diff options
author | Colin Watson <cjwatson@debian.org> | 2009-12-29 21:38:40 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2009-12-29 21:38:40 +0000 |
commit | 1b816ea846aca3ee89e7995373ace609e9518424 (patch) | |
tree | b41cdc8495cae7fa9c2e0f98a5f2e71656b61f9a /openbsd-compat/port-solaris.c | |
parent | fa585019a79ebcb4e0202b1c33f87ff1c5c9ce1c (diff) | |
parent | 086ea76990b1e6287c24b6db74adffd4605eb3b0 (diff) |
import openssh-4.6p1-gsskex-20070312.patch
Diffstat (limited to 'openbsd-compat/port-solaris.c')
-rw-r--r-- | openbsd-compat/port-solaris.c | 199 |
1 files changed, 199 insertions, 0 deletions
diff --git a/openbsd-compat/port-solaris.c b/openbsd-compat/port-solaris.c new file mode 100644 index 000000000..2ab64d487 --- /dev/null +++ b/openbsd-compat/port-solaris.c | |||
@@ -0,0 +1,199 @@ | |||
1 | /* $Id: port-solaris.c,v 1.3 2006/10/31 23:28:49 dtucker Exp $ */ | ||
2 | |||
3 | /* | ||
4 | * Copyright (c) 2006 Chad Mynhier. | ||
5 | * | ||
6 | * Permission to use, copy, modify, and distribute this software for any | ||
7 | * purpose with or without fee is hereby granted, provided that the above | ||
8 | * copyright notice and this permission notice appear in all copies. | ||
9 | * | ||
10 | * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
11 | * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
12 | * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
13 | * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
14 | * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
15 | * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
16 | * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
17 | */ | ||
18 | |||
19 | #include "config.h" | ||
20 | #include "includes.h" | ||
21 | |||
22 | #ifdef USE_SOLARIS_PROCESS_CONTRACTS | ||
23 | |||
24 | #include <sys/types.h> | ||
25 | #include <sys/stat.h> | ||
26 | #include <sys/param.h> | ||
27 | |||
28 | #include <errno.h> | ||
29 | #ifdef HAVE_FCNTL_H | ||
30 | # include <fcntl.h> | ||
31 | #endif | ||
32 | #include <stdarg.h> | ||
33 | #include <string.h> | ||
34 | #include <unistd.h> | ||
35 | |||
36 | #include <libcontract.h> | ||
37 | #include <sys/contract/process.h> | ||
38 | #include <sys/ctfs.h> | ||
39 | |||
40 | #include "log.h" | ||
41 | |||
42 | #define CT_TEMPLATE CTFS_ROOT "/process/template" | ||
43 | #define CT_LATEST CTFS_ROOT "/process/latest" | ||
44 | |||
45 | static int tmpl_fd = -1; | ||
46 | |||
47 | /* Lookup the latest process contract */ | ||
48 | static ctid_t | ||
49 | get_active_process_contract_id(void) | ||
50 | { | ||
51 | int stat_fd; | ||
52 | ctid_t ctid = -1; | ||
53 | ct_stathdl_t stathdl; | ||
54 | |||
55 | if ((stat_fd = open64(CT_LATEST, O_RDONLY)) == -1) { | ||
56 | error("%s: Error opening 'latest' process " | ||
57 | "contract: %s", __func__, strerror(errno)); | ||
58 | return -1; | ||
59 | } | ||
60 | if (ct_status_read(stat_fd, CTD_COMMON, &stathdl) != 0) { | ||
61 | error("%s: Error reading process contract " | ||
62 | "status: %s", __func__, strerror(errno)); | ||
63 | goto out; | ||
64 | } | ||
65 | if ((ctid = ct_status_get_id(stathdl)) < 0) { | ||
66 | error("%s: Error getting process contract id: %s", | ||
67 | __func__, strerror(errno)); | ||
68 | goto out; | ||
69 | } | ||
70 | |||
71 | ct_status_free(stathdl); | ||
72 | out: | ||
73 | close(stat_fd); | ||
74 | return ctid; | ||
75 | } | ||
76 | |||
77 | void | ||
78 | solaris_contract_pre_fork(void) | ||
79 | { | ||
80 | if ((tmpl_fd = open64(CT_TEMPLATE, O_RDWR)) == -1) { | ||
81 | error("%s: open %s: %s", __func__, | ||
82 | CT_TEMPLATE, strerror(errno)); | ||
83 | return; | ||
84 | } | ||
85 | |||
86 | debug2("%s: setting up process contract template on fd %d", | ||
87 | __func__, tmpl_fd); | ||
88 | |||
