2005-04-17 00:20:36 +02:00
|
|
|
/*
|
|
|
|
* Wrapper functions for 16bit uid back compatibility. All nicely tied
|
|
|
|
* together in the faint hope we can take the out in five years time.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <linux/mm.h>
|
|
|
|
#include <linux/mman.h>
|
|
|
|
#include <linux/notifier.h>
|
|
|
|
#include <linux/reboot.h>
|
|
|
|
#include <linux/prctl.h>
|
2006-01-11 21:17:46 +01:00
|
|
|
#include <linux/capability.h>
|
2005-04-17 00:20:36 +02:00
|
|
|
#include <linux/init.h>
|
|
|
|
#include <linux/highuid.h>
|
|
|
|
#include <linux/security.h>
|
|
|
|
#include <linux/syscalls.h>
|
|
|
|
|
2016-12-24 20:46:01 +01:00
|
|
|
#include <linux/uaccess.h>
|
2005-04-17 00:20:36 +02:00
|
|
|
|
2009-01-14 14:14:19 +01:00
|
|
|
SYSCALL_DEFINE3(chown16, const char __user *, filename, old_uid_t, user, old_gid_t, group)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_chown(filename, low2highuid(user), low2highgid(group));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:19 +01:00
|
|
|
SYSCALL_DEFINE3(lchown16, const char __user *, filename, old_uid_t, user, old_gid_t, group)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_lchown(filename, low2highuid(user), low2highgid(group));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:19 +01:00
|
|
|
SYSCALL_DEFINE3(fchown16, unsigned int, fd, old_uid_t, user, old_gid_t, group)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_fchown(fd, low2highuid(user), low2highgid(group));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE2(setregid16, old_gid_t, rgid, old_gid_t, egid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setregid(low2highgid(rgid), low2highgid(egid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE1(setgid16, old_gid_t, gid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setgid(low2highgid(gid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE2(setreuid16, old_uid_t, ruid, old_uid_t, euid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setreuid(low2highuid(ruid), low2highuid(euid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE1(setuid16, old_uid_t, uid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setuid(low2highuid(uid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE3(setresuid16, old_uid_t, ruid, old_uid_t, euid, old_uid_t, suid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setresuid(low2highuid(ruid), low2highuid(euid),
|
2006-04-19 23:41:39 +02:00
|
|
|
low2highuid(suid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
SYSCALL_DEFINE3(getresuid16, old_uid_t __user *, ruidp, old_uid_t __user *, euidp, old_uid_t __user *, suidp)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2008-11-14 00:39:18 +01:00
|
|
|
const struct cred *cred = current_cred();
|
2005-04-17 00:20:36 +02:00
|
|
|
int retval;
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
old_uid_t ruid, euid, suid;
|
2005-04-17 00:20:36 +02:00
|
|
|
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
ruid = high2lowuid(from_kuid_munged(cred->user_ns, cred->uid));
|
|
|
|
euid = high2lowuid(from_kuid_munged(cred->user_ns, cred->euid));
|
|
|
|
suid = high2lowuid(from_kuid_munged(cred->user_ns, cred->suid));
|
|
|
|
|
|
|
|
if (!(retval = put_user(ruid, ruidp)) &&
|
|
|
|
!(retval = put_user(euid, euidp)))
|
|
|
|
retval = put_user(suid, suidp);
|
2005-04-17 00:20:36 +02:00
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE3(setresgid16, old_gid_t, rgid, old_gid_t, egid, old_gid_t, sgid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setresgid(low2highgid(rgid), low2highgid(egid),
|
2006-04-19 23:41:39 +02:00
|
|
|
low2highgid(sgid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
SYSCALL_DEFINE3(getresgid16, old_gid_t __user *, rgidp, old_gid_t __user *, egidp, old_gid_t __user *, sgidp)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2008-11-14 00:39:18 +01:00
|
|
|
const struct cred *cred = current_cred();
|
2005-04-17 00:20:36 +02:00
|
|
|
