1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22#ifndef __LINUX_SECURITY_H
23#define __LINUX_SECURITY_H
24
25#include <linux/key.h>
26#include <linux/capability.h>
27#include <linux/slab.h>
28#include <linux/err.h>
29#include <linux/string.h>
30
31struct linux_binprm;
32struct cred;
33struct rlimit;
34struct siginfo;
35struct sem_array;
36struct sembuf;
37struct kern_ipc_perm;
38struct audit_context;
39struct super_block;
40struct inode;
41struct dentry;
42struct file;
43struct vfsmount;
44struct path;
45struct qstr;
46struct nameidata;
47struct iattr;
48struct fown_struct;
49struct file_operations;
50struct shmid_kernel;
51struct msg_msg;
52struct msg_queue;
53struct xattr;
54struct xfrm_sec_ctx;
55struct mm_struct;
56
57
58#define SECURITY_NAME_MAX 10
59
60
61#define SECURITY_CAP_NOAUDIT 0
62#define SECURITY_CAP_AUDIT 1
63
64
65#define SECURITY_LSM_NATIVE_LABELS 1
66
67struct ctl_table;
68struct audit_krule;
69struct user_namespace;
70struct timezone;
71
72
73
74
75
76extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
77 int cap, int audit);
78extern int cap_settime(const struct timespec *ts, const struct timezone *tz);
79extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
80extern int cap_ptrace_traceme(struct task_struct *parent);
81extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted);
82extern int cap_capset(struct cred *new, const struct cred *old,
83 const kernel_cap_t *effective,
84 const kernel_cap_t *inheritable,
85 const kernel_cap_t *permitted);
86extern int cap_bprm_set_creds(struct linux_binprm *bprm);
87extern int cap_bprm_secureexec(struct linux_binprm *bprm);
88extern int cap_inode_setxattr(struct dentry *dentry, const char *name,
89 const void *value, size_t size, int flags);
90extern int cap_inode_removexattr(struct dentry *dentry, const char *name);
91extern int cap_inode_need_killpriv(struct dentry *dentry);
92extern int cap_inode_killpriv(struct dentry *dentry);
93extern int cap_mmap_addr(unsigned long addr);
94extern int cap_mmap_file(struct file *file, unsigned long reqprot,
95 unsigned long prot, unsigned long flags);
96extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
97extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
98 unsigned long arg4, unsigned long arg5);
99extern int cap_task_setscheduler(struct task_struct *p);
100extern int cap_task_setioprio(struct task_struct *p, int ioprio);
101extern int cap_task_setnice(struct task_struct *p, int nice);
102extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
103
104struct msghdr;
105struct sk_buff;
106struct sock;
107struct sockaddr;
108struct socket;
109struct flowi;
110struct dst_entry;
111struct xfrm_selector;
112struct xfrm_policy;
113struct xfrm_state;
114struct xfrm_user_sec_ctx;
115struct seq_file;
116
117extern int cap_netlink_send(struct sock *sk, struct sk_buff *skb);
118
119void reset_security_ops(void);
120
121#ifdef CONFIG_MMU
122extern unsigned long mmap_min_addr;
123extern unsigned long dac_mmap_min_addr;
124#else
125#define mmap_min_addr 0UL
126#define dac_mmap_min_addr 0UL
127#endif
128
129
130
131
132
133#define LSM_SETID_ID 1
134
135
136#define LSM_SETID_RE 2
137
138
139#define LSM_SETID_RES 4
140
141
142#define LSM_SETID_FS 8
143
144
145struct sched_param;
146struct request_sock;
147
148
149#define LSM_UNSAFE_SHARE 1
150#define LSM_UNSAFE_PTRACE 2
151#define LSM_UNSAFE_PTRACE_CAP 4
152#define LSM_UNSAFE_NO_NEW_PRIVS 8
153
154#ifdef CONFIG_MMU
155extern int mmap_min_addr_handler(struct ctl_table *table, int write,
156 void __user *buffer, size_t *lenp, loff_t *ppos);
157#endif
158
159
160typedef int (*initxattrs) (struct inode *inode,
161 const struct xattr *xattr_array, void *fs_data);
162
163#ifdef CONFIG_SECURITY
164
165struct security_mnt_opts {
166 char **mnt_opts;
167 int *mnt_opts_flags;
168 int num_mnt_opts;
169};
170
171static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
172{
173 opts->mnt_opts = NULL;
174 opts->mnt_opts_flags = NULL;
175 opts->num_mnt_opts = 0;
176}
177
178static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
179{
180 int i;
181 if (opts->mnt_opts)
182 for (i = 0; i < opts->num_mnt_opts; i++)
183 kfree(opts->mnt_opts[i]);
184 kfree(opts->mnt_opts);
185 opts->mnt_opts = NULL;
186 kfree(opts->mnt_opts_flags);
187 opts->mnt_opts_flags = NULL;
188 opts->num_mnt_opts = 0;
189}
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423struct security_operations {
1424 char name[SECURITY_NAME_MAX + 1];
1425
1426 int (*ptrace_access_check) (struct task_struct *child, unsigned int mode);
1427 int (*ptrace_traceme) (struct task_struct *parent);
1428 int (*capget) (struct task_struct *target,
1429 kernel_cap_t *effective,
1430 kernel_cap_t *inheritable, kernel_cap_t *permitted);
1431 int (*capset) (struct cred *new,
1432 const struct cred *old,
1433 const kernel_cap_t *effective,
1434 const kernel_cap_t *inheritable,
1435 const kernel_cap_t *permitted);
1436 int (*capable) (const struct cred *cred, struct user_namespace *ns,
1437 int cap, int audit);
1438 int (*quotactl) (int cmds, int type, int id, struct super_block *sb);
1439 int (*quota_on) (struct dentry *dentry);
1440 int (*syslog) (int type);
1441 int (*settime) (const struct timespec *ts, const struct timezone *tz);
1442 int (*vm_enough_memory) (struct mm_struct *mm, long pages);
1443
1444 int (*bprm_set_creds) (struct linux_binprm *bprm);
1445 int (*bprm_check_security) (struct linux_binprm *bprm);
1446 int (*bprm_secureexec) (struct linux_binprm *bprm);
1447 void (*bprm_committing_creds) (struct linux_binprm *bprm);
1448 void (*bprm_committed_creds) (struct linux_binprm *bprm);
1449
1450 int (*sb_alloc_security) (struct super_block *sb);
1451 void (*sb_free_security) (struct super_block *sb);
1452 int (*sb_copy_data) (char *orig, char *copy);
1453 int (*sb_remount) (struct super_block *sb, void *data);
1454 int (*sb_kern_mount) (struct super_block *sb, int flags, void *data);
1455 int (*sb_show_options) (struct seq_file *m, struct super_block *sb);
1456 int (*sb_statfs) (struct dentry *dentry);
1457 int (*sb_mount) (const char *dev_name, struct path *path,
1458 const char *type, unsigned long flags, void *data);
1459 int (*sb_umount) (struct vfsmount *mnt, int flags);
1460 int (*sb_pivotroot) (struct path *old_path,
1461 struct path *new_path);
1462 int (*sb_set_mnt_opts) (struct super_block *sb,
1463 struct security_mnt_opts *opts,
1464 unsigned long kern_flags,
1465 unsigned long *set_kern_flags);
1466 int (*sb_clone_mnt_opts) (const struct super_block *oldsb,
1467 struct super_block *newsb);
1468 int (*sb_parse_opts_str) (char *options, struct security_mnt_opts *opts);
1469 int (*dentry_init_security) (struct dentry *dentry, int mode,
1470 struct qstr *name, void **ctx,
1471 u32 *ctxlen);
1472
1473
1474#ifdef CONFIG_SECURITY_PATH
1475 int (*path_unlink) (struct path *dir, struct dentry *dentry);
1476 int (*path_mkdir) (struct path *dir, struct dentry *dentry, umode_t mode);
1477 int (*path_rmdir) (struct path *dir, struct dentry *dentry);
1478 int (*path_mknod) (struct path *dir, struct dentry *dentry, umode_t mode,
1479 unsigned int dev);
1480 int (*path_truncate) (struct path *path);
1481 int (*path_symlink) (struct path *dir, struct dentry *dentry,
1482 const char *old_name);
1483 int (*path_link) (struct dentry *old_dentry, struct path *new_dir,
1484 struct dentry *new_dentry);
1485 int (*path_rename) (struct path *old_dir, struct dentry *old_dentry,
1486 struct path *new_dir, struct dentry *new_dentry);
1487 int (*path_chmod) (struct path *path, umode_t mode);
