11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * linux/kernel/sys.c 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Copyright (C) 1991, 1992 Linus Torvalds 51da177e4SLinus Torvalds */ 61da177e4SLinus Torvalds 71da177e4SLinus Torvalds #include <linux/config.h> 81da177e4SLinus Torvalds #include <linux/module.h> 91da177e4SLinus Torvalds #include <linux/mm.h> 101da177e4SLinus Torvalds #include <linux/utsname.h> 111da177e4SLinus Torvalds #include <linux/mman.h> 121da177e4SLinus Torvalds #include <linux/smp_lock.h> 131da177e4SLinus Torvalds #include <linux/notifier.h> 141da177e4SLinus Torvalds #include <linux/reboot.h> 151da177e4SLinus Torvalds #include <linux/prctl.h> 161da177e4SLinus Torvalds #include <linux/init.h> 171da177e4SLinus Torvalds #include <linux/highuid.h> 181da177e4SLinus Torvalds #include <linux/fs.h> 19dc009d92SEric W. Biederman #include <linux/kernel.h> 20dc009d92SEric W. Biederman #include <linux/kexec.h> 211da177e4SLinus Torvalds #include <linux/workqueue.h> 221da177e4SLinus Torvalds #include <linux/device.h> 231da177e4SLinus Torvalds #include <linux/key.h> 241da177e4SLinus Torvalds #include <linux/times.h> 251da177e4SLinus Torvalds #include <linux/posix-timers.h> 261da177e4SLinus Torvalds #include <linux/security.h> 271da177e4SLinus Torvalds #include <linux/dcookies.h> 281da177e4SLinus Torvalds #include <linux/suspend.h> 291da177e4SLinus Torvalds #include <linux/tty.h> 307ed20e1aSJesper Juhl #include <linux/signal.h> 311da177e4SLinus Torvalds 321da177e4SLinus Torvalds #include <linux/compat.h> 331da177e4SLinus Torvalds #include <linux/syscalls.h> 341da177e4SLinus Torvalds 351da177e4SLinus Torvalds #include <asm/uaccess.h> 361da177e4SLinus Torvalds #include <asm/io.h> 371da177e4SLinus Torvalds #include <asm/unistd.h> 381da177e4SLinus Torvalds 391da177e4SLinus Torvalds #ifndef SET_UNALIGN_CTL 401da177e4SLinus Torvalds # define SET_UNALIGN_CTL(a,b) (-EINVAL) 411da177e4SLinus Torvalds #endif 421da177e4SLinus Torvalds #ifndef GET_UNALIGN_CTL 431da177e4SLinus Torvalds # define GET_UNALIGN_CTL(a,b) (-EINVAL) 441da177e4SLinus Torvalds #endif 451da177e4SLinus Torvalds #ifndef SET_FPEMU_CTL 461da177e4SLinus Torvalds # define SET_FPEMU_CTL(a,b) (-EINVAL) 471da177e4SLinus Torvalds #endif 481da177e4SLinus Torvalds #ifndef GET_FPEMU_CTL 491da177e4SLinus Torvalds # define GET_FPEMU_CTL(a,b) (-EINVAL) 501da177e4SLinus Torvalds #endif 511da177e4SLinus Torvalds #ifndef SET_FPEXC_CTL 521da177e4SLinus Torvalds # define SET_FPEXC_CTL(a,b) (-EINVAL) 531da177e4SLinus Torvalds #endif 541da177e4SLinus Torvalds #ifndef GET_FPEXC_CTL 551da177e4SLinus Torvalds # define GET_FPEXC_CTL(a,b) (-EINVAL) 561da177e4SLinus Torvalds #endif 571da177e4SLinus Torvalds 581da177e4SLinus Torvalds /* 591da177e4SLinus Torvalds * this is where the system-wide overflow UID and GID are defined, for 601da177e4SLinus Torvalds * architectures that now have 32-bit UID/GID but didn't in the past 611da177e4SLinus Torvalds */ 621da177e4SLinus Torvalds 631da177e4SLinus Torvalds int overflowuid = DEFAULT_OVERFLOWUID; 641da177e4SLinus Torvalds int overflowgid = DEFAULT_OVERFLOWGID; 651da177e4SLinus Torvalds 661da177e4SLinus Torvalds #ifdef CONFIG_UID16 671da177e4SLinus Torvalds EXPORT_SYMBOL(overflowuid); 681da177e4SLinus Torvalds EXPORT_SYMBOL(overflowgid); 691da177e4SLinus Torvalds #endif 701da177e4SLinus Torvalds 711da177e4SLinus Torvalds /* 721da177e4SLinus Torvalds * the same as above, but for filesystems which can only store a 16-bit 731da177e4SLinus Torvalds * UID and GID. as such, this is needed on all architectures 741da177e4SLinus Torvalds */ 751da177e4SLinus Torvalds 761da177e4SLinus Torvalds int fs_overflowuid = DEFAULT_FS_OVERFLOWUID; 771da177e4SLinus Torvalds int fs_overflowgid = DEFAULT_FS_OVERFLOWUID; 781da177e4SLinus Torvalds 791da177e4SLinus Torvalds EXPORT_SYMBOL(fs_overflowuid); 801da177e4SLinus Torvalds EXPORT_SYMBOL(fs_overflowgid); 811da177e4SLinus Torvalds 821da177e4SLinus Torvalds /* 831da177e4SLinus Torvalds * this indicates whether you can reboot with ctrl-alt-del: the default is yes 841da177e4SLinus Torvalds */ 851da177e4SLinus Torvalds 861da177e4SLinus Torvalds int C_A_D = 1; 871da177e4SLinus Torvalds int cad_pid = 1; 881da177e4SLinus Torvalds 891da177e4SLinus Torvalds /* 901da177e4SLinus Torvalds * Notifier list for kernel code which wants to be called 911da177e4SLinus Torvalds * at shutdown. This is used to stop any idling DMA operations 921da177e4SLinus Torvalds * and the like. 931da177e4SLinus Torvalds */ 941da177e4SLinus Torvalds 951da177e4SLinus Torvalds static struct notifier_block *reboot_notifier_list; 961da177e4SLinus Torvalds static DEFINE_RWLOCK(notifier_lock); 971da177e4SLinus Torvalds 981da177e4SLinus Torvalds /** 991da177e4SLinus Torvalds * notifier_chain_register - Add notifier to a notifier chain 1001da177e4SLinus Torvalds * @list: Pointer to root list pointer 1011da177e4SLinus Torvalds * @n: New entry in notifier chain 1021da177e4SLinus Torvalds * 1031da177e4SLinus Torvalds * Adds a notifier to a notifier chain. 1041da177e4SLinus Torvalds * 1051da177e4SLinus Torvalds * Currently always returns zero. 1061da177e4SLinus Torvalds */ 1071da177e4SLinus Torvalds 1081da177e4SLinus Torvalds int notifier_chain_register(struct notifier_block **list, struct notifier_block *n) 1091da177e4SLinus Torvalds { 1101da177e4SLinus Torvalds write_lock(¬ifier_lock); 1111da177e4SLinus Torvalds while(*list) 1121da177e4SLinus Torvalds { 1131da177e4SLinus Torvalds if(n->priority > (*list)->priority) 1141da177e4SLinus Torvalds break; 1151da177e4SLinus Torvalds list= &((*list)->next); 1161da177e4SLinus Torvalds } 1171da177e4SLinus Torvalds n->next = *list; 1181da177e4SLinus Torvalds *list=n; 1191da177e4SLinus Torvalds write_unlock(¬ifier_lock); 1201da177e4SLinus Torvalds return 0; 1211da177e4SLinus Torvalds } 1221da177e4SLinus Torvalds 1231da177e4SLinus Torvalds EXPORT_SYMBOL(notifier_chain_register); 1241da177e4SLinus Torvalds 1251da177e4SLinus Torvalds /** 1261da177e4SLinus Torvalds * notifier_chain_unregister - Remove notifier from a notifier chain 1271da177e4SLinus Torvalds * @nl: Pointer to root list pointer 1281da177e4SLinus Torvalds * @n: New entry in notifier chain 1291da177e4SLinus Torvalds * 1301da177e4SLinus Torvalds * Removes a notifier from a notifier chain. 1311da177e4SLinus Torvalds * 1321da177e4SLinus Torvalds * Returns zero on success, or %-ENOENT on failure. 1331da177e4SLinus Torvalds */ 1341da177e4SLinus Torvalds 1351da177e4SLinus Torvalds int notifier_chain_unregister(struct notifier_block **nl, struct notifier_block *n) 1361da177e4SLinus Torvalds { 1371da177e4SLinus Torvalds write_lock(¬ifier_lock); 1381da177e4SLinus Torvalds while((*nl)!=NULL) 1391da177e4SLinus Torvalds { 1401da177e4SLinus Torvalds if((*nl)==n) 1411da177e4SLinus Torvalds { 1421da177e4SLinus Torvalds *nl=n->next; 1431da177e4SLinus Torvalds write_unlock(¬ifier_lock); 1441da177e4SLinus Torvalds return 0; 1451da177e4SLinus Torvalds } 1461da177e4SLinus Torvalds nl=&((*nl)->next); 1471da177e4SLinus Torvalds } 1481da177e4SLinus Torvalds write_unlock(¬ifier_lock); 1491da177e4SLinus Torvalds return -ENOENT; 1501da177e4SLinus Torvalds } 1511da177e4SLinus Torvalds 1521da177e4SLinus Torvalds EXPORT_SYMBOL(notifier_chain_unregister); 1531da177e4SLinus Torvalds 1541da177e4SLinus Torvalds /** 1551da177e4SLinus Torvalds * notifier_call_chain - Call functions in a notifier chain 1561da177e4SLinus Torvalds * @n: Pointer to root pointer of notifier chain 1571da177e4SLinus Torvalds * @val: Value passed unmodified to notifier function 1581da177e4SLinus Torvalds * @v: Pointer passed unmodified to notifier function 1591da177e4SLinus Torvalds * 1601da177e4SLinus Torvalds * Calls each function in a notifier chain in turn. 1611da177e4SLinus Torvalds * 1621da177e4SLinus Torvalds * If the return value of the notifier can be and'd 1631da177e4SLinus Torvalds * with %NOTIFY_STOP_MASK, then notifier_call_chain 1641da177e4SLinus Torvalds * will return immediately, with the return value of 1651da177e4SLinus Torvalds * the notifier function which halted execution. 1661da177e4SLinus Torvalds * Otherwise, the return value is the return value 1671da177e4SLinus Torvalds * of the last notifier function called. 1681da177e4SLinus Torvalds */ 1691da177e4SLinus Torvalds 1701da177e4SLinus Torvalds int notifier_call_chain(struct notifier_block **n, unsigned long val, void *v) 1711da177e4SLinus Torvalds { 1721da177e4SLinus Torvalds int ret=NOTIFY_DONE; 1731da177e4SLinus Torvalds struct notifier_block *nb = *n; 1741da177e4SLinus Torvalds 1751da177e4SLinus Torvalds while(nb) 1761da177e4SLinus Torvalds { 1771da177e4SLinus Torvalds ret=nb->notifier_call(nb,val,v); 1781da177e4SLinus Torvalds if(ret&NOTIFY_STOP_MASK) 1791da177e4SLinus Torvalds { 1801da177e4SLinus Torvalds return ret; 1811da177e4SLinus Torvalds } 1821da177e4SLinus Torvalds nb=nb->next; 1831da177e4SLinus Torvalds } 1841da177e4SLinus Torvalds return ret; 1851da177e4SLinus Torvalds } 1861da177e4SLinus Torvalds 1871da177e4SLinus Torvalds EXPORT_SYMBOL(notifier_call_chain); 1881da177e4SLinus Torvalds 1891da177e4SLinus Torvalds /** 1901da177e4SLinus Torvalds * register_reboot_notifier - Register function to be called at reboot time 1911da177e4SLinus Torvalds * @nb: Info about notifier function to be called 1921da177e4SLinus Torvalds * 1931da177e4SLinus Torvalds * Registers a function with the list of functions 1941da177e4SLinus Torvalds * to be called at reboot time. 1951da177e4SLinus Torvalds * 1961da177e4SLinus Torvalds * Currently always returns zero, as notifier_chain_register 1971da177e4SLinus Torvalds * always returns zero. 1981da177e4SLinus Torvalds */ 1991da177e4SLinus Torvalds 2001da177e4SLinus Torvalds int register_reboot_notifier(struct notifier_block * nb) 2011da177e4SLinus Torvalds { 2021da177e4SLinus Torvalds return notifier_chain_register(&reboot_notifier_list, nb); 2031da177e4SLinus Torvalds } 2041da177e4SLinus Torvalds 2051da177e4SLinus Torvalds EXPORT_SYMBOL(register_reboot_notifier); 2061da177e4SLinus Torvalds 2071da177e4SLinus Torvalds /** 2081da177e4SLinus Torvalds * unregister_reboot_notifier - Unregister previously registered reboot notifier 2091da177e4SLinus Torvalds * @nb: Hook to be unregistered 2101da177e4SLinus Torvalds * 2111da177e4SLinus Torvalds * Unregisters a previously registered reboot 2121da177e4SLinus Torvalds * notifier function. 2131da177e4SLinus Torvalds * 2141da177e4SLinus Torvalds * Returns zero on success, or %-ENOENT on failure. 