Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Move procfs_checkioperm() from procvs_subr.c to procfs_mem.c, since _subr is

Browse Source 
not included in a kernel without procfs, and it seems wrong to pull
all of procfs_subr.c in for just that one function.  Perhaps this
should go into a new file instead?
This commit is contained in:
explorer 1997-08-13 04:01:22 +00:00
parent bf596ddb89
commit 945beb8d63
2 changed files with 31 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
sys/miscfs/procfs/procfs_mem.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: procfs_mem.c,v 1.12 1997/08/12 22:47:20 thorpej Exp $ */
/* $NetBSD: procfs_mem.c,v 1.13 1997/08/13 04:01:22 explorer Exp $ */
/*
* Copyright (c) 1993 Jan-Simon Pendry
@ -56,6 +56,8 @@
#include <vm/vm_kern.h>
#include <vm/vm_page.h>
#define ISSET(t, f) ((t) & (f))
static int procfs_rwmem __P((struct proc *, struct uio *));
static int
@ -243,6 +245,33 @@ procfs_findtextvp(p)
return (p->p_textvp);
}
int
procfs_checkioperm(t, p)
struct proc *t, *p;
{
int error;
/*
* You cannot attach to a processes mem/regs if:
*
* (1) it's not owned by you, or is set-id on exec
* (unless you're root), or...
*/
if ((t->p_cred->p_ruid != p->p_cred->p_ruid ||
ISSET(t->p_flag, P_SUGID)) &&
(error = suser(p->p_ucred, &p->p_acflag)) != 0)
return (error);
/*
* (2) ...it's init, which controls the security level
* of the entire system, and the system was not
* compiled with permanetly insecure mode turned on.
*/
if (t == initproc && securelevel > -1)
return (EPERM);
return (0);
}
#ifdef probably_never
/*

30
sys/miscfs/procfs/procfs_subr.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: procfs_subr.c,v 1.20 1997/08/12 22:47:21 thorpej Exp $ */
/* $NetBSD: procfs_subr.c,v 1.21 1997/08/13 04:01:23 explorer Exp $ */
/*
* Copyright (c) 1994 Christopher G. Demetriou. All rights reserved.
@ -325,31 +325,3 @@ vfs_findname(nm, buf, buflen)
return (0);
}
int
procfs_checkioperm(t, p)
struct proc *t, *p;
{
int error;
/*
* You cannot attach to a processes mem/regs if:
*
* (1) it's not owned by you, or is set-id on exec
* (unless you're root), or...
*/
if ((t->p_cred->p_ruid != p->p_cred->p_ruid ||
ISSET(t->p_flag, P_SUGID)) &&
(error = suser(p->p_ucred, &p->p_acflag)) != 0)
return (error);
/*
* (2) ...it's init, which controls the security level
* of the entire system, and the system was not
* compiled with permanetly insecure mode turned on.
*/
if (t == initproc && securelevel > -1)
return (EPERM);
return (0);
}