cn_proc.c 7.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272
  1. /*
  2. * cn_proc.c - process events connector
  3. *
  4. * Copyright (C) Matt Helsley, IBM Corp. 2005
  5. * Based on cn_fork.c by Guillaume Thouvenin <guillaume.thouvenin@bull.net>
  6. * Original copyright notice follows:
  7. * Copyright (C) 2005 BULL SA.
  8. *
  9. *
  10. * This program is free software; you can redistribute it and/or modify
  11. * it under the terms of the GNU General Public License as published by
  12. * the Free Software Foundation; either version 2 of the License, or
  13. * (at your option) any later version.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. * GNU General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU General Public License
  21. * along with this program; if not, write to the Free Software
  22. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  23. */
  24. #include <linux/module.h>
  25. #include <linux/kernel.h>
  26. #include <linux/ktime.h>
  27. #include <linux/init.h>
  28. #include <linux/connector.h>
  29. #include <linux/gfp.h>
  30. #include <asm/atomic.h>
  31. #include <asm/unaligned.h>
  32. #include <linux/cn_proc.h>
  33. #define CN_PROC_MSG_SIZE (sizeof(struct cn_msg) + sizeof(struct proc_event))
  34. static atomic_t proc_event_num_listeners = ATOMIC_INIT(0);
  35. static struct cb_id cn_proc_event_id = { CN_IDX_PROC, CN_VAL_PROC };
  36. /* proc_event_counts is used as the sequence number of the netlink message */
  37. static DEFINE_PER_CPU(__u32, proc_event_counts) = { 0 };
  38. static inline void get_seq(__u32 *ts, int *cpu)
  39. {
  40. *ts = get_cpu_var(proc_event_counts)++;
  41. *cpu = smp_processor_id();
  42. put_cpu_var(proc_event_counts);
  43. }
  44. void proc_fork_connector(struct task_struct *task)
  45. {
  46. struct cn_msg *msg;
  47. struct proc_event *ev;
  48. __u8 buffer[CN_PROC_MSG_SIZE];
  49. struct timespec ts;
  50. if (atomic_read(&proc_event_num_listeners) < 1)
  51. return;
  52. msg = (struct cn_msg*)buffer;
  53. ev = (struct proc_event*)msg->data;
  54. get_seq(&msg->seq, &ev->cpu);
  55. ktime_get_ts(&ts); /* get high res monotonic timestamp */
  56. put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
  57. ev->what = PROC_EVENT_FORK;
  58. ev->event_data.fork.parent_pid = task->real_parent->pid;
  59. ev->event_data.fork.parent_tgid = task->real_parent->tgid;
  60. ev->event_data.fork.child_pid = task->pid;
  61. ev->event_data.fork.child_tgid = task->tgid;
  62. memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
  63. msg->ack = 0; /* not used */
  64. msg->len = sizeof(*ev);
  65. /* If cn_netlink_send() failed, the data is not sent */
  66. cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
  67. }
  68. void proc_exec_connector(struct task_struct *task)
  69. {
  70. struct cn_msg *msg;
  71. struct proc_event *ev;
  72. struct timespec ts;
  73. __u8 buffer[CN_PROC_MSG_SIZE];
  74. if (atomic_read(&proc_event_num_listeners) < 1)
  75. return;
  76. msg = (struct cn_msg*)buffer;
  77. ev = (struct proc_event*)msg->data;
  78. get_seq(&msg->seq, &ev->cpu);
  79. ktime_get_ts(&ts); /* get high res monotonic timestamp */
  80. put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
  81. ev->what = PROC_EVENT_EXEC;
  82. ev->event_data.exec.process_pid = task->pid;
  83. ev->event_data.exec.process_tgid = task->tgid;
  84. memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
  85. msg->ack = 0; /* not used */
  86. msg->len = sizeof(*ev);
  87. cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
  88. }
  89. void proc_id_connector(struct task_struct *task, int which_id)
  90. {
  91. struct cn_msg *msg;
  92. struct proc_event *ev;
  93. __u8 buffer[CN_PROC_MSG_SIZE];
  94. struct timespec ts;
  95. const struct cred *cred;
  96. if (atomic_read(&proc_event_num_listeners) < 1)
  97. return;
  98. msg = (struct cn_msg*)buffer;
  99. ev = (struct proc_event*)msg->data;
  100. ev->what = which_id;
  101. ev->event_data.id.process_pid = task->pid;
  102. ev->event_data.id.process_tgid = task->tgid;
  103. rcu_read_lock();
  104. cred = __task_cred(task);
  105. if (which_id == PROC_EVENT_UID) {
  106. ev->event_data.id.r.ruid = cred->uid;
  107. ev->event_data.id.e.euid = cred->euid;
  108. } else if (which_id == PROC_EVENT_GID) {
  109. ev->event_data.id.r.rgid = cred->gid;
  110. ev->event_data.id.e.egid = cred->egid;
  111. } else {
  112. rcu_read_unlock();
