1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22#ifndef __LINUX_SECURITY_H
23#define __LINUX_SECURITY_H
24
25#include <linux/key.h>
26#include <linux/capability.h>
27#include <linux/slab.h>
28#include <linux/err.h>
29
30struct linux_binprm;
31struct cred;
32struct rlimit;
33struct siginfo;
34struct sem_array;
35struct sembuf;
36struct kern_ipc_perm;
37struct audit_context;
38struct super_block;
39struct inode;
40struct dentry;
41struct file;
42struct vfsmount;
43struct path;
44struct qstr;
45struct nameidata;
46struct iattr;
47struct fown_struct;
48struct file_operations;
49struct shmid_kernel;
50struct msg_msg;
51struct msg_queue;
52struct xattr;
53struct xfrm_sec_ctx;
54struct mm_struct;
55
56
57#define SECURITY_NAME_MAX 10
58
59
60#define SECURITY_CAP_NOAUDIT 0
61#define SECURITY_CAP_AUDIT 1
62
63struct ctl_table;
64struct audit_krule;
65struct user_namespace;
66struct timezone;
67
68
69
70
71
72extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
73 int cap, int audit);
74extern int cap_settime(const struct timespec *ts, const struct timezone *tz);
75extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
76extern int cap_ptrace_traceme(struct task_struct *parent);
77extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted);
78extern int cap_capset(struct cred *new, const struct cred *old,
79 const kernel_cap_t *effective,
80 const kernel_cap_t *inheritable,
81 const kernel_cap_t *permitted);
82extern int cap_bprm_set_creds(struct linux_binprm *bprm);
83extern int cap_bprm_secureexec(struct linux_binprm *bprm);
84extern int cap_inode_setxattr(struct dentry *dentry, const char *name,
85 const void *value, size_t size, int flags);
86extern int cap_inode_removexattr(struct dentry *dentry, const char *name);
87extern int cap_inode_need_killpriv(struct dentry *dentry);
88extern int cap_inode_killpriv(struct dentry *dentry);
89extern int cap_mmap_addr(unsigned long addr);
90extern int cap_mmap_file(struct file *file, unsigned long reqprot,
91 unsigned long prot, unsigned long flags);
92extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
93extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
94 unsigned long arg4, unsigned long arg5);
95extern int cap_task_setscheduler(struct task_struct *p);
96extern int cap_task_setioprio(struct task_struct *p, int ioprio);
97extern int cap_task_setnice(struct task_struct *p, int nice);
98extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
99
100struct msghdr;
101struct sk_buff;
102struct sock;
103struct sockaddr;
104struct socket;
105struct flowi;
106struct dst_entry;
107struct xfrm_selector;
108struct xfrm_policy;
109struct xfrm_state;
110struct xfrm_user_sec_ctx;
111struct seq_file;
112
113extern int cap_netlink_send(struct sock *sk, struct sk_buff *skb);
114
115void reset_security_ops(void);
116
117#ifdef CONFIG_MMU
118extern unsigned long mmap_min_addr;
119extern unsigned long dac_mmap_min_addr;
120#else
121#define mmap_min_addr 0UL
122#define dac_mmap_min_addr 0UL
123#endif
124
125
126
127
128
129#define LSM_SETID_ID 1
130
131
132#define LSM_SETID_RE 2
133
134
135#define LSM_SETID_RES 4
136
137
138#define LSM_SETID_FS 8
139
140
141struct sched_param;
142struct request_sock;
143
144
145#define LSM_UNSAFE_SHARE 1
146#define LSM_UNSAFE_PTRACE 2
147#define LSM_UNSAFE_PTRACE_CAP 4
148#define LSM_UNSAFE_NO_NEW_PRIVS 8
149
150#ifdef CONFIG_MMU
151extern int mmap_min_addr_handler(struct ctl_table *table, int write,
152 void __user *buffer, size_t *lenp, loff_t *ppos);
153#endif
154
155
156typedef int (*initxattrs) (struct inode *inode,
157 const struct xattr *xattr_array, void *fs_data);
158
159#ifdef CONFIG_SECURITY
160
161struct security_mnt_opts {
162 char **mnt_opts;
163 int *mnt_opts_flags;
164 int num_mnt_opts;
165};
166
167static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
168{
169 opts->mnt_opts = NULL;
170 opts->mnt_opts_flags = NULL;
171 opts->num_mnt_opts = 0;
172}
173
174static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
175{
176 int i;
177 if (opts->mnt_opts)
178 for (i = 0; i < opts->num_mnt_opts; i++)
179 kfree(opts->mnt_opts[i]);
180 kfree(opts->mnt_opts);
181 opts->mnt_opts = NULL;
182 kfree(opts->mnt_opts_flags);
183 opts->mnt_opts_flags = NULL;
184 opts->num_mnt_opts = 0;
185}
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402struct security_operations {
1403 char name[SECURITY_NAME_MAX + 1];
1404
1405 int (*ptrace_access_check) (struct task_struct *child, unsigned int mode);
1406 int (*ptrace_traceme) (struct task_struct *parent);
1407 int (*capget) (struct task_struct *target,
1408 kernel_cap_t *effective,
1409 kernel_cap_t *inheritable, kernel_cap_t *permitted);
1410 int (*capset) (struct cred *new,
1411 const struct cred *old,
1412 const kernel_cap_t *effective,
1413 const kernel_cap_t *inheritable,
1414 const kernel_cap_t *permitted);
1415 int (*capable) (const struct cred *cred, struct user_namespace *ns,
1416 int cap, int audit);
1417 int (*quotactl) (int cmds, int type, int id, struct super_block *sb);
1418 int (*quota_on) (struct dentry *dentry);
1419 int (*syslog) (int type);
1420 int (*settime) (const struct timespec *ts, const struct timezone *tz);
1421 int (*vm_enough_memory) (struct mm_struct *mm, long pages);
1422
1423 int (*bprm_set_creds) (struct linux_binprm *bprm);
1424 int (*bprm_check_security) (struct linux_binprm *bprm);
1425 int (*bprm_secureexec) (struct linux_binprm *bprm);
1426 void (*bprm_committing_creds) (struct linux_binprm *bprm);
1427 void (*bprm_committed_creds) (struct linux_binprm *bprm);
1428
1429 int (*sb_alloc_security) (struct super_block *sb);
1430 void (*sb_free_security) (struct super_block *sb);
1431 int (*sb_copy_data) (char *orig, char *copy);
1432 int (*sb_remount) (struct super_block *sb, void *data);
1433 int (*sb_kern_mount) (struct super_block *sb, int flags, void *data);
1434 int (*sb_show_options) (struct seq_file *m, struct super_block *sb);
1435 int (*sb_statfs) (struct dentry *dentry);
1436 int (*sb_mount) (const char *dev_name, struct path *path,
1437 const char *type, unsigned long flags, void *data);
1438 int (*sb_umount) (struct vfsmount *mnt, int flags);
1439 int (*sb_pivotroot) (struct path *old_path,
1440 struct path *new_path);
1441 int (*sb_set_mnt_opts) (struct super_block *sb,
1442 struct security_mnt_opts *opts);
1443 int (*sb_clone_mnt_opts) (const struct super_block *oldsb,
1444 struct super_block *newsb);
1445 int (*sb_parse_opts_str) (char *options, struct security_mnt_opts *opts);
1446
1447#ifdef CONFIG_SECURITY_PATH
1448 int (*path_unlink) (struct path *dir, struct dentry *dentry);
1449 int (*path_mkdir) (struct path *dir, struct dentry *dentry, umode_t mode);
1450 int (*path_rmdir) (struct path *dir, struct dentry *dentry);
1451 int (*path_mknod) (struct path *dir, struct dentry *dentry, umode_t mode,
1452 unsigned int dev);
1453 int (*path_truncate) (struct path *path);
1454 int (*path_symlink) (struct path *dir, struct dentry *dentry,
1455 const char *old_name);
1456 int (*path_link) (struct dentry *old_dentry, struct path *new_dir,
1457 struct dentry *new_dentry);
1458 int (*path_rename) (struct path *old_dir, struct dentry *old_dentry,
1459 struct path *new_dir, struct dentry *new_dentry);
1460 int (*path_chmod) (struct path *path, umode_t mode);
1461 int (*path_chown) (struct path *path, kuid_t uid, kgid_t gid);
1462 int (*path_chroot) (struct path *path);
1463#endif
1464