2151da177e4SLinus Torvalds */ 2161da177e4SLinus Torvalds 2171da177e4SLinus Torvalds int unregister_reboot_notifier(struct notifier_block * nb) 2181da177e4SLinus Torvalds { 2191da177e4SLinus Torvalds return notifier_chain_unregister(&reboot_notifier_list, nb); 2201da177e4SLinus Torvalds } 2211da177e4SLinus Torvalds 2221da177e4SLinus Torvalds EXPORT_SYMBOL(unregister_reboot_notifier); 2231da177e4SLinus Torvalds 2241da177e4SLinus Torvalds static int set_one_prio(struct task_struct *p, int niceval, int error) 2251da177e4SLinus Torvalds { 2261da177e4SLinus Torvalds int no_nice; 2271da177e4SLinus Torvalds 2281da177e4SLinus Torvalds if (p->uid != current->euid && 2291da177e4SLinus Torvalds p->euid != current->euid && !capable(CAP_SYS_NICE)) { 2301da177e4SLinus Torvalds error = -EPERM; 2311da177e4SLinus Torvalds goto out; 2321da177e4SLinus Torvalds } 233e43379f1SMatt Mackall if (niceval < task_nice(p) && !can_nice(p, niceval)) { 2341da177e4SLinus Torvalds error = -EACCES; 2351da177e4SLinus Torvalds goto out; 2361da177e4SLinus Torvalds } 2371da177e4SLinus Torvalds no_nice = security_task_setnice(p, niceval); 2381da177e4SLinus Torvalds if (no_nice) { 2391da177e4SLinus Torvalds error = no_nice; 2401da177e4SLinus Torvalds goto out; 2411da177e4SLinus Torvalds } 2421da177e4SLinus Torvalds if (error == -ESRCH) 2431da177e4SLinus Torvalds error = 0; 2441da177e4SLinus Torvalds set_user_nice(p, niceval); 2451da177e4SLinus Torvalds out: 2461da177e4SLinus Torvalds return error; 2471da177e4SLinus Torvalds } 2481da177e4SLinus Torvalds 2491da177e4SLinus Torvalds asmlinkage long sys_setpriority(int which, int who, int niceval) 2501da177e4SLinus Torvalds { 2511da177e4SLinus Torvalds struct task_struct *g, *p; 2521da177e4SLinus Torvalds struct user_struct *user; 2531da177e4SLinus Torvalds int error = -EINVAL; 2541da177e4SLinus Torvalds 2551da177e4SLinus Torvalds if (which > 2 || which < 0) 2561da177e4SLinus Torvalds goto out; 2571da177e4SLinus Torvalds 2581da177e4SLinus Torvalds /* normalize: avoid signed division (rounding problems) */ 2591da177e4SLinus Torvalds error = -ESRCH; 2601da177e4SLinus Torvalds if (niceval < -20) 2611da177e4SLinus Torvalds niceval = -20; 2621da177e4SLinus Torvalds if (niceval > 19) 2631da177e4SLinus Torvalds niceval = 19; 2641da177e4SLinus Torvalds 2651da177e4SLinus Torvalds read_lock(&tasklist_lock); 2661da177e4SLinus Torvalds switch (which) { 2671da177e4SLinus Torvalds case PRIO_PROCESS: 2681da177e4SLinus Torvalds if (!who) 2691da177e4SLinus Torvalds who = current->pid; 2701da177e4SLinus Torvalds p = find_task_by_pid(who); 2711da177e4SLinus Torvalds if (p) 2721da177e4SLinus Torvalds error = set_one_prio(p, niceval, error); 2731da177e4SLinus Torvalds break; 2741da177e4SLinus Torvalds case PRIO_PGRP: 2751da177e4SLinus Torvalds if (!who) 2761da177e4SLinus Torvalds who = process_group(current); 2771da177e4SLinus Torvalds do_each_task_pid(who, PIDTYPE_PGID, p) { 2781da177e4SLinus Torvalds error = set_one_prio(p, niceval, error); 2791da177e4SLinus Torvalds } while_each_task_pid(who, PIDTYPE_PGID, p); 2801da177e4SLinus Torvalds break; 2811da177e4SLinus Torvalds case PRIO_USER: 2821da177e4SLinus Torvalds user = current->user; 2831da177e4SLinus Torvalds if (!who) 2841da177e4SLinus Torvalds who = current->uid; 2851da177e4SLinus Torvalds else 2861da177e4SLinus Torvalds if ((who != current->uid) && !(user = find_user(who))) 2871da177e4SLinus Torvalds goto out_unlock; /* No processes for this user */ 2881da177e4SLinus Torvalds 2891da177e4SLinus Torvalds do_each_thread(g, p) 2901da177e4SLinus Torvalds if (p->uid == who) 2911da177e4SLinus Torvalds error = set_one_prio(p, niceval, error); 2921da177e4SLinus Torvalds while_each_thread(g, p); 2931da177e4SLinus Torvalds if (who != current->uid) 2941da177e4SLinus Torvalds free_uid(user); /* For find_user() */ 2951da177e4SLinus Torvalds break; 2961da177e4SLinus Torvalds } 2971da177e4SLinus Torvalds out_unlock: 2981da177e4SLinus Torvalds read_unlock(&tasklist_lock); 2991da177e4SLinus Torvalds out: 3001da177e4SLinus Torvalds return error; 3011da177e4SLinus Torvalds } 3021da177e4SLinus Torvalds 3031da177e4SLinus Torvalds /* 3041da177e4SLinus Torvalds * Ugh. To avoid negative return values, "getpriority()" will 3051da177e4SLinus Torvalds * not return the normal nice-value, but a negated value that 3061da177e4SLinus Torvalds * has been offset by 20 (ie it returns 40..1 instead of -20..19) 3071da177e4SLinus Torvalds * to stay compatible. 3081da177e4SLinus Torvalds */ 3091da177e4SLinus Torvalds asmlinkage long sys_getpriority(int which, int who) 3101da177e4SLinus Torvalds { 3111da177e4SLinus Torvalds struct task_struct *g, *p; 3121da177e4SLinus Torvalds struct user_struct *user; 3131da177e4SLinus Torvalds long niceval, retval = -ESRCH; 3141da177e4SLinus Torvalds 3151da177e4SLinus Torvalds if (which > 2 || which < 0) 3161da177e4SLinus Torvalds return -EINVAL; 3171da177e4SLinus Torvalds 3181da177e4SLinus Torvalds read_lock(&tasklist_lock); 3191da177e4SLinus Torvalds switch (which) { 3201da177e4SLinus Torvalds case PRIO_PROCESS: 3211da177e4SLinus Torvalds if (!who) 3221da177e4SLinus Torvalds who = current->pid; 3231da177e4SLinus Torvalds p = find_task_by_pid(who); 3241da177e4SLinus Torvalds if (p) { 3251da177e4SLinus Torvalds niceval = 20 - task_nice(p); 3261da177e4SLinus Torvalds if (niceval > retval) 3271da177e4SLinus Torvalds retval = niceval; 3281da177e4SLinus Torvalds } 3291da177e4SLinus Torvalds break; 3301da177e4SLinus Torvalds case PRIO_PGRP: 3311da177e4SLinus Torvalds if (!who) 3321da177e4SLinus Torvalds who = process_group(current); 3331da177e4SLinus Torvalds do_each_task_pid(who, PIDTYPE_PGID, p) { 3341da177e4SLinus Torvalds niceval = 20 - task_nice(p); 3351da177e4SLinus Torvalds if (niceval > retval) 3361da177e4SLinus Torvalds retval = niceval; 3371da177e4SLinus Torvalds } while_each_task_pid(who, PIDTYPE_PGID, p); 3381da177e4SLinus Torvalds break; 3391da177e4SLinus Torvalds case PRIO_USER: 3401da177e4SLinus Torvalds user = current->user; 3411da177e4SLinus Torvalds if (!who) 3421da177e4SLinus Torvalds who = current->uid; 3431da177e4SLinus Torvalds else 3441da177e4SLinus Torvalds if ((who != current->uid) && !(user = find_user(who))) 3451da177e4SLinus Torvalds goto out_unlock; /* No processes for this user */ 3461da177e4SLinus Torvalds 3471da177e4SLinus Torvalds do_each_thread(g, p) 3481da177e4SLinus Torvalds if (p->uid == who) { 3491da177e4SLinus Torvalds niceval = 20 - task_nice(p); 3501da177e4SLinus Torvalds if (niceval > retval) 3511da177e4SLinus Torvalds retval = niceval; 3521da177e4SLinus Torvalds } 3531da177e4SLinus Torvalds while_each_thread(g, p); 3541da177e4SLinus Torvalds if (who != current->uid) 3551da177e4SLinus Torvalds free_uid(user); /* for find_user() */ 3561da177e4SLinus Torvalds break; 3571da177e4SLinus Torvalds } 3581da177e4SLinus Torvalds out_unlock: 3591da177e4SLinus Torvalds read_unlock(&tasklist_lock); 3601da177e4SLinus Torvalds 3611da177e4SLinus Torvalds return retval; 3621da177e4SLinus Torvalds } 3631da177e4SLinus Torvalds 364*7c903473SEric W. Biederman void emergency_restart(void) 365*7c903473SEric W. Biederman { 366*7c903473SEric W. Biederman machine_emergency_restart(); 367*7c903473SEric W. Biederman } 368*7c903473SEric W. Biederman EXPORT_SYMBOL_GPL(emergency_restart); 369*7c903473SEric W. Biederman 3704a00ea1eSEric W. Biederman void kernel_restart(char *cmd) 3714a00ea1eSEric W. Biederman { 3724a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_RESTART, cmd); 3734a00ea1eSEric W. Biederman system_state = SYSTEM_RESTART; 3744a00ea1eSEric W. Biederman device_suspend(PMSG_FREEZE); 3754a00ea1eSEric W. Biederman device_shutdown(); 3764a00ea1eSEric W. Biederman if (!cmd) { 3774a00ea1eSEric W. Biederman printk(KERN_EMERG "Restarting system.\n"); 3784a00ea1eSEric W. Biederman } else { 3794a00ea1eSEric W. Biederman printk(KERN_EMERG "Restarting system with command '%s'.\n", cmd); 3804a00ea1eSEric W. Biederman } 3814a00ea1eSEric W. Biederman printk(".\n"); 3824a00ea1eSEric W. Biederman machine_restart(cmd); 3834a00ea1eSEric W. Biederman } 3844a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_restart); 3854a00ea1eSEric W. Biederman 3864a00ea1eSEric W. Biederman void kernel_kexec(void) 3874a00ea1eSEric W. Biederman { 3884a00ea1eSEric W. Biederman #ifdef CONFIG_KEXEC 3894a00ea1eSEric W. Biederman struct kimage *image; 3904a00ea1eSEric W. Biederman image = xchg(&kexec_image, 0); 3914a00ea1eSEric W. Biederman if (!image) { 3924a00ea1eSEric W. Biederman return; 3934a00ea1eSEric W. Biederman } 3944a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_RESTART, NULL); 3954a00ea1eSEric W. Biederman system_state = SYSTEM_RESTART; 3964a00ea1eSEric W. Biederman device_suspend(PMSG_FREEZE); 3974a00ea1eSEric W. Biederman device_shutdown(); 3984a00ea1eSEric W. Biederman printk(KERN_EMERG "Starting new kernel\n"); 3994a00ea1eSEric W. Biederman machine_shutdown(); 4004a00ea1eSEric W. Biederman machine_kexec(image); 4014a00ea1eSEric W. Biederman #endif 4024a00ea1eSEric W. Biederman } 4034a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_kexec); 4044a00ea1eSEric W. Biederman 4054a00ea1eSEric W. Biederman void kernel_halt(void) 4064a00ea1eSEric W. Biederman { 4074a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_HALT, NULL); 4084a00ea1eSEric W. Biederman system_state = SYSTEM_HALT; 4094a00ea1eSEric W. Biederman device_suspend(PMSG_SUSPEND); 4104a00ea1eSEric W. Biederman device_shutdown(); 4114a00ea1eSEric W. Biederman printk(KERN_EMERG "System halted.\n"); 4124a00ea1eSEric W. Biederman machine_halt(); 4134a00ea1eSEric W. Biederman } 4144a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_halt); 4154a00ea1eSEric W. Biederman 4164a00ea1eSEric W. Biederman void kernel_power_off(void) 4174a00ea1eSEric W. Biederman { 4184a00ea1eSEric W. Biederman notifier_call_chain(&reboot_notifier_list, SYS_POWER_OFF, NULL); 4194a00ea1eSEric W. Biederman system_state = SYSTEM_POWER_OFF; 4204a00ea1eSEric W. Biederman device_suspend(PMSG_SUSPEND); 4214a00ea1eSEric W. Biederman device_shutdown(); 4224a00ea1eSEric W. Biederman printk(KERN_EMERG "Power down.\n"); 4234a00ea1eSEric W. Biederman machine_power_off(); 4244a00ea1eSEric W. Biederman } 4254a00ea1eSEric W. Biederman EXPORT_SYMBOL_GPL(kernel_power_off); 4261da177e4SLinus Torvalds 4271da177e4SLinus Torvalds /* 4281da177e4SLinus Torvalds * Reboot system call: for obvious reasons only root may call it, 4291da177e4SLinus Torvalds * and even root needs to set up some magic numbers in the registers 4301da177e4SLinus Torvalds * so that some mistake won't make this reboot the whole machine. 