1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 23f07c014SIngo Molnar #include <linux/sched/signal.h> 3faf60af1SCyrill Gorcunov #include <linux/errno.h> 4faf60af1SCyrill Gorcunov #include <linux/dcache.h> 5faf60af1SCyrill Gorcunov #include <linux/path.h> 6faf60af1SCyrill Gorcunov #include <linux/fdtable.h> 7faf60af1SCyrill Gorcunov #include <linux/namei.h> 8faf60af1SCyrill Gorcunov #include <linux/pid.h> 9faf60af1SCyrill Gorcunov #include <linux/security.h> 10ddd3e077SCyrill Gorcunov #include <linux/file.h> 11ddd3e077SCyrill Gorcunov #include <linux/seq_file.h> 126c8c9031SAndrey Vagin #include <linux/fs.h> 13faf60af1SCyrill Gorcunov 14faf60af1SCyrill Gorcunov #include <linux/proc_fs.h> 15faf60af1SCyrill Gorcunov 1649d063cbSAndrey Vagin #include "../mount.h" 17faf60af1SCyrill Gorcunov #include "internal.h" 18faf60af1SCyrill Gorcunov #include "fd.h" 19faf60af1SCyrill Gorcunov 20ddd3e077SCyrill Gorcunov static int seq_show(struct seq_file *m, void *v) 21faf60af1SCyrill Gorcunov { 22faf60af1SCyrill Gorcunov struct files_struct *files = NULL; 23ddd3e077SCyrill Gorcunov int f_flags = 0, ret = -ENOENT; 24ddd3e077SCyrill Gorcunov struct file *file = NULL; 25ddd3e077SCyrill Gorcunov struct task_struct *task; 26faf60af1SCyrill Gorcunov 27ddd3e077SCyrill Gorcunov task = get_proc_task(m->private); 28ddd3e077SCyrill Gorcunov if (!task) 29ddd3e077SCyrill Gorcunov return -ENOENT; 30ddd3e077SCyrill Gorcunov 31faf60af1SCyrill Gorcunov files = get_files_struct(task); 32faf60af1SCyrill Gorcunov put_task_struct(task); 33ddd3e077SCyrill Gorcunov 34faf60af1SCyrill Gorcunov if (files) { 35771187d6SAlexey Dobriyan unsigned int fd = proc_fd(m->private); 36ddd3e077SCyrill Gorcunov 37faf60af1SCyrill Gorcunov spin_lock(&files->file_lock); 38120ce2b0SEric W. Biederman file = files_lookup_fd_locked(files, fd); 39faf60af1SCyrill Gorcunov if (file) { 40ddd3e077SCyrill Gorcunov struct fdtable *fdt = files_fdtable(files); 41faf60af1SCyrill Gorcunov 42c6f3d811SAl Viro f_flags = file->f_flags; 43faf60af1SCyrill Gorcunov if (close_on_exec(fd, fdt)) 44faf60af1SCyrill Gorcunov f_flags |= O_CLOEXEC; 45faf60af1SCyrill Gorcunov 46ddd3e077SCyrill Gorcunov get_file(file); 47ddd3e077SCyrill Gorcunov ret = 0; 48faf60af1SCyrill Gorcunov } 49faf60af1SCyrill Gorcunov spin_unlock(&files->file_lock); 50faf60af1SCyrill Gorcunov put_files_struct(files); 51faf60af1SCyrill Gorcunov } 52ddd3e077SCyrill Gorcunov 536c8c9031SAndrey Vagin if (ret) 546c8c9031SAndrey Vagin return ret; 556c8c9031SAndrey Vagin 5649d063cbSAndrey Vagin seq_printf(m, "pos:\t%lli\nflags:\t0%o\nmnt_id:\t%i\n", 5749d063cbSAndrey Vagin (long long)file->f_pos, f_flags, 5849d063cbSAndrey Vagin real_mount(file->f_path.mnt)->mnt_id); 596c8c9031SAndrey Vagin 606c8c9031SAndrey Vagin show_fd_locks(m, file, files); 616c8c9031SAndrey Vagin if (seq_has_overflowed(m)) 626c8c9031SAndrey Vagin goto out; 636c8c9031SAndrey Vagin 6455985dd7SCyrill Gorcunov if (file->f_op->show_fdinfo) 65a3816ab0SJoe Perches file->f_op->show_fdinfo(m, file); 66faf60af1SCyrill Gorcunov 676c8c9031SAndrey Vagin out: 686c8c9031SAndrey Vagin fput(file); 696c8c9031SAndrey Vagin return 0; 70ddd3e077SCyrill Gorcunov } 71ddd3e077SCyrill Gorcunov 