1465 int (*inode_alloc_security) (struct inode *inode);
1466 void (*inode_free_security) (struct inode *inode);
1467 int (*inode_init_security) (struct inode *inode, struct inode *dir,
1468 const struct qstr *qstr, char **name,
1469 void **value, size_t *len);
1470 int (*inode_create) (struct inode *dir,
1471 struct dentry *dentry, umode_t mode);
1472 int (*inode_link) (struct dentry *old_dentry,
1473 struct inode *dir, struct dentry *new_dentry);
1474 int (*inode_unlink) (struct inode *dir, struct dentry *dentry);
1475 int (*inode_symlink) (struct inode *dir,
1476 struct dentry *dentry, const char *old_name);
1477 int (*inode_mkdir) (struct inode *dir, struct dentry *dentry, umode_t mode);
1478 int (*inode_rmdir) (struct inode *dir, struct dentry *dentry);
1479 int (*inode_mknod) (struct inode *dir, struct dentry *dentry,
1480 umode_t mode, dev_t dev);
1481 int (*inode_rename) (struct inode *old_dir, struct dentry *old_dentry,
1482 struct inode *new_dir, struct dentry *new_dentry);
1483 int (*inode_readlink) (struct dentry *dentry);
1484 int (*inode_follow_link) (struct dentry *dentry, struct nameidata *nd);
1485 int (*inode_permission) (struct inode *inode, int mask);
1486 int (*inode_setattr) (struct dentry *dentry, struct iattr *attr);
1487 int (*inode_getattr) (struct vfsmount *mnt, struct dentry *dentry);
1488 int (*inode_setxattr) (struct dentry *dentry, const char *name,
1489 const void *value, size_t size, int flags);
1490 void (*inode_post_setxattr) (struct dentry *dentry, const char *name,
1491 const void *value, size_t size, int flags);
1492 int (*inode_getxattr) (struct dentry *dentry, const char *name);
1493 int (*inode_listxattr) (struct dentry *dentry);
1494 int (*inode_removexattr) (struct dentry *dentry, const char *name);
1495 int (*inode_need_killpriv) (struct dentry *dentry);
1496 int (*inode_killpriv) (struct dentry *dentry);
1497 int (*inode_getsecurity) (const struct inode *inode, const char *name, void **buffer, bool alloc);
1498 int (*inode_setsecurity) (struct inode *inode, const char *name, const void *value, size_t size, int flags);
1499 int (*inode_listsecurity) (struct inode *inode, char *buffer, size_t buffer_size);
1500 void (*inode_getsecid) (const struct inode *inode, u32 *secid);
1501
1502 int (*file_permission) (struct file *file, int mask);
1503 int (*file_alloc_security) (struct file *file);
1504 void (*file_free_security) (struct file *file);
1505 int (*file_ioctl) (struct file *file, unsigned int cmd,
1506 unsigned long arg);
1507 int (*mmap_addr) (unsigned long addr);
1508 int (*mmap_file) (struct file *file,
1509 unsigned long reqprot, unsigned long prot,
1510 unsigned long flags);
1511 int (*file_mprotect) (struct vm_area_struct *vma,
1512 unsigned long reqprot,
1513 unsigned long prot);
1514 int (*file_lock) (struct file *file, unsigned int cmd);
1515 int (*file_fcntl) (struct file *file, unsigned int cmd,
1516 unsigned long arg);
1517 int (*file_set_fowner) (struct file *file);
1518 int (*file_send_sigiotask) (struct task_struct *tsk,
1519 struct fown_struct *fown, int sig);
1520 int (*file_receive) (struct file *file);
1521 int (*file_open) (struct file *file, const struct cred *cred);
1522
1523 int (*task_create) (unsigned long clone_flags);
1524 void (*task_free) (struct task_struct *task);
1525 int (*cred_alloc_blank) (struct cred *cred, gfp_t gfp);
1526 void (*cred_free) (struct cred *cred);
1527 int (*cred_prepare)(struct cred *new, const struct cred *old,
1528 gfp_t gfp);
1529 void (*cred_transfer)(struct cred *new, const struct cred *old);
1530 int (*kernel_act_as)(struct cred *new, u32 secid);
1531 int (*kernel_create_files_as)(struct cred *new, struct inode *inode);
1532 int (*kernel_module_request)(char *kmod_name);
1533 int (*kernel_module_from_file)(struct file *file);
1534 int (*task_fix_setuid) (struct cred *new, const struct cred *old,
1535 int flags);
1536 int (*task_setpgid) (struct task_struct *p, pid_t pgid);
1537 int (*task_getpgid) (struct task_struct *p);
1538 int (*task_getsid) (struct task_struct *p);
1539 void (*task_getsecid) (struct task_struct *p, u32 *secid);
1540 int (*task_setnice) (struct task_struct *p, int nice);
1541 int (*task_setioprio) (struct task_struct *p, int ioprio);
1542 int (*task_getioprio) (struct task_struct *p);
1543 int (*task_setrlimit) (struct task_struct *p, unsigned int resource,
1544 struct rlimit *new_rlim);
1545 int (*task_setscheduler) (struct task_struct *p);
1546 int (*task_getscheduler) (struct task_struct *p);
1547 int (*task_movememory) (struct task_struct *p);
1548 int (*task_kill) (struct task_struct *p,
1549 struct siginfo *info, int sig, u32 secid);
1550 int (*task_wait) (struct task_struct *p);
1551 int (*task_prctl) (int option, unsigned long arg2,
1552 unsigned long arg3, unsigned long arg4,
1553 unsigned long arg5);
1554 void (*task_to_inode) (struct task_struct *p, struct inode *inode);
1555
1556 int (*ipc_permission) (struct kern_ipc_perm *ipcp, short flag);
1557 void (*ipc_getsecid) (struct kern_ipc_perm *ipcp, u32 *secid);
1558
1559 int (*msg_msg_alloc_security) (struct msg_msg *msg);
1560 void (*msg_msg_free_security) (struct msg_msg *msg);
1561
1562 int (*msg_queue_alloc_security) (struct msg_queue *msq);
1563 void (*msg_queue_free_security) (struct msg_queue *msq);
1564 int (*msg_queue_associate) (struct msg_queue *msq, int msqflg);
1565 int (*msg_queue_msgctl) (struct msg_queue *msq, int cmd);
1566 int (*msg_queue_msgsnd) (struct msg_queue *msq,
1567 struct msg_msg *msg, int msqflg);
1568 int (*msg_queue_msgrcv) (struct msg_queue *msq,
1569 struct msg_msg *msg,
1570 struct task_struct *target,
1571 long type, int mode);
1572
1573 int (*shm_alloc_security) (struct shmid_kernel *shp);
1574 void (*shm_free_security) (struct shmid_kernel *shp);
1575 int (*shm_associate) (struct shmid_kernel *shp, int shmflg);
1576 int (*shm_shmctl) (struct shmid_kernel *shp, int cmd);
1577 int (*shm_shmat) (struct shmid_kernel *shp,
1578 char __user *shmaddr, int shmflg);
1579
1580 int (*sem_alloc_security) (struct sem_array *sma);
1581 void (*sem_free_security) (struct sem_array *sma);
1582 int (*sem_associate) (struct sem_array *sma, int semflg);
1583 int (*sem_semctl) (struct sem_array *sma, int cmd);
1584 int (*sem_semop) (struct sem_array *sma,
1585 struct sembuf *sops, unsigned nsops, int alter);
1586
1587 int (*netlink_send) (struct sock *sk, struct sk_buff *skb);
1588
1589 void (*d_instantiate) (struct dentry *dentry, struct inode *inode);
1590
1591 int (*getprocattr) (struct task_struct *p, char *name, char **value);
1592 int (*setprocattr) (struct task_struct *p, char *name, void *value, size_t size);
1593 int (*secid_to_secctx) (u32 secid, char **secdata, u32 *seclen);
1594 int (*secctx_to_secid) (const char *secdata, u32 seclen, u32 *secid);
1595 void (*release_secctx) (char *secdata, u32 seclen);
1596
1597 int (*inode_notifysecctx)(struct inode *inode, void *ctx, u32 ctxlen);
1598 int (*inode_setsecctx)(struct dentry *dentry, void *ctx, u32 ctxlen);
1599 int (*inode_getsecctx)(struct inode *inode, void **ctx, u32 *ctxlen);
1600
1601#ifdef CONFIG_SECURITY_NETWORK
1602 int (*unix_stream_connect) (struct sock *sock, struct sock *other, struct sock *newsk);
1603 int (*unix_may_send) (struct socket *sock, struct socket *other);
1604
1605 int (*socket_create) (int family, int type, int protocol, int kern);
1606 int (*socket_post_create) (struct socket *sock, int family,
1607 int type, int protocol, int kern);