4311da177e4SLinus Torvalds * You can also set the meaning of the ctrl-alt-del-key here. 4321da177e4SLinus Torvalds * 4331da177e4SLinus Torvalds * reboot doesn't sync: do that yourself before calling this. 4341da177e4SLinus Torvalds */ 4351da177e4SLinus Torvalds asmlinkage long sys_reboot(int magic1, int magic2, unsigned int cmd, void __user * arg) 4361da177e4SLinus Torvalds { 4371da177e4SLinus Torvalds char buffer[256]; 4381da177e4SLinus Torvalds 4391da177e4SLinus Torvalds /* We only trust the superuser with rebooting the system. */ 4401da177e4SLinus Torvalds if (!capable(CAP_SYS_BOOT)) 4411da177e4SLinus Torvalds return -EPERM; 4421da177e4SLinus Torvalds 4431da177e4SLinus Torvalds /* For safety, we require "magic" arguments. */ 4441da177e4SLinus Torvalds if (magic1 != LINUX_REBOOT_MAGIC1 || 4451da177e4SLinus Torvalds (magic2 != LINUX_REBOOT_MAGIC2 && 4461da177e4SLinus Torvalds magic2 != LINUX_REBOOT_MAGIC2A && 4471da177e4SLinus Torvalds magic2 != LINUX_REBOOT_MAGIC2B && 4481da177e4SLinus Torvalds magic2 != LINUX_REBOOT_MAGIC2C)) 4491da177e4SLinus Torvalds return -EINVAL; 4501da177e4SLinus Torvalds 4511da177e4SLinus Torvalds lock_kernel(); 4521da177e4SLinus Torvalds switch (cmd) { 4531da177e4SLinus Torvalds case LINUX_REBOOT_CMD_RESTART: 4544a00ea1eSEric W. Biederman kernel_restart(NULL); 4551da177e4SLinus Torvalds break; 4561da177e4SLinus Torvalds 4571da177e4SLinus Torvalds case LINUX_REBOOT_CMD_CAD_ON: 4581da177e4SLinus Torvalds C_A_D = 1; 4591da177e4SLinus Torvalds break; 4601da177e4SLinus Torvalds 4611da177e4SLinus Torvalds case LINUX_REBOOT_CMD_CAD_OFF: 4621da177e4SLinus Torvalds C_A_D = 0; 4631da177e4SLinus Torvalds break; 4641da177e4SLinus Torvalds 4651da177e4SLinus Torvalds case LINUX_REBOOT_CMD_HALT: 4664a00ea1eSEric W. Biederman kernel_halt(); 4671da177e4SLinus Torvalds unlock_kernel(); 4681da177e4SLinus Torvalds do_exit(0); 4691da177e4SLinus Torvalds break; 4701da177e4SLinus Torvalds 4711da177e4SLinus Torvalds case LINUX_REBOOT_CMD_POWER_OFF: 4724a00ea1eSEric W. Biederman kernel_power_off(); 4731da177e4SLinus Torvalds unlock_kernel(); 4741da177e4SLinus Torvalds do_exit(0); 4751da177e4SLinus Torvalds break; 4761da177e4SLinus Torvalds 4771da177e4SLinus Torvalds case LINUX_REBOOT_CMD_RESTART2: 4781da177e4SLinus Torvalds if (strncpy_from_user(&buffer[0], arg, sizeof(buffer) - 1) < 0) { 4791da177e4SLinus Torvalds unlock_kernel(); 4801da177e4SLinus Torvalds return -EFAULT; 4811da177e4SLinus Torvalds } 4821da177e4SLinus Torvalds buffer[sizeof(buffer) - 1] = '\0'; 4831da177e4SLinus Torvalds 4844a00ea1eSEric W. Biederman kernel_restart(buffer); 4851da177e4SLinus Torvalds break; 4861da177e4SLinus Torvalds 487dc009d92SEric W. Biederman case LINUX_REBOOT_CMD_KEXEC: 4884a00ea1eSEric W. Biederman kernel_kexec(); 489dc009d92SEric W. Biederman unlock_kernel(); 490dc009d92SEric W. Biederman return -EINVAL; 4914a00ea1eSEric W. Biederman 4921da177e4SLinus Torvalds #ifdef CONFIG_SOFTWARE_SUSPEND 4931da177e4SLinus Torvalds case LINUX_REBOOT_CMD_SW_SUSPEND: 4941da177e4SLinus Torvalds { 4951da177e4SLinus Torvalds int ret = software_suspend(); 4961da177e4SLinus Torvalds unlock_kernel(); 4971da177e4SLinus Torvalds return ret; 4981da177e4SLinus Torvalds } 4991da177e4SLinus Torvalds #endif 5001da177e4SLinus Torvalds 5011da177e4SLinus Torvalds default: 5021da177e4SLinus Torvalds unlock_kernel(); 5031da177e4SLinus Torvalds return -EINVAL; 5041da177e4SLinus Torvalds } 5051da177e4SLinus Torvalds unlock_kernel(); 5061da177e4SLinus Torvalds return 0; 5071da177e4SLinus Torvalds } 5081da177e4SLinus Torvalds 5091da177e4SLinus Torvalds static void deferred_cad(void *dummy) 5101da177e4SLinus Torvalds { 511abcd9e51SEric W. Biederman kernel_restart(NULL); 5121da177e4SLinus Torvalds } 5131da177e4SLinus Torvalds 5141da177e4SLinus Torvalds /* 5151da177e4SLinus Torvalds * This function gets called by ctrl-alt-del - ie the keyboard interrupt. 5161da177e4SLinus Torvalds * As it's called within an interrupt, it may NOT sync: the only choice 5171da177e4SLinus Torvalds * is whether to reboot at once, or just ignore the ctrl-alt-del. 5181da177e4SLinus Torvalds */ 5191da177e4SLinus Torvalds void ctrl_alt_del(void) 5201da177e4SLinus Torvalds { 5211da177e4SLinus Torvalds static DECLARE_WORK(cad_work, deferred_cad, NULL); 5221da177e4SLinus Torvalds 5231da177e4SLinus Torvalds if (C_A_D) 5241da177e4SLinus Torvalds schedule_work(&cad_work); 5251da177e4SLinus Torvalds else 5261da177e4SLinus Torvalds kill_proc(cad_pid, SIGINT, 1); 5271da177e4SLinus Torvalds } 5281da177e4SLinus Torvalds 5291da177e4SLinus Torvalds 5301da177e4SLinus Torvalds /* 5311da177e4SLinus Torvalds * Unprivileged users may change the real gid to the effective gid 5321da177e4SLinus Torvalds * or vice versa. (BSD-style) 5331da177e4SLinus Torvalds * 5341da177e4SLinus Torvalds * If you set the real gid at all, or set the effective gid to a value not 5351da177e4SLinus Torvalds * equal to the real gid, then the saved gid is set to the new effective gid. 5361da177e4SLinus Torvalds * 5371da177e4SLinus Torvalds * This makes it possible for a setgid program to completely drop its 5381da177e4SLinus Torvalds * privileges, which is often a useful assertion to make when you are doing 5391da177e4SLinus Torvalds * a security audit over a program. 5401da177e4SLinus Torvalds * 5411da177e4SLinus Torvalds * The general idea is that a program which uses just setregid() will be 5421da177e4SLinus Torvalds * 100% compatible with BSD. A program which uses just setgid() will be 5431da177e4SLinus Torvalds * 100% compatible with POSIX with saved IDs. 5441da177e4SLinus Torvalds * 5451da177e4SLinus Torvalds * SMP: There are not races, the GIDs are checked only by filesystem 5461da177e4SLinus Torvalds * operations (as far as semantic preservation is concerned). 5471da177e4SLinus Torvalds */ 5481da177e4SLinus Torvalds asmlinkage long sys_setregid(gid_t rgid, gid_t egid) 5491da177e4SLinus Torvalds { 5501da177e4SLinus Torvalds int old_rgid = current->gid; 5511da177e4SLinus Torvalds int old_egid = current->egid; 5521da177e4SLinus Torvalds int new_rgid = old_rgid; 5531da177e4SLinus Torvalds int new_egid = old_egid; 5541da177e4SLinus Torvalds int retval; 5551da177e4SLinus Torvalds 5561da177e4SLinus Torvalds retval = security_task_setgid(rgid, egid, (gid_t)-1, LSM_SETID_RE); 5571da177e4SLinus Torvalds if (retval) 5581da177e4SLinus Torvalds return retval; 5591da177e4SLinus Torvalds 5601da177e4SLinus Torvalds if (rgid != (gid_t) -1) { 5611da177e4SLinus Torvalds if ((old_rgid == rgid) || 5621da177e4SLinus Torvalds (current->egid==rgid) || 5631da177e4SLinus Torvalds capable(CAP_SETGID)) 5641da177e4SLinus Torvalds new_rgid = rgid; 5651da177e4SLinus Torvalds else 5661da177e4SLinus Torvalds return -EPERM; 5671da177e4SLinus Torvalds } 5681da177e4SLinus Torvalds if (egid != (gid_t) -1) { 5691da177e4SLinus Torvalds if ((old_rgid == egid) || 5701da177e4SLinus Torvalds (current->egid == egid) || 5711da177e4SLinus Torvalds (current->sgid == egid) || 5721da177e4SLinus Torvalds capable(CAP_SETGID)) 5731da177e4SLinus Torvalds new_egid = egid; 5741da177e4SLinus Torvalds else { 5751da177e4SLinus Torvalds return -EPERM; 5761da177e4SLinus Torvalds } 5771da177e4SLinus Torvalds } 5781da177e4SLinus Torvalds if (new_egid != old_egid) 5791da177e4SLinus Torvalds { 580d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 581d59dd462S[email protected] smp_wmb(); 5821da177e4SLinus Torvalds } 5831da177e4SLinus Torvalds if (rgid != (gid_t) -1 || 5841da177e4SLinus Torvalds (egid != (gid_t) -1 && egid != old_rgid)) 5851da177e4SLinus Torvalds current->sgid = new_egid; 5861da177e4SLinus Torvalds current->fsgid = new_egid; 5871da177e4SLinus Torvalds current->egid = new_egid; 5881da177e4SLinus Torvalds current->gid = new_rgid; 5891da177e4SLinus Torvalds key_fsgid_changed(current); 5901da177e4SLinus Torvalds return 0; 5911da177e4SLinus Torvalds } 5921da177e4SLinus Torvalds 5931da177e4SLinus Torvalds /* 5941da177e4SLinus Torvalds * setgid() is implemented like SysV w/ SAVED_IDS 5951da177e4SLinus Torvalds * 5961da177e4SLinus Torvalds * SMP: Same implicit races as above. 5971da177e4SLinus Torvalds */ 5981da177e4SLinus Torvalds asmlinkage long sys_setgid(gid_t gid) 5991da177e4SLinus Torvalds { 6001da177e4SLinus Torvalds int old_egid = current->egid; 6011da177e4SLinus Torvalds int retval; 6021da177e4SLinus Torvalds 6031da177e4SLinus Torvalds retval = security_task_setgid(gid, (gid_t)-1, (gid_t)-1, LSM_SETID_ID); 6041da177e4SLinus Torvalds if (retval) 6051da177e4SLinus Torvalds return retval; 6061da177e4SLinus Torvalds 6071da177e4SLinus Torvalds if (capable(CAP_SETGID)) 6081da177e4SLinus Torvalds { 6091da177e4SLinus Torvalds if(old_egid != gid) 6101da177e4SLinus Torvalds { 611d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 612d59dd462S[email protected] smp_wmb(); 6131da177e4SLinus Torvalds } 6141da177e4SLinus Torvalds current->gid = current->egid = current->sgid = current->fsgid = gid; 6151da177e4SLinus Torvalds } 6161da177e4SLinus Torvalds else if ((gid == current->gid) || (gid == current->sgid)) 6171da177e4SLinus Torvalds { 6181da177e4SLinus Torvalds if(old_egid != gid) 6191da177e4SLinus Torvalds { 620d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 621d59dd462S[email protected] smp_wmb(); 6221da177e4SLinus Torvalds } 6231da177e4SLinus Torvalds current->egid = current->fsgid = gid; 6241da177e4SLinus Torvalds } 6251da177e4SLinus Torvalds else 6261da177e4SLinus Torvalds return -EPERM; 6271da177e4SLinus Torvalds 6281da177e4SLinus Torvalds key_fsgid_changed(current); 6291da177e4SLinus Torvalds return 0; 6301da177e4SLinus Torvalds } 6311da177e4SLinus Torvalds 6321da177e4SLinus Torvalds static int set_user(uid_t new_ruid, int dumpclear) 6331da177e4SLinus Torvalds { 6341da177e4SLinus Torvalds struct user_struct *new_user; 6351da177e4SLinus Torvalds 6361da177e4SLinus Torvalds new_user = alloc_uid(new_ruid); 6371da177e4SLinus Torvalds if (!new_user) 6381da177e4SLinus Torvalds return -EAGAIN; 6391da177e4SLinus Torvalds 6401da177e4SLinus Torvalds if (atomic_read(&new_user->processes) >= 6411da177e4SLinus Torvalds current->signal->rlim[RLIMIT_NPROC].rlim_cur && 6421da177e4SLinus Torvalds new_user != &root_user) { 6431da177e4SLinus Torvalds free_uid(new_user); 6441da177e4SLinus Torvalds return -EAGAIN; 6451da177e4SLinus Torvalds } 6461da177e4SLinus Torvalds 6471da177e4SLinus Torvalds switch_uid(new_user); 6481da177e4SLinus Torvalds 6491da177e4SLinus Torvalds if(dumpclear) 6501da177e4SLinus Torvalds { 651d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 652d59dd462S[email protected] smp_wmb(); 6531da177e4SLinus Torvalds } 6541da177e4SLinus Torvalds current->uid = new_ruid; 6551da177e4SLinus Torvalds return 0; 6561da177e4SLinus Torvalds } 6571da177e4SLinus Torvalds 6581da177e4SLinus Torvalds /* 6591da177e4SLinus Torvalds * Unprivileged users may change the real uid to the effective uid 6601da177e4SLinus Torvalds * or vice versa. (BSD-style) 6611da177e4SLinus Torvalds * 6621da177e4SLinus Torvalds * If you set the real uid at all, or set the effective uid to a value not 6631da177e4SLinus Torvalds * equal to the real uid, then the saved uid is set to the new effective uid. 6641da177e4SLinus Torvalds * 6651da177e4SLinus Torvalds * This makes it possible for a setuid program to completely drop its 6661da177e4SLinus Torvalds * privileges, which is often a useful assertion to make when you are doing 6671da177e4SLinus Torvalds * a security audit over a program. 