1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * kernel userspace event delivery
4 *
5 * Copyright (C) 2004 Red Hat, Inc. All rights reserved.
6 * Copyright (C) 2004 Novell, Inc. All rights reserved.
7 * Copyright (C) 2004 IBM, Inc. All rights reserved.
8 *
9 * Authors:
10 * Robert Love <rml@novell.com>
11 * Kay Sievers <kay.sievers@vrfy.org>
12 * Arjan van de Ven <arjanv@redhat.com>
13 * Greg Kroah-Hartman <greg@kroah.com>
14 */
15
16 #include <linux/spinlock.h>
17 #include <linux/string.h>
18 #include <linux/kobject.h>
19 #include <linux/export.h>
20 #include <linux/kmod.h>
21 #include <linux/slab.h>
22 #include <linux/socket.h>
23 #include <linux/skbuff.h>
24 #include <linux/netlink.h>
25 #include <linux/uidgid.h>
26 #include <linux/uuid.h>
27 #include <linux/ctype.h>
28 #include <net/sock.h>
29 #include <net/netlink.h>
30 #include <net/net_namespace.h>
31
32
33 u64 uevent_seqnum;
34 #ifdef CONFIG_UEVENT_HELPER
35 char uevent_helper[UEVENT_HELPER_PATH_LEN] = CONFIG_UEVENT_HELPER_PATH;
36 #endif
37
38 struct uevent_sock {
39 struct list_head list;
40 struct sock *sk;
41 };
42
43 #ifdef CONFIG_NET
44 static LIST_HEAD(uevent_sock_list);
45 #endif
46
47 /* This lock protects uevent_seqnum and uevent_sock_list */
48 static DEFINE_MUTEX(uevent_sock_mutex);
49
50 /* the strings here must match the enum in include/linux/kobject.h */
51 static const char *kobject_actions[] = {
52 [KOBJ_ADD] = "add",
53 [KOBJ_REMOVE] = "remove",
54 [KOBJ_CHANGE] = "change",
55 [KOBJ_MOVE] = "move",
56 [KOBJ_ONLINE] = "online",
57 [KOBJ_OFFLINE] = "offline",
58 [KOBJ_BIND] = "bind",
59 [KOBJ_UNBIND] = "unbind",
60 };
61
kobject_action_type(const char * buf,size_t count,enum kobject_action * type,const char ** args)62 static int kobject_action_type(const char *buf, size_t count,
63 enum kobject_action *type,
64 const char **args)
65 {
66 enum kobject_action action;
67 size_t count_first;
68 const char *args_start;
69 int ret = -EINVAL;
70
71 if (count && (buf[count-1] == '\n' || buf[count-1] == '\0'))
72 count--;
73
74 if (!count)
75 goto out;
76
77 args_start = strnchr(buf, count, ' ');
78 if (args_start) {
79 count_first = args_start - buf;
80 args_start = args_start + 1;
81 } else
82 count_first = count;
83
84 for (action = 0; action < ARRAY_SIZE(kobject_actions); action++) {
85 if (strncmp(kobject_actions[action], buf, count_first) != 0)
86 continue;
87 if (kobject_actions[action][count_first] != '\0')
88 continue;
89 if (args)
90 *args = args_start;
91 *type = action;
92 ret = 0;
93 break;
94 }
95 out:
96 return ret;
97 }
98
action_arg_word_end(const char * buf,const char * buf_end,char delim)99 static const char *action_arg_word_end(const char *buf, const char *buf_end,
100 char delim)
101 {
102 const char *next = buf;
103
104 while (next <= buf_end && *next != delim)
105 if (!isalnum(*next++))
106 return NULL;
107
108 if (next == buf)
109 return NULL;
110
111 return next;
112 }
113
kobject_action_args(const char * buf,size_t count,struct kobj_uevent_env ** ret_env)114 static int kobject_action_args(const char *buf, size_t count,
115 struct kobj_uevent_env **ret_env)
116 {
117 struct kobj_uevent_env *env = NULL;
118 const char *next, *buf_end, *key;
119 int key_len;
120 int r = -EINVAL;
121