1608 int (*socket_bind) (struct socket *sock,
1609 struct sockaddr *address, int addrlen);
1610 int (*socket_connect) (struct socket *sock,
1611 struct sockaddr *address, int addrlen);
1612 int (*socket_listen) (struct socket *sock, int backlog);
1613 int (*socket_accept) (struct socket *sock, struct socket *newsock);
1614 int (*socket_sendmsg) (struct socket *sock,
1615 struct msghdr *msg, int size);
1616 int (*socket_recvmsg) (struct socket *sock,
1617 struct msghdr *msg, int size, int flags);
1618 int (*socket_getsockname) (struct socket *sock);
1619 int (*socket_getpeername) (struct socket *sock);
1620 int (*socket_getsockopt) (struct socket *sock, int level, int optname);
1621 int (*socket_setsockopt) (struct socket *sock, int level, int optname);
1622 int (*socket_shutdown) (struct socket *sock, int how);
1623 int (*socket_sock_rcv_skb) (struct sock *sk, struct sk_buff *skb);
1624 int (*socket_getpeersec_stream) (struct socket *sock, char __user *optval, int __user *optlen, unsigned len);
1625 int (*socket_getpeersec_dgram) (struct socket *sock, struct sk_buff *skb, u32 *secid);
1626 int (*sk_alloc_security) (struct sock *sk, int family, gfp_t priority);
1627 void (*sk_free_security) (struct sock *sk);
1628 void (*sk_clone_security) (const struct sock *sk, struct sock *newsk);
1629 void (*sk_getsecid) (struct sock *sk, u32 *secid);
1630 void (*sock_graft) (struct sock *sk, struct socket *parent);
1631 int (*inet_conn_request) (struct sock *sk, struct sk_buff *skb,
1632 struct request_sock *req);
1633 void (*inet_csk_clone) (struct sock *newsk, const struct request_sock *req);
1634 void (*inet_conn_established) (struct sock *sk, struct sk_buff *skb);
1635 int (*secmark_relabel_packet) (u32 secid);
1636 void (*secmark_refcount_inc) (void);
1637 void (*secmark_refcount_dec) (void);
1638 void (*req_classify_flow) (const struct request_sock *req, struct flowi *fl);
1639 int (*tun_dev_alloc_security) (void **security);
1640 void (*tun_dev_free_security) (void *security);
1641 int (*tun_dev_create) (void);
1642 int (*tun_dev_attach_queue) (void *security);
1643 int (*tun_dev_attach) (struct sock *sk, void *security);
1644 int (*tun_dev_open) (void *security);
1645 void (*skb_owned_by) (struct sk_buff *skb, struct sock *sk);
1646#endif
1647
1648#ifdef CONFIG_SECURITY_NETWORK_XFRM
1649 int (*xfrm_policy_alloc_security) (struct xfrm_sec_ctx **ctxp,
1650 struct xfrm_user_sec_ctx *sec_ctx);
1651 int (*xfrm_policy_clone_security) (struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctx);
1652 void (*xfrm_policy_free_security) (struct xfrm_sec_ctx *ctx);
1653 int (*xfrm_policy_delete_security) (struct xfrm_sec_ctx *ctx);
1654 int (*xfrm_state_alloc_security) (struct xfrm_state *x,
1655 struct xfrm_user_sec_ctx *sec_ctx,
1656 u32 secid);
1657 void (*xfrm_state_free_security) (struct xfrm_state *x);
1658 int (*xfrm_state_delete_security) (struct xfrm_state *x);
1659 int (*xfrm_policy_lookup) (struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1660 int (*xfrm_state_pol_flow_match) (struct xfrm_state *x,
1661 struct xfrm_policy *xp,
1662 const struct flowi *fl);
1663 int (*xfrm_decode_session) (struct sk_buff *skb, u32 *secid, int ckall);
1664#endif
1665
1666
1667#ifdef CONFIG_KEYS
1668 int (*key_alloc) (struct key *key, const struct cred *cred, unsigned long flags);
1669 void (*key_free) (struct key *key);
1670 int (*key_permission) (key_ref_t key_ref,
1671 const struct cred *cred,
1672 key_perm_t perm);
1673 int (*key_getsecurity)(struct key *key, char **_buffer);
1674#endif
1675
1676#ifdef CONFIG_AUDIT
1677 int (*audit_rule_init) (u32 field, u32 op, char *rulestr, void **lsmrule);
1678 int (*audit_rule_known) (struct audit_krule *krule);
1679 int (*audit_rule_match) (u32 secid, u32 field, u32 op, void *lsmrule,
1680 struct audit_context *actx);
1681 void (*audit_rule_free) (void *lsmrule);
1682#endif
1683};
1684
1685
1686extern int security_init(void);
1687extern int security_module_enable(struct security_operations *ops);
1688extern int register_security(struct security_operations *ops);
1689extern void __init security_fixup_ops(struct security_operations *ops);
1690
1691
1692
1693int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
1694int security_ptrace_traceme(struct task_struct *parent);
1695int security_capget(struct task_struct *target,
1696 kernel_cap_t *effective,
1697 kernel_cap_t *inheritable,
1698 kernel_cap_t *permitted);
1699int security_capset(struct cred *new, const struct cred *old,
1700 const kernel_cap_t *effective,
1701 const kernel_cap_t *inheritable,
1702 const kernel_cap_t *permitted);
1703int security_capable(const struct cred *cred, struct user_namespace *ns,
1704 int cap);
1705int security_capable_noaudit(const struct cred *cred, struct user_namespace *ns,
1706 int cap);
1707int security_quotactl(int cmds, int type, int id, struct super_block *sb);
1708int security_quota_on(struct dentry *dentry);
1709int security_syslog(int type);
1710int security_settime(const struct timespec *ts, const struct timezone *tz);
1711int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
1712int security_bprm_set_creds(struct linux_binprm *bprm);
1713int security_bprm_check(struct linux_binprm *bprm);
1714void security_bprm_committing_creds(struct linux_binprm *bprm);
1715void security_bprm_committed_creds(struct linux_binprm *bprm);
1716int security_bprm_secureexec(struct linux_binprm *bprm);
1717int security_sb_alloc(struct super_block *sb);
1718void security_sb_free(struct super_block *sb);
1719int security_sb_copy_data(char *orig, char *copy);
1720int security_sb_remount(struct super_block *sb, void *data);
1721int security_sb_kern_mount(struct super_block *sb, int flags, void *data);
1722int security_sb_show_options(struct seq_file *m, struct super_block *sb);
1723int security_sb_statfs(struct dentry *dentry);
1724int security_sb_mount(const char *dev_name, struct path *path,
1725 const char *type, unsigned long flags, void *data);
1726int security_sb_umount(struct vfsmount *mnt, int flags);
1727int security_sb_pivotroot(struct path *old_path, struct path *new_path);
1728int security_sb_set_mnt_opts(struct super_block *sb, struct security_mnt_opts *opts);
1729int security_sb_clone_mnt_opts(const struct super_block *oldsb,
1730 struct super_block *newsb);
1731int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts);
1732
1733int security_inode_alloc(struct inode *inode);
1734void security_inode_free(struct inode *inode);
1735int security_inode_init_security(struct inode *inode, struct inode *dir,
1736 const struct qstr *qstr,
1737 initxattrs initxattrs, void *fs_data);
1738int security_old_inode_init_security(struct inode *inode, struct inode *dir,
1739 const struct qstr *qstr, char **name,
1740 void **value, size_t *len);
1741int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
1742int security_inode_link(struct dentry *old_dentry, struct inode *dir,
1743 struct dentry *new_dentry);
1744int security_inode_unlink(struct inode *dir, struct dentry *dentry);
1745int security_inode_symlink(struct inode *dir, struct dentry *dentry,
1746 const char *old_name);
1747int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
1748int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
1749int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
1750int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
1751 struct inode *new_dir, struct dentry *new_dentry);
