Home | History | Annotate | Download | only in sys
      1 /*
      2  * CDDL HEADER START
      3  *
      4  * The contents of this file are subject to the terms of the
      5  * Common Development and Distribution License (the "License").
      6  * You may not use this file except in compliance with the License.
      7  *
      8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
      9  * or http://www.opensolaris.org/os/licensing.
     10  * See the License for the specific language governing permissions
     11  * and limitations under the License.
     12  *
     13  * When distributing Covered Code, include this CDDL HEADER in each
     14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     15  * If applicable, add the following below this CDDL HEADER, with the
     16  * fields enclosed by brackets "[]" replaced with your own identifying
     17  * information: Portions Copyright [yyyy] [name of copyright owner]
     18  *
     19  * CDDL HEADER END
     20  */
     21 /*
     22  * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
     23  * Use is subject to license terms.
     24  */
     25 
     26 #ifndef _SYS_CRED_IMPL_H
     27 #define	_SYS_CRED_IMPL_H
     28 
     29 #pragma ident	"@(#)cred_impl.h	1.8	07/05/23 SMI"
     30 
     31 #include <sys/types.h>
     32 #include <sys/cred.h>
     33 #include <sys/priv_impl.h>
     34 #include <sys/sid.h>
     35 
     36 #ifdef	__cplusplus
     37 extern "C" {
     38 #endif
     39 
     40 /*
     41  * The user credential implementation.
     42  *
     43  * This is is not a public interface.  This file must not be included
     44  * except by those routines in Solaris proper that implement credential
     45  * manipulation and kernel policy.
     46  *
     47  * Credentials are shared, and therefor read-only, data structure.
     48  * After finalization, on the cr_ref field is changed through crhold/crfree.
     49  *
     50  * Kernel modules that need access to fields of cred_t should use the
     51  * accessor functions defined in <sys/cred.h>
     52  *
     53  * The size of the cr_groups[] array is configurable but is the same
     54  * (ngroups_max) for all cred_impl structures; cr_ngroups records the number
     55  * of elements currently in use, not the array size.
     56  *
     57  * Changes in the implementation will move cr_groups[] around.
     58  *
     59  * Properly sized cred_t structures are only returned by crget()/crdup()
     60  * crcopy().  It is not possible to declare one.
     61  */
     62 
     63 #if defined(_KERNEL) || defined(_KMEMUSER)
     64 
     65 struct zone;		/* forward reference */
     66 struct ts_label_s;	/* forward reference */
     67 
     68 struct cred {
     69 	uint_t		cr_ref;		/* reference count */
     70 	uid_t		cr_uid;		/* effective user id */
     71 	gid_t		cr_gid;		/* effective group id */
     72 	uid_t		cr_ruid;	/* real user id */
     73 	gid_t		cr_rgid;	/* real group id */
     74 	uid_t		cr_suid;	/* "saved" user id (from exec) */
     75 	gid_t		cr_sgid;	/* "saved" group id (from exec) */
     76 	uint_t		cr_ngroups;	/* number of groups returned by */
     77 					/* crgroups() */
     78 	cred_priv_t	cr_priv;	/* privileges */
     79 	projid_t	cr_projid;	/* project */
     80 	struct zone	*cr_zone;	/* pointer to per-zone structure */
     81 	struct ts_label_s *cr_label;	/* pointer to the effective label */
     82 	credsid_t	*cr_ksid;	/* pointer to SIDs */
     83 	gid_t		cr_groups[1];	/* cr_groups size not fixed */
     84 					/* audit info is defined dynamically */
     85 					/* and valid only when audit enabled */
     86 	/* auditinfo_addr_t	cr_auinfo;	audit info */
     87 };
     88 
     89 extern int ngroups_max;
     90 
     91 #define	CR_PRIVS(c)	(&(c)->cr_priv)
     92 #define	CR_PRIVSETS(c)	(((c)->cr_priv.crprivs))
     93 
     94 #endif	/* _KERNEL */
     95 
     96 #ifdef	__cplusplus
     97 }
     98 #endif
     99 
    100 #endif	/* _SYS_CRED_IMPL_H */
    101