19f46080cSMatt Helsley /* 29f46080cSMatt Helsley * cn_proc.c - process events connector 39f46080cSMatt Helsley * 49f46080cSMatt Helsley * Copyright (C) Matt Helsley, IBM Corp. 2005 59f46080cSMatt Helsley * Based on cn_fork.c by Guillaume Thouvenin <guillaume.thouvenin@bull.net> 69f46080cSMatt Helsley * Original copyright notice follows: 79f46080cSMatt Helsley * Copyright (C) 2005 BULL SA. 89f46080cSMatt Helsley * 99f46080cSMatt Helsley * 109f46080cSMatt Helsley * This program is free software; you can redistribute it and/or modify 119f46080cSMatt Helsley * it under the terms of the GNU General Public License as published by 129f46080cSMatt Helsley * the Free Software Foundation; either version 2 of the License, or 139f46080cSMatt Helsley * (at your option) any later version. 149f46080cSMatt Helsley * 159f46080cSMatt Helsley * This program is distributed in the hope that it will be useful, 169f46080cSMatt Helsley * but WITHOUT ANY WARRANTY; without even the implied warranty of 179f46080cSMatt Helsley * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 189f46080cSMatt Helsley * GNU General Public License for more details. 199f46080cSMatt Helsley * 209f46080cSMatt Helsley * You should have received a copy of the GNU General Public License 219f46080cSMatt Helsley * along with this program; if not, write to the Free Software 229f46080cSMatt Helsley * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 239f46080cSMatt Helsley */ 249f46080cSMatt Helsley 259f46080cSMatt Helsley #include <linux/module.h> 269f46080cSMatt Helsley #include <linux/kernel.h> 27caf3c9dcSMatt Helsley #include <linux/ktime.h> 289f46080cSMatt Helsley #include <linux/init.h> 291d31a4eaSMatt Helsley #include <linux/connector.h> 305a0e3ad6STejun Heo #include <linux/gfp.h> 31f701e5b7SVladimir Zapolskiy #include <linux/ptrace.h> 3260063497SArun Sharma #include <linux/atomic.h> 3360063497SArun Sharma 34af3e095aSErik Jacobson #include <asm/unaligned.h> 359f46080cSMatt Helsley 369f46080cSMatt Helsley #include <linux/cn_proc.h> 379f46080cSMatt Helsley 389f46080cSMatt Helsley #define CN_PROC_MSG_SIZE (sizeof(struct cn_msg) + sizeof(struct proc_event)) 399f46080cSMatt Helsley 409f46080cSMatt Helsley static atomic_t proc_event_num_listeners = ATOMIC_INIT(0); 419f46080cSMatt Helsley static struct cb_id cn_proc_event_id = { CN_IDX_PROC, CN_VAL_PROC }; 429f46080cSMatt Helsley 43cc398c2eSDavid S. Miller /* proc_event_counts is used as the sequence number of the netlink message */ 449f46080cSMatt Helsley static DEFINE_PER_CPU(__u32, proc_event_counts) = { 0 }; 459f46080cSMatt Helsley 469f46080cSMatt Helsley static inline void get_seq(__u32 *ts, int *cpu) 479f46080cSMatt Helsley { 483ea9f683SChristoph Lameter preempt_disable(); 493ea9f683SChristoph Lameter *ts = __this_cpu_inc_return(proc_event_counts) -1; 509f46080cSMatt Helsley *cpu = smp_processor_id(); 513ea9f683SChristoph Lameter preempt_enable(); 529f46080cSMatt Helsley } 539f46080cSMatt Helsley 549f46080cSMatt Helsley void proc_fork_connector(struct task_struct *task) 559f46080cSMatt Helsley { 569f46080cSMatt Helsley struct cn_msg *msg; 579f46080cSMatt Helsley struct proc_event *ev; 589f46080cSMatt Helsley __u8 buffer[CN_PROC_MSG_SIZE]; 59822cfbffSChandra Seetharaman struct timespec ts; 609e8f90dfSOleg Nesterov struct task_struct *parent; 619f46080cSMatt Helsley 629f46080cSMatt Helsley if (atomic_read(&proc_event_num_listeners) < 1) 639f46080cSMatt Helsley return; 649f46080cSMatt Helsley 659f46080cSMatt Helsley msg = (struct cn_msg*)buffer; 669f46080cSMatt Helsley ev = (struct proc_event*)msg->data; 679f46080cSMatt Helsley get_seq(&msg->seq, &ev->cpu); 68822cfbffSChandra Seetharaman ktime_get_ts(&ts); /* get high res monotonic timestamp */ 69af3e095aSErik Jacobson put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 709f46080cSMatt Helsley ev->what = PROC_EVENT_FORK; 719e8f90dfSOleg Nesterov rcu_read_lock(); 729e8f90dfSOleg Nesterov parent = rcu_dereference(task->real_parent); 739e8f90dfSOleg Nesterov ev->event_data.fork.parent_pid = parent->pid; 749e8f90dfSOleg Nesterov ev->event_data.fork.parent_tgid = parent->tgid; 759e8f90dfSOleg Nesterov rcu_read_unlock(); 769f46080cSMatt Helsley ev->event_data.fork.child_pid = task->pid; 779f46080cSMatt Helsley ev->event_data.fork.child_tgid = task->tgid; 789f46080cSMatt Helsley 799f46080cSMatt Helsley memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 809f46080cSMatt Helsley msg->ack = 0; /* not used */ 819f46080cSMatt Helsley msg->len = sizeof(*ev); 829f46080cSMatt Helsley /* If cn_netlink_send() failed, the data is not sent */ 839f46080cSMatt Helsley cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 849f46080cSMatt Helsley } 859f46080cSMatt Helsley 869f46080cSMatt Helsley void proc_exec_connector(struct task_struct *task) 879f46080cSMatt Helsley { 889f46080cSMatt Helsley struct cn_msg *msg; 899f46080cSMatt Helsley struct proc_event *ev; 90822cfbffSChandra Seetharaman struct timespec ts; 919f46080cSMatt Helsley __u8 buffer[CN_PROC_MSG_SIZE]; 929f46080cSMatt Helsley 939f46080cSMatt Helsley if (atomic_read(&proc_event_num_listeners) < 1) 949f46080cSMatt Helsley return; 959f46080cSMatt Helsley 969f46080cSMatt Helsley msg = (struct cn_msg*)buffer; 979f46080cSMatt Helsley ev = (struct proc_event*)msg->data; 989f46080cSMatt Helsley get_seq(&msg->seq, &ev->cpu); 99822cfbffSChandra Seetharaman ktime_get_ts(&ts); /* get high res monotonic timestamp */ 100af3e095aSErik Jacobson put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 1019f46080cSMatt Helsley ev->what = PROC_EVENT_EXEC; 1029f46080cSMatt Helsley ev->event_data.exec.process_pid = task->pid; 1039f46080cSMatt Helsley ev->event_data.exec.process_tgid = task->tgid; 1049f46080cSMatt Helsley 1059f46080cSMatt Helsley memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 1069f46080cSMatt Helsley msg->ack = 0; /* not used */ 1079f46080cSMatt Helsley msg->len = sizeof(*ev); 1089f46080cSMatt Helsley cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 1099f46080cSMatt Helsley } 1109f46080cSMatt Helsley 1119f46080cSMatt Helsley void proc_id_connector(struct task_struct *task, int which_id) 1129f46080cSMatt Helsley { 1139f46080cSMatt Helsley struct cn_msg *msg; 1149f46080cSMatt Helsley struct proc_event *ev; 1159f46080cSMatt Helsley __u8 buffer[CN_PROC_MSG_SIZE]; 116822cfbffSChandra Seetharaman struct timespec ts; 117c69e8d9cSDavid Howells const struct cred *cred; 1189f46080cSMatt Helsley 1199f46080cSMatt Helsley if (atomic_read(&proc_event_num_listeners) < 1) 1209f46080cSMatt Helsley return; 1219f46080cSMatt Helsley 1229f46080cSMatt Helsley msg = (struct cn_msg*)buffer; 1239f46080cSMatt Helsley ev = (struct proc_event*)msg->data; 1249f46080cSMatt Helsley ev->what = which_id; 1259f46080cSMatt