e4SLinus Torvalds 1541da177e4SLinus Torvalds /** 1551da177e4SLinus Torvalds * notifier_call_chain - Call functions in a notifier chain 1561da177e4SLinus Torvalds * @n: Pointer to root pointer of notifier chain 1571da177e4SLinus Torvalds * @val: Value passed unmodified to notifier function 1581da177e4SLinus Torvalds * @v: Pointer passed unmodified to notifier function 1591da177e4SLinus Torvalds * 1601da177e4SLinus Torvalds * Calls each function in a notifier chain in turn. 1611da177e4SLinus Torvalds * 1621da177e4SLinus Torvalds * If the return value of the notifier can be and'd 1631da177e4SLinus Torvalds * with %NOTIFY_STOP_MASK, then notifier_call_chain 1641da177e4SLinus Torvalds * will return immediately, with the return value of 1651da177e4SLinus Torvalds * the notifier function which halted execution. 1661da177e4SLinus Torvalds * Otherwise, the return value is the return value 1671da177e4SLinus Torvalds * of the last notifier function called. 1681da177e4SLinus Torvalds */ 1691da177e4SLinus Torvalds 1701da177e4SLinus Torvalds int notifier_call_chain(struct notifier_block **n, unsigned long val, void *v) 1711da177e4SLinus Torvalds { 1721da177e4SLinus Torvalds int ret=NOTIFY_DONE; 1731da177e4SLinus Torvalds struct notifier_block *nb = *n; 1741da177e4SLinus Torvalds 1751da177e4SLinus Torvalds while(nb) 1761da177e4SLinus Torvalds { 1771da177e4SLinus Torvalds ret=nb->notifier_call(nb,val,v); 1781da177e4SLinus Torvalds if(ret&NOTIFY_STOP_MASK) 1791da177e4SLinus Torvalds { 1801da177e4SLinus Torvalds return ret; 1811da177e4SLinus Torvalds } 1821da177e4SLinus Torvalds nb=nb->next; 1831da177e4SLinus Torvalds } 1841da177e4SLinus Torvalds return ret; 1851da177e4SLinus Torvalds } 1861da177e4SLinus Torvalds 1871da177e4SLinus Torvalds EXPORT_SYMBOL(notifier_call_chain); 1881da177e4SLinus Torvalds 1891da177e4SLinus Torvalds /** 1901da177e4SLinus Torvalds * register_reboot_notifier - Register function to be called at reboot time 1911da177e4SLinus Torvalds * @nb: Info about notifier function to be called 1921da177e4SLinus Torvalds * 1931da177e4SLinus Torvalds * Registers a function with the list of functions 1941da177e4SLinus Torvalds * to be called at reboot time. 1951da177e4SLinus Torvalds * 1961da177e4SLinus Torvalds * Currently always returns zero, as notifier_chain_register 1971da177e4SLinus Torvalds * always returns zero. 1981da177e4SLinus Torvalds */ 1991da177e4SLinus Torvalds 2001da177e4SLinus Torvalds int register_reboot_notifier(struct notifier_block * nb) 2011da177e4SLinus Torvalds { 2021da177e4SLinus Torvalds return notifier_chain_register(&reboot_notifier_list, nb); 2031da177e4SLinus Torvalds } 2041da177e4SLinus Torvalds 2051da177e4SLinus Torvalds EXPORT_SYMBOL(register_reboot_notifier); 2061da177e4SLinus Torvalds 2071da177e4SLinus Torvalds /** 2081da177e4SLinus Torvalds * unregister_reboot_notifier - Unregister previously registered reboot notifier 2091da177e4SLinus Torvalds * @nb: Hook to be unregistered 2101da177e4SLinus Torvalds * 2111da177e4SLinus Torvalds * Unregisters a previously registered reboot 2121da177e4SLinus Torvalds * notifier function. 2131da177e4SLinus Torvalds * 2141da177e4SLinus Torvalds * Returns zero on success, or %-ENOENT on failure. 2151da177e4SLinus Torvalds */ 2161da177e4SLinus Torvalds 2171da177e4SLinus Torvalds int unregister_reboot_notifier(struct notifier_block * nb) 2181da177e4SLinus Torvalds { 2191da177e4SLinus Torvalds return notifier_chain_unregister(&reboot_notifier_list, nb); 2201da177e4SLinus Torvalds } 2211da177e4SLinus Torvalds 2221da177e4SLinus Torvalds EXPORT_SYMBOL(unregister_reboot_notifier); 2231da177e4SLinus Torvalds 2241da177e4SLinus Torvalds static int set_one_prio(struct task_struct *p, int niceval, int error) 2251da177e4SLinus Torvalds { 2261da177e4SLinus Torvalds int no_nice; 2271da177e4SLinus Torvalds 2281da177e4SLinus Torvalds if (p->uid != current->euid && 2291da177e4SLinus Torvalds p->euid != current->euid && !capable(CAP_SYS_NICE)) { 2301da177e4SLinus Torvalds error = -EPERM; 2311da177e4SLinus Torvalds goto out; 2321da177e4SLinus Torvalds } 233e43379f1SMatt Mackall if (niceval < task_nice(p) && !can_nice(p, niceval)) { 2341da177e4SLinus Torvalds error = -EACCES; 2351da177e4SLinus Torvalds goto out; 2361da177e4SLinus Torvalds } 2371da177e4SLinus Torvalds no_nice = security_task_setnice(p, niceval); 2381da177e4SLinus Torvalds if (no_nice) { 2391da177e4SLinus Torvalds error = no_nice; 2401da177e4SLinus Torvalds goto out; 2411da177e4SLinus Torvalds } 2421da177e4SLinus Torvalds if (error == -ESRCH) 2431da177e4SLinus Torvalds error = 0; 2441da177e4SLinus Torvalds set_user_nice(p, niceval); 2451da177e4SLinus Torvalds out: 2461da177e4SLinus Torvalds return error; 2471da177e4SLinus Torvalds } 2481da177e4SLinus Torvalds 2491da177e4SLinus Torvalds asmlinkage long sys_setpriority(int which, int who, int niceval) 2501da177e4SLinus Torvalds { 2511da177e4SLinus Torvalds struct task_struct *g, *p; 2521da177e4SLinus Torvalds struct user_struct *user; 2531da177e4SLinus Torvalds int error = -EINVAL; 2541da177e4SLinus Torvalds 2551da177e4SLinus Torvalds if (which > 2 || which < 0) 2561da177e4SLinus Torvalds goto out; 2571da177e4SLinus Torvalds 2581da177e4SLinus Torvalds /* normalize: avoid signed division (rounding problems) */ 2591da177e4SLinus Torvalds error = -ESRCH; 2601da177e4SLinus Torvalds if (niceval < -20) 2611da177e4SLinus Torvalds niceval = -20; 2621da177e4SLinus Torvalds if (niceval > 19) 2631da177e4SLinus Torvalds niceval = 19; 2641da177e4SLinus Torvalds 2651da177e4SLinus Torvalds read_lock(&tasklist_lock); 2661da177e4SLinus Torvalds switch (which) { 2671da177e4SLinus Torvalds case PRIO_PROCESS: 2681da177e4SLinus Torvalds if (!who) 2691da177e4SLinus Torvalds who = current->pid; 2701da177e4SLinus Torvalds p = find_task_by_pid(who); 2711da177e4SLinus Torvalds if (p) 2721da177e4SLinus Torvalds error = set_one_prio(p, niceval, error); 2731da177e4SLinus Torvalds break; 2741da177e4SLinus Torvalds case PRIO_PGRP: 2751da177e4SLinus Torvalds if (!who) 2761da177e4SLinus Torvalds who = process_group(current); 2771da177e4SLinus Torvalds do_each_task_pid(who, PIDTYPE_PGID, p) { 2781da177e4SLinus Torvalds error = set_one_prio(p, niceval, error); 2791da177e4SLinus Torvalds } while_each_task_pid(who, PIDTYPE_PGID, p); 2801da177e4SLinus Torvalds break; 2811da177e4SLinus Torvalds case PRIO_USER: 2821da177e4SLinus Torvalds user = current->user; 2831da177e4SLinus Torvalds if (!who) 2841da177e4SLinus Torvalds who = current->uid; 2851da177e4SLinus Torvalds else 2861da177e4SLinus Torvalds if ((who != current->uid) && !(user = find_user(who))) 2871da177e4SLinus Torvalds goto out_unlock; /* No processes for this user */ 2881da177e4SLinus Torvalds 2891da177e4SLinus Torvalds do_each_thread(g, p) 2901da177e4SLinus Torvalds if (p->uid == who) 2911da177e4SLinus Torvalds error = set_one_prio(p, niceval, error); 2921da177e4SLinus Torvalds while_each_thread(g, p); 2931da177e4SLinus Torvalds if (who != current->uid) 2941da177e4SLinus Torvalds free_uid(user); /* For find_user() */ 2951da177e4SLinus Torvalds break; 2961da177e4SLinus Torvalds } 2971da177e4SLinus Torvalds out_unlock: 2981da177e4SLinus Torvalds read_unlock(&tasklist_lock); 2991da177e4SLinus Torvalds out: 3001da177e4SLinus Torvalds return error; 3011da177e4SLinus Torvalds } 3021da177e4SLinus Torvalds 3031da177e4SLinus Torvalds /* 3041da177e4SLinus Torvalds * Ugh. To avoid negative return values, "getpriority()" will 3051da177e4SLinus Torvalds * not return the normal nice-value, but a negated value that 3061da177e4SLinus Torvalds * has been offset by 20 (ie it returns 40..1 instead of -20..19) 3071da177e4SLinus Torvalds * to stay compatible. 3081da177e4SLinus Torvalds */ 3091da177e4SLinus Torvalds asmlinkage long sys_getpriority(int which, int who) 3101da177e4SLinus Torvalds { 3111da177e4SLinus Torvalds struct task_struct *g, *p; 3121da177e4SLinus Torvalds struct user_struct *user; 3131da177e4SLinus Torvalds long niceval, retval = -ESRCH; 3141da177e4SLinus Torvalds 3151da177e4SLinus Torvalds if (which > 2 || which < 0) 3161da177e4SLinus Torvalds return -EINVAL; 3171da177e4SLinus Torvalds 3181da177e4SLinus Torvalds read_lock(&tasklist_lock); 3191da177e4SLinus Torvalds switch (which) { 3201da177e4SLinus Torvalds case PRIO_PROCESS: 3211da177e4SLinus Torvalds if (!who) 3221da177e4SLinus Torvalds who = current->pid; 3231da177e4SLinus Torvalds p = find_task_by_pid(who); 3241da177e4SLinus Torvalds if (p) { 3251da177e4SLinus Torvalds niceval = 20 - task_nice(p); 3261da177e4SLinus Torvalds if (niceval > retval) 3271da177e4SLinus Torvalds retval = niceval; 3281da177e4SLinus Torvalds } 3291da177e4SLinus Torvalds break; 3301da177e4SLinus Torvalds case PRIO_PGRP: 3311da177e4SLinus Torvalds if (!who) 3321da177e4SLinus Torvalds who = process_group(current); 3331da177e4SLinus Torvalds do_each_task_pid(who, PIDTYPE_PGID, p) { 3341da177e4SLinus Torvalds niceval = 20 - task_nice(p); 3351da177e4SLinus Torvalds if (niceval > retval) 3361da177e4SLinus Torvalds retval = niceval; 3371da177e4SLinus Torvalds } while_each_task_pid(who, PIDTYPE_PGID, p); 3381da177e4SLinus Torvalds break; 3391da177e4SLinus Torvalds case PRIO_USER: 3401da177e4SLinus Torvalds user = current->user; 3411da177e4SLinus Torvalds if (!who) 3421da177e4SLinus Torvalds who = current->uid; 3431da177e4SLinus Torvalds else 3441da177e4SLinus Torvalds if ((who != current->uid) && !(user = find_user(who))) 3451da177e4SLinus Torvalds goto out_unlock; /* No processes for this user */ 3461da177e4SLinus Torvalds 3471da177e4SLinus Torvalds do_each_thread(g, p) 3481da177e4SLinus Torvalds if (p->uid == who) { 3491da177e4SLinus Torvalds niceval = 20 - task_nice(p); 3501da177e4SLinus Torvalds if (niceval > retval) 3511da177e4SLinus Torvalds retval = niceval; 3521da177e4SLinus Torvalds } 3531da177e4SLinus Torvalds while_each_thread(g, p); 3541da177e4SLinus Torvalds if (who != current->uid) 3551da177e4SLinus Torvalds free_uid(user); /* for find_user() */ 3561da177e4SLinus Torvalds break; 3571da177e4SLinus Torvalds } 3581da177e4SLinus Torvalds out_unlock: 3591da177e4SLinus Torvalds read_unlock(&tasklist_lock); 3601da177e4SLinus Torvalds 3611da177e4SLinus Torvalds return retval; 3621da177e4SLinus Torvalds } 3631da177e4SLinus Torvalds 364*4a00ea1eSEric W. Biederman void kernel_restart(char *cmd) 365*4a00ea1eSEric W. Biederman { 366*4a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_RESTART, cmd); 367*4a00ea1eSEric W. Biederman system_state = SYSTEM_RESTART; 368*4a00ea1eSEric W. Biederman device_suspend(PMSG_FREEZE); 369*4a00ea1eSEric W. Biederman device_shutdown(); 370*4a00ea1eSEric W. Biederman if (!cmd) { 371*4a00ea1eSEric W. Biederman printk(KERN_EMERG "Restarting system.