  113. return;
  114. }
  115. rcu_read_unlock();
  116. get_seq(&msg->seq, &ev->cpu);
  117. ktime_get_ts(&ts); /* get high res monotonic timestamp */
  118. put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
  119. memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
  120. msg->ack = 0; /* not used */
  121. msg->len = sizeof(*ev);
  122. cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
  123. }
  124. void proc_sid_connector(struct task_struct *task)
  125. {
  126. struct cn_msg *msg;
  127. struct proc_event *ev;
  128. struct timespec ts;
  129. __u8 buffer[CN_PROC_MSG_SIZE];
  130. if (atomic_read(&proc_event_num_listeners) < 1)
  131. return;
  132. msg = (struct cn_msg *)buffer;
  133. ev = (struct proc_event *)msg->data;
  134. get_seq(&msg->seq, &ev->cpu);
  135. ktime_get_ts(&ts); /* get high res monotonic timestamp */
  136. put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
  137. ev->what = PROC_EVENT_SID;
  138. ev->event_data.sid.process_pid = task->pid;
  139. ev->event_data.sid.process_tgid = task->tgid;
  140. memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
  141. msg->ack = 0; /* not used */
  142. msg->len = sizeof(*ev);
  143. cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
  144. }
  145. void proc_exit_connector(struct task_struct *task)
  146. {
  147. struct cn_msg *msg;
  148. struct proc_event *ev;
  149. __u8 buffer[CN_PROC_MSG_SIZE];
  150. struct timespec ts;
  151. if (atomic_read(&proc_event_num_listeners) < 1)
  152. return;
  153. msg = (struct cn_msg*)buffer;
  154. ev = (struct proc_event*)msg->data;
  155. get_seq(&msg->seq, &ev->cpu);
  156. ktime_get_ts(&ts); /* get high res monotonic timestamp */
  157. put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
  158. ev->what = PROC_EVENT_EXIT;
  159. ev->event_data.exit.process_pid = task->pid;
  160. ev->event_data.exit.process_tgid = task->tgid;
  161. ev->event_data.exit.exit_code = task->exit_code;
  162. ev->event_data.exit.exit_signal = task->exit_signal;
  163. memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
  164. msg->ack = 0; /* not used */
  165. msg->len = sizeof(*ev);
  166. cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
  167. }
  168. /*
  169. * Send an acknowledgement message to userspace
  170. *
  171. * Use 0 for success, EFOO otherwise.
  172. * Note: this is the negative of conventional kernel error
  173. * values because it's not being returned via syscall return
  174. * mechanisms.
  175. */
  176. static void cn_proc_ack(int err, int rcvd_seq, int rcvd_ack)
  177. {
  178. struct cn_msg *msg;
  179. struct proc_event *ev;
  180. __u8 buffer[CN_PROC_MSG_SIZE];
  181. struct timespec ts;
  182. if (atomic_read(&proc_event_num_listeners) < 1)
  183. return;
  184. msg = (struct cn_msg*)buffer;
  185. ev = (struct proc_event*)msg->data;
  186. msg->seq = rcvd_seq;
  187. ktime_get_ts(&ts); /* get high res monotonic timestamp */
  188. put_unaligned(timespec_to_ns(&ts), (__u64 *)&ev->timestamp_ns);
  189. ev->cpu = -1;
  190. ev->what = PROC_EVENT_NONE;
  191. ev->event_data.ack.err = err;
  192. memcpy(&msg->id, &cn_proc_event_id, sizeof(msg->id));
  193. msg->ack = rcvd_ack + 1;
  194. msg->len = sizeof(*ev);
  195. cn_netlink_send(msg, CN_IDX_PROC, GFP_KERNEL);
  196. }
  197. /**
  198. * cn_proc_mcast_ctl
  199. * @data: message sent from userspace via the connector
  200. */
  201. static void cn_proc_mcast_ctl(struct cn_msg *msg,
  202. struct netlink_skb_parms *nsp)
  203. {
  204. enum proc_cn_mcast_op *mc_op = NULL;
  205. int err = 0;
  206. if (msg->len != sizeof(*mc_op))
  207. return;
  208. mc_op = (enum proc_cn_mcast_op*)msg->data;
  209. switch (*mc_op) {
  210. case PROC_CN_MCAST_LISTEN:
  211. atomic_inc(&proc_event_num_listeners);
  212. break;
  213. case PROC_CN_MCAST_IGNORE:
  214. atomic_dec(&proc_event_num_listeners);
  215. break;
  216. default:
  217. err = EINVAL;
  218. break;
  219. }
  220. cn_proc_ack(err, msg->seq, msg->ack);
  221. }
  222. /*
  223. * cn_proc_init - initialization entry point
  224. *
  225. * Adds the connector callback to the connector driver.
  226. */
  227. static int __init cn_proc_init(void)
  228. {
  229. int err;
  230. if ((err = cn_add_callback(&cn_proc_event_id, "cn_proc",
  231. &cn_proc_mcast_ctl))) {
  232. printk(KERN_WARNING "cn_proc failed to register\n");
  233. return err;
  234. }
  235. return 0;
  236. }
  237. module_init(cn_proc_init);