Blame view
kernel/kmod.c
14.9 KB
1da177e4c Linux-2.6.12-rc2 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 |
/* kmod, the new module loader (replaces kerneld) Kirk Petersen Reorganized not to be a daemon by Adam Richter, with guidance from Greg Zornetzer. Modified to avoid chroot and file sharing problems. Mikael Pettersson Limit the concurrent number of kmod modprobes to catch loops from "modprobe needs a service that is in a module". Keith Owens <kaos@ocs.com.au> December 1999 Unblock all signals when we exec a usermode process. Shuu Yamaguchi <shuu@wondernetworkresources.com> December 2000 call_usermodehelper wait flag, and remove exec_usermodehelper. Rusty Russell <rusty@rustcorp.com.au> Jan 2003 */ |
1da177e4c Linux-2.6.12-rc2 |
21 22 23 24 25 |
#include <linux/module.h> #include <linux/sched.h> #include <linux/syscalls.h> #include <linux/unistd.h> #include <linux/kmod.h> |
1da177e4c Linux-2.6.12-rc2 |
26 |
#include <linux/slab.h> |
1da177e4c Linux-2.6.12-rc2 |
27 |
#include <linux/completion.h> |
17f60a7da capabilites: allo... |
28 |
#include <linux/cred.h> |
1da177e4c Linux-2.6.12-rc2 |
29 |
#include <linux/file.h> |
9f3acc314 [PATCH] split lin... |
30 |
#include <linux/fdtable.h> |
1da177e4c Linux-2.6.12-rc2 |
31 32 33 34 35 |
#include <linux/workqueue.h> #include <linux/security.h> #include <linux/mount.h> #include <linux/kernel.h> #include <linux/init.h> |
d025c9db7 [PATCH] Support p... |
36 |
#include <linux/resource.h> |
8cdd4936c PM: disable userm... |
37 38 |
#include <linux/notifier.h> #include <linux/suspend.h> |
b298d289c PM / Sleep: Fix f... |
39 |
#include <linux/rwsem.h> |
1da177e4c Linux-2.6.12-rc2 |
40 |
#include <asm/uaccess.h> |
7ead8b831 tracing/events: A... |
41 |
#include <trace/events/module.h> |
1da177e4c Linux-2.6.12-rc2 |
42 43 44 |
extern int max_threads; static struct workqueue_struct *khelper_wq; |
17f60a7da capabilites: allo... |
45 46 47 48 49 50 |
#define CAP_BSET (void *)1 #define CAP_PI (void *)2 static kernel_cap_t usermodehelper_bset = CAP_FULL_SET; static kernel_cap_t usermodehelper_inheritable = CAP_FULL_SET; static DEFINE_SPINLOCK(umh_sysctl_lock); |
b298d289c PM / Sleep: Fix f... |
51 |
static DECLARE_RWSEM(umhelper_sem); |
17f60a7da capabilites: allo... |
52 |
|
a1ef5adb4 remove CONFIG_KMO... |
53 |
#ifdef CONFIG_MODULES |
1da177e4c Linux-2.6.12-rc2 |
54 55 56 57 58 59 60 |
/* modprobe_path is set via /proc/sys. */ char modprobe_path[KMOD_PATH_LEN] = "/sbin/modprobe"; /** |
acae05156 module: create a ... |
61 62 |
* __request_module - try to load a kernel module * @wait: wait (or not) for the operation to complete |
bd4207c90 kmod: fix varargs... |
63 64 |
* @fmt: printf style format string for the name of the module * @...: arguments as specified in the format string |
1da177e4c Linux-2.6.12-rc2 |
65 66 67 68 69 70 71 72 73 74 |
* * Load a module using the user mode module loader. The function returns * zero on success or a negative errno code on failure. Note that a * successful module load does not mean the module did not then unload * and exit on an error of its own. Callers must check that the service * they requested is now available not blindly invoke it. * * If module auto-loading support is disabled then this function * becomes a no-operation. */ |
