Blame view

kernel/kmod.c 14.4 KB
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
  /*
  	kmod, the new module loader (replaces kerneld)
  	Kirk Petersen
  
  	Reorganized not to be a daemon by Adam Richter, with guidance
  	from Greg Zornetzer.
  
  	Modified to avoid chroot and file sharing problems.
  	Mikael Pettersson
  
  	Limit the concurrent number of kmod modprobes to catch loops from
  	"modprobe needs a service that is in a module".
  	Keith Owens <kaos@ocs.com.au> December 1999
  
  	Unblock all signals when we exec a usermode process.
  	Shuu Yamaguchi <shuu@wondernetworkresources.com> December 2000
  
  	call_usermodehelper wait flag, and remove exec_usermodehelper.
  	Rusty Russell <rusty@rustcorp.com.au>  Jan 2003
  */
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
21
22
23
24
25
  #include <linux/module.h>
  #include <linux/sched.h>
  #include <linux/syscalls.h>
  #include <linux/unistd.h>
  #include <linux/kmod.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
26
  #include <linux/slab.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
27
  #include <linux/completion.h>
17f60a7da   Eric Paris   capabilites: allo...
28
  #include <linux/cred.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
29
  #include <linux/file.h>
9f3acc314   Al Viro   [PATCH] split lin...
30
  #include <linux/fdtable.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
31
32
33
34
35
  #include <linux/workqueue.h>
  #include <linux/security.h>
  #include <linux/mount.h>
  #include <linux/kernel.h>
  #include <linux/init.h>
d025c9db7   Andi Kleen   [PATCH] Support p...
36
  #include <linux/resource.h>
8cdd4936c   Rafael J. Wysocki   PM: disable userm...
37
38
  #include <linux/notifier.h>
  #include <linux/suspend.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
39
  #include <asm/uaccess.h>
7ead8b831   Li Zefan   tracing/events: A...
40
  #include <trace/events/module.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
41
42
43
  extern int max_threads;
  
  static struct workqueue_struct *khelper_wq;
17f60a7da   Eric Paris   capabilites: allo...
44
45
46
47
48
49
  #define CAP_BSET	(void *)1
  #define CAP_PI		(void *)2
  
  static kernel_cap_t usermodehelper_bset = CAP_FULL_SET;
  static kernel_cap_t usermodehelper_inheritable = CAP_FULL_SET;
  static DEFINE_SPINLOCK(umh_sysctl_lock);
a1ef5adb4   Johannes Berg   remove CONFIG_KMO...
50
  #ifdef CONFIG_MODULES
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
51
52
53
54
55
56
57
  
  /*
  	modprobe_path is set via /proc/sys.
  */
  char modprobe_path[KMOD_PATH_LEN] = "/sbin/modprobe";
  
  /**
acae05156   Arjan van de Ven   module: create a ...
58
59
   * __request_module - try to load a kernel module
   * @wait: wait (or not) for the operation to complete
bd4207c90   Randy Dunlap   kmod: fix varargs...
60
61
   * @fmt: printf style format string for the name of the module
   * @...: arguments as specified in the format string
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
62
63
64
65
66
67
68
69
70
71
   *
   * Load a module using the user mode module loader. The function returns
   * zero on success or a negative errno code on failure. Note that a
   * successful module load does not mean the module did not then unload
   * and exit on an error of its own. Callers must check that the service
   * they requested is now available not blindly invoke it.
   *
   * If module auto-loading support is disabled then this function
   * becomes a no-operation.
   */
acae05156   Arjan van de Ven   module: create a ...
72
  int __request_module(bool wait, const char *fmt, ...)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
  {
  	va_list args;
  	char module_name[MODULE_NAME_LEN];
  	unsigned int max_modprobes;
  	int ret;
  	char *argv[] = { modprobe_path, "-q", "--", module_name, NULL };
  	static char *envp[] = { "HOME=/",
  				"TERM=linux",
  				"PATH=/sbin:/usr/sbin:/bin:/usr/bin",
  				NULL };
  	static atomic_t kmod_concurrent = ATOMIC_INIT(0);
  #define MAX_KMOD_CONCURRENT 50	/* Completely arbitrary value - KAO */
  	static int kmod_loop_msg;
  