\n"); 372*4a00ea1eSEric W. Biederman } else { 373*4a00ea1eSEric W. Biederman printk(KERN_EMERG "Restarting system with command '%s'.\n", cmd); 374*4a00ea1eSEric W. Biederman } 375*4a00ea1eSEric W. Biederman printk(".\n"); 376*4a00ea1eSEric W. Biederman machine_restart(cmd); 377*4a00ea1eSEric W. Biederman } 378*4a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_restart); 379*4a00ea1eSEric W. Biederman 380*4a00ea1eSEric W. Biederman void kernel_kexec(void) 381*4a00ea1eSEric W. Biederman { 382*4a00ea1eSEric W. Biederman #ifdef CONFIG_KEXEC 383*4a00ea1eSEric W. Biederman struct kimage *image; 384*4a00ea1eSEric W. Biederman image = xchg(&kexec_image, 0); 385*4a00ea1eSEric W. Biederman if (!image) { 386*4a00ea1eSEric W. Biederman return; 387*4a00ea1eSEric W. Biederman } 388*4a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_RESTART, NULL); 389*4a00ea1eSEric W. Biederman system_state = SYSTEM_RESTART; 390*4a00ea1eSEric W. Biederman device_suspend(PMSG_FREEZE); 391*4a00ea1eSEric W. Biederman device_shutdown(); 392*4a00ea1eSEric W. Biederman printk(KERN_EMERG "Starting new kernel\n"); 393*4a00ea1eSEric W. Biederman machine_shutdown(); 394*4a00ea1eSEric W. Biederman machine_kexec(image); 395*4a00ea1eSEric W. Biederman #endif 396*4a00ea1eSEric W. Biederman } 397*4a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_kexec); 398*4a00ea1eSEric W. Biederman 399*4a00ea1eSEric W. Biederman void kernel_halt(void) 400*4a00ea1eSEric W. Biederman { 401*4a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_HALT, NULL); 402*4a00ea1eSEric W. Biederman system_state = SYSTEM_HALT; 403*4a00ea1eSEric W. Biederman device_suspend(PMSG_SUSPEND); 404*4a00ea1eSEric W. Biederman device_shutdown(); 405*4a00ea1eSEric W. Biederman printk(KERN_EMERG "System halted.\n"); 406*4a00ea1eSEric W. Biederman machine_halt(); 407*4a00ea1eSEric W. Biederman } 408*4a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_halt); 409*4a00ea1eSEric W. Biederman 410*4a00ea1eSEric W. Biederman void kernel_power_off(void) 411*4a00ea1eSEric W. Biederman { 412*4a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_POWER_OFF, NULL); 413*4a00ea1eSEric W. Biederman system_state = SYSTEM_POWER_OFF; 414*4a00ea1eSEric W. Biederman device_suspend(PMSG_SUSPEND); 415*4a00ea1eSEric W. Biederman device_shutdown(); 416*4a00ea1eSEric W. Biederman printk(KERN_EMERG "Power down.\n"); 417*4a00ea1eSEric W. Biederman machine_power_off(); 418*4a00ea1eSEric W. Biederman } 419*4a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_power_off); 4201da177e4SLinus Torvalds 4211da177e4SLinus Torvalds /* 4221da177e4SLinus Torvalds * Reboot system call: for obvious reasons only root may call it, 4231da177e4SLinus Torvalds * and even root needs to set up some magic numbers in the registers 4241da177e4SLinus Torvalds * so that some mistake won't make this reboot the whole machine. 4251da177e4SLinus Torvalds * You can also set the meaning of the ctrl-alt-del-key here. 4261da177e4SLinus Torvalds * 4271da177e4SLinus Torvalds * reboot doesn't sync: do that yourself before calling this. 4281da177e4SLinus Torvalds */ 4291da177e4SLinus Torvalds asmlinkage long sys_reboot(int magic1, int magic2, unsigned int cmd, void __user * arg) 4301da177e4SLinus Torvalds { 4311da177e4SLinus Torvalds char buffer[256]; 4321da177e4SLinus Torvalds 4331da177e4SLinus Torvalds /* We only trust the superuser with rebooting the system. */ 4341da177e4SLinus Torvalds if (!capable(CAP_SYS_BOOT)) 4351da177e4SLinus Torvalds return -EPERM; 4361da177e4SLinus Torvalds 4371da177e4SLinus Torvalds /* For safety, we require "magic" arguments. */ 4381da177e4SLinus Torvalds if (magic1 != LINUX_REBOOT_MAGIC1 || 4391da177e4SLinus Torvalds (magic2 != LINUX_REBOOT_MAGIC2 && 4401da177e4SLinus Torvalds magic2 != LINUX_REBOOT_MAGIC2A && 4411da177e4SLinus Torvalds magic2 != LINUX_REBOOT_MAGIC2B && 4421da177e4SLinus Torvalds magic2 != LINUX_REBOOT_MAGIC2C)) 4431da177e4SLinus Torvalds return -EINVAL; 4441da177e4SLinus Torvalds 4451da177e4SLinus Torvalds lock_kernel(); 4461da177e4SLinus Torvalds switch (cmd) { 4471da177e4SLinus Torvalds case LINUX_REBOOT_CMD_RESTART: 448*4a00ea1eSEric W. Biederman kernel_restart(NULL); 4491da177e4SLinus Torvalds break; 4501da177e4SLinus Torvalds 4511da177e4SLinus Torvalds case LINUX_REBOOT_CMD_CAD_ON: 4521da177e4SLinus Torvalds C_A_D = 1; 4531da177e4SLinus Torvalds break; 4541da177e4SLinus Torvalds 4551da177e4SLinus Torvalds case LINUX_REBOOT_CMD_CAD_OFF: 4561da177e4SLinus Torvalds C_A_D = 0; 4571da177e4SLinus Torvalds break; 4581da177e4SLinus Torvalds 4591da177e4SLinus Torvalds case LINUX_REBOOT_CMD_HALT: 460*4a00ea1eSEric W. Biederman kernel_halt(); 4611da177e4SLinus Torvalds unlock_kernel(); 4621da177e4SLinus Torvalds do_exit(0); 4631da177e4SLinus Torvalds break; 4641da177e4SLinus Torvalds 4651da177e4SLinus Torvalds case LINUX_REBOOT_CMD_POWER_OFF: 466*4a00ea1eSEric W. Biederman kernel_power_off(); 4671da177e4SLinus Torvalds unlock_kernel(); 4681da177e4SLinus Torvalds do_exit(0); 4691da177e4SLinus Torvalds break; 4701da177e4SLinus Torvalds 4711da177e4SLinus Torvalds case LINUX_REBOOT_CMD_RESTART2: 4721da177e4SLinus Torvalds if (strncpy_from_user(&buffer[0], arg, sizeof(buffer) - 1) < 0) { 4731da177e4SLinus Torvalds unlock_kernel(); 4741da177e4SLinus Torvalds return -EFAULT; 4751da177e4SLinus Torvalds } 4761da177e4SLinus Torvalds buffer[sizeof(buffer) - 1] = '\0'; 4771da177e4SLinus Torvalds 478*4a00ea1eSEric W. Biederman kernel_restart(buffer); 4791da177e4SLinus Torvalds break; 4801da177e4SLinus Torvalds 481dc009d92SEric W. Biederman case LINUX_REBOOT_CMD_KEXEC: 482*4a00ea1eSEric W. Biederman kernel_kexec(); 483dc009d92SEric W. Biederman unlock_kernel(); 484dc009d92SEric W. Biederman return -EINVAL; 485*4a00ea1eSEric W. Biederman 4861da177e4SLinus Torvalds #ifdef CONFIG_SOFTWARE_SUSPEND 4871da177e4SLinus Torvalds case LINUX_REBOOT_CMD_SW_SUSPEND: 4881da177e4SLinus Torvalds { 4891da177e4SLinus Torvalds int ret = software_suspend(); 4901da177e4SLinus Torvalds unlock_kernel(); 4911da177e4SLinus Torvalds return ret; 4921da177e4SLinus Torvalds } 4931da177e4SLinus Torvalds #endif 4941da177e4SLinus Torvalds 4951da177e4SLinus Torvalds default: 4961da177e4SLinus Torvalds unlock_kernel(); 4971da177e4SLinus Torvalds return -EINVAL; 4981da177e4SLinus Torvalds } 4991da177e4SLinus Torvalds unlock_kernel(); 5001da177e4SLinus Torvalds return 0; 5011da177e4SLinus Torvalds } 5021da177e4SLinus Torvalds 5031da177e4SLinus Torvalds static void deferred_cad(void *dummy) 5041da177e4SLinus Torvalds { 5051da177e4SLinus Torvalds notifier_call_chain(&reboot_notifier_list, SYS_RESTART, NULL); 5061da177e4SLinus Torvalds machine_restart(NULL); 5071da177e4SLinus Torvalds } 5081da177e4SLinus Torvalds 5091da177e4SLinus Torvalds /* 5101da177e4SLinus Torvalds * This function gets called by ctrl-alt-del - ie the keyboard interrupt. 5111da177e4SLinus Torvalds * As it's called within an interrupt, it may NOT sync: the only choice 5121da177e4SLinus Torvalds * is whether to reboot at once, or just ignore the ctrl-alt-del. 5131da177e4SLinus Torvalds */ 5141da177e4SLinus Torvalds void ctrl_alt_del(void) 5151da177e4SLinus Torvalds { 5161da177e4SLinus Torvalds static DECLARE_WORK(cad_work, deferred_cad, NULL); 5171da177e4SLinus Torvalds 5181da177e4SLinus Torvalds if (C_A_D) 5191da177e4SLinus Torvalds schedule_work(&cad_work); 5201da177e4SLinus Torvalds else 5211da177e4SLinus Torvalds kill_proc(cad_pid, SIGINT, 1); 5221da177e4SLinus Torvalds } 5231da177e4SLinus Torvalds 5241da177e4SLinus Torvalds 5251da177e4SLinus Torvalds /* 5261da177e4SLinus Torvalds * Unprivileged users may change the real gid to the effective gid 5271da177e4SLinus Torvalds * or vice versa. (BSD-style) 5281da177e4SLinus Torvalds * 5291da177e4SLinus Torvalds * If you set the real gid at all, or set the effective gid to a value not 5301da177e4SLinus Torvalds * equal to the real gid, then the saved gid is set to the new effective gid. 5311da177e4SLinus Torvalds * 5321da177e4SLinus Torvalds * This makes it possible for a setgid program to completely drop its 5331da177e4SLinus Torvalds * privileges, which is often a useful assertion to make when you are doing 5341da177e4SLinus Torvalds * a security audit over a program. 5351da177e4SLinus Torvalds * 5361da177e4SLinus Torvalds * The general idea is that a program which uses just setregid() will be 5371da177e4SLinus Torvalds * 100% compatible with BSD. A program which uses just setgid() will be 5381da177e4SLinus Torvalds * 100% compatible with POSIX with saved IDs. 5391da177e4SLinus Torvalds * 5401da177e4SLinus Torvalds * SMP: There are not races, the GIDs are checked only by filesystem 5411da177e4SLinus Torvalds * operations (as far as semantic preservation is concerned). 5421da177e4SLinus Torvalds */ 5431da177e4SLinus Torvalds asmlinkage long sys_setregid(gid_t rgid, gid_t egid) 5441da177e4SLinus Torvalds { 5451da177e4SLinus Torvalds int old_rgid = current->gid; 5461da177e4SLinus Torvalds int old_egid = current->egid; 5471da177e4SLinus Torvalds int new_rgid = old_rgid; 5481da177e4SLinus Torvalds int new_egid = old_egid; 5491da177e4SLinus Torvalds int retval; 5501da177e4SLinus Torvalds 5511da177e4SLinus Torvalds retval = security_task_setgid(rgid, egid, (gid_t)-1, LSM_SETID_RE); 5521da177e4SLinus Torvalds if (retval) 5531da177e4SLinus Torvalds return retval; 5541da177e4SLinus Torvalds 5551da177e4SLinus Torvalds if (rgid != (gid_t) -1) { 5561da177e4SLinus Torvalds if ((old_rgid == rgid) || 5571da177e4SLinus Torvalds (current->egid==rgid) || 5581da177e4SLinus Torvalds capable(CAP_SETGID)) 5591da177e4SLinus Torvalds new_rgid = rgid; 5601da177e4SLinus Torvalds else 5611da177e4SLinus Torvalds return -EPERM; 5621da177e4SLinus Torvalds } 5631da177e4SLinus Torvalds if (egid != (gid_t) -1) { 5641da177e4SLinus Torvalds if ((old_rgid == egid) || 5651da177e4SLinus Torvalds (current->egid == egid) || 5661da177e4SLinus Torvalds (current->sgid == egid) || 5671da177e4SLinus Torvalds capable(CAP_SETGID)) 5681da177e4SLinus Torvalds new_egid = egid; 5691da177e4SLinus Torvalds else { 5701da177e4SLinus Torvalds return -EPERM; 5711da177e4SLinus Torvalds } 5721da177e4SLinus Torvalds } 5731da177e4SLinus Torvalds if (new_egid != old_egid) 5741da177e4SLinus Torvalds { 575d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 576d59dd462S[email protected] smp_wmb(); 5771da177e4SLinus Torvalds } 5781da177e4SLinus Torvalds if (rgid != (gid_t) -1 || 5791da177e4SLinus Torvalds (egid != (gid_t) -1 && egid != old_rgid)) 5801da177e4SLinus Torvalds current->sgid = new_egid; 5811da177e4SLinus Torvalds current->fsgid = new_egid; 5821da177e4SLinus Torvalds current->egid = new_egid; 5831da177e4SLinus Torvalds current->gid = new_rgid; 5841da177e4SLinus Torvalds key_fsgid_changed(current); 5851da177e4SLinus Torvalds return 0; 5861da177e4SLinus Torvalds } 5871da177e4SLinus Torvalds 5881da177e4SLinus Torvalds /* 5891da177e4SLinus Torvalds * setgid() is implemented like SysV w/ SAVED_IDS 5901da177e4SLinus Torvalds * 5911da177e4SLinus Torvalds * SMP: Same implicit races as above. 