test_oat_hooks.c File Reference

#include "postgres.h"
#include "access/parallel.h"
#include "catalog/dependency.h"
#include "catalog/objectaccess.h"
#include "executor/executor.h"
#include "fmgr.h"
#include "miscadmin.h"
#include "tcop/utility.h"

Include dependency graph for test_oat_hooks.c:

Go to the source code of this file.

Functions
static void	REGRESS_object_access_hook_str (ObjectAccessType access, Oid classId, const char *objName, int subId, void *arg)
static void	REGRESS_object_access_hook (ObjectAccessType access, Oid classId, Oid objectId, int subId, void *arg)
static bool	REGRESS_exec_check_perms (List *rangeTabls, List *rteperminfos, bool do_abort)
static void	REGRESS_utility_command (PlannedStmt *pstmt, const char *queryString, bool readOnlyTree, ProcessUtilityContext context, ParamListInfo params, QueryEnvironment *queryEnv, DestReceiver *dest, QueryCompletion *qc)
static char *	accesstype_to_string (ObjectAccessType access, int subId)
static char *	accesstype_arg_to_string (ObjectAccessType access, void *arg)
void	_PG_init (void)
static void	emit_audit_message (const char *type, const char *hook, char *action, char *objName)
static void	audit_attempt (const char *hook, char *action, char *objName)
static void	audit_success (const char *hook, char *action, char *objName)
static void	audit_failure (const char *hook, char *action, char *objName)

Variables
	PG_MODULE_MAGIC
static bool	REGRESS_deny_set_variable = false
static bool	REGRESS_deny_alter_system = false
static bool	REGRESS_deny_object_access = false
static bool	REGRESS_deny_exec_perms = false
static bool	REGRESS_deny_utility_commands = false
static bool	REGRESS_audit = false
static bool	REGRESS_userset_variable1 = false
static bool	REGRESS_userset_variable2 = false
static bool	REGRESS_suset_variable1 = false
static bool	REGRESS_suset_variable2 = false
static object_access_hook_type	next_object_access_hook = NULL
static object_access_hook_type_str	next_object_access_hook_str = NULL
static ExecutorCheckPerms_hook_type	next_exec_check_perms_hook = NULL
static ProcessUtility_hook_type	next_ProcessUtility_hook = NULL

Function Documentation

_PG_init()

void _PG_init

(

void

)

Definition at line 74 of file test_oat_hooks.c.

{
    /*
     * test_oat_hooks.deny_set_variable = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.deny_set_variable",
                             "Deny non-superuser set permissions",
                             NULL,
                             &REGRESS_deny_set_variable,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.deny_alter_system = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.deny_alter_system",
                             "Deny non-superuser alter system set permissions",
                             NULL,
                             &REGRESS_deny_alter_system,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.deny_object_access = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.deny_object_access",
                             "Deny non-superuser object access permissions",
                             NULL,
                             &REGRESS_deny_object_access,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.deny_exec_perms = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.deny_exec_perms",
                             "Deny non-superuser exec permissions",
                             NULL,
                             &REGRESS_deny_exec_perms,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.deny_utility_commands = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.deny_utility_commands",
                             "Deny non-superuser utility commands",
                             NULL,
                             &REGRESS_deny_utility_commands,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.audit = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.audit",
                             "Turn on/off debug audit messages",
                             NULL,
                             &REGRESS_audit,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.user_var{1,2} = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.user_var1",
                             "Dummy parameter settable by public",
                             NULL,
                             &REGRESS_userset_variable1,
                             false,
                             PGC_USERSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    DefineCustomBoolVariable("test_oat_hooks.user_var2",
                             "Dummy parameter settable by public",
                             NULL,
                             &REGRESS_userset_variable2,
                             false,
                             PGC_USERSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    /*
     * test_oat_hooks.super_var{1,2} = (on|off)
     */
    DefineCustomBoolVariable("test_oat_hooks.super_var1",
                             "Dummy parameter settable by superuser",
                             NULL,
                             &REGRESS_suset_variable1,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    DefineCustomBoolVariable("test_oat_hooks.super_var2",
                             "Dummy parameter settable by superuser",
                             NULL,
                             &REGRESS_suset_variable2,
                             false,
                             PGC_SUSET,
                             GUC_NOT_IN_SAMPLE,
                             NULL,
                             NULL,
                             NULL);
 