acae05156 module: create a ... |
75 |
int __request_module(bool wait, const char *fmt, ...) |
1da177e4c Linux-2.6.12-rc2 |
76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 |
{ va_list args; char module_name[MODULE_NAME_LEN]; unsigned int max_modprobes; int ret; char *argv[] = { modprobe_path, "-q", "--", module_name, NULL }; static char *envp[] = { "HOME=/", "TERM=linux", "PATH=/sbin:/usr/sbin:/bin:/usr/bin", NULL }; static atomic_t kmod_concurrent = ATOMIC_INIT(0); #define MAX_KMOD_CONCURRENT 50 /* Completely arbitrary value - KAO */ static int kmod_loop_msg; va_start(args, fmt); ret = vsnprintf(module_name, MODULE_NAME_LEN, fmt, args); va_end(args); if (ret >= MODULE_NAME_LEN) return -ENAMETOOLONG; |
dd8dbf2e6 security: report ... |
95 96 97 |
ret = security_kernel_module_request(module_name); if (ret) return ret; |
1da177e4c Linux-2.6.12-rc2 |
98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 |
/* If modprobe needs a service that is in a module, we get a recursive * loop. Limit the number of running kmod threads to max_threads/2 or * MAX_KMOD_CONCURRENT, whichever is the smaller. A cleaner method * would be to run the parents of this process, counting how many times * kmod was invoked. That would mean accessing the internals of the * process tables to get the command line, proc_pid_cmdline is static * and it is not worth changing the proc code just to handle this case. * KAO. * * "trace the ppid" is simple, but will fail if someone's * parent exits. I think this is as good as it gets. --RR */ max_modprobes = min(max_threads/2, MAX_KMOD_CONCURRENT); atomic_inc(&kmod_concurrent); if (atomic_read(&kmod_concurrent) > max_modprobes) { /* We may be blaming an innocent here, but unlikely */ |
37252db6a kmod: prevent kmo... |
114 |
if (kmod_loop_msg < 5) { |
1da177e4c Linux-2.6.12-rc2 |
115 116 117 118 |
printk(KERN_ERR "request_module: runaway loop modprobe %s ", module_name); |
37252db6a kmod: prevent kmo... |
119 120 |
kmod_loop_msg++; } |
1da177e4c Linux-2.6.12-rc2 |
121 122 123 |
atomic_dec(&kmod_concurrent); return -ENOMEM; } |
7ead8b831 tracing/events: A... |
124 |
trace_module_request(module_name, wait, _RET_IP_); |
a06a4dc3a kmod: add init fu... |
125 126 127 |
ret = call_usermodehelper_fns(modprobe_path, argv, envp, wait ? UMH_WAIT_PROC : UMH_WAIT_EXEC, NULL, NULL, NULL); |
1da177e4c Linux-2.6.12-rc2 |
128 129 130 |
atomic_dec(&kmod_concurrent); return ret; } |
acae05156 module: create a ... |
131 |
EXPORT_SYMBOL(__request_module); |
118a9069f module: remove CO... |
132 |
#endif /* CONFIG_MODULES */ |
1da177e4c Linux-2.6.12-rc2 |
133 |
|
1da177e4c Linux-2.6.12-rc2 |
134 135 136 137 138 139 |
/* * This is the task which runs the usermode application */ static int ____call_usermodehelper(void *data) { struct subprocess_info *sub_info = data; |
17f60a7da capabilites: allo... |
140 |
struct cred *new; |
1da177e4c Linux-2.6.12-rc2 |
141 |
int retval; |
1da177e4c Linux-2.6.12-rc2 |
142 143 |
spin_lock_irq(¤t->sighand->siglock); flush_signal_handlers(current, 1); |
1da177e4c Linux-2.6.12-rc2 |
144 145 146 |
spin_unlock_irq(¤t->sighand->siglock); /* We can run anywhere, unlike our parent keventd(). */ |