1488 int (*path_chown) (struct path *path, kuid_t uid, kgid_t gid);
1489 int (*path_chroot) (struct path *path);
1490#endif
1491
1492 int (*inode_alloc_security) (struct inode *inode);
1493 void (*inode_free_security) (struct inode *inode);
1494 int (*inode_init_security) (struct inode *inode, struct inode *dir,
1495 const struct qstr *qstr, const char **name,
1496 void **value, size_t *len);
1497 int (*inode_create) (struct inode *dir,
1498 struct dentry *dentry, umode_t mode);
1499 int (*inode_link) (struct dentry *old_dentry,
1500 struct inode *dir, struct dentry *new_dentry);
1501 int (*inode_unlink) (struct inode *dir, struct dentry *dentry);
1502 int (*inode_symlink) (struct inode *dir,
1503 struct dentry *dentry, const char *old_name);
1504 int (*inode_mkdir) (struct inode *dir, struct dentry *dentry, umode_t mode);
1505 int (*inode_rmdir) (struct inode *dir, struct dentry *dentry);
1506 int (*inode_mknod) (struct inode *dir, struct dentry *dentry,
1507 umode_t mode, dev_t dev);
1508 int (*inode_rename) (struct inode *old_dir, struct dentry *old_dentry,
1509 struct inode *new_dir, struct dentry *new_dentry);
1510 int (*inode_readlink) (struct dentry *dentry);
1511 int (*inode_follow_link) (struct dentry *dentry, struct nameidata *nd);
1512 int (*inode_permission) (struct inode *inode, int mask);
1513 int (*inode_setattr) (struct dentry *dentry, struct iattr *attr);
1514 int (*inode_getattr) (struct vfsmount *mnt, struct dentry *dentry);
1515 int (*inode_setxattr) (struct dentry *dentry, const char *name,
1516 const void *value, size_t size, int flags);
1517 void (*inode_post_setxattr) (struct dentry *dentry, const char *name,
1518 const void *value, size_t size, int flags);
1519 int (*inode_getxattr) (struct dentry *dentry, const char *name);
1520 int (*inode_listxattr) (struct dentry *dentry);
1521 int (*inode_removexattr) (struct dentry *dentry, const char *name);
1522 int (*inode_need_killpriv) (struct dentry *dentry);
1523 int (*inode_killpriv) (struct dentry *dentry);
1524 int (*inode_getsecurity) (const struct inode *inode, const char *name, void **buffer, bool alloc);
1525 int (*inode_setsecurity) (struct inode *inode, const char *name, const void *value, size_t size, int flags);
1526 int (*inode_listsecurity) (struct inode *inode, char *buffer, size_t buffer_size);
1527 void (*inode_getsecid) (const struct inode *inode, u32 *secid);
1528
1529 int (*file_permission) (struct file *file, int mask);
1530 int (*file_alloc_security) (struct file *file);
1531 void (*file_free_security) (struct file *file);
1532 int (*file_ioctl) (struct file *file, unsigned int cmd,
1533 unsigned long arg);
1534 int (*mmap_addr) (unsigned long addr);
1535 int (*mmap_file) (struct file *file,
1536 unsigned long reqprot, unsigned long prot,
1537 unsigned long flags);
1538 int (*file_mprotect) (struct vm_area_struct *vma,
1539 unsigned long reqprot,
1540 unsigned long prot);
1541 int (*file_lock) (struct file *file, unsigned int cmd);
1542 int (*file_fcntl) (struct file *file, unsigned int cmd,
1543 unsigned long arg);
1544 int (*file_set_fowner) (struct file *file);
1545 int (*file_send_sigiotask) (struct task_struct *tsk,
1546 struct fown_struct *fown, int sig);
1547 int (*file_receive) (struct file *file);
1548 int (*file_open) (struct file *file, const struct cred *cred);
1549
1550 int (*task_create) (unsigned long clone_flags);
1551 void (*task_free) (struct task_struct *task);
1552 int (*cred_alloc_blank) (struct cred *cred, gfp_t gfp);
1553 void (*cred_free) (struct cred *cred);
1554 int (*cred_prepare)(struct cred *new, const struct cred *old,
1555 gfp_t gfp);
1556 void (*cred_transfer)(struct cred *new, const struct cred *old);
1557 int (*kernel_act_as)(struct cred *new, u32 secid);
1558 int (*kernel_create_files_as)(struct cred *new, struct inode *inode);
1559 int (*kernel_module_request)(char *kmod_name);
1560 int (*kernel_module_from_file)(struct file *file);
1561 int (*task_fix_setuid) (struct cred *new, const struct cred *old,
1562 int flags);
1563 int (*task_setpgid) (struct task_struct *p, pid_t pgid);
1564 int (*task_getpgid) (struct task_struct *p);
1565 int (*task_getsid) (struct task_struct *p);
1566 void (*task_getsecid) (struct task_struct *p, u32 *secid);
1567 int (*task_setnice) (struct task_struct *p, int nice);
1568 int (*task_setioprio) (struct task_struct *p, int ioprio);
1569 int (*task_getioprio) (struct task_struct *p);
1570 int (*task_setrlimit) (struct task_struct *p, unsigned int resource,
1571 struct rlimit *new_rlim);
1572 int (*task_setscheduler) (struct task_struct *p);
1573 int (*task_getscheduler) (struct task_struct *p);
1574 int (*task_movememory) (struct task_struct *p);
1575 int (*task_kill) (struct task_struct *p,
1576 struct siginfo *info, int sig, u32 secid);
1577 int (*task_wait) (struct task_struct *p);
1578 int (*task_prctl) (int option, unsigned long arg2,
1579 unsigned long arg3, unsigned long arg4,
1580 unsigned long arg5);
1581 void (*task_to_inode) (struct task_struct *p, struct inode *inode);
1582
1583 int (*ipc_permission) (struct kern_ipc_perm *ipcp, short flag);
1584 void (*ipc_getsecid) (struct kern_ipc_perm *ipcp, u32 *secid);
1585
1586 int (*msg_msg_alloc_security) (struct msg_msg *msg);
1587 void (*msg_msg_free_security) (struct msg_msg *msg);
1588
1589 int (*msg_queue_alloc_security) (struct msg_queue *msq);
1590 void (*msg_queue_free_security) (struct msg_queue *msq);
1591 int (*msg_queue_associate) (struct msg_queue *msq, int msqflg);
1592 int (*msg_queue_msgctl) (struct msg_queue *msq, int cmd);
1593 int (*msg_queue_msgsnd) (struct msg_queue *msq,
1594 struct msg_msg *msg, int msqflg);
1595 int (*msg_queue_msgrcv) (struct msg_queue *msq,
1596 struct msg_msg *msg,
1597 struct task_struct *target,
1598 long type, int mode);
1599
1600 int (*shm_alloc_security) (struct shmid_kernel *shp);
1601 void (*shm_free_security) (struct shmid_kernel *shp);
1602 int (*shm_associate) (struct shmid_kernel *shp, int shmflg);
1603 int (*shm_shmctl) (struct shmid_kernel *shp, int cmd);
1604 int (*shm_shmat) (struct shmid_kernel *shp,
1605 char __user *shmaddr, int shmflg);
1606
1607 int (*sem_alloc_security) (struct sem_array *sma);
1608 void (*sem_free_security) (struct sem_array *sma);
1609 int (*sem_associate) (struct sem_array *sma, int semflg);
1610 int (*sem_semctl) (struct sem_array *sma, int cmd);
1611 int (*sem_semop) (struct sem_array *sma,
1612 struct sembuf *sops, unsigned nsops, int alter);
1613
1614 int (*netlink_send) (struct sock *sk, struct sk_buff *skb);
1615
1616 void (*d_instantiate) (struct dentry *dentry, struct inode *inode);
1617
1618 int (*getprocattr) (struct task_struct *p, char *name, char **value);
1619 int (*setprocattr) (struct task_struct *p, char *name, void *value, size_t size);
1620 int (*ismaclabel) (const char *name);
1621 int (*secid_to_secctx) (u32 secid, char **secdata, u32 *seclen);
1622 int (*secctx_to_secid) (const char *secdata, u32 seclen, u32 *secid);
1623 void (*release_secctx) (char *secdata, u32 seclen);
1624
1625 int (*inode_notifysecctx)(struct inode *inode, void *ctx, u32 ctxlen);
1626 int (*inode_setsecctx)(struct dentry *dentry, void *ctx, u32 ctxlen);
1627 int (*inode_getsecctx)(struct inode *inode, void **ctx, u32 *ctxlen);
1628
1629#ifdef CONFIG_SECURITY_NETWORK
1630 int (*unix_stream_connect) (struct sock *sock, struct sock *other, struct sock *newsk);
1631 int (*unix_may_send) (struct socket *sock, struct socket *other);
1632
1633 int (*socket_create) (int family, int type, int protocol, int kern);