int retval;
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
old_gid_t rgid, egid, sgid;
|
|
|
|
|
|
|
|
rgid = high2lowgid(from_kgid_munged(cred->user_ns, cred->gid));
|
|
|
|
egid = high2lowgid(from_kgid_munged(cred->user_ns, cred->egid));
|
|
|
|
sgid = high2lowgid(from_kgid_munged(cred->user_ns, cred->sgid));
|
2005-04-17 00:20:36 +02:00
|
|
|
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
if (!(retval = put_user(rgid, rgidp)) &&
|
|
|
|
!(retval = put_user(egid, egidp)))
|
|
|
|
retval = put_user(sgid, sgidp);
|
2005-04-17 00:20:36 +02:00
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE1(setfsuid16, old_uid_t, uid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setfsuid(low2highuid(uid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:20 +01:00
|
|
|
SYSCALL_DEFINE1(setfsgid16, old_gid_t, gid)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2013-01-21 21:25:54 +01:00
|
|
|
return sys_setfsgid(low2highgid(gid));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
static int groups16_to_user(old_gid_t __user *grouplist,
|
|
|
|
struct group_info *group_info)
|
|
|
|
{
|
2011-11-15 00:56:38 +01:00
|
|
|
struct user_namespace *user_ns = current_user_ns();
|
2005-04-17 00:20:36 +02:00
|
|
|
int i;
|
|
|
|
old_gid_t group;
|
2011-11-15 00:56:38 +01:00
|
|
|
kgid_t kgid;
|
2005-04-17 00:20:36 +02:00
|
|
|
|
|
|
|
for (i = 0; i < group_info->ngroups; i++) {
|
cred: simpler, 1D supplementary groups
Current supplementary groups code can massively overallocate memory and
is implemented in a way so that access to individual gid is done via 2D
array.
If number of gids is <= 32, memory allocation is more or less tolerable
(140/148 bytes). But if it is not, code allocates full page (!)
regardless and, what's even more fun, doesn't reuse small 32-entry
array.
2D array means dependent shifts, loads and LEAs without possibility to
optimize them (gid is never known at compile time).
All of the above is unnecessary. Switch to the usual
trailing-zero-len-array scheme. Memory is allocated with
kmalloc/vmalloc() and only as much as needed. Accesses become simpler
(LEA 8(gi,idx,4) or even without displacement).
Maximum number of gids is 65536 which translates to 256KB+8 bytes. I
think kernel can handle such allocation.
On my usual desktop system with whole 9 (nine) aux groups, struct
group_info shrinks from 148 bytes to 44 bytes, yay!
Nice side effects:
- "gi->gid[i]" is shorter than "GROUP_AT(gi, i)", less typing,
- fix little mess in net/ipv4/ping.c
should have been using GROUP_AT macro but this point becomes moot,
- aux group allocation is persistent and should be accounted as such.
Link: http://lkml.kernel.org/r/20160817201927.GA2096@p183.telecom.by
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Cc: Vasily Kulikov <segoon@openwall.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2016-10-08 02:03:12 +02:00
|
|
|
kgid = group_info->gid[i];
|
2011-11-15 00:56:38 +01:00
|
|
|
group = high2lowgid(from_kgid_munged(user_ns, kgid));
|
2005-04-17 00:20:36 +02:00
|
|
|
if (put_user(group, grouplist+i))
|
|
|
|
return -EFAULT;
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int groups16_from_user(struct group_info *group_info,
|
|
|
|
old_gid_t __user *grouplist)
|
|
|
|
{
|
2011-11-15 00:56:38 +01:00
|
|
|
struct user_namespace *user_ns = current_user_ns();
|
2005-04-17 00:20:36 +02:00
|
|
|
int i;
|
|
|
|
old_gid_t group;
|
2011-11-15 00:56:38 +01:00
|
|
|
kgid_t kgid;
|
2005-04-17 00:20:36 +02:00
|
|
|
|
|
|
|
for (i = 0; i < group_info->ngroups; i++) {
|
|
|
|
if (get_user(group, grouplist+i))
|
|
|
|
return -EFAULT;
|
2011-11-15 00:56:38 +01:00
|
|
|
|
|
|
|
kgid = make_kgid(user_ns, low2highgid(group));
|
|
|
|
if (!gid_valid(kgid))
|
|
|
|
return -EINVAL;
|
|
|
|
|
cred: simpler, 1D supplementary groups
Current supplementary groups code can massively overallocate memory and
is implemented in a way so that access to individual gid is done via 2D
array.