5921da177e4SLinus Torvalds */ 5931da177e4SLinus Torvalds asmlinkage long sys_setgid(gid_t gid) 5941da177e4SLinus Torvalds { 5951da177e4SLinus Torvalds int old_egid = current->egid; 5961da177e4SLinus Torvalds int retval; 5971da177e4SLinus Torvalds 5981da177e4SLinus Torvalds retval = security_task_setgid(gid, (gid_t)-1, (gid_t)-1, LSM_SETID_ID); 5991da177e4SLinus Torvalds if (retval) 6001da177e4SLinus Torvalds return retval; 6011da177e4SLinus Torvalds 6021da177e4SLinus Torvalds if (capable(CAP_SETGID)) 6031da177e4SLinus Torvalds { 6041da177e4SLinus Torvalds if(old_egid != gid) 6051da177e4SLinus Torvalds { 606d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 607d59dd462S[email protected] smp_wmb(); 6081da177e4SLinus Torvalds } 6091da177e4SLinus Torvalds current->gid = current->egid = current->sgid = current->fsgid = gid; 6101da177e4SLinus Torvalds } 6111da177e4SLinus Torvalds else if ((gid == current->gid) || (gid == current->sgid)) 6121da177e4SLinus Torvalds { 6131da177e4SLinus Torvalds if(old_egid != gid) 6141da177e4SLinus Torvalds { 615d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 616d59dd462S[email protected] smp_wmb(); 6171da177e4SLinus Torvalds } 6181da177e4SLinus Torvalds current->egid = current->fsgid = gid; 6191da177e4SLinus Torvalds } 6201da177e4SLinus Torvalds else 6211da177e4SLinus Torvalds return -EPERM; 6221da177e4SLinus Torvalds 6231da177e4SLinus Torvalds key_fsgid_changed(current); 6241da177e4SLinus Torvalds return 0; 6251da177e4SLinus Torvalds } 6261da177e4SLinus Torvalds 6271da177e4SLinus Torvalds static int set_user(uid_t new_ruid, int dumpclear) 6281da177e4SLinus Torvalds { 6291da177e4SLinus Torvalds struct user_struct *new_user; 6301da177e4SLinus Torvalds 6311da177e4SLinus Torvalds new_user = alloc_uid(new_ruid); 6321da177e4SLinus Torvalds if (!new_user) 6331da177e4SLinus Torvalds return -EAGAIN; 6341da177e4SLinus Torvalds 6351da177e4SLinus Torvalds if (atomic_read(&new_user->processes) >= 6361da177e4SLinus Torvalds current->signal->rlim[RLIMIT_NPROC].rlim_cur && 6371da177e4SLinus Torvalds new_user != &root_user) { 6381da177e4SLinus Torvalds free_uid(new_user); 6391da177e4SLinus Torvalds return -EAGAIN; 6401da177e4SLinus Torvalds } 6411da177e4SLinus Torvalds 6421da177e4SLinus Torvalds switch_uid(new_user); 6431da177e4SLinus Torvalds 6441da177e4SLinus Torvalds if(dumpclear) 6451da177e4SLinus Torvalds { 646d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 647d59dd462S[email protected] smp_wmb(); 6481da177e4SLinus Torvalds } 6491da177e4SLinus Torvalds current->uid = new_ruid; 6501da177e4SLinus Torvalds return 0; 6511da177e4SLinus Torvalds } 6521da177e4SLinus Torvalds 6531da177e4SLinus Torvalds /* 6541da177e4SLinus Torvalds * Unprivileged users may change the real uid to the effective uid 6551da177e4SLinus Torvalds * or vice versa. (BSD-style) 6561da177e4SLinus Torvalds * 6571da177e4SLinus Torvalds * If you set the real uid at all, or set the effective uid to a value not 6581da177e4SLinus Torvalds * equal to the real uid, then the saved uid is set to the new effective uid. 6591da177e4SLinus Torvalds * 6601da177e4SLinus Torvalds * This makes it possible for a setuid program to completely drop its 6611da177e4SLinus Torvalds * privileges, which is often a useful assertion to make when you are doing 6621da177e4SLinus Torvalds * a security audit over a program. 6631da177e4SLinus Torvalds * 6641da177e4SLinus Torvalds * The general idea is that a program which uses just setreuid() will be 6651da177e4SLinus Torvalds * 100% compatible with BSD. A program which uses just setuid() will be 6661da177e4SLinus Torvalds * 100% compatible with POSIX with saved IDs. 6671da177e4SLinus Torvalds */ 6681da177e4SLinus Torvalds asmlinkage long sys_setreuid(uid_t ruid, uid_t euid) 6691da177e4SLinus Torvalds { 6701da177e4SLinus Torvalds int old_ruid, old_euid, old_suid, new_ruid, new_euid; 6711da177e4SLinus Torvalds int retval; 6721da177e4SLinus Torvalds 6731da177e4SLinus Torvalds retval = security_task_setuid(ruid, euid, (uid_t)-1, LSM_SETID_RE); 6741da177e4SLinus Torvalds if (retval) 6751da177e4SLinus Torvalds return retval; 6761da177e4SLinus Torvalds 6771da177e4SLinus Torvalds new_ruid = old_ruid = current->uid; 6781da177e4SLinus Torvalds new_euid = old_euid = current->euid; 6791da177e4SLinus Torvalds old_suid = current->suid; 6801da177e4SLinus Torvalds 6811da177e4SLinus Torvalds if (ruid != (uid_t) -1) { 6821da177e4SLinus Torvalds new_ruid = ruid; 6831da177e4SLinus Torvalds if ((old_ruid != ruid) && 6841da177e4SLinus Torvalds (current->euid != ruid) && 6851da177e4SLinus Torvalds !capable(CAP_SETUID)) 6861da177e4SLinus Torvalds return -EPERM; 6871da177e4SLinus Torvalds } 6881da177e4SLinus Torvalds 6891da177e4SLinus Torvalds if (euid != (uid_t) -1) { 6901da177e4SLinus Torvalds new_euid = euid; 6911da177e4SLinus Torvalds if ((old_ruid != euid) && 6921da177e4SLinus Torvalds (current->euid != euid) && 6931da177e4SLinus Torvalds (current->suid != euid) && 6941da177e4SLinus Torvalds !capable(CAP_SETUID)) 6951da177e4SLinus Torvalds return -EPERM; 6961da177e4SLinus Torvalds } 6971da177e4SLinus Torvalds 6981da177e4SLinus Torvalds if (new_ruid != old_ruid && set_user(new_ruid, new_euid != old_euid) < 0) 6991da177e4SLinus Torvalds return -EAGAIN; 7001da177e4SLinus Torvalds 7011da177e4SLinus Torvalds if (new_euid != old_euid) 7021da177e4SLinus Torvalds { 703d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 704d59dd462S[email protected] smp_wmb(); 7051da177e4SLinus Torvalds } 7061da177e4SLinus Torvalds current->fsuid = current->euid = new_euid; 7071da177e4SLinus Torvalds if (ruid != (uid_t) -1 || 7081da177e4SLinus Torvalds (euid != (uid_t) -1 && euid != old_ruid)) 7091da177e4SLinus Torvalds current->suid = current->euid; 7101da177e4SLinus Torvalds current->fsuid = current->euid; 7111da177e4SLinus Torvalds 7121da177e4SLinus Torvalds key_fsuid_changed(current); 7131da177e4SLinus Torvalds 7141da177e4SLinus Torvalds return security_task_post_setuid(old_ruid, old_euid, old_suid, LSM_SETID_RE); 7151da177e4SLinus Torvalds } 7161da177e4SLinus Torvalds 7171da177e4SLinus Torvalds 7181da177e4SLinus Torvalds 7191da177e4SLinus Torvalds /* 7201da177e4SLinus Torvalds * setuid() is implemented like SysV with SAVED_IDS 7211da177e4SLinus Torvalds * 7221da177e4SLinus Torvalds * Note that SAVED_ID's is deficient in that a setuid root program 7231da177e4SLinus Torvalds * like sendmail, for example, cannot set its uid to be a normal 7241da177e4SLinus Torvalds * user and then switch back, because if you're root, setuid() sets 7251da177e4SLinus Torvalds * the saved uid too. If you don't like this, blame the bright people 7261da177e4SLinus Torvalds * in the POSIX committee and/or USG. Note that the BSD-style setreuid() 7271da177e4SLinus Torvalds * will allow a root program to temporarily drop privileges and be able to 7281da177e4SLinus Torvalds * regain them by swapping the real and effective uid. 7291da177e4SLinus Torvalds */ 7301da177e4SLinus Torvalds asmlinkage long sys_setuid(uid_t uid) 7311da177e4SLinus Torvalds { 7321da177e4SLinus Torvalds int old_euid = current->euid; 7331da177e4SLinus Torvalds int old_ruid, old_suid, new_ruid, new_suid; 7341da177e4SLinus Torvalds int retval; 7351da177e4SLinus Torvalds 7361da177e4SLinus Torvalds retval = security_task_setuid(uid, (uid_t)-1, (uid_t)-1, LSM_SETID_ID); 7371da177e4SLinus Torvalds if (retval) 7381da177e4SLinus Torvalds return retval; 7391da177e4SLinus Torvalds 7401da177e4SLinus Torvalds old_ruid = new_ruid = current->uid; 7411da177e4SLinus Torvalds old_suid = current->suid; 7421da177e4SLinus Torvalds new_suid = old_suid; 7431da177e4SLinus Torvalds 7441da177e4SLinus Torvalds if (capable(CAP_SETUID)) { 7451da177e4SLinus Torvalds if (uid != old_ruid && set_user(uid, old_euid != uid) < 0) 7461da177e4SLinus Torvalds return -EAGAIN; 7471da177e4SLinus Torvalds new_suid = uid; 7481da177e4SLinus Torvalds } else if ((uid != current->uid) && (uid != new_suid)) 7491da177e4SLinus Torvalds return -EPERM; 7501da177e4SLinus Torvalds 7511da177e4SLinus Torvalds if (old_euid != uid) 7521da177e4SLinus Torvalds { 753d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 754d59dd462S[email protected] smp_wmb(); 7551da177e4SLinus Torvalds } 7561da177e4SLinus Torvalds current->fsuid = current->euid = uid; 7571da177e4SLinus Torvalds current->suid = new_suid; 7581da177e4SLinus Torvalds 7591da177e4SLinus Torvalds key_fsuid_changed(current); 7601da177e4SLinus Torvalds 7611da177e4SLinus Torvalds return security_task_post_setuid(old_ruid, old_euid, old_suid, LSM_SETID_ID); 7621da177e4SLinus Torvalds } 7631da177e4SLinus Torvalds 7641da177e4SLinus Torvalds 7651da177e4SLinus Torvalds /* 7661da177e4SLinus Torvalds * This function implements a generic ability to update ruid, euid, 7671da177e4SLinus Torvalds * and suid. This allows you to implement the 4.4 compatible seteuid(). 