122 if (count && (buf[count - 1] == '\n' || buf[count - 1] == '\0'))
123 count--;
124
125 if (!count)
126 return -EINVAL;
127
128 env = kzalloc(sizeof(*env), GFP_KERNEL);
129 if (!env)
130 return -ENOMEM;
131
132 /* first arg is UUID */
133 if (count < UUID_STRING_LEN || !uuid_is_valid(buf) ||
134 add_uevent_var(env, "SYNTH_UUID=%.*s", UUID_STRING_LEN, buf))
135 goto out;
136
137 /*
138 * the rest are custom environment variables in KEY=VALUE
139 * format with ' ' delimiter between each KEY=VALUE pair
140 */
141 next = buf + UUID_STRING_LEN;
142 buf_end = buf + count - 1;
143
144 while (next <= buf_end) {
145 if (*next != ' ')
146 goto out;
147
148 /* skip the ' ', key must follow */
149 key = ++next;
150 if (key > buf_end)
151 goto out;
152
153 buf = next;
154 next = action_arg_word_end(buf, buf_end, '=');
155 if (!next || next > buf_end || *next != '=')
156 goto out;
157 key_len = next - buf;
158
159 /* skip the '=', value must follow */
160 if (++next > buf_end)
161 goto out;
162
163 buf = next;
164 next = action_arg_word_end(buf, buf_end, ' ');
165 if (!next)
166 goto out;
167
168 if (add_uevent_var(env, "SYNTH_ARG_%.*s=%.*s",
169 key_len, key, (int) (next - buf), buf))
170 goto out;
171 }
172
173 r = 0;
174 out:
175 if (r)
176 kfree(env);
177 else
178 *ret_env = env;
179 return r;
180 }
181
182 /**
183 * kobject_synth_uevent - send synthetic uevent with arguments
184 *
185 * @kobj: struct kobject for which synthetic uevent is to be generated
186 * @buf: buffer containing action type and action args, newline is ignored
187 * @count: length of buffer
188 *
189 * Returns 0 if kobject_synthetic_uevent() is completed with success or the
190 * corresponding error when it fails.
191 */
kobject_synth_uevent(struct kobject * kobj,const char * buf,size_t count)192 int kobject_synth_uevent(struct kobject *kobj, const char *buf, size_t count)
193 {
194 char *no_uuid_envp[] = { "SYNTH_UUID=0", NULL };
195 enum kobject_action action;
196 const char *action_args;
197 struct kobj_uevent_env *env;
198 const char *msg = NULL, *devpath;
199 int r;
200
201 r = kobject_action_type(buf, count, &action, &action_args);
202 if (r) {
203 msg = "unknown uevent action string\n";
204 goto out;
205 }
206
207 if (!action_args) {
208 r = kobject_uevent_env(kobj, action, no_uuid_envp);
209 goto out;
210 }
211
212 r = kobject_action_args(action_args,
213 count - (action_args - buf), &env);
214 if (r == -EINVAL) {
215 msg = "incorrect uevent action arguments\n";
216 goto out;
217 }
218
219 if (r)
220 goto out;
221
222 r = kobject_uevent_env(kobj, action, env->envp);
223 kfree(env);
224 out:
225 if (r) {
226 devpath = kobject_get_path(kobj, GFP_KERNEL);
227 printk(KERN_WARNING "synth uevent: %s: %s",
228 devpath ?: "unknown device",
229 msg ?: "failed to send uevent");
230 kfree(devpath);
231 }
232 return r;
233 }
234
235 #ifdef CONFIG_UEVENT_HELPER
kobj_usermode_filter(struct kobject * kobj)236 static int kobj_usermode_filter(struct kobject *kobj)
237 {
238 const struct kobj_ns_type_operations *ops;
239
240 ops = kobj_ns_ops(kobj);
241 if (ops) {
242 const void *init_ns, *ns;
243 ns = kobj->ktype->namespace(kobj);
244 init_ns = ops->initial_ns();
245 return ns != init_ns;
246 }
247
248 return 0;
249 }
250