  	va_start(args, fmt);
  	ret = vsnprintf(module_name, MODULE_NAME_LEN, fmt, args);
  	va_end(args);
  	if (ret >= MODULE_NAME_LEN)
  		return -ENAMETOOLONG;
dd8dbf2e6   Eric Paris   security: report ...
92
93
94
  	ret = security_kernel_module_request(module_name);
  	if (ret)
  		return ret;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
  	/* If modprobe needs a service that is in a module, we get a recursive
  	 * loop.  Limit the number of running kmod threads to max_threads/2 or
  	 * MAX_KMOD_CONCURRENT, whichever is the smaller.  A cleaner method
  	 * would be to run the parents of this process, counting how many times
  	 * kmod was invoked.  That would mean accessing the internals of the
  	 * process tables to get the command line, proc_pid_cmdline is static
  	 * and it is not worth changing the proc code just to handle this case. 
  	 * KAO.
  	 *
  	 * "trace the ppid" is simple, but will fail if someone's
  	 * parent exits.  I think this is as good as it gets. --RR
  	 */
  	max_modprobes = min(max_threads/2, MAX_KMOD_CONCURRENT);
  	atomic_inc(&kmod_concurrent);
  	if (atomic_read(&kmod_concurrent) > max_modprobes) {
  		/* We may be blaming an innocent here, but unlikely */
37252db6a   Jiri Kosina   kmod: prevent kmo...
111
  		if (kmod_loop_msg < 5) {
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
112
113
114
115
  			printk(KERN_ERR
  			       "request_module: runaway loop modprobe %s
  ",
  			       module_name);
37252db6a   Jiri Kosina   kmod: prevent kmo...
116
117
  			kmod_loop_msg++;
  		}
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
118
119
120
  		atomic_dec(&kmod_concurrent);
  		return -ENOMEM;
  	}
7ead8b831   Li Zefan   tracing/events: A...
121
  	trace_module_request(module_name, wait, _RET_IP_);
a06a4dc3a   Neil Horman   kmod: add init fu...
122
123
124
  	ret = call_usermodehelper_fns(modprobe_path, argv, envp,
  			wait ? UMH_WAIT_PROC : UMH_WAIT_EXEC,
  			NULL, NULL, NULL);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
125
126
127
  	atomic_dec(&kmod_concurrent);
  	return ret;
  }
acae05156   Arjan van de Ven   module: create a ...
128
  EXPORT_SYMBOL(__request_module);
118a9069f   Rusty Russell   module: remove CO...
129
  #endif /* CONFIG_MODULES */
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
130

1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
131
132
133
134
135
136
  /*
   * This is the task which runs the usermode application
   */
  static int ____call_usermodehelper(void *data)
  {
  	struct subprocess_info *sub_info = data;
17f60a7da   Eric Paris   capabilites: allo...
137
  	struct cred *new;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
138
  	int retval;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
139
140
  	spin_lock_irq(&current->sighand->siglock);
  	flush_signal_handlers(current, 1);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
141
142
143
  	spin_unlock_irq(&current->sighand->siglock);
  
  	/* We can run anywhere, unlike our parent keventd(). */
1a2142afa   Rusty Russell   cpumask: remove d...
144
  	set_cpus_allowed_ptr(current, cpu_all_mask);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
145

b73a7e76c   Jan Engelhardt   Fix kevent's chil...
146
147
148
149
150
  	/*
  	 * Our parent is keventd, which runs with elevated scheduling priority.
  	 * Avoid propagating that into the userspace child.
  	 */
  	set_user_nice(current, 0);
17f60a7da   Eric Paris   capabilites: allo...
151
152
153
154
155
156
157
158
159
160
  	retval = -ENOMEM;
  	new = prepare_kernel_cred(current);
  	if (!new)
  		goto fail;
  
  	spin_lock(&umh_sysctl_lock);
  	new->cap_bset = cap_intersect(usermodehelper_bset, new->cap_bset);
  	new->cap_inheritable = cap_intersect(usermodehelper_inheritable,
  					     new->cap_inheritable);
  	spin_unlock(&umh_sysctl_lock);
879669961   David Howells   KEYS/DNS: Fix ___...
161
162
163
164
165
166
167
  	if (sub_info->init) {
  		retval = sub_info->init(sub_info, new);
  		if (retval) {
  			abort_creds(new);
  			goto fail;
  		}
  	}
17f60a7da   Eric Paris   capabilites: allo...
168
  	commit_creds(new);
d7627467b   David Howells   Make do_execve() ...
169
170
171
  	retval = kernel_execve(sub_info->path,
  			       (const char *const *)sub_info->argv,
  			       (const char *const *)sub_info->envp);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
172
173
  