1634 int (*socket_post_create) (struct socket *sock, int family,
1635 int type, int protocol, int kern);
1636 int (*socket_bind) (struct socket *sock,
1637 struct sockaddr *address, int addrlen);
1638 int (*socket_connect) (struct socket *sock,
1639 struct sockaddr *address, int addrlen);
1640 int (*socket_listen) (struct socket *sock, int backlog);
1641 int (*socket_accept) (struct socket *sock, struct socket *newsock);
1642 int (*socket_sendmsg) (struct socket *sock,
1643 struct msghdr *msg, int size);
1644 int (*socket_recvmsg) (struct socket *sock,
1645 struct msghdr *msg, int size, int flags);
1646 int (*socket_getsockname) (struct socket *sock);
1647 int (*socket_getpeername) (struct socket *sock);
1648 int (*socket_getsockopt) (struct socket *sock, int level, int optname);
1649 int (*socket_setsockopt) (struct socket *sock, int level, int optname);
1650 int (*socket_shutdown) (struct socket *sock, int how);
1651 int (*socket_sock_rcv_skb) (struct sock *sk, struct sk_buff *skb);
1652 int (*socket_getpeersec_stream) (struct socket *sock, char __user *optval, int __user *optlen, unsigned len);
1653 int (*socket_getpeersec_dgram) (struct socket *sock, struct sk_buff *skb, u32 *secid);
1654 int (*sk_alloc_security) (struct sock *sk, int family, gfp_t priority);
1655 void (*sk_free_security) (struct sock *sk);
1656 void (*sk_clone_security) (const struct sock *sk, struct sock *newsk);
1657 void (*sk_getsecid) (struct sock *sk, u32 *secid);
1658 void (*sock_graft) (struct sock *sk, struct socket *parent);
1659 int (*inet_conn_request) (struct sock *sk, struct sk_buff *skb,
1660 struct request_sock *req);
1661 void (*inet_csk_clone) (struct sock *newsk, const struct request_sock *req);
1662 void (*inet_conn_established) (struct sock *sk, struct sk_buff *skb);
1663 int (*secmark_relabel_packet) (u32 secid);
1664 void (*secmark_refcount_inc) (void);
1665 void (*secmark_refcount_dec) (void);
1666 void (*req_classify_flow) (const struct request_sock *req, struct flowi *fl);
1667 int (*tun_dev_alloc_security) (void **security);
1668 void (*tun_dev_free_security) (void *security);
1669 int (*tun_dev_create) (void);
1670 int (*tun_dev_attach_queue) (void *security);
1671 int (*tun_dev_attach) (struct sock *sk, void *security);
1672 int (*tun_dev_open) (void *security);
1673 void (*skb_owned_by) (struct sk_buff *skb, struct sock *sk);
1674#endif
1675
1676#ifdef CONFIG_SECURITY_NETWORK_XFRM
1677 int (*xfrm_policy_alloc_security) (struct xfrm_sec_ctx **ctxp,
1678 struct xfrm_user_sec_ctx *sec_ctx);
1679 int (*xfrm_policy_clone_security) (struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctx);
1680 void (*xfrm_policy_free_security) (struct xfrm_sec_ctx *ctx);
1681 int (*xfrm_policy_delete_security) (struct xfrm_sec_ctx *ctx);
1682 int (*xfrm_state_alloc_security) (struct xfrm_state *x,
1683 struct xfrm_user_sec_ctx *sec_ctx,
1684 u32 secid);
1685 void (*xfrm_state_free_security) (struct xfrm_state *x);
1686 int (*xfrm_state_delete_security) (struct xfrm_state *x);
1687 int (*xfrm_policy_lookup) (struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1688 int (*xfrm_state_pol_flow_match) (struct xfrm_state *x,
1689 struct xfrm_policy *xp,
1690 const struct flowi *fl);
1691 int (*xfrm_decode_session) (struct sk_buff *skb, u32 *secid, int ckall);
1692#endif
1693
1694
1695#ifdef CONFIG_KEYS
1696 int (*key_alloc) (struct key *key, const struct cred *cred, unsigned long flags);
1697 void (*key_free) (struct key *key);
1698 int (*key_permission) (key_ref_t key_ref,
1699 const struct cred *cred,
1700 key_perm_t perm);
1701 int (*key_getsecurity)(struct key *key, char **_buffer);
1702#endif
1703
1704#ifdef CONFIG_AUDIT
1705 int (*audit_rule_init) (u32 field, u32 op, char *rulestr, void **lsmrule);
1706 int (*audit_rule_known) (struct audit_krule *krule);
1707 int (*audit_rule_match) (u32 secid, u32 field, u32 op, void *lsmrule,
1708 struct audit_context *actx);
1709 void (*audit_rule_free) (void *lsmrule);
1710#endif
1711};
1712
1713
1714extern int security_init(void);
1715extern int security_module_enable(struct security_operations *ops);
1716extern int register_security(struct security_operations *ops);
1717extern void __init security_fixup_ops(struct security_operations *ops);
1718
1719
1720
1721int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
1722int security_ptrace_traceme(struct task_struct *parent);
1723int security_capget(struct task_struct *target,
1724 kernel_cap_t *effective,
1725 kernel_cap_t *inheritable,
1726 kernel_cap_t *permitted);
1727int security_capset(struct cred *new, const struct cred *old,
1728 const kernel_cap_t *effective,
1729 const kernel_cap_t *inheritable,
1730 const kernel_cap_t *permitted);
1731int security_capable(const struct cred *cred, struct user_namespace *ns,
1732 int cap);
1733int security_capable_noaudit(const struct cred *cred, struct user_namespace *ns,
1734 int cap);
1735int security_quotactl(int cmds, int type, int id, struct super_block *sb);
1736int security_quota_on(struct dentry *dentry);
1737int security_syslog(int type);
1738int security_settime(const struct timespec *ts, const struct timezone *tz);
1739int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
1740int security_bprm_set_creds(struct linux_binprm *bprm);
1741int security_bprm_check(struct linux_binprm *bprm);
1742void security_bprm_committing_creds(struct linux_binprm *bprm);
1743void security_bprm_committed_creds(struct linux_binprm *bprm);
1744int security_bprm_secureexec(struct linux_binprm *bprm);
1745int security_sb_alloc(struct super_block *sb);
1746void security_sb_free(struct super_block *sb);
1747int security_sb_copy_data(char *orig, char *copy);
1748int security_sb_remount(struct super_block *sb, void *data);
1749int security_sb_kern_mount(struct super_block *sb, int flags, void *data);
1750int security_sb_show_options(struct seq_file *m, struct super_block *sb);
1751int security_sb_statfs(struct dentry *dentry);
1752int security_sb_mount(const char *dev_name, struct path *path,
1753 const char *type, unsigned long flags, void *data);
1754int security_sb_umount(struct vfsmount *mnt, int flags);
1755int security_sb_pivotroot(struct path *old_path, struct path *new_path);
1756int security_sb_set_mnt_opts(struct super_block *sb,
1757 struct security_mnt_opts *opts,
1758 unsigned long kern_flags,
1759 unsigned long *set_kern_flags);
1760int security_sb_clone_mnt_opts(const struct super_block *oldsb,
1761 struct super_block *newsb);
1762int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts);
1763int security_dentry_init_security(struct dentry *dentry, int mode,
1764 struct qstr *name, void **ctx,
1765 u32 *ctxlen);
1766
1767int security_inode_alloc(struct inode *inode);
1768void security_inode_free(struct inode *inode);
1769int security_inode_init_security(struct inode *inode, struct inode *dir,
1770 const struct qstr *qstr,
1771 initxattrs initxattrs, void *fs_data);
1772int security_old_inode_init_security(struct inode *inode, struct inode *dir,
1773 const struct qstr *qstr, const char **name,
1774 void **value, size_t *len);
1775int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
1776int security_inode_link(struct dentry *old_dentry, struct inode *dir,
1777 struct dentry *new_dentry);
1778int security_inode_unlink(struct inode *dir, struct dentry *dentry);
1779int security_inode_symlink(struct inode *dir, struct dentry *dentry,
1780 const char *old_name);
1781int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
1782int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
