sys.c 41.2 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
/*
 *  linux/kernel/sys.c
 *
 *  Copyright (C) 1991, 1992  Linus Torvalds
 */

#include <linux/module.h>
#include <linux/mm.h>
#include <linux/utsname.h>
#include <linux/mman.h>
#include <linux/notifier.h>
#include <linux/reboot.h>
#include <linux/prctl.h>
#include <linux/highuid.h>
#include <linux/fs.h>
16
#include <linux/perf_event.h>
17
#include <linux/resource.h>
18 19
#include <linux/kernel.h>
#include <linux/kexec.h>
L
Linus Torvalds 已提交
20
#include <linux/workqueue.h>
21
#include <linux/capability.h>
L
Linus Torvalds 已提交
22 23 24 25 26 27 28 29
#include <linux/device.h>
#include <linux/key.h>
#include <linux/times.h>
#include <linux/posix-timers.h>
#include <linux/security.h>
#include <linux/dcookies.h>
#include <linux/suspend.h>
#include <linux/tty.h>
30
#include <linux/signal.h>
M
Matt Helsley 已提交
31
#include <linux/cn_proc.h>
32
#include <linux/getcpu.h>
33
#include <linux/task_io_accounting_ops.h>
34
#include <linux/seccomp.h>
M
Mark Lord 已提交
35
#include <linux/cpu.h>
36
#include <linux/personality.h>
37
#include <linux/ptrace.h>
38
#include <linux/fs_struct.h>
39
#include <linux/gfp.h>
L
Linus Torvalds 已提交
40 41 42

#include <linux/compat.h>
#include <linux/syscalls.h>
43
#include <linux/kprobes.h>
44
#include <linux/user_namespace.h>
L
Linus Torvalds 已提交
45

46 47
#include <linux/kmsg_dump.h>

L
Linus Torvalds 已提交
48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69
#include <asm/uaccess.h>
#include <asm/io.h>
#include <asm/unistd.h>

#ifndef SET_UNALIGN_CTL
# define SET_UNALIGN_CTL(a,b)	(-EINVAL)
#endif
#ifndef GET_UNALIGN_CTL
# define GET_UNALIGN_CTL(a,b)	(-EINVAL)
#endif
#ifndef SET_FPEMU_CTL
# define SET_FPEMU_CTL(a,b)	(-EINVAL)
#endif
#ifndef GET_FPEMU_CTL
# define GET_FPEMU_CTL(a,b)	(-EINVAL)
#endif
#ifndef SET_FPEXC_CTL
# define SET_FPEXC_CTL(a,b)	(-EINVAL)
#endif
#ifndef GET_FPEXC_CTL
# define GET_FPEXC_CTL(a,b)	(-EINVAL)
#endif
70 71 72 73 74 75
#ifndef GET_ENDIAN
# define GET_ENDIAN(a,b)	(-EINVAL)
#endif
#ifndef SET_ENDIAN
# define SET_ENDIAN(a,b)	(-EINVAL)
#endif
76 77 78 79 80 81
#ifndef GET_TSC_CTL
# define GET_TSC_CTL(a)		(-EINVAL)
#endif
#ifndef SET_TSC_CTL
# define SET_TSC_CTL(a)		(-EINVAL)
#endif
L
Linus Torvalds 已提交
82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111

/*
 * this is where the system-wide overflow UID and GID are defined, for
 * architectures that now have 32-bit UID/GID but didn't in the past
 */

int overflowuid = DEFAULT_OVERFLOWUID;
int overflowgid = DEFAULT_OVERFLOWGID;

#ifdef CONFIG_UID16
EXPORT_SYMBOL(overflowuid);
EXPORT_SYMBOL(overflowgid);
#endif

/*
 * the same as above, but for filesystems which can only store a 16-bit
 * UID and GID. as such, this is needed on all architectures
 */

int fs_overflowuid = DEFAULT_FS_OVERFLOWUID;
int fs_overflowgid = DEFAULT_FS_OVERFLOWUID;

EXPORT_SYMBOL(fs_overflowuid);
EXPORT_SYMBOL(fs_overflowgid);

/*
 * this indicates whether you can reboot with ctrl-alt-del: the default is yes
 */

int C_A_D = 1;
112 113
struct pid *cad_pid;
EXPORT_SYMBOL(cad_pid);
L
Linus Torvalds 已提交
114

115 116 117 118 119 120
/*
 * If set, this is used for preparing the system to power off.
 */

void (*pm_power_off_prepare)(void);

121 122 123 124
/*
 * set the priority of a task
 * - the caller must hold the RCU read lock
 */
L
Linus Torvalds 已提交
125 126
static int set_one_prio(struct task_struct *p, int niceval, int error)
{
127
	const struct cred *cred = current_cred(), *pcred = __task_cred(p);
L
Linus Torvalds 已提交
128 129
	int no_nice;

130 131
	if (pcred->uid  != cred->euid &&
	    pcred->euid != cred->euid && !capable(CAP_SYS_NICE)) {
L
Linus Torvalds 已提交
132 133 134
		error = -EPERM;
		goto out;
	}
M
Matt Mackall 已提交
135
	if (niceval < task_nice(p) && !can_nice(p, niceval)) {
L
Linus Torvalds 已提交
136 137 138 139 140 141 142 143 144 145 146 147 148 149 150
		error = -EACCES;
		goto out;
	}
	no_nice = security_task_setnice(p, niceval);
	if (no_nice) {
		error = no_nice;
		goto out;
	}
	if (error == -ESRCH)
		error = 0;
	set_user_nice(p, niceval);
out:
	return error;
}

151
SYSCALL_DEFINE3(setpriority, int, which, int, who, int, niceval)
L
Linus Torvalds 已提交
152 153 154
{
	struct task_struct *g, *p;
	struct user_struct *user;
155
	const struct cred *cred = current_cred();
L
Linus Torvalds 已提交
156
	int error = -EINVAL;
157
	struct pid *pgrp;
L
Linus Torvalds 已提交
158

159
	if (which > PRIO_USER || which < PRIO_PROCESS)
L
Linus Torvalds 已提交
160 161 162 163 164 165 166 167 168
		goto out;

	/* normalize: avoid signed division (rounding problems) */
	error = -ESRCH;
	if (niceval < -20)
		niceval = -20;
	if (niceval > 19)
		niceval = 19;

169
	rcu_read_lock();
L
Linus Torvalds 已提交
170 171 172
	read_lock(&tasklist_lock);
	switch (which) {
		case PRIO_PROCESS:
173
			if (who)
174
				p = find_task_by_vpid(who);
175 176
			else
				p = current;
L
Linus Torvalds 已提交
177 178 179 180
			if (p)
				error = set_one_prio(p, niceval, error);
			break;
		case PRIO_PGRP:
181
			if (who)
182
				pgrp = find_vpid(who);
183 184
			else
				pgrp = task_pgrp(current);
185
			do_each_pid_thread(pgrp, PIDTYPE_PGID, p) {
L
Linus Torvalds 已提交
186
				error = set_one_prio(p, niceval, error);
187
			} while_each_pid_thread(pgrp, PIDTYPE_PGID, p);
L
Linus Torvalds 已提交
188 189
			break;
		case PRIO_USER:
D
David Howells 已提交
190
			user = (struct user_struct *) cred->user;
L
Linus Torvalds 已提交
191
			if (!who)
192 193 194 195
				who = cred->uid;
			else if ((who != cred->uid) &&
				 !(user = find_user(who)))
				goto out_unlock;	/* No processes for this user */
L
Linus Torvalds 已提交
196

197
			do_each_thread(g, p) {
198
				if (__task_cred(p)->uid == who)
L
Linus Torvalds 已提交
199
					error = set_one_prio(p, niceval, error);
200
			} while_each_thread(g, p);
201
			if (who != cred->uid)
L
Linus Torvalds 已提交
202 203 204 205 206
				free_uid(user);		/* For find_user() */
			break;
	}
out_unlock:
	read_unlock(&tasklist_lock);
207
	rcu_read_unlock();
L
Linus Torvalds 已提交
208 209 210 211 212 213 214 215 216 217
out:
	return error;
}

/*
 * Ugh. To avoid negative return values, "getpriority()" will
 * not return the normal nice-value, but a negated value that
 * has been offset by 20 (ie it returns 40..1 instead of -20..19)
 * to stay compatible.
 */
218
SYSCALL_DEFINE2(getpriority, int, which, int, who)
L
Linus Torvalds 已提交
219 220 221
{
	struct task_struct *g, *p;
	struct user_struct *user;
222
	const struct cred *cred = current_cred();
L
Linus Torvalds 已提交
223
	long niceval, retval = -ESRCH;
224
	struct pid *pgrp;
L
Linus Torvalds 已提交
225

226
	if (which > PRIO_USER || which < PRIO_PROCESS)
L
Linus Torvalds 已提交
227 228
		return -EINVAL;