1752int security_inode_readlink(struct dentry *dentry);
1753int security_inode_follow_link(struct dentry *dentry, struct nameidata *nd);
1754int security_inode_permission(struct inode *inode, int mask);
1755int security_inode_setattr(struct dentry *dentry, struct iattr *attr);
1756int security_inode_getattr(struct vfsmount *mnt, struct dentry *dentry);
1757int security_inode_setxattr(struct dentry *dentry, const char *name,
1758 const void *value, size_t size, int flags);
1759void security_inode_post_setxattr(struct dentry *dentry, const char *name,
1760 const void *value, size_t size, int flags);
1761int security_inode_getxattr(struct dentry *dentry, const char *name);
1762int security_inode_listxattr(struct dentry *dentry);
1763int security_inode_removexattr(struct dentry *dentry, const char *name);
1764int security_inode_need_killpriv(struct dentry *dentry);
1765int security_inode_killpriv(struct dentry *dentry);
1766int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc);
1767int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags);
1768int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
1769void security_inode_getsecid(const struct inode *inode, u32 *secid);
1770int security_file_permission(struct file *file, int mask);
1771int security_file_alloc(struct file *file);
1772void security_file_free(struct file *file);
1773int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
1774int security_mmap_file(struct file *file, unsigned long prot,
1775 unsigned long flags);
1776int security_mmap_addr(unsigned long addr);
1777int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
1778 unsigned long prot);
1779int security_file_lock(struct file *file, unsigned int cmd);
1780int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
1781int security_file_set_fowner(struct file *file);
1782int security_file_send_sigiotask(struct task_struct *tsk,
1783 struct fown_struct *fown, int sig);
1784int security_file_receive(struct file *file);
1785int security_file_open(struct file *file, const struct cred *cred);
1786int security_task_create(unsigned long clone_flags);
1787void security_task_free(struct task_struct *task);
1788int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
1789void security_cred_free(struct cred *cred);
1790int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
1791void security_transfer_creds(struct cred *new, const struct cred *old);
1792int security_kernel_act_as(struct cred *new, u32 secid);
1793int security_kernel_create_files_as(struct cred *new, struct inode *inode);
1794int security_kernel_module_request(char *kmod_name);
1795int security_kernel_module_from_file(struct file *file);
1796int security_task_fix_setuid(struct cred *new, const struct cred *old,
1797 int flags);
1798int security_task_setpgid(struct task_struct *p, pid_t pgid);
1799int security_task_getpgid(struct task_struct *p);
1800int security_task_getsid(struct task_struct *p);
1801void security_task_getsecid(struct task_struct *p, u32 *secid);
1802int security_task_setnice(struct task_struct *p, int nice);
1803int security_task_setioprio(struct task_struct *p, int ioprio);
1804int security_task_getioprio(struct task_struct *p);
1805int security_task_setrlimit(struct task_struct *p, unsigned int resource,
1806 struct rlimit *new_rlim);
1807int security_task_setscheduler(struct task_struct *p);
1808int security_task_getscheduler(struct task_struct *p);
1809int security_task_movememory(struct task_struct *p);
1810int security_task_kill(struct task_struct *p, struct siginfo *info,
1811 int sig, u32 secid);
1812int security_task_wait(struct task_struct *p);
1813int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
1814 unsigned long arg4, unsigned long arg5);
1815void security_task_to_inode(struct task_struct *p, struct inode *inode);
1816int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
1817void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
1818int security_msg_msg_alloc(struct msg_msg *msg);
1819void security_msg_msg_free(struct msg_msg *msg);
1820int security_msg_queue_alloc(struct msg_queue *msq);
1821void security_msg_queue_free(struct msg_queue *msq);
1822int security_msg_queue_associate(struct msg_queue *msq, int msqflg);
1823int security_msg_queue_msgctl(struct msg_queue *msq, int cmd);
1824int security_msg_queue_msgsnd(struct msg_queue *msq,
1825 struct msg_msg *msg, int msqflg);
1826int security_msg_queue_msgrcv(struct msg_queue *msq, struct msg_msg *msg,
1827 struct task_struct *target, long type, int mode);
1828int security_shm_alloc(struct shmid_kernel *shp);
1829void security_shm_free(struct shmid_kernel *shp);
1830int security_shm_associate(struct shmid_kernel *shp, int shmflg);
1831int security_shm_shmctl(struct shmid_kernel *shp, int cmd);
1832int security_shm_shmat(struct shmid_kernel *shp, char __user *shmaddr, int shmflg);
1833int security_sem_alloc(struct sem_array *sma);
1834void security_sem_free(struct sem_array *sma);
1835int security_sem_associate(struct sem_array *sma, int semflg);
1836int security_sem_semctl(struct sem_array *sma, int cmd);
1837int security_sem_semop(struct sem_array *sma, struct sembuf *sops,
1838 unsigned nsops, int alter);
1839void security_d_instantiate(struct dentry *dentry, struct inode *inode);
1840int security_getprocattr(struct task_struct *p, char *name, char **value);
1841int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size);
1842int security_netlink_send(struct sock *sk, struct sk_buff *skb);
1843int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
1844int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
1845void security_release_secctx(char *secdata, u32 seclen);
1846
1847int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
1848int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
1849int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
1850#else
1851struct security_mnt_opts {
1852};
1853
1854static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
1855{
1856}
1857
1858static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
1859{
1860}
1861
1862
1863
1864
1865
1866
1867static inline int security_init(void)
1868{
1869 return 0;
1870}
1871
1872static inline int security_ptrace_access_check(struct task_struct *child,
1873 unsigned int mode)
1874{
1875 return cap_ptrace_access_check(child, mode);
1876}
1877
1878static inline int security_ptrace_traceme(struct task_struct *parent)
1879{
1880 return cap_ptrace_traceme(parent);
1881}
1882
1883static inline int security_capget(struct task_struct *target,
1884 kernel_cap_t *effective,
1885 kernel_cap_t *inheritable,
1886 kernel_cap_t *permitted)
1887{
1888 return cap_capget(target, effective, inheritable, permitted);
1889}
1890
1891static inline int security_capset(struct cred *new,
1892 const struct cred *old,
1893 const kernel_cap_t *effective,
1894 const kernel_cap_t *inheritable,
1895 const kernel_cap_t *permitted)
1896{
1897 return cap_capset(new, old, effective, inheritable, permitted);
1898}
1899
1900static inline int security_capable(const struct cred *cred,
1901 struct user_namespace *ns, int cap)
1902{
1903 return cap_capable(cred, ns, cap, SECURITY_CAP_AUDIT);
1904}
1905
1906static inline int security_capable_noaudit(const struct cred *cred,
1907 struct user_namespace *ns, int cap) {
1908 return cap_capable(cred, ns, cap, SECURITY_CAP_NOAUDIT);
1909}
1910
1911static inline int security_quotactl(int cmds, int type, int id,