  	/* Exec failed? */
a06a4dc3a   Neil Horman   kmod: add init fu...
174
  fail:
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
175
176
177
  	sub_info->retval = retval;
  	do_exit(0);
  }
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
178
179
180
  void call_usermodehelper_freeinfo(struct subprocess_info *info)
  {
  	if (info->cleanup)
a06a4dc3a   Neil Horman   kmod: add init fu...
181
  		(*info->cleanup)(info);
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
182
183
184
  	kfree(info);
  }
  EXPORT_SYMBOL(call_usermodehelper_freeinfo);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
185
186
187
188
189
  /* Keventd can't block, but this (a child) can. */
  static int wait_for_helper(void *data)
  {
  	struct subprocess_info *sub_info = data;
  	pid_t pid;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
190

7d6422421   Oleg Nesterov   wait_for_helper: ...
191
192
193
194
  	/* If SIGCLD is ignored sys_wait4 won't populate the status. */
  	spin_lock_irq(&current->sighand->siglock);
  	current->sighand->action[SIGCHLD-1].sa.sa_handler = SIG_DFL;
  	spin_unlock_irq(&current->sighand->siglock);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
195
196
197
198
199
  
  	pid = kernel_thread(____call_usermodehelper, sub_info, SIGCHLD);
  	if (pid < 0) {
  		sub_info->retval = pid;
  	} else {
7d6422421   Oleg Nesterov   wait_for_helper: ...
200
  		int ret = -ECHILD;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
201
202
203
204
205
206
207
208
209
  		/*
  		 * Normally it is bogus to call wait4() from in-kernel because
  		 * wait4() wants to write the exit code to a userspace address.
  		 * But wait_for_helper() always runs as keventd, and put_user()
  		 * to a kernel address works OK for kernel threads, due to their
  		 * having an mm_segment_t which spans the entire address space.
  		 *
  		 * Thus the __user pointer cast is valid here.
  		 */
111dbe0c8   Björn Steinbrink   [PATCH] Fix ____c...
210
211
212
213
214
215
216
217
218
  		sys_wait4(pid, (int __user *)&ret, 0, NULL);
  
  		/*
  		 * If ret is 0, either ____call_usermodehelper failed and the
  		 * real error code is already in sub_info->retval or
  		 * sub_info->retval is 0 anyway, so don't mess with it then.
  		 */
  		if (ret)
  			sub_info->retval = ret;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
219
  	}
d47419cd9   Oleg Nesterov   call_usermodehelp...
220
  	complete(sub_info->complete);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
221
222
223
224
  	return 0;
  }
  
  /* This is run by khelper thread  */
65f27f384   David Howells   WorkStruct: Pass ...
225
  static void __call_usermodehelper(struct work_struct *work)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
226
  {
65f27f384   David Howells   WorkStruct: Pass ...
227
228
  	struct subprocess_info *sub_info =
  		container_of(work, struct subprocess_info, work);
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
229
  	enum umh_wait wait = sub_info->wait;
d47419cd9   Oleg Nesterov   call_usermodehelp...
230
  	pid_t pid;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
231
232
233
234
  
  	/* CLONE_VFORK: wait until the usermode helper has execve'd
  	 * successfully We need the data structures to stay around
  	 * until that is done.  */
d47419cd9   Oleg Nesterov   call_usermodehelp...
235
  	if (wait == UMH_WAIT_PROC)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
236
237
238
239
240
  		pid = kernel_thread(wait_for_helper, sub_info,
  				    CLONE_FS | CLONE_FILES | SIGCHLD);
  	else
  		pid = kernel_thread(____call_usermodehelper, sub_info,
  				    CLONE_VFORK | SIGCHLD);
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
241
242
  	switch (wait) {
  	case UMH_NO_WAIT:
d47419cd9   Oleg Nesterov   call_usermodehelp...
243
  		call_usermodehelper_freeinfo(sub_info);
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
244
  		break;
a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
245