229
	rcu_read_lock();
L
Linus Torvalds 已提交
230 231 232
	read_lock(&tasklist_lock);
	switch (which) {
		case PRIO_PROCESS:
233
			if (who)
234
				p = find_task_by_vpid(who);
235 236
			else
				p = current;
L
Linus Torvalds 已提交
237 238 239 240 241 242 243
			if (p) {
				niceval = 20 - task_nice(p);
				if (niceval > retval)
					retval = niceval;
			}
			break;
		case PRIO_PGRP:
244
			if (who)
245
				pgrp = find_vpid(who);
246 247
			else
				pgrp = task_pgrp(current);
248
			do_each_pid_thread(pgrp, PIDTYPE_PGID, p) {
L
Linus Torvalds 已提交
249 250 251
				niceval = 20 - task_nice(p);
				if (niceval > retval)
					retval = niceval;
252
			} while_each_pid_thread(pgrp, PIDTYPE_PGID, p);
L
Linus Torvalds 已提交
253 254
			break;
		case PRIO_USER:
255
			user = (struct user_struct *) cred->user;
L
Linus Torvalds 已提交
256
			if (!who)
257 258 259 260
				who = cred->uid;
			else if ((who != cred->uid) &&
				 !(user = find_user(who)))
				goto out_unlock;	/* No processes for this user */
L
Linus Torvalds 已提交
261

262
			do_each_thread(g, p) {
263
				if (__task_cred(p)->uid == who) {
L
Linus Torvalds 已提交
264 265 266 267
					niceval = 20 - task_nice(p);
					if (niceval > retval)
						retval = niceval;
				}
268
			} while_each_thread(g, p);
269
			if (who != cred->uid)
L
Linus Torvalds 已提交
270 271 272 273 274
				free_uid(user);		/* for find_user() */
			break;
	}
out_unlock:
	read_unlock(&tasklist_lock);
275
	rcu_read_unlock();
L
Linus Torvalds 已提交
276 277 278 279

	return retval;
}

280 281 282 283 284 285 286 287
/**
 *	emergency_restart - reboot the system
 *
 *	Without shutting down any hardware or taking any locks
 *	reboot the system.  This is called when we know we are in
 *	trouble so this is our best effort to reboot.  This is
 *	safe to call in interrupt context.
 */
288 289
void emergency_restart(void)
{
290
	kmsg_dump(KMSG_DUMP_EMERG);
291 292 293 294
	machine_emergency_restart();
}
EXPORT_SYMBOL_GPL(emergency_restart);

295
void kernel_restart_prepare(char *cmd)
296
{
297
	blocking_notifier_call_chain(&reboot_notifier_list, SYS_RESTART, cmd);
298 299
	system_state = SYSTEM_RESTART;
	device_shutdown();
300
	sysdev_shutdown();
301
}
302 303 304 305

/**
 *	kernel_restart - reboot the system
 *	@cmd: pointer to buffer containing command to execute for restart
306
 *		or %NULL
307 308 309 310
 *
 *	Shutdown everything and perform a clean reboot.
 *	This is not safe to call in interrupt context.
 */
311 312 313
void kernel_restart(char *cmd)
{
	kernel_restart_prepare(cmd);
314
	if (!cmd)
315
		printk(KERN_EMERG "Restarting system.\n");
316
	else
317
		printk(KERN_EMERG "Restarting system with command '%s'.\n", cmd);
318
	kmsg_dump(KMSG_DUMP_RESTART);
319 320 321 322
	machine_restart(cmd);
}
EXPORT_SYMBOL_GPL(kernel_restart);

323
static void kernel_shutdown_prepare(enum system_states state)
324
{
325
	blocking_notifier_call_chain(&reboot_notifier_list,
326 327 328 329
		(state == SYSTEM_HALT)?SYS_HALT:SYS_POWER_OFF, NULL);
	system_state = state;
	device_shutdown();
}
330 331 332 333 334 335 336
/**
 *	kernel_halt - halt the system
 *
 *	Shutdown everything and perform a clean system halt.
 */
void kernel_halt(void)
{
337
	kernel_shutdown_prepare(SYSTEM_HALT);
338
	sysdev_shutdown();
339
	printk(KERN_EMERG "System halted.\n");
340
	kmsg_dump(KMSG_DUMP_HALT);
341 342
	machine_halt();
}
343

344 345
EXPORT_SYMBOL_GPL(kernel_halt);

346 347 348 349 350 351 352
/**
 *	kernel_power_off - power_off the system
 *
 *	Shutdown everything and perform a clean system power_off.
 */
void kernel_power_off(void)
{
353
	kernel_shutdown_prepare(SYSTEM_POWER_OFF);
354 355
	if (pm_power_off_prepare)
		pm_power_off_prepare();
M
Mark Lord 已提交
356
	disable_nonboot_cpus();
357
	sysdev_shutdown();
358
	printk(KERN_EMERG "Power down.\n");
359
	kmsg_dump(KMSG_DUMP_POWEROFF);
360 361 362
	machine_power_off();
}
EXPORT_SYMBOL_GPL(kernel_power_off);
T
Thomas Gleixner 已提交
363 364 365

static DEFINE_MUTEX(reboot_mutex);

L
Linus Torvalds 已提交
366 367 368 369 370 371 372 373
/*
 * Reboot system call: for obvious reasons only root may call it,
 * and even root needs to set up some magic numbers in the registers
 * so that some mistake won't make this reboot the whole machine.
 * You can also set the meaning of the ctrl-alt-del-key here.
 *
 * reboot doesn't sync: do that yourself before calling this.
 */
374 375
SYSCALL_DEFINE4(reboot, int, magic1, int, magic2, unsigned int, cmd,
		void __user *, arg)
L
Linus Torvalds 已提交
376 377
{
	char buffer[256];
378
	int ret = 0;
L
Linus Torvalds 已提交
379 380 381 382 383 384 385 386 387 388 389 390 391

	/* We only trust the superuser with rebooting the system. */
	if (!capable(CAP_SYS_BOOT))
		return -EPERM;

	/* For safety, we require "magic" arguments. */
	if (magic1 != LINUX_REBOOT_MAGIC1 ||
	    (magic2 != LINUX_REBOOT_MAGIC2 &&
	                magic2 != LINUX_REBOOT_MAGIC2A &&
			magic2 != LINUX_REBOOT_MAGIC2B &&
	                magic2 != LINUX_REBOOT_MAGIC2C))
		return -EINVAL;

392 393 394 395 396 397
	/* Instead of trying to make the power_off code look like
	 * halt when pm_power_off is not set do it the easy way.
	 */
	if ((cmd == LINUX_REBOOT_CMD_POWER_OFF) && !pm_power_off)
		cmd = LINUX_REBOOT_CMD_HALT;

T
Thomas Gleixner 已提交
398
	mutex_lock(&reboot_mutex);
L
Linus Torvalds 已提交
399 400
	switch (cmd) {
	case LINUX_REBOOT_CMD_RESTART:
401
		kernel_restart(NULL);
L
Linus Torvalds 已提交
402 403 404 405 406 407 408 409 410 411 412
		break;

	case LINUX_REBOOT_CMD_CAD_ON:
		C_A_D = 1;
		break;

	case LINUX_REBOOT_CMD_CAD_OFF:
		C_A_D = 0;
		break;

	case LINUX_REBOOT_CMD_HALT:
413
		kernel_halt();
L
Linus Torvalds 已提交
414
		do_exit(0);
415
		panic("cannot halt");
L
Linus Torvalds 已提交
416 417

	case LINUX_REBOOT_CMD_POWER_OFF:
418
		kernel_power_off();
L
Linus Torvalds 已提交
419 420 421 422 423
		do_exit(0);
		break;

	case LINUX_REBOOT_CMD_RESTART2:
		if (strncpy_from_user(&buffer[0], arg, sizeof(buffer) - 1) < 0) {
T
Thomas Gleixner 已提交
424 425
			ret = -EFAULT;
			break;
L
Linus Torvalds 已提交
426 427 428
		}
		buffer[sizeof(buffer) - 1] = '\0';

429
		kernel_restart(buffer);
L
Linus Torvalds 已提交
430 431
		break;

H
Huang Ying 已提交
432
#ifdef CONFIG_KEXEC
433
	case LINUX_REBOOT_CMD_KEXEC:
434 435
		ret = kernel_kexec();
		break;
H
Huang Ying 已提交
436
#endif
437

438
#ifdef CONFIG_HIBERNATION
L
Linus Torvalds 已提交
439
	case LINUX_REBOOT_CMD_SW_SUSPEND:
440 441
		ret = hibernate();
		break;
L
Linus Torvalds 已提交
442 443 444
#endif

	default:
445 446
		ret = -EINVAL;
		break;
L
Linus Torvalds 已提交
447
	}
T
Thomas Gleixner 已提交
448
	mutex_unlock(&reboot_mutex);
449
	return ret;
L
Linus Torvalds 已提交
450 451
}

452
static void deferred_cad(struct work_struct *dummy)
L
Linus Torvalds 已提交
453
{
454
	kernel_restart(NULL);
L
Linus Torvalds 已提交
455 456 457 458 459 460 461 462 463
}

/*
 * This function gets called by ctrl-alt-del - ie the keyboard interrupt.
 * As it's called within an interrupt, it may NOT sync: the only choice
 * is whether to reboot at once, or just ignore the ctrl-alt-del.
 */
void ctrl_alt_del(void)
{
464
	static DECLARE_WORK(cad_work, deferred_cad);
L
Linus Torvalds 已提交
465 466 467 468

	if (C_A_D)
		schedule_work(&cad_work);
	else
469
		kill_cad_pid(SIGINT, 1);
L
Linus Torvalds 已提交
470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489
}
	