If number of gids is <= 32, memory allocation is more or less tolerable
(140/148 bytes). But if it is not, code allocates full page (!)
regardless and, what's even more fun, doesn't reuse small 32-entry
array.
2D array means dependent shifts, loads and LEAs without possibility to
optimize them (gid is never known at compile time).
All of the above is unnecessary. Switch to the usual
trailing-zero-len-array scheme. Memory is allocated with
kmalloc/vmalloc() and only as much as needed. Accesses become simpler
(LEA 8(gi,idx,4) or even without displacement).
Maximum number of gids is 65536 which translates to 256KB+8 bytes. I
think kernel can handle such allocation.
On my usual desktop system with whole 9 (nine) aux groups, struct
group_info shrinks from 148 bytes to 44 bytes, yay!
Nice side effects:
- "gi->gid[i]" is shorter than "GROUP_AT(gi, i)", less typing,
- fix little mess in net/ipv4/ping.c
should have been using GROUP_AT macro but this point becomes moot,
- aux group allocation is persistent and should be accounted as such.
Link: http://lkml.kernel.org/r/20160817201927.GA2096@p183.telecom.by
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Cc: Vasily Kulikov <segoon@openwall.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2016-10-08 02:03:12 +02:00
|
|
|
group_info->gid[i] = kgid;
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:21 +01:00
|
|
|
SYSCALL_DEFINE2(getgroups16, int, gidsetsize, old_gid_t __user *, grouplist)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
2008-11-14 00:39:18 +01:00
|
|
|
const struct cred *cred = current_cred();
|
|
|
|
int i;
|
2005-04-17 00:20:36 +02:00
|
|
|
|
|
|
|
if (gidsetsize < 0)
|
|
|
|
return -EINVAL;
|
|
|
|
|
2008-11-14 00:39:18 +01:00
|
|
|
i = cred->group_info->ngroups;
|
2005-04-17 00:20:36 +02:00
|
|
|
if (gidsetsize) {
|
|
|
|
if (i > gidsetsize) {
|
|
|
|
i = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
2008-11-14 00:39:18 +01:00
|
|
|
if (groups16_to_user(grouplist, cred->group_info)) {
|
2005-04-17 00:20:36 +02:00
|
|
|
i = -EFAULT;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
out:
|
|
|
|
return i;
|
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:21 +01:00
|
|
|
SYSCALL_DEFINE2(setgroups16, int, gidsetsize, old_gid_t __user *, grouplist)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
|
|
|
struct group_info *group_info;
|
|
|
|
int retval;
|
|
|
|
|
2014-12-06 00:19:27 +01:00
|
|
|
if (!may_setgroups())
|
2005-04-17 00:20:36 +02:00
|
|
|
return -EPERM;
|
|
|
|
if ((unsigned)gidsetsize > NGROUPS_MAX)
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
group_info = groups_alloc(gidsetsize);
|
|
|
|
if (!group_info)
|
|
|
|
return -ENOMEM;
|
|
|
|
retval = groups16_from_user(group_info, grouplist);
|
|
|
|
if (retval) {
|
|
|
|
put_group_info(group_info);
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
retval = set_current_groups(group_info);
|
|
|
|
put_group_info(group_info);
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:21 +01:00
|
|
|
SYSCALL_DEFINE0(getuid16)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
return high2lowuid(from_kuid_munged(current_user_ns(), current_uid()));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:21 +01:00
|
|
|
SYSCALL_DEFINE0(geteuid16)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
return high2lowuid(from_kuid_munged(current_user_ns(), current_euid()));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:21 +01:00
|
|
|
SYSCALL_DEFINE0(getgid16)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
return high2lowgid(from_kgid_munged(current_user_ns(), current_gid()));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|
|
|
|
|
2009-01-14 14:14:21 +01:00
|
|
|
SYSCALL_DEFINE0(getegid16)
|
2005-04-17 00:20:36 +02:00
|
|
|
{
|
userns: Convert setting and getting uid and gid system calls to use kuid and kgid
Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.
Convert userspace uids and gids into kuids and kgids before
being placed on struct cred. Convert struct cred kuids and
kgids into userspace uids and gids when returning them.
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
2012-02-08 03:51:01 +01:00
|
|
|
return high2lowgid(from_kgid_munged(current_user_ns(), current_egid()));
|
2005-04-17 00:20:36 +02:00
|
|
|
}
|