init_uevent_argv(struct kobj_uevent_env * env,const char * subsystem)251 static int init_uevent_argv(struct kobj_uevent_env *env, const char *subsystem)
252 {
253 int buffer_size = sizeof(env->buf) - env->buflen;
254 int len;
255
256 len = strlcpy(&env->buf[env->buflen], subsystem, buffer_size);
257 if (len >= buffer_size) {
258 pr_warn("init_uevent_argv: buffer size of %d too small, needed %d\n",
259 buffer_size, len);
260 return -ENOMEM;
261 }
262
263 env->argv[0] = uevent_helper;
264 env->argv[1] = &env->buf[env->buflen];
265 env->argv[2] = NULL;
266
267 env->buflen += len + 1;
268 return 0;
269 }
270
cleanup_uevent_env(struct subprocess_info * info)271 static void cleanup_uevent_env(struct subprocess_info *info)
272 {
273 kfree(info->data);
274 }
275 #endif
276
277 #ifdef CONFIG_NET
alloc_uevent_skb(struct kobj_uevent_env * env,const char * action_string,const char * devpath)278 static struct sk_buff *alloc_uevent_skb(struct kobj_uevent_env *env,
279 const char *action_string,
280 const char *devpath)
281 {
282 struct netlink_skb_parms *parms;
283 struct sk_buff *skb = NULL;
284 char *scratch;
285 size_t len;
286
287 /* allocate message with maximum possible size */
288 len = strlen(action_string) + strlen(devpath) + 2;
289 skb = alloc_skb(len + env->buflen, GFP_KERNEL);
290 if (!skb)
291 return NULL;
292
293 /* add header */
294 scratch = skb_put(skb, len);
295 sprintf(scratch, "%s@%s", action_string, devpath);
296
297 skb_put_data(skb, env->buf, env->buflen);
298
299 parms = &NETLINK_CB(skb);
300 parms->creds.uid = GLOBAL_ROOT_UID;
301 parms->creds.gid = GLOBAL_ROOT_GID;
302 parms->dst_group = 1;
303 parms->portid = 0;
304
305 return skb;
306 }
307
uevent_net_broadcast_untagged(struct kobj_uevent_env * env,const char * action_string,const char * devpath)308 static int uevent_net_broadcast_untagged(struct kobj_uevent_env *env,
309 const char *action_string,
310 const char *devpath)
311 {
312 struct sk_buff *skb = NULL;
313 struct uevent_sock *ue_sk;
314 int retval = 0;
315
316 /* send netlink message */
317 list_for_each_entry(ue_sk, &uevent_sock_list, list) {
318 struct sock *uevent_sock = ue_sk->sk;
319
320 if (!netlink_has_listeners(uevent_sock, 1))
321 continue;
322
323 if (!skb) {
324 retval = -ENOMEM;
325 skb = alloc_uevent_skb(env, action_string, devpath);
326 if (!skb)
327 continue;
328 }
329
330 retval = netlink_broadcast(uevent_sock, skb_get(skb), 0, 1,
331 GFP_KERNEL);
332 /* ENOBUFS should be handled in userspace */
333 if (retval == -ENOBUFS || retval == -ESRCH)
334 retval = 0;
335 }
336 consume_skb(skb);
337
338 return retval;
339 }
340
uevent_net_broadcast_tagged(struct sock * usk,struct kobj_uevent_env * env,const char * action_string,const char * devpath)341 static int uevent_net_broadcast_tagged(struct sock *usk,
342 struct kobj_uevent_env *env,
343 const char *action_string,
344 const char *devpath)
345 {
346 struct user_namespace *owning_user_ns = sock_net(usk)->user_ns;
347 struct sk_buff *skb = NULL;
348 int ret = 0;
349
350 skb = alloc_uevent_skb(env, action_string, devpath);
351 if (!skb)
352 return -ENOMEM;
353
354 /* fix credentials */
355 if (owning_user_ns != &init_user_ns) {
356 struct netlink_skb_parms *parms = &NETLINK_CB(skb);
357 kuid_t root_uid;
358 kgid_t root_gid;
359
360 /* fix uid */
