| Server IP : 62.109.13.187 / Your IP : 216.73.216.11 [ Web Server : Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips PHP/8.2.28 System : Linux robothost.ru 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : mosrembit ( 6064) PHP Version : 8.2.28 Disable Function : NONE Domains : 0 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/src/file_protector-1.1-234/common/ |
Upload File : |
/**
@file
@brief kernel and userspace transport protocol
@details Copyright (c) 2017 Acronis International GmbH
@author Mikhail Krivtsov (mikhail.krivtsov@acronis.com)
@since $Id: $
*/
#pragma once
// Note: This file is shared between kernel and user space transport code.
// Note: Linux kernel build system defines '__KERNEL__'
#if defined __KERNEL__
#include <linux/types.h> // bool, [u]int(8|16|32|64)_t, pid_t
#else
#include <stdbool.h> // bool
#include <stdint.h> // [u]int(8|16|32|64)_t
#include <sys/types.h> // pid_t
#endif
#if !defined PACKED
#define PACKED __attribute__((packed))
#endif
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#define TRANSPORT_DEVICE_NAME "apl_transport"
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
/*
Each message is either a 'query' or a 'reply'. Each message contains
an identifier ('id') necessary to match 'reply' to corresponding
'query'. Zero 'id' in 'query' means that 'reply' is not necessary.
'reply' with zero 'id' is not used.
*/
typedef uint64_t msg_id_t;
typedef enum {
MT_HELLO,
MT_PING,
MT_PONG,
MT_PID_SET_ST,
MT_PID_DEL,
MT_GET_PID_INFO,
MT_PID_INFO,
MT_GET_FS_ROOT,
MT_FS_ROOT,
MT_EXEC,
MT_EXIT,
MT_FORK,
// file system events:
MT_DIR_OPEN,
MT_DIR_WRITE,
MT_DIR_CLOSE,
MT_FILE_PRE_CREATE,
MT_FILE_CREATE,
MT_FILE_PRE_OPEN,
MT_FILE_OPEN,
MT_FILE_PRE_WRITE,
MT_FILE_WRITE,
MT_FILE_CLOSE,
MT_PRE_RENAME,
MT_RENAME,
MT_PRE_UNLINK,
MT_UNLINK,
} msg_type_t;
typedef uint8_t msg_type_img_t;
typedef struct PACKED {
msg_id_t id;
msg_type_img_t type; // msg_type_t
bool reply;
uint8_t payload[0];
} msg_img_t;
inline static
msg_id_t msg_img_id(const msg_img_t *msg_img)
{
return msg_img->id;
}
inline static
msg_type_img_t msg_img_type(const msg_img_t *msg_img)
{
return msg_img->type;
}
inline static
bool msg_img_is_reply(const msg_img_t *msg_img)
{
return msg_img->reply;
}
inline static
bool msg_img_is_reply_required(const msg_img_t *msg_img)
{
return msg_img_id(msg_img) && !msg_img_is_reply(msg_img);
}
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
/*
Generic 'reply' message
*/
// Note: Empty 'reply' may be used as shortcut for 'default' reply
/*
// Legacy 'reply_img_t'
typedef struct PACKED {
uint8_t reply[0];
} reply_img_t;
*/
typedef enum {
RT_ALLOW,
RT_BLOCK,
} reply_type_t;
typedef uint8_t reply_type_img_t;
typedef struct PACKED {
reply_type_img_t type;
uint8_t payload[0];
} reply_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
/*
'hello' message is sent on 'first' user space connection.
*/
typedef struct PACKED {
// TODO: add version information here
uint8_t payload[0];
} hello_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
/*
'transport' testing
'pong' message is 'high level' reply to 'ping' message. 'pong'
message returns 'payload' from 'ping' message.
'ping' and 'pong' messages can be sent in both 'synchronous' (i.e
with *_reply') and 'asynchronous' (i.e without *_reply') modes.
'ping_reply' and 'pong_reply' are respective 'low level'
confirmations for 'ping' and 'pong' messages. They do not return
'payload'. Instead they return some arbitrary 'reply'.