1a2142afa cpumask: remove d... |
147 |
set_cpus_allowed_ptr(current, cpu_all_mask); |
1da177e4c Linux-2.6.12-rc2 |
148 |
|
b73a7e76c Fix kevent's chil... |
149 150 151 152 153 |
/* * Our parent is keventd, which runs with elevated scheduling priority. * Avoid propagating that into the userspace child. */ set_user_nice(current, 0); |
17f60a7da capabilites: allo... |
154 155 156 157 158 159 160 161 162 163 |
retval = -ENOMEM; new = prepare_kernel_cred(current); if (!new) goto fail; spin_lock(&umh_sysctl_lock); new->cap_bset = cap_intersect(usermodehelper_bset, new->cap_bset); new->cap_inheritable = cap_intersect(usermodehelper_inheritable, new->cap_inheritable); spin_unlock(&umh_sysctl_lock); |
879669961 KEYS/DNS: Fix ___... |
164 165 166 167 168 169 170 |
if (sub_info->init) { retval = sub_info->init(sub_info, new); if (retval) { abort_creds(new); goto fail; } } |
17f60a7da capabilites: allo... |
171 |
commit_creds(new); |
d7627467b Make do_execve() ... |
172 173 174 |
retval = kernel_execve(sub_info->path, (const char *const *)sub_info->argv, (const char *const *)sub_info->envp); |
1da177e4c Linux-2.6.12-rc2 |
175 176 |
/* Exec failed? */ |
a06a4dc3a kmod: add init fu... |
177 |
fail: |
1da177e4c Linux-2.6.12-rc2 |
178 179 180 |
sub_info->retval = retval; do_exit(0); } |
0ab4dc922 usermodehelper: s... |
181 182 183 |
void call_usermodehelper_freeinfo(struct subprocess_info *info) { if (info->cleanup) |
a06a4dc3a kmod: add init fu... |
184 |
(*info->cleanup)(info); |
0ab4dc922 usermodehelper: s... |
185 186 187 |
kfree(info); } EXPORT_SYMBOL(call_usermodehelper_freeinfo); |
1da177e4c Linux-2.6.12-rc2 |
188 189 190 191 192 |
/* Keventd can't block, but this (a child) can. */ static int wait_for_helper(void *data) { struct subprocess_info *sub_info = data; pid_t pid; |
1da177e4c Linux-2.6.12-rc2 |
193 |
|
7d6422421 wait_for_helper: ... |
194 195 196 197 |
/* If SIGCLD is ignored sys_wait4 won't populate the status. */ spin_lock_irq(¤t->sighand->siglock); current->sighand->action[SIGCHLD-1].sa.sa_handler = SIG_DFL; spin_unlock_irq(¤t->sighand->siglock); |
1da177e4c Linux-2.6.12-rc2 |
198 199 200 201 202 |
pid = kernel_thread(____call_usermodehelper, sub_info, SIGCHLD); if (pid < 0) { sub_info->retval = pid; } else { |
7d6422421 wait_for_helper: ... |
203 |
int ret = -ECHILD; |
1da177e4c Linux-2.6.12-rc2 |
204 205 206 207 208 209 210 211 212 |
/* * Normally it is bogus to call wait4() from in-kernel because * wait4() wants to write the exit code to a userspace address. * But wait_for_helper() always runs as keventd, and put_user() * to a kernel address works OK for kernel threads, due to their * having an mm_segment_t which spans the entire address space. * * Thus the __user pointer cast is valid here. */ |
111dbe0c8 [PATCH] Fix ____c... |
213 214 215 216 217 218 219 220 221 |
sys_wait4(pid, (int __user *)&ret, 0, NULL); /* * If ret is 0, either ____call_usermodehelper failed and the * real error code is already in sub_info->retval or * sub_info->retval is 0 anyway, so don't mess with it then. */ if (ret) sub_info->retval = ret; |
1da177e4c Linux-2.6.12-rc2 |
222 |
} |
d47419cd9 call_usermodehelp... |
223 |
complete(sub_info->complete); |
