/* * Copyright (C) 2013-2015 Kay Sievers * Copyright (C) 2013-2015 Daniel Mack * * kdbus is free software; you can redistribute it and/or modify it under * the terms of the GNU Lesser General Public License as published by the * Free Software Foundation; either version 2.1 of the License, or (at * your option) any later version. */ #pragma once #define BIT(X) (1 << (X)) #include #include #include #define _STRINGIFY(x) #x #define STRINGIFY(x) _STRINGIFY(x) #define ELEMENTSOF(x) (sizeof(x)/sizeof((x)[0])) #define KDBUS_PTR(addr) ((void *)(uintptr_t)(addr)) #define KDBUS_ALIGN8(l) (((l) + 7) & ~7) #define KDBUS_ITEM_HEADER_SIZE offsetof(struct kdbus_item, data) #define KDBUS_ITEM_SIZE(s) KDBUS_ALIGN8((s) + KDBUS_ITEM_HEADER_SIZE) #define KDBUS_ITEM_NEXT(item) \ (typeof(item))((uint8_t *)(item) + KDBUS_ALIGN8((item)->size)) #define KDBUS_ITEM_FOREACH(item, head, first) \ for ((item) = (head)->first; \ ((uint8_t *)(item) < (uint8_t *)(head) + (head)->size) && \ ((uint8_t *)(item) >= (uint8_t *)(head)); \ (item) = KDBUS_ITEM_NEXT(item)) #define KDBUS_FOREACH(iter, first, _size) \ for ((iter) = (first); \ ((uint8_t *)(iter) < (uint8_t *)(first) + (_size)) && \ ((uint8_t *)(iter) >= (uint8_t *)(first)); \ (iter) = (void *)((uint8_t *)(iter) + KDBUS_ALIGN8((iter)->size))) #define _KDBUS_ATTACH_BITS_SET_NR (__builtin_popcountll(_KDBUS_ATTACH_ALL)) /* Sum of KDBUS_ITEM_* that reflects _KDBUS_ATTACH_ALL */ #define KDBUS_ATTACH_ITEMS_TYPE_SUM \ ((((_KDBUS_ATTACH_BITS_SET_NR - 1) * \ ((_KDBUS_ATTACH_BITS_SET_NR - 1) + 1)) / 2) + \ (_KDBUS_ITEM_ATTACH_BASE * _KDBUS_ATTACH_BITS_SET_NR)) #define POOL_SIZE (16 * 1024LU * 1024LU) #define UNPRIV_UID 65534 #define UNPRIV_GID 65534 /* Dump as user of process, useful for user namespace testing */ #define SUID_DUMP_USER 1 extern int kdbus_util_verbose; #define kdbus_printf(X...) \ if (kdbus_util_verbose) \ printf(X) #define RUN_UNPRIVILEGED(child_uid, child_gid, _child_, _parent_) ({ \ pid_t pid, rpid; \ int ret; \ \ pid = fork(); \ if (pid == 0) { \ ret = drop_privileges(child_uid, child_gid); \ ASSERT_EXIT_VAL(ret == 0, ret); \ \ _child_; \ _exit(0); \ } else if (pid > 0) { \ _parent_; \ rpid = waitpid(pid, &ret, 0); \ ASSERT_RETURN(rpid == pid); \ ASSERT_RETURN(WIFEXITED(ret)); \ ASSERT_RETURN(WEXITSTATUS(ret) == 0); \ ret = TEST_OK; \ } else { \ ret = pid; \ } \ \ ret; \ }) #define RUN_UNPRIVILEGED_CONN(_var_, _bus_, _code_) \ RUN_UNPRIVILEGED(UNPRIV_UID, UNPRIV_GID, ({ \ struct kdbus_conn *_var_; \ _var_ = kdbus_hello(_bus_, 0, NULL, 0); \ ASSERT_EXIT(_var_); \ _code_; \ kdbus_conn_free(_var_); \ }), ({ 0; })) #define RUN_CLONE_CHILD(clone_ret, flags, _setup_, _child_body_, \ _parent_setup_, _parent_body_) ({ \ pid_t pid, rpid; \ int ret; \ int efd = -1; \ \ _setup_; \ efd = eventfd(0, EFD_CLOEXEC); \ ASSERT_RETURN(efd >= 0); \ *(clone_ret) = 0; \ pid = syscall(__NR_clone, flags, NULL); \ if (pid == 0) { \ eventfd_t event_status = 0; \ ret = prctl(PR_SET_PDEATHSIG, SIGKILL); \ ASSERT_EXIT(ret == 0); \ ret = eventfd_read(efd, &event_status); \ if (ret < 0 || event_status != 1) { \ kdbus_printf("error eventfd_read()\n"); \ _exit(EXIT_FAILURE); \ } \ _child_body_; \ _exit(0); \ } else if (pid > 0) { \ _parent_setup_; \ ret = eventfd_write(efd, 1); \ ASSERT_RETURN(ret >= 0); \ _parent_body_; \ rpid = waitpid(pid, &ret, 0); \ ASSERT_RETURN(rpid == pid); \ ASSERT_RETURN(WIFEXITED(ret)); \ ASSERT_RETURN(WEXITSTATUS(ret) == 0); \ ret = TEST_OK; \ } else { \ ret = -errno; \ *(clone_ret) = -errno; \ } \ close(efd); \ ret; \ }) /* Enums for parent if it should drop privs or not */ enum kdbus_drop_parent { DO_NOT_DROP, DROP_SAME_UNPRIV, DROP_OTHER_UNPRIV, }; struct kdbus_conn { int fd; uint64_t id; unsigned char *buf; }; int kdbus_sysfs_get_parameter_mask(const char *path, uint64_t *mask); int kdbus_sysfs_set_parameter_mask(const char *path, uint64_t mask); int sys_memfd_create(const char *name, __u64 size); int sys_memfd_seal_set(int fd); off_t sys_memfd_get_size(int fd, off_t *size); int kdbus_list(struct kdbus_conn *conn, uint64_t flags); int kdbus_name_release(struct kdbus_conn *conn, const char *name); int kdbus_name_acquire(struct kdbus_conn *conn, const char *name, uint64_t *flags); void kdbus_msg_free(struct kdbus_msg *msg); int kdbus_msg_recv(struct kdbus_conn *conn, struct kdbus_msg **msg, uint64_t *offset); int kdbus_msg_recv_poll(struct kdbus_conn *conn, int timeout_ms, struct kdbus_msg **msg_out, uint64_t *offset); int kdbus_free(const struct kdbus_conn *conn, uint64_t offset); int kdbus_msg_dump(const struct kdbus_conn *conn, const struct kdbus_msg *msg); int kdbus_create_bus(int control_fd, const char *name, uint64_t owner_meta, char **path); int kdbus_msg_send(const struct kdbus_conn *conn, const char *name, uint64_t cookie, uint64_t flags, uint64_t timeout, int64_t priority, uint64_t dst_id); int kdbus_msg_send_sync(const struct kdbus_conn *conn, const char *name, uint64_t cookie, uint64_t flags, uint64_t timeout, int64_t priority, uint64_t dst_id, int cancel_fd); int kdbus_msg_send_reply(const struct kdbus_conn *conn, uint64_t reply_cookie, uint64_t dst_id); struct kdbus_conn *kdbus_hello(const char *path, uint64_t hello_flags, const struct kdbus_item *item, size_t item_size); struct kdbus_conn *kdbus_hello_registrar(const char *path, const char *name, const struct kdbus_policy_access *access, size_t num_access, uint64_t flags); struct kdbus_conn *kdbus_hello_activator(const char *path, const char *name, const struct kdbus_policy_access *access, size_t num_access); bool kdbus_item_in_message(struct kdbus_msg *msg, uint64_t type); int kdbus_bus_creator_info(struct kdbus_conn *conn, uint64_t flags, uint64_t *offset); int kdbus_conn_info(struct kdbus_conn *conn, uint64_t id, const char *name, uint64_t flags, uint64_t *offset); void kdbus_conn_free(struct kdbus_conn *conn); int kdbus_conn_update_attach_flags(struct kdbus_conn *conn, uint64_t attach_flags_send, uint64_t attach_flags_recv); int kdbus_conn_update_policy(struct kdbus_conn *conn, const char *name, const struct kdbus_policy_access *access, size_t num_access); int kdbus_add_match_id(struct kdbus_conn *conn, uint64_t cookie, uint64_t type, uint64_t id); int kdbus_add_match_empty(struct kdbus_conn *conn); int all_uids_gids_are_mapped(void); int drop_privileges(uid_t uid, gid_t gid); uint64_t now(clockid_t clock); char *unique_name(const char *prefix); int userns_map_uid_gid(pid_t pid, const char *map_uid, const char *map_gid); int test_is_capable(int cap, ...); int config_user_ns_is_enabled(void); int config_auditsyscall_is_enabled(void); int config_cgroups_is_enabled(void); int config_security_is_enabled(void);