361 root_uid = make_kuid(owning_user_ns, 0);
362 if (uid_valid(root_uid))
363 parms->creds.uid = root_uid;
364
365 /* fix gid */
366 root_gid = make_kgid(owning_user_ns, 0);
367 if (gid_valid(root_gid))
368 parms->creds.gid = root_gid;
369 }
370
371 ret = netlink_broadcast(usk, skb, 0, 1, GFP_KERNEL);
372 /* ENOBUFS should be handled in userspace */
373 if (ret == -ENOBUFS || ret == -ESRCH)
374 ret = 0;
375
376 return ret;
377 }
378 #endif
379
kobject_uevent_net_broadcast(struct kobject * kobj,struct kobj_uevent_env * env,const char * action_string,const char * devpath)380 static int kobject_uevent_net_broadcast(struct kobject *kobj,
381 struct kobj_uevent_env *env,
382 const char *action_string,
383 const char *devpath)
384 {
385 int ret = 0;
386
387 #ifdef CONFIG_NET
388 const struct kobj_ns_type_operations *ops;
389 const struct net *net = NULL;
390
391 ops = kobj_ns_ops(kobj);
392 if (!ops && kobj->kset) {
393 struct kobject *ksobj = &kobj->kset->kobj;
394 if (ksobj->parent != NULL)
395 ops = kobj_ns_ops(ksobj->parent);
396 }
397
398 /* kobjects currently only carry network namespace tags and they
399 * are the only tag relevant here since we want to decide which
400 * network namespaces to broadcast the uevent into.
401 */
402 if (ops && ops->netlink_ns && kobj->ktype->namespace)
403 if (ops->type == KOBJ_NS_TYPE_NET)
404 net = kobj->ktype->namespace(kobj);
405
406 if (!net)
407 ret = uevent_net_broadcast_untagged(env, action_string,
408 devpath);
409 else
410 ret = uevent_net_broadcast_tagged(net->uevent_sock->sk, env,
411 action_string, devpath);
412 #endif
413
414 return ret;
415 }
416
zap_modalias_env(struct kobj_uevent_env * env)417 static void zap_modalias_env(struct kobj_uevent_env *env)
418 {
419 static const char modalias_prefix[] = "MODALIAS=";
420 size_t len;
421 int i, j;
422
423 for (i = 0; i < env->envp_idx;) {
424 if (strncmp(env->envp[i], modalias_prefix,
425 sizeof(modalias_prefix) - 1)) {
426 i++;
427 continue;
428 }
429
430 len = strlen(env->envp[i]) + 1;
431
432 if (i != env->envp_idx - 1) {
433 memmove(env->envp[i], env->envp[i + 1],
434 env->buflen - len);
435
436 for (j = i; j < env->envp_idx - 1; j++)
437 env->envp[j] = env->envp[j + 1] - len;
438 }
439
440 env->envp_idx--;
441 env->buflen -= len;
442 }
443 }
444
445 /**
446 * kobject_uevent_env - send an uevent with environmental data
447 *
448 * @kobj: struct kobject that the action is happening to
449 * @action: action that is happening
450 * @envp_ext: pointer to environmental data
451 *
452 * Returns 0 if kobject_uevent_env() is completed with success or the
453 * corresponding error when it fails.
454 */
kobject_uevent_env(struct kobject * kobj,enum kobject_action action,char * envp_ext[])455 int kobject_uevent_env(struct kobject *kobj, enum kobject_action action,
456 char *envp_ext[])
457 {
458 struct kobj_uevent_env *env;
459 const char *action_string = kobject_actions[action];
460 const char *devpath = NULL;
461 const char *subsystem;
462 struct kobject *top_kobj;
463 struct kset *kset;
464 const struct kset_uevent_ops *uevent_ops;
465 int i = 0;
466 int retval = 0;
467
468 /*
469 * Mark "remove" event done regardless of result, for some subsystems
470 * do not want to re-trigger "remove" event via automatic cleanup.