Helsley ev->event_data.id.process_pid = task->pid; 1269f46080cSMatt Helsley ev->event_data.id.process_tgid = task->tgid; 127c69e8d9cSDavid Howells rcu_read_lock(); 128c69e8d9cSDavid Howells cred = __task_cred(task); 1299f46080cSMatt Helsley if (which_id == PROC_EVENT_UID) { 130c69e8d9cSDavid Howells ev->event_data.id.r.ruid = cred->uid; 131c69e8d9cSDavid Howells ev->event_data.id.e.euid = cred->euid; 1329f46080cSMatt Helsley } else if (which_id == PROC_EVENT_GID) { 133c69e8d9cSDavid Howells ev->event_data.id.r.rgid = cred->gid; 134c69e8d9cSDavid Howells ev->event_data.id.e.egid = cred->egid; 135c69e8d9cSDavid Howells } else { 136c69e8d9cSDavid Howells rcu_read_unlock(); 1379f46080cSMatt Helsley return; 138c69e8d9cSDavid Howells } 139c69e8d9cSDavid Howells rcu_read_unlock(); 1409f46080cSMatt Helsley get_seq(&msg->seq, &ev->cpu); 141822cfbffSChandra Seetharaman ktime_get_ts(&ts); /* get high res monotonic timestamp */ 142af3e095aSErik Jacobson put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 1439f46080cSMatt Helsley 1449f46080cSMatt Helsley memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 1459f46080cSMatt Helsley msg->ack = 0; /* not used */ 1469f46080cSMatt Helsley msg->len = sizeof(*ev); 1479f46080cSMatt Helsley cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 1489f46080cSMatt Helsley } 1499f46080cSMatt Helsley 15002b51df1SScott James Remnant void proc_sid_connector(struct task_struct *task) 15102b51df1SScott James Remnant { 15202b51df1SScott James Remnant struct cn_msg *msg; 15302b51df1SScott James Remnant struct proc_event *ev; 15402b51df1SScott James Remnant struct timespec ts; 15502b51df1SScott James Remnant __u8 buffer[CN_PROC_MSG_SIZE]; 15602b51df1SScott James Remnant 15702b51df1SScott James Remnant if (atomic_read(&proc_event_num_listeners) < 1) 15802b51df1SScott James Remnant return; 15902b51df1SScott James Remnant 16002b51df1SScott James Remnant msg = (struct cn_msg *)buffer; 16102b51df1SScott James Remnant ev = (struct proc_event *)msg->data; 16202b51df1SScott James Remnant get_seq(&msg->seq, &ev->cpu); 16302b51df1SScott James Remnant ktime_get_ts(&ts); /* get high res monotonic timestamp */ 16402b51df1SScott James Remnant put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 16502b51df1SScott James Remnant ev->what = PROC_EVENT_SID; 16602b51df1SScott James Remnant ev->event_data.sid.process_pid = task->pid; 16702b51df1SScott James Remnant ev->event_data.sid.process_tgid = task->tgid; 16802b51df1SScott James Remnant 16902b51df1SScott James Remnant memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 17002b51df1SScott James Remnant msg->ack = 0; /* not used */ 17102b51df1SScott James Remnant msg->len = sizeof(*ev); 17202b51df1SScott James Remnant cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 17302b51df1SScott James Remnant } 17402b51df1SScott James Remnant 175f701e5b7SVladimir Zapolskiy void proc_ptrace_connector(struct task_struct *task, int ptrace_id) 176f701e5b7SVladimir Zapolskiy { 177f701e5b7SVladimir Zapolskiy struct cn_msg *msg; 178f701e5b7SVladimir Zapolskiy struct proc_event *ev; 179f701e5b7SVladimir Zapolskiy struct timespec ts; 180f701e5b7SVladimir Zapolskiy __u8 buffer[CN_PROC_MSG_SIZE]; 181f701e5b7SVladimir Zapolskiy 182f701e5b7SVladimir Zapolskiy if (atomic_read(&proc_event_num_listeners) < 1) 183f701e5b7SVladimir Zapolskiy return; 