72ddd3e077SCyrill Gorcunov static int seq_fdinfo_open(struct inode *inode, struct file *file) 73ddd3e077SCyrill Gorcunov { 74ddd3e077SCyrill Gorcunov return single_open(file, seq_show, inode); 75ddd3e077SCyrill Gorcunov } 76ddd3e077SCyrill Gorcunov 77ddd3e077SCyrill Gorcunov static const struct file_operations proc_fdinfo_file_operations = { 78ddd3e077SCyrill Gorcunov .open = seq_fdinfo_open, 79ddd3e077SCyrill Gorcunov .read = seq_read, 80ddd3e077SCyrill Gorcunov .llseek = seq_lseek, 81ddd3e077SCyrill Gorcunov .release = single_release, 82ddd3e077SCyrill Gorcunov }; 83ddd3e077SCyrill Gorcunov 841ae9bd8bSAl Viro static bool tid_fd_mode(struct task_struct *task, unsigned fd, fmode_t *mode) 851ae9bd8bSAl Viro { 861ae9bd8bSAl Viro struct file *file; 871ae9bd8bSAl Viro 881ae9bd8bSAl Viro rcu_read_lock(); 8964eb661fSEric W. Biederman file = task_lookup_fd_rcu(task, fd); 901ae9bd8bSAl Viro if (file) 911ae9bd8bSAl Viro *mode = file->f_mode; 921ae9bd8bSAl Viro rcu_read_unlock(); 931ae9bd8bSAl Viro return !!file; 941ae9bd8bSAl Viro } 951ae9bd8bSAl Viro 9698836386SAl Viro static void tid_fd_update_inode(struct task_struct *task, struct inode *inode, 9798836386SAl Viro fmode_t f_mode) 98faf60af1SCyrill Gorcunov { 9968eb94f1SEric W. Biederman task_dump_owner(task, 0, &inode->i_uid, &inode->i_gid); 100faf60af1SCyrill Gorcunov 101faf60af1SCyrill Gorcunov if (S_ISLNK(inode->i_mode)) { 102faf60af1SCyrill Gorcunov unsigned i_mode = S_IFLNK; 103faf60af1SCyrill Gorcunov if (f_mode & FMODE_READ) 104faf60af1SCyrill Gorcunov i_mode |= S_IRUSR | S_IXUSR; 105faf60af1SCyrill Gorcunov if (f_mode & FMODE_WRITE) 106faf60af1SCyrill Gorcunov i_mode |= S_IWUSR | S_IXUSR; 107faf60af1SCyrill Gorcunov inode->i_mode = i_mode; 108faf60af1SCyrill Gorcunov } 109faf60af1SCyrill Gorcunov security_task_to_inode(task, inode); 11098836386SAl Viro } 11198836386SAl Viro 11298836386SAl Viro static int tid_fd_revalidate(struct dentry *dentry, unsigned int flags) 11398836386SAl Viro { 11498836386SAl Viro struct task_struct *task; 11598836386SAl Viro struct inode *inode; 11698836386SAl Viro unsigned int fd; 11798836386SAl Viro 11898836386SAl Viro if (flags & LOOKUP_RCU) 11998836386SAl Viro return -ECHILD; 12098836386SAl Viro 12198836386SAl Viro inode = d_inode(dentry); 12298836386SAl Viro task = get_proc_task(inode); 12398836386SAl Viro fd = proc_fd(inode); 12498836386SAl Viro 12598836386SAl Viro if (task) { 12698836386SAl Viro fmode_t f_mode; 12798836386SAl Viro if (tid_fd_mode(task, fd, &f_mode)) { 12898836386SAl Viro tid_fd_update_inode(task, inode, f_mode); 129faf60af1SCyrill Gorcunov put_task_struct(task); 130faf60af1SCyrill Gorcunov return 1; 131faf60af1SCyrill Gorcunov } 132faf60af1SCyrill Gorcunov put_task_struct(task); 133faf60af1SCyrill Gorcunov } 134faf60af1SCyrill Gorcunov return 0; 135faf60af1SCyrill Gorcunov } 136faf60af1SCyrill Gorcunov 137faf60af1SCyrill Gorcunov static const struct dentry_operations tid_fd_dentry_operations = { 138faf60af1SCyrill Gorcunov .d_revalidate = tid_fd_revalidate, 139faf60af1SCyrill Gorcunov .d_delete = pid_delete_dentry, 140faf60af1SCyrill Gorcunov }; 141faf60af1SCyrill Gorcunov 142faf60af1SCyrill Gorcunov static int