1912 struct super_block *sb)
1913{
1914 return 0;
1915}
1916
1917static inline int security_quota_on(struct dentry *dentry)
1918{
1919 return 0;
1920}
1921
1922static inline int security_syslog(int type)
1923{
1924 return 0;
1925}
1926
1927static inline int security_settime(const struct timespec *ts,
1928 const struct timezone *tz)
1929{
1930 return cap_settime(ts, tz);
1931}
1932
1933static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)
1934{
1935 return cap_vm_enough_memory(mm, pages);
1936}
1937
1938static inline int security_bprm_set_creds(struct linux_binprm *bprm)
1939{
1940 return cap_bprm_set_creds(bprm);
1941}
1942
1943static inline int security_bprm_check(struct linux_binprm *bprm)
1944{
1945 return 0;
1946}
1947
1948static inline void security_bprm_committing_creds(struct linux_binprm *bprm)
1949{
1950}
1951
1952static inline void security_bprm_committed_creds(struct linux_binprm *bprm)
1953{
1954}
1955
1956static inline int security_bprm_secureexec(struct linux_binprm *bprm)
1957{
1958 return cap_bprm_secureexec(bprm);
1959}
1960
1961static inline int security_sb_alloc(struct super_block *sb)
1962{
1963 return 0;
1964}
1965
1966static inline void security_sb_free(struct super_block *sb)
1967{ }
1968
1969static inline int security_sb_copy_data(char *orig, char *copy)
1970{
1971 return 0;
1972}
1973
1974static inline int security_sb_remount(struct super_block *sb, void *data)
1975{
1976 return 0;
1977}
1978
1979static inline int security_sb_kern_mount(struct super_block *sb, int flags, void *data)
1980{
1981 return 0;
1982}
1983
1984static inline int security_sb_show_options(struct seq_file *m,
1985 struct super_block *sb)
1986{
1987 return 0;
1988}
1989
1990static inline int security_sb_statfs(struct dentry *dentry)
1991{
1992 return 0;
1993}
1994
1995static inline int security_sb_mount(const char *dev_name, struct path *path,
1996 const char *type, unsigned long flags,
1997 void *data)
1998{
1999 return 0;
2000}
2001
2002static inline int security_sb_umount(struct vfsmount *mnt, int flags)
2003{
2004 return 0;
2005}
2006
2007static inline int security_sb_pivotroot(struct path *old_path,
2008 struct path *new_path)
2009{
2010 return 0;
2011}
2012
2013static inline int security_sb_set_mnt_opts(struct super_block *sb,
2014 struct security_mnt_opts *opts)
2015{
2016 return 0;
2017}
2018
2019static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,
2020 struct super_block *newsb)
2021{
2022 return 0;
2023}
2024
2025static inline int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts)
2026{
2027 return 0;
2028}
2029
2030static inline int security_inode_alloc(struct inode *inode)
2031{
2032 return 0;
2033}
2034
2035static inline void security_inode_free(struct inode *inode)
2036{ }
2037
2038static inline int security_inode_init_security(struct inode *inode,
2039 struct inode *dir,
2040 const struct qstr *qstr,
2041 const initxattrs initxattrs,
2042 void *fs_data)
2043{
2044 return 0;
2045}
2046
2047static inline int security_old_inode_init_security(struct inode *inode,
2048 struct inode *dir,
2049 const struct qstr *qstr,
2050 char **name, void **value,
2051 size_t *len)
2052{
2053 return -EOPNOTSUPP;
2054}
2055
2056static inline int security_inode_create(struct inode *dir,
2057 struct dentry *dentry,
2058 umode_t mode)
2059{
2060 return 0;
2061}
2062
2063static inline int security_inode_link(struct dentry *old_dentry,
2064 struct inode *dir,
2065 struct dentry *new_dentry)
2066{
2067 return 0;
2068}
2069
2070static inline int security_inode_unlink(struct inode *dir,
2071 struct dentry *dentry)
2072{
2073 return 0;
2074}
2075
2076static inline int security_inode_symlink(struct inode *dir,
2077 struct dentry *dentry,
2078 const char *old_name)
2079{
2080 return 0;
2081}
2082
2083static inline int security_inode_mkdir(struct inode *dir,
2084 struct dentry *dentry,
2085 int mode)
2086{
2087 return 0;
2088}
2089
2090static inline int security_inode_rmdir(struct inode *dir,
2091 struct dentry *dentry)
2092{
2093 return 0;
2094}
2095
2096static inline int security_inode_mknod(struct inode *dir,
2097 struct dentry *dentry,
2098 int mode, dev_t dev)
2099{
2100 return 0;
2101}
2102
2103static inline int security_inode_rename(struct inode *old_dir,
2104 struct dentry *old_dentry,
2105 struct inode *new_dir,
2106 struct dentry *new_dentry)
2107{
2108 return 0;
2109}
2110
2111static inline int security_inode_readlink(struct dentry *dentry)
2112{
2113 return 0;
2114}
2115
2116static inline int security_inode_follow_link(struct dentry *dentry,
2117 struct nameidata *nd)
2118{
2119 return 0;
2120}
2121
2122static inline int security_inode_permission(struct inode *inode, int mask)
2123{
2124 return 0;
2125}
2126
2127static inline int security_inode_setattr(struct dentry *dentry,
2128 struct iattr *attr)
2129{
2130 return 0;
2131}
2132
2133static inline int security_inode_getattr(struct vfsmount *mnt,
2134 struct dentry *dentry)
2135{
2136 return 0;
2137}
2138
2139static inline int security_inode_setxattr(struct dentry *dentry,
2140 const char *name, const void *value, size_t size, int flags)
2141{
2142 return cap_inode_setxattr(dentry, name, value, size, flags);
2143}
2144
2145static inline void security_inode_post_setxattr(struct dentry *dentry,
2146 const char *name, const void *value, size_t size, int flags)
2147{ }
2148
2149static inline int security_inode_getxattr(struct dentry *dentry,
2150 const char *name)
2151{
2152 return 0;
2153}
2154
2155static inline int security_inode_listxattr(struct dentry *dentry)
2156{
2157 return 0;
2158}
2159
2160static inline int security_inode_removexattr(struct dentry *dentry,
2161 const char *name)
2162{
2163 return cap_inode_removexattr(dentry, name);
2164}
2165
2166static inline int security_inode_need_killpriv(struct dentry *dentry)
2167{
2168 return cap_inode_need_killpriv(dentry);
2169}
2170
2171static inline int security_inode_killpriv(struct dentry *dentry)
2172{
2173 return cap_inode_killpriv(dentry);
2174}
2175
2176static inline int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc)
2177{
2178 return -EOPNOTSUPP;
2179}
2180
2181static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags)
2182{
2183 return -EOPNOTSUPP;
2184}
2185
2186static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)
2187{
2188 return 0;
2189}
2190
2191static inline void security_inode_getsecid(const struct inode *inode, u32 *secid)
2192{
2193 *secid = 0;
2194}
2195
2196static inline int security_file_permission(struct file *file, int mask)
2197{
2198 return 0;
2199}
2200
2201static inline int security_file_alloc(struct file *file)
2202{
2203 return 0;
2204}
2205
2206static inline void security_file_free(struct file *file)
2207{ }
2208
2209static inline int security_file_ioctl(struct file *file, unsigned int cmd,
2210 unsigned long arg)
2211{
2212 return 0;
2213}
2214
2215static inline int security_mmap_file(struct file *file, unsigned long prot,
2216 unsigned long flags)
2217{
2218 return 0;
2219}
2220
2221static inline int security_mmap_addr(unsigned long addr)
2222{
2223 return cap_mmap_addr(addr);
2224}
2225
2226static inline int security_file_mprotect(struct vm_area_struct *vma,
2227 unsigned long reqprot,
2228 unsigned long prot)
2229{
2230 return 0;
2231}
2232
2233static inline int security_file_lock(struct file *file, unsigned int cmd)
2234{
2235 return 0;
2236}
2237
2238static inline int security_file_fcntl(struct file *file, unsigned int cmd,
