/*
 * Copyright (c) 2024 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <errno.h>
#include <unistd.h>
#include <stdio.h>
#include "syscall.h"
#include "sys/capability.h"

static unsigned int __linux_caps_maps[] = {
	CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH, CAP_FOWNER,
	CAP_KILL, CAP_SETGID, CAP_SETUID, CAP_SETPCAP, CAP_NET_BIND_SERVICE,
	CAP_NET_BROADCAST, CAP_NET_ADMIN, CAP_NET_RAW, CAP_SYS_PTRACE, CAP_SYS_ADMIN,
	CAP_SYS_NICE, CAP_SYS_TIME, CAP_SYS_BOOT};

static unsigned int __ohos_caps_maps[] = {
	OHOS_CAP_CHOWN, OHOS_CAP_DAC_EXECUTE, OHOS_CAP_DAC_WRITE, OHOS_CAP_DAC_READ_SEARCH, OHOS_CAP_FOWNER, OHOS_CAP_KILL,
	OHOS_CAP_SETGID, OHOS_CAP_SETUID, OHOS_CAP_NET_BIND_SERVICE, OHOS_CAP_NET_BROADCAST, OHOS_CAP_NET_ADMIN,
	OHOS_CAP_NET_RAW, OHOS_CAP_FS_MOUNT, OHOS_CAP_FS_FORMAT, OHOS_CAP_SCHED_SETPRIORITY,
	OHOS_CAP_SET_TIMEOFDAY, OHOS_CAP_CLOCK_SETTIME, OHOS_CAP_CAPSET, OHOS_CAP_REBOOT, OHOS_CAP_SHELL_EXEC};

static unsigned int linux_caps_to_ohos(unsigned int caps)
{
	int num = sizeof(__linux_caps_maps) / sizeof(int);
	int loop;
	unsigned int result = 0;
	for (loop = 0; loop < num; loop++) {
		if (!((1 << __linux_caps_maps[loop]) & caps)) {
			continue;
		}

		switch (__linux_caps_maps[loop]) {
			case CAP_CHOWN:
				result |= 1 << OHOS_CAP_CHOWN;
				break;
			case CAP_DAC_OVERRIDE:
				result |= 1 << OHOS_CAP_DAC_EXECUTE;
				result |= 1 << OHOS_CAP_DAC_WRITE;
				result |= 1 << OHOS_CAP_DAC_READ_SEARCH;
				break;
			case CAP_DAC_READ_SEARCH:
				result |= 1 << OHOS_CAP_DAC_READ_SEARCH;
				break;
			case CAP_FOWNER:
				result |= 1 << OHOS_CAP_FOWNER;
				break;
			case CAP_KILL:
				result |= 1 << OHOS_CAP_KILL;
				break;
			case CAP_SETGID:
				result |= 1 << OHOS_CAP_SETGID;
				break;
			case CAP_SETUID:
				result |= 1 << OHOS_CAP_SETUID;
				break;
			case CAP_SETPCAP:
				result |= 1 << OHOS_CAP_CAPSET;
				break;
			case CAP_NET_BIND_SERVICE:
				result |= 1 << OHOS_CAP_NET_BIND_SERVICE;
				break;
			case CAP_NET_BROADCAST:
				result |= 1 << OHOS_CAP_NET_BROADCAST;
				break;
			case CAP_NET_ADMIN:
				result |= 1 << OHOS_CAP_NET_ADMIN;
				break;
			case CAP_NET_RAW:
				result |= 1 << OHOS_CAP_NET_RAW;
				break;
			case CAP_SYS_PTRACE:
				result |= 1 << OHOS_CAP_SHELL_EXEC;
				break;
			case CAP_SYS_ADMIN:
				result |= 1 << OHOS_CAP_FS_MOUNT;
				result |= 1 << OHOS_CAP_FS_FORMAT;
				break;
			case CAP_SYS_NICE:
				result |= 1 << OHOS_CAP_SCHED_SETPRIORITY;
				break;
			case CAP_SYS_TIME:
				result |= 1 << OHOS_CAP_SET_TIMEOFDAY;
				result |= 1 << OHOS_CAP_CLOCK_SETTIME;
				break;
			case CAP_SYS_BOOT:
				result |= 1 << OHOS_CAP_REBOOT;
				break;
			default:
				break;
		}
	}

