1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
|
/* $OpenBSD: systrace.h,v 1.25 2015/01/20 01:48:13 deraadt Exp $ */
/*
* Copyright 2002 Niels Provos <provos@citi.umich.edu>
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
* must display the following acknowledgement:
* This product includes software developed by Niels Provos.
* 4. The name of the author may not be used to endorse or promote products
* derived from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#ifndef _SYSTRACE_H_
#define _SYSTRACE_H_
#include <sys/syslimits.h>
#include <sys/ioccom.h>
#include <sys/rwlock.h>
#define SYSTR_EMULEN 8 /* sync with sys proc */
struct str_msg_emul {
char emul[SYSTR_EMULEN];
};
struct str_msg_ugid {
uid_t uid;
gid_t gid;
};
struct str_msg_execve {
char path[PATH_MAX];
};
#define SYSTR_MAX_POLICIES 64
#define SYSTR_MAXARGS 64
#define SYSTR_MAXFNAME 8
#define SYSTR_MAXINJECTS 8
#define SYSTR_MAXREPLEN 2048
struct str_msg_ask {
int code;
int argsize;
register_t args[SYSTR_MAXARGS];
register_t rval[2];
int result;
};
/* Queued on fork or exit of a process */
struct str_msg_child {
pid_t new_pid;
};
#define SYSTR_MSG_ASK 1
#define SYSTR_MSG_RES 2
#define SYSTR_MSG_EMUL 3
#define SYSTR_MSG_CHILD 4
#define SYSTR_MSG_UGID 5
#define SYSTR_MSG_POLICYFREE 6
#define SYSTR_MSG_EXECVE 7
#define SYSTR_MSG_NOPROCESS(x) \
((x)->msg.msg_type == SYSTR_MSG_CHILD || \
(x)->msg.msg_type == SYSTR_MSG_POLICYFREE)
struct str_message {
int msg_type;
pid_t msg_pid;
u_int16_t msg_seqnr; /* answer has to match seqnr */
short msg_policy;
union {
struct str_msg_emul msg_emul;
struct str_msg_ugid msg_ugid;
struct str_msg_ask msg_ask;
struct str_msg_child msg_child;
struct str_msg_execve msg_execve;
} msg_data;
};
struct systrace_answer {
pid_t stra_pid;
u_int16_t stra_seqnr;
short reserved;
uid_t stra_seteuid; /* elevated privileges for system call */
uid_t stra_setegid;
int stra_policy;
int stra_error;
int stra_flags;
};
struct systrace_scriptname {
pid_t sn_pid;
char sn_scriptname[PATH_MAX];
};
#define SYSTR_READ 1
#define SYSTR_WRITE 2
struct systrace_io {
pid_t strio_pid;
int strio_op;
void *strio_offs;
void *strio_addr;
size_t strio_len;
};
#define SYSTR_POLICY_NEW 1
#define SYSTR_POLICY_ASSIGN 2
#define SYSTR_POLICY_MODIFY 3
struct systrace_policy {
int strp_op;
int strp_num;
union {
struct {
short code;
short policy;
} assign;
pid_t pid;
int maxents;
} strp_data;
};
#define strp_pid strp_data.pid
#define strp_maxents strp_data.maxents
#define strp_code strp_data.assign.code
#define strp_policy strp_data.assign.policy
#define SYSTR_NOLINKS 1
struct systrace_replace {
pid_t strr_pid;
u_int16_t strr_seqnr;
int16_t reserved;
int strr_nrepl;
caddr_t strr_base; /* Base memory */
size_t strr_len; /* Length of memory */
int strr_argind[SYSTR_MAXARGS];
size_t strr_off[SYSTR_MAXARGS];
size_t strr_offlen[SYSTR_MAXARGS];
int32_t strr_flags[SYSTR_MAXARGS];
};
struct systrace_inject {
/* On return, this contains the stackgap address. */
caddr_t stri_addr;
size_t stri_len;
pid_t stri_pid;
};
struct systrace_getcwd {
pid_t strgd_pid;
int strgd_atfd;
};
#define STRIOCCLONE _IOR('s', 100, int)
#define SYSTR_CLONE STRIOCCLONE
#define STRIOCATTACH _IOW('s', 101, pid_t)
#define STRIOCDETACH _IOW('s', 102, pid_t)
#define STRIOCANSWER _IOW('s', 103, struct systrace_answer)
#define STRIOCIO _IOWR('s', 104, struct systrace_io)
#define STRIOCPOLICY _IOWR('s', 105, struct systrace_policy)
#define STRIOCGETCWD _IOW('s', 106, struct systrace_getcwd)
#define STRIOCRESCWD _IO('s', 107)
#define STRIOCREPORT _IOW('s', 108, pid_t)
#define STRIOCREPLACE _IOW('s', 109, struct systrace_replace)
#define STRIOCSCRIPTNAME _IOW('s', 110, struct systrace_scriptname)
#define STRIOCINJECT _IOWR('s', 111, struct systrace_inject)
#define SYSTR_POLICY_ASK 0
#define SYSTR_POLICY_PERMIT 1
#define SYSTR_POLICY_NEVER 2
#define SYSTR_POLICY_KILL 3
#define SYSTR_FLAGS_RESULT 0x001
#define SYSTR_FLAGS_SETEUID 0x002
#define SYSTR_FLAGS_SETEGID 0x004
#ifdef _KERNEL
#include <sys/namei.h>
struct str_process;
struct fsystrace {
struct rwlock lock;
struct selinfo si;
TAILQ_HEAD(strprocessq, str_process) processes;
int nprocesses;
TAILQ_HEAD(strpolicyq, str_policy) policies;
struct strprocessq messages;
int npolicynr;
int npolicies;
int issuser;
uid_t p_ruid;
gid_t p_rgid;
/* cwd magic */
pid_t fd_pid;
struct vnode *fd_cdir;
struct vnode *fd_rdir;
};
/* Internal prototypes */
void systrace_namei(struct nameidata *);
int systrace_redirect(int, struct proc *, void *, register_t *);
void systrace_exit(struct proc *);
struct str_process *systrace_getproc(void);
void systrace_freeproc(struct str_process *);
void systrace_fork(struct proc *, struct proc *, struct str_process *newstrp);
void systrace_execve0(struct proc *);
void systrace_execve1(char *, struct proc *);
int systrace_scriptname(struct proc *, char *);
#endif /* _KERNEL */
#endif /* _SYSTRACE_H_ */
|