    MarkGUCPrefixReserved("test_oat_hooks");
 
    /* Object access hook */
    next_object_access_hook = object_access_hook;
    object_access_hook = REGRESS_object_access_hook;
 
    /* Object access hook str */
    next_object_access_hook_str = object_access_hook_str;
    object_access_hook_str = REGRESS_object_access_hook_str;
 
    /* DML permission check */
    next_exec_check_perms_hook = ExecutorCheckPerms_hook;
    ExecutorCheckPerms_hook = REGRESS_exec_check_perms;
 
    /* ProcessUtility hook */
    next_ProcessUtility_hook = ProcessUtility_hook;
    ProcessUtility_hook = REGRESS_utility_command;
}

References DefineCustomBoolVariable(), ExecutorCheckPerms_hook, fb(), GUC_NOT_IN_SAMPLE, MarkGUCPrefixReserved(), next_exec_check_perms_hook, next_object_access_hook, next_object_access_hook_str, next_ProcessUtility_hook, object_access_hook, object_access_hook_str, PGC_SUSET, PGC_USERSET, ProcessUtility_hook, REGRESS_audit, REGRESS_deny_alter_system, REGRESS_deny_exec_perms, REGRESS_deny_object_access, REGRESS_deny_set_variable, REGRESS_deny_utility_commands, REGRESS_exec_check_perms(), REGRESS_object_access_hook(), REGRESS_object_access_hook_str(), REGRESS_suset_variable1, REGRESS_suset_variable2, REGRESS_userset_variable1, REGRESS_userset_variable2, and REGRESS_utility_command().

accesstype_arg_to_string()

static char * accesstype_arg_to_string ( ObjectAccessType  access, void *  arg  )

static

Definition at line 457 of file test_oat_hooks.c.

{
    if (arg == NULL)
        return pstrdup("extra info null");
 
    switch (access)
    {
        case OAT_POST_CREATE:
            {
                ObjectAccessPostCreate *pc_arg = (ObjectAccessPostCreate *) arg;
 
                return pstrdup(pc_arg->is_internal ? "internal" : "explicit");
            }
            break;
        case OAT_DROP:
            {
                ObjectAccessDrop *drop_arg = (ObjectAccessDrop *) arg;
 
                return psprintf("%s%s%s%s%s%s",
                                ((drop_arg->dropflags & PERFORM_DELETION_INTERNAL)
                                 ? "internal action," : ""),
                                ((drop_arg->dropflags & PERFORM_DELETION_CONCURRENTLY)
                                 ? "concurrent drop," : ""),
                                ((drop_arg->dropflags & PERFORM_DELETION_QUIETLY)
                                 ? "suppress notices," : ""),
                                ((drop_arg->dropflags & PERFORM_DELETION_SKIP_ORIGINAL)
                                 ? "keep original object," : ""),
                                ((drop_arg->dropflags & PERFORM_DELETION_SKIP_EXTENSIONS)
                                 ? "keep extensions," : ""),
                                ((drop_arg->dropflags & PERFORM_DELETION_CONCURRENT_LOCK)
                                 ? "normal concurrent drop," : ""));
            }
            break;
        case OAT_POST_ALTER:
            {
                ObjectAccessPostAlter *pa_arg = (ObjectAccessPostAlter *) arg;
 
                return psprintf("%s %s auxiliary object",
                                (pa_arg->is_internal ? "internal" : "explicit"),
                                (OidIsValid(pa_arg->auxiliary_id) ? "with" : "without"));
            }
            break;
        case OAT_NAMESPACE_SEARCH:
            {
                ObjectAccessNamespaceSearch *ns_arg = (ObjectAccessNamespaceSearch *) arg;
 
                return psprintf("%s, %s",
                                (ns_arg->ereport_on_violation ? "report on violation" : "no report on violation"),
                                (ns_arg->result ? "allowed" : "denied"));
            }
            break;
        case OAT_TRUNCATE:
        case OAT_FUNCTION_EXECUTE:
            /* hook takes no arg. */
            return pstrdup("unexpected extra info pointer received");
        default:
            return pstrdup("cannot parse extra info for unrecognized access type");
    }
 
    return pstrdup("unknown");
}

References arg, fb(), OAT_DROP, OAT_FUNCTION_EXECUTE, OAT_NAMESPACE_SEARCH, OAT_POST_ALTER, OAT_POST_CREATE, OAT_TRUNCATE, OidIsValid, PERFORM_DELETION_CONCURRENT_LOCK, PERFORM_DELETION_CONCURRENTLY, PERFORM_DELETION_INTERNAL, PERFORM_DELETION_QUIETLY, PERFORM_DELETION_SKIP_EXTENSIONS, PERFORM_DELETION_SKIP_ORIGINAL, psprintf(), and pstrdup().