86313c488   Jeremy Fitzhardinge   usermodehelper: T...
246
247
248
  	case UMH_WAIT_PROC:
  		if (pid > 0)
  			break;
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
249
  		/* FALLTHROUGH */
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
250
  	case UMH_WAIT_EXEC:
04b1c384f   Oleg Nesterov   call_usermodehelp...
251
252
  		if (pid < 0)
  			sub_info->retval = pid;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
253
  		complete(sub_info->complete);
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
254
  	}
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
255
  }
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
256
257
258
259
260
  /*
   * If set, call_usermodehelper_exec() will exit immediately returning -EBUSY
   * (used for preventing user land processes from being created after the user
   * land has been frozen during a system-wide hibernation or suspend operation).
   */
288d5abec   Linus Torvalds   Boot up with user...
261
  static int usermodehelper_disabled = 1;
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
  
  /* Number of helpers running */
  static atomic_t running_helpers = ATOMIC_INIT(0);
  
  /*
   * Wait queue head used by usermodehelper_pm_callback() to wait for all running
   * helpers to finish.
   */
  static DECLARE_WAIT_QUEUE_HEAD(running_helpers_waitq);
  
  /*
   * Time to wait for running_helpers to become zero before the setting of
   * usermodehelper_disabled in usermodehelper_pm_callback() fails
   */
  #define RUNNING_HELPERS_TIMEOUT	(5 * HZ)
1bfcf1304   Rafael J. Wysocki   pm: rework disabl...
277
278
279
280
  /**
   * usermodehelper_disable - prevent new helpers from being started
   */
  int usermodehelper_disable(void)
8cdd4936c   Rafael J. Wysocki   PM: disable userm...
281
  {
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
282
  	long retval;
1bfcf1304   Rafael J. Wysocki   pm: rework disabl...
283
284
285
286
287
288
289
290
291
  	usermodehelper_disabled = 1;
  	smp_mb();
  	/*
  	 * From now on call_usermodehelper_exec() won't start any new
  	 * helpers, so it is sufficient if running_helpers turns out to
  	 * be zero at one point (it may be increased later, but that
  	 * doesn't matter).
  	 */
  	retval = wait_event_timeout(running_helpers_waitq,
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
292
293
  					atomic_read(&running_helpers) == 0,
  					RUNNING_HELPERS_TIMEOUT);
1bfcf1304   Rafael J. Wysocki   pm: rework disabl...
294
295
  	if (retval)
  		return 0;
8cdd4936c   Rafael J. Wysocki   PM: disable userm...
296

1bfcf1304   Rafael J. Wysocki   pm: rework disabl...
297
298
299
300
301
302
303
304
305
306
  	usermodehelper_disabled = 0;
  	return -EAGAIN;
  }
  
  /**
   * usermodehelper_enable - allow new helpers to be started again
   */
  void usermodehelper_enable(void)
  {
  	usermodehelper_disabled = 0;
8cdd4936c   Rafael J. Wysocki   PM: disable userm...
307
  }
a144c6a6c   Rafael J. Wysocki   PM: Print a warni...
308
309
310
311
312
313
314
315
  /**
   * usermodehelper_is_disabled - check if new helpers are allowed to be started
   */
  bool usermodehelper_is_disabled(void)
  {
  	return usermodehelper_disabled;
  }
  EXPORT_SYMBOL_GPL(usermodehelper_is_disabled);
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
316
317
318
319
320
321
322
323
324
325
326
  static void helper_lock(void)
  {
  	atomic_inc(&running_helpers);
  	smp_mb__after_atomic_inc();
  }
  
  static void helper_unlock(void)
  {
  	if (atomic_dec_and_test(&running_helpers))
  		wake_up(&running_helpers_waitq);
  }
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
327

