mirror of https://github.com/Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.2 KiB
79 lines
2.2 KiB
3 years ago
|
#include <linux/kernel.h>
|
||
|
|
#include <linux/sched.h>
|
||
|
|
#include <linux/file.h>
|
||
|
|
#include <linux/fs.h>
|
||
|
|
#include <linux/grinternal.h>
|
||
|
|
|
||
|
|
extern int gr_acl_tpe_check(void);
|
||
|
|
|
||
|
|
int
|
||
|
|
gr_tpe_allow(const struct file *file)
|
||
|
|
{
|
||
|
|
#ifdef CONFIG_GRKERNSEC
|
||
|
|
struct inode *inode = d_backing_inode(file->f_path.dentry->d_parent);
|
||
|
|
struct inode *file_inode = d_backing_inode(file->f_path.dentry);
|
||
|
|
const struct cred *cred = current_cred();
|
||
|
|
char *msg = NULL;
|
||
|
|
char *msg2 = NULL;
|
||
|
|
|
||
|
|
// never restrict root
|
||
|
|
if (gr_is_global_root(cred->uid))
|
||
|
|
return 1;
|
||
|
|
|
||
|
|
if (grsec_enable_tpe) {
|
||
|
|
#ifdef CONFIG_GRKERNSEC_TPE_INVERT
|
||
|
|
if (grsec_enable_tpe_invert && !in_group_p(grsec_tpe_gid))
|
||
|
|
msg = "not being in trusted group";
|
||
|
|
else if (!grsec_enable_tpe_invert && in_group_p(grsec_tpe_gid))
|
||
|
|
msg = "being in untrusted group";
|
||
|
|
#else
|
||
|
|
if (in_group_p(grsec_tpe_gid))
|
||
|
|
msg = "being in untrusted group";
|
||
|
|
#endif
|
||
|
|
}
|
||
|
|
if (!msg && gr_acl_tpe_check())
|
||
|
|
msg = "being in untrusted role";
|
||
|
|
|
||
|
|
// not in any affected group/role
|
||
|
|
if (!msg)
|
||
|
|
goto next_check;
|
||
|
|
|
||
|
|
if (gr_is_global_nonroot(inode->i_uid))
|
||
|
|
msg2 = "file in non-root-owned directory";
|
||
|
|
else if (inode->i_mode & S_IWOTH)
|
||
|
|
msg2 = "file in world-writable directory";
|
||
|
|
else if ((inode->i_mode & S_IWGRP) && gr_is_global_nonroot_gid(inode->i_gid))
|
||
|
|
msg2 = "file in group-writable directory";
|
||
|
|
else if (file_inode->i_mode & S_IWOTH)
|
||
|
|
msg2 = "file is world-writable";
|
||
|
|
|
||
|
|
if (msg && msg2) {
|
||
|
|
char fullmsg[70] = {0};
|
||
|
|
snprintf(fullmsg, sizeof(fullmsg)-1, "%s and %s", msg, msg2);
|
||
|
|
gr_log_str_fs(GR_DONT_AUDIT, GR_EXEC_TPE_MSG, fullmsg, file->f_path.dentry, file->f_path.mnt);
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
msg = NULL;
|
||
|
|
next_check:
|
||
|
|
#ifdef CONFIG_GRKERNSEC_TPE_ALL
|
||
|
|
if (!grsec_enable_tpe || !grsec_enable_tpe_all)
|
||
|
|
return 1;
|
||
|
|
|
||
|
|
if (gr_is_global_nonroot(inode->i_uid) && !uid_eq(inode->i_uid, cred->uid))
|
||
|
|
msg = "directory not owned by user";
|
||
|
|
else if (inode->i_mode & S_IWOTH)
|
||
|
|
msg = "file in world-writable directory";
|
||
|
|
else if ((inode->i_mode & S_IWGRP) && gr_is_global_nonroot_gid(inode->i_gid))
|
||
|
|
msg = "file in group-writable directory";
|
||
|
|
else if (file_inode->i_mode & S_IWOTH)
|
||
|
|
msg = "file is world-writable";
|
||
|
|
|
||
|
|
if (msg) {
|
||
|
|
gr_log_str_fs(GR_DONT_AUDIT, GR_EXEC_TPE_MSG, msg, file->f_path.dentry, file->f_path.mnt);
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
#endif
|
||
|
|
#endif
|
||
|
|
return 1;
|
||
|
|
}
|