471 */
472 if (action == KOBJ_REMOVE)
473 kobj->state_remove_uevent_sent = 1;
474
475 pr_debug("kobject: '%s' (%p): %s\n",
476 kobject_name(kobj), kobj, __func__);
477
478 /* search the kset we belong to */
479 top_kobj = kobj;
480 while (!top_kobj->kset && top_kobj->parent)
481 top_kobj = top_kobj->parent;
482
483 if (!top_kobj->kset) {
484 pr_debug("kobject: '%s' (%p): %s: attempted to send uevent "
485 "without kset!\n", kobject_name(kobj), kobj,
486 __func__);
487 return -EINVAL;
488 }
489
490 kset = top_kobj->kset;
491 uevent_ops = kset->uevent_ops;
492
493 /* skip the event, if uevent_suppress is set*/
494 if (kobj->uevent_suppress) {
495 pr_debug("kobject: '%s' (%p): %s: uevent_suppress "
496 "caused the event to drop!\n",
497 kobject_name(kobj), kobj, __func__);
498 return 0;
499 }
500 /* skip the event, if the filter returns zero. */
501 if (uevent_ops && uevent_ops->filter)
502 if (!uevent_ops->filter(kset, kobj)) {
503 pr_debug("kobject: '%s' (%p): %s: filter function "
504 "caused the event to drop!\n",
505 kobject_name(kobj), kobj, __func__);
506 return 0;
507 }
508
509 /* originating subsystem */
510 if (uevent_ops && uevent_ops->name)
511 subsystem = uevent_ops->name(kset, kobj);
512 else
513 subsystem = kobject_name(&kset->kobj);
514 if (!subsystem) {
515 pr_debug("kobject: '%s' (%p): %s: unset subsystem caused the "
516 "event to drop!\n", kobject_name(kobj), kobj,
517 __func__);
518 return 0;
519 }
520
521 /* environment buffer */
522 env = kzalloc(sizeof(struct kobj_uevent_env), GFP_KERNEL);
523 if (!env)
524 return -ENOMEM;
525
526 /* complete object path */
527 devpath = kobject_get_path(kobj, GFP_KERNEL);
528 if (!devpath) {
529 retval = -ENOENT;
530 goto exit;
531 }
532
533 /* default keys */
534 retval = add_uevent_var(env, "ACTION=%s", action_string);
535 if (retval)
536 goto exit;
537 retval = add_uevent_var(env, "DEVPATH=%s", devpath);
538 if (retval)
539 goto exit;
540 retval = add_uevent_var(env, "SUBSYSTEM=%s", subsystem);
541 if (retval)
542 goto exit;
543
544 /* keys passed in from the caller */
545 if (envp_ext) {
546 for (i = 0; envp_ext[i]; i++) {
547 retval = add_uevent_var(env, "%s", envp_ext[i]);
548 if (retval)
549 goto exit;
550 }
551 }
552
553 /* let the kset specific function add its stuff */
554 if (uevent_ops && uevent_ops->uevent) {
555 retval = uevent_ops->uevent(kset, kobj, env);
556 if (retval) {
557 pr_debug("kobject: '%s' (%p): %s: uevent() returned "
558 "%d\n", kobject_name(kobj), kobj,
559 __func__, retval);
560 goto exit;
561 }
562 }
563
564 switch (action) {
565 case KOBJ_ADD:
566 /*
567 * Mark "add" event so we can make sure we deliver "remove"
568 * event to userspace during automatic cleanup. If
569 * the object did send an "add" event, "remove" will
570 * automatically generated by the core, if not already done
571 * by the caller.