1da177e4c Linux-2.6.12-rc2 |
224 225 226 227 |
return 0; } /* This is run by khelper thread */ |
65f27f384 WorkStruct: Pass ... |
228 |
static void __call_usermodehelper(struct work_struct *work) |
1da177e4c Linux-2.6.12-rc2 |
229 |
{ |
65f27f384 WorkStruct: Pass ... |
230 231 |
struct subprocess_info *sub_info = container_of(work, struct subprocess_info, work); |
86313c488 usermodehelper: T... |
232 |
enum umh_wait wait = sub_info->wait; |
d47419cd9 call_usermodehelp... |
233 |
pid_t pid; |
1da177e4c Linux-2.6.12-rc2 |
234 235 236 237 |
/* CLONE_VFORK: wait until the usermode helper has execve'd * successfully We need the data structures to stay around * until that is done. */ |
d47419cd9 call_usermodehelp... |
238 |
if (wait == UMH_WAIT_PROC) |
1da177e4c Linux-2.6.12-rc2 |
239 240 241 242 243 |
pid = kernel_thread(wait_for_helper, sub_info, CLONE_FS | CLONE_FILES | SIGCHLD); else pid = kernel_thread(____call_usermodehelper, sub_info, CLONE_VFORK | SIGCHLD); |
86313c488 usermodehelper: T... |
244 245 |
switch (wait) { case UMH_NO_WAIT: |
d47419cd9 call_usermodehelp... |
246 |
call_usermodehelper_freeinfo(sub_info); |
86313c488 usermodehelper: T... |
247 |
break; |
a98f0dd34 [PATCH] x86-64: A... |
248 |
|
86313c488 usermodehelper: T... |
249 250 251 |
case UMH_WAIT_PROC: if (pid > 0) break; |
86313c488 usermodehelper: T... |
252 |
/* FALLTHROUGH */ |
86313c488 usermodehelper: T... |
253 |
case UMH_WAIT_EXEC: |
04b1c384f call_usermodehelp... |
254 255 |
if (pid < 0) sub_info->retval = pid; |
1da177e4c Linux-2.6.12-rc2 |
256 |
complete(sub_info->complete); |
86313c488 usermodehelper: T... |
257 |
} |
1da177e4c Linux-2.6.12-rc2 |
258 |
} |
ccd4b65ae PM: prevent froze... |
259 260 261 262 |
/* * If set, call_usermodehelper_exec() will exit immediately returning -EBUSY * (used for preventing user land processes from being created after the user * land has been frozen during a system-wide hibernation or suspend operation). |
b298d289c PM / Sleep: Fix f... |
263 |
* Should always be manipulated under umhelper_sem acquired for write. |
ccd4b65ae PM: prevent froze... |
264 |
*/ |
288d5abec Boot up with user... |
265 |
static int usermodehelper_disabled = 1; |
ccd4b65ae PM: prevent froze... |
266 267 268 269 270 |
/* Number of helpers running */ static atomic_t running_helpers = ATOMIC_INIT(0); /* |
5307427a3 PM / Usermodehelp... |
271 |
* Wait queue head used by usermodehelper_disable() to wait for all running |
ccd4b65ae PM: prevent froze... |
272 273 274 275 276 277 |
* helpers to finish. */ static DECLARE_WAIT_QUEUE_HEAD(running_helpers_waitq); /* * Time to wait for running_helpers to become zero before the setting of |
5307427a3 PM / Usermodehelp... |
278 |
* usermodehelper_disabled in usermodehelper_disable() fails |
ccd4b65ae PM: prevent froze... |
279 280 |
*/ #define RUNNING_HELPERS_TIMEOUT (5 * HZ) |
b298d289c PM / Sleep: Fix f... |
281 282 283 284 285 286 287 288 289 290 291 |
void read_lock_usermodehelper(void) { down_read(&umhelper_sem); } EXPORT_SYMBOL_GPL(read_lock_usermodehelper); void read_unlock_usermodehelper(void) { up_read(&umhelper_sem); } EXPORT_SYMBOL_GPL(read_unlock_usermodehelper); |
1bfcf1304 pm: rework disabl... |
292 293 294 295 |