1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
328
  /**
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
329
   * call_usermodehelper_setup - prepare to call a usermode helper
61df47c8d   Randy Dunlap   kernel-doc fix fo...
330
331
332
   * @path: path to usermode executable
   * @argv: arg vector for process
   * @envp: environment for process
ac331d158   KOSAKI Motohiro   call_usermodehelp...
333
   * @gfp_mask: gfp mask for memory allocation
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
334
   *
61df47c8d   Randy Dunlap   kernel-doc fix fo...
335
   * Returns either %NULL on allocation failure, or a subprocess_info
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
336
337
338
   * structure.  This should be passed to call_usermodehelper_exec to
   * exec the process and free the structure.
   */
ac331d158   KOSAKI Motohiro   call_usermodehelp...
339
340
  struct subprocess_info *call_usermodehelper_setup(char *path, char **argv,
  						  char **envp, gfp_t gfp_mask)
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
341
342
  {
  	struct subprocess_info *sub_info;
ac331d158   KOSAKI Motohiro   call_usermodehelp...
343
  	sub_info = kzalloc(sizeof(struct subprocess_info), gfp_mask);
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
344
345
346
347
348
349
350
  	if (!sub_info)
  		goto out;
  
  	INIT_WORK(&sub_info->work, __call_usermodehelper);
  	sub_info->path = path;
  	sub_info->argv = argv;
  	sub_info->envp = envp;
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
351
352
353
354
355
356
    out:
  	return sub_info;
  }
  EXPORT_SYMBOL(call_usermodehelper_setup);
  
  /**
a06a4dc3a   Neil Horman   kmod: add init fu...
357
   * call_usermodehelper_setfns - set a cleanup/init function
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
358
359
   * @info: a subprocess_info returned by call_usermodehelper_setup
   * @cleanup: a cleanup function
a06a4dc3a   Neil Horman   kmod: add init fu...
360
361
362
363
364
365
   * @init: an init function
   * @data: arbitrary context sensitive data
   *
   * The init function is used to customize the helper process prior to
   * exec.  A non-zero return code causes the process to error out, exit,
   * and return the failure to the calling process
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
366
   *
a06a4dc3a   Neil Horman   kmod: add init fu...
367
   * The cleanup function is just before ethe subprocess_info is about to
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
368
369
370
371
   * be freed.  This can be used for freeing the argv and envp.  The
   * Function must be runnable in either a process context or the
   * context in which call_usermodehelper_exec is called.
   */
a06a4dc3a   Neil Horman   kmod: add init fu...
372
  void call_usermodehelper_setfns(struct subprocess_info *info,
879669961   David Howells   KEYS/DNS: Fix ___...
373
  		    int (*init)(struct subprocess_info *info, struct cred *new),
a06a4dc3a   Neil Horman   kmod: add init fu...
374
375
  		    void (*cleanup)(struct subprocess_info *info),
  		    void *data)
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
376
377
  {
  	info->cleanup = cleanup;
a06a4dc3a   Neil Horman   kmod: add init fu...
378
379
  	info->init = init;
  	info->data = data;
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
380
  }
a06a4dc3a   Neil Horman   kmod: add init fu...
381
  EXPORT_SYMBOL(call_usermodehelper_setfns);
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
382
383
  
  /**
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
384
385
   * call_usermodehelper_exec - start a usermode application
   * @sub_info: information about the subprocessa
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
386
   * @wait: wait for the application to finish and return status.
a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
387
388
389
   *        when -1 don't wait at all, but you get no useful error back when
   *        the program couldn't be exec'ed. This makes it safe to call
   *        from interrupt context.
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
390
391
392
393
   *
   * Runs a user-space application.  The application is started
   * asynchronously if wait is not set, and runs as a child of keventd.
   * (ie. it runs with full root capabilities).
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
394
   */
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
395
  int call_usermodehelper_exec(struct subprocess_info *sub_info,
86313c488   Jeremy Fitzhardinge   usermodehelper: T...
396
  			     enum umh_wait wait)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
397
  {
60be6b9a4   Ingo Molnar   [PATCH] lockdep: ...
398
  	DECLARE_COMPLETION_ONSTACK(done);
784680336   Nigel Cunningham   Fix unbalanced he...
399
  	int retval = 0;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
400

ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
401
  	helper_lock();
784680336   Nigel Cunningham   Fix unbalanced he...
402
  	if (sub_info->path[0] == '\0')
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
403
  		goto out;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
404