6681da177e4SLinus Torvalds * 6691da177e4SLinus Torvalds * The general idea is that a program which uses just setreuid() will be 6701da177e4SLinus Torvalds * 100% compatible with BSD. A program which uses just setuid() will be 6711da177e4SLinus Torvalds * 100% compatible with POSIX with saved IDs. 6721da177e4SLinus Torvalds */ 6731da177e4SLinus Torvalds asmlinkage long sys_setreuid(uid_t ruid, uid_t euid) 6741da177e4SLinus Torvalds { 6751da177e4SLinus Torvalds int old_ruid, old_euid, old_suid, new_ruid, new_euid; 6761da177e4SLinus Torvalds int retval; 6771da177e4SLinus Torvalds 6781da177e4SLinus Torvalds retval = security_task_setuid(ruid, euid, (uid_t)-1, LSM_SETID_RE); 6791da177e4SLinus Torvalds if (retval) 6801da177e4SLinus Torvalds return retval; 6811da177e4SLinus Torvalds 6821da177e4SLinus Torvalds new_ruid = old_ruid = current->uid; 6831da177e4SLinus Torvalds new_euid = old_euid = current->euid; 6841da177e4SLinus Torvalds old_suid = current->suid; 6851da177e4SLinus Torvalds 6861da177e4SLinus Torvalds if (ruid != (uid_t) -1) { 6871da177e4SLinus Torvalds new_ruid = ruid; 6881da177e4SLinus Torvalds if ((old_ruid != ruid) && 6891da177e4SLinus Torvalds (current->euid != ruid) && 6901da177e4SLinus Torvalds !capable(CAP_SETUID)) 6911da177e4SLinus Torvalds return -EPERM; 6921da177e4SLinus Torvalds } 6931da177e4SLinus Torvalds 6941da177e4SLinus Torvalds if (euid != (uid_t) -1) { 6951da177e4SLinus Torvalds new_euid = euid; 6961da177e4SLinus Torvalds if ((old_ruid != euid) && 6971da177e4SLinus Torvalds (current->euid != euid) && 6981da177e4SLinus Torvalds (current->suid != euid) && 6991da177e4SLinus Torvalds !capable(CAP_SETUID)) 7001da177e4SLinus Torvalds return -EPERM; 7011da177e4SLinus Torvalds } 7021da177e4SLinus Torvalds 7031da177e4SLinus Torvalds if (new_ruid != old_ruid && set_user(new_ruid, new_euid != old_euid) < 0) 7041da177e4SLinus Torvalds return -EAGAIN; 7051da177e4SLinus Torvalds 7061da177e4SLinus Torvalds if (new_euid != old_euid) 7071da177e4SLinus Torvalds { 708d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 709d59dd462S[email protected] smp_wmb(); 7101da177e4SLinus Torvalds } 7111da177e4SLinus Torvalds current->fsuid = current->euid = new_euid; 7121da177e4SLinus Torvalds if (ruid != (uid_t) -1 || 7131da177e4SLinus Torvalds (euid != (uid_t) -1 && euid != old_ruid)) 7141da177e4SLinus Torvalds current->suid = current->euid; 7151da177e4SLinus Torvalds current->fsuid = current->euid; 7161da177e4SLinus Torvalds 7171da177e4SLinus Torvalds key_fsuid_changed(current); 7181da177e4SLinus Torvalds 7191da177e4SLinus Torvalds return security_task_post_setuid(old_ruid, old_euid, old_suid, LSM_SETID_RE); 7201da177e4SLinus Torvalds } 7211da177e4SLinus Torvalds 7221da177e4SLinus Torvalds 7231da177e4SLinus Torvalds 7241da177e4SLinus Torvalds /* 7251da177e4SLinus Torvalds * setuid() is implemented like SysV with SAVED_IDS 7261da177e4SLinus Torvalds * 7271da177e4SLinus Torvalds * Note that SAVED_ID's is deficient in that a setuid root program 7281da177e4SLinus Torvalds * like sendmail, for example, cannot set its uid to be a normal 7291da177e4SLinus Torvalds * user and then switch back, because if you're root, setuid() sets 7301da177e4SLinus Torvalds * the saved uid too. If you don't like this, blame the bright people 7311da177e4SLinus Torvalds * in the POSIX committee and/or USG. Note that the BSD-style setreuid() 7321da177e4SLinus Torvalds * will allow a root program to temporarily drop privileges and be able to 7331da177e4SLinus Torvalds * regain them by swapping the real and effective uid. 7341da177e4SLinus Torvalds */ 7351da177e4SLinus Torvalds asmlinkage long sys_setuid(uid_t uid) 7361da177e4SLinus Torvalds { 7371da177e4SLinus Torvalds int old_euid = current->euid; 7381da177e4SLinus Torvalds int old_ruid, old_suid, new_ruid, new_suid; 7391da177e4SLinus Torvalds int retval; 7401da177e4SLinus Torvalds 7411da177e4SLinus Torvalds retval = security_task_setuid(uid, (uid_t)-1, (uid_t)-1, LSM_SETID_ID); 7421da177e4SLinus Torvalds if (retval) 7431da177e4SLinus Torvalds return retval; 7441da177e4SLinus Torvalds 7451da177e4SLinus Torvalds old_ruid = new_ruid = current->uid; 7461da177e4SLinus Torvalds old_suid = current->suid; 7471da177e4SLinus Torvalds new_suid = old_suid; 7481da177e4SLinus Torvalds 7491da177e4SLinus Torvalds if (capable(CAP_SETUID)) { 7501da177e4SLinus Torvalds if (uid != old_ruid && set_user(uid, old_euid != uid) < 0) 7511da177e4SLinus Torvalds return -EAGAIN; 7521da177e4SLinus Torvalds new_suid = uid; 7531da177e4SLinus Torvalds } else if ((uid != current->uid) && (uid != new_suid)) 7541da177e4SLinus Torvalds return -EPERM; 7551da177e4SLinus Torvalds 7561da177e4SLinus Torvalds if (old_euid != uid) 7571da177e4SLinus Torvalds { 758d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 759d59dd462S[email protected] smp_wmb(); 7601da177e4SLinus Torvalds } 7611da177e4SLinus Torvalds current->fsuid = current->euid = uid; 7621da177e4SLinus Torvalds current->suid = new_suid; 7631da177e4SLinus Torvalds 7641da177e4SLinus Torvalds key_fsuid_changed(current); 7651da177e4SLinus Torvalds 7661da177e4SLinus Torvalds return security_task_post_setuid(old_ruid, old_euid, old_suid, LSM_SETID_ID); 7671da177e4SLinus Torvalds } 7681da177e4SLinus Torvalds 7691da177e4SLinus Torvalds 7701da177e4SLinus Torvalds /* 7711da177e4SLinus Torvalds * This function implements a generic ability to update ruid, euid, 7721da177e4SLinus Torvalds * and suid. This allows you to implement the 4.4 compatible seteuid(). 7731da177e4SLinus Torvalds */ 7741da177e4SLinus Torvalds asmlinkage long sys_setresuid(uid_t ruid, uid_t euid, uid_t suid) 7751da177e4SLinus Torvalds { 7761da177e4SLinus Torvalds int old_ruid = current->uid; 7771da177e4SLinus Torvalds int old_euid = current->euid; 7781da177e4SLinus Torvalds int old_suid = current->suid; 7791da177e4SLinus Torvalds int retval; 7801da177e4SLinus Torvalds 7811da177e4SLinus Torvalds retval = security_task_setuid(ruid, euid, suid, LSM_SETID_RES); 7821da177e4SLinus Torvalds if (retval) 7831da177e4SLinus Torvalds return retval; 7841da177e4SLinus Torvalds 7851da177e4SLinus Torvalds if (!capable(CAP_SETUID)) { 7861da177e4SLinus Torvalds if ((ruid != (uid_t) -1) && (ruid != current->uid) && 7871da177e4SLinus Torvalds (ruid != current->euid) && (ruid != current->suid)) 7881da177e4SLinus Torvalds return -EPERM; 7891da177e4SLinus Torvalds if ((euid != (uid_t) -1) && (euid != current->uid) && 7901da177e4SLinus Torvalds (euid != current->euid) && (euid != current->suid)) 7911da177e4SLinus Torvalds return -EPERM; 7921da177e4SLinus Torvalds if ((suid != (uid_t) -1) && (suid != current->uid) && 7931da177e4SLinus Torvalds (suid != current->euid) && (suid != current->suid)) 7941da177e4SLinus Torvalds return -EPERM; 7951da177e4SLinus Torvalds } 7961da177e4SLinus Torvalds if (ruid != (uid_t) -1) { 7971da177e4SLinus Torvalds if (ruid != current->uid && set_user(ruid, euid != current->euid) < 0) 7981da177e4SLinus Torvalds return -EAGAIN; 7991da177e4SLinus Torvalds } 8001da177e4SLinus Torvalds if (euid != (uid_t) -1) { 8011da177e4SLinus Torvalds if (euid != current->euid) 8021da177e4SLinus Torvalds { 803d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 804d59dd462S[email protected] smp_wmb(); 8051da177e4SLinus Torvalds } 8061da177e4SLinus Torvalds current->euid = euid; 8071da177e4SLinus Torvalds } 8081da177e4SLinus Torvalds current->fsuid = current->euid; 8091da177e4SLinus Torvalds if (suid != (uid_t) -1) 8101da177e4SLinus Torvalds current->suid = suid; 8111da177e4SLinus Torvalds 8121da177e4SLinus Torvalds key_fsuid_changed(current); 8131da177e4SLinus Torvalds 8141da177e4SLinus Torvalds return security_task_post_setuid(old_ruid, old_euid, old_suid, LSM_SETID_RES); 8151da177e4SLinus Torvalds } 8161da177e4SLinus Torvalds 8171da177e4SLinus Torvalds asmlinkage long sys_getresuid(uid_t __user *ruid, uid_t __user *euid, uid_t __user *suid) 8181da177e4SLinus Torvalds { 8191da177e4SLinus Torvalds int retval; 8201da177e4SLinus Torvalds 8211da177e4SLinus Torvalds if (!(retval = put_user(current->uid, ruid)) && 8221da177e4SLinus Torvalds !(retval = put_user(current->euid, euid))) 8231da177e4SLinus Torvalds retval = put_user(current->suid, suid); 8241da177e4SLinus Torvalds 8251da177e4SLinus Torvalds return retval; 8261da177e4SLinus Torvalds } 8271da177e4SLinus Torvalds 8281da177e4SLinus Torvalds /* 8291da177e4SLinus Torvalds * Same as above, but for rgid, egid, sgid. 8301da177e4SLinus Torvalds */ 8311da177e4SLinus Torvalds asmlinkage long sys_setresgid(gid_t rgid, gid_t egid, gid_t sgid) 8321da177e4SLinus Torvalds { 8331da177e4SLinus Torvalds int retval; 8341da177e4SLinus Torvalds 8351da177e4SLinus Torvalds retval = security_task_setgid(rgid, egid, sgid, LSM_SETID_RES); 8361da177e4SLinus Torvalds if (retval) 8371da177e4SLinus Torvalds return retval; 8381da177e4SLinus Torvalds 8391da177e4SLinus Torvalds if (!capable(CAP_SETGID)) { 8401da177e4SLinus Torvalds if ((rgid != (gid_t) -1) && (rgid != current->gid) && 8411da177e4SLinus Torvalds (rgid != current->egid) && (rgid != current->sgid)) 8421da177e4SLinus Torvalds return -EPERM; 8431da177e4SLinus Torvalds if ((egid != (gid_t) -1) && (egid != current->gid) && 8441da177e4SLinus Torvalds (egid != current->egid) && (egid != current->sgid)) 8451da177e4SLinus Torvalds return -EPERM; 8461da177e4SLinus Torvalds if ((sgid != (gid_t) -1) && (sgid != current->gid) && 8471da177e4SLinus Torvalds (sgid != current->egid) && (sgid != current->sgid)) 8481da177e4SLinus Torvalds return -EPERM; 8491da177e4SLinus Torvalds } 8501da177e4SLinus Torvalds if (egid != (gid_t) -1) { 8511da177e4SLinus Torvalds if (egid != current->egid) 8521da177e4SLinus Torvalds { 853d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 854d59dd462S[email protected] smp_wmb(); 8551da177e4SLinus Torvalds } 8561da177e4SLinus Torvalds current->egid = egid; 8571da177e4SLinus Torvalds } 8581da177e4SLinus Torvalds current->fsgid = current->egid; 8591da177e4SLinus Torvalds if (rgid != (gid_t) -1) 8601da177e4SLinus Torvalds current->gid = rgid; 8611da177e4SLinus Torvalds if (sgid != (gid_t) -1) 8621da177e4SLinus Torvalds current->sgid = sgid; 8631da177e4SLinus Torvalds 8641da177e4SLinus Torvalds key_fsgid_changed(current); 8651da177e4SLinus Torvalds return 0; 8661da177e4SLinus Torvalds } 8671da177e4SLinus Torvalds 8681da177e4SLinus Torvalds asmlinkage long sys_getresgid(gid_t __user *rgid, gid_t __user *egid, gid_t __user *sgid) 8691da177e4SLinus Torvalds { 8701da177e4SLinus Torvalds int retval; 8711da177e4SLinus Torvalds 8721da177e4SLinus Torvalds if (!(retval = put_user(current->gid, rgid)) && 8731da177e4SLinus Torvalds !(retval = put_user(current->egid, egid))) 8741da177e4SLinus Torvalds retval = put_user(current->sgid, sgid); 8751da177e4SLinus Torvalds 8761da177e4SLinus Torvalds return retval; 8771da177e4SLinus Torvalds } 8781da177e4SLinus Torvalds 8791da177e4SLinus Torvalds 8801da177e4SLinus Torvalds /* 8811da177e4SLinus Torvalds * "setfsuid()" sets the fsuid - the uid used for filesystem checks. This 8821da177e4SLinus Torvalds * is used for "access()" and for the NFS daemon (letting nfsd stay at 8831da177e4SLinus Torvalds * whatever uid it wants to). It normally shadows "euid", except when 8841da177e4SLinus Torvalds * explicitly set by setfsuid() or for access.. 8851da177e4SLinus Torvalds */ 8861da177e4SLinus Torvalds asmlinkage long sys_setfsuid(uid_t uid) 8871da177e4SLinus Torvalds { 8881da177e4SLinus Torvalds int old_fsuid; 8891da177e4SLinus Torvalds 8901da177e4SLinus Torvalds old_fsuid = current->fsuid; 8911da177e4SLinus Torvalds if (security_task_setuid(uid, (uid_t)-1, (uid_t)-1, LSM_SETID_FS)) 8921da177e4SLinus Torvalds return old_fsuid; 8931da177e4SLinus Torvalds 8941da177e4SLinus Torvalds if (uid == current->uid || uid == current->euid || 8951da177e4SLinus Torvalds uid == current->suid || uid == current->fsuid || 8961da177e4SLinus Torvalds capable(CAP_SETUID)) 8971da177e4SLinus Torvalds { 8981da177e4SLinus Torvalds if (uid != old_fsuid) 8991da177e4SLinus Torvalds { 900d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 901d59dd462S[email protected] smp_wmb(); 9021da177e4SLinus Torvalds } 9031da177e4SLinus Torvalds current->fsuid = uid; 9041da177e4SLinus Torvalds } 9051da177e4SLinus Torvalds 9061da177e4SLinus Torvalds key_fsuid_changed(current); 9071da177e4SLinus Torvalds 9081da177e4SLinus Torvalds security_task_post_setuid(old_fsuid, (uid_t)-1, (uid_t)-1, LSM_SETID_FS); 9091da177e4SLinus Torvalds 9101da177e4SLinus Torvalds return old_fsuid; 9111da177e4SLinus Torvalds } 9121da177e4SLinus Torvalds 9131da177e4SLinus Torvalds /* 9141da177e4SLinus Torvalds * Samma p� svenska.. 