Referenced by REGRESS_object_access_hook().

accesstype_to_string()

static char * accesstype_to_string ( ObjectAccessType  access, int  subId  )

static

Definition at line 418 of file test_oat_hooks.c.

{
    const char *type;
 
    switch (access)
    {
        case OAT_POST_CREATE:
            type = "create";
            break;
        case OAT_DROP:
            type = "drop";
            break;
        case OAT_POST_ALTER:
            type = "alter";
            break;
        case OAT_NAMESPACE_SEARCH:
            type = "namespace search";
            break;
        case OAT_FUNCTION_EXECUTE:
            type = "execute";
            break;
        case OAT_TRUNCATE:
            type = "truncate";
            break;
        default:
            type = "UNRECOGNIZED ObjectAccessType";
    }
 
    if ((subId & ACL_SET) && (subId & ACL_ALTER_SYSTEM))
        return psprintf("%s (subId=0x%x, all privileges)", type, subId);
    if (subId & ACL_SET)
        return psprintf("%s (subId=0x%x, set)", type, subId);
    if (subId & ACL_ALTER_SYSTEM)
        return psprintf("%s (subId=0x%x, alter system)", type, subId);
 
    return psprintf("%s (subId=0x%x)", type, subId);
}

References ACL_ALTER_SYSTEM, ACL_SET, fb(), OAT_DROP, OAT_FUNCTION_EXECUTE, OAT_NAMESPACE_SEARCH, OAT_POST_ALTER, OAT_POST_CREATE, OAT_TRUNCATE, psprintf(), and type.

Referenced by REGRESS_object_access_hook(), and REGRESS_object_access_hook_str().

audit_attempt()

static void audit_attempt ( const char *  hook, char *  action, char *  objName  )

static

Definition at line 258 of file test_oat_hooks.c.

{
    emit_audit_message("attempting", hook, action, objName);
}

References emit_audit_message(), and fb().

Referenced by REGRESS_exec_check_perms(), REGRESS_object_access_hook(), REGRESS_object_access_hook_str(), and REGRESS_utility_command().

audit_failure()

static void audit_failure ( const char *  hook, char *  action, char *  objName  )

static

Definition at line 270 of file test_oat_hooks.c.

{
    emit_audit_message("denied", hook, action, objName);
}

References emit_audit_message(), and fb().

Referenced by REGRESS_exec_check_perms().

audit_success()

static void audit_success ( const char *  hook, char *  action, char *  objName  )

static

Definition at line 264 of file test_oat_hooks.c.

{
    emit_audit_message("finished", hook, action, objName);
}

References emit_audit_message(), and fb().

Referenced by REGRESS_exec_check_perms(), REGRESS_object_access_hook(), REGRESS_object_access_hook_str(), and REGRESS_utility_command().

emit_audit_message()

static void emit_audit_message ( const char *  type, const char *  hook, char *  action, char *  objName  )

static

Definition at line 230 of file test_oat_hooks.c.

{
    /*
     * Ensure that audit messages are not duplicated by only emitting them
     * from a leader process, not a worker process. This makes the test
     * results deterministic even if run with debug_parallel_query = regress.
     */
    if (REGRESS_audit && !IsParallelWorker())
    {
        const char *who = superuser_arg(GetUserId()) ? "superuser" : "non-superuser";
 
        if (objName)
            ereport(NOTICE,
                    (errcode(ERRCODE_INTERNAL_ERROR),
                     errmsg("in %s: %s %s %s [%s]", hook, who, type, action, objName)));
        else
            ereport(NOTICE,
                    (errcode(ERRCODE_INTERNAL_ERROR),
                     errmsg("in %s: %s %s %s", hook, who, type, action)));
    }
 
    if (action)
        pfree(action);
    if (objName)
        pfree(objName);
}

References ereport, errcode(), errmsg(), fb(), GetUserId(), IsParallelWorker, NOTICE, pfree(), REGRESS_audit, superuser_arg(), and type.