7681da177e4SLinus Torvalds */ 7691da177e4SLinus Torvalds asmlinkage long sys_setresuid(uid_t ruid, uid_t euid, uid_t suid) 7701da177e4SLinus Torvalds { 7711da177e4SLinus Torvalds int old_ruid = current->uid; 7721da177e4SLinus Torvalds int old_euid = current->euid; 7731da177e4SLinus Torvalds int old_suid = current->suid; 7741da177e4SLinus Torvalds int retval; 7751da177e4SLinus Torvalds 7761da177e4SLinus Torvalds retval = security_task_setuid(ruid, euid, suid, LSM_SETID_RES); 7771da177e4SLinus Torvalds if (retval) 7781da177e4SLinus Torvalds return retval; 7791da177e4SLinus Torvalds 7801da177e4SLinus Torvalds if (!capable(CAP_SETUID)) { 7811da177e4SLinus Torvalds if ((ruid != (uid_t) -1) && (ruid != current->uid) && 7821da177e4SLinus Torvalds (ruid != current->euid) && (ruid != current->suid)) 7831da177e4SLinus Torvalds return -EPERM; 7841da177e4SLinus Torvalds if ((euid != (uid_t) -1) && (euid != current->uid) && 7851da177e4SLinus Torvalds (euid != current->euid) && (euid != current->suid)) 7861da177e4SLinus Torvalds return -EPERM; 7871da177e4SLinus Torvalds if ((suid != (uid_t) -1) && (suid != current->uid) && 7881da177e4SLinus Torvalds (suid != current->euid) && (suid != current->suid)) 7891da177e4SLinus Torvalds return -EPERM; 7901da177e4SLinus Torvalds } 7911da177e4SLinus Torvalds if (ruid != (uid_t) -1) { 7921da177e4SLinus Torvalds if (ruid != current->uid && set_user(ruid, euid != current->euid) < 0) 7931da177e4SLinus Torvalds return -EAGAIN; 7941da177e4SLinus Torvalds } 7951da177e4SLinus Torvalds if (euid != (uid_t) -1) { 7961da177e4SLinus Torvalds if (euid != current->euid) 7971da177e4SLinus Torvalds { 798d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 799d59dd462S[email protected] smp_wmb(); 8001da177e4SLinus Torvalds } 8011da177e4SLinus Torvalds current->euid = euid; 8021da177e4SLinus Torvalds } 8031da177e4SLinus Torvalds current->fsuid = current->euid; 8041da177e4SLinus Torvalds if (suid != (uid_t) -1) 8051da177e4SLinus Torvalds current->suid = suid; 8061da177e4SLinus Torvalds 8071da177e4SLinus Torvalds key_fsuid_changed(current); 8081da177e4SLinus Torvalds 8091da177e4SLinus Torvalds return security_task_post_setuid(old_ruid, old_euid, old_suid, LSM_SETID_RES); 8101da177e4SLinus Torvalds } 8111da177e4SLinus Torvalds 8121da177e4SLinus Torvalds asmlinkage long sys_getresuid(uid_t __user *ruid, uid_t __user *euid, uid_t __user *suid) 8131da177e4SLinus Torvalds { 8141da177e4SLinus Torvalds int retval; 8151da177e4SLinus Torvalds 8161da177e4SLinus Torvalds if (!(retval = put_user(current->uid, ruid)) && 8171da177e4SLinus Torvalds !(retval = put_user(current->euid, euid))) 8181da177e4SLinus Torvalds retval = put_user(current->suid, suid); 8191da177e4SLinus Torvalds 8201da177e4SLinus Torvalds return retval; 8211da177e4SLinus Torvalds } 8221da177e4SLinus Torvalds 8231da177e4SLinus Torvalds /* 8241da177e4SLinus Torvalds * Same as above, but for rgid, egid, sgid. 8251da177e4SLinus Torvalds */ 8261da177e4SLinus Torvalds asmlinkage long sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid) 8271da177e4SLinus Torvalds { 8281da177e4SLinus Torvalds int retval; 8291da177e4SLinus Torvalds 8301da177e4SLinus Torvalds retval = security_task_setgid(rgid, egid, sgid, LSM_SETID_RES); 8311da177e4SLinus Torvalds if (retval) 8321da177e4SLinus Torvalds return retval; 8331da177e4SLinus Torvalds 8341da177e4SLinus Torvalds if (!capable(CAP_SETGID)) { 8351da177e4SLinus Torvalds if ((rgid != (gid_t) -1) && (rgid != current->gid) && 8361da177e4SLinus Torvalds (rgid != current->egid) && (rgid != current->sgid)) 8371da177e4SLinus Torvalds return -EPERM; 8381da177e4SLinus Torvalds if ((egid != (gid_t) -1) && (egid != current->gid) && 8391da177e4SLinus Torvalds (egid != current->egid) && (egid != current->sgid)) 8401da177e4SLinus Torvalds return -EPERM; 8411da177e4SLinus Torvalds if ((sgid != (gid_t) -1) && (sgid != current->gid) && 8421da177e4SLinus Torvalds (sgid != current->egid) && (sgid != current->sgid)) 8431da177e4SLinus Torvalds return -EPERM; 8441da177e4SLinus Torvalds } 8451da177e4SLinus Torvalds if (egid != (gid_t) -1) { 8461da177e4SLinus Torvalds if (egid != current->egid) 8471da177e4SLinus Torvalds { 848d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 849d59dd462S[email protected] smp_wmb(); 8501da177e4SLinus Torvalds } 8511da177e4SLinus Torvalds current->egid = egid; 8521da177e4SLinus Torvalds } 8531da177e4SLinus Torvalds current->fsgid = current->egid; 8541da177e4SLinus Torvalds if (rgid != (gid_t) -1) 8551da177e4SLinus Torvalds current->gid = rgid; 8561da177e4SLinus Torvalds if (sgid != (gid_t) -1) 8571da177e4SLinus Torvalds current->sgid = sgid; 8581da177e4SLinus Torvalds 8591da177e4SLinus Torvalds key_fsgid_changed(current); 8601da177e4SLinus Torvalds return 0; 8611da177e4SLinus Torvalds } 8621da177e4SLinus Torvalds 8631da177e4SLinus Torvalds asmlinkage long sys_getresgid(gid_t __user *rgid, gid_t __user *egid, gid_t __user *sgid) 8641da177e4SLinus Torvalds { 8651da177e4SLinus Torvalds int retval; 8661da177e4SLinus Torvalds 8671da177e4SLinus Torvalds if (!(retval = put_user(current->gid, rgid)) && 8681da177e4SLinus Torvalds !(retval = put_user(current->egid, egid))) 8691da177e4SLinus Torvalds retval = put_user(current->sgid, sgid); 8701da177e4SLinus Torvalds 8711da177e4SLinus Torvalds return retval; 8721da177e4SLinus Torvalds } 8731da177e4SLinus Torvalds 8741da177e4SLinus Torvalds 8751da177e4SLinus Torvalds /* 8761da177e4SLinus Torvalds * "setfsuid()" sets the fsuid - the uid used for filesystem checks. This 8771da177e4SLinus Torvalds * is used for "access()" and for the NFS daemon (letting nfsd stay at 8781da177e4SLinus Torvalds * whatever uid it wants to). It normally shadows "euid", except when 8791da177e4SLinus Torvalds * explicitly set by setfsuid() or for access.. 8801da177e4SLinus Torvalds */ 8811da177e4SLinus Torvalds asmlinkage long sys_setfsuid(uid_t uid) 8821da177e4SLinus Torvalds { 8831da177e4SLinus Torvalds int old_fsuid; 8841da177e4SLinus Torvalds 8851da177e4SLinus Torvalds old_fsuid = current->fsuid; 8861da177e4SLinus Torvalds if (security_task_setuid(uid, (uid_t)-1, (uid_t)-1, LSM_SETID_FS)) 8871da177e4SLinus Torvalds return old_fsuid; 8881da177e4SLinus Torvalds 8891da177e4SLinus Torvalds if (uid == current->uid || uid == current->euid || 8901da177e4SLinus Torvalds uid == current->suid || uid == current->fsuid || 8911da177e4SLinus Torvalds capable(CAP_SETUID)) 8921da177e4SLinus Torvalds { 8931da177e4SLinus Torvalds if (uid != old_fsuid) 8941da177e4SLinus Torvalds { 895d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 896d59dd462S[email protected] smp_wmb(); 8971da177e4SLinus Torvalds } 8981da177e4SLinus Torvalds current->fsuid = uid; 8991da177e4SLinus Torvalds } 9001da177e4SLinus Torvalds 9011da177e4SLinus Torvalds key_fsuid_changed(current); 9021da177e4SLinus Torvalds 9031da177e4SLinus Torvalds security_task_post_setuid(old_fsuid, (uid_t)-1, (uid_t)-1, LSM_SETID_FS); 9041da177e4SLinus Torvalds 9051da177e4SLinus Torvalds return old_fsuid; 9061da177e4SLinus Torvalds } 9071da177e4SLinus Torvalds 9081da177e4SLinus Torvalds /* 9091da177e4SLinus Torvalds * Samma p� svenska.. 9101da177e4SLinus Torvalds */ 9111da177e4SLinus Torvalds asmlinkage long sys_setfsgid(gid_t gid) 9121da177e4SLinus Torvalds { 9131da177e4SLinus Torvalds int old_fsgid; 9141da177e4SLinus Torvalds 9151da177e4SLinus Torvalds old_fsgid = current->fsgid; 9161da177e4SLinus Torvalds if (security_task_setgid(gid, (gid_t)-1, (gid_t)-1, LSM_SETID_FS)) 9171da177e4SLinus Torvalds return old_fsgid; 9181da177e4SLinus Torvalds 9191da177e4SLinus Torvalds if (gid == current->gid || gid == current->egid || 9201da177e4SLinus Torvalds gid == current->sgid || gid == current->fsgid || 9211da177e4SLinus Torvalds capable(CAP_SETGID)) 9221da177e4SLinus Torvalds { 9231da177e4SLinus Torvalds if (gid != old_fsgid) 9241da177e4SLinus Torvalds { 925d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 926d59dd462S[email protected] smp_wmb(); 9271da177e4SLinus Torvalds } 9281da177e4SLinus Torvalds current->fsgid = gid; 9291da177e4SLinus Torvalds key_fsgid_changed(current); 9301da177e4SLinus Torvalds } 9311da177e4SLinus Torvalds return old_fsgid; 9321da177e4SLinus Torvalds } 9331da177e4SLinus Torvalds 9341da177e4SLinus Torvalds asmlinkage long sys_times(struct tms __user * tbuf) 9351da177e4SLinus Torvalds { 9361da177e4SLinus Torvalds /* 9371da177e4SLinus Torvalds * In the SMP world we might just be unlucky and have one of 9381da177e4SLinus Torvalds * the times increment as we use it. Since the value is an 9391da177e4SLinus Torvalds * atomically safe type this is just fine. Conceptually its 9401da177e4SLinus Torvalds * as if the syscall took an instant longer to occur. 9411da177e4SLinus Torvalds */ 9421da177e4SLinus Torvalds if (tbuf) { 9431da177e4SLinus Torvalds struct tms tmp; 94471a2224dSChristoph Lameter cputime_t utime, stime, cutime, cstime; 94571a2224dSChristoph Lameter 94671a2224dSChristoph Lameter #ifdef CONFIG_SMP 94771a2224dSChristoph Lameter if (thread_group_empty(current)) { 94871a2224dSChristoph Lameter /* 94971a2224dSChristoph Lameter * Single thread case without the use of any locks. 95071a2224dSChristoph Lameter * 95171a2224dSChristoph Lameter * We may race with release_task if two threads are 95271a2224dSChristoph Lameter * executing. However, release task first adds up the 95371a2224dSChristoph Lameter * counters (__exit_signal) before removing the task 95471a2224dSChristoph Lameter * from the process tasklist (__unhash_process). 95571a2224dSChristoph Lameter * __exit_signal also acquires and releases the 95671a2224dSChristoph Lameter * siglock which results in the proper memory ordering 95771a2224dSChristoph Lameter * so that the list modifications are always visible 95871a2224dSChristoph Lameter * after the counters have been updated. 95971a2224dSChristoph Lameter * 96071a2224dSChristoph Lameter * If the counters have been updated by the second thread 96171a2224dSChristoph Lameter * but the thread has not yet been removed from the list 96271a2224dSChristoph Lameter * then the other branch will be executing which will 96371a2224dSChristoph Lameter * block on tasklist_lock until the exit handling of the 96471a2224dSChristoph Lameter * other task is finished. 