/*
 * Unprivileged users may change the real gid to the effective gid
 * or vice versa.  (BSD-style)
 *
 * If you set the real gid at all, or set the effective gid to a value not
 * equal to the real gid, then the saved gid is set to the new effective gid.
 *
 * This makes it possible for a setgid program to completely drop its
 * privileges, which is often a useful assertion to make when you are doing
 * a security audit over a program.
 *
 * The general idea is that a program which uses just setregid() will be
 * 100% compatible with BSD.  A program which uses just setgid() will be
 * 100% compatible with POSIX with saved IDs. 
 *
 * SMP: There are not races, the GIDs are checked only by filesystem
 *      operations (as far as semantic preservation is concerned).
 */
490
SYSCALL_DEFINE2(setregid, gid_t, rgid, gid_t, egid)
L
Linus Torvalds 已提交
491
{
D
David Howells 已提交
492 493
	const struct cred *old;
	struct cred *new;
L
Linus Torvalds 已提交
494 495
	int retval;

D
David Howells 已提交
496 497 498 499 500 501
	new = prepare_creds();
	if (!new)
		return -ENOMEM;
	old = current_cred();

	retval = -EPERM;
L
Linus Torvalds 已提交
502
	if (rgid != (gid_t) -1) {
D
David Howells 已提交
503 504
		if (old->gid == rgid ||
		    old->egid == rgid ||
L
Linus Torvalds 已提交
505
		    capable(CAP_SETGID))
D
David Howells 已提交
506
			new->gid = rgid;
L
Linus Torvalds 已提交
507
		else
D
David Howells 已提交
508
			goto error;
L
Linus Torvalds 已提交
509 510
	}
	if (egid != (gid_t) -1) {
D
David Howells 已提交
511 512 513
		if (old->gid == egid ||
		    old->egid == egid ||
		    old->sgid == egid ||
L
Linus Torvalds 已提交
514
		    capable(CAP_SETGID))
D
David Howells 已提交
515
			new->egid = egid;
516
		else
D
David Howells 已提交
517
			goto error;
L
Linus Torvalds 已提交
518
	}
D
David Howells 已提交
519

L
Linus Torvalds 已提交
520
	if (rgid != (gid_t) -1 ||
D
David Howells 已提交
521 522 523 524 525 526 527 528 529
	    (egid != (gid_t) -1 && egid != old->gid))
		new->sgid = new->egid;
	new->fsgid = new->egid;

	return commit_creds(new);

error:
	abort_creds(new);
	return retval;
L
Linus Torvalds 已提交
530 531 532 533 534 535 536
}

/*
 * setgid() is implemented like SysV w/ SAVED_IDS 
 *
 * SMP: Same implicit races as above.
 */
537
SYSCALL_DEFINE1(setgid, gid_t, gid)
L
Linus Torvalds 已提交
538
{
D
David Howells 已提交
539 540
	const struct cred *old;
	struct cred *new;
L
Linus Torvalds 已提交
541 542
	int retval;

D
David Howells 已提交
543 544 545 546 547 548 549 550 551 552
	new = prepare_creds();
	if (!new)
		return -ENOMEM;
	old = current_cred();

	retval = -EPERM;
	if (capable(CAP_SETGID))
		new->gid = new->egid = new->sgid = new->fsgid = gid;
	else if (gid == old->gid || gid == old->sgid)
		new->egid = new->fsgid = gid;
L
Linus Torvalds 已提交
553
	else
D
David Howells 已提交
554
		goto error;
L
Linus Torvalds 已提交
555

D
David Howells 已提交
556 557 558 559 560
	return commit_creds(new);

error:
	abort_creds(new);
	return retval;
L
Linus Torvalds 已提交
561
}
562

D
David Howells 已提交
563 564 565 566
/*
 * change the user struct in a credentials set to match the new UID
 */
static int set_user(struct cred *new)
L
Linus Torvalds 已提交
567 568 569
{
	struct user_struct *new_user;

570
	new_user = alloc_uid(current_user_ns(), new->uid);
L
Linus Torvalds 已提交
571 572 573
	if (!new_user)
		return -EAGAIN;

574
	if (atomic_read(&new_user->processes) >= rlimit(RLIMIT_NPROC) &&
575
			new_user != INIT_USER) {
L
Linus Torvalds 已提交
576 577 578 579
		free_uid(new_user);
		return -EAGAIN;
	}

D
David Howells 已提交
580 581
	free_uid(new->user);
	new->user = new_user;
L
Linus Torvalds 已提交
582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599
	return 0;
}

/*
 * Unprivileged users may change the real uid to the effective uid
 * or vice versa.  (BSD-style)
 *
 * If you set the real uid at all, or set the effective uid to a value not
 * equal to the real uid, then the saved uid is set to the new effective uid.
 *
 * This makes it possible for a setuid program to completely drop its
 * privileges, which is often a useful assertion to make when you are doing
 * a security audit over a program.
 *
 * The general idea is that a program which uses just setreuid() will be
 * 100% compatible with BSD.  A program which uses just setuid() will be
 * 100% compatible with POSIX with saved IDs. 
 */
600
SYSCALL_DEFINE2(setreuid, uid_t, ruid, uid_t, euid)
L
Linus Torvalds 已提交
601
{
D
David Howells 已提交
602 603
	const struct cred *old;
	struct cred *new;
L
Linus Torvalds 已提交
604 605
	int retval;

D
David Howells 已提交
606 607 608 609 610 611
	new = prepare_creds();
	if (!new)
		return -ENOMEM;
	old = current_cred();

	retval = -EPERM;
L
Linus Torvalds 已提交
612
	if (ruid != (uid_t) -1) {
D
David Howells 已提交
613 614 615
		new->uid = ruid;
		if (old->uid != ruid &&
		    old->euid != ruid &&
L
Linus Torvalds 已提交
616
		    !capable(CAP_SETUID))
D
David Howells 已提交
617
			goto error;
L
Linus Torvalds 已提交
618 619 620
	}

	if (euid != (uid_t) -1) {
D
David Howells 已提交
621 622 623 624
		new->euid = euid;
		if (old->uid != euid &&
		    old->euid != euid &&
		    old->suid != euid &&
L
Linus Torvalds 已提交
625
		    !capable(CAP_SETUID))
D
David Howells 已提交
626
			goto error;
L
Linus Torvalds 已提交
627 628
	}

629 630 631 632 633
	if (new->uid != old->uid) {
		retval = set_user(new);
		if (retval < 0)
			goto error;
	}
L
Linus Torvalds 已提交
634
	if (ruid != (uid_t) -1 ||
D
David Howells 已提交
635 636 637
	    (euid != (uid_t) -1 && euid != old->uid))
		new->suid = new->euid;
	new->fsuid = new->euid;
L
Linus Torvalds 已提交
638

D
David Howells 已提交
639 640 641
	retval = security_task_fix_setuid(new, old, LSM_SETID_RE);
	if (retval < 0)
		goto error;
L
Linus Torvalds 已提交
642

D
David Howells 已提交
643
	return commit_creds(new);
L
Linus Torvalds 已提交
644

D
David Howells 已提交
645 646 647 648
error:
	abort_creds(new);
	return retval;
}
L
Linus Torvalds 已提交
649 650 651 652 653 654 655 656 657 658 659 660
		
/*
 * setuid() is implemented like SysV with SAVED_IDS 
 * 
 * Note that SAVED_ID's is deficient in that a setuid root program
 * like sendmail, for example, cannot set its uid to be a normal 
 * user and then switch back, because if you're root, setuid() sets
 * the saved uid too.  If you don't like this, blame the bright people
 * in the POSIX committee and/or USG.  Note that the BSD-style setreuid()
 * will allow a root program to temporarily drop privileges and be able to
 * regain them by swapping the real and effective uid.  
 */
661
SYSCALL_DEFINE1(setuid, uid_t, uid)
L
Linus Torvalds 已提交
662
{
D
David Howells 已提交
663 664
	const struct cred *old;
	struct cred *new;
L
Linus Torvalds 已提交
665 666
	int retval;

D
David Howells 已提交
667 668 669 670 671 672
	new = prepare_creds();
	if (!new)
		return -ENOMEM;
	old = current_cred();

	retval = -EPERM;
L
Linus Torvalds 已提交
673
	if (capable(CAP_SETUID)) {
D
David Howells 已提交
674
		new->suid = new->uid = uid;
675 676 677 678
		if (uid != old->uid) {
			retval = set_user(new);
			if (retval < 0)
				goto error;
D
David Howells 已提交
679 680 681
		}
	} else if (uid != old->uid && uid != new->suid) {
		goto error;
L
Linus Torvalds 已提交
682 683
	}

D
David Howells 已提交
684 685 686 687 688
	new->fsuid = new->euid = uid;

	retval = security_task_fix_setuid(new, old, LSM_SETID_ID);
	if (retval < 0)
		goto error;
L
Linus Torvalds 已提交
689