2239 unsigned long arg)
2240{
2241 return 0;
2242}
2243
2244static inline int security_file_set_fowner(struct file *file)
2245{
2246 return 0;
2247}
2248
2249static inline int security_file_send_sigiotask(struct task_struct *tsk,
2250 struct fown_struct *fown,
2251 int sig)
2252{
2253 return 0;
2254}
2255
2256static inline int security_file_receive(struct file *file)
2257{
2258 return 0;
2259}
2260
2261static inline int security_file_open(struct file *file,
2262 const struct cred *cred)
2263{
2264 return 0;
2265}
2266
2267static inline int security_task_create(unsigned long clone_flags)
2268{
2269 return 0;
2270}
2271
2272static inline void security_task_free(struct task_struct *task)
2273{ }
2274
2275static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)
2276{
2277 return 0;
2278}
2279
2280static inline void security_cred_free(struct cred *cred)
2281{ }
2282
2283static inline int security_prepare_creds(struct cred *new,
2284 const struct cred *old,
2285 gfp_t gfp)
2286{
2287 return 0;
2288}
2289
2290static inline void security_transfer_creds(struct cred *new,
2291 const struct cred *old)
2292{
2293}
2294
2295static inline int security_kernel_act_as(struct cred *cred, u32 secid)
2296{
2297 return 0;
2298}
2299
2300static inline int security_kernel_create_files_as(struct cred *cred,
2301 struct inode *inode)
2302{
2303 return 0;
2304}
2305
2306static inline int security_kernel_module_request(char *kmod_name)
2307{
2308 return 0;
2309}
2310
2311static inline int security_kernel_module_from_file(struct file *file)
2312{
2313 return 0;
2314}
2315
2316static inline int security_task_fix_setuid(struct cred *new,
2317 const struct cred *old,
2318 int flags)
2319{
2320 return cap_task_fix_setuid(new, old, flags);
2321}
2322
2323static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)
2324{
2325 return 0;
2326}
2327
2328static inline int security_task_getpgid(struct task_struct *p)
2329{
2330 return 0;
2331}
2332
2333static inline int security_task_getsid(struct task_struct *p)
2334{
2335 return 0;
2336}
2337
2338static inline void security_task_getsecid(struct task_struct *p, u32 *secid)
2339{
2340 *secid = 0;
2341}
2342
2343static inline int security_task_setnice(struct task_struct *p, int nice)
2344{
2345 return cap_task_setnice(p, nice);
2346}
2347
2348static inline int security_task_setioprio(struct task_struct *p, int ioprio)
2349{
2350 return cap_task_setioprio(p, ioprio);
2351}
2352
2353static inline int security_task_getioprio(struct task_struct *p)
2354{
2355 return 0;
2356}
2357
2358static inline int security_task_setrlimit(struct task_struct *p,
2359 unsigned int resource,
2360 struct rlimit *new_rlim)
2361{
2362 return 0;
2363}
2364
2365static inline int security_task_setscheduler(struct task_struct *p)
2366{
2367 return cap_task_setscheduler(p);
2368}
2369
2370static inline int security_task_getscheduler(struct task_struct *p)
2371{
2372 return 0;
2373}
2374
2375static inline int security_task_movememory(struct task_struct *p)
2376{
2377 return 0;
2378}
2379
2380static inline int security_task_kill(struct task_struct *p,
2381 struct siginfo *info, int sig,
2382 u32 secid)
2383{
2384 return 0;
2385}
2386
2387static inline int security_task_wait(struct task_struct *p)
2388{
2389 return 0;
2390}
2391
2392static inline int security_task_prctl(int option, unsigned long arg2,
2393 unsigned long arg3,
2394 unsigned long arg4,
2395 unsigned long arg5)
2396{
2397 return cap_task_prctl(option, arg2, arg3, arg3, arg5);
2398}
2399
2400static inline void security_task_to_inode(struct task_struct *p, struct inode *inode)
2401{ }
2402
2403static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,
2404 short flag)
2405{
2406 return 0;
2407}
2408
2409static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid)
2410{
2411 *secid = 0;
2412}
2413
2414static inline int security_msg_msg_alloc(struct msg_msg *msg)
2415{
2416 return 0;
2417}
2418
2419static inline void security_msg_msg_free(struct msg_msg *msg)
2420{ }
2421
2422static inline int security_msg_queue_alloc(struct msg_queue *msq)
2423{
2424 return 0;
2425}
2426
2427static inline void security_msg_queue_free(struct msg_queue *msq)
2428{ }
2429
2430static inline int security_msg_queue_associate(struct msg_queue *msq,
2431 int msqflg)
2432{
2433 return 0;
2434}
2435
2436static inline int security_msg_queue_msgctl(struct msg_queue *msq, int cmd)
2437{
2438 return 0;
2439}
2440
2441static inline int security_msg_queue_msgsnd(struct msg_queue *msq,
2442 struct msg_msg *msg, int msqflg)
2443{
2444 return 0;
2445}
2446
2447static inline int security_msg_queue_msgrcv(struct msg_queue *msq,
2448 struct msg_msg *msg,
2449 struct task_struct *target,
2450 long type, int mode)
2451{
2452 return 0;
2453}
2454
2455static inline int security_shm_alloc(struct shmid_kernel *shp)
2456{
2457 return 0;
2458}
2459
2460static inline void security_shm_free(struct shmid_kernel *shp)
2461{ }
2462
2463static inline int security_shm_associate(struct shmid_kernel *shp,
2464 int shmflg)
2465{
2466 return 0;
2467}
2468
2469static inline int security_shm_shmctl(struct shmid_kernel *shp, int cmd)
2470{
2471 return 0;
2472}
2473
2474static inline int security_shm_shmat(struct shmid_kernel *shp,
2475 char __user *shmaddr, int shmflg)
2476{
2477 return 0;
2478}
2479
2480static inline int security_sem_alloc(struct sem_array *sma)
2481{
2482 return 0;
2483}
2484
2485static inline void security_sem_free(struct sem_array *sma)
2486{ }
2487
2488static inline int security_sem_associate(struct sem_array *sma, int semflg)
2489{
2490 return 0;
2491}
2492
2493static inline int security_sem_semctl(struct sem_array *sma, int cmd)
2494{
2495 return 0;
2496}
2497
2498static inline int security_sem_semop(struct sem_array *sma,
2499 struct sembuf *sops, unsigned nsops,
2500 int alter)
2501{
2502 return 0;
2503}
2504
2505static inline void security_d_instantiate(struct dentry *dentry, struct inode *inode)
2506{ }
2507
2508static inline int security_getprocattr(struct task_struct *p, char *name, char **value)
2509{
2510 return -EINVAL;
2511}
2512
2513static inline int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size)
2514{
2515 return -EINVAL;
2516}
2517
2518static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)
2519{
2520 return cap_netlink_send(sk, skb);
2521}
2522
2523static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)
2524{
2525 return -EOPNOTSUPP;
2526}
2527
2528static inline int security_secctx_to_secid(const char *secdata,
2529 u32 seclen,
2530 u32 *secid)
2531{
2532 return -EOPNOTSUPP;
2533}
2534
2535static inline void security_release_secctx(char *secdata, u32 seclen)
2536{
2537}
2538
2539static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
2540{
2541 return -EOPNOTSUPP;
2542}
2543static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)
2544{
2545 return -EOPNOTSUPP;
2546}
2547static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)
2548{
2549 return -EOPNOTSUPP;
2550}
2551#endif
2552
2553#ifdef CONFIG_SECURITY_NETWORK
2554
2555int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
2556int security_unix_may_send(struct socket *sock, struct socket *other);
2557int security_socket_create(int family, int type, int protocol, int kern);
2558int security_socket_post_create(struct socket *sock, int family,
2559 int type, int protocol, int kern);
2560int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