proc_fd_link(struct dentry *dentry, struct path *path) 143faf60af1SCyrill Gorcunov { 144ddd3e077SCyrill Gorcunov struct task_struct *task; 145ddd3e077SCyrill Gorcunov int ret = -ENOENT; 146ddd3e077SCyrill Gorcunov 1472b0143b5SDavid Howells task = get_proc_task(d_inode(dentry)); 148ddd3e077SCyrill Gorcunov if (task) { 149771187d6SAlexey Dobriyan unsigned int fd = proc_fd(d_inode(dentry)); 150ddd3e077SCyrill Gorcunov struct file *fd_file; 151ddd3e077SCyrill Gorcunov 152439be326SEric W. Biederman fd_file = fget_task(task, fd); 153ddd3e077SCyrill Gorcunov if (fd_file) { 154ddd3e077SCyrill Gorcunov *path = fd_file->f_path; 155ddd3e077SCyrill Gorcunov path_get(&fd_file->f_path); 156ddd3e077SCyrill Gorcunov ret = 0; 157439be326SEric W. Biederman fput(fd_file); 158ddd3e077SCyrill Gorcunov } 159439be326SEric W. Biederman put_task_struct(task); 160ddd3e077SCyrill Gorcunov } 161ddd3e077SCyrill Gorcunov 162ddd3e077SCyrill Gorcunov return ret; 163faf60af1SCyrill Gorcunov } 164faf60af1SCyrill Gorcunov 16598836386SAl Viro struct fd_data { 16698836386SAl Viro fmode_t mode; 16798836386SAl Viro unsigned fd; 16898836386SAl Viro }; 16998836386SAl Viro 1700168b9e3SAl Viro static struct dentry *proc_fd_instantiate(struct dentry *dentry, 171faf60af1SCyrill Gorcunov struct task_struct *task, const void *ptr) 172faf60af1SCyrill Gorcunov { 17398836386SAl Viro const struct fd_data *data = ptr; 174faf60af1SCyrill Gorcunov struct proc_inode *ei; 175faf60af1SCyrill Gorcunov struct inode *inode; 176faf60af1SCyrill Gorcunov 1770168b9e3SAl Viro inode = proc_pid_make_inode(dentry->d_sb, task, S_IFLNK); 178faf60af1SCyrill Gorcunov if (!inode) 1790168b9e3SAl Viro return ERR_PTR(-ENOENT); 180faf60af1SCyrill Gorcunov 181faf60af1SCyrill Gorcunov ei = PROC_I(inode); 18298836386SAl Viro ei->fd = data->fd; 183faf60af1SCyrill Gorcunov 184faf60af1SCyrill Gorcunov inode->i_op = &proc_pid_link_inode_operations; 185faf60af1SCyrill Gorcunov inode->i_size = 64; 186faf60af1SCyrill Gorcunov 187faf60af1SCyrill Gorcunov ei->op.proc_get_link = proc_fd_link; 18898836386SAl Viro tid_fd_update_inode(task, inode, data->mode); 189faf60af1SCyrill Gorcunov 190faf60af1SCyrill Gorcunov d_set_d_op(dentry, &tid_fd_dentry_operations); 1910168b9e3SAl Viro return d_splice_alias(inode, dentry); 192faf60af1SCyrill Gorcunov } 193faf60af1SCyrill Gorcunov 194faf60af1SCyrill Gorcunov static struct dentry *proc_lookupfd_common(struct inode *dir, 195faf60af1SCyrill Gorcunov struct dentry *dentry, 196faf60af1SCyrill Gorcunov instantiate_t instantiate) 197faf60af1SCyrill Gorcunov { 198faf60af1SCyrill Gorcunov struct task_struct *task = get_proc_task(dir); 19998836386SAl Viro struct fd_data data = {.fd = name_to_int(&dentry->d_name)}; 2000168b9e3SAl Viro struct dentry *result = ERR_PTR(-ENOENT); 201faf60af1SCyrill Gorcunov 202faf60af1SCyrill Gorcunov if (!task) 203faf60af1SCyrill Gorcunov goto out_no_task; 20498836386SAl Viro if (data.fd == ~0U) 205faf60af1SCyrill Gorcunov goto out; 20698836386SAl Viro if (!tid_fd_mode(task, data.fd, &data.mode)) 2071ae9bd8bSAl Viro goto out; 208faf60af1SCyrill Gorcunov 2090168b9e3SAl Viro result = instantiate(dentry, task, &data); 210faf60af1SCyrill Gorcunov out: 