96571a2224dSChristoph Lameter * 96671a2224dSChristoph Lameter * This also implies that the sighand->siglock cannot 96771a2224dSChristoph Lameter * be held by another processor. So we can also 96871a2224dSChristoph Lameter * skip acquiring that lock. 96971a2224dSChristoph Lameter */ 97071a2224dSChristoph Lameter utime = cputime_add(current->signal->utime, current->utime); 97171a2224dSChristoph Lameter stime = cputime_add(current->signal->utime, current->stime); 97271a2224dSChristoph Lameter cutime = current->signal->cutime; 97371a2224dSChristoph Lameter cstime = current->signal->cstime; 97471a2224dSChristoph Lameter } else 97571a2224dSChristoph Lameter #endif 97671a2224dSChristoph Lameter { 97771a2224dSChristoph Lameter 97871a2224dSChristoph Lameter /* Process with multiple threads */ 9791da177e4SLinus Torvalds struct task_struct *tsk = current; 9801da177e4SLinus Torvalds struct task_struct *t; 9811da177e4SLinus Torvalds 9821da177e4SLinus Torvalds read_lock(&tasklist_lock); 9831da177e4SLinus Torvalds utime = tsk->signal->utime; 9841da177e4SLinus Torvalds stime = tsk->signal->stime; 9851da177e4SLinus Torvalds t = tsk; 9861da177e4SLinus Torvalds do { 9871da177e4SLinus Torvalds utime = cputime_add(utime, t->utime); 9881da177e4SLinus Torvalds stime = cputime_add(stime, t->stime); 9891da177e4SLinus Torvalds t = next_thread(t); 9901da177e4SLinus Torvalds } while (t != tsk); 9911da177e4SLinus Torvalds 9921da177e4SLinus Torvalds /* 9931da177e4SLinus Torvalds * While we have tasklist_lock read-locked, no dying thread 9941da177e4SLinus Torvalds * can be updating current->signal->[us]time. Instead, 9951da177e4SLinus Torvalds * we got their counts included in the live thread loop. 9961da177e4SLinus Torvalds * However, another thread can come in right now and 9971da177e4SLinus Torvalds * do a wait call that updates current->signal->c[us]time. 9981da177e4SLinus Torvalds * To make sure we always see that pair updated atomically, 9991da177e4SLinus Torvalds * we take the siglock around fetching them. 10001da177e4SLinus Torvalds */ 10011da177e4SLinus Torvalds spin_lock_irq(&tsk->sighand->siglock); 10021da177e4SLinus Torvalds cutime = tsk->signal->cutime; 10031da177e4SLinus Torvalds cstime = tsk->signal->cstime; 10041da177e4SLinus Torvalds spin_unlock_irq(&tsk->sighand->siglock); 10051da177e4SLinus Torvalds read_unlock(&tasklist_lock); 100671a2224dSChristoph Lameter } 10071da177e4SLinus Torvalds tmp.tms_utime = cputime_to_clock_t(utime); 10081da177e4SLinus Torvalds tmp.tms_stime = cputime_to_clock_t(stime); 10091da177e4SLinus Torvalds tmp.tms_cutime = cputime_to_clock_t(cutime); 10101da177e4SLinus Torvalds tmp.tms_cstime = cputime_to_clock_t(cstime); 10111da177e4SLinus Torvalds if (copy_to_user(tbuf, &tmp, sizeof(struct tms))) 10121da177e4SLinus Torvalds return -EFAULT; 10131da177e4SLinus Torvalds } 10141da177e4SLinus Torvalds return (long) jiffies_64_to_clock_t(get_jiffies_64()); 10151da177e4SLinus Torvalds } 10161da177e4SLinus Torvalds 10171da177e4SLinus Torvalds /* 10181da177e4SLinus Torvalds * This needs some heavy checking ... 10191da177e4SLinus Torvalds * I just haven't the stomach for it. I also don't fully 10201da177e4SLinus Torvalds * understand sessions/pgrp etc. Let somebody who does explain it. 10211da177e4SLinus Torvalds * 10221da177e4SLinus Torvalds * OK, I think I have the protection semantics right.... this is really 10231da177e4SLinus Torvalds * only important on a multi-user system anyway, to make sure one user 10241da177e4SLinus Torvalds * can't send a signal to a process owned by another. -TYT, 12/12/91 10251da177e4SLinus Torvalds * 10261da177e4SLinus Torvalds * Auch. Had to add the 'did_exec' flag to conform completely to POSIX. 10271da177e4SLinus Torvalds * LBT 04.03.94 10281da177e4SLinus Torvalds */ 10291da177e4SLinus Torvalds 10301da177e4SLinus Torvalds asmlinkage long sys_setpgid(pid_t pid, pid_t pgid) 10311da177e4SLinus Torvalds { 10321da177e4SLinus Torvalds struct task_struct *p; 10331da177e4SLinus Torvalds int err = -EINVAL; 10341da177e4SLinus Torvalds 10351da177e4SLinus Torvalds if (!pid) 10361da177e4SLinus Torvalds pid = current->pid; 10371da177e4SLinus Torvalds if (!pgid) 10381da177e4SLinus Torvalds pgid = pid; 10391da177e4SLinus Torvalds if (pgid < 0) 10401da177e4SLinus Torvalds return -EINVAL; 10411da177e4SLinus Torvalds 10421da177e4SLinus Torvalds /* From this point forward we keep holding onto the tasklist lock 10431da177e4SLinus Torvalds * so that our parent does not change from under us. -DaveM 10441da177e4SLinus Torvalds */ 10451da177e4SLinus Torvalds write_lock_irq(&tasklist_lock); 10461da177e4SLinus Torvalds 10471da177e4SLinus Torvalds err = -ESRCH; 10481da177e4SLinus Torvalds p = find_task_by_pid(pid); 10491da177e4SLinus Torvalds if (!p) 10501da177e4SLinus Torvalds goto out; 10511da177e4SLinus Torvalds 10521da177e4SLinus Torvalds err = -EINVAL; 10531da177e4SLinus Torvalds if (!thread_group_leader(p)) 10541da177e4SLinus Torvalds goto out; 10551da177e4SLinus Torvalds 10561da177e4SLinus Torvalds if (p->parent == current || p->real_parent == current) { 10571da177e4SLinus Torvalds err = -EPERM; 10581da177e4SLinus Torvalds if (p->signal->session != current->signal->session) 10591da177e4SLinus Torvalds goto out; 10601da177e4SLinus Torvalds err = -EACCES; 10611da177e4SLinus Torvalds if (p->did_exec) 10621da177e4SLinus Torvalds goto out; 10631da177e4SLinus Torvalds } else { 10641da177e4SLinus Torvalds err = -ESRCH; 10651da177e4SLinus Torvalds if (p != current) 10661da177e4SLinus Torvalds goto out; 10671da177e4SLinus Torvalds } 10681da177e4SLinus Torvalds 10691da177e4SLinus Torvalds err = -EPERM; 10701da177e4SLinus Torvalds if (p->signal->leader) 10711da177e4SLinus Torvalds goto out; 10721da177e4SLinus Torvalds 10731da177e4SLinus Torvalds if (pgid != pid) { 10741da177e4SLinus Torvalds struct task_struct *p; 10751da177e4SLinus Torvalds 10761da177e4SLinus Torvalds do_each_task_pid(pgid, PIDTYPE_PGID, p) { 10771da177e4SLinus Torvalds if (p->signal->session == current->signal->session) 10781da177e4SLinus Torvalds goto ok_pgid; 10791da177e4SLinus Torvalds } while_each_task_pid(pgid, PIDTYPE_PGID, p); 10801da177e4SLinus Torvalds goto out; 10811da177e4SLinus Torvalds } 10821da177e4SLinus Torvalds 10831da177e4SLinus Torvalds ok_pgid: 10841da177e4SLinus Torvalds err = security_task_setpgid(p, pgid); 10851da177e4SLinus Torvalds if (err) 10861da177e4SLinus Torvalds goto out; 10871da177e4SLinus Torvalds 10881da177e4SLinus Torvalds if (process_group(p) != pgid) { 10891da177e4SLinus Torvalds detach_pid(p, PIDTYPE_PGID); 10901da177e4SLinus Torvalds p->signal->pgrp = pgid; 10911da177e4SLinus Torvalds attach_pid(p, PIDTYPE_PGID, pgid); 10921da177e4SLinus Torvalds } 10931da177e4SLinus Torvalds 10941da177e4SLinus Torvalds err = 0; 10951da177e4SLinus Torvalds out: 10961da177e4SLinus Torvalds /* All paths lead to here, thus we are safe. -DaveM */ 10971da177e4SLinus Torvalds write_unlock_irq(&tasklist_lock); 10981da177e4SLinus Torvalds return err; 10991da177e4SLinus Torvalds } 11001da177e4SLinus Torvalds 11011da177e4SLinus Torvalds asmlinkage long sys_getpgid(pid_t pid) 11021da177e4SLinus Torvalds { 11031da177e4SLinus Torvalds if (!pid) { 11041da177e4SLinus Torvalds return process_group(current); 11051da177e4SLinus Torvalds } else { 11061da177e4SLinus Torvalds int retval; 11071da177e4SLinus Torvalds struct task_struct *p; 11081da177e4SLinus Torvalds 11091da177e4SLinus Torvalds read_lock(&tasklist_lock); 11101da177e4SLinus Torvalds p = find_task_by_pid(pid); 11111da177e4SLinus Torvalds 11121da177e4SLinus Torvalds retval = -ESRCH; 11131da177e4SLinus Torvalds if (p) { 11141da177e4SLinus Torvalds retval = security_task_getpgid(p); 11151da177e4SLinus Torvalds if (!retval) 11161da177e4SLinus Torvalds retval = process_group(p); 11171da177e4SLinus Torvalds } 11181da177e4SLinus Torvalds read_unlock(&tasklist_lock); 11191da177e4SLinus Torvalds return retval; 11201da177e4SLinus Torvalds } 11211da177e4SLinus Torvalds } 11221da177e4SLinus Torvalds 11231da177e4SLinus Torvalds #ifdef __ARCH_WANT_SYS_GETPGRP 11241da177e4SLinus Torvalds 11251da177e4SLinus Torvalds asmlinkage long sys_getpgrp(void) 11261da177e4SLinus Torvalds { 11271da177e4SLinus Torvalds /* SMP - assuming writes are word atomic this is fine */ 11281da177e4SLinus Torvalds return process_group(current); 11291da177e4SLinus Torvalds } 11301da177e4SLinus Torvalds 11311da177e4SLinus Torvalds #endif 11321da177e4SLinus Torvalds 11331da177e4SLinus Torvalds asmlinkage long sys_getsid(pid_t pid) 11341da177e4SLinus Torvalds { 11351da177e4SLinus Torvalds if (!pid) { 11361da177e4SLinus Torvalds return current->signal->session; 11371da177e4SLinus Torvalds } else { 11381da177e4SLinus Torvalds int retval; 11391da177e4SLinus Torvalds struct task_struct *p; 11401da177e4SLinus Torvalds 11411da177e4SLinus Torvalds read_lock(&tasklist_lock); 11421da177e4SLinus Torvalds p = find_task_by_pid(pid); 11431da177e4SLinus Torvalds 11441da177e4SLinus Torvalds retval = -ESRCH; 11451da177e4SLinus Torvalds if(p) { 11461da177e4SLinus Torvalds retval = security_task_getsid(p); 11471da177e4SLinus Torvalds if (!retval) 11481da177e4SLinus Torvalds retval = p->signal->session; 11491da177e4SLinus Torvalds } 11501da177e4SLinus Torvalds read_unlock(&tasklist_lock); 11511da177e4SLinus Torvalds return retval; 11521da177e4SLinus Torvalds } 11531da177e4SLinus Torvalds } 11541da177e4SLinus Torvalds 11551da177e4SLinus Torvalds asmlinkage long sys_setsid(void) 11561da177e4SLinus Torvalds { 11571da177e4SLinus Torvalds struct pid *pid; 11581da177e4SLinus Torvalds int err = -EPERM; 11591da177e4SLinus Torvalds 11601da177e4SLinus Torvalds if (!thread_group_leader(current)) 11611da177e4SLinus Torvalds return -EINVAL; 11621da177e4SLinus Torvalds 11631da177e4SLinus Torvalds down(&tty_sem); 11641da177e4SLinus Torvalds write_lock_irq(&tasklist_lock); 11651da177e4SLinus Torvalds 11661da177e4SLinus Torvalds pid = find_pid(PIDTYPE_PGID, current->pid); 11671da177e4SLinus Torvalds if (pid) 11681da177e4SLinus Torvalds goto out; 11691da177e4SLinus Torvalds 11701da177e4SLinus Torvalds current->signal->leader = 1; 11711da177e4SLinus Torvalds __set_special_pids(current->pid, current->pid); 11721da177e4SLinus Torvalds current->signal->tty = NULL; 11731da177e4SLinus Torvalds current->signal->tty_old_pgrp = 0; 11741da177e4SLinus Torvalds err = process_group(current); 11751da177e4SLinus Torvalds out: 11761da177e4SLinus Torvalds write_unlock_irq(&tasklist_lock); 11771da177e4SLinus Torvalds up(&tty_sem); 11781da177e4SLinus Torvalds return err; 11791da177e4SLinus Torvalds } 11801da177e4SLinus Torvalds 11811da177e4SLinus Torvalds /* 11821da177e4SLinus Torvalds * Supplementary group IDs 11831da177e4SLinus Torvalds */ 11841da177e4SLinus Torvalds 11851da177e4SLinus Torvalds /* init to 2 - one for init_task, one to ensure it is never freed */ 11861da177e4SLinus Torvalds struct group_info init_groups = { .usage = ATOMIC_INIT(2) }; 11871da177e4SLinus Torvalds 