2561int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
2562int security_socket_listen(struct socket *sock, int backlog);
2563int security_socket_accept(struct socket *sock, struct socket *newsock);
2564int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
2565int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
2566 int size, int flags);
2567int security_socket_getsockname(struct socket *sock);
2568int security_socket_getpeername(struct socket *sock);
2569int security_socket_getsockopt(struct socket *sock, int level, int optname);
2570int security_socket_setsockopt(struct socket *sock, int level, int optname);
2571int security_socket_shutdown(struct socket *sock, int how);
2572int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
2573int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
2574 int __user *optlen, unsigned len);
2575int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
2576int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
2577void security_sk_free(struct sock *sk);
2578void security_sk_clone(const struct sock *sk, struct sock *newsk);
2579void security_sk_classify_flow(struct sock *sk, struct flowi *fl);
2580void security_req_classify_flow(const struct request_sock *req, struct flowi *fl);
2581void security_sock_graft(struct sock*sk, struct socket *parent);
2582int security_inet_conn_request(struct sock *sk,
2583 struct sk_buff *skb, struct request_sock *req);
2584void security_inet_csk_clone(struct sock *newsk,
2585 const struct request_sock *req);
2586void security_inet_conn_established(struct sock *sk,
2587 struct sk_buff *skb);
2588int security_secmark_relabel_packet(u32 secid);
2589void security_secmark_refcount_inc(void);
2590void security_secmark_refcount_dec(void);
2591int security_tun_dev_alloc_security(void **security);
2592void security_tun_dev_free_security(void *security);
2593int security_tun_dev_create(void);
2594int security_tun_dev_attach_queue(void *security);
2595int security_tun_dev_attach(struct sock *sk, void *security);
2596int security_tun_dev_open(void *security);
2597
2598void security_skb_owned_by(struct sk_buff *skb, struct sock *sk);
2599
2600#else
2601static inline int security_unix_stream_connect(struct sock *sock,
2602 struct sock *other,
2603 struct sock *newsk)
2604{
2605 return 0;
2606}
2607
2608static inline int security_unix_may_send(struct socket *sock,
2609 struct socket *other)
2610{
2611 return 0;
2612}
2613
2614static inline int security_socket_create(int family, int type,
2615 int protocol, int kern)
2616{
2617 return 0;
2618}
2619
2620static inline int security_socket_post_create(struct socket *sock,
2621 int family,
2622 int type,
2623 int protocol, int kern)
2624{
2625 return 0;
2626}
2627
2628static inline int security_socket_bind(struct socket *sock,
2629 struct sockaddr *address,
2630 int addrlen)
2631{
2632 return 0;
2633}
2634
2635static inline int security_socket_connect(struct socket *sock,
2636 struct sockaddr *address,
2637 int addrlen)
2638{
2639 return 0;
2640}
2641
2642static inline int security_socket_listen(struct socket *sock, int backlog)
2643{
2644 return 0;
2645}
2646
2647static inline int security_socket_accept(struct socket *sock,
2648 struct socket *newsock)
2649{
2650 return 0;
2651}
2652
2653static inline int security_socket_sendmsg(struct socket *sock,
2654 struct msghdr *msg, int size)
2655{
2656 return 0;
2657}
2658
2659static inline int security_socket_recvmsg(struct socket *sock,
2660 struct msghdr *msg, int size,
2661 int flags)
2662{
2663 return 0;
2664}
2665
2666static inline int security_socket_getsockname(struct socket *sock)
2667{
2668 return 0;
2669}
2670
2671static inline int security_socket_getpeername(struct socket *sock)
2672{
2673 return 0;
2674}
2675
2676static inline int security_socket_getsockopt(struct socket *sock,
2677 int level, int optname)
2678{
2679 return 0;
2680}
2681
2682static inline int security_socket_setsockopt(struct socket *sock,
2683 int level, int optname)
2684{
2685 return 0;
2686}
2687
2688static inline int security_socket_shutdown(struct socket *sock, int how)
2689{
2690 return 0;
2691}
2692static inline int security_sock_rcv_skb(struct sock *sk,
2693 struct sk_buff *skb)
2694{
2695 return 0;
2696}
2697
2698static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
2699 int __user *optlen, unsigned len)
2700{
2701 return -ENOPROTOOPT;
2702}
2703
2704static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid)
2705{
2706 return -ENOPROTOOPT;
2707}
2708
2709static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)
2710{
2711 return 0;
2712}
2713
2714static inline void security_sk_free(struct sock *sk)
2715{
2716}
2717
2718static inline void security_sk_clone(const struct sock *sk, struct sock *newsk)
2719{
2720}
2721
2722static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl)
2723{
2724}
2725
2726static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl)
2727{
2728}
2729
2730static inline void security_sock_graft(struct sock *sk, struct socket *parent)
2731{
2732}
2733
2734static inline int security_inet_conn_request(struct sock *sk,
2735 struct sk_buff *skb, struct request_sock *req)
2736{
2737 return 0;
2738}
2739
2740static inline void security_inet_csk_clone(struct sock *newsk,
2741 const struct request_sock *req)
2742{
2743}
2744
2745static inline void security_inet_conn_established(struct sock *sk,
2746 struct sk_buff *skb)
2747{
2748}
2749
2750static inline int security_secmark_relabel_packet(u32 secid)
2751{
2752 return 0;
2753}
2754
2755static inline void security_secmark_refcount_inc(void)
2756{
2757}
2758
2759static inline void security_secmark_refcount_dec(void)
2760{
2761}
2762
2763static inline int security_tun_dev_alloc_security(void **security)
2764{
2765 return 0;
2766}
2767
2768static inline void security_tun_dev_free_security(void *security)
2769{
2770}
2771
2772static inline int security_tun_dev_create(void)
2773{
2774 return 0;
2775}
2776
2777static inline int security_tun_dev_attach_queue(void *security)
2778{
2779 return 0;
2780}
2781
2782static inline int security_tun_dev_attach(struct sock *sk, void *security)
2783{
2784 return 0;
2785}
2786
2787static inline int security_tun_dev_open(void *security)
2788{
2789 return 0;
2790}
2791
2792static inline void security_skb_owned_by(struct sk_buff *skb, struct sock *sk)
2793{
2794}
2795
2796#endif
2797
2798#ifdef CONFIG_SECURITY_NETWORK_XFRM
2799
2800int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp, struct xfrm_user_sec_ctx *sec_ctx);
2801int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
2802void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
2803int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
2804int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
2805int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
2806 struct xfrm_sec_ctx *polsec, u32 secid);
2807int security_xfrm_state_delete(struct xfrm_state *x);
2808void security_xfrm_state_free(struct xfrm_state *x);
2809int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
2810int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
2811 struct xfrm_policy *xp,
2812 const struct flowi *fl);
2813int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
2814void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl);
2815
2816#else
2817
2818static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp, struct xfrm_user_sec_ctx *sec_ctx)
2819{
2820 return 0;