211faf60af1SCyrill Gorcunov put_task_struct(task); 212faf60af1SCyrill Gorcunov out_no_task: 2130168b9e3SAl Viro return result; 214faf60af1SCyrill Gorcunov } 215faf60af1SCyrill Gorcunov 216f0c3b509SAl Viro static int proc_readfd_common(struct file *file, struct dir_context *ctx, 217f0c3b509SAl Viro instantiate_t instantiate) 218faf60af1SCyrill Gorcunov { 219f0c3b509SAl Viro struct task_struct *p = get_proc_task(file_inode(file)); 220f0c3b509SAl Viro unsigned int fd; 221faf60af1SCyrill Gorcunov 222faf60af1SCyrill Gorcunov if (!p) 223f0c3b509SAl Viro return -ENOENT; 224faf60af1SCyrill Gorcunov 225f0c3b509SAl Viro if (!dir_emit_dots(file, ctx)) 226faf60af1SCyrill Gorcunov goto out; 227f0c3b509SAl Viro 228faf60af1SCyrill Gorcunov rcu_read_lock(); 229*5b17b618SEric W. Biederman for (fd = ctx->pos - 2;; fd++) { 23098836386SAl Viro struct file *f; 23198836386SAl Viro struct fd_data data; 232e3912ac3SAlexey Dobriyan char name[10 + 1]; 233a4ef3895SAlexey Dobriyan unsigned int len; 234faf60af1SCyrill Gorcunov 235*5b17b618SEric W. Biederman f = task_lookup_next_fd_rcu(p, &fd); 236*5b17b618SEric W. Biederman ctx->pos = fd + 2LL; 23798836386SAl Viro if (!f) 238*5b17b618SEric W. Biederman break; 23998836386SAl Viro data.mode = f->f_mode; 240faf60af1SCyrill Gorcunov rcu_read_unlock(); 24198836386SAl Viro data.fd = fd; 242faf60af1SCyrill Gorcunov 243771187d6SAlexey Dobriyan len = snprintf(name, sizeof(name), "%u", fd); 244f0c3b509SAl Viro if (!proc_fill_cache(file, ctx, 245faf60af1SCyrill Gorcunov name, len, instantiate, p, 24698836386SAl Viro &data)) 247*5b17b618SEric W. Biederman goto out; 2483cc4a84eSEric Dumazet cond_resched(); 249faf60af1SCyrill Gorcunov rcu_read_lock(); 250faf60af1SCyrill Gorcunov } 251faf60af1SCyrill Gorcunov rcu_read_unlock(); 252faf60af1SCyrill Gorcunov out: 253faf60af1SCyrill Gorcunov put_task_struct(p); 254f0c3b509SAl Viro return 0; 255faf60af1SCyrill Gorcunov } 256faf60af1SCyrill Gorcunov 257f0c3b509SAl Viro static int proc_readfd(struct file *file, struct dir_context *ctx) 258faf60af1SCyrill Gorcunov { 259f0c3b509SAl Viro return proc_readfd_common(file, ctx, proc_fd_instantiate); 260faf60af1SCyrill Gorcunov } 261faf60af1SCyrill Gorcunov 262faf60af1SCyrill Gorcunov const struct file_operations proc_fd_operations = { 263faf60af1SCyrill Gorcunov .read = generic_read_dir, 264f50752eaSAl Viro .iterate_shared = proc_readfd, 265f50752eaSAl Viro .llseek = generic_file_llseek, 266faf60af1SCyrill Gorcunov }; 267faf60af1SCyrill Gorcunov 268faf60af1SCyrill Gorcunov static struct dentry *proc_lookupfd(struct inode *dir, struct dentry *dentry, 269faf60af1SCyrill Gorcunov unsigned int flags) 270faf60af1SCyrill Gorcunov { 271faf60af1SCyrill Gorcunov return proc_lookupfd_common(dir, dentry, proc_fd_instantiate); 272faf60af1SCyrill Gorcunov } 273faf60af1SCyrill Gorcunov 274faf60af1SCyrill Gorcunov /* 275faf60af1SCyrill Gorcunov * /proc/pid/fd needs a special permission handler so that a process can still 276faf60af1SCyrill Gorcunov * access /proc/self/fd after it has executed a setuid(). 