D
David Howells 已提交
690
	return commit_creds(new);
L
Linus Torvalds 已提交
691

D
David Howells 已提交
692 693 694
error:
	abort_creds(new);
	return retval;
L
Linus Torvalds 已提交
695 696 697 698 699 700 701
}


/*
 * This function implements a generic ability to update ruid, euid,
 * and suid.  This allows you to implement the 4.4 compatible seteuid().
 */
702
SYSCALL_DEFINE3(setresuid, uid_t, ruid, uid_t, euid, uid_t, suid)
L
Linus Torvalds 已提交
703
{
D
David Howells 已提交
704 705
	const struct cred *old;
	struct cred *new;
L
Linus Torvalds 已提交
706 707
	int retval;

D
David Howells 已提交
708 709 710 711 712
	new = prepare_creds();
	if (!new)
		return -ENOMEM;

	old = current_cred();
L
Linus Torvalds 已提交
713

D
David Howells 已提交
714
	retval = -EPERM;
L
Linus Torvalds 已提交
715
	if (!capable(CAP_SETUID)) {
D
David Howells 已提交
716 717 718 719 720 721 722 723 724
		if (ruid != (uid_t) -1 && ruid != old->uid &&
		    ruid != old->euid  && ruid != old->suid)
			goto error;
		if (euid != (uid_t) -1 && euid != old->uid &&
		    euid != old->euid  && euid != old->suid)
			goto error;
		if (suid != (uid_t) -1 && suid != old->uid &&
		    suid != old->euid  && suid != old->suid)
			goto error;
L
Linus Torvalds 已提交
725
	}
D
David Howells 已提交
726

L
Linus Torvalds 已提交
727
	if (ruid != (uid_t) -1) {
D
David Howells 已提交
728
		new->uid = ruid;
729 730 731 732 733
		if (ruid != old->uid) {
			retval = set_user(new);
			if (retval < 0)
				goto error;
		}
L
Linus Torvalds 已提交
734
	}
D
David Howells 已提交
735 736
	if (euid != (uid_t) -1)
		new->euid = euid;
L
Linus Torvalds 已提交
737
	if (suid != (uid_t) -1)
D
David Howells 已提交
738 739
		new->suid = suid;
	new->fsuid = new->euid;
L
Linus Torvalds 已提交
740

D
David Howells 已提交
741 742 743
	retval = security_task_fix_setuid(new, old, LSM_SETID_RES);
	if (retval < 0)
		goto error;
L
Linus Torvalds 已提交
744

D
David Howells 已提交
745
	return commit_creds(new);
L
Linus Torvalds 已提交
746

D
David Howells 已提交
747 748 749
error:
	abort_creds(new);
	return retval;
L
Linus Torvalds 已提交
750 751
}

752
SYSCALL_DEFINE3(getresuid, uid_t __user *, ruid, uid_t __user *, euid, uid_t __user *, suid)
L
Linus Torvalds 已提交
753
{
754
	const struct cred *cred = current_cred();
L
Linus Torvalds 已提交
755 756
	int retval;

757 758
	if (!(retval   = put_user(cred->uid,  ruid)) &&
	    !(retval   = put_user(cred->euid, euid)))
759
		retval = put_user(cred->suid, suid);
L
Linus Torvalds 已提交
760 761 762 763 764 765 766

	return retval;
}

/*
 * Same as above, but for rgid, egid, sgid.
 */
767
SYSCALL_DEFINE3(setresgid, gid_t, rgid, gid_t, egid, gid_t, sgid)
L
Linus Torvalds 已提交
768
{
D
David Howells 已提交
769 770
	const struct cred *old;
	struct cred *new;
L
Linus Torvalds 已提交
771 772
	int retval;

D
David Howells 已提交
773 774 775 776 777 778
	new = prepare_creds();
	if (!new)
		return -ENOMEM;
	old = current_cred();

	retval = -EPERM;
L
Linus Torvalds 已提交
779
	if (!capable(CAP_SETGID)) {
D
David Howells 已提交
780 781 782 783 784 785 786 787 788
		if (rgid != (gid_t) -1 && rgid != old->gid &&
		    rgid != old->egid  && rgid != old->sgid)
			goto error;
		if (egid != (gid_t) -1 && egid != old->gid &&
		    egid != old->egid  && egid != old->sgid)
			goto error;
		if (sgid != (gid_t) -1 && sgid != old->gid &&
		    sgid != old->egid  && sgid != old->sgid)
			goto error;
L
Linus Torvalds 已提交
789
	}
D
David Howells 已提交
790

L
Linus Torvalds 已提交
791
	if (rgid != (gid_t) -1)
D
David Howells 已提交
792 793 794
		new->gid = rgid;
	if (egid != (gid_t) -1)
		new->egid = egid;
L
Linus Torvalds 已提交
795
	if (sgid != (gid_t) -1)
D
David Howells 已提交
796 797
		new->sgid = sgid;
	new->fsgid = new->egid;
L
Linus Torvalds 已提交
798

D
David Howells 已提交
799 800 801 802 803
	return commit_creds(new);

error:
	abort_creds(new);
	return retval;
L
Linus Torvalds 已提交
804 805
}

806
SYSCALL_DEFINE3(getresgid, gid_t __user *, rgid, gid_t __user *, egid, gid_t __user *, sgid)
L
Linus Torvalds 已提交
807
{
808
	const struct cred *cred = current_cred();
L
Linus Torvalds 已提交
809 810
	int retval;

811 812
	if (!(retval   = put_user(cred->gid,  rgid)) &&
	    !(retval   = put_user(cred->egid, egid)))
813
		retval = put_user(cred->sgid, sgid);
L
Linus Torvalds 已提交
814 815 816 817 818 819 820 821 822 823 824

	return retval;
}


/*
 * "setfsuid()" sets the fsuid - the uid used for filesystem checks. This
 * is used for "access()" and for the NFS daemon (letting nfsd stay at
 * whatever uid it wants to). It normally shadows "euid", except when
 * explicitly set by setfsuid() or for access..
 */
825
SYSCALL_DEFINE1(setfsuid, uid_t, uid)
L
Linus Torvalds 已提交
826
{
D
David Howells 已提交
827 828 829
	const struct cred *old;
	struct cred *new;
	uid_t old_fsuid;
L
Linus Torvalds 已提交
830

D
David Howells 已提交
831 832 833 834 835
	new = prepare_creds();
	if (!new)
		return current_fsuid();
	old = current_cred();
	old_fsuid = old->fsuid;
L
Linus Torvalds 已提交
836

D
David Howells 已提交
837 838
	if (uid == old->uid  || uid == old->euid  ||
	    uid == old->suid || uid == old->fsuid ||
839 840
	    capable(CAP_SETUID)) {
		if (uid != old_fsuid) {
D
David Howells 已提交
841 842 843
			new->fsuid = uid;
			if (security_task_fix_setuid(new, old, LSM_SETID_FS) == 0)
				goto change_okay;
L
Linus Torvalds 已提交
844 845 846
		}
	}

D
David Howells 已提交
847 848
	abort_creds(new);
	return old_fsuid;
L
Linus Torvalds 已提交
849

D
David Howells 已提交
850 851
change_okay:
	commit_creds(new);
L
Linus Torvalds 已提交
852 853 854 855
	return old_fsuid;
}

/*
856
 * Samma på svenska..
L
Linus Torvalds 已提交
857
 */
858
SYSCALL_DEFINE1(setfsgid, gid_t, gid)
L
Linus Torvalds 已提交
859
{
D
David Howells 已提交
860 861 862 863 864 865 866 867 868
	const struct cred *old;
	struct cred *new;
	gid_t old_fsgid;

	new = prepare_creds();
	if (!new)
		return current_fsgid();
	old = current_cred();
	old_fsgid = old->fsgid;
L
Linus Torvalds 已提交
869

D
David Howells 已提交
870 871
	if (gid == old->gid  || gid == old->egid  ||
	    gid == old->sgid || gid == old->fsgid ||
872 873
	    capable(CAP_SETGID)) {
		if (gid != old_fsgid) {
D
David Howells 已提交
874 875
			new->fsgid = gid;
			goto change_okay;
L
Linus Torvalds 已提交
876 877
		}
	}
D
David Howells 已提交
878 879 880 881 882 883

	abort_creds(new);
	return old_fsgid;

change_okay:
	commit_creds(new);
L
Linus Torvalds 已提交
884 885 886
	return old_fsgid;
}

887 888
void do_sys_times(struct tms *tms)
{
889
	cputime_t tgutime, tgstime, cutime, cstime;
890

891
	spin_lock_irq(&current->sighand->siglock);
892
	thread_group_times(current, &tgutime, &tgstime);
893 894 895
	cutime = current->signal->cutime;
	cstime = current->signal->cstime;
	spin_unlock_irq(&current->sighand->siglock);
896 897
	tms->tms_utime = cputime_to_clock_t(tgutime);
	tms->tms_stime = cputime_to_clock_t(tgstime);
898 899 900 901
	tms->tms_cutime = cputime_to_clock_t(cutime);
	tms->tms_cstime = cputime_to_clock_t(cstime);
}