	return result;
}

static unsigned int ohos_caps_to_linux(unsigned int caps)
{
	int num = sizeof(__ohos_caps_maps) / sizeof(int);
	int loop;
	unsigned int result = 0;
	for (loop = 0; loop < num; loop++) {
		if (!((1 << __ohos_caps_maps[loop]) & caps)) {
			continue;
		}

		switch (__ohos_caps_maps[loop]) {
			case OHOS_CAP_CHOWN:
				result |= 1 << CAP_CHOWN;
				break;
			case OHOS_CAP_DAC_EXECUTE:
			case OHOS_CAP_DAC_WRITE:
				result |= 1 << CAP_DAC_OVERRIDE;
				break;
			case OHOS_CAP_DAC_READ_SEARCH:
				result |= 1 << CAP_DAC_READ_SEARCH;
				break;
			case OHOS_CAP_FOWNER:
				result |= 1 << CAP_FOWNER;
				break;
			case OHOS_CAP_KILL:
				result |= 1 << CAP_KILL;
				break;
			case OHOS_CAP_SETGID:
				result |= 1 << CAP_SETGID;
				break;
			case OHOS_CAP_SETUID:
				result |= 1 << CAP_SETUID;
				break;
			case OHOS_CAP_CAPSET:
				result |= 1 << CAP_SETPCAP;
				break;
			case OHOS_CAP_NET_BIND_SERVICE:
				result |= 1 << CAP_NET_BIND_SERVICE;
				break;
			case OHOS_CAP_NET_BROADCAST:
				result |= 1 << CAP_NET_BROADCAST;
				break;
			case OHOS_CAP_NET_ADMIN:
				result |= 1 << CAP_NET_ADMIN;
				break;
			case OHOS_CAP_NET_RAW:
				result |= 1 << CAP_NET_RAW;
				break;
			case OHOS_CAP_SHELL_EXEC:
				result |= 1 << CAP_SYS_PTRACE;
				break;
			case OHOS_CAP_FS_MOUNT:
			case OHOS_CAP_FS_FORMAT:
				result |= 1 << CAP_SYS_ADMIN;
				break;
			case OHOS_CAP_SCHED_SETPRIORITY:
				result |= 1 << CAP_SYS_NICE;
				break;
			case OHOS_CAP_SET_TIMEOFDAY:
			case OHOS_CAP_CLOCK_SETTIME:
				result |= 1 << CAP_SYS_TIME;
				break;
			case OHOS_CAP_REBOOT:
				result |= 1 << CAP_SYS_BOOT;
				break;
			default:
				break;
		}
	}

	return result;
}

int linux_capget(cap_user_header_t hdr_ptr, cap_user_data_t data_ptr)
{
	unsigned int capvalue = 0;

	if (hdr_ptr == NULL || data_ptr == NULL) {
		errno = EINVAL;
		return -1;
	}

	switch (hdr_ptr->version) {
		case _LINUX_CAPABILITY_VERSION_1:
		case _LINUX_CAPABILITY_VERSION_2:
		case _LINUX_CAPABILITY_VERSION_3:
			break;
		default:
			errno = EINVAL;
			return -1;
	}

	if (syscall(SYS_ohoscapget, hdr_ptr->pid, &capvalue)) {
		return -1;
	}

	data_ptr[0].effective = ohos_caps_to_linux(capvalue);
	data_ptr[0].permitted = ohos_caps_to_linux(capvalue);
	data_ptr[0].inheritable = ohos_caps_to_linux(capvalue);
	return 0;
}

int linux_capset(cap_user_header_t hdr_ptr, const cap_user_data_t data_ptr)
{
	unsigned int capvalue = 0;

	if (hdr_ptr == NULL || data_ptr == NULL) {
		errno = EINVAL;
		return -1;
	}

	if (hdr_ptr->pid) {
		errno = EPERM;
		return -1;
	}

	switch (hdr_ptr->version) {
		case _LINUX_CAPABILITY_VERSION_1:
		case _LINUX_CAPABILITY_VERSION_2:
		case _LINUX_CAPABILITY_VERSION_3:
			break;
		default:
			errno = EINVAL;
			return -1;
	}

	capvalue = linux_caps_to_ohos(data_ptr[0].effective);
	return syscall(SYS_ohoscapset, capvalue);
}

weak_alias(linux_capget, capget);
weak_alias(linux_capset, capset);

int ohos_capget(pid_t pid, unsigned int *caps)
{
	return syscall(SYS_ohoscapget, pid, caps);
}

int ohos_capset(unsigned int caps)
{
	return syscall(SYS_ohoscapset, caps);
}