/** * usermodehelper_disable - prevent new helpers from being started */ int usermodehelper_disable(void) |
8cdd4936c PM: disable userm... |
296 |
{ |
ccd4b65ae PM: prevent froze... |
297 |
long retval; |
b298d289c PM / Sleep: Fix f... |
298 |
down_write(&umhelper_sem); |
1bfcf1304 pm: rework disabl... |
299 |
usermodehelper_disabled = 1; |
b298d289c PM / Sleep: Fix f... |
300 |
up_write(&umhelper_sem); |
1bfcf1304 pm: rework disabl... |
301 302 303 304 305 306 307 |
/* * From now on call_usermodehelper_exec() won't start any new * helpers, so it is sufficient if running_helpers turns out to * be zero at one point (it may be increased later, but that * doesn't matter). */ retval = wait_event_timeout(running_helpers_waitq, |
ccd4b65ae PM: prevent froze... |
308 309 |
atomic_read(&running_helpers) == 0, RUNNING_HELPERS_TIMEOUT); |
1bfcf1304 pm: rework disabl... |
310 311 |
if (retval) return 0; |
8cdd4936c PM: disable userm... |
312 |
|
b298d289c PM / Sleep: Fix f... |
313 |
down_write(&umhelper_sem); |
1bfcf1304 pm: rework disabl... |
314 |
usermodehelper_disabled = 0; |
b298d289c PM / Sleep: Fix f... |
315 |
up_write(&umhelper_sem); |
1bfcf1304 pm: rework disabl... |
316 317 318 319 320 321 322 323 |
return -EAGAIN; } /** * usermodehelper_enable - allow new helpers to be started again */ void usermodehelper_enable(void) { |
b298d289c PM / Sleep: Fix f... |
324 |
down_write(&umhelper_sem); |
1bfcf1304 pm: rework disabl... |
325 |
usermodehelper_disabled = 0; |
b298d289c PM / Sleep: Fix f... |
326 |
up_write(&umhelper_sem); |
8cdd4936c PM: disable userm... |
327 |
} |
a144c6a6c PM: Print a warni... |
328 329 330 331 332 333 334 335 |
/** * usermodehelper_is_disabled - check if new helpers are allowed to be started */ bool usermodehelper_is_disabled(void) { return usermodehelper_disabled; } EXPORT_SYMBOL_GPL(usermodehelper_is_disabled); |
ccd4b65ae PM: prevent froze... |
336 337 338 339 340 341 342 343 344 345 346 |
static void helper_lock(void) { atomic_inc(&running_helpers); smp_mb__after_atomic_inc(); } static void helper_unlock(void) { if (atomic_dec_and_test(&running_helpers)) wake_up(&running_helpers_waitq); } |
ccd4b65ae PM: prevent froze... |
347 |
|
1da177e4c Linux-2.6.12-rc2 |
348 |
/** |
0ab4dc922 usermodehelper: s... |
349 |
* call_usermodehelper_setup - prepare to call a usermode helper |
61df47c8d kernel-doc fix fo... |
350 351 352 |
* @path: path to usermode executable * @argv: arg vector for process * @envp: environment for process |
ac331d158 call_usermodehelp... |
353 |
* @gfp_mask: gfp mask for memory allocation |
0ab4dc922 usermodehelper: s... |
354 |
* |
61df47c8d kernel-doc fix fo... |
355 |
* Returns either %NULL on allocation failure, or a subprocess_info |
0ab4dc922 usermodehelper: s... |
356 357 358 |
* structure. This should be passed to call_usermodehelper_exec to * exec the process and free the structure. */ |
ac331d158 call_usermodehelp... |
359 360 |
struct subprocess_info *call_usermodehelper_setup(char *path, char **argv, char **envp, gfp_t gfp_mask) |
0ab4dc922 usermodehelper: s... |
361 362 |
{ struct subprocess_info *sub_info; |
ac331d158 call_usermodehelp... |
363 |
sub_info = kzalloc(sizeof(struct subprocess_info), gfp_mask); |