9151da177e4SLinus Torvalds */ 9161da177e4SLinus Torvalds asmlinkage long sys_setfsgid(gid_t gid) 9171da177e4SLinus Torvalds { 9181da177e4SLinus Torvalds int old_fsgid; 9191da177e4SLinus Torvalds 9201da177e4SLinus Torvalds old_fsgid = current->fsgid; 9211da177e4SLinus Torvalds if (security_task_setgid(gid, (gid_t)-1, (gid_t)-1, LSM_SETID_FS)) 9221da177e4SLinus Torvalds return old_fsgid; 9231da177e4SLinus Torvalds 9241da177e4SLinus Torvalds if (gid == current->gid || gid == current->egid || 9251da177e4SLinus Torvalds gid == current->sgid || gid == current->fsgid || 9261da177e4SLinus Torvalds capable(CAP_SETGID)) 9271da177e4SLinus Torvalds { 9281da177e4SLinus Torvalds if (gid != old_fsgid) 9291da177e4SLinus Torvalds { 930d6e71144SAlan Cox current->mm->dumpable = suid_dumpable; 931d59dd462S[email protected] smp_wmb(); 9321da177e4SLinus Torvalds } 9331da177e4SLinus Torvalds current->fsgid = gid; 9341da177e4SLinus Torvalds key_fsgid_changed(current); 9351da177e4SLinus Torvalds } 9361da177e4SLinus Torvalds return old_fsgid; 9371da177e4SLinus Torvalds } 9381da177e4SLinus Torvalds 9391da177e4SLinus Torvalds asmlinkage long sys_times(struct tms __user * tbuf) 9401da177e4SLinus Torvalds { 9411da177e4SLinus Torvalds /* 9421da177e4SLinus Torvalds * In the SMP world we might just be unlucky and have one of 9431da177e4SLinus Torvalds * the times increment as we use it. Since the value is an 9441da177e4SLinus Torvalds * atomically safe type this is just fine. Conceptually its 9451da177e4SLinus Torvalds * as if the syscall took an instant longer to occur. 9461da177e4SLinus Torvalds */ 9471da177e4SLinus Torvalds if (tbuf) { 9481da177e4SLinus Torvalds struct tms tmp; 94971a2224dSChristoph Lameter cputime_t utime, stime, cutime, cstime; 95071a2224dSChristoph Lameter 95171a2224dSChristoph Lameter #ifdef CONFIG_SMP 95271a2224dSChristoph Lameter if (thread_group_empty(current)) { 95371a2224dSChristoph Lameter /* 95471a2224dSChristoph Lameter * Single thread case without the use of any locks. 95571a2224dSChristoph Lameter * 95671a2224dSChristoph Lameter * We may race with release_task if two threads are 95771a2224dSChristoph Lameter * executing. However, release task first adds up the 95871a2224dSChristoph Lameter * counters (__exit_signal) before removing the task 95971a2224dSChristoph Lameter * from the process tasklist (__unhash_process). 96071a2224dSChristoph Lameter * __exit_signal also acquires and releases the 96171a2224dSChristoph Lameter * siglock which results in the proper memory ordering 96271a2224dSChristoph Lameter * so that the list modifications are always visible 96371a2224dSChristoph Lameter * after the counters have been updated. 96471a2224dSChristoph Lameter * 96571a2224dSChristoph Lameter * If the counters have been updated by the second thread 96671a2224dSChristoph Lameter * but the thread has not yet been removed from the list 96771a2224dSChristoph Lameter * then the other branch will be executing which will 96871a2224dSChristoph Lameter * block on tasklist_lock until the exit handling of the 96971a2224dSChristoph Lameter * other task is finished. 97071a2224dSChristoph Lameter * 97171a2224dSChristoph Lameter * This also implies that the sighand->siglock cannot 97271a2224dSChristoph Lameter * be held by another processor. So we can also 97371a2224dSChristoph Lameter * skip acquiring that lock. 97471a2224dSChristoph Lameter */ 97571a2224dSChristoph Lameter utime = cputime_add(current->signal->utime, current->utime); 97671a2224dSChristoph Lameter stime = cputime_add(current->signal->utime, current->stime); 97771a2224dSChristoph Lameter cutime = current->signal->cutime; 97871a2224dSChristoph Lameter cstime = current->signal->cstime; 97971a2224dSChristoph Lameter } else 98071a2224dSChristoph Lameter #endif 98171a2224dSChristoph Lameter { 98271a2224dSChristoph Lameter 98371a2224dSChristoph Lameter /* Process with multiple threads */ 9841da177e4SLinus Torvalds struct task_struct *tsk = current; 9851da177e4SLinus Torvalds struct task_struct *t; 9861da177e4SLinus Torvalds 9871da177e4SLinus Torvalds read_lock(&tasklist_lock); 9881da177e4SLinus Torvalds utime = tsk->signal->utime; 9891da177e4SLinus Torvalds stime = tsk->signal->stime; 9901da177e4SLinus Torvalds t = tsk; 9911da177e4SLinus Torvalds do { 9921da177e4SLinus Torvalds utime = cputime_add(utime, t->utime); 9931da177e4SLinus Torvalds stime = cputime_add(stime, t->stime); 9941da177e4SLinus Torvalds t = next_thread(t); 9951da177e4SLinus Torvalds } while (t != tsk); 9961da177e4SLinus Torvalds 9971da177e4SLinus Torvalds /* 9981da177e4SLinus Torvalds * While we have tasklist_lock read-locked, no dying thread 9991da177e4SLinus Torvalds * can be updating current->signal->[us]time. Instead, 10001da177e4SLinus Torvalds * we got their counts included in the live thread loop. 10011da177e4SLinus Torvalds * However, another thread can come in right now and 10021da177e4SLinus Torvalds * do a wait call that updates current->signal->c[us]time. 10031da177e4SLinus Torvalds * To make sure we always see that pair updated atomically, 10041da177e4SLinus Torvalds * we take the siglock around fetching them. 10051da177e4SLinus Torvalds */ 10061da177e4SLinus Torvalds spin_lock_irq(&tsk->sighand->siglock); 10071da177e4SLinus Torvalds cutime = tsk->signal->cutime; 10081da177e4SLinus Torvalds cstime = tsk->signal->cstime; 10091da177e4SLinus Torvalds spin_unlock_irq(&tsk->sighand->siglock); 10101da177e4SLinus Torvalds read_unlock(&tasklist_lock); 101171a2224dSChristoph Lameter } 10121da177e4SLinus Torvalds tmp.tms_utime = cputime_to_clock_t(utime); 10131da177e4SLinus Torvalds tmp.tms_stime = cputime_to_clock_t(stime); 10141da177e4SLinus Torvalds tmp.tms_cutime = cputime_to_clock_t(cutime); 10151da177e4SLinus Torvalds tmp.tms_cstime = cputime_to_clock_t(cstime); 10161da177e4SLinus Torvalds if (copy_to_user(tbuf, &tmp, sizeof(struct tms))) 10171da177e4SLinus Torvalds return -EFAULT; 10181da177e4SLinus Torvalds } 10191da177e4SLinus Torvalds return (long) jiffies_64_to_clock_t(get_jiffies_64()); 10201da177e4SLinus Torvalds } 10211da177e4SLinus Torvalds 10221da177e4SLinus Torvalds /* 10231da177e4SLinus Torvalds * This needs some heavy checking ... 10241da177e4SLinus Torvalds * I just haven't the stomach for it. I also don't fully 10251da177e4SLinus Torvalds * understand sessions/pgrp etc. Let somebody who does explain it. 10261da177e4SLinus Torvalds * 10271da177e4SLinus Torvalds * OK, I think I have the protection semantics right.... this is really 10281da177e4SLinus Torvalds * only important on a multi-user system anyway, to make sure one user 10291da177e4SLinus Torvalds * can't send a signal to a process owned by another. -TYT, 12/12/91 10301da177e4SLinus Torvalds * 10311da177e4SLinus Torvalds * Auch. Had to add the 'did_exec' flag to conform completely to POSIX. 10321da177e4SLinus Torvalds * LBT 04.03.94 10331da177e4SLinus Torvalds */ 10341da177e4SLinus Torvalds 10351da177e4SLinus Torvalds asmlinkage long sys_setpgid(pid_t pid, pid_t pgid) 10361da177e4SLinus Torvalds { 10371da177e4SLinus Torvalds struct task_struct *p; 10381da177e4SLinus Torvalds int err = -EINVAL; 10391da177e4SLinus Torvalds 10401da177e4SLinus Torvalds if (!pid) 10411da177e4SLinus Torvalds pid = current->pid; 10421da177e4SLinus Torvalds if (!pgid) 10431da177e4SLinus Torvalds pgid = pid; 10441da177e4SLinus Torvalds if (pgid < 0) 10451da177e4SLinus Torvalds return -EINVAL; 10461da177e4SLinus Torvalds 10471da177e4SLinus Torvalds /* From this point forward we keep holding onto the tasklist lock 10481da177e4SLinus Torvalds * so that our parent does not change from under us. -DaveM 10491da177e4SLinus Torvalds */ 10501da177e4SLinus Torvalds write_lock_irq(&tasklist_lock); 10511da177e4SLinus Torvalds 10521da177e4SLinus Torvalds err = -ESRCH; 10531da177e4SLinus Torvalds p = find_task_by_pid(pid); 10541da177e4SLinus Torvalds if (!p) 10551da177e4SLinus Torvalds goto out; 10561da177e4SLinus Torvalds 10571da177e4SLinus Torvalds err = -EINVAL; 10581da177e4SLinus Torvalds if (!thread_group_leader(p)) 10591da177e4SLinus Torvalds goto out; 10601da177e4SLinus Torvalds 10611da177e4SLinus Torvalds if (p->parent == current || p->real_parent == current) { 10621da177e4SLinus Torvalds err = -EPERM; 10631da177e4SLinus Torvalds if (p->signal->session != current->signal->session) 10641da177e4SLinus Torvalds goto out; 10651da177e4SLinus Torvalds err = -EACCES; 10661da177e4SLinus Torvalds if (p->did_exec) 10671da177e4SLinus Torvalds goto out; 10681da177e4SLinus Torvalds } else { 10691da177e4SLinus Torvalds err = -ESRCH; 10701da177e4SLinus Torvalds if (p != current) 10711da177e4SLinus Torvalds goto out; 10721da177e4SLinus Torvalds } 10731da177e4SLinus Torvalds 10741da177e4SLinus Torvalds err = -EPERM; 10751da177e4SLinus Torvalds if (p->signal->leader) 10761da177e4SLinus Torvalds goto out; 10771da177e4SLinus Torvalds 10781da177e4SLinus Torvalds if (pgid != pid) { 10791da177e4SLinus Torvalds struct task_struct *p; 10801da177e4SLinus Torvalds 10811da177e4SLinus Torvalds do_each_task_pid(pgid, PIDTYPE_PGID, p) { 10821da177e4SLinus Torvalds if (p->signal->session == current->signal->session) 10831da177e4SLinus Torvalds goto ok_pgid; 10841da177e4SLinus Torvalds } while_each_task_pid(pgid, PIDTYPE_PGID, p); 10851da177e4SLinus Torvalds goto out; 10861da177e4SLinus Torvalds } 10871da177e4SLinus Torvalds 10881da177e4SLinus Torvalds ok_pgid: 10891da177e4SLinus Torvalds err = security_task_setpgid(p, pgid); 10901da177e4SLinus Torvalds if (err) 10911da177e4SLinus Torvalds goto out; 10921da177e4SLinus Torvalds 10931da177e4SLinus Torvalds if (process_group(p) != pgid) { 10941da177e4SLinus Torvalds detach_pid(p, PIDTYPE_PGID); 10951da177e4SLinus Torvalds p->signal->pgrp = pgid; 10961da177e4SLinus Torvalds attach_pid(p, PIDTYPE_PGID, pgid); 10971da177e4SLinus Torvalds } 10981da177e4SLinus Torvalds 10991da177e4SLinus Torvalds err = 0; 11001da177e4SLinus Torvalds out: 11011da177e4SLinus Torvalds /* All paths lead to here, thus we are safe. -DaveM */ 11021da177e4SLinus Torvalds write_unlock_irq(&tasklist_lock); 11031da177e4SLinus Torvalds return err; 11041da177e4SLinus Torvalds } 11051da177e4SLinus Torvalds 11061da177e4SLinus Torvalds asmlinkage long sys_getpgid(pid_t pid) 11071da177e4SLinus Torvalds { 11081da177e4SLinus Torvalds if (!pid) { 11091da177e4SLinus Torvalds return process_group(current); 11101da177e4SLinus Torvalds } else { 11111da177e4SLinus Torvalds int retval; 11121da177e4SLinus Torvalds struct task_struct *p; 11131da177e4SLinus Torvalds 11141da177e4SLinus Torvalds read_lock(&tasklist_lock); 11151da177e4SLinus Torvalds p = find_task_by_pid(pid); 11161da177e4SLinus Torvalds 11171da177e4SLinus Torvalds retval = -ESRCH; 11181da177e4SLinus Torvalds if (p) { 11191da177e4SLinus Torvalds retval = security_task_getpgid(p); 11201da177e4SLinus Torvalds if (!retval) 11211da177e4SLinus Torvalds retval = process_group(p); 11221da177e4SLinus Torvalds } 11231da177e4SLinus Torvalds read_unlock(&tasklist_lock); 11241da177e4SLinus Torvalds return retval; 11251da177e4SLinus Torvalds } 11261da177e4SLinus Torvalds } 11271da177e4SLinus Torvalds 11281da177e4SLinus Torvalds #ifdef __ARCH_WANT_SYS_GETPGRP 11291da177e4SLinus Torvalds 11301da177e4SLinus Torvalds asmlinkage long sys_getpgrp(void) 11311da177e4SLinus Torvalds { 11321da177e4SLinus Torvalds /* SMP - assuming writes are word atomic this is fine */ 11331da177e4SLinus Torvalds return process_group(current); 11341da177e4SLinus Torvalds } 11351da177e4SLinus Torvalds 11361da177e4SLinus Torvalds #endif 11371da177e4SLinus Torvalds 11381da177e4SLinus Torvalds asmlinkage long sys_getsid(pid_t pid) 11391da177e4SLinus Torvalds { 11401da177e4SLinus Torvalds if (!pid) { 11411da177e4SLinus Torvalds return current->signal->session; 11421da177e4SLinus Torvalds } else { 11431da177e4SLinus Torvalds int retval; 11441da177e4SLinus Torvalds struct task_struct *p; 11451da177e4SLinus Torvalds 11461da177e4SLinus Torvalds read_lock(&tasklist_lock); 11471da177e4SLinus Torvalds p = find_task_by_pid(pid); 11481da177e4SLinus Torvalds 11491da177e4SLinus Torvalds retval = -ESRCH; 11501da177e4SLinus Torvalds if(p) { 11511da177e4SLinus Torvalds retval = security_task_getsid(p); 11521da177e4SLinus Torvalds if (!retval) 11531da177e4SLinus Torvalds retval = p->signal->session; 11541da177e4SLinus Torvalds } 11551da177e4SLinus Torvalds read_unlock(&tasklist_lock); 11561da177e4SLinus Torvalds return retval; 11571da177e4SLinus Torvalds } 11581da177e4SLinus Torvalds } 11591da177e4SLinus Torvalds 11601da177e4SLinus Torvalds asmlinkage long sys_setsid(void) 11611da177e4SLinus Torvalds { 11621da177e4SLinus Torvalds struct pid *pid; 11631da177e4SLinus Torvalds int err = -EPERM; 11641da177e4SLinus Torvalds 11651da177e4SLinus Torvalds if (!thread_group_leader(current)) 11661da177e4SLinus Torvalds return -EINVAL; 11671da177e4SLinus Torvalds 11681da177e4SLinus Torvalds down(&tty_sem); 11691da177e4SLinus Torvalds write_lock_irq(&tasklist_lock); 11701da177e4SLinus Torvalds 11711da177e4SLinus Torvalds pid = find_pid(PIDTYPE_PGID, current->pid); 11721da177e4SLinus Torvalds if (pid) 11731da177e4SLinus Torvalds goto out; 11741da177e4SLinus Torvalds 11751da177e4SLinus Torvalds current->signal->leader = 1; 11761da177e4SLinus Torvalds __set_special_pids(current->pid, current->pid); 11771da177e4SLinus Torvalds current->signal->tty = NULL; 11781da177e4SLinus Torvalds current->signal->tty_old_pgrp = 0; 11791da177e4SLinus Torvalds err = process_group(current); 11801da177e4SLinus Torvalds out: 11811da177e4SLinus Torvalds write_unlock_irq(&tasklist_lock); 11821da177e4SLinus Torvalds up(&tty_sem); 11831da177e4SLinus Torvalds return err; 11841da177e4SLinus Torvalds } 11851da177e4SLinus Torvalds 11861da177e4SLinus Torvalds /* 11871da177e4SLinus Torvalds * Supplementary group IDs 11881da177e4SLinus Torvalds */ 11891da177e4SLinus Torvalds 11901da177e4SLinus Torvalds /* init to 2 - one for init_task, one to ensure it is never freed */ 11911da177e4SLinus Torvalds struct group_info init_groups = { .usage = ATOMIC_INIT(2) }; 11921da177e4SLinus Torvalds 11931da177e4SLinus Torvalds struct group_info *groups_alloc(int gidsetsize) 11941da177e4SLinus Torvalds { 11951da177e4SLinus Torvalds struct group_info *group_info; 11961da177e4SLinus Torvalds int nblocks; 11971da177e4SLinus Torvalds int i; 11981da177e4SLinus Torvalds 11991da177e4SLinus Torvalds nblocks = (gidsetsize + NGROUPS_PER_BLOCK - 1) / NGROUPS_PER_BLOCK; 12001da177e4SLinus Torvalds /* Make sure we always allocate at least one indirect block pointer */ 12011da177e4SLinus Torvalds nblocks = nblocks ? : 1; 12021da177e4SLinus Torvalds group_info = kmalloc(sizeof(*group_info) + nblocks*sizeof(gid_t *), GFP_USER); 12031da177e4SLinus Torvalds if (!group_info) 12041da177e4SLinus Torvalds return NULL; 12051da177e4SLinus Torvalds group_info->ngroups = gidsetsize; 12061da177e4SLinus Torvalds group_info->nblocks = nblocks; 12071da177e4SLinus Torvalds atomic_set(&group_info->usage, 1); 12081da177e4SLinus Torvalds 12091da177e4SLinus Torvalds if (gidsetsize <= NGROUPS_SMALL) { 12101da177e4SLinus Torvalds group_info->blocks[0] = group_info->small_block; 12111da177e4SLinus Torvalds } else { 12121da177e4SLinus Torvalds for (i = 0; i < nblocks; i++) { 12131da177e4SLinus Torvalds gid_t *b; 12141da177e4SLinus Torvalds b = (void *)__get_free_page(GFP_USER); 12151da177e4SLinus Torvalds if (!b) 12161da177e4SLinus Torvalds goto out_undo_partial_alloc; 12171da177e4SLinus Torvalds group_info->blocks[i] = b; 12181da177e4SLinus Torvalds } 12191da177e4SLinus Torvalds } 12201da177e4SLinus Torvalds return group_info; 12211da177e4SLinus Torvalds 12221da177e4SLinus Torvalds out_undo_partial_alloc: 12231da177e4SLinus Torvalds while (--i >= 0) { 12241da177e4SLinus Torvalds free_page((unsigned long)group_info->blocks[i]); 12251da177e4SLinus Torvalds } 12261da177e4SLinus Torvalds kfree(group_info); 12271da177e4SLinus Torvalds return NULL; 12281da177e4SLinus Torvalds } 12291da177e4SLinus Torvalds 12301da177e4SLinus Torvalds EXPORT_SYMBOL(groups_alloc); 12311da177e4SLinus Torvalds 12321da177e4SLinus Torvalds void groups_free(struct group_info *group_info) 12331da177e4SLinus Torvalds { 12341da177e4SLinus Torvalds if (group_info->blocks[0] != group_info->small_block) { 12351da177e4SLinus Torvalds int i; 12361da177e4SLinus Torvalds for (i = 0; i < group_info->nblocks; i++) 12371da177e4SLinus Torvalds free_page((unsigned long)group_info->blocks[i]); 12381da177e4SLinus Torvalds } 12391da177e4SLinus Torvalds kfree(group_info); 12401da177e4SLinus Torvalds } 12411da177e4SLinus Torvalds 12421da177e4SLinus Torvalds EXPORT_SYMBOL(groups_free); 12431da177e4SLinus Torvalds 12441da177e4SLinus Torvalds /* export the group_info to a user-space array */ 12451da177e4SLinus Torvalds static int groups_to_user(gid_t __user *grouplist, 12461da177e4SLinus Torvalds struct group_info *group_info) 12471da177e4SLinus Torvalds { 12481da177e4SLinus Torvalds int i; 12491da177e4SLinus Torvalds int count = group_info->ngroups; 12501da177e4SLinus Torvalds 12511da177e4SLinus Torvalds for (i = 0; i < group_info->nblocks; i++) { 12521da177e4SLinus Torvalds int cp_count = min(NGROUPS_PER_BLOCK, count); 12531da177e4SLinus Torvalds int off = i * NGROUPS_PER_BLOCK; 12541da177e4SLinus Torvalds int len = cp_count * sizeof(*grouplist); 12551da177e4SLinus Torvalds 12561da177e4SLinus Torvalds if (copy_to_user(grouplist+off, group_info->blocks[i], len)) 12571da177e4SLinus Torvalds return -EFAULT; 12581da177e4SLinus Torvalds 12591da177e4SLinus Torvalds count -= cp_count; 12601da177e4SLinus Torvalds } 12611da177e4SLinus Torvalds return 0; 12621da177e4SLinus Torvalds } 12631da177e4SLinus Torvalds 12641da177e4SLinus Torvalds /* fill a group_info from a user-space array - it must be allocated already */ 12651da177e4SLinus Torvalds static int groups_from_user(struct group_info *group_info, 12661da177e4SLinus Torvalds gid_t __user *grouplist) 12671da177e4SLinus Torvalds { 12681da177e4SLinus Torvalds int i; 12691da177e4SLinus Torvalds int count = group_info->ngroups; 12701da177e4SLinus Torvalds 12711da177e4SLinus Torvalds for (i = 0; i < group_info->nblocks; i++) { 12721da177e4SLinus Torvalds int cp_count = min(NGROUPS_PER_BLOCK, count); 12731da177e4SLinus Torvalds int off = i * NGROUPS_PER_BLOCK; 12741da177e4SLinus Torvalds int len = cp_count * sizeof(*grouplist); 12751da177e4SLinus Torvalds 12761da177e4SLinus Torvalds if (copy_from_user(group_info->blocks[i], grouplist+off, len)) 12771da177e4SLinus Torvalds return -EFAULT; 12781da177e4SLinus Torvalds 12791da177e4SLinus Torvalds count -= cp_count; 12801da177e4SLinus Torvalds } 12811da177e4SLinus Torvalds return 0; 12821da177e4SLinus Torvalds } 12831da177e4SLinus Torvalds 1284ebe8b541SDomen Puncer /* a simple Shell sort */ 12851da177e4SLinus Torvalds static void groups_sort(struct group_info *group_info) 12861da177e4SLinus Torvalds { 12871da177e4SLinus Torvalds int base, max, stride; 12881da177e4SLinus Torvalds int gidsetsize = group_info->ngroups; 12891da177e4SLinus Torvalds 12901da177e4SLinus Torvalds for (stride = 1; stride < gidsetsize; stride = 3 * stride + 1) 12911da177e4SLinus Torvalds ; /* nothing */ 12921da177e4SLinus Torvalds stride /= 3; 12931da177e4SLinus Torvalds 12941da177e4SLinus Torvalds while (stride) { 12951da177e4SLinus Torvalds max = gidsetsize - stride; 12961da177e4SLinus Torvalds for (base = 0; base < max; base++) { 12971da177e4SLinus Torvalds int left = base; 12981da177e4SLinus Torvalds int right = left + stride; 12991da177e4SLinus Torvalds gid_t tmp = GROUP_AT(group_info, right); 13001da177e4SLinus Torvalds 13011da177e4SLinus Torvalds while (left >= 0 && GROUP_AT(group_info, left) > tmp) { 13021da177e4SLinus Torvalds GROUP_AT(group_info, right) = 13031da177e4SLinus Torvalds GROUP_AT(group_info, left); 13041da177e4SLinus Torvalds right = left; 13051da177e4SLinus Torvalds left -= stride; 13061da177e4SLinus Torvalds } 13071da177e4SLinus Torvalds GROUP_AT(group_info, right) = tmp; 13081da177e4SLinus Torvalds } 13091da177e4SLinus Torvalds stride /= 3; 13101da177e4SLinus Torvalds } 13111da177e4SLinus Torvalds } 13121da177e4SLinus Torvalds 13131da177e4SLinus Torvalds /* a simple bsearch */ 13143e30148cSDavid Howells int groups_search(struct group_info *group_info, gid_t grp) 13151da177e4SLinus Torvalds { 13161da177e4SLinus Torvalds int left, right; 13171da177e4SLinus Torvalds 13181da177e4SLinus Torvalds if (!group_info) 13191da177e4SLinus Torvalds return 0; 13201da177e4SLinus Torvalds 13211da177e4SLinus Torvalds left = 0; 13221da177e4SLinus Torvalds right = group_info->ngroups; 13231da177e4SLinus Torvalds while (left < right) { 13241da177e4SLinus Torvalds int mid = (left+right)/2; 13251da177e4SLinus Torvalds int cmp = grp - GROUP_AT(group_info, mid); 13261da177e4SLinus Torvalds if (cmp > 0) 13271da177e4SLinus Torvalds left = mid + 1; 13281da177e4SLinus Torvalds else if (cmp < 0) 13291da177e4SLinus Torvalds right = mid; 13301da177e4SLinus Torvalds else 13311da177e4SLinus Torvalds return 1; 13321da177e4SLinus Torvalds } 13331da177e4SLinus Torvalds return 0; 13341da177e4SLinus Torvalds } 13351da177e4SLinus Torvalds 13361da177e4SLinus Torvalds /* validate and set current->group_info */ 13371da177e4SLinus Torvalds int set_current_groups(struct group_info *group_info) 13381da177e4SLinus Torvalds { 13391da177e4SLinus Torvalds int retval; 13401da177e4SLinus Torvalds struct group_info *old_info; 13411da177e4SLinus Torvalds 13421da177e4SLinus Torvalds retval = security_task_setgroups(group_info); 13431da177e4SLinus Torvalds if (retval) 13441da177e4SLinus Torvalds return retval; 13451da177e4SLinus Torvalds 13461da177e4SLinus Torvalds groups_sort(group_info); 13471da177e4SLinus Torvalds get_group_info(group_info); 13481da177e4SLinus Torvalds 13491da177e4SLinus Torvalds task_lock(current); 13501da177e4SLinus Torvalds old_info = current->group_info; 13511da177e4SLinus Torvalds current->group_info = group_info; 13521da177e4SLinus Torvalds task_unlock(current); 13531da177e4SLinus Torvalds 13541da177e4SLinus Torvalds put_group_info(old_info); 13551da177e4SLinus Torvalds 13561da177e4SLinus Torvalds return 0; 13571da177e4SLinus Torvalds } 13581da177e4SLinus Torvalds 13591da177e4SLinus Torvalds EXPORT_SYMBOL(set_current_groups); 13601da177e4SLinus Torvalds 13611da177e4SLinus Torvalds asmlinkage long sys_getgroups(int gidsetsize, gid_t __user *grouplist) 13621da177e4SLinus Torvalds { 13631da177e4SLinus Torvalds int i = 0; 13641da177e4SLinus Torvalds 13651da177e4SLinus Torvalds /* 13661da177e4SLinus Torvalds * SMP: Nobody else can change our grouplist. Thus we are 13671da177e4SLinus Torvalds * safe. 13681da177e4SLinus Torvalds */ 13691da177e4SLinus Torvalds 13701da177e4SLinus Torvalds if (gidsetsize < 0) 13711da177e4SLinus Torvalds return -EINVAL; 13721da177e4SLinus Torvalds 13731da177e4SLinus Torvalds /* no need to grab task_lock here; it cannot change */ 13741da177e4SLinus Torvalds get_group_info(current->group_info); 13751da177e4SLinus Torvalds i = current->group_info->ngroups; 13761da177e4SLinus Torvalds if (gidsetsize) { 13771da177e4SLinus Torvalds if (i > gidsetsize) { 13781da177e4SLinus Torvalds i = -EINVAL; 13791da177e4SLinus Torvalds goto out; 13801da177e4SLinus Torvalds } 13811da177e4SLinus Torvalds if (groups_to_user(grouplist, current->group_info)) { 13821da177e4SLinus Torvalds i = -EFAULT; 13831da177e4SLinus Torvalds goto out; 13841da177e4SLinus Torvalds } 13851da177e4SLinus Torvalds } 13861da177e4SLinus Torvalds out: 13871da177e4SLinus Torvalds put_group_info(current->group_info); 13881da177e4SLinus Torvalds return i; 13891da177e4SLinus Torvalds } 13901da177e4SLinus Torvalds 13911da177e4SLinus Torvalds /* 13921da177e4SLinus Torvalds * SMP: Our groups are copy-on-write. We can set them safely 13931da177e4SLinus Torvalds * without another task interfering. 