572 */
573 kobj->state_add_uevent_sent = 1;
574 break;
575
576 case KOBJ_UNBIND:
577 zap_modalias_env(env);
578 break;
579
580 default:
581 break;
582 }
583
584 mutex_lock(&uevent_sock_mutex);
585 /* we will send an event, so request a new sequence number */
586 retval = add_uevent_var(env, "SEQNUM=%llu", (unsigned long long)++uevent_seqnum);
587 if (retval) {
588 mutex_unlock(&uevent_sock_mutex);
589 goto exit;
590 }
591 retval = kobject_uevent_net_broadcast(kobj, env, action_string,
592 devpath);
593 mutex_unlock(&uevent_sock_mutex);
594
595 #ifdef CONFIG_UEVENT_HELPER
596 /* call uevent_helper, usually only enabled during early boot */
597 if (uevent_helper[0] && !kobj_usermode_filter(kobj)) {
598 struct subprocess_info *info;
599
600 retval = add_uevent_var(env, "HOME=/");
601 if (retval)
602 goto exit;
603 retval = add_uevent_var(env,
604 "PATH=/sbin:/bin:/usr/sbin:/usr/bin");
605 if (retval)
606 goto exit;
607 retval = init_uevent_argv(env, subsystem);
608 if (retval)
609 goto exit;
610
611 retval = -ENOMEM;
612 info = call_usermodehelper_setup(env->argv[0], env->argv,
613 env->envp, GFP_KERNEL,
614 NULL, cleanup_uevent_env, env);
615 if (info) {
616 retval = call_usermodehelper_exec(info, UMH_NO_WAIT);
617 env = NULL; /* freed by cleanup_uevent_env */
618 }
619 }
620 #endif
621
622 exit:
623 kfree(devpath);
624 kfree(env);
625 return retval;
626 }
627 EXPORT_SYMBOL_GPL(kobject_uevent_env);
628
629 /**
630 * kobject_uevent - notify userspace by sending an uevent
631 *
632 * @kobj: struct kobject that the action is happening to
633 * @action: action that is happening
634 *
635 * Returns 0 if kobject_uevent() is completed with success or the
636 * corresponding error when it fails.
637 */
kobject_uevent(struct kobject * kobj,enum kobject_action action)638 int kobject_uevent(struct kobject *kobj, enum kobject_action action)
639 {
640 return kobject_uevent_env(kobj, action, NULL);
641 }
642 EXPORT_SYMBOL_GPL(kobject_uevent);
643
644 /**
645 * add_uevent_var - add key value string to the environment buffer
646 * @env: environment buffer structure
647 * @format: printf format for the key=value pair
648 *
649 * Returns 0 if environment variable was added successfully or -ENOMEM
650 * if no space was available.
651 */
add_uevent_var(struct kobj_uevent_env * env,const char * format,...)652 int add_uevent_var(struct kobj_uevent_env *env, const char *format, ...)
653 {
654 va_list args;
655 int len;
656
657 if (env->envp_idx >= ARRAY_SIZE(env->envp)) {
658 WARN(1, KERN_ERR "add_uevent_var: too many keys\n");
659 return -ENOMEM;
660 }
661
662 va_start(args, format);
663 len = vsnprintf(&env->buf[env->buflen],
664 sizeof(env->buf) - env->buflen,
665 format, args);
666 va_end(args);
667
668 if (len >= (sizeof(env->buf) - env->buflen)) {
669 WARN(1, KERN_ERR "add_uevent_var: buffer size too small\n");
670 return -ENOMEM;
671 }
672
673 env->envp[env->envp_idx++] = &env->buf[env->buflen];
674 env->buflen += len + 1;
675 return 0;
676 }
677 EXPORT_SYMBOL_GPL(add_uevent_var);
678
679 #if defined(CONFIG_NET)
uevent_net_broadcast(struct sock * usk,struct sk_buff * skb,struct netlink_ext_ack * extack)680 static int uevent_net_broadcast(struct sock *usk, struct sk_buff *skb,
681 struct netlink_ext_ack *extack)
682 {
683 /* u64 to chars: 2^64 - 1 = 21 chars */
684 char buf[sizeof("SEQNUM=") + 21];
685 struct sk_buff *skbc;
686 int ret;
687
688 /* bump and prepare sequence number */
689 ret = snprintf(buf, sizeof(buf), "SEQNUM=%llu", ++uevent_seqnum);
690 if (ret < 0 || (size_t)ret >= sizeof(buf))
691 return -ENOMEM;
692 ret++;
693
694 /* verify message does not overflow */
695 if ((skb->len + ret) > UEVENT_BUFFER_SIZE) {
696 NL_SET_ERR_MSG(extack, "uevent message too big");
697 return -EINVAL;
698 }
699
700 /* copy skb and extend to accommodate sequence number */
701 skbc = skb_copy_expand(skb, 0, ret, GFP_KERNEL);
702 if (!skbc)
703 return -ENOMEM;
704
705 /* append sequence number */
706 skb_put_data(skbc, buf, ret);
707
708 /* remove msg header */
709 skb_pull(skbc, NLMSG_HDRLEN);
710
711 /* set portid 0 to inform userspace message comes from kernel */
712 NETLINK_CB(skbc).portid = 0;
713 NETLINK_CB(skbc).dst_group = 1;
714
715 ret = netlink_broadcast(usk, skbc, 0, 1, GFP_KERNEL);
716 /* ENOBUFS should be handled in userspace */
717 if (ret == -ENOBUFS || ret == -ESRCH)
718 ret = 0;
719
720 return ret;
721 }
722
uevent_net_rcv_skb(struct sk_buff * skb,struct nlmsghdr * nlh,struct netlink_ext_ack * extack)723 static int uevent_net_rcv_skb(struct sk_buff *skb, struct nlmsghdr *nlh,
724 struct netlink_ext_ack *extack)
725 {
726 struct net *net;
727 int ret;
728
729 if (!nlmsg_data(nlh))
730 return -EINVAL;
731
732 /*
733 * Verify that we are allowed to send messages to the target
734 * network namespace. The caller must have CAP_SYS_ADMIN in the
735 * owning user namespace of the target network namespace.