89 | /* First we set the template parameters and event sets. */ | ||
90 | if (ct_pr_tmpl_set_param(tmpl_fd, CT_PR_PGRPONLY) != 0) { | ||
91 | error("%s: Error setting process contract parameter set " | ||
92 | "(pgrponly): %s", __func__, strerror(errno)); | ||
93 | goto fail; | ||
94 | } | ||
95 | if (ct_pr_tmpl_set_fatal(tmpl_fd, CT_PR_EV_HWERR) != 0) { | ||
96 | error("%s: Error setting process contract template " | ||
97 | "fatal events: %s", __func__, strerror(errno)); | ||
98 | goto fail; | ||
99 | } | ||
100 | if (ct_tmpl_set_critical(tmpl_fd, 0) != 0) { | ||
101 | error("%s: Error setting process contract template " | ||
102 | "critical events: %s", __func__, strerror(errno)); | ||
103 | goto fail; | ||
104 | } | ||
105 | if (ct_tmpl_set_informative(tmpl_fd, CT_PR_EV_HWERR) != 0) { | ||
106 | error("%s: Error setting process contract template " | ||
107 | "informative events: %s", __func__, strerror(errno)); | ||
108 | goto fail; | ||
109 | } | ||
110 | |||
111 | /* Now make this the active template for this process. */ | ||
112 | if (ct_tmpl_activate(tmpl_fd) != 0) { | ||
113 | error("%s: Error activating process contract " | ||
114 | "template: %s", __func__, strerror(errno)); | ||
115 | goto fail; | ||
116 | } | ||
117 | return; | ||
118 | |||
119 | fail: | ||
120 | if (tmpl_fd != -1) { | ||
121 | close(tmpl_fd); | ||
122 | tmpl_fd = -1; | ||
123 | } | ||
124 | } | ||
125 | |||
126 | void | ||
127 | solaris_contract_post_fork_child() | ||
128 | { | ||
129 | debug2("%s: clearing process contract template on fd %d", | ||
130 | __func__, tmpl_fd); | ||
131 | |||
132 | /* Clear the active template. */ | ||
133 | if (ct_tmpl_clear(tmpl_fd) != 0) | ||
134 | error("%s: Error clearing active process contract " | ||
135 | "template: %s", __func__, strerror(errno)); | ||
136 | |||
137 | close(tmpl_fd); | ||
138 | tmpl_fd = -1; | ||
139 | } | ||
140 | |||
141 | void | ||
142 | solaris_contract_post_fork_parent(pid_t pid) | ||
143 | { | ||
144 | ctid_t ctid; | ||
145 | char ctl_path[256]; | ||
146 | int r, ctl_fd = -1, stat_fd = -1; | ||
147 | |||
148 | debug2("%s: clearing template (fd %d)", __func__, tmpl_fd); | ||
149 | |||
150 | if (tmpl_fd == -1) | ||
151 | return; | ||
152 | |||
153 | /* First clear the active template. */ | ||
154 | if ((r = ct_tmpl_clear(tmpl_fd)) != 0) | ||
155 | error("%s: Error clearing active process contract " | ||
156 | "template: %s", __func__, strerror(errno)); | ||
157 | |||
158 | close(tmpl_fd); | ||
159 | tmpl_fd = -1; | ||
160 | |||
161 | /* | ||
162 | * If either the fork didn't succeed (pid < 0), or clearing | ||
163 | * th active contract failed (r != 0), then we have nothing | ||
164 | * more do. | ||
165 | */ | ||
166 | if (r != 0 || pid <= 0) | ||
167 | return; | ||
168 | |||
169 | /* Now lookup and abandon the contract we've created. */ | ||
170 | ctid = get_active_process_contract_id(); | ||
171 | |||
172 | debug2("%s: abandoning contract id %ld", __func__, ctid); | ||
173 | |||
174 | snprintf(ctl_path, sizeof(ctl_path), | ||
175 | CTFS_ROOT "/process/%ld/ctl", ctid); | ||
176 | if ((ctl_fd = open64(ctl_path, O_WRONLY)) < 0) { | ||
177 | error("%s: Error opening process contract " | ||
178 | "ctl file: %s", __func__, strerror(errno)); | ||
179 | goto fail; | ||
180 | } | ||
181 | if (ct_ctl_abandon(ctl_fd) < 0) { | ||
182 | error("%s: Error abandoning process contract: %s", | ||
183 | __func__, strerror(errno)); | ||
184 | goto fail; | ||
185 | } | ||
186 | close(ctl_fd); | ||
187 | return; | ||
188 | |||
189 | fail: | ||
190 | if (tmpl_fd != -1) { | ||
191 | close(tmpl_fd); | ||
192 | tmpl_fd = -1; | ||
193 | } | ||
194 | if (stat_fd != -1) | ||
195 | close(stat_fd); | ||
196 | if (ctl_fd != -1) | ||
197 | close(ctl_fd); | ||
198 | } | ||
199 | #endif | ||