11881da177e4SLinus Torvalds struct group_info *groups_alloc(int gidsetsize) 11891da177e4SLinus Torvalds { 11901da177e4SLinus Torvalds struct group_info *group_info; 11911da177e4SLinus Torvalds int nblocks; 11921da177e4SLinus Torvalds int i; 11931da177e4SLinus Torvalds 11941da177e4SLinus Torvalds nblocks = (gidsetsize + NGROUPS_PER_BLOCK - 1) / NGROUPS_PER_BLOCK; 11951da177e4SLinus Torvalds /* Make sure we always allocate at least one indirect block pointer */ 11961da177e4SLinus Torvalds nblocks = nblocks ? : 1; 11971da177e4SLinus Torvalds group_info = kmalloc(sizeof(*group_info) + nblocks*sizeof(gid_t *), GFP_USER); 11981da177e4SLinus Torvalds if (!group_info) 11991da177e4SLinus Torvalds return NULL; 12001da177e4SLinus Torvalds group_info->ngroups = gidsetsize; 12011da177e4SLinus Torvalds group_info->nblocks = nblocks; 12021da177e4SLinus Torvalds atomic_set(&group_info->usage, 1); 12031da177e4SLinus Torvalds 12041da177e4SLinus Torvalds if (gidsetsize <= NGROUPS_SMALL) { 12051da177e4SLinus Torvalds group_info->blocks[0] = group_info->small_block; 12061da177e4SLinus Torvalds } else { 12071da177e4SLinus Torvalds for (i = 0; i < nblocks; i++) { 12081da177e4SLinus Torvalds gid_t *b; 12091da177e4SLinus Torvalds b = (void *)__get_free_page(GFP_USER); 12101da177e4SLinus Torvalds if (!b) 12111da177e4SLinus Torvalds goto out_undo_partial_alloc; 12121da177e4SLinus Torvalds group_info->blocks[i] = b; 12131da177e4SLinus Torvalds } 12141da177e4SLinus Torvalds } 12151da177e4SLinus Torvalds return group_info; 12161da177e4SLinus Torvalds 12171da177e4SLinus Torvalds out_undo_partial_alloc: 12181da177e4SLinus Torvalds while (--i >= 0) { 12191da177e4SLinus Torvalds free_page((unsigned long)group_info->blocks[i]); 12201da177e4SLinus Torvalds } 12211da177e4SLinus Torvalds kfree(group_info); 12221da177e4SLinus Torvalds return NULL; 12231da177e4SLinus Torvalds } 12241da177e4SLinus Torvalds 12251da177e4SLinus Torvalds EXPORT_SYMBOL(groups_alloc); 12261da177e4SLinus Torvalds 12271da177e4SLinus Torvalds void groups_free(struct group_info *group_info) 12281da177e4SLinus Torvalds { 12291da177e4SLinus Torvalds if (group_info->blocks[0] != group_info->small_block) { 12301da177e4SLinus Torvalds int i; 12311da177e4SLinus Torvalds for (i = 0; i < group_info->nblocks; i++) 12321da177e4SLinus Torvalds free_page((unsigned long)group_info->blocks[i]); 12331da177e4SLinus Torvalds } 12341da177e4SLinus Torvalds kfree(group_info); 12351da177e4SLinus Torvalds } 12361da177e4SLinus Torvalds 12371da177e4SLinus Torvalds EXPORT_SYMBOL(groups_free); 12381da177e4SLinus Torvalds 12391da177e4SLinus Torvalds /* export the group_info to a user-space array */ 12401da177e4SLinus Torvalds static int groups_to_user(gid_t __user *grouplist, 12411da177e4SLinus Torvalds struct group_info *group_info) 12421da177e4SLinus Torvalds { 12431da177e4SLinus Torvalds int i; 12441da177e4SLinus Torvalds int count = group_info->ngroups; 12451da177e4SLinus Torvalds 12461da177e4SLinus Torvalds for (i = 0; i < group_info->nblocks; i++) { 12471da177e4SLinus Torvalds int cp_count = min(NGROUPS_PER_BLOCK, count); 12481da177e4SLinus Torvalds int off = i * NGROUPS_PER_BLOCK; 12491da177e4SLinus Torvalds int len = cp_count * sizeof(*grouplist); 12501da177e4SLinus Torvalds 12511da177e4SLinus Torvalds if (copy_to_user(grouplist+off, group_info->blocks[i], len)) 12521da177e4SLinus Torvalds return -EFAULT; 12531da177e4SLinus Torvalds 12541da177e4SLinus Torvalds count -= cp_count; 12551da177e4SLinus Torvalds } 12561da177e4SLinus Torvalds return 0; 12571da177e4SLinus Torvalds } 12581da177e4SLinus Torvalds 12591da177e4SLinus Torvalds /* fill a group_info from a user-space array - it must be allocated already */ 12601da177e4SLinus Torvalds static int groups_from_user(struct group_info *group_info, 12611da177e4SLinus Torvalds gid_t __user *grouplist) 12621da177e4SLinus Torvalds { 12631da177e4SLinus Torvalds int i; 12641da177e4SLinus Torvalds int count = group_info->ngroups; 12651da177e4SLinus Torvalds 12661da177e4SLinus Torvalds for (i = 0; i < group_info->nblocks; i++) { 12671da177e4SLinus Torvalds int cp_count = min(NGROUPS_PER_BLOCK, count); 12681da177e4SLinus Torvalds int off = i * NGROUPS_PER_BLOCK; 12691da177e4SLinus Torvalds int len = cp_count * sizeof(*grouplist); 12701da177e4SLinus Torvalds 12711da177e4SLinus Torvalds if (copy_from_user(group_info->blocks[i], grouplist+off, len)) 12721da177e4SLinus Torvalds return -EFAULT; 12731da177e4SLinus Torvalds 12741da177e4SLinus Torvalds count -= cp_count; 12751da177e4SLinus Torvalds } 12761da177e4SLinus Torvalds return 0; 12771da177e4SLinus Torvalds } 12781da177e4SLinus Torvalds 1279ebe8b541SDomen Puncer /* a simple Shell sort */ 12801da177e4SLinus Torvalds static void groups_sort(struct group_info *group_info) 12811da177e4SLinus Torvalds { 12821da177e4SLinus Torvalds int base, max, stride; 12831da177e4SLinus Torvalds int gidsetsize = group_info->ngroups; 12841da177e4SLinus Torvalds 12851da177e4SLinus Torvalds for (stride = 1; stride < gidsetsize; stride = 3 * stride + 1) 12861da177e4SLinus Torvalds ; /* nothing */ 12871da177e4SLinus Torvalds stride /= 3; 12881da177e4SLinus Torvalds 12891da177e4SLinus Torvalds while (stride) { 12901da177e4SLinus Torvalds max = gidsetsize - stride; 12911da177e4SLinus Torvalds for (base = 0; base < max; base++) { 12921da177e4SLinus Torvalds int left = base; 12931da177e4SLinus Torvalds int right = left + stride; 12941da177e4SLinus Torvalds gid_t tmp = GROUP_AT(group_info, right); 12951da177e4SLinus Torvalds 12961da177e4SLinus Torvalds while (left >= 0 && GROUP_AT(group_info, left) > tmp) { 12971da177e4SLinus Torvalds GROUP_AT(group_info, right) = 12981da177e4SLinus Torvalds GROUP_AT(group_info, left); 12991da177e4SLinus Torvalds right = left; 13001da177e4SLinus Torvalds left -= stride; 13011da177e4SLinus Torvalds } 13021da177e4SLinus Torvalds GROUP_AT(group_info, right) = tmp; 13031da177e4SLinus Torvalds } 13041da177e4SLinus Torvalds stride /= 3; 13051da177e4SLinus Torvalds } 13061da177e4SLinus Torvalds } 13071da177e4SLinus Torvalds 13081da177e4SLinus Torvalds /* a simple bsearch */ 13093e30148cSDavid Howells int groups_search(struct group_info *group_info, gid_t grp) 13101da177e4SLinus Torvalds { 13111da177e4SLinus Torvalds int left, right; 13121da177e4SLinus Torvalds 13131da177e4SLinus Torvalds if (!group_info) 13141da177e4SLinus Torvalds return 0; 13151da177e4SLinus Torvalds 13161da177e4SLinus Torvalds left = 0; 13171da177e4SLinus Torvalds right = group_info->ngroups; 13181da177e4SLinus Torvalds while (left < right) { 13191da177e4SLinus Torvalds int mid = (left+right)/2; 13201da177e4SLinus Torvalds int cmp = grp - GROUP_AT(group_info, mid); 13211da177e4SLinus Torvalds if (cmp > 0) 13221da177e4SLinus Torvalds left = mid + 1; 13231da177e4SLinus Torvalds else if (cmp < 0) 13241da177e4SLinus Torvalds right = mid; 13251da177e4SLinus Torvalds else 13261da177e4SLinus Torvalds return 1; 13271da177e4SLinus Torvalds } 13281da177e4SLinus Torvalds return 0; 13291da177e4SLinus Torvalds } 13301da177e4SLinus Torvalds 13311da177e4SLinus Torvalds /* validate and set current->group_info */ 13321da177e4SLinus Torvalds int set_current_groups(struct group_info *group_info) 13331da177e4SLinus Torvalds { 13341da177e4SLinus Torvalds int retval; 13351da177e4SLinus Torvalds struct group_info *old_info; 13361da177e4SLinus Torvalds 13371da177e4SLinus Torvalds retval = security_task_setgroups(group_info); 13381da177e4SLinus Torvalds if (retval) 13391da177e4SLinus Torvalds return retval; 13401da177e4SLinus Torvalds 13411da177e4SLinus Torvalds groups_sort(group_info); 13421da177e4SLinus Torvalds get_group_info(group_info); 13431da177e4SLinus Torvalds 13441da177e4SLinus Torvalds task_lock(current); 13451da177e4SLinus Torvalds old_info = current->group_info; 13461da177e4SLinus Torvalds current->group_info = group_info; 13471da177e4SLinus Torvalds task_unlock(current); 13481da177e4SLinus Torvalds 13491da177e4SLinus Torvalds put_group_info(old_info); 13501da177e4SLinus Torvalds 13511da177e4SLinus Torvalds return 0; 13521da177e4SLinus Torvalds } 13531da177e4SLinus Torvalds 13541da177e4SLinus Torvalds EXPORT_SYMBOL(set_current_groups); 13551da177e4SLinus Torvalds 13561da177e4SLinus Torvalds asmlinkage long sys_getgroups(int gidsetsize, gid_t __user *grouplist) 13571da177e4SLinus Torvalds { 13581da177e4SLinus Torvalds int i = 0; 13591da177e4SLinus Torvalds 13601da177e4SLinus Torvalds /* 13611da177e4SLinus Torvalds * SMP: Nobody else can change our grouplist. Thus we are 13621da177e4SLinus Torvalds * safe. 13631da177e4SLinus Torvalds */ 13641da177e4SLinus Torvalds 13651da177e4SLinus Torvalds if (gidsetsize < 0) 13661da177e4SLinus Torvalds return -EINVAL; 13671da177e4SLinus Torvalds 13681da177e4SLinus Torvalds /* no need to grab task_lock here; it cannot change */ 13691da177e4SLinus Torvalds get_group_info(current->group_info); 13701da177e4SLinus Torvalds i = current->group_info->ngroups; 13711da177e4SLinus Torvalds if (gidsetsize) { 13721da177e4SLinus Torvalds if (i > gidsetsize) { 13731da177e4SLinus Torvalds i = -EINVAL; 13741da177e4SLinus Torvalds goto out; 13751da177e4SLinus Torvalds } 13761da177e4SLinus Torvalds if (groups_to_user(grouplist, current->group_info)) { 13771da177e4SLinus Torvalds i = -EFAULT; 13781da177e4SLinus Torvalds goto out; 13791da177e4SLinus Torvalds } 13801da177e4SLinus Torvalds } 13811da177e4SLinus Torvalds out: 13821da177e4SLinus Torvalds put_group_info(current->group_info); 13831da177e4SLinus Torvalds return i; 13841da177e4SLinus Torvalds } 13851da177e4SLinus Torvalds 13861da177e4SLinus Torvalds /* 13871da177e4SLinus Torvalds * SMP: Our groups are copy-on-write. We can set them safely 13881da177e4SLinus Torvalds * without another task interfering. 