184f701e5b7SVladimir Zapolskiy 185f701e5b7SVladimir Zapolskiy msg = (struct cn_msg *)buffer; 186f701e5b7SVladimir Zapolskiy ev = (struct proc_event *)msg->data; 187f701e5b7SVladimir Zapolskiy get_seq(&msg->seq, &ev->cpu); 188f701e5b7SVladimir Zapolskiy ktime_get_ts(&ts); /* get high res monotonic timestamp */ 189f701e5b7SVladimir Zapolskiy put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 190f701e5b7SVladimir Zapolskiy ev->what = PROC_EVENT_PTRACE; 191f701e5b7SVladimir Zapolskiy ev->event_data.ptrace.process_pid = task->pid; 192f701e5b7SVladimir Zapolskiy ev->event_data.ptrace.process_tgid = task->tgid; 193f701e5b7SVladimir Zapolskiy if (ptrace_id == PTRACE_ATTACH) { 194f701e5b7SVladimir Zapolskiy ev->event_data.ptrace.tracer_pid = current->pid; 195f701e5b7SVladimir Zapolskiy ev->event_data.ptrace.tracer_tgid = current->tgid; 196f701e5b7SVladimir Zapolskiy } else if (ptrace_id == PTRACE_DETACH) { 197f701e5b7SVladimir Zapolskiy ev->event_data.ptrace.tracer_pid = 0; 198f701e5b7SVladimir Zapolskiy ev->event_data.ptrace.tracer_tgid = 0; 199f701e5b7SVladimir Zapolskiy } else 200f701e5b7SVladimir Zapolskiy return; 201f701e5b7SVladimir Zapolskiy 202f701e5b7SVladimir Zapolskiy memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 203f701e5b7SVladimir Zapolskiy msg->ack = 0; /* not used */ 204f701e5b7SVladimir Zapolskiy msg->len = sizeof(*ev); 205f701e5b7SVladimir Zapolskiy cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 206f701e5b7SVladimir Zapolskiy } 207f701e5b7SVladimir Zapolskiy 2089f46080cSMatt Helsley void proc_exit_connector(struct task_struct *task) 2099f46080cSMatt Helsley { 2109f46080cSMatt Helsley struct cn_msg *msg; 2119f46080cSMatt Helsley struct proc_event *ev; 2129f46080cSMatt Helsley __u8 buffer[CN_PROC_MSG_SIZE]; 213822cfbffSChandra Seetharaman struct timespec ts; 2149f46080cSMatt Helsley 2159f46080cSMatt Helsley if (atomic_read(&proc_event_num_listeners) < 1) 2169f46080cSMatt Helsley return; 2179f46080cSMatt Helsley 2189f46080cSMatt Helsley msg = (struct cn_msg*)buffer; 2199f46080cSMatt Helsley ev = (struct proc_event*)msg->data; 2209f46080cSMatt Helsley get_seq(&msg->seq, &ev->cpu); 221822cfbffSChandra Seetharaman ktime_get_ts(&ts); /* get high res monotonic timestamp */ 222af3e095aSErik Jacobson put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 2239f46080cSMatt Helsley ev->what = PROC_EVENT_EXIT; 2249f46080cSMatt Helsley ev->event_data.exit.process_pid = task->pid; 2259f46080cSMatt Helsley ev->event_data.exit.process_tgid = task->tgid; 2269f46080cSMatt Helsley ev->event_data.exit.exit_code = task->exit_code; 2279f46080cSMatt Helsley ev->event_data.exit.exit_signal = task->exit_signal; 2289f46080cSMatt Helsley 2299f46080cSMatt Helsley memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 2309f46080cSMatt Helsley msg->ack = 0; /* not used */ 2319f46080cSMatt Helsley msg->len = sizeof(*ev); 2329f46080cSMatt Helsley cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 2339f46080cSMatt Helsley } 2349f46080cSMatt Helsley 2359f46080cSMatt Helsley /* 2369f46080cSMatt Helsley * Send an acknowledgement message to userspace 2379f46080cSMatt Helsley * 2389f46080cSMatt Helsley * Use 0 for success, EFOO otherwise. 2399f46080cSMatt Helsley * Note: this is the negative of conventional kernel error 2409f46080cSMatt Helsley * values because it's not being returned via syscall return 2419f46080cSMatt Helsley * mechanisms. 