0ab4dc922 usermodehelper: s... |
364 365 366 367 368 369 370 |
if (!sub_info) goto out; INIT_WORK(&sub_info->work, __call_usermodehelper); sub_info->path = path; sub_info->argv = argv; sub_info->envp = envp; |
0ab4dc922 usermodehelper: s... |
371 372 373 374 375 376 |
out: return sub_info; } EXPORT_SYMBOL(call_usermodehelper_setup); /** |
a06a4dc3a kmod: add init fu... |
377 |
* call_usermodehelper_setfns - set a cleanup/init function |
0ab4dc922 usermodehelper: s... |
378 379 |
* @info: a subprocess_info returned by call_usermodehelper_setup * @cleanup: a cleanup function |
a06a4dc3a kmod: add init fu... |
380 381 382 383 384 385 |
* @init: an init function * @data: arbitrary context sensitive data * * The init function is used to customize the helper process prior to * exec. A non-zero return code causes the process to error out, exit, * and return the failure to the calling process |
0ab4dc922 usermodehelper: s... |
386 |
* |
a06a4dc3a kmod: add init fu... |
387 |
* The cleanup function is just before ethe subprocess_info is about to |
0ab4dc922 usermodehelper: s... |
388 389 390 391 |
* be freed. This can be used for freeing the argv and envp. The * Function must be runnable in either a process context or the * context in which call_usermodehelper_exec is called. */ |
a06a4dc3a kmod: add init fu... |
392 |
void call_usermodehelper_setfns(struct subprocess_info *info, |
879669961 KEYS/DNS: Fix ___... |
393 |
int (*init)(struct subprocess_info *info, struct cred *new), |
a06a4dc3a kmod: add init fu... |
394 395 |
void (*cleanup)(struct subprocess_info *info), void *data) |
0ab4dc922 usermodehelper: s... |
396 397 |
{ info->cleanup = cleanup; |
a06a4dc3a kmod: add init fu... |
398 399 |
info->init = init; info->data = data; |
0ab4dc922 usermodehelper: s... |
400 |
} |
a06a4dc3a kmod: add init fu... |
401 |
EXPORT_SYMBOL(call_usermodehelper_setfns); |
0ab4dc922 usermodehelper: s... |
402 403 |
/** |
0ab4dc922 usermodehelper: s... |
404 405 |
* call_usermodehelper_exec - start a usermode application * @sub_info: information about the subprocessa |
1da177e4c Linux-2.6.12-rc2 |
406 |
* @wait: wait for the application to finish and return status. |
a98f0dd34 [PATCH] x86-64: A... |
407 408 409 |
* when -1 don't wait at all, but you get no useful error back when * the program couldn't be exec'ed. This makes it safe to call * from interrupt context. |
1da177e4c Linux-2.6.12-rc2 |
410 411 412 413 |
* * Runs a user-space application. The application is started * asynchronously if wait is not set, and runs as a child of keventd. * (ie. it runs with full root capabilities). |
1da177e4c Linux-2.6.12-rc2 |
414 |
*/ |
0ab4dc922 usermodehelper: s... |
415 |
int call_usermodehelper_exec(struct subprocess_info *sub_info, |
86313c488 usermodehelper: T... |
416 |
enum umh_wait wait) |
1da177e4c Linux-2.6.12-rc2 |
417 |
{ |
60be6b9a4 [PATCH] lockdep: ... |
418 |
DECLARE_COMPLETION_ONSTACK(done); |
784680336 Fix unbalanced he... |
419 |
int retval = 0; |
1da177e4c Linux-2.6.12-rc2 |
420 |
|
ccd4b65ae PM: prevent froze... |
421 |
helper_lock(); |
784680336 Fix unbalanced he... |
422 |
if (sub_info->path[0] == '\0') |
0ab4dc922 usermodehelper: s... |
423 |
goto out; |
1da177e4c Linux-2.6.12-rc2 |