13891da177e4SLinus Torvalds */ 13901da177e4SLinus Torvalds 13911da177e4SLinus Torvalds asmlinkage long sys_setgroups(int gidsetsize, gid_t __user *grouplist) 13921da177e4SLinus Torvalds { 13931da177e4SLinus Torvalds struct group_info *group_info; 13941da177e4SLinus Torvalds int retval; 13951da177e4SLinus Torvalds 13961da177e4SLinus Torvalds if (!capable(CAP_SETGID)) 13971da177e4SLinus Torvalds return -EPERM; 13981da177e4SLinus Torvalds if ((unsigned)gidsetsize > NGROUPS_MAX) 13991da177e4SLinus Torvalds return -EINVAL; 14001da177e4SLinus Torvalds 14011da177e4SLinus Torvalds group_info = groups_alloc(gidsetsize); 14021da177e4SLinus Torvalds if (!group_info) 14031da177e4SLinus Torvalds return -ENOMEM; 14041da177e4SLinus Torvalds retval = groups_from_user(group_info, grouplist); 14051da177e4SLinus Torvalds if (retval) { 14061da177e4SLinus Torvalds put_group_info(group_info); 14071da177e4SLinus Torvalds return retval; 14081da177e4SLinus Torvalds } 14091da177e4SLinus Torvalds 14101da177e4SLinus Torvalds retval = set_current_groups(group_info); 14111da177e4SLinus Torvalds put_group_info(group_info); 14121da177e4SLinus Torvalds 14131da177e4SLinus Torvalds return retval; 14141da177e4SLinus Torvalds } 14151da177e4SLinus Torvalds 14161da177e4SLinus Torvalds /* 14171da177e4SLinus Torvalds * Check whether we're fsgid/egid or in the supplemental group.. 14181da177e4SLinus Torvalds */ 14191da177e4SLinus Torvalds int in_group_p(gid_t grp) 14201da177e4SLinus Torvalds { 14211da177e4SLinus Torvalds int retval = 1; 14221da177e4SLinus Torvalds if (grp != current->fsgid) { 14231da177e4SLinus Torvalds get_group_info(current->group_info); 14241da177e4SLinus Torvalds retval = groups_search(current->group_info, grp); 14251da177e4SLinus Torvalds put_group_info(current->group_info); 14261da177e4SLinus Torvalds } 14271da177e4SLinus Torvalds return retval; 14281da177e4SLinus Torvalds } 14291da177e4SLinus Torvalds 14301da177e4SLinus Torvalds EXPORT_SYMBOL(in_group_p); 14311da177e4SLinus Torvalds 14321da177e4SLinus Torvalds int in_egroup_p(gid_t grp) 14331da177e4SLinus Torvalds { 14341da177e4SLinus Torvalds int retval = 1; 14351da177e4SLinus Torvalds if (grp != current->egid) { 14361da177e4SLinus Torvalds get_group_info(current->group_info); 14371da177e4SLinus Torvalds retval = groups_search(current->group_info, grp); 14381da177e4SLinus Torvalds put_group_info(current->group_info); 14391da177e4SLinus Torvalds } 14401da177e4SLinus Torvalds return retval; 14411da177e4SLinus Torvalds } 14421da177e4SLinus Torvalds 14431da177e4SLinus Torvalds EXPORT_SYMBOL(in_egroup_p); 14441da177e4SLinus Torvalds 14451da177e4SLinus Torvalds DECLARE_RWSEM(uts_sem); 14461da177e4SLinus Torvalds 14471da177e4SLinus Torvalds EXPORT_SYMBOL(uts_sem); 14481da177e4SLinus Torvalds 14491da177e4SLinus Torvalds asmlinkage long sys_newuname(struct new_utsname __user * name) 14501da177e4SLinus Torvalds { 14511da177e4SLinus Torvalds int errno = 0; 14521da177e4SLinus Torvalds 14531da177e4SLinus Torvalds down_read(&uts_sem); 14541da177e4SLinus Torvalds if (copy_to_user(name,&system_utsname,sizeof *name)) 14551da177e4SLinus Torvalds errno = -EFAULT; 14561da177e4SLinus Torvalds up_read(&uts_sem); 14571da177e4SLinus Torvalds return errno; 14581da177e4SLinus Torvalds } 14591da177e4SLinus Torvalds 14601da177e4SLinus Torvalds asmlinkage long sys_sethostname(char __user *name, int len) 14611da177e4SLinus Torvalds { 14621da177e4SLinus Torvalds int errno; 14631da177e4SLinus Torvalds char tmp[__NEW_UTS_LEN]; 14641da177e4SLinus Torvalds 14651da177e4SLinus Torvalds if (!capable(CAP_SYS_ADMIN)) 14661da177e4SLinus Torvalds return -EPERM; 14671da177e4SLinus Torvalds if (len < 0 || len > __NEW_UTS_LEN) 14681da177e4SLinus Torvalds return -EINVAL; 14691da177e4SLinus Torvalds down_write(&uts_sem); 14701da177e4SLinus Torvalds errno = -EFAULT; 14711da177e4SLinus Torvalds if (!copy_from_user(tmp, name, len)) { 14721da177e4SLinus Torvalds memcpy(system_utsname.nodename, tmp, len); 14731da177e4SLinus Torvalds system_utsname.nodename[len] = 0; 14741da177e4SLinus Torvalds errno = 0; 14751da177e4SLinus Torvalds } 14761da177e4SLinus Torvalds up_write(&uts_sem); 14771da177e4SLinus Torvalds return errno; 14781da177e4SLinus Torvalds } 14791da177e4SLinus Torvalds 14801da177e4SLinus Torvalds #ifdef __ARCH_WANT_SYS_GETHOSTNAME 14811da177e4SLinus Torvalds 14821da177e4SLinus Torvalds asmlinkage long sys_gethostname(char __user *name, int len) 14831da177e4SLinus Torvalds { 14841da177e4SLinus Torvalds int i, errno; 14851da177e4SLinus Torvalds 14861da177e4SLinus Torvalds if (len < 0) 14871da177e4SLinus Torvalds return -EINVAL; 14881da177e4SLinus Torvalds down_read(&uts_sem); 14891da177e4SLinus Torvalds i = 1 + strlen(system_utsname.nodename); 14901da177e4SLinus Torvalds if (i > len) 14911da177e4SLinus Torvalds i = len; 14921da177e4SLinus Torvalds errno = 0; 14931da177e4SLinus Torvalds if (copy_to_user(name, system_utsname.nodename, i)) 14941da177e4SLinus Torvalds errno = -EFAULT; 14951da177e4SLinus Torvalds up_read(&uts_sem); 14961da177e4SLinus Torvalds return errno; 14971da177e4SLinus Torvalds } 14981da177e4SLinus Torvalds 14991da177e4SLinus Torvalds #endif 15001da177e4SLinus Torvalds 15011da177e4SLinus Torvalds /* 15021da177e4SLinus Torvalds * Only setdomainname; getdomainname can be implemented by calling 15031da177e4SLinus Torvalds * uname() 15041da177e4SLinus Torvalds */ 15051da177e4SLinus Torvalds asmlinkage long sys_setdomainname(char __user *name, int len) 15061da177e4SLinus Torvalds { 15071da177e4SLinus Torvalds int errno; 15081da177e4SLinus Torvalds char tmp[__NEW_UTS_LEN]; 15091da177e4SLinus Torvalds 15101da177e4SLinus Torvalds if (!capable(CAP_SYS_ADMIN)) 15111da177e4SLinus Torvalds return -EPERM; 15121da177e4SLinus Torvalds if (len < 0 || len > __NEW_UTS_LEN) 15131da177e4SLinus Torvalds return -EINVAL; 15141da177e4SLinus Torvalds 15151da177e4SLinus Torvalds down_write(&uts_sem); 15161da177e4SLinus Torvalds errno = -EFAULT; 15171da177e4SLinus Torvalds if (!copy_from_user(tmp, name, len)) { 15181da177e4SLinus Torvalds memcpy(system_utsname.domainname, tmp, len); 15191da177e4SLinus Torvalds system_utsname.domainname[len] = 0; 15201da177e4SLinus Torvalds errno = 0; 15211da177e4SLinus Torvalds } 15221da177e4SLinus Torvalds up_write(&uts_sem); 15231da177e4SLinus Torvalds return errno; 15241da177e4SLinus Torvalds } 15251da177e4SLinus Torvalds 15261da177e4SLinus Torvalds asmlinkage long sys_getrlimit(unsigned int resource, struct rlimit __user *rlim) 15271da177e4SLinus Torvalds { 15281da177e4SLinus Torvalds if (resource >= RLIM_NLIMITS) 15291da177e4SLinus Torvalds return -EINVAL; 15301da177e4SLinus Torvalds else { 15311da177e4SLinus Torvalds struct rlimit value; 15321da177e4SLinus Torvalds task_lock(current->group_leader); 15331da177e4SLinus Torvalds value = current->signal->rlim[resource]; 15341da177e4SLinus Torvalds task_unlock(current->group_leader); 15351da177e4SLinus Torvalds return copy_to_user(rlim, &value, sizeof(*rlim)) ? -EFAULT : 0; 15361da177e4SLinus Torvalds } 15371da177e4SLinus Torvalds } 15381da177e4SLinus Torvalds 15391da177e4SLinus Torvalds #ifdef __ARCH_WANT_SYS_OLD_GETRLIMIT 15401da177e4SLinus Torvalds 15411da177e4SLinus Torvalds /* 15421da177e4SLinus Torvalds * Back compatibility for getrlimit. Needed for some apps. 15431da177e4SLinus Torvalds */ 15441da177e4SLinus Torvalds 15451da177e4SLinus Torvalds asmlinkage long sys_old_getrlimit(unsigned int resource, struct rlimit __user *rlim) 15461da177e4SLinus Torvalds { 15471da177e4SLinus Torvalds struct rlimit x; 15481da177e4SLinus Torvalds if (resource >= RLIM_NLIMITS) 15491da177e4SLinus Torvalds return -EINVAL; 15501da177e4SLinus Torvalds 15511da177e4SLinus Torvalds task_lock(current->group_leader); 15521da177e4SLinus Torvalds x = current->signal->rlim[resource]; 15531da177e4SLinus Torvalds task_unlock(current->group_leader); 15541da177e4SLinus Torvalds if(x.rlim_cur > 0x7FFFFFFF) 15551da177e4SLinus Torvalds x.rlim_cur = 0x7FFFFFFF; 15561da177e4SLinus Torvalds if(x.rlim_max > 0x7FFFFFFF) 15571da177e4SLinus Torvalds x.rlim_max = 0x7FFFFFFF; 15581da177e4SLinus Torvalds return copy_to_user(rlim, &x, sizeof(x))?-EFAULT:0; 15591da177e4SLinus Torvalds } 15601da177e4SLinus Torvalds 15611da177e4SLinus Torvalds #endif 15621da177e4SLinus Torvalds 15631da177e4SLinus Torvalds asmlinkage long sys_setrlimit(unsigned int resource, struct rlimit __user *rlim) 15641da177e4SLinus Torvalds { 15651da177e4SLinus Torvalds struct rlimit new_rlim, *old_rlim; 15661da177e4SLinus Torvalds int retval; 15671da177e4SLinus Torvalds 15681da177e4SLinus Torvalds if (resource >= RLIM_NLIMITS) 15691da177e4SLinus Torvalds return -EINVAL; 15701da177e4SLinus Torvalds if(copy_from_user(&new_rlim, rlim, sizeof(*rlim))) 15711da177e4SLinus Torvalds return -EFAULT; 15721da177e4SLinus Torvalds if (new_rlim.rlim_cur > new_rlim.rlim_max) 15731da177e4SLinus Torvalds return -EINVAL; 15741da177e4SLinus Torvalds old_rlim = current->signal->rlim + resource; 15751da177e4SLinus Torvalds if ((new_rlim.rlim_max > old_rlim->rlim_max) && 15761da177e4SLinus Torvalds !capable(CAP_SYS_RESOURCE)) 15771da177e4SLinus Torvalds return -EPERM; 15781da177e4SLinus Torvalds if (resource == RLIMIT_NOFILE && new_rlim.rlim_max > NR_OPEN) 15791da177e4SLinus Torvalds return -EPERM; 15801da177e4SLinus Torvalds 15811da177e4SLinus Torvalds retval = security_task_setrlimit(resource, &new_rlim); 15821da177e4SLinus Torvalds if (retval) 15831da177e4SLinus Torvalds return retval; 15841da177e4SLinus Torvalds 15851da177e4SLinus Torvalds task_lock(current->group_leader); 15861da177e4SLinus Torvalds *old_rlim = new_rlim; 15871da177e4SLinus Torvalds task_unlock(current->group_leader); 15881da177e4SLinus Torvalds 15891da177e4SLinus Torvalds if (resource == RLIMIT_CPU && new_rlim.rlim_cur != RLIM_INFINITY && 15901da177e4SLinus Torvalds (cputime_eq(current->signal->it_prof_expires, cputime_zero) || 15911da177e4SLinus Torvalds new_rlim.rlim_cur <= cputime_to_secs( 15921da177e4SLinus Torvalds current->signal->it_prof_expires))) { 15931da177e4SLinus Torvalds cputime_t cputime = secs_to_cputime(new_rlim.rlim_cur); 15941da177e4SLinus Torvalds read_lock(&tasklist_lock); 15951da177e4SLinus Torvalds spin_lock_irq(¤t->sighand->siglock); 15961da177e4SLinus Torvalds set_process_cpu_timer(current, CPUCLOCK_PROF, 15971da177e4SLinus Torvalds &cputime, NULL); 15981da177e4SLinus Torvalds spin_unlock_irq(¤t->sighand->siglock); 15991da177e4SLinus Torvalds read_unlock(&tasklist_lock); 16001da177e4SLinus Torvalds } 16011da177e4SLinus Torvalds 16021da177e4SLinus Torvalds return 0; 16031da177e4SLinus Torvalds } 16041da177e4SLinus Torvalds 16051da177e4SLinus Torvalds /* 16061da177e4SLinus Torvalds * It would make sense to put struct rusage in the task_struct, 16071da177e4SLinus Torvalds * except that would make the task_struct be *really big*. After 16081da177e4SLinus Torvalds * task_struct gets moved into malloc'ed memory, it would 16091da177e4SLinus Torvalds * make sense to do this. It will make moving the rest of the information 16101da177e4SLinus Torvalds * a lot simpler! (Which we're not doing right now because we're not 16111da177e4SLinus Torvalds * measuring them yet). 