1783int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
1784int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
1785 struct inode *new_dir, struct dentry *new_dentry);
1786int security_inode_readlink(struct dentry *dentry);
1787int security_inode_follow_link(struct dentry *dentry, struct nameidata *nd);
1788int security_inode_permission(struct inode *inode, int mask);
1789int security_inode_setattr(struct dentry *dentry, struct iattr *attr);
1790int security_inode_getattr(struct vfsmount *mnt, struct dentry *dentry);
1791int security_inode_setxattr(struct dentry *dentry, const char *name,
1792 const void *value, size_t size, int flags);
1793void security_inode_post_setxattr(struct dentry *dentry, const char *name,
1794 const void *value, size_t size, int flags);
1795int security_inode_getxattr(struct dentry *dentry, const char *name);
1796int security_inode_listxattr(struct dentry *dentry);
1797int security_inode_removexattr(struct dentry *dentry, const char *name);
1798int security_inode_need_killpriv(struct dentry *dentry);
1799int security_inode_killpriv(struct dentry *dentry);
1800int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc);
1801int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags);
1802int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
1803void security_inode_getsecid(const struct inode *inode, u32 *secid);
1804int security_file_permission(struct file *file, int mask);
1805int security_file_alloc(struct file *file);
1806void security_file_free(struct file *file);
1807int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
1808int security_mmap_file(struct file *file, unsigned long prot,
1809 unsigned long flags);
1810int security_mmap_addr(unsigned long addr);
1811int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
1812 unsigned long prot);
1813int security_file_lock(struct file *file, unsigned int cmd);
1814int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
1815int security_file_set_fowner(struct file *file);
1816int security_file_send_sigiotask(struct task_struct *tsk,
1817 struct fown_struct *fown, int sig);
1818int security_file_receive(struct file *file);
1819int security_file_open(struct file *file, const struct cred *cred);
1820int security_task_create(unsigned long clone_flags);
1821void security_task_free(struct task_struct *task);
1822int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
1823void security_cred_free(struct cred *cred);
1824int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
1825void security_transfer_creds(struct cred *new, const struct cred *old);
1826int security_kernel_act_as(struct cred *new, u32 secid);
1827int security_kernel_create_files_as(struct cred *new, struct inode *inode);
1828int security_kernel_module_request(char *kmod_name);
1829int security_kernel_module_from_file(struct file *file);
1830int security_task_fix_setuid(struct cred *new, const struct cred *old,
1831 int flags);
1832int security_task_setpgid(struct task_struct *p, pid_t pgid);
1833int security_task_getpgid(struct task_struct *p);
1834int security_task_getsid(struct task_struct *p);
1835void security_task_getsecid(struct task_struct *p, u32 *secid);
1836int security_task_setnice(struct task_struct *p, int nice);
1837int security_task_setioprio(struct task_struct *p, int ioprio);
1838int security_task_getioprio(struct task_struct *p);
1839int security_task_setrlimit(struct task_struct *p, unsigned int resource,
1840 struct rlimit *new_rlim);
1841int security_task_setscheduler(struct task_struct *p);
1842int security_task_getscheduler(struct task_struct *p);
1843int security_task_movememory(struct task_struct *p);
1844int security_task_kill(struct task_struct *p, struct siginfo *info,
1845 int sig, u32 secid);
1846int security_task_wait(struct task_struct *p);
1847int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
1848 unsigned long arg4, unsigned long arg5);
1849void security_task_to_inode(struct task_struct *p, struct inode *inode);
1850int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
1851void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
1852int security_msg_msg_alloc(struct msg_msg *msg);
1853void security_msg_msg_free(struct msg_msg *msg);
1854int security_msg_queue_alloc(struct msg_queue *msq);
1855void security_msg_queue_free(struct msg_queue *msq);
1856int security_msg_queue_associate(struct msg_queue *msq, int msqflg);
1857int security_msg_queue_msgctl(struct msg_queue *msq, int cmd);
1858int security_msg_queue_msgsnd(struct msg_queue *msq,
1859 struct msg_msg *msg, int msqflg);
1860int security_msg_queue_msgrcv(struct msg_queue *msq, struct msg_msg *msg,
1861 struct task_struct *target, long type, int mode);
1862int security_shm_alloc(struct shmid_kernel *shp);
1863void security_shm_free(struct shmid_kernel *shp);
1864int security_shm_associate(struct shmid_kernel *shp, int shmflg);
1865int security_shm_shmctl(struct shmid_kernel *shp, int cmd);
1866int security_shm_shmat(struct shmid_kernel *shp, char __user *shmaddr, int shmflg);
1867int security_sem_alloc(struct sem_array *sma);
1868void security_sem_free(struct sem_array *sma);
1869int security_sem_associate(struct sem_array *sma, int semflg);
1870int security_sem_semctl(struct sem_array *sma, int cmd);
1871int security_sem_semop(struct sem_array *sma, struct sembuf *sops,
1872 unsigned nsops, int alter);
1873void security_d_instantiate(struct dentry *dentry, struct inode *inode);
1874int security_getprocattr(struct task_struct *p, char *name, char **value);
1875int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size);
1876int security_netlink_send(struct sock *sk, struct sk_buff *skb);
1877int security_ismaclabel(const char *name);
1878int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
1879int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
1880void security_release_secctx(char *secdata, u32 seclen);
1881
1882int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
1883int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
1884int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
1885#else
1886struct security_mnt_opts {
1887};
1888
1889static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
1890{
1891}
1892
1893static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
1894{
1895}
1896
1897
1898
1899
1900
1901
1902static inline int security_init(void)
1903{
1904 return 0;
1905}
1906
1907static inline int security_ptrace_access_check(struct task_struct *child,
1908 unsigned int mode)
1909{
1910 return cap_ptrace_access_check(child, mode);
1911}
1912
1913static inline int security_ptrace_traceme(struct task_struct *parent)
1914{
1915 return cap_ptrace_traceme(parent);
1916}
1917
1918static inline int security_capget(struct task_struct *target,
1919 kernel_cap_t *effective,
1920 kernel_cap_t *inheritable,
1921 kernel_cap_t *permitted)
1922{
1923 return cap_capget(target, effective, inheritable, permitted);
1924}
1925
1926static inline int security_capset(struct cred *new,
1927 const struct cred *old,
1928 const kernel_cap_t *effective,
1929 const kernel_cap_t *inheritable,
1930 const kernel_cap_t *permitted)
1931{
1932 return cap_capset(new, old, effective, inheritable, permitted);
1933}
1934
1935static inline int security_capable(const struct cred *cred,
1936 struct user_namespace *ns, int cap)
1937{
1938 return cap_capable(cred, ns, cap, SECURITY_CAP_AUDIT);
1939}
1940
1941static inline int security_capable_noaudit(const struct cred *cred,
1942 struct user_namespace *ns, int cap) {