8cdd4936c   Rafael J. Wysocki   PM: disable userm...
405
  	if (!khelper_wq || usermodehelper_disabled) {
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
406
407
408
  		retval = -EBUSY;
  		goto out;
  	}
a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
409

a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
410
  	sub_info->complete = &done;
a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
411
412
413
  	sub_info->wait = wait;
  
  	queue_work(khelper_wq, &sub_info->work);
784680336   Nigel Cunningham   Fix unbalanced he...
414
415
  	if (wait == UMH_NO_WAIT)	/* task has freed sub_info */
  		goto unlock;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
416
  	wait_for_completion(&done);
a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
417
  	retval = sub_info->retval;
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
418

784680336   Nigel Cunningham   Fix unbalanced he...
419
  out:
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
420
  	call_usermodehelper_freeinfo(sub_info);
784680336   Nigel Cunningham   Fix unbalanced he...
421
  unlock:
ccd4b65ae   Rafael J. Wysocki   PM: prevent froze...
422
  	helper_unlock();
a98f0dd34   Andi Kleen   [PATCH] x86-64: A...
423
  	return retval;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
424
  }
0ab4dc922   Jeremy Fitzhardinge   usermodehelper: s...
425
  EXPORT_SYMBOL(call_usermodehelper_exec);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
426

17f60a7da   Eric Paris   capabilites: allo...
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
  static int proc_cap_handler(struct ctl_table *table, int write,
  			 void __user *buffer, size_t *lenp, loff_t *ppos)
  {
  	struct ctl_table t;
  	unsigned long cap_array[_KERNEL_CAPABILITY_U32S];
  	kernel_cap_t new_cap;
  	int err, i;
  
  	if (write && (!capable(CAP_SETPCAP) ||
  		      !capable(CAP_SYS_MODULE)))
  		return -EPERM;
  
  	/*
  	 * convert from the global kernel_cap_t to the ulong array to print to
  	 * userspace if this is a read.
  	 */
  	spin_lock(&umh_sysctl_lock);
  	for (i = 0; i < _KERNEL_CAPABILITY_U32S; i++)  {
  		if (table->data == CAP_BSET)
  			cap_array[i] = usermodehelper_bset.cap[i];
  		else if (table->data == CAP_PI)
  			cap_array[i] = usermodehelper_inheritable.cap[i];
  		else
  			BUG();
  	}
  	spin_unlock(&umh_sysctl_lock);
  
  	t = *table;
  	t.data = &cap_array;
  
  	/*
  	 * actually read or write and array of ulongs from userspace.  Remember
  	 * these are least significant 32 bits first
  	 */
  	err = proc_doulongvec_minmax(&t, write, buffer, lenp, ppos);
  	if (err < 0)
  		return err;
  
  	/*
  	 * convert from the sysctl array of ulongs to the kernel_cap_t
  	 * internal representation
  	 */
  	for (i = 0; i < _KERNEL_CAPABILITY_U32S; i++)
  		new_cap.cap[i] = cap_array[i];
  
  	/*
  	 * Drop everything not in the new_cap (but don't add things)
  	 */
  	spin_lock(&umh_sysctl_lock);
  	if (write) {
  		if (table->data == CAP_BSET)
  			usermodehelper_bset = cap_intersect(usermodehelper_bset, new_cap);
  		if (table->data == CAP_PI)
  			usermodehelper_inheritable = cap_intersect(usermodehelper_inheritable, new_cap);
  	}
  	spin_unlock(&umh_sysctl_lock);
  
  	return 0;
  }
  
  struct ctl_table usermodehelper_table[] = {
  	{
  		.procname	= "bset",
  		.data		= CAP_BSET,
  		.maxlen		= _KERNEL_CAPABILITY_U32S * sizeof(unsigned long),
  		.mode		= 0600,
  		.proc_handler	= proc_cap_handler,
  	},
  	{
  		.procname	= "inheritable",
  		.data		= CAP_PI,
  		.maxlen		= _KERNEL_CAPABILITY_U32S * sizeof(unsigned long),
  		.mode		= 0600,
  		.proc_handler	= proc_cap_handler,
  	},
  	{ }
  };
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
504
505
506
507
508
  void __init usermodehelper_init(void)
  {
  	khelper_wq = create_singlethread_workqueue("khelper");
  	BUG_ON(!khelper_wq);
  }