13941da177e4SLinus Torvalds */ 13951da177e4SLinus Torvalds 13961da177e4SLinus Torvalds asmlinkage long sys_setgroups(int gidsetsize, gid_t __user *grouplist) 13971da177e4SLinus Torvalds { 13981da177e4SLinus Torvalds struct group_info *group_info; 13991da177e4SLinus Torvalds int retval; 14001da177e4SLinus Torvalds 14011da177e4SLinus Torvalds if (!capable(CAP_SETGID)) 14021da177e4SLinus Torvalds return -EPERM; 14031da177e4SLinus Torvalds if ((unsigned)gidsetsize > NGROUPS_MAX) 14041da177e4SLinus Torvalds return -EINVAL; 14051da177e4SLinus Torvalds 14061da177e4SLinus Torvalds group_info = groups_alloc(gidsetsize); 14071da177e4SLinus Torvalds if (!group_info) 14081da177e4SLinus Torvalds return -ENOMEM; 14091da177e4SLinus Torvalds retval = groups_from_user(group_info, grouplist); 14101da177e4SLinus Torvalds if (retval) { 14111da177e4SLinus Torvalds put_group_info(group_info); 14121da177e4SLinus Torvalds return retval; 14131da177e4SLinus Torvalds } 14141da177e4SLinus Torvalds 14151da177e4SLinus Torvalds retval = set_current_groups(group_info); 14161da177e4SLinus Torvalds put_group_info(group_info); 14171da177e4SLinus Torvalds 14181da177e4SLinus Torvalds return retval; 14191da177e4SLinus Torvalds } 14201da177e4SLinus Torvalds 14211da177e4SLinus Torvalds /* 14221da177e4SLinus Torvalds * Check whether we're fsgid/egid or in the supplemental group.. 14231da177e4SLinus Torvalds */ 14241da177e4SLinus Torvalds int in_group_p(gid_t grp) 14251da177e4SLinus Torvalds { 14261da177e4SLinus Torvalds int retval = 1; 14271da177e4SLinus Torvalds if (grp != current->fsgid) { 14281da177e4SLinus Torvalds get_group_info(current->group_info); 14291da177e4SLinus Torvalds retval = groups_search(current->group_info, grp); 14301da177e4SLinus Torvalds put_group_info(current->group_info); 14311da177e4SLinus Torvalds } 14321da177e4SLinus Torvalds return retval; 14331da177e4SLinus Torvalds } 14341da177e4SLinus Torvalds 14351da177e4SLinus Torvalds EXPORT_SYMBOL(in_group_p); 14361da177e4SLinus Torvalds 14371da177e4SLinus Torvalds int in_egroup_p(gid_t grp) 14381da177e4SLinus Torvalds { 14391da177e4SLinus Torvalds int retval = 1; 14401da177e4SLinus Torvalds if (grp != current->egid) { 14411da177e4SLinus Torvalds get_group_info(current->group_info); 14421da177e4SLinus Torvalds retval = groups_search(current->group_info, grp); 14431da177e4SLinus Torvalds put_group_info(current->group_info); 14441da177e4SLinus Torvalds } 14451da177e4SLinus Torvalds return retval; 14461da177e4SLinus Torvalds } 14471da177e4SLinus Torvalds 14481da177e4SLinus Torvalds EXPORT_SYMBOL(in_egroup_p); 14491da177e4SLinus Torvalds 14501da177e4SLinus Torvalds DECLARE_RWSEM(uts_sem); 14511da177e4SLinus Torvalds 14521da177e4SLinus Torvalds EXPORT_SYMBOL(uts_sem); 14531da177e4SLinus Torvalds 14541da177e4SLinus Torvalds asmlinkage long sys_newuname(struct new_utsname __user * name) 14551da177e4SLinus Torvalds { 14561da177e4SLinus Torvalds int errno = 0; 14571da177e4SLinus Torvalds 14581da177e4SLinus Torvalds down_read(&uts_sem); 14591da177e4SLinus Torvalds if (copy_to_user(name,&system_utsname,sizeof *name)) 14601da177e4SLinus Torvalds errno = -EFAULT; 14611da177e4SLinus Torvalds up_read(&uts_sem); 14621da177e4SLinus Torvalds return errno; 14631da177e4SLinus Torvalds } 14641da177e4SLinus Torvalds 14651da177e4SLinus Torvalds asmlinkage long sys_sethostname(char __user *name, int len) 14661da177e4SLinus Torvalds { 14671da177e4SLinus Torvalds int errno; 14681da177e4SLinus Torvalds char tmp[__NEW_UTS_LEN]; 14691da177e4SLinus Torvalds 14701da177e4SLinus Torvalds if (!capable(CAP_SYS_ADMIN)) 14711da177e4SLinus Torvalds return -EPERM; 14721da177e4SLinus Torvalds if (len < 0 || len > __NEW_UTS_LEN) 14731da177e4SLinus Torvalds return -EINVAL; 14741da177e4SLinus Torvalds down_write(&uts_sem); 14751da177e4SLinus Torvalds errno = -EFAULT; 14761da177e4SLinus Torvalds if (!copy_from_user(tmp, name, len)) { 14771da177e4SLinus Torvalds memcpy(system_utsname.nodename, tmp, len); 14781da177e4SLinus Torvalds system_utsname.nodename[len] = 0; 14791da177e4SLinus Torvalds errno = 0; 14801da177e4SLinus Torvalds } 14811da177e4SLinus Torvalds up_write(&uts_sem); 14821da177e4SLinus Torvalds return errno; 14831da177e4SLinus Torvalds } 14841da177e4SLinus Torvalds 14851da177e4SLinus Torvalds #ifdef __ARCH_WANT_SYS_GETHOSTNAME 14861da177e4SLinus Torvalds 14871da177e4SLinus Torvalds asmlinkage long sys_gethostname(char __user *name, int len) 14881da177e4SLinus Torvalds { 14891da177e4SLinus Torvalds int i, errno; 14901da177e4SLinus Torvalds 14911da177e4SLinus Torvalds if (len < 0) 14921da177e4SLinus Torvalds return -EINVAL; 14931da177e4SLinus Torvalds down_read(&uts_sem); 14941da177e4SLinus Torvalds i = 1 + strlen(system_utsname.nodename); 14951da177e4SLinus Torvalds if (i > len) 14961da177e4SLinus Torvalds i = len; 14971da177e4SLinus Torvalds errno = 0; 14981da177e4SLinus Torvalds if (copy_to_user(name, system_utsname.nodename, i)) 14991da177e4SLinus Torvalds errno = -EFAULT; 15001da177e4SLinus Torvalds up_read(&uts_sem); 15011da177e4SLinus Torvalds return errno; 15021da177e4SLinus Torvalds } 15031da177e4SLinus Torvalds 15041da177e4SLinus Torvalds #endif 15051da177e4SLinus Torvalds 15061da177e4SLinus Torvalds /* 15071da177e4SLinus Torvalds * Only setdomainname; getdomainname can be implemented by calling 15081da177e4SLinus Torvalds * uname() 15091da177e4SLinus Torvalds */ 15101da177e4SLinus Torvalds asmlinkage long sys_setdomainname(char __user *name, int len) 15111da177e4SLinus Torvalds { 15121da177e4SLinus Torvalds int errno; 15131da177e4SLinus Torvalds char tmp[__NEW_UTS_LEN]; 15141da177e4SLinus Torvalds 15151da177e4SLinus Torvalds if (!capable(CAP_SYS_ADMIN)) 15161da177e4SLinus Torvalds return -EPERM; 15171da177e4SLinus Torvalds if (len < 0 || len > __NEW_UTS_LEN) 15181da177e4SLinus Torvalds return -EINVAL; 15191da177e4SLinus Torvalds 15201da177e4SLinus Torvalds down_write(&uts_sem); 15211da177e4SLinus Torvalds errno = -EFAULT; 15221da177e4SLinus Torvalds if (!copy_from_user(tmp, name, len)) { 15231da177e4SLinus Torvalds memcpy(system_utsname.domainname, tmp, len); 15241da177e4SLinus Torvalds system_utsname.domainname[len] = 0; 15251da177e4SLinus Torvalds errno = 0; 15261da177e4SLinus Torvalds } 15271da177e4SLinus Torvalds up_write(&uts_sem); 15281da177e4SLinus Torvalds return errno; 15291da177e4SLinus Torvalds } 15301da177e4SLinus Torvalds 15311da177e4SLinus Torvalds asmlinkage long sys_getrlimit(unsigned int resource, struct rlimit __user *rlim) 15321da177e4SLinus Torvalds { 15331da177e4SLinus Torvalds if (resource >= RLIM_NLIMITS) 15341da177e4SLinus Torvalds return -EINVAL; 15351da177e4SLinus Torvalds else { 15361da177e4SLinus Torvalds struct rlimit value; 15371da177e4SLinus Torvalds task_lock(current->group_leader); 15381da177e4SLinus Torvalds value = current->signal->rlim[resource]; 15391da177e4SLinus Torvalds task_unlock(current->group_leader); 15401da177e4SLinus Torvalds return copy_to_user(rlim, &value, sizeof(*rlim)) ? -EFAULT : 0; 15411da177e4SLinus Torvalds } 15421da177e4SLinus Torvalds } 15431da177e4SLinus Torvalds 15441da177e4SLinus Torvalds #ifdef __ARCH_WANT_SYS_OLD_GETRLIMIT 15451da177e4SLinus Torvalds 15461da177e4SLinus Torvalds /* 15471da177e4SLinus Torvalds * Back compatibility for getrlimit. Needed for some apps. 15481da177e4SLinus Torvalds */ 15491da177e4SLinus Torvalds 15501da177e4SLinus Torvalds asmlinkage long sys_old_getrlimit(unsigned int resource, struct rlimit __user *rlim) 15511da177e4SLinus Torvalds { 15521da177e4SLinus Torvalds struct rlimit x; 15531da177e4SLinus Torvalds if (resource >= RLIM_NLIMITS) 15541da177e4SLinus Torvalds return -EINVAL; 15551da177e4SLinus Torvalds 15561da177e4SLinus Torvalds task_lock(current->group_leader); 15571da177e4SLinus Torvalds x = current->signal->rlim[resource]; 15581da177e4SLinus Torvalds task_unlock(current->group_leader); 15591da177e4SLinus Torvalds if(x.rlim_cur > 0x7FFFFFFF) 15601da177e4SLinus Torvalds x.rlim_cur = 0x7FFFFFFF; 15611da177e4SLinus Torvalds if(x.rlim_max > 0x7FFFFFFF) 15621da177e4SLinus Torvalds x.rlim_max = 0x7FFFFFFF; 15631da177e4SLinus Torvalds return copy_to_user(rlim, &x, sizeof(x))?-EFAULT:0; 15641da177e4SLinus Torvalds } 15651da177e4SLinus Torvalds 15661da177e4SLinus Torvalds #endif 15671da177e4SLinus Torvalds 15681da177e4SLinus Torvalds asmlinkage long sys_setrlimit(unsigned int resource, struct rlimit __user *rlim) 15691da177e4SLinus Torvalds { 15701da177e4SLinus Torvalds struct rlimit new_rlim, *old_rlim; 15711da177e4SLinus Torvalds int retval; 15721da177e4SLinus Torvalds 15731da177e4SLinus Torvalds if (resource >= RLIM_NLIMITS) 15741da177e4SLinus Torvalds return -EINVAL; 15751da177e4SLinus Torvalds if(copy_from_user(&new_rlim, rlim, sizeof(*rlim))) 15761da177e4SLinus Torvalds return -EFAULT; 15771da177e4SLinus Torvalds if (new_rlim.rlim_cur > new_rlim.rlim_max) 15781da177e4SLinus Torvalds return -EINVAL; 15791da177e4SLinus Torvalds old_rlim = current->signal->rlim + resource; 15801da177e4SLinus Torvalds if ((new_rlim.rlim_max > old_rlim->rlim_max) && 15811da177e4SLinus Torvalds !capable(CAP_SYS_RESOURCE)) 15821da177e4SLinus Torvalds return -EPERM; 15831da177e4SLinus Torvalds if (resource == RLIMIT_NOFILE && new_rlim.rlim_max > NR_OPEN) 15841da177e4SLinus Torvalds return -EPERM; 15851da177e4SLinus Torvalds 15861da177e4SLinus Torvalds retval = security_task_setrlimit(resource, &new_rlim); 15871da177e4SLinus Torvalds if (retval) 15881da177e4SLinus Torvalds return retval; 15891da177e4SLinus Torvalds 15901da177e4SLinus Torvalds task_lock(current->group_leader); 15911da177e4SLinus Torvalds *old_rlim = new_rlim; 15921da177e4SLinus Torvalds task_unlock(current->group_leader); 15931da177e4SLinus Torvalds 15941da177e4SLinus Torvalds if (resource == RLIMIT_CPU && new_rlim.rlim_cur != RLIM_INFINITY && 15951da177e4SLinus Torvalds (cputime_eq(current->signal->it_prof_expires, cputime_zero) || 15961da177e4SLinus Torvalds new_rlim.rlim_cur <= cputime_to_secs( 15971da177e4SLinus Torvalds current->signal->it_prof_expires))) { 15981da177e4SLinus Torvalds cputime_t cputime = secs_to_cputime(new_rlim.rlim_cur); 15991da177e4SLinus Torvalds read_lock(&tasklist_lock); 16001da177e4SLinus Torvalds spin_lock_irq(¤t->sighand->siglock); 16011da177e4SLinus Torvalds set_process_cpu_timer(current, CPUCLOCK_PROF, 16021da177e4SLinus Torvalds &cputime, NULL); 16031da177e4SLinus Torvalds spin_unlock_irq(¤t->sighand->siglock); 16041da177e4SLinus Torvalds read_unlock(&tasklist_lock); 16051da177e4SLinus Torvalds } 16061da177e4SLinus Torvalds 16071da177e4SLinus Torvalds return 0; 16081da177e4SLinus Torvalds } 16091da177e4SLinus Torvalds 16101da177e4SLinus Torvalds /* 16111da177e4SLinus Torvalds * It would make sense to put struct rusage in the task_struct, 16121da177e4SLinus Torvalds * except that would make the task_struct be *really big*. After 16131da177e4SLinus Torvalds * task_struct gets moved into malloc'ed memory, it would 16141da177e4SLinus Torvalds * make sense to do this. It will make moving the rest of the information 16151da177e4SLinus Torvalds * a lot simpler! (Which we're not doing right now because we're not 16161da177e4SLinus Torvalds * measuring them yet). 