Referenced by audit_attempt(), audit_failure(), and audit_success().

REGRESS_exec_check_perms()

static bool REGRESS_exec_check_perms ( List *  rangeTabls, List *  rteperminfos, bool  do_abort  )

static

Definition at line 347 of file test_oat_hooks.c.

{
    bool        am_super = superuser_arg(GetUserId());
    bool        allow = true;
 
    audit_attempt("executor check perms", pstrdup("execute"), NULL);
 
    /* Perform our check */
    allow = !REGRESS_deny_exec_perms || am_super;
    if (do_abort && !allow)
        ereport(ERROR,
                (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                 errmsg("permission denied: %s", "execute")));
 
    /* Forward to next hook in the chain */
    if (next_exec_check_perms_hook &&
        !(*next_exec_check_perms_hook) (rangeTabls, rteperminfos, do_abort))
        allow = false;
 
    if (allow)
        audit_success("executor check perms",
                      pstrdup("execute"),
                      NULL);
    else
        audit_failure("executor check perms",
                      pstrdup("execute"),
                      NULL);
 
    return allow;
}

References audit_attempt(), audit_failure(), audit_success(), ereport, errcode(), errmsg(), ERROR, fb(), GetUserId(), next_exec_check_perms_hook, pstrdup(), REGRESS_deny_exec_perms, and superuser_arg().

Referenced by _PG_init().

REGRESS_object_access_hook()

static void REGRESS_object_access_hook ( ObjectAccessType  access, Oid  classId, Oid  objectId, int  subId, void *  arg  )

static

Definition at line 324 of file test_oat_hooks.c.

{
    audit_attempt("object access",
                  accesstype_to_string(access, 0),
                  accesstype_arg_to_string(access, arg));
 
    if (REGRESS_deny_object_access && !superuser_arg(GetUserId()))
        ereport(ERROR,
                (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                 errmsg("permission denied: %s [%s]",
                        accesstype_to_string(access, 0),
                        accesstype_arg_to_string(access, arg))));
 
    /* Forward to next hook in the chain */
    if (next_object_access_hook)
        (*next_object_access_hook) (access, classId, objectId, subId, arg);
 
    audit_success("object access",
                  accesstype_to_string(access, 0),
                  accesstype_arg_to_string(access, arg));
}

References accesstype_arg_to_string(), accesstype_to_string(), arg, audit_attempt(), audit_success(), ereport, errcode(), errmsg(), ERROR, fb(), GetUserId(), next_object_access_hook, REGRESS_deny_object_access, and superuser_arg().

Referenced by _PG_init().

REGRESS_object_access_hook_str()

static void REGRESS_object_access_hook_str ( ObjectAccessType  access, Oid  classId, const char *  objName, int  subId, void *  arg  )

static

Definition at line 276 of file test_oat_hooks.c.

{
    audit_attempt("object_access_hook_str",
                  accesstype_to_string(access, subId),
                  pstrdup(objName));
 
    if (next_object_access_hook_str)
    {
        (*next_object_access_hook_str) (access, classId, objName, subId, arg);
    }
 
    switch (access)
    {
        case OAT_POST_ALTER:
            if ((subId & ACL_SET) && (subId & ACL_ALTER_SYSTEM))
            {
                if (REGRESS_deny_set_variable && !superuser_arg(GetUserId()))
                    ereport(ERROR,
                            (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                             errmsg("permission denied: all privileges %s", objName)));
            }
            else if (subId & ACL_SET)
            {
                if (REGRESS_deny_set_variable && !superuser_arg(GetUserId()))
                    ereport(ERROR,
                            (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                             errmsg("permission denied: set %s", objName)));
            }
            else if (subId & ACL_ALTER_SYSTEM)
            {
                if (REGRESS_deny_alter_system && !superuser_arg(GetUserId()))
                    ereport(ERROR,
                            (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                             errmsg("permission denied: alter system set %s", objName)));
            }
            else
                elog(ERROR, "Unknown ParameterAclRelationId subId: %d", subId);
            break;
        default:
            break;
    }
 
    audit_success("object_access_hook_str",
                  accesstype_to_string(access, subId),
                  pstrdup(objName));
}

References accesstype_to_string(), ACL_ALTER_SYSTEM, ACL_SET, arg, audit_attempt(), audit_success(), elog, ereport, errcode(), errmsg(), ERROR, fb(), GetUserId(), next_object_access_hook_str, OAT_POST_ALTER, pstrdup(), REGRESS_deny_alter_system, REGRESS_deny_set_variable, and superuser_arg().