902
SYSCALL_DEFINE1(times, struct tms __user *, tbuf)
L
Linus Torvalds 已提交
903 904 905
{
	if (tbuf) {
		struct tms tmp;
906 907

		do_sys_times(&tmp);
L
Linus Torvalds 已提交
908 909 910
		if (copy_to_user(tbuf, &tmp, sizeof(struct tms)))
			return -EFAULT;
	}
911
	force_successful_syscall_return();
L
Linus Torvalds 已提交
912 913 914 915 916 917 918 919 920 921 922 923 924 925 926
	return (long) jiffies_64_to_clock_t(get_jiffies_64());
}

/*
 * This needs some heavy checking ...
 * I just haven't the stomach for it. I also don't fully
 * understand sessions/pgrp etc. Let somebody who does explain it.
 *
 * OK, I think I have the protection semantics right.... this is really
 * only important on a multi-user system anyway, to make sure one user
 * can't send a signal to a process owned by another.  -TYT, 12/12/91
 *
 * Auch. Had to add the 'did_exec' flag to conform completely to POSIX.
 * LBT 04.03.94
 */
927
SYSCALL_DEFINE2(setpgid, pid_t, pid, pid_t, pgid)
L
Linus Torvalds 已提交
928 929
{
	struct task_struct *p;
930
	struct task_struct *group_leader = current->group_leader;
931 932
	struct pid *pgrp;
	int err;
L
Linus Torvalds 已提交
933 934

	if (!pid)
935
		pid = task_pid_vnr(group_leader);
L
Linus Torvalds 已提交
936 937 938 939
	if (!pgid)
		pgid = pid;
	if (pgid < 0)
		return -EINVAL;
940
	rcu_read_lock();
L
Linus Torvalds 已提交
941 942 943 944 945 946 947

	/* From this point forward we keep holding onto the tasklist lock
	 * so that our parent does not change from under us. -DaveM
	 */
	write_lock_irq(&tasklist_lock);

	err = -ESRCH;
948
	p = find_task_by_vpid(pid);
L
Linus Torvalds 已提交
949 950 951 952 953 954 955
	if (!p)
		goto out;

	err = -EINVAL;
	if (!thread_group_leader(p))
		goto out;

956
	if (same_thread_group(p->real_parent, group_leader)) {
L
Linus Torvalds 已提交
957
		err = -EPERM;
958
		if (task_session(p) != task_session(group_leader))
L
Linus Torvalds 已提交
959 960 961 962 963 964
			goto out;
		err = -EACCES;
		if (p->did_exec)
			goto out;
	} else {
		err = -ESRCH;
965
		if (p != group_leader)
L
Linus Torvalds 已提交
966 967 968 969 970 971 972
			goto out;
	}

	err = -EPERM;
	if (p->signal->leader)
		goto out;

973
	pgrp = task_pid(p);
L
Linus Torvalds 已提交
974
	if (pgid != pid) {
975
		struct task_struct *g;
L
Linus Torvalds 已提交
976

977 978
		pgrp = find_vpid(pgid);
		g = pid_task(pgrp, PIDTYPE_PGID);
979
		if (!g || task_session(g) != task_session(group_leader))
980
			goto out;
L
Linus Torvalds 已提交
981 982 983 984 985 986
	}

	err = security_task_setpgid(p, pgid);
	if (err)
		goto out;

987
	if (task_pgrp(p) != pgrp)
988
		change_pid(p, PIDTYPE_PGID, pgrp);
L
Linus Torvalds 已提交
989 990 991 992 993

	err = 0;
out:
	/* All paths lead to here, thus we are safe. -DaveM */
	write_unlock_irq(&tasklist_lock);
994
	rcu_read_unlock();
L
Linus Torvalds 已提交
995 996 997
	return err;
}

998
SYSCALL_DEFINE1(getpgid, pid_t, pid)
L
Linus Torvalds 已提交
999
{
1000 1001 1002 1003 1004
	struct task_struct *p;
	struct pid *grp;
	int retval;

	rcu_read_lock();
1005
	if (!pid)
1006
		grp = task_pgrp(current);
1007
	else {
L
Linus Torvalds 已提交
1008
		retval = -ESRCH;
1009 1010 1011 1012 1013 1014 1015 1016 1017 1018
		p = find_task_by_vpid(pid);
		if (!p)
			goto out;
		grp = task_pgrp(p);
		if (!grp)
			goto out;

		retval = security_task_getpgid(p);
		if (retval)
			goto out;
L
Linus Torvalds 已提交
1019
	}
1020 1021 1022 1023
	retval = pid_vnr(grp);
out:
	rcu_read_unlock();
	return retval;
L
Linus Torvalds 已提交
1024 1025 1026 1027
}

#ifdef __ARCH_WANT_SYS_GETPGRP

1028
SYSCALL_DEFINE0(getpgrp)
L
Linus Torvalds 已提交
1029
{
1030
	return sys_getpgid(0);
L
Linus Torvalds 已提交
1031 1032 1033 1034
}

#endif

1035
SYSCALL_DEFINE1(getsid, pid_t, pid)
L
Linus Torvalds 已提交
1036
{
1037 1038 1039 1040 1041
	struct task_struct *p;
	struct pid *sid;
	int retval;

	rcu_read_lock();
1042
	if (!pid)
1043
		sid = task_session(current);
1044
	else {
L
Linus Torvalds 已提交
1045
		retval = -ESRCH;
1046 1047 1048 1049 1050 1051 1052 1053 1054 1055
		p = find_task_by_vpid(pid);
		if (!p)
			goto out;
		sid = task_session(p);
		if (!sid)
			goto out;

		retval = security_task_getsid(p);
		if (retval)
			goto out;
L
Linus Torvalds 已提交
1056
	}
1057 1058 1059 1060
	retval = pid_vnr(sid);
out:
	rcu_read_unlock();
	return retval;
L
Linus Torvalds 已提交
1061 1062
}

1063
SYSCALL_DEFINE0(setsid)
L
Linus Torvalds 已提交
1064
{
1065
	struct task_struct *group_leader = current->group_leader;
1066 1067
	struct pid *sid = task_pid(group_leader);
	pid_t session = pid_vnr(sid);
L
Linus Torvalds 已提交
1068 1069 1070
	int err = -EPERM;

	write_lock_irq(&tasklist_lock);
1071 1072 1073 1074
	/* Fail if I am already a session leader */
	if (group_leader->signal->leader)
		goto out;

1075 1076
	/* Fail if a process group id already exists that equals the
	 * proposed session id.
1077
	 */
1078
	if (pid_task(sid, PIDTYPE_PGID))
L
Linus Torvalds 已提交
1079 1080
		goto out;

1081
	group_leader->signal->leader = 1;
1082
	__set_special_pids(sid);
1083

A
Alan Cox 已提交
1084
	proc_clear_tty(group_leader);
1085

1086
	err = session;
L
Linus Torvalds 已提交
1087 1088
out:
	write_unlock_irq(&tasklist_lock);
1089
	if (err > 0) {
1090
		proc_sid_connector(group_leader);
1091 1092
		sched_autogroup_create_attach(group_leader);
	}
L
Linus Torvalds 已提交
1093 1094 1095 1096 1097
	return err;
}

DECLARE_RWSEM(uts_sem);

1098 1099
#ifdef COMPAT_UTS_MACHINE
#define override_architecture(name) \
1100
	(personality(current->personality) == PER_LINUX32 && \
1101 1102 1103 1104 1105 1106
	 copy_to_user(name->machine, COMPAT_UTS_MACHINE, \
		      sizeof(COMPAT_UTS_MACHINE)))
#else
#define override_architecture(name)	0
#endif

1107
SYSCALL_DEFINE1(newuname, struct new_utsname __user *, name)
L
Linus Torvalds 已提交
1108 1109 1110 1111
{
	int errno = 0;

	down_read(&uts_sem);
1112
	if (copy_to_user(name, utsname(), sizeof *name))
L
Linus Torvalds 已提交
1113 1114
		errno = -EFAULT;
	up_read(&uts_sem);
1115 1116 1117

	if (!errno && override_architecture(name))
		errno = -EFAULT;
L
Linus Torvalds 已提交
1118 1119 1120
	return errno;
}

C
Christoph Hellwig 已提交
1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174
#ifdef __ARCH_WANT_SYS_OLD_UNAME
/*
 * Old cruft
 */
SYSCALL_DEFINE1(uname, struct old_utsname __user *, name)
{
	int error = 0;

	if (!name)
		return -EFAULT;

	down_read(&uts_sem);
	if (copy_to_user(name, utsname(), sizeof(*name)))
		error = -EFAULT;
	up_read(&uts_sem);

	if (!error && override_architecture(name))
		error = -EFAULT;
	return error;
}

SYSCALL_DEFINE1(olduname, struct oldold_utsname __user *, name)
{
	int error;

	if (!name)
		return -EFAULT;
	if (!access_ok(VERIFY_WRITE, name, sizeof(struct oldold_utsname)))
		return -EFAULT;

	down_read(&uts_sem);
	error = __copy_to_user(&name->sysname, &utsname()->sysname,
			       __OLD_UTS_LEN);
	error |= __put_user(0, name->sysname + __OLD_UTS_LEN);
	error |= __copy_to_user(&name->nodename, &utsname()->nodename,
				__OLD_UTS_LEN);
	error |= __put_user(0, name->nodename + __OLD_UTS_LEN);
	error |= __copy_to_user(&name->release, &utsname()->release,
				__OLD_UTS_LEN);
	error |= __put_user(0, name->release + __OLD_UTS_LEN);
	error |= __copy_to_user(&name->version, &utsname()->version,
				__OLD_UTS_LEN);
	error |= __put_user(0, name->version + __OLD_UTS_LEN);
	error |= __copy_to_user(&name->machine, &utsname()->machine,
				__OLD_UTS_LEN);
	error |= __put_user(0, name->machine + __OLD_UTS_LEN);
	up_read(&uts_sem);

	if (!error && override_architecture(name))
		error = -EFAULT;
	return error ? -EFAULT : 0;
}
#endif