1943 return cap_capable(cred, ns, cap, SECURITY_CAP_NOAUDIT);
1944}
1945
1946static inline int security_quotactl(int cmds, int type, int id,
1947 struct super_block *sb)
1948{
1949 return 0;
1950}
1951
1952static inline int security_quota_on(struct dentry *dentry)
1953{
1954 return 0;
1955}
1956
1957static inline int security_syslog(int type)
1958{
1959 return 0;
1960}
1961
1962static inline int security_settime(const struct timespec *ts,
1963 const struct timezone *tz)
1964{
1965 return cap_settime(ts, tz);
1966}
1967
1968static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)
1969{
1970 return cap_vm_enough_memory(mm, pages);
1971}
1972
1973static inline int security_bprm_set_creds(struct linux_binprm *bprm)
1974{
1975 return cap_bprm_set_creds(bprm);
1976}
1977
1978static inline int security_bprm_check(struct linux_binprm *bprm)
1979{
1980 return 0;
1981}
1982
1983static inline void security_bprm_committing_creds(struct linux_binprm *bprm)
1984{
1985}
1986
1987static inline void security_bprm_committed_creds(struct linux_binprm *bprm)
1988{
1989}
1990
1991static inline int security_bprm_secureexec(struct linux_binprm *bprm)
1992{
1993 return cap_bprm_secureexec(bprm);
1994}
1995
1996static inline int security_sb_alloc(struct super_block *sb)
1997{
1998 return 0;
1999}
2000
2001static inline void security_sb_free(struct super_block *sb)
2002{ }
2003
2004static inline int security_sb_copy_data(char *orig, char *copy)
2005{
2006 return 0;
2007}
2008
2009static inline int security_sb_remount(struct super_block *sb, void *data)
2010{
2011 return 0;
2012}
2013
2014static inline int security_sb_kern_mount(struct super_block *sb, int flags, void *data)
2015{
2016 return 0;
2017}
2018
2019static inline int security_sb_show_options(struct seq_file *m,
2020 struct super_block *sb)
2021{
2022 return 0;
2023}
2024
2025static inline int security_sb_statfs(struct dentry *dentry)
2026{
2027 return 0;
2028}
2029
2030static inline int security_sb_mount(const char *dev_name, struct path *path,
2031 const char *type, unsigned long flags,
2032 void *data)
2033{
2034 return 0;
2035}
2036
2037static inline int security_sb_umount(struct vfsmount *mnt, int flags)
2038{
2039 return 0;
2040}
2041
2042static inline int security_sb_pivotroot(struct path *old_path,
2043 struct path *new_path)
2044{
2045 return 0;
2046}
2047
2048static inline int security_sb_set_mnt_opts(struct super_block *sb,
2049 struct security_mnt_opts *opts,
2050 unsigned long kern_flags,
2051 unsigned long *set_kern_flags)
2052{
2053 return 0;
2054}
2055
2056static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,
2057 struct super_block *newsb)
2058{
2059 return 0;
2060}
2061
2062static inline int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts)
2063{
2064 return 0;
2065}
2066
2067static inline int security_inode_alloc(struct inode *inode)
2068{
2069 return 0;
2070}
2071
2072static inline void security_inode_free(struct inode *inode)
2073{ }
2074
2075static inline int security_dentry_init_security(struct dentry *dentry,
2076 int mode,
2077 struct qstr *name,
2078 void **ctx,
2079 u32 *ctxlen)
2080{
2081 return -EOPNOTSUPP;
2082}
2083
2084
2085static inline int security_inode_init_security(struct inode *inode,
2086 struct inode *dir,
2087 const struct qstr *qstr,
2088 const initxattrs initxattrs,
2089 void *fs_data)
2090{
2091 return 0;
2092}
2093
2094static inline int security_old_inode_init_security(struct inode *inode,
2095 struct inode *dir,
2096 const struct qstr *qstr,
2097 const char **name,
2098 void **value, size_t *len)
2099{
2100 return -EOPNOTSUPP;
2101}
2102
2103static inline int security_inode_create(struct inode *dir,
2104 struct dentry *dentry,
2105 umode_t mode)
2106{
2107 return 0;
2108}
2109
2110static inline int security_inode_link(struct dentry *old_dentry,
2111 struct inode *dir,
2112 struct dentry *new_dentry)
2113{
2114 return 0;
2115}
2116
2117static inline int security_inode_unlink(struct inode *dir,
2118 struct dentry *dentry)
2119{
2120 return 0;
2121}
2122
2123static inline int security_inode_symlink(struct inode *dir,
2124 struct dentry *dentry,
2125 const char *old_name)
2126{
2127 return 0;
2128}
2129
2130static inline int security_inode_mkdir(struct inode *dir,
2131 struct dentry *dentry,
2132 int mode)
2133{
2134 return 0;
2135}
2136
2137static inline int security_inode_rmdir(struct inode *dir,
2138 struct dentry *dentry)
2139{
2140 return 0;
2141}
2142
2143static inline int security_inode_mknod(struct inode *dir,
2144 struct dentry *dentry,
2145 int mode, dev_t dev)
2146{
2147 return 0;
2148}
2149
2150static inline int security_inode_rename(struct inode *old_dir,
2151 struct dentry *old_dentry,
2152 struct inode *new_dir,
2153 struct dentry *new_dentry)
2154{
2155 return 0;
2156}
2157
2158static inline int security_inode_readlink(struct dentry *dentry)
2159{
2160 return 0;
2161}
2162
2163static inline int security_inode_follow_link(struct dentry *dentry,
2164 struct nameidata *nd)
2165{
2166 return 0;
2167}
2168
2169static inline int security_inode_permission(struct inode *inode, int mask)
2170{
2171 return 0;
2172}
2173
2174static inline int security_inode_setattr(struct dentry *dentry,
2175 struct iattr *attr)
2176{
2177 return 0;
2178}
2179
2180static inline int security_inode_getattr(struct vfsmount *mnt,
2181 struct dentry *dentry)
2182{
2183 return 0;
2184}
2185
2186static inline int security_inode_setxattr(struct dentry *dentry,
2187 const char *name, const void *value, size_t size, int flags)
2188{
2189 return cap_inode_setxattr(dentry, name, value, size, flags);
2190}
2191
2192static inline void security_inode_post_setxattr(struct dentry *dentry,
2193 const char *name, const void *value, size_t size, int flags)
2194{ }
2195
2196static inline int security_inode_getxattr(struct dentry *dentry,
2197 const char *name)
2198{
2199 return 0;
2200}
2201
2202static inline int security_inode_listxattr(struct dentry *dentry)
2203{
2204 return 0;
2205}
2206
2207static inline int security_inode_removexattr(struct dentry *dentry,
2208 const char *name)
2209{
2210 return cap_inode_removexattr(dentry, name);
2211}
2212
2213static inline int security_inode_need_killpriv(struct dentry *dentry)
2214{
2215 return cap_inode_need_killpriv(dentry);
2216}
2217
2218static inline int security_inode_killpriv(struct dentry *dentry)
2219{
2220 return cap_inode_killpriv(dentry);
2221}
2222
2223static inline int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc)
2224{
2225 return -EOPNOTSUPP;
2226}
2227
2228static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags)
2229{
2230 return -EOPNOTSUPP;
2231}
2232
2233static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)
2234{
2235 return 0;
2236}
2237
2238static inline void security_inode_getsecid(const struct inode *inode, u32 *secid)
2239{
2240 *secid = 0;
2241}
2242
2243static inline int security_file_permission(struct file *file, int mask)
2244{
2245 return 0;
2246}
2247
2248static inline int security_file_alloc(struct file *file)
2249{
2250 return 0;
2251}
2252
2253static inline void security_file_free(struct file *file)
2254{ }
2255
2256static inline int security_file_ioctl(struct file *file, unsigned int cmd,
2257 unsigned long arg)
2258{
2259 return 0;
2260}
2261
2262static inline int security_mmap_file(struct file *file, unsigned long prot,
2263 unsigned long flags)
2264{
2265 return 0;
2266}
2267
2268static inline int security_mmap_addr(unsigned long addr)
2269{
2270 return cap_mmap_addr(addr);
2271}
2272
2273static inline int security_file_mprotect(struct vm_area_struct *vma,