Referenced by _PG_init().

REGRESS_utility_command()

static void REGRESS_utility_command ( PlannedStmt *  pstmt, const char *  queryString, bool  readOnlyTree, ProcessUtilityContext  context, ParamListInfo  params, QueryEnvironment *  queryEnv, DestReceiver *  dest, QueryCompletion *  qc  )

static

Definition at line 379 of file test_oat_hooks.c.

{
    Node       *parsetree = pstmt->utilityStmt;
    const char *action = GetCommandTagName(CreateCommandTag(parsetree));
 
    audit_attempt("process utility",
                  pstrdup(action),
                  NULL);
 
    /* Check permissions */
    if (REGRESS_deny_utility_commands && !superuser_arg(GetUserId()))
        ereport(ERROR,
                (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE),
                 errmsg("permission denied: %s", action)));
 
    /* Forward to next hook in the chain */
    if (next_ProcessUtility_hook)
        (*next_ProcessUtility_hook) (pstmt, queryString, readOnlyTree,
                                     context, params, queryEnv,
                                     dest, qc);
    else
        standard_ProcessUtility(pstmt, queryString, readOnlyTree,
                                context, params, queryEnv,
                                dest, qc);
 
    /* We're done */
    audit_success("process utility",
                  pstrdup(action),
                  NULL);
}

References audit_attempt(), audit_success(), CreateCommandTag(), ereport, errcode(), errmsg(), ERROR, fb(), GetCommandTagName(), GetUserId(), next_ProcessUtility_hook, pstrdup(), REGRESS_deny_utility_commands, standard_ProcessUtility(), superuser_arg(), and PlannedStmt::utilityStmt.

Referenced by _PG_init().

Variable Documentation

next_exec_check_perms_hook

ExecutorCheckPerms_hook_type next_exec_check_perms_hook = NULL

static

Definition at line 48 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_exec_check_perms().

next_object_access_hook

object_access_hook_type next_object_access_hook = NULL

static

Definition at line 46 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_object_access_hook().

next_object_access_hook_str

object_access_hook_type_str next_object_access_hook_str = NULL

static

Definition at line 47 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_object_access_hook_str().

next_ProcessUtility_hook

ProcessUtility_hook_type next_ProcessUtility_hook = NULL

static

Definition at line 49 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_utility_command().

PG_MODULE_MAGIC

PG_MODULE_MAGIC

Definition at line 24 of file test_oat_hooks.c.

REGRESS_audit

bool REGRESS_audit = false

static

Definition at line 34 of file test_oat_hooks.c.

Referenced by _PG_init(), and emit_audit_message().

REGRESS_deny_alter_system

bool REGRESS_deny_alter_system = false

static

Definition at line 30 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_object_access_hook_str().

REGRESS_deny_exec_perms

bool REGRESS_deny_exec_perms = false

static

Definition at line 32 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_exec_check_perms().

REGRESS_deny_object_access

bool REGRESS_deny_object_access = false

static

Definition at line 31 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_object_access_hook().

REGRESS_deny_set_variable

bool REGRESS_deny_set_variable = false

static

Definition at line 29 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_object_access_hook_str().

REGRESS_deny_utility_commands

bool REGRESS_deny_utility_commands = false

static

Definition at line 33 of file test_oat_hooks.c.

Referenced by _PG_init(), and REGRESS_utility_command().

REGRESS_suset_variable1

bool REGRESS_suset_variable1 = false

static

Definition at line 42 of file test_oat_hooks.c.

Referenced by _PG_init().

REGRESS_suset_variable2

bool REGRESS_suset_variable2 = false

static

Definition at line 43 of file test_oat_hooks.c.

Referenced by _PG_init().

REGRESS_userset_variable1

bool REGRESS_userset_variable1 = false

static

Definition at line 40 of file test_oat_hooks.c.

Referenced by _PG_init().

REGRESS_userset_variable2

bool REGRESS_userset_variable2 = false

static

Definition at line 41 of file test_oat_hooks.c.

Referenced by _PG_init().