| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | /*
 | 
					
						
							|  |  |  |  *  linux/fs/binfmt_em86.c | 
					
						
							|  |  |  |  * | 
					
						
							|  |  |  |  *  Based on linux/fs/binfmt_script.c | 
					
						
							| 
									
										
										
										
											2007-10-19 23:21:04 +02:00
										 |  |  |  *  Copyright (C) 1996  Martin von Löwis | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  |  *  original #!-checking implemented by tytso. | 
					
						
							|  |  |  |  * | 
					
						
							|  |  |  |  *  em86 changes Copyright (C) 1997  Jim Paradis | 
					
						
							|  |  |  |  */ | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | #include <linux/module.h>
 | 
					
						
							|  |  |  | #include <linux/string.h>
 | 
					
						
							|  |  |  | #include <linux/stat.h>
 | 
					
						
							|  |  |  | #include <linux/binfmts.h>
 | 
					
						
							|  |  |  | #include <linux/elf.h>
 | 
					
						
							|  |  |  | #include <linux/init.h>
 | 
					
						
							|  |  |  | #include <linux/fs.h>
 | 
					
						
							|  |  |  | #include <linux/file.h>
 | 
					
						
							|  |  |  | #include <linux/errno.h>
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | #define EM86_INTERP	"/usr/bin/em86"
 | 
					
						
							|  |  |  | #define EM86_I_NAME	"em86"
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2012-10-20 22:00:48 -04:00
										 |  |  | static int load_em86(struct linux_binprm *bprm) | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | { | 
					
						
							|  |  |  | 	char *interp, *i_name, *i_arg; | 
					
						
							|  |  |  | 	struct file * file; | 
					
						
							|  |  |  | 	int retval; | 
					
						
							|  |  |  | 	struct elfhdr	elf_ex; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	/* Make sure this is a Linux/Intel ELF executable... */ | 
					
						
							|  |  |  | 	elf_ex = *((struct elfhdr *)bprm->buf); | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	if (memcmp(elf_ex.e_ident, ELFMAG, SELFMAG) != 0) | 
					
						
							|  |  |  | 		return  -ENOEXEC; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	/* First of all, some simple consistency checks */ | 
					
						
							|  |  |  | 	if ((elf_ex.e_type != ET_EXEC && elf_ex.e_type != ET_DYN) || | 
					
						
							|  |  |  | 		(!((elf_ex.e_machine == EM_386) || (elf_ex.e_machine == EM_486))) || | 
					
						
							| 
									
										
										
										
											2013-09-22 16:27:52 -04:00
										 |  |  | 		!bprm->file->f_op->mmap) { | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 			return -ENOEXEC; | 
					
						
							|  |  |  | 	} | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
											  
											
												syscalls: implement execveat() system call
This patchset adds execveat(2) for x86, and is derived from Meredydd
Luff's patch from Sept 2012 (https://lkml.org/lkml/2012/9/11/528).
The primary aim of adding an execveat syscall is to allow an
implementation of fexecve(3) that does not rely on the /proc filesystem,
at least for executables (rather than scripts).  The current glibc version
of fexecve(3) is implemented via /proc, which causes problems in sandboxed
or otherwise restricted environments.
Given the desire for a /proc-free fexecve() implementation, HPA suggested
(https://lkml.org/lkml/2006/7/11/556) that an execveat(2) syscall would be
an appropriate generalization.
Also, having a new syscall means that it can take a flags argument without
back-compatibility concerns.  The current implementation just defines the
AT_EMPTY_PATH and AT_SYMLINK_NOFOLLOW flags, but other flags could be
added in future -- for example, flags for new namespaces (as suggested at
https://lkml.org/lkml/2006/7/11/474).
Related history:
 - https://lkml.org/lkml/2006/12/27/123 is an example of someone
   realizing that fexecve() is likely to fail in a chroot environment.
 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514043 covered
   documenting the /proc requirement of fexecve(3) in its manpage, to
   "prevent other people from wasting their time".
 - https://bugzilla.redhat.com/show_bug.cgi?id=241609 described a
   problem where a process that did setuid() could not fexecve()
   because it no longer had access to /proc/self/fd; this has since
   been fixed.
This patch (of 4):
Add a new execveat(2) system call.  execveat() is to execve() as openat()
is to open(): it takes a file descriptor that refers to a directory, and
resolves the filename relative to that.
In addition, if the filename is empty and AT_EMPTY_PATH is specified,
execveat() executes the file to which the file descriptor refers.  This
replicates the functionality of fexecve(), which is a system call in other
UNIXen, but in Linux glibc it depends on opening "/proc/self/fd/<fd>" (and
so relies on /proc being mounted).
The filename fed to the executed program as argv[0] (or the name of the
script fed to a script interpreter) will be of the form "/dev/fd/<fd>"
(for an empty filename) or "/dev/fd/<fd>/<filename>", effectively
reflecting how the executable was found.  This does however mean that
execution of a script in a /proc-less environment won't work; also, script
execution via an O_CLOEXEC file descriptor fails (as the file will not be
accessible after exec).
Based on patches by Meredydd Luff.
Signed-off-by: David Drysdale <drysdale@google.com>
Cc: Meredydd Luff <meredydd@senatehouse.org>
Cc: Shuah Khan <shuah.kh@samsung.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Alexander Viro <viro@zeniv.linux.org.uk>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Kees Cook <keescook@chromium.org>
Cc: Arnd Bergmann <arnd@arndb.de>
Cc: Rich Felker <dalias@aerifal.cx>
Cc: Christoph Hellwig <hch@infradead.org>
Cc: Michael Kerrisk <mtk.manpages@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
											