277faf60af1SCyrill Gorcunov */ 278faf60af1SCyrill Gorcunov int proc_fd_permission(struct inode *inode, int mask) 279faf60af1SCyrill Gorcunov { 28054708d28SOleg Nesterov struct task_struct *p; 28154708d28SOleg Nesterov int rv; 28254708d28SOleg Nesterov 28354708d28SOleg Nesterov rv = generic_permission(inode, mask); 284faf60af1SCyrill Gorcunov if (rv == 0) 28554708d28SOleg Nesterov return rv; 28654708d28SOleg Nesterov 28754708d28SOleg Nesterov rcu_read_lock(); 28854708d28SOleg Nesterov p = pid_task(proc_pid(inode), PIDTYPE_PID); 28954708d28SOleg Nesterov if (p && same_thread_group(p, current)) 290faf60af1SCyrill Gorcunov rv = 0; 29154708d28SOleg Nesterov rcu_read_unlock(); 29254708d28SOleg Nesterov 293faf60af1SCyrill Gorcunov return rv; 294faf60af1SCyrill Gorcunov } 295faf60af1SCyrill Gorcunov 296faf60af1SCyrill Gorcunov const struct inode_operations proc_fd_inode_operations = { 297faf60af1SCyrill Gorcunov .lookup = proc_lookupfd, 298faf60af1SCyrill Gorcunov .permission = proc_fd_permission, 299faf60af1SCyrill Gorcunov .setattr = proc_setattr, 300faf60af1SCyrill Gorcunov }; 301faf60af1SCyrill Gorcunov 3020168b9e3SAl Viro static struct dentry *proc_fdinfo_instantiate(struct dentry *dentry, 303faf60af1SCyrill Gorcunov struct task_struct *task, const void *ptr) 304faf60af1SCyrill Gorcunov { 30598836386SAl Viro const struct fd_data *data = ptr; 306faf60af1SCyrill Gorcunov struct proc_inode *ei; 307faf60af1SCyrill Gorcunov struct inode *inode; 308faf60af1SCyrill Gorcunov 3090168b9e3SAl Viro inode = proc_pid_make_inode(dentry->d_sb, task, S_IFREG | S_IRUSR); 310faf60af1SCyrill Gorcunov if (!inode) 3110168b9e3SAl Viro return ERR_PTR(-ENOENT); 312faf60af1SCyrill Gorcunov 313faf60af1SCyrill Gorcunov ei = PROC_I(inode); 31498836386SAl Viro ei->fd = data->fd; 315faf60af1SCyrill Gorcunov 316faf60af1SCyrill Gorcunov inode->i_fop = &proc_fdinfo_file_operations; 31798836386SAl Viro tid_fd_update_inode(task, inode, 0); 318faf60af1SCyrill Gorcunov 319faf60af1SCyrill Gorcunov d_set_d_op(dentry, &tid_fd_dentry_operations); 3200168b9e3SAl Viro return d_splice_alias(inode, dentry); 321faf60af1SCyrill Gorcunov } 322faf60af1SCyrill Gorcunov 323faf60af1SCyrill Gorcunov static struct dentry * 324faf60af1SCyrill Gorcunov proc_lookupfdinfo(struct inode *dir, struct dentry *dentry, unsigned int flags) 325faf60af1SCyrill Gorcunov { 326faf60af1SCyrill Gorcunov return proc_lookupfd_common(dir, dentry, proc_fdinfo_instantiate); 327faf60af1SCyrill Gorcunov } 328faf60af1SCyrill Gorcunov 329f0c3b509SAl Viro static int proc_readfdinfo(struct file *file, struct dir_context *ctx) 330faf60af1SCyrill Gorcunov { 331f0c3b509SAl Viro return proc_readfd_common(file, ctx, 332faf60af1SCyrill Gorcunov proc_fdinfo_instantiate); 333faf60af1SCyrill Gorcunov } 334faf60af1SCyrill Gorcunov 335faf60af1SCyrill Gorcunov const struct inode_operations proc_fdinfo_inode_operations = { 336faf60af1SCyrill Gorcunov .lookup = proc_lookupfdinfo, 337faf60af1SCyrill Gorcunov .setattr = proc_setattr, 338faf60af1SCyrill Gorcunov }; 339faf60af1SCyrill Gorcunov 340faf60af1SCyrill Gorcunov const struct file_operations proc_fdinfo_operations = { 341faf60af1SCyrill Gorcunov .read = generic_read_dir, 342f50752eaSAl Viro .iterate_shared = proc_readfdinfo, 343f50752eaSAl Viro .llseek = generic_file_llseek, 344faf60af1SCyrill Gorcunov }; 345