1175
SYSCALL_DEFINE2(sethostname, char __user *, name, int, len)
L
Linus Torvalds 已提交
1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186
{
	int errno;
	char tmp[__NEW_UTS_LEN];

	if (!capable(CAP_SYS_ADMIN))
		return -EPERM;
	if (len < 0 || len > __NEW_UTS_LEN)
		return -EINVAL;
	down_write(&uts_sem);
	errno = -EFAULT;
	if (!copy_from_user(tmp, name, len)) {
1187 1188 1189 1190
		struct new_utsname *u = utsname();

		memcpy(u->nodename, tmp, len);
		memset(u->nodename + len, 0, sizeof(u->nodename) - len);
L
Linus Torvalds 已提交
1191 1192 1193 1194 1195 1196 1197 1198
		errno = 0;
	}
	up_write(&uts_sem);
	return errno;
}

#ifdef __ARCH_WANT_SYS_GETHOSTNAME

1199
SYSCALL_DEFINE2(gethostname, char __user *, name, int, len)
L
Linus Torvalds 已提交
1200 1201
{
	int i, errno;
1202
	struct new_utsname *u;
L
Linus Torvalds 已提交
1203 1204 1205 1206

	if (len < 0)
		return -EINVAL;
	down_read(&uts_sem);
1207 1208
	u = utsname();
	i = 1 + strlen(u->nodename);
L
Linus Torvalds 已提交
1209 1210 1211
	if (i > len)
		i = len;
	errno = 0;
1212
	if (copy_to_user(name, u->nodename, i))
L
Linus Torvalds 已提交
1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223
		errno = -EFAULT;
	up_read(&uts_sem);
	return errno;
}

#endif

/*
 * Only setdomainname; getdomainname can be implemented by calling
 * uname()
 */
1224
SYSCALL_DEFINE2(setdomainname, char __user *, name, int, len)
L
Linus Torvalds 已提交
1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236
{
	int errno;
	char tmp[__NEW_UTS_LEN];

	if (!capable(CAP_SYS_ADMIN))
		return -EPERM;
	if (len < 0 || len > __NEW_UTS_LEN)
		return -EINVAL;

	down_write(&uts_sem);
	errno = -EFAULT;
	if (!copy_from_user(tmp, name, len)) {
1237 1238 1239 1240
		struct new_utsname *u = utsname();

		memcpy(u->domainname, tmp, len);
		memset(u->domainname + len, 0, sizeof(u->domainname) - len);
L
Linus Torvalds 已提交
1241 1242 1243 1244 1245 1246
		errno = 0;
	}
	up_write(&uts_sem);
	return errno;
}

1247
SYSCALL_DEFINE2(getrlimit, unsigned int, resource, struct rlimit __user *, rlim)
L
Linus Torvalds 已提交
1248
{
1249 1250 1251 1252 1253 1254 1255 1256
	struct rlimit value;
	int ret;

	ret = do_prlimit(current, resource, NULL, &value);
	if (!ret)
		ret = copy_to_user(rlim, &value, sizeof(*rlim)) ? -EFAULT : 0;

	return ret;
L
Linus Torvalds 已提交
1257 1258 1259 1260 1261 1262 1263 1264
}

#ifdef __ARCH_WANT_SYS_OLD_GETRLIMIT

/*
 *	Back compatibility for getrlimit. Needed for some apps.
 */
 
1265 1266
SYSCALL_DEFINE2(old_getrlimit, unsigned int, resource,
		struct rlimit __user *, rlim)
L
Linus Torvalds 已提交
1267 1268 1269 1270 1271 1272 1273 1274
{
	struct rlimit x;
	if (resource >= RLIM_NLIMITS)
		return -EINVAL;

	task_lock(current->group_leader);
	x = current->signal->rlim[resource];
	task_unlock(current->group_leader);
1275
	if (x.rlim_cur > 0x7FFFFFFF)
L
Linus Torvalds 已提交
1276
		x.rlim_cur = 0x7FFFFFFF;
1277
	if (x.rlim_max > 0x7FFFFFFF)
L
Linus Torvalds 已提交
1278 1279 1280 1281 1282 1283
		x.rlim_max = 0x7FFFFFFF;
	return copy_to_user(rlim, &x, sizeof(x))?-EFAULT:0;
}

#endif

1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316
static inline bool rlim64_is_infinity(__u64 rlim64)
{
#if BITS_PER_LONG < 64
	return rlim64 >= ULONG_MAX;
#else
	return rlim64 == RLIM64_INFINITY;
#endif
}

static void rlim_to_rlim64(const struct rlimit *rlim, struct rlimit64 *rlim64)
{
	if (rlim->rlim_cur == RLIM_INFINITY)
		rlim64->rlim_cur = RLIM64_INFINITY;
	else
		rlim64->rlim_cur = rlim->rlim_cur;
	if (rlim->rlim_max == RLIM_INFINITY)
		rlim64->rlim_max = RLIM64_INFINITY;
	else
		rlim64->rlim_max = rlim->rlim_max;
}

static void rlim64_to_rlim(const struct rlimit64 *rlim64, struct rlimit *rlim)
{
	if (rlim64_is_infinity(rlim64->rlim_cur))
		rlim->rlim_cur = RLIM_INFINITY;
	else
		rlim->rlim_cur = (unsigned long)rlim64->rlim_cur;
	if (rlim64_is_infinity(rlim64->rlim_max))
		rlim->rlim_max = RLIM_INFINITY;
	else
		rlim->rlim_max = (unsigned long)rlim64->rlim_max;
}

1317
/* make sure you are allowed to change @tsk limits before calling this */
1318 1319
int do_prlimit(struct task_struct *tsk, unsigned int resource,
		struct rlimit *new_rlim, struct rlimit *old_rlim)
L
Linus Torvalds 已提交
1320
{
1321
	struct rlimit *rlim;
1322
	int retval = 0;
L
Linus Torvalds 已提交
1323 1324 1325

	if (resource >= RLIM_NLIMITS)
		return -EINVAL;
1326 1327 1328 1329 1330 1331 1332
	if (new_rlim) {
		if (new_rlim->rlim_cur > new_rlim->rlim_max)
			return -EINVAL;
		if (resource == RLIMIT_NOFILE &&
				new_rlim->rlim_max > sysctl_nr_open)
			return -EPERM;
	}
L
Linus Torvalds 已提交
1333

1334 1335 1336 1337 1338 1339 1340
	/* protect tsk->signal and tsk->sighand from disappearing */
	read_lock(&tasklist_lock);
	if (!tsk->sighand) {
		retval = -ESRCH;
		goto out;
	}

1341
	rlim = tsk->signal->rlim + resource;
1342
	task_lock(tsk->group_leader);
1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364
	if (new_rlim) {
		if (new_rlim->rlim_max > rlim->rlim_max &&
				!capable(CAP_SYS_RESOURCE))
			retval = -EPERM;
		if (!retval)
			retval = security_task_setrlimit(tsk->group_leader,
					resource, new_rlim);
		if (resource == RLIMIT_CPU && new_rlim->rlim_cur == 0) {
			/*
			 * The caller is asking for an immediate RLIMIT_CPU
			 * expiry.  But we use the zero value to mean "it was
			 * never set".  So let's cheat and make it one second
			 * instead
			 */
			new_rlim->rlim_cur = 1;
		}
	}
	if (!retval) {
		if (old_rlim)
			*old_rlim = *rlim;
		if (new_rlim)
			*rlim = *new_rlim;
1365
	}
J
Jiri Slaby 已提交
1366
	task_unlock(tsk->group_leader);
L
Linus Torvalds 已提交
1367

1368 1369 1370 1371 1372 1373
	/*
	 * RLIMIT_CPU handling.   Note that the kernel fails to return an error
	 * code if it rejected the user's attempt to set RLIMIT_CPU.  This is a
	 * very long-standing error, and fixing it now risks breakage of
	 * applications, so we live with it
	 */
1374 1375 1376
	 if (!retval && new_rlim && resource == RLIMIT_CPU &&
			 new_rlim->rlim_cur != RLIM_INFINITY)
		update_rlimit_cpu(tsk, new_rlim->rlim_cur);
A
Andrew Morton 已提交
1377
out:
1378
	read_unlock(&tasklist_lock);
1379
	return retval;
L
Linus Torvalds 已提交
1380 1381
}