2429f46080cSMatt Helsley */ 2439f46080cSMatt Helsley static void cn_proc_ack(int err, int rcvd_seq, int rcvd_ack) 2449f46080cSMatt Helsley { 2459f46080cSMatt Helsley struct cn_msg *msg; 2469f46080cSMatt Helsley struct proc_event *ev; 2479f46080cSMatt Helsley __u8 buffer[CN_PROC_MSG_SIZE]; 248822cfbffSChandra Seetharaman struct timespec ts; 2499f46080cSMatt Helsley 2509f46080cSMatt Helsley if (atomic_read(&proc_event_num_listeners) < 1) 2519f46080cSMatt Helsley return; 2529f46080cSMatt Helsley 2539f46080cSMatt Helsley msg = (struct cn_msg*)buffer; 2549f46080cSMatt Helsley ev = (struct proc_event*)msg->data; 2559f46080cSMatt Helsley msg->seq = rcvd_seq; 256822cfbffSChandra Seetharaman ktime_get_ts(&ts); /* get high res monotonic timestamp */ 257af3e095aSErik Jacobson put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns); 2589f46080cSMatt Helsley ev->cpu = -1; 2599f46080cSMatt Helsley ev->what = PROC_EVENT_NONE; 2609f46080cSMatt Helsley ev->event_data.ack.err = err; 2619f46080cSMatt Helsley memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id)); 2629f46080cSMatt Helsley msg->ack = rcvd_ack + 1; 2639f46080cSMatt Helsley msg->len = sizeof(*ev); 2649f46080cSMatt Helsley cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL); 2659f46080cSMatt Helsley } 2669f46080cSMatt Helsley 2679f46080cSMatt Helsley /** 2689f46080cSMatt Helsley * cn_proc_mcast_ctl 2699f46080cSMatt Helsley * @data: message sent from userspace via the connector 2709f46080cSMatt Helsley */ 271f0b25932SStephen Boyd static void cn_proc_mcast_ctl(struct cn_msg *msg, 272f0b25932SStephen Boyd struct netlink_skb_parms *nsp) 2739f46080cSMatt Helsley { 2749f46080cSMatt Helsley enum proc_cn_mcast_op *mc_op = NULL; 2759f46080cSMatt Helsley int err = 0; 2769f46080cSMatt Helsley 2779f46080cSMatt Helsley if (msg->len != sizeof(*mc_op)) 2789f46080cSMatt Helsley return; 2799f46080cSMatt Helsley 2809f46080cSMatt Helsley mc_op = (enum proc_cn_mcast_op*)msg->data; 2819f46080cSMatt Helsley switch (*mc_op) { 2829f46080cSMatt Helsley case PROC_CN_MCAST_LISTEN: 2839f46080cSMatt Helsley atomic_inc(&proc_event_num_listeners); 2849f46080cSMatt Helsley break; 2859f46080cSMatt Helsley case PROC_CN_MCAST_IGNORE: 2869f46080cSMatt Helsley atomic_dec(&proc_event_num_listeners); 2879f46080cSMatt Helsley break; 2889f46080cSMatt Helsley default: 2899f46080cSMatt Helsley err = EINVAL; 2909f46080cSMatt Helsley break; 2919f46080cSMatt Helsley } 2929f46080cSMatt Helsley cn_proc_ack(err, msg->seq, msg->ack); 2939f46080cSMatt Helsley } 2949f46080cSMatt Helsley 2959f46080cSMatt Helsley /* 2969f46080cSMatt Helsley * cn_proc_init - initialization entry point 2979f46080cSMatt Helsley * 2989f46080cSMatt Helsley * Adds the connector callback to the connector driver. 2999f46080cSMatt Helsley */ 3009f46080cSMatt Helsley static int __init cn_proc_init(void) 3019f46080cSMatt Helsley { 3029f46080cSMatt Helsley int err; 3039f46080cSMatt Helsley 3049f46080cSMatt Helsley if ((err = cn_add_callback(&cn_proc_event_id, "cn_proc", 3059f46080cSMatt Helsley &cn_proc_mcast_ctl))) { 3069f46080cSMatt Helsley printk(KERN_WARNING "cn_proc failed to register\n"); 3079f46080cSMatt Helsley return err; 3089f46080cSMatt Helsley } 3099f46080cSMatt Helsley return 0; 3109f46080cSMatt Helsley } 3119f46080cSMatt Helsley 3129f46080cSMatt Helsley module_init(cn_proc_init); 313