2 * Copyright (c) 2007-2011 Robert N. M. Watson
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 #include <sys/param.h>
30 #include <sys/capability.h>
31 #include <sys/socket.h>
32 #include <sys/sysctl.h>
36 #include <netinet/in.h>
38 #include <arpa/inet.h>
41 #include <libprocstat.h>
50 protocol_to_string(int domain, int type, int protocol)
88 addr_to_string(struct sockaddr_storage *ss, char *buffer, int buflen)
90 char buffer2[INET6_ADDRSTRLEN];
91 struct sockaddr_in6 *sin6;
92 struct sockaddr_in *sin;
93 struct sockaddr_un *sun;
95 switch (ss->ss_family) {
97 sun = (struct sockaddr_un *)ss;
98 if (strlen(sun->sun_path) == 0)
99 strlcpy(buffer, "-", buflen);
101 strlcpy(buffer, sun->sun_path, buflen);
105 sin = (struct sockaddr_in *)ss;
106 snprintf(buffer, buflen, "%s:%d", inet_ntoa(sin->sin_addr),
107 ntohs(sin->sin_port));
111 sin6 = (struct sockaddr_in6 *)ss;
112 if (inet_ntop(AF_INET6, &sin6->sin6_addr, buffer2,
113 sizeof(buffer2)) != NULL)
114 snprintf(buffer, buflen, "%s.%d", buffer2,
115 ntohs(sin6->sin6_port));
117 strlcpy(buffer, "-", sizeof(buffer));
121 strlcpy(buffer, "", buflen);
127 print_address(struct sockaddr_storage *ss)
131 addr_to_string(ss, addr, sizeof(addr));
135 static struct cap_desc {
136 cap_rights_t cd_right;
139 /* General file I/O. */
144 { CAP_CREATE, "cr" },
145 { CAP_FEXECVE, "fe" },
147 { CAP_FTRUNCATE, "ft" },
150 { CAP_FCHDIR, "cd" },
151 { CAP_FCHFLAGS, "cf" },
152 { CAP_FCHMOD, "cm" },
153 { CAP_FCHOWN, "cn" },
156 { CAP_FPATHCONF, "fp" },
159 { CAP_FSTATFS, "sf" },
160 { CAP_FUTIMES, "fu" },
161 { CAP_LINKAT, "li" },
162 { CAP_MKDIRAT, "md" },
163 { CAP_MKFIFOAT, "mf" },
164 { CAP_MKNODAT, "mn" },
165 { CAP_RENAMEAT, "rn" },
166 { CAP_SYMLINKAT, "sl" },
167 { CAP_UNLINKAT, "un" },
169 /* Lookups - used to constrain *at() calls. */
170 { CAP_LOOKUP, "lo" },
172 /* Extended attributes. */
173 { CAP_EXTATTR_GET, "eg" },
174 { CAP_EXTATTR_SET, "es" },
175 { CAP_EXTATTR_DELETE, "ed" },
176 { CAP_EXTATTR_LIST, "el" },
178 /* Access Control Lists. */
179 { CAP_ACL_GET, "ag" },
180 { CAP_ACL_SET, "as" },
181 { CAP_ACL_DELETE, "ad" },
182 { CAP_ACL_CHECK, "ac" },
184 /* Socket operations. */
185 { CAP_ACCEPT, "at" },
187 { CAP_CONNECT, "co" },
188 { CAP_GETPEERNAME, "pn" },
189 { CAP_GETSOCKNAME, "sn" },
190 { CAP_GETSOCKOPT, "gs" },
191 { CAP_LISTEN, "ln" },
192 { CAP_PEELOFF, "pf" },
193 { CAP_SETSOCKOPT, "ss" },
194 { CAP_SHUTDOWN, "sh" },
196 /* Mandatory Access Control. */
197 { CAP_MAC_GET, "mg" },
198 { CAP_MAC_SET, "ms" },
200 /* Methods on semaphores. */
201 { CAP_SEM_GETVALUE, "sg" },
202 { CAP_SEM_POST, "sp" },
203 { CAP_SEM_WAIT, "sw" },
205 /* Event monitoring and posting. */
206 { CAP_POLL_EVENT, "po" },
207 { CAP_POST_EVENT, "ev" },
209 /* Strange and powerful rights that should not be given lightly. */
211 { CAP_TTYHOOK, "ty" },
213 /* Process management via process descriptors. */
214 { CAP_PDGETPID, "pg" },
215 { CAP_PDWAIT, "pw" },
216 { CAP_PDKILL, "pk" },
219 * Rights that allow to use bindat(2) and connectat(2) syscalls on a
220 * directory descriptor.