1382 1383 1384 1385 1386 1387
/* rcu lock must be held */
static int check_prlimit_permission(struct task_struct *task)
{
	const struct cred *cred = current_cred(), *tcred;

	tcred = __task_cred(task);
1388 1389
	if (current != task &&
	    (cred->uid != tcred->euid ||
1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443
	     cred->uid != tcred->suid ||
	     cred->uid != tcred->uid  ||
	     cred->gid != tcred->egid ||
	     cred->gid != tcred->sgid ||
	     cred->gid != tcred->gid) &&
	     !capable(CAP_SYS_RESOURCE)) {
		return -EPERM;
	}

	return 0;
}

SYSCALL_DEFINE4(prlimit64, pid_t, pid, unsigned int, resource,
		const struct rlimit64 __user *, new_rlim,
		struct rlimit64 __user *, old_rlim)
{
	struct rlimit64 old64, new64;
	struct rlimit old, new;
	struct task_struct *tsk;
	int ret;

	if (new_rlim) {
		if (copy_from_user(&new64, new_rlim, sizeof(new64)))
			return -EFAULT;
		rlim64_to_rlim(&new64, &new);
	}

	rcu_read_lock();
	tsk = pid ? find_task_by_vpid(pid) : current;
	if (!tsk) {
		rcu_read_unlock();
		return -ESRCH;
	}
	ret = check_prlimit_permission(tsk);
	if (ret) {
		rcu_read_unlock();
		return ret;
	}
	get_task_struct(tsk);
	rcu_read_unlock();

	ret = do_prlimit(tsk, resource, new_rlim ? &new : NULL,
			old_rlim ? &old : NULL);

	if (!ret && old_rlim) {
		rlim_to_rlim64(&old, &old64);
		if (copy_to_user(old_rlim, &old64, sizeof(old64)))
			ret = -EFAULT;
	}

	put_task_struct(tsk);
	return ret;
}

J
Jiri Slaby 已提交
1444 1445 1446 1447 1448 1449
SYSCALL_DEFINE2(setrlimit, unsigned int, resource, struct rlimit __user *, rlim)
{
	struct rlimit new_rlim;

	if (copy_from_user(&new_rlim, rlim, sizeof(*rlim)))
		return -EFAULT;
1450
	return do_prlimit(current, resource, &new_rlim, NULL);
J
Jiri Slaby 已提交
1451 1452
}

L
Linus Torvalds 已提交
1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467
/*
 * It would make sense to put struct rusage in the task_struct,
 * except that would make the task_struct be *really big*.  After
 * task_struct gets moved into malloc'ed memory, it would
 * make sense to do this.  It will make moving the rest of the information
 * a lot simpler!  (Which we're not doing right now because we're not
 * measuring them yet).
 *
 * When sampling multiple threads for RUSAGE_SELF, under SMP we might have
 * races with threads incrementing their own counters.  But since word
 * reads are atomic, we either get new values or old values and we don't
 * care which for the sums.  We always take the siglock to protect reading
 * the c* fields from p->signal from races with exit.c updating those
 * fields when reaping, so a sample either gets all the additions of a
 * given child after it's reaped, or none so this sample is before reaping.
1468
 *
1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482
 * Locking:
 * We need to take the siglock for CHILDEREN, SELF and BOTH
 * for  the cases current multithreaded, non-current single threaded
 * non-current multithreaded.  Thread traversal is now safe with
 * the siglock held.
 * Strictly speaking, we donot need to take the siglock if we are current and
 * single threaded,  as no one else can take our signal_struct away, no one
 * else can  reap the  children to update signal->c* counters, and no one else
 * can race with the signal-> fields. If we do not take any lock, the
 * signal-> fields could be read out of order while another thread was just
 * exiting. So we should  place a read memory barrier when we avoid the lock.
 * On the writer side,  write memory barrier is implied in  __exit_signal
 * as __exit_signal releases  the siglock spinlock after updating the signal->
 * fields. But we don't do this yet to keep things simple.
1483
 *
L
Linus Torvalds 已提交
1484 1485
 */

1486
static void accumulate_thread_rusage(struct task_struct *t, struct rusage *r)
S
Sripathi Kodi 已提交
1487 1488 1489 1490 1491 1492 1493 1494 1495
{
	r->ru_nvcsw += t->nvcsw;
	r->ru_nivcsw += t->nivcsw;
	r->ru_minflt += t->min_flt;
	r->ru_majflt += t->maj_flt;
	r->ru_inblock += task_io_get_inblock(t);
	r->ru_oublock += task_io_get_oublock(t);
}

L
Linus Torvalds 已提交
1496 1497 1498 1499
static void k_getrusage(struct task_struct *p, int who, struct rusage *r)
{
	struct task_struct *t;
	unsigned long flags;
1500
	cputime_t tgutime, tgstime, utime, stime;
J
Jiri Pirko 已提交
1501
	unsigned long maxrss = 0;
L
Linus Torvalds 已提交
1502 1503

	memset((char *) r, 0, sizeof *r);
1504
	utime = stime = cputime_zero;
L
Linus Torvalds 已提交
1505

S
Sripathi Kodi 已提交
1506
	if (who == RUSAGE_THREAD) {
1507
		task_times(current, &utime, &stime);
1508
		accumulate_thread_rusage(p, r);
J
Jiri Pirko 已提交
1509
		maxrss = p->signal->maxrss;
S
Sripathi Kodi 已提交
1510 1511 1512
		goto out;
	}

1513
	if (!lock_task_sighand(p, &flags))
1514
		return;
O
Oleg Nesterov 已提交
1515

L
Linus Torvalds 已提交
1516
	switch (who) {
O
Oleg Nesterov 已提交
1517
		case RUSAGE_BOTH:
L
Linus Torvalds 已提交
1518 1519 1520 1521 1522 1523 1524
		case RUSAGE_CHILDREN:
			utime = p->signal->cutime;
			stime = p->signal->cstime;
			r->ru_nvcsw = p->signal->cnvcsw;
			r->ru_nivcsw = p->signal->cnivcsw;
			r->ru_minflt = p->signal->cmin_flt;
			r->ru_majflt = p->signal->cmaj_flt;
1525 1526
			r->ru_inblock = p->signal->cinblock;
			r->ru_oublock = p->signal->coublock;
J
Jiri Pirko 已提交
1527
			maxrss = p->signal->cmaxrss;
O
Oleg Nesterov 已提交
1528 1529 1530 1531

			if (who == RUSAGE_CHILDREN)
				break;

L
Linus Torvalds 已提交
1532
		case RUSAGE_SELF:
1533 1534 1535
			thread_group_times(p, &tgutime, &tgstime);
			utime = cputime_add(utime, tgutime);
			stime = cputime_add(stime, tgstime);
L
Linus Torvalds 已提交
1536 1537 1538 1539
			r->ru_nvcsw += p->signal->nvcsw;
			r->ru_nivcsw += p->signal->nivcsw;
			r->ru_minflt += p->signal->min_flt;
			r->ru_majflt += p->signal->maj_flt;
1540 1541
			r->ru_inblock += p->signal->inblock;
			r->ru_oublock += p->signal->oublock;
J
Jiri Pirko 已提交
1542 1543
			if (maxrss < p->signal->maxrss)
				maxrss = p->signal->maxrss;
L
Linus Torvalds 已提交
1544 1545
			t = p;
			do {
1546
				accumulate_thread_rusage(t, r);
L
Linus Torvalds 已提交
1547 1548 1549
				t = next_thread(t);
			} while (t != p);
			break;
O
Oleg Nesterov 已提交
1550

L
Linus Torvalds 已提交
1551 1552 1553
		default:
			BUG();
	}
1554 1555
	unlock_task_sighand(p, &flags);

S
Sripathi Kodi 已提交
1556
out:
O
Oleg Nesterov 已提交
1557 1558
	cputime_to_timeval(utime, &r->ru_utime);
	cputime_to_timeval(stime, &r->ru_stime);
J
Jiri Pirko 已提交
1559 1560 1561 1562 1563 1564 1565 1566 1567

	if (who != RUSAGE_CHILDREN) {
		struct mm_struct *mm = get_task_mm(p);
		if (mm) {
			setmax_mm_hiwater_rss(&maxrss, mm);
			mmput(mm);
		}
	}
	r->ru_maxrss = maxrss * (PAGE_SIZE / 1024); /* convert pages to KBs */
L
Linus Torvalds 已提交
1568 1569 1570 1571 1572 1573 1574 1575 1576
}

int getrusage(struct task_struct *p, int who, struct rusage __user *ru)
{
	struct rusage r;
	k_getrusage(p, who, &r);
	return copy_to_user(ru, &r, sizeof(r)) ? -EFAULT : 0;
}

1577
SYSCALL_DEFINE2(getrusage, int, who, struct rusage __user *, ru)
L
Linus Torvalds 已提交
1578
{
S
Sripathi Kodi 已提交
1579 1580
	if (who != RUSAGE_SELF && who != RUSAGE_CHILDREN &&
	    who != RUSAGE_THREAD)
L
Linus Torvalds 已提交
1581 1582 1583 1584
		return -EINVAL;
	return getrusage(current, who, ru);
}

1585
SYSCALL_DEFINE1(umask, int, mask)
L
Linus Torvalds 已提交
1586 1587 1588 1589
{
	mask = xchg(&current->fs->umask, mask & S_IRWXUGO);
	return mask;
}
1590

