[linux.git] / include / net / scm.h

#ifndef __LINUX_NET_SCM_H
#define __LINUX_NET_SCM_H

#include <linux/limits.h>
#include <linux/net.h>
#include <linux/security.h>
#include <linux/pid.h>
#include <linux/nsproxy.h>

/* Well, we should have at least one descriptor open
 * to accept passed FDs 8)
 */
#define SCM_MAX_FD	255

struct scm_fp_list
{
	int		count;
	struct file	*fp[SCM_MAX_FD];
};

struct scm_cookie
{
	struct ucred		creds;		/* Skb credentials	*/
	struct scm_fp_list	*fp;		/* Passed files		*/
#ifdef CONFIG_SECURITY_NETWORK
	u32			secid;		/* Passed security ID 	*/
#endif
	unsigned long		seq;		/* Connection seqno	*/
};

extern void scm_detach_fds(struct msghdr *msg, struct scm_cookie *scm);
extern void scm_detach_fds_compat(struct msghdr *msg, struct scm_cookie *scm);
extern int __scm_send(struct socket *sock, struct msghdr *msg, struct scm_cookie *scm);
extern void __scm_destroy(struct scm_cookie *scm);
extern struct scm_fp_list * scm_fp_dup(struct scm_fp_list *fpl);

#ifdef CONFIG_SECURITY_NETWORK
static __inline__ void unix_get_peersec_dgram(struct socket *sock, struct scm_cookie *scm)
{
	security_socket_getpeersec_dgram(sock, NULL, &scm->secid);
}
#else
static __inline__ void unix_get_peersec_dgram(struct socket *sock, struct scm_cookie *scm)
{ }
#endif /* CONFIG_SECURITY_NETWORK */

static __inline__ void scm_destroy(struct scm_cookie *scm)
{
	if (scm && scm->fp)
		__scm_destroy(scm);
}

static __inline__ int scm_send(struct socket *sock, struct msghdr *msg,
			       struct scm_cookie *scm)
{
	struct task_struct *p = current;
	scm->creds.uid = p->uid;
	scm->creds.gid = p->gid;
	scm->creds.pid = task_tgid_vnr(p);
	scm->fp = NULL;
	scm->seq = 0;
	unix_get_peersec_dgram(sock, scm);
	if (msg->msg_controllen <= 0)
		return 0;
	return __scm_send(sock, msg, scm);
}

#ifdef CONFIG_SECURITY_NETWORK
static inline void scm_passec(struct socket *sock, struct msghdr *msg, struct scm_cookie *scm)
{
	char *secdata;
	u32 seclen;
	int err;

	if (test_bit(SOCK_PASSSEC, &sock->flags)) {
		err = security_secid_to_secctx(scm->secid, &secdata, &seclen);

		if (!err) {
			put_cmsg(msg, SOL_SOCKET, SCM_SECURITY, seclen, secdata);
			security_release_secctx(secdata, seclen);
		}
	}
}
#else
static inline void scm_passec(struct socket *sock, struct msghdr *msg, struct scm_cookie *scm)
{ }
#endif /* CONFIG_SECURITY_NETWORK */

static __inline__ void scm_recv(struct socket *sock, struct msghdr *msg,
				struct scm_cookie *scm, int flags)
{
	if (!msg->msg_control)
	{
		if (test_bit(SOCK_PASSCRED, &sock->flags) || scm->fp)
			msg->msg_flags |= MSG_CTRUNC;
		scm_destroy(scm);
		return;
	}

	if (test_bit(SOCK_PASSCRED, &sock->flags))
		put_cmsg(msg, SOL_SOCKET, SCM_CREDENTIALS, sizeof(scm->creds), &scm->creds);

	scm_passec(sock, msg, scm);

	if (!scm->fp)
		return;
	