222 { CAP_BINDAT, "ba" },
223 { CAP_CONNECTAT, "ca" },
225 /* Aliases and defines that combine multiple rights. */
226 { CAP_PREAD, "prd" },
227 { CAP_PWRITE, "pwr" },
229 { CAP_MMAP_R, "mmr" },
230 { CAP_MMAP_W, "mmw" },
231 { CAP_MMAP_X, "mmx" },
232 { CAP_MMAP_RW, "mrw" },
233 { CAP_MMAP_RX, "mrx" },
234 { CAP_MMAP_WX, "mwx" },
235 { CAP_MMAP_RWX, "mma" },
240 { CAP_SOCK_CLIENT, "scl" },
241 { CAP_SOCK_SERVER, "ssr" },
243 static const u_int cap_desc_count = sizeof(cap_desc) /
247 width_capability(cap_rights_t rights)
249 u_int count, i, width;
253 for (i = 0; i < cap_desc_count; i++) {
254 if ((cap_desc[i].cd_right & ~rights) == 0) {
255 width += strlen(cap_desc[i].cd_desc);
265 print_capability(cap_rights_t rights, u_int capwidth)
267 u_int count, i, width;
271 for (i = width_capability(rights); i < capwidth; i++) {
272 if (rights || i != 0)
277 for (i = 0; i < cap_desc_count; i++) {
278 if ((cap_desc[i].cd_right & ~rights) == 0) {
279 printf("%s%s", count ? "," : "", cap_desc[i].cd_desc);
280 width += strlen(cap_desc[i].cd_desc);
289 procstat_files(struct procstat *procstat, struct kinfo_proc *kipp)
291 struct sockstat sock;
292 struct filestat_list *head;
293 struct filestat *fst;
296 u_int capwidth, width;
300 * To print the header in capability mode, we need to know the width
301 * of the widest capability string. Even if we get no processes
302 * back, we will print the header, so we defer aborting due to a lack
303 * of processes until after the header logic.
306 head = procstat_getfiles(procstat, kipp, 0);
307 if (head != NULL && Cflag) {
308 STAILQ_FOREACH(fst, head, next) {
309 width = width_capability(fst->fs_cap_rights);
310 if (width > capwidth)
313 if (capwidth < strlen("CAPABILITIES"))
314 capwidth = strlen("CAPABILITIES");
319 printf("%5s %-16s %4s %1s %-9s %-*s "
320 "%-3s %-12s\n", "PID", "COMM", "FD", "T",
321 "FLAGS", capwidth, "CAPABILITIES", "PRO",
324 printf("%5s %-16s %4s %1s %1s %-9s "
325 "%3s %7s %-3s %-12s\n", "PID", "COMM", "FD", "T",
326 "V", "FLAGS", "REF", "OFFSET", "PRO", "NAME");
331 STAILQ_FOREACH(fst, head, next) {
332 printf("%5d ", kipp->ki_pid);
333 printf("%-16s ", kipp->ki_comm);
334 if (fst->fs_uflags & PS_FST_UFLAG_CTTY)
336 else if (fst->fs_uflags & PS_FST_UFLAG_CDIR)
338 else if (fst->fs_uflags & PS_FST_UFLAG_JAIL)
340 else if (fst->fs_uflags & PS_FST_UFLAG_RDIR)
342 else if (fst->fs_uflags & PS_FST_UFLAG_TEXT)
344 else if (fst->fs_uflags & PS_FST_UFLAG_TRACE)
