d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
bc27d6c608
freebsd-nq/sys/security/audit/audit_bsm_domain.c
Robert Watson 4df4e33572 Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel: 
- Add and use mapping of fcntl(2) commands to new BSM constant space.
- Adopt (int) rather than (long) arguments to a number of auditon(2)
  commands, as has happened in Solaris, and add compatibility code to
  handle the old comments.

Note that BSM_PF_IEEE80211 is partially but not fully removed, as the
userspace OpenBSM 1.1alpha5 code still depends on it.  Once userspace
is updated, I'll GCC the kernel constant.

MFC after:		2 weeks
Sponsored by:		Apple, Inc.
Obtained from:		TrustedBSD Project
Portions submitted by:	sson
2009-04-19 14:53:17 +00:00

496 lines
7.5 KiB
C
Raw Blame History

/*-
* Copyright (c) 2008 Apple Inc.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. Neither the name of Apple Inc. ("Apple") nor the names of
* its contributors may be used to endorse or promote products derived
* from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR
* ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*
* P4: //depot/projects/trustedbsd/openbsm/libbsm/bsm_domain.c#3
*/
#include <sys/cdefs.h>
__FBSDID("$FreeBSD$");
#include <sys/param.h>
#include <sys/socket.h>
#include <security/audit/audit.h>
#include <bsm/audit_domain.h>
#include <bsm/audit_record.h>
struct bsm_domain {
u_short bd_bsm_domain;
int bd_local_domain;
};
#define PF_NO_LOCAL_MAPPING -600
static const struct bsm_domain bsm_domains[] = {
{ BSM_PF_UNSPEC, PF_UNSPEC },
{ BSM_PF_LOCAL, PF_LOCAL },
{ BSM_PF_INET, PF_INET },
{ BSM_PF_IMPLINK,
#ifdef PF_IMPLINK
PF_IMPLINK
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_PUP,
#ifdef PF_PUP
PF_PUP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_CHAOS,
#ifdef PF_CHAOS
PF_CHAOS
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_NS,
#ifdef PF_NS
PF_NS
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_NBS,
#ifdef PF_NBS
PF_NBS
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ECMA,
#ifdef PF_ECMA
PF_ECMA
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_DATAKIT,
#ifdef PF_DATAKIT
PF_DATAKIT
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_CCITT,
#ifdef PF_CCITT
PF_CCITT
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_SNA, PF_SNA },
{ BSM_PF_DECnet, PF_DECnet },
{ BSM_PF_DLI,
#ifdef PF_DLI
PF_DLI
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_LAT,
#ifdef PF_LAT
PF_LAT
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_HYLINK,
#ifdef PF_HYLINK
PF_HYLINK
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_APPLETALK, PF_APPLETALK },
{ BSM_PF_NIT,
#ifdef PF_NIT
PF_NIT
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_802,
#ifdef PF_802
PF_802
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_OSI,
#ifdef PF_OSI
PF_OSI
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_X25,
#ifdef PF_X25
PF_X25
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_OSINET,
#ifdef PF_OSINET
PF_OSINET
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_GOSIP,
#ifdef PF_GOSIP
PF_GOSIP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_IPX, PF_IPX },
{ BSM_PF_ROUTE, PF_ROUTE },
{ BSM_PF_LINK,
#ifdef PF_LINK
PF_LINK
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_INET6, PF_INET6 },
{ BSM_PF_KEY, PF_KEY },
{ BSM_PF_NCA,
#ifdef PF_NCA
PF_NCA
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_POLICY,
#ifdef PF_POLICY
PF_POLICY
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_INET_OFFLOAD,
#ifdef PF_INET_OFFLOAD
PF_INET_OFFLOAD
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_NETBIOS,
#ifdef PF_NETBIOS
PF_NETBIOS
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ISO,
#ifdef PF_ISO
PF_ISO
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_XTP,
#ifdef PF_XTP
PF_XTP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_COIP,
#ifdef PF_COIP
PF_COIP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_CNT,
#ifdef PF_CNT
PF_CNT
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_RTIP,
#ifdef PF_RTIP
PF_RTIP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_SIP,
#ifdef PF_SIP
PF_SIP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_PIP,
#ifdef PF_PIP
PF_PIP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ISDN,
#ifdef PF_ISDN
PF_ISDN
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_E164,
#ifdef PF_E164
PF_E164
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_NATM,
#ifdef PF_NATM
PF_NATM
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ATM,
#ifdef PF_ATM
PF_ATM
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_NETGRAPH,
#ifdef PF_NETGRAPH
PF_NETGRAPH
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_SLOW,
#ifdef PF_SLOW
PF_SLOW
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_SCLUSTER,
#ifdef PF_SCLUSTER
PF_SCLUSTER
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ARP,
#ifdef PF_ARP
PF_ARP
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_BLUETOOTH,
#ifdef PF_BLUETOOTH
PF_BLUETOOTH
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_AX25,
#ifdef PF_AX25
PF_AX25
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ROSE,
#ifdef PF_ROSE
PF_ROSE
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_NETBEUI,
#ifdef PF_NETBEUI
PF_NETBEUI
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_SECURITY,
#ifdef PF_SECURITY
PF_SECURITY
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_PACKET,
#ifdef PF_PACKET
PF_PACKET
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ASH,
#ifdef PF_ASH
PF_ASH
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ECONET,
#ifdef PF_ECONET
PF_ECONET
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_ATMSVC,
#ifdef PF_ATMSVC
PF_ATMSVC
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_IRDA,
#ifdef PF_IRDA
PF_IRDA
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_PPPOX,
#ifdef PF_PPPOX
PF_PPPOX
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_WANPIPE,
#ifdef PF_WANPIPE
PF_WANPIPE
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_LLC,
#ifdef PF_LLC
PF_LLC
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_CAN,
#ifdef PF_CAN
PF_CAN
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_TIPC,
#ifdef PF_TIPC
PF_TIPC
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_IUCV,
#ifdef PF_IUCV
PF_IUCV
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_RXRPC,
#ifdef PF_RXRPC
PF_RXRPC
#else
PF_NO_LOCAL_MAPPING
#endif
},
{ BSM_PF_PHONET,
#ifdef PF_PHONET
PF_PHONET
#else
PF_NO_LOCAL_MAPPING
#endif
},
};
static const int bsm_domains_count = sizeof(bsm_domains) /
sizeof(bsm_domains[0]);
static const struct bsm_domain *
bsm_lookup_local_domain(int local_domain)
{
int i;
for (i = 0; i < bsm_domains_count; i++) {
if (bsm_domains[i].bd_local_domain == local_domain)
return (&bsm_domains[i]);
}
return (NULL);
}
u_short
au_domain_to_bsm(int local_domain)
{
const struct bsm_domain *bstp;
bstp = bsm_lookup_local_domain(local_domain);
if (bstp == NULL)
return (BSM_PF_UNKNOWN);
return (bstp->bd_bsm_domain);
}
static const struct bsm_domain *
bsm_lookup_bsm_domain(u_short bsm_domain)
{
int i;
for (i = 0; i < bsm_domains_count; i++) {
if (bsm_domains[i].bd_bsm_domain == bsm_domain)
return (&bsm_domains[i]);
}
return (NULL);
}
int
au_bsm_to_domain(u_short bsm_domain, int *local_domainp)
{
const struct bsm_domain *bstp;
bstp = bsm_lookup_bsm_domain(bsm_domain);
if (bstp == NULL || bstp->bd_local_domain)
return (-1);
*local_domainp = bstp->bd_local_domain;
return (0);
}
Reference in New Issue View Git Blame Copy Permalink