uidgid.h 3.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178
  1. #ifndef _LINUX_UIDGID_H
  2. #define _LINUX_UIDGID_H
  3. /*
  4. * A set of types for the internal kernel types representing uids and gids.
  5. *
  6. * The types defined in this header allow distinguishing which uids and gids in
  7. * the kernel are values used by userspace and which uid and gid values are
  8. * the internal kernel values. With the addition of user namespaces the values
  9. * can be different. Using the type system makes it possible for the compiler
  10. * to detect when we overlook these differences.
  11. *
  12. */
  13. #include <linux/types.h>
  14. #include <linux/highuid.h>
  15. struct user_namespace;
  16. extern struct user_namespace init_user_ns;
  17. typedef struct {
  18. uid_t val;
  19. } kuid_t;
  20. typedef struct {
  21. gid_t val;
  22. } kgid_t;
  23. #define KUIDT_INIT(value) (kuid_t){ value }
  24. #define KGIDT_INIT(value) (kgid_t){ value }
  25. static inline uid_t __kuid_val(kuid_t uid)
  26. {
  27. return uid.val;
  28. }
  29. static inline gid_t __kgid_val(kgid_t gid)
  30. {
  31. return gid.val;
  32. }
  33. #define GLOBAL_ROOT_UID KUIDT_INIT(0)
  34. #define GLOBAL_ROOT_GID KGIDT_INIT(0)
  35. #define INVALID_UID KUIDT_INIT(-1)
  36. #define INVALID_GID KGIDT_INIT(-1)
  37. static inline bool uid_eq(kuid_t left, kuid_t right)
  38. {
  39. return __kuid_val(left) == __kuid_val(right);
  40. }
  41. static inline bool gid_eq(kgid_t left, kgid_t right)
  42. {
  43. return __kgid_val(left) == __kgid_val(right);
  44. }
  45. static inline bool uid_gt(kuid_t left, kuid_t right)
  46. {
  47. return __kuid_val(left) > __kuid_val(right);
  48. }
  49. static inline bool gid_gt(kgid_t left, kgid_t right)
  50. {
  51. return __kgid_val(left) > __kgid_val(right);
  52. }
  53. static inline bool uid_gte(kuid_t left, kuid_t right)
  54. {
  55. return __kuid_val(left) >= __kuid_val(right);
  56. }
  57. static inline bool gid_gte(kgid_t left, kgid_t right)
  58. {
  59. return __kgid_val(left) >= __kgid_val(right);
  60. }
  61. static inline bool uid_lt(kuid_t left, kuid_t right)
  62. {
  63. return __kuid_val(left) < __kuid_val(right);
  64. }
  65. static inline bool gid_lt(kgid_t left, kgid_t right)
  66. {
  67. return __kgid_val(left) < __kgid_val(right);
  68. }
  69. static inline bool uid_lte(kuid_t left, kuid_t right)
  70. {
  71. return __kuid_val(left) <= __kuid_val(right);
  72. }
  73. static inline bool gid_lte(kgid_t left, kgid_t right)
  74. {
  75. return __kgid_val(left) <= __kgid_val(right);
  76. }
  77. static inline bool uid_valid(kuid_t uid)
  78. {
  79. return !uid_eq(uid, INVALID_UID);
  80. }
  81. static inline bool gid_valid(kgid_t gid)
  82. {
  83. return !gid_eq(gid, INVALID_GID);
  84. }
  85. #ifdef CONFIG_USER_NS
  86. extern kuid_t make_kuid(struct user_namespace *from, uid_t uid);
  87. extern kgid_t make_kgid(struct user_namespace *from, gid_t gid);
  88. extern uid_t from_kuid(struct user_namespace *to, kuid_t uid);
  89. extern gid_t from_kgid(struct user_namespace *to, kgid_t gid);
  90. extern uid_t from_kuid_munged(struct user_namespace *to, kuid_t uid);
  91. extern gid_t from_kgid_munged(struct user_namespace *to, kgid_t gid);
  92. static inline bool kuid_has_mapping(struct user_namespace *ns, kuid_t uid)
  93. {
  94. return from_kuid(ns, uid) != (uid_t) -1;
  95. }
  96. static inline bool kgid_has_mapping(struct user_namespace *ns, kgid_t gid)
  97. {
  98. return from_kgid(ns, gid) != (gid_t) -1;
  99. }
  100. #else
  101. static inline kuid_t make_kuid(struct user_namespace *from, uid_t uid)
  102. {
  103. return KUIDT_INIT(uid);
  104. }
  105. static inline kgid_t make_kgid(struct user_namespace *from, gid_t gid)
  106. {
  107. return KGIDT_INIT(gid);
  108. }
  109. static inline uid_t from_kuid(struct user_namespace *to, kuid_t kuid)
  110. {
  111. return __kuid_val(kuid);
  112. }
  113. static inline gid_t from_kgid(struct user_namespace *to, kgid_t kgid)
  114. {
  115. return __kgid_val(kgid);
  116. }
  117. static inline uid_t from_kuid_munged(struct user_namespace *to, kuid_t kuid)
  118. {
  119. uid_t uid = from_kuid(to, kuid);
  120. if (uid == (uid_t)-1)
  121. uid = overflowuid;
  122. return uid;
  123. }
  124. static inline gid_t from_kgid_munged(struct user_namespace *to, kgid_t kgid)
  125. {
  126. gid_t gid = from_kgid(to, kgid);
  127. if (gid == (gid_t)-1)
  128. gid = overflowgid;
  129. return gid;
  130. }
  131. static inline bool kuid_has_mapping(struct user_namespace *ns, kuid_t uid)
  132. {
  133. return true;
  134. }
  135. static inline bool kgid_has_mapping(struct user_namespace *ns, kgid_t gid)
  136. {
  137. return true;
  138. }
  139. #endif /* CONFIG_USER_NS */
  140. #endif /* _LINUX_UIDGID_H */