2274 unsigned long reqprot,
2275 unsigned long prot)
2276{
2277 return 0;
2278}
2279
2280static inline int security_file_lock(struct file *file, unsigned int cmd)
2281{
2282 return 0;
2283}
2284
2285static inline int security_file_fcntl(struct file *file, unsigned int cmd,
2286 unsigned long arg)
2287{
2288 return 0;
2289}
2290
2291static inline int security_file_set_fowner(struct file *file)
2292{
2293 return 0;
2294}
2295
2296static inline int security_file_send_sigiotask(struct task_struct *tsk,
2297 struct fown_struct *fown,
2298 int sig)
2299{
2300 return 0;
2301}
2302
2303static inline int security_file_receive(struct file *file)
2304{
2305 return 0;
2306}
2307
2308static inline int security_file_open(struct file *file,
2309 const struct cred *cred)
2310{
2311 return 0;
2312}
2313
2314static inline int security_task_create(unsigned long clone_flags)
2315{
2316 return 0;
2317}
2318
2319static inline void security_task_free(struct task_struct *task)
2320{ }
2321
2322static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)
2323{
2324 return 0;
2325}
2326
2327static inline void security_cred_free(struct cred *cred)
2328{ }
2329
2330static inline int security_prepare_creds(struct cred *new,
2331 const struct cred *old,
2332 gfp_t gfp)
2333{
2334 return 0;
2335}
2336
2337static inline void security_transfer_creds(struct cred *new,
2338 const struct cred *old)
2339{
2340}
2341
2342static inline int security_kernel_act_as(struct cred *cred, u32 secid)
2343{
2344 return 0;
2345}
2346
2347static inline int security_kernel_create_files_as(struct cred *cred,
2348 struct inode *inode)
2349{
2350 return 0;
2351}
2352
2353static inline int security_kernel_module_request(char *kmod_name)
2354{
2355 return 0;
2356}
2357
2358static inline int security_kernel_module_from_file(struct file *file)
2359{
2360 return 0;
2361}
2362
2363static inline int security_task_fix_setuid(struct cred *new,
2364 const struct cred *old,
2365 int flags)
2366{
2367 return cap_task_fix_setuid(new, old, flags);
2368}
2369
2370static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)
2371{
2372 return 0;
2373}
2374
2375static inline int security_task_getpgid(struct task_struct *p)
2376{
2377 return 0;
2378}
2379
2380static inline int security_task_getsid(struct task_struct *p)
2381{
2382 return 0;
2383}
2384
2385static inline void security_task_getsecid(struct task_struct *p, u32 *secid)
2386{
2387 *secid = 0;
2388}
2389
2390static inline int security_task_setnice(struct task_struct *p, int nice)
2391{
2392 return cap_task_setnice(p, nice);
2393}
2394
2395static inline int security_task_setioprio(struct task_struct *p, int ioprio)
2396{
2397 return cap_task_setioprio(p, ioprio);
2398}
2399
2400static inline int security_task_getioprio(struct task_struct *p)
2401{
2402 return 0;
2403}
2404
2405static inline int security_task_setrlimit(struct task_struct *p,
2406 unsigned int resource,
2407 struct rlimit *new_rlim)
2408{
2409 return 0;
2410}
2411
2412static inline int security_task_setscheduler(struct task_struct *p)
2413{
2414 return cap_task_setscheduler(p);
2415}
2416
2417static inline int security_task_getscheduler(struct task_struct *p)
2418{
2419 return 0;
2420}
2421
2422static inline int security_task_movememory(struct task_struct *p)
2423{
2424 return 0;
2425}
2426
2427static inline int security_task_kill(struct task_struct *p,
2428 struct siginfo *info, int sig,
2429 u32 secid)
2430{
2431 return 0;
2432}
2433
2434static inline int security_task_wait(struct task_struct *p)
2435{
2436 return 0;
2437}
2438
2439static inline int security_task_prctl(int option, unsigned long arg2,
2440 unsigned long arg3,
2441 unsigned long arg4,
2442 unsigned long arg5)
2443{
2444 return cap_task_prctl(option, arg2, arg3, arg3, arg5);
2445}
2446
2447static inline void security_task_to_inode(struct task_struct *p, struct inode *inode)
2448{ }
2449
2450static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,
2451 short flag)
2452{
2453 return 0;
2454}
2455
2456static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid)
2457{
2458 *secid = 0;
2459}
2460
2461static inline int security_msg_msg_alloc(struct msg_msg *msg)
2462{
2463 return 0;
2464}
2465
2466static inline void security_msg_msg_free(struct msg_msg *msg)
2467{ }
2468
2469static inline int security_msg_queue_alloc(struct msg_queue *msq)
2470{
2471 return 0;
2472}
2473
2474static inline void security_msg_queue_free(struct msg_queue *msq)
2475{ }
2476
2477static inline int security_msg_queue_associate(struct msg_queue *msq,
2478 int msqflg)
2479{
2480 return 0;
2481}
2482
2483static inline int security_msg_queue_msgctl(struct msg_queue *msq, int cmd)
2484{
2485 return 0;
2486}
2487
2488static inline int security_msg_queue_msgsnd(struct msg_queue *msq,
2489 struct msg_msg *msg, int msqflg)
2490{
2491 return 0;
2492}
2493
2494static inline int security_msg_queue_msgrcv(struct msg_queue *msq,
2495 struct msg_msg *msg,
2496 struct task_struct *target,
2497 long type, int mode)
2498{
2499 return 0;
2500}
2501
2502static inline int security_shm_alloc(struct shmid_kernel *shp)
2503{
2504 return 0;
2505}
2506
2507static inline void security_shm_free(struct shmid_kernel *shp)
2508{ }
2509
2510static inline int security_shm_associate(struct shmid_kernel *shp,
2511 int shmflg)
2512{
2513 return 0;
2514}
2515
2516static inline int security_shm_shmctl(struct shmid_kernel *shp, int cmd)
2517{
2518 return 0;
2519}
2520
2521static inline int security_shm_shmat(struct shmid_kernel *shp,
2522 char __user *shmaddr, int shmflg)
2523{
2524 return 0;
2525}
2526
2527static inline int security_sem_alloc(struct sem_array *sma)
2528{
2529 return 0;
2530}
2531
2532static inline void security_sem_free(struct sem_array *sma)
2533{ }
2534
2535static inline int security_sem_associate(struct sem_array *sma, int semflg)
2536{
2537 return 0;
2538}
2539
2540static inline int security_sem_semctl(struct sem_array *sma, int cmd)
2541{
2542 return 0;
2543}
2544
2545static inline int security_sem_semop(struct sem_array *sma,
2546 struct sembuf *sops, unsigned nsops,
2547 int alter)
2548{
2549 return 0;
2550}
2551
2552static inline void security_d_instantiate(struct dentry *dentry, struct inode *inode)
2553{ }
2554
2555static inline int security_getprocattr(struct task_struct *p, char *name, char **value)
2556{
2557 return -EINVAL;
2558}
2559
2560static inline int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size)
2561{
2562 return -EINVAL;
2563}
2564
2565static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)
2566{
2567 return cap_netlink_send(sk, skb);
2568}
2569
2570static inline int security_ismaclabel(const char *name)
2571{
2572 return 0;
2573}
2574
2575static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)
2576{
2577 return -EOPNOTSUPP;
2578}
2579
2580static inline int security_secctx_to_secid(const char *secdata,
2581 u32 seclen,
2582 u32 *secid)
2583{
2584 return -EOPNOTSUPP;
2585}
2586
2587static inline void security_release_secctx(char *secdata, u32 seclen)
2588{
2589}
2590
2591static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
2592{
2593 return -EOPNOTSUPP;
2594}
2595static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)
2596{
2597 return -EOPNOTSUPP;
2598}
2599static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)
2600{
2601 return -EOPNOTSUPP;
2602}
2603#endif
2604
2605#ifdef CONFIG_SECURITY_NETWORK
2606
2607int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
2608int security_unix_may_send(struct socket *sock, struct socket *other);