2821}
2822
2823static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp)
2824{
2825 return 0;
2826}
2827
2828static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx)
2829{
2830}
2831
2832static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)
2833{
2834 return 0;
2835}
2836
2837static inline int security_xfrm_state_alloc(struct xfrm_state *x,
2838 struct xfrm_user_sec_ctx *sec_ctx)
2839{
2840 return 0;
2841}
2842
2843static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
2844 struct xfrm_sec_ctx *polsec, u32 secid)
2845{
2846 return 0;
2847}
2848
2849static inline void security_xfrm_state_free(struct xfrm_state *x)
2850{
2851}
2852
2853static inline int security_xfrm_state_delete(struct xfrm_state *x)
2854{
2855 return 0;
2856}
2857
2858static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir)
2859{
2860 return 0;
2861}
2862
2863static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
2864 struct xfrm_policy *xp, const struct flowi *fl)
2865{
2866 return 1;
2867}
2868
2869static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)
2870{
2871 return 0;
2872}
2873
2874static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl)
2875{
2876}
2877
2878#endif
2879
2880#ifdef CONFIG_SECURITY_PATH
2881int security_path_unlink(struct path *dir, struct dentry *dentry);
2882int security_path_mkdir(struct path *dir, struct dentry *dentry, umode_t mode);
2883int security_path_rmdir(struct path *dir, struct dentry *dentry);
2884int security_path_mknod(struct path *dir, struct dentry *dentry, umode_t mode,
2885 unsigned int dev);
2886int security_path_truncate(struct path *path);
2887int security_path_symlink(struct path *dir, struct dentry *dentry,
2888 const char *old_name);
2889int security_path_link(struct dentry *old_dentry, struct path *new_dir,
2890 struct dentry *new_dentry);
2891int security_path_rename(struct path *old_dir, struct dentry *old_dentry,
2892 struct path *new_dir, struct dentry *new_dentry);
2893int security_path_chmod(struct path *path, umode_t mode);
2894int security_path_chown(struct path *path, kuid_t uid, kgid_t gid);
2895int security_path_chroot(struct path *path);
2896#else
2897static inline int security_path_unlink(struct path *dir, struct dentry *dentry)
2898{
2899 return 0;
2900}
2901
2902static inline int security_path_mkdir(struct path *dir, struct dentry *dentry,
2903 umode_t mode)
2904{
2905 return 0;
2906}
2907
2908static inline int security_path_rmdir(struct path *dir, struct dentry *dentry)
2909{
2910 return 0;
2911}
2912
2913static inline int security_path_mknod(struct path *dir, struct dentry *dentry,
2914 umode_t mode, unsigned int dev)
2915{
2916 return 0;
2917}
2918
2919static inline int security_path_truncate(struct path *path)
2920{
2921 return 0;
2922}
2923
2924static inline int security_path_symlink(struct path *dir, struct dentry *dentry,
2925 const char *old_name)
2926{
2927 return 0;
2928}
2929
2930static inline int security_path_link(struct dentry *old_dentry,
2931 struct path *new_dir,
2932 struct dentry *new_dentry)
2933{
2934 return 0;
2935}
2936
2937static inline int security_path_rename(struct path *old_dir,
2938 struct dentry *old_dentry,
2939 struct path *new_dir,
2940 struct dentry *new_dentry)
2941{
2942 return 0;
2943}
2944
2945static inline int security_path_chmod(struct path *path, umode_t mode)
2946{
2947 return 0;
2948}
2949
2950static inline int security_path_chown(struct path *path, kuid_t uid, kgid_t gid)
2951{
2952 return 0;
2953}
2954
2955static inline int security_path_chroot(struct path *path)
2956{
2957 return 0;
2958}
2959#endif
2960
2961#ifdef CONFIG_KEYS
2962#ifdef CONFIG_SECURITY
2963
2964int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
2965void security_key_free(struct key *key);
2966int security_key_permission(key_ref_t key_ref,
2967 const struct cred *cred, key_perm_t perm);
2968int security_key_getsecurity(struct key *key, char **_buffer);
2969
2970#else
2971
2972static inline int security_key_alloc(struct key *key,
2973 const struct cred *cred,
2974 unsigned long flags)
2975{
2976 return 0;
2977}
2978
2979static inline void security_key_free(struct key *key)
2980{
2981}
2982
2983static inline int security_key_permission(key_ref_t key_ref,
2984 const struct cred *cred,
2985 key_perm_t perm)
2986{
2987 return 0;
2988}
2989
2990static inline int security_key_getsecurity(struct key *key, char **_buffer)
2991{
2992 *_buffer = NULL;
2993 return 0;
2994}
2995
2996#endif
2997#endif
2998
2999#ifdef CONFIG_AUDIT
3000#ifdef CONFIG_SECURITY
3001int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
3002int security_audit_rule_known(struct audit_krule *krule);
3003int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule,
3004 struct audit_context *actx);
3005void security_audit_rule_free(void *lsmrule);
3006
3007#else
3008
3009static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,
3010 void **lsmrule)
3011{
3012 return 0;
3013}
3014
3015static inline int security_audit_rule_known(struct audit_krule *krule)
3016{
3017 return 0;
3018}
3019
3020static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,
3021 void *lsmrule, struct audit_context *actx)
3022{
3023 return 0;
3024}
3025
3026static inline void security_audit_rule_free(void *lsmrule)
3027{ }
3028
3029#endif
3030#endif
3031
3032#ifdef CONFIG_SECURITYFS
3033
3034extern struct dentry *securityfs_create_file(const char *name, umode_t mode,
3035 struct dentry *parent, void *data,
3036 const struct file_operations *fops);
3037extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent);
3038extern void securityfs_remove(struct dentry *dentry);
3039
3040#else
3041
3042static inline struct dentry *securityfs_create_dir(const char *name,
3043 struct dentry *parent)
3044{
3045 return ERR_PTR(-ENODEV);
3046}
3047
3048static inline struct dentry *securityfs_create_file(const char *name,
3049 umode_t mode,
3050 struct dentry *parent,
3051 void *data,
3052 const struct file_operations *fops)
3053{
3054 return ERR_PTR(-ENODEV);
3055}
3056
3057static inline void securityfs_remove(struct dentry *dentry)
3058{}
3059
3060#endif
3061
3062#ifdef CONFIG_SECURITY
3063
3064static inline char *alloc_secdata(void)
3065{
3066 return (char *)get_zeroed_page(GFP_KERNEL);
3067}
3068
3069static inline void free_secdata(void *secdata)
3070{
3071 free_page((unsigned long)secdata);
3072}
3073
3074#else
3075
3076static inline char *alloc_secdata(void)
3077{
3078 return (char *)1;
3079}
3080
3081static inline void free_secdata(void *secdata)
3082{ }
3083#endif
3084
3085#ifdef CONFIG_SECURITY_YAMA
3086extern int yama_ptrace_access_check(struct task_struct *child,
3087 unsigned int mode);
3088extern int yama_ptrace_traceme(struct task_struct *parent);
3089extern void yama_task_free(struct task_struct *task);
3090extern int yama_task_prctl(int option, unsigned long arg2, unsigned long arg3,
3091 unsigned long arg4, unsigned long arg5);
3092#else
3093static inline int yama_ptrace_access_check(struct task_struct *child,
3094 unsigned int mode)
3095{
3096 return 0;
3097}
3098
3099static inline int yama_ptrace_traceme(struct task_struct *parent)
3100{
3101 return 0;
3102}
3103
3104static inline void yama_task_free(struct task_struct *task)
3105{
3106}
3107
3108static inline int yama_task_prctl(int option, unsigned long arg2,
3109 unsigned long arg3, unsigned long arg4,
3110 unsigned long arg5)
3111{
3112 return -ENOSYS;
3113}
3114#endif
3115
3116#endif
3117
3118