d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

linux: add support for SO_PEERSEC getsockopt

Browse Source 
It returns "unconfined", like Linux without SELinux would.

Sponsored By:	The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D28164
This commit is contained in:
Edward Tomasz Napierala 2021-02-07 20:28:35 +00:00
parent 6117aa58fa
commit e44a78ce6f
2 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
sys/compat/linux/linux_socket.c
View File

@ -82,6 +82,8 @@ __FBSDID("$FreeBSD$");
#include <compat/linux/linux_timer.h>
#include <compat/linux/linux_util.h>
#define SECURITY_CONTEXT_STRING "unconfined"
static int linux_sendmsg_common(struct thread *, l_int, struct l_msghdr *,
l_uint);
static int linux_recvmsg_common(struct thread *, l_int, struct l_msghdr *,
@ -1861,6 +1863,28 @@ linux_setsockopt(struct thread *td, struct linux_setsockopt_args *args)
return (error);
}
static int
linux_getsockopt_so_peersec(struct thread *td,
struct linux_getsockopt_args *args)
{
socklen_t len;
int error;
len = sizeof(SECURITY_CONTEXT_STRING);
if (args->optlen < len) {
error = copyout(&len, PTRIN(args->optlen), sizeof(len));
if (error == 0)
error = ERANGE;
return (error);
}
error = copyout(SECURITY_CONTEXT_STRING,
PTRIN(args->optval), sizeof(SECURITY_CONTEXT_STRING));
if (error == 0)
error = copyout(&len, PTRIN(args->optlen), sizeof(len));
return (error);
}
int
linux_getsockopt(struct thread *td, struct linux_getsockopt_args *args)
{
@ -1875,6 +1899,8 @@ linux_getsockopt(struct thread *td, struct linux_getsockopt_args *args)
level = linux_to_bsd_sockopt_level(args->level);
switch (level) {
case SOL_SOCKET:
if (args->optname == LINUX_SO_PEERSEC)
return (linux_getsockopt_so_peersec(td, args));
name = linux_to_bsd_so_sockopt(args->optname);
switch (name) {
case LOCAL_CREDS_PERSISTENT:

1
sys/compat/linux/linux_socket.h
View File

@ -195,6 +195,7 @@ int linux_accept(struct thread *td, struct linux_accept_args *args);
#endif
#define LINUX_SO_TIMESTAMP 29
#define LINUX_SO_ACCEPTCONN 30
#define LINUX_SO_PEERSEC 31
#define LINUX_SO_SNDBUFFORCE 32
#define LINUX_SO_RCVBUFFORCE 33
#define LINUX_SO_PROTOCOL 38