16171da177e4SLinus Torvalds * 16181da177e4SLinus Torvalds * This expects to be called with tasklist_lock read-locked or better, 16191da177e4SLinus Torvalds * and the siglock not locked. It may momentarily take the siglock. 16201da177e4SLinus Torvalds * 16211da177e4SLinus Torvalds * When sampling multiple threads for RUSAGE_SELF, under SMP we might have 16221da177e4SLinus Torvalds * races with threads incrementing their own counters. But since word 16231da177e4SLinus Torvalds * reads are atomic, we either get new values or old values and we don't 16241da177e4SLinus Torvalds * care which for the sums. We always take the siglock to protect reading 16251da177e4SLinus Torvalds * the c* fields from p->signal from races with exit.c updating those 16261da177e4SLinus Torvalds * fields when reaping, so a sample either gets all the additions of a 16271da177e4SLinus Torvalds * given child after it's reaped, or none so this sample is before reaping. 16281da177e4SLinus Torvalds */ 16291da177e4SLinus Torvalds 16301da177e4SLinus Torvalds static void k_getrusage(struct task_struct *p, int who, struct rusage *r) 16311da177e4SLinus Torvalds { 16321da177e4SLinus Torvalds struct task_struct *t; 16331da177e4SLinus Torvalds unsigned long flags; 16341da177e4SLinus Torvalds cputime_t utime, stime; 16351da177e4SLinus Torvalds 16361da177e4SLinus Torvalds memset((char *) r, 0, sizeof *r); 16371da177e4SLinus Torvalds 16381da177e4SLinus Torvalds if (unlikely(!p->signal)) 16391da177e4SLinus Torvalds return; 16401da177e4SLinus Torvalds 16411da177e4SLinus Torvalds switch (who) { 16421da177e4SLinus Torvalds case RUSAGE_CHILDREN: 16431da177e4SLinus Torvalds spin_lock_irqsave(&p->sighand->siglock, flags); 16441da177e4SLinus Torvalds utime = p->signal->cutime; 16451da177e4SLinus Torvalds stime = p->signal->cstime; 16461da177e4SLinus Torvalds r->ru_nvcsw = p->signal->cnvcsw; 16471da177e4SLinus Torvalds r->ru_nivcsw = p->signal->cnivcsw; 16481da177e4SLinus Torvalds r->ru_minflt = p->signal->cmin_flt; 16491da177e4SLinus Torvalds r->ru_majflt = p->signal->cmaj_flt; 16501da177e4SLinus Torvalds spin_unlock_irqrestore(&p->sighand->siglock, flags); 16511da177e4SLinus Torvalds cputime_to_timeval(utime, &r->ru_utime); 16521da177e4SLinus Torvalds cputime_to_timeval(stime, &r->ru_stime); 16531da177e4SLinus Torvalds break; 16541da177e4SLinus Torvalds case RUSAGE_SELF: 16551da177e4SLinus Torvalds spin_lock_irqsave(&p->sighand->siglock, flags); 16561da177e4SLinus Torvalds utime = stime = cputime_zero; 16571da177e4SLinus Torvalds goto sum_group; 16581da177e4SLinus Torvalds case RUSAGE_BOTH: 16591da177e4SLinus Torvalds spin_lock_irqsave(&p->sighand->siglock, flags); 16601da177e4SLinus Torvalds utime = p->signal->cutime; 16611da177e4SLinus Torvalds stime = p->signal->cstime; 16621da177e4SLinus Torvalds r->ru_nvcsw = p->signal->cnvcsw; 16631da177e4SLinus Torvalds r->ru_nivcsw = p->signal->cnivcsw; 16641da177e4SLinus Torvalds r->ru_minflt = p->signal->cmin_flt; 16651da177e4SLinus Torvalds r->ru_majflt = p->signal->cmaj_flt; 16661da177e4SLinus Torvalds sum_group: 16671da177e4SLinus Torvalds utime = cputime_add(utime, p->signal->utime); 16681da177e4SLinus Torvalds stime = cputime_add(stime, p->signal->stime); 16691da177e4SLinus Torvalds r->ru_nvcsw += p->signal->nvcsw; 16701da177e4SLinus Torvalds r->ru_nivcsw += p->signal->nivcsw; 16711da177e4SLinus Torvalds r->ru_minflt += p->signal->min_flt; 16721da177e4SLinus Torvalds r->ru_majflt += p->signal->maj_flt; 16731da177e4SLinus Torvalds t = p; 16741da177e4SLinus Torvalds do { 16751da177e4SLinus Torvalds utime = cputime_add(utime, t->utime); 16761da177e4SLinus Torvalds stime = cputime_add(stime, t->stime); 16771da177e4SLinus Torvalds r->ru_nvcsw += t->nvcsw; 16781da177e4SLinus Torvalds r->ru_nivcsw += t->nivcsw; 16791da177e4SLinus Torvalds r->ru_minflt += t->min_flt; 16801da177e4SLinus Torvalds r->ru_majflt += t->maj_flt; 16811da177e4SLinus Torvalds t = next_thread(t); 16821da177e4SLinus Torvalds } while (t != p); 16831da177e4SLinus Torvalds spin_unlock_irqrestore(&p->sighand->siglock, flags); 16841da177e4SLinus Torvalds cputime_to_timeval(utime, &r->ru_utime); 16851da177e4SLinus Torvalds cputime_to_timeval(stime, &r->ru_stime); 16861da177e4SLinus Torvalds break; 16871da177e4SLinus Torvalds default: 16881da177e4SLinus Torvalds BUG(); 16891da177e4SLinus Torvalds } 16901da177e4SLinus Torvalds } 16911da177e4SLinus Torvalds 16921da177e4SLinus Torvalds int getrusage(struct task_struct *p, int who, struct rusage __user *ru) 16931da177e4SLinus Torvalds { 16941da177e4SLinus Torvalds struct rusage r; 16951da177e4SLinus Torvalds read_lock(&tasklist_lock); 16961da177e4SLinus Torvalds k_getrusage(p, who, &r); 16971da177e4SLinus Torvalds read_unlock(&tasklist_lock); 16981da177e4SLinus Torvalds return copy_to_user(ru, &r, sizeof(r)) ? -EFAULT : 0; 16991da177e4SLinus Torvalds } 17001da177e4SLinus Torvalds 17011da177e4SLinus Torvalds asmlinkage long sys_getrusage(int who, struct rusage __user *ru) 17021da177e4SLinus Torvalds { 17031da177e4SLinus Torvalds if (who != RUSAGE_SELF && who != RUSAGE_CHILDREN) 17041da177e4SLinus Torvalds return -EINVAL; 17051da177e4SLinus Torvalds return getrusage(current, who, ru); 17061da177e4SLinus Torvalds } 17071da177e4SLinus Torvalds 17081da177e4SLinus Torvalds asmlinkage long sys_umask(int mask) 17091da177e4SLinus Torvalds { 17101da177e4SLinus Torvalds mask = xchg(¤t->fs->umask, mask & S_IRWXUGO); 17111da177e4SLinus Torvalds return mask; 17121da177e4SLinus Torvalds } 17131da177e4SLinus Torvalds 17141da177e4SLinus Torvalds asmlinkage long sys_prctl(int option, unsigned long arg2, unsigned long arg3, 17151da177e4SLinus Torvalds unsigned long arg4, unsigned long arg5) 17161da177e4SLinus Torvalds { 17171da177e4SLinus Torvalds long error; 17181da177e4SLinus Torvalds int sig; 17191da177e4SLinus Torvalds 17201da177e4SLinus Torvalds error = security_task_prctl(option, arg2, arg3, arg4, arg5); 17211da177e4SLinus Torvalds if (error) 17221da177e4SLinus Torvalds return error; 17231da177e4SLinus Torvalds 17241da177e4SLinus Torvalds switch (option) { 17251da177e4SLinus Torvalds case PR_SET_PDEATHSIG: 17261da177e4SLinus Torvalds sig = arg2; 17277ed20e1aSJesper Juhl if (!valid_signal(sig)) { 17281da177e4SLinus Torvalds error = -EINVAL; 17291da177e4SLinus Torvalds break; 17301da177e4SLinus Torvalds } 17311da177e4SLinus Torvalds current->pdeath_signal = sig; 17321da177e4SLinus Torvalds break; 17331da177e4SLinus Torvalds case PR_GET_PDEATHSIG: 17341da177e4SLinus Torvalds error = put_user(current->pdeath_signal, (int __user *)arg2); 17351da177e4SLinus Torvalds break; 17361da177e4SLinus Torvalds case PR_GET_DUMPABLE: 17371da177e4SLinus Torvalds if (current->mm->dumpable) 17381da177e4SLinus Torvalds error = 1; 17391da177e4SLinus Torvalds break; 17401da177e4SLinus Torvalds case PR_SET_DUMPABLE: 1741d6e71144SAlan Cox if (arg2 < 0 || arg2 > 2) { 17421da177e4SLinus Torvalds error = -EINVAL; 17431da177e4SLinus Torvalds break; 17441da177e4SLinus Torvalds } 17451da177e4SLinus Torvalds current->mm->dumpable = arg2; 17461da177e4SLinus Torvalds break; 17471da177e4SLinus Torvalds 17481da177e4SLinus Torvalds case PR_SET_UNALIGN: 17491da177e4SLinus Torvalds error = SET_UNALIGN_CTL(current, arg2); 17501da177e4SLinus Torvalds break; 17511da177e4SLinus Torvalds case PR_GET_UNALIGN: 17521da177e4SLinus Torvalds error = GET_UNALIGN_CTL(current, arg2); 17531da177e4SLinus Torvalds break; 17541da177e4SLinus Torvalds case PR_SET_FPEMU: 17551da177e4SLinus Torvalds error = SET_FPEMU_CTL(current, arg2); 17561da177e4SLinus Torvalds break; 17571da177e4SLinus Torvalds case PR_GET_FPEMU: 17581da177e4SLinus Torvalds error = GET_FPEMU_CTL(current, arg2); 17591da177e4SLinus Torvalds break; 17601da177e4SLinus Torvalds case PR_SET_FPEXC: 17611da177e4SLinus Torvalds error = SET_FPEXC_CTL(current, arg2); 17621da177e4SLinus Torvalds break; 17631da177e4SLinus Torvalds case PR_GET_FPEXC: 17641da177e4SLinus Torvalds error = GET_FPEXC_CTL(current, arg2); 17651da177e4SLinus Torvalds break; 17661da177e4SLinus Torvalds case PR_GET_TIMING: 17671da177e4SLinus Torvalds error = PR_TIMING_STATISTICAL; 17681da177e4SLinus Torvalds break; 17691da177e4SLinus Torvalds case PR_SET_TIMING: 17701da177e4SLinus Torvalds if (arg2 == PR_TIMING_STATISTICAL) 17711da177e4SLinus Torvalds error = 0; 17721da177e4SLinus Torvalds else 17731da177e4SLinus Torvalds error = -EINVAL; 17741da177e4SLinus Torvalds break; 17751da177e4SLinus Torvalds 17761da177e4SLinus Torvalds case PR_GET_KEEPCAPS: 17771da177e4SLinus Torvalds if (current->keep_capabilities) 17781da177e4SLinus Torvalds error = 1; 17791da177e4SLinus Torvalds break; 17801da177e4SLinus Torvalds case PR_SET_KEEPCAPS: 17811da177e4SLinus Torvalds if (arg2 != 0 && arg2 != 1) { 17821da177e4SLinus Torvalds error = -EINVAL; 17831da177e4SLinus Torvalds break; 17841da177e4SLinus Torvalds } 17851da177e4SLinus Torvalds current->keep_capabilities = arg2; 17861da177e4SLinus Torvalds break; 17871da177e4SLinus Torvalds case PR_SET_NAME: { 17881da177e4SLinus Torvalds struct task_struct *me = current; 17891da177e4SLinus Torvalds unsigned char ncomm[sizeof(me->comm)]; 17901da177e4SLinus Torvalds 17911da177e4SLinus Torvalds ncomm[sizeof(me->comm)-1] = 0; 17921da177e4SLinus Torvalds if (strncpy_from_user(ncomm, (char __user *)arg2, 17931da177e4SLinus Torvalds sizeof(me->comm)-1) < 0) 17941da177e4SLinus Torvalds return -EFAULT; 17951da177e4SLinus Torvalds set_task_comm(me, ncomm); 17961da177e4SLinus Torvalds return 0; 17971da177e4SLinus Torvalds } 17981da177e4SLinus Torvalds case PR_GET_NAME: { 17991da177e4SLinus Torvalds struct task_struct *me = current; 18001da177e4SLinus Torvalds unsigned char tcomm[sizeof(me->comm)]; 18011da177e4SLinus Torvalds 18021da177e4SLinus Torvalds get_task_comm(tcomm, me); 18031da177e4SLinus Torvalds if (copy_to_user((char __user *)arg2, tcomm, sizeof(tcomm))) 18041da177e4SLinus Torvalds return -EFAULT; 18051da177e4SLinus Torvalds return 0; 18061da177e4SLinus Torvalds } 18071da177e4SLinus Torvalds default: 18081da177e4SLinus Torvalds error = -EINVAL; 18091da177e4SLinus Torvalds break; 18101da177e4SLinus Torvalds } 18111da177e4SLinus Torvalds return error; 18121da177e4SLinus Torvalds } 1813