424 |
|
8cdd4936c PM: disable userm... |
425 |
if (!khelper_wq || usermodehelper_disabled) { |
0ab4dc922 usermodehelper: s... |
426 427 428 |
retval = -EBUSY; goto out; } |
a98f0dd34 [PATCH] x86-64: A... |
429 |
|
a98f0dd34 [PATCH] x86-64: A... |
430 |
sub_info->complete = &done; |
a98f0dd34 [PATCH] x86-64: A... |
431 432 433 |
sub_info->wait = wait; queue_work(khelper_wq, &sub_info->work); |
784680336 Fix unbalanced he... |
434 435 |
if (wait == UMH_NO_WAIT) /* task has freed sub_info */ goto unlock; |
1da177e4c Linux-2.6.12-rc2 |
436 |
wait_for_completion(&done); |
a98f0dd34 [PATCH] x86-64: A... |
437 |
retval = sub_info->retval; |
0ab4dc922 usermodehelper: s... |
438 |
|
784680336 Fix unbalanced he... |
439 |
out: |
0ab4dc922 usermodehelper: s... |
440 |
call_usermodehelper_freeinfo(sub_info); |
784680336 Fix unbalanced he... |
441 |
unlock: |
ccd4b65ae PM: prevent froze... |
442 |
helper_unlock(); |
a98f0dd34 [PATCH] x86-64: A... |
443 |
return retval; |
1da177e4c Linux-2.6.12-rc2 |
444 |
} |
0ab4dc922 usermodehelper: s... |
445 |
EXPORT_SYMBOL(call_usermodehelper_exec); |
1da177e4c Linux-2.6.12-rc2 |
446 |
|
17f60a7da capabilites: allo... |
447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 |
static int proc_cap_handler(struct ctl_table *table, int write, void __user *buffer, size_t *lenp, loff_t *ppos) { struct ctl_table t; unsigned long cap_array[_KERNEL_CAPABILITY_U32S]; kernel_cap_t new_cap; int err, i; if (write && (!capable(CAP_SETPCAP) || !capable(CAP_SYS_MODULE))) return -EPERM; /* * convert from the global kernel_cap_t to the ulong array to print to * userspace if this is a read. */ spin_lock(&umh_sysctl_lock); for (i = 0; i < _KERNEL_CAPABILITY_U32S; i++) { if (table->data == CAP_BSET) cap_array[i] = usermodehelper_bset.cap[i]; else if (table->data == CAP_PI) cap_array[i] = usermodehelper_inheritable.cap[i]; else BUG(); } spin_unlock(&umh_sysctl_lock); t = *table; t.data = &cap_array; /* * actually read or write and array of ulongs from userspace. Remember * these are least significant 32 bits first */ err = proc_doulongvec_minmax(&t, write, buffer, lenp, ppos); if (err < 0) return err; /* * convert from the sysctl array of ulongs to the kernel_cap_t * internal representation */ for (i = 0; i < _KERNEL_CAPABILITY_U32S; i++) new_cap.cap[i] = cap_array[i]; /* * Drop everything not in the new_cap (but don't add things) */ spin_lock(&umh_sysctl_lock); if (write) { if (table->data == CAP_BSET) usermodehelper_bset = cap_intersect(usermodehelper_bset, new_cap); if (table->data == CAP_PI) usermodehelper_inheritable = cap_intersect(usermodehelper_inheritable, new_cap); } spin_unlock(&umh_sysctl_lock); return 0; } struct ctl_table usermodehelper_table[] = { { .procname = "bset", .data = CAP_BSET, .maxlen = _KERNEL_CAPABILITY_U32S * sizeof(unsigned long), .mode = 0600, .proc_handler = proc_cap_handler, }, { .procname = "inheritable", .data = CAP_PI, .maxlen = _KERNEL_CAPABILITY_U32S * sizeof(unsigned long), .mode = 0600, .proc_handler = proc_cap_handler, }, { } }; |
1da177e4c Linux-2.6.12-rc2 |
524 525 526 527 528 |
void __init usermodehelper_init(void) { khelper_wq = create_singlethread_workqueue("khelper"); BUG_ON(!khelper_wq); } |