1591 1592
SYSCALL_DEFINE5(prctl, int, option, unsigned long, arg2, unsigned long, arg3,
		unsigned long, arg4, unsigned long, arg5)
L
Linus Torvalds 已提交
1593
{
1594 1595 1596
	struct task_struct *me = current;
	unsigned char comm[sizeof(me->comm)];
	long error;
L
Linus Torvalds 已提交
1597

D
David Howells 已提交
1598 1599
	error = security_task_prctl(option, arg2, arg3, arg4, arg5);
	if (error != -ENOSYS)
L
Linus Torvalds 已提交
1600 1601
		return error;

D
David Howells 已提交
1602
	error = 0;
L
Linus Torvalds 已提交
1603 1604
	switch (option) {
		case PR_SET_PDEATHSIG:
1605
			if (!valid_signal(arg2)) {
L
Linus Torvalds 已提交
1606 1607 1608
				error = -EINVAL;
				break;
			}
1609 1610
			me->pdeath_signal = arg2;
			error = 0;
L
Linus Torvalds 已提交
1611 1612
			break;
		case PR_GET_PDEATHSIG:
1613
			error = put_user(me->pdeath_signal, (int __user *)arg2);
L
Linus Torvalds 已提交
1614 1615
			break;
		case PR_GET_DUMPABLE:
1616
			error = get_dumpable(me->mm);
L
Linus Torvalds 已提交
1617 1618
			break;
		case PR_SET_DUMPABLE:
1619
			if (arg2 < 0 || arg2 > 1) {
L
Linus Torvalds 已提交
1620 1621 1622
				error = -EINVAL;
				break;
			}
1623 1624
			set_dumpable(me->mm, arg2);
			error = 0;
L
Linus Torvalds 已提交
1625 1626 1627
			break;

		case PR_SET_UNALIGN:
1628
			error = SET_UNALIGN_CTL(me, arg2);
L
Linus Torvalds 已提交
1629 1630
			break;
		case PR_GET_UNALIGN:
1631
			error = GET_UNALIGN_CTL(me, arg2);
L
Linus Torvalds 已提交
1632 1633
			break;
		case PR_SET_FPEMU:
1634
			error = SET_FPEMU_CTL(me, arg2);
L
Linus Torvalds 已提交
1635 1636
			break;
		case PR_GET_FPEMU:
1637
			error = GET_FPEMU_CTL(me, arg2);
L
Linus Torvalds 已提交
1638 1639
			break;
		case PR_SET_FPEXC:
1640
			error = SET_FPEXC_CTL(me, arg2);
L
Linus Torvalds 已提交
1641 1642
			break;
		case PR_GET_FPEXC:
1643
			error = GET_FPEXC_CTL(me, arg2);
L
Linus Torvalds 已提交
1644 1645 1646 1647 1648
			break;
		case PR_GET_TIMING:
			error = PR_TIMING_STATISTICAL;
			break;
		case PR_SET_TIMING:
1649
			if (arg2 != PR_TIMING_STATISTICAL)
L
Linus Torvalds 已提交
1650
				error = -EINVAL;
1651 1652
			else
				error = 0;
L
Linus Torvalds 已提交
1653 1654
			break;

1655 1656 1657 1658
		case PR_SET_NAME:
			comm[sizeof(me->comm)-1] = 0;
			if (strncpy_from_user(comm, (char __user *)arg2,
					      sizeof(me->comm) - 1) < 0)
L
Linus Torvalds 已提交
1659
				return -EFAULT;
1660
			set_task_comm(me, comm);
L
Linus Torvalds 已提交
1661
			return 0;
1662 1663 1664 1665
		case PR_GET_NAME:
			get_task_comm(comm, me);
			if (copy_to_user((char __user *)arg2, comm,
					 sizeof(comm)))
L
Linus Torvalds 已提交
1666 1667
				return -EFAULT;
			return 0;
1668
		case PR_GET_ENDIAN:
1669
			error = GET_ENDIAN(me, arg2);
1670 1671
			break;
		case PR_SET_ENDIAN:
1672
			error = SET_ENDIAN(me, arg2);
1673 1674
			break;

1675 1676 1677 1678 1679 1680
		case PR_GET_SECCOMP:
			error = prctl_get_seccomp();
			break;
		case PR_SET_SECCOMP:
			error = prctl_set_seccomp(arg2);
			break;
1681 1682 1683 1684 1685 1686
		case PR_GET_TSC:
			error = GET_TSC_CTL(arg2);
			break;
		case PR_SET_TSC:
			error = SET_TSC_CTL(arg2);
			break;
1687 1688
		case PR_TASK_PERF_EVENTS_DISABLE:
			error = perf_event_task_disable();
1689
			break;
1690 1691
		case PR_TASK_PERF_EVENTS_ENABLE:
			error = perf_event_task_enable();
1692
			break;
1693 1694 1695 1696 1697 1698 1699 1700 1701
		case PR_GET_TIMERSLACK:
			error = current->timer_slack_ns;
			break;
		case PR_SET_TIMERSLACK:
			if (arg2 <= 0)
				current->timer_slack_ns =
					current->default_timer_slack_ns;
			else
				current->timer_slack_ns = arg2;
1702
			error = 0;
1703
			break;
1704 1705 1706 1707
		case PR_MCE_KILL:
			if (arg4 | arg5)
				return -EINVAL;
			switch (arg2) {
1708
			case PR_MCE_KILL_CLEAR:
1709 1710 1711 1712
				if (arg3 != 0)
					return -EINVAL;
				current->flags &= ~PF_MCE_PROCESS;
				break;
1713
			case PR_MCE_KILL_SET:
1714
				current->flags |= PF_MCE_PROCESS;
1715
				if (arg3 == PR_MCE_KILL_EARLY)
1716
					current->flags |= PF_MCE_EARLY;
1717
				else if (arg3 == PR_MCE_KILL_LATE)
1718
					current->flags &= ~PF_MCE_EARLY;
1719 1720 1721 1722 1723
				else if (arg3 == PR_MCE_KILL_DEFAULT)
					current->flags &=
						~(PF_MCE_EARLY|PF_MCE_PROCESS);
				else
					return -EINVAL;
1724 1725 1726 1727 1728 1729
				break;
			default:
				return -EINVAL;
			}
			error = 0;
			break;
1730 1731 1732 1733 1734 1735 1736 1737 1738
		case PR_MCE_KILL_GET:
			if (arg2 | arg3 | arg4 | arg5)
				return -EINVAL;
			if (current->flags & PF_MCE_PROCESS)
				error = (current->flags & PF_MCE_EARLY) ?
					PR_MCE_KILL_EARLY : PR_MCE_KILL_LATE;
			else
				error = PR_MCE_KILL_DEFAULT;
			break;
L
Linus Torvalds 已提交
1739 1740 1741 1742 1743 1744
		default:
			error = -EINVAL;
			break;
	}
	return error;
}
1745

1746 1747
SYSCALL_DEFINE3(getcpu, unsigned __user *, cpup, unsigned __user *, nodep,
		struct getcpu_cache __user *, unused)
1748 1749 1750 1751 1752 1753 1754 1755 1756
{
	int err = 0;
	int cpu = raw_smp_processor_id();
	if (cpup)
		err |= put_user(cpu, cpup);
	if (nodep)
		err |= put_user(cpu_to_node(cpu), nodep);
	return err ? -EFAULT : 0;
}
1757 1758 1759

char poweroff_cmd[POWEROFF_CMD_PATH_LEN] = "/sbin/poweroff";

1760
static void argv_cleanup(struct subprocess_info *info)
1761
{
1762
	argv_free(info->argv);
1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789
}

/**
 * orderly_poweroff - Trigger an orderly system poweroff
 * @force: force poweroff if command execution fails
 *
 * This may be called from any context to trigger a system shutdown.
 * If the orderly shutdown fails, it will force an immediate shutdown.
 */
int orderly_poweroff(bool force)
{
	int argc;
	char **argv = argv_split(GFP_ATOMIC, poweroff_cmd, &argc);
	static char *envp[] = {
		"HOME=/",
		"PATH=/sbin:/bin:/usr/sbin:/usr/bin",
		NULL
	};
	int ret = -ENOMEM;
	struct subprocess_info *info;

	if (argv == NULL) {
		printk(KERN_WARNING "%s failed to allocate memory for \"%s\"\n",
		       __func__, poweroff_cmd);
		goto out;
	}

1790
	info = call_usermodehelper_setup(argv[0], argv, envp, GFP_ATOMIC);
1791 1792 1793 1794 1795
	if (info == NULL) {
		argv_free(argv);
		goto out;
	}

1796
	call_usermodehelper_setfns(info, NULL, argv_cleanup, NULL);
1797

1798
	ret = call_usermodehelper_exec(info, UMH_NO_WAIT);
1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814

  out:
	if (ret && force) {
		printk(KERN_WARNING "Failed to start orderly shutdown: "
		       "forcing the issue\n");

		/* I guess this should try to kick off some daemon to
		   sync and poweroff asap.  Or not even bother syncing
		   if we're doing an emergency shutdown? */
		emergency_sync();
		kernel_power_off();
	}

	return ret;
}
EXPORT_SYMBOL_GPL(orderly_poweroff);