347 printf("%4d ", fst->fs_fd);
349 switch (fst->fs_type) {
350 case PS_FST_TYPE_VNODE:
354 case PS_FST_TYPE_SOCKET:
358 case PS_FST_TYPE_PIPE:
362 case PS_FST_TYPE_FIFO:
366 case PS_FST_TYPE_KQUEUE:
370 case PS_FST_TYPE_CRYPTO:
374 case PS_FST_TYPE_MQUEUE:
378 case PS_FST_TYPE_SHM:
382 case PS_FST_TYPE_PTS:
386 case PS_FST_TYPE_SEM:
390 case PS_FST_TYPE_NONE:
391 case PS_FST_TYPE_UNKNOWN:
399 if (fst->fs_type == PS_FST_TYPE_VNODE) {
400 error = procstat_get_vnode_info(procstat, fst,
402 switch (vn.vn_type) {
403 case PS_FST_VTYPE_VREG:
407 case PS_FST_VTYPE_VDIR:
411 case PS_FST_VTYPE_VBLK:
415 case PS_FST_VTYPE_VCHR:
419 case PS_FST_VTYPE_VLNK:
423 case PS_FST_VTYPE_VSOCK:
427 case PS_FST_VTYPE_VFIFO:
431 case PS_FST_VTYPE_VBAD:
435 case PS_FST_VTYPE_VNON:
436 case PS_FST_VTYPE_UNKNOWN:
444 printf("%s", fst->fs_fflags & PS_FST_FFLAG_READ ? "r" : "-");
445 printf("%s", fst->fs_fflags & PS_FST_FFLAG_WRITE ? "w" : "-");
446 printf("%s", fst->fs_fflags & PS_FST_FFLAG_APPEND ? "a" : "-");
447 printf("%s", fst->fs_fflags & PS_FST_FFLAG_ASYNC ? "s" : "-");
448 printf("%s", fst->fs_fflags & PS_FST_FFLAG_SYNC ? "f" : "-");
449 printf("%s", fst->fs_fflags & PS_FST_FFLAG_NONBLOCK ? "n" : "-");
450 printf("%s", fst->fs_fflags & PS_FST_FFLAG_DIRECT ? "d" : "-");
451 printf("%s", fst->fs_fflags & PS_FST_FFLAG_HASLOCK ? "l" : "-");
453 if (fst->fs_ref_count > -1)
454 printf("%3d ", fst->fs_ref_count);
457 if (fst->fs_offset > -1)
458 printf("%7jd ", (intmax_t)fst->fs_offset);
463 print_capability(fst->fs_cap_rights, capwidth);
466 switch (fst->fs_type) {
467 case PS_FST_TYPE_SOCKET:
468 error = procstat_get_socket_info(procstat, fst, &sock, NULL);
472 protocol_to_string(sock.dom_family,
473 sock.type, sock.proto));
475 * While generally we like to print two addresses,
476 * local and peer, for sockets, it turns out to be
477 * more useful to print the first non-nul address for
478 * local sockets, as typically they aren't bound and
479 * connected, and the path strings can get long.
481 if (sock.dom_family == AF_LOCAL) {
482 struct sockaddr_un *sun =
483 (struct sockaddr_un *)&sock.sa_local;
485 if (sun->sun_path[0] != 0)
486 print_address(&sock.sa_local);
488 print_address(&sock.sa_peer);
490 print_address(&sock.sa_local);
492 print_address(&sock.sa_peer);
497 printf("%-3s ", "-");
498 printf("%-18s", fst->fs_path != NULL ? fst->fs_path : "-");
503 procstat_freefiles(procstat, head);