2609int security_socket_create(int family, int type, int protocol, int kern);
2610int security_socket_post_create(struct socket *sock, int family,
2611 int type, int protocol, int kern);
2612int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
2613int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
2614int security_socket_listen(struct socket *sock, int backlog);
2615int security_socket_accept(struct socket *sock, struct socket *newsock);
2616int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
2617int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
2618 int size, int flags);
2619int security_socket_getsockname(struct socket *sock);
2620int security_socket_getpeername(struct socket *sock);
2621int security_socket_getsockopt(struct socket *sock, int level, int optname);
2622int security_socket_setsockopt(struct socket *sock, int level, int optname);
2623int security_socket_shutdown(struct socket *sock, int how);
2624int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
2625int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
2626 int __user *optlen, unsigned len);
2627int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
2628int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
2629void security_sk_free(struct sock *sk);
2630void security_sk_clone(const struct sock *sk, struct sock *newsk);
2631void security_sk_classify_flow(struct sock *sk, struct flowi *fl);
2632void security_req_classify_flow(const struct request_sock *req, struct flowi *fl);
2633void security_sock_graft(struct sock*sk, struct socket *parent);
2634int security_inet_conn_request(struct sock *sk,
2635 struct sk_buff *skb, struct request_sock *req);
2636void security_inet_csk_clone(struct sock *newsk,
2637 const struct request_sock *req);
2638void security_inet_conn_established(struct sock *sk,
2639 struct sk_buff *skb);
2640int security_secmark_relabel_packet(u32 secid);
2641void security_secmark_refcount_inc(void);
2642void security_secmark_refcount_dec(void);
2643int security_tun_dev_alloc_security(void **security);
2644void security_tun_dev_free_security(void *security);
2645int security_tun_dev_create(void);
2646int security_tun_dev_attach_queue(void *security);
2647int security_tun_dev_attach(struct sock *sk, void *security);
2648int security_tun_dev_open(void *security);
2649
2650void security_skb_owned_by(struct sk_buff *skb, struct sock *sk);
2651
2652#else
2653static inline int security_unix_stream_connect(struct sock *sock,
2654 struct sock *other,
2655 struct sock *newsk)
2656{
2657 return 0;
2658}
2659
2660static inline int security_unix_may_send(struct socket *sock,
2661 struct socket *other)
2662{
2663 return 0;
2664}
2665
2666static inline int security_socket_create(int family, int type,
2667 int protocol, int kern)
2668{
2669 return 0;
2670}
2671
2672static inline int security_socket_post_create(struct socket *sock,
2673 int family,
2674 int type,
2675 int protocol, int kern)
2676{
2677 return 0;
2678}
2679
2680static inline int security_socket_bind(struct socket *sock,
2681 struct sockaddr *address,
2682 int addrlen)
2683{
2684 return 0;
2685}
2686
2687static inline int security_socket_connect(struct socket *sock,
2688 struct sockaddr *address,
2689 int addrlen)
2690{
2691 return 0;
2692}
2693
2694static inline int security_socket_listen(struct socket *sock, int backlog)
2695{
2696 return 0;
2697}
2698
2699static inline int security_socket_accept(struct socket *sock,
2700 struct socket *newsock)
2701{
2702 return 0;
2703}
2704
2705static inline int security_socket_sendmsg(struct socket *sock,
2706 struct msghdr *msg, int size)
2707{
2708 return 0;
2709}
2710
2711static inline int security_socket_recvmsg(struct socket *sock,
2712 struct msghdr *msg, int size,
2713 int flags)
2714{
2715 return 0;
2716}
2717
2718static inline int security_socket_getsockname(struct socket *sock)
2719{
2720 return 0;
2721}
2722
2723static inline int security_socket_getpeername(struct socket *sock)
2724{
2725 return 0;
2726}
2727
2728static inline int security_socket_getsockopt(struct socket *sock,
2729 int level, int optname)
2730{
2731 return 0;
2732}
2733
2734static inline int security_socket_setsockopt(struct socket *sock,
2735 int level, int optname)
2736{
2737 return 0;
2738}
2739
2740static inline int security_socket_shutdown(struct socket *sock, int how)
2741{
2742 return 0;
2743}
2744static inline int security_sock_rcv_skb(struct sock *sk,
2745 struct sk_buff *skb)
2746{
2747 return 0;
2748}
2749
2750static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
2751 int __user *optlen, unsigned len)
2752{
2753 return -ENOPROTOOPT;
2754}
2755
2756static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid)
2757{
2758 return -ENOPROTOOPT;
2759}
2760
2761static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)
2762{
2763 return 0;
2764}
2765
2766static inline void security_sk_free(struct sock *sk)
2767{
2768}
2769
2770static inline void security_sk_clone(const struct sock *sk, struct sock *newsk)
2771{
2772}
2773
2774static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl)
2775{
2776}
2777
2778static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl)
2779{
2780}
2781
2782static inline void security_sock_graft(struct sock *sk, struct socket *parent)
2783{
2784}
2785
2786static inline int security_inet_conn_request(struct sock *sk,
2787 struct sk_buff *skb, struct request_sock *req)
2788{
2789 return 0;
2790}
2791
2792static inline void security_inet_csk_clone(struct sock *newsk,
2793 const struct request_sock *req)
2794{
2795}
2796
2797static inline void security_inet_conn_established(struct sock *sk,
2798 struct sk_buff *skb)
2799{
2800}
2801
2802static inline int security_secmark_relabel_packet(u32 secid)
2803{
2804 return 0;
2805}
2806
2807static inline void security_secmark_refcount_inc(void)
2808{
2809}
2810
2811static inline void security_secmark_refcount_dec(void)
2812{
2813}
2814
2815static inline int security_tun_dev_alloc_security(void **security)
2816{
2817 return 0;
2818}
2819
2820static inline void security_tun_dev_free_security(void *security)
2821{
2822}
2823
2824static inline int security_tun_dev_create(void)
2825{
2826 return 0;
2827}
2828
2829static inline int security_tun_dev_attach_queue(void *security)
2830{
2831 return 0;
2832}
2833
2834static inline int security_tun_dev_attach(struct sock *sk, void *security)
2835{
2836 return 0;
2837}
2838
2839static inline int security_tun_dev_open(void *security)
2840{
2841 return 0;
2842}
2843
2844static inline void security_skb_owned_by(struct sk_buff *skb, struct sock *sk)
2845{
2846}
2847
2848#endif
2849
2850#ifdef CONFIG_SECURITY_NETWORK_XFRM
2851
2852int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp, struct xfrm_user_sec_ctx *sec_ctx);
2853int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
2854void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
2855int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
2856int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
2857int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
2858 struct xfrm_sec_ctx *polsec, u32 secid);
2859int security_xfrm_state_delete(struct xfrm_state *x);
2860void security_xfrm_state_free(struct xfrm_state *x);
2861int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
2862int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
2863 struct xfrm_policy *xp,
2864 const struct flowi *fl);
2865int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
2866void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl);
2867
2868#else
2869