	scm_detach_fds(msg, scm);
}


#endif /* __LINUX_NET_SCM_H */
Commit	Line	Data
1da177e4 LT	1	#ifndef __LINUX_NET_SCM_H
	2	#define __LINUX_NET_SCM_H
	3
	4	#include <linux/limits.h>
	5	#include <linux/net.h>
dc49c1f9	6	#include <linux/security.h>
b488893a PE	7	#include <linux/pid.h>
b488893a PE	8	#include <linux/nsproxy.h>
1da177e4 LT	9
	10	/* Well, we should have at least one descriptor open
	11	* to accept passed FDs 8)
	12	*/
c09edd6e	13	#define SCM_MAX_FD 255
1da177e4 LT	14
	15	struct scm_fp_list
	16	{
	17	int count;
	18	struct file *fp[SCM_MAX_FD];
	19	};
	20
	21	struct scm_cookie
	22	{
	23	struct ucred creds; /* Skb credentials */
	24	struct scm_fp_list fp; / Passed files */
877ce7c1	25	#ifdef CONFIG_SECURITY_NETWORK
dc49c1f9	26	u32 secid; /* Passed security ID */
877ce7c1	27	#endif
1da177e4 LT	28	unsigned long seq; /* Connection seqno */
	29	};
	30
	31	extern void scm_detach_fds(struct msghdr msg, struct scm_cookie scm);
	32	extern void scm_detach_fds_compat(struct msghdr msg, struct scm_cookie scm);
	33	extern int __scm_send(struct socket sock, struct msghdr msg, struct scm_cookie *scm);
	34	extern void __scm_destroy(struct scm_cookie *scm);
	35	extern struct scm_fp_list * scm_fp_dup(struct scm_fp_list *fpl);
	36
dc49c1f9 CZ	37	#ifdef CONFIG_SECURITY_NETWORK
	38	static __inline__ void unix_get_peersec_dgram(struct socket sock, struct scm_cookie scm)
	39	{
	40	security_socket_getpeersec_dgram(sock, NULL, &scm->secid);
	41	}
	42	#else
	43	static __inline__ void unix_get_peersec_dgram(struct socket sock, struct scm_cookie scm)
	44	{ }
	45	#endif /* CONFIG_SECURITY_NETWORK */
	46
1da177e4 LT	47	static __inline__ void scm_destroy(struct scm_cookie *scm)
	48	{
	49	if (scm && scm->fp)
	50	__scm_destroy(scm);
	51	}
	52
	53	static __inline__ int scm_send(struct socket sock, struct msghdr msg,
	54	struct scm_cookie *scm)
	55	{
1d541ddd BL	56	struct task_struct *p = current;
	57	scm->creds.uid = p->uid;
	58	scm->creds.gid = p->gid;
b488893a	59	scm->creds.pid = task_tgid_vnr(p);
1d541ddd BL	60	scm->fp = NULL;
1d541ddd BL	61	scm->seq = 0;
dc49c1f9	62	unix_get_peersec_dgram(sock, scm);
1da177e4 LT	63	if (msg->msg_controllen <= 0)
	64	return 0;
	65	return __scm_send(sock, msg, scm);
	66	}
	67
877ce7c1 CZ	68	#ifdef CONFIG_SECURITY_NETWORK
	69	static inline void scm_passec(struct socket sock, struct msghdr msg, struct scm_cookie *scm)
	70	{
dc49c1f9 CZ	71	char *secdata;
	72	u32 seclen;
	73	int err;
	74
	75	if (test_bit(SOCK_PASSSEC, &sock->flags)) {
	76	err = security_secid_to_secctx(scm->secid, &secdata, &seclen);
	77
	78	if (!err) {
	79	put_cmsg(msg, SOL_SOCKET, SCM_SECURITY, seclen, secdata);
	80	security_release_secctx(secdata, seclen);
	81	}
	82	}
877ce7c1 CZ	83	}
	84	#else
	85	static inline void scm_passec(struct socket sock, struct msghdr msg, struct scm_cookie *scm)
	86	{ }
	87	#endif /* CONFIG_SECURITY_NETWORK */
	88
1da177e4 LT	89	static __inline__ void scm_recv(struct socket sock, struct msghdr msg,
	90	struct scm_cookie *scm, int flags)
	91	{
	92	if (!msg->msg_control)
	93	{
	94	if (test_bit(SOCK_PASSCRED, &sock->flags) \|\| scm->fp)
	95	msg->msg_flags \|= MSG_CTRUNC;
	96	scm_destroy(scm);
	97	return;
	98	}
	99
	100	if (test_bit(SOCK_PASSCRED, &sock->flags))
	101	put_cmsg(msg, SOL_SOCKET, SCM_CREDENTIALS, sizeof(scm->creds), &scm->creds);
	102
877ce7c1 CZ	103	scm_passec(sock, msg, scm);
877ce7c1 CZ	104
1da177e4 LT	105	if (!scm->fp)
	106	return;
	107
	108	scm_detach_fds(msg, scm);
	109	}
	110
	111
	112	#endif /* __LINUX_NET_SCM_H */
	113