*/
typedef uint64_t ping_pong_sequence_t;
typedef struct PACKED {
ping_pong_sequence_t sequence;
uint8_t payload[0];
} ping_img_t;
typedef struct PACKED {
ping_pong_sequence_t sequence;
uint8_t payload[0];
} pong_img_t;
typedef struct PACKED {
uint8_t reply[0];
} ping_reply_img_t;
typedef struct PACKED {
uint8_t reply[0];
} pong_reply_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
/*
task_info_map management
*/
typedef uint32_t pid_img_t;
typedef uint32_t uid_img_t;
typedef uint32_t gid_img_t;
// FIXME: rename 'task_status' to '([fs_]events|monitoring|watch)[ mode]'
typedef enum {
TS_UNKNOWN, // 0, initial default
TS_IGNORE, // active protection daemon and friends
TS_WHITE, // harmless
TS_BLACK, // harmful
TS_GREY, // FIXME: What is this for?
} task_status_t;
typedef struct PACKED {
pid_img_t pid; // pid_t
task_status_t status;
} pid_set_st_img_t;
typedef struct PACKED {
pid_img_t pid; // pid_t
} pid_del_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
// MT_GET_PID_INFO
typedef struct PACKED {
pid_img_t pid; // pid_t
} get_pid_info_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
// MT_PID_INFO
typedef struct PACKED {
pid_img_t pid; // pid_t
pid_img_t tid; // pid_t
char path[0];
} pid_info_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
// MT_GET_FS_ROOT
typedef struct PACKED {
pid_img_t pid; // pid_t
} get_fs_root_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
// MT_FS_ROOT
typedef struct PACKED {
char fs_root[0];
} fs_root_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
typedef struct PACKED {
pid_img_t pid; // pid_t
pid_img_t tid; // pid_t
pid_img_t ppid; // pid_t
pid_img_t ptid; // pid_t
int8_t sure; // false if process is new for task_info_map
char path[0];
} exec_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
typedef struct PACKED {
pid_img_t pid; // pid_t
pid_img_t tid; // pid_t
} exit_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
typedef struct PACKED {
struct PACKED {
pid_img_t pid; // pid_t
pid_img_t tid; // pid_t
} parent;
struct PACKED {
pid_img_t pid; // pid_t
pid_img_t tid; // pid_t
} child;
} fork_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
/*
File system events
Note: File system events must be 'synchronous' to let userspace
backup affected files prior to any actual modification by kernel.
*/
typedef struct PACKED {
pid_img_t pid; // pid_t
pid_img_t tid; // pid_t
uid_img_t fsuid;
gid_img_t fsgid;
uint8_t payload[0];
} fs_event_img_t;
typedef uint64_t offset_img_t; // Note: 'loff_t' is 'signed'
typedef uint64_t size_img_t;
// 'RW' message is for CREAT, OPEN, [PRE_]WRITE
// Note: 'offset' and 'count' are relevant for 'write' only
typedef struct PACKED {
int64_t ret_val;
uint32_t flags;
offset_img_t offset; // loff_t
size_img_t count; // size_t
char path[0];
} fs_event_rw_img_t;
typedef struct PACKED {
int64_t ret_val;
uint32_t flags;
// oldname = names[0]
// newname = names[newname_offset]
uint16_t newname_offset;
char names[0];
} fs_event_rename_img_t;
typedef struct PACKED {
int64_t ret_val;
uint32_t flag;
char path[0];
} fs_event_unlink_img_t;
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
typedef enum {
IOCTL_READ_MSG = 1,
IOCTL_WRITE_MSG = 2,
IOCTL_WRITE_AND_READ_MSG = 3,
} ioctl_cmd_t;
typedef uint16_t ioctl_size_img_t;
typedef struct PACKED {
ioctl_size_img_t capacity; // payload capacity;
ioctl_size_img_t size; // actual payload size;
uint8_t payload[0];
} ioctl_hdr_t;