										 
											2014-12-12 16:57:29 -08:00
										 |  |  | 	/* Need to be able to load the file after exec */ | 
					
						
							|  |  |  | 	if (bprm->interp_flags & BINPRM_FLAGS_PATH_INACCESSIBLE) | 
					
						
							|  |  |  | 		return -ENOENT; | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 	allow_write_access(bprm->file); | 
					
						
							|  |  |  | 	fput(bprm->file); | 
					
						
							|  |  |  | 	bprm->file = NULL; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	/* Unlike in the script case, we don't have to do any hairy
 | 
					
						
							|  |  |  | 	 * parsing to find our interpreter... it's hardcoded! | 
					
						
							|  |  |  | 	 */ | 
					
						
							|  |  |  | 	interp = EM86_INTERP; | 
					
						
							|  |  |  | 	i_name = EM86_I_NAME; | 
					
						
							|  |  |  | 	i_arg = NULL;		/* We reserve the right to add an arg later */ | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	/*
 | 
					
						
							|  |  |  | 	 * Splice in (1) the interpreter's name for argv[0] | 
					
						
							|  |  |  | 	 *           (2) (optional) argument to interpreter | 
					
						
							|  |  |  | 	 *           (3) filename of emulated file (replace argv[0]) | 
					
						
							|  |  |  | 	 * | 
					
						
							|  |  |  | 	 * This is done in reverse order, because of how the | 
					
						
							|  |  |  | 	 * user environment and arguments are stored. | 
					
						
							|  |  |  | 	 */ | 
					
						
							|  |  |  | 	remove_arg_zero(bprm); | 
					
						
							|  |  |  | 	retval = copy_strings_kernel(1, &bprm->filename, bprm); | 
					
						
							|  |  |  | 	if (retval < 0) return retval;  | 
					
						
							|  |  |  | 	bprm->argc++; | 
					
						
							|  |  |  | 	if (i_arg) { | 
					
						
							|  |  |  | 		retval = copy_strings_kernel(1, &i_arg, bprm); | 
					
						
							|  |  |  | 		if (retval < 0) return retval;  | 
					
						
							|  |  |  | 		bprm->argc++; | 
					
						
							|  |  |  | 	} | 
					
						
							|  |  |  | 	retval = copy_strings_kernel(1, &i_name, bprm); | 
					
						
							|  |  |  | 	if (retval < 0)	return retval; | 
					
						
							|  |  |  | 	bprm->argc++; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	/*
 | 
					
						
							|  |  |  | 	 * OK, now restart the process with the interpreter's inode. | 
					
						
							|  |  |  | 	 * Note that we use open_exec() as the name is now in kernel | 
					
						
							|  |  |  | 	 * space, and we don't need to copy it. | 
					
						
							|  |  |  | 	 */ | 
					
						
							|  |  |  | 	file = open_exec(interp); | 
					
						
							|  |  |  | 	if (IS_ERR(file)) | 
					
						
							|  |  |  | 		return PTR_ERR(file); | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	bprm->file = file; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	retval = prepare_binprm(bprm); | 
					
						
							|  |  |  | 	if (retval < 0) | 
					
						
							|  |  |  | 		return retval; | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2012-10-20 21:53:31 -04:00
										 |  |  | 	return search_binary_handler(bprm); | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | static struct linux_binfmt em86_format = { | 
					
						
							|  |  |  | 	.module		= THIS_MODULE, | 
					
						
							|  |  |  | 	.load_binary	= load_em86, | 
					
						
							|  |  |  | }; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | static int __init init_em86_binfmt(void) | 
					
						
							|  |  |  | { | 
					
						
							| 
									
										
										
										
											2012-03-17 03:05:16 -04:00
										 |  |  | 	register_binfmt(&em86_format); | 
					
						
							|  |  |  | 	return 0; | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | static void __exit exit_em86_binfmt(void) | 
					
						
							|  |  |  | { | 
					
						
							|  |  |  | 	unregister_binfmt(&em86_format); | 
					
						
							|  |  |  | } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | core_initcall(init_em86_binfmt); | 
					
						
							|  |  |  | module_exit(exit_em86_binfmt); | 
					
						
							|  |  |  | MODULE_LICENSE("GPL"); |