16121da177e4SLinus Torvalds * 16131da177e4SLinus Torvalds * This expects to be called with tasklist_lock read-locked or better, 16141da177e4SLinus Torvalds * and the siglock not locked. It may momentarily take the siglock. 16151da177e4SLinus Torvalds * 16161da177e4SLinus Torvalds * When sampling multiple threads for RUSAGE_SELF, under SMP we might have 16171da177e4SLinus Torvalds * races with threads incrementing their own counters. But since word 16181da177e4SLinus Torvalds * reads are atomic, we either get new values or old values and we don't 16191da177e4SLinus Torvalds * care which for the sums. We always take the siglock to protect reading 16201da177e4SLinus Torvalds * the c* fields from p->signal from races with exit.c updating those 16211da177e4SLinus Torvalds * fields when reaping, so a sample either gets all the additions of a 16221da177e4SLinus Torvalds * given child after it's reaped, or none so this sample is before reaping. 16231da177e4SLinus Torvalds */ 16241da177e4SLinus Torvalds 16251da177e4SLinus Torvalds static void k_getrusage(struct task_struct *p, int who, struct rusage *r) 16261da177e4SLinus Torvalds { 16271da177e4SLinus Torvalds struct task_struct *t; 16281da177e4SLinus Torvalds unsigned long flags; 16291da177e4SLinus Torvalds cputime_t utime, stime; 16301da177e4SLinus Torvalds 16311da177e4SLinus Torvalds memset((char *) r, 0, sizeof *r); 16321da177e4SLinus Torvalds 16331da177e4SLinus Torvalds if (unlikely(!p->signal)) 16341da177e4SLinus Torvalds return; 16351da177e4SLinus Torvalds 16361da177e4SLinus Torvalds switch (who) { 16371da177e4SLinus Torvalds case RUSAGE_CHILDREN: 16381da177e4SLinus Torvalds spin_lock_irqsave(&p->sighand->siglock, flags); 16391da177e4SLinus Torvalds utime = p->signal->cutime; 16401da177e4SLinus Torvalds stime = p->signal->cstime; 16411da177e4SLinus Torvalds r->ru_nvcsw = p->signal->cnvcsw; 16421da177e4SLinus Torvalds r->ru_nivcsw = p->signal->cnivcsw; 16431da177e4SLinus Torvalds r->ru_minflt = p->signal->cmin_flt; 16441da177e4SLinus Torvalds r->ru_majflt = p->signal->cmaj_flt; 16451da177e4SLinus Torvalds spin_unlock_irqrestore(&p->sighand->siglock, flags); 16461da177e4SLinus Torvalds cputime_to_timeval(utime, &r->ru_utime); 16471da177e4SLinus Torvalds cputime_to_timeval(stime, &r->ru_stime); 16481da177e4SLinus Torvalds break; 16491da177e4SLinus Torvalds case RUSAGE_SELF: 16501da177e4SLinus Torvalds spin_lock_irqsave(&p->sighand->siglock, flags); 16511da177e4SLinus Torvalds utime = stime = cputime_zero; 16521da177e4SLinus Torvalds goto sum_group; 16531da177e4SLinus Torvalds case RUSAGE_BOTH: 16541da177e4SLinus Torvalds spin_lock_irqsave(&p->sighand->siglock, flags); 16551da177e4SLinus Torvalds utime = p->signal->cutime; 16561da177e4SLinus Torvalds stime = p->signal->cstime; 16571da177e4SLinus Torvalds r->ru_nvcsw = p->signal->cnvcsw; 16581da177e4SLinus Torvalds r->ru_nivcsw = p->signal->cnivcsw; 16591da177e4SLinus Torvalds r->ru_minflt = p->signal->cmin_flt; 16601da177e4SLinus Torvalds r->ru_majflt = p->signal->cmaj_flt; 16611da177e4SLinus Torvalds sum_group: 16621da177e4SLinus Torvalds utime = cputime_add(utime, p->signal->utime); 16631da177e4SLinus Torvalds stime = cputime_add(stime, p->signal->stime); 16641da177e4SLinus Torvalds r->ru_nvcsw += p->signal->nvcsw; 16651da177e4SLinus Torvalds r->ru_nivcsw += p->signal->nivcsw; 16661da177e4SLinus Torvalds r->ru_minflt += p->signal->min_flt; 16671da177e4SLinus Torvalds r->ru_majflt += p->signal->maj_flt; 16681da177e4SLinus Torvalds t = p; 16691da177e4SLinus Torvalds do { 16701da177e4SLinus Torvalds utime = cputime_add(utime, t->utime); 16711da177e4SLinus Torvalds stime = cputime_add(stime, t->stime); 16721da177e4SLinus Torvalds r->ru_nvcsw += t->nvcsw; 16731da177e4SLinus Torvalds r->ru_nivcsw += t->nivcsw; 16741da177e4SLinus Torvalds r->ru_minflt += t->min_flt; 16751da177e4SLinus Torvalds r->ru_majflt += t->maj_flt; 16761da177e4SLinus Torvalds t = next_thread(t); 16771da177e4SLinus Torvalds } while (t != p); 16781da177e4SLinus Torvalds spin_unlock_irqrestore(&p->sighand->siglock, flags); 16791da177e4SLinus Torvalds cputime_to_timeval(utime, &r->ru_utime); 16801da177e4SLinus Torvalds cputime_to_timeval(stime, &r->ru_stime); 16811da177e4SLinus Torvalds break; 16821da177e4SLinus Torvalds default: 16831da177e4SLinus Torvalds BUG(); 16841da177e4SLinus Torvalds } 16851da177e4SLinus Torvalds } 16861da177e4SLinus Torvalds 16871da177e4SLinus Torvalds int getrusage(struct task_struct *p, int who, struct rusage __user *ru) 16881da177e4SLinus Torvalds { 16891da177e4SLinus Torvalds struct rusage r; 16901da177e4SLinus Torvalds read_lock(&tasklist_lock); 16911da177e4SLinus Torvalds k_getrusage(p, who, &r); 16921da177e4SLinus Torvalds read_unlock(&tasklist_lock); 16931da177e4SLinus Torvalds return copy_to_user(ru, &r, sizeof(r)) ? -EFAULT : 0; 16941da177e4SLinus Torvalds } 16951da177e4SLinus Torvalds 16961da177e4SLinus Torvalds asmlinkage long sys_getrusage(int who, struct rusage __user *ru) 16971da177e4SLinus Torvalds { 16981da177e4SLinus Torvalds if (who != RUSAGE_SELF && who != RUSAGE_CHILDREN) 16991da177e4SLinus Torvalds return -EINVAL; 17001da177e4SLinus Torvalds return getrusage(current, who, ru); 17011da177e4SLinus Torvalds } 17021da177e4SLinus Torvalds 17031da177e4SLinus Torvalds asmlinkage long sys_umask(int mask) 17041da177e4SLinus Torvalds { 17051da177e4SLinus Torvalds mask = xchg(¤t->fs->umask, mask & S_IRWXUGO); 17061da177e4SLinus Torvalds return mask; 17071da177e4SLinus Torvalds } 17081da177e4SLinus Torvalds 17091da177e4SLinus Torvalds asmlinkage long sys_prctl(int option, unsigned long arg2, unsigned long arg3, 17101da177e4SLinus Torvalds unsigned long arg4, unsigned long arg5) 17111da177e4SLinus Torvalds { 17121da177e4SLinus Torvalds long error; 17131da177e4SLinus Torvalds int sig; 17141da177e4SLinus Torvalds 17151da177e4SLinus Torvalds error = security_task_prctl(option, arg2, arg3, arg4, arg5); 17161da177e4SLinus Torvalds if (error) 17171da177e4SLinus Torvalds return error; 17181da177e4SLinus Torvalds 17191da177e4SLinus Torvalds switch (option) { 17201da177e4SLinus Torvalds case PR_SET_PDEATHSIG: 17211da177e4SLinus Torvalds sig = arg2; 17227ed20e1aSJesper Juhl if (!valid_signal(sig)) { 17231da177e4SLinus Torvalds error = -EINVAL; 17241da177e4SLinus Torvalds break; 17251da177e4SLinus Torvalds } 17261da177e4SLinus Torvalds current->pdeath_signal = sig; 17271da177e4SLinus Torvalds break; 17281da177e4SLinus Torvalds case PR_GET_PDEATHSIG: 17291da177e4SLinus Torvalds error = put_user(current->pdeath_signal, (int __user *)arg2); 17301da177e4SLinus Torvalds break; 17311da177e4SLinus Torvalds case PR_GET_DUMPABLE: 17321da177e4SLinus Torvalds if (current->mm->dumpable) 17331da177e4SLinus Torvalds error = 1; 17341da177e4SLinus Torvalds break; 17351da177e4SLinus Torvalds case PR_SET_DUMPABLE: 1736d6e71144SAlan Cox if (arg2 < 0 || arg2 > 2) { 17371da177e4SLinus Torvalds error = -EINVAL; 17381da177e4SLinus Torvalds break; 17391da177e4SLinus Torvalds } 17401da177e4SLinus Torvalds current->mm->dumpable = arg2; 17411da177e4SLinus Torvalds break; 17421da177e4SLinus Torvalds 17431da177e4SLinus Torvalds case PR_SET_UNALIGN: 17441da177e4SLinus Torvalds error = SET_UNALIGN_CTL(current, arg2); 17451da177e4SLinus Torvalds break; 17461da177e4SLinus Torvalds case PR_GET_UNALIGN: 17471da177e4SLinus Torvalds error = GET_UNALIGN_CTL(current, arg2); 17481da177e4SLinus Torvalds break; 17491da177e4SLinus Torvalds case PR_SET_FPEMU: 17501da177e4SLinus Torvalds error = SET_FPEMU_CTL(current, arg2); 17511da177e4SLinus Torvalds break; 17521da177e4SLinus Torvalds case PR_GET_FPEMU: 17531da177e4SLinus Torvalds error = GET_FPEMU_CTL(current, arg2); 17541da177e4SLinus Torvalds break; 17551da177e4SLinus Torvalds case PR_SET_FPEXC: 17561da177e4SLinus Torvalds error = SET_FPEXC_CTL(current, arg2); 17571da177e4SLinus Torvalds break; 17581da177e4SLinus Torvalds case PR_GET_FPEXC: 17591da177e4SLinus Torvalds error = GET_FPEXC_CTL(current, arg2); 17601da177e4SLinus Torvalds break; 17611da177e4SLinus Torvalds case PR_GET_TIMING: 17621da177e4SLinus Torvalds error = PR_TIMING_STATISTICAL; 17631da177e4SLinus Torvalds break; 17641da177e4SLinus Torvalds case PR_SET_TIMING: 17651da177e4SLinus Torvalds if (arg2 == PR_TIMING_STATISTICAL) 17661da177e4SLinus Torvalds error = 0; 17671da177e4SLinus Torvalds else 17681da177e4SLinus Torvalds error = -EINVAL; 17691da177e4SLinus Torvalds break; 17701da177e4SLinus Torvalds 17711da177e4SLinus Torvalds case PR_GET_KEEPCAPS: 17721da177e4SLinus Torvalds if (current->keep_capabilities) 17731da177e4SLinus Torvalds error = 1; 17741da177e4SLinus Torvalds break; 17751da177e4SLinus Torvalds case PR_SET_KEEPCAPS: 17761da177e4SLinus Torvalds if (arg2 != 0 && arg2 != 1) { 17771da177e4SLinus Torvalds error = -EINVAL; 17781da177e4SLinus Torvalds break; 17791da177e4SLinus Torvalds } 17801da177e4SLinus Torvalds current->keep_capabilities = arg2; 17811da177e4SLinus Torvalds break; 17821da177e4SLinus Torvalds case PR_SET_NAME: { 17831da177e4SLinus Torvalds struct task_struct *me = current; 17841da177e4SLinus Torvalds unsigned char ncomm[sizeof(me->comm)]; 17851da177e4SLinus Torvalds 17861da177e4SLinus Torvalds ncomm[sizeof(me->comm)-1] = 0; 17871da177e4SLinus Torvalds if (strncpy_from_user(ncomm, (char __user *)arg2, 17881da177e4SLinus Torvalds sizeof(me->comm)-1) < 0) 17891da177e4SLinus Torvalds return -EFAULT; 17901da177e4SLinus Torvalds set_task_comm(me, ncomm); 17911da177e4SLinus Torvalds return 0; 17921da177e4SLinus Torvalds } 17931da177e4SLinus Torvalds case PR_GET_NAME: { 17941da177e4SLinus Torvalds struct task_struct *me = current; 17951da177e4SLinus Torvalds unsigned char tcomm[sizeof(me->comm)]; 17961da177e4SLinus Torvalds 17971da177e4SLinus Torvalds get_task_comm(tcomm, me); 17981da177e4SLinus Torvalds if (copy_to_user((char __user *)arg2, tcomm, sizeof(tcomm))) 17991da177e4SLinus Torvalds return -EFAULT; 18001da177e4SLinus Torvalds return 0; 18011da177e4SLinus Torvalds } 18021da177e4SLinus Torvalds default: 18031da177e4SLinus Torvalds error = -EINVAL; 18041da177e4SLinus Torvalds break; 18051da177e4SLinus Torvalds } 18061da177e4SLinus Torvalds return error; 18071da177e4SLinus Torvalds } 1808