forked from luck/tmp_suning_uos_patched
0617c7ff34
Some programs behave differently depending on argv[0] passed to execve(). TOMOYO has "alias" keyword in order to allow administrators to define different domains if requested pathname passed to execve() is a symlink. But "alias" keyword is incomplete because this keyword assumes that requested pathname and argv[0] are identical. Thus, remove "alias" keyword (by this patch) and add syntax for checking argv[0] (by future patches). Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: James Morris <jmorris@namei.org>
182 lines
4.2 KiB
C
182 lines
4.2 KiB
C
/*
|
|
* security/tomoyo/realpath.c
|
|
*
|
|
* Pathname calculation functions for TOMOYO.
|
|
*
|
|
* Copyright (C) 2005-2010 NTT DATA CORPORATION
|
|
*/
|
|
|
|
#include <linux/types.h>
|
|
#include <linux/mount.h>
|
|
#include <linux/mnt_namespace.h>
|
|
#include <linux/fs_struct.h>
|
|
#include <linux/magic.h>
|
|
#include <linux/slab.h>
|
|
#include <net/sock.h>
|
|
#include "common.h"
|
|
|
|
/**
|
|
* tomoyo_encode: Convert binary string to ascii string.
|
|
*
|
|
* @str: String in binary format.
|
|
*
|
|
* Returns pointer to @str in ascii format on success, NULL otherwise.
|
|
*
|
|
* This function uses kzalloc(), so caller must kfree() if this function
|
|
* didn't return NULL.
|
|
*/
|
|
char *tomoyo_encode(const char *str)
|
|
{
|
|
int len = 0;
|
|
const char *p = str;
|
|
char *cp;
|
|
char *cp0;
|
|
|
|
if (!p)
|
|
return NULL;
|
|
while (*p) {
|
|
const unsigned char c = *p++;
|
|
if (c == '\\')
|
|
len += 2;
|
|
else if (c > ' ' && c < 127)
|
|
len++;
|
|
else
|
|
len += 4;
|
|
}
|
|
len++;
|
|
/* Reserve space for appending "/". */
|
|
cp = kzalloc(len + 10, GFP_NOFS);
|
|
if (!cp)
|
|
return NULL;
|
|
cp0 = cp;
|
|
p = str;
|
|
while (*p) {
|
|
const unsigned char c = *p++;
|
|
|
|
if (c == '\\') {
|
|
*cp++ = '\\';
|
|
*cp++ = '\\';
|
|
} else if (c > ' ' && c < 127) {
|
|
*cp++ = c;
|
|
} else {
|
|
*cp++ = '\\';
|
|
*cp++ = (c >> 6) + '0';
|
|
*cp++ = ((c >> 3) & 7) + '0';
|
|
*cp++ = (c & 7) + '0';
|
|
}
|
|
}
|
|
return cp0;
|
|
}
|
|
|
|
/**
|
|
* tomoyo_realpath_from_path - Returns realpath(3) of the given pathname but ignores chroot'ed root.
|
|
*
|
|
* @path: Pointer to "struct path".
|
|
*
|
|
* Returns the realpath of the given @path on success, NULL otherwise.
|
|
*
|
|
* If dentry is a directory, trailing '/' is appended.
|
|
* Characters out of 0x20 < c < 0x7F range are converted to
|
|
* \ooo style octal string.
|
|
* Character \ is converted to \\ string.
|
|
*
|
|
* These functions use kzalloc(), so the caller must call kfree()
|
|
* if these functions didn't return NULL.
|
|
*/
|
|
char *tomoyo_realpath_from_path(struct path *path)
|
|
{
|
|
char *buf = NULL;
|
|
char *name = NULL;
|
|
unsigned int buf_len = PAGE_SIZE / 2;
|
|
struct dentry *dentry = path->dentry;
|
|
bool is_dir;
|
|
if (!dentry)
|
|
return NULL;
|
|
is_dir = dentry->d_inode && S_ISDIR(dentry->d_inode->i_mode);
|
|
while (1) {
|
|
struct path ns_root = { .mnt = NULL, .dentry = NULL };
|
|
char *pos;
|
|
buf_len <<= 1;
|
|
kfree(buf);
|
|
buf = kmalloc(buf_len, GFP_NOFS);
|
|
if (!buf)
|
|
break;
|
|
/* Get better name for socket. */
|
|
if (dentry->d_sb && dentry->d_sb->s_magic == SOCKFS_MAGIC) {
|
|
struct inode *inode = dentry->d_inode;
|
|
struct socket *sock = inode ? SOCKET_I(inode) : NULL;
|
|
struct sock *sk = sock ? sock->sk : NULL;
|
|
if (sk) {
|
|
snprintf(buf, buf_len - 1, "socket:[family=%u:"
|
|
"type=%u:protocol=%u]", sk->sk_family,
|
|
sk->sk_type, sk->sk_protocol);
|
|
} else {
|
|
snprintf(buf, buf_len - 1, "socket:[unknown]");
|
|
}
|
|
name = tomoyo_encode(buf);
|
|
break;
|
|
}
|
|
/* For "socket:[\$]" and "pipe:[\$]". */
|
|
if (dentry->d_op && dentry->d_op->d_dname) {
|
|
pos = dentry->d_op->d_dname(dentry, buf, buf_len - 1);
|
|
if (IS_ERR(pos))
|
|
continue;
|
|
name = tomoyo_encode(pos);
|
|
break;
|
|
}
|
|
/* If we don't have a vfsmount, we can't calculate. */
|
|
if (!path->mnt)
|
|
break;
|
|
spin_lock(&dcache_lock);
|
|
/* go to whatever namespace root we are under */
|
|
pos = __d_path(path, &ns_root, buf, buf_len);
|
|
spin_unlock(&dcache_lock);
|
|
/* Prepend "/proc" prefix if using internal proc vfs mount. */
|
|
if (!IS_ERR(pos) && (path->mnt->mnt_flags & MNT_INTERNAL) &&
|
|
(path->mnt->mnt_sb->s_magic == PROC_SUPER_MAGIC)) {
|
|
pos -= 5;
|
|
if (pos >= buf)
|
|
memcpy(pos, "/proc", 5);
|
|
else
|
|
pos = ERR_PTR(-ENOMEM);
|
|
}
|
|
if (IS_ERR(pos))
|
|
continue;
|
|
name = tomoyo_encode(pos);
|
|
break;
|
|
}
|
|
kfree(buf);
|
|
if (!name)
|
|
tomoyo_warn_oom(__func__);
|
|
else if (is_dir && *name) {
|
|
/* Append trailing '/' if dentry is a directory. */
|
|
char *pos = name + strlen(name) - 1;
|
|
if (*pos != '/')
|
|
/*
|
|
* This is OK because tomoyo_encode() reserves space
|
|
* for appending "/".
|
|
*/
|
|
*++pos = '/';
|
|
}
|
|
return name;
|
|
}
|
|
|
|
/**
|
|
* tomoyo_realpath_nofollow - Get realpath of a pathname.
|
|
*
|
|
* @pathname: The pathname to solve.
|
|
*
|
|
* Returns the realpath of @pathname on success, NULL otherwise.
|
|
*/
|
|
char *tomoyo_realpath_nofollow(const char *pathname)
|
|
{
|
|
struct path path;
|
|
|
|
if (pathname && kern_path(pathname, 0, &path) == 0) {
|
|
char *buf = tomoyo_realpath_from_path(&path);
|
|
path_put(&path);
|
|
return buf;
|
|
}
|
|
return NULL;
|
|
}
|