736 */
737 net = sock_net(NETLINK_CB(skb).sk);
738 if (!netlink_ns_capable(skb, net->user_ns, CAP_SYS_ADMIN)) {
739 NL_SET_ERR_MSG(extack, "missing CAP_SYS_ADMIN capability");
740 return -EPERM;
741 }
742
743 mutex_lock(&uevent_sock_mutex);
744 ret = uevent_net_broadcast(net->uevent_sock->sk, skb, extack);
745 mutex_unlock(&uevent_sock_mutex);
746
747 return ret;
748 }
749
uevent_net_rcv(struct sk_buff * skb)750 static void uevent_net_rcv(struct sk_buff *skb)
751 {
752 netlink_rcv_skb(skb, &uevent_net_rcv_skb);
753 }
754
uevent_net_init(struct net * net)755 static int uevent_net_init(struct net *net)
756 {
757 struct uevent_sock *ue_sk;
758 struct netlink_kernel_cfg cfg = {
759 .groups = 1,
760 .input = uevent_net_rcv,
761 .flags = NL_CFG_F_NONROOT_RECV
762 };
763
764 ue_sk = kzalloc(sizeof(*ue_sk), GFP_KERNEL);
765 if (!ue_sk)
766 return -ENOMEM;
767
768 ue_sk->sk = netlink_kernel_create(net, NETLINK_KOBJECT_UEVENT, &cfg);
769 if (!ue_sk->sk) {
770 printk(KERN_ERR
771 "kobject_uevent: unable to create netlink socket!\n");
772 kfree(ue_sk);
773 return -ENODEV;
774 }
775
776 net->uevent_sock = ue_sk;
777
778 /* Restrict uevents to initial user namespace. */
779 if (sock_net(ue_sk->sk)->user_ns == &init_user_ns) {
780 mutex_lock(&uevent_sock_mutex);
781 list_add_tail(&ue_sk->list, &uevent_sock_list);
782 mutex_unlock(&uevent_sock_mutex);
783 }
784
785 return 0;
786 }
787
uevent_net_exit(struct net * net)788 static void uevent_net_exit(struct net *net)
789 {
790 struct uevent_sock *ue_sk = net->uevent_sock;
791
792 if (sock_net(ue_sk->sk)->user_ns == &init_user_ns) {
793 mutex_lock(&uevent_sock_mutex);
794 list_del(&ue_sk->list);
795 mutex_unlock(&uevent_sock_mutex);
796 }
797
798 netlink_kernel_release(ue_sk->sk);
799 kfree(ue_sk);
800 }
801
802 static struct pernet_operations uevent_net_ops = {
803 .init = uevent_net_init,
804 .exit = uevent_net_exit,
805 };
806
kobject_uevent_init(void)807 static int __init kobject_uevent_init(void)
808 {
809 return register_pernet_subsys(&uevent_net_ops);
810 }
811
812
813 postcore_initcall(kobject_uevent_init);
814 #endif
815