2870static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp, struct xfrm_user_sec_ctx *sec_ctx)
2871{
2872 return 0;
2873}
2874
2875static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp)
2876{
2877 return 0;
2878}
2879
2880static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx)
2881{
2882}
2883
2884static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)
2885{
2886 return 0;
2887}
2888
2889static inline int security_xfrm_state_alloc(struct xfrm_state *x,
2890 struct xfrm_user_sec_ctx *sec_ctx)
2891{
2892 return 0;
2893}
2894
2895static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
2896 struct xfrm_sec_ctx *polsec, u32 secid)
2897{
2898 return 0;
2899}
2900
2901static inline void security_xfrm_state_free(struct xfrm_state *x)
2902{
2903}
2904
2905static inline int security_xfrm_state_delete(struct xfrm_state *x)
2906{
2907 return 0;
2908}
2909
2910static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir)
2911{
2912 return 0;
2913}
2914
2915static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
2916 struct xfrm_policy *xp, const struct flowi *fl)
2917{
2918 return 1;
2919}
2920
2921static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)
2922{
2923 return 0;
2924}
2925
2926static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl)
2927{
2928}
2929
2930#endif
2931
2932#ifdef CONFIG_SECURITY_PATH
2933int security_path_unlink(struct path *dir, struct dentry *dentry);
2934int security_path_mkdir(struct path *dir, struct dentry *dentry, umode_t mode);
2935int security_path_rmdir(struct path *dir, struct dentry *dentry);
2936int security_path_mknod(struct path *dir, struct dentry *dentry, umode_t mode,
2937 unsigned int dev);
2938int security_path_truncate(struct path *path);
2939int security_path_symlink(struct path *dir, struct dentry *dentry,
2940 const char *old_name);
2941int security_path_link(struct dentry *old_dentry, struct path *new_dir,
2942 struct dentry *new_dentry);
2943int security_path_rename(struct path *old_dir, struct dentry *old_dentry,
2944 struct path *new_dir, struct dentry *new_dentry);
2945int security_path_chmod(struct path *path, umode_t mode);
2946int security_path_chown(struct path *path, kuid_t uid, kgid_t gid);
2947int security_path_chroot(struct path *path);
2948#else
2949static inline int security_path_unlink(struct path *dir, struct dentry *dentry)
2950{
2951 return 0;
2952}
2953
2954static inline int security_path_mkdir(struct path *dir, struct dentry *dentry,
2955 umode_t mode)
2956{
2957 return 0;
2958}
2959
2960static inline int security_path_rmdir(struct path *dir, struct dentry *dentry)
2961{
2962 return 0;
2963}
2964
2965static inline int security_path_mknod(struct path *dir, struct dentry *dentry,
2966 umode_t mode, unsigned int dev)
2967{
2968 return 0;
2969}
2970
2971static inline int security_path_truncate(struct path *path)
2972{
2973 return 0;
2974}
2975
2976static inline int security_path_symlink(struct path *dir, struct dentry *dentry,
2977 const char *old_name)
2978{
2979 return 0;
2980}
2981
2982static inline int security_path_link(struct dentry *old_dentry,
2983 struct path *new_dir,
2984 struct dentry *new_dentry)
2985{
2986 return 0;
2987}
2988
2989static inline int security_path_rename(struct path *old_dir,
2990 struct dentry *old_dentry,
2991 struct path *new_dir,
2992 struct dentry *new_dentry)
2993{
2994 return 0;
2995}
2996
2997static inline int security_path_chmod(struct path *path, umode_t mode)
2998{
2999 return 0;
3000}
3001
3002static inline int security_path_chown(struct path *path, kuid_t uid, kgid_t gid)
3003{
3004 return 0;
3005}
3006
3007static inline int security_path_chroot(struct path *path)
3008{
3009 return 0;
3010}
3011#endif
3012
3013#ifdef CONFIG_KEYS
3014#ifdef CONFIG_SECURITY
3015
3016int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
3017void security_key_free(struct key *key);
3018int security_key_permission(key_ref_t key_ref,
3019 const struct cred *cred, key_perm_t perm);
3020int security_key_getsecurity(struct key *key, char **_buffer);
3021
3022#else
3023
3024static inline int security_key_alloc(struct key *key,
3025 const struct cred *cred,
3026 unsigned long flags)
3027{
3028 return 0;
3029}
3030
3031static inline void security_key_free(struct key *key)
3032{
3033}
3034
3035static inline int security_key_permission(key_ref_t key_ref,
3036 const struct cred *cred,
3037 key_perm_t perm)
3038{
3039 return 0;
3040}
3041
3042static inline int security_key_getsecurity(struct key *key, char **_buffer)
3043{
3044 *_buffer = NULL;
3045 return 0;
3046}
3047
3048#endif
3049#endif
3050
3051#ifdef CONFIG_AUDIT
3052#ifdef CONFIG_SECURITY
3053int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
3054int security_audit_rule_known(struct audit_krule *krule);
3055int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule,
3056 struct audit_context *actx);
3057void security_audit_rule_free(void *lsmrule);
3058
3059#else
3060
3061static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,
3062 void **lsmrule)
3063{
3064 return 0;
3065}
3066
3067static inline int security_audit_rule_known(struct audit_krule *krule)
3068{
3069 return 0;
3070}
3071
3072static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,
3073 void *lsmrule, struct audit_context *actx)
3074{
3075 return 0;
3076}
3077
3078static inline void security_audit_rule_free(void *lsmrule)
3079{ }
3080
3081#endif
3082#endif
3083
3084#ifdef CONFIG_SECURITYFS
3085
3086extern struct dentry *securityfs_create_file(const char *name, umode_t mode,
3087 struct dentry *parent, void *data,
3088 const struct file_operations *fops);
3089extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent);
3090extern void securityfs_remove(struct dentry *dentry);
3091
3092#else
3093
3094static inline struct dentry *securityfs_create_dir(const char *name,
3095 struct dentry *parent)
3096{
3097 return ERR_PTR(-ENODEV);
3098}
3099
3100static inline struct dentry *securityfs_create_file(const char *name,
3101 umode_t mode,
3102 struct dentry *parent,
3103 void *data,
3104 const struct file_operations *fops)
3105{
3106 return ERR_PTR(-ENODEV);
3107}
3108
3109static inline void securityfs_remove(struct dentry *dentry)
3110{}
3111
3112#endif
3113
3114#ifdef CONFIG_SECURITY
3115
3116static inline char *alloc_secdata(void)
3117{
3118 return (char *)get_zeroed_page(GFP_KERNEL);
3119}
3120
3121static inline void free_secdata(void *secdata)
3122{
3123 free_page((unsigned long)secdata);
3124}
3125
3126#else
3127
3128static inline char *alloc_secdata(void)
3129{
3130 return (char *)1;
3131}
3132
3133static inline void free_secdata(void *secdata)
3134{ }
3135#endif
3136
3137#ifdef CONFIG_SECURITY_YAMA
3138extern int yama_ptrace_access_check(struct task_struct *child,
3139 unsigned int mode);
3140extern int yama_ptrace_traceme(struct task_struct *parent);
3141extern void yama_task_free(struct task_struct *task);
3142extern int yama_task_prctl(int option, unsigned long arg2, unsigned long arg3,
3143 unsigned long arg4, unsigned long arg5);
3144#else
3145static inline int yama_ptrace_access_check(struct task_struct *child,
3146 unsigned int mode)
3147{
3148 return 0;
3149}
3150
3151static inline int yama_ptrace_traceme(struct task_struct *parent)
3152{
3153 return 0;
3154}
3155
3156static inline void yama_task_free(struct task_struct *task)
3157{
3158}
3159
3160static inline int yama_task_prctl(int option, unsigned long arg2,
3161 unsigned long arg3, unsigned long arg4,
3162 unsigned long arg5)
3163{
3164 return -ENOSYS;
3165}
3166#endif
3167
3168#endif
3169
3170