shrd_mem.c

IBM的Linux上的PKCS#11实现

             terms of this Agreement, and without further action by the
             parties hereto, such provision shall be reformed to the
             minimum extent necessary to make such provision valid and
             enforceable.


             If Recipient institutes patent litigation against a
             Contributor with respect to a patent applicable to
             software (including a cross-claim or counterclaim in a
             lawsuit), then any patent licenses granted by that
             Contributor to such Recipient under this Agreement shall
             terminate as of the date such litigation is filed. In
             addition, If Recipient institutes patent litigation
             against any entity (including a cross-claim or
             counterclaim in a lawsuit) alleging that the Program
             itself (excluding combinations of the Program with other
             software or hardware) infringes such Recipient's
             patent(s), then such Recipient's rights granted under
             Section 2(b) shall terminate as of the date such
             litigation is filed.

             All Recipient's rights under this Agreement shall
             terminate if it fails to comply with any of the material
             terms or conditions of this Agreement and does not cure
             such failure in a reasonable period of time after becoming
             aware of such noncompliance. If all Recipient's rights
             under this Agreement terminate, Recipient agrees to cease
             use and distribution of the Program as soon as reasonably
             practicable. However, Recipient's obligations under this
             Agreement and any licenses granted by Recipient relating
             to the Program shall continue and survive. 

             Everyone is permitted to copy and distribute copies of
             this Agreement, but in order to avoid inconsistency the
             Agreement is copyrighted and may only be modified in the
             following manner. The Agreement Steward reserves the right
             to publish new versions (including revisions) of this
             Agreement from time to time. No one other than the
             Agreement Steward has the right to modify this Agreement.

             IBM is the initial Agreement Steward. IBM may assign the
             responsibility to serve as the Agreement Steward to a
             suitable separate entity. Each new version of the
             Agreement will be given a distinguishing version number.
             The Program (including Contributions) may always be
             distributed subject to the version of the Agreement under
             which it was received. In addition, after a new version of
             the Agreement is published, Contributor may elect to
             distribute the Program (including its Contributions) under
             the new version. Except as expressly stated in Sections
             2(a) and 2(b) above, Recipient receives no rights or
             licenses to the intellectual property of any Contributor
             under this Agreement, whether expressly, by implication,
             estoppel or otherwise. All rights in the Program not
             expressly granted under this Agreement are reserved.


             This Agreement is governed by the laws of the State of New
             York and the intellectual property laws of the United
             States of America. No party to this Agreement will bring a
             legal action under this Agreement more than one year after
             the cause of action arose. Each party waives its rights to
             a jury trial in any resulting litigation. 



*/

/* (C) COPYRIGHT International Business Machines Corp. 2001          */


//
//AIX Pkcs11 Api Shared Memory Routines 
//

#if NGPTH
#include <pth.h>
#else
#include <pthread.h>
#endif

#include <stdlib.h>

#include <stdio.h>
#include <dlfcn.h>
#include <errno.h>

#include <sys/shm.h>
#if defined(AIX)
#include <sys/mode.h>
#endif
#include <sys/ipc.h>
#include <sys/stat.h>

#include <fcntl.h>
#include <sys/mman.h>


#include <pwd.h>
#include <sys/types.h>
#include <grp.h>

#include <slotmgr.h>
#include <apictl.h>

#define MAPFILENAME "//etc//pkcs11//.apimap"

extern  API_Proc_Struct_t  *Anchor;
//
// Will attach to the shared memory that has been created 
// by the slot manager daemon.
// A NULL pointer will return if the memory region is invalid
// for any reason
void *
attach_shared_memory() {

   key_t  tok;
   int    shmid;
   char   *shmp;
   struct stat statbuf;
   struct group *grp;
   gid_t  gid,egid;
   struct passwd *pw, *epw;

#if !(MMAP)
   // Really should fstat the tok_path, since it will be the actual
   // executable of the slotmgr, however at this time we won't bother
   // for the prototype.  /tmp/slotmgr will have to be an existing file.

   if (stat(TOK_PATH,&statbuf) < 0 ){
      // The Stat token origin file does not work... Kick it out
      return NULL;
   }


   // SAB check for the group id here and membership here as well
   grp = getgrnam("pkcs11");
   if ( grp ) {
        int i=0;
        char member=0;

        pw = getpwuid(getuid());

        epw = getpwuid(geteuid());

        while( grp->gr_mem[i] ) {
           if (pw) {
             if ( strncmp(pw->pw_name, grp->gr_mem[i],strlen(pw->pw_name)) == 0 ){
                member = 1;
                break;
             }
           }
           if (epw) {
              if ( strncmp(epw->pw_name, grp->gr_mem[i],strlen(epw->pw_name)) == 0 ){
                  member = 1;
                  break; 
              }
           }
           i++;
        }
        if ( ! member ) {
             return NULL;  // SAB don't bother even attaching...
        }


   } else {
        return NULL;
   }


   
   Anchor->shm_tok = ftok(TOK_PATH,'b');

   // Get the shared memory id.
   shmid = shmget(Anchor->shm_tok,sizeof(Slot_Mgr_Shr_t),
               S_IWUSR|S_IWGRP|S_IRGRP|S_IRUSR);
   if ( shmid < 0 ) {
      return NULL;
   }


   shmp = (void *)shmat(shmid,NULL,0);
   if ( !shmp ) {
      return NULL;
   }

   return shmp;
#else
   int fd;
#warning "EXPERIMENTAL"
   fd = open(MAPFILENAME,O_RDWR);
 
    if (fd < 0 ){
		  return NULL;  //Failed  the file should exist and be valid
    }
   shmp = (char *)mmap(NULL,sizeof(Slot_Mgr_Shr_t),PROT_READ|PROT_WRITE,
				    MAP_SHARED,fd,0);
   close(fd);
   if ( ! shmp ) {
		 return NULL;
   }
   return shmp;
#endif

}

//
//Detach the shared memory from the api when finished.
//

void
detach_shared_memory( shmp )
   char *shmp;
{
#if !(MMAP)
   shmdt(shmp);
#else
   munmap(shmp,sizeof(Slot_Mgr_Shr_t));
#endif
}